screentinker 26c059c1b8 Every build from alpha10 onward sorted below alpha8 (#270) ... A plain string compare on the prerelease tag put "alpha11" below "alpha8", because '1' < '8'. The OTA check therefore answered client-newer and refused to offer the update — while reporting the newer build as `latest` in the same response: latest_version: 1.9.34-alpha11 current_version: 1.9.34-alpha8 update_available: false reason: "client-newer" So a fleet on alpha8 or alpha9 could not be moved forward at all, silently, and nothing about the symptom pointed at version ordering. alpha10 was never really on offer either; the last update that genuinely worked was alpha6 -> alpha8, where the lexical order happens to be right by luck. This is what semver specifies for a single alphanumeric identifier, and it is simply not what the naming means. lib/version-precedence.js compares digit runs NUMERICALLY, so alpha8 < alpha9 < alpha10 < alpha11, while leaving everything else alphabetical — beta still outranks alpha, rc still outranks beta, and a release still outranks any prerelease of the same core. Dot-separated identifiers are compared per semver and a shorter run loses, so moving the naming to the semver-correct `-alpha.11` form later needs no further change here. TWO comparators carried the assumption, each with a comment asserting lexical was fine "for our naming" — true only while the counter stayed below 10. Both now use the shared helper rather than a third copy drifting into the same trap: - lib/ota-breaker.js the Android OTA path - lib/brightsign-update.js the BrightSign host package, where a wrong-way comparison replaces the script that boots the player lib/ghcr-check.js was checked and is unaffected: it rejects prerelease strings outright rather than ordering them. Tests pin the exact stranding case end to end — decide('1.9.34-alpha8', '1.9.34-alpha11') must be an offer, not client-newer — plus the reverse direction, so a future change cannot merely invert it. 1668/1668 pass.		2026-08-13 20:20:17 -05:00
..
agency-layouts.js	feat: agency zone-grant issuance UI + reactive placement card (#73)	2026-06-14 15:12:55 -05:00
agency-targets.js	feat(agency): per-token upload folder — auto-created, subtree-confined (#158) (#171)	2026-07-12 21:23:25 -05:00
apk-cache.js	Serve a beta APK alongside the stable one, and let a display move between them	2026-07-30 19:12:46 -05:00
apk-signature.js	feat(device-owner): tier foundation + QR provisioning + content-expiry & device enhancements (#168)	2026-07-12 19:41:07 -05:00
app-settings.js	feat(#146): always-on devices_connected + admin-toggleable /api/status debug block	2026-07-01 18:45:40 -05:00
billing-token.js	feat(#146): owner-only CLI to mint billing:read tokens (scripts/mint-billing-token.js)	2026-07-01 21:31:11 -05:00
billing.js	feat(#146): usage metering + admin-gated Billable Screens report (contract system-of-record)	2026-07-01 20:45:27 -05:00
bounded-snapshot-store.js	fix(widgets): bound the unauthenticated telemetry store, and stop it writing rows	2026-07-26 10:36:09 -05:00
branding.js	fix(security): patch quick-win findings from the codebase review	2026-06-08 19:02:19 -05:00
brightsign-package.js	autorun.zip must be STORED and opened with roBrightPackage	2026-08-05 11:36:18 -05:00
brightsign-snapshot-queue.js	Let a BrightSign host COLLECT its capture request over HTTP	2026-08-07 14:15:06 -05:00
brightsign-update.js	Every build from alpha10 onward sorted below alpha8 (#270)	2026-08-13 20:20:17 -05:00
chunked-prune.js	fix(#146) A: non-blocking maintenance — chunked+yield+band-gate all sweeps	2026-06-30 20:55:05 -05:00
command-queue.js	feat(socket): delivery queue for offline-device emits	2026-05-14 13:06:43 -05:00
content-ack-limiter.js	fix(#146) E: log/write self-protection — coalesced logs, batched telemetry, bounded maps	2026-06-30 21:34:01 -05:00
