Record test-only main merge in v0.4.43 candidate

Retry transient Windows wireless inventory smoke timeout

app/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "frame-control",
-  "version": "0.4.42",
+  "version": "0.4.43",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "frame-control",
-      "version": "0.4.42",
+      "version": "0.4.43",
       "license": "MIT",
       "devDependencies": {
         "electron": "^44.4.5",

app/package.json

@@ -1,7 +1,7 @@
 {
   "name": "frame-control",
   "productName": "Frame Control",
-  "version": "0.4.42",
+  "version": "0.4.43",
   "description": "Desktop app for managing a Valve Steam Frame over SSH",
   "private": true,
   "main": "main.js",

docs/evidence/framey-script-entrypoints-2026-10-26.json

@@ -0,0 +1,184 @@
+{
+  "checkedAtUtc": "2026-10-26T07:22:08.822239+00:00",
+  "plugin": {
+    "id": 84,
+    "name": "Junk-Store",
+    "version": "1.1.13",
+    "sha256": "f7ad2a0103c85bf308929b2e96ec9aeeb0d76bcc6ae97eb1e4b5f31ffba0cbb1",
+    "license": "BSD-3-Clause",
+    "sourceModified": false
+  },
+  "installer": {
+    "beforeScriptMode": "0644",
+    "afterScriptMode": "0744",
+    "policy": "Add owner execute for a shebang or ZIP-declared executable; do not restore archive privilege/write bits. Existing installs require update or reinstall."
+  },
+  "isolatedBackend": {
+    "runtime": "published Decky 3.3.0 amd64",
+    "loaderSha256": "e80d03e641d1766a33a817cb27ab8d2e0a4633685e5d27e4de948a6687526181",
+    "isolation": [
+      "unprivileged",
+      "no network",
+      "no devices",
+      "no capabilities",
+      "read-only root",
+      "private tmpfs home and tmp"
+    ],
+    "beforeInit": {
+      "result": {
+        "Type": "Error",
+        "Content": {
+          "Message": "Error parsing json result Expecting value: line 1 column 1 (char 0)",
+          "Data": "",
+          "ActionName": "init",
+          "ActionSet": "init"
+        }
+      },
+      "success": true
+    },
+    "afterInit": {
+      "result": {
+        "Type": "Success",
+        "Content": {
+          "Message": "Initialized"
+        }
+      },
+      "success": true
+    },
+    "beforeInitActions": {
+      "result": {
+        "Type": "Error",
+        "Content": {
+          "Message": "Error parsing json result Expecting value: line 1 column 1 (char 0)",
+          "Data": "",
+          "ActionName": "InitActions",
+          "ActionSet": "init"
+        }
+      },
+      "success": true
+    },
+    "afterInitActions": {
+      "outerSuccess": true,
+      "innerType": "ActionSet",
+      "setName": "MainMenu",
+      "actionCount": 4
+    }
+  },
+  "realFrame": {
+    "os": "Frame OS 0.5.6",
+    "arch": "aarch64",
+    "uid": 1000,
+    "decky": {
+      "version": "v3.3.0",
+      "sha256": "8ef5dcf36cbbbb6e97201a6baed5d79c4cc44ec27789fc9af1c5b6ae8f0b25b6"
+    },
+    "transport": "existing trusted SSH via lxso2",
+    "sharedLock": true,
+    "service": "private removable user service; not enabled; RuntimeMaxSec=600",
+    "installedWithProductionApply": true,
+    "scriptMode": "0o744",
+    "legendaryInstalled": false,
+    "backendMethods": [
+      "execute_action",
+      "get_websocket_port"
+    ],
+    "staticActions": [
+      "JunkStoreActions/GetContent",
+      "JunkStoreActions/GetEpicActions",
+      "MainMenu/GetContent",
+      "MainMenu/JunkStoreInit",
+      "init/InitActions"
+    ],
+    "websocketPort": 8765,
+    "websocketCommandsSent": false,
+    "librarySnapshotCounts": {
+      "apps": 1106,
+      "games": 895
+    },
+    "explicitInitActionInvoked": false,
+    "normalDeckyBeforeAfter": [
+      "inactive",
+      "inactive"
+    ],
+    "normalPanelBeforeAfter": [
+      "inactive",
+      "inactive"
+    ],
+    "batteryBeforeAfter": [
+      [
+        99
+      ],
+      [
+        100
+      ]
+    ],
+    "powerSettingChanged": false,
+    "cleanup": {
+      "baseAbsent": true,
+      "unitAbsent": true
+    },
+    "lockReleased": true
+  },
+  "localBrowser": {
+    "runtime": "local Chromium, real headset.html/framey-host.js, vendored React, official frontend in opaque iframe",
+    "backend": "production receipt-bound bridge to actual ARM64 backend",
+    "steamLibrary": "production receipt-bound GetLibrarySnapshot; only counts retained",
+    "outerStatusInstallResponses": "fixtures",
+    "passed": [
+      "Custom Stores main menu and Games/News/About navigation items render",
+      "Games route opens static Epic tab",
+      "Back returns to main menu",
+      "close/reopen returns to main menu"
+    ],
+    "remainingFailure": "About: Cannot read properties of undefined (reading 'installed'); detached app overview lacks local_per_client_data.installed",
+    "deniedActions": [
+      "fetch_rss_feed",
+      "EpicActions/GetContent"
+    ],
+    "denialIsNotBackendFailure": true
+  },
+  "cleanupAudit": {
+    "attempts": 3,
+    "allPrivateBasesAbsent": true,
+    "allPrivateUnitsAbsent": true,
+    "allArchivesAbsent": true,
+    "allServicesInactive": true,
+    "freshAuditLockReleased": true
+  },
+  "verification": {
+    "python": {
+      "run": 1628,
+      "skipped": 16,
+      "failures": 0
+    },
+    "site": {
+      "passed": 18
+    },
+    "focusedStore": {
+      "passed": 19
+    },
+    "fakeFrame": {
+      "blocked": 56,
+      "installed-removed": 60
+    },
+    "officialStore": {
+      "plugins": 116,
+      "errors": 0,
+      "identitySetUnchanged": true,
+      "checkedAtUtc": "2026-10-26T07:22:17.371046+00:00"
+    },
+    "staticEntrypointArchives": 28
+  },
+  "unverified": [
+    "Legendary dependency installation",
+    "Epic login",
+    "game listing",
+    "game downloads or launch",
+    "RSS feed",
+    "Steam shortcut mutation",
+    "optional websocket operations",
+    "deployed headset HTTP endpoint",
+    "worn VR"
+  ],
+  "status": "partial"
+}

