ChuckandClaude Opus 5.5 ba38a83c2c fix(web): refuse cross-site state-changing requests (Origin/Referer check) (#674) ...

The web interface refuses state-changing requests (POST/PUT/PATCH/DELETE)
whose Origin (or, without one, Referer) is not the host they were sent to,
or is null: 403 CROSS_SITE_REQUEST (web_interface/origin_guard.py). Any
website a LAN user visited could otherwise make their browser POST a plain
form to the Pi. /api/v3/system/action also refuses form-encoded and
text/plain bodies (415) unless sent by HTMX. Clients that send no Origin or
Referer (curl, requests, Home Assistant, the MQTT bridge) are unaffected.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-30 09:02:01 -04:00

..

fixtures

refactor: remove the skin system and the unused src/base_classes package (#615)

2026-09-23 16:33:24 -04:00

js

ci: run the web UI DOM test suites; fix two stale suites (#660)

2026-09-28 15:01:08 -04:00

plugins

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

web_interface

test: stop the suite reinstalling plugins into the real plugin-repos/ (#679)

2026-09-29 17:47:32 -04:00

__init__.py

fix(test): repair test infrastructure and mock fixtures (#281)

2026-03-20 15:06:58 -04:00

_api_v3_test_helpers.py

Cover the next tier of untested modules and endpoints, and fix the 43 bugs that surfaced (#459)

2026-08-21 11:16:52 -04:00

conftest.py

test: stop the suite reinstalling plugins into the real plugin-repos/ (#679)

2026-09-29 17:47:32 -04:00

test_adaptive_images.py

feat: adaptive layout system — size-aware regions, crisp font ladders, image fitting (#393)

2026-07-12 10:38:52 -04:00

test_adaptive_layout.py

feat: adaptive layout system — size-aware regions, crisp font ladders, image fitting (#393)

2026-07-12 10:38:52 -04:00

test_api_helper.py

fix(core): font zip cache, monotonic timers, resolver back-off, and other core/common fixes (#654)

2026-09-28 10:40:16 -04:00

test_api_v3_bool_coercion.py

fix(web): plugin dir resolver in routes, nmcli AP detection, daemon config reload, upload safety, BDF preview (#655)

2026-09-28 10:42:07 -04:00

test_api_v3_bundled_fonts_protected.py

fix(security): refuse unsafe plugin ids, keep secrets private, validate request bodies (#643)

2026-09-28 08:24:43 -04:00

test_api_v3_calendar_credentials.py

Cover the next tier of untested modules and endpoints, and fix the 43 bugs that surfaced (#459)

2026-08-21 11:16:52 -04:00

test_api_v3_display_hardware.py

fix(security): refuse unsafe plugin ids, keep secrets private, validate request bodies (#643)

2026-09-28 08:24:43 -04:00

test_api_v3_display_modes.py

feat(starlark,on-demand): the third-party fixes worth taking, plus a Home Assistant MQTT bridge (#538)

2026-09-08 08:34:52 -04:00

test_api_v3_font_upload_size.py

refactor(api-v3): split the 10,469-line blueprint into a package (#553)

2026-09-11 10:07:38 -04:00

test_api_v3_health.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_api_v3_installed_plugin_icon.py

fix: web UI and src.common bugs (wifi wrong-password, plugin icon, starlark toggle, API caching, scroll/logo/font helpers) (#646)

2026-09-28 08:26:05 -04:00

test_api_v3_lazy_plugin_discovery.py

refactor(web): delete dead routes, JS files and duplicate definitions (#609)

2026-09-23 12:36:53 -04:00

test_api_v3_non_finite_numbers.py

fix(web): reject non-finite JSON numbers instead of raising (#497)

2026-08-23 11:44:23 -04:00

test_api_v3_on_demand_restart.py

fix(web): on-demand no longer restarts a running display service (#676)

2026-09-29 14:42:58 -04:00

test_api_v3_optional_body.py

fix(security): refuse unsafe plugin ids, keep secrets private, validate request bodies (#643)

2026-09-28 08:24:43 -04:00

test_api_v3_partial_main_save.py

fix: settings the display ignored, a memory leak, and the plugin card handler (#605)

2026-09-23 10:29:16 -04:00

test_api_v3_plugin_health_single.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_api_v3_plugin_install_endpoints.py

Cover the next tier of untested modules and endpoints, and fix the 43 bugs that surfaced (#459)

2026-08-21 11:16:52 -04:00

test_api_v3_plugin_toggle_errors.py

fix: settings the display ignored, a memory leak, and the plugin card handler (#605)

2026-09-23 10:29:16 -04:00

test_api_v3_registry_endpoints.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_api_v3_schedule_error_messages.py

refactor(api-v3): split the 10,469-line blueprint into a package (#553)

