pushframe 5.1.0__tar.gz → 5.1.2__tar.gz

{pushframe-5.1.0 → pushframe-5.1.2}/CHANGELOG.md

@@ -14,7 +14,49 @@ frames; it is not affiliated with Aura Frames Inc.
 
 ## [Unreleased]
 
-- (v5.1 work will land here)
+## [5.1.2] — 2026-09-30
+
+### Changed (tests)
+
+- **Network guard**: `httpx.Client` is patched for the whole test session
+  so any client built WITHOUT an explicit transport gets a blocking one —
+  except when built inside a live-marked test (the only legitimate
+  real-network shape). An offline test that reaches the real network now
+  fails loudly instead of silently depending on a local .env (the relogin
+  masking that kept the tests workflow red from v5.1.0 to 5.1.1), and a
+  local .env can no longer masquerade as a live posture.
+
+### Fixed (tests)
+
+- **The `tests` workflow is green again** (red on master since v5.1.0 —
+  not a 5.1.1 regression): the 9 offline tests of the 401-retry and
+  write-throttling suites relied on the pre-phase-24 re-login default
+  (`aura.login`); phase 24 made the default token-aware, which fails
+  named off-TTY without env credentials — exactly the CI case. A local
+  `.env` with real credentials masked it locally. All 9 `execute_plan`
+  call sites now pin `relogin=aura.login`; zero product code changed.
+
+## [5.1.1] — 2026-09-30
+
+### Changed
+
+- **Credible client identity** (venus 2026-09-30 anti-abuse lesson): the
+  user agent is now a setting — `USER_AGENT` (env `PUSHFRAME_USER_AGENT`,
+  or `pushframe config set USER_AGENT …`) — whose default tracks a
+  current Play build (`Aura/4.7.4271 (Android 36; Client)`) instead of
+  the years-stale `4.7.790`; combined with a per-install
+  `config set DEVICE_IDENTIFIER "$(uuidgen)"`, an installation stops
+  presenting the shared all-zeros fingerprint that kept reads green
+  (like the real phone app) while writes were 401-refused for months.
+- **Automatic identity provisioning**: the `pushframe config` wizard now
+  generates a unique `DEVICE_IDENTIFIER` (uuid4) on a fresh install
+  BEFORE its first API call, so the very first login already presents a
+  per-install fingerprint — no installation ever ships the all-zeros id
+  again. Explicit identities (env or config file) are never overwritten,
+  and the generated id is stable across wizard re-runs.
+- `config show` warns when the effective `DEVICE_IDENTIFIER` is still the
+  shared all-zeros default, naming the anti-abuse rationale and the
+  `config set DEVICE_IDENTIFIER "$(uuidgen)"` remedy.
 
 ## [5.1.0] — 2026-09-29
 

{pushframe-5.1.0 → pushframe-5.1.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: pushframe
-Version: 5.1.0
+Version: 5.1.2
 Summary: Unofficial community CLI for Aura Frames digital photo frames (sync a local folder or a Google Photos album; not affiliated with Aura Frames Inc.)
 Project-URL: Homepage, https://github.com/coredmp95/pushframe
 Project-URL: Repository, https://github.com/coredmp95/pushframe

{pushframe-5.1.0 → pushframe-5.1.2}/docs/CLI.md

@@ -123,6 +123,20 @@ retry, no re-login — both feed the trip). The drill:
    pushframe google-sync Cadre --frame "Cadre de Fabrice" --apply --yes --batch-size 10
    ```
 
+**Client identity matters.** Pushd's anti-abuse layer also fingerprints
+the client itself: a years-stale `Aura/4.7.790` user agent and the
+all-zeros `0000000000000000` device identifier shared by every pushframe
+installation read as "not a phone" (2026-09-30: reads stayed green for
+the real phone app while writes were 401-refused for months). Give each
+install its own identity once:
+
+```bash
+pushframe config set DEVICE_IDENTIFIER "$(uuidgen)"
+```
+
+The user agent defaults to a current Play build (a setting since 5.1.1);
+bump it with `pushframe config set USER_AGENT 'Aura/…'` if it ages again.
+
 Progress is never lost: only confirmed writes are remembered, and the next
 run uploads the remainder once — never twice.
 
