N100: the file manager's new password set at the operator's yes (controller 0.320.0); STATUS, diary, report

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

REPORT-logins-folders-2026-10-16.md

@@ -61,7 +61,9 @@ Evidence: `documentation/audits/logins-folders-2026-10-16/` (P0, P1b, live, brow
   password; a second press is refused (409, the box already knows it). Checked from a second channel, FileBrowser's
   own login inside the box: new 200, the old 401, admin/admin 401; users, shares and settings unchanged; state
   `generated`. The controller log names the act and never the value.
-- **The N100: NOT pressed.** It took 0.320.0 through the normal update path. It waits for the operator's yes in chat.
+- **The N100: pressed at the operator's yes in chat** (14:19 UTC), after it took 0.320.0 by the normal update path: 200 in
+  3.5 s; inside the box the new password 200, admin/admin 401, state `generated` (`live/n100-fb-reset-*.txt`). The
+  operator looked at the pages on demo-hp and confirmed the FileBrowser login works.
 
 ## 4. Browser check (headless Chrome through `https://felhom.enkisfelhom.hu`, `browser/`)
 

STATUS.md

@@ -6,7 +6,7 @@
 `documentation/backlog/STATUS-HISTORY.md`. Reports: `REPORT-night-2026-10-14.md`, `REPORT-immich-rollout-2026-10-14.md`, `REPORT-seo-felho-tarhely-2026-10-14.md`, `REPORT-immich-repair-2026-10-14.md`, `REPORT-power-cut-fixes-2026-10-14.md`, `REPORT-night-power-2026-10-13.md`, `REPORT-poweroff.md`.
 
 ## What works
-- **Every installed app says where its login is, and has a „Fájlok ↗" button to its folder** (controller 0.320.0, 2026-10-16). The file manager is shown as part of the box again, with its password; on a box that does not know that password, one press sets a new one (proven on demo-hp).
+- **Every installed app says where its login is, and has a „Fájlok ↗" button to its folder** (controller 0.320.0, 2026-10-16). The file manager is shown as part of the box again, with its password; on a box that does not know that password, one press sets a new one (done on demo-hp and, at your yes, on the N100).
 - **Every app but three has a user guide and an FAQ, in Hungarian and English** (catalog, 2026-10-15 night): the „Útmutató” tab shows it on boxes with controller 0.315.0 or newer. Every button name in a guide was checked in the app's own files at the version we ship; a guide that could not be checked stays hidden (plant-it, home-assistant), and Emby has none (R-1092).
 - **The N100 is the lived-in box** (since 2026-10-15): used like a household's box, changed only through the product. qBittorrent, Prowlarr, Sonarr and Radarr are installed and linked by the box; films never go off-site (checked before any download). Its diary: `documentation/lived-in/n100.md`.
 - A restored app comes back exactly as safe as it was at the backup: closed to strangers until its first account is made (0.314.0, proven on the scratch box). A box on a test build now moves with the floor (Tester 1 did, by itself). The box claims Plex again (demo-hp's Plex claimed through the dashboard, 2026-10-15). A brand-new box from the public installer updated itself to the floor 3 minutes after it was linked (test box, since removed).
@@ -52,8 +52,6 @@
 | D10 | R-1102 | Eight apps tell the household „starts with a known, shared password" about a login the box generated or the household typed. Drop that line on the eight (the login panel now says where the login is)? | **Drop it** — one catalog commit | Keep it with a new „hint" form: a controller change | the eight apps keep the misleading sentence at install and on the app page | — |
 
