OreBolt-OS/CHANGELOG.md

# Changelog

All notable changes to OreBolt OS are documented in this file.
Format roughly follows Keep-a-Changelog; dates are YYYY-MM-DD.

## [v1.7] -- 2026-07-15

### System Tools Module Rewrite

The reset module is now a multi-function System Tools menu inspired
by Rockbox's tools menu on the Aigo Eros Q platform.  The module
label in the launcher menu changes from "reset" to "system".

### Changed

- **reset.c rewritten as System Tools.**  Four-option scrollable
  menu: PURGE (operational cleanup), HIBY PLAYER (restore stock
  firmware from /data/stock_backup/ and reboot), ROCKBOX (reboot
  if .rockbox/ detected), REBOOT.  Confirmation overlays for all
  destructive actions.  Status overlays with error/success states.
  Rockbox detection is passive only -- OreBolt OS does not ship or
  install Rockbox.
- **build.sh gains --backup-stock flag.**  Phase 8a snapshots the
  stock firmware files (usr/bin/, usr/lib/, etc/, res/, setting/)
  into /data/stock_backup/ before any OreBolt files are written.
  This enables the "Restore Hiby Player" option in System Tools.
- **SD-card-only firmware model.**  All documentation now reflects
  that OreBolt OS and Hiby Player coexist through SD card file
  management alone.  The SPI flash bootloader is never modified.
  SD card is FAT32 single-partition only.
- **Device family identifier set to Aigo Eros Q.**  ARCHITECTURE.md
  and README.md now lead with "Aigo Eros Q family" as the canonical
  hardware platform name.
- **ARCHITECTURE.md adds Section 7: Firmware coexistence.**  Table
  showing which SD card files correspond to which firmware
  environment, and how switching works.
- **ARCHITECTURE.md filesystem layout updated.**  Now includes
  /data/stock_backup/, /data/roms/ paths.
- **main.c module table: "reset" label changed to "system".**  The
  .mod binary filename remains reset.mod for build compatibility.
- **Source comments cleaned across all .c/.h files.**  Version-
  prefixed comment lines replaced with intentional, self-describing
  headers.  No functional code changed (except reset.c).
- **All documentation version bumped to v1.7.**  README, QUICKSTART,
  ARCHITECTURE, BUILD_MANIFEST, LICENSE, PREREQUISITES, HEADERS,
  build.sh, Makefile, Makefile.h2-core-v6.2 (v6.5), S99broker.
- **retro.mod** (retro game launcher) is properly listed across all
  documentation with its full feature description.
- **S99broker: OREBOLT_VERSION exports 1.7**, module count 17.

## [v1.6] -- 2026-07-15

### The "Unified Radar" Release

v1.6 consolidates the standalone `radar.mod` (BLE hex grid scanner) and the
`wifi.mod` adapter stub into the unified `proxalarm.mod` binary.  This
eliminates ~30 KB of duplicate .text on 64 MB RAM devices, removes a
redundant HCI connection, and provides a single source-agnostic RF
scanning API with a WiFi integration stub.

### Removed

- **radar.mod (orebolt-radar/noise_radar.c).**  Superseded by
  proxalarm's radar_ui canvas renderer (rotating sweep, range rings,
  velocity vectors, alarm overlay).  The `modules/orebolt-radar/`
  directory is removed.
- **wifi.mod (orebolt-wifi/wifi.c).**  The v1.4 stub had no `main()`
  function and could not be fork+exec'd by the launcher.  Its purpose
  (WiFi adapter control) is now served by bledsp's source-agnostic
  device table and the `bledsp_poll_wifi()` stub.  The
  `modules/orebolt-wifi/` directory is removed.

