release: dev → main (pump stall false-trip fix, review batches, autopilot cap frames, Node 24) by ng · Pull Request #664 · sleepypod/core

ng · 2026-07-12T00:02:24Z

Release summary

50 commits from dev. Highlights:

Fixes

Pump stall guard false trips (fix(hardware): stop pump stall guard false-tripping on firmware-commanded stops #663) — the guard no longer trips on firmware-commanded pump stops (session duration expiry, daily prime end). Field-reported: daily bilateral power_off stall alerts on a healthy Pod 4. Pump duty is now authoritative when present; priming, firmware target level, and a bounded session-end countdown cover pods that omit it.
Biometrics archive pruner SIGPIPE (fix(biometrics): stop archive pruner dying on SIGPIPE (/persistent filling past target) #640) — pruner no longer dies mid-run, letting /persistent fill past target.
piezoStream file-tailing race (fix(piezoStream): eliminate file-tailing race that flaked CI #652) — CI flake eliminated.
RAW streaming (fix(streaming): skip SEQNO and prefer biometrics RAW #608) — skip SEQNO, prefer biometrics RAW dir.
Install (fix(install): grant service user journal read so log viewer works on all pods #662) — service user granted journal read so the log viewer works on all pods.
2026-07-01 review batches 1–4 — ~20 low/medium-severity fixes across hardware, scheduler, automation, homekit, server, UI, db, and export paths (optimistic UI state, sideLock mutex on globalThis, RAW-follower rotation survival, DAC command/response realignment, archive-export unwedge, timezone propagation, per-side pump movement gate, and more).

Features

Autopilot cap-frame replay (Persist downsampled capacitive frames for historical replay #645, Automation builder: legible backtest chart + editable number fields #642) — persist downsampled capacitive frames; backtests consume them for zone reports; legible backtest chart with editable number fields.

Chores

Node 24 across CI and pod runtime (chore(deps): Update node Node.js to v24 #416, chore: pin pod runtime to Node 24 (match .node-version) #650), TypeScript 6 (chore(deps): Update typescript dependency typescript to v6 #315), dependency updates.

Test plan

CI green on dev (lint, typecheck, unit tests, build) — every commit landed through a PR with its own checks.
Post-deploy on a pod: run sp-update, verify .git-info shows the new commit; confirm biometrics writing, /debug console clean, and no pump_alerts rows after a session-duration expiry and a scheduled prime.

Merge with a merge commit (not squash) — preserves semver commit messages for the release tooling.

🤖 Generated with Claude Code

🛏️ Beam this PR onto a sleepypod ✨

Pick the snippet that matches your pod. Already-installed pods can't use the curl bootstraps below — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use sp-update instead; it's on disk and opens WAN as its first step.

🔄 Already on a sleepypod (most common — review a PR on a running pod):

sudo sp-update dev

🚀 Fresh pod / first install — bootstraps from GitHub, rebuilds every push:

curl -fsSL https://raw.githubusercontent.com/sleepypod/core/dev/scripts/install \
  | sudo bash -s -- --branch dev

🎯 Pin to this exact build (run 29174365542 · a3d885f) — fresh-pod path, locked to one CI artifact for reproducible review:

curl -fsSL https://raw.githubusercontent.com/sleepypod/core/a3d885f6730ad28a417880eff603551253ba1773/scripts/install \
  | sudo bash -s -- \
      --branch dev \
      --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/29174365542/sleepypod-core.zip'

🧊 Artifact: sleepypod-core · self-destructs in 30 days 💥

The weekly mutation baseline (#591) flagged 220 surviving mutants in src/streaming/mqttBridge.ts — the largest single contributor. The existing tests asserted topic suffixes and a few fields but never the full published payloads, so emptying any string literal or flipping a guard survived undetected. Add mutation-coverage suites that pin the exact contents the bridge emits: the full HA discovery config set (deep-equal over all 19 homeassistant/* topics), per-side publishState payloads, the connect-option/LWT/clientId wiring, the testConnection TLS matrix, and the error-path warn messages. No source changes. Scoped Stryker: 220 -> 32 surviving on this file (61.6% baseline file score -> 92.18%). The remaining 32 are equivalent mutants (slugify's own empty-string fallback, JSON.stringify dropping undefined, safePublish's connected-guard, setTimeout timing values, info-level console.log strings).

## Why The weekly mutation baseline (#591) flagged **220 surviving mutants** in `src/streaming/mqttBridge.ts` — the single largest contributor across all shards. The existing tests asserted topic *suffixes* and a handful of fields, but never the *full published payloads*, so emptying any string literal or flipping a guard survived undetected. ## What Add mutation-coverage test suites to `src/streaming/tests/mqttBridge.test.ts` that pin the exact contents the bridge emits. **No source changes.** - **HA discovery** — a single deep-equality assertion over the full 19-topic `homeassistant/*` config set (climate L/R, water-level, ambient temp/humidity, pump rpm/loop/stall/clog ×2, biometrics hr/br/hrv ×2). Kills the bulk of the StringLiteral/ArrayDeclaration survivors (`manufacturer`, `model`, `payload_available`, config topics, `identifiers`, templates, `modes`, temp bounds). - **publishState** — exact payloads for device-status, water-level, per-side climate (`isPowered → 'heat'/'off'`), biometrics, pump rpm/loop_temp scaling, stall/clog. - **connect options + lifecycle** — clientId prefix, LWT offline-retained will, `end(false)` on shutdown, already-connected no-op guard, client-error + subscribe-error warns. - **testConnection** — TLS `rejectUnauthorized` option matrix. - **resolveConfig** — DB-read-throw warn message, DB-true `haDiscovery` source (kills the `?? → &&` operator mutant the existing `false`-valued test couldn't separate). Every asserted constant is written independently of the source, so any literal/operator mutation in `mqttBridge.ts` now fails a test. ## Result Scoped Stryker run on `mqttBridge.ts`: **220 → 32 surviving** (file score **61.6% → 92.18%**, +18 kills in the second batch). The remaining 32 are equivalent mutants — masked by `slugify`'s own empty-string fallback, `JSON.stringify` dropping `undefined`, `safePublish`'s connected-guard, `setTimeout` timing values, and info-level `console.log` strings. ## Test plan - `pnpm exec vitest run src/streaming/tests/mqttBridge.test.ts` → **98 passed**. - `pnpm exec stryker run --mutate src/streaming/mqttBridge.ts` → 32 survived, 400 killed, 92.18%. - `eslint src/streaming/tests/mqttBridge.test.ts` → clean. Refs #591  ## Summary by CodeRabbit * **Tests** * Added comprehensive test coverage for MQTT bridge functionality, including Home Assistant discovery payloads, device state publishing, connection lifecycle management, error handling, and TLS configuration scenarios.    <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update worktree-june-6-stryker ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/worktree-june-6-stryker/scripts/install \ | sudo bash -s -- --branch worktree-june-6-stryker ``` 🎯 **Pin to this exact build** ([run 27075004539](https://github.com/sleepypod/core/actions/runs/27075004539) · `02da363`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/02da363a31477a8e6cb10101a3831a60fd7ea6a8/scripts/install \ | sudo bash -s -- \ --branch worktree-june-6-stryker \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/27075004539/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/27075004539/artifacts/7458281344) · self-destructs in 30 days 💥 </details>

… P2) (#637) ## Summary Adds **Autopilot** — a reactive WHEN/IF/THEN rules engine that sits beside the scheduler and responds to live pod signals, plus the full builder UI from the design bundle. Merged to `dev` now with the nav entry **hidden** so the half-wired signal catalog isn't user-facing until P2 lands the biometric/ambient/enum signal sources (sleepypod-core-69). ### Server - `automations.*` tRPC router — CRUD, `setEnabled`/`setDryRun`, `runs` (audit log), `status` (live state), kill-switch get/set, `nights`, `backtest`. Writes hot-reload the running engine (mirrors `schedules.ts` → JobManager). - Real-history backtest (`src/automation/backtest.ts`) — pure replay over recorded series (movement, ambient, vitals, water) for a chosen past night, reusing the engine's own `WindowStore`/`evaluateCondition`/`evaluateExpr` so the preview matches real behavior. Edge + policy modes. - Global kill-switch — persisted `autopilotEnabled` setting (migration 0014, additive `ALTER TABLE`) that short-circuits engine ticks and is restored at boot. ### Builder - `builderModel.ts` — bidirectional mapper between the friendly WHEN/IF/THEN UI and the engine AST ("lower 2°F" → `setTemperature(current − 2)`; "ambient + 3" → `setTemperature(ambient + 3)`). Round-trip unit-tested. ### UI - `/autopilot` desktop console (full-bleed, like `/debug`): automations list as plain-English sentences, two-pane rule editor with live sentence preview + live backtest, diagnostics panel (per-rule state, run-log, kill-switch, dry-run). - Compact Autopilot panel inside the `/debug` console (kept — this is the dogfooding entry point while nav is hidden). - **BottomNav entry removed** — `/autopilot` is deep-link-only until P2. ### Safety Engine is inert with zero rules (fresh DB no-ops each tick). Even an enabled rule today can only act on the live-wired signals (per-side temp/level, water.low); biometric/ambient/enum read `undefined`→skip by design. Every action is gated by manual-override hold, dry-run, and the kill-switch. ### Deferred to P2 (sleepypod-core-69) Engine handles numeric signals only, so the builder catalog is the numeric/backtestable subset. Enum/bool signals (sleep stage, occupancy) wait on their source wiring. ## Test plan - `pnpm tsc` clean, `pnpm lint` clean, `pnpm next build` clean. - Vitest: 1922 pass (+22 new); round-trip builder mapper, backtest replay, engine tick/safety covered. - Manual: deploy to pod 192.168.1.88; confirm BottomNav shows no Autopilot tab; confirm `/debug` Autopilot panel renders live engine state; deep-link `/autopilot` loads the builder. Closes sleepypod-core-66 (P0+P1). P2 tracked in sleepypod-core-69.   <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update worktree-diy-autopilot ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/worktree-diy-autopilot/scripts/install \ | sudo bash -s -- --branch worktree-diy-autopilot ``` 🎯 **Pin to this exact build** ([run 27108297477](https://github.com/sleepypod/core/actions/runs/27108297477) · `c48a38d`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/c48a38d28dbffffa14c1db146261e44cf7775675/scripts/install \ | sudo bash -s -- \ --branch worktree-diy-autopilot \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/27108297477/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/27108297477/artifacts/7469107386) · self-destructs in 30 days 💥 </details>   ## Summary by CodeRabbit ## New Features * **Autopilot Console**: Introduced a reactive automation engine allowing users to create, manage, and test automation rules with a structured WHEN/IF/THEN interface. * **Rule Backtesting**: Added interactive backtest preview showing how automation rules would behave against historical sensor data. * **Automation Monitoring**: Added status panel displaying active rules, execution history, fires-today counts, and recent run audit logs. * **Safety Controls**: Implemented global kill-switch, dry-run mode for testing, cooldown gating, and anti-thrash protections.

…+ runaway durations (#639) ## Why Pod 88 (Pod 5 J55) field debug 2026-06-10: `sleep_records` degenerated — one overnight presence span fragmented into dozens of <15min sessions with **66-109 bogus bed-exits**, and durations ran away to **2736/2850min (45-47h)**. Raw vitals/movement/bed_temp streams were intact, so this was a detection bug, not data loss. Root cause in `modules/sleep-detector/main.py` `_update()`: raw per-sample `capSense` presence drove `_exit_count` and session/interval transitions directly. At 2 Hz a single noisy dropout (sub-second) immediately counted a bed-exit and split the session; the constant flapping back to present kept resetting `_last_present_ts`, so `ts - _last_present_ts >= ABSENCE_TIMEOUT_S` never fired and sessions never closed. ## What - **Debounce / hysteresis** (`PRESENCE_DEBOUNCE_S = 30s`): a present↔absent flip is only committed after the differing raw state persists for the dwell window. Brief dropouts are cancelled — they no longer increment `times_exited_bed` or split the session. `_apply_debounce()` records the true transition timestamp so interval edges and the session entry time stay accurate. Dwell `< ABSENCE_TIMEOUT_S` so a real exit still closes the session. - **Runaway cap** (`MAX_SESSION_S = 16h`): belt-and-suspenders force-close so no `sleep_record` can persist a multi-day `sleep_duration_seconds`. ## Test plan `modules/sleep-detector/test_main.py` — `TestPresenceDebounce`: - `test_brief_dropout_does_not_increment_exit_or_split_session` — 50 sub-debounce dropouts across one span → exactly **1 record, 1 exit**. - `test_sustained_absence_counts_single_exit` — a genuine sustained absence → 1 exit. - `test_runaway_session_is_capped` — presence past `MAX_SESSION_S` → no row exceeds the cap. ``` uv run --with pytest pytest -q test_main.py # 23 passed ``` ## Follow-up (manual, pod 88) Existing garbage rows (`sleep_records` ~id 300-316) predate this fix and live in the pod's `biometrics.db`; they need a one-time cleanup over SSH (not done here to avoid mutating live data unprompted): ```sql -- inspect first SELECT id, sleep_duration_seconds/60 AS min, times_exited_bed FROM sleep_records WHERE id BETWEEN 300 AND 316; -- then delete the fragments/runaways DELETE FROM sleep_records WHERE sleep_duration_seconds > 16*3600 OR times_exited_bed > 20; ``` Separate minor (not addressed): pod clock is UTC, so nightly dates label as the next UTC day. Closes sleepypod-core-71.  ## Summary by CodeRabbit ## Release Notes * **New Features** * Presence debouncing with 30-second dwell time applied to bed occupancy detection * Session duration capped at maximum 16 hours with automatic closure of long-running sessions * Session timestamps now aligned to actual state transition times * **Tests** * Added comprehensive test coverage for presence debounce behavior and session duration limits    <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update fix/sleep-detector-presence-debounce ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/fix/sleep-detector-presence-debounce/scripts/install \ | sudo bash -s -- --branch fix/sleep-detector-presence-debounce ``` 🎯 **Pin to this exact build** ([run 27320090177](https://github.com/sleepypod/core/actions/runs/27320090177) · `332570f`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/332570fed0a82a1c1f9172125e7b69c4f1eb536b/scripts/install \ | sudo bash -s -- \ --branch fix/sleep-detector-presence-debounce \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/27320090177/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/27320090177/artifacts/7553491736) · self-destructs in 30 days 💥 </details>

## Why The weekly mutation run ([run 26679315747](https://github.com/sleepypod/core/actions/runs/26679315747)) raises Node.js 20 deprecation annotations on two jobs — `summarize` and `record-baseline`: > Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: `actions/github-script@v7`. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. `actions/github-script@v7` is the only action in the repo still pinned to a Node 20 release; every other action (`checkout@v6`, `setup-node@v6`, `download-artifact@v8`, `upload-artifact@v7`) is already on a Node 24 major. ## What Bump all three `actions/github-script@v7` usages in `.github/workflows/mutation.yml` to `@v9` (Node 24): - `Comment on PR` step (PR-labeled runs) - `Update pinned tracking issue` step (`summarize` job) - `Compute aggregated row` step (`record-baseline` job) ### Why v9 is safe for these scripts v9's breaking changes are limited to: - `require('@actions/github')` no longer works in-script - `getOctokit` is now an injected parameter (can't be `const`/`let` redeclared) None of the three scripts touch either — they only use `require('fs')`/`require('path')` (Node built-ins) plus the standard `github.rest.*`, `context`, and `core` globals, all unchanged in v9. ## Test plan - [x] `git diff` confirms the only change is `v7` → `v9` on the three `uses:` lines; indentation and YAML structure unchanged. - [x] Confirmed 3 `@v9` / 0 `@v7` remaining in the workflow. - [ ] After merge, the next scheduled (or manually dispatched) mutation run should no longer emit the Node.js 20 deprecation annotation on the `summarize` and `record-baseline` jobs. 🤖 Generated with [Claude Code](https://claude.com/claude-code)   <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update ci/mutation-github-script-node24 ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/ci/mutation-github-script-node24/scripts/install \ | sudo bash -s -- --branch ci/mutation-github-script-node24 ``` 🎯 **Pin to this exact build** ([run 26691633977](https://github.com/sleepypod/core/actions/runs/26691633977) · `a15deda`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/a15deda978d696b460ff96539ffe49dc577aabc2/scripts/install \ | sudo bash -s -- \ --branch ci/mutation-github-script-node24 \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/26691633977/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/26691633977/artifacts/7310401530) · self-destructs in 30 days 💥 </details>

