Return ``DEVICE_TYPE`` upgraded via the host_agent's published board subtype when applicable. Lowercased and whitespace-stripped for stable d

Bound the OS-update set for one run: an absolute --os-limit if given (>0), else ceil(percent% of the eligible population). Devices are already

Render an Asset (or any model) as a JSON literal for Alpine.

Handle the ``unblank`` command: power the display back on and resume.

Display a webpage and arm its per-asset auto-refresh timer. ``reload_interval_s`` mirrors ``Asset.metadata['refresh_interval_s']``: 0 (the de

Coerce an asset URI into one ``playbin`` accepts. Local assets store a bare absolute path (``settings['assetdir']/<asset_id>`` — see the API

Decide whether to play an asset this rotation. The reachability of remote URLs is owned by the server (a celery beat task refreshes ``Asset.i

Atomically rewrite anthias.conf. Writes to a tempfile in the same directory (so ``os.replace`` is a cheap intra-filesystem rename) and then s

Build the DRF auth classes lazily. DRF reaches for ``rest_framework`` at import time, which fails on the viewer process (it doesn't load ``re

Reconstruct an operator-recognisable filename for a local asset. Anthias renames every uploaded file to ``<uuid4>.<ext>`` on disk — the origi

Build the per-file option dict sent over D-Bus to AnthiasViewer. Qt 6.5 dropped the upstream gstreamer media backend, so the runtime path is

Compose the env to pass when spawning AnthiasViewer. Rotation is applied differently per platform plugin: * Wayland (x86 under cage): the co

Reject a username change that would collide with another row before the ``operator.save()`` call raises ``IntegrityError`` on the unique const

Soonest future moment when the playlist might need re-evaluating. Past boundaries are dropped so a long-ago start_date on an asset that's cur

Soonest future moment when the playlist might need refetching. Mirrors ``anthias_viewer.scheduling._compute_deadline``: past boundaries are d

Main-thread half of the linuxfb rotation handoff. Called from ``asset_loop`` at the top of each tick. If the subscriber set ``_rotation_bounc

Open ``input_path`` with Pillow, save lossless WebP to ``output_path``. Mode handling: * Always convert to RGBA so transparency present

First-time enable: no User row exists yet, so both username and password are required and the form's confirm field must match.

Interface name carrying the default route, or None.

Return the MAC of the interface carrying the default route. Picking the 'active' interface matches what an operator expects to see — the NIC

Pointer-events drag of one row's grip handle onto the lower half of another row. The Anthias drag is implemented with raw pointerdown/pointerm

First active mode on a /sys/class/drm/<card-port> entry, or None.

Walk /sys/class/drm/ for the first connected output's mode.

Server-side equivalent of ``generate_asset_list()`` returning Asset rows (so ``AssetSerializerV2`` can serialise them) instead of plain dicts.

Walk ``exc`` and everything it was raised from. Wrappers matter here: channels-redis and kombu re-raise the underlying ``redis.exceptions.Con

Read the *visible* framebuffer resolution + GStreamer format. Returns (width, height, gst_format). 16bpp → RGB16 (the Pi vc4 fbcon rgb565 def

Plain framebuffer fallback (Pi 1-4 legacy KMS, some embedded).

Return the latest release tag from GitHub, hitting the API at most once per ``LATEST_RELEASE_TTL`` and short-circuiting while a prior error ba

Return ffprobe's parsed JSON for ``input_path``. Uses ``-v error -show_format -show_streams -print_format json`` so we get a single document

Reduce ffprobe's payload to the dimensions we branch on. Returns a dict with these keys, all populated: * ``container`` — lowercase format

Fallback when no default route is published — scan ifaces.

Process a ``reload`` message from the server. Reloads settings (so a settings.patch() change takes effect immediately), re-applies the screen

Issue an HTTP HEAD against *uri* to classify its content. Returns ``(True, ext)`` when the response advertises a downloadable video and ``(Fa

Codecs the *current* board can hardware-decode through mpv. Resolves ``DEVICE_TYPE`` via ``anthias_common.board.resolve_device_key`` so a Roc

Insert stand-in modules so ``import pydbus`` (and its transitive ``from gi.repository import Gio, GLib, GObject``) succeeds on hosts that

True iff Django can parse ``value`` as one of its registered password-hasher outputs. The previous heuristic was ``'$' in value and not legac

Decide whether a request's path is worth round-tripping through the login form's ``?next=`` parameter. Two classes of request must NOT propag

Log the kernel's ALSA card listing so silent-HDMI reports are debuggable from journalctl alone. Reads /proc/asound/cards (always present when

Send an unauthenticated request to the login page, preserving the original destination via ``?next=`` when it's safe to do so.

