Settings: its rows in five groups

Settings had grown to 21 rows in one list. It opens on five groups (This device, Display, GNSS and radio, Network, System); Enter opens one, Back returns to the groups, and Back from the groups leaves Settings. SettingsMenu holds the groups and which one is open (host-tested: every setting is in exactly one group). The guide, the how-tos, the README, the scripts' messages and the firmware's own name the new paths, such as "Settings > System > Firmware". Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0162FokPdvY2KsS4NBfwyWPk
UI: seven themes, each dark and light, chosen in the Settings
2026-10-10 00:11:52 +02:00 · 2026-10-10 00:11:52 +02:00 · 2026-10-09 23:23:20 +02:00 · 2026-10-09 23:14:37 +02:00 · 2026-10-09 23:14:37 +02:00 · 2026-10-09 23:14:20 +02:00
103 changed files with 2649 additions and 229 deletions
@@ -83,6 +83,9 @@ jobs:
          git checkout -q --detach "${{ github.sha }}"
          git describe --tags --always

+      - name: The icons are what their pictures give
+        run: python3 scripts/make_icons.py --check
+
      - name: Host tests, and their coverage of lib/
        if: github.event_name != 'workflow_dispatch'
        run: |
@@ -6,7 +6,7 @@ A multi-app firmware for the **M5Stack Cardputer ADV** with the **Cap LoRa-1262*

 What it does today:

- **LoRa Scanner:** every packet it hears, with the Meshtastic header read; a spectrum Sweep; captures for Wireshark. It listens and never transmits: the mesh messenger is the next milestone.
+- **LoRa Scanner:** every packet it hears, with the Meshtastic or MeshCore header read; a spectrum Sweep; captures for Wireshark. It listens and never transmits: the mesh messenger is the next milestone.
 - **GNSS:** position, sky view, tracks as GPX.
 - **Gemini:** a browser, with bookmarks and pages saved for offline.
 - **IRC:** over TLS, with logs on the card.
@@ -43,6 +43,8 @@ scripts/ci.sh

 This runs the host-side unit tests (`test/`, `native` environment), then builds the firmware. The output is `.pio/build/cardputer-adv/firmware.factory.bin`.

+`scripts/make_icons.py` turns the Launcher's icons (`assets/icons/<App id>.png`, 32 × 32, one colour) into the arrays in `src/ui/icons.cpp`; run it after changing a picture. CI fails when the two don't match.
+
 `scripts/coverage.sh` runs the same tests with coverage counters and writes a line-by-line report to `.pio/coverage/index.html`. The badge above is its figure for `main`: the share of the lines of `lib/` that the host tests run. `lib/` is the logic that compiles on a PC; `lib/SD` (the card's driver) and `src/` (the Apps, the Services, everything that needs the device) have no host tests and aren't in that figure.

