# Changelog — v1.0.1 (admin recovery hotfix)

- Fixed interaction between Node.js readline and `stty -echo` during the first-time admin wizard. Typed passwords are no longer echoed or swallowed by the terminal.
- Added `recover-admin.sh` for safe, idempotent recovery when the v1.0.0 install stopped during initial admin setup.
- Updated `install.sh` to enter admin recovery when the service is already running instead of aborting.
- Added PTY-driven integration test including password secrecy, TOTP verification, and protecting existing admin accounts.
- Confirmed recovery through `runuser` as a non-root user.
- No changes to existing service monitoring, status page, incidents, API, database schema, or ArchForge 11.3.6.