Update Music Control e2e receipts for runtime repair

Repair Music Control for Decky's real legacy runtime
Merge pull request #336 from saphid/release/v0.4.48
2026-10-26 23:01:47 +01:00 · 2026-10-26 21:30:16 +00:00 · 2026-10-26 21:23:02 +00:00 · 2026-10-26 16:11:06 +00:00 · 2026-10-26 15:46:53 +00:00 · 2026-10-26 15:45:09 +00:00
20 changed files with 1341 additions and 23 deletions
@@ -1,12 +1,12 @@
 {
  "name": "frame-control",
-  "version": "0.4.46",
+  "version": "0.4.48",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "frame-control",
-      "version": "0.4.46",
+      "version": "0.4.48",
      "license": "MIT",
      "devDependencies": {
        "electron": "^44.4.5",
@@ -1,7 +1,7 @@
 {
  "name": "frame-control",
  "productName": "Frame Control",
-  "version": "0.4.46",
+  "version": "0.4.48",
  "description": "Desktop app for managing a Valve Steam Frame over SSH",
  "private": true,
  "main": "main.js",
@@ -0,0 +1,40 @@
+# Emuchievements ARM64 hash helper feasibility, 26 October 2026
+
+The exact official Emuchievements 2.0.5 archive (store ID 28, SHA-256
+`98dcb443e81b9f9011cfe77c69eb659869c8e2df2df8b0a443df66cbfc2f5a89`)
+contains an x86_64 `Emuchievements/bin/hash`. Frame Control still blocks
+that archive on ARM64; this experiment did not install the plugin.
+
+The upstream source commit
+[`8567e94befffc943434b2adb842487274815f8bb`](https://github.com/EmuDeck/Emuchievements/commit/8567e94befffc943434b2adb842487274815f8bb)
+declares version 2.0.5. Its `src/py/main.py` matches the published ZIP's
+`Emuchievements/main.py` byte for byte (SHA-256
+`d4e72f136c94e48919575937ec4190f28864cc259eb111ef47f0df99f5912645`).
+The pinned build dependencies at that commit are libarchive
+`b3be94ba4f36943745e64a6a0a3c21c2d1281d3c`, libchdr
+`a20e04c12c0c20048bf771da6df7aa2e51f5e0cb`, and rcheevos
+`85a3209398e576d79170f569fcddf277640f3f06`.
+
+On a separate Linux host, the version-matched source and submodules built an
+x86_64 `hash` with CMake. It and the official x86_64 binary both returned
+`ff78ca6c21ac11504dbddbd5d4e7524a` for one synthetic `.rom` file. An
+isolated Debian cross-build using `gcc-aarch64-linux-gnu` and
+`g++-aarch64-linux-gnu` produced an AArch64 binary with SHA-256
+`9c7aedb80bdd64941aa5dd9b41f9bb8471411c812e04c7ee7d60486779d99997`.
+It links to `liblzma.so.5`, `libstdc++.so.6`, `libgcc_s.so.1`, and `libc.so.6`.
+
+A real Frame test acquired `/tmp/frame-test.lock` atomically with a unique
+owner before reading the device. SteamVR activity was **3** (standby),
+proximity raw **3.0625**, and battery **100%**. The ARM64 helper ran against
+the same synthetic ROM in a private `/tmp` directory, exited 0, and returned
+the same hash. The owned directory and lock were removed. No normal service,
+power setting, Steam library, real ROM, or installed plugin was changed.
+The separate host's source/build directory was also removed after the test.
+
+This proves only a single-file helper path. The official ZIP remains blocked
+because it still bundles x86_64 bytes. A release-ready port needs a packaged
+ARM64 helper with GPL-3.0 source and license compliance, format-specific hash
+coverage (including archives and CHD), a managed plugin transaction, actual
+Decky backend and frontend checks, and cleanup. RetroAchievements login,
+real ROM scanning, wearer-visible VR, and physical controller use remain
+unverified.
@@ -0,0 +1,807 @@
+{
+  "timeUtc": "2026-10-26T21:15:13.918421+00:00",
+  "plugins": [
+    {
+      "id": 12,
+      "name": "MusicControl",
+      "version": "1.1.6",
+      "sha256": "246b89fd653c60a735b1cc401d1b0937d5cb969eea9024561661ff741f081d62",
+      "backend": "Python",
+      "frontendApi": "legacy"
+    },
+    {
+      "id": 111,
+      "name": "Music Control",
+      "version": "1.1.7",
+      "sha256": "3f56a3f56034b277ea74a2c37cc84133b69e382aa6bcb0b43876776aac737ed9",
+      "backend": "Python",
+      "frontendApi": "legacy"
+    }
+  ],
+  "regressions": {
+    "removedBoundMethodShim": {
+      "result": "Plugin._get_dbus_env() missing 1 required positional argument: 'self'",
+      "success": false
+    },
+    "realFrameSubprocessDiagnostic": {
+      "uid": 1000,
+      "ldLibrary": "<Decky PyInstaller extraction directory>",
+      "results": [
+        {
+          "shell": false,
+          "code": 0,
+          "hasArray": true,
+          "stderr": ""
+        },
+        {
+          "shell": true,
+          "code": 1,
+          "hasArray": false,
+          "stderr": "/bin/sh: /usr/lib/libc.so.6: version `GLIBC_2.42' not found (required by <Decky PyInstaller extraction directory>/libtinfo.so.6)\n"
+        }
+      ]
+    }
+  },
+  "realFrame": {
+    "scope": "real Frame ARM64 Decky3.3; only discovery and selected-player read, no player controls",
+    "runtime": {
+      "version": "v3.3.0",
+      "sha256": "8ef5dcf36cbbbb6e97201a6baed5d79c4cc44ec27789fc9af1c5b6ae8f0b25b6"
+    },
+    "before": {
+      "arch": "aarch64",
+      "uid": 1000,
+      "decky": "failed",
+      "panel": "inactive",
+      "artLinkPresent": false,
+      "imagesParentPresent": true,
+      "battery": [
+        100
+      ]
+    },
+    "installs": [
+      {
+        "id": 12,
+        "receipt": {
+          "storeId": 12,
+          "sha256": "246b89fd653c60a735b1cc401d1b0937d5cb969eea9024561661ff741f081d62",
+          "version": "1.1.6",
+          "compatShims": [
+            "music-control-system-dbus-env"
+          ]
+        }
+      },
+      {
+        "id": 111,
+        "receipt": {
+          "storeId": 111,
+          "sha256": "3f56a3f56034b277ea74a2c37cc84133b69e382aa6bcb0b43876776aac737ed9",
+          "version": "1.1.7",
+          "compatShims": [
+            "music-control-system-dbus-env"
+          ]
+        }
+      }
+    ],
+    "calls": [
+      {
+        "id": 12,
+        "method": "sp_list_media_players",
+        "success": true,
+        "playerCount": 0
+      },
+      {
+        "id": 12,
+        "method": "sp_get_media_player",
+        "response": {
+          "result": "org.mpris.MediaPlayer2.spotify",
+          "success": true
+        }
+      },
+      {
+        "id": 111,
+        "method": "sp_list_media_players",
+        "success": true,
+        "playerCount": 0
+      },
+      {
+        "id": 111,
+        "method": "sp_get_media_player",
+        "response": {
+          "result": "org.mpris.MediaPlayer2.spotify",
+          "success": true
+        }
+      }
+    ],
+    "cleanup": {
+      "baseAbsent": true,
+      "unitAbsent": true,
+      "artLinkAbsent": true
+    },
+    "after": {
+      "arch": "aarch64",
+      "uid": 1000,
+      "decky": "failed",
+      "panel": "inactive",
+      "artLinkPresent": false,
+      "imagesParentPresent": true,
+      "battery": [
+        100
+      ]
+    },
+    "lockReleased": true
+  },
+  "isolatedRuntime": {
+    "version": "v3.3.0",
+    "architecture": "amd64",
+    "sha256": "e80d03e641d1766a33a817cb27ab8d2e0a4633685e5d27e4de948a6687526181",
+    "isolation": "Docker network none; no host audio/D-Bus/home/device mounts; dropped capabilities; private dbus-daemon and silent synthetic MPRIS service; archives and scripts read-only"
+  },
+  "backendFixtureChecks": [
+    {
+      "id": 12,
+      "version": "1.1.6",
+      "calls": [
+        {
+          "method": "sp_list_media_players",
+          "kwargs": {},
+          "response": {
+            "result": "org.mpris.MediaPlayer2.FrameySilent",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_set_media_player",
+          "kwargs": {
+            "player": "org.mpris.MediaPlayer2.FrameySilent"
+          },
+          "response": {
+            "result": null,
+            "success": true
+          }
+        },
+        {
+          "method": "sp_get_media_player",
+          "kwargs": {},
+          "response": {
+            "result": "org.mpris.MediaPlayer2.FrameySilent",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_identity",
+          "kwargs": {
+            "orgPath": "org.mpris.MediaPlayer2.FrameySilent"
+          },
+          "response": {
+            "result": "Player",
+            "success": true
+          }
+        },
+        {
+          "method": "get_meta_data",
+          "kwargs": {},
+          "response": {
+            "result": "trackid|/org/framey/TestTrack/1\nlength|180000000\ntitle|Silent Test Track\nartist|Fixture Artist\nalbum|Framey Test Album\n",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_track_status",
+          "kwargs": {},
+          "response": {
+            "result": "Paused",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_track_progress",
+          "kwargs": {},
+          "response": {
+            "result": "12000000",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_can_seek",
+          "kwargs": {},
+          "response": {
+            "result": "true",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_get_volume",
+          "kwargs": {},
+          "response": {
+            "result": "0.4",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_test_volume_control",
+          "kwargs": {},
+          "response": {
+            "result": "true",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_play",
+          "kwargs": {},
+          "response": {
+            "result": "",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_track_status",
+          "kwargs": {},
+          "response": {
+            "result": "Playing",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_pause",
+          "kwargs": {},
+          "response": {
+            "result": "",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_track_status",
+          "kwargs": {},
+          "response": {
+            "result": "Paused",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_next",
+          "kwargs": {},
+          "response": {
+            "result": "",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_previous",
+          "kwargs": {},
+          "response": {
+            "result": "",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_seek",
+          "kwargs": {
+            "amount": 2000000
+          },
+          "response": {
+            "result": "",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_track_progress",
+          "kwargs": {},
+          "response": {
+            "result": "14000000",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_set_position",
+          "kwargs": {
+            "position": 45000000,
+            "trackid": "/org/framey/TestTrack/1"
+          },
+          "response": {
+            "result": "",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_track_progress",
+          "kwargs": {},
+          "response": {
+            "result": "45000000",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_set_volume",
+          "kwargs": {
+            "volume": 0.25
+          },
+          "response": {
+            "result": "method return time=1793049278.417118 sender=:1.0 -> destination=:1.19 serial=20 reply_serial=2\n",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_get_volume",
+          "kwargs": {},
+          "response": {
+            "result": "0.25",
+            "success": true
+          }
+        }
+      ],
+      "independentFixtureState": {
+        "PlaybackStatus": "Paused",
+        "Position": 45000000,
+        "Volume": 0.25,
+        "next": 1,
+        "previous": 1,
+        "writes": [
+          [
+            "PlayPause"
+          ],
+          [
+            "Pause"
+          ],
+          [
+            "Next"
+          ],
+          [
+            "Previous"
+          ],
+          [
+            "Seek",
+            2000000