2026-09-11 10:07:38 -04:00

test_api_v3_upload_writes.py

refactor(web): split api_v3/plugins.py by area (#658)

2026-09-28 14:58:53 -04:00

test_api_v3_url_map.py

refactor(api-v3): split the 10,469-line blueprint into a package (#553)

2026-09-11 10:07:38 -04:00

test_api_v3_vegas_plugin_lists.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_api_v3_wifi_endpoints.py

fix(web): plugin dir resolver in routes, nmcli AP detection, daemon config reload, upload safety, BDF preview (#655)

2026-09-28 10:42:07 -04:00

test_async_plugin_updates.py

fix(plugin-system): unload/update race, failed-load cleanup, limits validation, schema lookup, install rollback (#653)

2026-09-28 10:41:40 -04:00

test_auto_update_setup.py

fix(core): font zip cache, monotonic timers, resolver back-off, and other core/common fixes (#654)

2026-09-28 10:40:16 -04:00

test_auto_update_verify.py

refactor(install): generate the web sudoers rules in one place (#622)

2026-09-24 15:51:14 -04:00

test_auto_update.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_background_data_service_espn_ranges.py

perf(sports): fetch ESPN date chunks concurrently (#596)

2026-09-18 09:56:50 -04:00

test_background_data_service.py

fix: one retry layer for background fetches; CI installs the web requirements; one Discord invite (#657)

2026-09-28 11:08:43 -04:00

test_background_fetch_dedupe.py

fix(memory): join an in-flight fetch instead of starting a duplicate (#503)

2026-08-26 10:03:43 -04:00

test_background_payload_release.py

fix(background): release the payload after every callback, not after each one (#509)

2026-09-01 09:54:04 -04:00

test_backup_manager.py

fix(security): refuse unsafe plugin ids, keep secrets private, validate request bodies (#643)

2026-09-28 08:24:43 -04:00

test_base_odds_manager.py

fix(odds): don't return the cached no-odds marker as odds (#662)

2026-09-28 14:59:40 -04:00

test_base_plugin_duration.py

Follow-ups from #441: secret-helper migration, ten more bug fixes, and coverage for every remaining untested module (#444)

2026-08-07 16:17:11 -04:00

test_base_plugin_styles.py

feat(core): one per-element display-customization framework, wired into the web UI (#566)

2026-09-13 11:53:50 -04:00

test_base_plugin_vegas_render_width.py

fix(plugin-system): unload/update race, failed-load cleanup, limits validation, schema lookup, install rollback (#653)

2026-09-28 10:41:40 -04:00

test_bdf_face_per_thread.py

fix(display): thread-safety for deferred updates, BDF faces and follower image; one refresh default (#652)

2026-09-28 10:39:40 -04:00

test_bdf_font.py

refactor(fonts): one BDF loader and one BDF rasterizer (#627)

2026-09-24 15:51:53 -04:00

test_cache_cleanup_thread_ownership.py

fix(cache): one cleanup thread per cache directory, not per manager (#453)

2026-08-12 08:42:56 -04:00

test_cache_manager_memory_tier.py

refactor(cache): remove the cache layer's duplicate cleanup and dead lookups (#613)

2026-09-23 12:54:07 -04:00

test_cache_manager.py

fix: keep low-memory boards reachable under load (#464)

2026-08-19 12:28:22 -04:00

test_cache_nonfinite_floats.py

perf(scroll): pace frames to the panel — 44→100 fps, stalls 14% → 0.02% (#523)

2026-09-07 13:37:54 -04:00

test_cache_orphan_temp_sweep.py

fix(cache): collect the temp files abandoned writes leave behind (#452)

2026-08-12 08:40:07 -04:00

test_cache_shared_group.py

fix(cache): web UI can read what the display service caches again (#593)

2026-09-17 12:38:39 -04:00

test_cache_stale_header.py

perf(cache): tell a stale record from its header instead of parsing it (#633)

2026-09-24 15:50:50 -04:00

test_cache_strategy_intervals.py

refactor(cache): remove the cache layer's duplicate cleanup and dead lookups (#613)

2026-09-23 12:54:07 -04:00

test_cache_ttl_honoured.py

fix(cache): make the ttl parameter actually control expiry (#450)

2026-08-11 14:14:25 -04:00

test_checkbox_group_stale_values.py

fix(web): stop checkbox groups posting back options they cannot show (#465)

2026-08-19 17:40:52 -04:00

test_color_picker_widget.py

fix(web): harden, polish and optimize the web UI per the Sept 2026 audit (#568)

2026-09-14 09:42:24 -04:00

test_common_is_hardware_free.py

refactor: remove the skin system and the unused src/base_classes package (#615)

