admin 977665d8c0 The family gate (decisions 63/64, R-780): family members with their own logins, a permanent forwardAuth door per family app, anchored exceptions, min_controller ...

- internal/family: the family list (bcrypt, generated 4x4 passwords shown once) + 30-day sessions in family.json
  (0600, atomic); a reset (generation), a removal or a logout ends sessions at the next request.
- internal/stacks/family_gate.go: family_gate / family_gate_except / min_controller in .felhom.yml; the door is written
  BEFORE the first start (install and a removed app's restore), a life record in app.yaml, reconciled by the gate loop;
  priority below the install hold, setup gate and sign-up block; every exception anchored ^/prefix(/|$) (finding F1).
- internal/web/family_gate.go: forwardAuth /__felhom_gate/family (app cookie felhom_famgate, host-only, names a store
  session); /__family/start|login|logout on the dashboard host (session cookie felhom_family, Path=/__family);
  sign-in counted per visitor (clientIP) AND per name, short windows; the household's dashboard session vouches.
  RequireAuth never reads a family cookie. The "Család" card on the security page: add / new password / remove.
Red-proofs RP-F1..RP-F7 (felhom.eu audits/family-gate-2026-10-02/A/).

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

2026-10-02 07:42:47 +02:00

..

static

…

templates

The family gate (decisions 63/64, R-780): family members with their own logins, a permanent forwardAuth door per family app, anchored exceptions, min_controller

2026-10-02 07:42:47 +02:00

testdata/i18n_parity

The family gate (decisions 63/64, R-780): family members with their own logins, a permanent forwardAuth door per family app, anchored exceptions, min_controller

2026-10-02 07:42:47 +02:00

a_version_travel_test.go

v0.275.0: a backup's data and its version travel together (R-696, 07 §6.6, D4 option A); R-695, R-691, R-694

2026-09-26 10:35:22 +02:00

abandon_promise_r302_test.go

R-302: the abandon banner promises only what the box can still see is true

2026-08-12 15:27:29 +02:00

agent_client_reuse_test.go

…

agent_disk_handlers.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

agent_host_metrics_handler_test.go

…

agent_host_metrics_handler.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

alerts.go

v0.258.0: the last four Hungarian things an English household met

2026-09-20 18:10:53 +02:00

app_dump_verdict_test.go

v0.210.0 — R-259 and R-258: two pictures that were not true

2026-08-08 16:29:52 +02:00

app_export_domain_test.go

style: gofmt normalization — no logic changes

2026-07-25 07:37:02 +02:00

app_initcreds_exposure_test.go

v0.208.0 — R-254: the last two secrets leave the page source, plus a gate against a fourth

2026-08-07 21:20:26 +02:00

app_row_test.go

Indítópult launcher page + universal app placeholder icon (v0.163.0)

2026-07-24 09:16:28 +02:00

app_update_switch_test.go

controller v0.271.0: automatic app updates — the update leg after the off-site copy, the backup gate waits, the switch (09 6.4 part 7; R-680, R-678, R-643)

2026-09-24 22:07:24 +02:00

async_restore_test.go

v0.252.0 — the sentences the program builds follow the language (R-557 slice 2 release A)

2026-09-18 10:15:56 +02:00

attach_sources_test.go

R-280: attach list from mounted-but-unregistered filesystems; two-clicks promise made conditional

2026-08-10 13:41:32 +02:00

attach_sources.go

R-280: attach list from mounted-but-unregistered filesystems; two-clicks promise made conditional

2026-08-10 13:41:32 +02:00

auth.go

R-753: the box tells visitors apart — cloudflared at a fixed address, traefik trusts only it, the controller reads the hop traefik saw

2026-10-01 21:01:42 +02:00

backup_handlers.go

v0.283.0: apps go off-site by themselves (decision 50) with a size warning; a Stop holds during a backup (R-721); page slips (R-724/R-725)

2026-09-30 10:31:55 +02:00

backup_language_test.go

v0.259.0 — the claim page and the backup warnings answer in the reader's language (R-596, R-598)

2026-09-21 07:45:56 +02:00

backup_page_state_test.go

v0.252.0 — the sentences the program builds follow the language (R-557 slice 2 release A)

2026-09-18 10:15:56 +02:00

backup_page_state.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

backup_target_absent_test.go

v0.259.0 — the claim page and the backup warnings answer in the reader's language (R-596, R-598)

