Integrate controller/mobile authoring readiness and secure native sources

.github/scripts/repository-policy.mjs

@@ -22,6 +22,9 @@ const policyDefinitionPaths = new Set([
 
 // Current-product links are permitted only in maintained public entry points.
 const repositoryIdentityPaths = new Set([
+  "docs/WEB-HOST-TERMINAL.md",
+  "docs/verification/serial-response-deadlines.md",
+  "docs/verification/web-channel-controls.md",
   "README.md",
   "docs/Alpha-Delivery-Ledger.md",
   "docs/CI-CD-and-Releases.md",
@@ -36,6 +39,7 @@ const repositoryIdentityPaths = new Set([
 // repository; private paths, stale-origin language and unrelated URLs remain
 // forbidden.
 const reviewedExternalRepositories = new Map([
+  ["docs/verification/serial-response-deadlines.md", new Set(["toghroltp/pealayer"])],
   ["mobile/assets/fonts/Vazirmatn-OFL.txt", new Set(["rastikerdar/vazirmatn"])],
   ["mobile/PAKAR-README.md", new Set(["atomicdeploy/pakarcontroller"])],
   ["docs/Shared-Production-Firmware.md", new Set(["mcudude/megacore"])],

.github/workflows/build.yml

@@ -52,7 +52,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: "🟢 Install Node.js"
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
           node-version: "24"
 
@@ -66,7 +66,7 @@ jobs:
             > build-downloads/artifact-index.json
 
       - name: "⬇️ Download build artifacts"
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8
         with:
           pattern: PCController-*
           path: build-downloads

.github/workflows/codeql.yml

@@ -92,7 +92,7 @@ jobs:
 
       - name: "🟢 Install Node.js"
         if: matrix.key == 'cpp-avr-linux'
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
           node-version: "24"
 
@@ -132,7 +132,7 @@ jobs:
           node -e 'const { execFileSync } = require("node:child_process"); for (const library of JSON.parse(process.env.ARDUINO_LIBRARIES_JSON)) execFileSync("arduino-cli", ["lib", "install", library], { stdio: "inherit" });'
 
       - name: "🛡️ Initialize CodeQL"
-        uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+        uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build_mode }}
@@ -200,7 +200,7 @@ jobs:
           if errorlevel 1 exit /b 1
 
       - name: "🔬 Analyze and upload CodeQL results"
-        uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+        uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
         with:
           category: ${{ matrix.category }}
 

.github/workflows/deploy-avr.yml

@@ -65,7 +65,7 @@ jobs:
           persist-credentials: false
 
       - name: "🟢 Install Node.js"
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
           node-version: "24"
 
@@ -145,7 +145,7 @@ jobs:
 
       - name: "⬆️ Upload immutable programming bundle"
         id: upload
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: PCController-Verified-Deployment-Bundle
           path: deployment-bundle
@@ -213,7 +213,7 @@ jobs:
           cache-dependency-path: Tools/Controller/go.sum
 
       - name: "🟢 Install Node.js"
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
           node-version: "24"
 
@@ -253,7 +253,7 @@ jobs:
           printf 'Verified AVRDUDE backend: %s\n' "$avrdude"
 
       - name: "⬇️ Download verified programming bundle"
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8
         with:
           name: PCController-Verified-Deployment-Bundle
           path: deployment-bundle
@@ -317,7 +317,7 @@ jobs:
       - name: "⬆️ Preserve physical deployment evidence"
         if: always()
         id: evidence
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: PCController-Deployment-Evidence-${{ github.run_id }}
           path: deployment-evidence

.github/workflows/firmware.yml

@@ -44,7 +44,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: "🟢 Install Node.js"
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
           node-version: "24"
 
@@ -150,7 +150,7 @@ jobs:
 
       - name: "⬆️ Upload firmware artifact"
         id: upload
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: ${{ steps.pins.outputs.product_slug }}-Firmware-ATmega328P
           path: .build/actions-artifact/*
@@ -207,7 +207,7 @@ jobs:
           node Tools/Firmware/targets.mjs build mega2560 expanded-autonomous
 