docs/evidence/framey-script-entrypoints-2026-10-26.md

@@ -0,0 +1,76 @@
+# Executable script entrypoints: Junk-Store
+
+Junk-Store 1.1.13 (official ID 84) moves **broken → partial**. The exact unmodified
+BSD-3-Clause archive is pinned in the [redacted results](framey-script-entrypoints-2026-10-26.json).
+No ARM64 rebuild or upstream plugin source patch was needed.
+
+Python ZIP extraction drops execute permissions. This archive also publishes its
+shebang scripts as 0644, relying on upstream Decky's recursive permission setup.
+Framey's user service disables that setup. Direct script calls therefore fail.
+The installer now adds **owner execute only** to shebang scripts or ZIP-declared
+executables. It does not restore archive privilege/write bits, grant group/other
+execute, or change unmarked data permissions. Archive validation and installation
+blocks remain in place. Existing installations need update/reinstall for repair.
+
+The upstream comparison is Decky 3.3.0's
+[permission setup](https://github.com/SteamDeckHomebrew/decky-loader/blob/v3.3.0/backend/decky_loader/browser.py)
+and [Linux implementation](https://github.com/SteamDeckHomebrew/decky-loader/blob/v3.3.0/backend/decky_loader/localplatform/localplatformlinux.py).
+Static inspection found 28 accepted official archives with shebang or declared
+executable members. This is shared installer coverage, not 28 functional claims.
+
+## Before and after in an isolated real backend
+
+Both runs used the exact official plugin and published Decky 3.3.0 amd64, with no
+network/devices/capabilities, a read-only root and private temporary home/tmp.
+The only difference was the production installer before/after this change.
+
+| Check | Before | After |
+| --- | --- | --- |
+| `scripts/get-json.py` | 0644 | 0744 |
+| `execute_action(init, init)` | inner `Type:Error`, empty output / JSON parse error | `Type:Success`, `Initialized` |
+| `execute_action(init, InitActions)` | inner `Type:Error` | `Type:ActionSet`, `MainMenu`, four actions |
+
+The legacy wrapper reports `success:true` even for the failing inner error.
+Startup log text alone is also insufficient: the baseline emits initialized/started
+messages despite those errors. Both private containers were removed.
+
+## Real ARM64 Frame and local Chromium
+
+Under the shared headset lock, the patched production installer installed the
+official archive into a private, bounded, removable Decky 3.3.0 ARM64 user service
+on Frame OS 0.5.6. The service was not enabled. Legendary was absent before and
+after; no dependency installer, login, download, launch or websocket command ran.
+
+The production receipt-bound bridge called the actual backend through live Steam
+CEF. Static action sets, main-menu content and the Epic action set returned real
+results. `get_websocket_port` returned 8765. Explicit `init/init` success was tested
+in the isolated amd64 backend; it was not explicitly invoked in the final Frame run.
+
+Local Chromium ran the actual Framey host and official frontend in an opaque
+iframe, relaying only allowed static calls to that ARM64 backend. Main menu,
+Games → static Epic tab, Back and fresh close/reopen passed. Steam library reads
+used the production receipt-bound bridge; only counts were retained. Outer
+status/install responses were fixtures, and the deployed headset HTTP endpoint
+was not tested.
+
+The About route still crashes on missing `local_per_client_data.installed` in
+the detached app overview. Epic game-list and RSS calls were deliberately denied;
+their loading/error views do not demonstrate backend failure. Dependency
+installation, login, game operations, RSS, Steam shortcut mutation and worn VR
+remain unverified. This supports **partial**, not works.
+
+Three temporary attempts were cleaned, including an initial Steam reinjection
+readiness failure and a test-relay omission of the library endpoint. A fresh
+shared-lock audit found all three services inactive/unloaded (PID 0), with their
+private bases, unit files and archives absent. Normal managed Decky/panel services
+stayed inactive; final battery was 99 → 100 while charging. No power-setting action
+ran. The audit lock was released, and local relays/browser tabs were closed.
+
+## Verification
+
+- Python suite: 1,628 tests, 16 skipped, no failures; store suite: 19 passed.
+- Site suite: 18 passed. Two new regression tests failed before the fix.
+- All 116 official plugins: fake-Frame 60 installed/removed, 56 expected blocks;
+  no actual plugin backends run by this harness. Disposable project cleaned.
+- Fresh official-store audit: 116 plugins, zero errors; ID/version/digest set
+  matches the catalog. Other plugin statuses are unchanged.

docs/evidence/v0443-candidate-2026-10-26.md

@@ -0,0 +1,7 @@
+# v0.4.43 candidate Frame gate, 26 October 2026
+
+The combined code head `232b253e7a9400aa9829f9fea6a5d2011dd2a8f3` (PR #309 after merging main with PR #308) ran `scripts/frame-smoke.sh` under its own `/tmp/frame-test.lock` owner at 07:57 UTC. Its locked preflight found SteamVR activity 3 (standby), proximity 6.25 and battery 99%. On Frame OS 0.5.6 build `20261022.6153909`, it recorded **12 passed / 1 skipped / 0 failed**. The ARM64 and Proton executables launched; x86_64 launch was skipped because Steam Linux Runtime 4 is absent. It removed its test titles, exited 0 and released its lock. The private detailed result is `/tmp/frame-smoke-pr309/2026-10-26T075752Z-20261022.6153909.json` on the test host. A fresh, separately owned read-only lock then found activity 3 and battery 99%, and was released. PR #310 subsequently changed only the Windows wireless CI smoke test; the release branch merged that test change and bumped the app version, with no further headset runtime code change after this Frame smoke.
+
+PR #308's panel code commit `d5e62f643d462b7070f27c2c47b11b4aa9982094` previously passed the temporary Framey sample `scripts/framey-vr-check.py --exercise` machine check, with cleanup and power restoration; see [Web Browser follow-up](framey-web-browser-2026-10-26.md). That test used synthetic OpenVR input and a repository sample, not the official Web Browser plugin or a person wearing the headset. No wake or VR input exercise ran on this combined code head because wearer confirmation was absent. The current smoke made no worn visual, physical-controller, audible-output or official-plugin VR claim.
+
+This is candidate evidence, not a published-release result. Publication still needs all exact-head PR and release checks, ten tagged installers with matching `SHA256SUMS`, package validation, the publisher dry run, and public updater readback. The exact-version official Decky catalog in this candidate is **4 works / 49 partial / 52 broken / 11 N/A**. Volume Boost's works claim covers tested muted sink controls; Junk-Store remains partial, and Web Browser remains broken.