…d assertions (#626) ## Why `src/streaming/mqttBridge.ts` is the single largest source of surviving mutants in the weekly mutation run — **220 surviving** ([issue #591](#591), [run 26679315747](https://github.com/sleepypod/core/actions/runs/26679315747)), roughly 8.5% of the repo's 2580 survivors. The existing discovery test only asserts that *some* `homeassistant/...` topic is published and pins a couple of fields; it never checks the config payload bodies. As a result every `StringLiteral` / `ObjectLiteral` / `ArrayDeclaration` / `ConditionalExpression` / `EqualityOperator` mutant inside the HA discovery builders (`haDevice`, `climate`, `sensor`, and the binary-sensor literals) and their call sites survives. ## What Add a `mqttBridge — HA discovery payload content` describe block that drives the bridge with a fixed `MQTT_DEVICE_ID` + topic prefix (so every payload is deterministic), captures all published `homeassistant/...` config messages, and `toEqual`-asserts the **complete** payload for each entity: - left/right `climate` - `water_level`, `ambient_temperature`, `ambient_humidity` sensors - per-side `pump_*_rpm` / `pump_*_loop_temp` sensors - per-side `pump_*_stall` / `pump_*_clog` binary sensors - per-side `heart_rate` / `breathing_rate` / `hrv` biometric sensors - the shared `device` identity block on every config A full `toEqual` on each payload fails when any string, template, unit, device-class, mode list, or the `side === 'left'` label conditional is mutated — which is exactly what kills the surviving mutants. Scope is deliberately this one file (the biggest cluster) for a focused PR; the remaining survivors across other files are left for follow-ups. ## Test plan - [x] `npx vitest run src/streaming/tests/mqttBridge.test.ts` → **87 passed** (was 76; +11 new). - [x] Empirically verified the assertions kill mutants: mutating `payload_available: 'online'` → `''` in the `climate` builder fails exactly the two climate payload tests; source restored after. - [x] `npx eslint src/streaming/tests/mqttBridge.test.ts` clean. - [x] `npx tsc --noEmit` clean (exit 0, 0 errors). - [ ] Confirm mutation-score lift on the `streaming` shard on the next labeled / scheduled mutation run. 🤖 Generated with [Claude Code](https://claude.com/claude-code)   <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update test/mutation-mqtt-discovery ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/test/mutation-mqtt-discovery/scripts/install \ | sudo bash -s -- --branch test/mutation-mqtt-discovery ``` 🎯 **Pin to this exact build** ([run 26691824606](https://github.com/sleepypod/core/actions/runs/26691824606) · `ba39c3d`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/ba39c3d5ee088484bc93d025db9ab6b5726d48fd/scripts/install \ | sudo bash -s -- \ --branch test/mutation-mqtt-discovery \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/26691824606/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/26691824606/artifacts/7310460917) · self-destructs in 30 days 💥 </details>

…#636) ## Why Field report (and reproduced live on a pod): a side **"gets set to 83 when it's supposed to be off."** Root cause: the hardware has **no true off state**. Powering a side down parks it at heat **level 0** (neutral). `responseParser` synthesizes the temperature straight from the level via `levelToFahrenheit(0)` = `Math.round(82.5)` = **83**. Because `current/targetTemperature` were derived from the level rather than a real sensor, every consumer of `/device/status` — TempScreen, HomeKit, MQTT, automations — saw a target of **83°F** on a side the firmware reports as off (`targetLevel: 0`). Verified live against the pod at `.88` before the fix: ``` $ curl http://192.168.1.88:3000/api/device/status left: targetLevel: 0 → targetTemperature: 83 ❌ right: targetLevel: 0 → targetTemperature: 83 ❌ ``` ## What Fix at the **source** so the phantom can't reach any consumer: `parseDeviceStatus` now reports `null` for a level-0 side instead of `levelToFahrenheit(0)`. Level 0 already means "off" everywhere else in the codebase (`targetLevel !== 0` = powered), so this just makes the temperature honest about it. `SideStatus.current/targetTemperature` become `number | null`; consumers updated to handle null: - **`responseParser.ts`** — `tempForLevel(level)` → `null` when `level === 0` (both sides, current + target) - **`device.getStatus`** — output schema fields nullable; `convertTemp` passes `null` through - **HomeKit** (`thermostat.ts`, `sideController.ts`) — fall back to neutral, since HomeKit characteristics require a number - **`automation/signals.ts`** — an off side leaves the temp signal **absent**, so rules don't fire against a phantom neutral - **`SideSelector`** — prop widened (the UI was already null-safe via `?? 80`, and gates display on `targetLevel !== 0`) Also folded in (same bug surface, found via review/verification): - **`health.thermal`** — reports `null` for an off side rather than passing through the stored 83 - **`ThermalTrendChart`** — guards an all-null `temps` window (now reachable for an off side) so `Math.min(...[])` can't hand the Y-axis an `Infinity` domain - **`health.ts`** — corrected a misleading `MIN_FLOW_RPM` comment (it's a conservative dead-pump floor, independent of the configurable `pump_stall_rpm_threshold`, default 500) ## Test plan - `npx tsc --noEmit` clean; full affected suites green (parser, device, homekit, mqtt, automation, streaming, diagnostics, health). - New regressions: `responseParser` asserts **null** at level 0 (was `83`); `device.getStatus` asserts an off side passes `null` end-to-end; `health.thermal` and `ThermalTrendChart` guard tests. - **Manual (post-deploy on `.88`):** `curl http://192.168.1.88:3000/api/device/status` shows `targetTemperature: null` for the off sides, with `targetLevel: 0` unchanged. TempScreen/HomeKit show the side as **off** rather than 83°F.   <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update feat/thermal-debug-view ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/feat/thermal-debug-view/scripts/install \ | sudo bash -s -- --branch feat/thermal-debug-view ``` 🎯 **Pin to this exact build** ([run 27321593892](https://github.com/sleepypod/core/actions/runs/27321593892) · `847bbf2`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/847bbf29d265e8dc91d516a0f218131af5f3d63e/scripts/install \ | sudo bash -s -- \ --branch feat/thermal-debug-view \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/27321593892/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/27321593892/artifacts/7554027923) · self-destructs in 30 days 💥 </details>   ## Summary by CodeRabbit * **New Features** * Added thermal trend chart component for visualizing temperature trends over time * Added thermal diagnostics endpoint providing comprehensive system status including pump performance and temperature readings * **Bug Fixes** * Fixed temperature reporting for inactive states to correctly return null instead of phantom readings * **Tests** * Added test coverage for thermal trending and diagnostics functionality with edge cases

… assertions (#641) ## Why Issue #591 (weekly mutation baseline): `src/db/schema.ts` is the top surviving file at **208 surviving mutants**. The existing `migrations.test.ts` runs *pre-generated SQL* under `src/db/migrations/`, so it never exercises the drizzle schema objects — mutating a column name to `""`, flipping a `.default(false)` to `true`, or emptying an index array (`}, t => []`) leaves the static SQL untouched and nothing fails. ## What Add `src/db/tests/schema.test.ts` that reads the schema objects directly via `getTableConfig` and pins, per table: - table name, - the full ordered column list with `notNull` + a default descriptor (literal value / `sql` expression / `$defaultFn` / none), - every index (name, unique flag, columns), - plus the exact set of exported tables. One `toEqual` per table kills the StringLiteral (table/column/default/index names), BooleanLiteral (default flips), and ArrayDeclaration (`→ []`) mutators together. No source changes — the schema is correct as-is. Mirrors the test-only approach of #626/#635. ## Test plan - [x] `npx vitest run src/db/tests/schema.test.ts` → 12/12 pass. - [x] Applied representative mutations (string default → `""`, `.default(false)` → `true`, index array → `[]`) and confirmed the test **fails** under each, then reverted — mutants genuinely killed, not merely covered. - [x] Pre-existing `retention.test.ts` failures confirmed unrelated (fail on clean tree via stash).   <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update test/db-schema-mutants ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/test/db-schema-mutants/scripts/install \ | sudo bash -s -- --branch test/db-schema-mutants ``` 🎯 **Pin to this exact build** ([run 27480566648](https://github.com/sleepypod/core/actions/runs/27480566648) · `d96aa1d`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/d96aa1dbbe021526ab64d3ceecbbe76dfce3418d/scripts/install \ | sudo bash -s -- \ --branch test/db-schema-mutants \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/27480566648/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/27480566648/artifacts/7614941911) · self-destructs in 30 days 💥 </details>

## Why In the Autopilot rule editor, the dry-run notice was tucked at the bottom of the left-hand form column, below the THEN card — easy to miss, and far from the preview/backtest the user is actually reading while in dry-run. Per the Autopilot.html design handoff, the notice should sit above the right column's cards so it caps the live preview and reads as context for "here's what this rule *would* do." ## What Move the `rule.mode === 'dryrun'` notice from the bottom of the left form column to the top of the right column, above SentencePreview and the BacktestPanel card. No styling or logic change — same condition, same markup, new position. ## Test plan - `tsc` clean - `eslint src/components/Autopilot/RuleEditor.tsx` clean - Manual: open a rule editor, toggle Dry-run — notice now appears at the top of the right pane above the "Reads as" card; toggle to Active — notice disappears.   <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update feat/autopilot-design ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/feat/autopilot-design/scripts/install \ | sudo bash -s -- --branch feat/autopilot-design ``` 🎯 **Pin to this exact build** ([run 27516922675](https://github.com/sleepypod/core/actions/runs/27516922675) · `fcf0a90`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/fcf0a906b5e54285c4c594de6d29de08770316b5/scripts/install \ | sudo bash -s -- \ --branch feat/autopilot-design \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/27516922675/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/27516922675/artifacts/7626634849) · self-destructs in 30 days 💥 </details>   ## Summary by CodeRabbit * **Style** * Code formatting and layout adjustments with no functional changes.

## Why The Automations right pane shows the capacitive presence matrix (bed-pressure zones) only as a **live** view — the raw ~2 Hz `capSense2` frames are never persisted, so the spatial zone replay and `cap.*` backtest can't reach past nights. This is the foundation for lifting the night/date selector to pane scope and adding a standalone "Last Night" historical view (follow-up PRs). ## What Add a downsampling writer that aggregates the live capacitive stream into **one row per side per ~5s window** in a new `cap_sense_frames` table, pruned to **~48h** (the bulkiest sensor stream — only the last night or two is ever replayed). - New `cap_sense_frames` table (`zones` head/torso/legs means, scalar `max/mean/spread`, modal `peakZone`, `frameCount`). - `streaming/capFramePersistence.ts`: ts-keyed windowing (correct under stream catch-up), best-effort writes (a DB failure never disrupts the live stream), throttled 48h prune. - Wired into the `piezoStream` broadcast loop alongside the existing live snapshot; windows reset on RAW-file switch. - Extracted `reduceCap` + new `zoneTriple` into dependency-free `automation/capReduce.ts` to avoid a `piezoStream ↔ signals.biometrics` import cycle. Scalar (Pod 3) sensors persist `zones: null` — no spatial resolution to replay, but `cap.*` scalars still backtest. ## Scope / non-goals This PR only **writes** the frames. Reading them into the backtest series and the UI (pane-level night picker, standalone history view) are follow-up PRs. ## Test plan - `vitest run src/automation/tests/capReduce.test.ts src/streaming/tests/capFramePersistence.test.ts` — new unit coverage for `zoneTriple` and the window state machine (accumulate within window, rollover past the 5s boundary, scalar→null zones, per-side independence, reset). - `vitest run src/automation/tests/signals.biometrics.test.ts src/streaming/tests/piezoStream.test.ts src/lib/tests/occupancy.test.ts` — existing suites green after the `reduceCap` extraction. - `tsc` clean; `eslint` clean on changed files. - `pnpm db:biometrics:generate` → migration `0010_fixed_silvermane.sql`. Manual: on a pod, confirm `cap_sense_frames` accrues ~1 row/side/5s while occupied and that rows older than 48h are pruned.  ## Summary by CodeRabbit * **New Features** * Added historical storage and analysis of capacitive presence sensor readings with spatial zone tracking * Automatic data retention and cleanup for storage optimization * **Refactor** * Reorganized internal sensor data processing utilities    <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update feat/persist-cap-frames ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/feat/persist-cap-frames/scripts/install \ | sudo bash -s -- --branch feat/persist-cap-frames ``` 🎯 **Pin to this exact build** ([run 27516162063](https://github.com/sleepypod/core/actions/runs/27516162063) · `34b060c`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/34b060c475e873eebcd6765f33607daae66029ae/scripts/install \ | sudo bash -s -- \ --branch feat/persist-cap-frames \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/27516162063/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/27516162063/artifacts/7626417573) · self-destructs in 30 days 💥 </details>

…642) ## Why Two UX problems in the Autopilot/Automations builder: 1. The edge-triggered **backtest chart** became unreadable at high event density (e.g. 7 fires + 70 suppressed). Every fired and suppressed sample drew a full-height vertical line across the plot, hatching a "curtain" that buried the actual traces. 2. The builder's **number inputs** were +/- steppers only — you couldn't click in and type a value. The minute fields also crammed the unit into the value ("5m") inside the box. ## What All changes are scoped to the **edge-triggered** path of `Chart` and the shared `NumberField`. Continuous-policy mode renders identically to before (guarded by `policy ?`), and the `simulate`/server backtest logic and the summary Stat cards are untouched. ### Backtest chart (`BacktestPanel.tsx`) - **Removed** all per-sample full-height vertical lines (both suppressed and fired); suppressed no longer marks the main plot at all, fires remain as dots on the avg curve. - **Cooldown bands**: consecutive suppressed indices collapse into a single low-opacity grey rect per run (padded half a sample-step each side) instead of N marks. - **Event rail**: new ~14px dark rounded lane beneath the plot carries all event density — one grey tick per suppressed sample, one heavier red tick per fire on top. Time-axis labels moved below the rail; viewBox height recomputed from the new geometry. - **Hierarchy fix**: windowed-avg is now the brightest/heaviest trace (white `#fafafa`, 2px); raw movement dropped to a 1px hairline at 0.5 opacity behind it. - **Red does one job**: faint red fire-zone tint above the threshold, threshold dashed line softened to 0.6 opacity, saturated red reserved for fires (curve dots + rail ticks). - **Legend** updated to match: white avg swatch, suppressed shown as a vertical tick, new translucent "cooldown" block. ### Number inputs (`primitives.tsx`, `RuleEditor.tsx`) - `NumberField` center is now a typeable `<input>` (click in and type) alongside the +/- buttons, via a draft string that commits only when it parses. - The unit renders **outside** the box (matching the existing number-then-unit pattern); minute fields now read `[5] minutes` instead of `5m`. Applies to every builder field (threshold, comparison value, delta, clamp min/max, window, revert, cooldown). ## Test plan - `eslint` + `tsc --noEmit` clean on all three files. - Deployed to Pod 5 (`192.168.1.88`); `sleepypod.service` active, app serving. - Manual: open the Automations builder backtest panel on a high-density night and confirm the plot stays clean with events on the rail; click into each number field and type a value; confirm continuous-policy mode chart is visually unchanged.  ## Summary by CodeRabbit ## Release Notes **New Features** - Backtest chart now features edge mode with a dedicated event rail to better visualize event density - Cooldown bands now display suppressed event information more clearly - Number input fields now support direct text entry **Style** - Time durations now display as "minutes" for improved clarity - Updated chart legend to reflect new visualization elements    <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update feat/automation-builder-ui ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/feat/automation-builder-ui/scripts/install \ | sudo bash -s -- --branch feat/automation-builder-ui ``` 🎯 **Pin to this exact build** ([run 27520854239](https://github.com/sleepypod/core/actions/runs/27520854239) · `5cb380c`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/5cb380c75f60169ba951bafe9ce647d5c3067a65/scripts/install \ | sudo bash -s -- \ --branch feat/automation-builder-ui \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/27520854239/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/27520854239/artifacts/7628004076) · self-destructs in 30 days 💥 </details>

…lling past target) (#640) ## Summary The biometrics archive pruner (`modules/biometrics-archiver/sleepypod-biometrics-pruner`) has never pruned on a pod with a large archive. It exits before deleting anything, so `/persistent/biometrics-archive` grows unbounded and `/persistent` fills past the 80% target. ### Root cause ```bash oldest=$(find ... -printf '%T@ %p\n' | sort -n | head -1 | awk '{print $2}') ``` Under `set -euo pipefail`, `head -1` closes the pipe after the first line. With a large archive (thousands of files) `sort` is still writing, gets `SIGPIPE` → `sort: write failed: 'standard output': Broken pipe`, the pipeline returns 141, and `set -e` aborts the whole script. Net effect: `pruned=0` every run, service shows `status=2/INVALIDARGUMENT`. ### Fix Replace `sort -n | head -1 | awk '{print $2}'` with `sort -n | awk 'NR==1{print $2}'`. `awk` reads the whole stream (prints only line 1) so `sort` never gets SIGPIPE. ## Evidence (Pod 5 / .88, eight-pod) - `/persistent` at **84%** (target <80%); `/persistent/biometrics-archive` = **9.4 GB**, 3,789 `*.RAW.gz`. - `journalctl -u sleepypod-biometrics-pruner`: `sort: write failed: 'standard output': Broken pipe` → `status=2/INVALIDARGUMENT` every 15 min. ## Test plan - [x] Repro under `set -o pipefail`: `seq 1 100000 | sort -n | head -1 | awk '{print $1}'` exits **141**; `sort -n | awk 'NR==1{print $1}'` exits **0**. - [x] `bash -n` clean. - [ ] Deploy to .88, run `systemctl start sleepypod-biometrics-pruner`, confirm it prunes oldest `.RAW.gz` until `/persistent` < 80% and logs `pruned=N`. 🤖 Generated with [Claude Code](https://claude.com/claude-code)  ## Summary by CodeRabbit * **Bug Fixes** * Fixed a premature-pruning failure in the biometrics archive pruner caused by pipeline breakage under strict error handling. The script now reliably identifies and prunes the oldest eligible files, preventing it from aborting early and helping keep archive size properly managed.    <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update fix/biometrics-pruner-sigpipe ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/fix/biometrics-pruner-sigpipe/scripts/install \ | sudo bash -s -- --branch fix/biometrics-pruner-sigpipe ``` 🎯 **Pin to this exact build** ([run 27520832687](https://github.com/sleepypod/core/actions/runs/27520832687) · `412c906`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/412c90698d429015f8b045f8173d4f337ed66477/scripts/install \ | sudo bash -s -- \ --branch fix/biometrics-pruner-sigpipe \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/27520832687/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/27520832687/artifacts/7627998221) · self-destructs in 30 days 💥 </details>

