Changelog

core: remove legacy heartbeat task alias and normalize beat references (#6473)

Harden badge host resolution for DisallowedHost (#6475)

ocpp: remove deprecated command aliases and document migration (#6474)

Require explicit routes.py providers and remove legacy URL fallback (#6472)

Remove deprecated devtools watcher compatibility flags (#6468)

ocpp: remove charger auto-accept offered certificates flag (#6471)

Remove low-value and redundant tests across multiple apps (#6466)

Fix TSV formula sanitization bypass via leading whitespace (#6461)

Retire selenium runtime app; add migration-only shim (#6462)

ocpp mark critical protocol regression tests (#6465)

Remove outdated migration/regression tests and trim feature command tests (#6464)

playwright: surface preview artifact manifests (#6463)

chore(deps): bump boto3 from 1.36.23 to 1.42.73 (#6447)

docs-guidance-relax-inline-documentation-rules (#6459)

Retire prototype runtime scaffolding workflow (#6452)

playwright features remove script runtime (#6451)

Retire runtime sponsors app behind a migration-only shim (#6457)

summary: remove executable model_command and use fixed in-process summarizer (#6455)

Fix suite regressions: ops URL sanitization, archive legacy reports, and harden preview tests (#6454)

screens: restrict LCD animations to packaged frames (#6456)

Enforce server-side public chat access checks for WebSocket connections (#6442)

Restore Application import to fix Feature admin filter crash (#6424)

chore(deps): bump attrs from 25.3.0 to 26.1.0 (#6445)

chore(deps): bump ruff from 0.15.6 to 0.15.7 (#6446)

build(deps): bump dorny/paths-filter from 3 to 4 (#6443)

Handle invalid host ports in operator notice endpoint (#6438)

Fix Mobility House simulator crash on first response frame (#6432)

Trim low-value/legacy tests across multiple apps (#6418)

Replace runtime `extensions` app with legacy migration-only shim and archive JsExtension data (#6435)

manage/docs: default runserver to loopback binds (#6417)

actions: replace generic remote actions with named flows (#6412)

Defer heavy data-only migrations to release transform pipeline and add checkpointed transforms + tests (#6437)

ci: verify editable installs can import arthexis locally (#6436)

Use preview management command for CI screenshots; add readiness flags and ci-fast preset (#6433)

Follow-up: fix install-hourly import-contracts command regression (#6434)

Disable execution of OperationScreen.validation_sql to prevent arbitrary SQL (#6406)

remove ada components (#6430)

core/install: streamline env refresh during install (#6429)

Ensure default canonical staff security-group assignments and admin UX tweaks (#6426)

Harden Evergo order reload admin action to POST-only (#6425)

Handle invalid ReportChargingProfiles payloads safely (#6423)

content: bound admin drop uploads (#6420)

Restrict charger status non-transaction events to staff users (#6422)

merge

packaging trim runtime dependency set (#6427)

Fix OCPP websocket admission regressions and status view query handling (#6419)

Fix javascript_enabled persistence in UserStoryForm (#6421)

Harden calendar trigger task dispatch with explicit allowlist (#6405)

Exclude .locks from Docker build context to prevent secret leakage (#6416)

Disable execution of OperationScreen.validation_sql to prevent arbitrary SQL (#6407)

Restore OCPP websocket admission feature gate for new chargers (#6404)

groups: introduce five canonical staff security groups and centralize staff permissions (#6414)

docs-review-update-pr-guidance (#6415)

Retire generic content web samplers (#6411)

Harden host validation against comma-separated values (#6400)

shortcuts-recipes retire recipe runtime (#6410)

reports: replace free-form SQL reports with named, validated report implementations (#6409)

Add `pages-chat` Suite Feature and gate public chat runtime on it (#6394)

core-locale-remove-language-shim (#6379)

core locale remove fields shim (#6380)

celery/core: migrate persisted heartbeat schedules to canonical task path (#6384)

ci: schedule daily dashboard screenshots and auto-open issues on failure (#6399)

Harden collector setup wizard permissions (#6402)

repos: Gate GitHub issue reporting with suite feature (#6397)

core/features: gate usage analytics with a Suite Feature (#6396)

meta/sites: add whatsapp-chat-bridge suite feature gate (#6395)

docs-agents-remove-cost-requirement (#6398)

Remove legacy apps.ocpp.simulator wrapper package (#6383)

Add migrations `check` subcommand, DB index, and stabilize package license default (#6393)

release-video-nginx keep synonym command aliases supported (#6392)

devtools: remove legacy server wrappers and use module entrypoints (#6389)

config-docs simplify mypy settings setup (#6390)

content-sites add admin drag-and-drop sample overlay (#6391)

users remove legacy phone priority alias (#6387)

evergo-remove-parsing-helper-aliases (#6388)

config-remove-force-text-monkeypatch (#6386)

Retire the Fitbit migration-only shim (#6378)

Add `good` management command and readiness checks with docs and tests (#6371)

ocpp-graphql move charger chart endpoint into ocpp (#6376)

docs-cost-visibility-estimate-hours (#6374)

prompts-docs remove prompts runtime app (#6375)

shortcuts: replace recipe foreign keys with typed targets and rework execution (#6368)

Add scoped MyPy rollout: Makefile target, local pre-commit hook, CI job, and docs (#6367)

nodes: remove run_task admin action (#6369)

Refactor ReportChargingProfiles handling into validation/parsing/persistence helpers (#6323)

docs: require cost visibility in AGENTS.md (#6366)

socials: retire the leftover runtime app shell (#6364)

Follow-up: harden Evergo contractor login wizard handling (#6363)

Add strict '->' sigil access and hyphen/underscore-tolerant identifiers (#6362)

Fix install smoke failures: Evergo widget context, chat toggle id, special command sync, and Playwright verification (#6355)

protocols/repos/core: expand Django-aware MyPy rollout (#6352)

Harden localhost admin auth against spoofed X-Forwarded-For (#6341)

Remove retired blog app and retire development-blog metadata (#6350)

docs: align suite goals to discourage recipe-like wiring and clarify SIGILS support (#6360)

evergo: add contractor login wizard (#6313)

tasks: add public charger vendor intake view (#6358)