2026-09-21 07:45:56 +02:00

backup_target_keying_test.go

v0.184.1 — E-2b keying fix: the backup-target branch was unreachable

2026-07-29 08:30:36 +02:00

backup_target_offer_test.go

v0.259.0 — the claim page and the backup warnings answer in the reader's language (R-596, R-598)

2026-09-21 07:45:56 +02:00

backup_target_offer.go

v0.259.0 — the claim page and the backup warnings answer in the reader's language (R-596, R-598)

2026-09-21 07:45:56 +02:00

backup_target_render_test.go

v0.259.0 — the claim page and the backup warnings answer in the reader's language (R-596, R-598)

2026-09-21 07:45:56 +02:00

backup_tier_view_test.go

v0.259.0 — the claim page and the backup warnings answer in the reader's language (R-596, R-598)

2026-09-21 07:45:56 +02:00

backup_window_test.go

v0.168.0: customer-configurable backup window (Mentési időablak)

2026-07-24 20:55:44 +02:00

backups_remote_hubenabled_test.go

v0.161.0 — R-70: truthful hub-managed offsite empty state (kiépítve/automatikus banner replaces igényelhető + nincs beállítva in the pre-apply window)

2026-07-23 12:54:59 +02:00

backups_remote_statsknown_test.go

R-225/R-227/R-228 Parts 2-4: unknown is not zero, the gateway speaks Hungarian, the set-aside is visible

2026-08-06 08:17:48 +02:00

backups_split_test.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

capture_layer_test.go

v0.116.0: observability pass — always-on debug ring + leveled sweep + agent tab + self-log pull — MinAgent: 0.81.0

2026-07-11 16:45:57 +02:00

claim_code_naming_test.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

claim_language_test.go

v0.259.0 — the claim page and the backup warnings answer in the reader's language (R-596, R-598)

2026-09-21 07:45:56 +02:00

claim_readthrough_test.go

R-204 item 1: a freshly minted reset code works without a restart (v0.198.0)

2026-08-05 07:17:13 +02:00

claim_reset_response_test.go

controller: F-15 instant reset codes — reset-request response hash applied via the ACK's generation-guarded ClaimSync (emailed code works immediately; old-hub bare response = no-op)

2026-07-13 08:05:07 +02:00

claim_test.go

controller: customer-claim password gate v0.122.0 (closes DRILL-day0-vm F-4/F-5)

2026-07-12 18:42:39 +02:00

claim.go

R-753: the box tells visitors apart — cloudflared at a fixed address, traefik trusts only it, the controller reads the hop traefik saw

2026-10-01 21:01:42 +02:00

clientaddr_test.go

R-753: the box tells visitors apart — cloudflared at a fixed address, traefik trusts only it, the controller reads the hop traefik saw

2026-10-01 21:01:42 +02:00

clientaddr.go

R-753: the box tells visitors apart — cloudflared at a fixed address, traefik trusts only it, the controller reads the hop traefik saw

2026-10-01 21:01:42 +02:00

close_signup_test.go

v0.282.0: after_setup (the app's own sign-up switch), close sign-up now (decision 49), probes read lists + done_status (R-715)

2026-09-29 16:19:12 +02:00

csrf.go

v0.254.0 — the saved notes follow the language, and the switch becomes a globe (R-557 slice 2 release C; SLICE 2 CLOSED)

2026-09-18 14:19:31 +02:00

d28_unhealthy_page_test.go

controller v0.269.0: whole restore from the second drive; crash loops stopped; exact image digests; steps judged by their own .felhom.yml (decisions 26-28, R-661 R-666 R-667 R-668 R-664 R-665 R-662, 09 6.4 part 6)

2026-09-24 12:18:39 +02:00

dashboard_backup_card_test.go

v0.170.0: root → Indítópult (302); Vezérlőpult at /dashboard; CLAUDE.md stale-note fix

2026-07-25 07:44:08 +02:00

dashboard_diskknown_test.go

v0.248.0: i18n slice 1 release A — apps and settings in English, Hungarian byte-identical (R-556)

2026-09-17 17:36:08 +02:00

datapath_card_test.go

v0.258.0: the last four Hungarian things an English household met

2026-09-20 18:10:53 +02:00

datapath_card.go

v0.258.0: the last four Hungarian things an English household met

2026-09-20 18:10:53 +02:00

deadapp_alert_test.go

v0.252.0 — the sentences the program builds follow the language (R-557 slice 2 release A)

2026-09-18 10:15:56 +02:00

decommission_test.go

…

deploy_restore_prefill_test.go

v0.217.0: prefill from the app's own backup, where-the-data-goes on deploy, bounded inventory fan-out