 The framework is rebuilt with the TLS settings in `platformio.ini` (`custom_sdkconfig`, ADR 0006), so the first build after a fresh checkout takes about 6 minutes; later builds take about 15 seconds when little has changed. The platform knows the framework is already rebuilt by `sdkconfig.defaults` in the project folder, which it writes and git ignores: delete it and the next build rebuilds the framework. CI keeps that file, a build cache and ccache in its volume (docs/milestones/R1.md).
@@ -92,19 +94,19 @@ scripts/ota_keygen.sh                  # once: creates the signing key (see ADR
 scripts/flash.sh --ota 10.39.39.12     # build, sign and push; or set RORO_OTA_HOST
 ```

-The device shows the push address in **Settings → Firmware**. It installs a correctly signed update right away, restarts (waiting up to 60 s if you're typing), and runs the new firmware on **Probation**. If the new firmware crashes, or can't reconnect Wi-Fi within 3 minutes, it rolls back to the previous one and says so.
+The device shows the push address in **Settings → System → Firmware**. It installs a correctly signed update right away, restarts (waiting up to 60 s if you're typing), and runs the new firmware on **Probation**. If the new firmware crashes, or can't reconnect Wi-Fi within 3 minutes, it rolls back to the previous one and says so.

-To install from the SD card instead, copy the `.ota` file from `.pio/build/cardputer-adv/` into `/updates` on the card, then use **Settings → Firmware**. With the Cardputer on USB, the card can stay in: `scripts/sd_put.sh <file.ota>` sends it over the serial console into `/updates` (about 30 s for 1.6 MB, checked with SHA-256 before it's renamed into place; `SD_PUT_DEBUG=1` shows the console while it runs).
+To install from the SD card instead, copy the `.ota` file from `.pio/build/cardputer-adv/` into `/updates` on the card, then use **Settings → System → Firmware**. With the Cardputer on USB, the card can stay in: `scripts/sd_put.sh <file.ota>` sends it over the serial console into `/updates` (about 30 s for 1.6 MB, checked with SHA-256 before it's renamed into place; `SD_PUT_DEBUG=1` shows the console while it runs).

 **The private key** lives in `~/.config/roro9stack/ota-key.pem` and must never be committed. If it's lost, generate a new pair and flash once over USB. (CI signs releases with a copy kept as a repository secret, ADR 0008.)

 ### Updates from Gitea

-With no PC and no card, the device can install the project's releases itself (docs/milestones/R1.md). In **Settings → Firmware**:
+With no PC and no card, the device can install the project's releases itself (docs/milestones/R1.md). In **Settings → System → Firmware**:

 - **Latest release** checks the server (Enter, or `c`) and says `v0.11.0 (new)` or `(current)`. Enter again opens the release: its version, date, size and the tag's message, with **Install** when it's newer. The download goes straight into the inactive slot, so no card is needed; the signature is checked after the first 160 bytes, before anything is written, and the image's hash at the end. The new firmware then runs on Probation as for any update.
 - **Older releases** lists the last ten, newest first. Opening an older one offers to go back to it, with a different question.
- **Settings → Check for updates** (on by default): once a day, with Wi-Fi up and the clock set, the device looks at the latest release and says `v0.11.0 is out: see Settings > Firmware`, once per version. It installs nothing by itself, and doesn't announce a version that already failed and rolled back on this device.
+- **Settings → System → Check for updates** (on by default): once a day, with Wi-Fi up and the clock set, the device looks at the latest release and says `v0.11.0 is out: see Settings > System > Firmware`, once per version. It installs nothing by itself, and doesn't announce a version that already failed and rolled back on this device.

 The connection is checked against the two ISRG roots Let's Encrypt chains end in (ADR 0009), not the usual bundle of about 130 authorities. Whatever the connection, the Update File's own signature is what decides what gets installed.

@@ -114,7 +116,7 @@ The connection is checked against the two ISRG roots Let's Encrypt chains end in

 ## Networks without DHCP

-Each Saved Network gets its address automatically (DHCP) or has a Fixed one (docs/milestones/S1.md): in Settings > Wi-Fi, Enter on a network opens its page, where "IP address" switches between Automatic and Fixed, with an address, a prefix length (24 is 255.255.255.0) and an optional gateway. Switching to Fixed starts from what the network is giving the device at that moment. The setting is checked and applied when you leave the page. IPv4 only.
+Each Saved Network gets its address automatically (DHCP) or has a Fixed one (docs/milestones/S1.md): in Settings > Network > Wi-Fi, Enter on a network opens its page, where "IP address" switches between Automatic and Fixed, with an address, a prefix length (24 is 255.255.255.0) and an optional gateway. Switching to Fixed starts from what the network is giving the device at that moment. The setting is checked and applied when you leave the page. IPv4 only.

 "DNS and NTP" on the same screen holds two DNS servers (9.9.9.9 and 1.1.1.1 by default), used on Fixed networks, or on every network with "Always use my DNS"; and two NTP servers (pool.ntp.org and time.cloudflare.com), used after any the network's DHCP offers. Enter on "Status" shows what's in use and where each value came from.

@@ -138,7 +140,7 @@ On a page, `b` bookmarks it, `s` saves it to the SD card to read offline (a non-

 ## LoRa Scanner

-The LoRa Scanner (docs/milestones/M3.md) listens with the Cap's radio and **never transmits**. The Sniffer lists what it hears, newest first: time, RSSI, SNR, and for Meshtastic packets the sender and receiver (their last 4 hex digits) and hops. Enter shows a packet's details: the Meshtastic header (which is never encrypted) and a hex dump. `p` picks one of the 7 Meshtastic presets allowed in EU868 (LongFast by default), `c` starts or stops a Capture: a pcap file with LoRaTap headers in `/captures/lora/`, for Wireshark. A Capture keeps recording with the App closed; otherwise the radio sleeps when the App isn't open. Tab switches to **Sweep**: the signal strength across 863–870 MHz in 100 kHz steps, as bars with peak hold and a waterfall, with the Sniffer's frequency marked; the Sniffer is paused meanwhile and picks up where it was. The GNSS receiver on the same Cap raises the radio's noise floor by 8 dB while it runs: Settings > "Pause GNSS for LoRa" (off by default) puts it in standby while the radio listens, except during a Track. The Status Bar shows `L` while the radio listens (bright for a moment on each packet), `SW` while sweeping, and `CAP` while capturing.
+The LoRa Scanner (docs/milestones/M3.md) listens with the Cap's radio and **never transmits**. The Sniffer lists what it hears, newest first: time, RSSI, SNR, and for Meshtastic packets the sender and receiver (their last 4 hex digits) and hops; for MeshCore packets what they are (an advert with the node's name, a message with the first byte of each node's key, a message on the public channel read, with the name its sender gives; any other channel message with the channel's byte) and the hops in their path. Enter shows a packet's details: what is never encrypted (the Meshtastic header; MeshCore's header, path and, in an advert, the node's name, kind, key and position; and a public channel message's sender, time and text, decrypted with the channel's published key) and a hex dump. `p` picks **MeshCore** (the default; its EU/UK Narrow setting: 869.618 MHz, 62.5 kHz, SF8, CR 4/8) or one of the 7 Meshtastic presets allowed in EU868, `c` starts or stops a Capture: a pcap file with LoRaTap headers in `/captures/lora/`, for Wireshark. A Capture keeps recording with the App closed; otherwise the radio sleeps when the App isn't open. Tab switches to **Sweep**: the signal strength across 863–870 MHz in 100 kHz steps, as bars with peak hold and a waterfall, with the Sniffer's frequency marked; the Sniffer is paused meanwhile and picks up where it was. The GNSS receiver on the same Cap raises the radio's noise floor by 8 dB while it runs: Settings > GNSS and radio > "Pause GNSS for LoRa" (off by default) puts it in standby while the radio listens, except during a Track. The Status Bar shows `L` while the radio listens (bright for a moment on each packet), `SW` while sweeping, and `CAP` while capturing.

 ## Storage

@@ -161,7 +163,7 @@ Enter on a file opens it by type; Tab switches to the same file as a hex dump or

 - **Text** (`.txt`, `.log`, `.gmi`, `.csv`, and anything that looks like text): only the screen's worth is read from the card, so a file of any size opens at once. Logs open at the end. Up and Down move a line, Left and Right a page, `t` and `b` go to the top and the end, `e` edits it, whatever its size (see Notes).
 - **Pictures** (`.png`, `.jpg`, `.bmp`, `.gif`; issue #45): shrunk to fit the screen, or at their own size with Enter, the arrows then moving half a screen at a time; `i` gives the size in pixels. Dithered to the screen's 256 colours, decoded straight into the screen's buffer with no copy in memory, on the storage task so the keys keep working (12 megapixels of JPEG: 7 s). A GIF shows its first picture. A progressive JPEG or an interlaced PNG opens as hex, with the reason.
- **Captures** (`.pcap`): the packets as the LoRa Scanner lists them; Enter shows one with its Meshtastic header and bytes.
+- **Captures** (`.pcap`): the packets as the LoRa Scanner lists them; Enter shows one with its Meshtastic or MeshCore header and bytes.
 - **Tracks** (`.gpx`): the number of points, the start, the duration and the distance.
 - **Update Files** (`.ota`): the version, and whether the file would install: it's checked as an install checks it (signature and contents) without writing anything. Enter then installs it.
 - **Anything else:** a hex dump.
@@ -186,7 +188,7 @@ The terminal (`lib/term`, host-tested) understands what a shell, `less`, `top`,

 ## VPN

-A WireGuard tunnel (docs/milestones/N1.md), over whatever Wi-Fi the device is on: one peer, IPv4. Copy a client's `.conf` to the card as `/vpn/wg0.conf` and import it in Settings > VPN (or `vpn import`); the configuration, private key included, is then kept in the device and never shown, and Settings offers to delete the file. A switch brings the tunnel up until the next restart; "Start with Wi-Fi" does it every time. It waits for the clock, which WireGuard needs. `VPN` shows in the Status Bar, bright once the server has answered.
+A WireGuard tunnel (docs/milestones/N1.md), over whatever Wi-Fi the device is on: one peer, IPv4. Copy a client's `.conf` to the card as `/vpn/wg0.conf` and import it in Settings > Network > VPN (or `vpn import`); the configuration, private key included, is then kept in the device and never shown, and Settings offers to delete the file. A switch brings the tunnel up until the next restart; "Start with Wi-Fi" does it every time. It waits for the clock, which WireGuard needs. `VPN` shows in the Status Bar, bright once the server has answered.

 **What goes through it is one of two things:** everything, when AllowedIPs has `0.0.0.0/0` (and then nothing leaves the device while the server is silent), or the one subnet the device's tunnel address is in. A home network behind the server needs the first: lwIP routes by an interface's subnet or by default, nothing finer, and the import says how many ranges it can't reach. With the tunnel up the Debug Console and the Update Service answer on the tunnel address too, behind their token and their signature. It costs 63 KB of flash and under 2 KB of memory while up.

@@ -203,6 +205,7 @@ The Shell App (docs/milestones/S1.md) runs the commands below on the device's ow
 | `burst` | Publishes 5 Notifications at once |
 | `key up\|down\|left\|right\|select\|back\|home\|del\|tab\|space\|help\|shot`, or `key <char>` | Injects a key press (`help` is Fn+h: the keys of the screen that is showing; `shot` is Fn+p: a screenshot). `ctrl-`, `alt-` and `shift-` before it hold that key: `key ctrl-down`, `key alt-up`, `key ctrl-b` |
 | `sound on` / `sound off` | Toggles the Sound setting (beep + LED) |
+| `theme` / `theme <0-6> [light\|dark]` | Lists the colour themes, or picks one and its side |
 | `short` / `normal` | Screen timeouts 5 s / 10 s, or 30 s / 60 s |
 | `wifi add <ssid><TAB><password>` | Adds a Saved Network (so credentials stay out of the repo) |
 | `wifi ip <ssid> dhcp` / `wifi ip <ssid> <address>/<prefix> [gateway]` | A Saved Network's IP setting: Automatic, or Fixed. Add `try <seconds>` to go back to the previous setting unless `wifi ip keep` follows |
@@ -228,13 +231,13 @@ The Shell App (docs/milestones/S1.md) runs the commands below on the device's ow
 | `ls [folder]` / `du <path>` | Lists a folder of the SD card with sizes and dates, or counts the files and bytes under a path |
 | `screenshot [seconds]` | The screen as a PNG in `/screenshots` on the card, now or after a pause to get to the screen you want (240 x 135, about 33 KB). Over the Debug Console a bare `screenshot` sends the screen to the PC instead |
 | `cp [-f] <from> <to>` / `mv [-f] <from> <to>` / `rm [-r] [-f] <path>` / `mkdir <path>` / `cancel` | What the Storage App does, with its rules: copy (folders too), move or rename, delete (`rm -r` for a folder and what's in it, as Unix has it), new folder. `-f` replaces a file that's in the way; `*` and `?` in the last part of a path (`ls`, `du`, `rm`, `cp`, `mv`) run the command for each name matched, 64 at most; a tab separates paths that hold spaces; `cancel` stops a copy or a delete |
-| `install <path>` | Update from SD with that `.ota` file, as Settings → Firmware does |
+| `install <path>` | Update from SD with that `.ota` file, as Settings → System → Firmware does |
 | `update check` / `update list` / `update status` / `update install <tag>` | The project's releases on Gitea: look at the latest, list the last ten, say what's known, or download and install one |
 | `update pretend <version>` / `update probe <host>` / `update damage cut\|flip <n>` / `update daily` | Pretend to run another version (so a release counts as an update), see whether a server's certificate is accepted, cut or damage the next download, run the daily check again |
 | `lora probe` | Finds the radio: chip, oscillator, antenna switch, DIO1 interrupt, noise floor |
 | `lora status` | Radio settings, who's listening, packet and error counters, noise floor, task stack |
 | `lora rx on` / `lora rx off` | Listens and prints each packet on the console |
-| `lora preset <name>` / `lora custom <MHz> <BW kHz> <SF> <CR> <sync hex> [preamble]` | Receive settings: a Meshtastic preset, or anything else (`lora custom 868.1 125 7 5 34 8` for LoRaWAN) |
+| `lora preset <name>` / `lora custom <MHz> <BW kHz> <SF> <CR> <sync hex> [preamble]` | Receive settings: a Meshtastic preset or `MeshCore`, or anything else (`lora custom 868.1 125 7 5 34 8` for LoRaWAN) |
 | `lora capture start` / `lora capture stop` | A LoRa Capture, as `c` in the App |
 | `lora sweep on [from MHz] [to MHz] [step kHz]` / `lora sweep off` / `lora sweep dump` | Sweep a band (863 870 100 by default), with a summary every 2 s (floor, strongest, peaks), or print the latest pass |
 | `gnss quiet on` / `gnss quiet off` | The "Pause GNSS for LoRa" setting |
@@ -263,7 +266,7 @@ The Shell App (docs/milestones/S1.md) runs the commands below on the device's ow

 ### The Debug Console

-Every firmware has the Debug Console (ADR 0010): the serial console over Wi-Fi, on TCP 2323. It is **off** until you switch it on in **Settings → Debug Console**, which also makes its token and shows it. With the device on USB, `scripts/flash.sh --debug` flashes it, switches the console on and gives it the token in `~/.config/roro9stack/debug-token`, so nothing has to be typed. Then, with `RORO_OTA_HOST` set to the device's IP:
+Every firmware has the Debug Console (ADR 0010): the serial console over Wi-Fi, on TCP 2323. It is **off** until you switch it on in **Settings → System → Debug Console**, which also makes its token and shows it. With the device on USB, `scripts/flash.sh --debug` flashes it, switches the console on and gives it the token in `~/.config/roro9stack/debug-token`, so nothing has to be typed. Then, with `RORO_OTA_HOST` set to the device's IP:

