Password reset: reset the Identity admin, not just the legacy row (ON HOLD - decide whether to keep)

TODO.md

@@ -147,6 +147,21 @@ feature that would otherwise write to the controller.
 - Threshold tuning based on real-world data collection
 - **Consistent wireless bottleneck attribution across test types:** LAN client speed tests show the bottleneck relative to the AP (e.g., "[AP] Back Yard (wireless)") while WAN client speed tests show it relative to the client (e.g., "[Phone] TJ iPhone (wireless)"). This is because WAN client paths reverse hops and swap ingress/egress, which flips the perspective. The wireless link is the same physical connection - both descriptions are technically correct but inconsistent. Investigate unifying to always name the AP side, since that's what users can control. Relevant code: `CalculateWanClientPathAsync` hop reversal/swap and `CalculateBottleneck` wireless link attribution.
 
+## WAN Speed Test
+
+### Run from an individual site agent
+Both the page and its schedule run a WAN speed test from one vantage per site: the server, or the
+on-site agent where one owns path measurement. A site with several agents - one behind each WAN -
+cannot say which of them runs the test, so a secondary WAN's throughput cannot be measured the way
+its latency already is.
+
+Wanted: choose the agent, and therefore the WAN, from both the WAN Speed Test page and a schedule.
+The Network Tools vantage picker already models this - one entry per (agent, vantage) carrying that
+vantage's binding - so the shape is settled and this is wiring it into the speed test paths and the
+schedule config.
+
+Not now. The Gateway SSH launched WAN speed test covers the per-WAN case today.
+
 ## Alerts & Scheduling
 
 ### DST-Aware Schedule Time Display

scripts/build-installer.ps1

@@ -37,6 +37,20 @@ Write-Host ""
 
 # Step 1: Publish self-contained single-file application
 Write-Host "[1/5] Publishing self-contained single-file application for win-x64..." -ForegroundColor Yellow
+
+# Always start from an empty publish folder. Publishing incrementally over a warm
+# tree - no compilable change since the last build, e.g. a docs-only release or a
+# rebuild after a failed upload - recreates package content folders such as
+# LatoFont EMPTY. WiX then harvests the empty folder and packages an MSI that is
+# missing files, with no warning and a successful build. That silently cost the
+# v2.5.3 MSI its 19 Lato font files. Removing the folder forces the publish target
+# to repopulate it; the build output is untouched, so this costs a file copy
+# rather than a recompile.
+if (Test-Path $PublishDir) {
+    Write-Host "  Cleaning previous publish output..." -ForegroundColor DarkGray
+    Remove-Item -Recurse -Force $PublishDir
+}
+
 dotnet publish $WebProject `
     -c $Configuration `
     -r win-x64 `

scripts/install-macos-native.sh

@@ -276,16 +276,20 @@ if command -v go &> /dev/null; then
         GO_ARCH="arm64"
     fi
 
-    CFSPEEDTEST_SRC="$REPO_ROOT/src/cfspeedtest"
-    if [ -d "$CFSPEEDTEST_SRC" ]; then
-        cd "$CFSPEEDTEST_SRC"
-        CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -a -trimpath \
-            -ldflags "-s -w -X main.version=$GO_VERSION" \
-            -o "$INSTALL_DIR/tools/cfspeedtest-linux-arm64" .
-        echo "Built cfspeedtest for linux/arm64"
-    else
-        echo "Warning: cfspeedtest source not found at $CFSPEEDTEST_SRC"
-    fi
+    # cfspeedtest is no longer deployed: nothing in the app invokes the standalone
+    # binary any more, uwnspeedtest below superseded it for gateway WAN tests. The
+    # src/cfspeedtest module itself stays, since uwnspeedtest imports its speedtest
+    # package. Left commented rather than deleted in case the binary is wanted again.
+    # CFSPEEDTEST_SRC="$REPO_ROOT/src/cfspeedtest"
+    # if [ -d "$CFSPEEDTEST_SRC" ]; then
+    #     cd "$CFSPEEDTEST_SRC"
+    #     CGO_ENABLED=0 GOOS=linux GOARCH=arm64 go build -a -trimpath \
+    #         -ldflags "-s -w -X main.version=$GO_VERSION" \
+    #         -o "$INSTALL_DIR/tools/cfspeedtest-linux-arm64" .
+    #     echo "Built cfspeedtest for linux/arm64"
+    # else
+    #     echo "Warning: cfspeedtest source not found at $CFSPEEDTEST_SRC"
+    # fi
 
     UWNSPEEDTEST_SRC="$REPO_ROOT/src/uwnspeedtest"
     if [ -d "$UWNSPEEDTEST_SRC" ]; then