…lay (#648) ## Why #645 added the `cap_sense_frames` persistence layer (downsampled ~5s-windowed capacitive presence frames) but **nothing read it**. The table was write-only: `recordCapFrame` (via `piezoStream`) inserts and the pruner deletes, but no `SELECT` exists anywhere. Every pod was paying the write + storage + prune cost of what the schema calls "the bulkiest sensor stream" with zero consumers — and the schema's own stated purpose was unrealized: > windowed row per side (~5s) so the **spatial zone replay and cap.\* backtest** can reach recent nights Neither consumer existed. The three `{side}.cap.*` signals were still flagged `liveOnly: true` (a flag nothing actually reads), and `CapZoneViz` only rendered the live stream. ## What Wire both read paths the persistence layer was built for: **Backtest (`cap.*`)** - `loadSeries` now pulls `{side}.cap.max/mean/spread` from `cap_sense_frames` over the night window, mirroring the existing per-signal series blocks. - The three cap signals drop the now-false `liveOnly` flag — they are back-testable. - `cap.peakZone` deliberately stays out of the engine catalog: it's a spatial zone index, not a scalar signal (consistent with #645's design choice). **Spatial zone replay** - New `automations.capZoneReplay` query: returns the per-window `[head, torso, legs]` loads + `peakZone` for a chosen night, stride-downsampled to a `maxFrames` budget (default 300) so a full night stays a light payload. Skips Pod-3 scalar frames (null `zones`). - `CapZoneViz` gains a **Live / Replay** toggle (shown only when a backtest night is available). Replay scrubs — or auto-plays — through the recorded zone snapshots beside the backtest, with a stable per-night normalization. - Added a `Pause` icon. ## Test plan - `automations.test.ts` (new): covers `capZoneReplay` night resolution, the spatial-frame select, stride downsampling (25 rows → maxFrames 10 → 9 frames, first preserved), null-zones coercion, and the no-history `ok:false` path. - `npx tsc` clean; ESLint clean on all touched files. - `vitest run` for automation + streaming suites: 138 pass. - Manual: open a rule using a Bed pressure signal in the editor → backtest chart now plots the cap series; toggle Replay → scrub/play the night's zones. 🤖 Generated with [Claude Code](https://claude.com/claude-code)   <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update feat/cap-frame-readers ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/feat/cap-frame-readers/scripts/install \ | sudo bash -s -- --branch feat/cap-frame-readers ``` 🎯 **Pin to this exact build** ([run 27524905607](https://github.com/sleepypod/core/actions/runs/27524905607) · `4843f01`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/4843f01247a65a858d4e6bb221426da5777692fb/scripts/install \ | sudo bash -s -- \ --branch feat/cap-frame-readers \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/27524905607/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/27524905607/artifacts/7629394448) · self-destructs in 30 days 💥 </details>   ## Summary by CodeRabbit ## Release Notes * **New Features** * Added a Live/Replay view for capacitive zone visualization, including play/pause controls and timeline scrubbing for historical nights. * Wired the rule editor’s capacitive zone visualization to backtest context (selected side and night), so it aligns with the active backtest window. * Extended backtest-capable capacitive signals for cap max/mean/spread. * **Style** * Added a Pause icon for replay playback controls.