 ```sh
 scripts/rdbg.py                 # interactive: the console backlog, live lines, and commands
@@ -36,7 +36,7 @@
 | Q92 | A **Radio Service** owns the SX1262: driver, bus lock, IRQ task. The LoRa Scanner uses it in M3; the Mesh Service sits on top of it in M4. |
 | Q93 | Every radio transfer takes the shared bus lock (`SPI.beginTransaction`, as the card does). DIO1's interrupt only wakes the task; no SPI in the ISR. **Done when** a Gemini page streams to the card while the Sniffer receives, with no lost packets and no card errors (`lora status` counters). |
 | Q94 | **Receive only:** the Radio Service has no transmit function in M3. It doesn't exist, rather than being unused. |
-| Q95 | Sniffer defaults: **EU868 LongFast**, 869.525 MHz, BW 250 kHz, SF 11, CR 4/5, sync word 0x2B, preamble 16 (Q19). The other Meshtastic presets are offered, plus custom settings. |
+| Q95 | Sniffer defaults: **EU868 LongFast**, 869.525 MHz, BW 250 kHz, SF 11, CR 4/5, sync word 0x2B, preamble 16 (Q19). The other Meshtastic presets are offered, plus custom settings. *Later, the default became is the MeshCore preset (869.618 MHz, BW 62.5 kHz, SF 8, CR 4/8, sync word 0x12): it is what is heard here.* |
 | Q96 | The Sniffer lists packets (time, RSSI, SNR, frequency error, length; hex dump on Enter) **and decodes the Meshtastic header**: the first 16 bytes are never encrypted (destination, sender, packet ID, hop limit and hop start, channel hash, next hop, relay node). Host-tested. Payload decryption is M4. |
 | Q97 | A Sniffer **Capture** is pcap with **LoRaTap** headers (link type 270), for Wireshark. Started by hand, Status Bar mark, its own Clean-up category, the 90% rule. |
 | Q98 | **Sweep** steps across the Region's band (863–870 MHz) in 100 kHz steps by default, reading instant RSSI: bars with peak hold, and a waterfall, Wi-Fi Tools style. Optionally CAD on the preset's frequency to tell LoRa traffic from noise. |
@@ -1,6 +1,6 @@
 # U1 — Look and feel

-**Status:** in progress. Shipped: the help key (issue #69) and the key tables the website shares with it (#72), both in **v0.13.0**; the screenshot key (#83, **v0.17.0**). Not started: screen recording (#17), a Launcher of tiles (#9), themes (#10).
+**Status:** in progress. Shipped: the help key (issue #69) and the key tables the website shares with it (#72), both in **v0.13.0**; the screenshot key (#83, **v0.17.0**). The Launcher as a grid of icons (#9) and themes (#10) are done, not released yet. Not started: screen recording (#17).

 **Goal:** the interface is consistent and uncrowded: the same thing is done the same way on every screen, and the 135 pixels of height go to content.

@@ -59,3 +59,79 @@ A screenshot could only be taken by typing `screenshot` in the Shell, where "now
 **Checked on the device** (2026-10-07, with `key shot`): in the Launcher, a 33,383-byte PNG appears in `/screenshots` and is the Launcher; with the help panel open, the picture is of the panel (which now lists Fn p) and the panel stays open; on Settings > Debug Console, no file is written; back on the Settings list, one is. The test pictures were removed.

