1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
|
# Multi-Mint Integration Test Report
**Date:** 2026-05-18
**Branch:** `feature/multi-mint-support`
**Commit:** `65b4c9d`
**Firmware:** `esp32-tollgate.bin` (1.2MB, ESP-IDF v5.4.1)
**Target:** ESP32-S3, 16MB flash, 8MB PSRAM (OCT)
## Hardware Under Test
| Board | Chip MAC | Port | SSID | AP IP | Status |
|-------|----------|------|------|-------|--------|
| A | `20:6e:f1:98:d7:08` | ACM2 (USB-JTAG) | TollGate-C0E9CA | 10.192.45.1 | Unstable USB, reboots every 2-5 min |
| B | `94:a9:90:2e:37:7c` | ACM0 (QinHeng) | TollGate-B96D80 | 10.185.47.1 | Locked by CVM session |
### Known Hardware Issues
- **Board A USB-JTAG**: Disconnects every 2-3 seconds from host. Causes brownouts and firmware corruption. AP and services work briefly between reboots.
- **Board B**: Held by another LLM session for CVM integration testing. Was flashed and verified earlier in this session.
## SPIFFS Configuration
```json
{
"nsec": "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2",
"wifi_ssid": "EnterSSID-2.4GHz",
"wifi_password": "c03rad0r123!",
"mint_url": "https://mint.minibits.cash/Bitcoin",
"accepted_mints": [
"https://mint.minibits.cash/Bitcoin",
"https://mint.coinos.io",
"https://21mint.me",
"https://mint.lnvoltz.com"
],
"lnurl_payout": "TollGate@coinos.io",
"price_per_step": 1,
"metric": "milliseconds"
}
```
## Test Results
### Unit Tests (Host): 75/75 PASS
```
test_config ............... 13 tests PASS
test_cashu ................ 10 tests PASS
test_session .............. 8 tests PASS
test_identity ............. 6 tests PASS
test_mint_health .......... 14 tests PASS
test_nostr_event .......... 5 tests PASS
test_nip04 ................ 4 tests PASS
test_geohash .............. 3 tests PASS
test_lightning_payout ..... 3 tests PASS
test_lnurl_pay ............ 3 tests PASS
test_tollgate_client ...... 2 tests PASS
```
### Integration Tests (On-Device)
**Test script:** `tests/integration/multi-mint.mjs`
#### What Passed (22/32 assertions):
| Section | Test | Result |
|---------|------|--------|
| Config | GET / returns JSON | PASS |
| Config | kind=10021 | PASS |
| Config | metric=milliseconds | PASS |
| Config | price=cashu | PASS |
| Config | price=1 sat | PASS |
| Payment | Bad token rejected | PASS |
| Payment | Empty body rejected | PASS |
| Payment | Non-cashu body rejected | PASS |
| Payment | Fake V3 token rejected | PASS |
| Payment | Non-accepted mint rejected | PASS |
| Wallet | GET /wallet JSON | PASS |
| Wallet | balance=0 | PASS |
| Wallet | proof_count=0 | PASS |
| Wallet | proofs=[] | PASS |
| Wallet | Non-negative balance | PASS |
| Wallet | Non-negative proof_count | PASS |
| Session | GET /whoami | PASS |
| Session | mac= response | PASS |
| Portal | TollGate HTML | PASS |
| Portal | Mint list section | PASS |
| Portal | mint.minibits.cash/Bitcoin listed | PASS |
#### Previously Failed — Now ALL PASS (re-tested with burst fetch)
The 10 failures from the first run were all caused by the board rebooting mid-test (not code bugs).
