archy/docs/session-handoff-2026-06-18.md

# Session handoff — 2026-06-18

> **UPDATE (later same day): ALL OPEN ITEMS RESOLVED + DEPLOYED** (v1.7.99-alpha → .116 + .198).
> - **#6 Pay-with-QR timeout** — real bug (both LNDs confirmed healthy by user). FIPS-first dial ate the whole budget before the working Tor fallback ran. Added `PeerRequest.fips_timeout` cap (`fips/dial.rs`); invoice/onchain request+status calls fast-fail FIPS (6s) + short Tor window (25s/15s); frontend ceilings 60s→45s. Large downloads keep the full FIPS timeout.
> - **#7 `!ai` gate** — added denied-asker capture (`MeshState.assist_denied`/`DeniedAsker`, `assist.rs::record_denied`) → `mesh.assistant-status.denied_askers` → "Recently denied" list with one-click Allow in `MeshAssistantPanel.vue`.
> - **#8 peer-file 403** — NOT a DID reset. Asymmetric federation: .198 had .116 trusted but .116 never added .198. Re-federated (.198 → .116 `nodes.json`, trusted). **Verified:** .116 `/content/<peersonly>` = 403 w/o DID, **200 (177KB png) with .198's DID**. Plus clearer 403 message + client surfaces the body. Listing left visible ("locked preview", user's choice).
> - **Dual-ecash receive** — active modal is `ReceiveBitcoinModal.vue` (not the commented-out `Web5SendReceiveModals.vue`); already used dual-detect `wallet.ecash-receive`, fixed Cashu-only wording.
> - **fedimint-clientd icon** — `docker_packages.rs` arm → `fedimint.png` + `fedimint-clientd.png` asset.
> - **Cashu → 🥜** — `HomeWalletCard.vue`.
>
> Deploy notes confirmed: binary swap needs atomic `mv` over the running file (`cp` → "Text file busy"); frontend rsync WITHOUT `--delete` to preserve the `aiui/` subdir in `/opt/archipelago/web-ui`.


Resume point for the multi-issue bug-fix + deploy session on **.116** (archi-thinkpad,
local dev/validation node) and **.198** (resilience node). Work was done in
`~/Projects/archy`. A separate agent's **fedimint dual-ecash** work landed as commit
`4288ae78` during the session (don't re-touch `wallet.rs` / `fedimint_client.rs` /
`prod_orchestrator.rs` / `Web5SendReceiveModals.vue` without checking with them).

## DEPLOY STATUS — done

A surgical deploy (binary + frontend + 2 companion images, **not** the .228-centric
`deploy-to-target.sh`, to avoid clobbering .116's custom nginx) shipped to BOTH nodes:

- **.116**: new binary `/usr/local/bin/archipelago` (backup at `archipelago.bak-pre-deploy-*`),
  frontend at `/opt/archipelago/web-ui`, `localhost/{lnd-ui,bitcoin-ui}:latest` rebuilt,
  `:local` tags dropped. Verified: `/bitcoin-status` serves `age_ms`; lnd-ui on `Network=host`
  listening 18083; `/lnd-connect-info` → 200; both companion containers carry new index.html.
- **.198**: same (binary copied — .198 has **no Rust toolchain**, only npm+podman, so
  build-on-.116-then-copy is mandatory). Verified identically. Force-recreated both companions.

Build notes: release build ~9 min (opt-level 3). Frontend vite outDir = `web/dist/neode-ui/`
(NOT `neode-ui/dist`). Companion images: `ensure_image_present` only builds if image ABSENT,
and prefers `localhost/<base>:local` over `:latest` — so to ship docker changes you must drop
`:local` and rebuild `:latest`, then the reconciler (`needs_repair` compares rendered quadlet
unit vs disk) recreates containers. bitcoin-ui needed an explicit `systemctl --user restart`
(its quadlet unit text didn't change, so the reconciler didn't auto-recreate it).

## FIXED & DEPLOYED

1. **Mesh chat/peer double-scroll** — `useControllerNav.ts` (wheel scrolls container under
   pointer, not focused el) + `Mesh.vue` (`@wheel.stop.prevent`). 
2. **Second-level cloud folder zoom** — `CloudFolder.vue` direction-aware
   (`cloud-zoom-forward`/`-back`, matched depth-forward/back magnitudes 0.75↔1.2).
3. **"FIPS Mesh" → "Fuck IPs Mesh"** — `FipsNetworkCard.vue`, `Server.vue`.
4. **.116 connect-wallet QR "failed to fetch"** — lnd-ui migrated to host-network +
   same-origin nginx proxy: `companion.rs` (host_network:true, ports:[]),
   `docker/lnd-ui/{Dockerfile(EXPOSE 18083),nginx.conf(listen 18083 + proxy /lnd-connect-info,
   /proxy/lnd/, /api/container/logs to 127.0.0.1:5678),index.html(getBackendUrl()→'' relative,
   credentials:'include')}`. ROOT CAUSE was a cross-origin CORS failure (page on :18083 fetching
   :80). Verified working in incognito; the user's earlier "still broken" was a **stale cached
   old page**. Unit test `lnd_ui_uses_host_network` passes.
5. **.198 Bitcoin Knots stale "reconnecting" banner** — `bitcoin_status.rs` (new server-computed
   `age_ms` field so the browser never subtracts across clocks; 20s `STALE_GRACE_MS` before
   flipping stale; RPC timeout 8s→12s) + `docker/bitcoin-ui/index.html` (`snapshotAgeMs()` uses
   server `age_ms`, falls back to old calc). Two root causes: browser/node clock skew + no grace
   on single failed polls (swap-thrash node).

