asyncio.gather answered at the first failed read while its sibling
executor reads were still inside SQLite. In the suite the test teardown
then deleted the database under the running read, and py3.10 on Ubuntu
segfaulted in get_statistics (test_statistics_failure_is_an_error_envelope).
Both routes now wait for all their reads before answering.
canonical_evidence now follows main's non-finite policy (#303): NaN and
±Infinity are written as null instead of raising, so a NaN-stamped graph
never turns a review item limited. The System Overview reports the review
queue's pending total in needs_review.pending, read in the same snapshot
as the Library counts.
* feat(system): read-only health check and truthful overview counts
POST /prompt_manager/system/health runs the health check off-loop as a
read registry job of kind "health" (one at a time, beside a scan, not
cancellable, no file outcomes) and keeps the last report; GET returns it
or null. The check reads one snapshot on its own mode=ro connection,
closed in finally: integrity_check(100), foreign_key_check, stored hashes
against utils.hashing, duplicate pair rows, the legacy consistency
queries (now shared with check_consistency), and image links whose file
is gone, counted only under readable sources. An unavailable source, or
the absent Needs-review queue, makes its check unavailable and the
report incomplete instead of producing a count.
GET /prompt_manager/system/overview returns Library-eligible positive
prompts and active negative variants, indexed images, the last health
summary or null, backup null, the Needs-review count null, the effective
sources with whether they were auto-detected, and the thumbnail plan's
missing count. GET /prompt_manager/system/statistics lists runs and
average rating per category of Library parents, with the /stats totals.
* feat(system): native System route, drafts and shared review dialog
- #/system/<section> renders the concept's System shell: section nav,
settings layout and Save row with truthful status (D92); each section
not delivered yet hands off to its legacy tools (D94). Overview's System
card opens #/system/overview (Q12).
- A module-level draft store saves browser, then host (expected_revision),
then runtime; failed domains stay dirty, a stale revision is a conflict.
- System row builders (setting, operation, section nav) on the scope.
- openReviewDialog and backupNotice extracted from the scan review, which
is now a thin caller with identical markup.
- Overview images gain a "rated" count (images whose linked prompt is
rated); the missing-files health check reports per source, so partial
availability is visible.
* feat(system): native Overview with health report and statistics
System > Overview renders the concept's metrics and its Library health and
Workspace preferences surfaces from GET /system/overview: real counts,
"Not checked" until a health check ran, no invented review count, backup
or thumbnail status (D93). Explore opens "Usage statistics" with the real
runs and ratings per category and the Library totals (D96); the
statistics route now also returns rated_images.
Maintenance shows the concept's notice with Run health checks above its
hand-off: the read-only check runs as a registry read job and opens the
"Health report" with a chip per real result, missing files per source
(D95). A load failure shows Retry and no zeros; late answers never
repaint a newer section.
Adds the System concept comparison (shell, Overview, both dialogs, the
notice, mutation checks), the System workflow spec and its fixture
hooks, and the TESTING.md "Native System" section.
* test(system): coverage floors for the native Overview
Adds the system-overview.mjs baseline and raises the system.mjs floors to their measured coverage; no other floor changes.
* fix(system): keep health reports per database and off the event loop
- A restore that replaces the database forgets the stored health report,
and a check that started before the swap is not kept (database
generation stamped at start).
- The Overview no longer walks every source for the missing-thumbnail
count; the page reads /images/thumbnails/status on its own.
- Image sources for the health check and the Overview resolve in the
executor; a failure to start the check answers the coded envelope.
- Any exception fails only its own check; missing files reads its rows in
the snapshot and stats the files after it ended.
- The read-only URI keeps Windows UNC paths (empty authority).
- An integrity count at SQLite's limit is flagged as capped.
* fix(system): thumbnail row read, tracked health job and guarded host save
- The Overview's thumbnail row is its own read of the thumbnail status:
"Checking thumbnails…" until it answers, unavailable when it fails.
- The health job is tracked in the Activity store (new store.track) and
followed through its event stream instead of polling every 150 ms.
- A host save before a read returned a revision fails without a request;
System reads the host values on mount and after a conflict.
- "100+ problems found" when the integrity count is capped.
- D-NEW-S2-5 is D123 everywhere; the unused Overview hand-off is gone.
- The concept spec builds the health report from the concept's own rows
and asserts the full unmapped path list; surface tops pin the 18px
offset.
- TESTING.md: D96's reason, the read-only (WAL/SHM) standard, the UNC URI
and the new behavior. Coverage floors raised for the touched files.
* fix(system): make two health tests portable to Windows
- Windows forbids "?" in file names, so the URI-character open test
uses "#", "%" and a space there.
- ntpath.realpath on Python 3.11+ returns a NUL-byte path instead of
raising, so the bad-path test raises as POSIX does to reach the
missing-files failure path on every platform.
Vito Sansevero