nexxo ab4b0311d4 Copy every invoice to the archive when it is issued, and notice when that fails ... The application knows nothing about NFS and should not. It writes to a directory; whether that is a local disk, a bind mount or a NAS over NFS 4.1 belongs to the mount. No protocol library, the target changes without code changing with it, and the whole thing is testable against a temp directory. The finding that shaped it: mkdir -p on a path whose mount is NOT there succeeds. It creates the empty directory beneath the mountpoint, writes the invoice onto the container's own disk and reports success — so an unmounted NAS would quietly collect invoices locally while every check said it worked. An archive that silently is not the archive is worse than none. The root is therefore never created, only used: a missing root means a missing mount, and that is a failure. Only the year subdirectory is created, inside a root already proven to exist. Written to a .part and renamed. A rename within one filesystem is atomic, so whatever watches that folder never sees a truncated PDF and takes it for a finished invoice. The size is read back afterwards rather than the write being trusted: over a network mount a short write can report success, and an archive of truncated files looks exactly like one that worked. Queued, not done during the request. A network mount can block for its whole timeout, and an invoice must not fail to be issued because a NAS is rebooting. Dispatched after the commit, or a worker could look for an invoice that has not landed yet. And copy-on-issue is not enough on its own: an invoice issued while the office connection was down never arrives, the queue eventually gives up, and nobody opens an archive to check whether last Tuesday is in it. An hourly sweep re-queues whatever is still missing, the failure is recorded on the invoice rather than only in a log, and the Finance page says how many are outstanding. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>		2026-07-29 02:32:08 +02:00
..
ArchiveUnexportedInvoices.php	Copy every invoice to the archive when it is issued, and notice when that fails	2026-07-29 02:32:08 +02:00
CheckPlanCatalogue.php	feat(billing): the plan catalogue becomes three tables, and config stops selling	2026-07-26 12:05:56 +02:00
ConsoleAccess.php	Make the private hostnames look like nothing is there, and close the way past the proxy	2026-07-27 11:26:48 +02:00
CreateAdmin.php	Check users directly for the reverse operator-identity collision, not just customers	2026-07-28 15:36:29 +02:00
PruneHostDns.php	Move host DNS names off the public zone into vpn-dns's internal hostsdir	2026-07-28 23:44:31 +02:00
SyncStripeCatalogue.php	feat(billing): Stripe owns the billing cycle, we own capability	2026-07-26 13:36:28 +02:00