### Changed

- **Module count: 17 .mod binaries + 1 standalone daemon** (was 19 + 1).
- **bledsp upgraded to unified RF scanning layer.**  New API:
  - `bledsp_source_t` enum gains `BLE_SRC_SIM` (explicit sim mode).
  - `bledsp_get_source()` / `bledsp_cycle_source()` for runtime source
    selection.
  - `bledsp_source_label()` returns "BLE", "WIFI", or "SIM".
  - `bledsp_poll_wifi()` stub with implementation roadmap (nl80211).
  - `bledsp_poll()` now centralizes the "mark all inactive" step before
    dispatching to `ble_poll()`, `sim_poll()`, or `bledsp_poll_wifi()`.
- **proxalarm main gains NEXT key handler.**  NEXT cycles the active
  RF source between BLE and WIFI at runtime, with live label update.
- **H2_MOD_RADAR and H2_MOD_WIFI removed from h2_ui.h enum.**
  Enum renumbered: PROXALARM is now ID 15, BITCHAT is ID 16.
- **main.c module table: radar and wifi entries removed, all versions
  bumped to 1.6.**
- **Makefile.h2-core-v6.2 -> v6.3.**  BLUETOOTH_MODULES reduced to
  just `proxalarm` (was `radar proxalarm`).  radar and wifi build
  targets removed.
- **All documentation updated** (ARCHITECTURE.md, README.md, this file).
  Stale references to radar.mod, wifi.mod, "19 modules" purged.
  Memory spec corrected to 64 MB (was incorrectly 128 MB).

### Added (from earlier v1.6 work, preserved)

- **proxalarm -- BLE Proximity Alarm (tripwire detector).**  Three-layer
  architecture: bledsp (BLE scanning + RSSI DSP smoothing), proxvec
  (kinematics engine with per-target state machine and velocity tracking),
  radar_ui (LVGL canvas radar display).  Now unified with WiFi stub.
- **Documentation hardening** (BitChat nominative fair use analysis,
  module descriptions aligned to actual implementations).

## [v1.5] -- 2026-07-14

### The "Implementations" Release

v1.4 shipped 18 module slots with zero functional code -- every module was
a build-linkable stub that displayed a label and logged init/deinit.  v1.5
provides full implementations for 13 of those 18 modules, adapted to the
v1.4 build infrastructure and header API.

### Fixed

- **emulator_input_mapper build target no longer links against LVGL.**
  v1.4's `Makefile.h2-core-v6.1` compiled the mapper stub with
  `-llvgl`, which would break the real standalone uinput daemon.
  v1.5's `Makefile.h2-core-v6.2` builds the mapper with zero LVGL
  flags or libraries -- it is a pure uinput daemon.
- **main.c uses the fork/exec launcher model.**  v1.4's main.c
  ran a single monolithic LVGL event loop with all modules as stub
  callbacks.  v1.5 uses the fork/exec broker: the launcher shows the
  module menu, fork+execs the selected .mod binary, and waitpid()
  blocks until the child exits.  Each module binary
  initializes its own LVGL instance and runs its own event loop.
- **h2_ui.h provides both module APIs.**  Provides both the
  `init_h2_graphics_runtime()` inline bootstrap (for standalone
  .mod binaries) and the `h2_module_t` registration API (for
  the launcher menu).  Also defines H2 input event code constants
  (H2_KEY_PLAY, H2_KEY_BACK, etc.) used uniformly across all modules.
- **log_manager.h provides both logging APIs.**  Provides both the
  v1.4 structured log level interface (LOG_INF/DBG/ERR macros,
  log_init/log_write/log_close) and the v1.3 flash-safe timed
  coalescer (timed_log_init/timed_log_write/timed_log_flush_to_media)
  with 64KB RAM buffer and configurable windowed disk flush.
- **S99broker OREBOLT_VERSION set to 1.5** (was still "1.4").