2026-08-21 21:29:01 +02:00

deploy_secret_exposure_test.go

v0.208.0 — R-254: the last two secrets leave the page source, plus a gate against a fourth

2026-08-07 21:20:26 +02:00

disk_health_state.go

fix(disk-health): the alert that never sent — severity, a real Hiba level, and a memory that survives a restart

2026-08-14 08:10:59 +02:00

disk_health_test.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

disk_health.go

fix(disk-health): one physical disk must be evaluated once per run (R-335)

2026-08-14 10:30:22 +02:00

edge_safe_status_test.go

v0.126.4: edge-safe error statuses + native-alert ban — writeDiskJSON maps 502/504→500 (CF swallows those bodies; the M1 refusal reached the operator as a JSON SyntaxError popup), M1 refusal = typed errLastUsableDrive → 409; all 29 native alert() swept to showAlert + native_confirm_gate now bans alert( (F-11 class complete)

2026-07-13 14:13:05 +02:00

embed.go

…

escrow_banner.go

v0.246.0: an interrupted restore is told; the recovery-code reminder waits until the box can take it

2026-09-17 10:45:29 +02:00

escrow_handlers.go

R-753: the box tells visitors apart — cloudflared at a fixed address, traefik trusts only it, the controller reads the hop traefik saw

2026-10-01 21:01:42 +02:00

escrow_readiness.go

v0.246.0: an interrupted restore is told; the recovery-code reminder waits until the box can take it

2026-09-17 10:45:29 +02:00

escrow_wait_state_test.go

feat(escrow): v0.138.0 — "awaiting hub confirmation" waiting state

2026-07-16 18:44:13 +02:00

escrow_wizard_test.go

v0.283.0: apps go off-site by themselves (decision 50) with a size warning; a Stop holds during a backup (R-721); page slips (R-724/R-725)

2026-09-30 10:31:55 +02:00

export_download_test.go

style: gofmt normalization — no logic changes

2026-07-25 07:37:02 +02:00

fab_export_test.go

R-203: the app and its backup look in the same directory — one resolver, every caller

2026-08-04 18:17:05 +02:00

family_gate_test.go

The family gate (decisions 63/64, R-780): family members with their own logins, a permanent forwardAuth door per family app, anchored exceptions, min_controller

2026-10-02 07:42:47 +02:00

family_gate.go

The family gate (decisions 63/64, R-780): family members with their own logins, a permanent forwardAuth door per family app, anchored exceptions, min_controller

2026-10-02 07:42:47 +02:00

filebrowser_gate_test.go

style: gofmt normalization — no logic changes

2026-07-25 07:37:02 +02:00

filebrowser_link_test.go

v0.172.0 — R-75: canonical import root, catalog-derived skeleton, import surfaces

2026-07-26 08:12:57 +02:00

filebrowser_link.go

v0.172.0 — R-75: canonical import root, catalog-derived skeleton, import surfaces

2026-07-26 08:12:57 +02:00

filebrowser_login_test.go

v0.243.0: FileBrowser generated admin password (R-513); per-tier whole-guest backup truth (R-517); skip absent-storage tiers (R-518); OOM-killed worker visible (R-514)

2026-09-15 10:12:08 +02:00

filebrowser_network_test.go

v0.172.0 — R-75: canonical import root, catalog-derived skeleton, import surfaces

2026-07-26 08:12:57 +02:00

fonts_test.go

D0 Part 4: settings visual pass + remaining pages; grep gate zero

2026-07-02 14:38:51 +02:00

funcmap_test.go

…

funcmap.go

controller v0.264.0: the household is told when an update is undone or held, in its language

2026-09-23 13:51:21 +02:00

handler_debug.go

v0.279.0: after_install (decision 45), known default logins on the page, Part D empty-backup alarm, night chain (R-705), R-706

2026-09-28 18:38:30 +02:00

handler_export_download.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

handler_export_upload_test.go

docs: v0.152.0 REPORT/CONTEXT + fix an async race in TestFabUpload_GCAndIdleTimeout

2026-07-20 13:55:03 +02:00

handler_export_upload.go

v0.128.0: chunked browser .fab upload on /import (tunnel-proof)

2026-07-13 21:09:20 +02:00

handler_export.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

handlers.go

v0.284.0 — a box deletes old app images (decision 53, R-736); an after_install app is held until its known login is replaced (R-741)

