37 lines
2.3 KiB
Markdown
37 lines
2.3 KiB
Markdown
# Evidence Topic: Local XML upload runtime re-enabled
|
|
|
|
## Metadata
|
|
|
|
- Date: 2026-07-29
|
|
- Status: Active
|
|
- Scope: Current local Web process on port 8765
|
|
- Confidence: Fact
|
|
- Source: launchd/process inspection, health response and in-app browser DOM inspection
|
|
- Last verified: 2026-07-29
|
|
- Stale trigger: Restart or reconfiguration of `com.chillishark.opera-arr-report`, route/Keychain changes, or replacement of the 8765 Web process
|
|
|
|
## Question
|
|
|
|
Why was ARR.XML upload disabled in the currently running page, and is it actually enabled after correction?
|
|
|
|
## Evidence
|
|
|
|
- Before correction, launchd PID 70702 ran `arr_web.run` with database, Agent writeback, monthly and company-report flags but omitted `--enable-processing`.
|
|
- The pre-correction health response was HTTP 200 with `database_ready=true` and `processing_ready=false`.
|
|
- The controlled launcher `/Users/chillishark/温德姆AR/start-lan.command` already loaded the private route configuration and Keychain-backed runtime credentials; only the final processing flag was missing.
|
|
- After adding `--enable-processing` and restarting label `com.chillishark.opera-arr-report`, PID 50730 runs with that flag and health reports both `database_ready=true` and `processing_ready=true`.
|
|
- The refreshed page exposes one XML input accepting `.xml`, `text/xml` and `application/xml`; it is enabled, the dropzone is not disabled and the service hint is empty. The process button remains disabled until a file is selected, as designed.
|
|
- No XML file was selected or submitted during this verification.
|
|
|
|
## Finding
|
|
|
|
The upload was disabled because the long-running local launcher omitted the explicit processing feature flag. The corrected process has passed both the runtime readiness gate and the page-level control check.
|
|
|
|
## Impact
|
|
|
|
The user can now select ARR.XML on the current local page. A real end-to-end result still requires SuperAgent to call the published MCP tool and an MCP `committed`/`already_committed` receipt; merely selecting or dispatching the file is not a database success signal.
|
|
|
|
## Risk
|
|
|
|
The local launchd service remains bound to `0.0.0.0:8765`. Enabling upload therefore exposes a mutation surface to the reachable LAN; use only on a trusted network and move formal testing behind the operator-managed authenticated public boundary.
|