       - name: "⬆️ Preserve build-only ATmega2560 evidence (not a commissioned release)"
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: BuildOnly-ATmega2560-Targets
           path: .build/firmware/mega2560

.github/workflows/host.yml

@@ -135,7 +135,7 @@ jobs:
           ctest --test-dir .build/controller-cabi --output-on-failure
 
       - name: "🟢 Install Node.js"
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
           node-version: ${{ steps.host-dependencies.outputs.node_version }}
 
@@ -148,7 +148,7 @@ jobs:
 
       - name: "⬇️ Download the exact validated firmware defaults"
         if: inputs.firmware_artifact_name != ''
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8
         with:
           name: ${{ inputs.firmware_artifact_name }}
           path: .build/firmware
@@ -236,7 +236,7 @@ jobs:
 
       - name: "⬆️ Upload Host artifact"
         id: upload
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: PCController-Host-${{ matrix.target }}
           path: |
@@ -263,7 +263,7 @@ jobs:
         run: node Tools/Dependencies/export-lock.mjs export-host --output "$GITHUB_OUTPUT"
 
       - name: "🟢 Install Node.js"
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
           node-version: ${{ steps.summary-host-dependencies.outputs.node_version }}
 
@@ -288,7 +288,7 @@ jobs:
       - name: "⬇️ Download available Host artifacts"
         if: ${{ always() }}
         continue-on-error: true
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8
         with:
           pattern: PCController-Host-*
           path: build-summary/packages

.github/workflows/release.yml

@@ -99,12 +99,12 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: "🟢 Install Node.js"
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
           node-version: "24"
 
       - name: "⬇️ Download build artifacts"
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8
         with:
           pattern: PCController-*
           path: release-downloads

.github/workflows/repository-health.yml

@@ -30,7 +30,7 @@ jobs:
         run: node Tools/Dependencies/export-lock.mjs export-host --output "$GITHUB_OUTPUT"
 
       - name: "🟢 Install Node.js"
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
           node-version: ${{ steps.host-dependencies.outputs.node_version }}
 

.github/workflows/update-dependencies.yml

@@ -42,7 +42,7 @@ jobs:
           cache-dependency-path: Tools/Controller/go.sum
 
       - name: Install current Node.js LTS
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
           node-version: lts/*
           cache: npm
@@ -79,7 +79,7 @@ jobs:
 
       - name: Upload resolution, hash, and validation evidence
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: dependency-resolution-${{ github.run_id }}
           path: |

.github/workflows/virtual-board.yml

@@ -63,7 +63,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: "🟢 Install Node.js"
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
           node-version: "24"
 
@@ -108,7 +108,7 @@ jobs:
 
       - name: "⬆️ Upload Virtual Board artifact"
         id: upload
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: PCController-VirtualBoard-${{ matrix.target }}
           path: |
@@ -130,7 +130,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: "🟢 Install Node.js"
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7
         with:
           node-version: "24"
 
@@ -155,7 +155,7 @@ jobs:
       - name: "⬇️ Download available Virtual Board artifacts"
         if: ${{ always() }}
         continue-on-error: true
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8
         with:
           pattern: PCController-VirtualBoard-*
           path: build-summary/packages

