chore: release v1.7.109-alpha

docs(release): third v1.7.109 bullet (Pine voice assistant) + version-bump prep
The release gate requires ≥3 curated changelog bullets; the Pine app is user-facing and deserved one anyway. Carries the version bumps and manifest from the aborted cut so the tree is clean for the re-run. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-21 07:50:10 -04:00 · 2026-07-21 07:34:26 -04:00 · 2026-07-21 06:59:47 -04:00 · 2026-07-21 06:55:19 -04:00 · 2026-07-21 06:54:05 -04:00 · 2026-07-21 06:53:10 -04:00
35 changed files with 3420 additions and 2447 deletions
@@ -1,5 +1,11 @@
 # Changelog

+## v1.7.109-alpha (2026-07-21)
+
+- Meet Pine, your node's voice assistant: a new app in the App Store that gives your node ears and a voice — speech-to-text and text-to-speech engines that run entirely on your own hardware, ready to wire into Home Assistant for private, offline voice control. Install it like any other app; nothing you say leaves your node.
+- Your node can now program its MeshCore radio's RF settings — frequency, bandwidth, spreading factor, and coding rate — from Mesh → Device settings. Radios that were flashed with mismatched settings could hear that other radios exist but never decode their messages, and until now the only fix was a separate phone app. Set the values once and the node programs the radio automatically (it restarts once to apply); every radio on your mesh must use the same values to talk to each other.
+- The Device settings panel is tidier: values you can edit (name, region, channel) are no longer also shown as separate read-only rows.
+
 ## v1.7.108-alpha (2026-07-20)

 - Your node connects to the private mesh far more reliably. Nodes rely on a public rendezvous point to find each other, and the only one available was unreachable from many home and office networks — leaving some nodes unable to join the mesh at all. There is now a second, always-reachable rendezvous point, and your node tries every one it knows, so it joins the mesh in seconds instead of being stranded.
@@ -370,6 +370,17 @@
        ]
      }
    },
+    {
+      "id": "pine",
+      "title": "Pine",
+      "version": "1.0.0",
+      "description": "A private voice assistant for your home. Pine runs speech-to-text (Whisper) and text-to-speech (Piper) on your own node and pairs with a PineVoice satellite speaker, so Home Assistant Assist works locally with nothing sent to the cloud.",
+      "icon": "/assets/img/app-icons/pine.svg",
+      "author": "Archipelago",
+      "category": "home",
+      "dockerImage": "docker.io/library/nginx:1.27-alpine",
+      "repoUrl": "https://github.com/rhasspy/wyoming"
+    },
    {
      "id": "grafana",
      "title": "Grafana",
@@ -0,0 +1,70 @@
+app:
+  id: pine-piper
+  name: Pine Piper (TTS)
+  version: "2.2.2"
+  description: Wyoming-protocol Piper text-to-speech engine. Internal Pine voice-assistant stack member — gives Home Assistant Assist a natural voice for spoken responses on the PineVoice satellite.
+  category: home
+
+  # Hyphen name matches the runtime references (stack member table / startup
+  # order) + the live container, so on an existing node the orchestrator ADOPTS
+  # the running engine rather than recreating it (downloaded voices under /data
+  # preserved).
+  container_name: pine-piper
+
+  container:
+    image: docker.io/rhasspy/wyoming-piper:2.2.2
+    pull_policy: if-not-present
+    network: archy-net
+    network_aliases: [pine-piper]
+    # The image entrypoint already binds tcp://0.0.0.0:10200; this arg only
+    # picks the voice (mirrors the pine ha-stack.yml compose command).
+    custom_args: ["--voice", "en_GB-alba-medium"]
+
+  dependencies:
+    - storage: 1Gi
+
+  resources:
+    memory_limit: 512Mi
+
+  security:
+    # cap-drop=ALL is applied by the orchestrator. A plain Python Wyoming server
+    # on an unprivileged port needs no added capabilities.
+    capabilities: []
+    readonly_root: false   # downloads the voice into /data on first run
+    no_new_privileges: true
+    network_policy: isolated
+
+  ports:
+    # Published so Home Assistant (on the pasta net) can reach the engine via
+    # host.containers.internal:10200 (the Wyoming integration endpoint).
+    - host: 10200
+      container: 10200
+      protocol: tcp
+
+  volumes:
+    - type: bind
+      source: /var/lib/archipelago/pine-piper
+      target: /data
+      options: [rw]
+
+  environment: []
+
+  health_check:
+    type: tcp
+    endpoint: localhost:10200
+    interval: 30s
+    timeout: 5s
+    retries: 5
+    start_period: 60s   # first start downloads the voice
+
+  metadata:
+    author: Rhasspy / Home Assistant
+    icon: /assets/img/app-icons/pine.svg
+    website: https://github.com/rhasspy/wyoming-piper
+    repo: https://github.com/rhasspy/wyoming-piper
+    license: MIT
+    tags:
+      - home
+      - voice
+      - text-to-speech
+      - wyoming
@@ -0,0 +1,70 @@
+app:
+  id: pine-whisper
+  name: Pine Whisper (STT)
+  version: "3.4.1"
+  description: Wyoming-protocol faster-whisper speech-to-text engine. Internal Pine voice-assistant stack member — turns speech captured by a PineVoice satellite into text for Home Assistant Assist.
+  category: home
+
+  # Hyphen name matches the runtime references (stack member table / startup
+  # order) + the live container, so on an existing node the orchestrator ADOPTS
+  # the running engine rather than recreating it (downloaded models under /data
+  # preserved).
+  container_name: pine-whisper
+
+  container:
+    image: docker.io/rhasspy/wyoming-whisper:3.4.1
+    pull_policy: if-not-present
+    network: archy-net
+    network_aliases: [pine-whisper]
+    # The image entrypoint already binds tcp://0.0.0.0:10300; these args only
+    # pick the model + language (mirrors the pine ha-stack.yml compose command).
+    custom_args: ["--model", "base-int8", "--language", "en"]
+
+  dependencies:
+    - storage: 2Gi
+
+  resources:
+    memory_limit: 2Gi
+
+  security:
+    # cap-drop=ALL is applied by the orchestrator. A plain Python Wyoming server
+    # on an unprivileged port needs no added capabilities.
+    capabilities: []
+    readonly_root: false   # downloads the whisper model into /data on first run
+    no_new_privileges: true
+    network_policy: isolated
+
+  ports:
+    # Published so Home Assistant (on the pasta net) can reach the engine via
+    # host.containers.internal:10300 (the Wyoming integration endpoint).
+    - host: 10300
+      container: 10300
+      protocol: tcp
+
+  volumes:
+    - type: bind
+      source: /var/lib/archipelago/pine-whisper
+      target: /data
+      options: [rw]
+
+  environment: []
+
+  health_check:
+    type: tcp
+    endpoint: localhost:10300
+    interval: 30s
+    timeout: 5s
+    retries: 5
+    start_period: 60s   # first start downloads the model
+
+  metadata:
+    author: Rhasspy / Home Assistant
+    icon: /assets/img/app-icons/pine.svg
+    website: https://github.com/rhasspy/wyoming-faster-whisper
+    repo: https://github.com/rhasspy/wyoming-faster-whisper
+    license: MIT
+    tags:
+      - home
+      - voice
+      - speech-to-text
+      - wyoming
@@ -0,0 +1,177 @@
+app:
+  id: pine
+  name: Pine
+  version: "1.0.0"
+  description: A private voice assistant for your home. Pine runs speech-to-text (Whisper) and text-to-speech (Piper) on your own node and pairs with a PineVoice satellite speaker, so Home Assistant Assist works locally with nothing sent to the cloud.
+  category: home
+
+  # The user-facing launcher (app_id + container both "pine", matching the
+  # runtime references + the live container so the orchestrator adopts it). A
+  # tiny nginx that serves the setup / status page for the voice stack. The two
+  # Wyoming engines (pine-whisper, pine-piper) are internal stack members.
+  container_name: pine
+
+  container:
+    image: docker.io/library/nginx:1.27-alpine
+    pull_policy: if-not-present
+    network: archy-net
+    network_aliases: [pine]
+
+  dependencies:
+    - app_id: pine-whisper
+    - app_id: pine-piper
+    - storage: 128Mi
+
+  resources:
+    memory_limit: 64Mi
+
+  security:
+    # cap-drop=ALL is applied by the orchestrator. nginx (master as root, drops
+    # workers) binds :80 inside the container — needs the worker-drop caps +
+    # NET_BIND_SERVICE for the privileged port.
+    capabilities: [CHOWN, DAC_OVERRIDE, SETGID, SETUID, NET_BIND_SERVICE]
+    readonly_root: false
+    no_new_privileges: true
+    network_policy: isolated
+
+  ports:
+    - host: 10380
+      container: 80
+      protocol: tcp
+
+  volumes:
+    - type: bind
+      source: /var/lib/archipelago/pine/index.html
+      target: /usr/share/nginx/html/index.html
+      options: [ro]
+
+  environment: []
+
+  # The setup / status page, written to the host before create and served
+  # read-only. Web-Bluetooth WiFi provisioning of the speaker only works from a
+  # secure/localhost context (not this LAN page), so the page documents that
+  # flow rather than embedding it — the live provisioner lives in the `pine`
+  # Gitea repo (index.html), run from a laptop on localhost.
+  files:
+    - path: /var/lib/archipelago/pine/index.html
+      overwrite: true
+      content: |
+        <!doctype html>
+        <html lang="en">
+        <head>
+          <meta charset="utf-8">
+          <meta name="viewport" content="width=device-width, initial-scale=1">
+          <title>Pine — private voice assistant</title>
+          <style>
+            :root { color-scheme: dark; }
+            body { margin: 0; font: 16px/1.6 system-ui, sans-serif;
+                   background: #0f1512; color: #e7efe9; }
+            .wrap { max-width: 720px; margin: 0 auto; padding: 40px 24px 80px; }
+            header { display: flex; align-items: center; gap: 16px; margin-bottom: 8px; }
+            header svg { width: 56px; height: 56px; flex: 0 0 auto; }
+            h1 { font-size: 28px; margin: 0; }
+            .tag { color: #8fbfa5; font-size: 14px; margin: 2px 0 0; }
+            h2 { font-size: 18px; margin: 32px 0 8px; color: #b7e0c8; }
+            ol { padding-left: 22px; } li { margin: 6px 0; }
+            code { background: #1c2620; padding: 2px 6px; border-radius: 5px;
+                   font-size: 14px; color: #cfe9d9; }
+            .card { background: #16201b; border: 1px solid #24332b;
+                    border-radius: 12px; padding: 16px 20px; margin: 16px 0; }
+            .row { display: flex; gap: 12px; align-items: baseline; }
+            .row b { min-width: 96px; color: #9fd3b6; }
+            a { color: #7fd6a6; }
+            footer { margin-top: 40px; color: #6d8578; font-size: 13px; }
+          </style>
+        </head>
+        <body>
+          <div class="wrap">
+            <header>
+              <svg viewBox="0 0 512 512" aria-hidden="true"><g fill="#7fd6a6">
+                <rect x="236" y="396" width="40" height="72" rx="6"/>
+                <path d="M256 44 L336 168 L296 168 L256 108 L216 168 L176 168 Z"/>
+                <path d="M256 150 L360 300 L300 300 L256 236 L212 300 L152 300 Z"/>
+                <path d="M256 262 L392 430 L120 430 L256 262 Z"/>
+              </g></svg>
+              <div>
+                <h1>Pine</h1>
+                <p class="tag">A private voice assistant that runs on your node.</p>
+              </div>
+            </header>
+
+            <p>Pine gives Home Assistant a local voice: your PineVoice speaker
+            hears you, <b>Whisper</b> turns speech into text on this node, and
+            <b>Piper</b> speaks the reply back — nothing leaves your home.</p>
+
+            <div class="card">
+              <div class="row"><b>Whisper (STT)</b><span>listening on
+                <code>host.containers.internal:10300</code></span></div>
+              <div class="row"><b>Piper (TTS)</b><span>listening on
+                <code>host.containers.internal:10200</code></span></div>
+              <div class="row"><b>Speaker</b><span>Wyoming satellite on
+                <code>&lt;speaker-ip&gt;:10700</code></span></div>
+            </div>
+
+            <h2>1 · Get the speaker on WiFi</h2>
+            <ol>
+              <li>Web-Bluetooth provisioning needs a secure/localhost page, so
+                run the setup tool from the <code>pine</code> repo on a laptop:
+                <code>python3 -m http.server 8377 --bind 127.0.0.1</code>, then
+                open <code>http://localhost:8377</code> in Chrome.</li>
+              <li>Put the speaker in provisioning mode (ring LED blinking
+                yellow), enter your WiFi, and press the centre button when the
+                page asks for authorization.</li>
+              <li>Success: the log shows <code>✓ PROVISIONED</code> and the
+                speaker chimes.</li>
+            </ol>
+
+            <h2>2 · Wire it into Home Assistant</h2>
+            <ol>
+              <li>In Home Assistant: <b>Settings → Devices &amp; services</b>.
+                Add the two <b>Wyoming Protocol</b> integrations —
+                <code>host.containers.internal:10300</code> (Whisper) and
+                <code>:10200</code> (Piper).</li>
+              <li>Add the speaker as a third Wyoming device at
+                <code>&lt;speaker-ip&gt;:10700</code>.</li>
+              <li>Build an <b>Assist</b> pipeline: STT = faster-whisper,
+                TTS = Piper, then set it as the speaker's pipeline.</li>
+              <li>Say the wake word (<b>“Hey Jarvis”</b>) or press the speaker's
+                centre button, and talk to your home.</li>
+            </ol>
+
+            <footer>Pine · Whisper + Piper run locally on this Archipelago node.
+              No cloud, no account.</footer>
+          </div>
+        </body>
+        </html>
+
+  health_check:
+    type: tcp
+    endpoint: localhost:80
+    interval: 30s
+    timeout: 5s
+    retries: 5
+    start_period: 10s
+
+  interfaces:
+    main:
+      name: Pine
+      description: Set up and check your private voice assistant
+      type: ui
+      port: 10380
+      protocol: http
+      path: /
+
+  metadata:
+    author: Archipelago
+    icon: /assets/img/app-icons/pine.svg
+    website: https://github.com/rhasspy/wyoming
+    repo: https://github.com/rhasspy/wyoming
+    license: MIT
+    category: home
+    launch:
+      open_in_new_tab: true
+    tags:
+      - home
+      - voice
+      - assistant
+      - privacy
@@ -95,7 +95,7 @@ dependencies = [