Add staged-migration rollback-safety checks to migration verification script (#6348)

evergo: avoid overwriting remote images on partial tracking submit (#6338)

docs: add sponsorship guidance and clarify license contribution forms (#6356)

sensors: retire recipe-driven USB tracker automation (#6354)

Preserve TLS verification for trusted forwarding nodes (#6349)

Remove PR marker, CI, and pre-commit enforcement (#6353)

docs-locale: update README references to OCPP 1.6J (#6351)

Add admin public "View on site" links for public views (#6346)

playwright: fail clearly when preview artifacts are missing (#6347)

actions: remove recipe-backed actions and recipe fields (#6344)

emails/core: remove email collector recipe notifications (#6343)

Require login for Evergo customer views to prevent IDOR (#6342)

utils/protocols: tighten incremental typing guidance (#6339)

ocpp: reject unknown offered certificates (#6340)

sigils: swallow unexpected resolver dispatch errors (#6335)

ops: sanitize security alert remediation URLs (#6337)

Fix invalid related prefilter lookup in admin links (#6336)

survey: decommission runtime app and add migration-only archival path (#6327)

Filter global Django options from special command registry (#6333)

tests-ci-remove-pr-marker-enforcement (#6334)

tooling: add baseline mypy configuration (#6330)

sites: refactor admin action helper flow (#6325)

app/features: remove retired wikis runtime and feature seed (#6328)

Refactor Odoo quote report view orchestration (#6324)

cards: refactor RFID reader into layered helpers and add tests (#6322)

simulators: refactor charge point session into async helpers and add regression tests (#6321)

Refactor charger management command around verb actions (#6316)

release: add concise command aliases and build mode presets (#6318)

Streamline video command subcommand interface (#6319)

Install and verify Playwright host libraries in env-refresh; add regression tests (#6314)

emails: add verb-based email command (#6317)

repos-add-positional-repo-command-slug (#6320)

nodes-admin-friendly-node-action-aliases (#6315)

sites: refactor nav_links into composable helpers (#6312)

sigils: refactor token resolution into helpers and add focused tests (#6309)

Use repository virtualenv Python for manage.py/pytest subprocesses (#6310)

Refactor LCD runner into LCDRunner coordinator (#6308)

Move logging utilities to utils.loggers and update imports (#6307)

core: add contribution reciprocity guidance (#6306)

Remove deprecated Bluesky/Discord social profiles, add drop migration and test (#6304)

tests-remove-pr-tagging-requirements (#6305)

retire mermaid Flow model (#6303)

Move vscode launcher utilities into utils.devtools (#6302)

video: remove legacy apps.camera shims (#6301)

Move Fitbit to a legacy migration-only app (#6300)

Consolidate nginx CLI into `nginx` command, deprecate `nginx_configure`, tighten messages, and add tests (#6299)

Remove legacy game app (#6289)

bluetooth remove obsolete app (#6298)

cards-nfts remove NFT app (#6297)

Remove optional liboqs app and its registrations (#6294)

security: allow 192.168.129.10 host (#6295)

Remove Fitbit app integration (#6290)

nginx: add 8443 SSL listeners for wss forwarding (#6292)

ocpp: auto accept offered charger certificates (#6293)

nginx: avoid inheriting preview-only nginx paths when enabling HTTPS (#6288)

repos: guard feedback config when feature table is missing (#6286)

install-env-handle-optional-hardware-wheels (#6285)

core: handle duplicate auto-upgrade schedules (#6284)

deps-docs-fix-satellite-sqlite-install (#6283)

Codex-generated pull request (#6282)

Codex-generated pull request (#6278)

Codex-generated pull request (#6279)

Simplify preflight policy tests (#6281)

Trim shortcut tests to single end-to-end flow (#6280)

ci: expand CodeQL triggers for main and release pushes (#6269)

Codex-generated pull request (#6275)

Add RFID lockdown and local list actions to chargers command (#6276)

chore(deps): bump pyasn1 in the pip group across 1 directory (#6272)

Codex-generated pull request (#6273)

Remove hardcoded WLAN switching script (#6274)

Codex-generated pull request (#6271)

ci: install pyyaml in CodeQL setup step (#6270)

security-sites: allow 10.42.0.1 login host (#6259)

chore(deps): bump pyopenssl from 25.3.0 to 26.0.0 (#6249)

chore(deps): bump filelock from 3.25.0 to 3.25.2 (#6248)

chore(deps): bump ruff from 0.15.5 to 0.15.6 (#6247)

chore(deps): bump black from 26.3.0 to 26.3.1 (#6244)

settings: ensure project root is on sys.path during bootstrap (#6268)

Codex-generated pull request (#6266)

Codex-generated pull request (#6264)

Add pre-commit hook to run critical and regression tests (#6263)

Fix subnet host validation for local-network admin access (#6261)

chore(deps): bump setuptools from 82.0.0 to 82.0.1 (#6243)

chore(deps): bump selenium from 4.38.0 to 4.41.0 (#6242)

chore(deps): bump charset-normalizer from 3.4.5 to 3.4.6 (#6241)

chore(deps): bump pysqlite3-binary from 0.5.4 to 0.5.4.post2 (#6240)

Fix /docs/library links in README files (#6255)

Bump actions/setup-node from 4 to 6 (#6239)

Bump actions/github-script from 7 to 8 (#6238)

users: accept forwarded client IPs with ports for admin/admin login (#6260)

command: detect systemd-managed Arthexis instance as running fallback (#6258)

ci: run full test suite in install job (#6257)

docs: fix stale cookbook code-link paths (#6256)

Normalize trusted host fallback in share URLs (#6253)

Fix links share context fallback QR and host normalization (#6251)

Fix share URL building when host validation rejects request host (#6250)

Handle DisallowedHost in links share context processor (#6236)

Fix nav_links landing validation regression (#6235)

Add Ada app-scoped GNATCOLL + SQLite ORM scaffolding (#6232)

sites-links: show QR link in share dialog on mobile viewports (#6230)

env-refresh.sh: add automatic Selenium install support (#6231)

Remove 50 low-value tests and add removal report (#6222)

Follow-up: add selenium to install dependencies for hourly health check (#6228)

tests: remove node configuration enforcement smoke checks (#6227)

