mirror of
https://github.com/kuhyx/screen-locker.git
synced 2026-11-10 20:47:14 +01:00
Some checks are pending
pre-commit / pre-commit (push) Waiting to run
Tests / test (3.10) (push) Waiting to run
Tests / test (3.11) (push) Waiting to run
Tests / test (3.12) (push) Waiting to run
Tests / lock-popup-safety (push) Waiting to run
release-apk / release (APK) (push) Waiting to run
The screen locker stopped locking on 2026-08-04 and nobody could tell. Not a
logic bug: every predicate worked the whole time. systemd logged
timers.target: Found ordering cycle: early-bird-workout-check.timer/start
after graphical-session.target/start after basic.target/start after
timers.target/start - after early-bird-workout-check.timer
timers.target: Job early-bird-workout-check.timer/start deleted to break
ordering cycle starting with timers.target/start
and left the timer disabled. A timer that is WantedBy=timers.target must not be
ordered After= a target that itself comes after timers.target; systemd resolves
that loop by deleting the job, which is an absence, and absences page nobody.
That timer is the ONLY thing that closes the early-bird window. Each morning a
run inside the window banked early_bird_pending.json, logged "will re-check at
08:30", and exited 0. The re-check never came, so the marker stood all day,
every day, for thirteen days.
It stayed invisible because logging.basicConfig was called only in the
--sync-only branch, never for --production -- the mode systemd actually runs.
Journal proof: zero INFO lines from workout-locker.service since June. Every
early exit logged at INFO into a logger with no handler. Meanwhile the healthy
15-minute sync kept the system looking alive.
The 2026-08-15 Python split is NOT implicated: it was pure code motion, and
basicConfig already sat in that branch before it.
Fixes:
* Drop the After= that closes the cycle; Persistent=true so a machine asleep at
08:30 still re-checks after resume.
* Add workout-locker.timer (*:00,30). The service is WantedBy=
graphical-session.target, i.e. one decision per login, so the 08-16 -> 08-17
day and ISO-week rollover inside one long session was never re-evaluated.
* arm.sh: install units, enable timers, verify -- one command, because
re-arming was a four-command sequence that was easy to half-do, and
`systemctl enable` returns 0 while systemd deletes the timer job.
* check_enforcement_armed.py asks systemd what it actually scheduled (enabled
AND has a next trigger) and fails loudly otherwise. Wired as ExecStartPost on
workout-sync.service, so a disarmed locker marks that unit failed every 15
minutes instead of scrolling past. install_systemd.sh now fails on it too.
Logging (the reason this went unnoticed, so treated as a defect in its own
right):
* basicConfig for every mode, never one branch.
* Every enforcement-abandoning exit records a decision instead of an invisible
INFO: one greppable line -- DECISION lock=no reason=early_bird_window_active
weekly=0/5 -- at WARNING, since per CLAUDE.md an INFO explanation of a
non-action is a silent failure with extra steps. The enforced case is logged
too: "no line at all" was the outage's whole signature.
* A durable JSONL trail outside the repo (~/.local/share/screen_locker/), so
"when did this last actually enforce?" survives journal rotation. --status
and --sync-only record lock=n/a; "did not decide" must never look like
"decided not to lock".
* check_silent_failures.py now also catches sys.exit(0) that explains nothing.
Verified both directions: it flags 3/3 exits in the pre-fix _auto_upgrade.py
and passes the repo clean.
Sync noise: four records replayed as WARNINGs every cycle (~384/day), which is
how the actionable lines got tuned out. manual_workout:2026-08-15 is an empty
stub ({date, kind, type}) -- no workout to recover, and that day's credit was
already counted under a different sync_record_id, so no credit was ever lost.
The three "collided" records are dedup working. Both now report at info; a
WARNING from this logger again means something real. 4 -> 0 per cycle.
