pushframe 5.0.3__tar.gz → 5.0.4__tar.gz

{pushframe-5.0.3 → pushframe-5.0.4}/.planning/MILESTONES.md

@@ -1,5 +1,30 @@
 # Milestones
 
+## v5.0 — Distribution & Rename: pushframe packages (Shipped: 2026-09-29)
+
+**Phases completed:** 3 phases (20-22), 4 plans — the first milestone
+about *shipping the tool itself* rather than its features.
+
+**Key accomplishments:**
+
+| Phase | Delivered | Proof |
+|-------|-----------|-------|
+| 20 — Rename & repo switch | `auraframes`→`pushframe` (module, binary, config migration), env `PUSHFRAME_*` primary, standalone repo `coredmp95/pushframe` (not a fork), MIT LICENSE + provenance | 407 tests green through the rename; live migration validated; name cleared on PyPI + trademark-adjacency checked |
+| 21 — Debian + APT | Hermetic `.deb` (embedded CPython 3.14, lintian 0E/0W, clean removal), signed APT repo live on GitHub Pages, container journeys for both channels | bytecode-ownership defect caught by our own container test and fixed for every user; live-URL journey exit 0 |
+| 22 — PyPI + releases | Trusted publishing (OIDC, zero PyPI tokens), tag-triggered release workflow, `--version` single-sourced, OPERATOR-STEPS + CHANGELOG | v5.0.2 run all-green 5/5 jobs; v5.0.3 carries the Changelog URL |
+
+**Shipped releases:** 5.0.0 → 5.0.1 (page metadata) → 5.0.2 (first
+pipeline-complete) → 5.0.3 (changelog URL) — each on PyPI + TestPyPI +
+APT + GitHub Releases simultaneously. First real deployment:
+venus.coredmp.net via the signed APT repo (human-driven: keyring →
+sources → install).
+
+**Known gaps carried forward:** 5.0.0 remains on PyPI (empty page,
+immutable) — yank candidate; `AURA_*` env vars in a one-release
+deprecation window; credentials still live in env vars/.env (v5.1's
+charter: config wizard + token-first sessions).
+
+
 ## v4.0 Local Google Photos Album Sync (Shipped: 2026-09-29)
 
 **Phases completed:** 4 phases (16-19), 10 plans, offline suite 349 → **401 tests**

{pushframe-5.0.3 → pushframe-5.0.4}/.planning/PROJECT.md

@@ -364,3 +364,5 @@ sequences write-path reliability first, then Google account linking → album di
 album-to-frame mirroring via a pruned local cache, then the carried debt. Biggest open
 unknown: whether Google's post-March-2025 Photos API still permits enumerating a user's own
 albums, or whether album selection has to go through the Picker API.*
+
+**Current Milestone:** v5.1 — Operations: Config, Sessions, Multi-frame & Scheduling (started 2026-09-29)