Gate Charge Points nav links per-landing with parameterized caching (#6225)

Enhance install health issue reporting and auto-close on recovery (#6226)

Add Selenium backend and backend fallback to preview command; include selenium app manifest (#6223)

Prune legacy and flaky regression tests across apps and scripts (#6224)

Relax role validation and update bootstrap smoke tests (#6221)

playwright: limit display-headless test to linux runners (#6220)

tests: default pytest bootstrap to disable migrations (#6219)

Add backward-compatible certificate verification alias, support positional domain in https CLI, fix OCPP log dedupe, and update tests (#6217)

tests: remove 50 low-value slow integration/admin cases (#6216)

Allow test modules to omit docstrings in AGENTS.md (#6215)

Add tests to ensure OCPP coverage output and spec call lists match fixtures/registry (#6214)

core: add validated sqlite PRAGMA env configuration on WAL setup (#6212)

Prune low-value and flaky tests across multiple test modules (#6213)

Add optional pysqlite3 SQLite driver bootstrap and wire into startup (#6211)

Fix staff_required behavior and enforce original screenshot MIME type (#6210)

Remove deprecated/flaky tests and tidy imports in recipes, nginx, and env-refresh tests (#6207)

Limit transaction scope to migration and always trigger nginx update on commit (#6209)

Deduplicate duplicate aggregate charger status events across identity keys (#6208)

Normalize migration path formatting and harden runserver preflight locking and fingerprint writes (#6206)

Fix LCD command tests to avoid unauthorized DB access (#6205)

Remove low-value/non-OCPP tests and prune test suites (#6204)

Add `https --migrate-from` to migrate site/node domain during HTTPS setup (#6201)

Fix failing tests: LCD restart gating, manual-task GitHub trigger, screenshot validation, and pytest marker (#6202)

Probe admin HTTP for reachability, prefer live runserver port, and default runserver bind to 0.0.0.0 (#6200)

Trim redundant regression tests and keep representative coverage (#6203)

Replace deprecated wording with legacy/compatibility copy across commands, docs, and tests (#6198)

Add `https --validate` and richer certificate status reporting (#6197)

Refactor Evergo tests to use `monkeypatch` and inline fakes (#6196)

Remove low-value non-OCPP command tests and update removed-tests manifest (#6195)

Add scaffold guardrails for intended Django apps (#6194)

Add global `playwright-automation` suite feature and runtime gating (#6192)

Add manifests for classification, projects, special, and shortcuts and test manifest discovery (#6193)

Document app structure policy and support backend-only app scaffolds (#6191)

Fix sqlite retry helpers to tolerate pytest DB access guards (#6190)

Improve HTTPS renewal reporting and reapply HTTPS configs after renewals (#6189)

Add PR-scoped triggers for CodeQL and PR-safe ZAP baseline scan (#6185)

Preserve related prefilter params, add admin configure aliases, screenshot support, and debounce GitHub issue scheduling (#6182)

ci: run on push for main/release and guard PR-only context (#6184)

Auto-enable LLVM sigils via node feature with graceful fallback (#6183)

preview: use throwaway admin user, add --no-login, improve Playwright errors and tests (#6165)

Fix feature-toggle defaults in Odoo admin flow and harden OCPP feature tests (#6181)

Stabilize nodes split model remote URL test (#6180)

merge

Remove deprecated/flaky tests and trim admin action test coverage (#6177)

playwright-selenium: remove legacy selenium tests (#6179)

Fix pytest regressions and resolve ops migration conflict (#6176)

merge

Fix Task Panels breadcrumb trail for Sigil Builder and task panel views (#6175)

Add apps.special registry for introspectable Special Commands (#6171)

Fix install-health smoke regressions in ops, nodes, playwright, and projects (#6173)

Replace AGENTS.md with comprehensive agent guidelines (#6172)

Rebrand Staff Tasks to Suite Tasks (models, migration, admin UI, tests) (#6160)

Add Shortcut Management app: models, runtime, views, JS, and feature wiring (#6170)

Support refreshing local node feature assignments via --refresh-node and consolidate command (#6169)

merges

Improve email admin changelists with collector and usage columns (#6057)

tests: prune 40 low-value UI/content tests from sites, evergo, and blog suites (#6166)

Replace stale action with github-script to close PRs daily and accelerate conflict closures (#6167)

Add SecurityAlertEvent model and surface OCPP charger errors to security alerts widget (#6164)

Add game app with Avatar model and users.UserFlag (#6149)

Unify public feedback and chat widgets into shared includes (#6157)

Add SecurityAlertEvent model and switch security alerts widget to persisted events (#6162)

Rebrand manual task requests as manual requests (#6161)

Polish admin hidden apps toggle styling (#6159)

Tone down role architecture warning in README (#6158)

Improve linting workflow with Ruff defaults and make targets (#6154)

Remove deprecated selenium Firefox utility from CI path (#6156)

docs: clarify upgrade channel options in README (#6155)

test: remove 30 low-value admin and preview tests (#6153)

Fix non-critical repos test failures and routing warnings (#6151)

Prevent disabling all OCPP simulator backends (#6137)

Add import-resolution checker, pyright config, Makefile/pre-commit wiring; handle optional qrcode in embeds (#6139)

Fix non-critical test regressions in seeded/admin/certbot flows (#6150)

Migrate selenium imports to playwright and keep selenium migration shim (#6148)

ocpp: add simulator management command (#6146)

Remove deprecated alexa app entirely (#6147)

Prevent pytest recursion into local virtualenvs (#6145)

Harden Satellite/Watchtower install defaults and runserver migration preflight (#6125)

Refactor Dockerfile to multi-stage build, add HEALTHCHECK, default to production server (#6138)

Remove multiple deprecated/flaky tests and streamline release readiness tests (#6144)

Remove pyxel app and related integration hooks (#6143)

Add per-user environment .env editing in admin and extend preview command for multi-path/multi-viewport captures (#6140)

Add optional LLVM-backed sigil scanner with Python fallback and tests (#6141)

Add profile-based Docker Compose services for role presets (#6134)

feat: add local prototype manager (#6124)

merge

Refactor QR card markup and update QR card styles (#6123)

Unify migration commands into `migrations` (clear/rebuild) and remove `load_user_data` wrapper (#6136)