 **Not checked:** the real Fn+p on the keyboard (the mapper is host-tested); the two Toasts that refuse, which weren't looked at (one of them is on the page that mustn't be photographed); a device with no card.
+
+## The Launcher as a grid (issue #9)
+
+The Launcher was a list of names. It is now a grid of icons.
+
+| Question in the issue | Decided |
+|---|---|
+| Layout | **4 × 3** tiles of 60 × 36, so the 11 Apps are on one page. Only the selected App's name is written, on a line under the grid: a name under every tile doesn't fit 60 pixels ("LoRa Scanner"). More than 12 Apps: the rows scroll |
+| Icons | **The website's own**: its nine 16 × 16 pictures (`site/static/img/icons-dark.svg`), doubled to 32 × 32, and two drawn the same way for SSH and the Shell. 1 bit a pixel (128 bytes each, in flash). The pictures are PNGs in `assets/icons/`, named after the App's id; `scripts/make_icons.py` writes `src/ui/icons.cpp` from them and CI checks the two match |
+| Colours | **The website's**: cyan (#00dbff) on black, and the selected tile slate (#494955, the Status Bar's) on a cyan fill with notched corners. Both are RGB332 colours. The name under the grid is white |
+| Live state | **A dot** on the tile, from `App::badge()`: IRC (unread messages), GNSS (a Track recording), the LoRa Scanner (a Capture running), SSH (a session open). The Launcher asks every App on each pass and redraws when an answer changes |
+| Order | As registered, as before |
+| Shortcuts | None for now |
+| The list | Kept: **Settings > Launcher**, Grid or List. Both keep the same selection |
+
+- `GridModel` (`lib/ui`) holds the selection and the scrolling, host-tested: left and right go through every item and wrap; up and down stay in the column, and land on the last item where the last row is short.
+- An App registered without an icon shows its first letter in a frame.
+- No animation: not asked for, and not measured.
+
+## The website's colours, on every screen
+
+Every screen takes its colours from `src/ui/theme.h`, so the palette changed there, to the website's (`site/static/css/site.css`, dark side). Each is a colour the RGB332 frame buffer holds exactly.
+
+| | Was | Is |
+|---|---|---|
+| Accent | teal-blue | cyan `#00dbff` |
+| A selected row, a dialog's chosen button | darker teal, white text | cyan, dark blue text (`#000055`) |
+| Status Bar | `#202020`, which the frame buffer showed as a dull olive | slate `#494955`; what is idle on it in light grey `#b6b6aa` |
+| Muted text | grey, as the frame buffer rounded it | the same grey, exact: `#9292aa` |
+| Warning | orange | the website's orange `#ff9200` |
+| Someone wrote (unread count, a mention, a message Toast) | green | pink `#ff92ff` |
+| Good (a Fix, the quietest channel, a live task) | the same green | green `#49db55`, the one colour that isn't the website's: it has no green |
+| Text on a Toast | black | dark blue |
+
+Looked at on the device, by screenshot: the Launcher, IRC, Wi-Fi Tools (menu, channel occupancy), GNSS (position, sky), Gemini, the LoRa Scanner (Sniffer, Sweep, presets), Storage, Notes, SSH, the Shell, System, Settings and the help panel. Not looked at: dialogs, a warning or a message Toast, the SSH terminal (which keeps its own 16 ANSI colours), the Setup screens.
+
+## Themes (issue #10)
+
+Seven themes, each with a dark and a light side, chosen in **Settings > Theme** and **Settings > Light or dark**: roro9stack (the website's, the default), Catppuccin (Mocha and Latte), Dracula (and Alucard), Nord, ANSI terminal, Gruvbox, Solarized.
+
+| Question in the issue | Decided |
+|---|---|
+| Which themes | The seven above. Not the high-contrast and phosphor ones the issue suggested: ANSI terminal dark (grey and green on black) and light (black on white) come close |
+| Fonts and spacing too | No: colours only |
+| Themes from the SD card | No: built in |
+| A preview while picking | The Setting applies at once, so the Settings screen is the preview |
+| Constellation colours | From the theme (its accent, its "good", and three roles named red, yellow and violet), so they read on every background |
+| Light by day, dark by night | No |
+
+- **A palette is 14 roles** (`lib/ui/src/palette.h`): background, text, muted, faint, the bar and its idle marks, accent, what is drawn on an accent, warning, message, good, and red, yellow and violet.
+- **`theme::kText` and the others are now references** into the palette in use (`src/ui/theme.h`), so no App changed: they still read as constants. The main loop applies the palette when either Setting changes, and draws everything again.
+- **RGB332.** Every colour in the table is one the frame buffer holds exactly. The themes' own colours were rounded to those; where two roles fell together or lost contrast, one was picked by hand (Nord's accent and muted text, Gruvbox's greys, Solarized's surfaces). `test_palette` checks that every colour is exact, and 18 contrast ratios for each of the 14 palettes (text on background at 4.5 or more, the rest at 2 to 3).
+- **What it costs in fidelity:** blue has four levels, so Dracula and Nord share a dark background (#242455), which was Catppuccin's too: Catppuccin dark is on black instead (its "crust"), with that blue for its bar and its brighter accents (peach, pink, green, sky), to tell it from Dracula; Solarized light's cream becomes white, and Gruvbox's dark brown becomes a dark olive (#242400).
+- `theme [0-6] [light|dark]` on the consoles lists them or picks one.
+
+**Looked at on the device**, by screenshot: the Launcher in all 14; and in Gruvbox light, Settings, GNSS (position and sky), the Sweep, Storage, the help panel, Gemini and Wi-Fi Tools' channel occupancy. Nothing was drawn for black only.
+
+**Kept as they are:** the SSH terminal's 16 ANSI colours and its black background, the Sweep's waterfall scale, pictures, and the screen shown while the device powers off.
+
+**Not looked at:** the other 12 palettes beyond the Launcher, dialogs and Toasts in any theme but the default, the Setup screens. In Gruvbox light, the Sky view's GPS, GLONASS and BeiDou colours are three close shades of brown and red.
+
+## Settings in groups
+
+Settings had grown to 21 rows in one list. It now opens on five groups, each a short list of its own:
+
+| Group | Rows |
+|---|---|
+| This device | Long name, Short name, Region, Timezone, Sound & LED |
+| Display | Brightness, Dim after, Screen off after, Theme, Light or dark, Launcher |
+| GNSS and radio | GNSS, Pause GNSS for LoRa, Coordinates, Probe MACs |
+| Network | Wi-Fi, VPN |
+| System | Check for updates, Firmware, Debug Console, About |
+
+- Enter opens a group, Back returns to the groups with the selection on the one just left, and Back from the groups leaves Settings. An open group has its name over its rows.
+- `SettingsMenu` (`lib/apps_model`) holds the groups and which one is open; every index is into what is listed. Host-tested: every setting is in exactly one group, and no group has more rows than fit under its name.
+- The guide, the how-tos, the README, the scripts' messages and the firmware's own (the Toast for a new release, the GNSS App's hint) name the new paths: "Settings > System > Firmware". The milestone notes and the devlog keep the paths of their day.
@@ -1,6 +1,7 @@
 #include "settings_menu.h"

 #include "choices.h"
+#include "palette.h"

 namespace roro {

@@ -15,18 +16,50 @@ struct RowDef {
    const char* label;
 };