pushframe-5.0.4/.planning/REQUIREMENTS.md

@@ -0,0 +1,118 @@
+# Requirements: pushframe — v5.1 Operations: Config, Sessions, Multi-frame & Scheduling
+
+**Defined:** 2026-09-29
+**Core Value:** `pushframe` becomes *operable unattended*: configuration is a
+conversation (`pushframe config`) instead of env-var archaeology, the Aura
+password never touches disk (token-first sessions), mirrors run on a schedule
+without root (systemd user timers), one album can mirror to every frame
+(named mappings), and every command that needs a machine prerequisite fails
+with the remedy instead of a traceback.
+
+## Requirements
+
+### Config wizard (CFG)
+
+- [ ] **CFG-01**: `pushframe config` (interactive) asks for and stores: Aura
+  email, Aura secret, default frame name, and the tool's non-secret settings
+  (default album, write-budget override, debug) — prompts are masked for
+  secrets (getpass-style), values are validated (email shape; login test on
+  request), and the result is written to `~/.config/pushframe/config.json`
+  with mode `0600`. Re-running edits in place (existing values shown
+  redacted, Enter keeps).
+- [ ] **CFG-02**: precedence is `env var > config file > built-in default`
+  everywhere the CLI reads configuration; the env vars keep working exactly
+  as today (deprecation window opened in 5.0.0 stays honored); `pushframe
+  config show` prints the *effective* configuration with secrets redacted
+  and the source of each value (env/file/default).
+- [ ] **CFG-03**: `pushframe config import` migrates an existing `.env`
+  (or exported `PUSHFRAME_*`/`AURA_*` set) into `config.json` without
+  retyping; the command reports what it took from where and never stores
+  what it could resolve from the environment instead.
+- [ ] **CFG-04**: `pushframe config path` prints the config file location;
+  `pushframe config set <key> <value>` / `get <key>` exist for scripts;
+  unknown keys fail with the list of known keys.
+
+### Credential handling (SEC — token-first)
+
+- [ ] **SEC-01**: the Aura password is **never persisted** — not in
+  `config.json`, not in env files the tool writes. `pushframe config`
+  authenticates once, stores the returned `auth_token` (0600) plus the
+  account email, and discards the password when the process exits.
+- [ ] **SEC-02**: every command that needs the API uses the stored token
+  (header auth) and falls back to interactive password login **only** when
+  the token is absent/expired/revoked, after which the new token is
+  persisted; a `--password` / `PUSHFRAME_PASSWORD` override still wins
+  (CI/script path) but is documented as discouraged for humans.
+- [ ] **SEC-03**: `pushframe logout` deletes the stored token (and only the
+  token); token material never appears in logs, output, or the history
+  ledger (existing redaction stays enforced by tests).
+
+### Scheduling (TMR — systemd user)
+
+- [ ] **TMR-01**: `pushframe schedule add <job>` installs a systemd **user**
+  timer + service unit under `~/.config/systemd/user/` for the supported
+  jobs (`google-sync --apply` for a named pair, directory `sync`) with a
+  prompted or `--every` schedule; no root anywhere; `pushframe schedule
+  list` shows installed jobs with next-run times (from `systemctl list-timers`).
+- [ ] **TMR-02**: `pushframe schedule remove <job>` uninstalls cleanly
+  (units + timer state); installed units are named `pushframe-<job>.service/.timer`
+  and never collide with system units.
+- [ ] **TMR-03**: unattended correctness: a scheduled run uses only
+  stored configuration (no prompts), honors SAFE-02's removal threshold
+  (a run that would exceed it **skips and logs** rather than fails the unit),
+  writes a per-job log (`~/.local/state/pushframe/<job>.log`), and the
+  docs cover `loginctl enable-linger` for headless machines (venus).
+
+### Multi-frame (MTF — GSF-01 closed)
+
+- [ ] **MTF-01**: named **album↔frame mappings** live in config: one album
+  may mirror to N frames and one frame may receive from N albums
+  (`pushframe config` manages them; `--pair <name>` selects one,
+  `--all` selects every pair).
+- [ ] **MTF-02**: `google-sync` resolves a pair the same way it resolves the
+  current single pair today (dry-run default, `--apply` gated, SAFE-01..04
+  per pair); **state is per-pair** — the manifest and staging cache are
+  sharded by pair so two pairs never share dedupe memory.
+- [ ] **MTF-03**: the write budget is **account-wide and shared** across
+  pairs within one run (`--all`), preserving SAFE-02 semantics at account
+  level; per-pair reports stay exact (pairs list what they did, and a
+  skipped pair never blocks the others).
+
+### Preflights & error quality (PRF)
+
+- [ ] **PRF-01**: commands with machine prerequisites check them up front
+  and fail with per-item remedies — `google-link` (playwright package,
+  Chrome/Chromium, profile dir) ships in 5.1's first cut (already
+  implemented on master), extended to: `google-sync` (vault present),
+  `schedule` (systemd user session available, `loginctl` linger status),
+  and `sync`/`push` (target dir exists/contains images).
+- [ ] **PRF-02**: no user-facing command may end in an unhandled traceback
+  for a foreseeable condition (missing module, missing browser, missing
+  vault, ambiguous frame, multi-arch notice): each maps to a named,
+  one-screen error with the next action. A test sweep asserts the
+  traceback-free contract for the documented failure modes.
+
+## Non-Goals
+
+| Feature | Reason |
+|---------|--------|
+| OS keyring storage (gnome-keyring/Secret Service) | headless servers (venus) lack a keyring session; file-0600 token is the contract, keyring is a later nicety |
+| Encrypting config.json with a user passphrase | circularity (where does the passphrase live?); token-first removes the high-value secret anyway |
+| Cron support | systemd user timers are the modern path; cron adds a second code path for no new capability |
+| Real deletion exposure on the Google verb | unchanged posture from v2.0/v4.0; hide-not-delete stays |
+| Many-to-many with per-pair schedules | each pair is its own scheduled job — same capability, simpler model |
+
+## Traceability
+
+Every v5.1 requirement maps to exactly one phase; numbering continues from
+Phase 22.
+
+| Requirement | Phase | Status |
+|-------------|-------|--------|
+| CFG-01..04 | Phase 23 | Pending |
+| SEC-01..03 | Phase 24 | Pending |
+| PRF-01..02 | Phase 24 | Pending |
+| MTF-01..03 | Phase 25 | Pending |
+| TMR-01..03 | Phase 25 | Pending |
+
+**Coverage:** v5.1 requirements: 14 total — no orphans, no double-mapping.