2026-09-23 16:33:24 -04:00

test_common_readme_lists_every_module.py

fix: web UI and src.common bugs (wifi wrong-password, plugin icon, starlark toggle, API caching, scroll/logo/font helpers) (#646)

2026-09-28 08:26:05 -04:00

test_compatibility.py

fix(plugin-system): unload/update race, failed-load cleanup, limits validation, schema lookup, install rollback (#653)

2026-09-28 10:41:40 -04:00

test_config_durable_writes.py

fix(config): write config.json through one durable atomic writer (#611)

2026-09-23 12:52:50 -04:00

test_config_load_cache.py

perf(config): mtime-signature fast path for load_config (#410)

2026-07-14 08:49:43 -04:00

test_config_main_redacts_secrets.py

refactor(api-v3): split the 10,469-line blueprint into a package (#553)

2026-09-11 10:07:38 -04:00

test_config_manager_secrets.py

fix(config): load config_secrets.json on hosts without os.geteuid (#590)

2026-09-16 17:12:18 -04:00

test_config_manager.py

Codebase audit: fix shipping bugs, remove verified-dead code, repair doc drift, add regression guards (#438)

2026-08-06 14:04:23 -04:00

test_config_service.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_config_validation_edge_cases.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_core_config_key_adopters.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_core_config_keys.py

fix(web): auto_update and other core settings are not orphaned plugins (#589)

2026-09-15 18:19:39 -04:00

test_core_owned_config_keys.py

fix(plugins): core's own config keys no longer flag plugins as degraded (#434)

2026-08-04 13:46:28 -04:00

test_core_version_freshness.py

fix(store): read the core version from disk, not from a stale import (#518)

2026-09-03 16:06:40 -04:00

test_deferred_updates_threads.py

fix(display): thread-safety for deferred updates, BDF faces and follower image; one refresh default (#652)

2026-09-28 10:39:40 -04:00

test_deprecation.py

feat: deprecate unused plugin-facing methods for removal in 3.7.0 (#610)

2026-09-23 12:44:55 -04:00

test_device_location.py

fix(starlark): blank app locations use the device location, not San Francisco (#617)

2026-09-23 16:48:02 -04:00

test_discovery_path_contract.py

refactor(plugins): split PluginStoreManager into mixins (#659)

2026-09-28 15:00:45 -04:00

test_display_controller_cleanup.py

fix(display): Vegas resumes after live priority, and six smaller runtime fixes (#644)

2026-09-28 08:25:26 -04:00

test_display_controller_empty_rotation.py

fix(display): stop the run loop spinning when no mode has anything to show (#649)

2026-09-28 09:07:08 -04:00

test_display_controller_optimizations.py

fix: settings the display ignored, a memory leak, and the plugin card handler (#605)

2026-09-23 10:29:16 -04:00

test_display_controller_plugin_toggle.py

fix(display): retry a plugin that is enabled but failed to load (#495)

2026-08-23 11:43:39 -04:00

test_display_controller_schedule.py

fix(display): Vegas resumes after live priority, and six smaller runtime fixes (#644)

2026-09-28 08:25:26 -04:00

test_display_controller_settings.py

fix: settings the display ignored, a memory leak, and the plugin card handler (#605)

2026-09-23 10:29:16 -04:00

test_display_controller_shutdown_and_state.py

fix: six bugs found testing main on a real Pi (#641)

2026-09-27 18:13:49 -04:00

test_display_controller_startup_validation.py

fix: web UI and src.common bugs (wifi wrong-password, plugin icon, starlark toggle, API caching, scroll/logo/font helpers) (#646)

2026-09-28 08:26:05 -04:00

test_display_controller_swallowed_errors.py

fix(display): thread-safety for deferred updates, BDF faces and follower image; one refresh default (#652)

2026-09-28 10:39:40 -04:00

test_display_controller_vegas_tick.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_display_controller.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_display_dirty_tracking.py

fix(vegas): smooth Vegas scroll pacing -- whole pixels per refresh, measured refresh, off-thread preview writes (#628)

2026-09-24 19:38:22 -04:00

test_display_double_parity.py

perf(scroll): pace frames to the panel — 44→100 fps, stalls 14% → 0.02% (#523)

2026-09-07 13:37:54 -04:00

test_display_geometry.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_display_manager_logging.py

fix(display): thread-safety for deferred updates, BDF faces and follower image; one refresh default (#652)

2026-09-28 10:39:40 -04:00

test_display_manager.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_display_pending_changes.py

fix(vegas): smooth Vegas scroll pacing -- whole pixels per refresh, measured refresh, off-thread preview writes (#628)

2026-09-24 19:38:22 -04:00

test_display_preview.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_doc_links.py

Codebase audit: fix shipping bugs, remove verified-dead code, repair doc drift, add regression guards (#438)

