HGC-4 channel-aware OTA firmware packages #5

stackdrift commented 2026年06月21日 01:27:46 +02:00

Summary

• Add ESPHome project identity, HTTP-request OTA/update support, firmware check buttons, and retained device firmware metadata.
• Extend package manifests with channel, project/package identity, node/device IDs, chip family, MD5/SHA256, source SHA, generated metadata, and changelog summaries.
• Publish stable packages from firmware tags and edge packages from successful main builds, with edge package pruning.

Tests

• python3 -m unittest discover -s tests
• python3 -m py_compile scripts/.py tests/.py
• YAML parsing with local !secret loader

Local ESPHome compile was not run because esphome is not installed in this environment.

HGC-4

## Summary - Add ESPHome project identity, HTTP-request OTA/update support, firmware check buttons, and retained device firmware metadata. - Extend package manifests with channel, project/package identity, node/device IDs, chip family, MD5/SHA256, source SHA, generated metadata, and changelog summaries. - Publish stable packages from firmware tags and edge packages from successful main builds, with edge package pruning. ## Tests - python3 -m unittest discover -s tests - python3 -m py_compile scripts/*.py tests/*.py - YAML parsing with local !secret loader Local ESPHome compile was not run because esphome is not installed in this environment. HGC-4

stackdrift commented 2026年06月21日 03:13:59 +02:00

Claude review follow-up for HGC-4:

Addressed in this PR set:

• Fixed Codeberg package listing pagination in grow-app package lookup and grow-fleet edge pruning.
• Added unit coverage for paginated package listing in both repos.
• Restored grow-fleet release-tag cache behavior: release jobs now try cached firmware for the tagged SHA, then compile/store only on cache miss.

Filed as follow-up Kanboard work:

• Task 18: grow-fleet edge publish path filters and concurrency guard
• Task 19: support custom ESPHome update install payloads

Deferred / non-issues:

• Self-hosted runner trust boundary is not an issue for the current repo policy.
• retainedByTopic pruning is not being tracked separately for Phase 1. It stores one last payload per seen topic, not one entry per message, so growth is bounded by the local site topic set. Revisit as part of central-mode MQTT hardening if broader or ephemeral namespaces are introduced.

Verification after the follow-up commits:

• grow-app PR run 4931633: success.
• grow-fleet PR run 4931639: success.

HGC-4

Claude review follow-up for HGC-4: Addressed in this PR set: - Fixed Codeberg package listing pagination in grow-app package lookup and grow-fleet edge pruning. - Added unit coverage for paginated package listing in both repos. - Restored grow-fleet release-tag cache behavior: release jobs now try cached firmware for the tagged SHA, then compile/store only on cache miss. Filed as follow-up Kanboard work: - [Task 18: grow-fleet edge publish path filters and concurrency guard](https://kanban.ai.dephekt.net/public/task/18/837ffef1c79917c32d6ed0f994e5ab6f4442cd25f3ca60da3acf6fceaf61) - [Task 19: support custom ESPHome update install payloads](https://kanban.ai.dephekt.net/public/task/19/837ffef1c79917c32d6ed0f994e5ab6f4442cd25f3ca60da3acf6fceaf61) Deferred / non-issues: - Self-hosted runner trust boundary is not an issue for the current repo policy. - retainedByTopic pruning is not being tracked separately for Phase 1. It stores one last payload per seen topic, not one entry per message, so growth is bounded by the local site topic set. Revisit as part of central-mode MQTT hardening if broader or ephemeral namespaces are introduced. Verification after the follow-up commits: - grow-app PR run 4931633: success. - grow-fleet PR run 4931639: success. HGC-4