content-ingest.js	Drop sharp: pure-JS image ops on a worker thread (#263)	2026-08-13 11:40:13 -05:00
device-identity.js	fix(#146) P1.1: resolveIdentity short-circuits on device_id (zero-lookup hot path)	2026-06-30 21:57:55 -05:00
device-sanitize.js	Scope device serialization to what each endpoint actually needs	2026-07-27 20:40:40 -05:00
device-settings.js	Apply a saved device snapshot only inside the workspace it was taken in	2026-07-30 20:56:59 -05:00
device-timezone.js	Store a schedule in the timezone its screen runs in	2026-07-28 09:43:46 -05:00
domain-verify.js	SSO: refuse delegated proof names, release lapsed and deleted claims	2026-08-10 21:01:26 -05:00
emailVerify.js	feat(auth,tizen): TOTP 2FA UI, email verification on signup, Tizen SSSP install	2026-07-22 21:08:50 -05:00
flap-limiter.js	fix(#148) Item 1: exempt paired+authenticated devices from the flap-limiter quarantine	2026-07-02 14:59:25 -05:00
ghcr-check.js	feat(dashboard): version indicator + GHCR update check (#165)	2026-07-10 22:40:06 -05:00
image-gen.js	feat(ai): generate background + foreground images for signs (#41 Phase 2)	2026-06-09 13:40:14 -05:00
image-ops-core.js	Drop sharp: pure-JS image ops on a worker thread (#263)	2026-08-13 11:40:13 -05:00
image-ops-worker.js	Drop sharp: pure-JS image ops on a worker thread (#263)	2026-08-13 11:40:13 -05:00
image-ops.js	Drop sharp: pure-JS image ops on a worker thread (#263)	2026-08-13 11:40:13 -05:00
incident-classify.js	feat(diagnostics): device incident log — offline cause, network-vs-reboot, display-sleep (#175)	2026-07-13 11:26:04 -05:00
item-duration.js	Default a video playlist item to the clip's own length (#237)	2026-08-06 09:36:53 -05:00
limiter-telemetry.js	Record auth rate-limit rejections so they can be measured	2026-07-28 14:01:00 -05:00
liveness.js	QA: close four ways a control or an asset lied about itself	2026-08-06 16:12:29 -05:00
log-coalescer.js	fix(#146) P3.7: coalescer carries the PEAK numeric over the window	2026-06-30 22:10:45 -05:00
login-lockout.js	feat(auth): bound password login per account, not only per IP	2026-07-26 14:07:16 -05:00
media-mute.js	Mute reaches YouTube items — it never did, and failed opposite ways per player	2026-08-05 10:50:59 -05:00
media-orientation.js	fix(content+android): rotation-aware media — portrait upright on dashboard AND player (#170) (#172)	2026-07-12 22:05:11 -05:00
media-tools.js	Backfill missing thumbnails at boot, and say when ffmpeg is absent	2026-08-07 09:30:32 +01:00
numeric-code.js	fix(devices): generate access-gating six-digit codes with a CSPRNG	2026-07-26 14:24:03 -05:00
oidc-providers.js	Customer Entra tenants: verify the domain, then be believed	2026-08-11 23:05:25 -05:00
oidc.js	SSO: refuse delegated proof names, release lapsed and deleted claims	2026-08-10 21:01:26 -05:00
orientation-style.js	Preview a rotated display the way people see it, not the way its framebuffer is	2026-08-06 09:38:31 -05:00
ota-breaker.js	Every build from alpha10 onward sorted below alpha8 (#270)	2026-08-13 20:20:17 -05:00
ota-download-guard.js	feat(#146): /api/status.debug throughput counters (gauges -> gauges + work done)	2026-06-30 23:24:32 -05:00
pair-lockout.js	fix(pairing): expire a pairing code on device liveness, not row age	2026-07-27 10:59:38 -05:00
parse-size.js	Parse MAX_FILE_SIZE, and document what else caps an upload	2026-07-28 20:40:14 -05:00
passwordReset.js	feat(auth): self-service password reset	2026-07-27 11:19:39 -05:00
permissions.js	feat(roles): add cross-org platform_operator staff role (#13)	2026-06-05 10:30:21 -05:00
player-cache-policy.js	Offline media on every player, and a revision so the cache can still be updated	2026-08-05 15:27:36 -05:00
player-capabilities.js	A baseline moves when the fix reaches SCREENS, which is not one rule	2026-08-06 22:54:45 -05:00
player-media-health.js	Export shared modules to the browser even when Node is in the page	2026-08-07 10:36:50 -05:00
