ChuckandClaude Opus 5.5 bcef1957a9 fix(security): refuse unsafe plugin ids, keep secrets private, validate request bodies (#643) ...

* fix(security): refuse unsafe plugin ids, keep secrets private, validate bodies

- install_from_url and the registry install's manifest rename refuse a
  plugin id that is not a single safe name (no ../ out of plugins_dir).
- Uninstall and config reset refuse core config sections and ids with
  path parts; uninstall of a plugin whose directory is gone still works.
- separate_secrets checks a field's own x-secret marker before recursing,
  so object/array secrets no longer land in config.json.
- Backup restore creates missing secrets/wifi/ytm files with mode 640;
  export skips non-object manifests and no longer collides on same-second
  exports.
- SYSTEM_FONTS includes every bundled font from BUNDLED_FONTS.
- Raw config/secrets saves and validate_request_json require a JSON object.
- A blank max_dynamic_duration_seconds keeps the stored value; other values
  are validated to 30-1800 instead of raising a 500.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix(security): validate the id before install_plugin moves anything; claim backup names atomically

- install_plugin set aside plugins_dir / plugin_id before any id check, so
  "../x" moved a directory outside the plugins dir (the rollback moved it
  back, but only if the install path got that far)
- two exports finishing in the same second could both see a free name and
  the later os.replace destroyed the first archive; the name is now
  claimed with O_EXCL before the archive is swapped in

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-09-28 08:24:43 -04:00

..

fixtures

refactor: remove the skin system and the unused src/base_classes package (#615)

2026-09-23 16:33:24 -04:00

js

fix(web): Cache/Logs error mix-up, store errors, tab fallbacks; remove ~2.5k lines of dead JS (#639)

2026-09-24 17:36:53 -04:00

plugins

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

web_interface

fix(security): refuse unsafe plugin ids, keep secrets private, validate request bodies (#643)

2026-09-28 08:24:43 -04:00

__init__.py

fix(test): repair test infrastructure and mock fixtures (#281)

2026-03-20 15:06:58 -04:00

_api_v3_test_helpers.py

Cover the next tier of untested modules and endpoints, and fix the 43 bugs that surfaced (#459)

2026-08-21 11:16:52 -04:00

conftest.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_adaptive_images.py

feat: adaptive layout system — size-aware regions, crisp font ladders, image fitting (#393)

2026-07-12 10:38:52 -04:00

test_adaptive_layout.py

feat: adaptive layout system — size-aware regions, crisp font ladders, image fitting (#393)

2026-07-12 10:38:52 -04:00

test_api_helper.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_api_v3_bundled_fonts_protected.py

fix(security): refuse unsafe plugin ids, keep secrets private, validate request bodies (#643)

2026-09-28 08:24:43 -04:00

test_api_v3_calendar_credentials.py

Cover the next tier of untested modules and endpoints, and fix the 43 bugs that surfaced (#459)

2026-08-21 11:16:52 -04:00

test_api_v3_display_hardware.py

fix(security): refuse unsafe plugin ids, keep secrets private, validate request bodies (#643)

2026-09-28 08:24:43 -04:00

test_api_v3_display_modes.py

feat(starlark,on-demand): the third-party fixes worth taking, plus a Home Assistant MQTT bridge (#538)

2026-09-08 08:34:52 -04:00

test_api_v3_font_upload_size.py

refactor(api-v3): split the 10,469-line blueprint into a package (#553)

2026-09-11 10:07:38 -04:00

test_api_v3_health.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_api_v3_lazy_plugin_discovery.py

refactor(web): delete dead routes, JS files and duplicate definitions (#609)

2026-09-23 12:36:53 -04:00

test_api_v3_non_finite_numbers.py

fix(web): reject non-finite JSON numbers instead of raising (#497)

2026-08-23 11:44:23 -04:00

test_api_v3_on_demand_restart.py

refactor(web): delete dead routes, JS files and duplicate definitions (#609)

2026-09-23 12:36:53 -04:00

test_api_v3_optional_body.py

fix(security): refuse unsafe plugin ids, keep secrets private, validate request bodies (#643)

2026-09-28 08:24:43 -04:00

test_api_v3_partial_main_save.py

fix: settings the display ignored, a memory leak, and the plugin card handler (#605)

2026-09-23 10:29:16 -04:00

test_api_v3_plugin_health_single.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_api_v3_plugin_install_endpoints.py

