Changelog

Installing the station desktop launcher on a non-English system put the shortcut in the wrong place, so it never appeared for the operator.

• Fixed the launcher to use the system's localized Desktop folder (such as Bureau on French installs) instead of always creating an English "Desktop" folder.
• Aligned shortcut install, detection, and removal across Linux, Windows, and macOS so they all target the same folder, including OneDrive-redirected desktops on Windows.

The analytics metric labeled "Cycle Time" actually measures average per-run test duration, not the manufacturing inter-completion cadence the term implies. Renamed it to remove the ambiguity for test and process engineers.

• Renamed the "Cycle Time" KPI card, duration chart tooltip, and phase analysis headline to "Average Duration"
• Clarified that the value reflects average passing-run execution time, not unit-to-unit cadence

We've improved our backend infrastructure to make the dashboard faster and more reliable.

• Improved database response times by running compute closer to the data layer
• Fixed a class of transient connection errors that could occasionally cause page-load failures
• Reduced latency for dashboard requests

A single GitLab push could appear as several identical deployments when a repository had accumulated more than one webhook.

• Fixed GitLab webhook registration so each repository keeps exactly one hook, removing stale duplicates automatically.
• Added a safeguard that ignores repeated deliveries of the same push, so one commit produces one deployment per procedure.

Operator answers to radio, dropdown, and text prompts now record correctly no matter how a run is launched, fixing a crash when a later phase read a measurement from an earlier prompt.

• Fixed bound measurements not being saved on terminal (tofupilot run) and automated --json runs, which previously worked only in the kiosk and Studio.
• Fixed text prompts skipping length and pattern validation on automated runs, so invalid values are now rejected consistently across every surface.
• Improved prompts to record their default value when left unanswered, matching the kiosk.

Procedures can now use Python packages installed on the station that pip can't install, like native instrument drivers and vendor SDKs.

• Added a "System packages" toggle on the station Setup page that lets deployment environments reach the machine's system Python packages.
• Kept deployments isolated by default; the setting is opt-in per station and applies on the next deploy.

Running tofupilot deploy on a station required a user login, which previously overwrote the station's own credentials and stopped its service from starting.

• Fixed user and station logins so they no longer overwrite each other; a station stays authenticated after you log in as a user to deploy.
• Improved the station service so it keeps running after a user login on the same machine.
• Updated existing stations to migrate automatically on upgrade, with no re-login required.

Headless test jigs that run as root could no longer open the kiosk operator UI, leaving runs stuck on unit identification.

• Fixed the kiosk operator UI failing to start for foreground run --kiosk on root stations.
• Restored remote viewing of the kiosk over an SSH port-forward on headless machines.
• Kept the root station service hardened: its command channel still refuses to bind as root.

A connection drop during the binary download — common after a network switch or wake-from-sleep — could abort tofupilot update partway through, even when the server was healthy.

• Fixed tofupilot update failing when the connection dropped mid-download
• Added automatic retries with backoff so an interrupted transfer restarts cleanly instead of aborting the update

A transient connection drop right after a network switch or wake-from-sleep could abort tofupilot update even when the server was healthy, and an immediate re-run would succeed.

• Fixed tofupilot update failing on a single transient network error when checking for the latest version
• Added automatic retries with backoff so a brief connection hiccup no longer interrupts the update