Release QA Checklists

1 · Install & first run

• Fresh install boots to the default Shopping list with the empty state (basket icon + three hint rows: tap to complete, long-press to edit, swipe to delete).
• Header status shows "Starting…" with a pulsing dot, then settles on "Ready" once the backend worklet is up.
• No storage-mode warning snackbar on a normal device (a "legacy" / "session storage" warning at startup means secure storage is broken — fail this item).
• No paywall on first launch — the 30-day trial starts silently.
• Delete + reinstall produces a fresh identity: previous list gone, new empty base, trial behavior per IAP/restore rules.

2 · Items — list view

• Add an item → appears instantly (optimistic), no flicker when the backend echo arrives.
• Add with leading/trailing spaces → saved trimmed.
• Add an exact duplicate → rejected with the duplicate snackbar; list unchanged.
• Empty / whitespace-only input → nothing added.
• Tap an item → done with strikethrough + haptic; item moves to the end of the list.
• Tap a done item → un-done; moves back into the active section.
• Long-press → inline edit; saving changes the text everywhere (including on peers).
• Edit an item to the text of another existing item → rejected with the duplicate-edit snackbar.
• Swipe right past ~⅓ screen width → haptic at the threshold; releasing deletes (with confirmation).
• Swipe released before the threshold → row snaps back, nothing deleted.
• "Clear completed" appears in the summary bar only when done items exist; tapping removes exactly the done items.
• Menu → Delete All → confirmation alert; Confirm wipes the list, Cancel leaves it intact.
• A very long item name wraps/truncates without breaking the row layout.
• With ~50 items the list scrolls smoothly and toggles stay responsive.

3 · Items — grid view

• Menu → Grid View → items render as icon cards; toggle back to list view works.
• Tap a card → toggles done with the bubble scale/fade animation + haptic.
• Long-press a card → delete confirmation → removes the item.
• Grid icon size Small / Medium / Normal / Large changes card density immediately.
• Item icons match content (e.g. "apples" → fruit icon); Illustrated ↔ Minimal icon variant switches the style of all cards.

4 · Categories

• "Show Categories" on → items group into the grocery categories; common items land correctly (milk → Dairy, apples → Fruits, shampoo → Personal Care).
• "Show Category Headers" toggles header rows in both list and grid views.
• Category names follow the app language setting.
• Nonsense items fall into "Others" rather than disappearing.

5 · Appearance & accessibility

• List text size Small / Medium / Normal / Large applies immediately and persists.
• System dark mode → app follows; both themes legible (check menu, dialogs, snackbars, paywall).
• System Reduce Motion on → pulse/slide/layout animations are disabled; everything still works.
• All display preferences survive an app restart.

6 · Sharing (host side)

• Share button opens the native share sheet containing the invite key and the https://listam.ch/join?invite=… link.
• Share before the backend is ready → "not ready" snackbar instead of the sheet.
• On a guest (joined) device → owner-only message; sharing blocked.
• Sharing repeatedly keeps working (invite reuse/rotation is transparent).
• When a peer connects: share icon shows the red badge with the peer count, status row reads "Synced with N peers".

7 · Joining (guest side)

• Join dialog: paste a raw invite key → confirmation dialog appears before anything happens.
• Pasting the full listam.ch URL into the dialog parses correctly.
• Garbage text → "Invalid invite" snackbar, no state change.
• Joining overlay advances through the phase dots: pairing → permission → syncing, with rotating status messages.
• Cancel during joining aborts; the previous list is intact and usable.
• Successful join replaces the local list with the host's list; the old personal list is no longer reachable on this device.
• Starting a second join while one is running → "Already joining" snackbar.
• Deep link, cold start: open a join URL with the app killed → app launches straight into the confirmation dialog.
• Deep link, warm: tapping a join link while the app is open shows the confirmation dialog (it must never auto-join).
• An invite from an untrusted source (not listam.ch / listam:) shows the trust warning in the confirmation dialog.
• Host offline during join → join times out (~2 min) with an error; the app remains usable afterwards.

8 · Members & recovery

• Members dialog shows the roster: shortened writer keys, Owner / You / Member roles, epoch number.
• On the owner device: Remove is offered for other members (never for self/owner); confirming removes them.
• The removed device actually loses write access (verify on that device — its edits no longer propagate).
• "Reveal Backup Code" (owner) shows the one-time recovery code; confirming "I've saved the code" hides it.
• "Recover Ownership" on a non-owner member with the code → device gains the owner role; roster updates everywhere.
• A wrong recovery code → error, no role change.