-const RowDef kRows[] = {
-    {Row::LongName, Kind::Text, "Long name"},   {Row::ShortName, Kind::Text, "Short name"},
-    {Row::Region, Kind::Choice, "Region"},      {Row::Timezone, Kind::Choice, "Timezone"},
-    {Row::Brightness, Kind::Slider, "Brightness"}, {Row::DimTimeout, Kind::Choice, "Dim after"},
-    {Row::OffTimeout, Kind::Choice, "Screen off after"}, {Row::Sound, Kind::Toggle, "Sound & LED"},
-    {Row::Gnss, Kind::Toggle, "GNSS"}, {Row::GnssQuiet, Kind::Toggle, "Pause GNSS for LoRa"},
-    {Row::Coordinates, Kind::Toggle, "Coordinates"},
-    {Row::ProbeMacs, Kind::Toggle, "Probe MACs"}, {Row::Wifi, Kind::Page, "Wi-Fi"},
-    {Row::CheckUpdates, Kind::Toggle, "Check for updates"}, {Row::Firmware, Kind::Page, "Firmware"},
-    {Row::Vpn, Kind::Page, "VPN"},
-    {Row::DebugConsole, Kind::Page, "Debug Console"}, {Row::About, Kind::Page, "About"},
+const RowDef kGroups[] = {
+    {Row::GroupDevice, Kind::Group, "This device"},  {Row::GroupDisplay, Kind::Group, "Display"},
+    {Row::GroupPosition, Kind::Group, "GNSS and radio"}, {Row::GroupNetwork, Kind::Group, "Network"},
+    {Row::GroupSystem, Kind::Group, "System"},
 };
+constexpr int kGroupCount = sizeof(kGroups) / sizeof(kGroups[0]);
+
+struct Member {
+    int group;  // an index into kGroups
+    RowDef def;
+};
+
+// In the order each group lists them.
+const Member kRows[] = {
+    {0, {Row::LongName, Kind::Text, "Long name"}},
+    {0, {Row::ShortName, Kind::Text, "Short name"}},
+    {0, {Row::Region, Kind::Choice, "Region"}},
+    {0, {Row::Timezone, Kind::Choice, "Timezone"}},
+    {0, {Row::Sound, Kind::Toggle, "Sound & LED"}},
+    {1, {Row::Brightness, Kind::Slider, "Brightness"}},
+    {1, {Row::DimTimeout, Kind::Choice, "Dim after"}},
+    {1, {Row::OffTimeout, Kind::Choice, "Screen off after"}},
+    {1, {Row::Theme, Kind::Choice, "Theme"}},
+    {1, {Row::ThemeLight, Kind::Toggle, "Light or dark"}},
+    {1, {Row::Launcher, Kind::Toggle, "Launcher"}},
+    {2, {Row::Gnss, Kind::Toggle, "GNSS"}},
+    {2, {Row::GnssQuiet, Kind::Toggle, "Pause GNSS for LoRa"}},
+    {2, {Row::Coordinates, Kind::Toggle, "Coordinates"}},
+    {2, {Row::ProbeMacs, Kind::Toggle, "Probe MACs"}},
+    {3, {Row::Wifi, Kind::Page, "Wi-Fi"}},
+    {3, {Row::Vpn, Kind::Page, "VPN"}},
+    {4, {Row::CheckUpdates, Kind::Toggle, "Check for updates"}},
+    {4, {Row::Firmware, Kind::Page, "Firmware"}},
+    {4, {Row::DebugConsole, Kind::Page, "Debug Console"}},
+    {4, {Row::About, Kind::Page, "About"}},
+};
+
+// Row i of what is listed: a group, or the i-th row of the open one.
+const RowDef& at(int group, int i) {
+    if (group < 0) return kGroups[i < 0 || i >= kGroupCount ? 0 : i];
+    for (const Member& m : kRows)
+        if (m.group == group && i-- == 0) return m.def;
+    return kGroups[group];  // out of range: harmless
+}

 const int kDimSeconds[] = {10, 15, 30, 60, 120, 300};
 const int kOffSeconds[] = {30, 60, 120, 300, 600, 1800};
@@ -63,10 +96,42 @@ int indexOf(const int (&table)[N], int value) {

 }  // namespace

-int SettingsMenu::count() const { return sizeof(kRows) / sizeof(kRows[0]); }
-SettingsMenu::Row SettingsMenu::row(int i) const { return kRows[i].row; }
-SettingsMenu::Kind SettingsMenu::kind(int i) const { return kRows[i].kind; }
-std::string SettingsMenu::label(int i) const { return kRows[i].label; }
+bool SettingsMenu::open(int i) {
+    if (group_ >= 0 || i < 0 || i >= kGroupCount) return false;
+    group_ = lastGroup_ = i;
+    return true;
+}
+
+bool SettingsMenu::close() {
+    if (group_ < 0) return false;
+    group_ = -1;
+    return true;
+}
+
+std::string SettingsMenu::title() const { return group_ < 0 ? "" : kGroups[group_].label; }
+
+bool SettingsMenu::reveal(Row r, int& index) {
+    int seen[kGroupCount] = {};
+    for (const Member& m : kRows) {
+        if (m.def.row == r) {
+            group_ = lastGroup_ = m.group;
+            index = seen[m.group];
+            return true;
+        }
+        seen[m.group]++;
+    }
+    return false;
+}
+
+int SettingsMenu::count() const {
+    if (group_ < 0) return kGroupCount;
+    int n = 0;
+    for (const Member& m : kRows) n += m.group == group_;
+    return n;
+}
+SettingsMenu::Row SettingsMenu::row(int i) const { return at(group_, i).row; }
+SettingsMenu::Kind SettingsMenu::kind(int i) const { return at(group_, i).kind; }
+std::string SettingsMenu::label(int i) const { return at(group_, i).label; }

 std::string SettingsMenu::value(int i) const {
    switch (row(i)) {
@@ -80,6 +145,9 @@ std::string SettingsMenu::value(int i) const {
        case Row::Brightness: return std::to_string(settings_.getInt(Setting::Brightness)) + "%";
        case Row::DimTimeout: return formatSeconds(settings_.getInt(Setting::DimTimeoutS));
        case Row::OffTimeout: return formatSeconds(settings_.getInt(Setting::OffTimeoutS));
+        case Row::Launcher: return settings_.getBool(Setting::LauncherList) ? "List" : "Grid";
+        case Row::Theme: return ui::themeName(settings_.getInt(Setting::Theme));
+        case Row::ThemeLight: return settings_.getBool(Setting::ThemeLight) ? "Light" : "Dark";
        case Row::Sound: return settings_.getBool(Setting::Sound) ? "On" : "Off";
        case Row::Gnss: return settings_.getBool(Setting::GnssEnabled) ? "On" : "Off";
        case Row::GnssQuiet: return settings_.getBool(Setting::GnssQuietForLora) ? "On" : "Off";
@@ -97,6 +165,11 @@ std::vector<std::string> SettingsMenu::choices(int i) const {
    switch (row(i)) {
        case Row::Region: return labels(kRegions);
        case Row::Timezone: return labels(kTimezones);
+        case Row::Theme: {
+            std::vector<std::string> names;
+            for (int t = 0; t < ui::kThemeCount; ++t) names.push_back(ui::themeName(t));
+            return names;
+        }
        case Row::DimTimeout: return durations(kDimSeconds);
        case Row::OffTimeout: return durations(kOffSeconds);
        default: return {};
@@ -107,6 +180,7 @@ int SettingsMenu::currentChoice(int i) const {
    switch (row(i)) {
        case Row::Region: return indexOf(kRegions, settings_.getString(Setting::Region));
        case Row::Timezone: return indexOf(kTimezones, settings_.getString(Setting::Timezone));
+        case Row::Theme: return settings_.getInt(Setting::Theme);
        case Row::DimTimeout: return indexOf(kDimSeconds, settings_.getInt(Setting::DimTimeoutS));
        case Row::OffTimeout: return indexOf(kOffSeconds, settings_.getInt(Setting::OffTimeoutS));
        default: return -1;
@@ -120,6 +194,7 @@ std::string SettingsMenu::choose(int i, int c) {
            settings_.setBool(Setting::RegionConfirmed, true);
            return "";
        case Row::Timezone: settings_.setString(Setting::Timezone, kTimezones[c].value); return "";
+        case Row::Theme: settings_.setInt(Setting::Theme, c); return "";
        case Row::DimTimeout:
            return settings_.setInt(Setting::DimTimeoutS, kDimSeconds[c]) ? "" : "Dimming must happen before screen off";
        case Row::OffTimeout:
@@ -129,6 +204,8 @@ std::string SettingsMenu::choose(int i, int c) {
 }

