STATUS + CONTEXT + DRILL record: conversion, kept data, D3; 09 decision 39; R-655 measured

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

STATUS.md

@@ -1,24 +1,36 @@
 # STATUS — what works, what's broken, what's next
 
-**Updated 2026-09-25 (midday). Peti's box is retired. Both demo boxes run controller 0.272.0 and host agent 0.134.0.**
+**Updated 2026-09-25 (evening). Both demo boxes run controller 0.274.0 and host agent 0.134.0. Hub 0.125.0.**
 
-**Decisions I took on my own.** None this time. I recorded your two rulings: Peti's box is retired, and a controller restart during the night's updates does not continue them (the apps not reached wait a night).
+**Decisions I took on my own** (you may reverse each):
+1. **docmost's database goes to PostgreSQL 18, not 17.** Its own makers already use 18. One move instead of two.
+2. **The box copies the whole old database before it converts, and stops on any error.** It then puts everything back.
+3. **docmost gets 512 MB of memory instead of 384 MB.** Under light load it used 91 % of 384 MB. The move was not allowed without it.
 
 **What I did, and it worked.**
-- **Peti's box is gone from everything we run.** Its hub customer and all its records went through the hub's own delete, and its off-site folder was removed. The hub keeps only its history (events and the deletion note).
-- **His off-site "backup" was never a backup.** His folder held one small key file and no backup at all. None of his 482 reports ever showed an off-site copy. That matches what you said: no user data.
-- **Nothing of his was on ep0**, the off-site server. I checked: its backups and its network peers are the same as before, and so are the demo boxes' off-site folders.
-- **The protected list is now DooPlex and ep0.** I updated the rules, the runbooks and the architecture pages. Old records keep their text.
-- **Controller 0.272.0 is on both demo boxes.** The backup page now says in plain words when a whole-box backup cannot fit. Three small fixes: a restore now also removes the extra copies an update hold kept; a false error line after every undo is gone; the "update available" age is right for a re-tested image. I proved the three fixes on the scratch box.
+- **The box now converts a PostgreSQL database to a new main version.** Only for an app whose step was tested. docmost is the first. On the scratch box: the conversion took 42 seconds in total. The data came back.
+- **When it goes wrong, the box puts the old version back.** I tested three failures: a load error, an app that does not start, and a controller killed in the middle. Each time the old version came back with its data.
+- **docmost moved in the catalog.** Tonight the HP box's automatic update should convert its docmost by itself. I watch it.
+- **Kept data is never a dead end now.** When an app is installed over old files, the page asks: "Use my kept data" or "Start fresh". A new "Kept data" page shows every leftover folder. The household can look at it (read only), load it, or delete it (they must type the app's name). I tested all of it on the scratch box, in both languages.
+- **The hub's customer delete stops promising to clean Cloudflare.** It now lists what you remove by hand.
 
 **What broke, or is not done.**
-- **The "does not fit" sentence has not appeared on a real box yet.** No box is short of space now. The tests prove it in both languages.
-- **The hub's customer delete promises to remove the Cloudflare tunnel and name, but it does not.** Peti's tokens were deleted with his record. Anything left on Cloudflare's side is not checked. I filed it as a row.
-- **Last night's watch did not run.** This session ended in the daytime.
+- **The restore of a removed app was broken for data drives.** It came back without its settings or database. Fixed tonight.
+- **The Kept data list named two old folders "Filebrowser".** Found on the scratch box. Fixed before release.
+- **The other ten PostgreSQL apps still cannot move.** Each needs its own test.
+- **The file browser cannot open nextcloud's kept folder.** The files are there and can be loaded or deleted.
+- **The HP box's restore test tries to test the golden template file and fails every 6 hours.** Not fixed (agent side).
+- **The memory check always calls docmost "tight".** Its memory grows with its limit. Filed.
+- **adventurelog stays on its old version.** I found how to skip its internet download. The move needs a choice.
 
-**Rows.** 1 opened, 6 closed. The list went from 339 to 334.
+**Rows.** 6 opened, 3 closed. The list went from 334 to 337.
+
+**Decision for you — D3: may the box ever delete kept data by itself?**
+- **A — never; only the household deletes it (I recommend this).** Cost: kept data can fill a drive. The drive-full warning names the kept folders and their sizes, so the household sees what to delete.
+- **B — after 90 days, with mails at 30 and 7 days before.** Cost: a small add-on to build; a household that ignores the mails loses the data.
+- **If you do nothing:** nothing is ever deleted by itself (A in effect). Nobody is blocked.
 
 **What needs you.**
-1. **Remove Peti's box from the Claude project instructions** (your own text in the Claude project). I cannot edit those. If you leave it, new sessions still treat his box as protected.
-2. **Check Cloudflare for anything left of Peti's domain** (`sajatfelhom.hu`: a tunnel or DNS records). If you do nothing, it stays there unused.
-3. **The old Storage Box `PBS-storage-1`** (u629193) is still on the list for you to delete. Neither of our tokens can see it now; it may already be gone. If it still exists, it keeps old test leftovers, including a folder named for Peti.
+1. **D3** above.
+2. **adventurelog:** skip its world-data download on every start (new installs then have no country list), or keep it and test the update with the file present. If you do nothing, it stays on the old version.
+3. **From before:** Peti's box in the Claude project text; Cloudflare leftovers of Peti's domain; the old Storage Box `PBS-storage-1`. If you do nothing, they stay as they are.