.gitignore

@@ -45,6 +45,7 @@ yarn-error.log*
 pnpm-debug.log*
 
 # MCU/virtual-board runtime state and backups
+/build-programs/
 virtual-mcu-eeprom.bin
 *.eeprom
 *.backup

AGENTS.md

@@ -30,3 +30,21 @@
 ## Digitalogic interface design
 
 Before implementing or reviewing any user-facing interface, read and follow [Contextual UI and no narration](docs/CONTEXTUAL-UI.md). This standing ecosystem contract covers state-driven rendering, progressive disclosure, semantic actions, conditional affordances and stable layout. Apply it across related controls, preserving existing safety and authorization requirements.
+
+## Unified controller application - mandatory acceptance
+
+- The current basic Flutter design is rejected. Build one expert utility workspace, not separate PCController/Pealayer product tabs. Organize by useful activities and current capabilities; peers and branding are contextual identities, not duplicate navigation hierarchies.
+- Use one contextual connection action per peer. Connect/cancel may be first-class while disconnected/connecting; The latest direct request uses one compact lifecycle toggle: Connect, Cancel while connecting, or Disconnect when connected. Never show competing connection verbs together. Preserve explicit disconnect discovery opt-out. Hide dormant access-token inputs while the current products do not require authentication. Defer a complete multi-step authentication/authorization flow; do not introduce token placeholders or a partial login design.
+- Omit unavailable-only cards and irrelevant controls. Never publish unknown measurements as zero. Remove filler narration such as "last values unavailable" and boilerplate explanations of ordinary behavior. Preserve concise, actionable failures, stale-state/safety indicators and outcome-unknown errors.
+- Use compact, professionally composed phone/tablet layouts: aligned headers, meaningful cards, contextual dialogs, square accessible icon actions, semantic colors/pills, real live charts and efficient space. Rich styling must remain coherent, legible and useful; neither oversized generic buttons nor a plain basic navigation shell is accepted.
+- Refresh from authoritative events, coalesce unchanged work and retain last good state. Do not add per-frame network probes, persistence, synthetic telemetry or automatic mutation retries.
+- Preferences own appearance, density, branding, palettes (including the original PakarController schemes), activity/task icon and one or both launcher identities. Both launcher entries must open the same unified application. Check actual Android icon/alias behavior rather than claiming a Dart preference changed OS state.
+- DNS-SD/mDNS, SSDP and MNDP must be implemented/coordinated across PCController, Pealayer and Flutter, with real service identity and endpoint verification. Auto-connect valid discovered peers according to saved user intent, but never treat a raw advertisement as proof, silently replace a live selected peer, take board authority or actuate outputs.
+- Android peers must support bounded, verified app-package upload/download and upgrades through the existing IPC/RPC transport. Preserve package identity/signature checks, unknown-outcome handling and Android user-consent/install permissions; no silent install or arbitrary path/URL proxy.
+- Source/build/device screenshots are separate from live transport, physical/audio acceptance and David's design acceptance. Keep rejected/incomplete gates open, preserve concurrent authoring work and record source provenance before deployment.
+
+- The latest contextual-utility rejection remains authoritative: no idle effect Cancel/Stop actions, empty live-only cards, unavailable-only fact cards or static "last values unavailable" narration. Keep actionable exceptions and useful offline editors. Hardware controls use balanced equal-width action rows within compact cards, semantic ON/OFF colors and directly clickable observed relay indicators with the same current-owner/lock/E-STOP gates. Folder assignment is a catalog-driven dropdown scoped to output kind and preserving raw folder identity, not a plain text field. Refresh is explicit and event-driven; only failed/stale/unsupported WebSocket transport uses bounded fallback reads. Preserve acknowledged PWM drafts, current profile-resolved names, and owner/revision fences. Native network discovery, auto-connect intent, branding/task icons and dual launcher aliases, all existing color schemes and integrity-checked peer IPC/RPC app transfers remain acceptance requirements. Defer remote multi-step authentication until supported; hide unused remote token fields without weakening protected local automation. Every new surface follows this contract without another user reminder.
+
+- Live continuous values retain a quiet final update per domain; do not drop it through throttling or collapse RGB/PWM into one shared latest slot. Complete calibrated push observations carry selected host, board generation, monotonic revision and time. Buffer bounded notifications until subscription ACK; fence replaced owners and older reads, and preserve active edits/acknowledged setpoints. Healthy complete pushes must not trigger per-client HTTP/PWM polling. Audio/segments/lifecycle stay immediate. Typed request/response relay must retain honest bounded fallback rather than treating player WS as a controller subscription. Record Android installed identity per reachable device separately from source, physical, audio and human acceptance.
+
+- Apply the folder-dropdown contract to effect/Studio authoring as well as hardware assignments. Preserve current raw category identity; creating a new folder is a separate explicit action. Effect/cue/settings dialogs share bounded keyboard-aware chrome, explicit Close/Cancel and fixed busy progress space. Invalid numeric edits survive selection changes and block saving; never silently retain the old number behind invalid input. Unapplied technical JSON must not be overwritten by typed controls. Pending saves disable editable fields; failures preserve drafts and unchanged Save sends no mutation. Resource URL normalization changes authority characters only, retaining native paths, query and Unicode filename semantics. Keep mobile/UI-REQUIREMENT-LEDGER.md current and never mark all UI/hardware accepted from source fixtures or delivery.

