fix: the touch-calibration section only on images with a touch panel

[angeloINTJ]

What

The Configuration page shows a Touch Calibration section, with a reset button, on every image. The alpha and the Air have no touch panel:

• Since feat: P2 routes seam — /api/themes and /api/reset_touch_cal register TFT-only #184 (on main, not yet released) they do not register /api/reset_touch_cal, so the button answers 404 and the page shows "Error".
• Before feat: P2 routes seam — /api/themes and /api/reset_touch_cal register TFT-only #184 (v2.7.3) the handler zeroed the stored calibration, wrote the config to flash and answered "Reset done — calibration wizard is now running on the display" on a device with no display.

The section and resetTouchCal( ) now sit inside @IF tft, like the panel mirror and the theme picker. Found while documenting v2.7.4, before the release.

The gate that missed it

build_webui_gz.py refused a function or an element id that lives inside an @IF block and is used outside it, but it did not look at routes. It now reads the routes registerScreenRoutes( ) registers, parsed from the C++ so the list cannot go stale, and refuses a call to one of them from outside an @IF tft block. The check runs on every pio run.

tools/test_webui_feature_routes.py pins it. It has synthetic cases (outside is refused, inside passes, ? and a route prefix, a comment is not a call) and runs the check on the real WebUI.h. It is in the gates job.

WebUI.h	result
before this change	8 ok, 1 failure, naming /api/reset_touch_cal and only it
after	9 ok

Proof that nothing else moved

• Normalized page diff. I ran the generate( ) pipeline up to the gzip, each side with its own build_webui_gz.py and the ?v= asset stamp fixed on both sides:

  cut	images	result
  nothing omitted	the four with the touch panel	12 of 12 blocks identical to main
  tft omitted	alpha, Air	only CFG_PAGE differs, −1,057 B minified: exactly the section's markup (483 characters) and resetTouchCal( )

• Builds. All six pass their budgets. The asset stamp is the hash of WebUI.h, so every page is recompressed and moves by a byte or so.

  env	used	vs main
  release	997,980	0
  test	1,003,380	+8 (same arrays as release; linker layout)
  test_https	1,011,036	0
  asserts	1,000,156	0
  alpha	963,308	0 (−221 B gzipped, inside the 4 KiB pad)
  air	1,003,144	0 (same)

  flash_budget.json 'measured' is left for the v2.7.4 chore, which re-measures all six.

• Bench. I flashed this branch's alpha image to a Pico W with an HD44780 wired in parallel (11 of 11 checks):

  • /config answers 200 without the section, its strings or the route, and still has Restart without saving;
  • its 4 script blocks pass node --check;
  • POST /api/reset_touch_cal answers 404;
  • the five sensors read.

• Gates run locally. Every run: of the gates job: scan_secrets, gen_logcodes --check, check_authz (62 routes), check_license, check_angulo, check_fsguard, check_air_consistency, gen_features --check, check_features, check_feature_sprawl (233), test_configurator_rules, test_build_custom, test_configurator_page, test_webui_feature_routes, test_h5_day_merge. The eight native suites pass, 420 cases.

Also corrected

• The comment above the cut in build_webui_gz.py said the panel routes were registered under WebManager_Core.cpp's #if. Since refactor: features own their route registration (P2 seam: mirror + TLS) #169 and feat: P2 routes seam — /api/themes and /api/reset_touch_cal register TFT-only #184, registerScreenRoutes( ) in WebManager_History.cpp registers them.

• tools/README.md gains the new test's line and its counts are corrected:

  count	header said	file lists
  scripts	134	140, now 141
  Called by CI	17	23, now 24

  CLAUDE.md said 104 scripts; it now says 141.

Security (the six failures)

Nothing new to report. Authorization stays on the server: on the panel images the handler still requires PERM_SYS_CONFIG, and on the alpha and the Air the route does not exist. Hiding the button is presentation, not access control. The change adds no storage, no secret and no user input, and the build script reads only files in the repository.

🤖 Generated with Claude Code

https://claude.ai/code/session_01Jq4auDQppGzmAx1gLKn1z3