2026-09-30 22:29:33 +02:00

i18n_cases_a_test.go

v0.275.0: a backup's data and its version travel together (R-696, 07 §6.6, D4 option A); R-695, R-691, R-694

2026-09-26 10:35:22 +02:00

i18n_cases_b_test.go

controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true

2026-09-23 20:25:28 +02:00

i18n_cases_c_test.go

The family gate (decisions 63/64, R-780): family members with their own logins, a permanent forwardAuth door per family app, anchored exceptions, min_controller

2026-10-02 07:42:47 +02:00

i18n_flash_test.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

i18n_parity_test.go

The family gate (decisions 63/64, R-780): family members with their own logins, a permanent forwardAuth door per family app, anchored exceptions, min_controller

2026-10-02 07:42:47 +02:00

i18n_web.go

v0.275.0: a backup's data and its version travel together (R-696, 07 §6.6, D4 option A); R-695, R-691, R-694

2026-09-26 10:35:22 +02:00

i18n_wiring_test.go

The family gate (decisions 63/64, R-780): family members with their own logins, a permanent forwardAuth door per family app, anchored exceptions, min_controller

2026-10-02 07:42:47 +02:00

import_share_test.go

v0.172.0 — R-75: canonical import root, catalog-derived skeleton, import surfaces

2026-07-26 08:12:57 +02:00

inframeta_test.go

Part B: infra stacks carry identity — curated Hungarian metadata for cloudflared/traefik/filebrowser (v0.126.0)

2026-07-13 11:31:38 +02:00

inframeta.go

Indítópult launcher page + universal app placeholder icon (v0.163.0)

2026-07-24 09:16:28 +02:00

integrationmgr_race_test.go

…

intermediary_test.go

v0.190.0 — the boot settle window, both gates on intent, and R-171

2026-08-02 19:56:20 +02:00

intermediary.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

kept_fb_test.go

kept data: the choice at reinstall, the list, the read-only view, the load (09 decision 36); R-690 fixed

2026-09-25 13:32:30 +02:00

kept_handlers.go

v0.277.0: kept data loads from the off-site copy too (R-691 (2))

2026-09-28 09:57:11 +02:00

known_login_test.go

v0.280.0: the setup gate (decision 46); R-710 'I changed it' + absent-record window; R-709 password fields off the page; password:N:special generator

2026-09-29 08:51:46 +02:00

known_login.go

v0.280.0: the setup gate (decision 46); R-710 'I changed it' + absent-record window; R-709 password fields off the page; password:N:special generator

2026-09-29 08:51:46 +02:00

lang_visitor_test.go

v0.255.0 — the globe on the sign-in-flow pages: styled, and inside the card

2026-09-18 15:07:49 +02:00

launcher_polish_test.go

Launcher polish: monogram reveal-on-failure + app placeholder on every icon surface (v0.163.1)

2026-07-24 10:14:25 +02:00

launcher_share_modal_test.go

v0.165.1: native Megosztás… button in the share modal (Web Share API)

2026-07-24 12:43:14 +02:00

launcher_test.go

Indítópult launcher page + universal app placeholder icon (v0.163.0)

2026-07-24 09:16:28 +02:00

levelfilter.go

v0.116.0: observability pass — always-on debug ring + leveled sweep + agent tab + self-log pull — MinAgent: 0.81.0

2026-07-11 16:45:57 +02:00

lifecycle_test.go

style: gofmt normalization — no logic changes

2026-07-25 07:37:02 +02:00

logbuffer_spill_test.go

test: clean message in fix-6 spill tests

2026-07-12 10:09:22 +02:00

logbuffer.go

fix-6: raise ring display cap to 5000 (viewer + Entries clamp); viewer default limit 1000

2026-07-12 10:21:34 +02:00

meta_copy_allowlist_test.go

v0.257.0: the app catalog can speak English (R-560, slice 5 Part A)

2026-09-20 14:31:52 +02:00

metabadge.go

catalog: app lifecycle states - available/hidden/abandoned (v0.158.0)

2026-07-21 16:19:58 +02:00

mobile_nav_test.go

style: gofmt normalization — no logic changes

2026-07-25 07:37:02 +02:00

nav_accordion_test.go

test(nav): pin the v0.146.0 accordion's server-side half

2026-07-18 20:57:39 +02:00

netprobe_linux.go

v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

2026-07-11 21:12:48 +02:00

netprobe_other.go

v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

2026-07-11 21:12:48 +02:00

netprobe_stub_test.go

v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

2026-07-11 21:12:48 +02:00

netprobe.go

v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

2026-07-11 21:12:48 +02:00

netstorage_coherence_test.go

controller: F8 share-row stub fusion + F4 mapped_uid range validation (WIP, pre-build)