 [[package]]
 name = "archipelago"
-version = "1.7.108-alpha"
+version = "1.7.109-alpha"
 dependencies = [
 "anyhow",
 "archipelago-container",
@@ -1,6 +1,6 @@
 [package]
 name = "archipelago"
-version = "1.7.108-alpha"
+version = "1.7.109-alpha"
 edition = "2021"
 description = "Archipelago Bitcoin Node OS - Native backend"
 authors = ["Archipelago Team"]
@@ -158,6 +158,29 @@ impl RpcHandler {
                anyhow::bail!("Unknown LoRa region: {trimmed}");
            }
        }
+        // Meshcore LoRa PHY params (freq/bw/sf/cr, firmware field units — see
+        // mesh::LoraRadioParams). Validated against the firmware's accepted
+        // ranges here so a bad value errors at the API instead of being sent
+        // to the radio and rejected on-device. `null` clears the setting.
+        if let Some(rp) = params.get("lora_radio_params") {
+            if rp.is_null() {
+                config.lora_radio_params = None;
+            } else {
+                let parsed: mesh::LoraRadioParams = serde_json::from_value(rp.clone())
+                    .map_err(|e| anyhow::anyhow!("Invalid lora_radio_params: {e}"))?;
+                anyhow::ensure!(
+                    (150_000..=2_500_000).contains(&parsed.freq_khz),
+                    "freq_khz out of range (150000..=2500000)"
+                );
+                anyhow::ensure!(
+                    (7_000..=500_000).contains(&parsed.bw_hz),
+                    "bw_hz out of range (7000..=500000)"
+                );
+                anyhow::ensure!((5..=12).contains(&parsed.sf), "sf out of range (5..=12)");
+                anyhow::ensure!((5..=8).contains(&parsed.cr), "cr out of range (5..=8)");
+                config.lora_radio_params = Some(parsed);
+            }
+        }
        // Firmware pin: probe only the named firmware on the port ("auto"/""
        // clears the pin and restores strict-probe auto-detect).
        if let Some(kind) = params.get("device_kind").and_then(|v| v.as_str()) {
@@ -41,6 +41,10 @@ impl RpcHandler {
            // live radio-reported `region`): the configured LoRa region and
            // the firmware pin ("meshcore"|"meshtastic"|"reticulum"|null=auto).
            obj.insert("lora_region".into(), config.lora_region.clone().into());
+            obj.insert(
+                "lora_radio_params".into(),
+                serde_json::to_value(config.lora_radio_params).unwrap_or_default(),
+            );
            obj.insert(
                "device_kind".into(),
                config
@@ -496,6 +496,8 @@ pub(super) fn all_container_names(package_id: &str) -> Vec<String> {
            "netbird-dashboard".into(),
            "netbird-server".into(),
        ],
+        // Pine voice-assistant stack: launcher + the two Wyoming engines.
+        "pine" => vec!["pine".into(), "pine-whisper".into(), "pine-piper".into()],
        "nostr-vpn" => vec![
            "nostr-vpn".into(),
            "archy-nostr-vpn".into(),
@@ -595,6 +595,9 @@ pub(super) fn needs_archy_net(package_id: &str) -> bool {
            | "nbxplorer"
            | "fedimint"
            | "fedimint-gateway"
+            | "pine"
+            | "pine-whisper"
+            | "pine-piper"
    )
 }

