Enforce device provisioning redirect for all user-facing routes

[remo-lab]

Fixes #14067

Problem

When a Kolibri device is not provisioned, only the root URL (/) redirects to the setup wizard.
Direct navigation to user-facing routes such as:

• /en/learn/
• /en/learn/#/library
• /en/facility/

loads the UI instead and shows messages like “No resources available”, which is confusing and bypasses the required device setup flow.

This allows users to reach parts of the application in an invalid, unprovisioned state.

---

Root Cause

The provisioning check was implemented only in RootURLRedirectView.
Other views (such as LearnView) render their templates unconditionally.

The existing ProvisioningErrorHandler middleware only handles DeviceNotProvisioned exceptions and does not proactively block requests. Since these views never raise that exception, the middleware was never triggered.

---

Fix

This change moves provisioning enforcement to the middleware layer so it applies consistently to all requests.

• ProvisioningErrorHandler now checks provisioning status on every request
• If the device is not provisioned, requests are redirected to the setup wizard
• Required paths (setup wizard itself, static assets, APIs needed during setup, content downloads, etc.) are explicitly exempted to avoid redirect loops or breakage
• Existing exception-based handling is preserved as a fallback

This ensures that no user-facing UI is rendered until the device is properly provisioned.

Recording.2026-01-15.232233.mp4

---

Tests

Added middleware-level regression tests to verify that:

• Unprovisioned devices are redirected when accessing Learn and related routes
• The setup wizard and required assets remain accessible during provisioning
• Provisioned devices continue to behave normally

These tests fail on the previous behavior and pass with this change, helping prevent regressions.

---

Impact

• Prevents access to Learn/Facility routes before device setup
• Fixes confusing empty UI states on fresh installs
• Enforces a single, consistent provisioning gate for current and future plugins

[learning-equality-bot]

👋 Thanks for contributing!

We will assign a reviewer within the next two weeks. In the meantime, please ensure that:

• You ran pre-commit locally
• All issue requirements are satisfied
• The contribution is aligned with our Contributing guidelines. Pay extra attention to Using generative AI. Pull requests that don't follow the guidelines will be closed.

We'll be in touch! 😊

[github-actions]

Build Artifacts

Asset type	Download link
PEX file	kolibri-0.20.0.dev0_git.20260115200926.pex
Windows Installer (EXE)	kolibri-0.20.0.dev0+git.20260115200926-windows-setup-unsigned.exe
Debian Package	kolibri_0.20.0.dev0+git.20260115200926-0ubuntu1_all.deb
Mac Installer (DMG)	kolibri-0.20.0.dev0+git.20260115200926.dmg
Android Package (APK)	kolibri-0.20.0.dev0+git.20260115200926-0.1.6-debug.apk
Raspberry Pi Image	kolibri-pi-image-0.20.0.dev0+git.20260115200926.zip
TAR file	kolibri-0.20.0.dev0+git.20260115200926.tar.gz
WHL file	kolibri-0.20.0.dev0+git.20260115200926-py2.py3-none-any.whl

[remo-lab]

Hi @rtibbles @AlexVelezLl @nucleogenesis ,
This PR makes sure unprovisioned devices are always redirected to the setup wizard, instead of landing on pages like the Learn UI in a half-set state. I’ve also added tests to cover the main cases and avoid regressions.
Whenever you have a moment, I’d really appreciate a review. Thanks!