pushframe-5.0.4/.planning/ROADMAP.md

@@ -0,0 +1,105 @@
+# pushframe Roadmap — v5.1 Operations: Config, Sessions, Multi-frame & Scheduling
+
+**Defined:** 2026-09-29
+**Ships when:** a fresh machine goes from `apt install pushframe` to a
+scheduled, unattended, multi-frame Google mirror with **zero** hand-edited
+config files and **zero** stored passwords.
+
+## Milestone Goal
+
+Make pushframe *operable* the way it is *installable*: one conversational
+command (`pushframe config`) to set everything up, password-free sessions
+(token-first), `pushframe schedule` for root-less systemd user timers,
+named album↔frame mappings with per-pair mirror state, and preflights that
+always fail with a remedy.
+
+## Phases
+
+### Phase 23: Config Wizard & Precedence (CFG-01..04)
+
+**Goal**: `pushframe config` replaces env-var archaeology — interactive,
+masked, validated, `0600`; env vars keep working; `show` prints effective
+config with sources; `import` swallows an existing `.env`.
+
+**Success Criteria**:
+
+1. On a fresh machine, `pushframe config` → `pushframe status` works with
+   no env vars set at all (file-only path), verified in a clean container.
+2. With env vars set, they override the file — proven by a test that flips
+   both and asserts which value each command sees.
+3. `config show` never prints a secret value (redaction test); `config
+   import` on a real `.env` reproduces the same effective config as the
+   env-var path (golden diff test).
+
+**Depends on**: nothing (master already carries the google-link preflights
+that started this work).
+
+### Phase 24: Token-First Sessions & Preflight Sweep (SEC-01..03, PRF-01..02)
+
+**Goal**: the password is used once at login and never stored; the token
+drives every subsequent command with transparent re-login on expiry; the
+preflight pattern from google-link covers every command's machine
+prerequisites; no foreseeable condition ends in a traceback.
+
+**Success Criteria**:
+
+1. `pushframe config` + login → `~/.config/pushframe/` contains a token,
+   no password, mode 0600 (file-content test).
+2. A token-expiry simulation (mocked 401) transparently re-logins once and
+   retries the request; a second consecutive failure surfaces the login
+   error (no loops).
+3. The traceback-free sweep passes: every documented foreseeable failure
+   mode maps to a named error with a remedy (parametrized test).
+
+**Depends on**: Phase 23 (config file is where the token lives).
+
+### Phase 25: Multi-frame Mappings & systemd User Scheduling (MTF-01..03, TMR-01..03)
+
+**Goal**: GSF-01 and GSF-02 close — named album↔frame pairs (N:M),
+per-pair mirror state with an account-wide shared write budget, and
+`pushframe schedule` installing systemd **user** timers that run pairs
+unattended (SAFE-02 skips-and-logs, per-job logs, linger documented for
+headless hosts like venus).
+
+**Success Criteria**:
+
+1. Two pairs (one album → two frames) sync in one `--all` run, each with
+   its own manifest/cache shard, the shared budget capping the total, and
+   per-pair reports exact (container + fake-API proof).
+2. `schedule add/list/remove` round-trips units in
+   `~/.config/systemd/user/` (unit-content assertions in a container with
+   systemd available); a scheduled google-sync run is prompt-free and
+   logs to `~/.local/state/pushframe/<job>.log`.
+3. SAFE-02 behavior under scheduling: a pair whose plan exceeds the
+   removal threshold is skipped-and-logged, the unit exits 0, and the
+   other pairs still run.
+
+**Depends on**: Phase 24 (scheduled runs read token sessions, not
+passwords; preflights guard scheduled contexts).
+
+## Progress
+
+**Execution Order:** 23 → 24 → 25
+
+| Phase | Plans Complete | Status | Completed |
+|-------|----------------|--------|-----------|
+| 23. Config Wizard & Precedence | 0/? | Not started | - |
+| 24. Token-First Sessions & Preflight Sweep | 0/? | Not started | - |
+| 25. Multi-frame & systemd User Scheduling | 0/? | Not started | - |
+
+## Requirement Coverage (v5.1)
+
+| Phase | Requirements | Count |
+|-------|--------------|-------|
+| 23 | CFG-01..04 | 4 |
+| 24 | SEC-01..03, PRF-01..02 | 5 |
+| 25 | MTF-01..03, TMR-01..03 | 6 |
+| **Total** | | **15 / 15** |
+
+No orphaned requirements; no requirement mapped to more than one phase.
+
+## Backlog
+
+- Yank 5.0.0 from PyPI (empty-page release, superseded by 5.0.3).
+- OS keyring token storage (Secret Service) as an optional backend.
+- Ubuntu 26 runner observation after 2026-10-19 (deb job toolchain).