@@ -730,6 +744,7 @@ to adopt one.
 | `AURA_LOCALE` | `en-US` |
 | `AURA_APP_IDENTIFIER` | `com.pushd.client` |
 | `AURA_DEVICE_IDENTIFIER` | `0000000000000000` |
+| `AURA_USER_AGENT` | `Aura/4.7.4271 (Android 36; Client)` |
 
 Booleans accept `1`, `true`, `yes`, `on` (case-insensitive); anything else is false.
 

{pushframe-5.1.0 → pushframe-5.1.2}/pushframe/__init__.py

@@ -1,4 +1,4 @@
 # pushframe — unofficial community CLI for Aura Frames (not affiliated).
 # Version single source for the CLI surface (REL-02); pyproject keeps the
 # packaging metadata version and tests/test_version.py enforces lockstep.
-__version__ = "5.1.0"
+__version__ = "5.1.2"

{pushframe-5.1.0 → pushframe-5.1.2}/pushframe/cli.py

@@ -358,6 +358,27 @@ def run_config(wizard_args=None, stdin_isatty: bool | None = None) -> int:
               '(use config set / config import for scripts).')
         return 1
 
+    # Identity provisioning (5.1.1, venus anti-abuse lesson): before the
+    # FIRST API call of a fresh install, give it a unique device id so its
+    # very first login already presents a credible per-install fingerprint
+    # instead of the all-zeros id every pushframe install used to share.
+    # Only the absence of one triggers a write; an explicit setting (env or
+    # file) is never second-guessed. The block contains no account data —
+    # D-03's "nothing written before a successful login" keeps its meaning
+    # for session facts (email/token/frame/debug).
+    if not os.getenv('PUSHFRAME_DEVICE_IDENTIFIER') \
+            and not os.getenv('AURA_DEVICE_IDENTIFIER') \
+            and config_store.setting('DEVICE_IDENTIFIER') is None:
+        import uuid
+        # load→mutate→save (NOT update(settings=...), which would REPLACE the
+        # settings map and drop any sibling file settings like LOCALE).
+        data = config_store.load()
+        identity = str(uuid.uuid4())
+        data.setdefault('settings', {})['DEVICE_IDENTIFIER'] = identity
+        config_store.save(data)
+        print(f'device identity provisioned: DEVICE_IDENTIFIER = {identity}'
+              ' (unique to this install)')
+
     existing = config_store.load()
     if existing.get('email'):
         print(f"configuring pushframe (current email: {existing['email']} — Enter keeps it)")
@@ -437,6 +458,15 @@ def _config_show() -> int:
             print(f'  {key} = {shown!r}  (file)')
     if data.get('auth_token'):
         print('  auth_token = ***  (file)')
+    # Identity hygiene (5.1.1, venus anti-abuse lesson): the all-zeros id is
+    # shared by every unprovisioned pushframe install and reads as a
+    # non-phone client — name it and hand the remedy.
+    if settings.DEVICE_IDENTIFIER == settings.DEFAULTS['DEVICE_IDENTIFIER']['default']:
+        print('  WARNING: DEVICE_IDENTIFIER is still the shared all-zeros '
+              'default — pushd reads it as a non-phone client (venus '
+              '2026-09-30: reads stayed green while writes were 401-refused '
+              'for months). Give this install a unique identity: '
+              'pushframe config set DEVICE_IDENTIFIER "$(uuidgen)"')
     return 0
 
 

{pushframe-5.1.0 → pushframe-5.1.2}/pushframe/client.py

@@ -16,7 +16,15 @@ from pushframe.utils import settings as _settings
 
 AURA_API_BASE_URL = _settings.AURA_API_BASE_URL
 AURA_API_VERSION = _settings.AURA_API_VERSION
-USER_AGENT = 'Aura/4.7.790 (Android 30; Client)'
+# Client identity is part of pushd's anti-abuse fingerprint (venus
+# 2026-09-30: the years-stale '4.7.790' UA plus the shared all-zeros
+# device id read as "not a phone" — reads stayed green for the real app
+# while writes 401'd; see docs/CLI.md "Client identity matters"). The UA
+# is therefore a setting (env PUSHFRAME_USER_AGENT → config file →
+# default), resolved at import like the two settings above; the default
+# tracks a current Play build, and DEVICE_IDENTIFIER should be a
+# per-install UUID (`pushframe config set DEVICE_IDENTIFIER "$(uuidgen)"`).
+USER_AGENT = _settings.USER_AGENT
 
