Commit Graph
40 Commits
Author SHA1 Message Date
SirHumza 43246c3ab3 god-tier: diag census, v1.1.0, arch docs, CI version gate
- daemon writes diag.json at boot (fw, kinfo-table hit, msgbuf /
  sandbox / shellcore reachability) for the firmware matrix
- focus_msgbuf_ok() reachability probe + host test
- version 1.1.0 (version.h + installer Makefile)
- ARCHITECTURE.md: binaries, detection cascade, gateway states,
  no-exit policy, on-disk state, installer, compat baseline
- CI consistency job: version.h vs Makefile parity gate
2026-09-27 15:31:08 +02:00
SirHumza e26d25c47a installer: custom SDL2 reskin + remaster landing
- ui.c: fullscreen Discord-blurple cards, embedded bitmap font,
  pad X-to-continue, progress bar; IME token entry kept as overlay
- scripts/genfont.py + installer/font.h: build-time rasterized font
- Makefile: -lSDL2 -lSDL2main -lScePigletv2VSH -lSceAudioOut -lSceVideoOut,
  font.h regen rule; drop stock -lSceMsgDialog
- daemon: gateway state machine, status.json heartbeat, gen supersede,
  no-exit token wait; updater removed per direction
- installer: config preserve on reinstall, honest stage logging,
  token-save verification, daemon liveness on done screen
2026-09-27 15:21:00 +02:00
SirHumza d0972b68e9 remaster: any-firmware hardening + installer remake
- detection: probe-first (ShellCoreUtil dlopen, msgbuf AppFocusChanged,
  sysctl kinfo via verified-only fw table, sandbox/save fallbacks)
- new orbisrpc/focus.c + fw.c/fw.h (bounded scans, fail-closed unknowns)
- daemon: no-exit everywhere (token wait-loop, 4004 retry), status.json
  heartbeat, daemon.gen supersede protocol
- installer: progress UI, token IME retry + FTP fallback, install.log,
  drop evict.elf (delete tools/evict.c, build_evict.sh)
- packaging: Apollo parity CATEGORY=gde ATTRIBUTE=32 --authinfo
- security: chmod 0600 on token-bearing files
- docs: firmware-independent injecting guide, SUPPORT.md, release.sh
2026-09-27 14:47:09 +02:00
Humza 29617192e6 v1.0.0 hardening: signed-only updates, heap fix, plugin name fallback, dead code purge, release keys, secret guard, docs accuracy 2026-09-25 18:28:58 +02:00
SirHumza 9ba212d859 fix: critical path bugs and build errors
- daemon.c/updater.c: fix /data/GoldHEN/payloads -> /data/payloads
  (Payload Guest reads /data/payloads/, not /data/GoldHEN/payloads/)
- daemon.c: fix strncmp(..., sizeof buffer) -> strcmp for title ID
  comparison (strncmp pastes past null terminator, giving false diffs)
- tmdb.c: fix fd scoping — TLS code was outside #ifdef block where fd
  was declared, causing compile error; move tls_start/connect/close
  inside #ifdef ORBISRPC_SDK_PAYLOAD block
- detect.c: comment out appdb_title calls — sqlite3.h unavailable
  in toolchain; appdb.c cannot compile without it
- All: build verified, all tests pass
2026-09-25 17:39:37 +02:00
SirHumza d43218a6ee triage fixes: health order, static send buf, v4-only probes 2026-09-24 22:45:16 +02:00
SirHumza cf34bc4436 subagent audit fixes: unload-on-fail, progress reclaim, send timeout, gp4 prereqs 2026-09-24 20:18:58 +02:00
SirHumza 9d9c5b7bb1 System badge small_image ported from PSN-API tool pattern 2026-09-24 12:37:39 +02:00
SirHumza 48500d2482 app.db SQLite names, self-learning map, presence builder tests, audit fixes 2026-09-24 12:26:19 +02:00
SirHumza b363a74740 User-local title overrides + idle PS logo art, cfg_save return fix 2026-09-24 10:56:05 +02:00
SirHumza 99c43902c1 Close validation branch properly 2026-09-24 10:22:43 +02:00
SirHumza 13b1176575 Session restore validation (id shape, epoch range) 2026-09-24 10:19:18 +02:00
SirHumza 130d240c1b Remove Rest Mode support per scope 2026-09-24 09:44:17 +02:00
SirHumza 82cb565f05 Restore daemon_run closing brace 2026-09-24 09:37:26 +02:00
SirHumza 15d9c2a935 Fix sess-restore indent imbalance; session persistence intact 2026-09-24 09:34:31 +02:00
SirHumza b5aca9e74b Industrial batch: signals, jitter backoff, state machine, metrics, playback queue, disk art cache, cfg warnings 2026-09-24 09:23:04 +02:00