Cover the next tier of untested modules and endpoints, and fix the 43 bugs that surfaced (#459)

2026-08-21 11:16:52 -04:00

test_api_v3_plugin_toggle_errors.py

fix: settings the display ignored, a memory leak, and the plugin card handler (#605)

2026-09-23 10:29:16 -04:00

test_api_v3_registry_endpoints.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_api_v3_schedule_error_messages.py

refactor(api-v3): split the 10,469-line blueprint into a package (#553)

2026-09-11 10:07:38 -04:00

test_api_v3_url_map.py

refactor(api-v3): split the 10,469-line blueprint into a package (#553)

2026-09-11 10:07:38 -04:00

test_api_v3_vegas_plugin_lists.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_api_v3_wifi_endpoints.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_async_plugin_updates.py

perf(plugins): run scheduled updates off the render thread (#407)

2026-07-14 08:08:51 -04:00

test_auto_update_setup.py

feat(web): weekly automatic updates with health check and rollback (#581)

2026-09-15 10:58:57 -04:00

test_auto_update_verify.py

refactor(install): generate the web sudoers rules in one place (#622)

2026-09-24 15:51:14 -04:00

test_auto_update.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_background_data_service_espn_ranges.py

perf(sports): fetch ESPN date chunks concurrently (#596)

2026-09-18 09:56:50 -04:00

test_background_data_service.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_background_fetch_dedupe.py

fix(memory): join an in-flight fetch instead of starting a duplicate (#503)

2026-08-26 10:03:43 -04:00

test_background_payload_release.py

fix(background): release the payload after every callback, not after each one (#509)

2026-09-01 09:54:04 -04:00

test_backup_manager.py

fix(security): refuse unsafe plugin ids, keep secrets private, validate request bodies (#643)

2026-09-28 08:24:43 -04:00

test_base_odds_manager.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_base_plugin_duration.py

Follow-ups from #441: secret-helper migration, ten more bug fixes, and coverage for every remaining untested module (#444)

2026-08-07 16:17:11 -04:00

test_base_plugin_styles.py

feat(core): one per-element display-customization framework, wired into the web UI (#566)

2026-09-13 11:53:50 -04:00

test_bdf_font.py

refactor(fonts): one BDF loader and one BDF rasterizer (#627)

2026-09-24 15:51:53 -04:00

test_cache_cleanup_thread_ownership.py

fix(cache): one cleanup thread per cache directory, not per manager (#453)

2026-08-12 08:42:56 -04:00

test_cache_manager_memory_tier.py

refactor(cache): remove the cache layer's duplicate cleanup and dead lookups (#613)

2026-09-23 12:54:07 -04:00

test_cache_manager.py

fix: keep low-memory boards reachable under load (#464)

2026-08-19 12:28:22 -04:00

test_cache_nonfinite_floats.py

perf(scroll): pace frames to the panel — 44→100 fps, stalls 14% → 0.02% (#523)

2026-09-07 13:37:54 -04:00

test_cache_orphan_temp_sweep.py

fix(cache): collect the temp files abandoned writes leave behind (#452)

2026-08-12 08:40:07 -04:00

test_cache_shared_group.py

fix(cache): web UI can read what the display service caches again (#593)

2026-09-17 12:38:39 -04:00

test_cache_stale_header.py

perf(cache): tell a stale record from its header instead of parsing it (#633)

2026-09-24 15:50:50 -04:00

test_cache_strategy_intervals.py

refactor(cache): remove the cache layer's duplicate cleanup and dead lookups (#613)

2026-09-23 12:54:07 -04:00

test_cache_ttl_honoured.py

fix(cache): make the ttl parameter actually control expiry (#450)

2026-08-11 14:14:25 -04:00

test_checkbox_group_stale_values.py

fix(web): stop checkbox groups posting back options they cannot show (#465)

2026-08-19 17:40:52 -04:00

test_color_picker_widget.py

fix(web): harden, polish and optimize the web UI per the Sept 2026 audit (#568)

2026-09-14 09:42:24 -04:00

test_common_is_hardware_free.py

refactor: remove the skin system and the unused src/base_classes package (#615)

2026-09-23 16:33:24 -04:00

test_compatibility.py

Test suite overhaul + fixes for the three bugs it uncovered (#441)

2026-08-07 10:17:30 -04:00

test_config_durable_writes.py

fix(config): write config.json through one durable atomic writer (#611)