9 · Owned devices (headless control)

• Pair: mint a code on the headless node (control-pair), enter code + name → device appears with its capabilities.
• "Check status" → the node's status JSON is displayed.
• An expired (>15 min) or already-used pairing code → clear error.

10 · Loyalty cards

• First scanner open → camera permission prompt. Deny → permission screen with a working link to system Settings. Grant → live camera preview.
• Scan an EAN-13 card → recognized; enter a store name; Save → "Card saved" snackbar.
• Scan a QR-based card → saved and re-rendered as a QR code.
• Header card icon: tap opens the primary card full screen; the barcode is crisp and scans at a real checkout scanner if available.
• Long-press the header card icon → opens the scanner directly.
• Delete a card from the viewer → confirmation → removed from the list.
• Cards survive an app restart (secure storage round-trip).

11 · Trial & paywall

• Trial active: no paywall; with ≤7 days remaining the "X days left" label shows in the header.
• Trial expired and not subscribed → paywall blocks the app: title, monthly price (CHF 1.00 / $0.99), feature list, Subscribe + Restore buttons.
• Subscribe with a sandbox/test account → purchase completes, paywall dismissed.
• Restore Purchase after a reinstall → subscription recognized without paying again.
• Store unreachable → paywall shows the error copy; no crash, trial logic still applies.

12 · Language

• Locale System / English / Spanish / German / French / Italian / Portuguese → UI strings switch immediately and persist across restart.
• Spot-check one non-English locale across menu, dialogs, snackbars, and paywall — no missing-key strings, no overflowing labels.

13 · Overview, lists & new surfaces

• Overview screen renders Focus + the day plan; swipe-right on a row flags it into Focus (app/components/OverviewScreen.tsx).
• The plan sheet opens for a day, lets you plan/flag items, and changes sync to peers (app/components/PlanSheet.tsx).
• "Move to…" sheet relocates an item to another list / promotes it to a board (app/components/MoveItemSheet.tsx; RPC_MOVE=28).
• The reorder overlay (long-press) offers "Move to top" / "Move to bottom"; the new order persists and replicates.
• Board surface (when boardEnabled): status chips + cards, full-screen ticket detail with the 8-block editor and rigor form; tickets dual-read board/kanban.
• Todo surface: text-only list, no grocery categories / grid / icons.
• Rich markdown editor: a markdown block edits as live WYSIWYG and the stored value stays markdown (app/components/board/RichMarkdownEditor.tsx).

14 · Backup, device name & leaf pairing

• Backup settings: export and import all data (password-encrypted, LWW merge) plus export the instance seed round-trip on a fresh install (app/components/BackupSettings.tsx; RPC 24/25/26).
• The device-name input sets this device's synced label; it appears in the members/peers roster on another device.
• Leaf pairing dialog reads the hub's controlKey/hubAddr via owner-control status and provisions a nearby leaf over BLE — requires a dev-client rebuild (app/components/LeafPairingDialog.tsx).

15 · Lifecycle & sync resilience

• Force-kill + relaunch → items, preferences, loyalty cards, and membership all restored.
• Background the app 10+ minutes, foreground → list resyncs without duplicates; peer edits made meanwhile arrive.
• Airplane mode: add/edit items offline → all kept; disable airplane mode → changes propagate to peers and theirs arrive.
• Two peers edit the same item while disconnected → after reconnect every device shows the same single winner (no ghosts, no dupes).

1 · Launch & shell

• Frameless window opens with working traffic lights (close / minimize / maximize) and a draggable titlebar.
• Opens empty — no list is selected on launch; a protected general group is present in the rail with the built-in Groceries / Board / Todo lists inside it.
• Selecting any list in the rail navigates to its surface; the empty/welcome state returns when nothing is selected.
• Status strip: hollow ring at 0 peers, breathing acid dot when ≥1 peer; clicking it navigates to the Peers pane.
• Overview / Peers / Settings nav buttons switch panes with the entrance animation; peer-count badge pops when the count changes.