+          ],
+          [
+            "SetPosition",
+            45000000
+          ],
+          [
+            "Volume",
+            0.25
+          ]
+        ]
+      }
+    },
+    {
+      "id": 111,
+      "version": "1.1.7",
+      "calls": [
+        {
+          "method": "sp_list_media_players",
+          "kwargs": {},
+          "response": {
+            "result": "org.mpris.MediaPlayer2.FrameySilent",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_set_media_player",
+          "kwargs": {
+            "player": "org.mpris.MediaPlayer2.FrameySilent"
+          },
+          "response": {
+            "result": null,
+            "success": true
+          }
+        },
+        {
+          "method": "sp_get_media_player",
+          "kwargs": {},
+          "response": {
+            "result": "org.mpris.MediaPlayer2.FrameySilent",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_identity",
+          "kwargs": {
+            "orgPath": "org.mpris.MediaPlayer2.FrameySilent"
+          },
+          "response": {
+            "result": "Player",
+            "success": true
+          }
+        },
+        {
+          "method": "get_meta_data",
+          "kwargs": {},
+          "response": {
+            "result": "trackid|/org/framey/TestTrack/1\nlength|180000000\ntitle|Silent Test Track\nartist|Fixture Artist\nalbum|Framey Test Album",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_track_status",
+          "kwargs": {},
+          "response": {
+            "result": "Paused",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_track_progress",
+          "kwargs": {},
+          "response": {
+            "result": "12000000",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_can_seek",
+          "kwargs": {},
+          "response": {
+            "result": "true",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_get_volume",
+          "kwargs": {},
+          "response": {
+            "result": "0.4",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_test_volume_control",
+          "kwargs": {},
+          "response": {
+            "result": "true",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_play",
+          "kwargs": {},
+          "response": {
+            "result": "method return time=1793049473.137015 sender=:1.0 -> destination=:1.12 serial=13 reply_serial=2\n",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_track_status",
+          "kwargs": {},
+          "response": {
+            "result": "Playing",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_pause",
+          "kwargs": {},
+          "response": {
+            "result": "method return time=1793049473.340963 sender=:1.0 -> destination=:1.14 serial=15 reply_serial=2\n",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_track_status",
+          "kwargs": {},
+          "response": {
+            "result": "Paused",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_next",
+          "kwargs": {},
+          "response": {
+            "result": "method return time=1793049473.547273 sender=:1.0 -> destination=:1.16 serial=17 reply_serial=2\n",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_previous",
+          "kwargs": {},
+          "response": {
+            "result": "method return time=1793049473.649558 sender=:1.0 -> destination=:1.17 serial=18 reply_serial=2\n",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_seek",
+          "kwargs": {
+            "amount": 2000000
+          },
+          "response": {
+            "result": "method return time=1793049473.752790 sender=:1.0 -> destination=:1.18 serial=19 reply_serial=2\n",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_track_progress",
+          "kwargs": {},
+          "response": {
+            "result": "14000000",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_set_position",
+          "kwargs": {
+            "position": 45000000,
+            "trackid": "/org/framey/TestTrack/1"
+          },
+          "response": {
+            "result": "method return time=1793049473.965468 sender=:1.0 -> destination=:1.20 serial=21 reply_serial=2\n",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_track_progress",
+          "kwargs": {},
+          "response": {
+            "result": "45000000",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_set_volume",
+          "kwargs": {
+            "volume": 0.25
+          },
+          "response": {
+            "result": "method return time=1793049474.175137 sender=:1.0 -> destination=:1.22 serial=23 reply_serial=2\n",
+            "success": true
+          }
+        },
+        {
+          "method": "sp_get_volume",
+          "kwargs": {},
+          "response": {
+            "result": "0.25",
+            "success": true
+          }
+        }
+      ],
+      "independentFixtureState": {
+        "PlaybackStatus": "Paused",
+        "Position": 45000000,
+        "Volume": 0.25,
+        "next": 1,
+        "previous": 1,
+        "writes": [
+          [
+            "Volume",
+            0.01
+          ],
+          [
+            "Volume",
+            0.4
+          ],
+          [
+            "PlayPause"
+          ],
+          [
+            "Pause"
+          ],
+          [
+            "Next"
+          ],
+          [
+            "Previous"
+          ],
+          [
+            "Seek",
+            2000000
+          ],
+          [
+            "SetPosition",
+            45000000
+          ],
+          [
+            "Volume",
+            0.25
+          ]
+        ]
+      }
+    }
+  ],
+  "browserChecks": [
+    {
+      "id": 12,
+      "scope": "opaque local Chromium + real amd64 Decky3.3 + private silent MPRIS",
+      "checks": [
+        {
+          "rendered": "Music Control\nCurrently Playing\nSilent Test Track\nFixture Artist\nPlayback Volume\nPlayer\nInfo"
+        },
+        {
+          "clickedButton": 0,
+          "independentReadback": {
+            "PlaybackStatus": "Paused",
+            "Position": 45000000,
+            "Volume": 0.25,
+            "next": 1,
+            "previous": 2
+          }
+        },
+        {
+          "clickedButton": 2,
+          "independentReadback": {
+            "PlaybackStatus": "Paused",
+            "Position": 45000000,
+            "Volume": 0.25,
+            "next": 2,
+            "previous": 2
+          }
+        },
+        {
+          "clickedButton": 1,
+          "independentReadback": {
+            "PlaybackStatus": "Playing",
+            "Position": 45000000,
+            "Volume": 0.25,
+            "next": 2,
+            "previous": 2
+          }
+        },
+        {
+          "clickedButton": 1,
+          "independentReadback": {
+            "PlaybackStatus": "Paused",
+            "Position": 45000000,
+            "Volume": 0.25,
+            "next": 2,
+            "previous": 2
+          }
+        },
+        {
+          "slider": 0,
+          "value": 0.5,
+          "independentReadback": {
+            "PlaybackStatus": "Paused",
+            "Position": 90000000,
+            "Volume": 0.25,
+            "next": 2,
+            "previous": 2
+          }
+        },
+        {
+          "slider": 1,
+          "value": 60,
+          "independentReadback": {
+            "PlaybackStatus": "Paused",
+            "Position": 90000000,
+            "Volume": 0.6,
+            "next": 2,
+            "previous": 2
+          }
+        },
+        {
+          "infoRoute": "Music Control\nBack to plugin\nMusicControl\nInfoUsageTroubleshooting\nMusicControl allows you to control any media playback that is currently running that implements the MPRIS dbus interface.\nExamples of application that are supported:\nSpotify\nCider\nChrome / Firefox\nStrawberry\nOnly the flatpak versions of these applications have been tested, and not all of them might support the full feature set, so it is recommended to use the discover store to install the applications."
+        },
+        {
+          "reopened": "Music Control\nCurrently Playing\nSilent Test Track\nFixture Artist\nPlayer\nInfo",
+          "independentReadback": {
+            "PlaybackStatus": "Paused",
+            "Position": 90000000,
+            "Volume": 0.6,
+            "next": 2,
+            "previous": 2
+          }
+        }
+      ]
+    },
+    {
+      "id": 111,
+      "scope": "opaque local Chromium + real amd64 Decky3.3 + private silent MPRIS",
+      "checks": [
+        {
+          "rendered": "Music Control\nCurrently Playing\nSilent Test Track\nFixture Artist\nPlayback Volume\nPlayer\nInfo"
+        },
+        {
+          "clickedButton": 0,
+          "independentReadback": {
+            "PlaybackStatus": "Paused",
+            "Position": 45000000,
+            "Volume": 0.25,
+            "next": 1,
+            "previous": 2
+          }
+        },
+        {
+          "clickedButton": 2,
+          "independentReadback": {
+            "PlaybackStatus": "Paused",
+            "Position": 45000000,
+            "Volume": 0.25,
+            "next": 2,
+            "previous": 2
+          }
+        },
+        {
+          "clickedButton": 1,
+          "independentReadback": {
+            "PlaybackStatus": "Playing",
+            "Position": 45000000,
+            "Volume": 0.25,
+            "next": 2,
+            "previous": 2
+          }
+        },
+        {
+          "clickedButton": 1,
+          "independentReadback": {
+            "PlaybackStatus": "Paused",
+            "Position": 45000000,
+            "Volume": 0.25,
+            "next": 2,
+            "previous": 2
+          }
+        },
+        {
+          "slider": 0,
+          "value": 0.5,
+          "independentReadback": {
+            "PlaybackStatus": "Paused",
+            "Position": 90000000,
+            "Volume": 0.25,
+            "next": 2,
+            "previous": 2
+          }
+        },
+        {
+          "slider": 1,
+          "value": 60,
+          "independentReadback": {
+            "PlaybackStatus": "Paused",
+            "Position": 90000000,
+            "Volume": 0.6,
+            "next": 2,
+            "previous": 2
+          }
+        },
+        {
+          "infoRoute": "Music Control\nBack to plugin\nMusicControl\nInfoUsageTroubleshooting\nMusicControl allows you to control any media playback that is currently running that implements the MPRIS dbus interface.\nExamples of application that are supported:\nSpotify\nCider\nChrome / Firefox\nStrawberry\nOnly the flatpak versions of these applications have been tested, and not all of them might support the full feature set, so it is recommended to use the discover store to install the applications."
+        },
+        {
+          "reopened": "Music Control\nCurrently Playing\nSilent Test Track\nFixture Artist\nPlayer\nInfo",
+          "independentReadback": {
+            "PlaybackStatus": "Paused",
+            "Position": 90000000,
+            "Volume": 0.6,
+            "next": 2,
+            "previous": 2
+          }
+        }
+      ]
+    }
+  ],
+  "limitations": [
+    "Real Frame had no running MPRIS players. No real media transport or volume writes ran.",
+    "The private fixture emits no audio and does not prove playback in a supported media app.",
+    "Album art, physical controller, VR keyboard and worn VR were not tested.",
+    "Both upstream backends truncate multiword Identity to its final word.",
+    "Music Control 1.1.7 automatically probes player volume by writing 0.01 and restoring it; this ran only against the private fixture.",
+    "Existing installed copies require remove/reinstall or an explicit managed update."
