release 2026-10-10: hub 0.145.0 deployed (security check PASS live), controller 0.305.0 delivered, kernel button offers -22; R-921/R-922 released; R-925 consequences; build skill: sync only the hub when other resources drift

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-10 10:02:33 +02:00
parent b4083a06ed
commit a406efc7d5
9 changed files with 149 additions and 6 deletions
@@ -0,0 +1,25 @@
+== 2026-10-10T07:59:12Z read-back
+--- demo-hp
+agent: felhom-agent 0.154.0
+gitea.dooplex.hu/admin/felhom-controller:0.305.0
+gitea.dooplex.hu/admin/felhom-controller:0.305.0 Up 11 seconds (healthy)
+StartedAt=2026-10-10T07:59:02.745744507Z
+2026-10-10T09:59:00+02:00 demo-hp sudo[894563]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/local/sbin/felhom-priv-apply controller-image 9201
+2026-10-10T09:59:01+02:00 demo-hp felhom-priv-apply[894595]: felhom-priv-apply: WROTE controller-image 9201 gitea.dooplex.hu/admin/felhom-controller:0.305.0
+2026-10-10T09:59:08+02:00 demo-hp felhom-agent[1262]: time=2026-10-10T09:59:08.372+02:00 level=INFO msg="controller-swap: new controller healthy" vmid=9201 target=gitea.dooplex.hu/admin/felhom-control
+--- felhom-pve
+agent: felhom-agent 0.154.0
+gitea.dooplex.hu/admin/felhom-controller:0.305.0
+gitea.dooplex.hu/admin/felhom-controller:0.305.0 Up 14 seconds (healthy)
+StartedAt=2026-10-10T07:58:58.628209837Z
+2026-10-10T09:58:56+02:00 demo-felhom sudo[284694]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/local/sbin/felhom-priv-apply controller-image 9201
+2026-10-10T09:58:57+02:00 demo-felhom felhom-priv-apply[284701]: felhom-priv-apply: WROTE controller-image 9201 gitea.dooplex.hu/admin/felhom-controller:0.305.0
+2026-10-10T09:59:07+02:00 demo-felhom felhom-agent[1205]: time=2026-10-10T09:59:07.187+02:00 level=INFO msg="controller-swap: new controller healthy" vmid=9201 target=gitea.dooplex.hu/admin/felhom-con
+--- root@192.168.0.154
+agent: felhom-agent 0.154.0
+gitea.dooplex.hu/admin/felhom-controller:0.305.0
+gitea.dooplex.hu/admin/felhom-controller:0.305.0 Up 13 seconds (healthy)
+StartedAt=2026-10-10T07:59:02.717345534Z
+2026-10-10T09:59:00+02:00 felhom sudo[418770]: felhom-agent : PWD=/ ; USER=root ; COMMAND=/usr/local/sbin/felhom-priv-apply controller-image 9201
+2026-10-10T09:59:01+02:00 felhom felhom-priv-apply[418798]: felhom-priv-apply: WROTE controller-image 9201 gitea.dooplex.hu/admin/felhom-controller:0.305.0
+2026-10-10T09:59:08+02:00 felhom felhom-agent[1161]: time=2026-10-10T09:59:08.339+02:00 level=INFO msg="controller-swap: new controller healthy" vmid=9201 target=gitea.dooplex.hu/admin/felhom-controll
@@ -0,0 +1,7 @@
+== floors 2026-10-10T07:58:50Z: 0.305.0 with min_agent 0.131.0; global floor not touched; Tester 2 not touched
+demo-hp: 303 Location: /customers/demo-hp?flash=floor_set
+demo-felhom: 303 Location: /customers/demo-felhom?flash=floor_set
+tester-1: 303 Location: /customers/tester-1?flash=floor_set
+2026/10/10 09:58:50 [INFO] Customer demo-hp controller-version floor override set to "0.305.0" (declared MinAgent "0.131.0")
+2026/10/10 09:58:50 [INFO] Customer demo-felhom controller-version floor override set to "0.305.0" (declared MinAgent "0.131.0")
+2026/10/10 09:58:51 [INFO] Customer tester-1 controller-version floor override set to "0.305.0" (declared MinAgent "0.131.0")
@@ -0,0 +1,23 @@
+## 2026-10-10T07:52:30Z after the deploy
+GET /health: 302
+GET /system: 200 26979 bytes; MAIL-HOLD banner on the page: False
+MAIL-HOLD marker in /data: absent
+hub log MAIL-HOLD lines since start: 0
+GET /healthz: 200
+## live check of the hole (each request sends that household's CURRENT settings unchanged; the key is never printed)
+control (own household): POST /api/v1/preferences customer_id=tester-1 with Tester 1's key -> 200 {"status":"ok"}
+TEST (another household): POST /api/v1/preferences customer_id=demo-felhom with Tester 1's key -> 403 Forbidden: customer_id does not match the key
+RESULT: PASS — another household's settings refused, own accepted
+## the stored rows after (hub DB copy with -wal/-shm, read-only, shredded) — compared with the baseline taken before the deploy
+demo-felhom row present sha256: 5ef8fc1ff15b
+tester-1 row present sha256: 38de0bad97e1
+demo-felhom UNCHANGED
+tester-1 CHANGED
+hub log for the two requests:
+2026/10/10 09:52:48 [INFO] Notification preferences updated for tester-1: address set=true, events=[null]
+## 2026-10-10T07:53:23Z CORRECTION: the control request stored tester-1's events as ["null"] (the baseline script misread the stored JSON null as a list holding the word null; no real event became enabled). Restored with the same own-household request carrying enabled_events: null
+restore POST (own household) -> 200
+demo-felhom row present sha256: 5ef8fc1ff15b
+tester-1 row present sha256: 5583ffee1d37
+demo-felhom UNCHANGED vs the pre-deploy baseline
+tester-1 UNCHANGED vs the pre-deploy baseline
@@ -0,0 +1,8 @@
+2026-10-10T07:51:41Z
+operation: Succeeded
+Deployment/hub Synced deployment.apps/hub configured
+Waiting for deployment "hub" rollout to finish: 0 of 1 updated replicas are available...
+deployment "hub" successfully rolled out
+hub-d9b69dc69-cthcb gitea.dooplex.hu/admin/felhom-hub:0.145.0 ready=true
+2026/10/10 09:51:47 [INFO] felhom-hub 0.145.0 starting
+2026/10/10 09:52:15 [INFO] Listening on :8080