Verified on the live system: the periodic timer fired at 16:45 and the journal
shows `DECISION lock=no reason=scheduled_skip_day weekly=0/5` -- the line that
did not exist for thirteen days. Both timers report enabled and scheduled, and
no ordering cycle recurs. Today is a scheduled skip so the machine was not
locked mid-session; enforcement resumes tomorrow 08:30. 1007 tests, 100%
coverage, all hooks green.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01F2b6ZjBcdrkSYnMujx4mWd
170 lines
7.0 KiB
Python
170 lines
7.0 KiB
Python
"""Startup early-exit checks for the screen locker.
|
|
|
|
Split out of ``screen_lock.py`` to keep every file under the 250-line cap.
|
|
These run before any lock window is built and decide whether the lock is
|
|
needed at all: scheduled skip, weekly minimum already met, relaxed day, or
|
|
genuine extreme heat.
|
|
|
|
The entry point is ``_check_non_verify_exits``, which
|
|
``_auto_upgrade.AutoUpgradeMixin._check_early_exits`` calls.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import logging
|
|
import sys
|
|
|
|
from screen_locker._constants import (
|
|
EXTRA_BENEFITS_FILE,
|
|
HEAT_SKIP_CITY,
|
|
HEAT_SKIP_TEMP_THRESHOLD,
|
|
SHUTDOWN_BASE_FILE,
|
|
SICK_DAY_STATE_FILE,
|
|
)
|
|
from screen_locker._decision_log import (
|
|
LockDecision,
|
|
record_decision,
|
|
)
|
|
from screen_locker._extra_benefits import process_week_transition
|
|
from screen_locker._shutdown_base import reset_to_base_if_new_day
|
|
from screen_locker._sync_mixin import SyncMixin
|
|
from screen_locker._temperature import fetch_current_temp_with_status
|
|
from screen_locker._weekly_check import (
|
|
WEEKLY_WORKOUT_MINIMUM,
|
|
count_weekly_workouts,
|
|
has_weekly_minimum,
|
|
is_relaxed_day,
|
|
)
|
|
|
|
__all__ = ["StartupChecksMixin"]
|
|
|
|
_logger = logging.getLogger(__name__)
|
|
|
|
|
|
class StartupChecksMixin(SyncMixin):
|
|
"""Decide, before building any UI, whether the lock should run today.
|
|
|
|
Inherits ``SyncMixin`` rather than sitting beside it in ``ScreenLocker``'s
|
|
base list: the early-exit sequence calls ``_ingest_synced_manual_workouts``
|
|
and ``_auto_fill_week_runnerup_bonus`` directly, so the dependency is real
|
|
and this keeps the god-class's ancestor count from growing.
|
|
"""
|
|
|
|
def _record_decision(
|
|
self, *, locked: bool, reason: str, detail: str, **extra: object
|
|
) -> None:
|
|
"""Record one lock decision, annotated with this week's progress.
|
|
|
|
The weekly count is attached to every decision because "was it right to
|
|
skip?" is unanswerable without it -- during the 2026-08 outage the
|
|
journal could not distinguish "5/5, correctly skipped" from "0/5, should
|
|
have locked".
|
|
"""
|
|
record_decision(
|
|
LockDecision(
|
|
locked=locked,
|
|
reason=reason,
|
|
detail=detail,
|
|
weekly_count=count_weekly_workouts(self.log_file),
|
|
weekly_required=WEEKLY_WORKOUT_MINIMUM,
|
|
extra=extra,
|
|
)
|
|
)
|
|
|
|
def _record_skip(self, reason: str, detail: str, **extra: object) -> None:
|
|
"""Record a decision not to enforce, then exit the process."""
|
|
self._record_decision(locked=False, reason=reason, detail=detail, **extra)
|
|
sys.exit(0)
|
|
|
|
def _check_non_verify_exits(self) -> None:
|
|
"""Check all normal (non-verify) startup early-exit conditions."""
|
|
if self._is_scheduled_skip_today():
|
|
self._record_skip("scheduled_skip_day", "Today is a scheduled skip day.")