+  ],
+  "validation": {
+    "pythonSuite": {
+      "run": 1639,
+      "skipped": 16,
+      "passed": true
+    },
+    "fakeFrame": {
+      "total": 116,
+      "results": {
+        "blocked": 55,
+        "installed-removed": 61
+      },
+      "backendExecution": false
+    },
+    "currentStore": {
+      "checkedAtUtc": "2026-10-26T21:17:39.609721+00:00",
+      "plugins": 116,
+      "allPinnedDigestsUnchanged": true
+    },
+    "independentCleanupAudit": "MPRIS_CLEANUP_AUDIT_PASS: shared lock, test services/runtime directories and owned cache link absent",
+    "pinnedHttpSshFlow": {
+      "command": "scripts/e2e.sh test_framey",
+      "passed": 2,
+      "seconds": 32.59,
+      "scope": "pinned official archive receipt assertions and sample install/update/remove safeguards"
+    }
+  }
+}
@@ -0,0 +1,76 @@
+# MusicControl / Music Control runtime checks, 26 October 2026
+
+Both official entries remain **partial**. Their pure-Python backends need a
+user-session MPRIS player and `dbus-send`, rather than Deck-specific hardware or
+an x86 binary. [Results](framey-mpris-runtime-2026-10-26.json) pin both archives
+and the actual Decky 3.3.0 executables used.
+
+Two runtime failures were reproduced and repaired:
+
+- The #335 `music-control-bound-methods` transformation was incorrect. Neither
+  manifest declares `api_version`, so Decky uses `module.Plugin` and explicitly
+  supplies the class as `self`. The earlier test used `module.Plugin()` and
+  therefore diagnosed a fixture error as an upstream bug. In actual Decky,
+  the transformation breaks discovery with `_get_dbus_env() missing ... self`
+  and transport with `_sp_player_dbus() missing ... parameters`. Managed installs
+  now retain the original class calls. This supersedes the earlier
+  [bound-method evidence](framey-music-control-bound-methods-2026-10-26.md).
+- On Frame OS 0.5.6, MusicControl 1.1.6's `/bin/sh` subprocess inherits Decky's
+  PyInstaller library path. Its bundled `libtinfo.so.6` needs `GLIBC_2.42`, which
+  the Frame's libc lacks. A private diagnostic backend confirmed the same
+  read-only D-Bus command fails with a shell and succeeds without one. Both
+  exact-archive backends now restore `LD_LIBRARY_PATH_ORIG` (or an empty path)
+  only in their copied D-Bus subprocess environment. The Decky process keeps
+  its original environment. The receipt records `music-control-system-dbus-env`.
+
+The patch is gated by store ID, SHA-256 and folder, and checks the expected
+source before editing. Existing installed copies need **remove/reinstall** or
+an explicit managed update; a desktop update alone does not rewrite them.
+The store still shows partial, with the same reason as the docs table.
+
+Actual Decky 3.3.0 amd64 ran each repaired production-managed install separately
+in a container with no network, host audio, host D-Bus, home or device access.
+A private `dbus-daemon` hosted a silent synthetic MPRIS service. Discovery,
+selection, identity, metadata, status, progress, volume/CanSeek reads,
+play/pause, next/previous, seek, track position and volume writes passed through
+the real legacy websocket RPC envelope. The service's own state independently
+confirmed each write. The shared plugin folder prevents co-installation; each
+entry was tested in a fresh container.
+
+Local headless Chromium loaded the shipped `headset.html` and exact official
+frontends inside their ordinary opaque `allow-scripts` iframe. The relay used
+actual Decky backends and allowed only the private fixture. Track/artist
+rendering, previous/next, play/pause, seek to 90 seconds, volume to 60%, Info
+navigation and close/reopen passed for both entries. Chromium retained its
+normal process isolation and sandboxed-origin restrictions. No external media
+or artwork request was permitted.
+
+Under the shared `/tmp/frame-test.lock`, a removable private Decky 3.3.0 ARM64
+user service loaded each corrected managed install on the real Frame.
+Read-only `sp_list_media_players` returned an empty string successfully for
+both, and `sp_get_media_player` returned their default Spotify bus name.
+These final checks used Decky's direct loopback websocket through SSH; they
+do not claim the deployed Framey HTTP/CEF route. Earlier CEF attempts encountered
+transient reinjection failures. No player controls ran on the real Frame.
+The private units, runtimes and owned Steam image-cache link were removed;
+independent follow-up reads confirmed cleanup and lock release. Battery was
+100 → 100. Existing managed Decky remained failed and the headset panel inactive,
+as found. Power settings were not changed.
+
+Remaining gaps: actual media-app playback/volume on ARM64, local-file album-art
+routing, physical controls and worn VR. Both backends truncate multiword player
+names to their last word. Music Control 1.1.7 automatically probes volume by
+writing 0.01 and restoring it; this was exercised only on the silent fixture.
+
+Validation: full Python suite **1,639 tests, 16 skipped**; focused managed-store
+suite **23/23**; shared frontend action checks; all **116** store digests unchanged.
+The complete fake-Frame audit passed: **61 installed/removed, 55 rejected**
+for documented safeguards; official backends are stubbed in that harness. The
+regression test uses Decky's actual legacy class convention for both entries,
+checks original/absent library-path restoration without changing the parent
+environment, and rejects transferring the patch to a different archive digest.
+
+The pinned HTTP/SSH flow also passed `scripts/e2e.sh test_framey`: **2/2**
+tests in 32.590 seconds. Its receipt assertion covers the replacement shim for
+both Music Control entries; the old assertion caused the first hosted e2e
+failure and left a plugin installed, cascading into the following test.
@@ -0,0 +1,15 @@
+# Superseded: Music Control bound-method fixture
+
+The #335 result was incorrect. Its test instantiated `module.Plugin()`, while
+actual Decky 3.3.0 uses the class `module.Plugin` for this legacy manifest and
+supplies the class as `self`. The published backend's explicit-self calls are
+correct in that runtime. Removing those arguments breaks actual Decky discovery
+and transport.
+
+The follow-up [real runtime checks](framey-mpris-runtime-2026-10-26.md) reproduce
+the regression, remove the incorrect transformation and replace the test with
+the actual legacy calling convention. They also identify and repair a separate
+Frame OS system-command library-path failure. Existing copies installed with
+`music-control-bound-methods` must be removed/reinstalled or explicitly updated.
+Both official Music Control entries remain partial; the follow-up describes
+exactly what passed and what remains unverified.
@@ -0,0 +1,46 @@
+# v0.4.47 candidate gate, 26 October 2026
+
+This candidate contains Game Theme Music's locally rendered Settings view
+(#330) and a digest-scoped Python import module for the official Shotty 0.1.0
+archive (#331). The 116-plugin table is **4 works / 52 partial / 49 broken /
+11 N/A**. Game Theme Music is partial for its local Settings view; its
+backend, network and playback were denied in that audit. Shotty is partial
+for its local frontend and synthetic screenshot copy in isolated Python;
+actual ARM64 Decky startup and live screenshot rescue are unverified.
+
+## Locked Frame candidate smoke
+
+At 14:18 UTC, source commit `1f5b37a7552880b40868617ef22398fcd39b3f5d`
+ran `scripts/frame-smoke.sh` on the real Frame. The script acquired its unique
+owner in `/tmp/frame-test.lock` before reading status. Locked preflight found
+SteamVR activity **3** (standby), proximity raw **3.0625**, and battery
+**100%** on Frame OS 0.5.6 build `20261022.6153909`. Owned ARM64 and
+Windows/Proton test titles installed, launched, and were removed. The
+optional x86_64 title installed and was removed; launch was **skipped**
+because Steam Linux Runtime 4 was absent. The result was **12 passed /
+1 skipped / 0 failed**. Cleanup passed and the command exited 0, including
+release of its owned lock. Detailed results stay private in
+`tests/smoke/results/2026-10-26T141812Z-20261022.6153909.json`.
+
+No wearer was confirmed. The interactive worn-check script was not run;
+the smoke did not wake the headset or test the Framey panel. Game Theme
+Music playback, Shotty live rescue, wearer-visible official-plugin UI,
+physical controllers, keyboard and optical comfort remain unverified.
+The hourly shared-lock worn check remains enabled.
+
+## Publication boundary
+
+At 14:23 UTC, the exact version-bumped candidate commit
+`e07fa155928d1609304e317d15e0c4ef4a977579` ran the same token-locked
+`scripts/frame-smoke.sh`.
+Preflight again found activity **3** (standby), proximity raw **3.0625** and
+battery **100%**. The result was **12 passed / 1 optional x86 launch skipped /
+0 failed**. Owned cleanup passed and the command exited 0 after releasing its
+lock. Its private result is
+`tests/smoke/results/2026-10-26T142321Z-20261022.6153909.json`.
+This paragraph is the only change after that smoke.
+
+PR #331's combined-head CI, green release-PR and post-merge CI, tagged
+installer builds, all ten installer digests with `SHA256SUMS`, independent
+package checks, publisher dry run, and public `update.json` readback remain
+required.
@@ -0,0 +1,62 @@
+# v0.4.47 tagged release, 26 October 2026
+
+The release PR [#332](https://github.com/saphid/frame-control/pull/332)
+passed its exact-head checks and all four installer preview jobs, including
+Intel Mac. It merged at main commit
+`035c59ee1134aa158c3cd818e8dd35f822cbfc4b`. The seven-job post-merge
+main [checks run](https://github.com/saphid/frame-control/actions/runs/40342375912)
+passed, including iOS and fake-Frame e2e. Annotated tag `v0.4.47`
+dereferences to that main commit. The tagged
+[release workflow](https://github.com/saphid/frame-control/actions/runs/40344549980)
+passed its draft, Linux, Windows, Apple Silicon Mac, Intel Mac, and checksum
+jobs.
+
+## Frame and package gates
+
+The [candidate evidence](v0447-candidate-2026-10-26.md) records a locked
+exact-version real Frame smoke: **12 passed / one optional x86 launch skipped /
+zero failed**, with owned cleanup and lock release. The x86 launch needs Steam
+Linux Runtime 4, which was absent. The headset was in standby and no wearer was
+confirmed, so the interactive worn-check script was not run. No panel or
+physical-controller claim follows from the smoke.
+
+The draft contained exactly ten installers and `SHA256SUMS`, each with a
+GitHub SHA-256 digest. An independently downloaded `SHA256SUMS` matched a
+fresh ten-line list regenerated from GitHub asset metadata byte for byte;
+its SHA-256 was
+`ab1a95e5d51333dfc962723a21b044da935e07c24cedbd430222dc482d725508`.
+`scripts/publish-release.sh --dry-run v0.4.47` passed the tag, installer,
+checksum, and update-manifest gates after release notes were attached.
+
+Independent downloads passed these checks:
+
+| Package | Result |
+| --- | --- |
+| Linux x86_64 AppImage | SHA-256 `e7c83cf9177d11de724caf40a829b5c97ac3d2f0a04df24bcb1e4107310f1f49`; launched under isolated Xvfb on lxso1, bundled server returned HTTP 200 with `FrameControl/1`, then stopped. |
+| Mac arm64 ZIP | SHA-256 `10092131b7fd43950e0dc436a51da1e41b42803d532a89363e2b71880b92b212`; ZIP CRC valid, bundle version 0.4.47, main Mach-O CPU arm64. |
+| Mac x64 ZIP | SHA-256 `24531b088e85d2e7e9174289b0b9532c78fb85e7a29775c24369c00bc61e5408`; ZIP CRC valid, bundle version 0.4.47, main Mach-O CPU x86_64. |
+| Windows x64 Setup | SHA-256 `a697a7e9042eb0d9545d99639e39ff53fbf993491c0728f59f038f21175b77cc`; PE/Nullsoft installer format. Tagged Windows CI checked packaged files and Python libraries. |
+| Linux arm64 DEB | SHA-256 `e0be95ffc714e71487889a7da4886676b75c993f86bb674d180dc3ea4cd4b3b6`; package version 0.4.47 and architecture arm64. |
+
+The tagged Mac and Windows packages were not launched on physical machines
+in this release gate. Earlier physical Intel Mac acceptance covers older
+bytes.
