Walkie-Talkie, Worldwide

The assignment

Replace the local radio transport with an internet relay while preserving the voice and control contracts.

The durable source is this prompt, SPEC.md, the machine-readable contract, and its layered acceptance criteria. Generated firmware is a disposable candidate.

Reference frame

This is a deterministic screenshot of the visual acceptance model. It defines the intended hierarchy and safe-area use; only a later framebuffer capture from the attached Stopwatch can count as device rendering evidence.

The build prompt

Build ESPtember Day 25: Walkie-Talkie, Worldwide for the M5Stack Stopwatch Dev Kit (C152).

Read these before writing code:
- .agents/skills/build-stopwatch-lessons/SKILL.md
- .agents/skills/prompt-first-embedded-lessons/SKILL.md
- days/day-07-touch-calibration/SPEC.md
- days/day-25-walkie-internet/SPEC.md
- days/day-25-walkie-internet/tests/contract.json

Treat the prompt, spec, tests, and acceptance criteria as source.
Put deterministic behavior in a portable core and keep Arduino, LVGL, M5Unified, storage, network, audio, and sensor adapters outside it.
Run scripts/prompt-contract/validate_day.sh days/day-25-walkie-internet before compiling a device candidate.
Do not edit the contract or tests to make a candidate pass.

Hardware and shared platform

- Target board_M5StopWatch on ESP32-S3 with OPI PSRAM.
- Hold the device with the lanyard loop at the bottom: BtnA is physical left and BtnB is physical right.
- Immediately after M5.begin(), set panel width 468, height 466, offset_x 6, offset_y 0, then rotation 0.
- Never draw rows 466 or 467. Keep focus decoration inset and every interactive bound inside the round safe area.
- Load Preferences namespace espt-touch, blob key record, after display setup and before touch input.
- Accept and validate Day 07 version 1 and version 2 records. Read raw touch, apply the complete shared warp, clamp once, then feed the mapped point to the application.
- Provide the shared runtime calibration entry path. App-only installation must preserve the record.
- Allocate retained frames and large working buffers in PSRAM; fail visibly and over serial when required hardware or memory is unavailable.

Controls

Use a localized control scheme because Push-to-talk and channel selection stay identical when transport changes. BtnA/left: ptt hold. BtnB/right: next channel. Short both: channel select. Hold both: return idle.
Touch must dispatch the same semantic actions as physical controls.

Lesson behavior

- Preserve Day 24 PCM, packet, PTT, channel, jitter, and playback behavior exactly.
- Join one WebSocket room per channel over TLS and never echo a sender's own audio.
- Authenticate devices without embedding private server secrets; bound frames, queues, and reconnect backoff.
- Show Provisioning, Connecting, Linked, On Air, Receiving, and Error with actionable reasons.
- Changing channel leaves the old room before joining the new one and cannot leak queued audio across rooms.

Diagnostics and acceptance

- Prefix serial protocol lines with D25_ and implement status, reset, action, capture, and touchlog commands.
- Report hardware identity, corrected geometry, touch-map version and generation, current portable state, memory headroom, and last named error.
- Injected actions must use the same reducer, hit testing, callbacks, and control recognizer as physical input.
- Retain the exact RGB565 pixels sent to M5GFX and stream captures in bounded chunks without blocking the watchdog.
- Run every scenario in tests/contract.json, generated deterministic sequences, the deliberate mutation, and the lesson-specific checks in SPEC.md.
- Complete 20 largest-state round trips without reset or growing heap/PSRAM use.
- Confirm the active touch-map version and generation remain unchanged.
- Physically review touch alignment, BtnA/BtnB direction, chord behavior, cues, clipping, lower-edge use, and the absence of a black bar.

Record host, compile, injected-device, and physical evidence separately.
Never describe reference rendering or injected input as physical proof.

Required behavior

• Preserve Day 24 PCM, packet, PTT, channel, jitter, and playback behavior exactly.
• Join one WebSocket room per channel over TLS and never echo a sender’s own audio.
• Authenticate devices without embedding private server secrets; bound frames, queues, and reconnect backoff.
• Show Provisioning, Connecting, Linked, On Air, Receiving, and Error with actionable reasons.
• Changing channel leaves the old room before joining the new one and cannot leak queued audio across rooms.

Recorded evidence

The shared contract runner validates Stopwatch geometry, touch-map ownership, control metadata, state types and ranges, deterministic scenarios, round-face control bounds, and 10,000 generated actions against three disposable reducer shapes. A deliberately mutated reducer must fail.

Historical implementation evidence from before the prompt-first Stopwatch migration follows.

Recorded evidence · September 22, 2026: The deployed relay was verified from a host script — two WebSocket clients on channel 7, binary bytes fanned to the listener in 528 ms, no echo to the sender. Both firmware halves boot-verified into their provisioning states (D24_STATUS, D21_PORTAL up). Device-to-device audio over the relay awaits Wi-Fi credentials on the bench, noted in NOTES.md.

The reference screenshot is acceptance-model evidence. The next hardware pass must replace or supplement it with a framebuffer capture and a hand-review record.