|
|
return
|
|
# Award streak / shutdown-bonus / EB-extension rewards from last week
|
|
# before the daily reset, so a Monday transition's bonus is recorded
|
|
# in time for _apply_weekly_shutdown_bonus below to see it.
|
|
for reward_msg in process_week_transition(self.log_file, EXTRA_BENEFITS_FILE):
|
|
_logger.info("Weekly reward: %s", reward_msg)
|
|
# Reset shutdown config to base (21:00) at the start of each new day,
|
|
# then layer this week's earned bonus back on top of the fresh base.
|
|
if reset_to_base_if_new_day(
|
|
SHUTDOWN_BASE_FILE, self, sick_day_state_file=SICK_DAY_STATE_FILE
|
|
):
|
|
self._apply_weekly_shutdown_bonus()
|
|
# Ingest any manual workouts synced from the phone (or another device)
|
|
# before the early-exit checks, so a manual logged off-app still counts
|
|
# toward today's/this week's minimum.
|
|
self._ingest_synced_manual_workouts()
|
|
# Auto-fill any RunnerUp workouts from earlier in the current ISO week
|
|
# before any early-exit check, so gaps are closed regardless of today's
|
|
# logged state (early_bird, sick_day, etc.).
|
|
self._auto_fill_week_runnerup_bonus()
|
|
if self._check_today_state_exits():
|
|
return
|
|
# Day-of-week routing: Tue/Wed/Thu relaxed (optional), Fri-Mon enforced.
|
|
if is_relaxed_day():
|
|
self._record_decision(
|
|
locked=False,
|
|
reason="relaxed_day",
|
|
detail="Relaxed day (Tue-Thu) — showing the optional prompt.",
|
|
)
|
|
self._relaxed_day_mode = True
|
|
return
|
|
# Fri-Mon: skip lock when weekly minimum is already met.
|
|
if has_weekly_minimum(self.log_file):
|
|
self._record_skip(
|
|
"weekly_minimum_met",
|
|
f"Weekly minimum of {WEEKLY_WORKOUT_MINIMUM} workouts met.",
|
|
)
|
|
return
|
|
# Only remaining same-day skip: genuine extreme heat. Sick days go
|
|
# through the justification flow instead; there is no banked
|
|
# "skip a workout" credit — that mechanic works against the goal of
|
|
# maximizing weekly workouts, so it was removed in favor of a
|
|
# shutdown-time-only reward (see _apply_weekly_shutdown_bonus).
|
|
self._check_heat_skip_exit()
|
|
# Nothing excused today: falling through here means the lock WILL be
|
|
# built. Recorded explicitly so the trail shows enforcement happening,
|
|
# not merely the absence of a skip -- "no line at all" was precisely
|
|
# the signature of the 2026-08 outage.
|
|
self._record_decision(
|
|
locked=True,
|
|
reason="enforced",
|
|
detail="No exemption applied — building the lock screen.",
|
|
)
|
|
|
|
def _check_heat_skip_exit(self) -> None:
|
|
"""Exit early if today qualifies for the extreme-heat skip dialog.
|
|
|
|
Fail-closed by construction: a failed or timed-out temperature fetch
|
|
falls straight through to the lock, same as "not hot enough" — the
|
|
only difference is this logs *why* explicitly, so a fetch failure
|
|
is never silently indistinguishable from a normal day in the logs.
|
|
"""
|
|
check = fetch_current_temp_with_status(HEAT_SKIP_CITY)
|
|
if check.timed_out:
|
|
_logger.warning(
|
|
"Heat-skip temperature check timed out — defaulting to lock."
|
|
)
|
|
return
|
|
if check.temp_celsius is None:
|
|
_logger.warning(
|
|
"Heat-skip temperature check failed (network/API error) — "
|
|
"defaulting to lock."
|
|
)
|
|
return
|
|
if check.temp_celsius < HEAT_SKIP_TEMP_THRESHOLD:
|
|
return
|
|
_logger.info(
|
|
"Temperature %.0f°C exceeds threshold — showing heat-skip dialog.",
|
|
check.temp_celsius,
|
|
)
|
|
if self._show_heat_skip_dialog(check.temp_celsius):
|
|
self._save_heat_skip_log(check.temp_celsius)
|
|
self._record_skip(
|
|
"heat_skip",
|
|
f"User skipped the workout due to heat ({check.temp_celsius:.0f}°C).",
|
|
temp_celsius=round(check.temp_celsius, 1),
|
|
)
|