2026-09-23 12:52:50 -04:00

test_config_load_cache.py

perf(config): mtime-signature fast path for load_config (#410)

2026-07-14 08:49:43 -04:00

test_config_main_redacts_secrets.py

refactor(api-v3): split the 10,469-line blueprint into a package (#553)

2026-09-11 10:07:38 -04:00

test_config_manager_secrets.py

fix(config): load config_secrets.json on hosts without os.geteuid (#590)

2026-09-16 17:12:18 -04:00

test_config_manager.py

Codebase audit: fix shipping bugs, remove verified-dead code, repair doc drift, add regression guards (#438)

2026-08-06 14:04:23 -04:00

test_config_service.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_config_validation_edge_cases.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_core_config_key_adopters.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_core_config_keys.py

fix(web): auto_update and other core settings are not orphaned plugins (#589)

2026-09-15 18:19:39 -04:00

test_core_owned_config_keys.py

fix(plugins): core's own config keys no longer flag plugins as degraded (#434)

2026-08-04 13:46:28 -04:00

test_core_version_freshness.py

fix(store): read the core version from disk, not from a stale import (#518)

2026-09-03 16:06:40 -04:00

test_deprecation.py

feat: deprecate unused plugin-facing methods for removal in 3.7.0 (#610)

2026-09-23 12:44:55 -04:00

test_device_location.py

fix(starlark): blank app locations use the device location, not San Francisco (#617)

2026-09-23 16:48:02 -04:00

test_discovery_path_contract.py

refactor(plugins): one plugin-directory resolver (#623)

2026-09-24 15:52:52 -04:00

test_display_controller_cleanup.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_display_controller_optimizations.py

fix: settings the display ignored, a memory leak, and the plugin card handler (#605)

2026-09-23 10:29:16 -04:00

test_display_controller_plugin_toggle.py

fix(display): retry a plugin that is enabled but failed to load (#495)

2026-08-23 11:43:39 -04:00

test_display_controller_schedule.py

Follow-ups from #441: secret-helper migration, ten more bug fixes, and coverage for every remaining untested module (#444)

2026-08-07 16:17:11 -04:00

test_display_controller_settings.py

fix: settings the display ignored, a memory leak, and the plugin card handler (#605)

2026-09-23 10:29:16 -04:00

test_display_controller_shutdown_and_state.py

fix: six bugs found testing main on a real Pi (#641)

2026-09-27 18:13:49 -04:00

test_display_controller_startup_validation.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_display_controller_vegas_tick.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_display_controller.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_display_dirty_tracking.py

fix(vegas): smooth Vegas scroll pacing -- whole pixels per refresh, measured refresh, off-thread preview writes (#628)

2026-09-24 19:38:22 -04:00

test_display_double_parity.py

perf(scroll): pace frames to the panel — 44→100 fps, stalls 14% → 0.02% (#523)

2026-09-07 13:37:54 -04:00

test_display_geometry.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_display_manager_logging.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_display_manager.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_display_pending_changes.py

fix(vegas): smooth Vegas scroll pacing -- whole pixels per refresh, measured refresh, off-thread preview writes (#628)

2026-09-24 19:38:22 -04:00

test_display_preview.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_doc_links.py

Codebase audit: fix shipping bugs, remove verified-dead code, repair doc drift, add regression guards (#438)

2026-08-06 14:04:23 -04:00

test_dynamic_team_resolver.py

Follow-ups from #441: secret-helper migration, ten more bug fixes, and coverage for every remaining untested module (#444)

2026-08-07 16:17:11 -04:00

test_element_style.py

test(element-style): cover the stateless element_color clamp path (#576)

2026-09-14 13:27:10 -04:00

test_element_visibility_align_scale.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_enum_option_labels.py

feat(web): let schemas label enum dropdown options (#442)

2026-08-07 13:27:20 -04:00

test_error_aggregator.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_error_handling.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_error_snapshot_cross_process.py

fix(errors): serve /api/v3/errors/* from the display service; add a Plugin errors panel (#614)

2026-09-23 14:32:02 -04:00

test_espn_dates.py

perf(sports): fetch ESPN date chunks concurrently (#596)

2026-09-18 09:56:50 -04:00

test_fix_web_permissions_rehardens.py

fix(security): re-harden root sudo helpers; installer fixes; ARCHITECTURE and PERMISSIONS docs (#640)

