screen-locker/screen_locker
Krzysztof kuhy Rudnicki 86b63108c7 Tombstone sync records durably: a ledger the PC re-pushes every tick
manual:2026-09-13T14:30 -- the synced copy of the football that this
morning's day-key rekey let back in under a second id -- made every
workout-sync tick log "Manual-workout budget exhausted -- not ingested".
Tombstoning it once did not stick: sync_log pulls only the OTHER devices'
logs and _manual_push re-derives the PC's log from log.json each tick, so
the next push overwrote the tombstone ("tombstoned", then "LIVE" five
seconds later). Deletion is monotonic only for records still in the merge.

- New _sync_tombstones: {id: {deleted_hlc, reason, tombstoned_at}} in
  screen_locker/sync_tombstones.json (gitignored with its siblings). The
  HLC is minted once and stored so re-pushing does not churn the store.
  The ledger path is resolved at call time, not as a default argument, so
  the test suite's redirect actually applies -- verified by hashing the
  real ledger before and after the run.
- _manual_push.records_from_workout_log merges the ledger over the live
  derivation, so every push carries the tombstones.
- scripts/tombstone_sync_record.py <id> [--apply --reason ...]: dry run
  reports live/tombstoned; --apply writes the ledger, runs one tick and
  reports what the store holds afterwards. Rerunnable.
- tests/_isolated_state.py redirects SYNC_TOMBSTONES_FILE (both bindings).

Verified: --apply -> "tombstoned"; a second ordinary tick -> "already
tombstoned" with the same HLC; workout-sync.service now logs "Sync record
manual:2026-09-13T14:30 is tombstoned -- skipping it" and the budget line
for that id is gone. log.json untouched (the local entry stays; it shares
the original's credit per duplicate_credits.json).