docs/framey-compatibility.md

@@ -4,7 +4,7 @@ Snapshot: 2026-10-26T06:10:58.537029+00:00; 116 current visible official plugins
 
 This table and both store views use [`ui/framey-compatibility.json`](../ui/framey-compatibility.json). Results apply only to the exact store ID, version and SHA-256. A changed digest/version is **unverified**. Regenerate this document with `python3 scripts/framey-compatibility-doc.py`; use `--check` in review.
 
-**Works: 4 · Partial: 48 · Broken: 53 · N/A: 11.**
+**Works: 4 · Partial: 49 · Broken: 52 · N/A: 11.**
 
 - **Works** requires verified useful plugin behavior with its real backend. Read the reason for the verified scope and remaining limits; it does not imply worn-VR verification.
 - **Partial** means only a subset or a local fixture scope was verified, often just frontend/settings initialization. The remaining backend/device functionality is unverified; read the reason for the exact scope.
@@ -27,7 +27,7 @@ Open the browser audit URL in local Chromium, run `runAudit()` and inspect/downl
 
 The current published digests are pinned in the JSON; if the store changed, retain/download those exact archives for reproduction. Audit downloads permit larger ZIPs for inspection; production installer limits remain 50 MiB ZIP / 150 MiB unpacked / 30 MiB per member.
 
