New apps night: Radicale, Karakeep, Dawarich published; Grimmory held (R-775); fit table; R-765..R-775; STATUS, CONTEXT, report, evidence

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

STATUS.md

@@ -2,37 +2,64 @@
 
 **Ready for the first real tester (Tester-2): yes. You confirmed the tunnel route and the connect mails (2026-09-30).**
 
-**Updated 2026-10-01 (evening). Both demo boxes run controller 0.285.0 and host agent 0.138.0. Hub 0.126.0. New installs get golden 0.285.0 with agent 0.138.0.**
+**Updated 2026-10-01 (night). Both demo boxes run controller 0.285.0 and host agent 0.138.0. Hub 0.126.0. New installs get golden 0.285.0 with agent 0.138.0.**
 
 **Tester-2 — read only, from the hub.** The customer record exists. Tester-2's box has not registered yet.
 
-## Your request of today — the new-app checklist — built
+## Tonight: the first new apps through the checklist
 
-- **The checklist is in the app catalog.** 60 checks in 10 groups. Each check says how to test it and why it exists.
-- **A new app cannot reach the live catalog without its filled-in copy.** A check on every push and in CI refuses it.
-  I tested that check with 16 fake cases, and I broke the check on purpose 5 times to prove the fake cases notice.
-- **The 53 old apps are not re-tested.** One page shows what each already has. For example: 24 of 53 show a measured
-  memory check, 26 of 53 show a tested update.
-- **The test on wger:** the first draft found 2 of this week's 4 wger problems. It missed the phone-app login and the
-  missing update step for a brand-new app. I sharpened those checks. Now all 4 are caught.
+- **wger is hidden** from new installs until its two problems are fixed. No box has wger.
+- **Three new apps are in the catalog, each fully tested:** Radicale (calendar and contacts), Karakeep (bookmarks),
+  Dawarich (location history). Each passed all 60 checks, with a tested update and a tested restore.
+- **Their logos and screenshots reach the boxes only with the next hub release.** Until then the cards have no picture.
+- **Grimmory (e-book library) is ready but NOT published.** A stranger who guesses wrong 5 times locks everyone out of
+  its login for 15 minutes. You decide (below).
+- **Not built, on the fit check:** Grimoire (its makers say: never put it on the internet), MeTube (it has no login at
+  all), Pinchflat (its makers stopped working on it).
+- **Fit check only, as you asked:** Invidious and moonlight-web. My advice: build neither (below).
 
-## What broke, and what I did
+## The fit table, one line each
 
-- **The checklist found three more wger problems, on the live catalog.** Nothing fixed today (this task changes no app).
-  - wger loads no styling and shows no uploaded photo. The pages look broken.
-  - A stranger can make a wger account after you set it up. Every anonymous visit adds a "guest" account.
-  - wger cannot send e-mail. A "forgot password" mail never leaves the box.
-- Eight apps show a smaller memory figure than they really use. The apps are not affected; the number on the screen is.
-- Earlier today, built: your two afternoon decisions — calibre-web's secret login name (the HP demo box's new name is in
-  your credentials file), and the registry clean-up rule (it deleted nothing). Found: a box makes up a value when a
-  template gains a new generated field (calibre-web). Written down.
+- **Radicale** — build. Done.
+- **Karakeep** — build with a note (it visits every page you save; AI is off unless you give it a key). Done.
+- **Dawarich** — build with a note (a known login at first, replaced at install; map pictures come from its makers' server). Done.
+- **Grimmory** — build with a note. Built, waiting for your word.
+- **Grimoire** — stop. Its makers say it must not be on the internet, and there is no ready image.
+- **MeTube** — stop for now. No login at all: anyone who finds it downloads through your home connection.
+- **Pinchflat** — stop. No new version since September 2025.
+- **Invidious** — stop (my advice). It breaks when YouTube changes, and YouTube can block the household's home address.
+- **moonlight-web** — stop. It needs a gaming PC and network paths our tunnel does not carry.
 
-**Rows.** This evening: 7 opened, 0 closed. The list went from 392 to 399 rows.
+## Earlier today
+
+- **The new-app checklist is built** (60 checks; a new app cannot reach the catalog without its filled-in copy). The test
+  on wger found its 4 known problems and 3 more (no styling or photos, strangers can sign up, no e-mail).
+- Your afternoon decisions are built: calibre-web's secret login name; the registry clean-up rule (it deleted nothing).
+
+## What broke tonight, and what I did
+
+- **Radicale's first version lost your login after a restore.** Found in testing, fixed before it went out.
+- **After "remove the app, keep backups" and a restore, one of the two sign-up locks is gone** (the app's own lock
+  still holds). Written down for the box.
+- **The box's health check writes "healthy" when it could not check at all.** The app's state still showed the problem.
+  Written down.
+- Karakeep needed more memory than first planned. It now has room for saving many heavy pages at once.
+
+**Rows.** Tonight: 11 opened, one of them already closed (the Radicale restore problem). The list went from 399 to 410 rows.
 
 ## What needs you
 
-1. **Nothing urgent.** Two questions from earlier stay open, and nothing breaks if you wait: should apps see each
-   visitor's real address (a bigger build), and is the design document or the build right about where the tunnel runs?
+1. **Grimmory: publish it now, or wait?**
+   - **A — publish now** with a sentence on its page: "if someone guesses your password wrong 5 times, the login waits
+     15 minutes." E-reader apps keep working during the wait (measured).
+   - **B — wait** until the box can tell visitors apart (the bigger build you have not decided yet). Nobody gets Grimmory
+     until then.
+   - I would choose **A**: the lock is short, it is the web page only, and e-readers are not touched. It is like mealie's lock, which you kept.
+2. **Invidious and moonlight-web: build or not?** I advise **no** for both. If you do nothing, neither is built.
+3. **MeTube and Pinchflat (video downloaders):** stopped for other reasons (no login; makers stopped). The YouTube
+   sentence („Csak saját használatra…") waits until one of them is built.
+4. Older, nothing urgent: should apps see each visitor's real address; is the design document or the build right about
+   where the tunnel runs.
 
 ## Standing steps