> ℹ️ **Note** > > This PR body was truncated due to platform limits. This PR contains the following updates: | Package | Update | Change | |---|---|---| | [node](https://nodejs.org) ([source](https://redirect.github.com/nodejs/node)) | major | `22` → `24` | --- ### Release Notes <details> <summary>nodejs/node (node)</summary> ### [`v24.16.0`](https://redirect.github.com/nodejs/node/releases/tag/v24.16.0): 2026-05-21, Version 24.16.0 'Krypton' (LTS), @aduh95 [Compare Source](https://redirect.github.com/nodejs/node/compare/v24.15.0...v24.16.0) ##### Notable Changes - \[[`b267f6bca3`](https://redirect.github.com/nodejs/node/commit/b267f6bca3)] - **(SEMVER-MINOR)** **crypto**: implement `randomUUIDv7()` (nabeel378) [#62553](https://redirect.github.com/nodejs/node/pull/62553) - \[[`ec2451b9cd`](https://redirect.github.com/nodejs/node/commit/ec2451b9cd)] - **(SEMVER-MINOR)** **debugger**: add edit-free runtime expression probes to `node inspect` (Joyee Cheung) [#62713](https://redirect.github.com/nodejs/node/pull/62713) - \[[`9705f628d9`](https://redirect.github.com/nodejs/node/commit/9705f628d9)] - **(SEMVER-MINOR)** **fs**: add signal option to `fs.stat()` (Mert Can Altin) [#57775](https://redirect.github.com/nodejs/node/pull/57775) - \[[`40ccfdecf9`](https://redirect.github.com/nodejs/node/commit/40ccfdecf9)] - **(SEMVER-MINOR)** **fs**: expose `frsize` field in `statfs` (Jinho Jang) [#62277](https://redirect.github.com/nodejs/node/pull/62277) - \[[`d7188af5c9`](https://redirect.github.com/nodejs/node/commit/d7188af5c9)] - **(SEMVER-MINOR)** **http**: harden `ClientRequest` options merge (Matteo Collina) [#63082](https://redirect.github.com/nodejs/node/pull/63082) - \[[`aa1d8a9afc`](https://redirect.github.com/nodejs/node/commit/aa1d8a9afc)] - **(SEMVER-MINOR)** **http**: add `req.signal` to `IncomingMessage` (Akshat) [#62541](https://redirect.github.com/nodejs/node/pull/62541) - \[[`6f37f7e240`](https://redirect.github.com/nodejs/node/commit/6f37f7e240)] - **(SEMVER-MINOR)** **stream**: propagate destruction in `duplexPair` (Ahmed Elhor) [#61098](https://redirect.github.com/nodejs/node/pull/61098) - \[[`d14029be7f`](https://redirect.github.com/nodejs/node/commit/d14029be7f)] - **(SEMVER-MINOR)** **test\_runner**: support test order randomization (Pietro Marchini) [#61747](https://redirect.github.com/nodejs/node/pull/61747) - \[[`d142c584cd`](https://redirect.github.com/nodejs/node/commit/d142c584cd)] - **(SEMVER-MINOR)** **test\_runner**: align mock timeout api (sangwook) [#62820](https://redirect.github.com/nodejs/node/pull/62820) - \[[`01a9552585`](https://redirect.github.com/nodejs/node/commit/01a9552585)] - **(SEMVER-MINOR)** **test\_runner**: add mock-timers support for `AbortSignal.timeout` (DeveloperViraj) [#60751](https://redirect.github.com/nodejs/node/pull/60751) - \[[`00705a459a`](https://redirect.github.com/nodejs/node/commit/00705a459a)] - **(SEMVER-MINOR)** **util**: colorize text with hex colors (Guilherme Araújo) [#61556](https://redirect.github.com/nodejs/node/pull/61556) ##### Commits - \[[`dd72df060d`](https://redirect.github.com/nodejs/node/commit/dd72df060d)] - **assert,util**: fix stale nested cycle memo entries (Ruben Bridgewater) [#62509](https://redirect.github.com/nodejs/node/pull/62509) - \[[`add94f4bc3`](https://redirect.github.com/nodejs/node/commit/add94f4bc3)] - **build**: track PDL files as inputs in inspector GN build (Robo) [#62888](https://redirect.github.com/nodejs/node/pull/62888) - \[[`1b1eb9e334`](https://redirect.github.com/nodejs/node/commit/1b1eb9e334)] - **build**: remove redundant -fuse-linker-plugin from GCC LTO flags (Daniel Lando) [#62667](https://redirect.github.com/nodejs/node/pull/62667) - \[[`8752b604ec`](https://redirect.github.com/nodejs/node/commit/8752b604ec)] - **crypto**: deduplicate and canonicalize CryptoKey usages (Filip Skokan) [#62902](https://redirect.github.com/nodejs/node/pull/62902) - \[[`341947e7fd`](https://redirect.github.com/nodejs/node/commit/341947e7fd)] - **crypto**: reject unintended raw key format string input (Filip Skokan) [#62974](https://redirect.github.com/nodejs/node/pull/62974) - \[[`28a78747fc`](https://redirect.github.com/nodejs/node/commit/28a78747fc)] - **crypto**: remove Argon2 KDF derivation from its job setup (Filip Skokan) [#62863](https://redirect.github.com/nodejs/node/pull/62863) - \[[`16e8c2b54d`](https://redirect.github.com/nodejs/node/commit/16e8c2b54d)] - **crypto**: fix unsigned conversion of 4-byte RSA publicExponent (DeepView Autofix) [#62839](https://redirect.github.com/nodejs/node/pull/62839) - \[[`eeae754a87`](https://redirect.github.com/nodejs/node/commit/eeae754a87)] - **crypto**: reject inherited key type names (Jonathan Lopes) [#62875](https://redirect.github.com/nodejs/node/pull/62875) - \[[`9dd5540325`](https://redirect.github.com/nodejs/node/commit/9dd5540325)] - **crypto**: add memory tracking for secureContext openssl objects (Mert Can Altin) [#59051](https://redirect.github.com/nodejs/node/pull/59051) - \[[`b267f6bca3`](https://redirect.github.com/nodejs/node/commit/b267f6bca3)] - **(SEMVER-MINOR)** **crypto**: implement randomUUIDv7() (nabeel378) [#62553](https://redirect.github.com/nodejs/node/pull/62553) - \[[`7597d204c1`](https://redirect.github.com/nodejs/node/commit/7597d204c1)] - **crypto**: add support for [`Ed25519`](https://redirect.github.com/nodejs/node/commit/Ed25519) context parameter (Filip Skokan) [#62474](https://redirect.github.com/nodejs/node/pull/62474) - \[[`4bf85845da`](https://redirect.github.com/nodejs/node/commit/4bf85845da)] - **debugger**: move ProbeInspectorSession and helpers to separate files (Joyee Cheung) [#63013](https://redirect.github.com/nodejs/node/pull/63013) - \[[`ec2451b9cd`](https://redirect.github.com/nodejs/node/commit/ec2451b9cd)] - **(SEMVER-MINOR)** **debugger**: add edit-free runtime expression probes to `node inspect` (Joyee Cheung) [#62713](https://redirect.github.com/nodejs/node/pull/62713) - \[[`83e98f77b7`](https://redirect.github.com/nodejs/node/commit/83e98f77b7)] - **deps**: update corepack to 0.35.0 (Node.js GitHub Bot) [#63375](https://redirect.github.com/nodejs/node/pull/63375) - \[[`ec8c6b939a`](https://redirect.github.com/nodejs/node/commit/ec8c6b939a)] - **deps**: V8: cherry-pick [`657d8de`](https://redirect.github.com/nodejs/node/commit/657d8de27427) (Guy Bedford) [#62784](https://redirect.github.com/nodejs/node/pull/62784) - \[[`722c0c3274`](https://redirect.github.com/nodejs/node/commit/722c0c3274)] - **deps**: update nghttp3 to 1.14.0 (Node.js GitHub Bot) [#61187](https://redirect.github.com/nodejs/node/pull/61187) - \[[`5304db93d3`](https://redirect.github.com/nodejs/node/commit/5304db93d3)] - **deps**: update nghttp3 to 1.13.1 (Node.js GitHub Bot) [#60046](https://redirect.github.com/nodejs/node/pull/60046) - \[[`e073b3811d`](https://redirect.github.com/nodejs/node/commit/e073b3811d)] - **deps**: update nghttp3 to 1.11.0 (James M Snell) [#59249](https://redirect.github.com/nodejs/node/pull/59249) - \[[`1d00313fb2`](https://redirect.github.com/nodejs/node/commit/1d00313fb2)] - **deps**: update ngtcp2 to 1.14.0 (James M Snell) [#59249](https://redirect.github.com/nodejs/node/pull/59249) - \[[`8b3a4fc18f`](https://redirect.github.com/nodejs/node/commit/8b3a4fc18f)] - **deps**: update amaro to 1.1.9 (Node.js GitHub Bot) [#63090](https://redirect.github.com/nodejs/node/pull/63090) - \[[`62fe0cfcd1`](https://redirect.github.com/nodejs/node/commit/62fe0cfcd1)] - **deps**: update llhttp to 9.4.1 (Node.js GitHub Bot) [#63045](https://redirect.github.com/nodejs/node/pull/63045) - \[[`137e09c8e9`](https://redirect.github.com/nodejs/node/commit/137e09c8e9)] - **deps**: update corepack to 0.34.7 (Node.js GitHub Bot) [#62810](https://redirect.github.com/nodejs/node/pull/62810) - \[[`14a4cb8fbc`](https://redirect.github.com/nodejs/node/commit/14a4cb8fbc)] - **deps**: update timezone to 2026b (Node.js GitHub Bot) [#62962](https://redirect.github.com/nodejs/node/pull/62962) - \[[`3e1036583a`](https://redirect.github.com/nodejs/node/commit/3e1036583a)] - **deps**: upgrade npm to 11.13.0 (npm team) [#62898](https://redirect.github.com/nodejs/node/pull/62898) - \[[`01dfe5961c`](https://redirect.github.com/nodejs/node/commit/01dfe5961c)] - **deps**: cherry-pick [libuv/libuv@`439a54b`](https://redirect.github.com/libuv/libuv/commit/439a54b) (skooch) [#62881](https://redirect.github.com/nodejs/node/pull/62881) - \[[`6cd368b10c`](https://redirect.github.com/nodejs/node/commit/6cd368b10c)] - **deps**: update sqlite to 3.53.0 (Node.js GitHub Bot) [#62699](https://redirect.github.com/nodejs/node/pull/62699) - \[[`f218a4f553`](https://redirect.github.com/nodejs/node/commit/f218a4f553)] - **deps**: update nbytes to 0.1.4 (Node.js GitHub Bot) [#62698](https://redirect.github.com/nodejs/node/pull/62698) - \[[`b47688524a`](https://redirect.github.com/nodejs/node/commit/b47688524a)] - **deps**: update archs files for openssl-3.5.6 (Node.js GitHub Bot) [#62629](https://redirect.github.com/nodejs/node/pull/62629) - \[[`d202e2d343`](https://redirect.github.com/nodejs/node/commit/d202e2d343)] - **deps**: upgrade openssl sources to openssl-3.5.6 (Node.js GitHub Bot) [#62629](https://redirect.github.com/nodejs/node/pull/62629) - \[[`2faba66341`](https://redirect.github.com/nodejs/node/commit/2faba66341)] - **deps**: update minimatch to 10.2.5 (Node.js GitHub Bot) [#62594](https://redirect.github.com/nodejs/node/pull/62594) - \[[`fa46c90c5d`](https://redirect.github.com/nodejs/node/commit/fa46c90c5d)] - **deps**: update googletest to [`d72f9c8`](https://redirect.github.com/nodejs/node/commit/d72f9c8aea6817cdf1ca0ac10887f328de7f3da2) (Node.js GitHub Bot) [#62593](https://redirect.github.com/nodejs/node/pull/62593) - \[[`099ded5713`](https://redirect.github.com/nodejs/node/commit/099ded5713)] - **deps**: update simdjson to 4.6.1 (Node.js GitHub Bot) [#62592](https://redirect.github.com/nodejs/node/pull/62592) - \[[`7ce95afe96`](https://redirect.github.com/nodejs/node/commit/7ce95afe96)] - **deps**: libuv: cherry-pick [`aabb765`](https://redirect.github.com/nodejs/node/commit/aabb7651de) (Santiago Gimeno) [#62561](https://redirect.github.com/nodejs/node/pull/62561) - \[[`57ef845623`](https://redirect.github.com/nodejs/node/commit/57ef845623)] - **deps**: update icu to 78.3 (Node.js GitHub Bot) [#62324](https://redirect.github.com/nodejs/node/pull/62324) - \[[`493ac40e12`](https://redirect.github.com/nodejs/node/commit/493ac40e12)] - **deps**: update libuv to 1.52.1 (Node.js GitHub Bot) [#61829](https://redirect.github.com/nodejs/node/pull/61829) - \[[`b39508b368`](https://redirect.github.com/nodejs/node/commit/b39508b368)] - **deps**: update undici to 7.25.0 (Node.js GitHub Bot) [#63011](https://redirect.github.com/nodejs/node/pull/63011) - \[[`cb67a925e9`](https://redirect.github.com/nodejs/node/commit/cb67a925e9)] - **deps**: use npm undici\@seven tag in `update-undici.sh` (Matteo Collina) [#62739](https://redirect.github.com/nodejs/node/pull/62739) - \[[`aa1e0bc28b`](https://redirect.github.com/nodejs/node/commit/aa1e0bc28b)] - **doc**: fix typos and inconsistencies in crypto.md and webcrypto.md (Filip Skokan) [#62828](https://redirect.github.com/nodejs/node/pull/62828) - \[[`f2a1735ed9`](https://redirect.github.com/nodejs/node/commit/f2a1735ed9)] - **doc**: fix duplicate word "to to" in util.styleText (Daijiro Wachi) [#62917](https://redirect.github.com/nodejs/node/pull/62917) - \[[`b6378e215c`](https://redirect.github.com/nodejs/node/commit/b6378e215c)] - **doc**: fix node-config-schema (Сковорода Никита Андреевич) [#61596](https://redirect.github.com/nodejs/node/pull/61596) - \[[`233894a9ce`](https://redirect.github.com/nodejs/node/commit/233894a9ce)] - **doc**: fix the TypeScript Execute (tsx) project link (David Thornton) [#63093](https://redirect.github.com/nodejs/node/pull/63093) - \[[`5d97919f8f`](https://redirect.github.com/nodejs/node/commit/5d97919f8f)] - **doc**: correct diagnostics\_channel built-in channel names (Bryan English) [#62995](https://redirect.github.com/nodejs/node/pull/62995) - \[[`2a9ccc927e`](https://redirect.github.com/nodejs/node/commit/2a9ccc927e)] - **doc**: use mjs/cjs blocks for callbackify null reason example (Daijiro Wachi) [#62884](https://redirect.github.com/nodejs/node/pull/62884) - \[[`ef413b5358`](https://redirect.github.com/nodejs/node/commit/ef413b5358)] - **doc**: fix typo in test.md (Rich Trott) [#62960](https://redirect.github.com/nodejs/node/pull/62960) - \[[`76f21c5070`](https://redirect.github.com/nodejs/node/commit/76f21c5070)] - **doc**: correct typo in PR contribution instructions (Mike McCready) [#62738](https://redirect.github.com/nodejs/node/pull/62738) - \[[`ca02af1f7d`](https://redirect.github.com/nodejs/node/commit/ca02af1f7d)] - **doc**: fix duplicate word "of of" in postMessageToThread (Daijiro Wachi) [#62917](https://redirect.github.com/nodejs/node/pull/62917) - \[[`46c99ed526`](https://redirect.github.com/nodejs/node/commit/46c99ed526)] - **doc**: fix duplicate word "for for" in compile cache (Daijiro Wachi) [#62917](https://redirect.github.com/nodejs/node/pull/62917) - \[[`1a60851734`](https://redirect.github.com/nodejs/node/commit/1a60851734)] - **doc**: fix typo in dns.lookup options description (Daijiro Wachi) [#62882](https://redirect.github.com/nodejs/node/pull/62882) - \[[`169b5ea2ed`](https://redirect.github.com/nodejs/node/commit/169b5ea2ed)] - **doc**: fix Argon2 parameter bounds (Tobias Nießen) [#62868](https://redirect.github.com/nodejs/node/pull/62868) - \[[`9a3a190f4e`](https://redirect.github.com/nodejs/node/commit/9a3a190f4e)] - **doc**: clarify diffieHellman.generateKeys recomputes same key (Kit Dallege) [#62205](https://redirect.github.com/nodejs/node/pull/62205) - \[[`0fba9e87d6`](https://redirect.github.com/nodejs/node/commit/0fba9e87d6)] - **doc**: remove Ayase-252 and meixg from triagger team (Antoine du Hamel) [#62841](https://redirect.github.com/nodejs/node/pull/62841) - \[[`9c700f3446`](https://redirect.github.com/nodejs/node/commit/9c700f3446)] - **doc**: clarify dns.lookup() callback signature when all is true (eungi) [#62800](https://redirect.github.com/nodejs/node/pull/62800) - \[[`6b7280bc17`](https://redirect.github.com/nodejs/node/commit/6b7280bc17)] - **doc**: add experimental modules lifetime policy (Paolo Insogna) [#62753](https://redirect.github.com/nodejs/node/pull/62753) - \[[`ce47ea31c9`](https://redirect.github.com/nodejs/node/commit/ce47ea31c9)] - **doc**: clarify process.\_debugProcess() in Permission Model (Fahad Khan) [#62537](https://redirect.github.com/nodejs/node/pull/62537) - \[[`ba01633757`](https://redirect.github.com/nodejs/node/commit/ba01633757)] - **doc**: fix typo in devcontainer guide (Rohan Santhosh Kumar) [#62687](https://redirect.github.com/nodejs/node/pull/62687) - \[[`70b4d5839b`](https://redirect.github.com/nodejs/node/commit/70b4d5839b)] - **doc**: clarify Backport-PR-URL metadata added automatically (Mike McCready) [#62668](https://redirect.github.com/nodejs/node/pull/62668) - \[[`8126d1c3eb`](https://redirect.github.com/nodejs/node/commit/8126d1c3eb)] - **doc**: update WPT test runner README.md (Filip Skokan) [#62680](https://redirect.github.com/nodejs/node/pull/62680) - \[[`978afea4b5`](https://redirect.github.com/nodejs/node/commit/978afea4b5)] - **doc**: fix spelling in release announcement guidance (Rohan Santhosh Kumar) [#62663](https://redirect.github.com/nodejs/node/pull/62663) - \[[`1684ab8ff8`](https://redirect.github.com/nodejs/node/commit/1684ab8ff8)] - **doc**: note non-monotonic clock in crypto.randomUUIDv7 (nabeel378) [#62600](https://redirect.github.com/nodejs/node/pull/62600) - \[[`86d4f07930`](https://redirect.github.com/nodejs/node/commit/86d4f07930)] - **doc**: update bug bounty program (Rafael Gonzaga) [#62590](https://redirect.github.com/nodejs/node/pull/62590) - \[[`736ed8a08f`](https://redirect.github.com/nodejs/node/commit/736ed8a08f)] - **doc**: document TransformStream transformer.cancel option (Tom Pereira) [#62566](https://redirect.github.com/nodejs/node/pull/62566) - \[[`938af9be01`](https://redirect.github.com/nodejs/node/commit/938af9be01)] - **doc**: mention test runner retry attemp is zero based (Moshe Atlow) [#62504](https://redirect.github.com/nodejs/node/pull/62504) - \[[`94433e450f`](https://redirect.github.com/nodejs/node/commit/94433e450f)] - **doc,src,test**: fix dead inspector help URL (semimikoh) [#62745](https://redirect.github.com/nodejs/node/pull/62745) - \[[`ddf1f01659`](https://redirect.github.com/nodejs/node/commit/ddf1f01659)] - **esm**: add `ERR_REQUIRE_ESM_RACE_CONDITION` (Antoine du Hamel) [#62462](https://redirect.github.com/nodejs/node/pull/62462) - \[[`4a506acd16`](https://redirect.github.com/nodejs/node/commit/4a506acd16)] - **fs**: add followSymlinks option to glob (Matteo Collina) [#62695](https://redirect.github.com/nodejs/node/pull/62695) - \[[`f4ea495f9b`](https://redirect.github.com/nodejs/node/commit/f4ea495f9b)] - **fs**: restore fs patchability in ESM loader (Joyee Cheung) [#62835](https://redirect.github.com/nodejs/node/pull/62835) - \[[`63c111cd60`](https://redirect.github.com/nodejs/node/commit/63c111cd60)] - **fs**: validate position argument before length === 0 early return (Edy Silva) [#62674](https://redirect.github.com/nodejs/node/pull/62674) - \[[`9705f628d9`](https://redirect.github.com/nodejs/node/commit/9705f628d9)] - **(SEMVER-MINOR)** **fs**: add signal option to fs.stat() (Mert Can Altin) [#57775](https://redirect.github.com/nodejs/node/pull/57775) - \[[`40ccfdecf9`](https://redirect.github.com/nodejs/node/commit/40ccfdecf9)] - **(SEMVER-MINOR)** **fs**: expose frsize field in statfs (Jinho Jang) [#62277](https://redirect.github.com/nodejs/node/pull/62277) - \[[`717476a24e`](https://redirect.github.com/nodejs/node/commit/717476a24e)] - **http**: emit 'drain' on OutgoingMessage only after buffers drain (Robert Nagy) [#62936](https://redirect.github.com/nodejs/node/pull/62936) - \[[`d7188af5c9`](https://redirect.github.com/nodejs/node/commit/d7188af5c9)] - **(SEMVER-MINOR)** **http**: harden ClientRequest options merge (Matteo Collina) [#63082](https://redirect.github.com/nodejs/node/pull/63082) - \[[`64f15c274a`](https://redirect.github.com/nodejs/node/commit/64f15c274a)] - **http**: fix leaked error listener on sync HTTP req create + destroy (Tim Perry) [#62872](https://redirect.github.com/nodejs/node/pull/62872) - \[[`5c4798d799`](https://redirect.github.com/nodejs/node/commit/5c4798d799)] - **http**: fix no\_proxy leading-dot suffix matching (Daijiro Wachi) [#62333](https://redirect.github.com/nodejs/node/pull/62333) - \[[`9f3bc70ae5`](https://redirect.github.com/nodejs/node/commit/9f3bc70ae5)] - **http**: cleanup pipeline queue (Robert Nagy) [#62534](https://redirect.github.com/nodejs/node/pull/62534) - \[[`aa1d8a9afc`](https://redirect.github.com/nodejs/node/commit/aa1d8a9afc)] - **(SEMVER-MINOR)** **http**: add req.signal to IncomingMessage (Akshat) [#62541](https://redirect.github.com/nodejs/node/pull/62541) - \[[`900dc758ff`](https://redirect.github.com/nodejs/node/commit/900dc758ff)] - **http2**: expose writable stream state on compat response (T) [#63003](https://redirect.github.com/nodejs/node/pull/63003) - \[[`b3bfe35912`](https://redirect.github.com/nodejs/node/commit/b3bfe35912)] - **inspector**: coerce key and value to string in webstorage events (Ali Hassan) [#62616](https://redirect.github.com/nodejs/node/pull/62616) - \[[`3dc3fb6ad8`](https://redirect.github.com/nodejs/node/commit/3dc3fb6ad8)] - **inspector**: return errors when CDP protocol event emission fails (Ryuhei Shima) [#62162](https://redirect.github.com/nodejs/node/pull/62162) - \[[`4f3f21bd7c`](https://redirect.github.com/nodejs/node/commit/4f3f21bd7c)] - **inspector**: auto collect webstorage data (Ryuhei Shima) [#62145](https://redirect.github.com/nodejs/node/pull/62145) - \[[`36cc04189d`](https://redirect.github.com/nodejs/node/commit/36cc04189d)] - **inspector**: initial support storage inspection (Ryuhei Shima) [#61139](https://redirect.github.com/nodejs/node/pull/61139) - \[[`1718bc3b9b`](https://redirect.github.com/nodejs/node/commit/1718bc3b9b)] - **inspector**: fix absolute URLs in network http (bugyaluwang) [#62955](https://redirect.github.com/nodejs/node/pull/62955) - \[[`97e32c7a74`](https://redirect.github.com/nodejs/node/commit/97e32c7a74)] - **lib**: avoid quadratic shift() in startup snapshot callback (Daijiro Wachi) [#62914](https://redirect.github.com/nodejs/node/pull/62914) - \[[`25d2e999de`](https://redirect.github.com/nodejs/node/commit/25d2e999de)] - **lib**: harden kKeyOps lookup with null prototype (Filip Skokan) [#62877](https://redirect.github.com/nodejs/node/pull/62877) - \[[`37d3913c8f`](https://redirect.github.com/nodejs/node/commit/37d3913c8f)] - **lib**: short-circuit WebIDL BufferSource SAB check (Filip Skokan) [#62833](https://redirect.github.com/nodejs/node/pull/62833) - \[[`430c69d25f`](https://redirect.github.com/nodejs/node/commit/430c69d25f)] - **lib**: use js-only implementation of `isDataView()` (René) [#62780](https://redirect.github.com/nodejs/node/pull/62780) - \[[`3ba0add6a0`](https://redirect.github.com/nodejs/node/commit/3ba0add6a0)] - **lib**: fix lint in internal/webstreams/util.js (Filip Skokan) [#62806](https://redirect.github.com/nodejs/node/pull/62806) - \[[`9b95c41398`](https://redirect.github.com/nodejs/node/commit/9b95c41398)] - **lib**: fix sequence argument handling in Blob constructor (Ms2ger) [#62179](https://redirect.github.com/nodejs/node/pull/62179) - \[[`314dacdbee`](https://redirect.github.com/nodejs/node/commit/314dacdbee)] - **lib**: improve Web Cryptography key validation ordering (Filip Skokan) [#62749](https://redirect.github.com/nodejs/node/pull/62749) - \[[`3d18162430`](https://redirect.github.com/nodejs/node/commit/3d18162430)] - **lib**: reject SharedArrayBuffer in web APIs per spec (Ali Hassan) [#62632](https://redirect.github.com/nodejs/node/pull/62632) - \[[`ada3ce879d`](https://redirect.github.com/nodejs/node/commit/ada3ce879d)] - **lib**: defer AbortSignal.any() following (sangwook) [#62367](https://redirect.github.com/nodejs/node/pull/62367) - \[[`b2981ec7eb`](https://redirect.github.com/nodejs/node/commit/b2981ec7eb)] - **meta**: bump actions/download-artifact from 8.0.0 to 8.0.1 (dependabot\[bot]) [#62549](https://redirect.github.com/nodejs/node/pull/62549) - \[[`7cd20667b5`](https://redirect.github.com/nodejs/node/commit/7cd20667b5)] - **meta**: bump github/codeql-action from 4.35.1 to 4.35.3 (dependabot\[bot]) [#63074](https://redirect.github.com/nodejs/node/pull/63074) - \[[`91a07cfe9f`](https://redirect.github.com/nodejs/node/commit/91a07cfe9f)] - **meta**: bump Mozilla-Actions/sccache-action from 0.0.9 to 0.0.10 (dependabot\[bot]) [#63073](https://redirect.github.com/nodejs/node/pull/63073) - \[[`09e17fe47c`](https://redirect.github.com/nodejs/node/commit/09e17fe47c)] - **meta**: add automation policy (Chengzhong Wu) [#62871](https://redirect.github.com/nodejs/node/pull/62871) - \[[`59e7fb7986`](https://redirect.github.com/nodejs/node/commit/59e7fb7986)] - **meta**: move VoltrexKeyva to emeritus (Matteo Collina) [#62895](https://redirect.github.com/nodejs/node/pull/62895) - \[[`1e2915cfa6`](https://redirect.github.com/nodejs/node/commit/1e2915cfa6)] - **meta**: bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (dependabot\[bot]) [#62845](https://redirect.github.com/nodejs/node/pull/62845) - \[[`0253c6e2be`](https://redirect.github.com/nodejs/node/commit/0253c6e2be)] - **meta**: bump step-security/harden-runner from 2.16.1 to 2.19.0 (dependabot\[bot]) [#62844](https://redirect.github.com/nodejs/node/pull/62844) - \[[`f503675b86`](https://redirect.github.com/nodejs/node/commit/f503675b86)] - **meta**: bump actions/setup-node from 6.3.0 to 6.4.0 (dependabot\[bot]) [#62842](https://redirect.github.com/nodejs/node/pull/62842) - \[[`5e14e4d26e`](https://redirect.github.com/nodejs/node/commit/5e14e4d26e)] - **meta**: broaden stale bot (Aviv Keller) [#62658](https://redirect.github.com/nodejs/node/pull/62658) - \[[`795db76f87`](https://redirect.github.com/nodejs/node/commit/795db76f87)] - **meta**: pass release version to release worker (flakey5) [#62777](https://redirect.github.com/nodejs/node/pull/62777) - \[[`ef384fe39f`](https://redirect.github.com/nodejs/node/commit/ef384fe39f)] - **meta**: add QUIC to CODEOWNERS (Tim Perry) [#62652](https://redirect.github.com/nodejs/node/pull/62652) - \[[`67e0ac568d`](https://redirect.github.com/nodejs/node/commit/67e0ac568d)] - **meta**: move Michael to emeritus (Michael Dawson) [#62536](https://redirect.github.com/nodejs/node/pull/62536) - \[[`5dad616393`](https://redirect.github.com/nodejs/node/commit/5dad616393)] - **meta**: populate apt list for slim runner in update-openssl workflow (René) [#62628](https://redirect.github.com/nodejs/node/pull/62628) - \[[`a869d25d8a`](https://redirect.github.com/nodejs/node/commit/a869d25d8a)] - **meta**: bump step-security/harden-runner from 2.15.0 to 2.16.1 (dependabot\[bot]) [#62550](https://redirect.github.com/nodejs/node/pull/62550) - \[[`769efc0403`](https://redirect.github.com/nodejs/node/commit/769efc0403)] - **meta**: bump actions/setup-node from 6.2.0 to 6.3.0 (dependabot\[bot]) [#62548](https://redirect.github.com/nodejs/node/pull/62548) - \[[`73fcc2b055`](https://redirect.github.com/nodejs/node/commit/73fcc2b055)] - **meta**: bump github/codeql-action from 4.32.4 to 4.35.1 (dependabot\[bot]) [#62547](https://redirect.github.com/nodejs/node/pull/62547) - \[[`6c001246fe`](https://redirect.github.com/nodejs/node/commit/6c001246fe)] - **meta**: bump codecov/codecov-action from 5.5.2 to 6.0.0 (dependabot\[bot]) [#62545](https://redirect.github.com/nodejs/node/pull/62545) - \[[`5ee40d6a03`](https://redirect.github.com/nodejs/node/commit/5ee40d6a03)] - **meta**: bump actions/cache from 5.0.3 to 5.0.4 (dependabot\[bot]) [#62543](https://redirect.github.com/nodejs/node/pull/62543) - \[[`ca16ad8a05`](https://redirect.github.com/nodejs/node/commit/ca16ad8a05)] - **meta**: require DCO signoff in commit message guidelines (James M Snell) [#62510](https://redirect.github.com/nodejs/node/pull/62510) - \[[`db9497fc41`](https://redirect.github.com/nodejs/node/commit/db9497fc41)] - **meta**: expand memory leak DoS criteria to all DoS (Joyee Cheung) [#62505](https://redirect.github.com/nodejs/node/pull/62505) - \[[`13b7d08b8d`](https://redirect.github.com/nodejs/node/commit/13b7d08b8d)] - **module**: remove duplicated checks from `_resolveFilename` (Antoine du Hamel) [#62729](https://redirect.github.com/nodejs/node/pull/62729) - \[[`6b53efb53a`](https://redirect.github.com/nodejs/node/commit/6b53efb53a)] - **module,win**: fix long subpath import (Stefan Stojanovic) [#62101](https://redirect.github.com/nodejs/node/pull/62101) - \[[`841dfbf6fc`](https://redirect.github.com/nodejs/node/commit/841dfbf6fc)] - **node-api**: update libuv ABI stability note (Chengzhong Wu) [#62789](https://redirect.github.com/nodejs/node/pull/62789) - \[[`01090f2aa1`](https://redirect.github.com/nodejs/node/commit/01090f2aa1)] - **node-api**: add napi\_create\_external\_sharedarraybuffer (Ben Noordhuis) [#62623](https://redirect.github.com/nodejs/node/pull/62623) - \[[`87443b4355`](https://redirect.github.com/nodejs/node/commit/87443b4355)] - **node-api**: execute tsfn finalizer after queue drains when aborted (Kevin Eady) [#61956](https://redirect.github.com/nodejs/node/pull/61956) - \[[`e95570c054`](https://redirect.github.com/nodejs/node/commit/e95570c054)] - **process**: handle rejections only when needed (Gürgün Dayıoğlu) [#62919](https://redirect.github.com/nodejs/node/pull/62919) - \[[`37d49f3219`](https://redirect.github.com/nodejs/node/commit/37d49f3219)] - **process**: optimize asyncHandledRejections by using FixedQueue (Gürgün Dayıoğlu) [#60854](https://redirect.github.com/nodejs/node/pull/60854) - \[[`f697c55e38`](https://redirect.github.com/nodejs/node/commit/f697c55e38)] - **quic**: add QuicEndpoint.listening & QuicStream.destroy() and tests (Tim Perry) [#62648](https://redirect.github.com/nodejs/node/pull/62648) - \[[`c128942b69`](https://redirect.github.com/nodejs/node/commit/c128942b69)] - **quic**: fixup token verification to handle zero expiration (James M Snell) [#62620](https://redirect.github.com/nodejs/node/pull/62620) - \[[`abb881ec92`](https://redirect.github.com/nodejs/node/commit/abb881ec92)] - **quic**: support multiple ALPN negotiation (James M Snell) [#62620](https://redirect.github.com/nodejs/node/pull/62620) - \[[`476926c2ad`](https://redirect.github.com/nodejs/node/commit/476926c2ad)] - **quic**: apply multiple TLS context improvements and SNI support (James M Snell) [#62620](https://redirect.github.com/nodejs/node/pull/62620) - \[[`76d9c24b95`](https://redirect.github.com/nodejs/node/commit/76d9c24b95)] - **quic**: implement rapidhash for hashing improvements (James M Snell) [#62620](https://redirect.github.com/nodejs/node/pull/62620) - \[[`08726cd43d`](https://redirect.github.com/nodejs/node/commit/08726cd43d)] - **quic**: move quic behind compile time flag (Matteo Collina) [#61444](https://redirect.github.com/nodejs/node/pull/61444) - \[[`ea4f19aaa7`](https://redirect.github.com/nodejs/node/commit/ea4f19aaa7)] - **quic**: use arena allocation for packets (James M Snell) [#62589](https://redirect.github.com/nodejs/node/pull/62589) - \[[`21e9239e2a`](https://redirect.github.com/nodejs/node/commit/21e9239e2a)] - **quic**: fixup linting/formatting issues (James M Snell) [#62387](https://redirect.github.com/nodejs/node/pull/62387) - \[[`edeed4303b`](https://redirect.github.com/nodejs/node/commit/edeed4303b)] - **quic**: update http3 impl details (James M Snell) [#62387](https://redirect.github.com/nodejs/node/pull/62387) - \[[`7f3a85e6aa`](https://redirect.github.com/nodejs/node/commit/7f3a85e6aa)] - **quic**: fix a handful of bugs and missing functionality (James M Snell) [#62387](https://redirect.github.com/nodejs/node/pull/62387) - \[[`45c1ebddf8`](https://redirect.github.com/nodejs/node/commit/45c1ebddf8)] - **quic**: copy options.certs buffer instead of detaching (Chengzhong Wu) [#61403](https://redirect.github.com/nodejs/node/pull/61403) - \[[`a31a8ee680`](https://redirect.github.com/nodejs/node/commit/a31a8ee680)] - **quic**: reduce boilerplate and other minor cleanups (James M Snell) [#59342](https://redirect.github.com/nodejs/node/pull/59342) - \[[`3be70ff43a`](https://redirect.github.com/nodejs/node/commit/3be70ff43a)] - **quic**: multiple fixups and updates (James M Snell) [#59342](https://redirect.github.com/nodejs/node/pull/59342) - \[[`b91a93444c`](https://redirect.github.com/nodejs/node/commit/b91a93444c)] - **quic**: update more of the quic to the new compile guard (James M Snell) [#59342](https://redirect.github.com/nodejs/node/pull/59342) - \[[`ca0080c164`](https://redirect.github.com/nodejs/node/commit/ca0080c164)] - **quic**: few additional small comment edits in cid.h (James M Snell) [#59342](https://redirect.github.com/nodejs/node/pull/59342) - \[[`6553202d83`](https://redirect.github.com/nodejs/node/commit/6553202d83)] - **quic**: fixup NO\_ERROR macro conflict on windows (James M Snell) [#59381](https://redirect.github.com/nodejs/node/pull/59381) - \[[`6df1508ac2`](https://redirect.github.com/nodejs/node/commit/6df1508ac2)] - **quic**: fixup windows coverage compile error (James M Snell) [#59381](https://redirect.github.com/nodejs/node/pull/59381) - \[[`b2b0bf8b04`](https://redirect.github.com/nodejs/node/commit/b2b0bf8b04)] - **quic**: update the guard to check openssl version (James M Snell) [#59249](https://redirect.github.com/nodejs/node/pull/59249) - \[[`5556b154bd`](https://redirect.github.com/nodejs/node/commit/5556b154bd)] - **quic**: start re-enabling quic with openssl 3.5 (James M Snell) [#59249](https://redirect.github.com/nodejs/node/pull/59249) - \[[`2ca42c8263`](https://redirect.github.com/nodejs/node/commit/2ca42c8263)] - **repl**: keep reference count for `process.on('newListener')` (Anna Henningsen) [#61895](https://redirect.github.com/nodejs/node/pull/61895) - \[[`2f37f9177f`](https://redirect.github.com/nodejs/node/commit/2f37f9177f)] - **sqlite**: use OneByte for ASCII text and internalize col names (Ali Hassan) [#61954](https://redirect.github.com/nodejs/node/pull/61954) - \[[`3c96ae1b2f`](https://redirect.github.com/nodejs/node/commit/3c96ae1b2f)] - **sqlite**: add serialize() and deserialize() (Ali Hassan) [#62579](https://redirect.github.com/nodejs/node/pull/62579) - \[[`be4d2f3a4c`](https://redirect.github.com/nodejs/node/commit/be4d2f3a4c)] - **sqlite**: enable Percentile extension (Jurj Andrei George) [#61295](https://redirect.github.com/nodejs/node/pull/61295) - \[[`dafed453b2`](https://redirect.github.com/nodejs/node/commit/dafed453b2)] - **src**: clean up experimental flag variables (Antoine du Hamel) [#62759](https://redirect.github.com/nodejs/node/pull/62759) - \[[`dca1e6aeea`](https://redirect.github.com/nodejs/node/commit/dca1e6aeea)] - **src**: expose help texts into node-config-schema.json (Pietro Marchini) [#58680](https://redirect.github.com/nodejs/node/pull/58680) - \[[`28c4f44eb1`](https://redirect.github.com/nodejs/node/commit/28c4f44eb1)] - **src**: add permission support to config file (Marco Ippolito) [#60746](https://redirect.github.com/nodejs/node/pull/60746) - \[[`f49175b220`](https://redirect.github.com/nodejs/node/commit/f49175b220)] - **src**: fix small compile warning in quic/streams.cc (James M Snell) [#60118](https://redirect.github.com/nodejs/node/pull/60118) - \[[`c9d4a446d8`](https://redirect.github.com/nodejs/node/commit/c9d4a446d8)] - **src**: cleanup quic TransportParams class (James M Snell) [#59884](https://redirect.github.com/nodejs/node/pull/59884) - \[[`99bb02fd9e`](https://redirect.github.com/nodejs/node/commit/99bb02fd9e)] - **src**: swap dotenv and config file parsing order (Marco Ippolito) [#63035](https://redirect.github.com/nodejs/node/pull/63035) - \[[`ecb4d49b7b`](https://redirect.github.com/nodejs/node/commit/ecb4d49b7b)] - **src**: add missing \<cstdlib> for abort() declaration (Charles Kerr) [#63001](https://redirect.github.com/nodejs/node/pull/63001) - \[[`b6219b6362`](https://redirect.github.com/nodejs/node/commit/b6219b6362)] - **src**: fix crash in GetErrorSource() for invalid using syntax (semimikoh) [#62770](https://redirect.github.com/nodejs/node/pull/62770) - \[[`b5ca5ad4c5`](https://redirect.github.com/nodejs/node/commit/b5ca5ad4c5)] - **src**: simplify `TCPWrap::Connect` signature (Anna Henningsen) [#62929](https://redirect.github.com/nodejs/node/pull/62929) - \[[`ef7ffce7cf`](https://redirect.github.com/nodejs/node/commit/ef7ffce7cf)] - **src**: use DCHECK in AsyncWrap::MakeCallback instead emiting a warning (Gerhard Stöbich) [#62795](https://redirect.github.com/nodejs/node/pull/62795) - \[[`cd9890a5ab`](https://redirect.github.com/nodejs/node/commit/cd9890a5ab)] - **src**: fix MaybeStackBuffer char\_traits deprecation warning (om-ghante) [#62507](https://redirect.github.com/nodejs/node/pull/62507) - \[[`c70ff44aee`](https://redirect.github.com/nodejs/node/commit/c70ff44aee)] - **src**: use context-free V8 message column getters (René) [#62778](https://redirect.github.com/nodejs/node/pull/62778) - \[[`06c405f1d7`](https://redirect.github.com/nodejs/node/commit/06c405f1d7)] - **src**: coerce `spawnSync` args to string once (Antoine du Hamel) [#62633](https://redirect.github.com/nodejs/node/pull/62633) - \[[`6151999ad6`](https://redirect.github.com/nodejs/node/commit/6151999ad6)] - **src**: use stack allocation for small string encoding (Ali Hassan) [#62431](https://redirect.github.com/nodejs/node/pull/62431) - \[[`a71a4ac7a3`](https://redirect.github.com/nodejs/node/commit/a71a4ac7a3)] - **src**: add contextify interceptor debug logs (Chengzhong Wu) [#62460](https://redirect.github.com/nodejs/node/pull/62460) - \[[`ad9a2909c2`](https://redirect.github.com/nodejs/node/commit/ad9a2909c2)] - **src**: workaround AIX libc++ std::filesystem bug (Richard Lau) [#62788](https://redirect.github.com/nodejs/node/pull/62788) - \[[`7792f1ae47`](https://redirect.github.com/nodejs/node/commit/7792f1ae47)] - **stream**: copyedit `webstreams/adapter.js` (Antoine du Hamel) [#63034](https://redirect.github.com/nodejs/node/pull/63034) - \[[`1397d8ce5c`](https://redirect.github.com/nodejs/node/commit/1397d8ce5c)] - **stream**: remove duplicated utility (Antoine du Hamel) [#63031](https://redirect.github.com/nodejs/node/pull/63031) - \[[`ff86b1d64f`](https://redirect.github.com/nodejs/node/commit/ff86b1d64f)] - **stream**: simplify `setPromiseHandled` utility (Antoine du Hamel) [#63032](https://redirect.github.com/nodejs/node/pull/63032) - \[[`24a078149a`](https://redirect.github.com/nodejs/node/commit/24a078149a)] - **stream**: validate ReadableStream.from iterator objects (Daeyeon Jeong) [#62911](https://redirect.github.com/nodejs/node/pull/62911) - \[[`cfb1fa9680`](https://redirect.github.com/nodejs/node/commit/cfb1fa9680)] - **stream**: reject duplicate nested transferables (Daeyeon Jeong) [#62831](https://redirect.github.com/nodejs/node/pull/62831) - \[[`d0c913758a`](https://redirect.github.com/nodejs/node/commit/d0c913758a)] - **stream**: ensuring cross-destruction in \_duplexify to prevent leaks (Daijiro Wachi) [#62824](https://redirect.github.com/nodejs/node/pull/62824) - \[[`978f5c15d7`](https://redirect.github.com/nodejs/node/commit/978f5c15d7)] - **stream**: simplify `readableStreamFromIterable` (Antoine du Hamel) [#62651](https://redirect.github.com/nodejs/node/pull/62651) - \[[`3527646ba5`](https://redirect.github.com/nodejs/node/commit/3527646ba5)] - **stream**: fix nested compose error propagation (Matteo Collina) [#62556](https://redirect.github.com/nodejs/node/pull/62556) - \[[`dfb9edef4f`](https://redirect.github.com/nodejs/node/commit/dfb9edef4f)] - **stream**: allow shared array buffer sources in writable webstream adapter (René) [#62163](https://redirect.github.com/nodejs/node/pull/62163) - \[[`f00cdab627`](https://redirect.github.com/nodejs/node/commit/f00cdab627)] - **stream**: simplify `createPromiseCallback` (Antoine du Hamel) [#62650](https://redirect.github.com/nodejs/node/pull/62650) - \[[`3ed783535f`](https://redirect.github.com/nodejs/node/commit/3ed783535f)] - **stream**: fix writev unhandled rejection in fromWeb (sangwook) [#62297](https://redirect.github.com/nodejs/node/pull/62297) - \[[`29b196694c`](https://redirect.github.com/nodejs/node/commit/29b196694c)] - **stream**: noop pause/resume on destroyed streams (Robert Nagy) [#62557](https://redirect.github.com/nodejs/node/pull/62557) - \[[`d73dbb9fc8`](https://redirect.github.com/nodejs/node/commit/d73dbb9fc8)] - **stream**: refactor duplexify to be less suceptible to prototype pollution (Antoine du Hamel) [#62559](https://redirect.github.com/nodejs/node/pull/62559) - \[[`6f37f7e240`](https://redirect.github.com/nodejs/node/commit/6f37f7e240)] - **(SEMVER-MINOR)** **stream**: propagate destruction in duplexPair (Ahmed Elhor) [#61098](https://redirect.github.com/nodejs/node/pull/61098) - \[[`b8816580e9`](https://redirect.github.com/nodejs/node/commit/b8816580e9)] - **test**: generate `localstorage.db` in a temp dir (Chengzhong Wu) [#62660](https://redirect.github.com/nodejs/node/pull/62660) - \[[`31a863fd29`](https://redirect.github.com/nodejs/node/commit/31a863fd29)] - **test**: update WPT for url to [`258f285`](https://redirect.github.com/nodejs/node/commit/258f285de0) (Node.js GitHub Bot) [#63087](https://redirect.github.com/nodejs/node/pull/63087) - \[[`d0d19bd8e3`](https://redirect.github.com/nodejs/node/commit/d0d19bd8e3)] - **test**: update WPT for streams to [`f8f26a3`](https://redirect.github.com/nodejs/node/commit/f8f26a372f) (Node.js GitHub Bot) [#62864](https://redirect.github.com/nodejs/node/pull/62864) - \[[`f50ac5bc78`](https://redirect.github.com/nodejs/node/commit/f50ac5bc78)] - **test**: improve config-file permission test coverage (Rafael Gonzaga) [#60929](https://redirect.github.com/nodejs/node/pull/60929) - \[[`a0f90000f4`](https://redirect.github.com/nodejs/node/commit/a0f90000f4)] - **test**: export isRiscv64 from common module (Jamie Magee) [#62609](https://redirect.github.com/nodejs/node/pull/62609) - \[[`da4dd8646f`](https://redirect.github.com/nodejs/node/commit/da4dd8646f)] - **test**: normalize known inspector crash as completion (Joyee Cheung) [#62851](https://redirect.github.com/nodejs/node/pull/62851) - \[[`b7fdd94a4c`](https://redirect.github.com/nodejs/node/commit/b7fdd94a4c)] - **test**: account for RFC 7919 FFDHE negotiation in OpenSSL 4.0 (Filip Skokan) [#62805](https://redirect.github.com/nodejs/node/pull/62805) - \[[`375a993aaf`](https://redirect.github.com/nodejs/node/commit/375a993aaf)] - **test**: skip tls-deprecated secp256k1 on OpenSSL 4.0 (Filip Skokan) [#62805](https://redirect.github.com/nodejs/node/pull/62805) - \[[`698d8287d1`](https://redirect.github.com/nodejs/node/commit/698d8287d1)] - **test**: use an always invalid cipher and cover OpenSSL 4.0 behaviours (Filip Skokan) [#62805](https://redirect.github.com/nodejs/node/pull/62805) - \[[`036bc6f300`](https://redirect.github.com/nodejs/node/commit/036bc6f300)] - **test**: use valid DER OCSP responses (Filip Skokan) [#62805](https://redirect.github.com/nodejs/node/pull/62805) - \[[`3aa9938da8`](https://redirect.github.com/nodejs/node/commit/3aa9938da8)] - **test**: skip test-tls-error-stack when engines are unsupported (Filip Skokan) [#62805](https://redirect.github.com/nodejs/node/pull/62805) - \[[`947f1ae246`](https://redirect.github.com/nodejs/node/commit/947f1ae246)] - **test**: accept renamed OpenSSL 4.0 error code and reason (Filip Skokan) [#62805](https://redirect.github.com/nodejs/node/pull/62805) - \[[`afdd355622`](https://redirect.github.com/nodejs/node/commit/afdd355622)] - **test**: update test/addons/openssl-binding for OpenSSL 4.0 (Filip Skokan) [#62805](https://redirect.github.com/nodejs/node/pull/62805) - \[[`8637524a99`](https://redirect.github.com/nodejs/node/commit/8637524a99)] - **test**: mark test-snapshot-reproducible flaky (Filip Skokan) [#62808](https://redirect.github.com/nodejs/node/pull/62808) - \[[`c22d34134b`](https://redirect.github.com/nodejs/node/commit/c22d34134b)] - **test**: check contextify contextual store behavior in strict mode (René) [#62571](https://redirect.github.com/nodejs/node/pull/62571) - \[[`0b4e0d3c94`](https://redirect.github.com/nodejs/node/commit/0b4e0d3c94)] - **test**: update tls junk data error expectations (Filip Skokan) [#62629](https://redirect.github.com/nodejs/node/pull/62629) - \[[`85d83c2cdb`](https://redirect.github.com/nodejs/node/commit/85d83c2cdb)] - **test**: ensure WPT report is in out/wpt (Filip Skokan) [#62637](https://redirect.github.com/nodejs/node/pull/62637) - \[[`9e21711c60`](https://redirect.github.com/nodejs/node/commit/9e21711c60)] - **test**: improve WPT runner summary (Filip Skokan) [#62636](https://redirect.github.com/nodejs/node/pull/62636) - \[[`e04e2c9ac1`](https://redirect.github.com/nodejs/node/commit/e04e2c9ac1)] - **test**: skip url WPT subtests instead of modifying test script (Filip Skokan) [#62635](https://redirect.github.com/nodejs/node/pull/62635) - \[[`7b1211f88c`](https://redirect.github.com/nodejs/node/commit/7b1211f88c)] - **test**: capture negative utimes mtime at call time (Yuya Inoue) [#62490](https://redirect.github.com/nodejs/node/pull/62490) - \[[`f1a6e9fcc7`](https://redirect.github.com/nodejs/node/commit/f1a6e9fcc7)] - **test**: allow skipping individual WPT subtests (Filip Skokan) [#62517](https://redirect.github.com/nodejs/node/pull/62517) - \[[`23f927542e`](https://redirect.github.com/nodejs/node/commit/23f927542e)] - **test**: use on-disk fixture for test-npm-install (Joyee Cheung) [#62584](https://redirect.github.com/nodejs/node/pull/62584) - \[[`4739c45879`](https://redirect.github.com/nodejs/node/commit/4739c45879)] - **test**: update WPT for url to [`7a3645b`](https://redirect.github.com/nodejs/node/commit/7a3645b79a) (Node.js GitHub Bot) [#62591](https://redirect.github.com/nodejs/node/pull/62591) - \[[`f68189b839`](https://redirect.github.com/nodejs/node/commit/f68189b839)] - **test\_runner**: add `testId` to test events (Moshe Atlow) [#62772](https://redirect.github.com/nodejs/node/pull/62772) - \[[`5c2770446e`](https://redirect.github.com/nodejs/node/commit/5c2770446e)] - **test\_runner**: publish to TracingChannel for OTel instrumentation (Moshe Atlow) [#62502](https://redirect.github.com/nodejs/node/pull/62502) - \[[`d14029be7f`](https://redirect.github.com/nodejs/node/commit/d14029be7f)] - **(SEMVER-MINOR)** **test\_runner**: support test order randomization (Pietro Marchini) [#61747](https://redirect.github.com/nodejs/node/pull/61747) - \[[`3f74a58979`](https://redirect.github.com/nodejs/node/commit/3f74a58979)] - **test\_runner**: update node-config-schema (Pietro Marchini) [#58680](https://redirect.github.com/nodejs/node/pull/58680) - \[[`60c83f6199`](https://redirect.github.com/nodejs/node/commit/60c83f6199)] - **test\_runner**: fix failing suite hooks when marked with `todo` (Moshe Atlow) [#63097](https://redirect.github.com/nodejs/node/pull/63097) - \[[`d142c584cd`](https://redirect.github.com/nodejs/node/commit/d142c584cd)] - **(SEMVER-MINOR)** **test\_runner**: align mock timeout api (sangwook) [#62820](https://redirect.github.com/nodejs/node/pull/62820) - \[[`3e72065ed6`](https://redirect.github.com/nodejs/node/commit/3e72065ed6)] - **test\_runner**: fix suite rerun edge case (Moshe Atlow) [#62860](https://redirect.github.com/nodejs/node/pull/62860) - \[[`01a9552585`](https://redirect.github.com/nodejs/node/commit/01a9552585)] - **(SEMVER-MINOR)** **test\_runner**: add mock-timers support for AbortSignal.timeout (DeveloperViraj) [#60751](https://redirect.github.com/nodejs/node/pull/60751) - \[[`dd43efffa6`](https://redirect.github.com/nodejs/node/commit/dd43efffa6)] - **test\_runner**: add passed, attempt, and diagnostic to SuiteContext (Moshe Atlow) [#62504](https://redirect.github.com/nodejs/node/pull/62504) - \[[`a12dc445cc`](https://redirect.github.com/nodejs/node/commit/a12dc445cc)] - **tools**: add a check for clean git tree after tests (Antoine du Hamel) [#62661](https://redirect.github.com/nodejs/node/pull/62661) - \[[`5b49178375`](https://redirect.github.com/nodejs/node/commit/5b49178375)] - **tools**: use LTS Node.js in notify-on-push workflow (Nenad Spasenic) [#63084](https://redirect.github.com/nodejs/node/pull/63084) - \[[`5a93bde5bb`](https://redirect.github.com/nodejs/node/commit/5a93bde5bb)] - **tools**: update gr2m/create-or-update-pull-request-action to v1.10.1 (Mike McCready) [#63065](https://redirect.github.com/nodejs/node/pull/63065) - \[[`b133019d19`](https://redirect.github.com/nodejs/node/commit/b133019d19)] - **tools**: simplify `update-undici.sh` (Antoine du Hamel) [#63044](https://redirect.github.com/nodejs/node/pull/63044) - \[[`04d3538074`](https://redirect.github.com/nodejs/node/commit/04d3538074)] - **tools**: do not run `test-linux` on unrelated tools changes (Antoine du Hamel) [#63037](https://redirect.github.com/nodejs/node/pull/63037) - \[[`4d396ac4a5`](https://redirect.github.com/nodejs/node/commit/4d396ac4a5)] - **tools**: bump the eslint group in /tools/eslint with 4 updates (dependabot\[bot]) [#62848](https://redirect.github.com/nodejs/node/pull/62848) - \[[`9354bf40e7`](https://redirect.github.com/nodejs/node/commit/9354bf40e7)] - **tools**: update gyp-next to 0.22.1 (Node.js GitHub Bot) [#62961](https://redirect.github.com/nodejs/node/pull/62961) - \[[`c23db1ca85`](https://redirect.github.com/nodejs/node/commit/c23db1ca85)] - **tools**: fix commit linter for semver-major release proposals (Antoine du Hamel) [#62993](https://redirect.github.com/nodejs/node/pull/62993) - \[[`6e097ee3f1`](https://redirect.github.com/nodejs/node/commit/6e097ee3f1)] - **tools**: consolidate and simplify .editorconfig deps section (Daijiro Wachi) [#62887](https://redirect.github.com/nodejs/node/pull/62887) - \[[`a47ea6d6ea`](https://redirect.github.com/nodejs/node/commit/a47ea6d6ea)] - **tools**: set bot as author of tools-deps-update PRs (Antoine du Hamel) [#62856](https://redirect.github.com/nodejs/node/pull/62856) - \[[`00e86f0471`](https://redirect.github.com/nodejs/node/commit/00e86f0471)] - **tools**: bump brace-expansion from 5.0.4 to 5.0.5 in /tools/eslint (dependabot\[bot]) [#62458](https://redirect.github.com/nodejs/node/pull/62458) - \[[`cd7e262e75`](https://redirect.github.com/nodejs/node/commit/cd7e262e75)] - **tools**: bump brace-expansion in /tools/clang-format (dependabot\[bot]) [#62467](https://redirect.github.com/nodejs/node/pull/62467) - \[[`bfc1319bc8`](https://redirect.github.com/nodejs/node/commit/bfc1319bc8)] - **tools**: exclude [@node-core/doc-kit](https://redirect.github.com/node-core/doc-kit) from dependabot cooldown (Levi Zim) [#62775](https://redirect.github.com/nodejs/node/pull/62775) - \[[`a932fbd10b`](https://redirect.github.com/nodejs/node/commit/a932fbd10b)] - **tools**: re-enable undici WPTs in daily wpt.fyi job (Filip Skokan) [#62677](https://redirect.github.com/nodejs/node/pull/62677) - \[[`f7bd9e3055`](https://redirect.github.com/nodejs/node/commit/f7bd9e3055)] - **tools**: update gyp-next to 0.22.0 (Node.js GitHub Bot) [#62697](https://redirect.github.com/nodejs/node/pull/62697) - \[[`c400d46d87`](https://redirect.github.com/nodejs/node/commit/c400d46d87)] - **tools**: improve backport review script (Antoine du Hamel) [#62573](https://redirect.github.com/nodejs/node/pull/62573) - \[[`be23b75814`](https://redirect.github.com/nodejs/node/commit/be23b75814)] - **tools**: improve output for unexpected passes in WTP tests (Antoine du Hamel) [#62587](https://redirect.github.com/nodejs/node/pull/62587) - \[[`609c013ece`](https://redirect.github.com/nodejs/node/commit/609c013ece)] - **tools**: revert OpenSSL update workflow to ubuntu-latest (Richard Lau) [#62627](https://redirect.github.com/nodejs/node/pull/62627) - \[[`81bac1ebfd`](https://redirect.github.com/nodejs/node/commit/81bac1ebfd)] - **tools**: bump the eslint group in /tools/eslint with 2 updates (dependabot\[bot]) [#62552](https://redirect.github.com/nodejs/node/pull/62552) - \[[`1fee26522d`](https://redirect.github.com/nodejs/node/commit/1fee26522d)] - **tools**: allow triagers to queue a PR for CI until it's reviewed (Antoine du Hamel) [#62524](https://redirect.github.com/nodejs/node/pull/62524) - \[[`332088f929`](https://redirect.github.com/nodejs/node/commit/332088f929)] - **tools**: do not run `commit-lint` on release proposals (Antoine du Hamel) [#62523](https://redirect.github.com/nodejs/node/pull/62523) - \[[`9a25fc8a4d`](https://redirect.github.com/nodejs/node/commit/9a25fc8a4d)] - **url**: process crash via malformed UNC hostname in pathToFileURL() (Nicola Del Gobbo) [#62574](https://redirect.github.com/nodejs/node/pull/62574) - \[[`7bd08ff60a`](https://redirect.github.com/nodejs/node/commit/7bd08ff60a)] - **url**: optimize URLSearchParams set/delete duplicate handling (Gürgün Dayıoğlu) [#62266](https://redirect.github.com/nodejs/node/pull/62266) - \[[`2d636388fa`](https://redirect.github.com/nodejs/node/commit/2d636388fa)] - **url**: align default argument handling for URLPattern with webidl (Filip Skokan) [#62719](https://redirect.github.com/nodejs/node/pull/62719) - \[[`00705a459a`](https://redirect.github.com/nodejs/node/commit/00705a459a)] - **(SEMVER-MINOR)** **util**: colorize text with hex colors (Guilherme Araújo) [#61556](https://redirect.github.com/nodejs/node/pull/61556) - \[[`0e2adb3e45`](https://redirect.github.com/nodejs/node/commit/0e2adb3e45)] - **watch**: track worker entry files in watch mode (SudhansuBandha) [#62368](https://redirect.github.com/nodejs/node/pull/62368) - \[[`c58fe38211`](https://redirect.github.com/nodejs/node/commit/c58fe38211)] - **watch**: fix --env-file-if-exists crashing on linux if the file is missing (Efe) [#61870](https://redirect.github.com/nodejs/node/pull/61870) ### [`v24.15.0`](https://redirect.github.com/nodejs/node/compare/v24.14.1...v24.15.0) [Compare Source](https://redirect.github.com/nodejs/node/compare/v24.14.1...v24.15.0) ### [`v24.14.1`](https://redirect.github.com/nodejs/node/compare/v24.14.0...v24.14.1) [Compare Source](https://redirect.github.com/nodejs/node/compare/v24.14.0...v24.14.1) ### [`v24.14.0`](https://redirect.github.com/nodejs/node/compare/v24.13.1...v24.14.0) [Compare Source](https://redirect.github.com/nodejs/node/compare/v24.13.1...v24.14.0) ### [`v24.13.1`](https://redirect.github.com/nodejs/node/compare/v24.13.0...v24.13.1) [Compare Source](https://redirect.github.com/nodejs/node/compare/v24.13.0...v24.13.1) ### [`v24.13.0`](https://redirect.github.com/nodejs/node/releases/tag/v24.13.0): 2026-01-13, Version 24.13.0 'Krypton' (LTS), @marco-ippolito [Compare Source](https://redirect.github.com/nodejs/node/compare/v24.12.0...v24.13.0) This is a security release. ##### Notable Changes lib: - (CVE-2025-59465) add TLSSocket default error handler (RafaelGSS) [nodejs-private/node-private#797](https://redirect.github.com/nodejs-private/node-private/pull/797) - (CVE-2025-55132) disable futimes when permission model is enabled (RafaelGSS) [nodejs-private/node-private#748](https://redirect.github.com/nodejs-private/node-private/pull/748) lib,permission: - (CVE-2025-55130) require full read and write to symlink APIs (RafaelGSS) [nodejs-private/node-private#760](https://redirect.github.com/nodejs-private/node-private/pull/760) src: - (CVE-2025-59466) rethrow stack overflow exceptions in async\_hooks (Matteo Collina) [nodejs-private/node-private#773](https://redirect.github.com/nodejs-private/node-private/pull/773) src,lib: - (CVE-2025-55131) refactor unsafe buffer creation to remove zero-fill toggle (Сковорода Никита Андреевич) [nodejs-private/node-private#759](https://redirect.github.com/nodejs-private/node-private/pull/759) tls: - (CVE-2026-21637) route callback exceptions through error handlers (Matteo Collina) [nodejs-private/node-private#796](https://redirect.github.com/nodejs-private/node-private/pull/796) ##### Commits - \[[`2092785d01`](https://redirect.github.com/nodejs/node/commit/2092785d01)] - **deps**: update c-ares to v1.34.6 (Node.js GitHub Bot) [#60997](https://redirect.github.com/nodejs/node/pull/60997) - \[[`3e58b7f2af`](https://redirect.github.com/nodejs/node/commit/3e58b7f2af)] - **deps**: update undici to 7.18.2 (Node.js GitHub Bot) [#61283](https://redirect.github.com/nodejs/node/pull/61283) - \[[`4ba536a5a6`](https://redirect.github.com/nodejs/node/commit/4ba536a5a6)] - **(CVE-2025-59465)** **lib**: add TLSSocket default error handler (RafaelGSS) [nodejs-private/node-private#797](https://redirect.github.com/nodejs-private/node-private/pull/797) - \[[`89adaa21fd`](https://redirect.github.com/nodejs/node/commit/89adaa21fd)] - **(CVE-2025-55132)** **lib**: disable futimes when permission model is enabled (RafaelGSS) [nodejs-private/node-private#748](https://redirect.github.com/nodejs-private/node-private/pull/748) - \[[`7302b4dae1`](https://redirect.github.com/nodejs/node/commit/7302b4dae1)] - **(CVE-2025-55130)** **lib,permission**: require full read and write to symlink APIs (RafaelGSS) [nodejs-private/node-private#760](https://redirect.github.com/nodejs-private/node-private/pull/760) - \[[`ac030753c4`](https://redi > ✂ **Note** > > PR body was truncated to here. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/sleepypod/core).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

