mirror of
https://github.com/kuhyx/screen-locker.git
synced 2026-11-10 20:27:13 +01:00
Some checks are pending
pre-commit / pre-commit (push) Waiting to run
Tests / test (3.10) (push) Waiting to run
Tests / test (3.11) (push) Waiting to run
Tests / test (3.12) (push) Waiting to run
Tests / lock-popup-safety (push) Waiting to run
release-apk / release (APK) (push) Waiting to run
The screen locker stopped locking on 2026-08-04 and nobody could tell. Not a
logic bug: every predicate worked the whole time. systemd logged
timers.target: Found ordering cycle: early-bird-workout-check.timer/start
after graphical-session.target/start after basic.target/start after
timers.target/start - after early-bird-workout-check.timer
timers.target: Job early-bird-workout-check.timer/start deleted to break
ordering cycle starting with timers.target/start
and left the timer disabled. A timer that is WantedBy=timers.target must not be
ordered After= a target that itself comes after timers.target; systemd resolves
that loop by deleting the job, which is an absence, and absences page nobody.
That timer is the ONLY thing that closes the early-bird window. Each morning a
run inside the window banked early_bird_pending.json, logged "will re-check at
08:30", and exited 0. The re-check never came, so the marker stood all day,
every day, for thirteen days.
It stayed invisible because logging.basicConfig was called only in the
--sync-only branch, never for --production -- the mode systemd actually runs.
Journal proof: zero INFO lines from workout-locker.service since June. Every
early exit logged at INFO into a logger with no handler. Meanwhile the healthy
15-minute sync kept the system looking alive.
The 2026-08-15 Python split is NOT implicated: it was pure code motion, and
basicConfig already sat in that branch before it.
Fixes:
* Drop the After= that closes the cycle; Persistent=true so a machine asleep at
08:30 still re-checks after resume.
* Add workout-locker.timer (*:00,30). The service is WantedBy=
graphical-session.target, i.e. one decision per login, so the 08-16 -> 08-17
day and ISO-week rollover inside one long session was never re-evaluated.
* arm.sh: install units, enable timers, verify -- one command, because
re-arming was a four-command sequence that was easy to half-do, and
`systemctl enable` returns 0 while systemd deletes the timer job.
* check_enforcement_armed.py asks systemd what it actually scheduled (enabled
AND has a next trigger) and fails loudly otherwise. Wired as ExecStartPost on
workout-sync.service, so a disarmed locker marks that unit failed every 15
minutes instead of scrolling past. install_systemd.sh now fails on it too.
Logging (the reason this went unnoticed, so treated as a defect in its own
right):
* basicConfig for every mode, never one branch.
* Every enforcement-abandoning exit records a decision instead of an invisible
INFO: one greppable line -- DECISION lock=no reason=early_bird_window_active
weekly=0/5 -- at WARNING, since per CLAUDE.md an INFO explanation of a
non-action is a silent failure with extra steps. The enforced case is logged
too: "no line at all" was the outage's whole signature.
* A durable JSONL trail outside the repo (~/.local/share/screen_locker/), so
"when did this last actually enforce?" survives journal rotation. --status
and --sync-only record lock=n/a; "did not decide" must never look like
"decided not to lock".
* check_silent_failures.py now also catches sys.exit(0) that explains nothing.
Verified both directions: it flags 3/3 exits in the pre-fix _auto_upgrade.py
and passes the repo clean.
Sync noise: four records replayed as WARNINGs every cycle (~384/day), which is
how the actionable lines got tuned out. manual_workout:2026-08-15 is an empty
stub ({date, kind, type}) -- no workout to recover, and that day's credit was
already counted under a different sync_record_id, so no credit was ever lost.
The three "collided" records are dedup working. Both now report at info; a
WARNING from this logger again means something real. 4 -> 0 per cycle.
Verified on the live system: the periodic timer fired at 16:45 and the journal
shows `DECISION lock=no reason=scheduled_skip_day weekly=0/5` -- the line that
did not exist for thirteen days. Both timers report enabled and scheduled, and
no ordering cycle recurs. Today is a scheduled skip so the machine was not
locked mid-session; enforcement resumes tomorrow 08:30. 1007 tests, 100%
coverage, all hooks green.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01F2b6ZjBcdrkSYnMujx4mWd
214 lines
8.5 KiB
Python
214 lines
8.5 KiB
Python
"""Tests for screen_locker._decision_log — the durable lock-decision trail.