SirHumza 3eee7697ea Authoritative title identity via sandbox mounts (kills stale-title class) 2026-09-24 00:36:04 +02:00
SirHumza d967c98526 Fast game switching via eboot-set change shortcut 2026-09-24 00:02:31 +02:00
SirHumza 563b682c33 Fix undeclared scan flag, guard transitions on unknown scans 2026-09-23 23:20:18 +02:00
SirHumza 204e662cad Art: per-session mp cache refresh, eboot-set cache drop, quiet cache logs 2026-09-23 22:56:32 +02:00
SirHumza 64b1d66388 Features: session persistence, media types, playtime ledger, home/rest presence 2026-09-23 22:35:53 +02:00
SirHumza 6a1f25524e Audit batch: reconnect backoff, heartbeat check, urandom masks, entropy fail-secure, TLS verify, manifest public API + sign test, cfg schema+fallible save 2026-09-23 21:43:26 +02:00
SirHumza 1e49612e75 Daemon audit: SNTP rotation, reconnect backoff, heartbeat send check, urandom masks, fail-secure entropy, TLS verify, updater signed+redirects, health wiring, mp cache 2026-09-23 21:29:41 +02:00
SirHumza 7dbb021290 WIP: mp: art resolution via external-assets + icon pack 2026-09-23 20:56:43 +02:00
SirHumza 49672ec2c8 WIP: SNTP wall-clock correction (PSN time blocked on jailbreak) 2026-09-23 20:34:08 +02:00
SirHumza fca5f17d74 WIP: socket timeouts always armed, per-minute alive tick 2026-09-23 20:22:11 +02:00
SirHumza 75835fff3b WIP: session resume window (flicker-proof timer) 2026-09-23 20:11:16 +02:00
SirHumza 202d4012e3 WIP: single-instance lock (sysctl liveness), eboot+savedata detection for SDK builds 2026-09-23 18:06:39 +02:00
SirHumza 96c02b8cb4 WIP: debug gate, monotonic clock, titleId sessions, debounce, resolve cache 2026-09-22 17:58:07 +02:00
SirHumza 3c7bf6180f Self-updater: versioned staged updates from GitHub releases 2026-09-19 11:28:35 +02:00
SirHumza feec6f6695 daemon: document Rest Mode gap as unverified 2026-09-19 11:20:25 +02:00
SirHumza cf76f1ebf8 Sony TMDB runtime names+icons; remove fuzzy appdb scan
- tmdb_crypto: self-contained SHA1/HMAC, URL builder, response parse,
  all verified against hashlib and Sony's live service in unit tests
- tmdb: plain-HTTP fetch with deadline plus 8-entry cache
- detect: TMDB in both resolve paths; artwork URL plumbed through
  detect_last_art into presence assets (official Sony CDN, no uploads)
- remove appdb byte-scan: boundary ambiguity returned wrong names,
  worse than raw IDs; also removes the multi-MB game-process read
- discord/daemon: full-URL artwork wins, pack URL next, asset key last
2026-09-19 11:16:09 +02:00
SirHumza 02d68410ac External-URL artwork pipeline + icon sync
- discord: large_image as <art_base_url><lower titleId>.png when
  configured (Discord accepts external URLs in asset fields);
  uploaded-asset keys remain as fallback via application_id
- cfg: art_base_url field with load/save support
- scripts/sync_icons.sh: FTP pulls all icon0.png (read-only)
- deploy/ARTWORK.md rewritten around URL-pack-first design
2026-09-19 10:24:20 +02:00
SirHumza 28f6275a05 Gateway precision, SFO OOB fix, build lists, artwork runbook
- discord: HELLO requires text frame; READY/HELLO timeout diagnostics;
  invalid-session fast retry path (-3); clamp warning; malformed close
- daemon: invalid session resets backoff instead of doubling it
- sfo: bounded key scan (no OOB on malformed files) + regression test
- build.sh + plugin Makefile compile sfo.c (link verified)
- deploy/ARTWORK.md: shared-app asset pipeline, no-URL rule
2026-09-19 10:18:39 +02:00
SirHumza bf5579d6da Stable gateway backend: mbedTLS, 8MB READY, JSON-safe parsing
- BearSSL replaced with mbedTLS (TLSv1.3 passes Cloudflare)
- 8MB frame cap + truncation-proof gateway op/seq scanner
- Thread-safe compat, locked logging, atomic config with template
- Daemon keeps last-good config, persistent presence timer
- 256B token buffers, weak-libc shims, portable build preflights
- Tests: gateway spoof + OOM cases pass

Still open: display names fall back to titleId in sandbox,
cover art needs shared Discord app assets. Backend fully functional.