2026-09-24 17:31:41 -04:00

test_font_manager.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_font_pixel_grid.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_font_usage.py

feat(web): show which plugins use each font; warn before deleting one (#619)

2026-09-23 16:50:42 -04:00

test_frame_timing.py

feat(perf): frame timing for every presented frame, a soak tool, a render bench and a stall watchdog (#629)

2026-09-24 19:38:49 -04:00

test_git_pull_resolution.py

consolidate(web): credential exposure, secret loss, and the update path (#485)

2026-08-21 14:30:29 -04:00

test_harness_empty_claimed.py

fix: ten defects found validating the whole plugin fleet on hardware (#534)

2026-09-07 13:37:38 -04:00

test_harness_fill.py

feat: adaptive layout system — size-aware regions, crisp font ladders, image fitting (#393)

2026-07-12 10:38:52 -04:00

test_health_write_churn.py

consolidate(perf): cut SD writes, log volume, and metrics churn (#486)

2026-08-21 15:50:55 -04:00

test_http_headers.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_initial_update_budget.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_initializing_screen.py

fix(startup): bound the initial plugin update so the panel lights sooner (#456)

2026-08-12 14:58:05 -04:00

test_install_lowmem.py

test(install): stop assuming pytest's tmp_path is on disk (#492)

2026-08-23 11:42:51 -04:00

test_install_preserves_existing.py

feat(store): refuse to install a plugin that needs a newer core (re-target of #429) (#431)

2026-08-03 16:52:42 -04:00

test_install_reboot_is_last.py

fix(security): re-harden root sudo helpers; installer fixes; ARCHITECTURE and PERMISSIONS docs (#640)

2026-09-24 17:31:41 -04:00

test_install_rgb_checkout.py

fix(install): build rgbmatrix on ARMv6 Pi Zero / Pi 1, and stop locking users out of the submodule (#577)

2026-09-14 17:38:17 -04:00

test_journald_log_priority.py

consolidate(perf): cut SD writes, log volume, and metrics churn (#486)

2026-08-21 15:50:55 -04:00

test_js_unit_suites.py

fix: settings the display ignored, a memory leak, and the plugin card handler (#605)

2026-09-23 10:29:16 -04:00

test_ledpi_script_fixes.py

fix: six bugs found testing main on a real Pi (#641)

2026-09-27 18:13:49 -04:00

test_legacy_boolean_config.py

fix(web): plugin settings form shows schema defaults for unsaved keys (#597)

2026-09-18 11:09:25 -04:00

test_live_status_fields.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_live_update_cadence_integration.py

fix(plugins): let a plugin ask to be polled faster while it has live content (#555)

2026-09-11 08:41:58 -04:00

test_loader_compat_warning.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_logging_config.py

test(logging): stop the location assertion matching the clock (#496)

2026-08-23 11:44:00 -04:00

test_logo_downloader.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_logo_helper.py

fix(logos): one hardened logo download path; shared, real HTTP headers (#612)

2026-09-23 12:58:11 -04:00

test_matrix_support.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_metrics_cache_unknown_fields.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_mqtt_bridge_config_endpoint.py

feat(tools): MQTT bridge and Pixlet editor, ported onto the api_v3 split (#554)

2026-09-11 11:32:12 -04:00

test_mqtt_bridge.py

feat(starlark,on-demand): the third-party fixes worth taking, plus a Home Assistant MQTT bridge (#538)

2026-09-08 08:34:52 -04:00

test_odds_request_budget.py

fix(odds): identify the odds requests to ESPN (#451)

2026-08-11 16:10:56 -04:00

test_offscreen_rendering.py

feat(vegas): render plugin content off the render thread, and keep it off the GIL when the panel needs it (#630)

2026-09-24 19:57:03 -04:00

test_on_demand_mailbox.py

fix: ten defects found validating the whole plugin fleet on hardware (#534)

2026-09-07 13:37:38 -04:00

test_on_demand_pinning_and_restart.py

feat(starlark,on-demand): the third-party fixes worth taking, plus a Home Assistant MQTT bridge (#538)

2026-09-08 08:34:52 -04:00

test_onboarding_checklist.py

fix(web): verify the onboarding timezone step, don't compare it to the default (#462)

2026-08-19 12:49:46 -04:00

test_one_shot_retry.py

fix(install): make one-shot retry() retry, and drop root grants on user files (#606)