Enable Mobility House simulator backend by default and make backend choices runtime-configurable (#6118)

Support multi-path preview captures, per-path diagnostics, and Playwright install in env-refresh (#6132)

core: add one-word aliases for legacy management commands (#6131)

Support partial order-tracking submissions and show per-step status (#6127)

Remove MCP app and command integration surfaces (#6130)

Replace share modal helper text with page thumbnail preview (#6120)

Update Terminal and Satellite node role acronyms (#6117)

Record JavaScript-enabled state and optional screenshot on feedback submissions (#6126)

Add Docker entrypoint and role-preset support (#6114)

Add setup collector link to Email Inbox admin change form (#6121)

Respect NODE_ROLE setting/env when resolving local node role (#6115)

Update feedback star meanings and staff copy label (#6119)

merge

docs: add Satellite and Watchtower readiness review (#6104)

Fix stale SQLite test-db artifact cleanup (#6116)

chore(deps): bump django from 5.2.11 to 5.2.12 (#6072)

NodeRole admin: show local-role checkmark and add superuser switch/restart actions (#6099)

chore(deps): bump ruff from 0.15.4 to 0.15.5 (#6067)

chore(deps): bump redis from 7.2.1 to 7.3.0 (#6074)

Redact MAC values from Node.get_local logs (#6112)

desktop: support applications-menu-only launchers (#6113)

Harden MCP API key hashing with PBKDF2 (#6111)

Add Release Management suite feature and `repo` CLI for GitHub operations (#6107)

Fix node feature detector compatibility and test patching points (#6106)

docs: update security contact email in Code of Conduct (#6109)

Add management command to estimate migration growth over time (#6108)

Add desktop notifications when VS Code test runs finish (#6105)

Bump actions/github-script from 7 to 8 (#6065)

chore(deps): bump charset-normalizer from 3.4.4 to 3.4.5 (#6071)

chore(deps): bump import-linter from 2.5 to 2.11 (#6068)

Add security alerts aggregation and admin sidebar widget (#6102)

Add cdn app with CDNConfiguration model, admin, and tests (#6100)

Flatten release helpers into apps.release.services and add compatibility shim (#6093)

Fix regressions in admin/docs and flaky seeded slug tests (#6103)

merge

Refactor nodes models out of generic core package (#6094)

Move tests app management command tests to top-level package (#6095)

Add public system_ui helper module and migrate call sites (#6096)

Add release readiness widget summary and tests (#6098)

Demote all regression-designated tests (#6092)

Harden project bundle import model permissions (#6087)

Include aggregate and pending connector events on charger status, add legacy URLs, and guard admin links (#6090)

test: remove 30 low-value admin-focused tests (#6091)

Support multi-inbox EmailCollectors and add admin setup wizard (#6086)

merge

Restrict report runner from superuser-only admin routes (#6088)

Expose notable non-transaction events on charger status page and simplify sessions list (#6077)

Default Control, Watchtower, and Terminal roles to stable upgrade channel (#6085)

chore(deps): bump python-dotenv from 1.2.1 to 1.2.2 (#6064)

Bump actions/download-artifact from 7 to 8 (#6066)

chore(deps): bump black from 26.1.0 to 26.3.0 (#6070)

Add CSMS persistence model-backed tests (#6084)

Add legacy CSMS reply forwarding transport tests (#6083)

Bump actions/upload-artifact from 6 to 7 (#6063)

Add critical regression tests for dynamic import entrypoints (#6078)

Add table-driven tests for OCPP client IP resolution (#6082)

Prune low-value non-OCPP tests and clean up test suite (#6081)

Support multi-inbox collectors and add admin setup wizard (#6062)

Add critical regression test to import non-test modules under apps (#6080)

Add import-linter contracts for app architecture boundaries (#6079)

Fix install health-check import-resolution false positive (#6075)

Tighten optional import skip policy in scripts/check_import_resolution.py (#6076)

Add project bundling app with admin UI and ZIP import/export (#6059)

Hide SessionCookie secrets in Playwright admin (#6033)

Remove deprecated capture_admin_preview alias (#6061)

Refactor CSMS consumer package paths and make CP simulator connection status matching more robust (#6054)

Redact sensitive fields when persisting RecipeProduct artifacts (#6034)

Add import-linter and CI step to enforce import contracts (#6058)

Add model-to-documentation cross-linking in docs and admin (#6060)

Introduce LLM Summary suite feature and centralize parameters; wire admin wizard and node/task gating (#6055)

Hide default dashboard success text beside status icon (#6053)

Add disabled-by-default Wikipedia Companion suite feature and gate wiki widget (#6041)

Polish admin net-message icon and wrap behavior (#6056)

Add `charger` alias and control flags: `--rename`, `--send-stop`, `--send-restart`, default-base behavior (#6052)

Use views as canonical HTTP entrypoint for release_publish and remove legacy http_views (#6051)

Gate LCD summary automation behind new llm-summary-automation suite feature (#6049)

Add GitHub issue automation for manual tasks (templates, triggers, scheduling) (#6050)

Add pytest-django to base dependencies for pytest support (#6048)

Improve release publish progress guidance UX (#6047)

Add admin Configure view for feedback->GitHub issue prerequisites and wire into UserStory/RepositoryIssue admins (#6046)

Fix ownable admin form recursion on add views (#6042)

Clarify Pyxel admin "Open Viewport" behavior for server-side / WSL environments (#6040)

Prune obsolete tests and simplify admin custom-CSS enforcement test (#6039)

Add Reports staff task and unified admin report runner (#6038)

Add selected-record prefiltering for related admin links (#6035)

Add unified `create` management command (app/model scaffolds) and `create_local_app` shim (#6037)

Add Django `upgrade` management command for upgrade diagnostics and channel switching (#6031)

Prefer ocpp1.6j subprotocol; update selection logic, simulators, tests and docs (#6036)

Add centralized node feature detection registry and gate hardware features (#6029)

Add Lua interpreter support for recipe external-language execution (#6032)

Make upgrade policy interval column human-readable (#6030)

Add light/dark theme toggle to Evergo order tracking page (#6028)

Harden SQLite test DB path and stabilize Evergo/extension tests (#6018)

Remove suite feature ownership controls from admin (#6013)