+
+## Publication and limits
+
+`scripts/publish-release.sh v0.4.47` published
+[v0.4.47](https://github.com/saphid/frame-control/releases/tag/v0.4.47) at
+15:07:28 UTC. GitHub's latest-release API returned that tag with
+`draft=false`, `prerelease=false`, ten installers, `SHA256SUMS`, and
+`update.json`. A fresh public latest-download of `update.json` reported
+version 0.4.47, the stable release page, ten hashed installers, and the
+worn-VR limit in its notes.
+
+The exact-version official catalog is **4 works / 52 partial / 49 broken /
+11 N/A** out of 116. Game Theme Music has a local Settings view; its music
+playback and live backend are unverified. Shotty's backend imported and
+copied a synthetic screenshot in isolated Python; live ARM64 Decky loading
+and screenshot rescue are unverified. The real Frame was in standby;
+official-plugin wearer visibility, physical controller usability, VR
+keyboard, and optical comfort remain unverified. The hourly shared-lock
+worn check remains enabled.
@@ -0,0 +1,50 @@
+# v0.4.48 candidate gate, 26 October 2026
+
+This candidate contains the exact-archive Music Control 1.1.7 Python call
+repair from [#335](https://github.com/saphid/frame-control/pull/335). All
+**11** hosted checks passed on its head
+`ff465accc508e40158c590eebffd4aec924503ac`, including fake-Frame e2e,
+Windows, macOS, Linux, ARM64 host libraries and iOS. The catalog remains
+**4 works / 52 partial / 49 broken / 11 N/A** out of 116. Music Control is
+partial: an isolated D-Bus command fixture proves dispatch after the repair;
+a live player and actual Decky ARM64 backend were not tested.
+
+## Locked real Frame smoke
+
+At 15:36 UTC, source head `ff465accc508e40158c590eebffd4aec924503ac`
+ran `scripts/frame-smoke.sh` on SteamOS 0.5.6 build `20261022.6153909`.
+The runner acquired its own unique `/tmp/frame-test.lock` owner before
+reading device status. Preflight found SteamVR activity **3** (standby),
+proximity raw **3.0625**, and battery **99%**. Owned ARM64 and Windows/Proton
+titles installed, launched and were removed. The optional x86_64 title
+installed and was removed; its launch was **skipped** because Steam Linux
+Runtime 4 was absent. The result was **12 passed / 1 skipped / 0 failed**.
+Owned cleanup passed and the command exited 0, including lock release.
+A separate fresh locked read found battery **100%**, activity **3** and no
+`fc_smoke_*` title directories; it released only its own lock. The private
+runner result is `2026-10-26T153655Z-20261022.6153909.json`.
+
+At 15:42 UTC, exact version-bumped commit
+`a31b4a426cf4204e45fe218e204a26328aa0b1c9` ran the same token-locked
+smoke. Preflight found activity **3**, proximity raw **3.0625** and battery
+**100%**. It passed **12 / 1 optional x86 launch skipped / 0 failed**.
+Cleanup passed and the command exited 0 after releasing its lock. The
+private runner result is `2026-10-26T154258Z-20261022.6153909.json`.
+A fresh separately locked read found battery **100%**, activity **3** and
+no test-title directories, then released that lock. Merging current main
+into the candidate created commit
+`a8bf01d660cd9abb8d2a724626a06a0e7e6c2a6a`; its tree before this
+evidence document was byte-identical to the tested version-bumped commit
+(`d45c2465ddfcf877fe2c8bc30420d4719da5035e`).
+
+No wearer was confirmed. Neither smoke woke the headset or ran the
+interactive worn-check script. Official-plugin wearer visibility, physical
+controllers, VR keyboard and optical comfort remain unverified. The hourly
+shared-lock worn check remains enabled.
+
+## Remaining publication gates
+
+The release PR's exact-head CI and installer previews, post-merge main CI,
+tagged builds with all ten installers and `SHA256SUMS`, independent package
+checks, publisher dry run and public `update.json` readback are required
+before publication.
@@ -29,7 +29,7 @@ A [Free Loader duplicate-entry follow-up](evidence/framey-free-loader-duplicates

 The current published digests are pinned in the JSON; if the store changed, retain/download those exact archives for reproduction. Audit downloads permit larger ZIPs for inspection; production installer limits remain 50 MiB ZIP / 150 MiB unpacked / 30 MiB per member.

-After the VR job released the shared lock, this audit acquired it and used a private temporary Decky 3.3.0 ARM64 user service. Read-only ProtonDB `get_setting` and Steam Status `get_settings` calls succeeded through the live Steam CEF websocket. The service and private base were removed and the lock released; normal managed services stayed inactive, battery was 100 → 99, and no power setting was changed. [Redacted results](evidence/framey-official-backend-2026-10-25.json) record exactly what ran. A [2026-10-26 follow-up](evidence/framey-events-backend-2026-10-26.json) verified default Notebook drawing/save/reopen across a real backend restart and Simple Timer start/cancel, countdown/completion events, a visible toast and persisted recents/subtle mode. Only private test settings were written. Simple Timer remains partial because its own expired-timer startup raises a missing `timer_task` error; sound/suspend are unsupported. A [local audio follow-up](evidence/framey-audio-backends-2026-10-26.md) exercised Volume Mixer, Volume Boost and Mixer through real Decky 3.3.0 amd64 backends on private silent virtual audio targets. Sliders, numeric volume entry, independent server readbacks and Mixer filter persistence across a runtime restart passed. An [ARM64 audio follow-up](evidence/framey-audio-arm64-2026-10-26.md) verified the unmodified official backends in actual Decky 3.3.0 on the Frame user audio session. Volume Mixer and Mixer now qualify as works for per-app volume: Chromium controls changed only a named silent stream, with independent Pulse readbacks. That run left Volume Boost partial because sink writes were denied. A [Volume Boost follow-up](evidence/framey-volume-boost-arm64-2026-10-26.md) now verifies linked/separate channel controls, re-link and reopen through the actual ARM64 backend. Independent Pulse reads confirmed 125%/150% gain writes while the default sink stayed muted; exact original volume/mute was restored. Volume Boost qualifies as works for sink controls. Audible output, Bluetooth playback and worn VR remain unverified. A [running-context follow-up](evidence/framey-running-context-2026-10-26.md) supplies detached running-app/main-app reads and relays actual Steam lifetime callbacks while a panel is open. Real Frame checks verified an empty list, registration/cleanup and the exact Discord Status ARM64 backend reporting no IPC connection. Nonempty games and transitions were synthetic fixtures; real game events, Discord activity and worn VR remain unverified. Discord Status moves to partial; no new works claim is made. A [library context follow-up](evidence/framey-library-context-2026-10-26.md) read 1,106 app overviews, 895 game IDs and the current public Steam ID from real Frame CEF under the shared lock. Local Chromium replayed this detached snapshot to render Deck Settings game selection, Steamback's empty save panel and PlayTime statistics/settings. Steamback and PlayTime used actual Decky 3.3.0 amd64 backends in an isolated container; their ARM64 backends and automatic game hooks remain unverified. Shotty's frontend now starts, but its published backend fails on missing `click`; it stays broken. A [chunked frontend follow-up](evidence/framey-deck-shelves-browser-2026-10-26.md) loaded Deck Shelves 2.0.0 through a managed JavaScript module route and rendered its settings in an opaque local Chromium panel. Its backend was denied; Steam Home shelves and worn VR remain unverified. A [local module lookup follow-up](evidence/framey-module-lookup-2026-10-26.md) supplies a finite registry of Framey-local controls and CSS. TabMaster QAM/docs now render; Steam library-tab editing remains unavailable. That pass exposed Junk-Store executable-script extraction failures; the follow-up below repairs them. SteamGridDB still requires Steam context-menu internals and DeckSP still fails its published MobX fallback. That pass tested TabMaster/Junk-Store in actual isolated amd64 Decky, without ARM64 or worn-VR coverage. A [script entrypoint follow-up](evidence/framey-script-entrypoints-2026-10-26.md) grants owner execute to shebang scripts and ZIP-declared executables without copying archive privilege/write bits. Junk-Store now passes static menu/backend calls in actual Decky 3.3.0 ARM64 and local Chromium Games/Epic navigation, back and reopen. It moves to partial: About still crashes on missing installed-app metadata, Legendary is absent, and login/game operations remain unverified. Existing installations require update/reinstall to repair permissions. A [read-only installed-metadata follow-up](evidence/framey-installed-context-2026-10-26.md) now repairs the About crash. The library snapshot copies only Steam-supplied installed booleans into detached metadata, preserving unknown values as undefined. Junk-Store About/Dependencies, Back and reopen render in local Chromium with actual Frame library data and the official ARM64 backend. It remains partial: dependency/login/game operations, RSS, the optional Line truncated