 # Keys whose values are secrets and must never reach the on-disk logs (D-07).
 _REDACT_KEYS = {'password', 'auth_token', 'x-token-auth'}

{pushframe-5.1.0 → pushframe-5.1.2}/pushframe/utils/settings.py

@@ -20,11 +20,15 @@ CONFIG_PATH = Path(os.getenv('PUSHFRAME_CONFIG_FILE',
 
 # The single table: settings name -> (env spellings, default, caster).
 # Defaults ARE the literals that shipped for years (MOD-02 posture), so an
-# empty config + empty environment behaves byte-identically to 5.0.x.
+# empty config + empty environment behaves byte-identically to 5.0.x —
+# sole deliberate exception: USER_AGENT's default was bumped to a current
+# Play build in 5.1.1 because the years-stale identity feeds the
+# anti-abuse trip (venus lesson; see docs/CLI.md "Client identity").
 DEFAULTS: dict[str, dict] = {
     'LOCALE':                          {'env': ('PUSHFRAME_LOCALE', 'AURA_LOCALE'), 'default': 'en-US'},
     'AURA_APP_IDENTIFIER':             {'env': ('PUSHFRAME_APP_IDENTIFIER', 'AURA_APP_IDENTIFIER'), 'default': 'com.pushd.client'},
     'DEVICE_IDENTIFIER':               {'env': ('PUSHFRAME_DEVICE_IDENTIFIER', 'AURA_DEVICE_IDENTIFIER'), 'default': '0000000000000000'},
+    'USER_AGENT':                      {'env': ('PUSHFRAME_USER_AGENT', 'AURA_USER_AGENT'), 'default': 'Aura/4.7.4271 (Android 36; Client)'},
     'IMAGE_PROXY_BASE_URL':            {'env': (), 'default': 'https://imgproxy.pushd.com'},
     'AURA_API_BASE_URL':               {'env': ('PUSHFRAME_API_BASE_URL',), 'default': 'https://api.pushd.com/v5'},
     'AURA_API_VERSION':                {'env': ('PUSHFRAME_API_VERSION',), 'default': 'v5'},

{pushframe-5.1.0 → pushframe-5.1.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "pushframe"
-version = "5.1.0"
+version = "5.1.2"
 description = "Unofficial community CLI for Aura Frames digital photo frames (sync a local folder or a Google Photos album; not affiliated with Aura Frames Inc.)"
 readme = "README.md"
 requires-python = ">=3.14"

