5 Commits

Include renames

Author	SHA1	Message	Date
admin	e3b785f33a	Immich repair on every box: rollout read-back, R-1021 closed, R-1007 dated line, F12 fleet delivery, STATUS, report	2026-10-14 19:28:13 +02:00
admin	621783b3b0	build-hub.sh v1.24.0: refuse a stale or dirty tree (R-1021) ... Fetch, pull --ff-only, then refuse unless clean and HEAD == origin/main; the commit label is read after the pull. Test with a stub docker: 6 cases; the old script gets 5 wrong. Evidence for the catalog gate unclean-boot-images.	2026-10-14 19:13:34 +02:00
admin	170d090e7b	R-1007 closed: proven live on demo-hp — a real power cut mid-upload, 41 of 41 broken photos repaired by Immich itself, 120 controls untouched ... Docs 02/05/07/13 and capability F12 (PROVEN-LIVE); the audit's C and D sections; R-1020 (the duration reads 0) and R-1021 (the hub build builds a stale checkout) filed; STATUS one screen. Register 133 -> 140 (this session: opened 2, closed 1; another session added 6). Both plugs ON. Report: REPORT-immich-repair-2026-10-14.md. Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-14 17:50:17 +02:00
admin	822d039344	hub v0.150.0: app_repaired_after_crash — allow-listed + operator-only, counts line in the operator mail (R-1007); decision 236 recorded ... The operator's half of the repair after an unclean boot (controller 0.311.0): counts only, never a file name; warning mails, info is recorded. Registered in allowedEventTypes and operatorOnlyEvents in the same commit, plus the per-app cooldown list; tests pin the pair, a household that enabled the type gets nothing, and the counts line (red-proofed). Decision 236 (operator, 2026-10-14): the box asks Immich through Immich's own job queue. R-1007 updated; the scripts' run on 9202 added as evidence. Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-14 16:58:35 +02:00
admin	5d39171e90	R-1007 spike A: how the box can ask Immich without the household's password — Immich's own queue works for every user, a key only for the admin ... On 9202, Immich v3.2.4, admin made through the setup gate as a household. A1 (immich-admin) has no job command. A2 (scoped key: asset.update + job.create) repairs the admin's photos only — a family member's photo is refused. A3 (nightly missing thumbnails) reads only the database. A4 (the same job on Immich's own queue, added with its own bullmq) repaired 5 assets of both users in 1.08 s with 0 of 50 controls touched, and found a lost original in 0.44 s. Scan of 20,000 files: 0.29 s. Decision page for the operator (Part B). Immich removed through the product. Claude-Session: https://claude.ai/code/session_012qRErfCoiTkvDK9N5XHbzb	2026-10-14 15:59:23 +02:00