-After the VR job released the shared lock, this audit acquired it and used a private temporary Decky 3.3.0 ARM64 user service. Read-only ProtonDB `get_setting` and Steam Status `get_settings` calls succeeded through the live Steam CEF websocket. The service and private base were removed and the lock released; normal managed services stayed inactive, battery was 100 → 99, and no power setting was changed. [Redacted results](evidence/framey-official-backend-2026-10-25.json) record exactly what ran. A [2026-10-26 follow-up](evidence/framey-events-backend-2026-10-26.json) verified default Notebook drawing/save/reopen across a real backend restart and Simple Timer start/cancel, countdown/completion events, a visible toast and persisted recents/subtle mode. Only private test settings were written. Simple Timer remains partial because its own expired-timer startup raises a missing `timer_task` error; sound/suspend are unsupported. A [local audio follow-up](evidence/framey-audio-backends-2026-10-26.md) exercised Volume Mixer, Volume Boost and Mixer through real Decky 3.3.0 amd64 backends on private silent virtual audio targets. Sliders, numeric volume entry, independent server readbacks and Mixer filter persistence across a runtime restart passed. An [ARM64 audio follow-up](evidence/framey-audio-arm64-2026-10-26.md) verified the unmodified official backends in actual Decky 3.3.0 on the Frame user audio session. Volume Mixer and Mixer now qualify as works for per-app volume: Chromium controls changed only a named silent stream, with independent Pulse readbacks. That run left Volume Boost partial because sink writes were denied. A [Volume Boost follow-up](evidence/framey-volume-boost-arm64-2026-10-26.md) now verifies linked/separate channel controls, re-link and reopen through the actual ARM64 backend. Independent Pulse reads confirmed 125%/150% gain writes while the default sink stayed muted; exact original volume/mute was restored. Volume Boost qualifies as works for sink controls. Audible output, Bluetooth playback and worn VR remain unverified. A [running-context follow-up](evidence/framey-running-context-2026-10-26.md) supplies detached running-app/main-app reads and relays actual Steam lifetime callbacks while a panel is open. Real Frame checks verified an empty list, registration/cleanup and the exact Discord Status ARM64 backend reporting no IPC connection. Nonempty games and transitions were synthetic fixtures; real game events, Discord activity and worn VR remain unverified. Discord Status moves to partial; no new works claim is made. A [library context follow-up](evidence/framey-library-context-2026-10-26.md) read 1,106 app overviews, 895 game IDs and the current public Steam ID from real Frame CEF under the shared lock. Local Chromium replayed this detached snapshot to render Deck Settings game selection, Steamback's empty save panel and PlayTime statistics/settings. Steamback and PlayTime used actual Decky 3.3.0 amd64 backends in an isolated container; their ARM64 backends and automatic game hooks remain unverified. Shotty's frontend now starts, but its published backend fails on missing `click`; it stays broken. A [chunked frontend follow-up](evidence/framey-deck-shelves-browser-2026-10-26.md) loaded Deck Shelves 2.0.0 through a managed JavaScript module route and rendered its settings in an opaque local Chromium panel. Its backend was denied; Steam Home shelves and worn VR remain unverified. A [local module lookup follow-up](evidence/framey-module-lookup-2026-10-26.md) supplies a finite registry of Framey-local controls and CSS. TabMaster QAM/docs now render; Steam library-tab editing remains unavailable. Junk-Store loading/error views render, but its real backend cannot execute the extracted startup script, so it stays broken. SteamGridDB still requires Steam context-menu internals and DeckSP still fails its published MobX fallback. TabMaster/Junk-Store ran in actual isolated amd64 Decky; no ARM64 or worn-VR result is claimed. Beyond the documented checks, official backends remain unexecuted. The separate VR job proves Frame Control/sample compositor rendering, not any official plugin. No worn-VR official-plugin result is claimed. A [local UI follow-up](evidence/framey-ui-fallbacks-2026-10-26.json) rendered Pause Games and Tailscale Control settings with all backend/network actions denied; it does not verify process pausing or Tailscale changes. A [read-only Steam bridge follow-up](evidence/framey-steam-reads-2026-10-26.json) verified actual Frame country, install folders and system information, plus IsThereAnyDeal's country dropdown in local Chromium. The installed-plugin status was fixture-shaped in that relay; plugin backends stayed denied and the deployed headset HTTP endpoint remains unverified. A [Web Browser frontend follow-up](evidence/framey-web-browser-2026-10-26.md) verified its exact archive now initializes with an inert null Steam React-root lookup. Its GamepadUI CDP/browser backend paLine truncated