@@ -626,6 +629,7 @@ pub(super) fn startup_order(package_id: &str) -> &'static [&'static str] {
            &["archy-btcpay-db", "archy-nbxplorer", "btcpay-server"]
        }
        "netbird" => &["netbird-server", "netbird-dashboard", "netbird"],
+        "pine" => &["pine-whisper", "pine-piper", "pine"],
        "penpot" | "penpot-frontend" => &[
            "penpot-postgres",
            "penpot-valkey",
@@ -294,6 +294,9 @@ impl RpcHandler {
        if package_id == "netbird" {
            return self.install_netbird_stack().await;
        }
+        if package_id == "pine" {
+            return self.install_pine_stack().await;
+        }
        // Dependency checks. Prefer the scanner's cached package state so a
        // congested Podman API does not turn an already-running dependency into
        // a false install failure. Fall back to a bounded direct Podman probe
@@ -744,6 +744,15 @@ fn netbird_stack_app_ids() -> &'static [&'static str] {
    &["netbird-server", "netbird-dashboard", "netbird"]
 }

+fn pine_stack_app_ids() -> &'static [&'static str] {
+    // Dependency/startup order: the two Wyoming engines (STT + TTS) first — they
+    // own their downloaded model/voice under /data and publish 10300/10200 —
+    // then the user-facing launcher ("pine", the nginx that serves the setup /
+    // status page + is the Open target). Mirrors the pine startup_order in
+    // dependencies.rs + the stack member table in app_ops.rs.
+    &["pine-whisper", "pine-piper", "pine"]
+}
+
 fn indeedhub_stack_app_ids() -> &'static [&'static str] {
    // Dependency order: backends + their generated secrets first, then the api
    // (owns indeedhub-jwt; reads the db/minio secrets the backends materialised),
@@ -1907,6 +1916,37 @@ impl RpcHandler {
            "netbird manifests not available on this node — the signed catalog must provide apps/netbird-*/manifest.yml (legacy hardcoded installer removed in #20 ph4)"
        )
    }
+
+    /// Install the Pine voice-assistant stack (Whisper STT + Piper TTS + the
+    /// setup/status launcher). Manifest-driven only, like netbird: render the
+    /// 3-member stack from apps/pine-*/manifest.yml via the orchestrator
+    /// (archy-net + network_aliases, published Wyoming ports 10300/10200 so
+    /// Home Assistant reaches the engines via host.containers.internal, the
+    /// launcher's setup page written via `files:`). The manifests use the exact
+    /// live container names, so on an existing node this ADOPTS the running
+    /// stack rather than recreating it (downloaded models/voices preserved).
+    ///
+    /// There is no in-Rust hardcoded fallback: the signed catalog always ships
+    /// apps/pine-*/manifest.yml. If the orchestrator doesn't know these app_ids
+    /// and no running stack exists to adopt, install errors rather than
+    /// silently diverging from the manifest contract.
+    pub(super) async fn install_pine_stack(&self) -> Result<serde_json::Value> {
+        if let Some(orchestrated) =
+            install_stack_via_orchestrator(self, "pine", pine_stack_app_ids()).await?
+        {
+            return Ok(orchestrated);
+        }
+
+        if let Some(adopted) =
+            adopt_stack_if_exists("pine", "pine", &["pine-whisper", "pine-piper", "pine"]).await?
+        {
+            return Ok(adopted);
+        }
+
+        anyhow::bail!(
+            "pine manifests not available on this node — the signed catalog must provide apps/pine-*/manifest.yml"
+        )
+    }
 }

 #[cfg(test)]
@@ -50,6 +50,7 @@ pub fn stack_member_app_ids(package_id: &str) -> &'static [&'static str] {
            &["archy-btcpay-db", "archy-nbxplorer", "btcpay-server"]
        }
        "netbird" => &["netbird-server", "netbird-dashboard", "netbird"],
+        "pine" => &["pine-whisper", "pine-piper", "pine"],
        // The legacy umbrella id maps to the split stack (the orchestrator's
        // umbrella alias handles this too; listing it here keeps the RPC
        // layer's fan-out explicit).
@@ -75,7 +76,14 @@ pub fn address_caching_dependents(package_id: &str) -> &'static [&'static str] {
 /// `app_id` is a member (RPC ops on "mempool" hold the "mempool" lock while
 /// they drive archy-mempool-web), otherwise the app itself.
 fn owning_package(app_id: &str) -> &str {
-    const STACKS: &[&str] = &["immich", "indeedhub", "btcpay-server", "netbird", "mempool"];
+    const STACKS: &[&str] = &[
+        "immich",
+        "indeedhub",
+        "btcpay-server",
+        "netbird",
+        "mempool",
+        "pine",
+    ];
    for stack in STACKS {
        if stack_member_app_ids(stack).contains(&app_id) {
            return stack;
@@ -57,6 +57,8 @@ impl DockerPackageScanner {
            "indeedhub-build_ffmpeg-worker_1",
            "netbird-server",
            "netbird-dashboard",
+            "pine-whisper",
+            "pine-piper",
            "buildx_buildkit_default",
        ];

@@ -766,6 +766,9 @@ fn should_auto_start_stopped_container(name: &str, include_stack_members: bool)
                | "netbird-server"
                | "netbird-dashboard"
                | "netbird"
+                | "pine-whisper"
+                | "pine-piper"
+                | "pine"
        )
 }

@@ -827,6 +830,20 @@ fn stack_recovery_specs() -> &'static [StackRecoverySpec] {
            containers: &["netbird-server", "netbird-dashboard", "netbird"],
            anchor: "netbird-server",
        },
+        StackRecoverySpec {
+            name: "pine",
+            network: "archy-net",
+            aliases: &[
+                ("pine-whisper", "pine-whisper"),
+                ("pine-piper", "pine-piper"),
+                ("pine", "pine"),
+            ],
+            containers: &["pine-whisper", "pine-piper", "pine"],
+            // The launcher only depends on the two engines; whisper is the
+            // heaviest/first member, so treat it as the stack anchor (its
+            // presence means the stack was really installed, not orphan debris).
+            anchor: "pine-whisper",
+        },
    ]
 }

@@ -421,6 +421,7 @@ pub fn spawn_mesh_listener(
    our_x25519_pubkey_hex: String,
    server_name: Option<String>,
    lora_region: Option<String>,
+    lora_radio_params: Option<super::LoraRadioParams>,
    channel_name: Option<String>,
    device_kind: Option<super::types::DeviceType>,
    reticulum_tcp: Option<super::types::ReticulumTcpConfig>,
@@ -456,6 +457,7 @@ pub fn spawn_mesh_listener(
                &our_x25519_pubkey_hex,
                server_name.as_deref(),
                lora_region.as_deref(),
+                lora_radio_params,
                channel_name.as_deref(),
                device_kind,
                reticulum_tcp.clone(),
@@ -836,6 +836,10 @@ const MAX_REGION_PROVISION_ATTEMPTS: u32 = 3;
 static REGION_PROVISION_ATTEMPTS: std::sync::atomic::AtomicU32 =
    std::sync::atomic::AtomicU32::new(0);

+/// Same retry-cap idea as the region, for the Meshcore radio-params write.
+static RADIO_PARAMS_PROVISION_ATTEMPTS: std::sync::atomic::AtomicU32 =
+    std::sync::atomic::AtomicU32::new(0);
+
 /// Same retry-cap idea as the region, for the shared-channel write.
 static CHANNEL_PROVISION_ATTEMPTS: std::sync::atomic::AtomicU32 =
    std::sync::atomic::AtomicU32::new(0);
@@ -851,6 +855,7 @@ pub(super) async fn run_mesh_session(
    our_x25519_pubkey_hex: &str,
    server_name: Option<&str>,
    lora_region: Option<&str>,
+    lora_radio_params: Option<crate::mesh::LoraRadioParams>,
    channel_name: Option<&str>,
    device_kind: Option<DeviceType>,
    reticulum_tcp: Option<ReticulumTcpConfig>,
@@ -978,6 +983,62 @@ pub(super) async fn run_mesh_session(
        );
    }