## Why PR #416 bumped `.node-version` `22` → `24`, but that file only drives **dev/CI** (`actions/setup-node` reads `node-version-file: '.node-version'`). The **pod runtime** version is pinned independently in `scripts/install` (`NODE_WANTED` / `NODE_FULL`), so fresh pods would still install Node 22 — leaving dev/CI and production out of lockstep. ## What Bump the pod's Node pin to `24.16.0` (current v24 LTS, 'Krypton') so freshly-installed pods match the toolchain. ## Safety `better-sqlite3` (the only native dep) ships **N-API prebuilds** (`prebuilds/linux-<arch>/node.napi.node`) and is `pnpm install`-ed **on the pod**, not bundled from CI. N-API is ABI-stable across Node majors, so the 22 → 24 move carries no native-module ABI risk. The install script's existing SHA-256 verification covers the new tarball. The `CURRENT_NODE_MAJOR -lt NODE_WANTED` guard means pods already on Node ≥ 24 are left untouched; pods on 22 get upgraded on next install run. ## Test plan - `bash -n scripts/install` — syntax clean ✅ - Verified `https://nodejs.org/dist/v24.16.0/node-v24.16.0-linux-arm64.tar.gz` returns HTTP 200 ✅ - Manual: run installer on a clean pod, confirm `node -v` reports v24.16.0 and the app's better-sqlite3 module loads   <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update chore/install-node-24 ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/chore/install-node-24/scripts/install \ | sudo bash -s -- --branch chore/install-node-24 ``` 🎯 **Pin to this exact build** ([run 27525355981](https://github.com/sleepypod/core/actions/runs/27525355981) · `f1338bb`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/f1338bb773b7c850ef61950cc71f7de5df5fddb9/scripts/install \ | sudo bash -s -- \ --branch chore/install-node-24 \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/27525355981/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/27525355981/artifacts/7629546769) · self-destructs in 30 days 💥 </details>

