Logins and folders (controller 0.320.0 released): design, R-1100..R-1102 opened, STATUS, evidence, report

02 "Logins and folders" [DESIGN]: an infra stack is part of the box on the app page; one login answer per
installed app (catalog app_info.login_kind); FileBrowser's new-password press (its CLI, server stopped);
"Fájlok ↗" and the per-drive media folders, a folder with no source is text. Register 176 -> 179.
STATUS: look at FileBrowser, RomM and Plex on demo-hp; say yes for the N100's press; decision D10 (R-1102).

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS

documentation/architecture/02-controller-module-map.md

@@ -516,6 +516,41 @@ only meet by pressing. The page and the endpoint decide „stored" with ONE func
 template gained a `type: password` field — `InjectMissingFields` never fills one
 (`audits/app-page-tuning-2026-10-16/P0`).
 
+#### Logins and folders (v0.320.0, task 2026-10-16 „logins-folders")
+
+**[DESIGN] A protected infra stack is part of the box, and its app page says so.** FileBrowser (and traefik,
+cloudflared, samba) has no `app.yaml`, so `Deployed` is false. Every other surface counts `Deployed || Protected` as
+on the box; v0.315.0's app page counted `Deployed` alone and showed FileBrowser „not installed", with „Telepítés" and
+without its login (measured on both demo boxes, `audits/logins-folders-2026-10-16/P0`). The app page now treats a
+protected stack as installed: settings, guide and log tabs; Restart only (as the app list); the curated name
+(`inframeta.go`); no data tab and no install page (both 302 to the page). The deploy API and `DeployStack` refuse a
+protected stack — until then the Install press would have deployed the infra compose as an app.
+
+**[DESIGN] Every installed app says where its login is — ONE answer.** The settings tab's „Belépés az alkalmazásba"
+panel is on every installed app with exactly one of: the box's login fields (on demand; a field with no stored value
+is the v0.319.0 sentence) · the login the app wrote, or FileBrowser's (`InitialCreds`) · a sentence chosen by the
+catalog's `app_info.login_kind` — `first_visit` (the default: „you create the admin on the first visit; the box does
+not know the password"), `email` (a sign-in link), `none` (no sign-in; behind `family_gate` the sentence says the
+family sign-in is the login). `login_kind` is an enum, not copy: the sentence is the controller's. An infra stack with
+no login of its own (traefik, cloudflared, samba) gets no panel. Code: `web/app_login.go` `loginAnswerFor`.
+
+**[DESIGN] „Új jelszó beállítása" — FileBrowser's password when the box does not know it.** In R-513's `operator`
+state (both demo boxes) the panel says „Ezt a jelszót te állítottad be a Fájlkezelőben; a doboz nem ismeri." and offers
+the press. The box uses FileBrowser's own CLI (`set -u admin,<pw>`) with the server STOPPED (the CLI opens the
+database with no lock timeout), verifies new=200 and admin/admin refused, stores the value encrypted and records
+`generated`; a failed verify leaves `operator`. Not the `FILEBROWSER_ADMIN_PASSWORD` env: it re-applies on every
+start. Spike: `audits/logins-folders-2026-10-16/P1b`. FileBrowser still asks for its own login the first time; one
+sign-in for both is R-1100.
+
+**[DESIGN] „Fájlok ↗" — one of the app's folders, in FileBrowser.** The header button opens the folder with the library
+role, else the first declared folder, else (a media app) the first present drive's `media` folder; built only with
+`fileBrowserLink` (PathEscape). The data tab lists each drive's media folders the app uses (Sonarr `tv`, Radarr
+`movies`, the players both, a download client its `media_library.folder`) with NO backup sentence — the bind's class
+there means „not this app's data", which is not the class-driven „temporary, not backed up". **A folder whose drive
+is not bound into FileBrowser now is text, never a link** (`drivePresent` = the same gates the FileBrowser sync
+applies). The button never promises one click: FileBrowser's router brings a cold visitor back to the folder after its
+login (measured in the headless browser, `audits/logins-folders-2026-10-16/browser/`).
+
 **[DESIGN] „Cím és kulcsok" is rows, not the install form.** The settings tab does not re-render the
 install wizard's fields: the address is the „Cím" row, the storage is a „Tárhely: <név>" row, every
 other install answer and generated key is a row (keys keep their eye). The read-only hint sits under