Strengthen CI to catch role bootstrap regressions before upgrade (#6022)

Refactor camera feature/service reconciliation into Django lifecycle layer (#6023)

Add RFID node_features hook and move install detection to Node.refresh_features (#6021)

Set Bluetooth discovery scan timeout default to 60s (#6020)

Add togglable "OCPP Forwarder" suite feature and gate forwarding paths (#6019)

Fix Watchtower upgrade failure when CELERY_BROKER_URL is implicit or legacy (#6016)

Add SQLReportProduct, scheduling & rendering services, admin UI, tasks, and tests (#6017)

Auto-expand feedback form textareas as users type (#6000)

Forward celery flag to manage.py and add certbot preflight for HTTPS provisioning (#6015)

mergers

Add Playwright app for browser automation and migrate Selenium data (#5993)

Add Celery Workers suite feature parameter and lifecycle admin integration (#6011)

Move Odoo sync subfeatures into Odoo CRM Sync parameters (#6012)

Order tracking: preload remote image previews, feedback/chat UI, and prefill error handling (#6009)

Add user group management to password tooling (#6010)

Style admin dashboard 'Hide' toggle as dark blue rounded button (#5984)

Hide unauthorized dashboard widgets for staff users without model permissions (#5973)

Remove selected low-value admin tests except selenium (#5997)

Relax Watchtower role Redis validation fallback (#6007)

Fix Pyxel admin viewport launcher false-positive success (#6008)

Add `app` field to SecurityGroup and grant Charge Station Manager global charger access (#6006)

test: remove 40 low-value tests (#6005)

Add configurable StaffTask dashboard buttons, admin UI, and system details/restart (#6003)

Make simulator backends configurable via suite feature parameters (#6002)

Fix multiple regressions: classifier selection, Evergo reloads, feature reset, Odoo payloads, and site context handling (#6004)

Fix admin chat CSS alignment and viewport fallback (#6001)

Public OCPP: add sample data generator, connector navigation UI, and swipe redirects (#5999)

Clean up temporary password admin page styling (#5998)

Migrate WhiteNoise runserver integration to underscore-free local app (#5996)

Remove AGENTS.md and enforce Admin UI guidance via tests (#5995)

Add extension catalog and downloadable ZIPs; seed GitHub resolve-comments helper (#5992)

Add systemd-manager feature and gate systemd-dependent auto-detection on systemctl (#5991)

Place guest contact opt-in beside email in feedback form, adjust CSS alignment, and add regression test (#5989)

Enable Passkey (WebAuthn) login on public sign-in page (#5987)

Evergo admin: return loaded IDs, redirect to selected changelist, and scope changelists by id (#5986)

Fix missing regex import in anonymous public page rendering test (#5990)

Limit public feedback "this page" copy payload to staff users (#5988)

Add hourly 'Install Health Check' GitHub Actions workflow (#5981)

test(evergo): remove 30 low-value admin UI tests (#5985)

Add classification app for image model orchestration and dispatch (#5982)

Add 'Reload selected from Evergo' admin actions and profile-level reload helpers (#5983)

Fail fast when pytest-django is missing for database tests (#5979)

Fix flaky assertion in public pages test feedback prompt (#5980)

Add Odoo CRM Sync suite feature and Evergo→Odoo user sync (#5978)

Fix non-critical test regressions in shop, links, and navigation (#5977)

Handle missing pytest-django fixtures in test plugins (#5976)

Add optional shop hours and improve closed-state messaging (#5975)

Admin: sync charging-station settings to charge points, hide station-root CPs, and add station column (#5974)

Add websocket auth toggles to chargers management command (#5971)

Fix non-critical test blockers and optional runtime handling (#5972)

Remove/trim numerous legacy regression tests to reduce flaky coverage (#5970)

Add Terminal-only Card Shop module pill and landing (seed + migration + test) (#5969)

Add Gitleaks secret-scan workflow for pull requests (#5964)

CP simulator: combine host and port input, parse host:port, update UI and tests (#5962)

Adjust stale PR workflow timing and exempt labels (#5967)

Fix Evergo test regressions and add missing PyYAML dependency (#5965)

Fix chat unread badge resetting from history replay (#5963)

EmailCollector: add optional `notification_recipe` and execute recipes on collect (#5960)

Preserve feedback draft values when modal closes (#5961)

User feedback form: reposition contact opt-in, update labels, and add responsive CSS (#5958)

Make unread chat badge ("New" / "New (X)") purple (#5959)

Lazy-load optional qrcode in links QR utilities and add tests (#5956)

Handle missing TestResult table during pytest result capture (#5955)

Make admin URL prefix configurable and add management command to manage admin settings (#5954)

EmailCollector: add notification modes, templates and dispatching (#5953)

tests: remove 30 low-value test cases (#5951)

Follow-up: secure checkout shop resolution and stale-cart handling (#5950)

Add `apps.shop` app with storefront, cart, checkout, and order tracking (#5949)

Re-add migration server watch mode and VS Code launcher (#5948)

Evergo: Add header quick-actions and WS prefill for tracking form (#5944)

Update feedback rating label and horizontal star layout (#5947)

Fix CP simulator host/port fields reverting during auto-refresh (#5946)

Add --wait flag to status.sh to poll for application reachability (#5943)

Prune obsolete/flaky regression tests and simplify site-hosts tests (#5942)

Show linked customer on Evergo Order admin (#5941)

Show selected export count out of total in admin export summary (#5937)

Add backend selector to CP Simulator view (#5938)

Ignore simulators runtime state file (#5940)

Right-align user chat messages and left-align staff messages; add meta alignment (#5936)

Handle optional test dependencies during startup (#5939)

Debounce chat presence join/leave flapping (#5934)

Fix Evergo Process Order change-form redirect to tracking flow (#5933)

Include runtime deps in generated CI requirements (#5932)

Respect POSTed selected IDs in admin export confirmation (#5930)

Fix test regressions: add runtime markdown deps, prevent enabled-feature delete errors, parse bracketed IPv6, harden test runner, and align command API (#5928)

Disable debug mode for VS Code migration and test runners (#5929)

Unify pytest xdist args across CI test jobs (#5927)

Restore conventional Django INSTALLED_APPS loading (#5925)