 void SettingsMenu::toggle(int i) {
+    if (row(i) == Row::ThemeLight) settings_.setBool(Setting::ThemeLight, !settings_.getBool(Setting::ThemeLight));
+    if (row(i) == Row::Launcher) settings_.setBool(Setting::LauncherList, !settings_.getBool(Setting::LauncherList));
    if (row(i) == Row::Sound) settings_.setBool(Setting::Sound, !settings_.getBool(Setting::Sound));
    if (row(i) == Row::Gnss) settings_.setBool(Setting::GnssEnabled, !settings_.getBool(Setting::GnssEnabled));
    if (row(i) == Row::GnssQuiet) settings_.setBool(Setting::GnssQuietForLora, !settings_.getBool(Setting::GnssQuietForLora));
@@ -7,15 +7,26 @@

 namespace roro {

-// What the Settings App lists: one row per user-facing setting (plus sub-pages), with readable
-// values, choice lists and validation messages. Rendering and navigation live in the App.
+// What the Settings App lists: the groups first, then, with one open, a row per user-facing setting
+// of that group (plus sub-pages), with readable values, choice lists and validation messages.
+// Rendering and navigation live in the App. Every index is into what is listed now.
 class SettingsMenu {
   public:
-    enum class Row { LongName, ShortName, Region, Timezone, Brightness, DimTimeout, OffTimeout, Sound, Gnss, GnssQuiet, Coordinates, ProbeMacs, Wifi, CheckUpdates, Firmware, Vpn, DebugConsole, About };
-    enum class Kind { Text, Choice, Toggle, Slider, Page };
+    enum class Row { LongName, ShortName, Region, Timezone, Brightness, DimTimeout, OffTimeout, Launcher, Theme, ThemeLight, Sound, Gnss, GnssQuiet, Coordinates, ProbeMacs, Wifi, CheckUpdates, Firmware, Vpn, DebugConsole, About,
+                     GroupDevice, GroupDisplay, GroupPosition, GroupNetwork, GroupSystem };
+    enum class Kind { Text, Choice, Toggle, Slider, Page, Group };

    explicit SettingsMenu(Settings& settings) : settings_(settings) {}

+    // The groups are listed until one is opened; close() lists them again.
+    bool open(int i);                // false when row i isn't a group
+    bool close();                    // false when the groups were listed already
+    bool inGroup() const { return group_ >= 0; }
+    std::string title() const;       // the open group's name, or ""
+    int groupIndex() const { return lastGroup_; }  // where the group last opened is among the groups
+    // Opens the group a row is in, and says where the row is in it. False for a row there isn't.
+    bool reveal(Row r, int& index);
+
    int count() const;
    Row row(int i) const;
    Kind kind(int i) const;
@@ -37,6 +48,7 @@ class SettingsMenu {

   private:
    Settings& settings_;
+    int group_ = -1, lastGroup_ = 0;
 };

 }  // namespace roro
@@ -50,6 +50,10 @@ class App {
    virtual bool retainsContent() const { return false; }
    virtual void contentLost() {}

+    // True while something goes on in the App that is worth a look, whether it is in front or
+    // not (unread messages, a recording running): the Launcher marks its tile (issue #9).
+    virtual bool badge() const { return false; }
+
    void requestRedraw() { redraw_ = true; }

    bool consumeRedraw() {
@@ -48,7 +48,7 @@ inline constexpr KeyHelp kText[] = {

 // launcher: The Launcher
 inline constexpr KeyHelp kLauncher[] = {
-    {"; .", "up, down"},
+    {"; . , /", "move"},
    {"Enter", "open the App"},
 };

@@ -188,7 +188,7 @@ inline constexpr KeyHelp kGeminiAnswer[] = {
 inline constexpr KeyHelp kLora[] = {
    {"; .", "up, down"},
    {"Enter", "the packet's details"},
-    {"p", "pick a Meshtastic preset"},
+    {"p", "pick a preset"},
    {"c", "start a Capture, or stop it"},
    {"Tab", "the Sweep"},
 };
@@ -414,8 +414,9 @@ inline constexpr KeyHelp kSystemSystem[] = {
 // settings: Settings
 inline constexpr KeyHelp kSettings[] = {
    {"; .", "up, down"},
-    {"Enter", "edit, or open the page"},
+    {"Enter", "open the group or the page, or edit"},
    {", /", "change a switch or a slider"},
+    {"`", "back to the groups"},
 };

 // settings-choice: Settings, a choice
@@ -1,5 +1,7 @@
 #pragma once

+#include <cstdint>
+
 #include <string>
 #include <vector>

@@ -12,6 +14,7 @@ struct AppInfo {
    const char* title;
    bool hidden;  // not listed in the Launcher, but can still be opened
    App* app;
+    const uint8_t* icon = nullptr;  // the Launcher's picture of it (ui/icons.h); none: its first letter
 };

 // Owns which App is in the foreground and routes keys. Home always returns to the Launcher;
@@ -6,7 +6,7 @@ namespace roro::gnss {

 // "50.86920° N": five decimals, about a metre.
 std::string formatDecimal(double degrees, bool latitude);
-// "50° 52' 09.1\" N" (Settings → Coordinates, Q64).
+// "50° 52' 09.1\" N" (Settings → GNSS and radio → Coordinates, Q64).
 std::string formatDms(double degrees, bool latitude);
 // The 6-character Maidenhead locator ("JO20ef"), as radio amateurs give their square.
 std::string maidenhead(double latitude, double longitude);
@@ -2,7 +2,10 @@

 #include <cmath>
 #include <cstdio>
+#include <ctime>

+#include "meshcore_channel.h"
+#include "meshcore_packet.h"
 #include "meshtastic_header.h"
 #include "meshtastic_presets.h"

@@ -10,13 +13,137 @@ namespace roro::lora {

 using namespace meshtastic;

