Changelog

A single GitLab push could appear as several identical deployments when a repository had accumulated more than one webhook.

• Fixed GitLab webhook registration so each repository keeps exactly one hook, removing stale duplicates automatically.
• Added a safeguard that ignores repeated deliveries of the same push, so one commit produces one deployment per procedure.

Operator answers to radio, dropdown, and text prompts now record correctly no matter how a run is launched, fixing a crash when a later phase read a measurement from an earlier prompt.

• Fixed bound measurements not being saved on terminal (tofupilot run) and automated --json runs, which previously worked only in the kiosk and Studio.
• Fixed text prompts skipping length and pattern validation on automated runs, so invalid values are now rejected consistently across every surface.
• Improved prompts to record their default value when left unanswered, matching the kiosk.

Procedures can now use Python packages installed on the station that pip can't install, like native instrument drivers and vendor SDKs.

• Added a "System packages" toggle on the station Setup page that lets deployment environments reach the machine's system Python packages.
• Kept deployments isolated by default; the setting is opt-in per station and applies on the next deploy.

Running tofupilot deploy on a station required a user login, which previously overwrote the station's own credentials and stopped its service from starting.

• Fixed user and station logins so they no longer overwrite each other; a station stays authenticated after you log in as a user to deploy.
• Improved the station service so it keeps running after a user login on the same machine.
• Updated existing stations to migrate automatically on upgrade, with no re-login required.

Headless test jigs that run as root could no longer open the kiosk operator UI, leaving runs stuck on unit identification.

• Fixed the kiosk operator UI failing to start for foreground run --kiosk on root stations.
• Restored remote viewing of the kiosk over an SSH port-forward on headless machines.
• Kept the root station service hardened: its command channel still refuses to bind as root.

A connection drop during the binary download — common after a network switch or wake-from-sleep — could abort tofupilot update partway through, even when the server was healthy.

• Fixed tofupilot update failing when the connection dropped mid-download
• Added automatic retries with backoff so an interrupted transfer restarts cleanly instead of aborting the update

A transient connection drop right after a network switch or wake-from-sleep could abort tofupilot update even when the server was healthy, and an immediate re-run would succeed.

• Fixed tofupilot update failing on a single transient network error when checking for the latest version
• Added automatic retries with backoff so a brief connection hiccup no longer interrupts the update

Attachments produced during a CLI run now upload reliably and display correctly on the dashboard.

• Fixed attach.data attachments being silently dropped on native test runs so they never reached the dashboard.
• Fixed attach.file attachments uploading without a size, type, or image preview.
• Improved cleanup so attachment files left by a failed or aborted run no longer pile up on disk.

Guide and template pages were briefly returning an error instead of loading.

• Fixed an issue that prevented guide and template pages from opening
• Restored these pages so they load correctly again

Headless and automated OpenHTF runs can now answer operator prompts ahead of time, so a prompt no longer stalls an unattended run.

• Fixed operator prompts ignoring pre-baked input values during automated runs, which caused them to wait and eventually time out.
• Added automatic prompt resolution when every required input is supplied up front, matching the behavior of native procedures.