Fix core model exports and add admin import regression tests (#5924)

Declare discovery manifest dependencies for importer apps (#5922)

Fix discovery models app label for optional app loading (#5921)

Unify node operational commands under node subcommands (#5916)

Add critical regression guard for Django model imports across apps (#5918)

Remove 50 low-value tests and update empty-test guard (#5919)

Guard node upgrade formatting from disabled release app imports (#5915)

RFID auth audit: record attempts with reason codes, feature flag, migrations and tests (#5911)

Consolidate release commands into single `release` CLI with migration & transform subcommands (#5913)

Extract inline admin message CSS to shared stylesheet and add admin UI enforcement guidance (#5914)

Add unified `mcp` management command with deprecated legacy wrappers (#5910)

Remove protocol import/export commands and add migration deprecation marker (#5912)

Unify admin dashboard row action styling for POST actions (#5907)

Handle VS Code test launcher Ctrl+C interruptions gracefully (#5906)

Prevent deleting enabled Suite Features and centralize enable/disable logic (#5908)

ci: run screenshot workflow on general PR and main pushes (#5905)

Remove redundant nested `arthexis` package and consolidate resolve tooling under `scripts/` (#5903)

Fix critical test selection by removing integration marker overlap (#5904)

test: remove 100 low-value non-OCPP test modules (#5901)

CI: replace rg usage with grep in workflow scripts (#5902)

Keep users app enabled when enabled_apps.lck is present (#5900)

Fix transitive manifest dependencies for lock-filtered Django app loading (#5899)

test: remove 50 low-value micro-tests and retain behavior-level coverage (#5898)

Update daily CI status reporting and Evergo order tracking fixes (#5892)

Add GitHub Action to prune branches 24h after PR closure (#5897)

Prune obsolete and environment-dependent tests from scripts and VS Code runners (#5895)

Mark ownable admin coverage as regression (#5896)

Make ChatProfile admin inherit OwnableAdminMixin (#5894)

Fix admin regressions in feature actions and dashboard content types (#5893)

Fix lock file issue in apps

Update Evergo admin status and process-order links (#5890)

Introduce DashboardAction model to declaratively define admin dashboard row actions (#5888)

Refine Evergo load customers wizard navigation and actions (#5889)

Fix pytest bootstrap import path and make RFID QR generation optional (#5886)

Add feature metadata and admin-editable runtime parameters (operator default language) (#5887)

Refactor feature management CLI: extract ops, add `features` command, and make `feature` operate on a single slug (#5885)

Respect celery mode when running Django commands (#5884)

Fix find expression spacing in requirement file discovery (#5883)

Fix operator notice title contrast on white card (#5882)

Have HTTPS provisioning inherit active SiteConfiguration port (#5877)

Fix operator interface fallback handler duplication (#5880)

Add SuiteTest model and pytest discovery/refresh workflow (#5878)

Fix 503 maintenance card text contrast (#5879)

Fix route provider app discovery scope (#5876)

Add enabled-app lock file and wiring to persist/consume enabled local apps (#5874)

Use dark theme backdrop on 503 and operator offline pages (#5873)

Tighten route provider registration and deprecate implicit URL fallbacks (#5871)

Handle restricted cert paths in HTTPS verification (#5872)

Use ContextVar for active app scoping and middleware restoration (#5870)

evergo admin: link SO number/status to flows, add Process SO action and cleaner engineer name (#5865)

Rebalance critical tests toward OCPP coverage (#5869)

Pin cryptography and urllib3 to avoid dependency resolution failures (#5866)

Shorten SiteProxy admin changelist column labels (#5867)

Refactor base settings into domain modules (#5868)

Fix dependency conflict between pyOpenSSL and cryptography (#5864)

Add OwnableAdmin to ChargingStation, update Evergo test fixtures and prune brittle tests (#5863)

Standardize requirements.txt generation from pyproject runtime deps (#5857)

Fix feedback panel overflow in admin and public UI (#5862)

Render OCPP operator notice when interface disabled and make manifest staticfiles conditional (#5860)

Add channel layer health logging and websocket metrics (#5861)

Add strict role profile validation for Django settings (#5859)

Add manifest validation regression checks and early CI gate (#5858)

Render OCPP operator notice when Operator Site Interface is disabled (#5856)

tests: unmark 30 low-value regression tests in pyxel/sites suites (#5855)

Unmark stable tests from regression suite (#5853)

Add new liboqs app with admin integration and service tests (#5852)

Prevent floating chat/feedback toggle overlap with open dialogs (#5851)

Retry register_site_apps when SQLite database is locked (#5850)

Require running instance for command.sh run and add fast-run execution path (#5849)

Right-align chat widget and coordinate chat/feedback overlays (#5848)

Prevent implicit docs hash (#constellation) on initial load (#5841)

chore(deps): bump certifi from 2026.1.4 to 2026.2.25 (#5837)

chore(deps): bump pyxel from 2.6.9 to 2.7.3 (#5834)

chore(deps): bump django-mermaid from 0.1.0 to 0.1.1 (#5833)

chore(deps): bump filelock from 3.24.3 to 3.25.0 (#5835)

chore(deps): bump redis from 7.2.0 to 7.2.1 (#5832)

chore(deps): bump ruff from 0.15.2 to 0.15.4 (#5831)

chore(deps): bump whitenoise from 6.11.0 to 6.12.0 (#5829)

Introduce ChargingStation model and split station-level admin actions (#5845)

Add generalized `password` management command, keep `temp_password` as legacy alias, add `force_password_change` field (#5847)

Add ocpp migration to repair missing transaction columns (#5843)

Rename OCPP 1.6 labels to OCPP 1.6J, add operator interface notice, and accept 1.6J in CLI tooling (#5838)

Improve tablet sizing for feedback and chat dialogs (#5840)

Infer feature kind for toggle commands (#5839)

Render Pyxel dashboard Open Viewport as POST to launch endpoint (#5824)

Refactor upgrade pytest xdist detection in CI (#5827)

Fix actions admin tests under manifest staticfiles storage (#5826)

Fix Evergo admin tests bootstrap stability (#5825)

Add LifecycleService changelist action and status report view (#5822)

Cleave Evergo admin sync action label (#5823)