+    // Provision Meshcore LoRa PHY params (freq/bw/sf/cr) when the operator has
+    // configured them. Meshcore-only: Meshtastic radios get region+preset via
+    // ensure_lora_region above, and Reticulum carries its own RNode profile.
+    // Gated on a persisted marker of the last-applied params rather than the
+    // device's SELF_INFO readback (its field offsets shift across firmware
+    // versions), so we send the set-command once per configured value and never
+    // reboot-loop a radio that refuses it. The firmware reboots on RESP_OK, so
+    // a successful write restarts the session like the region path.
+    if let (Some(params), MeshRadioDevice::Meshcore(dev)) = (lora_radio_params, &mut device) {
+        let marker_path = data_dir.join("meshcore-radio-params.json");
+        let applied: Option<crate::mesh::LoraRadioParams> = tokio::fs::read(&marker_path)
+            .await
+            .ok()
+            .and_then(|b| serde_json::from_slice(&b).ok());
+        if applied != Some(params) {
+            let attempts = RADIO_PARAMS_PROVISION_ATTEMPTS.load(Ordering::Relaxed);
+            if attempts < MAX_REGION_PROVISION_ATTEMPTS {
+                match dev
+                    .set_radio_params(params.freq_khz, params.bw_hz, params.sf, params.cr)
+                    .await
+                {
+                    Ok(()) => {
+                        RADIO_PARAMS_PROVISION_ATTEMPTS.fetch_add(1, Ordering::Relaxed);
+                        if let Ok(json) = serde_json::to_vec(&params) {
+                            if let Err(e) = tokio::fs::write(&marker_path, json).await {
+                                warn!("Failed to persist radio-params marker: {}", e);
+                            }
+                        }
+                        info!(
+                            freq_khz = params.freq_khz,
+                            bw_hz = params.bw_hz,
+                            sf = params.sf,
+                            cr = params.cr,
+                            "Provisioned Meshcore radio params — radio rebooting, \
+                             restarting mesh session"
+                        );
+                        tokio::time::sleep(Duration::from_secs(10)).await;
+                        return Ok(());
+                    }
+                    Err(e) => {
+                        RADIO_PARAMS_PROVISION_ATTEMPTS.fetch_add(1, Ordering::Relaxed);
+                        warn!("Failed to provision Meshcore radio params: {}", e);
+                    }
+                }
+            } else {
+                warn!(
+                    attempts = MAX_REGION_PROVISION_ATTEMPTS,
+                    "Meshcore radio rejected the configured radio params after \
+                     repeated attempts — continuing with the device's own settings."
+                );
+            }
+        } else {
+            RADIO_PARAMS_PROVISION_ATTEMPTS.store(0, Ordering::Relaxed);
+        }
+    }
+
    // Set advert name to the server's human-readable name (e.g. "ThinkPad"),
    // falling back to the DID fragment if no name is configured.
    let advert_name = if let Some(name) = server_name {
@@ -322,6 +322,22 @@ pub(crate) async fn seed_federation_peers_into_mesh(
    }
 }

+/// Operator-configured LoRa PHY parameters for a Meshcore radio, in the
+/// firmware's own field units: `freq_khz` = MHz×1000 (869618 → 869.618 MHz),
+/// `bw_hz` = kHz×1000 (62500 → 62.5 kHz), `sf` 5..=12, `cr` 5..=8. These are
+/// region/deployment-specific (e.g. the Portugal preset 869618/62500/8/8) and
+/// MUST match every radio on the local mesh — a mismatched radio hears RF
+/// energy but demodulates nothing. None (the default) leaves the device's own
+/// settings untouched, so nodes outside the configured deployment are never
+/// affected.
+#[derive(Debug, Clone, Copy, Serialize, Deserialize, PartialEq, Eq)]
+pub struct LoraRadioParams {
+    pub freq_khz: u32,
+    pub bw_hz: u32,
+    pub sf: u8,
+    pub cr: u8,
+}
+
 /// Mesh configuration (persisted to disk).
 #[derive(Debug, Clone, Serialize, Deserialize)]
 pub struct MeshConfig {
@@ -340,6 +356,11 @@ pub struct MeshConfig {
    /// unset/None.
    #[serde(default)]
    pub lora_region: Option<String>,
+    /// Meshcore LoRa PHY parameters (freq/bw/sf/cr). Provisioned onto the
+    /// radio on connect when set; None leaves the device untouched. Ignored
+    /// for Meshtastic (region/preset covers it) and Reticulum.
+    #[serde(default)]
+    pub lora_radio_params: Option<LoraRadioParams>,
    /// Whether to periodically broadcast our identity.
    #[serde(default)]
    pub broadcast_identity: bool,
@@ -422,6 +443,7 @@ impl Default for MeshConfig {
            device_path: None,
            channel_name: Some("archipelago".to_string()),
            lora_region: None,
+            lora_radio_params: None,
            broadcast_identity: true,
            advert_name: None,
            mesh_only_mode: None,
@@ -722,6 +744,7 @@ impl MeshService {
            self.our_x25519_pubkey_hex.clone(),
            self.server_name.clone(),
            self.config.lora_region.clone(),
+            self.config.lora_radio_params,
            self.config.channel_name.clone(),
            self.config.device_kind,
            self.config.reticulum_tcp.clone(),
@@ -210,6 +210,24 @@ pub fn build_set_device_time(unix_secs: u64) -> Vec<u8> {
    encode_frame(&data)
 }

+/// CMD_SET_RADIO_PARAMS (0x0B): set the LoRa PHY config. The device reboots to
+/// apply. `freq_field` and `bw_field` are the raw firmware fields (freq =
+/// MHz×1000 e.g. 869618 for 869.618 MHz; bw = kHz×1000 e.g. 62500 for 62.5 kHz);
+/// `sf` is 5..=12 and `cr` is 5..=8. Wire format verified against the MeshCore
+/// companion firmware handler (`examples/companion_radio/MyMesh.cpp`,
+/// `CMD_SET_RADIO_PARAMS`): `[11][freq:u32 LE][bw:u32 LE][sf:u8][cr:u8]`. The
+/// same fields (same units) come back in the SELF_INFO reply, so a caller can
+/// read them to detect drift. Values outside the firmware's accepted ranges are
+/// rejected by the device (it replies with an error frame), not clamped here.
+pub fn build_set_radio_params(freq_field: u32, bw_field: u32, sf: u8, cr: u8) -> Vec<u8> {
+    let mut data = vec![CMD_SET_RADIO_PARAMS];
+    data.extend_from_slice(&freq_field.to_le_bytes());
+    data.extend_from_slice(&bw_field.to_le_bytes());
+    data.push(sf);
+    data.push(cr);
+    encode_frame(&data)
+}
+
 /// CMD_SET_ADVERT_NAME (0x08): Set the node's advertised name on the mesh.
 pub fn build_set_advert_name(name: &str) -> Vec<u8> {
    let mut data = vec![CMD_SET_ADVERT_NAME];
@@ -730,6 +748,29 @@ mod tests {
        assert_eq!(frame[4], PROTOCOL_VERSION);
    }

+    #[test]
+    fn test_build_set_radio_params_wire_layout() {
+        // Portugal preset: 869.618 MHz, 62.5 kHz BW, SF 8, CR 8.
+        // freq field = MHz*1000 = 869618; bw field = kHz*1000 = 62500.
+        let frame = build_set_radio_params(869_618, 62_500, 8, 8);
+        assert_eq!(frame[0], OUTBOUND_MARKER);
+        // payload length = 1 (cmd) + 4 (freq) + 4 (bw) + 1 (sf) + 1 (cr) = 11
+        assert_eq!(u16::from_le_bytes([frame[1], frame[2]]), 11);
+        let data = &frame[3..];
+        assert_eq!(data[0], CMD_SET_RADIO_PARAMS);
+        assert_eq!(
+            u32::from_le_bytes([data[1], data[2], data[3], data[4]]),
+            869_618
+        );
+        assert_eq!(
+            u32::from_le_bytes([data[5], data[6], data[7], data[8]]),
+            62_500
+        );
+        assert_eq!(data[9], 8); // sf
+        assert_eq!(data[10], 8); // cr
+        assert_eq!(data.len(), 11);
+    }
+
    #[test]
    fn test_decode_frame_complete() -> Result<()> {
        // Simulate an inbound frame: < + len(2) + [RESP_OK]
@@ -164,6 +164,29 @@ impl MeshcoreDevice {
        Ok(())
    }