+namespace {
+std::string hex(const uint8_t* p, size_t n) {
+    std::string out;
+    char s[4];
+    for (size_t i = 0; i < n; ++i) {
+        std::snprintf(s, sizeof s, "%02x", p[i]);
+        out += s;
+    }
+    return out;
+}
+
+// Onto lines of `cols` characters at most, broken at spaces where there are some.
+void wrapInto(std::vector<std::string>& lines, std::string text, size_t cols) {
+    while (text.size() > cols) {
+        size_t cut = text.rfind(' ', cols);
+        if (cut == std::string::npos || cut == 0) cut = cols;
+        lines.push_back(text.substr(0, cut));
+        text.erase(0, text[cut] == ' ' ? cut + 1 : cut);
+    }
+    if (!text.empty()) lines.push_back(text);
+}
+
+// `room` characters at most: a node's name or a message is cut to fit.
+std::string meshcoreRow(const meshcore::Packet& m, size_t room) {
+    std::string out = meshcore::payloadShort(m.type);
+    std::string hops = m.hops ? " " + std::to_string(m.hops) + "h" : "";
+    meshcore::Advert a;
+    meshcore::Discover d;
+    meshcore::ChannelText t;
+    if (meshcore::parseDiscover(m, d)) {
+        out = d.response ? "here " + hex(d.id, 2) : "who's there?";
+    } else if (meshcore::readChannelText(m, t)) {
+        out = (t.sender.empty() ? "" : t.sender + ": ") + t.text;
+        out = out.substr(0, room > hops.size() ? room - hops.size() : 0);
+        while (!out.empty() && out.back() == ' ') out.pop_back();
+        return out + hops;
+    } else if (meshcore::parseAdvert(m, a)) {
+        size_t used = out.size() + 1 + hops.size();
+        out += " " + (a.name.empty() ? hex(a.key, 2) : a.name.substr(0, room > used ? room - used : 0));
+    } else if (m.addressed() && m.payloadLen >= 2)
+        out += " " + hex(m.payload + 1, 1) + ">" + hex(m.payload, 1);
+    else if (m.group() && m.payloadLen >= 1)
+        out += " #" + hex(m.payload, 1);
+    else if (m.type == meshcore::Payload::AnonRequest && m.payloadLen >= 1)
+        out += " >" + hex(m.payload, 1);
+    return out + hops;
+}
+
+std::vector<std::string> meshcoreLines(const uint8_t* data, size_t len) {
+    meshcore::Packet m;
+    if (!meshcore::parsePacket(data, len, m)) return {};
+    char s[64];
+    std::vector<std::string> lines;
+    lines.push_back("MeshCore " + std::string(meshcore::payloadName(m.type)) + ", " + meshcore::routeName(m.route));
+    if (m.hasTransport) {
+        std::snprintf(s, sizeof s, "Region code %04x", m.transport[0]);
+        lines.push_back(s);
+    }
+    // A flood gathers who repeated it; a direct packet carries who is still to repeat it.
+    if (m.hops) {
+        std::string path = std::string(m.flood() ? "Through" : "Route");
+        for (uint8_t i = 0; i < m.hops; ++i) {
+            std::string hop = " " + hex(m.path + i * m.hashSize, m.hashSize);
+            if (path.size() + hop.size() > 36) {  // onto another line
+                lines.push_back(path);
+                path = " ";
+            }
+            path += hop;
+        }
+        lines.push_back(path);
+    } else {
+        lines.push_back(m.flood() ? "Heard first hand: no repeater yet" : "No route in it: to a neighbour");
+    }
+    meshcore::Advert a;
+    meshcore::Discover d;
+    if (meshcore::parseDiscover(m, d) && d.response) {
+        lines.push_back(std::string(meshcore::kindName(d.kind)) + " answering a search");
+        lines.push_back("Key " + hex(d.id, 8) + "...");
+        std::snprintf(s, sizeof s, "It heard the search at %.1f dB SNR", d.snr);
+        lines.push_back(s);
+    } else if (meshcore::parseDiscover(m, d)) {
+        std::string who;
+        for (int kind = 1; kind <= 4; ++kind)
+            if (d.kinds & (1 << kind)) who += std::string(who.empty() ? "" : ", ") + meshcore::kindName(static_cast<uint8_t>(kind));
+        lines.push_back("A search for nodes nearby");
+        lines.push_back("Wanted: " + (who.empty() ? std::string("any") : who));
+    } else if (meshcore::parseAdvert(m, a)) {
+        lines.push_back(std::string(meshcore::kindName(a.kind)) + (a.name.empty() ? "" : " " + a.name));
+        lines.push_back("Key " + hex(a.key, 8) + "...");
+        if (a.hasLocation) {
+            std::snprintf(s, sizeof s, "At %.5f, %.5f", a.latE6 / 1e6, a.lonE6 / 1e6);
+            lines.push_back(s);
+        }
+    } else if (m.addressed() && m.payloadLen >= 4) {
+        std::snprintf(s, sizeof s, "From ..%02x to ..%02x, %u B encrypted", m.payload[1], m.payload[0], static_cast<unsigned>(m.payloadLen - 4));
+        lines.push_back(s);
+    } else if (meshcore::ChannelText t; meshcore::readChannelText(m, t)) {
+        lines.push_back(std::string("On the ") + t.channel + " channel" + (t.sender.empty() ? "" : ", from " + t.sender));
+        std::time_t sent = t.timestamp;
+        std::tm tm{};
+        gmtime_r(&sent, &tm);
+        std::strftime(s, sizeof s, "Sent %Y-%m-%d %H:%M:%S UTC", &tm);
+        lines.push_back(s);
+        wrapInto(lines, t.text, 38);
+    } else if (m.group() && m.payloadLen >= 3) {
+        std::snprintf(s, sizeof s, "Channel 0x%02x%s, %u B encrypted", m.payload[0], m.payload[0] == meshcore::kPublicChannelHash ? " (public?)" : "",
+                      static_cast<unsigned>(m.payloadLen - 3));
+        lines.push_back(s);
+    } else if (m.type == meshcore::Payload::AnonRequest && m.payloadLen >= 35) {
+        std::snprintf(s, sizeof s, "To ..%02x from key %s...", m.payload[0], hex(m.payload + 1, 4).c_str());
+        lines.push_back(s);
+    } else if (m.type == meshcore::Payload::Ack && m.payloadLen >= 4) {
+        lines.push_back("Acknowledges " + hex(m.payload, 4));
+    }
+    return lines;
+}
+}  // namespace
+
+Protocol protocolOf(uint8_t syncWord) {
+    return syncWord == meshtastic::kSyncWord ? Protocol::Meshtastic : syncWord == meshcore::kSyncWord ? Protocol::MeshCore : Protocol::None;
+}
+
 std::string row(const PacketSummary& p, const std::string& time) {
    char s[64];
    int n = std::snprintf(s, sizeof s, "%s %ld %.1f ", time.c_str(), std::lround(p.rssi), p.snr);
    std::string out(s, n);
    PacketHeader h;
    if (!p.crcOk) return out + "bad CRC, " + std::to_string(p.len) + " B";
-    if (!p.meshtastic || !parseHeader(p.data, p.len, h)) return out + std::to_string(p.len) + " B";
+    meshcore::Packet m;
+    if (p.protocol == Protocol::MeshCore && meshcore::parsePacket(p.data, p.len, m)) return out + meshcoreRow(m, out.size() < 38 ? 38 - out.size() : 0);
+    if (p.protocol != Protocol::Meshtastic || !parseHeader(p.data, p.len, h)) return out + std::to_string(p.len) + " B";
    auto shortId = [](uint32_t node) {
        if (node == kBroadcast) return std::string("all");
        char id[8];
@@ -48,7 +175,9 @@ std::vector<std::string> hexDump(const uint8_t* data, size_t len) {
    return lines;
 }