Wrap each value as a ``GLib.Variant`` for pydbus. AnthiasViewer's ``playVideo`` slot is declared with ``QVariantMap`` (Qt's ``a{sv}`` D-Bus s

Day-of-week and time-of-day filter, evaluated in local time. Overnight windows (play_time_from > play_time_to) wrap past midnight; pl

Respawn the webview when the operator toggled "Prefer dark mode". The preference is realised by the C++ webview reading the ANTHIAS_PREFER_DA

Re-apply ``screen_rotation`` when the operator changed it in the UI. Two distinct paths because the rotation primitive is platform- specific

True when the shared SQLite schema is fully migrated. Computes the same unapplied-migration plan ``manage.py migrate --check`` does. A databa

Map each asset_id to a canned migrate response. ``outcomes`` is keyed by asset_id and each value is the JSON body the backend would have retu

Token validation that says "Screenly rejected this token.".

Open a local asset file for multipart upload. Returns ``(files_dict, file_handle)`` ready to pass into ``requests.post(..., files=...)``, or

The User row whose credentials gate this device. When auth is currently enabled the calling view is gated by ``@authorized``, so ``request.us

Best-effort ISO-8601 parser for ``metadata.processing_started_at``. Returns a tz-aware ``datetime`` on success, ``None`` on any failure. Anth

Best-effort parse of Screenly's per-asset create response. Screenly's create endpoint returns a single-row array under ``Prefer: return=repre

Idempotent upsert of the operator User row from the conf hash.

Background reporter — write the active display resolution to Redis on a 1-minute cadence with a 3-minute TTL. The TTL serves as a liveness si

One reporter tick — detect the resolution and write it to Redis. Never raises: the reporter thread must survive any single failed tick and tr

Return ``(config, auth_backend, username, password_hash)`` extracted from anthias.conf, or ``None`` if the file can't be parsed.

First 'model name' line from /proc/cpuinfo, normalised. Drops marketing crud ((R), (TM)), the trailing 'CPU' token that the kernel parrots fr

Last-ditch source for the project version when the package isn't installed in the active venv. Walks up from this file to find the repo-root p

Return a safe absolute path under ANTHIAS_ASSETS_ROOT, or None. Returns None for non-local URIs (http://, https://, youtube://, …). Uses the

Non-blocking IP-string resolver for the splash polling endpoint. ``anthias_common.utils.get_node_ip()`` is the right primitive for one-shot s

Active display resolution (reported by the viewer) with a fallback to the operator-configured value from settings. The viewer publishes 'view

Main-thread retry for an unsuccessful Wayland rotation apply. load_browser() at viewer startup tries to push the wlr-randr transform before A

Fast-path resolver+formatter for the splash polling endpoint.

Validate a TarInfo for safe extraction under dest_root. Reject: - absolute paths (drive-letter or starts-with-/) - any '..' path comp

Pick the {kind, primary} pair for a populated start/end window. Split off from schedule_window() so the latter stays under the SonarCloud cog

Cardinal angle the operator selected on the Settings page. Thin wrapper around the shared clamp_screen_rotation() helper so both the viewer's

Return ``qpa`` with its ``rotation=`` option set to ``rotation`` (or removed entirely when ``rotation`` is 0). The Qt QPA syntax is ``<plugin

Attach an HX-Trigger header so the global Alpine store (registered in vendor.ts) renders a toast for this response.

Per-(user, IP, path) throttle on the deprecation log line. Returns True the first time a particular tuple is seen (or after the TTL expires)

Cut short the current rotation if the displayed asset is gone. Issue #2430: deleting or deactivating an asset that's currently on screen woul

Spawn AnthiasViewer once and block until it registers on D-Bus. Returns the live ``sh`` background command on success. Raises ``WebviewBinary

Fetch *uri* with the module-level session and stream it to *staging*, enforcing the size cap and validating the response headers. Raises ``Rem