2026-08-06 14:04:23 -04:00

test_dynamic_team_resolver.py

fix(core): font zip cache, monotonic timers, resolver back-off, and other core/common fixes (#654)

2026-09-28 10:40:16 -04:00

test_element_style.py

fix(core): font zip cache, monotonic timers, resolver back-off, and other core/common fixes (#654)

2026-09-28 10:40:16 -04:00

test_element_visibility_align_scale.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_enum_option_labels.py

feat(web): let schemas label enum dropdown options (#442)

2026-08-07 13:27:20 -04:00

test_error_aggregator.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_error_handling.py

fix(core): font zip cache, monotonic timers, resolver back-off, and other core/common fixes (#654)

2026-09-28 10:40:16 -04:00

test_error_snapshot_cross_process.py

fix(errors): serve /api/v3/errors/* from the display service; add a Plugin errors panel (#614)

2026-09-23 14:32:02 -04:00

test_espn_dates.py

perf(sports): fetch ESPN date chunks concurrently (#596)

2026-09-18 09:56:50 -04:00

test_favorite_team_check.py

fix(common): favourite check no longer calls the Europa League finished between matchdays (#670)

2026-09-29 11:49:36 -04:00

test_fix_web_permissions_rehardens.py

fix(security): re-harden root sudo helpers; installer fixes; ARCHITECTURE and PERMISSIONS docs (#640)

2026-09-24 17:31:41 -04:00

test_follower_scroll_image_handoff.py

fix(display): thread-safety for deferred updates, BDF faces and follower image; one refresh default (#652)

2026-09-28 10:39:40 -04:00

test_font_manager.py

fix(core): font zip cache, monotonic timers, resolver back-off, and other core/common fixes (#654)

2026-09-28 10:40:16 -04:00

test_font_pixel_grid.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_font_usage.py

feat(web): show which plugins use each font; warn before deleting one (#619)

2026-09-23 16:50:42 -04:00

test_frame_timing.py

feat(perf): frame timing for every presented frame, a soak tool, a render bench and a stall watchdog (#629)

2026-09-24 19:38:49 -04:00

test_git_pull_resolution.py

consolidate(web): credential exposure, secret loss, and the update path (#485)

2026-08-21 14:30:29 -04:00

test_harness_empty_claimed.py

fix: ten defects found validating the whole plugin fleet on hardware (#534)

2026-09-07 13:37:38 -04:00

test_harness_fill.py

feat: adaptive layout system — size-aware regions, crisp font ladders, image fitting (#393)

2026-07-12 10:38:52 -04:00

test_health_write_churn.py

consolidate(perf): cut SD writes, log volume, and metrics churn (#486)

2026-08-21 15:50:55 -04:00

test_http_headers.py

fix: one retry layer for background fetches; CI installs the web requirements; one Discord invite (#657)

2026-09-28 11:08:43 -04:00

test_initial_update_budget.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_initializing_screen.py

fix(startup): bound the initial plugin update so the panel lights sooner (#456)

2026-08-12 14:58:05 -04:00

test_install_lowmem.py

test(install): stop assuming pytest's tmp_path is on disk (#492)

2026-08-23 11:42:51 -04:00

test_install_preserves_existing.py

feat(store): refuse to install a plugin that needs a newer core (re-target of #429) (#431)

2026-08-03 16:52:42 -04:00

test_install_reboot_is_last.py

fix(security): re-harden root sudo helpers; installer fixes; ARCHITECTURE and PERMISSIONS docs (#640)

2026-09-24 17:31:41 -04:00

test_install_rgb_checkout.py

fix(install): build rgbmatrix on ARMv6 Pi Zero / Pi 1, and stop locking users out of the submodule (#577)

2026-09-14 17:38:17 -04:00

test_install_via_download_cleanup.py

refactor(plugins): split PluginStoreManager into mixins (#659)

2026-09-28 15:00:45 -04:00

test_journald_log_priority.py

consolidate(perf): cut SD writes, log volume, and metrics churn (#486)

2026-08-21 15:50:55 -04:00

test_js_unit_suites.py

fix: settings the display ignored, a memory leak, and the plugin card handler (#605)

2026-09-23 10:29:16 -04:00

test_ledpi_script_fixes.py

refactor(plugins): split PluginStoreManager into mixins (#659)

2026-09-28 15:00:45 -04:00

test_legacy_boolean_config.py

fix(web): plugin settings form shows schema defaults for unsaved keys (#597)

2026-09-18 11:09:25 -04:00

test_live_status_fields.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_live_update_cadence_integration.py

fix(plugins): let a plugin ask to be polled faster while it has live content (#555)

2026-09-11 08:41:58 -04:00

test_loader_compat_warning.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_logging_config.py

fix(core): font zip cache, monotonic timers, resolver back-off, and other core/common fixes (#654)

