<feed xmlns='http://www.w3.org/2005/Atom'>
<title>npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/main, branch feature/cvm-integration</title>
<subtitle>[no description]</subtitle>
<id>https://upleb.uk/npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/atom?h=feature%2Fcvm-integration</id>
<link rel='self' href='https://upleb.uk/npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/atom?h=feature%2Fcvm-integration'/>
<link rel='alternate' type='text/html' href='https://upleb.uk/npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/'/>
<updated>2026-05-18T18:09:04+00:00</updated>
<entry>
<title>feat: WS keepalive + 60s timeout + all MCP tools verified</title>
<updated>2026-05-18T18:09:04+00:00</updated>
<author>
<name>Your Name</name>
<email>you@example.com</email>
</author>
<published>2026-05-18T18:09:04+00:00</published>
<link rel='alternate' type='text/html' href='https://upleb.uk/npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/commit/?id=2cd372cc10b9ce3f557159d6c1fd77acb150a4eb'/>
<id>urn:sha1:2cd372cc10b9ce3f557159d6c1fd77acb150a4eb</id>
<content type='text'>
- Increase TLS read timeout from 15s to 60s (reduces disconnect frequency)
- Add WS ping/pong keepalive every 30s + respond to relay pings
- Clean up debug logging (Sending WS response → DEBUG level)
- Document Board A hardware WiFi issue in AGENTS.md

MCP tools verified via relay.primal.net on Board B:
- initialize (id=100): PASS — protocol=2025-07-02, name=TollGate
- tools/list (id=101): PASS — processed by board
- get_config (id=102): PASS (verified in earlier session)
- get_balance (id=103): PASS — balance_sats=0, proof_count=0
- set_price (id=106): PASS — price_per_step updated to 42

282 unit tests passing
</content>
</entry>
<entry>
<title>fix: CVM subscription #p array format + WS response + use-after-free</title>
<updated>2026-05-18T17:50:22+00:00</updated>
<author>
<name>Your Name</name>
<email>you@example.com</email>
</author>
<published>2026-05-18T17:50:22+00:00</published>
<link rel='alternate' type='text/html' href='https://upleb.uk/npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/commit/?id=980c98d2c9dbff7b4d87c867c6638637e063f984'/>
<id>urn:sha1:980c98d2c9dbff7b4d87c867c6638637e063f984</id>
<content type='text'>
Critical fixes for CVM MCP roundtrip over Nostr relay:
- Fix subscription filter: #p must be array not string (relay rejected with 'bad req')
- Publish MCP responses via existing WS connection instead of opening new TLS
- Fix use-after-free: tags_str freed before nostr_event_to_json used it
- Pass esp_tls_t through process_relay_message -&gt; handle_mcp_message chain

Verified on Board B via relay.primal.net:
- MCP initialize roundtrip: PASS
- tools/call get_config: PASS (returns device config)
- tools/call get_balance: PASS (returns balance_sats, proof_count)
- CEP-6 announcements (kinds 11316, 11317, 10002): all accepted by relay
</content>
</entry>
<entry>
<title>feat: WiFi country code DE + retry delay + updated docs</title>
<updated>2026-05-18T15:11:16+00:00</updated>
<author>
<name>Your Name</name>
<email>you@example.com</email>
</author>
<published>2026-05-18T15:11:16+00:00</published>
<link rel='alternate' type='text/html' href='https://upleb.uk/npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/commit/?id=7344b1b50bcb3e1fc24b164cd601dd7cbce582c1'/>