 ## Waiting on you — do
-- **Nézd meg a Fájlkezelő, a RomM és a Plex oldalát a demo-hp-n** (`felhom.enkisfelhom.hu`, controller 0.320.0). A Fájlkezelő a doboz része: nincs Telepítés gomb, a jelszava a „Megjelenítés" gombbal látszik. Minden alkalmazás megmondja, hol a belépése. A „Fájlok ↗" gomb a Fájlkezelőben nyitja az app mappáját.
-- **Say yes in chat to press „Új jelszó beállítása" for the file manager on the N100.** The N100 does not know its file-manager password (set by hand in September), so the household cannot open it. The press was proven on demo-hp (3 s; the old password stops working, nothing else changes). If you do nothing: the N100's file manager stays locked, and every „Fájlok" link there ends at a login nobody can pass.
 - **Look at `roms/roms/` on the N100's drive in the file manager (R-1099).** RomM now scans `roms/<platform>/`. A game uploaded through RomM before today sits one folder deeper: if there are platform folders in `roms/roms/`, move them up into `roms/` and press „Scan” in RomM. If not: those games show under a platform called „roms”.
 - **Nézd meg a Calibre-Web oldalát a demo-hp-n** (`felhom.enkisfelhom.hu`, controller 0.319.0, minden dobozon kiadva). A fejléc, a fülsor és minden rész most külön panel (az „A” stílus). A belépési adatok egy panelben vannak, egymás mellett. A Calibre-Web jelszaváról a doboz nem tud, mert az alkalmazás előbb települt, mint hogy a sablonban jelszó lett volna — ezt most egy mondat mondja ki. Ha nem tetszik, írd meg, mit változtassak. Ha nem nézed meg: semmi nem romlik el.
 - **Discard two unclaimed boxes and delete Tester4** (hub, browser only): the build B scratch VMs registered as unclaimed boxes — registration ids 40 (`b43afa10…`) and 41 (`9c78ea30…`); both VMs are destroyed. Tester4 (the throwaway customer) is switched off the household way. If not: two dead entries stay in the Hosts list and Tester4 stays in Customers.

documentation/audits/logins-folders-2026-10-16/live/n100-fb-reset-press.txt

@@ -0,0 +1,10 @@
+## 2026-10-16T14:19:13Z N100 (operator said yes in chat) — before:
+data-fb-operator data-fb-reset 
+## press
+{"data":null,"error":"","ok":true}
+ HTTP 200 in 3.462537s
+## after:
+data-login-answer="initial" id="initcred-reveal" 
+## reveal (length only)
+HTTP 200
+ok True len 16

documentation/audits/logins-folders-2026-10-16/live/n100-fb-reset-verify.txt

@@ -0,0 +1,8 @@
+login new: 200
+login admin: 401
+"filebrowser_admin_state": "generated"
+filebrowser Up 13 seconds (healthy)
+2026/10/16 14:19:05 [INFO] [infra] filebrowser: the household asked for a new admin password — stopping the file browser for its CLI
+2026/10/16 14:19:08 [INFO] [infra] filebrowser: admin password replaced at the household's press (value never logged); verified new=200 admin=refused in 3s
+2026/10/16 14:19:09 [INFO] [web] filebrowser admin password revealed from 37.191.56.193 (value never logged)
+0

documentation/lived-in/n100.md

@@ -34,3 +34,8 @@ what happened, who noticed, and the register row it became. Prose here is not a
 - **2026-10-15 — read before the operator's Plex install:** a freshly claimed Plex gets no libraries until the next
   wiring run (the claim does not start one) → R-1065; the sheet asks for „Bekötés most" only if no library appears.
   (CC, from the code)
+- **2026-10-16 — the file manager's password, set by the box at the operator's yes.** Controller 0.320.0 arrived by the
+  normal update path. The N100 did not know FileBrowser's password (set by hand in September, R-513 `operator`), so the
+  household could not open the file manager. The dashboard's „Új jelszó beállítása" (pressed through its endpoint, after
+  the operator's yes in chat): 200 in 3.5 s; the page now shows the password behind „Megjelenítés"; inside the box the new
+  password logs in (200), admin/admin is refused (401), the state is `generated`. Evidence: `audits/logins-folders-2026-10-16/live/n100-fb-reset-*.txt`. (CC)