docs: state after the v0.1.69 deploy

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 13 insertions, 8 deletions

diff --git a/docs/STATE.md b/docs/STATE.md
index 93ade1e..c33d80e 100644
--- a/docs/STATE.md
+++ b/docs/STATE.md
@@ -14,18 +14,21 @@ unit tests and the docs consistency check.
 
 ## Resume here (2026-09-23)
 
-- **Web frontend (2026-09-23, branch `feat/web-frontend`, not deployed)**:
+- **Web frontend (2026-09-23, live since `v0.1.69`: https://bokf.makandra.eu/web)**:
   image `bokf-web` (Caddy routing + `bokfweb` login gate + ttyd +
   bokftui in web mode) as compose service `web` on `127.0.0.1:8790`; see
   DEPLOY.md "Web frontend" and decision #30. Tested end to end locally
   (login, one-login handoff, foreign handle 403, logout, per-address
-  limit) and the aarch64 static build. **To go live**: deploy, then add
-  the `bokf.makandra.eu` block to the NAS Caddy
-  (`/mnt/data/caddy/Caddyfile`) and reload it. bokfd's login limiter is
+  limit) and the aarch64 static build. The NAS Caddy
+  (`/mnt/data/caddy/Caddyfile`, mounted read-only in its container; edited
+  through a throwaway container of the same image, backup in
+  `/mnt/data/caddy/data/Caddyfile.bak-20260923-094158`) got a
+  `bokf.makandra.eu` block (the first site's INWX tls block +
+  `reverse_proxy 127.0.0.1:8790`); Let's Encrypt certificate issued, the
+  other sites unaffected. bokfd's login limiter is
   now per user name (was global: 5 wrong guesses locked out everyone).
   Next: file upload/download through the browser for the web mode.
-- **Context menu and web-safe keys (2026-09-23, branch
-  `eff/context-menu`)**: `→` (or `^O`, also in table cells) opens
+- **Context menu and web-safe keys (2026-09-23, `v0.1.69`)**: `→` (or `^O`, also in table cells) opens
   "Åtgärder", a box at the right edge with every action of the view and
   its key; every screen declares its actions (`tui_set_actions`). All
   F-keys, `Ctrl+N` (now `n`), `Ctrl+Enter` and `Ctrl+F` are gone, and the
@@ -83,7 +86,7 @@ unit tests and the docs consistency check.
   result. Locked years stay locked — a correction belongs in the open year
   (2026/2027). The owner can now run Bokslutshubben → Inkomstdeklaration.
 
-- **Deployed**: `v0.1.68`, healthy on `nas` (Alpine runtime, static aarch64
+- **Deployed**: `v0.1.69` (bokfd + the new `bokf-web`), healthy on `nas` (Alpine runtime, static aarch64
   binaries cross-compiled on this machine — ~20 s, the host only assembles
   the image; image 33.7 MB, no `libssl3`). `v0.1.55` brought the payroll
   server waves (schema v11: employees, tax tables, lönebesked) and the
@@ -110,7 +113,9 @@ unit tests and the docs consistency check.
   ignores IB rows on P&L accounts; `v0.1.67` rounds every account to whole
   kronor in the SRU export and the årsredovisning; `v0.1.68` adds
   `user.set_password` and the 2026-09-23 TUI work (shared field editor,
-  voucher navigation/sorting, goto search, Byt bolag, Byt lösenord). The live database migrated v9 → v11 on the v0.1.55
+  voucher navigation/sorting, goto search, Byt bolag, Byt lösenord);
+  `v0.1.69` the web frontend, the context menu without F-keys and the
+  per-user login limiter. The live database migrated v9 → v11 on the v0.1.55
   startup and v11 → v12 on the v0.1.62 startup, each with the automatic
   pre-migration snapshot in `var/db/backup/`. `main` and the tags are pushed
   to `nas`.