+    /// Set the radio's LoRa PHY parameters (freq/bw/sf/cr, firmware field
+    /// units — see `protocol::build_set_radio_params`). On RESP_OK the
+    /// firmware persists the params and reboots to apply them, so the caller
+    /// must treat the session as gone and reconnect.
+    pub async fn set_radio_params(
+        &mut self,
+        freq_khz: u32,
+        bw_hz: u32,
+        sf: u8,
+        cr: u8,
+    ) -> Result<()> {
+        self.send_raw(&protocol::build_set_radio_params(freq_khz, bw_hz, sf, cr))
+            .await?;
+        let frame = self.recv_frame_timeout(READ_TIMEOUT).await?;
+        if frame.code == protocol::RESP_ERR {
+            anyhow::bail!(
+                "Set radio params failed: {}",
+                protocol::parse_error(&frame.data)
+            );
+        }
+        Ok(())
+    }
+
    /// Broadcast our advertisement to the mesh.
    pub async fn send_self_advert(&mut self) -> Result<()> {
        self.send_raw(&protocol::build_send_self_advert()).await?;
@@ -1,12 +1,12 @@
 {
  "name": "neode-ui",
-  "version": "1.7.108-alpha",
+  "version": "1.7.109-alpha",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "neode-ui",
-      "version": "1.7.108-alpha",
+      "version": "1.7.109-alpha",
      "dependencies": {
        "@types/dompurify": "^3.0.5",
        "@vue-leaflet/vue-leaflet": "^0.10.1",
@@ -1,7 +1,7 @@
 {
  "name": "neode-ui",
  "private": true,
-  "version": "1.7.108-alpha",
+  "version": "1.7.109-alpha",
  "type": "module",
  "scripts": {
    "start": "./start-dev.sh",
@@ -0,0 +1,11 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" role="img" aria-label="Pine">
+  <rect width="512" height="512" fill="#ffffff"/>
+  <g fill="#000000">
+    <!-- trunk -->
+    <rect x="236" y="396" width="40" height="72" rx="6"/>
+    <!-- three tiers of the evergreen, top to bottom -->
+    <path d="M256 44 L336 168 L296 168 L256 108 L216 168 L176 168 Z"/>
+    <path d="M256 150 L360 300 L300 300 L256 236 L212 300 L152 300 Z"/>
+    <path d="M256 262 L392 430 L120 430 L256 262 Z"/>
+  </g>
+</svg>
@@ -370,6 +370,17 @@
        ]
      }
    },
+    {
+      "id": "pine",
+      "title": "Pine",
+      "version": "1.0.0",
+      "description": "A private voice assistant for your home. Pine runs speech-to-text (Whisper) and text-to-speech (Piper) on your own node and pairs with a PineVoice satellite speaker, so Home Assistant Assist works locally with nothing sent to the cloud.",
+      "icon": "/assets/img/app-icons/pine.svg",
+      "author": "Archipelago",
+      "category": "home",
+      "dockerImage": "docker.io/library/nginx:1.27-alpine",
+      "repoUrl": "https://github.com/rhasspy/wyoming"
+    },
    {
      "id": "grafana",
      "title": "Grafana",
@@ -48,6 +48,9 @@ export interface MeshConfigureParams {
  receive_block_headers?: boolean
  lora_region?: string
  device_kind?: string
+  /** MeshCore LoRa PHY params in firmware field units (freq_khz = MHz×1000,
+   *  bw_hz = kHz×1000). null clears; omitted leaves unchanged. */
+  lora_radio_params?: { freq_khz: number; bw_hz: number; sf: number; cr: number } | null
 }

 export interface MeshPeer {
@@ -33,7 +33,10 @@ describe('appSessionConfig', () => {
      configurable: true,
    })

-    expect(resolveAppUrl('did-wallet')).toBe('http://192.168.1.228:8083')
+    // did-wallet's manifest publishes host port 8088 (apps/did-wallet/
+    // manifest.yml) — assert against the manifest-generated value, which is
+    // exactly what this test exists to protect.
+    expect(resolveAppUrl('did-wallet')).toBe('http://192.168.1.228:8088')
  })

  it('does not treat service-only tcp ports as web launch surfaces', () => {
@@ -6,26 +6,29 @@ export const GENERATED_APP_PORTS: Record<string, number> = {
  "archy-nbxplorer": 32838,
  "botfights": 9100,
  "btcpay-server": 23000,
-  "did-wallet": 8083,
+  "did-wallet": 8088,
  "electrumx": 50002,
  "fedimint": 8175,
  "filebrowser": 8083,
  "gitea": 3001,
  "grafana": 3000,
  "homeassistant": 8123,
+  "immich": 2283,
  "indeedhub": 7778,
  "jellyfin": 8096,
  "lnd-ui": 18083,
  "mempool": 4080,
  "mempool-api": 8999,
-  "morphos-server": 8086,
+  "morphos-server": 8089,
+  "netbird": 8087,
  "nextcloud": 8085,
  "nostr-rs-relay": 18081,
  "photoprism": 2342,
+  "pine": 10380,
  "portainer": 9000,
  "router": 8084,
  "searxng": 8888,
-  "strfry": 8082,
+  "strfry": 8090,
  "uptime-kuma": 3002,
  "vaultwarden": 8082,
 }
@@ -36,6 +39,7 @@ export const GENERATED_APP_TITLES: Record<string, string> = {
  "archy-mempool-db": "Mempool MariaDB",
  "archy-mempool-web": "Mempool Web",
  "archy-nbxplorer": "NBXplorer",
+  "barkd": "Ark Wallet",
  "bitcoin-core": "Bitcoin Core",
  "bitcoin-knots": "Bitcoin Knots",
  "bitcoin-ui": "Bitcoin UI",
@@ -45,24 +49,40 @@ export const GENERATED_APP_TITLES: Record<string, string> = {
  "did-wallet": "Web5 DID Wallet",
  "electrs-ui": "Electrs UI",
  "electrumx": "ElectrumX",
-  "fedimint": "Fedimint",
+  "fedimint": "Fedimint Guardian",
+  "fedimint-clientd": "Fedimint Client",
  "fedimint-gateway": "Fedimint Gateway",
  "filebrowser": "File Browser",
+  "fips-ui": "FIPS Mesh",
  "gitea": "Gitea",
  "grafana": "Grafana",
  "homeassistant": "Home Assistant",
+  "immich": "Immich",
+  "immich-postgres": "Immich Postgres",
+  "immich-redis": "Immich Redis",
  "indeedhub": "IndeeHub",
+  "indeedhub-api": "IndeedHub API",
+  "indeedhub-ffmpeg": "IndeedHub FFmpeg Worker",
+  "indeedhub-minio": "IndeedHub MinIO",
+  "indeedhub-postgres": "IndeedHub Postgres",
+  "indeedhub-redis": "IndeedHub Redis",
+  "indeedhub-relay": "IndeedHub Nostr Relay",
  "jellyfin": "Jellyfin",
  "lightning-stack": "Lightning Stack",
  "lnd": "LND",
  "lnd-ui": "LND UI",
  "mempool": "Mempool Explorer",
  "mempool-api": "Mempool API",
-  "meshtastic": "Meshtastic",
  "morphos-server": "MorphOS Server",
+  "netbird": "NetBird",
+  "netbird-dashboard": "NetBird Dashboard",
+  "netbird-server": "NetBird Server",
  "nextcloud": "Nextcloud",
  "nostr-rs-relay": "Nostr Relay (Rust)",
  "photoprism": "PhotoPrism",
+  "pine": "Pine",
+  "pine-piper": "Pine Piper (TTS)",
+  "pine-whisper": "Pine Whisper (STT)",
  "portainer": "Portainer",
  "router": "Mesh Router",
  "searxng": "SearXNG",
@@ -76,8 +96,10 @@ export const GENERATED_NEW_TAB_APPS = new Set<string>([
  "gitea",
  "grafana",
  "homeassistant",
+  "immich",
  "nextcloud",
  "photoprism",
+  "pine",
  "portainer",
  "uptime-kuma",
  "vaultwarden",
@@ -26,6 +26,10 @@ export const SERVICE_NAMES = new Set([
  'indeedhub-relay', 'indeedhub-build_api_1', 'indeedhub-build_ffmpeg-worker_1',
  'indeedhub-build_postgres_1', 'indeedhub-build_redis_1', 'indeedhub-build_minio_1',
  'indeedhub-build_minio-init_1', 'indeedhub-build_relay_1',
+  // Pine voice-assistant stack: the two Wyoming engines are backends (STT/TTS)
+  // reached by Home Assistant over host.containers.internal — the user-facing
+  // card is "pine" (the setup/status launcher), so the engines go to Services.
+  'pine-whisper', 'pine-piper',
 ])