### Changed

- **Module count in Makefile: 18 .mod binaries + 1 standalone daemon.**
  v1.4's Makefile listed 18 entries including emulator_input_mapper
  as an LVGL module.  v1.5 lists 18 .mod entries (rfid/wifi/glitch/
  pwdb/bitchat remain stubs) plus a separate `mapper` target that
  builds the standalone daemon without LVGL.
- **Sub-Makefile bumped: Makefile.h2-core-v6.1 -> Makefile.h2-core-v6.2,
  Makefile.orebolt-v1.4 -> Makefile.orebolt-v1.5.**
- **Master Makefile updated** to reference v6.2 and v1.5 sub-makefiles.
- **radar module now links against -lbluetooth** for BlueZ HCI calls.
- **All restored modules use H2_KEY_BACK/H2_KEY_PLAY constants** instead
  of hardcoded key codes (158/164), and include LOG_INF/LOG_ERR calls.
- **vault upgraded to full PIN auth module.**  The original v1.3/v1.5
  entropy-only display has been replaced with the complete Master
  Manifest vault implementation: 4-digit PIN entry with rotary
  encoder, non-volatile failure tracking, 300s lockout penalty,
  and dual wired/wireless identity modes with automatic USB/BLE
  state enforcement based on cable detection.
- **studio upgraded to UAC2 Mixer Console.**  The original v1.3/v1.5
  frequency analyzer has been replaced with the complete Master
  Manifest studio implementation: 4-channel mixer (GAME/DISCORD/
  MIC/MUSIC) with per-channel volume bars, USB Consumer Control
  HID commands via /dev/hidg1 (vol up/down/mute), NEXT/PREV key
  channel switching, and hardware mute toggle with visual feedback.
- **S99broker now sets system volumes to maximum on boot** via
  `amixer sset 'Master' 100% unmute` and `amixer sset 'Headphone'
  100% unmute`, matching the Master Manifest boot sequence.