pushframe-5.0.4/.planning/STATE.md

@@ -0,0 +1,22 @@
+# pushframe — State
+
+**Milestone:** v5.1 — Operations: Config, Sessions, Multi-frame & Scheduling
+**Started:** 2026-09-29
+
+## Current Position
+
+Phase: 23 — Config Wizard & Precedence
+Current Plan: Not started
+Total Plans in Phase: 0
+Status: Ready to plan
+
+## Milestone Roadmap (v5.1, Phases 23-25)
+
+- [ ] Phase 23 — Config Wizard & Precedence (CFG-01..04)
+- [ ] Phase 24 — Token-First Sessions & Preflight Sweep (SEC-01..03, PRF-01..02)
+- [ ] Phase 25 — Multi-frame Mappings & systemd User Scheduling (MTF-01..03, TMR-01..03)
+
+## Completed Milestones
+
+- v4.0 — Local Google Photos Album Sync (2026-09-29)
+- v5.0 — Distribution & Rename: pushframe packages (2026-09-29)

pushframe-5.0.3/.planning/REQUIREMENTS.md → pushframe-5.0.4/.planning/milestones/v5.0-REQUIREMENTS.md

@@ -1,3 +1,12 @@
+# Requirements Archive: v5.0 v5.0
+
+**Archived:** 2026-09-29
+**Status:** SHIPPED
+
+For current requirements, see `.planning/REQUIREMENTS.md`.
+
+---
+
 # Requirements: Aura Frames Python Client — v5.0 Distribution & Rename: pushframe packages
 
 **Defined:** 2026-09-29

pushframe-5.0.4/.planning/state.json

@@ -0,0 +1,32 @@
+{
+  "contract": "1.0.0",
+  "flavor": "core",
+  "milestone": {
+    "version": "v5.1",
+    "name": "Operations: Config, Sessions, Multi-frame & Scheduling",
+    "started": "2026-09-29"
+  },
+  "phases": [
+    {
+      "number": "23",
+      "name": "Config Wizard & Precedence",
+      "status": "pending"
+    },
+    {
+      "number": "24",
+      "name": "Token-First Sessions & Preflight Sweep",
+      "status": "pending"
+    },
+    {
+      "number": "25",
+      "name": "Multi-frame & systemd User Scheduling",
+      "status": "pending"
+    }
+  ],
+  "next": {
+    "command": "/gsd:progress --next",
+    "label": "Advance to the next step",
+    "reason": "Phase 23 of 3 \u00b7 0% \u00b7 ready to plan"
+  },
+  "updated_at": "2026-09-29T13:27:41.229Z"
+}

{pushframe-5.0.3 → pushframe-5.0.4}/CHANGELOG.md

@@ -108,7 +108,53 @@ Milestone summary — see `.planning/MILESTONES.md` for the full retros.
 