2026-07-12 09:37:12 +02:00

netstorage_gate_test.go

style: gofmt normalization — no logic changes

2026-07-25 07:37:02 +02:00

netstorage_handlers_test.go

…

netstorage_handlers.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

netstorage_job_test.go

test: pin netProbeFSClass=network in the C5 child-body suite (real statfs on linux correctly refuses tempdir)

2026-07-11 21:15:48 +02:00

netstorage_job.go

R-67: the NAS share appears in FileBrowser (v0.160.0)

2026-07-22 14:12:43 +02:00

netstorage_remove_guard_test.go

C6B-F2: refuse network-share removal while a deployed app binds it

2026-07-14 15:28:24 +02:00

network_app_namespace_test.go

R-108: network storage may not host an app's data namespace (v0.187.0)

2026-07-30 14:10:20 +02:00

network_card_test.go

R-66: the box's own address becomes visible (v0.159.0)

2026-07-22 13:49:57 +02:00

networkstub_test.go

v0.248.0: i18n slice 1 release A — apps and settings in English, Hungarian byte-identical (R-556)

2026-09-17 17:36:08 +02:00

night_chain.go

v0.279.0: after_install (decision 45), known default logins on the page, Part D empty-backup alarm, night chain (R-705), R-706

2026-09-28 18:38:30 +02:00

no_raw_err_test.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

notifications_guard_test.go

v0.137.0: guard empty-email notification save (prevents alert-delivery wipe)

2026-07-15 19:40:01 +02:00

observability_test.go

v0.116.0: observability pass — always-on debug ring + leveled sweep + agent tab + self-log pull — MinAgent: 0.81.0

2026-07-11 16:45:57 +02:00

offbox_escrow_test.go

v0.252.0 — the sentences the program builds follow the language (R-557 slice 2 release A)

2026-09-18 10:15:56 +02:00

offbox_handlers.go

v0.283.0: apps go off-site by themselves (decision 50) with a size warning; a Stop holds during a backup (R-721); page slips (R-724/R-725)

2026-09-30 10:31:55 +02:00

offbox_lastsuccess_test.go

R-100: record the offsite last-SUCCESS anchor (v0.181.0)

2026-07-28 13:12:37 +02:00

offbox_restore_scope_test.go

R-204 item 3: a restore says what it restored, and what it did not (v0.198.0)

2026-08-05 07:17:20 +02:00

offbox_restore_silence_test.go

v0.204.0 — the restore list is keyed on the store (R-237); the size gate stops refusing in silence (R-238)

2026-08-06 16:44:05 +02:00

offbox_run_inflight_test.go

v0.252.0 — the sentences the program builds follow the language (R-557 slice 2 release A)

2026-09-18 10:15:56 +02:00

offbox_warning_display_test.go

v0.252.0 — the sentences the program builds follow the language (R-557 slice 2 release A)

2026-09-18 10:15:56 +02:00

offsite_restore_list_test.go

v0.207.0 — R-249: the retrieval passphrase leaves the page body; R-252/R-253: two refusals learn to say what to do

2026-08-07 18:04:26 +02:00

offsite_restore_list.go

v0.204.0 — the restore list is keyed on the store (R-237); the size gate stops refusing in silence (R-238)

2026-08-06 16:44:05 +02:00

orphan_card_copy_test.go

R-299: the orphan card's second promise, and a guard that matched one inflection

2026-08-12 13:49:15 +02:00

r103_tier2_action_test.go

v0.254.0 — the saved notes follow the language, and the switch becomes a globe (R-557 slice 2 release C; SLICE 2 CLOSED)

2026-09-18 14:19:31 +02:00

r329_toggle_split_test.go

v0.223.0: the app-down alarm reached nobody (R-329), and the stop nobody heard (R-386)

2026-08-23 11:21:06 +02:00

r353_unit_outcome_test.go

v0.254.0 — the saved notes follow the language, and the switch becomes a globe (R-557 slice 2 release C; SLICE 2 CLOSED)

2026-09-18 14:19:31 +02:00

r355_outcome_msg_test.go

v0.254.0 — the saved notes follow the language, and the switch becomes a globe (R-557 slice 2 release C; SLICE 2 CLOSED)

