Evidence Topic: Local XML upload runtime re-enabled

Metadata

Date: 2026-07-29
Status: Active
Scope: Current local Web process on port 8765
Confidence: Fact
Source: launchd/process inspection, health response and in-app browser DOM inspection
Last verified: 2026-07-29
Stale trigger: Restart or reconfiguration of com.chillishark.opera-arr-report, route/Keychain changes, or replacement of the 8765 Web process

Question

Why was ARR.XML upload disabled in the currently running page, and is it actually enabled after correction?

Evidence

Before correction, launchd PID 70702 ran arr_web.run with database, Agent writeback, monthly and company-report flags but omitted --enable-processing.
The pre-correction health response was HTTP 200 with database_ready=true and processing_ready=false.
The controlled launcher /Users/chillishark/温德姆AR/start-lan.command already loaded the private route configuration and Keychain-backed runtime credentials; only the final processing flag was missing.
After adding --enable-processing and restarting label com.chillishark.opera-arr-report, PID 50730 runs with that flag and health reports both database_ready=true and processing_ready=true.
The refreshed page exposes one XML input accepting .xml, text/xml and application/xml; it is enabled, the dropzone is not disabled and the service hint is empty. The process button remains disabled until a file is selected, as designed.
No XML file was selected or submitted during this verification.

Finding

The upload was disabled because the long-running local launcher omitted the explicit processing feature flag. The corrected process has passed both the runtime readiness gate and the page-level control check.

Impact

The user can now select ARR.XML on the current local page. A real end-to-end result still requires SuperAgent to call the published MCP tool and an MCP committed/already_committed receipt; merely selecting or dispatching the file is not a database success signal.

Risk

The local launchd service remains bound to 0.0.0.0:8765. Enabling upload therefore exposes a mutation surface to the reachable LAN; use only on a trusted network and move formal testing behind the operator-managed authenticated public boundary.

2.3 KiB Raw Blame History