2 · Keyboard

• N or / summons the add-bar focused; Esc dismisses it.
• G toggles grid ↔ list; T cycles theme system → light → dark; H hides/shows the hint bar (persisted).
• ? opens the Keyboard Shortcuts dialog and its contents match reality.
• ↑/↓ move row focus and wrap at the ends; Space/Enter toggles done; Delete removes the focused item.
• Shortcuts are inert while typing in any input and while a dialog is open.

3 · Add & edit

• Enter in the add-bar adds the item, clears the input, and keeps focus for chain-adding.
• Blur with an empty input dismisses the bar; with draft text it stays.
• Draft text survives background re-renders (type half an item, have a peer add something — the draft is untouched).
• Duplicate add (case-insensitive, whitespace-normalized) → shake animation + "Duplicate item" notice; not added.
• Double-click a row → inline edit; Enter saves, Esc cancels, blur saves; renaming to an existing item is rejected.

4 · Rows, grid & animations

• Click toggles done: strikethrough + completion flash; un-toggling unflashes.
• Hover reveals the ✕ delete button; clicking animates the row exit before removal.
• Items added by a remote peer pulse on arrival; locally added items don't.
• Grid view: cards with larger icons, identical toggle/delete interactions, hover state.
• Clear Done with several completed items → staggered exit animations; the button disappears after.
• OS "reduce motion" on → all animations replaced by instant updates.

5 · Summary bar & categories

• Status text transitions: "Starting…" → "Ready to share" → "Synced with N peer(s)".
• "X items left" is accurate; "All done!" when everything is completed.
• Category grouping and headers honor the preference toggles; category icons are colored per category.

6 · Groups & lists

• Create a group, create a list inside it, then rename and delete each; every list belongs to some group (no orphans).
• The general group is protected — it can't be deleted; deleting any other group re-homes its lists into general rather than dropping them.
• The built-in Groceries / Board / Todo lists behave as ordinary lists inside general (rename, hide); their underlying data still lives on list id default.
• Rail groups collapse/expand; a collapsed group shows a single green badge summing the unchecked counts of its lists; selecting a list auto-expands its group.
• Group collapse state, names, and membership survive a relaunch (preferences.collapsedGroups is device-local; the registry layer replicates list/group structure).

7 · Overview (Focus & Planner)

• Overview pane shows the Focus rail and the Planner; flagging works from list rows, grid cards, board tickets, and across lists — flagged items spotlight in Focus.
• Planner shows a 7-day strip; clicking a future day opens its popover; items can be planned onto a day.
• Drag-reorder within Focus / a day re-sorts via the shared @listam/domain/ordering.mjs order field.
• Marking a focused item done writes through to its source list (verify the item is completed in the originating Groceries / Board / Todo list).
• Plan/flag state is a synced pointer channel (@listam/domain/plan.mjs, __plan__ via RPC_UPDATE) — it converges on a peer, not a new RPC.

8 · Todo & Board surfaces

• Todo surface: text-only list, no grocery categories / grid / icons; add, edit, complete, delete behave like the list view.
• Board surface renders status columns and ticket cards; opening a ticket shows the detail view with the 8-block body editor and the rigor editor.
• Board interop: tickets still read whether stored as board or the legacy kanban wire type (@listam/domain/board.mjs isBoardType() dual-read).

9 · Move & reorder

• "Move to…" on an item opens the picker; moving it to another list relocates it cross-list; promote-to-board converts it into a ticket on a board list (@listam/domain/list-move.mjs, RPC_MOVE=28).
• Reorder a list with Alt+↑/↓ and with drag; the new order persists and replicates to peers (LWW order field).
• Reorder holds inside grouped views — within categories (grocery) and within board status columns the manual order is preserved per display site.

10 · Share & join

• Share opens the invite dialog with a z32 code; Copy puts it on the clipboard + "Copied" notice; the code rotates on the next Share.
• Join dialog with empty input → "paste an invite code" error notice.
• Valid invite → confirmation dialog (warns the local list is replaced) → join overlay with phases → lists merge and the roster updates.
• Bad or dead invite → join-error notice; the app returns to a usable ready state.

11 · Peers pane

• Peer count and live dot match reality as peers come and go.
• Create-invite section shows the current code (copy works) or the "no active invite" empty state.
• Members list: monospace writer keys with Owner / You / Member badges.
• Remove is shown only when you can administer and never for self/owner; "Remove member?" confirmation → roster updates and the removed peer loses write access (verify on that peer).