+After the VR job released the shared lock, this audit acquired it and used a private temporary Decky 3.3.0 ARM64 user service. Read-only ProtonDB `get_setting` and Steam Status `get_settings` calls succeeded through the live Steam CEF websocket. The service and private base were removed and the lock released; normal managed services stayed inactive, battery was 100 → 99, and no power setting was changed. [Redacted results](evidence/framey-official-backend-2026-10-25.json) record exactly what ran. A [2026-10-26 follow-up](evidence/framey-events-backend-2026-10-26.json) verified default Notebook drawing/save/reopen across a real backend restart and Simple Timer start/cancel, countdown/completion events, a visible toast and persisted recents/subtle mode. Only private test settings were written. Simple Timer remains partial because its own expired-timer startup raises a missing `timer_task` error; sound/suspend are unsupported. A [local audio follow-up](evidence/framey-audio-backends-2026-10-26.md) exercised Volume Mixer, Volume Boost and Mixer through real Decky 3.3.0 amd64 backends on private silent virtual audio targets. Sliders, numeric volume entry, independent server readbacks and Mixer filter persistence across a runtime restart passed. An [ARM64 audio follow-up](evidence/framey-audio-arm64-2026-10-26.md) verified the unmodified official backends in actual Decky 3.3.0 on the Frame user audio session. Volume Mixer and Mixer now qualify as works for per-app volume: Chromium controls changed only a named silent stream, with independent Pulse readbacks. That run left Volume Boost partial because sink writes were denied. A [Volume Boost follow-up](evidence/framey-volume-boost-arm64-2026-10-26.md) now verifies linked/separate channel controls, re-link and reopen through the actual ARM64 backend. Independent Pulse reads confirmed 125%/150% gain writes while the default sink stayed muted; exact original volume/mute was restored. Volume Boost qualifies as works for sink controls. Audible output, Bluetooth playback and worn VR remain unverified. A [running-context follow-up](evidence/framey-running-context-2026-10-26.md) supplies detached running-app/main-app reads and relays actual Steam lifetime callbacks while a panel is open. Real Frame checks verified an empty list, registration/cleanup and the exact Discord Status ARM64 backend reporting no IPC connection. Nonempty games and transitions were synthetic fixtures; real game events, Discord activity and worn VR remain unverified. Discord Status moves to partial; no new works claim is made. A [library context follow-up](evidence/framey-library-context-2026-10-26.md) read 1,106 app overviews, 895 game IDs and the current public Steam ID from real Frame CEF under the shared lock. Local Chromium replayed this detached snapshot to render Deck Settings game selection, Steamback's empty save panel and PlayTime statistics/settings. Steamback and PlayTime used actual Decky 3.3.0 amd64 backends in an isolated container; their ARM64 backends and automatic game hooks remain unverified. Shotty's frontend now starts, but its published backend fails on missing `click`; it stays broken. A [chunked frontend follow-up](evidence/framey-deck-shelves-browser-2026-10-26.md) loaded Deck Shelves 2.0.0 through a managed JavaScript module route and rendered its settings in an opaque local Chromium panel. Its backend was denied; Steam Home shelves and worn VR remain unverified. A [local module lookup follow-up](evidence/framey-module-lookup-2026-10-26.md) supplies a finite registry of Framey-local controls and CSS. TabMaster QAM/docs now render; Steam library-tab editing remains unavailable. That pass exposed Junk-Store executable-script extraction failures; the follow-up below repairs them. SteamGridDB still requires Steam context-menu internals and DeckSP still fails its published MobX fallback. That pass tested TabMaster/Junk-Store in actual isolated amd64 Decky, without ARM64 or worn-VR coverage. A [script entrypoint follow-up](evidence/framey-script-entrypoints-2026-10-26.md) grants owner execute to shebang scripts and ZIP-declared executables without copying archive privilege/write bits. Junk-Store now passes static menu/backend calls in actual Decky 3.3.0 ARM64 and local Chromium Games/Epic navigation, back and reopen. It moves to partial: About still crashes on missing installed-app metadata, Legendary is absent, and login/game operations remain unverified. Existing installations require update/reinstall to repair permissions. A [read-only installed-metadata follow-up](evidence/framey-installed-context-2026-10-26.md) now repairs the About crash. The library snapshot copies only Steam-supplied installed booleans into detached metadata, preserving unknown values as undefined. Junk-Store About/Dependencies, Back and reopen render in local Chromium with actual Frame library data and the official ARM64 backend. It remains partial: dependency/login/game operations, RSS, the optional Line truncated

 ## Every current plugin

@@ -41,7 +41,7 @@ The API column shows manifest / actual bundled frontend API. Many manifests say
 | 7: CSS Loader 2.1.3 | legacy / legacy | partial | Panel initialization succeeds; CSS themes patch Steam UI and cannot theme the isolated VR shell. | static archive, local browser, fake-Frame |
 | 10: vibrantDeck 2.0.1 | legacy / legacy | N/A | Not supported on Frame: Changes X11 gamescope color properties, not the Frame SteamVR compositor. | static archive, local browser, fake-Frame |
 | 11: Fantastic 0.5.1 | legacy / legacy | N/A | Not supported on Frame: Targets Steam Deck fan hardware; no Frame fan-control mapping is provided. | static archive, local browser, fake-Frame |
-| 12: MusicControl 1.1.6 | legacy / legacy | partial | Legacy media controls initialize; player discovery and playback are unverified. | static archive, local browser, fake-Frame |
+| 12: MusicControl 1.1.6 | legacy / legacy | partial | Managed reinstall preserves Decky’s legacy calling convention and repairs the Frame OS shell library-path failure. Chromium transport/seek/volume against a silent MPRIS fixture and real ARM64 empty-player discovery pass; actual Frame media playback, album art and worn VR remain unverified. Reinstall existing copies to apply. | static archive, local browser, fake-Frame, isolated Decky 3.3.0 + MPRIS fixture, real Frame SSH |
 | 13: Pause Games 1.0.3 | 1 / 2 | partial | Settings and running-game list initialize in local Chromium with an explicit synthetic game; live Frame empty-list reads and lifetime registration/cleanup passed. Process pause/resume, automatic pausing and suspend integration remain unverified/unsupported; backend writes were denied. | static archive, local browser, fake-Frame |
 | 14: ProtonDB Badges 1.3.4 | 2 / 2 | partial | Settings render locally and read-only get_setting RPC returned the default through real Decky 3.3.0 on ARM64 Frame. Steam game-page badges have no patch target; live writes and VR controls unverified. | static archive, local browser, fake-Frame, real Frame SSH |
 | 16: Audio Loader 1.6.1 | legacy / legacy | broken | This plugin needs root and is not supported by the Frame user service. Steam UI sound lookup is present as explicitly unsupported; the frontend still requires Steam m_GamepadUIAudioStore.m_AudioPlaybackManager, which is unavailable in the isolated panel. | static archive, local browser, fake-Frame |
@@ -119,7 +119,7 @@ The API column shows manifest / actual bundled frontend API. Many manifests say
 | 108: HueSync 3.8.0 | 1 / 2 | N/A | Not supported on Frame: Targets handheld RGB/LED controllers (AYANEO/Ally/MSI), not Frame hardware. | static archive, local browser, fake-Frame |
 | 109: MuraDeck 2.1.4 | 1 / 2 | N/A | Not supported on Frame: Calibration is specifically for defective Samsung Steam Deck OLED panels, not Frame displays. | static archive, local browser, fake-Frame |
 | 110: Dimmer Deck 0.0.4 | 1 / 2 | N/A | Not supported on Frame: Changes gamescope/X11 dimming properties; no mapping to Frame VR display brightness exists. | static archive, local browser, fake-Frame |
-| 111: Music Control 1.1.7 | legacy / legacy | partial | Panel initializer succeeds with backend/network blocked; actual controls and backend remain unverified. | static archive, local browser, fake-Frame |
+| 111: Music Control 1.1.7 | legacy / legacy | partial | Managed reinstall preserves Decky’s legacy calling convention and repairs the Frame OS shell library-path failure. Chromium transport/seek/volume against a silent MPRIS fixture and real ARM64 empty-player discovery pass; actual Frame media playback, album art and worn VR remain unverified. Reinstall existing copies to apply. | static archive, local browser, fake-Frame, isolated Python backend, isolated Decky 3.3.0 + MPRIS fixture, real Frame SSH |
 | 112: Better Keyboard 0.3.4 | 1 / 2 | broken | This plugin needs root and is not supported by the Frame user service. Frontend audit failed: window.SteamClient.UI.GetUIMode is not a function. | static archive, local browser, fake-Frame |
 | 113: Decky LSFG-VK 0.12.2 | 1 / 2 | partial | Initializer succeeds; runtime LSFG/Windows DLL downloads and Vulkan integration are not ARM64-validated. | static archive, local browser, fake-Frame |
 | 114: Network Sentinel 1.0.4 | 1 / 2 | broken | This plugin needs root and is not supported by the Frame user service. | static archive, local browser, fake-Frame |
@@ -164,7 +164,7 @@ DFL includes exports imported through decky-frontend-lib / @decky/ui. Steam stor
 | CSS Loader | none detected | ButtonItem, ColorPickerModal, ConfirmModal, DialogButton, DialogCheckbox, Dropdown, DropdownItem, Focusable, ModalRoot, Navigation, PanelSection, PanelSectionRow, ScrollPanelGroup, SidebarNavigation, SliderField, Tabs, TextField, Toggle, ToggleField, classMap, definePlugin, findModuleChild, gamepadDialogClasses, gamepadSliderClasses, getGamepadNavigationTrees, replacePatch, showModal, staticClasses | routerHook, toaster, window.SP_REACT, local/Steam routes, toasts, QAM/global tabs, Steam page patches/module lookup | Python | No specific hardware requirement detected statically; runtime requirements unverified. |
 | vibrantDeck | none detected | PanelSection, PanelSectionRow, Router, SliderField, ToggleField, definePlugin, staticClasses | Router, window.SP_REACT | Python | Changes X11 gamescope color properties, not the Frame SteamVR compositor. |
 | Fantastic | none detected | Field, Navigation, PanelSection, PanelSectionRow, ToggleField, definePlugin, staticClasses | window.SP_REACT, QAM/global tabs | Python + native payload; x86_64 | Targets Steam Deck fan hardware; no Frame fan-control mapping is provided. |
-| MusicControl | none detected | ButtonItem, DialogButton, Focusable, Menu, MenuItem, PanelSection, PanelSectionRow, Router, SidebarNavigation, SliderField, SteamSpinner, definePlugin, showContextMenu, staticClasses | Router, routerHook, window.SP_REACT, local/Steam routes | Python | No specific hardware requirement detected statically; runtime requirements unverified. |
+| MusicControl | none detected | ButtonItem, DialogButton, Focusable, Menu, MenuItem, PanelSection, PanelSectionRow, Router, SidebarNavigation, SliderField, SteamSpinner, definePlugin, showContextMenu, staticClasses | Router, routerHook, window.SP_REACT, local/Steam routes | Python | User-session MPRIS player and dbus-send required; no Deck-specific hardware. |