 ## [Unreleased]
 
-- Nothing staged yet; next changes land here before the next tag.
+- (v5.1 work will land here)
+
+## [5.0.4] — 2026-09-29
+
+### Fixed
+
+- google-link preflight on the uv-tool install path: remedy for a missing
+  playwright now matches every install shape (`uv tool install
+  'pushframe[google-browser]' --force` for uv tools — `pip install
+  --user` targets the wrong interpreter there); stray duplicate quote in
+  the message fixed.
+
+### Added
+
+- google-link zero-config: dedicated Chrome profile defaults to
+  `~/.config/pushframe/chrome-profile` (created on demand); the env var
+  becomes an override. A near-miss env name (e.g. a truncated
+  `USHFRAME_…`) is called out explicitly instead of looking like "unset".
+- google-link preflight: missing prerequisites (playwright package,
+  Chrome/Chromium) fail with the exact remedy instead of a traceback
+  (`ModuleNotFoundError: playwright` was the whole output before).
+
+### Changed
+
+- `PUSHFRAME_PROBE_CHROME_PROFILE` is no longer required to run
+  `google-link`.
+
+- google-link zero-config: the dedicated Chrome profile defaults to
+  `~/.config/pushframe/chrome-profile` (created on demand); the env var
+  becomes an override. A near-miss env name (e.g. a truncated
+  `USHFRAME_…`) is called out explicitly instead of looking like "unset".
+- google-link preflight: missing prerequisites (playwright package,
+  Chrome/Chromium) now fail with the exact remedy instead of a traceback
+  (`ModuleNotFoundError: playwright` was the whole output before).
+
+### Fixed
+
+- `google-link` preflight on the uv-tool install path: the message for a
+  missing playwright package now matches every install shape (`uv tool
+  install 'pushframe[google-browser]'` for uv tools — `pip install
+  --user` targets the wrong interpreter there), and the leftover
+  duplicate browser-detection line was removed.
+
+### Changed
+
+- `PUSHFRAME_PROBE_CHROME_PROFILE` is no longer required to run
+  `google-link`.
 
 ## [5.0.3] — 2026-09-29
 

{pushframe-5.0.3 → pushframe-5.0.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: pushframe
-Version: 5.0.3
+Version: 5.0.4
 Summary: Unofficial community CLI for Aura Frames digital photo frames (sync a local folder or a Google Photos album; not affiliated with Aura Frames Inc.)
 Project-URL: Homepage, https://github.com/coredmp95/pushframe
 Project-URL: Repository, https://github.com/coredmp95/pushframe

{pushframe-5.0.3 → pushframe-5.0.4}/pushframe/__init__.py

@@ -1,4 +1,4 @@
 # pushframe — unofficial community CLI for Aura Frames (not affiliated).
 # Version single source for the CLI surface (REL-02); pyproject keeps the
 # packaging metadata version and tests/test_version.py enforces lockstep.
-__version__ = "5.0.3"
+__version__ = "5.0.4"

{pushframe-5.0.3 → pushframe-5.0.4}/pushframe/cli.py

@@ -324,12 +324,10 @@ def run_google_link(*, debug: bool = False, bootstrap_fn=None) -> int:
     """
     _configure_cli_logging(debug)
 
-    if not os.environ.get(PROFILE_ENV_VAR, '').strip():
-        print(f'google-link failed: {PROFILE_ENV_VAR} is unset — the daily-driver '
-              f'profile is structurally unreachable; point the env var at a '
-              f'dedicated Chrome profile directory (e.g. ~/.config/pushframe/'
-              f'chrome-profile) and re-run (T-16-06)')
-        return 1
+    # v5.1: no env prerequisite here — bootstrap._require_profile() owns the
+    # precedence (override > legacy > built-in default, created on demand)
+    # and raises a helpful BootstrapError (near-miss names included) that the
+    # handler below prints verbatim.
 
     # Re-link notice (LGS-02): same command refreshes an existing session.
     # Vault read routes through from_vault (denylist-sanctioned); a dead or

{pushframe-5.0.3 → pushframe-5.0.4}/pushframe/google/bootstrap.py

@@ -42,18 +42,43 @@ class BootstrapError(RuntimeError):
     """Bootstrap prerequisites missing or the login never completed."""
 