12 · Leaf bridge

• In browser/mock mode the pane shows the "requires Pear runtime" unavailable state.
• Enable → status "Waiting on port 9993"; the 64-hex control key appears with a working Copy button.
• Port input is disabled while the bridge runs; an invalid port shows an error and the bridge doesn't start.
• Relaunch with the toggle left on → bridge auto-starts at boot.
• Connect a leaf (ESP32 board or the tools/cross-device/esp32-leaf.mjs harness) → status shows "1 connection"; disconnecting drops the count.
• Disable stops the listener; status returns to "Off".
• BLE leaf pairing (Web Bluetooth): the pairing flow finds the leaf over navigator.bluetooth, sends Wi-Fi + the hub's controlKey/hubAddr over the custom GATT (@listam/provisioning), and the leaf reboots and dials the bridge. In ?mock=1 the dialog opens but BLE is unavailable.

13 · Owner control (headless devices)

• Pair: mint a code on the node (control-pair), paste it with a name → device row appears with name, capabilities, and key chip.
• Query → the "last status" line fills with the node snapshot.
• Query while the node is stopped → ~30 s timeout surfaces a notice; the UI never hangs.
• Invalid or expired pairing code → clear pair-error notice.

14 · Settings

• Theme System / Light / Dark applies instantly; with System selected, changing the OS theme live re-themes the app.
• Language System / English / Español / Deutsch / Français / Italiano / Português → all visible text updates; scan the major panes for clipping or overflow.
• Show-keyboard-hints toggle matches the bottom hint bar and persists.
• This device's name (and a chosen built-in list rename, e.g. Groceries → Spesa) sync to peers via the synced labels channel (@listam/domain/labels.mjs); the name shows in the peers roster on another device.

15 · Settings → Backup & data

• Export data → password dialog → writes an encrypted .listam file (Argon2id + XChaCha20; RPC_EXPORT_DATA=24).
• Import → pick the .listam file, enter the password → it auto-detects the envelope type and merges by LWW (RPC_IMPORT=26); a wrong password fails cleanly with no data change.
• Export instance seed → password-encrypted .listamseed file containing the full identity (RPC_EXPORT_SEED=25); restoring it on a fresh app reproduces this peer.

16 · Settings → Analytics

• Analytics panel renders the congruency (board calibration gap) and activity views; numbers track the board's estimate-vs-actual data.

17 · Servers pane

• Pair a remote headless peer over owner-control: mint a code on the node, enter it with a name → a status card appears for the server.
• Refresh shows the node's live status; mint-invite returns a joinable invite; export and shutdown are offered and act on the remote node (verify on the node).
• The persistent owner-control connection survives a refresh cycle — repeated requests don't fail to reconnect (the connect-per-request reconnect bug stays fixed).

18 · Voice host

• The Voice section accepts a whisper model path (voiceModelPath → a multilingual GGML model) and a voiceLocale; both are device-local and persist.
• With voice enabled, the desktop Pear worker hosts the pipeline (leaf audio on :9994 → whisper via bare-subprocess → writes to its own base); a spoken command lands an item in this app's list.

19 · Diagnostics

• Summary shows backend ready state, peer count, join phase, and locale correctly.
• Event log records sync/add/update/delete/invite/peer-count/join events newest-first, capped at 50, with no raw keys or item payloads leaked.

20 · Dialogs & notices

• Esc and backdrop click close every dialog type (share, join, confirm, settings, member-remove, shortcuts).
• Notices stack to at most 4 and auto-dismiss after ~4 s.
• Storage recovery flow (when triggered): Retry / Reset first stage, then a second confirmation warning that all local data is erased; Cancel is safe at both stages.

21 · Persistence & instances

• Quit + relaunch → items, invite state, theme, view mode, and all preferences restored.
• Preferences are local to this machine — they do not replicate to peers.
• Exploratory: launch a second instance of the app → no data corruption; note the observed behavior (locking is not formally specified yet).