+After the VR job released the shared lock, this audit acquired it and used a private temporary Decky 3.3.0 ARM64 user service. Read-only ProtonDB `get_setting` and Steam Status `get_settings` calls succeeded through the live Steam CEF websocket. The service and private base were removed and the lock released; normal managed services stayed inactive, battery was 100 → 99, and no power setting was changed. [Redacted results](evidence/framey-official-backend-2026-10-25.json) record exactly what ran. A [2026-10-26 follow-up](evidence/framey-events-backend-2026-10-26.json) verified default Notebook drawing/save/reopen across a real backend restart and Simple Timer start/cancel, countdown/completion events, a visible toast and persisted recents/subtle mode. Only private test settings were written. Simple Timer remains partial because its own expired-timer startup raises a missing `timer_task` error; sound/suspend are unsupported. A [local audio follow-up](evidence/framey-audio-backends-2026-10-26.md) exercised Volume Mixer, Volume Boost and Mixer through real Decky 3.3.0 amd64 backends on private silent virtual audio targets. Sliders, numeric volume entry, independent server readbacks and Mixer filter persistence across a runtime restart passed. An [ARM64 audio follow-up](evidence/framey-audio-arm64-2026-10-26.md) verified the unmodified official backends in actual Decky 3.3.0 on the Frame user audio session. Volume Mixer and Mixer now qualify as works for per-app volume: Chromium controls changed only a named silent stream, with independent Pulse readbacks. That run left Volume Boost partial because sink writes were denied. A [Volume Boost follow-up](evidence/framey-volume-boost-arm64-2026-10-26.md) now verifies linked/separate channel controls, re-link and reopen through the actual ARM64 backend. Independent Pulse reads confirmed 125%/150% gain writes while the default sink stayed muted; exact original volume/mute was restored. Volume Boost qualifies as works for sink controls. Audible output, Bluetooth playback and worn VR remain unverified. A [running-context follow-up](evidence/framey-running-context-2026-10-26.md) supplies detached running-app/main-app reads and relays actual Steam lifetime callbacks while a panel is open. Real Frame checks verified an empty list, registration/cleanup and the exact Discord Status ARM64 backend reporting no IPC connection. Nonempty games and transitions were synthetic fixtures; real game events, Discord activity and worn VR remain unverified. Discord Status moves to partial; no new works claim is made. A [library context follow-up](evidence/framey-library-context-2026-10-26.md) read 1,106 app overviews, 895 game IDs and the current public Steam ID from real Frame CEF under the shared lock. Local Chromium replayed this detached snapshot to render Deck Settings game selection, Steamback's empty save panel and PlayTime statistics/settings. Steamback and PlayTime used actual Decky 3.3.0 amd64 backends in an isolated container; their ARM64 backends and automatic game hooks remain unverified. Shotty's frontend now starts, but its published backend fails on missing `click`; it stays broken. A [chunked frontend follow-up](evidence/framey-deck-shelves-browser-2026-10-26.md) loaded Deck Shelves 2.0.0 through a managed JavaScript module route and rendered its settings in an opaque local Chromium panel. Its backend was denied; Steam Home shelves and worn VR remain unverified. A [local module lookup follow-up](evidence/framey-module-lookup-2026-10-26.md) supplies a finite registry of Framey-local controls and CSS. TabMaster QAM/docs now render; Steam library-tab editing remains unavailable. That pass exposed Junk-Store executable-script extraction failures; the follow-up below repairs them. SteamGridDB still requires Steam context-menu internals and DeckSP still fails its published MobX fallback. That pass tested TabMaster/Junk-Store in actual isolated amd64 Decky, without ARM64 or worn-VR coverage. A [script entrypoint follow-up](evidence/framey-script-entrypoints-2026-10-26.md) grants owner execute to shebang scripts and ZIP-declared executables without copying archive privilege/write bits. Junk-Store now passes static menu/backend calls in actual Decky 3.3.0 ARM64 and local Chromium Games/Epic navigation, back and reopen. It moves to partial: About still crashes on missing installed-app metadata, Legendary is absent, and login/game operations remain unverified. Existing installations require update/reinstall to repair permissions. Beyond the documented checks, official backends remain unexecuted. The separate VR job proves Frame Control/sample compositor rendering, not any official plugin. No worn-VR official-plugin result is claimed. A [local UI follow-up](evidence/framey-ui-fallbacks-2026-10-26.json) rendered Pause Games and Tailscale Control settings with all backend/network actions denied; it does not verify process pausing or Tailscale changes. A [read-only Steam bridge followLine truncated
 