2026-09-18 14:19:31 +02:00

r358_r360_handlers_test.go

v0.254.0 — the saved notes follow the language, and the switch becomes a globe (R-557 slice 2 release C; SLICE 2 CLOSED)

2026-09-18 14:19:31 +02:00

r397_debug_integrity_test.go

R-359 + R-397: the off-site store gets checked, and the advertised check becomes real

2026-08-30 21:03:29 +02:00

r400_debug_routes_test.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

r403_surface_test.go

v0.254.0 — the saved notes follow the language, and the switch becomes a globe (R-557 slice 2 release C; SLICE 2 CLOSED)

2026-09-18 14:19:31 +02:00

r487_removed_row_test.go

v0.252.0 — the sentences the program builds follow the language (R-557 slice 2 release A)

2026-09-18 10:15:56 +02:00

r499_system_backup_test.go

v0.282.0: after_setup (the app's own sign-up switch), close sign-up now (decision 49), probes read lists + done_status (R-715)

2026-09-29 16:19:12 +02:00

r518_backup_downtime_copy_test.go

controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true

2026-09-23 20:25:28 +02:00

r537_tier_contents_test.go

v0.252.0 — the sentences the program builds follow the language (R-557 slice 2 release A)

2026-09-18 10:15:56 +02:00

r543_escrow_banner_test.go

v0.245.0 — R-543: the household is asked for the recovery code, the page says "szunetel" until then

2026-09-16 21:02:51 +02:00

r543_tier1_sentence_test.go

v0.245.0 — R-543: the household is asked for the recovery code, the page says "szunetel" until then

2026-09-16 21:02:51 +02:00

r546_escrow_readiness_test.go

v0.246.0: an interrupted restore is told; the recovery-code reminder waits until the box can take it

2026-09-17 10:45:29 +02:00

r550_restore_interrupted_test.go

v0.246.0: an interrupted restore is told; the recovery-code reminder waits until the box can take it

2026-09-17 10:45:29 +02:00

r553_alert_placement_test.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

r553_stale_note_test.go

v0.252.0 — the sentences the program builds follow the language (R-557 slice 2 release A)

2026-09-18 10:15:56 +02:00

r563_poll_attribute_test.go

R-563: the remote-backup page polls from a status attribute, and „Fut…" is finally translatable

2026-09-17 21:02:47 +02:00

r606_update_pages_test.go

controller v0.264.0: the household is told when an update is undone or held, in its language

2026-09-23 13:51:21 +02:00

r625_r647_held_test.go

controller v0.265.0: R-634 cause fixed, held apps say so, OOM storm alarm, R-647 leftovers

2026-09-23 17:16:57 +02:00

r650_main_test.go

controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true

2026-09-23 20:25:28 +02:00

r659_held_page_test.go

controller v0.268.0: the undo finds volumes by definition; a held app names only a whole copy; one press = one tested step (R-658, R-659, R-660, R-651; 09 §6.4 part 5)

2026-09-24 08:15:27 +02:00

r677_badge_age_test.go

controller v0.272.0: the backup page says when a whole-box backup does not fit (R-685); R-671, R-670, R-677

2026-09-25 11:19:27 +02:00

r681_install_interrupted_page_test.go

v0.270.0: no update for a current app (R-679); an interrupted install is reported (R-681); a restore brings back the pinned version's health check (R-669); R-674

2026-09-24 16:49:43 +02:00

r685_no_space_test.go

v0.282.0: after_setup (the app's own sign-up switch), close sign-up now (decision 49), probes read lists + done_status (R-715)

2026-09-29 16:19:12 +02:00

r691_kept_view_test.go

v0.275.0: a backup's data and its version travel together (R-696, 07 §6.6, D4 option A); R-695, R-691, R-694

2026-09-26 10:35:22 +02:00

r694_restored_login_test.go

v0.275.0: a backup's data and its version travel together (R-696, 07 §6.6, D4 option A); R-695, R-691, R-694

2026-09-26 10:35:22 +02:00

r695_fb_singleflight_test.go

v0.275.0: a backup's data and its version travel together (R-696, 07 §6.6, D4 option A); R-695, R-691, R-694

2026-09-26 10:35:22 +02:00

r705_night_chain_test.go

v0.279.0: after_install (decision 45), known default logins on the page, Part D empty-backup alarm, night chain (R-705), R-706

2026-09-28 18:38:30 +02:00

r709_password_field_test.go

v0.280.0: the setup gate (decision 46); R-710 'I changed it' + absent-record window; R-709 password fields off the page; password:N:special generator