2026-09-28 10:40:16 -04:00

test_logo_downloader.py

fix: web UI and src.common bugs (wifi wrong-password, plugin icon, starlark toggle, API caching, scroll/logo/font helpers) (#646)

2026-09-28 08:26:05 -04:00

test_logo_helper_download_backoff.py

fix: web UI and src.common bugs (wifi wrong-password, plugin icon, starlark toggle, API caching, scroll/logo/font helpers) (#646)

2026-09-28 08:26:05 -04:00

test_logo_helper.py

fix(core): font zip cache, monotonic timers, resolver back-off, and other core/common fixes (#654)

2026-09-28 10:40:16 -04:00

test_matrix_support.py

fix(display): thread-safety for deferred updates, BDF faces and follower image; one refresh default (#652)

2026-09-28 10:39:40 -04:00

test_metrics_cache_unknown_fields.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_mqtt_bridge_config_endpoint.py

feat(tools): MQTT bridge and Pixlet editor, ported onto the api_v3 split (#554)

2026-09-11 11:32:12 -04:00

test_mqtt_bridge.py

feat(starlark,on-demand): the third-party fixes worth taking, plus a Home Assistant MQTT bridge (#538)

2026-09-08 08:34:52 -04:00

test_odds_request_budget.py

fix(odds): identify the odds requests to ESPN (#451)

2026-08-11 16:10:56 -04:00

test_offscreen_rendering.py

feat(vegas): render plugin content off the render thread, and keep it off the GIL when the panel needs it (#630)

2026-09-24 19:57:03 -04:00

test_on_demand_disabled_plugin.py

fix(display): on-demand loads a disabled plugin live instead of failing (#678)

2026-09-29 17:59:12 -04:00

test_on_demand_mailbox.py

fix: ten defects found validating the whole plugin fleet on hardware (#534)

2026-09-07 13:37:38 -04:00

test_on_demand_pinning_and_restart.py

fix(display): on-demand loads a disabled plugin live instead of failing (#678)

2026-09-29 17:59:12 -04:00

test_onboarding_checklist.py

fix(web): verify the onboarding timezone step, don't compare it to the default (#462)

2026-08-19 12:49:46 -04:00

test_one_shot_retry.py

fix(install): make one-shot retry() retry, and drop root grants on user files (#606)

2026-09-23 10:34:20 -04:00

test_operation_queue_pending_and_trim.py

fix(plugin-system): unload/update race, failed-load cleanup, limits validation, schema lookup, install rollback (#653)

2026-09-28 10:41:40 -04:00

test_pages_v3_partials.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_pages_v3_path_guards.py

security: triage the CodeQL backlog — 129 alerts, three of them live (#561)

2026-09-11 15:32:03 -04:00

test_path_traversal_guards.py

refactor(web): split api_v3/plugins.py by area (#658)

2026-09-28 14:58:53 -04:00

test_permission_utils.py

fix(core): font zip cache, monotonic timers, resolver back-off, and other core/common fixes (#654)

2026-09-28 10:40:16 -04:00

test_pi5_matrix_support.py

fix(web): accept every panel size and row address type the rgbmatrix library does (#586)

2026-09-15 19:17:48 -04:00

test_pixlet_download.py

fix(pixlet): resolve the release tag correctly when downloading (#461)

2026-08-17 15:35:02 -04:00

test_pixlet_renderer_contract.py

feat(starlark,on-demand): the third-party fixes worth taking, plus a Home Assistant MQTT bridge (#538)

2026-09-08 08:34:52 -04:00

test_plugin_compatibility_gate.py

refactor(plugins): split PluginStoreManager into mixins (#659)

2026-09-28 15:00:45 -04:00

test_plugin_config_preparation.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_plugin_dirs.py

refactor(plugins): one plugin-directory resolver (#623)

2026-09-24 15:52:52 -04:00

test_plugin_discovery_reports_skips.py

fix(plugins): say when discovery skips a directory (#489)

2026-08-21 16:19:33 -04:00

test_plugin_dynamic_update_interval.py

fix(plugins): let a plugin ask to be polled faster while it has live content (#555)

2026-09-11 08:41:58 -04:00

test_plugin_health.py

fix: keep low-memory boards reachable under load (#464)

2026-08-19 12:28:22 -04:00

test_plugin_loader_reload_isolation.py

fix(plugins): put a (re)loading plugin's directory first on sys.path (#663)

2026-09-28 15:02:01 -04:00

test_plugin_loader.py

fix(plugin-system): load/enable failures, atomic state files, pip lock, test-double parity (#645)

2026-09-28 08:25:45 -04:00

test_plugin_loading_failures.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_plugin_manager_discovered_ids.py

fix(display): retry a plugin that is enabled but failed to load (#495)