pushframe-5.1.2/tests/conftest.py

@@ -0,0 +1,100 @@
+import os
+
+import pytest
+from dotenv import load_dotenv
+
+# Load AURA_EMAIL / AURA_PASSWORD from a local .env so the live read-path tests
+# can run without exporting shell vars. Shell-exported vars still win (override
+# defaults to False), and a missing .env is a no-op — so a credential-less
+# checkout still skips the live suite cleanly (D-02).
+load_dotenv()
+
+
+# ---------------------------------------------------------------------------
+# Network guard (CI hardening, 2026-09-30). An OFFLINE test must never reach
+# the real pushd API. Phase 24's token-aware relogin default let 9 offline
+# tests silently depend on a local .env (the env-password branch) and fail in
+# CI — the mock was bypassed because nothing blocked the DEFAULT transport.
+# While no live test is actually going to run, patch httpx.Client so any
+# client built WITHOUT an explicit transport (the real-network shape) gets a
+# blocking one: every request fails loudly. offline_aura-style tests are
+# unaffected (they pass transport= explicitly); `live` runs opt out.
+# ---------------------------------------------------------------------------
+_NETWORK_GUARD_ACTIVE = False
+_CURRENT_ITEM = None
+
+
+def pytest_runtest_setup(item):
+    """Track the current item so the guard can allow live-marked tests."""
+    global _CURRENT_ITEM
+    _CURRENT_ITEM = item
+
+
+def pytest_runtest_teardown(item):
+    global _CURRENT_ITEM
+    _CURRENT_ITEM = None
+
+
+def _blocking_transport():
+    import httpx
+
+    def handler(request: httpx.Request) -> httpx.Response:
+        raise RuntimeError(
+            'NETWORK GUARD: an offline test reached the real network at '
+            f'{request.url}. Offline tests must go through '
+            'tests.offline.offline_aura (explicit transport) or an injected '
+            'seam. If a product default now escapes the seam, fix the TEST '
+            '(e.g. pin relogin=aura.login), not the product.'
+        )
+
+    return httpx.MockTransport(handler)
+
+
+def pytest_collection_modifyitems(config, items):
+    """Install the network guard for the whole session. It is ALWAYS active:
+    every transport-less httpx.Client gets a blocking transport, EXCEPT when
+    built DURING a live-marked test (the only legitimate real-network shape:
+    the session `aura` fixture constructs the client inside the live test,
+    so the marker is checked at construction time — not at collection, which
+    would let a local .env masquerade as a live posture for offline tests)."""
+    global _NETWORK_GUARD_ACTIVE
+    import httpx
+
+    original = httpx.Client.__init__
+
+    def guarded(self, *args, **kwargs):
+        live_running = _CURRENT_ITEM is not None and \
+            _CURRENT_ITEM.get_closest_marker('live') is not None
+        # httpx.Client's signature is keyword-only; `app` implies transport.
+        if not live_running and 'transport' not in kwargs and 'app' not in kwargs:
+            kwargs['transport'] = _blocking_transport()
+        return original(self, *args, **kwargs)
+
+    # Detection lives ON the patched __init__ (NOT an importable conftest
+    # flag): pytest registers conftest under its own module name, so a test
+    # importing tests.conftest would see a second, never-mutated copy.
+    guarded._network_guard = True
+    httpx.Client.__init__ = guarded
+    _NETWORK_GUARD_ACTIVE = True
+
+
+@pytest.fixture(scope="session")
+def aura():
+    """Authenticated Aura session shared by all live read-path tests.
+
+    Reads AURA_EMAIL/AURA_PASSWORD from the environment and skips the whole
+    live suite cleanly when either is unset (D-02), so a credential-less
+    checkout stays green. When credentials are present it instantiates Aura()
+    and performs the login (READ-01's act, D-03), returning the authenticated
+    instance so all live tests reuse one session.
+    """
+    email = os.getenv("AURA_EMAIL")
+    password = os.getenv("AURA_PASSWORD")
+    if not email or not password:
+        pytest.skip("AURA_EMAIL/AURA_PASSWORD not set; skipping live Aura API tests")
+
+    from pushframe.aura import Aura
+
+    instance = Aura()
+    instance.login()
+    return instance

{pushframe-5.1.0 → pushframe-5.1.2}/tests/test_config_wizard.py

@@ -57,17 +57,85 @@ def test_wizard_success_writes_0600_config(cfg_path, monkeypatch, fake_login_ok)
     assert data["auth_token"] == "tok-abc-123"  # noqa: S105
     assert data["default_frame"] == "Cadre de Fabrice"
     assert data["debug"] is False
+    # Identity provisioning (5.1.1): the first wizard run on a fresh store
+    # must persist a unique device id — never the shared all-zeros default.
+    identity = data["settings"]["DEVICE_IDENTIFIER"]
+    assert identity != "0000000000000000"
+    assert identity.count("-") == 4 and len(identity) == 36
     mode = stat.S_IMODE(cfg_path.stat().st_mode)
     assert mode == 0o600
 