 
+DEFAULT_PROFILE_DIR = Path.home() / ".config" / "pushframe" / "chrome-profile"
+
+
 def _require_profile() -> Path:
-    """Resolve the dedicated profile directory; fail loud when unset (T-16-06)."""
+    """Resolve the dedicated profile directory (v5.1 simplification).
+
+    Precedence: PUSHFRAME_PROBE_CHROME_PROFILE > AURA_PROBE_CHROME_PROFILE
+    (legacy) > the built-in default ~/.config/pushframe/chrome-profile —
+    created on demand. The env var is now an OVERRIDE, not a prerequisite:
+    a fresh machine gets google-link with zero configuration.
+
+    A near-miss env name (e.g. USHFRAME_PROBE_CHROME_PROFILE — a truncated
+    prefix, seen in the wild on venus) is called out explicitly, because a
+    silent typo looks identical to "unset".
+    """
     profile = os.environ.get(PROFILE_ENV_VAR, "").strip()
     if not profile:
         profile = os.environ.get(_LEGACY_PROFILE_ENV_VAR, "").strip()
     if not profile:
-        raise BootstrapError(
-            f"{PROFILE_ENV_VAR} is unset — the daily-driver profile is "
-            f"structurally unreachable; point the env var at a dedicated "
-            f"profile directory (e.g. ~/.config/pushframe/chrome-profile) "
-            f"and re-run (T-16-06)"
-        )
+        # Near-miss detection: subsequence match (USHFRAME_… = PUSHFRAME_…
+        # minus its first letter — a real-world typo, seen on venus) catches
+        # truncated/scrambled names that a plain substring check misses.
+        target = PROFILE_ENV_VAR.lower()
+        for name, value in os.environ.items():
+            low = name.lower()
+            if name == PROFILE_ENV_VAR or not low.endswith(target[4:]):
+                continue
+            it = iter(target)
+            if all(ch in it for ch in low):  # low is a subsequence of target
+                raise BootstrapError(
+                    f"env var '{name}' looks like a misspelled "
+                    f"{PROFILE_ENV_VAR} (value: {value}) — fix the name in "
+                    f"your shell profile, or unset it to use the default "
+                    f"profile at {DEFAULT_PROFILE_DIR}"
+                )
+        DEFAULT_PROFILE_DIR.mkdir(parents=True, exist_ok=True)
+        return DEFAULT_PROFILE_DIR
     path = Path(profile).expanduser().resolve()
     path.mkdir(parents=True, exist_ok=True)
     return path
@@ -68,6 +93,35 @@ def run_bootstrap(*, auto: bool = False) -> dict:
     {vault_path, cookie_count, auth_markers} — never cookie values.
     """
     profile_dir = _require_profile()
+
+    # Preflight (v5.1): fail with the REMEDY, not a traceback. Order matters —
+    # the python package first, then a browser able to drive.
+    missing = []
+    try:
+        import playwright  # noqa: F401
+    except ImportError:
+        missing.append(
+            "the 'playwright' python package — install it into the SAME"
+            " interpreter as pushframe: uv-tool users: "
+            "uv tool install 'pushframe[google-browser]' --force; "
+            ".deb users: pip install --user playwright"
+        )
+    has_chrome = shutil.which("google-chrome") is not None
+    has_chromium = shutil.which("chromium") is not None or shutil.which("chromium-browser") is not None
+    if not has_chrome and not has_chromium:
+        missing.append(
+            "a browser for Playwright to drive — install Google Chrome "
+            "(recommended; channel=chrome avoids bot flags), or run "
+            "'playwright install chromium' after installing the package"
+        )
+    if missing:
+        remedy = "\n  - ".join(missing)
+        raise BootstrapError(
+            "google-link prerequisites missing on this machine:\n"
+            f"  - {remedy}\n"
+            "Then re-run: pushframe google-link"
+        )
+
     from playwright.sync_api import sync_playwright  # lazy, in-function import ONLY
 
     print(f"dedicated profile: {profile_dir}")
@@ -77,7 +131,6 @@ def run_bootstrap(*, auto: bool = False) -> dict:
     # engine already treats it as an ordinary browser); otherwise bundled
     # Chromium with automation switches masked so navigator.webdriver stays
     # false.
-    has_chrome = shutil.which("google-chrome") is not None
     launch_kwargs = dict(user_data_dir=str(profile_dir), headless=False,
                          args=["--disable-blink-features=AutomationControlled"])
     if has_chrome:

{pushframe-5.0.3 → pushframe-5.0.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "pushframe"
-version = "5.0.3"
+version = "5.0.4"
 description = "Unofficial community CLI for Aura Frames digital photo frames (sync a local folder or a Google Photos album; not affiliated with Aura Frames Inc.)"
 readme = "README.md"
 requires-python = ">=3.14"

{pushframe-5.0.3 → pushframe-5.0.4}/tests/test_cli_google_link.py

@@ -40,13 +40,38 @@ def test_google_link_success_with_injected_bootstrap(monkeypatch, capsys):
     assert FAKE_COOKIE_VALUE not in out
 
 
-def test_google_link_missing_profile_fails_loud(monkeypatch, capsys):
-    monkeypatch.delenv("PUSHFRAME_PROBE_CHROME_PROFILE", raising=False)
-    rc = run_google_link(bootstrap_fn=_fake_bootstrap())
-    assert rc == 1
-    out = capsys.readouterr().out
-    assert "PUSHFRAME_PROBE_CHROME_PROFILE" in out
-    assert "structurally unreachable" in out
+def test_require_profile_zero_config_uses_default(tmp_path, monkeypatch):
+    """v5.1 contract: the profile env var is an OVERRIDE, not a prerequisite.
+    With nothing set, _require_profile resolves to the built-in default
+    (~/.config/pushframe/chrome-profile) and CREATES it — a fresh machine
+    needs no shell configuration."""
+    for name in ("PUSHFRAME_PROBE_CHROME_PROFILE", "AURA_PROBE_CHROME_PROFILE",
+                 "USHFRAME_PROBE_CHROME_PROFILE"):
+        monkeypatch.delenv(name, raising=False)
+    from pushframe.google import bootstrap as bs
+    monkeypatch.setattr(bs, "DEFAULT_PROFILE_DIR", tmp_path / "chrome-profile")
+    resolved = bs._require_profile()
+    assert resolved == tmp_path / "chrome-profile"
+    assert resolved.is_dir()
+
+
+def test_require_profile_near_miss_env_name_is_called_out(tmp_path, monkeypatch):
+    """A truncated prefix (USHFRAME_PROBE_CHROME_PROFILE, seen in the wild
+    on venus) must not look like a plain 'unset': the error names the
+    suspect variable and offers the default-profile escape hatch."""
+    for name in ("PUSHFRAME_PROBE_CHROME_PROFILE", "AURA_PROBE_CHROME_PROFILE"):
+        monkeypatch.delenv(name, raising=False)
+    from pushframe.google import bootstrap as bs
+    monkeypatch.setattr(bs, "DEFAULT_PROFILE_DIR", tmp_path / "chrome-profile")
+    monkeypatch.setenv("USHFRAME_PROBE_CHROME_PROFILE", "/somewhere")
+    try:
+        bs._require_profile()
+        raised = None
+    except bs.BootstrapError as e:
+        raised = str(e)
+    assert raised is not None
+    assert "USHFRAME_PROBE_CHROME_PROFILE" in raised and "misspell" in raised
+    assert "chrome-profile" in raised
 
 
 def test_google_link_relink_notice_when_vault_exists(tmp_path, monkeypatch, capsys):

{pushframe-5.0.3 → pushframe-5.0.4}/tests/test_version.py

@@ -18,8 +18,8 @@ PYPROJECT = Path(__file__).resolve().parent.parent / "pyproject.toml"
 
 def test_version_is_first_distribution_release():
     """The current distribution release (moved off 0.1.0 at 5.0.0; page
-    metadata fix shipped in 5.0.3)."""
-    assert __version__ == "5.0.3"
+    metadata fix shipped in 5.0.4)."""
+    assert __version__ == "5.0.4"
 
 
 def test_version_matches_pyproject_single_source():

{pushframe-5.0.3 → pushframe-5.0.4}/uv.lock

@@ -432,7 +432,7 @@ wheels = [
 
 [[package]]
 name = "pushframe"
-version = "5.0.0"
+version = "5.0.4"
 source = { editable = "." }
 dependencies = [
     { name = "boto3" },