2026-08-23 11:43:39 -04:00

test_plugin_manager_failed_load_cleanup.py

fix(plugin-system): unload/update race, failed-load cleanup, limits validation, schema lookup, install rollback (#653)

2026-09-28 10:41:40 -04:00

test_plugin_manager_load_failures.py

fix(plugin-system): load/enable failures, atomic state files, pip lock, test-double parity (#645)

2026-09-28 08:25:45 -04:00

test_plugin_manager_reload.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_plugin_manager_schema_soft.py

feat: activate dormant plugin health/metrics subsystem and surface it in the web UI (#388)

2026-07-09 07:54:18 -04:00

test_plugin_state_files_atomic.py

fix(plugin-system): load/enable failures, atomic state files, pip lock, test-double parity (#645)

2026-09-28 08:25:45 -04:00

test_plugin_state_transition_count.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_plugin_system_legacy_flags.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_plugin_system_utf8_reads.py

fix(plugin-system): unload/update race, failed-load cleanup, limits validation, schema lookup, install rollback (#653)

2026-09-28 10:41:40 -04:00

test_plugin_system.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_plugin_update_reservation.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_reconciliation_phantom_plugins.py

fix(web): auto_update and other core settings are not orphaned plugins (#589)

2026-09-15 18:19:39 -04:00

test_reconciliation_status_endpoint.py

fix(web): auto_update and other core settings are not orphaned plugins (#589)

2026-09-15 18:19:39 -04:00

test_redaction.py

fix(redaction): make credential redaction linear, not quadratic (#631)

2026-09-24 15:49:51 -04:00

test_registry_id_resolution.py

fix(backup): make a restored device match the one that was backed up (#439)

2026-08-07 13:02:59 -04:00

test_render_gate.py

fix(display): Vegas resumes after live priority, and six smaller runtime fixes (#644)

2026-09-28 08:25:26 -04:00

test_repo_urls.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_resource_limits_validation.py

fix(plugin-system): unload/update race, failed-load cleanup, limits validation, schema lookup, install rollback (#653)

2026-09-28 10:41:40 -04:00

test_resource_monitor.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_retired_plugin_config_keys.py

refactor: remove the skin system and the unused src/base_classes package (#615)

2026-09-23 16:33:24 -04:00

test_root_display_controller_shim.py

fix(display): thread-safety for deferred updates, BDF faces and follower image; one refresh default (#652)

2026-09-28 10:39:40 -04:00

test_safe_pip_install_allowlist.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_saved_repositories.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_scan_order.py

feat(display): compensate for the panel's scan order while scrolling (#634)

2026-09-24 19:47:44 -04:00

test_schema_manager_device_location.py

fix(config): make the device location the default for plugin location fields (#490)

2026-08-21 16:22:48 -04:00

test_schema_manager_merge.py

Test suite overhaul + fixes for the three bugs it uncovered (#441)

2026-08-07 10:17:30 -04:00

test_schema_manager.py

fix: Codacy security fixes, CVE dependency bumps, and code quality cleanup (#331)

2026-05-15 10:19:55 -04:00

test_schema_path_resolution.py

fix(plugin-system): unload/update race, failed-load cleanup, limits validation, schema lookup, install rollback (#653)

2026-09-28 10:41:40 -04:00

test_scroll_config.py

perf(scroll): pace frames to the panel — 44→100 fps, stalls 14% → 0.02% (#523)

2026-09-07 13:37:54 -04:00

test_scroll_helper_continuous.py

Vegas mode: reclaim dead space and pace the rotation (#423)

2026-07-31 09:40:38 -04:00

test_scroll_helper_image_entry.py

fix: web UI and src.common bugs (wifi wrong-password, plugin icon, starlark toggle, API caching, scroll/logo/font helpers) (#646)

2026-09-28 08:26:05 -04:00

test_scroll_helper.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_scroll_speeds_script.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_snapshot_policy.py

perf(display): snapshot mirror — viewer gating, digest skip, keepalive (#404)

2026-07-13 09:28:30 -04:00

test_sports_card_wrappers.py

feat(common): sports_celebration, sports_fetch and sports_card_wrappers, promoted from the scoreboards (sports consolidation stage 3) (#672)

2026-09-29 12:38:40 -04:00

test_sports_card.py

fix: clamp colour components, and let the style editor actually take over (#569)

2026-09-14 12:48:36 -04:00

test_sports_celebration.py

feat(common): sports_celebration, sports_fetch and sports_card_wrappers, promoted from the scoreboards (sports consolidation stage 3) (#672)

2026-09-29 12:38:40 -04:00

test_sports_fetch.py

feat(common): sports_celebration, sports_fetch and sports_card_wrappers, promoted from the scoreboards (sports consolidation stage 3) (#672)