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [typescript](https://www.typescriptlang.org/) ([source](https://redirect.github.com/microsoft/TypeScript)) | [`^5.9.3` → `^6.0.0`](https://renovatebot.com/diffs/npm/typescript/5.9.3/6.0.3) | ![age](https://developer.mend.io/api/mc/badges/age/npm/typescript/6.0.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/typescript/5.9.3/6.0.3?slim=true) | --- ### Release Notes <details> <summary>microsoft/TypeScript (typescript)</summary> ### [`v6.0.3`](https://redirect.github.com/microsoft/TypeScript/compare/v6.0.2...050880ce59e30b356b686bd3144efe24f875ebc8) [Compare Source](https://redirect.github.com/microsoft/TypeScript/compare/v6.0.2...v6.0.3) ### [`v6.0.2`](https://redirect.github.com/microsoft/TypeScript/compare/v5.9.3...607a22a90d1a5a1b507ce01bb8cd7ec020f954e7) [Compare Source](https://redirect.github.com/microsoft/TypeScript/compare/v5.9.3...v6.0.2) </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/sleepypod/core).    <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update renovate/typescript-6.x ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/renovate/typescript-6.x/scripts/install \ | sudo bash -s -- --branch renovate/typescript-6.x ``` 🎯 **Pin to this exact build** ([run 27526054951](https://github.com/sleepypod/core/actions/runs/27526054951) · `3003ac9`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/3003ac964101578340465f6d642934110c9f35b1/scripts/install \ | sudo bash -s -- \ --branch renovate/typescript-6.x \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/27526054951/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/27526054951/artifacts/7629783757) · self-destructs in 30 days 💥 </details>  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Jonathan Ng <jon@jonathanng.com>