|
|
|
|
This module exists because the 2026-08 enforcement outage left no evidence:
|
|
every skip logged at INFO on a path with no logging configured, so the journal
|
|
recorded thirteen days of nothing. These tests pin the two properties that make
|
|
that impossible to repeat -- a skip is loud, and every decision is written to a
|
|
file that outlives the journal.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import json
|
|
from pathlib import Path
|
|
from typing import TYPE_CHECKING
|
|
from unittest.mock import patch
|
|
|
|
from screen_locker._decision_log import (
|
|
DECISION_LOG_MAX_ENTRIES,
|
|
LockDecision,
|
|
read_decisions,
|
|
record_decision,
|
|
record_no_decision,
|
|
)
|
|
|
|
if TYPE_CHECKING:
|
|
import pytest
|
|
|
|
|
|
class TestLockDecisionRendering:
|
|
"""The one-line summary must stay greppable and complete."""
|
|
|
|
def test_skip_line_reports_reason_and_weekly_progress(self) -> None:
|
|
"""A skip renders lock=no plus the counts that justify it."""
|
|
line = LockDecision(
|
|
locked=False,
|
|
reason="early_bird_window_active",
|
|
weekly_count=0,
|
|
weekly_required=5,
|
|
).as_line()
|
|
assert "DECISION" in line
|
|
assert "lock=no" in line
|
|
assert "reason=early_bird_window_active" in line
|
|
assert "weekly=0/5" in line
|
|
|
|
def test_enforced_line_reports_lock_yes(self) -> None:
|
|
"""An enforced run renders lock=yes."""
|
|
assert "lock=yes" in LockDecision(locked=True, reason="enforced").as_line()
|
|
|
|
def test_extra_fields_and_detail_are_rendered(self) -> None:
|
|
"""Extra context and the human detail both reach the line."""
|
|
line = LockDecision(
|
|
locked=False,
|
|
reason="heat_skip",
|
|
detail="too hot",
|
|
extra={"temp_celsius": 34.0},
|
|
).as_line()
|
|
assert "temp_celsius=34.0" in line
|
|
assert "too hot" in line
|
|
|
|
def test_weekly_is_omitted_when_unknown(self) -> None:
|
|
"""No weekly counts → no misleading 'weekly=None/None'."""
|
|
assert "weekly=" not in LockDecision(locked=True, reason="enforced").as_line()
|
|
|
|
|
|
class TestRecordDecision:
|
|
"""Recording must be loud for skips and durable for everything."""
|
|
|
|
def test_skip_is_logged_at_warning(
|
|
self, tmp_path: Path, caplog: pytest.LogCaptureFixture
|
|
) -> None:
|
|
"""A decision NOT to enforce must be visible at warning.
|
|
|
|
This is the exact regression: an INFO-level skip is invisible under the
|
|
default logging configuration and hid the outage for thirteen days.
|
|
"""
|
|
with caplog.at_level("INFO"):
|
|
record_decision(
|
|
LockDecision(locked=False, reason="weekly_minimum_met"),
|
|
log_file=tmp_path / "d.jsonl",
|
|
)
|
|
record = next(r for r in caplog.records if "DECISION" in r.message)
|
|
assert record.levelname == "WARNING"
|
|
|
|
def test_enforced_is_logged_at_info(
|
|
self, tmp_path: Path, caplog: pytest.LogCaptureFixture
|
|
) -> None:
|
|
"""An enforced lock is self-evident on screen, so INFO suffices."""
|
|
with caplog.at_level("INFO"):
|
|
record_decision(
|
|
LockDecision(locked=True, reason="enforced"),
|
|
log_file=tmp_path / "d.jsonl",
|
|
)
|
|
record = next(r for r in caplog.records if "DECISION" in r.message)
|
|
assert record.levelname == "INFO"
|
|
|
|
def test_decision_is_appended_to_the_durable_trail(self, tmp_path: Path) -> None:
|
|
"""Each decision lands in the file as one JSON object."""
|
|
target = tmp_path / "d.jsonl"
|
|
record_decision(
|
|
LockDecision(
|
|
locked=False, reason="sick_day", weekly_count=2, weekly_required=5
|
|
),
|
|
log_file=target,
|
|
)
|
|
record_decision(LockDecision(locked=True, reason="enforced"), log_file=target)
|
|
records = read_decisions(log_file=target)
|
|
assert [r["reason"] for r in records] == ["sick_day", "enforced"]
|
|
assert records[0]["weekly_count"] == 2
|
|
assert records[0]["locked"] is False
|
|
assert "timestamp" in records[0]
|
|
|
|
def test_parent_directory_is_created(self, tmp_path: Path) -> None:
|
|
"""A missing data directory is created rather than losing the record."""
|
|
target = tmp_path / "nested" / "deeper" / "d.jsonl"
|
|
record_decision(LockDecision(locked=True, reason="enforced"), log_file=target)
|
|
assert target.exists()
|
|
|
|
def test_history_is_trimmed_to_the_cap(self, tmp_path: Path) -> None:
|
|
"""An every-30-minutes timer must not grow the trail without bound."""