2026-09-29 12:38:40 -04:00

test_sports_game_renderer.py

feat(core): one per-element display-customization framework, wired into the web UI (#566)

2026-09-13 11:53:50 -04:00

test_sports_helpers.py

feat(common): sports_helpers — the helpers all nine scoreboards carry identical copies of (#583)

2026-09-15 15:32:21 -04:00

test_sports_scroll.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_sports_shared.py

fix(sports): stop the idle back-off sleeping through a kickoff (#599)

2026-09-20 18:25:33 -04:00

test_sports_stage3_parity.py

feat(common): sports_celebration, sports_fetch and sports_card_wrappers, promoted from the scoreboards (sports consolidation stage 3) (#672)

2026-09-29 12:38:40 -04:00

test_sports_sunset_matrix.py

test(sports): pin the four-case sunset matrix before B6 runs (#505)

2026-08-26 11:25:10 -04:00

test_sports_timezone.py

feat(common): favorite_team_check and sports_timezone, promoted from the scoreboards (sports consolidation stage 2) (#665)

2026-09-29 09:05:10 -04:00

test_sports_twins.py

refactor(sports): merge the sports_shared/sports_card twins that behave identically (#626)

2026-09-24 15:51:35 -04:00

test_starlark_apps_dir_ownership.py

fix(starlark): stop the root display service locking the web UI out of starlark-apps (#604)

2026-09-23 16:33:12 -04:00

test_starlark_display_contract.py

refactor(api-v3): split the 10,469-line blueprint into a package (#553)

2026-09-11 10:07:38 -04:00

test_startup_validator.py

fix: web UI and src.common bugs (wifi wrong-password, plugin icon, starlark toggle, API caching, scroll/logo/font helpers) (#646)

2026-09-28 08:26:05 -04:00

test_store_install_default_branch.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_store_install_from_url_rollback.py

fix(plugin-system): unload/update race, failed-load cleanup, limits validation, schema lookup, install rollback (#653)

2026-09-28 10:41:40 -04:00

test_store_manager_caches.py

refactor(plugins): split PluginStoreManager into mixins (#659)

2026-09-28 15:00:45 -04:00

test_store_non_plugin_entries.py

refactor: remove the skin system and the unused src/base_classes package (#615)

2026-09-23 16:33:24 -04:00

test_store_plugin_id_traversal.py

fix(security): refuse unsafe plugin ids, keep secrets private, validate request bodies (#643)

2026-09-28 08:24:43 -04:00

test_store_update_non_git_remote.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_store_update_rollback.py

fix(store): plugin updates keep the old install until the new one succeeds (#405)

2026-07-13 09:32:37 -04:00

test_sudo_allowlist_covers_calls.py

fix(security): re-harden root sudo helpers; installer fixes; ARCHITECTURE and PERMISSIONS docs (#640)

2026-09-24 17:31:41 -04:00

test_sudoers_is_validated.py

fix(security): re-harden root sudo helpers; installer fixes; ARCHITECTURE and PERMISSIONS docs (#640)

2026-09-24 17:31:41 -04:00

test_sudoers_noexec_on_pagers.py

refactor(install): generate the web sudoers rules in one place (#622)

2026-09-24 15:51:14 -04:00

test_sync_manager.py

fix(core): font zip cache, monotonic timers, resolver back-off, and other core/common fixes (#654)

2026-09-28 10:40:16 -04:00

test_system_action_sudo_diagnosis.py

fix(web): say when a system action failed for want of passwordless sudo (#560)

2026-09-11 08:45:40 -04:00

test_system_status_available_memory.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_systemd_malloc_arenas.py

harden: cap malloc arenas, warn on unit drift, and grant the portal's sudo commands (#476)

2026-08-21 14:29:45 -04:00

test_systemd_unit_drift.py

fix(security): re-harden root sudo helpers; installer fixes; ARCHITECTURE and PERMISSIONS docs (#640)

2026-09-24 17:31:41 -04:00

test_template_targets.py

Codebase audit: fix shipping bugs, remove verified-dead code, repair doc drift, add regression guards (#438)

2026-08-06 14:04:23 -04:00

test_testing_mocks.py

fix(plugin-system): load/enable failures, atomic state files, pip lock, test-double parity (#645)

2026-09-28 08:25:45 -04:00

test_text_helper.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_uninstall_and_reconcile_endpoint.py

fix(security): refuse unsafe plugin ids, keep secrets private, validate request bodies (#643)

2026-09-28 08:24:43 -04:00

test_update_change_reporting.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_update_check_reports_failure.py

consolidate(web): credential exposure, secret loss, and the update path (#485)

2026-08-21 14:30:29 -04:00

test_update_prompts_restart.py

consolidate(web): credential exposure, secret loss, and the update path (#485)