2026-09-23 10:34:20 -04:00

test_pages_v3_partials.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_pages_v3_path_guards.py

security: triage the CodeQL backlog — 129 alerts, three of them live (#561)

2026-09-11 15:32:03 -04:00

test_path_traversal_guards.py

refactor(web): delete dead routes, JS files and duplicate definitions (#609)

2026-09-23 12:36:53 -04:00

test_permission_utils.py

fix(config): load config_secrets.json on hosts without os.geteuid (#590)

2026-09-16 17:12:18 -04:00

test_pi5_matrix_support.py

fix(web): accept every panel size and row address type the rgbmatrix library does (#586)

2026-09-15 19:17:48 -04:00

test_pixlet_download.py

fix(pixlet): resolve the release tag correctly when downloading (#461)

2026-08-17 15:35:02 -04:00

test_pixlet_renderer_contract.py

feat(starlark,on-demand): the third-party fixes worth taking, plus a Home Assistant MQTT bridge (#538)

2026-09-08 08:34:52 -04:00

test_plugin_compatibility_gate.py

fix(store): land the install_from_url gate, which never reached main (#511)

2026-09-02 09:51:27 -04:00

test_plugin_config_preparation.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_plugin_dirs.py

refactor(plugins): one plugin-directory resolver (#623)

2026-09-24 15:52:52 -04:00

test_plugin_discovery_reports_skips.py

fix(plugins): say when discovery skips a directory (#489)

2026-08-21 16:19:33 -04:00

test_plugin_dynamic_update_interval.py

fix(plugins): let a plugin ask to be polled faster while it has live content (#555)

2026-09-11 08:41:58 -04:00

test_plugin_health.py

fix: keep low-memory boards reachable under load (#464)

2026-08-19 12:28:22 -04:00

test_plugin_loader.py

fix(plugins): replace dependency marker files with a real satisfaction check (#390)

2026-07-11 08:55:50 -04:00

test_plugin_loading_failures.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_plugin_manager_discovered_ids.py

fix(display): retry a plugin that is enabled but failed to load (#495)

2026-08-23 11:43:39 -04:00

test_plugin_manager_reload.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_plugin_manager_schema_soft.py

feat: activate dormant plugin health/metrics subsystem and surface it in the web UI (#388)

2026-07-09 07:54:18 -04:00

test_plugin_state_transition_count.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_plugin_system_legacy_flags.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_plugin_system.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_plugin_update_reservation.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_reconciliation_phantom_plugins.py

fix(web): auto_update and other core settings are not orphaned plugins (#589)

2026-09-15 18:19:39 -04:00

test_reconciliation_status_endpoint.py

fix(web): auto_update and other core settings are not orphaned plugins (#589)

2026-09-15 18:19:39 -04:00

test_redaction.py

fix(redaction): make credential redaction linear, not quadratic (#631)

2026-09-24 15:49:51 -04:00

test_registry_id_resolution.py

fix(backup): make a restored device match the one that was backed up (#439)

2026-08-07 13:02:59 -04:00

test_render_gate.py

feat(vegas): render plugin content off the render thread, and keep it off the GIL when the panel needs it (#630)

2026-09-24 19:57:03 -04:00

test_repo_urls.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_resource_monitor.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_retired_plugin_config_keys.py

refactor: remove the skin system and the unused src/base_classes package (#615)

2026-09-23 16:33:24 -04:00

test_safe_pip_install_allowlist.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_saved_repositories.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_scan_order.py

feat(display): compensate for the panel's scan order while scrolling (#634)

2026-09-24 19:47:44 -04:00

test_schema_manager_device_location.py

fix(config): make the device location the default for plugin location fields (#490)

2026-08-21 16:22:48 -04:00

test_schema_manager_merge.py

Test suite overhaul + fixes for the three bugs it uncovered (#441)

2026-08-07 10:17:30 -04:00

test_schema_manager.py

fix: Codacy security fixes, CVE dependency bumps, and code quality cleanup (#331)

2026-05-15 10:19:55 -04:00

test_scroll_config.py

perf(scroll): pace frames to the panel — 44→100 fps, stalls 14% → 0.02% (#523)

2026-09-07 13:37:54 -04:00

test_scroll_helper_continuous.py

Vegas mode: reclaim dead space and pace the rotation (#423)