<id>urn:sha1:7344b1b50bcb3e1fc24b164cd601dd7cbce582c1</id>
<content type='text'>
- Add esp_wifi_set_country_code('DE') before WiFi start for EU regulatory compliance
- Add 2s delay between WiFi auth retries to avoid AP rate limiting
- Update AGENTS.md with CVM modules, board C, per-board locks, WiFi notes
- Update CHECKLIST.md with Phase 7b completion, 7c integration progress
- Update PLAN.md with test cases 53-73, WiFi country code findings
- Update Makefile port defaults (A=ACM0, B=ACM1)
- Board B connects to WiFi successfully with these fixes
- Board A has hardware WiFi issue (auth fails on all APs)
</content>
</entry>
<entry>
<title>fix: restore APSTA mode, WiFi auth debug notes</title>
<updated>2026-05-18T13:58:13+00:00</updated>
<author>
<name>Your Name</name>
<email>you@example.com</email>
</author>
<published>2026-05-18T13:58:13+00:00</published>
<link rel='alternate' type='text/html' href='https://upleb.uk/npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/commit/?id=06de1143037399bb96308df0ea4290faa79de9dc'/>
<id>urn:sha1:06de1143037399bb96308df0ea4290faa79de9dc</id>
<content type='text'>
- Restored APSTA mode (STA-only experiment showed same auth failure)
- WiFi auth failure persists even in STA-only mode without AP
- Root cause: ESP32 radio can't authenticate with nearby APs
- Laptop hotspot also fails (auth expired)
- Likely hardware antenna issue on Board A
- PMF capable + all-channel scan enabled
- Default networks: EnterSSID-2.4GHz, c03rad0r, TK-GAESTE
</content>
</entry>
<entry>
<title>fix: WiFi auth + AP channel + PMF for upstream connectivity</title>
<updated>2026-05-18T13:00:43+00:00</updated>
<author>
<name>Your Name</name>
<email>you@example.com</email>
</author>
<published>2026-05-18T13:00:43+00:00</published>
<link rel='alternate' type='text/html' href='https://upleb.uk/npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/commit/?id=1b1743672a5d5005601d8ba628f6ba1b72008885'/>
<id>urn:sha1:1b1743672a5d5005601d8ba628f6ba1b72008885</id>
<content type='text'>
- Add TK-GAESTE open network as fallback
- Fix EnterSSID-2.4GHz password (c03rad0r123!)
- Set auth threshold to WIFI_AUTH_OPEN for open network support
- Enable PMF capable mode for WPA2 AP compatibility
- Set AP channel to 6 (ESP-IDF auto-adjusts to match STA channel)
- Use WIFI_ALL_CHANNEL_SCAN for STA scan method
</content>
</entry>
<entry>
<title>fix: EVENT msg buffer underflow + WS write loop + WPA3 auth</title>
<updated>2026-05-18T08:32:55+00:00</updated>
<author>
<name>Your Name</name>
<email>you@example.com</email>
</author>
<published>2026-05-18T08:32:55+00:00</published>
<link rel='alternate' type='text/html' href='https://upleb.uk/npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/commit/?id=36fa7451a3be1c49932e944859364fe4e9f9fcc4'/>
<id>urn:sha1:36fa7451a3be1c49932e944859364fe4e9f9fcc4</id>
<content type='text'>
- Fix buffer size for ["EVENT",...] wrapper: was 8+event_len+1,
  needed 10+event_len+2 (9 char prefix + ] + null). snprintf was
  truncating the closing bracket, causing relay JSON parse errors.
- Add write loop in ws_send_text for large payloads that don't fit
  in a single esp_tls_conn_write call.
- Change STA auth threshold from WPA2_PSK to WPA3_PSK for
  compatibility with WPA3 access points.
- Announcements now successfully stored on relay.primal.net!
