test(media): prove production client to private receiver wire #1622

Open

lytedev wants to merge 4 commits from propose/private-media-receiver-proof into propose/jellyfin-private-playback

lytedev commented

2026-10-31 23:34:38 -05:00

Owner

See the commits.

lytedev added 3 commits

2026-10-31 23:34:38 -05:00

feat(tv-player): isolate authenticated media streams (WIP)

/ check-format (push) Has been cancelled

Details

/ build (push) Has been cancelled

Details

e4639b0cec

test(tv-player): use the proven TCG launch configuration

/ check-format (push) Successful in 21s

Details

/ build (push) Successful in 21m4s

Details

6bada73e87

The generated launcher combined -machine accel=kvm:tcg with -accel
tcg; QEMU rejects these accelerator options as incompatible. Use the
same forceAccel setting and machine option as the desktop capability
fixture instead of overriding the QEMU package or CPU.

Verified on Bigtower under the exclusive synthetic-validation lock:
Nix formatting, Ruff, Python compilation, and the registered NixOS TCG
check. All eight receiver tests pass, including authenticated identical
WAV bytes, credential canaries, owned process controls, replacement and
backpressure cancellation, legacy playlists, and pinned mpv null output.
Physical screen playback and the separate trusted client integration
remain outside this validation.

test(media): compose client and receiver prerequisites with wire proof

/ check-format (push) Has been cancelled

Details

/ build (push) Has been cancelled

Details

4dc9e696a7

Compose only the published Jellyfin client and private receiver feature
parents as the focused dependency for a ninth NixOS integration case.
The fixture imports the production TypeScript helper using native Node 24,
with credential files rather than argument or environment values.

Validation is in progress on trusted bigtower. The first formatter attempt
in an archive failed because nixfmt-tree chose /nix/store as its root.
Formatting the explicit Nix path with a task-local Git root then passed.
No product code or existing eight test assertions are changed.

lytedev added 1 commit

2026-10-31 23:38:12 -05:00

test(media): publish fake-player argv atomically after TCG race

/ check-format (push) Successful in 11m2s

Details

/ build (push) Successful in 33m14s

Details

1bddd1fa3c

The first full TCG run passed the new production Node client case but
failed existing case 3: the fake player created its argv record before
writing JSON, so accepted_play occasionally read an empty file.
Publish the completed fixture record by rename; preserve every assertion
in the existing eight cases. Run the one sequential Node client at nice 15.

Trusted bigtower, exclusive assistant-synthetic-validation.lock:
nix fmt -- packages/checks/tv-player/default.nix: passed.
nice -n 10 nix build --max-jobs 1 --cores 2
  .#checks.x86_64-linux.tv-player-private-stream: passed.
All 9 TCG cases passed (8 existing + 1 production adapter wire case),
12.316s unittest / 56.54s VM test script. Node 24 imports the two production
TypeScript modules without node_modules; success resolves to undefined,
fetches one header-authenticated unkeyed item URL, and delivers exact
nonempty WAV stdin. Wrong TV bearer reports 401 with zero new fetches or
players. Canary checks cover owned child and Node argv, client output,
public fetch path, and service journal.

This proves adapter wire compatibility, not physical playback, audience
authority, tool-factory authorization, or cloud routing.

/ check-format (push) Successful in 11m2s

Details

/ build (push) Successful in 33m14s

Details

This pull request can be merged automatically.

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin propose/private-media-receiver-proof:propose/private-media-receiver-proof

git switch propose/private-media-receiver-proof

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.