2026-07-31 09:40:38 -04:00

test_scroll_helper.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_scroll_speeds_script.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_snapshot_policy.py

perf(display): snapshot mirror — viewer gating, digest skip, keepalive (#404)

2026-07-13 09:28:30 -04:00

test_sports_card.py

fix: clamp colour components, and let the style editor actually take over (#569)

2026-09-14 12:48:36 -04:00

test_sports_game_renderer.py

feat(core): one per-element display-customization framework, wired into the web UI (#566)

2026-09-13 11:53:50 -04:00

test_sports_helpers.py

feat(common): sports_helpers — the helpers all nine scoreboards carry identical copies of (#583)

2026-09-15 15:32:21 -04:00

test_sports_scroll.py

fix: September 16 core audit — partial saves, asset path safety, auto-update, display settings the library refuses, scroll speed (#595)

2026-09-17 16:37:29 -04:00

test_sports_shared.py

fix(sports): stop the idle back-off sleeping through a kickoff (#599)

2026-09-20 18:25:33 -04:00

test_sports_sunset_matrix.py

test(sports): pin the four-case sunset matrix before B6 runs (#505)

2026-08-26 11:25:10 -04:00

test_sports_twins.py

refactor(sports): merge the sports_shared/sports_card twins that behave identically (#626)

2026-09-24 15:51:35 -04:00

test_starlark_apps_dir_ownership.py

fix(starlark): stop the root display service locking the web UI out of starlark-apps (#604)

2026-09-23 16:33:12 -04:00

test_starlark_display_contract.py

refactor(api-v3): split the 10,469-line blueprint into a package (#553)

2026-09-11 10:07:38 -04:00

test_startup_validator.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_store_install_default_branch.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_store_manager_caches.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_store_non_plugin_entries.py

refactor: remove the skin system and the unused src/base_classes package (#615)

2026-09-23 16:33:24 -04:00

test_store_plugin_id_traversal.py

fix(security): refuse unsafe plugin ids, keep secrets private, validate request bodies (#643)

2026-09-28 08:24:43 -04:00

test_store_update_non_git_remote.py

fix(plugins): store and plugin-manager bugs; tidy src/plugin_system (#635)

2026-09-24 17:32:02 -04:00

test_store_update_rollback.py

fix(store): plugin updates keep the old install until the new one succeeds (#405)

2026-07-13 09:32:37 -04:00

test_sudo_allowlist_covers_calls.py

fix(security): re-harden root sudo helpers; installer fixes; ARCHITECTURE and PERMISSIONS docs (#640)

2026-09-24 17:31:41 -04:00

test_sudoers_is_validated.py

fix(security): re-harden root sudo helpers; installer fixes; ARCHITECTURE and PERMISSIONS docs (#640)

2026-09-24 17:31:41 -04:00

test_sudoers_noexec_on_pagers.py

refactor(install): generate the web sudoers rules in one place (#622)

2026-09-24 15:51:14 -04:00

test_sync_manager.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_system_action_sudo_diagnosis.py

fix(web): say when a system action failed for want of passwordless sudo (#560)

2026-09-11 08:45:40 -04:00

test_system_status_available_memory.py

fix(web): uniqueItems saves, /health count, Vegas order wipe; one list-repair helper (#638)

2026-09-24 17:35:49 -04:00

test_systemd_malloc_arenas.py

harden: cap malloc arenas, warn on unit drift, and grant the portal's sudo commands (#476)

2026-08-21 14:29:45 -04:00

test_systemd_unit_drift.py

fix(security): re-harden root sudo helpers; installer fixes; ARCHITECTURE and PERMISSIONS docs (#640)

2026-09-24 17:31:41 -04:00

test_template_targets.py

Codebase audit: fix shipping bugs, remove verified-dead code, repair doc drift, add regression guards (#438)

2026-08-06 14:04:23 -04:00

test_testing_mocks.py

fix(testing): add MockCacheManager.get_cached_data_with_strategy/save_cache (#409)

2026-07-14 08:33:08 -04:00

test_text_helper.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00

test_uninstall_and_reconcile_endpoint.py

fix(security): refuse unsafe plugin ids, keep secrets private, validate request bodies (#643)

2026-09-28 08:24:43 -04:00

test_update_change_reporting.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_update_check_reports_failure.py

consolidate(web): credential exposure, secret loss, and the update path (#485)

2026-08-21 14:30:29 -04:00

test_update_prompts_restart.py

consolidate(web): credential exposure, secret loss, and the update path (#485)

