jedarden/spaxel

Fork 0

Commit graph

Author	SHA1	Message	Date
jedarden	ee1caf6ed8	feat: dual-partition OTA rollback validation with 60s role timeout Update partition layout to 4MB factory/ota_0/ota_1 partitions for larger firmware images. Add a 60-second validation timer that starts after the hello message is sent on boot from an OTA partition. The partition is only marked valid (via esp_ota_mark_app_valid_cancel_rollback) after receiving a role message from the mothership. If the timer expires without role receipt, the partition stays unconfirmed and the bootloader rolls back to the previous firmware on next reset. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-04-07 01:43:29 -04:00
jedarden	f178496c83	feat(firmware): ESP32-S3 firmware skeleton with CSI/BLE/WebSocket - State machine: 7-state lifecycle (BOOT→WIFI→DISCOVERY→CONNECTED, degraded modes WIFI_LOST/MOTHERSHIP_UNAVAILABLE/CAPTIVE_PORTAL) - WiFi: STA connection with exponential backoff, mDNS discovery with cached IP fallback, captive portal AP for provisioning - WebSocket: bidirectional comms, binary CSI frames (24B header + I/Q), JSON hello/health/ble/ota_status upstream, role/config/ota/reboot downstream, OTA task with progress reporting - CSI: promiscuous mode capture, queue-based processing, passive BSSID filter, on-device variance tracking (Welford's) for motion hints - BLE: passive scanning on Core 0, 60-device cache, 5s reporting - NVS: 15-key schema with versioning, role/rate persistence Complete: ESP32 firmware skeleton, passive radar, BLE scanning Remaining: Dashboard skeleton, Docker packaging (Phase 1 items 5-6) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-26 07:20:55 -04:00

Author

SHA1

Message

Date

jedarden

ee1caf6ed8

feat: dual-partition OTA rollback validation with 60s role timeout

Update partition layout to 4MB factory/ota_0/ota_1 partitions for larger
firmware images. Add a 60-second validation timer that starts after the
hello message is sent on boot from an OTA partition. The partition is only
marked valid (via esp_ota_mark_app_valid_cancel_rollback) after receiving
a role message from the mothership. If the timer expires without role
receipt, the partition stays unconfirmed and the bootloader rolls back to
the previous firmware on next reset.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-07 01:43:29 -04:00

jedarden

f178496c83

feat(firmware): ESP32-S3 firmware skeleton with CSI/BLE/WebSocket

- State machine: 7-state lifecycle (BOOT→WIFI→DISCOVERY→CONNECTED,
  degraded modes WIFI_LOST/MOTHERSHIP_UNAVAILABLE/CAPTIVE_PORTAL)
- WiFi: STA connection with exponential backoff, mDNS discovery with
  cached IP fallback, captive portal AP for provisioning
- WebSocket: bidirectional comms, binary CSI frames (24B header + I/Q),
  JSON hello/health/ble/ota_status upstream, role/config/ota/reboot
  downstream, OTA task with progress reporting
- CSI: promiscuous mode capture, queue-based processing, passive BSSID
  filter, on-device variance tracking (Welford's) for motion hints
- BLE: passive scanning on Core 0, 60-device cache, 5s reporting
- NVS: 15-key schema with versioning, role/rate persistence

Complete: ESP32 firmware skeleton, passive radar, BLE scanning
Remaining: Dashboard skeleton, Docker packaging (Phase 1 items 5-6)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-26 07:20:55 -04:00

2 commits