Improve Remote Actions OpenAPI preview: remove duplicate header, add changelist link and copy-to-clipboard (#5819)

Use OCPP consumer constants for supported versions and update operator notice/test (#5821)

Add operator interface notice page for OCPP websocket onboarding (#5817)

Admin favorites: reorder UI, create-on-GET, seed defaults, and template/logic cleanup (#5818)

Support public chat and persist feedback chat opt-in (ChatProfile, site flag, and UI) (#5815)

FeatureAdmin: add reload-all confirmation view and bulk toggle action (#5814)

Remove legacy seed-data toggle action, update admin action test, and make staticfiles backend selectable (#5816)

Limit Suite Feature “From app” filter to used source apps (#5813)

Add -s alias for upgrade start flag (#5812)

Decouple regression tests from critical marker selection (#5811)

Fix Evergo fixture idempotency for loaddata (#5810)

Add APIExplorer natural key, deprecate charge-points gating, and retry deferred fixture loads (#5806)

Auto-merge conflicting migrations in VS Code migration runner (#5804)

Refactor HTTPS management command into modular HttpsProvisioningService (#5803)

Speed up PR dashboard screenshot workflow (#5805)

Move CPSim toggles to OCPP Simulator suite feature (#5799)

merged migrations

ci: use xdist auto workers for upgraded pytest marker runs (#5802)

Make Evergo email required and primary in Evergo Contractors admin list (#5742)

Refactor Django settings into modular package (#5797)

ci: remove redundant upgrade dependency ordering check (#5800)

Harden manifest app-discovery test to derive expected apps from manifests (#5788)

Fix duplicate namespace warnings from route autodiscovery (#5790)

Support explicit fixture paths for linting and CI changed-file detection (#5772)

Demote 30 slow regression tests from critical to integration (#5774)

ci: Gate upgrade integration tests on high-value signals (#5798)

tests: remove regression marker from stable test groups (#5732)

merged migrations

Gate screenshot enablement by runtime eligibility and suite feature (#5727)

Handle debugger interrupt propagation in VS Code migration runner (#5795)

Enable parallel pytest execution in CI with configurable worker cap (#5787)

Replace VS Code test/migration servers with one-shot launchers (#5794)

Harden VS Code migration server against transient debugger interrupts (#5793)

Handle debugger interrupt races in VS Code migration server output (#5792)

Handle debugger interrupt during migration lock cleanup (#5789)

Add pre-migration CI guard for migration conflicts and naming (#5781)

Gate base-branch pyproject ordering check to scheduled runs (#5786)

Prefer routes.py over legacy urls.py to avoid duplicate URL namespaces (#5782)

Persist rejected OCPP start attempts as transactions (#5783)

Add RecipeProduct persistence, format detection, and Markdown execution for recipes (#5778)

Auto-rerun upgrade script after self-update (#5777)

Fix psutil-free termination fallback when os.killpg is unavailable (#5780)

Add regression test for resolve legacy command parsing (#5779)

Remove widespread `critical` pytest markers and update test marker strategy (#5775)

Introduce app route-provider convention and reserve config/urls.py for framework routes (#5766)

Remove demotion tracking document (#5776)

Load local Django apps from per-app manifests (#5770)

Refactor pytest conftest into dedicated plugins (#5771)

Use workspace-absolute path for dependency sort check (#5769)

Remove failing resolve subcommand regression tests (#5768)

Fix regressions in widget feature and admin badge tests (#5765)

Add short upgrade aliases for latest and force (#5764)

test: remove user-listed failing tests (#5760)

Refactor pyproject deps into extras and enforce ordering (#5763)

Fix duplicate apps.desktop entry in pyproject (#5762)

Refactor test markers: remove module-level regression marks and apply targeted markers (#5758)

Refactor OCPP tasks into concern-specific package modules (#5755)

Consolidate redundant tests with parametrized coverage (#5751)

mergers

Add DesktopShortcut model, admin, sync services, management command and seed data (#5749)

Add heavy node feature safety guardrails and operator warning (#5748)

Gate content snapshot action on node `video-cam` feature state (#5747)

Coordinate test server with migration server lock state (#5746)

Harden resolve subcommand regression helper PATH handling (#5744)

merges

Add GitHub PR comment support for open pull requests (#5745)

Support '*' wildcard for Evergo customer loading wizard (#5741)

Add regression test to block new empty test files (#5740)

Add Open Viewport link to Pyxel admin dashboard model row (#5733)

Add intermediary admin preview for Actions OpenAPI export (#5739)

Add configurable AdminBadge, widget feature gating, and Camera sidebar widget (#5738)

Remove obsolete test stubs and trim flaky docs/upgrade tests (#5737)

merge

merge

Fix Windows-path handling in migration server file watcher (#5730)

Add relation icons to Nodes admin relation column (#5736)

Restore screenshot workflow triggers for template changes (#5734)

Fix admin template condition syntax and merge features migrations (#5735)

Remove legacy wlan1 watchdog cleanup on uninstall (#5728)

Add Feedback Ingestion suite feature and gate feedback form UI (#5729)

Fix HTTPS renew to refresh and scope certificate due checks (#5725)

Rework chat bridge gating into Staff Chat Bridge suite feature (#5726)

Auto-manage gpio-rtc feature assignment (#5724)

Remove FTP node feature in favor of suite feature (#5720)

Add Lightsail instance listing/consolidation, admin load actions and Watchtower AWS credentials rule (#5715)

Retire legacy `charge-points` node feature gate for OCPP websockets (#5719)

Refactor admin inline styles into shared app CSS pipeline (#5716)

Replace Pyxel dashboard button with Open Viewport admin actions (#5706)

Polish admin export spacing and summary copy (#5714)

docs: remove outdated planning docs from published set (#5712)

Refine Evergo Customer admin: columns, links, locality handling, and filters (#5708)

Update maintenance page copy to mention backend upgrade (#5710)

Add Fitbit integration app with CLI and net message targeting (#5709)

Remove obsolete agent.md file (#5711)

Tighten API explorer inline methods in admin (#5707)

Move token generation from dashboard button to Remote Action Token row action (#5705)

Add secure My Evergo Dashboard public view and seed additional Evergo API endpoints (#5703)

