Limit homepage devlogs and add refresh trigger

tests/test_home_template.py

@@ -0,0 +1,24 @@
+from __future__ import annotations
+
+from pathlib import Path
+import unittest
+
+
+class HomeTemplateTests(unittest.TestCase):
+    def test_recent_activity_adds_only_latest_devlog_from_each_project(self) -> None:
+        site_root = Path(__file__).resolve().parents[1]
+        template = (site_root / "templates" / "home.html").read_text(encoding="utf-8")
+        recent_activity = template.split(
+            '<section class="homepage-panel featured-projects-panel"', 1
+        )[0]
+
+        self.assertIn(
+            "devlog.children.order_by('-date', '-source_commit_time').first()",
+            recent_activity,
+        )
+        self.assertIn("entries.append(latest_devlog_entry)", recent_activity)
+        self.assertNotIn("for entry in devlog.children", recent_activity)
+
+
+if __name__ == "__main__":
+    unittest.main()

tests/test_trigger_project_refresh.py

@@ -0,0 +1,73 @@
+from __future__ import annotations
+
+import contextlib
+import io
+import os
+from pathlib import Path
+import sys
+import unittest
+from unittest.mock import patch
+from urllib.error import HTTPError
+
+
+sys.path.insert(0, str(Path(__file__).resolve().parents[1] / "scripts"))
+
+import trigger_project_refresh as refresh  # noqa: E402
+
+
+class FakeResponse:
+    def __init__(self, status: int = 204) -> None:
+        self.status = status
+
+    def __enter__(self) -> "FakeResponse":
+        return self
+
+    def __exit__(self, *args: object) -> None:
+        return None
+
+    def getcode(self) -> int:
+        return self.status
+
+
+class TriggerProjectRefreshTests(unittest.TestCase):
+    def test_dispatch_posts_main_without_putting_token_in_url_or_body(self) -> None:
+        with patch.object(refresh, "urlopen", return_value=FakeResponse()) as opener:
+            refresh.dispatch_refresh("secret-token", timeout=7)
+
+        request = opener.call_args.args[0]
+        self.assertEqual(request.full_url, refresh.DISPATCH_URL)
+        self.assertEqual(request.method, "POST")
+        self.assertEqual(request.data, b'{"ref": "main"}')
+        self.assertEqual(request.get_header("Authorization"), "token secret-token")
+        self.assertNotIn(b"secret-token", request.data)
+        self.assertEqual(opener.call_args.kwargs["timeout"], 7)
+
+    def test_dispatch_reports_http_status_without_response_or_token(self) -> None:
+        error = HTTPError(refresh.DISPATCH_URL, 403, "Forbidden", {}, None)
+        with patch.object(refresh, "urlopen", side_effect=error):
+            with self.assertRaisesRegex(refresh.RefreshError, r"HTTP 403") as raised:
+                refresh.dispatch_refresh("secret-token")
+        self.assertNotIn("secret-token", str(raised.exception))
+
+    def test_main_requires_environment_token(self) -> None:
+        stderr = io.StringIO()
+        with patch.dict(os.environ, {}, clear=True), contextlib.redirect_stderr(stderr):
+            result = refresh.main([])
+        self.assertEqual(result, 2)
+        self.assertIn(refresh.TOKEN_ENVIRONMENT_VARIABLE, stderr.getvalue())
+
+    def test_dry_run_does_not_read_or_send_token(self) -> None:
+        stdout = io.StringIO()
+        with (
+            patch.dict(os.environ, {}, clear=True),
+            patch.object(refresh, "urlopen") as opener,
+            contextlib.redirect_stdout(stdout),
+        ):
+            result = refresh.main(["--dry-run"])
+        self.assertEqual(result, 0)
+        self.assertIn(refresh.DISPATCH_URL, stdout.getvalue())
+        opener.assert_not_called()
+
+
+if __name__ == "__main__":
+    unittest.main()