## Problem The `piezoStream` streaming tests flaked intermittently in CI (e.g. blocked #650 and #315), each run failing a *different* test in `src/streaming/tests/piezoStream.test.ts` with `waitFor`/`waitUntil` timeouts and a trailing `Hook timed out in 10000ms`. They always passed in isolation, which masked the cause as "slow CI." ## Root cause Two compounding bugs: 1. **Permanent frame loss from a connect race.** The file-tailing loop broadcasts live frames *only to currently-connected clients* (no backfill) and advances its read offset to EOF on the first 10ms tick. Tests that wrote the RAW file **before** connecting raced that first tick — under CPU contention the loop consumed the whole file before the client socket attached, so those frames were lost for good. Confirmed empirically: even with a 20s wait timeout the frames never arrived (`messages=[]`), proving permanent loss rather than slow delivery. 2. **Teardown hang cascade.** `WebSocketServer.close()` only fires its callback once every client has disconnected. When a test bailed before `client.close()` (because of #1), the still-open socket kept `shutdownPiezoStreamServer()` from ever resolving → the `afterEach` hook burned its full 10s timeout and reported a second failure. ## Fix - **Tests:** append RAW data only *after* the client connects, matching production (firmware appends to the RAW file while clients stream). This is the deterministic pattern a few tests already used (`subscribe filter`, `partial trailing record`). A comment on the `startAndPort` helper documents the ordering so it isn't "tidied" back. - **Production (`shutdownPiezoStreamServer`):** terminate live client sockets before `server.close()` so shutdown always completes — a real robustness bug, not test-only. ## Test plan - `pnpm run tsc` — clean - `eslint` on both changed files — clean - Full suite: `pnpm test run` → 109 files / 2124 passed, 1 skipped - **Repro harness:** saturate all cores (`yes > /dev/null` ×2·ncpu) and run the piezo file repeatedly: - Before: failed within ~2 runs (different test each time, `messages=[]` + 10s hook timeout) - After: **6/6 green** under the same saturation; 3/3 in isolation   <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update fix/piezo-stream-test-flake ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/fix/piezo-stream-test-flake/scripts/install \ | sudo bash -s -- --branch fix/piezo-stream-test-flake ``` 🎯 **Pin to this exact build** ([run 27527119653](https://github.com/sleepypod/core/actions/runs/27527119653) · `1ace69b`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/1ace69bbd3bbf7232c2f6341b09052534dacd5fc/scripts/install \ | sudo bash -s -- \ --branch fix/piezo-stream-test-flake \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/27527119653/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/27527119653/artifacts/7630170313) · self-destructs in 30 days 💥 </details>   ## Summary by CodeRabbit ## Release Notes * **Bug Fixes** * Fixed server shutdown hang issue when WebSocket clients remain connected during shutdown process. * **Tests** * Updated streaming protocol tests to eliminate race conditions in data handling scenarios.

## What Adds mutation-killing tests for `src/server/routers/system.ts`, the single largest cluster of surviving mutants in the weekly mutation-testing baseline (#591 — 167 surviving in that file). ## Why The existing suite asserted **outcomes** (parsed return values, error wrapping) but never the **exact commands** the router shells out. As a result every `StringLiteral` / `ArrayDeclaration` / `ObjectLiteral` mutant on the `df` / `du` / `iptables` / `journalctl` / `systemctl` / `nmcli` invocations survived — you could swap `'iptables'` for `''`, drop the `{ timeout }` option, or empty out an argv array and no test noticed. A handful of `Regex` / `ConditionalExpression` / `ArithmeticOperator` mutants also survived because single-space test fixtures never exercised them. ## How A `recordExec` helper captures every `execFile` call (binary, argv, options object) so tests can assert the literal commands, plus targeted edge-case fixtures: - **internetStatus** — `iptables -L OUTPUT -n`; anchored `^DROP\b` matching (a mid-line `DROP` and `DROPLET` must **not** read as blocked) - **setInternetAccess** — the complete ordered iptables flush + LAN-only ruleset for both block and unblock paths, and that rules are persisted from `iptables-save` - **wifiStatus / getLogSources / getLogs / getDiskUsage / getStorageBreakdown** — exact argv + `timeout`/`maxBuffer` option objects, service display names - **edge fixtures** — multi-whitespace `df` output (so `/\s+/` vs `/\s/` actually matters), zero-total `usedPercent` guard (no `Infinity`), the `lines + 1` pagination boundary (`>` vs `>=`), and the `"Unknown error"` / log-message branches ## Result `system.ts` mutation score **~52% → 94.5%** (167 → 17 survivors; the remainder are equivalent mutants — optional chaining on always-defined values, a no-op `nextCursor = null`, `/\s/` on a `[0]` access). Verified with `npx stryker run --mutate 'src/server/routers/system.ts'`. **No production code changed** — tests only. `pnpm vitest run` (51 pass), `tsc --noEmit`, and `eslint` all green. 🤖 Generated with [Claude Code](https://claude.com/claude-code)   <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update test/system-router-mutants-591 ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/test/system-router-mutants-591/scripts/install \ | sudo bash -s -- --branch test/system-router-mutants-591 ``` 🎯 **Pin to this exact build** ([run 27884384868](https://github.com/sleepypod/core/actions/runs/27884384868) · `6c639a1`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/6c639a17e3c173ab0c9cc36e929b24e3102f7a83/scripts/install \ | sudo bash -s -- \ --branch test/system-router-mutants-591 \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/27884384868/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/27884384868/artifacts/7769047411) · self-destructs in 30 days 💥 </details>   ## Summary by CodeRabbit * **Tests** * Expanded test coverage for system router endpoints, including validation of command execution, error handling, and edge cases across system operations.  Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

44 verified findings (1 critical, 3 high, 16 medium, 24 low) across server/API, hardware/streaming, Python device modules, scheduler/ automation/HomeKit, DB/migrations, and frontend. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Self-contained work plan (4 batches, 44 items) with locations, concrete changes, and verification steps, for execution in a fresh session. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

The hand-edited when for 0003_sensor_calibration (1773714000000) was greater than 0004's and 0005's, so drizzle's migrator skipped them on incremental upgrades past 0003 — missing tables then made 0009 fail and the pod could not boot. Set it strictly between 0002 and 0004. Adds a journal monotonicity guard and an incremental-upgrade regression test (migrate to 0003, then run the full migrator, assert 0004+ tables exist). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Drift compared DB schedule rows against schedulerJobCount minus only PRIME/REBOOT, so LED-brightness, away-mode, run-once, and calibration jobs made every health poll flag drift and rebuild the whole scheduler (~7s). Count only schedule-backed job types (temperature/power_on/power_off/alarm) on the scheduler side instead. Also fixes the test db mock: drizzle tables all have constructor name SQLiteTable, so the per-table detection silently returned the temp array for power/alarm queries, hiding the phantom drift in existing tests. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

…read timeout When a DAC response timed out, the losing readMessage() stayed subscribed and later consumed the NEXT command's response, shifting every subsequent command/response pair; connectDac's early-return blocked recovery. Reads now take an AbortSignal and settle when the timeout fires, and each send first discards any stale buffered responses (commands are strictly sequential, so anything buffered at send time is stale by definition). Same fix applied to the dev/test SocketClient path: its single pendingRead slot already cancelled on timeout, but the late response sat in the queue and misaligned the next command — now discarded before each send. Covers review items 1.3 and 3.5. Adds regression tests for dropped and late-buffered responses. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

…ndow A record with a far-future ts landed in bed_temp/freezer_temp, and because the downsample cursors seed from MAX(timestamp) at startup, every subsequent write was blocked forever — surviving restarts. Add sanitize_ts (mirroring sleep-detector's, plus an upper bound of now+60s) and clamp the DB-seeded cursors to now so an already-poisoned DB self-heals. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

…port test Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

The latch was set on every HomeKit toggle and never cleared, so external power changes (scheduler off, auto-off, pump stall guard) were shadowed forever: isEffectivelyPowered reported stale ON and setTargetTemperature could re-heat a bed the scheduler had turned off. Clear the latch once a status update confirms the intended state; keep it while the write is still propagating (status lags a poll interval). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Signal 1 zeroed movement for BOTH beds whenever EITHER pump had RPM>0, and the pump-off guard period was likewise global, so the idle side's real movement was discarded for entire pump runtimes. RPM gating and the guard period are now tracked per side; cross-side mechanical coupling remains covered by Signal 2 (correlated ref-anomaly). Also fixes a latent guard bug: _pump_off_at initialized to 0.0 gated everything for the first PUMP_GUARD_S after process start when time.monotonic() has a near-zero origin — now -inf ('never turned off'). Not validated against recorded pod data (none available in this repo); covered with unit tests instead. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

… stalls After the first WS frame, a sticky ref permanently set refetchInterval:false, so a dying WS server froze temps, pump-stall, alarm, and water-level status with no fallback. WS is now trusted only while the socket is connected AND a frame arrived within 15s; otherwise HTTP polls at 7s. While WS is live, HTTP idles at 60s instead of off — each idle poll re-evaluates freshness, so a silently-stalled (half-open) socket self-heals within one cycle. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

During snooze nothing is vibrating, so handleStop built its targets from leftAlarmActive/rightAlarmActive (both false), fired no clearAlarm mutation, and the alarm resumed at the end of the snooze. When no side is actively vibrating, targets now come from the snoozed sides (backend clearAlarm already cancels the pending snooze timer). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

…ms it The visible device status is WS-preferred, so HTTP refetch()/invalidate() after mutations never updated the UI, and clearing the dial's local target in onSettled snapped it back to the stale value for ~2s before the next frame. New useOptimisticValue hook: preview() for in-progress drags, commit() holds the value until the server reports it (6s fallback), discard() on mutation error. Applied to the TempScreen dial, ±1 buttons, power toggle, and PowerButton — whose doc comment promised an optimistic toggle it never had. Covers review items 3.8, 3.9, and 4.20. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

…Sense2 Review items: - 4.7 piezo-processor: tolerate truncated int32 buffers (len % 4 != 0 killed the module via np.frombuffer ValueError) - 4.9 piezo-processor: HRTracker re-seeds after a sustained streak of uncorrectable readings instead of freezing on a stale median; single outliers still stay out of history. Also fix FrzHealthPumpState's pump-off guard falsely asserting for the first 5s when time.monotonic() starts near zero (same sentinel bug as sleep-detector's gate; made its tests flaky on fast runs) - 4.8 calibration: drop non-dict trigger JSON instead of crash-looping the calibrator on .get() - 4.10 calibration: scan the final quiet window in CapCalibrator (off-by-one vs CapSense2Calibrator) - 4.11 calibration: write_trigger_atomic gets pid+counter uniquifier (the old with_suffix('.tmp') collapsed all writers to one tmp path) and fsyncs file + directory around the rename Also includes the pre-existing verified working-tree change to CapSense2Calibrator: accept 6-value capSense2 frames (Pod 4/5 firmware without the REF pair), mirroring sleep-detector's extractor. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

- 4.3 normalizeFrame: optional-chain nested frzHealth/frzTherm wire fields so a firmware build omitting a branch degrades to zeros instead of throwing in the WS message handler - 4.4 clamp snooze setTimeout delays to the 32-bit ms ceiling (larger values wrap and restart the alarm immediately) - 4.5 mqttBridge.testConnection resolves tlsInsecure via resolveConfig's db-then-env precedence instead of env only - 4.6 piezoStream seek: chunked async reads + periodic parse yields replace the up-to-64MB readSync that blocked the event loop for all clients Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

- 4.12 timeOfDay triggers fire on the first tick at-or-after the slot within a 10-minute grace window instead of exact-minute equality (a >60s tick gap silently skipped the slot). Fired-state is now keyed by local calendar date from the tz-aware clock — the old weekday key also blocked the same slot every following week for the life of the process. - 4.13 scheduleRunOnceSession cancels the session's existing jobs before scheduling: an in-process restore passes a filtered set-point list whose indices shift, so stale ids could double-fire set points. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

- 4.14 delete 0002_nappy_warpath.sql — orphaned byte-identical duplicate of 0003_previous_phil_sheldon.sql, absent from the journal - 4.15 reconstruct missing meta/0007_snapshot.json (0006 schema + 0007's MQTT columns, id taken from 0008's prevId); drizzle-kit check passes and generate produces no diff - 4.16 new biometrics migration 0011: plain timestamp indexes on vitals, movement, and vitals_quality so retention pruning can seek instead of full-scanning the pod's largest tables - 4.17 prune vitals_quality on the same cutoff as vitals — vitals_id is a logical, unenforced reference and no module pruned the table, so quality rows orphaned forever (a real FK would need a table rebuild and PRAGMA foreign_keys in every writer; documented in the schema instead) - 4.18 install --restore removes live -wal/-shm sidecars after copying the .db so SQLite can't replay post-backup transactions over the restore Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

- 4.2 triggerUpdate branch validation also rejects '..', '//', leading/trailing '/', leading '-', and '.lock' (git-ref-safe; the character class alone allowed traversal and option injection) - 4.21 DeviceSettingsForm resets from server data only when the values actually change — every refetch produced a new object identity and stomped fields mid-edit - 4.22 diagnostics pump-stall tile: armed = green (flag was inverted) - 4.23 CapZoneViz: reduce instead of spreading a long replay's flattened zones into Math.max (RangeError past the argument limit) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

- 4.24 untrack + gitignore biometrics.dev.db-shm/-wal (transient per-machine WAL state; the .db fixture itself stays tracked) - 4.25 fill in CLAUDE.md Build & Test, Architecture Overview, and Conventions sections - 4.26 Dependabot triage tracked as ygg task core-3 - 4.19 decision noted in the fix plan: keep the pump-stall opt-in safety reset as-is (power-cutting feature; safe default wins) - mark all Batch 4 checkboxes; lint cleanups from the batch Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

… 2026-07-01 review docs The 2026-07-01 repo-wide review is fully remediated (47/47 items); its docs are retired from docs/ and remain in git history. The new plan covers the 1 Major + 4 Minor findings left from the 2026-07-03 adversarial Codex review, self-contained since .reviews/ is gitignored. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Fix RAW file selection so the streamer skips `SEQNO.RAW` and, if the top-level `/persistent` scan finds nothing usable, falls back to `/persistent/biometrics`. Pod evidence: - `sleepypod.service` had no `RAW_DATA_DIR` override in its environment, so the app used its default path. - `/persistent` contained `SEQNO.RAW` and the `biometrics/` directory; `/persistent/biometrics` contained the real capture file `00D0660E.RAW`. - `journalctl -u sleepypod.service` showed `[sensorStream] Switched to RAW file: SEQNO.RAW`, followed by CBOR resync errors, which explained why only `DEV` appeared in the Sensors tab. Implementation: - keep the existing one-directory scan behavior - skip only `SEQNO.RAW` - if the scan of `/persistent` finds nothing, retry in `/persistent/biometrics` - add a regression test for the fallback path and `SEQNO.RAW` exclusion  ## Summary by CodeRabbit * **Bug Fixes** * Improved RAW file detection so streaming attaches to the newest valid capture instead of a placeholder file. * Added fallback discovery for devices that store captures in a nested biometrics folder, reducing resync errors and failed attachments. * **Tests** * Added coverage for RAW selection behavior across top-level and fallback locations, including handling of placeholder files and empty directories.  --------- Co-authored-by: Jonathan Ng <jon@jonathanng.com>

…all pods (#662) ## Problem Field report (trinity): the log viewer fails with ``` Failed to read logs: Command failed: journalctl -u sleepypod.service -n 201 --no-pager --output short-iso --show-cursor No journal files were opened due to insufficient permissions. ``` `system.getLogs` shells out to `journalctl` from the next-server, which runs as `User=sleepypod`. The installer only granted `SupplementaryGroups=dac`, and journal files are readable only by `adm` / `systemd-journal` / `wheel` — so on pods where the journal directory isn't world-readable, journalctl opens zero files and every log read fails. ## Fix Build the unit's supplementary-groups list dynamically in `scripts/install`: `dac` plus `systemd-journal` (falling back to `adm` where `systemd-journal` doesn't exist), keeping the existing getent guard so systemd never sees a nonexistent group. The installer rewrites the unit on every run, so existing pods pick this up on their next `sp-update`. ## Test plan - [x] `bash -n scripts/install` passes - [x] Simulated the group-line rendering under `set -euo pipefail` for all three cases (dac+journal, dac only, neither) — emits `SupplementaryGroups=dac systemd-journal`, `SupplementaryGroups=dac`, and omits the line respectively - [ ] On an affected pod: run installer, `systemctl show sleepypod -p SupplementaryGroups` shows `systemd-journal`, and `/debug` log viewer loads entries ## Immediate workaround for affected pods ```bash sudo mkdir -p /etc/systemd/system/sleepypod.service.d printf '[Service]\nSupplementaryGroups=systemd-journal\n' | sudo tee /etc/systemd/system/sleepypod.service.d/journal.conf sudo systemctl daemon-reload && sudo systemctl restart sleepypod ```   <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update fix/install-journal-group ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/fix/install-journal-group/scripts/install \ | sudo bash -s -- --branch fix/install-journal-group ``` 🎯 **Pin to this exact build** ([run 28831409722](https://github.com/sleepypod/core/actions/runs/28831409722) · `e47243b`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/e47243b63fefe6f3afd0849b45bfe56280ea8561/scripts/install \ | sudo bash -s -- \ --branch fix/install-journal-group \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/28831409722/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/28831409722/artifacts/8124541929) · self-destructs in 30 days 💥 </details>

