From c5585beab3d6adefaa2ef9444946dd3816960a7c Mon Sep 17 00:00:00 2001 From: Christophe Besson Date: Mon, 24 Aug 2026 15:57:41 +0200 Subject: fix(node,hub): HEVC transcode fallback, live-add progress, per-group TMDB toggle MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Three bugs found live testing the Videos app against a real HEVC/EAC3 show, plus a design change requested afterward: - Streaming always did "-c:v copy", which faithfully reports a source's real hev1 codec string but is unplayable in a browser with no HEVC decoder (most Chrome/Linux builds). The node now transcodes to H264 whenever the probed codec is browser-incompatible (media_probe.py's new BROWSER_INCOMPATIBLE_VIDEO_CODECS), with a `transcode_incompatible_video` node.toml opt-out for operators who know their viewers already decode it. - Dropping a whole season into an already-watched folder gave no scanning indicator and no progress bar: IndexProgress was only ever updated by the two bulk scan paths, never by the real-time per-file watchdog path (_schedule_update/_debounce/_update_entry). That path now accounts a "burst" the same way, without double-counting a file rewritten mid-debounce. - A stray literal "0" rendered in the video detail modal when there was no TMDB match (`meta.confidence` is 0, and `0 && x` renders "0" in JSX/htm, not nothing) — `confident` is now a real boolean. - Whether TMDB is used at all moves from a node-wide setting to per-group (OP_TMDB_ENABLED/tmdb_enabled/tmdb_enabled_ack, scoped like OP_VIDEO_ROOT): an operator running a real media-library group alongside test/demo groups on one node wants outbound TMDB traffic for the one that needs it, not all of them. The custom API token and query language stay node-wide, one shared credential/cache (tmdb_config/OP_TMDB_CONFIG, unchanged reasoning). MNP_VERSION 0.6 -> 0.7, additive. Co-Authored-By: Claude Sonnet 5 Claude-Session: https://claude.ai/code/session_01LAmyXtc6dAADsH23ydXQpY --- .../meshbay-node/tests/test_tmdb_config_policy.py | 103 +++++++++------------ 1 file changed, 42 insertions(+), 61 deletions(-) (limited to 'packages/meshbay-node/tests/test_tmdb_config_policy.py') diff --git a/packages/meshbay-node/tests/test_tmdb_config_policy.py b/packages/meshbay-node/tests/test_tmdb_config_policy.py index 29ef54c..c1781e3 100644 --- a/packages/meshbay-node/tests/test_tmdb_config_policy.py +++ b/packages/meshbay-node/tests/test_tmdb_config_policy.py @@ -1,9 +1,14 @@ """ -The operator decides whether the node calls TMDB at all, and whether it uses -a custom API token — docs/mediacenter.md §5.5. Same shape as -test_apps_enabled_policy.py/test_scan_settings_policy.py: a signed operator -instruction, node-wide (group_id="") rather than per-group, stored via -roster.py's group_settings table. +The operator's custom TMDB API token and query language — docs/mediacenter.md +§5.5. Same shape as test_apps_enabled_policy.py/test_scan_settings_policy.py: +a signed operator instruction, node-wide (group_id="") rather than per-group, +stored via roster.py's group_settings table. + +Whether TMDB is used *at all* used to live in this same op — moved to its +own per-group op (test_tmdb_enabled_policy.py, 2026-08-24): a real +media-library group and a test/demo group on the same node need not share +that decision, while the token and query language stay one operator's +shared credential/cache. Specific to this one: the subject signed/audited must never contain the token itself (it would end up in the audit log in plaintext) — only whether @@ -55,51 +60,39 @@ def _fake_challenge(issued: list): # ── Refused before a challenge is even issued ─────────────────────────────── -async def test_missing_enabled_is_refused(tmp_path): +async def test_non_string_token_is_refused(tmp_path): session = _session(tmp_path, "op", operator="op") session._has_admin_authority = lambda: True issued = [] session._issue_admin_challenge = _fake_challenge(issued) - session._do_tmdb_config({}) + session._do_tmdb_config({"token": 12345}) assert not issued assert [m for m in session.sent if m.get("type") == "error"] -async def test_non_bool_enabled_is_refused(tmp_path): - session = _session(tmp_path, "op", operator="op") - session._has_admin_authority = lambda: True - issued = [] - session._issue_admin_challenge = _fake_challenge(issued) +async def test_a_request_with_nobody_to_authorize_it_is_refused(tmp_path): + session = _session(tmp_path, "member-1", operator="the-operator") + session._has_admin_authority = lambda: False - session._do_tmdb_config({"enabled": "yes"}) + session._do_tmdb_config({"token": "x"}) - assert not issued assert [m for m in session.sent if m.get("type") == "error"] -async def test_non_string_token_is_refused(tmp_path): +async def test_non_string_language_is_refused(tmp_path): session = _session(tmp_path, "op", operator="op") session._has_admin_authority = lambda: True issued = [] session._issue_admin_challenge = _fake_challenge(issued) - session._do_tmdb_config({"enabled": True, "token": 12345}) + session._do_tmdb_config({"language": 42}) assert not issued assert [m for m in session.sent if m.get("type") == "error"] -async def test_a_request_with_nobody_to_authorize_it_is_refused(tmp_path): - session = _session(tmp_path, "member-1", operator="the-operator") - session._has_admin_authority = lambda: False - - session._do_tmdb_config({"enabled": False}) - - assert [m for m in session.sent if