 | Pause Games | Apps, Apps.RegisterForGameActionTaskChange, GameSessions.RegisterForAppLifetimeNotifications, System.RegisterForOnResumeFromSuspend, System.RegisterForOnSuspendRequest, System.UI.RegisterForFocusChangeEvents, System.UI.RegisterForSystemKeyEvents | Button, Field, Focusable, Marquee, PanelSection, PanelSectionRow, Router, Toggle, ToggleField, beforePatch, sleep | Router, window.SP_REACT, Steam page patches/module lookup, Steam stores | Python | No specific hardware requirement detected statically; runtime requirements unverified. |
 | ProtonDB Badges | none detected | ButtonItem, ConfirmModal, DialogButton, DropdownItem, Field, Focusable, Navigation, PanelSection, PanelSectionRow, ScrollPanel, ScrollPanelGroup, ToggleField, afterPatch, appDetailsClasses, appDetailsHeaderClasses, createReactTreePatcher, definePlugin, findInReactTree, findModuleExport, showModal, staticClasses, useParams | SteamUIStore, appStore, routerHook, toaster, local/Steam routes, toasts, QAM/global tabs, Steam page patches/module lookup, Steam stores | Python | No specific hardware requirement detected statically; runtime requirements unverified. |
 | Audio Loader | GameSessions.RegisterForAppLifetimeNotifications, d.ts | ButtonItem, DialogButton, Dropdown, DropdownItem, Focusable, Navigation, PanelSection, PanelSectionRow, Router, SliderField, Tabs, TextField, ToggleField, afterPatch, beforePatch, definePlugin, findModuleChild, gamepadDialogClasses, staticClasses | Router, routerHook, toaster, window.SP_REACT, local/Steam routes, toasts, QAM/global tabs, Steam page patches/module lookup, Steam stores | Python | No specific hardware requirement detected statically; runtime requirements unverified. |
@@ -242,7 +242,7 @@ DFL includes exports imported through decky-frontend-lib / @decky/ui. Steam stor
 | HueSync | Settings.GetCurrentLanguage, System.GetSystemInfo, System.RegisterForBatteryStateChanges, System.RegisterForOnResumeFromSuspend, System.RegisterForOnSuspendRequest, User.RegisterForPrepareForSystemSuspendProgress, User.RegisterForResumeSuspendedGamesProgress | DialogButton, DropdownItem, Field, Focusable, Marquee, ModalRoot, PanelSection, PanelSectionRow, Router, SliderField, TextField, ToggleField, definePlugin, findModuleChild, gamepadSliderClasses, showModal, staticClasses | Router, toaster, window.SP_REACT, toasts, Steam page patches/module lookup, Steam stores | Python + native payload; x86_64 | Targets handheld RGB/LED controllers (AYANEO/Ally/MSI), not Frame hardware. |
 | MuraDeck | System.Display.RegisterForBrightnessChanges | ButtonItem, ConfirmModal, Field, Focusable, Navigation, PanelSection, PanelSectionRow, SideMenu, SidebarNavigation, SliderField, ToggleField, quickAccessControlsClasses, showModal | SteamUIStore, routerHook, window.SP_REACT, local/Steam routes, Steam stores | Python | Calibration is specifically for defective Samsung Steam Deck OLED panels, not Frame displays. |
 | Dimmer Deck | Settings.GetCurrentLanguage, System.Display.RegisterForBrightnessChanges, System.Display.SetBrightness | PanelSection, PanelSectionRow, SliderField, ToggleField, staticClasses | toaster, window.SP_REACT, toasts, Steam stores | Python | Changes gamescope/X11 dimming properties; no mapping to Frame VR display brightness exists. |
-| Music Control | none detected | ButtonItem, DialogButton, Focusable, PanelSection, PanelSectionRow, Router, SidebarNavigation, SliderField, SteamSpinner, definePlugin, staticClasses | Router, routerHook, window.SP_REACT, local/Steam routes | Python | No specific hardware requirement detected statically; runtime requirements unverified. |
+| Music Control | none detected | ButtonItem, DialogButton, Focusable, PanelSection, PanelSectionRow, Router, SidebarNavigation, SliderField, SteamSpinner, definePlugin, staticClasses | Router, routerHook, window.SP_REACT, local/Steam routes | Python | User-session MPRIS player and dbus-send required; no Deck-specific hardware. |
 | Better Keyboard | Settings.GetCurrentLanguage, UI.GetUIMode, UI.RegisterForUIModeChanged | ButtonItem, EUIMode, PanelSection, PanelSectionRow, ToggleField, staticClasses | SteamUIStore, window.SP_REACT, Steam stores | Python | /dev/input |
 | Decky LSFG-VK | none detected | ButtonItem, ConfirmModal, DialogBody, DialogButton, DialogControlsSection, DialogControlsSectionHeader, DialogHeader, Dropdown, Field, Focusable, ModalRoot, PanelSection, PanelSectionRow, Router, SliderField, Spinner, TextField, Toggle, ToggleField, showModal, staticClasses | Router, toaster, window.SP_REACT, toasts | Python | flatpak; x86_64 |
 | Network Sentinel | none detected | ButtonItem, Navigation, PanelSection, PanelSectionRow, SliderField, ToggleField, staticClasses | toaster, window.SP_REACT, toasts | Python | No specific hardware requirement detected statically; runtime requirements unverified. |
@@ -288,7 +288,7 @@ All published Linux native payloads in this snapshot are x86_64; no published aa
 | Fantastic | bin/backend | Fan backend/driver is Deck-specific; an ARM64 rebuild would not provide compatible Frame hardware. |
 | PowerTools | bin/libryzenadj.so, bin/ryzenadj, bin/backend | RyzenAdj and AMD power backend cannot control an ARM64 Frame SoC. |
 | Memory Deck | bin/libscanmem.so.1.0.0 | libscanmem must be rebuilt for aarch64 and validated against target process architecture; memory writes were not tested. |
-| Emuchievements | bin/hash | The bin/hash helper needs an ARM64 build and cross-platform hashing tests; no ARM64 artifact is published. |
+| Emuchievements | bin/hash | A source-matched ARM64 bin/hash helper matched the official x86_64 helper on one synthetic ROM on the real Frame (docs/evidence/framey-emuchievements-arm-2026-10-26.md). The official ZIP still bundles x86_64 bytes and remains blocked; format coverage, packaging, plugin backend/UI, login and worn VR are unverified. |
 | MoonDeck | python/externals/yarl/_quoting_c.cpython-313-x86_64-linux-gnu.so, python/externals/aiohttp/_http_parser.cpython-313-x86_64-linux-gnu.so, python/externals/aiohttp/_websocket/reader_c.cpython-313-x86_64-linux-gnu.so, python/externals/aiohttp/_websocket/mask.cpython-313-x86_64-linux-gnu.so, python/externals/aiohttp/_http_writer.cpython-313-x86_64-linux-gnu.so, … 26 total; full list in JSON | Rebuild vendored CPython 3.13 extension wheels for the headset Python ABI and ARM64; buddy/helper dependencies also need ports. |
 | Controller Tools | bin/backend | Native backend needs an ARM64 build and controller/HID dependencies; its direct websocket also bypasses the Framey bridge. |
 | DeckMTP | bin/umtprd | umtprd needs ARM64 libusb/MTP dependencies and USB gadget permissions; root user-service blocker remains. |
@@ -80,7 +80,12 @@ def render(data):
        'Earlier focused checks cover [ProtonDB](evidence/framey-browser-2026-10-25.md), '
        '[Steam Status/cache](evidence/framey-cache-browser-2026-10-25.md), '
        '[Storage Cleaner](evidence/framey-api-v1-browser-2026-10-25.md), and '
-        '[legacy MusicControl](evidence/framey-legacy-2026-10-25.md).', '',
+        '[legacy MusicControl](evidence/framey-legacy-2026-10-25.md). '
+        'A [shared Music Control runtime follow-up](evidence/framey-mpris-runtime-2026-10-26.md) corrects the earlier bound-method fixture error: actual Decky uses the legacy class calling convention, so explicit-self calls must stay. '
+        'Exact managed installs also restore the system library path for D-Bus subprocesses, repairing a real Frame OS libtinfo/glibc failure in MusicControl 1.1.6. '
+        'Both official entries pass transport/seek/volume, Info and reopen in local Chromium with actual Decky 3.3.0 amd64 and a private silent MPRIS service. '
+        'Actual ARM64 Decky on the Frame passes read-only empty-player discovery for both. Existing copies need remove/reinstall or an explicit managed update. '
+        'Actual media playback on ARM64, artwork and worn VR remain unverified; both stay partial.', '',
        '## Every current plugin', '',
        'The API column shows manifest / actual bundled frontend API. Many manifests say v1 while their bundle connects API2. '
        'Missing manifest API is labelled legacy; an unrecognized bundle is unknown. Globals and hardware are static signals, not exhaustive dependencies.', '',
@@ -196,6 +196,9 @@ u=h/'.config/systemd/user/frame-control-decky.service'; u.parent.mkdir(parents=T
                    self.assertEqual(ssh(f'test -f {installed}/py_modules/click.py && echo yes').strip(), 'yes')
                    receipt = json.loads(ssh(f'cat {installed}/.frame-control-store.json'))
                    self.assertEqual(receipt['compatShims'], ['shotty-click-app-dir'])
+                if plugin['id'] in (12, 111):
+                    receipt = json.loads(ssh(f'cat {installed}/.frame-control-store.json'))
+                    self.assertEqual(receipt['compatShims'], ['music-control-system-dbus-env'])
                job = finished(ok('POST', '/api/decky/plugin',
                                  {'action':'remove','id':plugin['id'],'acknowledged':True}))
                self.assertFalse(job.get('error'), job)
@@ -0,0 +1,21 @@
+# Silent MPRIS runtime fixture
+
+`player.py` implements the synthetic target used by the
+[Music Control runtime evidence](../../../docs/evidence/framey-mpris-runtime-2026-10-26.md).
+It produces no audio. It requires system Python `dbus`, `gi` and GLib, and writes
+its independent control state to `/tmp/mpris-state.json`.
+
+Run it only in a disposable container with **no network, devices, host home,
+audio or D-Bus mounts**. Create a private session bus listening at
+`/run/user/<container UID>/bus`: both official backends hard-code that path.
+Set `DBUS_SESSION_BUS_ADDRESS` to that private socket for the fixture. Use a
+private home including `.local/share/Steam/steamui/images`, because the upstream
+plugins create an album-art symlink on startup. Never run these plugins against
+a real user's player during this test: ID111 probes volume automatically.
+
+Install each pinned archive separately through the managed transaction, then
+start the published Decky 3.3.0 loader with private `UNPRIVILEGED_PATH` and
+`PRIVILEGED_PATH`. Do not instantiate the legacy Plugin class: invoke methods
+through Decky's `loader/call_legacy_plugin_method` route with its keyword object.
+The two official entries share the `MusicControl` folder, so cannot coexist.
+This fixture is opt-in and is not imported by ordinary unit tests.
@@ -0,0 +1,53 @@
+"""Silent MPRIS target. Run only inside the private network/device-isolated container."""