…nded stops (#663) ## Problem Field report (Pod 4, 2026-07-11): `stall_left`/`stall_right` alerts fired daily on both sides within seconds of each other, always with `rpm = 0`; the two most recent ended in `power_off`, leaving the bed guard-blocked. The pumps are healthy — 3,477 of 5,881 flow readings in the last 7 days show normal running RPM, and the daily prime ran fine at ~3,000 RPM *after* the trip. Every alert lines up with a **firmware-commanded pump stop**, not a stall: - Jul 7 + Jul 8 alerts both at exactly **12:10:21 UTC** — the end of the scheduled daily prime (flow data shows the prime running 12:01:02 → 12:10:33). - Jul 11 alerts at 08:48:39/49 — exactly **28,800s (the 8h session duration) after the 00:48:02 power-on**, with sides tripping in the same order they powered on. ## Root cause `runStallGuard` derived `expectedActive` solely from `device_state`, which mirrors firmware through the `durationExpired` heuristic (`targetLevel === 0 && heatingDuration === 0`, else `currentLevel !== 0`). After the firmware ends a session, `currentLevel` stays non-zero while the water equalizes, so the mirror reports the side as powered for minutes while the pump correctly reads 0 RPM. With frzHealth frames arriving ~every 10s (not the 60s cadence ADR 0022 assumed) and `dwellSamples = 2`, the guard tripped ~20s after every natural session end. ## Fix `DeviceStateSync` now suppresses stall counting when the stop is explainable by lag-free firmware-side signals (`isExpectedPumpStop`): 1. **`pump.duty === 0`** — firmware isn't driving the pump. A genuinely stalled pump under closed-loop control shows duty > 0 while RPM reads 0, so real stalls are unaffected. Falls back cleanly when the frame omits `duty`. 2. **Priming active, or ended within 120s** — the prime cycle spins both pumps regardless of side power and stops them at the end. 3. **Firmware `targetLevel === 0`** — commanded neutral, pump stop expected even while `device_state` lags. 4. **Session countdown (`heatTime`) within 90s of its natural end**, projected forward from the last poll. Gated on `heatingDuration > 0` so firmware variants that report no countdown during an active session keep the previous behavior. A zero-RPM frame mid-session with the pump still driven reaches the guard as `expectedActive = true` exactly as before. `pumpStallGuard.ts` itself is unchanged. Also documents the failure mode as an addendum in ADR 0022. ## Test plan - `vitest run src/hardware/tests/` — 71 tests pass, including a new suite (`deviceStateSync.stallSuppression.test.ts`) covering: duty=0 suppression, duty>0 non-suppression, missing-duty fallback, priming + post-prime grace expiry, firmware-neutral-while-DB-powered (the field-observed case), session-end grace, countdown projection across a stalled status stream, indefinite-session (heatingDuration=0) non-suppression, and mid-session zero-RPM still tripping. - `tsc --noEmit` and `eslint` clean. - Manual verification once merged: on the affected pod, re-enable stall protection, let an 8h session expire and the 12:01 daily prime complete — no `pump_alerts` rows should appear; then verify a real stall still trips by unplugging a pump mid-session. Refs: ygg `sleepypod-core-1`, ADR 0022. 🤖 Generated with [Claude Code](https://claude.com/claude-code)   <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update fix/pump-stall-false-trip ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/fix/pump-stall-false-trip/scripts/install \ | sudo bash -s -- --branch fix/pump-stall-false-trip ``` 🎯 **Pin to this exact build** ([run 29172327550](https://github.com/sleepypod/core/actions/runs/29172327550) · `a45903d`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/a45903d711b0ca342330e04b0a493fd4ddba8e21/scripts/install \ | sudo bash -s -- \ --branch fix/pump-stall-false-trip \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/29172327550/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/29172327550/artifacts/8253876739) · self-destructs in 30 days 💥 </details>   ## Summary by CodeRabbit * **Bug Fixes** * Reduced false pump-stall alerts when pumps stop normally due to firmware commands, priming completion, neutral settings, or session end. * Continued detecting genuine mid-session zero-RPM stalls while the pump is still expected to run. * Improved handling of pump status and session timing to prevent premature alerts. * **Documentation** * Added an architecture decision record addendum explaining stall-detection behavior and safeguards.

coderabbitai · 2026-07-12T00:02:30Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 26018479-6f7a-4687-8662-8259994aba53

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch dev

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

…665) ## Summary Works this week's top entry on the mutation hit list (#591): `src/streaming/piezoStream.ts`, 151 surviving mutants — the largest single contributor after last week's mqttBridge pass (#635). - **~30 new tests + tightened assertions in existing ones**, targeting the survivor list extracted from run 29145443368's `mutation-report-streaming` artifact: - `readRawRecord`: direct byte-level tests — every seq/data CBOR encoding width (inline/1/2/4/8-byte), the 23-byte inline boundary, per-byte key corruption, exact error messages, `data: null` for placeholders, exact `nextOffset`. - `findIndexEntry`: boundary-exact binary-search assertions (kills the `<`/`<=` and loop-condition mutants). - `decodeSensorFrames`: primitive/null inner values must not abort the batch. - Seek: full-window replay is not silently truncated (64 MB cap regression), window boundary is inclusive at exactly +30s, replay stops for good at the first out-of-window frame, `incomplete`/`droppedFrames` absent on clean replays, distinct error messages for no-file vs no-frames, numeric-string and `Infinity` timestamps rejected. - Tail loop: split-record delivery is exactly-once with a seekable index offset (leftover-buffer offset accounting), resync warnings carry exact byte counts, resync from a malformed record that itself starts with `0xa2`, Pod 3 scalar capSense snapshot, non-frzHealth frames don't reach server listeners. - Lifecycle: shutdown actually closes the listening port, connect/disconnect/drop-count log lines asserted (field-debugging surface per docs/DEBUGGING.md). - **One minimal source change**: `readRawRecord`, `findIndexEntry`, `int32BufferToArray`, `decodeSensorFrames` added to the existing `__test__` export so the parser can be tested without a WS server per assertion. - **New `/mutation-hitlist` skill** (`.claude/skills/mutation-hitlist/`): packages the weekly workflow — issue lookup, artifact download, `survivors.py` extraction, killing-test playbook by mutator type, known equivalent-mutant categories, CI-based verification. Expected remaining survivors are the documented equivalent classes: module-level initializer mutants (false survivors under the vitest runner's module cache), timing/perf-only values (poll intervals, yield cadence, read-chunk sizes), and double-guarded checks. The `mutation-test` label on this PR triggers the scoped CI run for exact numbers. ## Test plan - [x] `pnpm exec vitest run src/streaming/tests/piezoStream.test.ts` — 91 passed, 0 failed - [x] eslint clean on both changed files - [x] `mutation-test` label applied → CI mutation run on this PR posts the before/after summary - [ ] Compare PR mutation summary against the 151-survivor baseline; comment results on #591   <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update test/piezostream-mutants-591 ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/test/piezostream-mutants-591/scripts/install \ | sudo bash -s -- --branch test/piezostream-mutants-591 ``` 🎯 **Pin to this exact build** ([run 29174117551](https://github.com/sleepypod/core/actions/runs/29174117551) · `3081292`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/3081292a8fc9bb6ae3c496199798d784208a39a2/scripts/install \ | sudo bash -s -- \ --branch test/piezostream-mutants-591 \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/29174117551/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/29174117551/artifacts/8254351375) · self-destructs in 30 days 💥 </details>

…ressure (#660) ## Why `sp-bundle-logs` already captures the RAW *routing* (where frames land, where each reader looks, tmpfs state), but two live field reports needed signals it didn't collect: 1. **"Only DEV shows in the Sensors tab"** (#608) — caused by the streamer tailing `SEQNO.RAW` (the 16-byte counter) instead of a real capture. The tell is in `sleepypod.service`'s log: `[sensorStream] Switched to RAW file: SEQNO.RAW` followed by `Resync:` spam. Not previously in the bundle. 2. **"Pod stopped working, `/persistent` full, update fails with No space left on device"** — a stalled biometrics pruner letting the gzip archive grow unbounded. The bundle recorded the pruner's journal but not the archive size vs. disk free, so the smoking gun wasn't obvious. ## Change Two probes appended to the existing `raw/` section: - `raw/ws-3001.txt` + `raw/sensorstream-log.txt` — is the streamer WS server up, and what did it last attach to (+ any resync spam). - `raw/archive-size.txt` — `du -sh` of the cold archive, gz file count, and `df -h /persistent` side by side. No new dependencies; all best-effort under the existing `capture` helper. Pruner/archiver journals continue to come from the `journals/` section. ## Test plan - `bash -n` clean. - Nested-quote `bash -c` snippets smoke-tested locally (archive-size probe emits count + df; sensorStream grep is a no-op on a non-pod). - On-pod: run `sp-bundle-logs`, confirm `raw/ws-3001.txt`, `raw/sensorstream-log.txt`, and `raw/archive-size.txt` are populated.   <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update chore/sp-bundle-logs-streamer-retention ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/chore/sp-bundle-logs-streamer-retention/scripts/install \ | sudo bash -s -- --branch chore/sp-bundle-logs-streamer-retention ``` 🎯 **Pin to this exact build** ([run 28831420964](https://github.com/sleepypod/core/actions/runs/28831420964) · `71859db`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/71859db98d8fdfd0f64cdf49f8a00b089fe418c0/scripts/install \ | sudo bash -s -- \ --branch chore/sp-bundle-logs-streamer-retention \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/28831420964/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/28831420964/artifacts/8124547044) · self-destructs in 30 days 💥 </details>   ## Summary by CodeRabbit * **New Features** * Added more diagnostic and storage details to the bundled logs, including network, service journal, disk usage, and archive size information. * **Bug Fixes** * Improved service setup so it only uses available system groups, reducing startup failures on systems where expected groups are missing.

#659) ## Why A pod owner (trinity) reported their pod stopped working — `/persistent` was full, and `sp-update` failed with: ``` cp: error copying '/persistent/sleepypod-data/sleepypod.db' to '…sleepypod.db.bak…': No space left on device ``` Their `/persistent/biometrics-archive` had grown to ~13 GB of 15 GB. The gzip archiver had been running fine, but the **pruner never deleted anything** — the archive grew unbounded. ## Root cause `sleepypod-biometrics-pruner` used two GNU-only constructs: - `df --output=pcent /persistent` — read current disk usage - `find … -printf '%T@ %p\n'` — pick the oldest archive Pods can ship **busybox** coreutils/findutils (the install script already accounts for this — see the `sha256sum` → `shasum` busybox fallback, and every other disk check uses the portable `df -m … | awk` form). On busybox: - `df --output=pcent` is rejected → empty stdout → `used_pct` defaults to `0` → `0 ≤ 80` → loop breaks immediately → **nothing is ever pruned**. - `find -printf` isn't supported either, so even past the df check no file would be selected. Result: archiver keeps adding gzips, pruner silently no-ops, disk fills, pod dies. (A separate `head -1` SIGPIPE stall was already fixed on `dev`; this is the remaining latent failure mode.) ## Change - `df -P /persistent | awk 'NR==2 {gsub(/%/,"",$5); print $5}'` — POSIX capacity %, works on busybox **and** GNU. - `ls -1tr "$ARCHIVE_DIR"/*.RAW.gz | awk 'NR==1'` — busybox-safe oldest-by-mtime, keeping the pipefail-safe `awk NR==1` (not `head -1`) that the prior fix established. - Factored the read into a `disk_used_pct()` helper used in both the loop and the final log line. No behavior change on GNU pods; fixes the silent stall on busybox pods. ## Test plan - `bash -n` clean. - `df -P … | awk` parse verified against a real mount (`used_pct=26`). - `ls -1tr | awk NR==1` verified to select the oldest of three files by mtime, and to return empty (no crash under `set -euo pipefail`) on an empty archive dir. - Manual on-pod verification pending: install on a busybox pod with a >80%-full `/persistent` and confirm `pruner: pruned=N used_pct=<target>` in `journalctl -u sleepypod-biometrics-pruner`.  ## Summary by CodeRabbit * **Bug Fixes** * Improved archive cleanup on devices with limited shell tools, making it more reliable across environments. * Fixed disk usage reporting so the final status message is more consistent and less likely to fail when system output is empty. * Updated selection of the oldest archived file to work more broadly while preserving the same cleanup behavior.    <details open> <summary>🛏️ Beam this PR onto a sleepypod ✨</summary> Pick the snippet that matches your pod. **Already-installed pods can't use the curl bootstraps below** — sleepypod's egress firewall DROPs github.com, and the script that knows how to unblock WAN is the very file curl is trying to fetch. Use `sp-update` instead; it's on disk and opens WAN as its first step. 🔄 **Already on a sleepypod** (most common — review a PR on a running pod): ```bash sudo sp-update fix/biometrics-pruner-busybox ``` 🚀 **Fresh pod / first install** — bootstraps from GitHub, rebuilds every push: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/fix/biometrics-pruner-busybox/scripts/install \ | sudo bash -s -- --branch fix/biometrics-pruner-busybox ``` 🎯 **Pin to this exact build** ([run 28749897785](https://github.com/sleepypod/core/actions/runs/28749897785) · `83dae7e`) — fresh-pod path, locked to one CI artifact for reproducible review: ```bash curl -fsSL https://raw.githubusercontent.com/sleepypod/core/83dae7ec58bbe72d1c6a2f18506f6599d80d8042/scripts/install \ | sudo bash -s -- \ --branch fix/biometrics-pruner-busybox \ --artifact-url 'https://nightly.link/sleepypod/core/actions/runs/28749897785/sleepypod-core.zip' ``` 🧊 Artifact: [`sleepypod-core`](https://github.com/sleepypod/core/actions/runs/28749897785/artifacts/8094350378) · self-destructs in 30 days 💥 </details>

# Conflicts: # src/streaming/tests/mqttBridge.test.ts

codecov · 2026-07-12T00:52:24Z

Codecov Report

❌ Patch coverage is 93.04348% with 72 lines in your changes missing coverage. Please review.
✅ All tests successful. No failed tests found.

Files with missing lines	Patch %	Lines
src/automation/signals.biometrics.ts	10.20%	44 Missing ⚠️
src/lib/scheduleTime.ts	86.04%	0 Missing and 6 partials ⚠️
src/automation/signals.ts	91.80%	3 Missing and 2 partials ⚠️
src/automation/backtest.ts	97.63%	0 Missing and 4 partials ⚠️
src/automation/engine.ts	97.80%	0 Missing and 4 partials ⚠️
src/components/Autopilot/builderModel.ts	98.21%	0 Missing and 3 partials ⚠️
src/hardware/dacTransport.ts	86.66%	1 Missing and 1 partial ⚠️
src/automation/instance.ts	98.07%	0 Missing and 1 partial ⚠️
src/components/diagnostics/ThermalTrendChart.tsx	66.66%	1 Missing ⚠️
src/db/schema.ts	80.00%	1 Missing ⚠️
... and 1 more

📢 Thoughts on this report? Let us know!

github-actions · 2026-07-12T01:22:50Z

🎉 This PR is included in version 2.5.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

ng and others added 30 commits June 6, 2026 14:57

docs(review): add actionable fix plan for 2026-07-01 code review

88eef99

Self-contained work plan (4 batches, 44 items) with locations, concrete changes, and verification steps, for execution in a fresh session. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

chore(review): mark Batch 1 complete; fix non-null assertion in trans…

308b4f0

…port test Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

ng and others added 19 commits July 2, 2026 23:22

chore(review): mark Batch 3 complete; lint fixes in new hooks/tests

dc7d040

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

chore: gitignore __pycache__

7f3a82c

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

fix(automation): honor manual overrides and missing setpoints

0c87deb

fix: complete review and temperature unit fixes

c44da6a

ng added 4 commits July 12, 2026 00:43

Merge remote-tracking branch 'origin/main' into HEAD

a3d885f

# Conflicts: # src/streaming/tests/mqttBridge.test.ts

ng enabled auto-merge July 12, 2026 00:51

ng merged commit 7eb42bf into main Jul 12, 2026
19 of 20 checks passed

github-actions Bot added the released label Jul 12, 2026

ng mentioned this pull request Jul 12, 2026

test(automation): cover BiometricsSignalReader and #664 codecov gaps #666

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

release: dev → main (pump stall false-trip fix, review batches, autopilot cap frames, Node 24)#664

release: dev → main (pump stall false-trip fix, review batches, autopilot cap frames, Node 24)#664
ng merged 63 commits into
mainfrom
dev

ng commented Jul 12, 2026 •

edited by github-actions Bot

Loading

Uh oh!

coderabbitai Bot commented Jul 12, 2026 •

edited

Loading

Review skipped

Uh oh!

codecov Bot commented Jul 12, 2026

Uh oh!

Uh oh!

github-actions Bot commented Jul 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

ng commented Jul 12, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release summary

Fixes

Features

Chores

Test plan

Uh oh!

coderabbitai Bot commented Jul 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

codecov Bot commented Jul 12, 2026

Codecov Report

Uh oh!

Uh oh!

github-actions Bot commented Jul 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

ng commented Jul 12, 2026 •

edited by github-actions Bot

Loading

coderabbitai Bot commented Jul 12, 2026 •

edited

Loading