Coerce an arbitrary ``metadata['refresh_interval_s']`` value to a safe int in ``[0, REFRESH_INTERVAL_S_MAX]``. The serializer's write path re

Aspect-fit ``src`` into ``fb``, honouring the source PAR. Returns the largest WxH that fits inside the framebuffer while preserving the sourc

Return the host's ``MemTotal`` (kibibytes) from ``/proc/meminfo``. Anthias's codec gate uses this to refuse 1080p+ uploads on devices that ca

Queue the Celery worker to fetch *source_uri* into the row. Lazy import keeps the celery_tasks module out of import paths that don't need it

Queue ``normalize_video_asset`` for the just-persisted row. See ``dispatch_normalize_image`` for the metadata stamp rationale.

Read the project version, sourced from pyproject.toml's [project].version (currently CalVer ``YYYY.M.MICRO``). Resolution order: 1. ``i

Launch AnthiasViewer, retrying the spawn past the flaky init crash. Defaults use the generous startup budget. Mid-playback respawns (view_ima

balenaOS 6.1.24+rev4' -> '6.1.24+rev4' (the form resinhup wants).

Run a balena CLI command. Returns (ok, stdout, stderr). balena prints Node/CLI warnings to stderr, so stdout stays clean for --json parsing.

Return a structured descriptor for the asset's start/end window. Renders as a single visual block in the schedule table — primary line is a r

Mark ``metadata['processing_started_at']`` to the current UTC. Read by the periodic reconciler (``reconcile_stuck_processing``) to age rows t

Patch the global settings dict so @authorized treats auth as enabled. Returns a ``patch.dict`` context manager — use as ``with _enable_auth():

Lowercase trailing extension *with* the dot, or ``''``. Used to decide passthrough/transcode for video. ``os.path.splitext`` returns the empt

Parse a date/time the edit-form posts back from Flatpickr. Flatpickr formats the value using whatever format we asked for (m/d/Y h:i K, d-m-Y

Parse a time-of-day the edit-form posts back from Flatpickr. The Play from / Play until pickers format with 'H:i' when the 24-hour clock is o

Coerce settings['screen_rotation'] to a known cardinal angle. Thin wrapper around the shared clamp_screen_rotation() helper — keeps the viewe

Resolve uri to a real path under settings['assetdir']. Mirrors the realpath + startswith guard that views_files.anthias_assets uses for the p

``whitenoise.base.scantree``, but a directory that can't be listed or an entry that can't be stat'd is recorded in ``skipped`` instead

Persist a human-readable error and clear is_processing. Both tasks land here on a permanent failure (corrupt HEIC, truncated TIFF, ffmpeg ref

Caps for the post-convert capsfilter. Without dims (pre-probe) only the framebuffer pixel format and a square PAR are pinned — enough for the

Identify a non-Pi SBC by reading ``/proc/device-tree/model``. Returns a stable short token (e.g. ``'rockpi4'``) when the model string matches

Branch on ``serializer._pending_normalize`` and dispatch. Single hand-off point shared by every API version's create view (v1 / v1.1 / v1.2 /

Return the ``Anthias/<release>`` product token. Single source of truth for the ``Anthias/<version>`` label. Shared by :func:`get_user_agent`

Call the Balena supervisor API. Extra kwargs (e.g. ``timeout``, ``allow_redirects``) are forwarded to ``requests.get`` / ``requests.post``. E

Return the board subtype, or ``None``. Redis (the host_agent-published value) is authoritative when present. When it yields nothing — key mis

Returns the duration of a video file in timedelta. Returns None if ffprobe is not available on the host so callers can surface a clean v

Derive the internal API token shared by server and viewer.

True when *uri* points at a recognised YouTube hostname. Substring sniffing (`'youtube' in uri`) was rejected: it would match decoy hosts lik

Capture ``page`` at the context's scale factor and emit a ``<name>.png`` plus retina ``<name>@2x.png`` and ``<name>@3x.png`` siblings under ``

Fan-out a 'refresh' nudge to every connected browser. Sync wrapper around channels.layers.group_send so Django views and Celery tasks can fir

Best-effort username of the device's operator account. Used by the settings page (to pre-fill the username input) and the /api/v2/device-sett

Publish the host's board subtype to Redis. Server + viewer read ``host:board_subtype`` to upgrade the catch-all ``arm64`` DEVICE_TYPE into a

Simple URL verification. >>> validate_url("hello") False >>> validate_url("ftp://example.com") False >>> validate_url("http://")

Resolve where the downloaded mp4 will land. Picks ``settings['assetdir']`` so ``cleanup()`` (which sweeps that same directory) recognises the

Push the requested transform to every wlroots output. Returns: * True on non-Wayland boards (no-op — the linuxfb path handles r

Trim helper around configparser — returns '' when the section or key doesn't exist.

Synthesise a tiny clip with a chosen codec / container / audio. Why ffmpeg instead of a binary fixture: the matrix of codecs the task branche

No-op unless PYTEST_CAPTURE_SCREENSHOTS is set in the env.

Parse a CalVer string, tolerating the conventional leading ``v`` on git tags (``v2026.5.0``).

Defang asset.uri before handing it to redirect(). Threat model: the asset row is operator-controlled (authenticated session, gated by @author

Run a ``browser_bus`` call, respawning the webview if it died mid-call. The flaky armv7 Qt5 init crash that load_browser() retries past can

Drive a Flatpickr time picker the way an operator does: click the input so the picker pops open, type into its hour/minute spinners, click the

Mirror ``FileAssetViewMixin.post`` byte-for-byte: write ``<assetdir>/<uuid>.tmp`` and return the path. Used by the upload-path wiring tests to

As above, but advance through `chunks` across reads — for the success case where the handshake appears in a later poll.

Best-effort: stop an AnthiasViewer process and confirm it's gone. SIGTERM, wait up to ``BROWSER_TERMINATE_GRACE_SECONDS``, then SIGKILL if st

Return a copy of ``seed`` with ``start_date`` / ``end_date`` recomputed against current wall-clock. The module-level seed singletons freeze th

Build a fresh playbin and set it PLAYING. Always a fresh element: a playbin whose sink activation failed (or that posted an ERROR) do

gst-parse description for playbin's ``video-sink`` bin. ``videorate`` caps the frame rate (drop-only — never duplicates), ``videoflip`` is in

Zero the visible framebuffer (black) — best-effort. Letterbox borders around an aspect-fit video are simply regions fbdevsink never touches,

Delete an ``Asset`` row, remove its on-disk file (if owned), and nudge the viewer to advance past it. Shared by the v1/v1.1/v1.2/v2 API delet

Queue ``normalize_image_asset`` for the just-persisted row. Lazy import of ``anthias_server.celery_tasks`` keeps this module importable from

Host board model from the device tree, '' when unavailable. ``/proc/device-tree`` resolves to ``/sys/firmware/devicetree/base``, which Docker

Returns True when run on CI.

True when *uri* is a live stream the viewer plays directly via its video pipeline rather than a downloadable file or a renderable web page.

Return ``True`` if this device is on (or ahead of) the latest published Anthias release. Compares ``importlib.metadata.version('anthias')`` (

Resolve a freshly uploaded video's length out of band. The HTML upload view returns the table partial as soon as the bytes are written so the

Resolve where the downloaded file will land on disk. Mirrors ``anthias_common.youtube.youtube_destination_path`` but takes the extension as a

Publish the host's MemTotal (kibibytes) to Redis. Written before ``host_agent_ready`` flips so a consumer waiting on readiness never observes