 ## Every current plugin
 
@@ -91,7 +91,7 @@ The API column shows manifest / actual bundled frontend API. Many manifests say
 | 80: MagicBlack 2.0.2 | 1 / 2 | N/A | Not supported on Frame: Targets a global Steam Deck screen-black overlay; the isolated panel cannot black out the Frame compositor. | static archive, local browser, fake-Frame |
 | 81: IsThereAnyDeal for Deck 1.1.1 | legacy / legacy | partial | Country settings render and select the real Frame Steam country through the read-only bridge. Settings writes, deal lookups and Steam page integration remain unverified; plugin backend calls were denied. | static archive, local browser, fake-Frame, real Frame SSH |
 | 82: MagicPods 2.0.21 | 1 / 2 | broken | Plugin contains a non-ARM64 Linux binary: MagicPodsDecky/bin/magicpodscore. Frontend audit failed: Audit blocks WebSocket. | static archive, local browser, fake-Frame |
-| 84: Junk-Store 1.1.13 | legacy / legacy | broken | Local CSS lookup fixes the loading view crash. Actual Decky 3.3.0 amd64 startup/static InitActions return a script execution/JSON error; the published scripts are not executable after extraction. Store install/login/game launch and ARM64 remain unverified. | static archive, local browser, fake-Frame |
+| 84: Junk-Store 1.1.13 | legacy / legacy | partial | Executable script extraction repaired. Official Decky 3.3.0 ARM64 static menu/backend calls and local Chromium Games/Epic navigation, back and reopen pass. About still fails on missing installed-app metadata; Legendary is absent. Dependency install, login, game operations, RSS and worn VR remain unverified. Existing installs need update/reinstall. | static archive, local browser, fake-Frame, isolated Linux backend, real Frame SSH |
 | 85: Decky-Undervolt 1.0.8 | 1 / 2 | N/A | Not supported on Frame: RyzenAdj Curve Optimizer requires an AMD CPU; Frame is ARM64. | static archive, local browser, fake-Frame |
 | 87: ScreenSaver 1.1.2 | legacy / legacy | partial | Initializer succeeds; global screen overlay and idle/suspend integration have no verified VR target. | static archive, local browser, fake-Frame |
 | 88: steamdeck-input-disabler 1.0.2 | legacy / legacy | N/A | Not supported on Frame: Targets the built-in Steam Deck USB gamepad; Frame has different controllers. | static archive, local browser, fake-Frame |

