1
0
Fork 0
mirror of https://github.com/imjasonh/esp32 synced 2026-07-06 23:52:24 +00:00
esp32/tools/provision
Claude b3bcf72fe5
review fixes across firmware + host tools
sig.rs:
- reject empty DSSE signatures array (was index panic)
- check DSSE payloadType is application/vnd.in-toto+json
- check each cert's notBefore/notAfter window vs wall clock
- drop dead Sha256/Sha384 imports + _unused_keep_imports stub

main.rs:
- drop the demo ipify/wttr fetches; rollback no longer depends on
  third-party uptime
- add a Wi-Fi connect watchdog that reboots after 60 s of hang
- install_panic_restart_hook so panics flush+restart instead of
  landing in IDF's generic panic path
- comment the dual-path tracing (registry layer + log-always to
  EspLogger) and the NVS-error-vs-missing semantics

cloud_log.rs:
- LogQueue mutex now recovers from poison via unwrap_or_else
- replace hardcoded "esp32_blinky::*" target strings with
  module_path!() constants exported from each module
- add insertId on every entry so Cloud Logging preserves stable
  within-second order
- raise backoff exp cap to 6 so the 5 min ceiling is actually
  reachable

ota.rs:
- widen NVS string buffer for repo/tag (96 -> 256 B); 96 silently
  fell back to defaults if a repo string overflowed
- debug_assert base >= 1 s in jittered() to catch a 0 s misconfig
- assert sig index has exactly 1 manifest instead of silently
  picking the first
- log verify_bundle elapsed ms (Xtensa P-256/P-384 perf canary)
- note token-reuse risk between phase 1 and phase 2

provision tool:
- --dry-run for parsing checks without embuild artifacts
- warn loudly when sa_key_pem is inside the worktree
- delete staged identities JSON after the partition image is
  generated

publisher tool:
- pull-verify now asserts layer mediaType matches the firmware
  type, not just layer count

Makefile:
- set -eo pipefail in the publish recipe so a publisher crash
  surfaces directly instead of being swallowed by the digest
  pipeline

new module src/nvs_util.rs consolidates the read_str / read_blob
helpers that were duplicated across cloud_log/trust/ota/main.

https://claude.ai/code/session_01XkNKhsMjCMg4HMTzf3ZZYC
2026-05-04 01:34:45 +00:00
..
.cargo Provision Wi-Fi creds + trust roots via NVS instead of compile-time embed 2026-05-02 16:14:26 -04:00
src review fixes across firmware + host tools 2026-05-04 01:34:45 +00:00
Cargo.lock Bump toml in /tools/provision in the host-tools group across 1 directory 2026-05-02 20:35:47 +00:00
Cargo.toml Bump toml in /tools/provision in the host-tools group across 1 directory 2026-05-02 20:35:47 +00:00
rust-toolchain.toml Provision Wi-Fi creds + trust roots via NVS instead of compile-time embed 2026-05-02 16:14:26 -04:00