Add resilient dual-radio network failover

This commit is contained in:
2026-07-31 20:24:34 +02:00
parent 0a0dae144c
commit 6940cfb3a8
19 changed files with 857 additions and 11 deletions
+2 -1
View File
@@ -49,6 +49,7 @@ Core operation must work without cloud access. Optional remote access is a later
- Controlled artifact upload, listing, download, and deletion
- SHA-256 metadata and storage quota reporting
- Wi-Fi status/reconnect where supported by the host
- Dual-radio car hotspot with USB-upstream preference, 60-second built-in fallback, and automatic offline recovery
- Log rotation/pruning job
- Companion service restart job
- Reboot and shutdown actions with strong confirmation
@@ -321,7 +322,7 @@ The repository contains a working MVP and tracks remaining delivery work here. S
### Milestone 5 — Artifacts and operational actions
- [ ] Implement controlled uploads/downloads/deletion, hashing, quotas, and metadata UI.
- [ ] Add Wi-Fi refresh/reconnect with capability detection.
- [~] Add Wi-Fi refresh/reconnect with capability detection. A disabled-by-default dual-radio NetworkManager controller, 60-second recovery watchdog, fixed dashboard actions, and status UI are implemented; destructive failover and unplug/replug behavior still require staged Pi and MG4 validation.
- [ ] Add log pruning and companion-service restart jobs.
- [ ] Add reboot and shutdown with explicit action-bound confirmation and narrowly scoped privilege configuration.
- [ ] Exercise storage exhaustion, job timeout, service restart, and network-loss recovery.