[AEP][medium] AEP-20260924-r3-REPO-F01: parse ISO times in the fallback page

[mattmre]

Description

The inline fallback page, used only when dashboard/index.html is missing, parses numbers as unix seconds and naive ISO strings as UTC. Unparseable values render as a dash. The regex is written so ruff accepts it and the JavaScript source still contains \d.

This score is for 89fd7ff, replayed onto the squash of #336. git range-diff marks it equal to the previously scored 3be98ff.

Type of Change

• Bug fix

Testing

ruff check dashboard_server.py passed. TestInlineDashboardTimestamp passed. Review grok-tierb-337d-20260924 confirmed the range-diff equality and re-ran both. No browser.

Brutal Honesty

• No browser was run.
• This does not change dashboard/index.html. The production page parser landed with [AEP][high] AEP-20260924-FE001: stop false dashboard status #329.
• The production page is what operators see when that file exists.

EVIDENCE: ruff and TestInlineDashboardTimestamp on 89fd7ff; range-diff equal to 3be98ff; review grok-tierb-337d-20260924
SMOKE: targeted unittest only; bash scripts/smoke.sh was not run on this branch
BHS_SELF_DRAFT: 100
BHS_SELF_DRAFT_AGENT: grok-aep-fix-20260924
BHS_TIER_B: 100
BHS_TIER_B_AGENT: grok-tierb-337d-20260924
BHS_TIER_B_SEVERITY: none
BHS_OFFICIAL: 100
CARRY_FORWARD: none
DEFERRED_SCOPE: none
LOOP_ITERATIONS: 2
OPERATOR_OVERRIDE: none

[mattmre]

Review of 3596190. The inline formatTimestamp matches the intended branches: a number is unix seconds, a zoned string is that instant, a naive ISO string gets Z, and a bad value becomes - without throwing. Two problems stay open.

1. dashboard_server.py:590 is a normal Python string, so \d is an invalid escape. ruff check dashboard_server.py exits 1 with W605 on both \d sequences. Write \\d so the JavaScript regex still sees \d, and ruff passes.

2. Nothing reads get_inline_dashboard_html(). Putting new Date(timestamp * 1000) back for every value does not fail the dashboard tests. Add a test that loads that string, and fails if a numeric stamp is not multiplied by 1000 or if a naive ISO string is not treated as UTC.

Tier B on this SHA: 84, severity important. This commit does not merge. The production page parser is PR #329, not this fallback.

[mattmre]

Fix pushed as 2f91085, rebased onto the updated history-limit tip 91ab50c.

The inline timestamp regex is written as \\d in the Python source, so ruff W605 is gone and the JavaScript source still contains \d. TestInlineDashboardTimestamp runs the extracted function under node: a numeric stamp is unix seconds, a naive ISO string is UTC, and not-a-time is -.

Parent re-ran that test plus test_dashboard_api_limits.py: 10 passed. ruff check dashboard_server.py passed. No browser. Not merged. The body still scores 3596190. A fresh Tier B review of 2f91085 is required.