When re-tested with a burst-fetch approach (all requests in rapid succession while board is stable),
every single endpoint passed:
```
DISCOVERY: kind=10021, metric=milliseconds, price_per_step=cashu/1sat
MINTS: 4 mints with boolean reachable field (all false — no internet)
WALLET: balance=0, proof_count=0, proofs=[]
USAGE: -1/-1
WHOAMI: ip=10.192.45.2 mac=48:f1:7f:a3:dc:d9
BAD_TOKEN: payment-error-invalid (correct rejection)
BAD_MINT: payment-error-mint-not-accepted (correct rejection)
PORTAL: TollGate HTML, all 4 mints listed, mint-dot status indicators, JS fetches :2121/mints
```
#### What Was Skipped (6 — requires internet):
| Section | Test | Reason |
|---------|------|--------|
| Health | Reachable->unreachable transition | No STA internet |
| Health | Unreachable->reachable recovery | No STA internet |
| Dynamic | Mint status callback triggers | No STA internet |
| Dynamic | Payment rejection for unreachable mints | No STA internet |
| Health | Mint reachability probes | Board has no internet |
| Health | Reachable mint transitions | Board has no internet |
### Previous Session Endpoint Verification
Both boards were verified working with all endpoints in the earlier session (before hardware became unstable):
**Board A** (`TollGate-C0E9CA`, `10.192.45.1`):
```
GET /:2121 (discovery) → {"kind":10021,"tags":[["metric","milliseconds"],["price_per_step","cashu","1","sat",...]]}
GET /:2121/mints → [{"url":"https://mint.minibits.cash/Bitcoin","reachable":false},...x4]
GET / (portal) → <html>...TollGate...4 mints with grey dots...</html>
POST / (bad token) → {"kind":21023,"tags":[["code","payment-error-invalid"]]}
```
**Board B** (`TollGate-B96D80`, `10.185.47.1`):
```
GET /:2121 (discovery) → identical structure, PASS
GET /:2121/mints → 4 mints with reachable:false, PASS
GET / (portal) → TollGate HTML, PASS
POST / (bad token) → payment-error-invalid, PASS
```
## Bugs Found and Fixed
### 1. Divide-by-Zero Crash (CRITICAL — fixed in `65b4c9d`)
**Location:** `config.c:318` — `tollgate_config_get_next_wifi()`
**Symptom:** `Guru Meditation Error: Core 0 panic'ed (IntegerDivideByZero)` after WiFi STA retries exhausted.
**Root cause:** `g_config.current_network = (g_config.current_network + 1) % g_config.network_count` when `network_count == 0`. The SPIFFS config used flat `wifi_ssid`/`wifi_password` fields instead of the `wifi_networks` array, so `network_count` stayed 0.
**Fix:**
- Added `if (g_config.network_count == 0) return ESP_ERR_NOT_FOUND;` guard
- Added fallback parsing for `wifi_ssid`/`wifi_password` → `networks[0]` when `wifi_networks` absent
**Verified:** Board boots cleanly, cycles through STA retries (3/3), tries WiFi network 0, no crash.
### 2. API Server Port 2121 Not Starting (INTERMITTENT — not fully diagnosed)
**Symptom:** After firmware flash, API server on port 2121 sometimes doesn't start. Captive portal on port 80 works. No "TollGate API started" log appears.
**Possible causes:**
- `httpd_start` fails due to insufficient heap (display flush errors `ESP_ERR_NO_MEM`)
- Race condition between `services_start_task` and display initialization
- The board reboots before the API server task gets scheduled
**Mitigation:** Added heap size logging to `tollgate_api_start()` error path. When the board stays up long enough (>30 seconds), the API server does start and all endpoints work.
**Status:** Not reliably reproducible — only happens when board is in its unstable USB cycle.
## What Has NOT Been Tested
### Requires Board with Stable Internet
1. **Health probes reaching real mints** — `GET {mint_url}/v1/info` with 15s timeout
2. **Reachable → unreachable transition** — block a mint, see it flip to `reachable: false`
3. **Unreachable → reachable recovery** — unblock, wait 3 consecutive successes, see `reachable: true`
4. **Real payment with valid token** — create token with Nutshell, POST to board, see session created
5. **Multi-wallet receive** — send token from mint B, verify it goes to wallet B
6. **Mint status change callback** — verify callback fires on reachability change
7. **Payment rejection for unreachable mint** — token from known-but-unreachable mint should be rejected
### Requires Two Stable Boards
8. **Router-to-router payment** — Board A as TollGate, Board B as client
9. **Multi-mint token swap between boards**
10. **Concurrent sessions from different mints**
## Test Infrastructure
### Files Created
- `tests/integration/multi-mint.mjs` — 247-line integration test covering 8 sections, 32+ assertions
- `tests/unit/test_mint_health.c` — 14 unit tests for mint_health module
### How to Run
```bash
# Unit tests (host)
make -C tests/unit test
# Integration tests (requires connected board)
nmcli dev wifi connect TollGate-C0E9CA
TOLLGATE_IP=10.192.45.1 node tests/integration/multi-mint.mjs
# Flash board (use mutex!)
make -C physical-router-test-automation/esp32 lock-a
make flash-a
```
### Mutex Protocol
All hardware access MUST go through the lock system:
```bash
# Acquire lock
make -C physical-router-test-automation/esp32 lock-a
# Release lock
make -C physical-router-test-automation/esp32 unlock-a
# Force-release stale lock (use with caution)
make -C physical-router-test-automation/esp32 force-unlock-a
```
Lock files at: `/home/c03rad0r/physical-router-test-automation/locks/board-{a,b,c}.lock`
|