m.get("type") == "error"] - - # ── Who may change it, and what gets signed ───────────────────────────────── async def test_changing_it_needs_a_signature(tmp_path): @@ -108,7 +101,7 @@ async def test_changing_it_needs_a_signature(tmp_path): issued = [] session._issue_admin_challenge = _fake_challenge(issued) - session._do_tmdb_config({"enabled": True}) + session._do_tmdb_config({}) assert len(issued) == 1 op, subject, payload, group_id = issued[0] @@ -125,23 +118,23 @@ async def test_the_token_itself_never_appears_in_the_signed_subject(tmp_path): session._issue_admin_challenge = _fake_challenge(issued) secret = "sk-super-secret-tmdb-token" - session._do_tmdb_config({"enabled": True, "token": secret}) + session._do_tmdb_config({"token": secret}) _, subject, payload, _ = issued[0] assert secret not in subject assert payload["token"] == secret, "the real value still has to reach the exec step somehow" -async def test_subject_reflects_enabled_and_whether_a_token_was_supplied(tmp_path): +async def test_subject_reflects_whether_a_token_was_supplied(tmp_path): session = _session(tmp_path, "op", operator="op") session._has_admin_authority = lambda: True issued = [] session._issue_admin_challenge = _fake_challenge(issued) - session._do_tmdb_config({"enabled": False, "token": "x"}) + session._do_tmdb_config({"token": "x"}) _, subject, _, _ = issued[0] - assert subject == "enabled=False,custom_token=yes,language=default" + assert subject == "custom_token=yes,language=default" async def test_subject_says_no_custom_token_when_none_given(tmp_path): @@ -150,10 +143,10 @@ async def test_subject_says_no_custom_token_when_none_given(tmp_path): issued = [] session._issue_admin_challenge = _fake_challenge(issued) - session._do_tmdb_config({"enabled": True}) + session._do_tmdb_config({}) _, subject, _, _ = issued[0] - assert subject == "enabled=True,custom_token=no,language=default" + assert subject == "custom_token=no,language=default" async def test_subject_reflects_a_configured_language(tmp_path): @@ -162,44 +155,32 @@ async def test_subject_reflects_a_configured_language(tmp_path): issued = [] session._issue_admin_challenge = _fake_challenge(issued) - session._do_tmdb_config({"enabled": True, "language": "fr-FR"}) + session._do_tmdb_config({"language": "fr-FR"}) _, subject, payload, _ = issued[0] - assert subject == "enabled=True,custom_token=no,language=fr-FR" + assert subject == "custom_token=no,language=fr-FR" assert payload["language"] == "fr-FR" -async def test_non_string_language_is_refused(tmp_path): - session = _session(tmp_path, "op", operator="op") - session._has_admin_authority = lambda: True - issued = [] - session._issue_admin_challenge = _fake_challenge(issued) - - session._do_tmdb_config({"enabled": True, "language": 42}) - - assert not issued - assert [m for m in session.sent if m.get("type") == "error"] - - # ── Where it is stored ────────────────────────────────────────────────────── async def test_the_setting_lives_on_the_node_and_survives_a_restart(tmp_path): roster = Roster(db_path=tmp_path / "roster.db") await roster.open() try: - enabled, token, language = await roster.tmdb_config() - assert (enabled, token, language) == (True, None, None), ( - "absent must mean on, with the shipped default token, TMDB's own default language") - await roster.set_tmdb_config(True, "my-custom-token", "fr-FR", set_by="op") - enabled, token, language = await roster.tmdb_config() - assert (enabled, token, language) == (True, "my-custom-token", "fr-FR") + token, language = await roster.tmdb_config() + assert (token, language) == (None, None), ( + "absent must mean the shipped default token, TMDB's own default language") + await roster.set_tmdb_config("my-custom-token", "fr-FR", set_by="op") + token, language = await roster.tmdb_config() + assert (token, language) == ("my-custom-token", "fr-FR") finally: await roster.close() reopened = Roster(db_path=tmp_path / "roster.db") await reopened.open() try: - assert await reopened.tmdb_config() == (True, "my-custom-token", "fr-FR") + assert await reopened.tmdb_config() == ("my-custom-token", "fr-FR") finally: await reopened.close() @@ -208,11 +189,11 @@ async def test_clearing_the_token_reverts_to_the_default(tmp_path): roster = Roster(db_path=tmp_path / "roster.db") await roster.open() try: - await roster.set_tmdb_config(True, "a-token", set_by="op") - assert (await roster.tmdb_config())[1] == "a-token" + await roster.set_tmdb_config("a-token", set_by="op") + assert (await roster.tmdb_config())[0] == "a-token" - await roster.set_tmdb_config(True, "", set_by="op") - enabled, token, language = await roster.tmdb_config() + await roster.set_tmdb_config("", set_by="op") + token, language = await roster.tmdb_config() assert token is None, "an explicit empty string clears the custom token" finally: await roster.close() @@ -222,9 +203,9 @@ async def test_omitting_the_token_leaves_it_unchanged(tmp_path): roster = Roster(db_path=tmp_path / "roster.db") await roster.open() try: - await roster.set_tmdb_config(True, "a-token", set_by="op") - await roster.set_tmdb_config(False, None, set_by="op") - enabled, token, language = await roster.tmdb_config() - assert (enabled, token) == (False, "a-token") + await roster.set_tmdb_config("a-token", set_by="op") + await roster.set_tmdb_config(set_by="op") + token, language = await roster.tmdb_config() + assert token == "a-token" finally: await roster.close() -- cgit v1.2.3