 
+def test_wizard_provisioned_identity_survives_save_and_rerun(cfg_path, monkeypatch, fake_login_ok):
+    """The provisioned id is written BEFORE the login and must survive the
+    wizard's final save (no settings-key clobber), and a second run must
+    keep it byte-identical (no re-roll — device ids are stable)."""
+    _feed(monkeypatch, ["coredmp95@gmail.com", "s3cret", "1", "n"])  # noqa: S105
+    from pushframe.cli import run_config
+    assert run_config(wizard_args=[], stdin_isatty=True) == 0
+    first = json.loads(cfg_path.read_text())["settings"]["DEVICE_IDENTIFIER"]
+
+    _feed(monkeypatch, ["coredmp95@gmail.com", "", "", "", ""])  # noqa: S105
+    assert run_config(wizard_args=[], stdin_isatty=True) == 0
+    second = json.loads(cfg_path.read_text())["settings"]["DEVICE_IDENTIFIER"]
+    assert first == second
+
+
+def test_wizard_respects_explicit_device_identity(cfg_path, monkeypatch, fake_login_ok):
+    """An explicit id (file or env) is never second-guessed — provisioning
+    only fills the ABSENCE of one."""
+    config_store.update(settings={"DEVICE_IDENTIFIER": "my-explicit-id"})
+    _feed(monkeypatch, ["coredmp95@gmail.com", "s3cret", "1", "n"])  # noqa: S105
+    from pushframe.cli import run_config
+    assert run_config(wizard_args=[], stdin_isatty=True) == 0
+    assert json.loads(cfg_path.read_text())["settings"]["DEVICE_IDENTIFIER"] \
+        == "my-explicit-id"
+
+
+def test_wizard_provisioning_keeps_sibling_settings(cfg_path, monkeypatch, fake_login_ok):
+    """Provisioning must not clobber sibling file settings (update(
+    settings=...) REPLACES the map; the load→mutate→save path preserves
+    them)."""
+    config_store.update(settings={"LOCALE": "fr-FR"})
+    _feed(monkeypatch, ["coredmp95@gmail.com", "s3cret", "1", "n"])  # noqa: S105
+    from pushframe.cli import run_config
+    assert run_config(wizard_args=[], stdin_isatty=True) == 0
+    st = json.loads(cfg_path.read_text())["settings"]
+    assert st["LOCALE"] == "fr-FR"
+    assert st["DEVICE_IDENTIFIER"] != "0000000000000000"
+
+
+def test_show_warns_on_all_zeros_device_identity(cfg_path, capsys, monkeypatch):
+    """Identity hygiene (5.1.1): config show names the shared all-zeros
+    device id with its remedy; a provisioned or explicit id silences it."""
+    from pushframe.cli import run_config
+    monkeypatch.delenv("PUSHFRAME_DEVICE_IDENTIFIER", raising=False)
+    monkeypatch.delenv("AURA_DEVICE_IDENTIFIER", raising=False)
+
+    assert run_config(wizard_args=["show"]) == 0
+    out = capsys.readouterr().out
+    assert "WARNING" in out and "uuidgen" in out
+
+    config_store.update(
+        settings={"DEVICE_IDENTIFIER": "45ce0cfa-fe12-4850-b8de-f3ca56fbb36d"})
+    assert run_config(wizard_args=["show"]) == 0
+    assert "WARNING" not in capsys.readouterr().out
+
+
 def test_wizard_failed_login_writes_nothing(cfg_path, monkeypatch, fake_login_fail, capsys):
+    """D-03, amended for 5.1.1 identity provisioning: a failed login
+    persists NO session facts and NO default_frame — the only pre-login
+    write allowed is the account-independent device identity block."""
     _feed(monkeypatch, ["coredmp95@gmail.com", "wrong-pass"])  # noqa: S105
     from pushframe.cli import run_config
     rc = run_config(wizard_args=[], stdin_isatty=True)
     assert rc == 1
-    assert not cfg_path.exists()
     assert "invalid credentials" in capsys.readouterr().out
+    assert cfg_path.exists()  # identity block only
+    data = json.loads(cfg_path.read_text())
+    assert "email" not in data and "auth_token" not in data  # noqa: S105
+    assert "default_frame" not in data
+    assert "DEVICE_IDENTIFIER" in data.get("settings", {})
 
 
 def test_wizard_non_tty_fails_loud(cfg_path, monkeypatch):

