From be635accd46840223333c2000bda1b767dbf6308 Mon Sep 17 00:00:00 2001
From: firestar5683 <168790843+firestar5683@users.noreply.github.com>
Date: Sat, 19 Sep 2026 19:05:39 -0700
Subject: [PATCH] Keep calibration clock synchronization free of blocking
 safety checks

---
 starpilot/system/the_galaxy/roadscore.py      |  8 +++++++
 .../tests/test_roadscore_operator.py          | 23 +++++++++++++++++++
 2 files changed, 31 insertions(+)

diff --git a/starpilot/system/the_galaxy/roadscore.py b/starpilot/system/the_galaxy/roadscore.py
index 0e679841ef..8a8317513a 100644
--- a/starpilot/system/the_galaxy/roadscore.py
+++ b/starpilot/system/the_galaxy/roadscore.py
@@ -5,6 +5,7 @@ from pathlib import Path
 import importlib.util
 import sys
 import threading
+import time
 from urllib.parse import urlsplit
 
 PROFILES = [{"id": "prism", "name": "Prism"}, {"id": "aurora", "name": "Aurora"}]
@@ -205,6 +206,13 @@ def register(app, params):
     data = request.get_json(silent=True)
     if not isinstance(data, dict):
       return jsonify(error='Expected an object'), 400
+    if action == 'clock':
+      if data:
+        return jsonify(error='Clock request takes no arguments'), 400
+      # Read-only synchronization must not include subprocess or output-lock delays.
+      response = jsonify(ok=True, server_ms=time.monotonic() * 1000)
+      response.headers['Cache-Control'] = 'no-store'
+      return response
     try:
       return jsonify(operator.operate(action, data, real_offroad()))
     except (ValueError, OSError) as error:
diff --git a/starpilot/system/the_galaxy/tests/test_roadscore_operator.py b/starpilot/system/the_galaxy/tests/test_roadscore_operator.py
index 3d3b343014..12e88ecd35 100644
--- a/starpilot/system/the_galaxy/tests/test_roadscore_operator.py
+++ b/starpilot/system/the_galaxy/tests/test_roadscore_operator.py
@@ -11,6 +11,29 @@ def load(name):
   return module
 operator = load('roadscore')
 
+class ClockEndpointTests(unittest.TestCase):
+  def test_clock_avoids_output_and_safety_work_but_start_does_not(self):
+    from flask import Flask
+    from unittest.mock import patch
+    import operator_output
+    app = Flask(__name__)
+    with patch.object(operator, 'Operator') as factory, patch.object(operator_output, 'real_offroad', return_value=False) as offroad:
+      operator.register(app, None)
+      client = app.test_client()
+      response = client.post('/api/roadscore/clock', json={})
+      self.assertEqual(response.status_code, 200)
+      self.assertGreater(response.json['server_ms'], 0)
+      self.assertEqual(response.headers['Cache-Control'], 'no-store')
+      offroad.assert_not_called()
+      factory.return_value.operate.assert_not_called()
+      self.assertEqual(client.post('/api/roadscore/clock', json={'extra': 1}).status_code, 400)
+      self.assertEqual(client.post('/api/roadscore/clock', json={}, headers={'Origin': 'https://unrelated.example'}).status_code, 403)
+      factory.return_value.operate.return_value = {'ok': False}
+      client.post('/api/roadscore/calibration_start', json={'attended': True})
+      offroad.assert_called_once()
+      factory.return_value.operate.assert_called_once_with('calibration_start', {'attended': True}, False)
+
+
 class OriginTests(unittest.TestCase):
   def test_local_and_tunneled_same_origin(self):
     allowed = operator.control_origin_allowed