|
|
target = tmp_path / "d.jsonl"
|
|
target.write_text(
|
|
"\n".join(
|
|
json.dumps({"reason": f"old{i}"})
|
|
for i in range(DECISION_LOG_MAX_ENTRIES + 50)
|
|
)
|
|
+ "\n"
|
|
)
|
|
record_decision(LockDecision(locked=True, reason="newest"), log_file=target)
|
|
records = read_decisions(log_file=target)
|
|
assert len(records) == DECISION_LOG_MAX_ENTRIES
|
|
assert records[-1]["reason"] == "newest"
|
|
|
|
def test_write_failure_is_reported_not_swallowed(
|
|
self, tmp_path: Path, caplog: pytest.LogCaptureFixture
|
|
) -> None:
|
|
"""A trail that cannot be written says so — a gap must be visible."""
|
|
target = tmp_path / "d.jsonl"
|
|
with (
|
|
patch.object(Path, "write_text", side_effect=OSError("disk full")),
|
|
caplog.at_level("WARNING"),
|
|
):
|
|
record_decision(
|
|
LockDecision(locked=True, reason="enforced"), log_file=target
|
|
)
|
|
assert any("decision log" in r.message for r in caplog.records)
|
|
|
|
def test_write_failure_does_not_stop_the_locker(self, tmp_path: Path) -> None:
|
|
"""Failing to record must never prevent the lock from happening."""
|
|
with patch.object(Path, "write_text", side_effect=OSError("nope")):
|
|
record_decision(
|
|
LockDecision(locked=True, reason="enforced"),
|
|
log_file=tmp_path / "d.jsonl",
|
|
)
|
|
|
|
|
|
class TestRecordNoDecision:
|
|
"""Modes that never evaluate the lock must be distinguishable."""
|
|
|
|
def test_records_mode_and_null_lock(self, tmp_path: Path) -> None:
|
|
"""'did not decide' must not look like 'decided not to lock'."""
|
|
target = tmp_path / "d.jsonl"
|
|
record_no_decision("--sync-only", log_file=target)
|
|
(record,) = read_decisions(log_file=target)
|
|
assert record["locked"] is None
|
|
assert record["reason"] == "mode_makes_no_decision"
|
|
assert record["mode"] == "--sync-only"
|
|
|
|
|
|
class TestReadDecisions:
|
|
"""Reading must degrade gracefully, never crash an investigation."""
|
|
|
|
def test_missing_file_returns_empty_and_says_so(
|
|
self, tmp_path: Path, caplog: pytest.LogCaptureFixture
|
|
) -> None:
|
|
"""No history yet is normal, but is still stated out loud."""
|
|
with caplog.at_level("WARNING"):
|
|
assert read_decisions(log_file=tmp_path / "nope.jsonl") == []
|
|
assert any("No decision log" in r.message for r in caplog.records)
|
|
|
|
def test_unreadable_file_is_reported(
|
|
self, tmp_path: Path, caplog: pytest.LogCaptureFixture
|
|
) -> None:
|
|
"""An OSError is surfaced rather than silently returning []."""
|
|
target = tmp_path / "d.jsonl"
|
|
target.write_text("{}\n")
|
|
with (
|
|
patch.object(Path, "read_text", side_effect=OSError("locked")),
|
|
caplog.at_level("WARNING"),
|
|
):
|
|
assert read_decisions(log_file=target) == []
|
|
assert any("Could not read" in r.message for r in caplog.records)
|
|
|
|
def test_corrupt_lines_are_skipped_not_fatal(
|
|
self, tmp_path: Path, caplog: pytest.LogCaptureFixture
|
|
) -> None:
|
|
"""A damaged trail still yields its readable records."""
|
|
target = tmp_path / "d.jsonl"
|
|
target.write_text('{"reason": "good"}\nnot json at all\n\n')
|
|
with caplog.at_level("WARNING"):
|
|
records = read_decisions(log_file=target)
|
|
assert [r["reason"] for r in records] == ["good"]
|
|
assert any("corrupt" in r.message for r in caplog.records)
|
|
|
|
def test_non_object_lines_are_skipped(
|
|
self, tmp_path: Path, caplog: pytest.LogCaptureFixture
|
|
) -> None:
|
|
"""A bare JSON scalar is not a decision record."""
|
|
target = tmp_path / "d.jsonl"
|
|
target.write_text('[1, 2, 3]\n{"reason": "good"}\n')
|
|
with caplog.at_level("WARNING"):
|
|
records = read_decisions(log_file=target)
|
|
assert [r["reason"] for r in records] == ["good"]
|
|
assert any("not an object" in r.message for r in caplog.records)
|