Torlando e65e8f7c31 fix: make marker reclaim conditional; require own marker at commit
Greptile round 11 remediation:

Reclamation of a stale cross-marker was check-then-act: the stale
token was read, a delete decision made, and the file removed in
separate steps. A cross-installer renewing inside that window had its
renewed live claim deleted, and the victim's commit-time verification
accepted a MISSING own marker -- both activations could then proceed
into the same record-write window.

Both producers now:
(a) reclaim conditionally: the marker is re-read immediately before
    deletion; a token that became fresh after the original stale
    check aborts the reclaim instead of deleting the live claim,
(b) require the own marker at commit time when the install acquired
    one: a missing own file (the claim was reclaimed from under us)
    or a foreign owner aborts the activation before any record
    write. A sub-microsecond renewal between the conditional re-read
    and the unlink is still bounded: the victim aborts at commit, so
    the two activations never reach the record writes together.

Tests: conditional reclaim against a racing renewal (CLI + flasher,
deterministic seams), commit abort when the own marker is missing or
foreign (both producers). CLI 92 passed; flasher 29 passed.
2026-08-29 21:01:03 +00:00
2026-02-07 11:49:21 -05:00

Pyxis logo

Pyxis

An LXMF and LXST client firmware for T-Deck, built on a highly modified fork of microReticulum

Very much WIP, don't expect stability :)

Features

Reticulum transport over:

  • RNode-compatible LoRa
  • AutoInterface (local wifi)
  • TCP Client
  • BLE Interface (barely working if at all)

Other features:

  • GPS-synced time
  • One really annoying beep when you get a new message (user toggle)
  • View the announce stream
  • Choose a propagation node (and sync with it) (fixed in v0.2.1)
  • Set auto announce timer
  • Light up keyboard (user toggle)
  • Will crash in about 5 minutes of normal use (sorry) I had 5d uptime on v0.2.0 with BLE disabled
  • Make LXST voice calls (codec2 only, quality sounds horrible coming out the other end in Columba, needs work)

Flashing

The easiest way to get Pyxis running is the web flasher, which downloads release firmware from this repository's releases and verifies each image's SHA-256 digest against the release metadata.

For esptool (or any other tool that writes raw flash), each release also publishes a merged binary (pyxis-<tag>-merged.bin) that contains the bootloader, partition table, OTA selector, and application at their fixed offsets. Provision a T-Deck Plus (8 MB flash) with:

esptool.py --chip esp32s3 erase_flash
esptool.py --chip esp32s3 write_flash 0x0 pyxis-<tag>-merged.bin

Merged binaries are for first install / provisioning. Flashing one overwrites every flash region, including NVS (settings, identity) and the LittleFS partition (messages, paths, maps). To update an existing device without losing data, flash firmware.bin to 0x10000 only, or use the Columba-compatible pyxis-<tag>.pyxis.zip update package.

Why "Pyxis"

Pyxis, latin for "compass," is a constellation in the southern sky depicting a mariner's compass. Small but essential, the compass ensures every message finds its destination - even when the path is uncertain.

S
Description
No description provided
Readme GPL-3.0
311 MiB
0 Stars 1 Watchers 0 Forks
Languages
C++ 47%
C 40.3%
Python 10.7%
JavaScript 1%
mupad 0.7%
Other 0.2%