 const INTERNAL_TOOLING_NAMES = new Set([
@@ -61,7 +65,7 @@ export const APP_CATEGORY_MAP: Record<string, string> = {
  'fedimint': 'money', 'fedimint-gateway': 'money',
  'indeedhub': 'media', 'jellyfin': 'media', 'photoprism': 'media', 'immich': 'media',
  'nextcloud': 'data', 'vaultwarden': 'data', 'filebrowser': 'data', 'cryptpad': 'data',
-  'homeassistant': 'home', 'lorabell': 'home', 'endurain': 'home',
+  'homeassistant': 'home', 'lorabell': 'home', 'endurain': 'home', 'pine': 'home',
  'searxng': 'community', 'ollama': 'community', 'grafana': 'data', 'gitea': 'data',
  'nostrudel': 'nostr',
  'tailscale': 'networking', 'netbird': 'networking', 'nginx-proxy-manager': 'networking', 'portainer': 'networking',
@@ -212,6 +216,7 @@ const SERVICE_ICON_PREFIXES: Array<[string, string]> = [
  ['indeedhub-', '/assets/img/app-icons/indeedhub.png'],
  ['immich-', '/assets/img/app-icons/immich.png'],
  ['immich_', '/assets/img/app-icons/immich.png'],
+  ['pine-', '/assets/img/app-icons/pine.svg'],
 ]