scripts/framey-compatibility-doc.py

@@ -64,7 +64,7 @@ def render(data):
         'A [chunked frontend follow-up](evidence/framey-deck-shelves-browser-2026-10-26.md) loaded Deck Shelves 2.0.0 '
         'through a managed JavaScript module route and rendered its settings in an opaque local Chromium panel. '
         'Its backend was denied; Steam Home shelves and worn VR remain unverified. '
-        'A [local module lookup follow-up](evidence/framey-module-lookup-2026-10-26.md) supplies a finite registry of Framey-local controls and CSS. TabMaster QAM/docs now render; Steam library-tab editing remains unavailable. Junk-Store loading/error views render, but its real backend cannot execute the extracted startup script, so it stays broken. SteamGridDB still requires Steam context-menu internals and DeckSP still fails its published MobX fallback. TabMaster/Junk-Store ran in actual isolated amd64 Decky; no ARM64 or worn-VR result is claimed. Beyond the documented checks, official backends remain unexecuted. '
+        'A [local module lookup follow-up](evidence/framey-module-lookup-2026-10-26.md) supplies a finite registry of Framey-local controls and CSS. TabMaster QAM/docs now render; Steam library-tab editing remains unavailable. That pass exposed Junk-Store executable-script extraction failures; the follow-up below repairs them. SteamGridDB still requires Steam context-menu internals and DeckSP still fails its published MobX fallback. That pass tested TabMaster/Junk-Store in actual isolated amd64 Decky, without ARM64 or worn-VR coverage. A [script entrypoint follow-up](evidence/framey-script-entrypoints-2026-10-26.md) grants owner execute to shebang scripts and ZIP-declared executables without copying archive privilege/write bits. Junk-Store now passes static menu/backend calls in actual Decky 3.3.0 ARM64 and local Chromium Games/Epic navigation, back and reopen. It moves to partial: About still crashes on missing installed-app metadata, Legendary is absent, and login/game operations remain unverified. Existing installations require update/reinstall to repair permissions. Beyond the documented checks, official backends remain unexecuted. '
         'The separate VR job proves Frame Control/sample compositor rendering, not any official plugin. '
         'No worn-VR official-plugin result is claimed. '
         'A [local UI follow-up](evidence/framey-ui-fallbacks-2026-10-26.json) rendered Pause Games and Tailscale Control settings '

tests/test_frame_decky_store.py

@@ -138,6 +138,31 @@ class StoreTransaction(unittest.TestCase):
         self.assertNotEqual(result.returncode, 0)
         self.assertTrue(external.exists())
 
+    def test_installed_script_entrypoints_execute_without_zip_exec_bits(self):
+        data, _ = archive(extra=('Example/scripts/start.py',
+                                 b'#!/bin/sh\nprintf "Framey script: %s\\n" "$1"\n'))
+        result = self.apply('install', data)
+        self.assertEqual(result.returncode, 0, result.stderr)
+        script = self.folder / 'scripts/start.py'
+        self.assertTrue(script.stat().st_mode & 0o100)
+        self.assertFalse(script.stat().st_mode & 0o6111 & ~0o100)
+        ran = subprocess.run([str(script), 'ready'], text=True, capture_output=True, timeout=5)
+        self.assertEqual(ran.returncode, 0, ran.stderr)
+        self.assertEqual(ran.stdout, 'Framey script: ready\n')
+        self.assertFalse((self.folder / 'plugin.json').stat().st_mode & 0o111)
+        self.assertFalse((self.folder / 'dist/index.js').stat().st_mode & 0o111)
+
+    def test_declared_executable_is_owner_only_without_privilege_bits(self):
+        info = zipfile.ZipInfo('Example/bin/entrypoint')
+        info.create_system = 3
+        info.external_attr = 0o104777 << 16
+        data, _ = archive(extra=(info, b'entrypoint payload'))
+        result = self.apply('install', data)
+        self.assertEqual(result.returncode, 0, result.stderr)
+        executable = self.folder / 'bin/entrypoint'
+        self.assertEqual(executable.stat().st_mode & 0o6111, 0o100)
+        self.assertEqual(executable.read_bytes(), b'entrypoint payload')
+
     def test_remove_while_service_is_stopped_does_not_restart_it(self):
         data, _ = archive()
         self.assertEqual(self.apply('install', data).returncode, 0)