2026-08-21 14:30:29 -04:00

test_vegas_config.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_vegas_continuous_refresh.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_vegas_coordinator_config.py

fix: settings the display ignored, a memory leak, and the plugin card handler (#605)

2026-09-23 10:29:16 -04:00

test_vegas_coordinator_iteration.py

fix(display): Vegas resumes after live priority, and six smaller runtime fixes (#644)

2026-09-28 08:25:26 -04:00

test_vegas_crisp_pacing.py

fix(vegas): smooth Vegas scroll pacing -- whole pixels per refresh, measured refresh, off-thread preview writes (#628)

2026-09-24 19:38:22 -04:00

test_vegas_density.py

fix(display): Vegas resumes after live priority, and six smaller runtime fixes (#644)

2026-09-28 08:25:26 -04:00

test_vegas_fps_health.py

perf(vegas): report the frame rate when it is worth reporting (#487)

2026-08-23 11:42:33 -04:00

test_vegas_frame_percentile.py

feat(vegas): make scroll stutter visible, and catch it in the act (#454)

2026-08-12 14:06:32 -04:00

test_vegas_geometry.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_vegas_live_weighting.py

feat(vegas): let live content keep its place in the ticker (#457)

2026-08-13 17:02:36 -04:00

test_vegas_log_volume.py

consolidate(perf): cut SD writes, log volume, and metrics churn (#486)

2026-08-21 15:50:55 -04:00

test_vegas_plugin_adapter.py

Fix inconsistent Vegas scroll transition gaps caused by plugin-baked padding (#384)

2026-07-08 09:43:13 -04:00

test_vegas_render_pipeline_recompose.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_vegas_static_mode.py

fix(vegas): pause for STATIC plugins where their turn falls in the strip (#651)

2026-09-28 10:39:14 -04:00

test_vegas_stream_log_volume.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_vegas_switch_interval.py

feat(vegas): render plugin content off the render thread, and keep it off the GIL when the panel needs it (#630)

2026-09-24 19:57:03 -04:00

test_version_comparison_consistency.py

refactor: remove the skin system and the unused src/base_classes package (#615)

2026-09-23 16:33:24 -04:00

test_version_consistency.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_web_api.py

refactor(web): delete dead routes, JS files and duplicate definitions (#609)

2026-09-23 12:36:53 -04:00

test_web_autostart_default.py

fix(web): default web_display_autostart to true, as the installer already does (#556)

2026-09-10 17:42:00 -04:00

test_web_display_state_freshness.py

refactor(web): delete dead routes, JS files and duplicate definitions (#609)

2026-09-23 12:36:53 -04:00

test_web_error_detail.py

refactor(web): one error-response path for api_v3 (#624)

2026-09-24 15:53:19 -04:00

test_web_origin_guard.py

fix(web): refuse cross-site state-changing requests (Origin/Referer check) (#674)

2026-09-30 09:02:01 -04:00

test_web_plugin_dir_resolution.py

fix(web): plugin dir resolver in routes, nmcli AP detection, daemon config reload, upload safety, BDF preview (#655)

2026-09-28 10:42:07 -04:00

test_web_settings_ui.py

Add settings tooltips and search to the web UI (#387)

2026-07-09 09:22:24 -04:00

test_web_smoke.py

fix: settings the display ignored, a memory leak, and the plugin card handler (#605)

2026-09-23 10:29:16 -04:00

test_web_static_audit.py

fix(web): harden, polish and optimize the web UI per the Sept 2026 audit (#568)

2026-09-14 09:42:24 -04:00

test_web_sudoers_installers_agree.py

refactor(install): generate the web sudoers rules in one place (#622)

2026-09-24 15:51:14 -04:00

test_whole_pixel_stepping.py

fix(scroll): advance whole pixels per frame, not per wall-clock second (#545)

2026-09-09 16:25:45 -04:00

test_widget_scripts.py

fix(web): harden, polish and optimize the web UI per the Sept 2026 audit (#568)

2026-09-14 09:42:24 -04:00

test_wifi_ap_state_handling.py

fix(web): plugin dir resolver in routes, nmcli AP detection, daemon config reload, upload safety, BDF preview (#655)

2026-09-28 10:42:07 -04:00

test_wifi_check_state.py

fix(wifi): make Connect work from the setup AP (#571)

2026-09-14 12:40:41 -04:00

test_wifi_connect_argument_safety.py

fix(wifi): make Connect work from the setup AP (#571)

2026-09-14 12:40:41 -04:00

test_wifi_manager_ap.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_wifi_wrong_password_signal.py

fix: web UI and src.common bugs (wifi wrong-password, plugin icon, starlark toggle, API caching, scroll/logo/font helpers) (#646)

2026-09-28 08:26:05 -04:00