2026-08-21 14:30:29 -04:00

test_vegas_config.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_vegas_continuous_refresh.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_vegas_coordinator_config.py

fix: settings the display ignored, a memory leak, and the plugin card handler (#605)

2026-09-23 10:29:16 -04:00

test_vegas_coordinator_iteration.py

fix(vegas): smooth Vegas scroll pacing -- whole pixels per refresh, measured refresh, off-thread preview writes (#628)

2026-09-24 19:38:22 -04:00

test_vegas_crisp_pacing.py

fix(vegas): smooth Vegas scroll pacing -- whole pixels per refresh, measured refresh, off-thread preview writes (#628)

2026-09-24 19:38:22 -04:00

test_vegas_density.py

fix(vegas): smooth Vegas scroll pacing -- whole pixels per refresh, measured refresh, off-thread preview writes (#628)

2026-09-24 19:38:22 -04:00

test_vegas_fps_health.py

perf(vegas): report the frame rate when it is worth reporting (#487)

2026-08-23 11:42:33 -04:00

test_vegas_frame_percentile.py

feat(vegas): make scroll stutter visible, and catch it in the act (#454)

2026-08-12 14:06:32 -04:00

test_vegas_geometry.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_vegas_live_weighting.py

feat(vegas): let live content keep its place in the ticker (#457)

2026-08-13 17:02:36 -04:00

test_vegas_log_volume.py

consolidate(perf): cut SD writes, log volume, and metrics churn (#486)

2026-08-21 15:50:55 -04:00

test_vegas_plugin_adapter.py

Fix inconsistent Vegas scroll transition gaps caused by plugin-baked padding (#384)

2026-07-08 09:43:13 -04:00

test_vegas_render_pipeline_recompose.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_vegas_stream_log_volume.py

fix(display): Vegas teardown and 240s default; remove dead Vegas buffer code (#637)

2026-09-24 17:37:15 -04:00

test_vegas_switch_interval.py

feat(vegas): render plugin content off the render thread, and keep it off the GIL when the panel needs it (#630)

2026-09-24 19:57:03 -04:00

test_version_comparison_consistency.py

refactor: remove the skin system and the unused src/base_classes package (#615)

2026-09-23 16:33:24 -04:00

test_version_consistency.py

refactor: delete dead Python code in the core (and stop storing Wi-Fi passwords) (#608)

2026-09-23 12:36:26 -04:00

test_web_api.py

refactor(web): delete dead routes, JS files and duplicate definitions (#609)

2026-09-23 12:36:53 -04:00

test_web_autostart_default.py

fix(web): default web_display_autostart to true, as the installer already does (#556)

2026-09-10 17:42:00 -04:00

test_web_display_state_freshness.py

refactor(web): delete dead routes, JS files and duplicate definitions (#609)

2026-09-23 12:36:53 -04:00

test_web_error_detail.py

refactor(web): one error-response path for api_v3 (#624)

2026-09-24 15:53:19 -04:00

test_web_settings_ui.py

Add settings tooltips and search to the web UI (#387)

2026-07-09 09:22:24 -04:00

test_web_smoke.py

fix: settings the display ignored, a memory leak, and the plugin card handler (#605)

2026-09-23 10:29:16 -04:00

test_web_static_audit.py

fix(web): harden, polish and optimize the web UI per the Sept 2026 audit (#568)

2026-09-14 09:42:24 -04:00

test_web_sudoers_installers_agree.py

refactor(install): generate the web sudoers rules in one place (#622)

2026-09-24 15:51:14 -04:00

test_whole_pixel_stepping.py

fix(scroll): advance whole pixels per frame, not per wall-clock second (#545)

2026-09-09 16:25:45 -04:00

test_widget_scripts.py

fix(web): harden, polish and optimize the web UI per the Sept 2026 audit (#568)

2026-09-14 09:42:24 -04:00

test_wifi_check_state.py

fix(wifi): make Connect work from the setup AP (#571)

2026-09-14 12:40:41 -04:00

test_wifi_connect_argument_safety.py

fix(wifi): make Connect work from the setup AP (#571)

2026-09-14 12:40:41 -04:00

test_wifi_manager_ap.py

fix: /errors stack traces, Wi-Fi disconnect and save, plugin fonts, API cache TTL (#636)

2026-09-24 17:32:29 -04:00