docs(roadmap): plan M2 and match what runs in production

The roadmap still said commands and battery commands were off, while both
have been enabled on the Pi since 2026-10-24 and the web UI is live. M2 gets
a checklist from the open questions in docs/frisko/; the F3 limits and the
4226 numbering are already settled.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015x6FWeKCY59JfFJmzAm4TL

docs/frisko/app-knowledge.md

@@ -44,10 +44,6 @@ below therefore come from the PDF, the XML and the MR208 manual, not from code.
 
 4226 is the effective state; 4140 is the chosen program (4226 can say STOP while 4140 says weekly).
 
-Open: the gateway test fixture (real output, PR #40) shows 4226 = 0 while the settings backup has
-4140 = 1 (weekly) and rx910-se21.md observed the weekly program. If 4226 really reads 0 then, the
-PDF numbering may be shifted by one. Check by reading 4226 and 4140 together, then changing nothing.
-
 ## Modes and programs
 
 | Reg | Values | Source |
@@ -115,6 +111,5 @@ The vendor documents no limit. The app's 200 ms pause is the only known pacing;
 
 - What are 4222–4225, and the missing values of 4228? (a read-only log over a heating cycle)
 - Does 4011 exist and move on this firmware? Its relation to 4221.
-- Is 4226 numbered as the PDF says (see above)?
 - What does 4119 read when it is implemented, and is the register used at all?
 - Meaning of 4122 value 2 ("*") and of 4126 `Uklad` (no values given).

docs/frisko/rx910-se21.md

@@ -23,7 +23,7 @@ unless marked otherwise.
 |---|---|---|
 | Temperatures | 4065 outdoor, 4066 indoor, 4067 CO/buffer, 4069 CWU, 4070/4071 ground in/out, 4072 pump outlet, 4199 avg outdoor | X10 |
 | Targets now | 4201 room, 4202 CO supply, 4203 CWU | X10; show economy vs comfort period |
-| State | 4227 pump (0 stop, 1 CO, 2 CWU, 3 both), 4226 program, 4221 alarm, 4073 pressure switch | |
+| State | 4227 pump (0 stop, 1 CO, 2 CWU, 3 both), 4226 program, 4221 alarm, 4073 pressure switch | 4226 numbered as the PDF (1 = weekly), verified 2026-10-24 |
 | Outputs | 4112 CO, 4113 buffer, 4114 compressor (0/33/66/100), 4115 heater signal (heater not connected), 4116 circulation, 4117 ground, 4118 CWU | 0 or 100 |
 | Setpoints (F3) | 4131/4132 CO economy/comfort (5–35), 4143/4144 CWU economy/comfort (5–70) | whole °C |
 | Protection | 4158 TmaxPc = 52 °C, 4149 TmaxCWU = 55, 4148 HistCWU = 5, 4146 PriorCWU = 1, 4147 heater signal delay = 20 | read 2026-10-23 |

docs/roadmap.md

@@ -33,14 +33,30 @@ their names and fields; new data goes into new measurements (ADR-005). The heat
   meter's converter speaks RTU over TCP); `rpi-measurements` stopped and disabled
 - [ ] After the week: remove `rpi-measurements` and the old `home-pump.service` files
 
-## Next
+## Next: M2 Understand the controller
+
+Done when: `docs/frisko/` reviewed, each open question answered or marked out of reach. Reads only;
+a probe against the controller runs on the Pi, with the owner's approval, while the Frisko app is closed.
+
+- [x] F3 limits agreed: CWU 5–48, CO 5–25 (gateway/README.md); 4226 numbering holds (history)
+- [ ] DST, 2026-10-26: CWU comfort at ~10:25 / 16:55 local means the clock is still on CEST; then
+  the owner sets it and we note the date
+- [ ] Timing probe: block response times (p50, p95) and errors at 1, 2 and 5 s cycles, ~10 min
+  each; what our connection does to a running Frisko app. Gives the poll rate and Odśwież limit
+- [ ] Which pumps run in which state: outputs 4112, 4113, 4116–4118 and stage 4114 against 4227
+  over a week of `heat_pump`, including the first CO cycles
+- [ ] Over the same week: 4222–4225 and 4228 values; the CWU start condition (40.8–42.8 °C vs none
+  at 38–39 °C)
+- [ ] Read 4011 beside 4221 and 4073 (a new read-only field): does it exist on SE21 (M5 needs it)
+- [ ] Weekly program: read 4167–4177 through the shared selector, or keep inferring it (F6); decide
+
+## Later
 
 | Milestone | Scope | Done when |
 |---|---|---|
-| M2 Understand the controller | Timing (safe poll rate, response times), which pumps run in which state, open questions in `docs/frisko/` | `docs/frisko/` reviewed; F3 limits agreed |
-| M3 Backend and web UI, read-only | Backend in Docker in Kraków: history from Influx, snapshot from the gateway; F1, F2, F5, F7 with the schematic and charts after `research/ui/`; Traefik route, sign-in (ADR-014), on the internet since v2.0.0 (ADR-016). Backend, frontend and their images are on master (ADR-008 proposed, ADR-010); open: `REGISTRY_TOKEN`, first release, the stack in homelab-compose (Arcane) | My father sees the heat pump and the energy on his phone |
-| M4 Setpoints | F3 through gateway commands with timed restore (ADR-006) and 15 min leases the backend renews (ADR-011), away held until a chosen date (ADR-012); CWU first, then CO; S1–S6. On master and wired, off until `commands.enabled` (gateway/README.md: Enabling commands): command service with restores, FC6, token-protected `/commands`, backend `/api/setpoints` and presets, UI tab Ustawienia | Father boosts hot water from his phone, value restored on time |
-| M4b Battery settings | F8 (ADR-013): Time of Use table and backup reserve from the Bateria view, FC16 with read-back, refused on stale or changed state; on branch/master and off until `deyeCommands.enabled` (gateway/README.md: Enabling battery commands) | Father changes the battery program from the app; first live write watched |
+| M3 Backend and web UI, read-only | Backend in Docker in Kraków: history from Influx, snapshot from the gateway; F1, F2, F5, F7 with the schematic and charts after `research/ui/`; Traefik route, sign-in (ADR-014), on the internet since v2.0.0 (ADR-016). Backend, frontend and their images are on master (ADR-008 proposed, ADR-010); live at `pompa.mariuszpacek.pl` behind the sign-in (2026-10-25) | My father sees the heat pump and the energy on his phone |
+| M4 Setpoints | F3 through gateway commands with timed restore (ADR-006) and 15 min leases the backend renews (ADR-011), away held until a chosen date (ADR-012); CWU first, then CO; S1–S6. On master and enabled on the Pi since 2026-10-24 (gateway/README.md: Enabling commands): command service with restores, FC6, token-protected `/commands`, backend `/api/setpoints` and presets, UI tab Ustawienia | Father boosts hot water from his phone, value restored on time |
+| M4b Battery settings | F8 (ADR-013): Time of Use table and backup reserve from the Bateria view, FC16 with read-back, refused on stale or changed state; on master and enabled on the Pi since 2026-10-24 (gateway/README.md: Enabling battery commands) | Father changes the battery program from the app; first live write watched |
 | M5 Alarms | F4; decide the channel first (e.g. ntfy, Telegram) | Simulated alarm reaches the phone |
 | M6 Native app? | Decide: keep the web UI, WebView wrapper or React Native | Decision recorded |