+import json
+from pathlib import Path
+import dbus, dbus.service, dbus.mainloop.glib
+from gi.repository import GLib
+P='org.mpris.MediaPlayer2.Player'
+R='org.mpris.MediaPlayer2'
+D='org.freedesktop.DBus.Properties'
+TRACK='/org/framey/TestTrack/1'
+class Player(dbus.service.Object):
+ def __init__(self,bus):
+  self.name=dbus.service.BusName('org.mpris.MediaPlayer2.FrameySilent',bus=bus)
+  super().__init__(bus,'/org/mpris/MediaPlayer2')
+  self.state={'PlaybackStatus':'Paused','Position':12000000,'Volume':0.4,'next':0,'previous':0,'writes':[]}
+  self.save()
+ def save(self):Path('/tmp/mpris-state.json').write_text(json.dumps(self.state))
+ @dbus.service.method(D,in_signature='ss',out_signature='v')
+ def Get(self,interface,prop):
+  if interface==R and prop=='Identity':return dbus.String('Framey Silent Player')
+  if interface==P:
+   if prop=='Metadata':return dbus.Dictionary({'mpris:trackid':dbus.ObjectPath(TRACK),'mpris:length':dbus.Int64(180000000),'xesam:title':dbus.String('Silent Test Track'),'xesam:artist':dbus.Array(['Fixture Artist'],signature='s'),'xesam:album':dbus.String('Framey Test Album')},signature='sv')
+   if prop=='PlaybackStatus':return dbus.String(self.state[prop])
+   if prop=='Position':return dbus.Int64(self.state[prop])
+   if prop=='Volume':return dbus.Double(self.state[prop])
+   if prop=='CanSeek':return dbus.Boolean(True)
+  raise dbus.exceptions.DBusException('Unknown property')
+ @dbus.service.method(D,in_signature='ssv',out_signature='')
+ def Set(self,interface,prop,value):
+  assert interface==P and prop=='Volume' and 0<=value<=1
+  self.state['Volume']=float(value);self.state['writes'].append(['Volume',float(value)]);self.save()
+ @dbus.service.method(P,in_signature='',out_signature='')
+ def PlayPause(self):
+  self.state['PlaybackStatus']='Playing' if self.state['PlaybackStatus']=='Paused' else 'Paused';self.state['writes'].append(['PlayPause']);self.save()
+ @dbus.service.method(P,in_signature='',out_signature='')
+ def Pause(self):
+  self.state['PlaybackStatus']='Paused';self.state['writes'].append(['Pause']);self.save()
+ @dbus.service.method(P,in_signature='',out_signature='')
+ def Next(self):
+  self.state['next']+=1;self.state['writes'].append(['Next']);self.save()
+ @dbus.service.method(P,in_signature='',out_signature='')
+ def Previous(self):
+  self.state['previous']+=1;self.state['writes'].append(['Previous']);self.save()
+ @dbus.service.method(P,in_signature='x',out_signature='')
+ def Seek(self,offset):
+  self.state['Position']+=int(offset);self.state['writes'].append(['Seek',int(offset)]);self.save()
+ @dbus.service.method(P,in_signature='ox',out_signature='')
+ def SetPosition(self,track,pos):
+  assert str(track)==TRACK and 0<=pos<=180000000
+  self.state['Position']=int(pos);self.state['writes'].append(['SetPosition',int(pos)]);self.save()
+dbus.mainloop.glib.DBusGMainLoop(set_as_default=True)
+player=Player(dbus.SessionBus())
+print('READY silent MPRIS fixture',flush=True)
+GLib.MainLoop().run()
@@ -1,14 +1,16 @@
 # Pinned Decky store test archives

 These are unmodified ZIPs downloaded from the official Decky store CDN on
-2026-10-25. Each ZIP includes its upstream `LICENSE`. They are test data, not
-plugins shipped or installed by Frame Control. The fake Frame tests serve them
+2026-10-25, except `111.zip` downloaded on 2026-10-26. Each ZIP includes its
+upstream `LICENSE`. They are test data, not plugins shipped or installed by
+Frame Control. The fake Frame tests serve them
 from a local fixture so CI does not depend on the store being online.

 | File | Official plugin | Version | Store SHA-256 |
 | --- | --- | --- | --- |
 | `7.zip` | CSS Loader | 2.1.3 | `99beaf1374af82408e6d056e0b0147e5fca544e1035fa7ab88419231697bc231` |
 | `12.zip` | MusicControl | 1.1.6 | `246b89fd653c60a735b1cc401d1b0937d5cb969eea9024561661ff741f081d62` |
+| `111.zip` | Music Control | 1.1.7 | `3f56a3f56034b277ea74a2c37cc84133b69e382aa6bcb0b43876776aac737ed9` |
 | `14.zip` | ProtonDB Badges | 1.3.4 | `90a3453ac02709cad64096e7539fd8141fa56f99ae3441fc24a4990dc9684358` |
 | `123.zip` | Steam Status | 1.2.3 | `9053308e04a74f44745b45b9f4f50af3673348d367e7b14bacc5677de707ac4e` |
 | `50.zip` | Storage Cleaner | 1.4.0 | `1afa1a6f129c5d419de0e0bf0f6db8d8e50385a5659179346e996031ea372591` |
@@ -20,6 +22,7 @@ from a local fixture so CI does not depend on the store being online.
 The matching source projects are
 [CSS Loader](https://github.com/suchmememanyskill/SDH-CssLoader),
 [MusicControl](https://github.com/nikurasu/MusicControl),
+[Music Control](https://github.com/martinpl/music-control),
 [ProtonDB Badges](https://github.com/bschelst/protondb-decky),
 [Steam Status](https://github.com/bschelst/steamstatus-decky),
 [Storage Cleaner](https://github.com/mcarlucci/decky-storage-cleaner),
@@ -5,6 +5,8 @@ from pathlib import Path
 ROOT = Path(__file__).parent / 'fixtures/framey-official'
 PLUGINS = (
    {'id': 12, 'name': 'MusicControl', 'version': '1.1.6', 'api_version': 'legacy', 'folder': 'MusicControl', 'sha256': '246b89fd653c60a735b1cc401d1b0937d5cb969eea9024561661ff741f081d62'},
+    {'id': 111, 'name': 'Music Control', 'version': '1.1.7', 'api_version': 'legacy',
+     'folder': 'MusicControl', 'sha256': '3f56a3f56034b277ea74a2c37cc84133b69e382aa6bcb0b43876776aac737ed9'},
    {'id': 14, 'name': 'ProtonDB Badges', 'version': '1.3.4', 'api_version': 2,
     'folder': 'protondb-decky', 'sha256': '90a3453ac02709cad64096e7539fd8141fa56f99ae3441fc24a4990dc9684358'},
    {'id': 123, 'name': 'Steam Status', 'version': '1.2.3', 'api_version': 2,
@@ -214,6 +214,115 @@ assert copied.read_bytes() == b'local screenshot fixture'
        self.assertFalse((shotty / 'py_modules/click.py').exists())
        self.assertNotIn('compatShims', json.loads((shotty / '.frame-control-store.json').read_text()))

+    def test_legacy_music_control_keeps_decky_class_calling_convention(self):
+        from framey_official import PLUGINS, archive as official_archive
+        plugin = next(p for p in PLUGINS if p['id'] == 111)
+        data = official_archive(plugin)
+        self.assertEqual(hashlib.sha256(data).hexdigest(), plugin['sha256'])
+        folder = self.folder.parent / plugin['folder']
+        args = {'plugin_id': plugin['id'], 'folder': plugin['folder'], 'version': plugin['version']}
+        result = self.apply('install', data, **args)
+        self.assertEqual(result.returncode, 0, result.stderr)
+        receipt = json.loads((folder / '.frame-control-store.json').read_text())
+        self.assertEqual(receipt['sha256'], plugin['sha256'])
+        self.assertEqual(receipt['compatShims'], ['music-control-system-dbus-env'])
+        self.assertNotIn('api_version', json.loads((folder / 'plugin.json').read_text()))
+        self.assertIn('self._get_dbus_env(self)', (folder / 'main.py').read_text())
+
+        dbus = Path(self.tmp.name) / 'dbus-send'
+        dbus.write_text('''#!/usr/bin/env python3
+import os, sys
+from pathlib import Path
+args = ' '.join(sys.argv[1:])
+assert os.environ['LD_LIBRARY_PATH'] == os.environ.get('LD_LIBRARY_PATH_ORIG', '')
+with Path(os.environ['MPRIS_CALLS']).open('a') as log: log.write(args + '\\n')
+if 'ListNames' in args:
+    print('method return\\n array [\\n string "org.freedesktop.DBus"\\n string "org.mpris.MediaPlayer2.fixture"\\n ]')
+elif 'string:PlaybackStatus' in args:
+    print('method return\\n variant string "Paused"')
+else:
+    print('method return')
+''')
+        dbus.chmod(0o700)
+        calls = Path(self.tmp.name) / 'mpris-calls'
+        source = '''import asyncio, importlib.util, os, sys, types
+from pathlib import Path
+decky = types.ModuleType('decky_plugin')
+sys.modules['decky_plugin'] = decky
+spec = importlib.util.spec_from_file_location('music_control', Path(sys.argv[1])/'main.py')
+module = importlib.util.module_from_spec(spec)
+spec.loader.exec_module(module)
+# Decky 3.3 uses the class for manifests with no api_version.
+plugin = module.Plugin
+async def check():
+    assert await plugin.sp_list_media_players(plugin) == 'org.mpris.MediaPlayer2.fixture'
+    await plugin.sp_set_media_player(plugin, 'org.mpris.MediaPlayer2.fixture')
+    assert await plugin.sp_get_media_player(plugin) == 'org.mpris.MediaPlayer2.fixture'
+    await plugin.sp_play(plugin)
+    await plugin.sp_pause(plugin)
+    await plugin.sp_next(plugin)
+    await plugin.sp_previous(plugin)
+    await plugin.sp_set_volume(plugin, 0.25)
+    assert await plugin.sp_track_status(plugin) == 'Paused'
+asyncio.run(check())
+assert os.environ['LD_LIBRARY_PATH'] == 'FrameyBundledLibraries'
+'''
+        called = subprocess.run([sys.executable, '-c', source, str(folder)],
+                                capture_output=True, text=True,
+                                env={**self.env, 'MPRIS_CALLS': str(calls), 'LD_LIBRARY_PATH': 'FrameyBundledLibraries',
+                                     'LD_LIBRARY_PATH_ORIG': 'FrameySystemLibraries'}, timeout=10)
+        self.assertEqual(called.returncode, 0, called.stderr)
+        logged = calls.read_text()
+        self.assertIn('org.freedesktop.DBus.ListNames', logged)
+        self.assertIn('org.mpris.MediaPlayer2.Player.PlayPause', logged)
+        self.assertIn('org.mpris.MediaPlayer2.Player.Pause', logged)
+        self.assertIn('string:Volume variant:double:0.25', logged)
+        self.assertIn('org.mpris.MediaPlayer2.fixture', logged)
+        # An explicit same-version update replaces the previously shipped bad shim.
+        main = folder / 'main.py'
+        main.write_text(main.read_text().replace('self._get_dbus_env(self)', 'self._get_dbus_env()'))
+        receipt['compatShims'] = ['music-control-bound-methods']
+        (folder / '.frame-control-store.json').write_text(json.dumps(receipt))
+        result = self.apply('update', data, expected=plugin['sha256'], **args)
+        self.assertEqual(result.returncode, 0, result.stderr)
+        called = subprocess.run([sys.executable, '-c', source, str(folder)],
+                                capture_output=True, text=True,
+                                env={**self.env, 'MPRIS_CALLS': str(calls),
+                                     'LD_LIBRARY_PATH': 'FrameyBundledLibraries'}, timeout=10)
+        self.assertEqual(called.returncode, 0, called.stderr)
+        result = self.apply('remove', expected=plugin['sha256'], **args)
+        self.assertEqual(result.returncode, 0, result.stderr)
+        self.assertFalse(folder.exists())
+
+        older = next(p for p in PLUGINS if p['id'] == 12)
+        old_data = official_archive(older)
+        old_args = {'plugin_id': older['id'], 'folder': older['folder'], 'version': older['version']}
+        result = self.apply('install', old_data, **old_args)
+        self.assertEqual(result.returncode, 0, result.stderr)
+        self.assertEqual(json.loads((folder / '.frame-control-store.json').read_text())['compatShims'],
+                         ['music-control-system-dbus-env'])
+        self.assertNotIn('api_version', json.loads((folder / 'plugin.json').read_text()))
+        self.assertIn('self._get_dbus_env(self)', (folder / 'main.py').read_text())
+        old_env = {**self.env, 'MPRIS_CALLS': str(calls), 'LD_LIBRARY_PATH': 'FrameyBundledLibraries'}
+        old_env.pop('LD_LIBRARY_PATH_ORIG', None)
+        called = subprocess.run([sys.executable, '-c', source, str(folder)],
+                                capture_output=True, text=True, env=old_env, timeout=10)
+        self.assertEqual(called.returncode, 0, called.stderr)
+        result = self.apply('remove', expected=older['sha256'], **old_args)
+        self.assertEqual(result.returncode, 0, result.stderr)
+
+        # A future archive at the same store ID must retain its own source.