Remove deprecated management command wrappers; consolidate OCPP implementations (#5704)

Add prompts app to persist original requests and enforce prompt fixtures (#5701)

Add prompts app to persist original requests and enforce prompt fixtures (#5701)

Remove update PR review guidance document (#5702)

Remove legacy and flaky management-command smoke tests (#5697)

Fix cross-platform resolve regression tests and migration staging paths (#5698)

Remote Action Token admin: default owner/expiry and one-click generator (#5693)

Add features management command for suite and node flags (#5696)

Fix VS Code watcher path handling on Windows (#5674)

Fix release publish template token condition syntax (#5695)

Remove bulk user-data toggle action from admin changelists (#5694)

Split AlexaAccount ownable fields into a bottom admin section (#5692)

Fix Pyxel admin action button height (#5691)

Shorten admin password link label (#5690)

Add operational log dashboard to admin Log viewer and recommend Grafana Loki (#5687)

Ignore superseded open OCPP transactions in status view (#5688)

Add public Evergo order-tracking (phase one) with unified form, image handling and API submission (#5684)

Capture and display OCPP session stop reasons in connector status (#5686)

Skip CI jobs when pull requests are in draft state (#5685)

merge

merge

Remove requested targeted tests across app suites (#5682)

docs: clarify 'suite' vs 'Constellation' and refine Suite service wording (#5681)

feat(apis): seed Evergo API endpoints via fixture and reversible migration (#5669)

Enforce admin UI framework for templates: add regression tests and docs (#5678)

Add file attachments and role-based feedback limits to user story forms (#5672)

Add Developer Library link to admin docs index (#5679)

Improve Evergo customer export UX in admin (#5677)

Address admin review feedback for Evergo customers

Update Evergo customer admin status, filters, and phone display

Fix Pyxel admin button styling and launch validation

Harden deferred release transforms and simplify command args

Move release data transforms to checkpointed background flow

Fix nmcli error handling and strengthen AP regression assertions

Fix nmcli AP detection when mode is not marked ap

Fix inactive policy handling in auto-upgrade flows

Tune upgrade policy defaults and admin labels

Add activatable upgrade policies in admin

Add optional admin app priority ordering with tie suffixes

Adjust calendar task schedules

Address deferred migration review feedback

Defer node data migrations into checkpointed background task

Fix release bundle path handling and same-version migration sync

Add signed release migration bundles and offline apply command

Fix video service defaults and simplify float forwarding

Refactor video command into sub-actions with legacy shims

Refactor release action dispatch to dynamic handlers

Unify release management commands under release subcommands

Fix video wrapper replacement metadata

Mark legacy lcd/video wrappers as absorbed commands

Restrict admin upgrade quick action to superusers

Add Upgrade quick action to admin dashboard

Add PR-scoped pytest selection and fix resolve compatibility tests

Add admin-equivalent customer load mode to evergo command

Tighten Pyxel admin button HTML assertions

Adjust admin dashboard action buttons and add regressions

merge

Clarify review-thread resolution wording in AGENTS guidance

Replace auto-resolve workflow with agent guidance

Add pre-commit guard for PR-marked tests with ISO date

Refactor detached deploy flow to pre-migrate before service switch

Address review feedback for migration baseline release flow

Add migration baseline policy tooling for release trains

Fix nav visibility regression test for anonymous operator param

Harden operator interface redirects and loop handling

Address operator interface review comments

Add operator site interface suite feature gating

Stabilize mobilityhouse proposal dependency tests

Propose Mobility House-based EVCS simulator v2

Refine Evergo customer page for portrait and print layout

Fix changelist load_employees action CI regression

Address remaining PR comments for Odoo employee import

Harden Odoo employee import admin action

Add Odoo employee load tool action

Fix packaged resolve CLI helper and shim fallback

Add arthexis resolve subcommand with legacy shim

Fix feature rename migration collision handling

Rename development blog suite feature slug and label

Rename hardware requirements file to requirements-hw

Address PR review feedback for API explorer models

Add API Explorer models and admin registration

Fix RFID status ping handling and restore reader import

Avoid scanner lock mutation in default RFID status

Add default RFID status output when no action is provided

Add local-only Pyxel live stats launcher to admin dashboard

Fix --no-irq scan path and strengthen coverage

Add RFID check option to force non-IRQ polling

Fix Evergo customer wizard permissions and error UX

Move Evergo load customers action to customers admin

Harden docs blurb extraction and library item URL handling

Fix blurb parsing after headings

Fix document blurb front matter parsing and truncation

Revamp developer docs library layout with blurbs

Fix calendar timezone/transaction regressions in tests

Fix Alexa owner constraints and ownable admin CI failure

Add Alexa accounts and reminder delivery models with admin tooling

docs: refresh quick guide development and admin links

Address remaining command API review feedback

Address PR review feedback for command API wrappers

Unify command wrappers behind shared command API

Handle autogrow initialization for newly added admin inlines

Make suite feature admin textareas compact autogrow

Add EV charging session calculator to AWG reports

Use mocks for ContentType db-alias regression test

Fix sigil loader ContentType DB alias lookup

Fix calendar trigger robustness and URL handling

Add Google Calendar tracking and event-trigger task integration

Handle migrate --check status safely in preflight

Fix runserver preflight error handling for migrate checks

Speed up startup migration preflight path

Rename and alphabetize admin dashboard top-bar actions

merge

Scope dashboard hide controls to admin index

Add client-side hidden app controls on admin dashboard

Address open review comments in system UI refactor

Fix ui package re-export for uptime boot helper

Refactor system ui module into package

Force module pills to stay inline in collapsed navbar

Enforce visibility checks for public reference frame view

Move reference public frame to site view and simplify url bar

Resolve SMB PR review comments

Fix SMB Wikipedia link mapping

Add SMB management app with admin and smb command

Harden stale site-packages cleanup logic

Clean stale pip metadata before requirements install

Enhance admin log viewer metadata and action alignment

Simplify admin log viewer to always show full logs

Enforce SessionCookie ownership and align model indexes

Address PR feedback for SessionCookie safety and validation

Make session cookies ownable by user or security group

Add persistent session cookie model for selenium automation

Refactor dashboard favorite sorting tests to reduce duplication

Sort admin dashboard favorites alphabetically