preflight-deps.js	Pin better-sqlite3 to 12.9.0 (was ^9.4.3) (#264)	2026-08-13 12:18:47 -05:00
public-email-domains.js	SSO: fix an account takeover, a remote crash, and login CSRF found in review	2026-08-10 18:12:07 -05:00
reconnect-throttle.js	fix(#146): reconnect/heartbeat storm containment (beta5)	2026-06-29 22:12:13 -05:00
recovery-grant.js	fix(auth): back break-glass recovery with a revocable, auditable grant	2026-07-26 14:49:03 -05:00
rolling-counter.js	feat(#146): /api/status.debug throughput counters (gauges -> gauges + work done)	2026-06-30 23:24:32 -05:00
safe-socket.js	fix(#146): crash-hardening — one device's handler throw can't take down the fleet	2026-06-29 23:38:11 -05:00
schedule-eval.js	Export shared modules to the browser even when Node is in the page	2026-08-07 10:36:50 -05:00
schema-check.js	fix(db): observable migrations + fail-fast schema verification (#37)	2026-06-09 09:31:52 -05:00
secretbox.js	feat(ai): AI content design in the Designer, BYO endpoint (#41 Phase 1)	2026-06-09 12:23:55 -05:00
session-settle.js	fix(#148) patch2: per-device session-settle debounce — absorb duplicate-socket storms	2026-07-02 19:12:46 -05:00
settings-pin.js	The settings PIN can be rotated and set from the dashboard	2026-08-05 13:44:15 -05:00
socket-rooms.js	feat(socket): Phase 2.3 workspace-scoped dashboard socket rooms + per-command permission gates. Dashboard namespace was previously a flat broadcast - every connected dashboard received every device's status/screenshot/playback events platform-wide (foreign device names + IPs included). Inbound socket commands gated by a legacy admin/superadmin role check that was dead code post-Phase-1 rename.	2026-05-12 11:34:24 -05:00
ssrf-guard.js	feat: transition engine — GL wipes across web, Tizen & Android (+ image↔video) (#204)	2026-07-20 16:45:32 -05:00
status-log-writer.js	feat(diagnostics): device incident log — offline cause, network-vs-reboot, display-sleep (#175)	2026-07-13 11:26:04 -05:00
sync-backend.js	Drop the user-agent fallback — it could never fire	2026-08-05 10:30:10 -05:00
tcp-keepalive.js	fix(#148) Items 2-4: mark-offline closes the socket + tighten ping + TCP keepalive	2026-07-02 14:59:25 -05:00
telemetry.js	Install statistics: send on opt-in, name a blocked firewall, and add an operator collector (#268)	2026-08-13 19:00:37 -05:00
tenancy.js	refactor(auth): drop the unused optionalAuth middleware	2026-07-24 21:03:25 -05:00
tenant-cascade-migration.js	fix(db): cascade tenant resources on workspace/org delete (#18 follow-up)	2026-06-08 16:01:52 -05:00
thumbnail-backfill.js	Backfill missing thumbnails at boot, and say when ffmpeg is absent	2026-08-07 09:30:32 +01:00
totp-lockout.js	feat(server): TOTP primitives - encrypted secret, hashed recovery codes, verify lockout (#100)	2026-06-13 20:48:55 -05:00
totp.js	feat(auth,tizen): TOTP 2FA UI, email verification on signup, Tizen SSSP install	2026-07-22 21:08:50 -05:00
transition-bundle.js	feat: transition engine — GL wipes across web, Tizen & Android (+ image↔video) (#204)	2026-07-20 16:45:32 -05:00
transition-config.js	feat: transition engine — GL wipes across web, Tizen & Android (+ image↔video) (#204)	2026-07-20 16:45:32 -05:00
upload-sniff.js	fix(uploads): derive stored type from file content, and never serve uploads as documents	2026-07-25 11:47:09 -05:00
user-deletion.js	feat(#150): preserve per-device settings across delete+re-pair (fingerprint-keyed)	2026-07-07 12:40:47 -05:00
version-precedence.js	Every build from alpha10 onward sorted below alpha8 (#270)	2026-08-13 20:20:17 -05:00
wall-geometry.js	Describe a portrait video wall as portrait, and stop a wall hiding its screens	2026-08-06 09:46:31 -05:00
wgt-cache.js	feat(auth,tizen): TOTP 2FA UI, email verification on signup, Tizen SSSP install	2026-07-22 21:08:50 -05:00
zone-validate.js	fix: per-item mute round-trip + multi-zone orphan-zone fallback & warnings	2026-06-22 23:16:29 -05:00