alex/pi-car-companion
1
1
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add ADB management and live car telemetry

Browse Source
This commit is contained in:
Alex
2026-07-31 22:23:12 +02:00
parent 34b31c4caf
commit 0e4ce931ec
12 changed files with 911 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
PLAN.md
+10 -8
View File
@@ -232,16 +232,18 @@ reference, not proof for other model years, trims, regions, or software builds.
- The Pi is the only intended ADB host. The bridge targets either one configured
serial or exactly one automatically discovered device, refuses ambiguous multi-device
connections, uses argument-array process execution, enforces timeouts and output bounds,
expose unavailable/unauthorized/offline states, and register every operation in a
exposes unavailable/unauthorized/offline states, and registers every operation in a
typed server-side allowlist. No API accepts a shell string, arbitrary ADB arguments,
a package/component supplied by a client, or an unrestricted file path.
- Begin with read-only device identity, connection health, display, package/version,
and carefully selected `dumpsys` collectors. Any app launch, input injection, file
transfer, or settings change is a separate state-changing capability requiring an
explicit threat model, parked-state policy, confirmation policy, and audit trail.
or an unrestricted file path. Package and component targets are accepted only through
strict Android-name validation and fixed `am` or `monkey` argument arrays.
- Device identity, connection health, display, package inventory, bounded APK install,
validated app launch, and the three confirmed ArcSoft vehicle properties are in scope.
State-changing ADB actions are authenticated, CSRF-protected, rate-limited where
appropriate, audited, and intended for parked use.
- Do not use ADB or the exported SAIC vehicle service to actuate vehicle hardware in
this project. Vehicle telemetry and vendor APIs remain a later, read-only research
track until permissions, semantics, privacy, and parked-vehicle tests are documented.
this project. Vehicle telemetry remains read-only. The SAIC AIDL bridge for battery,
range, and additional signals remains a later research track until semantics, privacy,
and parked-vehicle tests are documented.
### Web experience