2026-09-29 08:51:46 +02:00

r772_not_checked_page_test.go

R-772: a health probe that could not run records not_checked + NOT healthy, is looked at again on the 10 s cycle, and the app page says so

2026-10-01 21:01:42 +02:00

r_partd_hollow_page_test.go

v0.279.0: after_install (decision 45), known default logins on the page, Part D empty-backup alarm, night chain (R-705), R-706

2026-09-28 18:38:30 +02:00

ratelimit_ip_test.go

R-753: the box tells visitors apart — cloudflared at a fixed address, traefik trusts only it, the controller reads the hop traefik saw

2026-10-01 21:01:42 +02:00

recovery_class_test.go

v0.214.0 — the recovery screen stops hedging about a code it can now check (R-311)

2026-08-12 18:42:02 +02:00

recovery_gate_test.go

R-224/R-226 Part 1: why the unlock failed decides what we say

2026-08-06 08:06:57 +02:00

recovery_handlers.go

v0.249.0: i18n slice 1 release B — backup pages in English, Hungarian byte-identical (R-556)

2026-09-17 18:01:09 +02:00

recovery_retained_r311_test.go

v0.214.0 — the recovery screen stops hedging about a code it can now check (R-311)

2026-08-12 18:42:02 +02:00

recovery_surface_r241_test.go

R-241 part 4: the three-state surface, and the copy tells the truth about the date

2026-08-07 12:01:30 +02:00

recovery_test.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

recovery_wiring_test.go

R-193: the recovery screen — unlocking, and only unlocking (v0.200.0)

2026-08-05 12:45:48 +02:00

recreate_intent_test.go

v0.190.0 — the boot settle window, both gates on intent, and R-171

2026-08-02 19:56:20 +02:00

report_trigger_seam_test.go

feat(report): v0.139.0 — immediate out-of-cycle hub report on user actions (Direction 1)

2026-07-16 19:31:19 +02:00

restore_inflight_guard_test.go

R-351: the restore compares where the backup says the data lived; second press cannot start a second run

2026-08-21 21:04:16 +02:00

restore_preconditions_test.go

v0.207.0 — R-249: the retrieval passphrase leaves the page body; R-252/R-253: two refusals learn to say what to do

2026-08-07 18:04:26 +02:00

restore_wizard_test.go

v0.204.0 — the restore list is keyed on the store (R-237); the size gate stops refusing in silence (R-238)

2026-08-06 16:44:05 +02:00

restore_wizard.go

v0.246.0: an interrupted restore is told; the recovery-code reminder waits until the box can take it

2026-09-17 10:45:29 +02:00

retrieval_password_exposure_test.go

v0.207.0 — R-249: the retrieval passphrase leaves the page body; R-252/R-253: two refusals learn to say what to do

2026-08-07 18:04:26 +02:00

root_redirect_test.go

v0.170.0: root → Indítópult (302); Vezérlőpult at /dashboard; CLAUDE.md stale-note fix

2026-07-25 07:44:08 +02:00

route_unpublished_test.go

v0.247.0: i18n spike — the dashboard can speak English, Hungarian byte-identical

2026-09-17 14:50:57 +02:00

samba_ensure_job_test.go

v0.147.0 — feedback slice 1: pressing a button says something

2026-07-19 09:30:30 +02:00

samba_ensure_job.go

v0.151.0 — the Megosztás page stops reloading, and says how to connect

2026-07-20 10:46:21 +02:00

server.go

The family gate (decisions 63/64, R-780): family members with their own logins, a permanent forwardAuth door per family app, anchored exceptions, min_controller

2026-10-02 07:42:47 +02:00

settings_split_test.go

v0.248.0: i18n slice 1 release A — apps and settings in English, Hungarian byte-identical (R-556)

2026-09-17 17:36:08 +02:00

setup_gate_page_test.go

v0.281.0: 'Done' asks the probe first; sign-up closed after the first admin (decision 47); R-713 code-bound values refused, ${NAME|base64}

2026-09-29 09:57:58 +02:00

setup_gate_test.go

v0.280.0: the setup gate (decision 46); R-710 'I changed it' + absent-record window; R-709 password fields off the page; password:N:special generator

2026-09-29 08:51:46 +02:00

setup_gate.go

R-753: the box tells visitors apart — cloudflared at a fixed address, traefik trusts only it, the controller reads the hop traefik saw

2026-10-01 21:01:42 +02:00

share_handlers.go

R-753: the box tells visitors apart — cloudflared at a fixed address, traefik trusts only it, the controller reads the hop traefik saw

