BACKLOG.md

LabzOS Feature Backlog

User wants this to become a full "EDC OS" for the Cardputer ADV. Tracked here so we don't forget anything across iterations.

Stock hardware available

• WiFi 2.4+5GHz, BT/BLE (ESP32-S3)
• IR emitter (GPIO44)
• BMI270 6-axis IMU
• 1750mAh battery (level/charge state)
• Mic + 1W speaker + 3.5mm jack
• microSD, Grove + EXT expansion

Caps user has

• LoRa/GNSS cap (LoRa packets + GPS)
• CC1101/nRF24 cap (SubGHz RF + 2.4GHz nRF)

Cross-firmware sources for porting

• Marauder (WiFi/BLE attacks, latest has Meta + Flock detection)
• Bruce (IR, BadUSB, files, music)
• Ghost ESP (BLE — cleanest implementation)
• M5Apps (Finder, Installer, Flood mesh chat)
• M5Stack Cardputer-Adv User Demo (GPS, IMU, IR demos)

Per-category roadmap

Chat (✅ working in v0.21)

• Voice activity indicator
• Multi-turn chat history (scrollable, multiple turns)
• System-prompt editor per profile

Settings (✅ working in v0.21, tabbed)

• Brightness slider
• Volume slider
• OTA URL / firmware update via WiFi (revisit when partition supports it)
• Theme switcher

WiFi

• Scan APs (v0.21)
• Scan stations (active devices)
• Deauth detect (passive monitor)
• Beacon spam (random + list)
• Deauth flood
• Evil Portal (Marauder-style)
• Karma attack
• AP clone
• EAPOL/PMKID capture
• Wardriving (with LoRa cap GPS)
• OUI-SPY watchlist (alert on specific MAC/OUI prefix)
• Meta Quest detection (latest Marauder)
• Flock camera detection (latest Marauder)

Bluetooth

• BLE scan + analyzer
• AirTag sniff
• Sour Apple (iOS popup spam)
• SwiftPair spam (Windows)
• Samsung BLE spam
• Flipper spoof
• BadBLE (HID over BLE)

Radio (CC1101/nRF24 cap)

• CC1101 freq scan
• SubGHz replay
• SubGHz brute force
• SubGHz jam
• nRF24 scan
• nRF24 jam

LoRa/GNSS (LoRa cap)

• LoRa packet sniff
• LoRa send
• GNSS info (fix, sats, lat/lon)
• GNSS map / track recorder
• Meshtastic mode (alternative to dedicated Meshtastic bin)

IR (built-in)

• TV-B-Gone (200+ TV power codes)
• Custom IR remote (NEC/SIRC/RC5/Samsung)
• Universal remote presets

USB/HID (built-in USB-C)

• BadUSB Rubber Ducky scripts
• Keyboard injection presets

EDC apps

• Notes (text editor + SD save)
• Timer / stopwatch
• Calculator
• Calendar / clock display
• Flashlight (full-screen white)
• QR code generator / scanner (camera if added)
• Password vault (encrypted on SD)
• Unit converter
• SSH client (libssh-esp32 — connect to lab hosts, run commands)

System

• File manager (SD/USB) — port from M5Apps Finder
• Music player — port from Bruce
• Web radio — already a standalone bin, could embed
• Battery level + charge state indicator
• IMU demo (compass, step counter, gestures)
• Backup/restore Config to SD

Build cadence

• 1 firmware feature per iteration typically
• After feature ships, test on device, then plan next
• Group small features (e.g. calculator + timer + flashlight) into single iteration if trivial

Last updated: 2026-06-08