ci: Remove deploy job (deploy locally instead)

.gitea/workflows/lint.yml

@@ -7,21 +7,11 @@ on:
   pull_request:
     branches: [main]
   workflow_dispatch:
-    inputs:
-      deploy:
-        description: 'Deploy to ESP fleet after build'
-        required: false
-        default: 'false'
-        type: choice
-        options:
-          - 'false'
-          - 'true'
 
 jobs:
   build:
     name: Build Firmware
     needs: [cppcheck, flawfinder, gitleaks]
-    if: ${{ !startsWith(github.ref, 'refs/tags/') }}
     runs-on: anvil
     container:
       image: docker.io/espressif/idf:v5.3
@@ -110,165 +100,6 @@ jobs:
           echo "Artifacts ready in /tmp/artifacts"
           ls -la /tmp/artifacts/
 
-  deploy:
-    name: Deploy to ESP Fleet
-    runs-on: anvil
-    needs: [cppcheck, flawfinder, gitleaks]
-    if: github.event_name == 'workflow_dispatch' && github.event.inputs.deploy == 'true' || startsWith(github.ref, 'refs/tags/v')
-    container:
-      image: docker.io/espressif/idf:v5.3
-      options: --network=host
-    steps:
-      - name: Install tools
-        run: apt-get update && apt-get install -y --no-install-recommends git curl jq netcat-openbsd
-
-      - name: Checkout
-        run: |
-          git clone --depth=1 --branch=${{ github.ref_name }} \
-            https://oauth2:${{ github.token }}@git.mymx.me/${{ github.repository }}.git .
-
-      - name: Build firmware
-        run: |
-          . /opt/esp/idf/export.sh
-          cd get-started/csi_recv_router
-          idf.py build
-
-      - name: Security checks
-        run: |
-          BIN="get-started/csi_recv_router/build/csi_recv_router.bin"
-          CFG="get-started/csi_recv_router/sdkconfig"
-
-          echo "=== Checking for hardcoded secrets ==="
-          if strings "$BIN" | grep -iqE '(password|secret|api_key|apikey)=[^$]'; then
-            echo "::error::Potential hardcoded secret found in binary"
-            exit 1
-          fi
-          echo "No hardcoded secrets detected"
-
-          echo "=== Checking release configuration ==="
-          LOG_LEVEL=$(grep 'CONFIG_LOG_DEFAULT_LEVEL=' "$CFG" | cut -d= -f2)
-          if [ "$LOG_LEVEL" -gt 3 ]; then
-            echo "::warning::Debug/verbose logging enabled (level $LOG_LEVEL)"
-          else
-            echo "Log level OK ($LOG_LEVEL)"
-          fi
-
-      - name: Validate version tag
-        run: |
-          TAG="${{ github.ref_name }}"
-          # Extract version from binary metadata
-          BIN_VER=$(strings get-started/csi_recv_router/build/csi_recv_router.bin | grep -oP '^v\d+\.\d+(\.\d+)?' | head -1)
-
-          echo "Git tag: $TAG"
-          echo "Binary version: $BIN_VER"
-
-          if [ "$TAG" != "$BIN_VER" ]; then
-            echo "::warning::Tag ($TAG) differs from binary ($BIN_VER)"
-          fi
-
-      - name: Create release and upload firmware
-        env:
-          GITEA_TOKEN: ${{ github.token }}
-        run: |
-          TAG="${{ github.ref_name }}"
-          REPO="${{ github.repository }}"
-          API_URL="https://git.mymx.me/api/v1"
-
-          echo "Creating release for tag: $TAG"
-
-          # Check if release exists
-          RELEASE=$(curl -s -H "Authorization: token $GITEA_TOKEN" \
-            "$API_URL/repos/$REPO/releases/tags/$TAG")
-
-          RELEASE_ID=$(echo "$RELEASE" | jq -r '.id // empty')
-
-          if [ -z "$RELEASE_ID" ]; then
-            # Create new release
-            RELEASE=$(curl -s -X POST -H "Authorization: token $GITEA_TOKEN" \
-              -H "Content-Type: application/json" \
-              -d "{\"tag_name\": \"$TAG\", \"name\": \"$TAG\", \"body\": \"Automated release from CI\"}" \
-              "$API_URL/repos/$REPO/releases")
-            RELEASE_ID=$(echo "$RELEASE" | jq -r '.id')
-            echo "Created release ID: $RELEASE_ID"
-          else