pushframe-5.1.2/tests/test_network_guard.py

@@ -0,0 +1,41 @@
+"""The network guard itself (2026-09-30 CI hardening).
+
+Meta-test: when the guard is installed, a client built WITHOUT an explicit
+transport — the real-network shape — must fail loudly instead of reaching
+pushd. When it is not installed (a genuine live posture), there is nothing
+to assert and the test skips.
+"""
+import httpx
+import pytest
+
+
+def _guard_installed() -> bool:
+    """True when conftest's blocking transport is patched onto httpx.Client.
+
+    Detection reads the attribute the hook sets on the patched __init__
+    itself — importing the flag from conftest would read a second module
+    copy (pytest registers conftest under its own name).
+    """
+    return getattr(httpx.Client.__init__, '_network_guard', False)
+
+
+def test_guard_blocks_transportless_clients_in_offline_posture():
+    if not _guard_installed():
+        pytest.skip('guard not installed — a genuine live posture is selected')
+    client = httpx.Client(base_url='https://api.pushd.com/v5')
+    with pytest.raises(RuntimeError, match='NETWORK GUARD'):
+        client.get('/frames.json')  # any request: the transport itself blocks
+
+
+def test_guard_never_blocks_explicit_transports():
+    """offline_aura's shape: transport= passes through untouched."""
+    calls = []
+
+    def handler(request: httpx.Request) -> httpx.Response:
+        calls.append(request.url.path)
+        return httpx.Response(200, json={'ok': True})
+
+    client = httpx.Client(transport=httpx.MockTransport(handler))
+    r = client.get('https://api.pushd.com/v5/frames.json')
+    assert r.status_code == 200
+    assert calls == ['/v5/frames.json']

{pushframe-5.1.0 → pushframe-5.1.2}/tests/test_retry_401.py

@@ -169,6 +169,7 @@ def test_401_on_select_asset_recovers_after_relogin_and_resend(tmp_path):
         plan, aura, FRAME_ID, s3_client=_FakeS3Client(), sqs_client=_FakeSQSClient(),
         sleep=lambda *_: None, throttle_seconds=0, chunk_delay_seconds=0,
         asset_probe=_ordered_probe(['absent']),
+        relogin=aura.login,  # pinned: this test encodes the PRE-phase-24 password default
     )
 
     assert result.upload_succeeded == 1
@@ -197,6 +198,7 @@ def test_two_item_chunk_401_resends_only_the_genuinely_absent_item(tmp_path):
         plan, aura, FRAME_ID, s3_client=_FakeS3Client(), sqs_client=_FakeSQSClient(),
         sleep=lambda *_: None, throttle_seconds=0, chunk_delay_seconds=0,
         asset_probe=_ordered_probe(['landed', 'absent']),
+        relogin=aura.login,  # pinned: pre-phase-24 password default
     )
 
     assert result.items_already_landed == 1
@@ -364,6 +366,7 @@ def test_retried_upload_chunk_consumes_5_budget_tokens_total(tmp_path):
         plan, aura, FRAME_ID, s3_client=_FakeS3Client(), sqs_client=_FakeSQSClient(),
         sleep=lambda *_: None, throttle_seconds=0, chunk_delay_seconds=0,
         asset_probe=_ordered_probe(['absent']),
+        relogin=aura.login,  # pinned: pre-phase-24 password default
         budget=budget, clock=lambda: T0, wait_on_budget=False,
     )
 
@@ -391,6 +394,7 @@ def test_all_items_already_landed_consumes_3_tokens_no_resend_charge(tmp_path):
         plan, aura, FRAME_ID, s3_client=_FakeS3Client(), sqs_client=_FakeSQSClient(),
         sleep=lambda *_: None, throttle_seconds=0, chunk_delay_seconds=0,
         asset_probe=_ordered_probe(['landed', 'landed']),
+        relogin=aura.login,  # pinned: pre-phase-24 password default
         budget=budget, clock=lambda: T0, wait_on_budget=False,
     )
 
@@ -419,6 +423,7 @@ def test_probe_itself_never_charges_budget_regardless_of_chunk_size(tmp_path):
         plan, aura, FRAME_ID, s3_client=_FakeS3Client(), sqs_client=_FakeSQSClient(),
         sleep=lambda *_: None, throttle_seconds=0, chunk_delay_seconds=0,
         asset_probe=_ordered_probe(['landed', 'landed', 'landed']),
+        relogin=aura.login,  # pinned: pre-phase-24 password default
         budget=budget, clock=lambda: T0, wait_on_budget=False,
     )
 
@@ -453,6 +458,7 @@ def test_budget_exhausted_propagates_from_retry_acquire_with_no_bypass(tmp_path)
             plan, aura, FRAME_ID, s3_client=_FakeS3Client(), sqs_client=_FakeSQSClient(),
             sleep=lambda *_: None, throttle_seconds=0, chunk_delay_seconds=0,
             asset_probe=_ordered_probe(['absent']),
+            relogin=aura.login,  # pinned: pre-phase-24 password default
             budget=budget, clock=lambda: T0, wait_on_budget=False,
         )
 