+        other = io.BytesIO()
+        untouched = 'class Plugin: pass\n'
+        with zipfile.ZipFile(other, 'w') as bundle:
+            bundle.writestr('MusicControl/plugin.json', json.dumps({'name': 'Music Control', 'flags': []}))
+            bundle.writestr('MusicControl/dist/index.js', 'export default {};' + ' ' * 1200)
+            bundle.writestr('MusicControl/main.py', untouched)
+        result = self.apply('install', other.getvalue(), **args)
+        self.assertEqual(result.returncode, 0, result.stderr)
+        self.assertEqual((folder / 'main.py').read_text(), untouched)
+        self.assertNotIn('compatShims', json.loads((folder / '.frame-control-store.json').read_text()))
+
    def test_installed_script_entrypoints_execute_without_zip_exec_bits(self):
        data, _ = archive(extra=('Example/scripts/start.py',
                                 b'#!/bin/sh\nprintf "Framey script: %s\\n" "$1"\n'))
@@ -228,6 +228,23 @@ try:
                    '        base = os.path.join(os.path.expanduser("~"), ".config")\n'
                    '    return os.path.join(base, app_name)\n',encoding='utf-8')
                compat_shims.append('shotty-click-app-dir')
+            # These legacy backends launch system dbus-send (1.1.6 via /bin/sh).
+            # Decky's PyInstaller LD_LIBRARY_PATH selects bundled libtinfo built
+            # against newer glibc than Frame OS. Restore its saved system path
+            # only in the copied subprocess environment; retain legacy self calls.
+            music_digests={
+                12:'246b89fd653c60a735b1cc401d1b0937d5cb969eea9024561661ff741f081d62',
+                111:'3f56a3f56034b277ea74a2c37cc84133b69e382aa6bcb0b43876776aac737ed9',
+            }
+            if digest==music_digests.get(int(plugin_id)) and folder=='MusicControl':
+                main=unpacked/'main.py'
+                source=main.read_text(encoding='utf-8')
+                old='        env = os.environ.copy()\n'
+                if source.count(old)!=1:
+                    raise RuntimeError('Music Control compatibility source changed')
+                source=source.replace(old,old+'        env["LD_LIBRARY_PATH"] = env.get("LD_LIBRARY_PATH_ORIG", "")\n')
+                main.write_text(source,encoding='utf-8')
+                compat_shims.append('music-control-system-dbus-env')
            # Recheck under the transaction lock. Another store operation may
            # have installed a colliding name while this archive downloaded.
            proposed_name=json.loads((unpacked/'plugin.json').read_text()).get('name')
@@ -474,12 +474,14 @@
        "https://github.com/mirobouma/MusicControl.git"
      ],
      "status": "partial",
-      "reason": "Legacy media controls initialize; player discovery and playback are unverified.",
+      "reason": "Managed reinstall preserves Decky’s legacy calling convention and repairs the Frame OS shell library-path failure. Chromium transport/seek/volume against a silent MPRIS fixture and real ARM64 empty-player discovery pass; actual Frame media playback, album art and worn VR remain unverified. Reinstall existing copies to apply.",
      "blockInstall": false,
      "verification": [
        "static archive",
        "local browser",
-        "fake-Frame"
+        "fake-Frame",
+        "isolated Decky 3.3.0 + MPRIS fixture",
+        "real Frame SSH"
      ],
      "browser": {
        "id": 12,
@@ -506,7 +508,7 @@
        "folder": "MusicControl"
      },
      "backend": "Python",
-      "hardware": "No specific hardware requirement detected statically; runtime requirements unverified.",
+      "hardware": "User-session MPRIS player and dbus-send required; no Deck-specific hardware.",
      "uiSurfaces": [
        "local/Steam routes"
      ],
@@ -515,7 +517,9 @@
        "sha256": "246b89fd653c60a735b1cc401d1b0937d5cb969eea9024561661ff741f081d62",
        "archiveValidation": "accepted",
        "result": "installed-removed"
-      }
+      },
+      "compatShim": "music-control-system-dbus-env",
+      "evidence": "docs/evidence/framey-mpris-runtime-2026-10-26.md"
    },
    {
      "id": 13,
@@ -927,7 +931,7 @@
        "logs": [
          {
            "kind": "error",
-            "message": "[Bluetooth] !! get_bluetooth_status \u2192 Error: All retries failed. Last error: Error: Read-only compatibility audit: backend method blocked"
+            "message": "[Bluetooth] !! get_bluetooth_status → Error: All retries failed. Last error: Error: Read-only compatibility audit: backend method blocked"
          },
          {
            "kind": "error",
@@ -935,7 +939,7 @@
          },
          {
            "kind": "error",
-            "message": "[Bluetooth] !! get_paired_devices_with_info \u2192 Error: All retries failed. Last error: Error: Read-only compatibility audit: backend method blocked"
+            "message": "[Bluetooth] !! get_paired_devices_with_info → Error: All retries failed. Last error: Error: Read-only compatibility audit: backend method blocked"
          },
          {
            "kind": "error",
@@ -1790,7 +1794,7 @@
      },
      "backend": "Python + native payload",
      "hardware": "No specific hardware requirement detected statically; runtime requirements unverified.",
-      "nativePort": "The bin/hash helper needs an ARM64 build and cross-platform hashing tests; no ARM64 artifact is published.",
+      "nativePort": "A source-matched ARM64 bin/hash helper matched the official x86_64 helper on one synthetic ROM on the real Frame (docs/evidence/framey-emuchievements-arm-2026-10-26.md). The official ZIP still bundles x86_64 bytes and remains blocked; format coverage, packaging, plugin backend/UI, login and worn VR are unverified.",
      "uiSurfaces": [
        "local/Steam routes",
        "toasts",
@@ -9582,12 +9586,15 @@
        "https://github.com/martinpl/music-control"
      ],
      "status": "partial",
-      "reason": "Panel initializer succeeds with backend/network blocked; actual controls and backend remain unverified.",
+      "reason": "Managed reinstall preserves Decky’s legacy calling convention and repairs the Frame OS shell library-path failure. Chromium transport/seek/volume against a silent MPRIS fixture and real ARM64 empty-player discovery pass; actual Frame media playback, album art and worn VR remain unverified. Reinstall existing copies to apply.",
      "blockInstall": false,
      "verification": [
        "static archive",
        "local browser",
-        "fake-Frame"
+        "fake-Frame",
+        "isolated Python backend",
+        "isolated Decky 3.3.0 + MPRIS fixture",
+        "real Frame SSH"
      ],
      "browser": {
        "id": 111,
@@ -9614,7 +9621,7 @@
        "folder": "MusicControl"
      },
      "backend": "Python",
-      "hardware": "No specific hardware requirement detected statically; runtime requirements unverified.",
+      "hardware": "User-session MPRIS player and dbus-send required; no Deck-specific hardware.",
      "uiSurfaces": [
        "local/Steam routes"
      ],
@@ -9623,7 +9630,9 @@
        "sha256": "3f56a3f56034b277ea74a2c37cc84133b69e382aa6bcb0b43876776aac737ed9",
        "archiveValidation": "accepted",
        "result": "installed-removed"
-      }
+      },
+      "compatShim": "music-control-system-dbus-env",
+      "evidence": "docs/evidence/framey-mpris-runtime-2026-10-26.md"
    },
    {
      "id": 112,
Author	SHA1	Message	Date
SAPHID	cbc20f0933	Update Music Control e2e receipts for runtime repair	2026-10-26 21:30:16 +00:00
SAPHID	b8d57eb6bd	Repair Music Control for Decky's real legacy runtime	2026-10-26 21:23:02 +00:00
Alex Southwell	5438e1d9d0	Merge pull request #336 from saphid/release/v0.4.48 Prepare Frame Control v0.4.48 candidate	2026-10-26 16:11:06 +00:00
SAPHID	9418a340eb	Record v0.4.48 candidate Frame smoke	2026-10-26 15:46:53 +00:00
SAPHID	a8bf01d660	Merge remote-tracking branch 'origin/main' into release/v0.4.48	2026-10-26 15:45:09 +00:00
Alex Southwell	5e3f9559c7	Merge pull request #335 from saphid/feat/framey-mpris-compat Repair official Music Control backend bound-method calls	2026-10-26 15:44:46 +00:00
SAPHID	a31b4a426c	Prepare Frame Control v0.4.48 version	2026-10-26 15:42:38 +00:00
SAPHID	ff465accc5	Merge remote-tracking branch 'origin/main' into feat/framey-mpris-compat	2026-10-26 15:31:25 +00:00
SAPHID	d9c2cc3f27	Repair official Music Control backend bound-method calls	2026-10-26 15:31:06 +00:00
Alex Southwell	910d847573	Merge pull request #333 from saphid/docs/framey-emuchievements-arm Document Emuchievements ARM64 hash helper feasibility	2026-10-26 15:30:25 +00:00
Alex Southwell	89f986b91c	Merge pull request #334 from saphid/docs/v0447-release-evidence Record v0.4.47 release verification	2026-10-26 15:18:31 +00:00
SAPHID	e711945c5a	Record v0.4.47 release verification	2026-10-26 15:09:02 +00:00
SAPHID	3ca8de985e	Record Emuchievements ARM64 helper feasibility	2026-10-26 14:56:14 +00:00
Alex Southwell	035c59ee11	Merge pull request #332 from saphid/release/v0.4.47 Prepare Frame Control v0.4.47 candidate	2026-10-26 14:43:58 +00:00
SAPHID	c687bcc71f	Merge remote-tracking branch 'origin/main' into release/v0.4.47	2026-10-26 14:35:59 +00:00
Alex Southwell	b6f45b287f	Merge pull request #331 from saphid/feat/framey-shotty-python-compat Load Shotty official backend with a scoped Python shim	2026-10-26 14:35:41 +00:00
SAPHID	a77434d91b	Record exact v0.4.47 candidate Frame smoke	2026-10-26 14:25:21 +00:00
SAPHID	e07fa15592	Prepare Frame Control v0.4.47 candidate	2026-10-26 14:23:06 +00:00