5 Commits

Include renames

Author	SHA1	Message	Date
mrambossekandClaude Opus 5	8d15a318fb	ci: split server release into independent binaries and image jobs ... First tag run failed as one monolithic job. Binaries + Gitea release now need only Go and curl (jq dropped too) and succeed on any runner; the docker image build is a separate job that can fail without killing the release self-update depends on. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-30 16:00:23 +02:00
mrambossekandClaude Opus 5	0c988df7e8	ci: split server test and release workflows — mixed paths+tags never fired ... A push trigger that declares tags: stops matching branch pushes, and the paths filter doesn't apply to tag pushes — so the combined workflow could effectively never run. test-server.yml now covers branch pushes touching server/; build-server.yml is tags-only (server-v*). Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-30 15:41:25 +02:00
mrambossekandClaude Opus 5	8a80026d49	server: Go skeleton — control plane, UDP data plane, Docker + systemd modes ... Pure stdlib. Implements the spec's core: enrollment (single-use tokens), profile (SPKI pin, only real capabilities advertised), sessions with the §2.4 HKDF-SHA256 key schedule; UDP data plane with the 32-byte ELT1 header, 4-byte HMAC gate, 1024-wide anti-replay window, ECHO_RESP with observation block, TIMESYNC, and the §3.4 anti-amplification cap. Wire format has tests (roundtrip + silent-drop cases); enroll→profile→session smoke-tested live. Modes: container (autodetect /.dockerenv|/run/.containerenv|cgroup, or --docker/ECHOLOT_DOCKER=1; config via ECHOLOT_* env; distroless image; network_mode host required — Docker NAT would falsify observed sources) and native (--install-systemd/--uninstall-systemd with a hardened unit, opt-in --self-update from Gitea releases; refused in containers). CI: tests on any server/ push; server-v* tags build+push the image to the Gitea registry and attach linux amd64/arm64 binaries + SHA256SUMS to a release — the artifact self-update consumes. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-30 13:09:08 +02:00
mrambossekandClaude Opus 5	4c61c9bba8	prober: fix three bugs exposed by the first device report (OnePlus 15/A16) ... - AndroidManifest: add CHANGE_NETWORK_STATE — requestNetwork threw SecurityException, multinetwork.request_and_bind could never run. - IcmpProbe: format rtt_ms with Locale.ROOT — Austrian locale produced "38,1" in the JSON report. - ShizukuRunner/ShizukuProbe: bind the UserService once per battery (execBatch) instead of per command; the per-command bind/unbind raced Shizuku and 3/7 commands died on SHIZUKU_BIND_TIMEOUT. Archive the report at echolot-prober/reports/, record findings in build-status.md. Notable: errqueue path fully reachable on Android 16 — the native shim may be unnecessary on modern devices. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-30 11:19:14 +02:00
mrambossekandClaude Opus 5	6ddf013dfe	License the project; add root README, website, and parked release CI ... - Code: GPL-3.0-or-later (LICENSE, SPDX headers on all .kt/.aidl). Specs in docs/: CC-BY-4.0 (docs/LICENSE). Rationale in build-status.md; server decided GPL (not AGPL). - Root README for the public repo. - web/: Cloudflare Worker site for echo-lot.app. /apk resolves the newest APK from the Gitea latest-release API at request time (edge-cached 5 min), so tagging a release is the only publish step. /fdroid, /source, and a manual DOWNLOAD_URL fallback are wrangler vars. - .gitea/workflows/release.yml: tag-driven (v*) signed semver APK builds for the future production app in echolot-app/. Parked; the prober is deliberately not CI-built. - Fix UserService.kt: drop the explicit secondary constructor that conflicted with the implicit primary (never compiled before — first local build caught it). Prober now builds: :app:assembleDebug OK. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-07-30 09:15:35 +02:00