{pushframe-5.1.0 → pushframe-5.1.2}/tests/test_settings_resolution.py

@@ -70,6 +70,26 @@ def test_legacy_aura_env_still_read(config_file, monkeypatch):
     assert settings.LOCALE == "es-ES"
 
 
+def test_user_agent_default_tracks_a_current_play_build(config_file, monkeypatch):
+    """venus 2026-09-30: the years-stale 4.7.790 build fingerprinted
+    pushframe as a non-phone client. The default must stay contemporary."""
+    monkeypatch.delenv("PUSHFRAME_USER_AGENT", raising=False)
+    monkeypatch.delenv("AURA_USER_AGENT", raising=False)
+    ua = settings.USER_AGENT
+    assert ua.startswith("Aura/4.7.")
+    build = int(ua.split("/")[1].split(" ")[0].split(".")[2])
+    assert build >= 4000
+
+
+def test_user_agent_resolves_from_file_then_env(config_file, monkeypatch):
+    _write(config_file, {"version": 1, "settings": {
+        "USER_AGENT": "Aura/4.7.5000 (Android 36; Client)"}})
+    assert settings.USER_AGENT == "Aura/4.7.5000 (Android 36; Client)"
+    monkeypatch.setenv("PUSHFRAME_USER_AGENT",
+                       "Aura/4.7.5001 (Android 36; Client)")
+    assert settings.USER_AGENT == "Aura/4.7.5001 (Android 36; Client)"
+
+
 def test_numeric_and_bool_settings_resolve(config_file, monkeypatch):
     monkeypatch.delenv("PUSHFRAME_WRITE_BUDGET_CAPACITY", raising=False)
     monkeypatch.delenv("AURA_WRITE_BUDGET_CAPACITY", raising=False)

{pushframe-5.1.0 → pushframe-5.1.2}/tests/test_version.py

@@ -19,7 +19,7 @@ PYPROJECT = Path(__file__).resolve().parent.parent / "pyproject.toml"
 def test_version_is_first_distribution_release():
     """The current distribution release (moved off 0.1.0 at 5.0.0; page
     metadata fix shipped in 5.0.4)."""
-    assert __version__ == "5.1.0"
+    assert __version__ == "5.1.2"
 
 
 def test_version_matches_pyproject_single_source():

{pushframe-5.1.0 → pushframe-5.1.2}/tests/test_write_throttling.py

@@ -304,11 +304,13 @@ def test_run_of_plain_401_write_failures_aborts_batch(tmp_path):
     overrides[SELECT_ASSET_PATH] = httpx.Response(401, json={'error': 'unauthorized'})
     s3 = _FakeS3Client()
 
+    aura = offline_aura(overrides=overrides)
     with pytest.raises(ConsecutiveWriteFailureError) as exc_info:
         execute_plan(
-            plan, offline_aura(overrides=overrides), FRAME_ID,
+            plan, aura, FRAME_ID,
             s3_client=s3, sqs_client=_FakeSQSClient(),
             throttle_seconds=0, sleep=lambda *_: None,
+            relogin=aura.login,  # pinned: pre-phase-24 password default
         )
 
     err = exc_info.value
@@ -351,12 +353,13 @@ def test_interspersed_failures_do_not_trip_the_backstop(tmp_path, monkeypatch):
 
     monkeypatch.setattr(aura.asset_api, 'batch_update', _flaky_batch_update)
 
-    result = execute_plan(
-        plan, aura, FRAME_ID,
-        s3_client=_FakeS3Client(), sqs_client=_FakeSQSClient(),
-        throttle_seconds=0, sleep=lambda *_: None,
-        batch_size=1,
-    )
+    result =        execute_plan(
+            plan, aura, FRAME_ID,
+            s3_client=_FakeS3Client(), sqs_client=_FakeSQSClient(),
+            throttle_seconds=0, sleep=lambda *_: None,
+            batch_size=1,
+            relogin=aura.login,  # pinned: pre-phase-24 password default
+        )
 
