[thebhef]

servers/cannet-python-client is a uv-managed sibling of the sidecar
that registers CannetBus(can.BusABC) under python-can's can.interface
entry-point group, so can.Bus(interface="cannet", server=..., channel=...)
opens a remote bus with no cannet-specific import and no credential
pasted into application code. Full BusABC citizenship: _recv_internal
(so recv, iteration and Listener/Notifier work), send, shutdown,
state, channel_info.

server= is resolved against the GUI's own trust store — servers.json
in the platform config dir under dev.cannet.app — whose location and
schema are now documented as a read contract, in the package README and
in trust.py. The library never writes it: accepting a server means
comparing a fingerprint against what the server printed, and only a
person can do that. The plan it derives is the GUI's (ADR 0041):
loopback is plaintext whatever is stored, a pin never degrades to
plaintext, a plaintext target carries no token, and an unknown
non-loopback server raises rather than inventing an answer.

Pinning is by certificate rather than by fingerprint, because Python's
gRPC exposes no verifier hook: the library fetches the server's
certificate, checks its SHA-256 against the stored pin, and hands that
exact certificate to gRPC as the channel's sole root — equivalent in
what it accepts. A second handshake, trusting the fetched certificate as
its own root, reads back the SAN list so the target-name override names
something the certificate actually carries. Reviewers should note this
path has no end-to-end coverage: both hardware-free debug servers
terminate no TLS, so the fingerprint form, the pin comparison and the
name choice are unit-tested and the handshake is not.

Session semantics are cannet-client's, so a hardware server sees the
same client whichever language is talking to it. ConfigureBus precedes
the Subscribe it configures. A bare virtual: id is a factory and
waits for its InterfaceAllocated (ADR 0021). The three per-frame codes
are tallied on bus.rejections and the stream goes on; everything else,
including a code this build does not recognise, ends the session and is
raised. One consequence worth reading twice: the wire does not
acknowledge an ordinary Subscribe, so an unknown interface surfaces on
the first recv rather than out of the constructor — waiting on a reply
a server has no reason to send would trade a working session for a
stall.

Frames are encoded by the sidecar's own mappers, reached through a path
dependency and four new public aliases there. There is one encoding of
the wire in this repository and nothing for a second copy to drift from.
frame_to_message leaves timestamp and direction unset — it is the
sidecar's transmit path, where neither means anything — so the receive
path supplies both.

Tests are hardware-free throughout: the units cover the trust-store
contract, the fingerprint form, the envelope order and the batch
routing; the integration half opens real buses against cannet-server debug vbus and debug replay on explicit loopback, and skips when the
binary is not built. A python-client CI job builds the server and runs
them for real, and four pre-commit hooks mirror the sidecar's.

Also drops 17 inherited (task 129) references from apps/gui/src/
comments (from #450). CLAUDE.md forbids naming a task in source; every
one was a bare parenthetical carrying nothing else, so it goes.

[thebhef]

• Filter the unit picker, and let a composed kind offer its whole class #509 : 2 dependent PRs (#510 , #520 )
• Read the whole unit table out of the library instead of typing it #508
• Name the project in each project-caches row; Delete becomes two-stage #507
• The settings view re-reads what it shows and keeps its place #506
• Draw plot sample markers as squares, collapsed per pixel column #505
• Draw the plot's hover chrome on an overlay canvas #504
• Close the palette before running the picked command #503
• Plumb empty plot areas, per-area event-marker base, and an Events chip #501
• Move the cursor and event readouts out of the data area into gutters #500
• Mark every served sample, and make an enum lane an ordinary series #499
• Serve every window as first, last, min and max, and drop the categorical reducer #498
• Measure what a plain min/max serve does to a held enum code #497
• Filter the Trace panel's rows with the same fzf, in both modes #496
• Rank the trace's rows host-side with the app's own fzf #495
• Let a bus explicitly set to no interface connect as unbound #494
• Let regular collapse/expand work while the database/RBS filter is active #493
• Groom five tasks: four out of the user feedback, plus the trace filter #492
• close out math signal, python server client, export dialog #475
• The example captures are plain git blobs, not LFS objects #490
• The local hardware sidecar is named for what it is, not for one library #489
• The anchor index folds on the flush cadence and survives a relaunch #487
• A BLF export walks the store in chunks instead of snapshotting it #486
• Compose a unit from the ones the app already knows #485
• A pressed chip inside a segment reads as pressed, in every theme #484
• Icon controls and the run toggle replace text buttons in the project panel #483
• A unit is picked as a base and a prefix, wherever one is chosen #482
• A unit is a base unit and a prefix, and every function derives one #481
• The signal mapping panel flags the unit strings nothing can place #480
• The math editor sets the scaling, and the settings view says what a unit string means #477
• A math signal's unit becomes the target its operands convert to #476
• Math signals reach the plot, the signal views and an MDF export #474
• Math signals are created and edited in place under the Computed branch #473
• Math signals compute host-side as a fourth decode provenance #472
• The logger folder's file gridview lists what it holds, recursively #471
• A project logger writes the capture to file while it is connected #470
• An export dialog names the capture and its slice, and the write runs in the background #469
• Host-side template resolution and sticky state for log export #468
• Accept a cannet server from the command line #488
• Correct delivered timestamps for the peer's clock, and detect servers #467
• A python-can application opens a cannet bus by naming a trusted server #466 👈 (View in Graphite)
• Make the wire protocol state its version, and every client check it #491
• The database panel's search box takes a click anywhere in the box #479
• Ctrl+F finds in the settings panel #478
• misc feedback + planning updates #464 : 1 other dependent PR (#465 )
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.