LocalLib/DallasTemperatureBus.cpp

@@ -56,7 +56,7 @@ void DallasTemperatureBus::begin() {
   // Optional explicit device fixtures; runtime owns discovery and conversion.
   addressCount_ = 0;
   for (uint8_t index = 0; index < 2; ++index) {
-    if (NativeHal::temperature[index] == DisconnectedCentiC) continue;
+    if (!NativeHal::temperatureConfigured[index] && NativeHal::temperature[index] == DisconnectedCentiC) continue;
     uint8_t *rom = addresses_[addressCount_++];
     memset(rom, 0, 8); rom[0] = Ds18b20Family; rom[1] = index + 1;
     rom[7] = crc8(rom, 7);

Project/IlluminationController.cpp

@@ -17,9 +17,7 @@ void IlluminationController::begin(PwmController &pwm, bool doorOpen,
   pwm_ = &pwm;
   currentBrightness_ =
       mode_ == IlluminationMode::On ? onBrightness_ : offBrightness_;
-  pwm_->setEnclosureIllumination(
-      static_cast<uint16_t>(currentBrightness_) * 16U +
-      currentBrightness_ / 16U);
+  pwm_->setEnclosureIllumination(TransitionMath::expandByte12(currentBrightness_));
   lastFadeAt_ = now;
   initialized_ = true;
 
@@ -56,8 +54,7 @@ void IlluminationController::service(bool doorOpen, bool allowLedUpdate,
   // jitter while preserving the responsive 20 ms control cadence.
   lastFadeAt_ = now;
   const uint8_t next = TransitionMath::easedByte(currentBrightness_, target);
-  if (pwm_->setEnclosureIllumination(
-          static_cast<uint16_t>(next) * 16U + next / 16U)) {
+  if (pwm_->setEnclosureIllumination(TransitionMath::expandByte12(next))) {
     currentBrightness_ = next;
   }
 }

Project/Ina219Sensor.cpp

@@ -19,15 +19,25 @@ constexpr uint16_t Calibration32V2A = 4096;
 } // namespace
 
 bool Ina219Sensor::begin() {
+#if defined(PCCONTROLLER_NATIVE)
+  return NativeHal::powerAvailable;
+#else
   i2cBus.beginTransmission(address_);
   if (i2cBus.endTransmission() != 0) {
     return false;
   }
   return write16(CalibrationRegister, Calibration32V2A) &&
          write16(ConfigRegister, Config32V2A);
+#endif
 }
 
 bool Ina219Sensor::read(Ina219Reading &reading) {
+#if defined(PCCONTROLLER_NATIVE)
+  if (!NativeHal::powerAvailable) return false;
+  reading = {NativeHal::supplyMilliVolts, NativeHal::supplyMilliVolts,
+             NativeHal::currentMilliAmps, NativeHal::powerMilliWatts};
+  return true;
+#else
   // Some compatible devices clear calibration after reset; refreshing it also
   // matches the established Adafruit 32V/2A measurement sequence.
   if (!write16(CalibrationRegister, Calibration32V2A)) {
@@ -61,6 +71,7 @@ bool Ina219Sensor::read(Ina219Reading &reading) {
                          : (signedCurrent - 5L) / 10L;
   reading.powerMilliWatts = static_cast<uint32_t>(powerRaw) * 2UL;
   return true;
+#endif
 }
 
 bool Ina219Sensor::write16(uint8_t reg, uint16_t value) {