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C7vgacLhb4WJjxuVj2QLEP
2026-09-13 20:20:06 +02:00
..
tests Tombstone sync records durably: a ledger the PC re-pushes every tick 2026-09-13 20:20:06 +02:00
__init__.py Fix test discovery and coverage for python_pkg modules 2025-12-02 22:33:34 +01:00
_adb_transport.py Split _shutdown, _phone_verification and _status_data 2026-08-15 20:11:28 +02:00
_armed_state.py Close the four gaps that let a decided lock never reach the screen 2026-08-30 15:24:45 +02:00
_auto_upgrade.py Say every reason a lock decision had, not just the first one 2026-08-23 07:02:41 +02:00
_cli.py Log manual workouts headlessly, with the form's rules intact 2026-08-27 20:50:52 +02:00
_compliance_predicates.py Key every workout day on the LOCAL calendar day, not UTC 2026-09-13 09:50:06 +02:00
_compliance_state.py Key every workout day on the LOCAL calendar day, not UTC 2026-09-13 09:50:06 +02:00
_compliance_trace.py Detect a Firebase credential the server rejects, not just one that fails to build 2026-08-27 21:32:39 +02:00
_constants.py Tombstone sync records durably: a ledger the PC re-pushes every tick 2026-09-13 20:20:06 +02:00
_credential_recovery.py Detect a Firebase credential the server rejects, not just one that fails to build 2026-08-27 21:32:39 +02:00
_day.py Key every workout day on the LOCAL calendar day, not UTC 2026-09-13 09:50:06 +02:00
_decision_log.py Close the four gaps that let a decided lock never reach the screen 2026-08-30 15:24:45 +02:00
_decision_reasons.py Say every reason a lock decision had, not just the first one 2026-08-23 07:02:41 +02:00
_decision_trail.py Close the four gaps that let a decided lock never reach the screen 2026-08-30 15:24:45 +02:00
_degraded_sources.py Detect a Firebase credential the server rejects, not just one that fails to build 2026-08-27 21:32:39 +02:00
_device.py Push under a persisted per-install uuid, not a fixed role id 2026-08-09 17:31:15 +02:00
_early_bird.py Key every workout day on the LOCAL calendar day, not UTC 2026-09-13 09:50:06 +02:00
_extra_benefits.py Grade against 3.14 too, not just run on it 2026-08-29 11:42:47 +02:00
_heat_skip.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_http_workout_fetch.py Split _shutdown, _phone_verification and _status_data 2026-08-15 20:11:28 +02:00
_instance.py Queue behind stronger lockers, single-instance guard, fix budget-crash in fit check 2026-08-21 13:04:54 +02:00
_log_io.py Stop the relaxed-day popup from re-firing every 30 minutes after Skip 2026-08-18 21:55:59 +02:00
_log_mixin.py Key every workout day on the LOCAL calendar day, not UTC 2026-09-13 09:50:06 +02:00
_manual_cli.py Key every workout day on the LOCAL calendar day, not UTC 2026-09-13 09:50:06 +02:00
_manual_push.py Tombstone sync records durably: a ledger the PC re-pushes every tick 2026-09-13 20:20:06 +02:00
_manual_sync.py Stop the relaxed-day popup from re-firing every 30 minutes after Skip 2026-08-18 21:55:59 +02:00
_manual_workout_dialog.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_manual_workout_sport_fields.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_manual_workout_types.py Key every workout day on the LOCAL calendar day, not UTC 2026-09-13 09:50:06 +02:00
_manual_workout_widgets.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_manual_workout.py Grade against 3.14 too, not just run on it 2026-08-29 11:42:47 +02:00
_mcp.py Re-point paths for the ~ reorganisation (home-tidy) 2026-09-11 18:46:28 +02:00
_phone_verification.py Key every workout day on the LOCAL calendar day, not UTC 2026-09-13 09:50:06 +02:00
_push_outcome.py Detect a Firebase credential the server rejects, not just one that fails to build 2026-08-27 21:32:39 +02:00
_queue_state.py Close the four gaps that let a decided lock never reach the screen 2026-08-30 15:24:45 +02:00
_queue_wait.py Close the four gaps that let a decided lock never reach the screen 2026-08-30 15:24:45 +02:00
_runnerup_backfill.py Grade against 3.14 too, not just run on it 2026-08-29 11:42:47 +02:00
_runnerup_db.py Retry RunnerUp verification every 15 min, and stop hiding why it fails 2026-08-12 19:17:29 +02:00
_runnerup_tcx.py Split _runnerup_verification, _ui_widgets and _sick_dialog 2026-08-15 20:37:15 +02:00
_runnerup_verification.py Key every workout day on the LOCAL calendar day, not UTC 2026-09-13 09:50:06 +02:00
_session_sync.py Credit StrongLifts sessions from the headless sync, as pc_workout_verified 2026-08-22 11:26:20 +02:00
_shutdown_base.py Replay today's earned shutdown credit in the daily base reset 2026-09-13 20:00:05 +02:00
_shutdown_sick_state.py Key every workout day on the LOCAL calendar day, not UTC 2026-09-13 09:50:06 +02:00
_shutdown.py Replay today's earned shutdown credit in the daily base reset 2026-09-13 20:00:05 +02:00
_sick_budget.py Key every workout day on the LOCAL calendar day, not UTC 2026-09-13 09:50:06 +02:00
_sick_commitment.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_sick_dialog.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_sick_tracker.py Grade against 3.14 too, not just run on it 2026-08-29 11:42:47 +02:00
_source_health.py Grade against 3.14 too, not just run on it 2026-08-29 11:42:47 +02:00
_startup_checks.py Replay today's earned shutdown credit in the daily base reset 2026-09-13 20:00:05 +02:00
_status_data.py Replace scheduled skips with the shared free-day pool 2026-09-07 15:42:41 +02:00
_status_projection.py Serve the lock decision, its history and its health at 127.0.0.1:8770 2026-08-29 22:50:19 +02:00
_status_sections.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_status_types.py Split _shutdown, _phone_verification and _status_data 2026-08-15 20:11:28 +02:00
_status_view_verify.py Make Check Phone week-aware; add RunnerUp GPS tolerance; fix CLI weekly count 2026-07-18 06:55:55 +02:00
_status.py Grade against 3.14 too, not just run on it 2026-08-29 11:42:47 +02:00
_surface_group.py Grade against 3.14 too, not just run on it 2026-08-29 11:42:47 +02:00
_sync_client.py Grade against 3.14 too, not just run on it 2026-08-29 11:42:47 +02:00
_sync_mixin.py Credit StrongLifts sessions from the headless sync, as pc_workout_verified 2026-08-22 11:26:20 +02:00
_sync_records.py Apply sync tombstones across the device union, not per device log 2026-08-21 13:38:52 +02:00
_sync_retry.py Grade against 3.14 too, not just run on it 2026-08-29 11:42:47 +02:00
_sync_status.py Grade against 3.14 too, not just run on it 2026-08-29 11:42:47 +02:00
_sync_tombstones.py Tombstone sync records durably: a ledger the PC re-pushes every tick 2026-09-13 20:20:06 +02:00
_temperature_status_mixin.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_temperature.py Close the four gaps that let a decided lock never reach the screen 2026-08-30 15:24:45 +02:00
_time_check.py Support multiple workouts per day; fix the dead sync; ban silent failures 2026-07-17 09:22:31 +02:00
_ui_flows_lockout.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_ui_flows_relaxed.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_ui_flows_sick.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_ui_flows.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_ui_form_fields.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_ui_widgets.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_unlock_view.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_wake_alarm.py Grade against 3.14 too, not just run on it 2026-08-29 11:42:47 +02:00
_wake_state.py Key every workout day on the LOCAL calendar day, not UTC 2026-09-13 09:50:06 +02:00
_web_decisions.py Close the four gaps that let a decided lock never reach the screen 2026-08-30 15:24:45 +02:00
_web_payload.py Close the four gaps that let a decided lock never reach the screen 2026-08-30 15:24:45 +02:00
_web_server.py Close the four gaps that let a decided lock never reach the screen 2026-08-30 15:24:45 +02:00
_weekly_check.py Replay today's earned shutdown credit in the daily base reset 2026-09-13 20:00:05 +02:00
_window_setup.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
_workout_app.py Put the demo's escape hatch inside the app, the only place it can be received 2026-08-22 12:41:07 +02:00
_workout_credit.py Replay today's earned shutdown credit in the daily base reset 2026-09-13 20:00:05 +02:00
_workout_handoff.py Make the demo escapable, and stop claiming the blocking was deliberate 2026-08-22 12:33:07 +02:00
_workout_ready.py Supervise the workout app as the lock surface, on a deadline that holds 2026-08-22 11:52:02 +02:00
_workout_session.py Put the demo's escape hatch inside the app, the only place it can be received 2026-08-22 12:41:07 +02:00
_workout_sync.py Credit StrongLifts sessions from the headless sync, as pc_workout_verified 2026-08-22 11:26:20 +02:00
adjust_shutdown_schedule.sh Re-point paths for the ~ reorganisation (home-tidy) 2026-09-11 18:46:28 +02:00
screen_lock.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00
status_view.py Take gatelock 0.8.1: nested LockConfig 2026-09-12 19:52:38 +02:00