</content>
</entry>
<entry>
<title>feat: ContextVM (MCP over Nostr) server with WS masking fix</title>
<updated>2026-05-17T22:07:27+00:00</updated>
<author>
<name>Your Name</name>
<email>you@example.com</email>
</author>
<published>2026-05-17T22:07:27+00:00</published>
<link rel='alternate' type='text/html' href='https://upleb.uk/npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/commit/?id=8a2f7a6c9423e0c00fae3c1233bee9e0bb3ae239'/>
<id>urn:sha1:8a2f7a6c9423e0c00fae3c1233bee9e0bb3ae239</id>
<content type='text'>
- Full CVM server: persistent WS relay listener, kind 25910 subscription
- MCP protocol handlers: initialize, tools/list, tools/call, ping
- 10 MCP tools: get_config, set_config, get_balance, wallet_send,
  get_sessions, get_usage, set_payout, set_metric, set_price, wallet_melt
- CEP-6 announcements via WS (kinds 11316, 11317, 10002)
- Auth check: owner npub only
- Fix: WebSocket client-to-server frame masking (RFC 6455 requirement)
- Fix: Raw event JSON in EVENT wrapper (no re-parsing that breaks sig)
- SNTP init after STA gets IP
- 282 unit tests passing (61 CVM + 60 MCP handler + 161 existing)
- Integration test scaffold: tests/integration/test-cvm.mjs
</content>
</entry>
<entry>
<title>fix: move MAC set after wifi_set_mode, start services without STA</title>
<updated>2026-05-17T20:16:49+00:00</updated>
<author>
<name>Your Name</name>
<email>you@example.com</email>
</author>
<published>2026-05-17T20:16:49+00:00</published>
<link rel='alternate' type='text/html' href='https://upleb.uk/npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/commit/?id=fe7c3be2fd9d464dbc837d1913409d2691bd50f5'/>
<id>urn:sha1:fe7c3be2fd9d464dbc837d1913409d2691bd50f5</id>
<content type='text'>
- esp_wifi_set_mac requires WIFI_MODE_APSTA set first (fixes Board B crash)
- Start services immediately when no STA network is configured
  (standalone TollGate without upstream WiFi)
</content>
</entry>
<entry>
<title>feat: per-client NAT filtering via LWIP_HOOK_IP4_CANFORWARD</title>
<updated>2026-05-17T11:09:31+00:00</updated>
<author>
<name>Your Name</name>
<email>you@example.com</email>
</author>
<published>2026-05-17T11:09:31+00:00</published>
<link rel='alternate' type='text/html' href='https://upleb.uk/npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/commit/?id=0c2c67b463d6a90aaa0bb69bf3c91dba1d9ec3ec'/>
<id>urn:sha1:0c2c67b463d6a90aaa0bb69bf3c91dba1d9ec3ec</id>
<content type='text'>
- Add lwip_tollgate_hooks.h defining LWIP_HOOK_IP4_CANFORWARD macro
- Inject hook into lwIP build via CMakeLists.txt ESP_IDF_LWIP_HOOK_FILENAME
- Filter forwarded packets by source IP against firewall allowed list
- Only filter packets from AP subnet (10.192.45.0/24), allow all others
- Fix byte order bug: use network byte order for firewall_is_client_allowed
- NAT always enabled, removed global NAT toggle functions
- Remove spent-secret tracking from session.c (mint is authority)
- Remove unused get_ap_netif() function
- Reduce API server stack from 32KB to 16KB (fixes ESP_ERR_HTTPD_TASK)
- Add esp_random.h stub for unit tests
- All 186 unit tests passing
- Verified on hardware: block-&gt;pay-&gt;allow-&gt;revoke-&gt;block E2E works
</content>
</entry>
<entry>
<title>Bug fixes: reset_auth clears sessions, port 80 /usage shows real data, metric defaults to milliseconds, fix sys_evt stack overflow</title>
<updated>2026-05-17T09:19:16+00:00</updated>
<author>
<name>Your Name</name>
<email>you@example.com</email>
</author>
<published>2026-05-17T09:19:16+00:00</published>
<link rel='alternate' type='text/html' href='https://upleb.uk/npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/commit/?id=3342c8e7b4f645c75470d3d893d09037a672cfd2'/>
<id>urn:sha1:3342c8e7b4f645c75470d3d893d09037a672cfd2</id>
<content type='text'>
</content>
</entry>
</feed>
