R-1060 closed: demo-hp's Plex claimed through the dashboard on controller 0.314.0 (200, gate opened by the box, stranger meets Plex's sign-in)

Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-10-15 15:33:20 +02:00
parent 15cb62097c
commit ef9a886e1d
5 changed files with 30 additions and 14 deletions
@@ -6,7 +6,7 @@
 `documentation/backlog/STATUS-HISTORY.md`. Reports: `REPORT-night-2026-10-14.md`, `REPORT-immich-rollout-2026-10-14.md`, `REPORT-seo-felho-tarhely-2026-10-14.md`, `REPORT-immich-repair-2026-10-14.md`, `REPORT-power-cut-fixes-2026-10-14.md`, `REPORT-night-power-2026-10-13.md`, `REPORT-poweroff.md`.

 ## What works
- A restored app comes back exactly as safe as it was at the backup: closed to strangers until its first account is made (0.314.0, proven on the scratch box). A box on a test build now moves with the floor (Tester 1 did, by itself).
+- A restored app comes back exactly as safe as it was at the backup: closed to strangers until its first account is made (0.314.0, proven on the scratch box). A box on a test build now moves with the floor (Tester 1 did, by itself). The box claims Plex again (demo-hp's Plex claimed through the dashboard, 2026-10-15).
 - Scripts use the hub with a scoped token, not your password (hub 0.153.0): CC sets the floor with its own token; no token can see a secret, delete anything, or send, make or show a household's password or link. Your new hub password is yours alone (changed 2026-10-15).
 - Every public name of the three test boxes answers only over https: plain http gets a 301 to the same https address, and browsers are told to remember it for one day (29 names checked, 2026-10-14 night).
 - Media apps work together on one drive: a download reaches Sonarr/Radarr as one file, no copy; the download apps see only their own folder (live catalog, proven on demo-hp).
@@ -24,7 +24,6 @@
 - DooPlex: a failed disk with its alarms silenced (R-934); CI jobs still get lost (R-887); something sets the shared
  checkout to „bare" (R-935); a Longhorn volume at 91 %.
 - Tester 2 has never made an off-site check (R-862). The scratch box cannot read the drill catalog (R-992).
- Plex claim: fixed in 0.314.0 and checked with a fake code; the real claim on demo-hp waits on your code (R-1060).

 ## What we work on
 - The power-cut findings still open (R-1004, R-1005, R-1010, R-1012, R-1013).
@@ -44,7 +43,6 @@
 | D8 | R-206 | Install DooPlex's Docker settings from git (restarts Docker), and prune the build cache weekly: yes or no? | **Yes, in a quiet window** | — | a rebuild of DooPlex still has the settings in git | — |

 ## Waiting on you — do
- **Plex on demo-hp: open plex.tv/claim and save the code to `~/.felhom-demohp/plex-claim` on DooPlex (`chmod 600`).** A watcher claims it through the dashboard at once. If not: that Plex stays locked (safe) and the fix has no real-claim proof (R-1060).
 - **Make a throwaway customer in the hub (browser only), or name one I may reuse,** for the new-box proof (R-1052). If not: nobody has seen a brand-new box reach the floor by itself.
 - **Hub 0.153.0 (your rulings 13:20 + R-1059 „A"): no token can resend a claim code, create or edit a customer, make a passphrase or a link, or re-issue an off-site password.** Live since 13:39 (checked with CC's token: all six refused).
 - **Remove the test server „plex-k6” from your Plex account** (plex.tv → Settings → Authorized Devices). The claim test passed and the server is gone from Tester 1. If not: a dead server stays listed in your Plex apps.