2026-09-19 01:03:17 +02:00
SirHumza 1ca687f8fb save work before cleanup 2026-09-18 18:00:13 +02:00
SirHumza 6dbfa1512c Harden networking, lifecycle, and build validation
Add BearSSL integration, strict utility handling, WebSocket validation,
plugin lifecycle cleanup, host regression tests, and reproducible GoldHEN
build support.
2026-08-27 20:38:39 +02:00
SirHumza 949240f590 daemon: auth via user session token; fix ws/gateway protocol bugs
The public Discord gateway rejects OAuth2 access tokens (close 4004),
so v1 could never set presence: switch config to a raw user token and
delete the oauth/http module.

- handle close frames; exit fatal on 4004 instead of looping forever
- fix reversed IPv4 packing in sceNetConnect (wrong host)
- fix SSL_read treating WANT_READ/no-data as disconnect
- keep frame bytes glued to the 101 handshake response (HELLO)
- grow recv buffer for large READY payloads; drain-and-skip >2MB
- mask all client frames incl. control; overflow-safe length checks
- drop RESUME (was dead: connect wiped session_id); fresh IDENTIFY
- clear presence stays online, add elapsed timestamps
- tick gateway every second so heartbeats never land late
- connect backoff 5s..300s; live config reload each cycle
2026-08-23 11:07:38 +02:00
SirHumza 91382fc53c daemon: reload config before each token attempt
The daemon loaded config once at startup and held it in memory, so an
operator editing auth_code/refresh_token on the console (FTP) while it
ran was ignored. Re-read the disk config each ensure_token() so edits
take effect live without a plugin reload.
2026-08-15 00:32:34 +02:00
SirHumza d5d1957668 plugin: run orbisRPC as a GoldHEN plugin (native auto-start)
/data/GoldHEN/payloads/ is not an auto-load folder (PPPwn only loads
goldhen.bin; folder auto-load is unimplemented GoldHEN feature #296), so the
ELF payload never ran regardless of reboots. Replace that route with the
GoldHEN plugin loader, which auto-starts into the game process at every boot
via plugins.ini [default] with no PC involvement.

- daemon.c/h: extract the payload main() loop into a shared daemon_run()
  usable from both the ELF entry (main.c thin wrapper) and the plugin
- detect.c/h: add detect_name_for_title() for the known-titleid plugin mode
- plugin/plugin.c: plugin_load() reads procInfo.titleid via sys_sdk_proc_info,
  skips non-game (NPXS/system) titles, starts daemon thread; plugin_unload()
  stops it cleanly
- plugin/Makefile: builds orbisrpc_plugin.prx against the GoldHEN SDK
  (libGoldHEN_Hook.a + crtprx.o)
- deploy/SETUP.md: rewrite for the plugin route; add plugins.ini [default]
  (plugin/plugins.ini.ps4)
- scripts/build.sh: include daemon.c
2026-08-15 00:23:33 +02:00