     # No abort: all 8 attempted, 4 succeeded, 4 recorded per-item (D-08 intact).
     assert result.upload_succeeded == 4
@@ -390,12 +393,13 @@ def test_a_success_resets_the_consecutive_run(tmp_path, monkeypatch):
 
     monkeypatch.setattr(aura.asset_api, 'batch_update', _flaky_batch_update)
 
-    result = execute_plan(
-        plan, aura, FRAME_ID,
-        s3_client=_FakeS3Client(), sqs_client=_FakeSQSClient(),
-        throttle_seconds=0, sleep=lambda *_: None,
-        batch_size=1,
-    )
+    result =        execute_plan(
+            plan, aura, FRAME_ID,
+            s3_client=_FakeS3Client(), sqs_client=_FakeSQSClient(),
+            throttle_seconds=0, sleep=lambda *_: None,
+            batch_size=1,
+            relogin=aura.login,  # pinned: pre-phase-24 password default
+        )
 
     assert result.upload_succeeded == 1
     assert len(result.upload_failures) == 8
@@ -444,11 +448,13 @@ def test_max_consecutive_failures_zero_disables_the_backstop(tmp_path):
     overrides = _ok_overrides()
     overrides[SELECT_ASSET_PATH] = httpx.Response(401, json={'error': 'unauthorized'})
 
+    aura = offline_aura(overrides=overrides)
     result = execute_plan(
-        plan, offline_aura(overrides=overrides), FRAME_ID,
+        plan, aura, FRAME_ID,
         s3_client=_FakeS3Client(), sqs_client=_FakeSQSClient(),
         throttle_seconds=0, sleep=lambda *_: None,
         max_consecutive_failures=0,
+        relogin=aura.login,  # pinned: pre-phase-24 password default
     )
 
     assert result.upload_succeeded == 0
@@ -469,12 +475,14 @@ def test_consecutive_run_spans_upload_and_delete_phases(tmp_path):
     overrides[SELECT_ASSET_PATH] = httpx.Response(401, json={'error': 'unauthorized'})
     overrides[REMOVE_ASSET_PATH] = httpx.Response(401, json={'error': 'unauthorized'})
 
+    aura = offline_aura(overrides=overrides)
     with pytest.raises(ConsecutiveWriteFailureError) as exc_info:
         execute_plan(
-            plan, offline_aura(overrides=overrides), FRAME_ID,
+            plan, aura, FRAME_ID,
             s3_client=_FakeS3Client(), sqs_client=_FakeSQSClient(),
             throttle_seconds=0, sleep=lambda *_: None,
             batch_size=1,
+            relogin=aura.login,  # pinned: pre-phase-24 password default
         )
 
     err = exc_info.value

{pushframe-5.1.0 → pushframe-5.1.2}/uv.lock

@@ -432,7 +432,7 @@ wheels = [
 
 [[package]]
 name = "pushframe"
-version = "5.1.0"
+version = "5.1.2"
 source = { editable = "." }
 dependencies = [
     { name = "boto3" },

pushframe-5.1.0/tests/conftest.py

@@ -1,32 +0,0 @@
-import os
-
-import pytest
-from dotenv import load_dotenv
-
-# Load AURA_EMAIL / AURA_PASSWORD from a local .env so the live read-path tests
-# can run without exporting shell vars. Shell-exported vars still win (override
-# defaults to False), and a missing .env is a no-op — so a credential-less
-# checkout still skips the live suite cleanly (D-02).
-load_dotenv()
-
-
-@pytest.fixture(scope="session")
-def aura():
-    """Authenticated Aura session shared by all live read-path tests.
-
-    Reads AURA_EMAIL/AURA_PASSWORD from the environment and skips the whole
-    live suite cleanly when either is unset (D-02), so a credential-less
-    checkout stays green. When credentials are present it instantiates Aura()
-    and performs the login (READ-01's act, D-03), returning the authenticated
-    instance so all live tests reuse one session.
-    """
-    email = os.getenv("AURA_EMAIL")
-    password = os.getenv("AURA_PASSWORD")
-    if not email or not password:
-        pytest.skip("AURA_EMAIL/AURA_PASSWORD not set; skipping live Aura API tests")
-
-    from pushframe.aura import Aura
-
-    instance = Aura()
-    instance.login()
-    return instance