2026-10-01 21:01:42 +02:00

share_test.go

v0.165.0: Indítópult megosztása — guest launcher via capability URL (+ optional password, QR)

2026-07-24 12:08:43 +02:00

share.go

v0.165.0: Indítópult megosztása — guest launcher via capability URL (+ optional password, QR)

2026-07-24 12:08:43 +02:00

sharing_connect_card_test.go

v0.152.0 + felhom-samba 1.1.0 — mDNS for macOS, and the card stops offering a dead form

2026-07-20 13:38:07 +02:00

sharing_handlers_test.go

fix(samba): separate storage-ROOT validation from share-TARGET validation

2026-07-18 11:54:35 +02:00

sharing_handlers.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

sharing_status_contract_test.go

v0.151.0 — the Megosztás page stops reloading, and says how to connect

2026-07-20 10:46:21 +02:00

signup_block_test.go

v0.281.0: 'Done' asks the probe first; sign-up closed after the first admin (decision 47); R-713 code-bound values refused, ${NAME|base64}

2026-09-29 09:57:58 +02:00

slice4_page_test.go

v0.238.0: the page follows the update, and a held app offers no way to start it (update arc slice 4 Part 4)

2026-09-13 12:07:35 +02:00

slice4_update_test.go

v0.254.0 — the saved notes follow the language, and the switch becomes a globe (R-557 slice 2 release C; SLICE 2 CLOSED)

2026-09-18 14:19:31 +02:00

storage_classtag_test.go

v0.128.1: suppress the class hint on USB drives (ruling F5)

2026-07-13 21:40:37 +02:00

storage_handlers_test.go

v0.255.0 — the globe on the sign-in-flow pages: styled, and inside the card

2026-09-18 15:07:49 +02:00

storage_handlers.go

v0.253.0 — errors carry the key of the sentence they are (R-557 slice 2 release B)

2026-09-18 11:44:30 +02:00

storage_init_job.go

style: gofmt normalization — no logic changes

2026-07-25 07:37:02 +02:00

storage_network_template_test.go

style: gofmt normalization — no logic changes

2026-07-25 07:37:02 +02:00

storage_wizard_csrf_test.go

v0.126.3: storage wizard CSRF on claimed boxes — wizard pages rendered via raw render() shipped an EMPTY csrf-meta token, every /api/storage/init|attach POST died with 'token mismatch'; latent until the claim arc (unclaimed boxes skip CsrfProtect); fix = executeTemplate injection + session-backed regression test (red-proven)

2026-07-13 13:51:19 +02:00

system_memory_handlers.go

v0.143.0 — guest RAM resize UI (R-24) — MinAgent: 0.90.0

2026-07-17 19:10:00 +02:00

system_memory_test.go

v0.143.0 — guest RAM resize UI (R-24) — MinAgent: 0.90.0

2026-07-17 19:10:00 +02:00

templates.go

v0.167.0: outlined logo + favicon (Part 4 follow-up to v0.166.0)

2026-07-24 13:48:08 +02:00

tier2_config_handler.go

controller v0.267.0: tests off DooPlex's Docker, cut-off copies refused, two pages true

2026-09-23 20:25:28 +02:00

tier2_honest_message_test.go

v0.254.0 — the saved notes follow the language, and the switch becomes a globe (R-557 slice 2 release C; SLICE 2 CLOSED)

2026-09-18 14:19:31 +02:00

tier2_honesty_test.go

R-101 + F-DIAG: the restore dialog names the last SUCCESSFUL copy (v0.182.0)

2026-07-28 16:36:47 +02:00

tier2_legacy.go

R-101 + F-DIAG: the restore dialog names the last SUCCESSFUL copy (v0.182.0)

2026-07-28 16:36:47 +02:00

tier2_restore_handler_test.go

v0.252.0 — the sentences the program builds follow the language (R-557 slice 2 release A)

2026-09-18 10:15:56 +02:00

undo_page_test.go

v0.263.0: a failed update puts the app back by itself (09 decision 15, R-637)

2026-09-23 11:12:49 +02:00

updatebadge_test.go

v0.260.0 — a box ahead of the catalog reads „Naprakész", and the pin never moves backwards (R-524)

2026-09-21 12:48:55 +02:00

updatebadge.go

controller v0.272.0: the backup page says when a whole-box backup does not fit (R-685); R-671, R-670, R-677

2026-09-25 11:19:27 +02:00

validate_test.go

…

validate.go

…