admin 7465713a2f @ ...

v0.129.0: CAMPAIGN-4 fixes — rate-limiter key (F-B) + volume-blind estimate (F-A) + no-op claim status (F-C)

F-B (MED, security): shared clientIP(r) helper (XFF first-hop, else SplitHostPort
host, else raw) replaces requestIP + the duplicated inline derivation in handleLogin,
so login AND escrow re-auth key on the port-stripped host IP — distinct direct
connections no longer evade the failed-attempt counter. XFF-trust out of scope (commented).

F-A (MED, honesty): volumeSizer seam reads volume size from a container view
(docker run --rm -v vol:/vol:ro alpine du -sb /vol), replacing the host-path du that
returned 0 inside the containerized controller. Failed read -> size_unknown +
fits_on_dest forced false (never "fits"). Export pre-flight hard-aborts only on a
KNOWN doesn.t-fit. HDD branch unchanged.

F-C (LOW-MED): escrowClaimAPIHandler relays agent 404 -> clean 404 and 409 -> 409;
410 and genuine-unreachable 502 unchanged (was: 404 fell through to 502).

Tests + red-proofs: ratelimit_ip_test.go (F-B x6), estimate_volsize_test.go (F-A x3),
TestEscrowClaim_ProxySemantics +3 (F-C). Alpine busybox du -sb verified prod-valid.

Claude-Session: https://claude.ai/code/session_01LbMm4T7Ayzs1unB9pN6Uqd
@

2026-07-14 09:52:11 +02:00

..

static

…

templates

v0.128.1: suppress the class hint on USB drives (ruling F5)

2026-07-13 21:40:37 +02:00

agent_client_reuse_test.go

…

agent_disk_handlers.go

v0.126.4: edge-safe error statuses + native-alert ban — writeDiskJSON maps 502/504→500 (CF swallows those bodies; the M1 refusal reached the operator as a JSON SyntaxError popup), M1 refusal = typed errLastUsableDrive → 409; all 29 native alert() swept to showAlert + native_confirm_gate now bans alert( (F-11 class complete)

2026-07-13 14:13:05 +02:00

agent_host_metrics_handler_test.go

…

agent_host_metrics_handler.go

…

alerts.go

controller: fix-3 dead-app alerting + fix-6 ring cap/spill/spam (WIP, pre-build)

2026-07-12 10:07:47 +02:00

app_row_test.go

Part A: shared app_list_row partial — ONE row grammar on four surfaces (v0.126.0)

2026-07-13 11:26:48 +02:00

async_restore_test.go

…

auth.go

@

2026-07-14 09:52:11 +02:00

backup_handlers.go

…

backup_page_state_test.go

controller: backups IA split — four sub-pages (Áttekintés /backups, Távoli mentés /backups/remote, Alkalmazások /backups/apps, Visszaállítás /backups/restore); sections MOVED verbatim (backups_split_move_check.py enforces vs df7ad37); shared data builder extracted; offbox restore-to-verify relocated to the restore page; flash redirects + tier-3 anchors + tier2 back-link retargeted

2026-07-13 09:35:01 +02:00

backup_page_state.go

controller v0.121.0: backups page truth pass — remove dead Részletek card, real Tier-3 off-box state, SQLite-honest DB messaging

2026-07-12 12:26:30 +02:00

backups_split_test.go

controller: Felhom-offsite status card — three honest states from local data (opt-in pitch / Aktív-nincs-kijelölt / the regular status block); display-only by design (decision 2: never a state change), state-tested incl. the no-form/no-button invariant

2026-07-13 09:37:05 +02:00

capture_layer_test.go

…

claim_reset_response_test.go

controller: F-15 instant reset codes — reset-request response hash applied via the ACK's generation-guarded ClaimSync (emailed code works immediately; old-hub bare response = no-op)

2026-07-13 08:05:07 +02:00

claim_test.go

controller: customer-claim password gate v0.122.0 (closes DRILL-day0-vm F-4/F-5)

2026-07-12 18:42:39 +02:00

claim.go

@

2026-07-14 09:52:11 +02:00

csrf.go

controller: customer-claim password gate v0.122.0 (closes DRILL-day0-vm F-4/F-5)

2026-07-12 18:42:39 +02:00

deadapp_alert_test.go

test: io.Discard logger in fix-3 tests

2026-07-12 10:08:39 +02:00

decommission_test.go

…

edge_safe_status_test.go

v0.126.4: edge-safe error statuses + native-alert ban — writeDiskJSON maps 502/504→500 (CF swallows those bodies; the M1 refusal reached the operator as a JSON SyntaxError popup), M1 refusal = typed errLastUsableDrive → 409; all 29 native alert() swept to showAlert + native_confirm_gate now bans alert( (F-11 class complete)

2026-07-13 14:13:05 +02:00

embed.go

…

escrow_handlers.go

@

2026-07-14 09:52:11 +02:00

escrow_wizard_test.go

@

2026-07-14 09:52:11 +02:00

export_download_test.go

controller: .fab browser download — the existing export pipeline staged under the data dir + a guarded streaming exit (estimate-first, io.Copy, post-stream cleanup, 1h TTL sweep); portability framing (decision 3); traversal guard red-proven, export→import round-trip + corrupt-bundle refusal unit-proven

2026-07-13 09:47:10 +02:00

filebrowser_gate_test.go

…

fonts_test.go

…

funcmap_test.go

…

funcmap.go

Part B: infra stacks carry identity — curated Hungarian metadata for cloudflared/traefik/filebrowser (v0.126.0)