22 · Installer & distribution (release builds)

• installer/build-macos.sh --release produces the DMG; drag-install to /Applications works.
• Quarantined download: right-click → Open launches despite ad-hoc signing.
• On a machine without Pear: launching shows the dialog offering the pears.com download.
• With the seed agent running (installer/seed-agent.sh LaunchAgent), a fresh machine fetches the app payload and boots.
• App icon correct in Finder and Dock; the native appling shows its splash and owns the Dock tile.
• Channel check: consumers on the release pointer get the released tip, not staging (pear release production was run).

1 · Setup (participant)

• node headless.mjs setup --storage /tmp/listam-qa --role participant → {ok:true,…}; headless-config.json and headless-secrets.json exist with mode 0600.
• Re-running the same setup without --force refuses (config exists); with --force it overwrites.
• --max-storage-bytes and --bootstrap values land in the written config.

2 · Run, status & shutdown

• node headless.mjs run --storage … prints the {"event":"ready","role":"participant","controlPublicKey":…} line.
• headless-status.json refreshes every ~5 s with role, joined, peerCount, itemCount, and quota.
• node headless.mjs status --storage … exits 0 while the service runs; >60 s after stopping it, exits 1 (stale).
• Ctrl-C (SIGINT) → graceful exit in <5 s; SIGTERM the same.
• Closing stdin (EOF) → clean shutdown, no orphan process left.
• run against a directory with no config → clear "no valid config" error, non-zero exit.

3 · Item ops over stdin

• {"id":1,"op":"add","text":"milk"} → {"id":1,"ok":true}; the item shows in dump.
• edit, done, and delete by itemId each succeed and are reflected in dump.
• Mutation while not joined and with no reachable peers → fails fast with "mutation refused" (not a 20 s hang).
• Unknown op or missing fields → ok:false error reply; the service keeps running.

4 · Invite & join

• {"op":"invite"} returns a z32 invite key that a GUI peer can join with.
• {"op":"join","invite":…} against a live host succeeds (budget up to 180 s); status then shows joined:true and the host's items.
• Join with a garbage invite → ok:false; the service stays up.

5 · Export & import

• export with a path writes JSON (version, exportedAt, baseId, items) with file mode 0600.
• Round-trip: export → import on a fresh peer → items match by stable id, done flags and edits preserved; re-importing the same file creates no duplicates.

6 · Storage lease

• A second run on the same storage while the first lives → immediate "lease held by another running instance" failure.
• kill -9 the service → restart within 30 s is refused; after the lease TTL expires, restart succeeds.

7 · Blind storage (C2 boundary)

• setup --role blind-storage --base-key <64-hex> works; a non-hex key is rejected.
• run → status shows role blind-storage, encryptionKey:"never-held", and pins whose length/contiguousLength grow as the source base appends.
• peek returns hex ciphertext — never recognizable item text.
• No encryption material exists anywhere in the blind node's storage directory.
• With a tiny --max-storage-bytes, exceeding quota logs an [AUDIT] line and leaves swarm topics, but existing data is NOT deleted.

8 · Owner control

• control-pair mints a 6-digit code with ≤15 min expiry; after a desktop/mobile pairs, control-devices lists it with name and capabilities.
• Remote status/diagnostics from the paired device work; capability-gated ops are denied where they should be (e.g. invite on a blind-storage node).
• control-revoke → the device can no longer command the node; control-audit shows the pairing/command/revoke events.
• An expired pairing code is rejected.

9 · Leaf bridge

• LISTAM_LEAF_BRIDGE_PORT=9993 node headless.mjs run … → status includes leafBridge with port and controlKey.
• The leafBridge status block also reports hubAddr (auto-detected external IPv4:port) and, when voice is enabled, audioAddr (the same host on the voice port).
• A leaf connects and mirrors appends (full leaf scenario in Cross-Device).

10 · BLE leaf provisioning

• {"op":"provision-leaf","ssid":"<wifi>","psk":"<pw>"} scans for a nearby leaf over BLE, writes Wi-Fi + the hub's controlKey/hubAddr to it (src/provision-ble.mjs + @listam/provisioning), and the reply reports the fingerprint and hubAddr.
• hubAddr can be overridden in the request; auto-detection falling back to no external IPv4 returns a clear ok:false error rather than hanging.

