5 Commits

Include renames

Author	SHA1	Message	Date
adminandClaude Opus 5.5	655f5f66f8	hub v0.147.0 (code): the operator's answers S4, S6, S10, S29, S30, S32, S33 ... - S4 / R-242: GoldenVouchChecker - a published golden unvouched for 2 h raises golden_not_vouched (operator only) - S6 / R-244: the delete cascade de-references app_log_issues; one-time sweep flag -sweep-app-log-residue=count|apply - S10 / R-266: read_failed storage entry shows "read failed", not 0 % - S29 / R-250: host-key scan IPv4 first, ~2 min ladder, "safe to press Save again" error - S30 / R-246: stale_at retired (reader, setter, badge) - S32 / R-521: storage_reconnected ends the storage_disconnected cooldown on both channels - S33 / R-402: host page "Last full check (off-site)" line; two wire-gate allowlist entries removed Each with a test seen failing first. Not built or deployed yet (operator-attended deploy). Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-12 14:54:14 +02:00
adminandClaude Opus 5.5	557629d2bf	hub v0.137.0 source + burn-down round 2 in felhom.eu: R-277 R-581 R-600 R-544 R-855 R-134 R-92 R-292 R-599 R-725 R-728 (hub), R-819 R-857 R-555 R-364 R-587 (gates/tools), R-571 R-129 R-124-runbook (docs); 28 rows closed incl. catalog + agent v0.147.0 rows, R-350 merged into R-132, R-888 opened, R-887 mechanism (249 -> 222) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-10-05 19:43:37 +02:00
adminandClaude Opus 5.5	ccd915ff34	hub v0.125.0: the customer delete lists the Cloudflare items to remove by hand instead of promising it (R-688) ... Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS	2026-09-25 13:27:08 +02:00
adminandClaude Opus 4.8	9b3381be0a	feat(hub): v0.70.0 — a deleted customer actually disappears (residue leg + ghost cleanup) ... Found validating v0.69.0 against the live hub. demo-vm-felhom was deleted on 07-18 and was still on the Customers list AND still raising offsite_stale (10 events, latest 07-21 17:34, operator email at 19:34) — because GetCustomers() is report-derived and no lifecycle tier ever deleted a report. New leg 3 (residue), before the record purge: reports, app_telemetry, app_log_tails, log_tail_requests, customer_notifications, plus the credential-bearing appliance_registrations and selfbind_tokens. Audit (events, notification_log) and F-14 provenance still survive. Ghost customers are now deletable: 404 means "nothing here", not "no config row". With no config row the offsite descriptor is unknowable, so the Hetzner and descriptor legs record skipped_no_config rather than a bare "skipped". Two more red-proofs. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J55BQE1gE2V4ffud5jweGS	2026-07-21 20:28:06 +02:00
adminandClaude Opus 4.8	61dbd870c3	feat(hub): v0.69.0 — customer DELETE is the guided full-teardown cascade (R-25b) ... POST /configs/{id}/delete now runs hosts -> RESET -> purge behind three acknowledgements, a typed customer-id, a stale-preview check and the ONLINE-host refusal (every gate before any write, so a refusal has zero side effects). The shallow handleConfigDelete is gone. Two invariants are asserted, not just commented: ruling 3 is preserved by construction (leg 2 never sees a host row) and retained escrow custody is purged exactly once, in leg 3 (leg 2 runs with purgeEscrow=false). handleCustomerReset's committed half was extracted as commitCustomerReset; the standalone RESET path is byte-identical to v0.68.1 and its suite is untouched. Five red-proofs run. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01J55BQE1gE2V4ffud5jweGS	2026-07-21 19:31:48 +02:00