2026-07-13 11:31:38 +02:00

handler_debug.go

fix-6: raise ring display cap to 5000 (viewer + Entries clamp); viewer default limit 1000

2026-07-12 10:21:34 +02:00

handler_export_download.go

controller: .fab browser download — the existing export pipeline staged under the data dir + a guarded streaming exit (estimate-first, io.Copy, post-stream cleanup, 1h TTL sweep); portability framing (decision 3); traversal guard red-proven, export→import round-trip + corrupt-bundle refusal unit-proven

2026-07-13 09:47:10 +02:00

handler_export_upload_test.go

v0.128.0: chunked browser .fab upload on /import (tunnel-proof)

2026-07-13 21:09:20 +02:00

handler_export_upload.go

v0.128.0: chunked browser .fab upload on /import (tunnel-proof)

2026-07-13 21:09:20 +02:00

handler_export.go

v0.128.0: chunked browser .fab upload on /import (tunnel-proof)

2026-07-13 21:09:20 +02:00

handlers.go

v0.127.0: customer-facing escrow ceremony wizard (/backup/escrow) + Scenario-F stale-blob re-check — one-shot R reveal (no-store, typed-back), re-stage-first start order, agent version gate (MinAgent 0.88.0), escrowed-state hash re-check with card warning (never flips, never blocks); manual-confirm button removed (endpoint stays deprecated)

2026-07-13 19:01:31 +02:00

inframeta_test.go

Part B: infra stacks carry identity — curated Hungarian metadata for cloudflared/traefik/filebrowser (v0.126.0)

2026-07-13 11:31:38 +02:00

inframeta.go

Part B: infra stacks carry identity — curated Hungarian metadata for cloudflared/traefik/filebrowser (v0.126.0)

2026-07-13 11:31:38 +02:00

integrationmgr_race_test.go

…

intermediary_test.go

…

intermediary.go

…

levelfilter.go

…

logbuffer_spill_test.go

test: clean message in fix-6 spill tests

2026-07-12 10:09:22 +02:00

logbuffer.go

fix-6: raise ring display cap to 5000 (viewer + Entries clamp); viewer default limit 1000

2026-07-12 10:21:34 +02:00

netprobe_linux.go

v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

2026-07-11 21:12:48 +02:00

netprobe_other.go

v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

2026-07-11 21:12:48 +02:00

netprobe_stub_test.go

v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

2026-07-11 21:12:48 +02:00

netprobe.go

v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

2026-07-11 21:12:48 +02:00

netstorage_coherence_test.go

controller: F8 share-row stub fusion + F4 mapped_uid range validation (WIP, pre-build)

2026-07-12 09:37:12 +02:00

netstorage_gate_test.go

…

netstorage_handlers_test.go

…

netstorage_handlers.go

controller: F8 share-row stub fusion + F4 mapped_uid range validation (WIP, pre-build)

2026-07-12 09:37:12 +02:00

netstorage_job_test.go

test: pin netProbeFSClass=network in the C5 child-body suite (real statfs on linux correctly refuses tempdir)

2026-07-11 21:15:48 +02:00

netstorage_job.go

v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

2026-07-11 21:12:48 +02:00

networkstub_test.go

v0.117.0: consuming-namespace NAS verification + deploy-view truth (RCA fixes 2+4)

2026-07-11 21:12:48 +02:00

observability_test.go

…

offbox_escrow_test.go

…

offbox_handlers.go

controller: backups IA split — four sub-pages (Áttekintés /backups, Távoli mentés /backups/remote, Alkalmazások /backups/apps, Visszaállítás /backups/restore); sections MOVED verbatim (backups_split_move_check.py enforces vs df7ad37); shared data builder extracted; offbox restore-to-verify relocated to the restore page; flash redirects + tier-3 anchors + tier2 back-link retargeted

2026-07-13 09:35:01 +02:00

offbox_warning_display_test.go

Part E: the stale zero-toggle line tells the truth (v0.126.0)

2026-07-13 11:37:47 +02:00

ratelimit_ip_test.go

@

2026-07-14 09:52:11 +02:00

route_unpublished_test.go

…

server.go

v0.128.0: chunked browser .fab upload on /import (tunnel-proof)

2026-07-13 21:09:20 +02:00

settings_split_test.go

…

storage_classtag_test.go

v0.128.1: suppress the class hint on USB drives (ruling F5)

2026-07-13 21:40:37 +02:00

storage_handlers_test.go

…

storage_handlers.go

v0.126.4: edge-safe error statuses + native-alert ban — writeDiskJSON maps 502/504→500 (CF swallows those bodies; the M1 refusal reached the operator as a JSON SyntaxError popup), M1 refusal = typed errLastUsableDrive → 409; all 29 native alert() swept to showAlert + native_confirm_gate now bans alert( (F-11 class complete)

2026-07-13 14:13:05 +02:00

storage_network_template_test.go

…

storage_wizard_csrf_test.go

v0.126.3: storage wizard CSRF on claimed boxes — wizard pages rendered via raw render() shipped an EMPTY csrf-meta token, every /api/storage/init|attach POST died with 'token mismatch'; latent until the claim arc (unclaimed boxes skip CsrfProtect); fix = executeTemplate injection + session-backed regression test (red-proven)

2026-07-13 13:51:19 +02:00

templates.go

…

tier2_config_handler.go

…

tier2_restore_handler_test.go

…

validate_test.go

…

validate.go

…