tests/test_wireless.py

@@ -192,6 +192,12 @@ class Probe(unittest.TestCase):
     @unittest.skipUnless(wireless.frame_host.WINDOWS, 'Live read-only Windows inventory runs on Windows CI')
     def test_live_windows_inventory(self):
         r = wireless.diagnose()
+        # Shared Windows runners can spend the entire probe budget starting
+        # PowerShell. Retry only that transient timeout; a second failure must
+        # still fail this live inventory gate.
+        if (r['state'] == 'unavailable' and
+                r.get('message') == 'Windows wireless inventory timed out. No settings were changed.'):
+            r = wireless.diagnose()
         self.assertIn(r['state'], ('ok', 'partial'), r)
         self.assertEqual(r['sources']['adapters'], 'ok', r['sources'])
         self.assertTrue(r['devices'], 'Windows runner should expose at least its virtual network interface')

ui/frame_decky_store.py

@@ -177,6 +177,16 @@ try:
                 seen.add(f.filename)
             stage.mkdir(mode=0o700)
             z.extractall(stage)
+            # zipfile drops execute bits. Legacy plugins also publish shebang
+            # entrypoints as 0644 because Decky's installer chmods recursively.
+            # Grant only owner execute for scripts or declared executables;
+            # never restore archive privilege/write bits or mark other data executable.
+            for member in files:
+                if member.is_dir(): continue
+                entry=stage/member.filename
+                with entry.open('rb') as source: script=source.read(2)==b'#!'
+                if script or (member.external_attr>>16)&0o111:
+                    entry.chmod(entry.stat().st_mode|0o100)
             unpacked=stage/folder
             if not unpacked.is_dir(): raise RuntimeError('Missing plugin folder')
             # Recheck under the transaction lock. Another store operation may

ui/framey-compatibility.json

@@ -6517,13 +6517,15 @@
         "https://github.com/ebenbruyns/junkstore",
         "https://github.com/ebenbruyns/junkstore.git"
       ],
-      "status": "broken",
-      "reason": "Local CSS lookup fixes the loading view crash. Actual Decky 3.3.0 amd64 startup/static InitActions return a script execution/JSON error; the published scripts are not executable after extraction. Store install/login/game launch and ARM64 remain unverified.",
+      "status": "partial",
+      "reason": "Executable script extraction repaired. Official Decky 3.3.0 ARM64 static menu/backend calls and local Chromium Games/Epic navigation, back and reopen pass. About still fails on missing installed-app metadata; Legendary is absent. Dependency install, login, game operations, RSS and worn VR remain unverified. Existing installs need update/reinstall.",
       "blockInstall": false,
       "verification": [
         "static archive",
         "local browser",
-        "fake-Frame"
+        "fake-Frame",
+        "isolated Linux backend",
+        "real Frame SSH"
       ],
       "browser": {
         "id": 84,
@@ -6555,6 +6557,25 @@
         "sha256": "f7ad2a0103c85bf308929b2e96ec9aeeb0d76bcc6ae97eb1e4b5f31ffba0cbb1",
         "archiveValidation": "accepted",
         "result": "installed-removed"
+      },
+      "localBackend": {
+        "runtime": "Decky 3.3.0 amd64",
+        "evidence": "docs/evidence/framey-script-entrypoints-2026-10-26.json",
+        "before": "init and InitActions return inner Type:Error",
+        "after": "init Type:Success; InitActions Type:ActionSet/MainMenu"
+      },
+      "realFrame": {
+        "runtime": "Decky 3.3.0 ARM64",
+        "evidence": "docs/evidence/framey-script-entrypoints-2026-10-26.json",
+        "staticActions": [
+          "JunkStoreActions/GetContent",
+          "JunkStoreActions/GetEpicActions",
+          "MainMenu/GetContent",
+          "MainMenu/JunkStoreInit",
+          "init/InitActions"
+        ],
+        "browser": "main menu; Games/Epic static tab; back; close/reopen",
+        "remainingFailure": "About: Cannot read properties of undefined (reading 'installed'); detached app overview lacks local_per_client_data.installed"
       }
     },
     {