-            echo "Release exists with ID: $RELEASE_ID"
-          fi
-
-          # Upload firmware binary
-          echo "Uploading firmware..."
-          curl -s -X POST -H "Authorization: token $GITEA_TOKEN" \
-            -F "attachment=@get-started/csi_recv_router/build/csi_recv_router.bin" \
-            "$API_URL/repos/$REPO/releases/$RELEASE_ID/assets?name=csi_recv_router.bin"
-
-      - name: Deploy via OTA
-        run: |
-          SENSORS="muddy-storm:192.168.129.29 amber-maple:192.168.129.30 hollow-acorn:192.168.129.31"
-          EXPECTED_VERSION="${{ github.ref_name }}"
-
-          # Use Gitea release URL (uploaded in previous step)
-          FIRMWARE_URL="https://git.mymx.me/${{ github.repository }}/releases/download/${{ github.ref_name }}/csi_recv_router.bin"
-          echo "Firmware URL: $FIRMWARE_URL"
-
-          # Verify firmware is accessible
-          curl -sI "$FIRMWARE_URL" | head -1
-
-          # Deploy to all sensors in parallel
-          echo "=== Deploying to all sensors in parallel ==="
-          for entry in $SENSORS; do
-            NAME="${entry%%:*}"
-            IP="${entry##*:}"
-            echo "OTA $FIRMWARE_URL" | nc -u -w 2 "$IP" 5501 &
-          done
-          wait
-
-          # Monitor progress
-          echo "=== Monitoring OTA progress (timeout: 90s) ==="
-          TIMEOUT=90
-          INTERVAL=5
-          ELAPSED=0
-
-          while [ $ELAPSED -lt $TIMEOUT ]; do
-            sleep $INTERVAL
-            ELAPSED=$((ELAPSED + INTERVAL))
-
-            echo "--- Progress check at ${ELAPSED}s ---"
-            ALL_UPDATED=true
-
-            for entry in $SENSORS; do
-              NAME="${entry%%:*}"
-              IP="${entry##*:}"
-
-              # Query sensor version via UDP STATUS command
-              RESPONSE=$(echo "STATUS" | nc -u -w 1 "$IP" 5501 2>/dev/null || echo "")
-              VERSION=$(echo "$RESPONSE" | grep -oP 'version=\K[^ ]+' || echo "offline")
-
-              if [ "$VERSION" = "$EXPECTED_VERSION" ]; then
-                echo "  $NAME: ✓ $VERSION"
-              elif [ "$VERSION" = "offline" ] || [ -z "$VERSION" ]; then
-                echo "  $NAME: ⟳ updating..."
-                ALL_UPDATED=false
-              else
-                echo "  $NAME: $VERSION (waiting for $EXPECTED_VERSION)"
-                ALL_UPDATED=false
-              fi
-            done
-
-            if [ "$ALL_UPDATED" = true ]; then
-              echo "=== All sensors updated to $EXPECTED_VERSION ==="
-              break
-            fi
-          done
-
-          # Final status
-          echo "=== Final sensor status ==="
-          for entry in $SENSORS; do
-            NAME="${entry%%:*}"
-            IP="${entry##*:}"
-            RESPONSE=$(echo "STATUS" | nc -u -w 1 "$IP" 5501 2>/dev/null || echo "")
-            VERSION=$(echo "$RESPONSE" | grep -oP 'version=\K[^ ]+' || echo "offline")
-            echo "  $NAME: $VERSION"
-          done
-
   cppcheck:
     name: C/C++ Static Analysis
     runs-on: anvil

get-started/csi_recv_router/main/app_main.c

@@ -90,7 +90,7 @@ static int s_send_frequency = CONFIG_SEND_FREQUENCY_DEFAULT;
 static int8_t s_tx_power_dbm = 10;
 static esp_ping_handle_t s_ping_handle = NULL;
 static volatile led_mode_t s_led_mode = LED_OFF;
-static bool s_led_quiet = false;  /* quiet mode: off normally, solid on motion/presence */
+static bool s_led_quiet = true;  /* quiet mode: off normally, solid on motion/presence */
 static volatile int64_t s_last_csi_time = 0;
 static volatile int64_t s_identify_end_time = 0;
 static volatile bool s_ota_in_progress = false;
@@ -2316,7 +2316,7 @@ void app_main()
 
     ESP_LOGI(TAG, "BLE: NimBLE initialized, scan=%s", s_ble_enabled ? "on" : "off");
 
-    s_led_mode = LED_SLOW_BLINK;
+    s_led_mode = s_led_quiet ? LED_OFF : LED_SLOW_BLINK;
 
     udp_socket_init();
     wifi_csi_init();