### Added

- **13 fully functional module implementations:**
  - **vault** -- Crypto Security Token Vault Gateway.  Full PIN
    authentication system (default 4-2-9-1) with rotary digit entry,
    non-volatile failure tracking via /data/vault/failures.dat,
    3-attempt lockout with 300s penalty countdown.  Dual identity
    modes: WIRED (USB composite gadget via enable_vault_usb.sh) and
    WIRELESS BLE (via enable_vault_ble.sh) with automatic switching
    based on USB cable detection.  RAM key purge on BACK exit.
  - **nettaps** -- USB Virtual Network Tap.  Selectable time-window
    coalescer (30s/1m/2m/5m/10m), raw AF_PACKET capture on usb0,
    IP packet parsing, live LVGL console, flash-safe timed disk flush.
  - **scalpel** -- Acoustic Scalpel Live Sound Synthesizer.  NEW
    module from Master Manifest (Asset V).  POSIX-threaded audio
    synthesis writing to /dev/dsp at 44.1kHz.  SINE and SQUARE
    waveforms with real-time frequency tuning (20 Hz - 20 kHz)
    via rotary encoder in 10 Hz steps.  PLAY toggles waveform.
  - **deploy** -- Flash Storage Manager.  statvfs("/") display of
    total/used/free MB with percentage, manual sync() via PLAY button.
  - **studio** -- Studio Audio Class 2.0 Streaming Control Console.
    4-channel mixer (GAME/DISCORD/MIC/MUSIC) with per-channel
    volume bars, NEXT/PREV key channel switching, PLAY toggles
    hardware mute.  Sends USB Consumer Control HID commands
    (volume up/down/mute) to host via /dev/hidg1.  DAC link
    status display (PCM 24-bit / 192 kHz).
  - **probe** -- I2C Bus Hardware Scanner.  Probes /dev/i2c-0 address
    space 0x03-0x77, displays responding devices with green highlighting.
  - **vterm** -- FreeDOS Emulation Bridge.  fork+exec dosbox with custom
    config, SIGTERM cleanup on BACK key, waitpid(WNOHANG) monitoring.
  - **radar** -- BLE Device Radar Scanner.  BlueZ HCI inquiry with RSSI
    (primary) or standard inquiry (fallback), 19-cell hexagonal heatmap
    grid, 3-tier RSSI color coding, auto-repeating scan loop.
  - **pauto** -- Payload Automation (HID Keystroke Injector).  Full
    OreBolt macro command language parser (DELAY, STRING, REM,
    modifier+key combos), USB HID keycode table (a-z, A-Z, 0-9,
    punctuation, F1-F12), rotary-scrollable payload picker, 8-byte
    report via /dev/hidg0.
  - **extract** -- Mass Storage Extractor.  Recursive copy from
    /mnt/target_media to /data/loot_drop/extracted/, skips symlinks,
    4KB chunk copy, displays file/dir/byte counts.
  - **noise** -- USB Hardware TRNG Stream.  Generates 32-byte true
    entropy blocks via getrandom(GRND_RANDOM), pipes to host over
    CDC ACM serial (/dev/ttyGS0) at 100Hz.
  - **reset** -- System Stack Purge/Reset.  3-state machine
    (CONFIRM->RUNNING->DONE), kills dosbox, brings usb0 down,
    deletes /data/loot_drop contents, calls sync().
  - **emulate** -- Universal Retro Game Launcher.  17-type ROM
    database (NES/FDS/SNES/GB/GBC/GBA/Genesis/SMS/GameGear/PCE/
    Atari2600/NeoGeoP), recursive /data/roms/ scan, 13-system filter
    with rapid-rotate cycling, fork+exec emulator launch, BACK kills
    child with SIGTERM.
- **emulator_input_mapper standalone daemon** -- fully integrated
  Full 456-line uinput gamepad translator: rotary encoder to d-pad
  (V-mode/H-mode toggle, 3s auto-revert), PLAY/BACK to A/B (short)
  and START/SELECT (long 1.5s), PREV/NEXT to L/R shoulders, combo
  buttons for X/Y.  Creates "H2 Virtual Gamepad" via /dev/uinput.
  Now built with -fstack-protector-strong -D_FORTIFY_SOURCE=2.
- **S98retro-input init script** -- Full PID tracking,
  daemon existence checks, graceful TERM to KILL escalation (2s timeout),
  stale pidfile detection, and `status` command.
- **ROM directory structure** created in overlay/data/roms/ for 11
  systems: nes, snes, gb, gbc, gba, genesis, sms, gg, pce, atari2600,
  ngp.  Directories are created both at build time (makefile rom-dirs
  target) and shipped in the overlay tree.
- **overlay/data/bt_config/paired_macs.txt** -- Trusted accessory MAC
  allow-list for bt_input_daemon.sh autoconnect.
- **overlay/data/chat_config/macros.txt** -- 10 pre-defined BitChat
  mesh command templates (STATUS/ALERT/CMD/TEST/PANIC types).

### Still Stubs (5 modules)

The following modules added in v1.4 remain as stubs pending real
hardware implementations:

- **rfid** -- RFID reader (no hardware spec yet)
- **wifi** -- WiFi management (no driver support yet)
- **glitch** -- Glitch/fault injection (hardware-dependent)
- **pwdb** -- Password database (design phase)
- **bitchat** -- Mesh frontend (liborebolt.a has mod_bitchat_mesh.c
  with bloom filter, but the .mod UI stub needs real BLE mesh code)

## [v1.4] -- 2026-07-13

### Rebrand: "Project Orebolt" -> "OreBolt OS"

The project has been rebranded from "Project Orebolt" to **OreBolt OS**.
The v1.4 release is a build-and-licensing cleanup pass.  All 18 module
.c files are build-linkable stubs.  See the full v1.4 changelog for
details on the SoC correction, SHA256SUMS fix, and AGPL licensing.

## [v1.3] -- 2026-07-13 (pre-cleanup)

Initial public drop.  Shipped the overlay tree and all 12 module
implementations as standalone fork/exec binaries.  Targeted the wrong
SoC (T31 instead of X1000E).  See v1.4 changelog for cleanup details.