11 · Voice-enabled run

• With voice enabled, run starts the audio bridge on :9994 (override with LISTAM_VOICE_PORT); the log shows "audio bridge listening".
• A GGML whisper model is present and reachable; a missing model fails with a clear error and does not crash the service.
• Per-intent exec floors gate writes (@listam/backend/lib/voice-feedback.mjs DEFAULT_EXEC_FLOORS, overridable via LISTAM_VOICE_FLOOR_*) — a low-confidence parse lights up but is not saved.
• Dataset capture is on by default and persists utterances under <storage>/voice-dataset; LISTAM_VOICE_DATASET=0 disables it.

12 · Peer label (setup --name)

• setup --name "Raspberry Pi" records the name in the config (trimmed, ≤64 chars); on boot the node writes a synced peer-label item so GUI peers see the human-readable name in their roster.

13 · Installer (Linux: Pi / cassandrina-node)

• node headless.mjs install --storage ~/listam creates run.sh, the systemd user unit, and enables linger; the service is active right after install.
• Install with --invite <z32> → the node joins the base during install (joined:true within the 180 s budget).
• Echo an op into control.fifo → the reply is visible in the journal (FIFO control path works).
• Kill the process → systemd restarts it (Restart=always; allow the 30 s lease TTL).
• Reboot the box → service returns without an interactive login (linger), or via the cron @reboot + 5-min guard fallback where systemd is unavailable.
• Re-running install is idempotent (no duplicate cron lines); uninstall removes unit + cron entries but preserves the storage directory.

1 · Wake word

• Saying "yo" fires the on-device wake model (max_prob ≈ 0.996) → the leaf LED blinks yellow; ambient noise does not trip it repeatedly.
• The WAKE SUMMARY diagnostic line is logged on the board for each fire.

2 · Command paths

• Add: "yo add milk" → item added to the list; LED turns green on a successful send.
• Remove: "yo remove milk" → the item is deleted (remove is gated higher, so the wake word is effectively required).
• Note: a note command appends to the note channel; LED green on send.
• An unrecognized command (wake fired but no parseable intent) → LED turns red ("didn't understand"); nothing is written.

3 · Locale & gating

• Locale-correct transcription: with the locale set to Italian, "yo aggiungi latte" adds "latte" (a multilingual model — medium.en would ignore -l it).
• Exec-floor gating: ambient speech that merely parses (no wake, low confidence) lights up but does NOT mutate the list (@listam/backend/lib/voice-feedback.mjs shouldExecuteIntent).
• Training-dataset capture toggle: utterances are persisted by default (LISTAM_VOICE_DATASET) and capture stops when it is disabled.

4 · Both host paths

• Desktop host: the Pear worker spawns whisper via bare-subprocess and writes to its own base; a spoken command lands an item in the desktop app's list.
• Headless host: a voice-enabled headless run does STT + parsing and the item appears on its peers (e.g. the Geekom backup host, failover after desktop).

1 · Two-peer pairs

Run for each pairing whose code changed: desktop ↔ mobile, mobile ↔ mobile, desktop ↔ headless, mobile ↔ headless.

• Invite from A, join from B → guest's joining flow completes; both lists are identical afterwards.
• Add on A → appears on B within seconds (with the remote pulse on desktop).
• Done-toggle on B → reflects on A; un-toggle propagates back.
• Edit text on A while deleting a different item on B → both converge with no resurrected items.
• The roster on both sides shows two writers with correct Owner / You labels.

2 · Mesh (3+ peers)

• Desktop + mobile + headless all join one base; every peer writes one item; all converge to identical lists.
• Peer counts on each device reflect the live connections.
• Restart one peer → it catches up on the ops it missed while down.

3 · Offline & wedge regression

• Guest goes offline, makes edits, returns → converges with no losses or duplicates.
• Host goes offline; guest keeps writing; host returns → all guest writes arrive and the guest's writer never silently freezes (autobase#374 wedge regression).
• The same item edited on two disconnected peers → after reconnect, every peer shows the same single winner.

4 · Membership & recovery across devices

• Owner removes a member → remaining peers keep syncing (re-key) and the removed device can no longer write.
• Owner recovery: code revealed on device A restores ownership on device B; roles end up consistent on every peer.

5 · ESP32 leaf (when firmware or bridge changed)

• Hub bridge on (desktop or headless); the board's cfg.toml control key matches the hub key — a mismatch is detected and means "reflash the board".
• Board serial status shows cores mirroring; appends on the hub grow the leaf's contiguousLength.
• Power-cycle the board → the mirror resumes from flash without a full re-download.