 function serviceParentIcon(id: string): string | undefined {
@@ -27,6 +27,12 @@ const form = ref({
  channel: 'archipelago',
  name: '',
  broadcastIdentity: true,
+  // MeshCore LoRa PHY params (human units; converted to firmware units on
+  // save). All four empty = leave the radio's flashed settings untouched.
+  rfFreqMhz: '',
+  rfBwKhz: '',
+  rfSf: '',
+  rfCr: '',
 })
 const saving = ref(false)
 const saveError = ref<string | null>(null)
@@ -43,6 +49,16 @@ watch(
    form.value.deviceKind = s.device_kind ?? 'auto'
    form.value.channel = s.channel_name || 'archipelago'
    form.value.name = s.self_advert_name ?? ''
+    const rp = (s as Record<string, unknown>).lora_radio_params as
+      | { freq_khz: number; bw_hz: number; sf: number; cr: number }
+      | null
+      | undefined
+    if (rp) {
+      form.value.rfFreqMhz = String(rp.freq_khz / 1000)
+      form.value.rfBwKhz = String(rp.bw_hz / 1000)
+      form.value.rfSf = String(rp.sf)
+      form.value.rfCr = String(rp.cr)
+    }
  },
  { immediate: true },
 )
@@ -62,12 +78,31 @@ async function saveSettings() {
  saveError.value = null
  saveDone.value = false
  try {
+    // MeshCore RF params: send only when all four are filled (partial input
+    // is a user error surfaced by the API's range validation; all-empty
+    // means "leave the radio's flashed settings alone").
+    const rf = [form.value.rfFreqMhz, form.value.rfBwKhz, form.value.rfSf, form.value.rfCr]
+    const rfAll = rf.every((v) => String(v).trim() !== '')
+    const rfAny = rf.some((v) => String(v).trim() !== '')
+    if (rfAny && !rfAll) {
+      throw new Error('Fill in all four RF fields (frequency, bandwidth, SF, CR) or leave all empty')
+    }
    await mesh.configure({
      lora_region: form.value.region,
      device_kind: form.value.deviceKind,
      channel_name: form.value.channel.trim() || 'archipelago',
      ...(form.value.name.trim() ? { advert_name: form.value.name.trim() } : {}),
      broadcast_identity: form.value.broadcastIdentity,
+      ...(rfAll
+        ? {
+            lora_radio_params: {
+              freq_khz: Math.round(parseFloat(form.value.rfFreqMhz) * 1000),
+              bw_hz: Math.round(parseFloat(form.value.rfBwKhz) * 1000),
+              sf: parseInt(form.value.rfSf, 10),
+              cr: parseInt(form.value.rfCr, 10),
+            },
+          }
+        : {}),
    })
    saveDone.value = true
    setTimeout(() => { saveDone.value = false }, 3000)
@@ -93,18 +128,6 @@ async function saveSettings() {
        <span class="mesh-stat-label">Node ID</span>
        <span class="mesh-stat-value">{{ mesh.status.self_node_id != null ? `!${mesh.status.self_node_id.toString(16).padStart(8, '0')}` : '—' }}</span>
      </div>
-      <div class="mesh-stat">
-        <span class="mesh-stat-label">Name</span>
-        <span class="mesh-stat-value">{{ mesh.status.self_advert_name ?? '—' }}</span>
-      </div>
-      <div class="mesh-stat">
-        <span class="mesh-stat-label">Region (radio)</span>
-        <span class="mesh-stat-value">{{ mesh.status.region ?? 'Not set' }}</span>
-      </div>
-      <div class="mesh-stat">
-        <span class="mesh-stat-label">Channel</span>
-        <span class="mesh-stat-value">{{ mesh.status.channel_name }}</span>
-      </div>
      <div class="mesh-stat">
        <span class="mesh-stat-label">Type</span>
        <span class="mesh-stat-value">{{ deviceType === 'unknown' ? '—' : deviceType }}</span>
@@ -128,10 +151,10 @@ async function saveSettings() {
            Applied to fresh (region-unset) Meshtastic radios; a radio that already has a region keeps it.
          </p>
          <p v-else-if="effectiveKind === 'meshcore' && meshcorePlan" class="text-[11px] text-sky-300/80 mt-1">
-            MeshCore community plan for {{ selectedRegion?.code }}: {{ meshcorePlan.freqMhz }} MHz, {{ meshcorePlan.bwKhz }} kHz, SF{{ meshcorePlan.sf }}, CR4/{{ meshcorePlan.cr }} — the radio's flashed RF settings apply; adjust via a MeshCore client if they differ.
+            MeshCore community plan for {{ selectedRegion?.code }}: {{ meshcorePlan.freqMhz }} MHz, {{ meshcorePlan.bwKhz }} kHz, SF{{ meshcorePlan.sf }}, CR4/{{ meshcorePlan.cr }} — set the RF fields below to program the radio.
          </p>
          <p v-else-if="effectiveKind === 'meshcore'" class="text-[11px] text-sky-300/80 mt-1">
-            MeshCore radios keep their flashed RF settings — verify the radio matches your region's band{{ selectedRegion ? ` (${selectedRegion.band} MHz)` : '' }}.
+            Program the radio's RF settings with the fields below — every radio on your mesh must match{{ selectedRegion ? ` (${selectedRegion.band} MHz band)` : '' }}.
          </p>
          <p v-else-if="effectiveKind === 'reticulum'" class="text-[11px] text-sky-300/80 mt-1">
            RNode RF parameters are managed by the Reticulum daemon's interface config on this node.
@@ -158,6 +181,43 @@ async function saveSettings() {
          <input v-model="form.name" maxlength="24" placeholder="node name" class="w-full rounded-lg bg-white/[0.06] border border-white/10 text-white px-3 py-2 text-sm focus:outline-none focus:border-orange-400/60" />
        </div>
      </div>
+
+      <!-- MeshCore LoRa PHY params — every radio on the local mesh must match
+           or it hears RF energy but decodes nothing. Empty = leave the radio's
+           flashed settings untouched. -->
+      <div v-if="effectiveKind === 'meshcore'" class="mt-4">
+        <h5 class="text-xs font-semibold text-white/80 mb-2">MeshCore RF parameters</h5>
+        <div class="grid gap-3 grid-cols-2 sm:grid-cols-4">
+          <div>
+            <label class="block text-xs text-white/60 mb-1">Frequency (MHz)</label>
+            <input v-model="form.rfFreqMhz" inputmode="decimal" placeholder="869.618" class="w-full rounded-lg bg-white/[0.06] border border-white/10 text-white px-3 py-2 text-sm focus:outline-none focus:border-orange-400/60" />
+          </div>
+          <div>
+            <label class="block text-xs text-white/60 mb-1">Bandwidth (kHz)</label>
+            <select v-model="form.rfBwKhz" class="w-full rounded-lg bg-white/[0.06] border border-white/10 text-white px-3 py-2 text-sm focus:outline-none focus:border-orange-400/60">
+              <option value="">—</option>
+              <option v-for="bw in ['62.5', '125', '250', '500']" :key="bw" :value="bw">{{ bw }}</option>
+            </select>
+          </div>
+          <div>
+            <label class="block text-xs text-white/60 mb-1">Spreading factor</label>
+            <select v-model="form.rfSf" class="w-full rounded-lg bg-white/[0.06] border border-white/10 text-white px-3 py-2 text-sm focus:outline-none focus:border-orange-400/60">
+              <option value="">—</option>
+              <option v-for="sf in [5, 6, 7, 8, 9, 10, 11, 12]" :key="sf" :value="String(sf)">SF {{ sf }}</option>
+            </select>
+          </div>
+          <div>
+            <label class="block text-xs text-white/60 mb-1">Coding rate</label>
+            <select v-model="form.rfCr" class="w-full rounded-lg bg-white/[0.06] border border-white/10 text-white px-3 py-2 text-sm focus:outline-none focus:border-orange-400/60">
+              <option value="">—</option>
+              <option v-for="cr in [5, 6, 7, 8]" :key="cr" :value="String(cr)">4/{{ cr }}</option>
+            </select>
+          </div>
+        </div>
+        <p class="text-[11px] text-white/40 mt-1">
+          Saved settings program the radio on its next connect (it reboots once to apply). Leave all four empty to keep the radio's own settings.
+        </p>
+      </div>
      <label class="flex items-center gap-2 mt-3 text-sm text-white/80 cursor-pointer">
        <input v-model="form.broadcastIdentity" type="checkbox" class="h-4 w-4 accent-orange-500" />
        Periodically broadcast this node's identity on the mesh
@@ -362,6 +362,18 @@ init()
              </button>
            </div>
            <div class="overflow-y-auto flex-1 min-h-0 space-y-6 pr-1">
+              <!-- v1.7.109-alpha -->
+              <div>
+                <div class="flex items-center gap-2 mb-3">
+                  <span class="text-xs font-mono px-2 py-0.5 rounded bg-orange-500/20 text-orange-300">v1.7.109-alpha</span>
+                  <span class="text-xs text-white/40">July 21, 2026</span>
+                </div>
+                <div class="space-y-3 text-sm text-white/80 pl-3 border-l border-white/10">
+                  <p>Meet Pine, your node's voice assistant: a new app in the App Store that gives your node ears and a voice — speech-to-text and text-to-speech engines that run entirely on your own hardware, ready to wire into Home Assistant for private, offline voice control. Install it like any other app; nothing you say leaves your node.</p>
+                  <p>Your node can now program its MeshCore radio's RF settings — frequency, bandwidth, spreading factor, and coding rate — from Mesh → Device settings. Radios that were flashed with mismatched settings could hear that other radios exist but never decode their messages, and until now the only fix was a separate phone app. Set the values once and the node programs the radio automatically (it restarts once to apply); every radio on your mesh must use the same values to talk to each other.</p>
+                  <p>The Device settings panel is tidier: values you can edit (name, region, channel) are no longer also shown as separate read-only rows.</p>
+                </div>
+              </div>
              <!-- v1.7.108-alpha -->
              <div>
                <div class="flex items-center gap-2 mb-3">
@@ -1,32 +1,27 @@
 {
+  "version": "1.7.109-alpha",
+  "release_date": "2026-07-21",
  "changelog": [
-    "Your node connects to the private mesh far more reliably. Nodes rely on a public rendezvous point to find each other, and the only one available was unreachable from many home and office networks — leaving some nodes unable to join the mesh at all. There is now a second, always-reachable rendezvous point, and your node tries every one it knows, so it joins the mesh in seconds instead of being stranded.",
-    "Wi-Fi setup now heals itself on older nodes. Some nodes set up before a mid-year fix couldn't connect to a Wi-Fi network from the screen — it failed with a permissions error — because the piece that lets the node manage networking on your behalf was missing. Nodes now put that piece in place automatically on startup, so \"scan, pick a network, type the password, connect\" works without reinstalling.",
-    "Your node rejoins the mesh within seconds after an update. Applying an update briefly restarts the mesh service, and previously a node could sit disconnected from other nodes for up to five minutes before it retried.",
-    "The TV screen now fits your television. On a large or 4K TV the interface rendered tiny with no way to zoom on a keyboard-less screen; it now sizes itself to a comfortable, readable scale automatically (and small laptop panels are left unchanged).",
-    "More TV-screen polish: the built-in assistant shows its dark theme instead of bright white panels, the on-screen hint for switching between the kiosk and a terminal now points at the right keys, the welcome logo no longer occasionally renders as garbled characters, and an accidental tap of the power button no longer shuts the node down — hold it to power off on purpose.",
-    "Behind the scenes: fixed the installer image build so it no longer stops on a component that was removed from the product, and so it correctly includes the private relay it was meant to bundle."
+    "Meet Pine, your node's voice assistant: a new app in the App Store that gives your node ears and a voice \u2014 speech-to-text and text-to-speech engines that run entirely on your own hardware, ready to wire into Home Assistant for private, offline voice control. Install it like any other app; nothing you say leaves your node.",
+    "Your node can now program its MeshCore radio's RF settings \u2014 frequency, bandwidth, spreading factor, and coding rate \u2014 from Mesh \u2192 Device settings. Radios that were flashed with mismatched settings could hear that other radios exist but never decode their messages, and until now the only fix was a separate phone app. Set the values once and the node programs the radio automatically (it restarts once to apply); every radio on your mesh must use the same values to talk to each other.",
+    "The Device settings panel is tidier: values you can edit (name, region, channel) are no longer also shown as separate read-only rows."
  ],
  "components": [
    {
-      "current_version": "1.7.108-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.108-alpha/archipelago",
      "name": "archipelago",
-      "new_version": "1.7.108-alpha",
-      "sha256": "665d3351980d820287e614b0fdf4916957c042110f1ffd7ef6e93e78766ffa2a",
-      "size_bytes": 50346064
+      "current_version": "1.7.109-alpha",
+      "new_version": "1.7.109-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.109-alpha/archipelago",
+      "sha256": "c98322aeb1d7eb223d122052657a4dd67cd284bbb862a79ff9439b35cffd6607",
+      "size_bytes": 50201840
    },
    {
-      "current_version": "1.7.108-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.108-alpha/archipelago-frontend-1.7.108-alpha.tar.gz",
-      "name": "archipelago-frontend-1.7.108-alpha.tar.gz",
-      "new_version": "1.7.108-alpha",
-      "sha256": "8fba3d3aeb2b506cb6a3b3102a07a1713ae7a2bd1ebd4fc734d83f83ba9a8aa8",
-      "size_bytes": 174598175
+      "name": "archipelago-frontend-1.7.109-alpha.tar.gz",
+      "current_version": "1.7.109-alpha",
+      "new_version": "1.7.109-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.109-alpha/archipelago-frontend-1.7.109-alpha.tar.gz",
+      "sha256": "8cff430874eeed385ecc862e3b56c9e338587981684285a5b0ce22c97849a012",
+      "size_bytes": 174604264
    }
-  ],
-  "release_date": "2026-07-20",
-  "signature": "94e2d15488383858d41c90c49075476ce56e4fed8b5829b92f68b3889229e795f250a57e557049bb46561c7c252d5d30db442d014b796e76d7ea4fbd7215dc00",
-  "signed_by": "did:key:z6MkkidEnEpo6qHMCNSZoNKWtvQvxq3whnaME9wGgEFhq7ur",
-  "version": "1.7.108-alpha"
+  ]
 }
@@ -1,32 +1,27 @@
 {
+  "version": "1.7.109-alpha",
+  "release_date": "2026-07-21",
  "changelog": [
-    "Your node connects to the private mesh far more reliably. Nodes rely on a public rendezvous point to find each other, and the only one available was unreachable from many home and office networks — leaving some nodes unable to join the mesh at all. There is now a second, always-reachable rendezvous point, and your node tries every one it knows, so it joins the mesh in seconds instead of being stranded.",
-    "Wi-Fi setup now heals itself on older nodes. Some nodes set up before a mid-year fix couldn't connect to a Wi-Fi network from the screen — it failed with a permissions error — because the piece that lets the node manage networking on your behalf was missing. Nodes now put that piece in place automatically on startup, so \"scan, pick a network, type the password, connect\" works without reinstalling.",
-    "Your node rejoins the mesh within seconds after an update. Applying an update briefly restarts the mesh service, and previously a node could sit disconnected from other nodes for up to five minutes before it retried.",
-    "The TV screen now fits your television. On a large or 4K TV the interface rendered tiny with no way to zoom on a keyboard-less screen; it now sizes itself to a comfortable, readable scale automatically (and small laptop panels are left unchanged).",
-    "More TV-screen polish: the built-in assistant shows its dark theme instead of bright white panels, the on-screen hint for switching between the kiosk and a terminal now points at the right keys, the welcome logo no longer occasionally renders as garbled characters, and an accidental tap of the power button no longer shuts the node down — hold it to power off on purpose.",
-    "Behind the scenes: fixed the installer image build so it no longer stops on a component that was removed from the product, and so it correctly includes the private relay it was meant to bundle."
+    "Meet Pine, your node's voice assistant: a new app in the App Store that gives your node ears and a voice \u2014 speech-to-text and text-to-speech engines that run entirely on your own hardware, ready to wire into Home Assistant for private, offline voice control. Install it like any other app; nothing you say leaves your node.",
+    "Your node can now program its MeshCore radio's RF settings \u2014 frequency, bandwidth, spreading factor, and coding rate \u2014 from Mesh \u2192 Device settings. Radios that were flashed with mismatched settings could hear that other radios exist but never decode their messages, and until now the only fix was a separate phone app. Set the values once and the node programs the radio automatically (it restarts once to apply); every radio on your mesh must use the same values to talk to each other.",
+    "The Device settings panel is tidier: values you can edit (name, region, channel) are no longer also shown as separate read-only rows."
  ],
  "components": [
    {
-      "current_version": "1.7.108-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.108-alpha/archipelago",
      "name": "archipelago",
-      "new_version": "1.7.108-alpha",
-      "sha256": "665d3351980d820287e614b0fdf4916957c042110f1ffd7ef6e93e78766ffa2a",
-      "size_bytes": 50346064
+      "current_version": "1.7.109-alpha",
+      "new_version": "1.7.109-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.109-alpha/archipelago",
+      "sha256": "c98322aeb1d7eb223d122052657a4dd67cd284bbb862a79ff9439b35cffd6607",
+      "size_bytes": 50201840
    },
    {
-      "current_version": "1.7.108-alpha",
-      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.108-alpha/archipelago-frontend-1.7.108-alpha.tar.gz",
-      "name": "archipelago-frontend-1.7.108-alpha.tar.gz",
-      "new_version": "1.7.108-alpha",
-      "sha256": "8fba3d3aeb2b506cb6a3b3102a07a1713ae7a2bd1ebd4fc734d83f83ba9a8aa8",
-      "size_bytes": 174598175
+      "name": "archipelago-frontend-1.7.109-alpha.tar.gz",
+      "current_version": "1.7.109-alpha",
+      "new_version": "1.7.109-alpha",
+      "download_url": "http://146.59.87.168:3000/lfg2025/archy/releases/download/v1.7.109-alpha/archipelago-frontend-1.7.109-alpha.tar.gz",
+      "sha256": "8cff430874eeed385ecc862e3b56c9e338587981684285a5b0ce22c97849a012",
+      "size_bytes": 174604264
    }
-  ],
-  "release_date": "2026-07-20",
-  "signature": "94e2d15488383858d41c90c49075476ce56e4fed8b5829b92f68b3889229e795f250a57e557049bb46561c7c252d5d30db442d014b796e76d7ea4fbd7215dc00",
-  "signed_by": "did:key:z6MkkidEnEpo6qHMCNSZoNKWtvQvxq3whnaME9wGgEFhq7ur",
-  "version": "1.7.108-alpha"
+  ]
 }
@@ -39,6 +39,8 @@ INTERNAL_MANIFEST_IDS = {
    "indeedhub-relay",
    "netbird-dashboard",
    "netbird-server",
+    "pine-whisper",
+    "pine-piper",
 }