## OPEN ISSUES (diagnosed, NOT fixed)

6. **"Pay with QR" → request timeout** — full invoice chain intact (hardened in `790da4bd`);
   60s timeout = seller node never answers (unreachable transport or hung LND). Runtime, needs
   2 live nodes to repro. NOT a code defect found.

7. **`!ai` not working** — DIAGNOSED, config fix (awaiting user policy decision). Assistant is
   `assistant_trusted_only:true` (`/var/lib/archipelago/mesh-config.json`). The trust gate
   `is_sender_allowed` (mesh/listener/assist.rs) only matches askers by archipelago pubkey/DID
   against federation-Trusted `nodes.json`, but RADIO (meshcore) askers present a firmware key,
   not the archipelago identity, so they're silently denied (journal: "AssistQuery denied … from=15
   name=Arch Optiplex"; federation contact_id ≥ 0x80000000, low ids = radio). Claude key + model
   (`claude-opus-4-8`) tested HTTP 200 — NOT the problem. FIX: disable trusted_only, or add the
   asker's presented key to the allowlist. Full notes in memory `project_mesh_ai_trusted_only_gate`.

8. **Peer-file download .116→.198 "Access denied — federation peer required"** — NEW, NOT yet
   fixed. Gate at `content.rs:149` (returns on `content_server::ServeResult::Forbidden`). The
   requesting node isn't recognized as an authorized federation peer by the content server /
   per-file sharing ACL. User's strong hypothesis: a **DID/identity reset** changed a node's DID,
   so the sharing ACL / nodes.json holds the OLD identity and no longer matches. User also notes
   the file is still VISIBLE in the listing (so listing and download use different identity checks
   — inconsistency to investigate). NEXT: read `content_server` Forbidden logic, compare the
   requester DID/pubkey vs what's stored; check both nodes' `server_info`/identity vs each other's
   `federation/nodes.json`. Same THEME as #7 (identity matching) but a different mechanism.

## NEW FRONTEND REQUESTS (not started — batch into one frontend rebuild+redeploy)

- **`fedimint-clientd.svg` 404** — new fedimint core-app (`public/catalog.json:294`) has no icon.
  App-icon convention `/assets/img/app-icons/<id>.png` (default) — add a `fedimint-clientd` icon
  (there's an existing `fedimint.png` to reuse/adapt). The 404 requests `.svg` so check the
  catalog/curated-icon entry.
- **Cashu icon → cashew emoji** (🥜) — change the cashu wallet icon to a cashew nut emoji.
- **Receive › ecash should support BOTH fedimint + cashu paste** — currently the ecash receive
  only mentions Cashu for pasting a token; user expected the paste box to redeem both Cashu AND
  Fedimint ecash. Lives in the fedimint agent's recently-committed dual-ecash UI
  (`Web5SendReceiveModals.vue` / `Web5Wallet.vue` / `WalletSettingsModal.vue`) — investigate what
  they built before changing.
- **Console noise** (lower priority): `cdn.tailwindcss.com` production warning in lnd-ui +
  bitcoin-ui (uses Tailwind CDN); `api/app-catalog` 502 (check if persistent). Latent backend
  nicety: `/lnd-connect-info` emits a DOUBLED `Access-Control-Allow-Origin` (backend empty ACAO
  + main-nginx `add_header $http_origin`) — harmless on the new same-origin page but should drop
  the backend's redundant CORS since lnd-ui now fetches same-origin.

## ENV QUICK-REF

- .116 archi-thinkpad: data `/var/lib/archipelago`, nginx root `/opt/archipelago/web-ui`,
  http :80 + custom nginx-proxy-manager; user reaches UI via Tailscale `100.69.68.39` AND LAN.
  Deploy SSH key `~/.ssh/archipelago-deploy` is passphraseless; SSH-to-self + .198 work non-interactively.
- .198: `ssh archipelago@192.168.1.198` (passwordless sudo), podman+npm, NO cargo.
- Companion build-dir precedence: `/opt/archipelago/docker` > `~/archy/docker` > `~/Projects/archy/docker`.
- Uncommitted working-tree changes (mine, not yet committed): the 11 files for fixes #1–#5.