jozamudi 778bf2bfc1 status: consolidate CDN/upstream status into the header pill + tap panel ...

- pill label now shows KB/s when degraded ('cdn 23 KB/s'); tap opens a
  panel (replaces the transient toast) with origin/CDN state, KB/s,
  a sparkline of the ~1h /api/cdn hist, and last-updated age
- 60s poll while the page is visible (was: load/play/failure only)
- playback failure overlay appends CDN context when degraded/down
- buffer gauge + spinner untouched: client buffer state, not CDN state
- server unchanged: /api/cdn already returned everything
- tests: 3 hermetic browser tests (mocked /api/cdn via page.route —
  the throwaway server's probe runs live upstream, so its data is
  mocked out of the assertions); 37 passed
- docs: README + SPEC synced

2026-09-20 23:53:47 +00:00

..

conftest.py

login: per-source-IP failure budget (auth.py) — username rotation no longer dodges the lockout; sliding window, XFF trusted only behind the proxy (ANIWEB_TRUST_XFF); lockout logic now unit-testable (tests/test_auth.py)

2026-09-16 02:31:23 +00:00

test_api.py

history: flag rows whose slug no longer means the same anime

2026-09-18 23:25:35 +00:00

test_auth.py

login: per-source-IP failure budget (auth.py) — username rotation no longer dodges the lockout; sliding window, XFF trusted only behind the proxy (ANIWEB_TRUST_XFF); lockout logic now unit-testable (tests/test_auth.py)

2026-09-16 02:31:23 +00:00

test_browser.py

player: fullscreen button (scales with the window)

2026-09-19 00:11:45 +00:00

test_sources.py

Provider layer + hianime source (primary)

2026-09-07 01:38:53 +00:00

test_status_pill.py

status: consolidate CDN/upstream status into the header pill + tap panel

2026-09-20 23:53:47 +00:00