 LEGACY_STACK_CATALOG_IDS = {
Author	SHA1	Message	Date
archipelago	9823e76e8f	chore: release v1.7.109-alpha	2026-07-21 07:50:10 -04:00
archipelagoandClaude Fable 5	8d4f6cb75e	docs(release): third v1.7.109 bullet (Pine voice assistant) + version-bump prep Demo images / Build & push demo images (push) Successful in 2m44s Details The release gate requires ≥3 curated changelog bullets; the Pine app is user-facing and deserved one anyway. Carries the version bumps and manifest from the aborted cut so the tree is clean for the re-run. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-21 07:34:26 -04:00
archipelagoandClaude Fable 5	4bac839fb3	test(ui): did-wallet launch port follows its manifest (8088) Demo images / Build & push demo images (push) Successful in 2m49s Details The pine catalog regeneration (`c1dfc667`) refreshed generatedAppSessionConfig from the manifests, where did-wallet publishes host port 8088 — the test's 8083 expectation was stale. The test asserts manifest-generated ports are used, so it must track the manifest. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-21 06:59:47 -04:00
archipelagoandClaude Fable 5	ea80815c98	style: cargo fmt over the pine container list Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-21 06:55:19 -04:00
archipelagoandClaude Fable 5	4348581681	docs(release): curated v1.7.109-alpha changelog + What's New Demo images / Build & push demo images (push) Successful in 2m47s Details Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-21 06:54:05 -04:00
archipelagoandClaude Fable 5	999a100531	feat(mesh): RF-params settings UI + expose lora_radio_params in mesh.status Demo images / Build & push demo images (push) Has been cancelled Details Device panel gets MeshCore RF fields (frequency MHz, bandwidth kHz, SF, CR) wired to mesh.configure's validated lora_radio_params; shown only for MeshCore radios, all-empty leaves the radio's flashed settings untouched. Human units in the UI, firmware field units on the wire. Per operator direction the panel's static stat rows duplicating editable fields (name, region, channel) are dropped — the editable control is the display. Stale 'adjust via a MeshCore client' hints updated: the node programs the radio now. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-21 06:53:10 -04:00
archipelagoandClaude Opus 4.8	a5810d4e51	release: publish signed app-catalog with the Pine voice-assistant app Regenerate + sign releases/app-catalog.json (65 apps) with the pine, pine-whisper and pine-piper manifests embedded, so nodes can install the Pine stack straight from the signed registry (raw URL on main). Signed by the release-root key did:key:z6MkkidEnEpo6qHMCNSZoNKWtvQvxq3whnaME9wGgEFhq7ur. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-21 06:29:48 -04:00
archipelagoandClaude Fable 5	4c3cd4b6ad	feat(mesh): operator-configurable Meshcore LoRa PHY params (freq/bw/sf/cr) Archy set no radio params on Meshcore devices — SF/CR/BW/freq lived only in device firmware, so a radio on the wrong preset could not be fixed from the node (it hears RF energy but demodulates nothing; the fleet hit exactly this on an RNode: docs/RETICULUM-TRANSPORT-PROGRESS.md item 4). - protocol.rs: build_set_radio_params — wire format verified against the MeshCore companion firmware handler (CMD_SET_RADIO_PARAMS=11: [11][freq:u32 LE MHz1000][bw:u32 LE kHz1000][sf][cr]); byte-layout test pinned to the Portugal preset 869.618 MHz / 62.5 kHz / SF8 / CR8. - serial.rs: MeshcoreDevice::set_radio_params (device reboots on OK). - MeshConfig.lora_radio_params: Option — None (default) leaves the radio untouched, so only explicitly-configured deployments are affected. - session.rs: provision on connect, gated on a persisted last-applied marker (SELF_INFO offsets shift across firmware versions) + the same attempt cap as region/channel so a refusing radio never reboot-loops. - mesh.configure RPC: lora_radio_params arm with firmware-range validation. mesh tests: 114/114 pass. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>	2026-07-21 06:10:45 -04:00
archipelagoandClaude Opus 4.8	c1dfc6672c	feat(pine): surface Pine in the app catalog + UI Demo images / Build & push demo images (push) Successful in 2m48s Details - catalog.json (app-catalog + neode-ui/public): one "pine" entry, home category; engines stay out of the catalog - appsConfig.ts: pine → home category, pine-whisper/pine-piper → SERVICE_NAMES (render in Services, not as extra cards), pine-* icon fallback - generatedAppSessionConfig.ts: regenerated (pine port 10380 + titles + open-in-new-tab), via scripts/generate-app-catalog.py Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-21 05:14:32 -04:00
archipelagoandClaude Opus 4.8	8791ef60f5	feat(pine): wire the Pine 3-container stack into the orchestrator Register "pine" as a manifest-driven stack (like netbird) across every lifecycle site so install/stop/start/restart/uninstall/crash-recovery treat the launcher + two Wyoming engines as one app: - stacks.rs: pine_stack_app_ids() + install_pine_stack() (orchestrator-first, adopt existing, else bail — no hardcoded fallback) - install.rs: dispatch package_id == "pine" to the stack installer - app_ops.rs: canonical stack-member table + owning_package STACKS - dependencies.rs: startup_order + needs_archy_net - config.rs: all_container_names - crash_recovery.rs: auto-start members + a StackRecoverySpec (anchor pine-whisper) so a genuinely-installed stack self-heals but orphan debris does not crash-loop - docker_packages.rs: exclude the engines from the apps list Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-21 05:14:32 -04:00
archipelagoandClaude Opus 4.8	1730d02003	feat(pine): add Pine voice-assistant app package (manifests + icon) Package the PineVoice/Wyoming local voice assistant as ONE store app "Pine" that runs three rootless containers: - pine-whisper — Wyoming faster-whisper STT (docker.io/rhasspy/wyoming-whisper 3.4.1, model base-int8/en), publishes :10300 - pine-piper — Wyoming Piper TTS (2.2.2, voice en_GB-alba-medium), publishes :10200 - pine — nginx launcher serving a self-contained setup/status page (WiFi provisioning + Home Assistant wiring instructions), the Open target The two engines publish their Wyoming ports so Home Assistant reaches them via host.containers.internal. All rootless (cap-drop=ALL, no_new_privileges), manifest-driven — no hardcoded podman/installer. The engines are internal stack members (added to the drift-check INTERNAL_MANIFEST_IDS allowlist); only "pine" carries a catalog entry. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-07-21 05:14:32 -04:00