-std::vector<std::string> headerLines(const uint8_t* data, size_t len) {
+std::vector<std::string> headerLines(const uint8_t* data, size_t len, Protocol protocol) {
+    if (protocol == Protocol::MeshCore) return meshcoreLines(data, len);
+    if (protocol != Protocol::Meshtastic) return {};
    PacketHeader h;
    if (!parseHeader(data, len, h)) return {};
    char s[64];
@@ -7,23 +7,30 @@

 namespace roro::lora {

+// Whose packets the radio's settings were for, by their sync word: whose clear header to read.
+enum class Protocol : uint8_t { None, Meshtastic, MeshCore };
+Protocol protocolOf(uint8_t syncWord);
+
 // What the LoRa Scanner shows of one packet (M3, Q96).
 struct PacketSummary {
    const uint8_t* data;
    size_t len;
    float rssi, snr;
    bool crcOk;
-    bool meshtastic;  // received on Meshtastic settings (sync word 0x2B): read its clear header
+    Protocol protocol;  // what the settings it was received on were for
 };

-// One list row, at most about 36 characters: "21:45:07 -97 6.2 5678>all 1/3". Nodes by their default
-// short name (the last 4 hex digits); headerLines() has the full numbers.
+// One list row, at most about 36 characters: "21:45:07 -97 6.2 5678>all 1/3". Meshtastic nodes by their
+// default short name (the last 4 hex digits); headerLines() has the full numbers. MeshCore: what
+// it is, then who ("adv Brussels-R1", "txt a3>7f", "chan #11", "who's there?", "here 18a6") and the hops in its path ("2h");
+// a message on the public channel is read: "Alice: hello fro 2h".
 std::string row(const PacketSummary& p, const std::string& time);

 // Eight bytes a line, with the printable ones: "0000 ff ff ff ff 78 56 34 12 ....xV4.".
 std::vector<std::string> hexDump(const uint8_t* data, size_t len);

-// The Meshtastic header, one field a line; empty when the packet is too short to have one.
-std::vector<std::string> headerLines(const uint8_t* data, size_t len);
+// What is in clear, one field a line: the Meshtastic header, or MeshCore's header, path and (for an
+// advert) who the node says it is, and a message on its public channel. Empty when the packet can't be read as that.
+std::vector<std::string> headerLines(const uint8_t* data, size_t len, Protocol protocol = Protocol::Meshtastic);

 }  // namespace roro::lora
@@ -0,0 +1,34 @@
+#include "scan_presets.h"
+
+#include <cctype>
+
+#include "meshcore_packet.h"
+#include "meshtastic_presets.h"
+
+namespace roro::lora {
+
+size_t scanPresetCount() { return meshtastic::kEu868PresetCount + 1; }
+
+ScanPreset scanPreset(size_t i) {
+    if (i < meshtastic::kEu868PresetCount) {
+        const meshtastic::Preset& p = meshtastic::kEu868Presets[i];
+        return {p.name, meshtastic::eu868FrequencyHz(p), p.bwKHz, p.sf, p.cr, meshtastic::kSyncWord, meshtastic::kPreambleLength, Protocol::Meshtastic};
+    }
+    return {meshcore::kPresetName, meshcore::kEuNarrowHz, meshcore::kEuNarrowBwKHz, meshcore::kEuNarrowSf, meshcore::kEuNarrowCr,
+            meshcore::kSyncWord, meshcore::kPreambleLength, Protocol::MeshCore};
+}
+
+bool findScanPreset(const char* name, ScanPreset& out) {
+    for (size_t i = 0; i < scanPresetCount(); ++i) {
+        ScanPreset p = scanPreset(i);
+        const char *a = p.name, *b = name;
+        while (*a && *b && std::tolower(static_cast<unsigned char>(*a)) == std::tolower(static_cast<unsigned char>(*b))) ++a, ++b;
+        if (!*a && !*b) {
+            out = p;
+            return true;
+        }
+    }
+    return false;
+}
+
+}  // namespace roro::lora
@@ -0,0 +1,28 @@
+#pragma once
+
+#include <cstddef>
+#include <cstdint>
+
+#include "packet_view.h"
+
+namespace roro::lora {
+
+// What the LoRa Scanner can be told to listen to by name: the Meshtastic presets allowed in
+// EU_868, LongFast first, then MeshCore's EU/UK (Narrow), the default. The order is kept: the
+// chosen one is stored by its number.
+struct ScanPreset {
+    const char* name;
+    uint32_t frequencyHz;
+    float bwKHz;
+    uint8_t sf, cr, syncWord;
+    uint16_t preamble;
+    Protocol protocol;
+};
+
+constexpr size_t kDefaultScanPreset = 7;  // MeshCore: the Settings' default says the same
+size_t scanPresetCount();
+ScanPreset scanPreset(size_t i);  // i < scanPresetCount()
+// By name, whatever its case. False when there is none.
+bool findScanPreset(const char* name, ScanPreset& out);
+
+}  // namespace roro::lora
@@ -0,0 +1,87 @@
+#include "aes128.h"
+
+#include <cstring>
+
+namespace roro::meshcore {
+
+namespace {
+// The S-box and its inverse, worked out once rather than typed in.
+struct Tables {
+    uint8_t s[256], inv[256];
+    Tables() {
+        auto rotl = [](uint8_t x, int n) { return static_cast<uint8_t>(x << n | x >> (8 - n)); };
+        uint8_t p = 1, q = 1;
+        do {
+            p = static_cast<uint8_t>(p ^ (p << 1) ^ (p & 0x80 ? 0x1B : 0));  // p times 3
+            q ^= static_cast<uint8_t>(q << 1);                              // q divided by 3
+            q ^= static_cast<uint8_t>(q << 2);
+            q ^= static_cast<uint8_t>(q << 4);
+            if (q & 0x80) q ^= 0x09;
+            uint8_t x = static_cast<uint8_t>(q ^ rotl(q, 1) ^ rotl(q, 2) ^ rotl(q, 3) ^ rotl(q, 4) ^ 0x63);
+            s[p] = x;
+            inv[x] = p;
+        } while (p != 1);
+        s[0] = 0x63;
+        inv[0x63] = 0;
+    }
+};
+const Tables& tables() {
+    static const Tables t;
+    return t;
+}
+
+uint8_t mul(uint8_t a, uint8_t b) {  // in GF(2^8)
+    uint8_t r = 0;
+    for (; b; b >>= 1) {
+        if (b & 1) r ^= a;
+        a = static_cast<uint8_t>(a << 1 ^ (a & 0x80 ? 0x1B : 0));
+    }
+    return r;
+}
+}  // namespace
+
+Aes128::Aes128(const uint8_t key[16]) {
+    const Tables& t = tables();
+    std::memcpy(roundKeys_, key, 16);
+    uint8_t rcon = 1;
+    for (int i = 16; i < 176; i += 4) {
+        uint8_t w[4];
+        std::memcpy(w, roundKeys_ + i - 4, 4);
+        if (i % 16 == 0) {
+            uint8_t first = w[0];
+            w[0] = static_cast<uint8_t>(t.s[w[1]] ^ rcon);
+            w[1] = t.s[w[2]];
+            w[2] = t.s[w[3]];
+            w[3] = t.s[first];
+            rcon = static_cast<uint8_t>(rcon << 1 ^ (rcon & 0x80 ? 0x1B : 0));
+        }
+        for (int j = 0; j < 4; ++j) roundKeys_[i + j] = roundKeys_[i - 16 + j] ^ w[j];
+    }
+}
+
+void Aes128::decryptBlock(const uint8_t in[16], uint8_t out[16]) const {
+    const Tables& t = tables();
+    uint8_t s[16];
+    for (int i = 0; i < 16; ++i) s[i] = in[i] ^ roundKeys_[160 + i];
+    for (int round = 9; round >= 0; --round) {
+        // Rows shifted back and bytes substituted back, in one go: column c, row r came from column c - r.
+        uint8_t u[16];
+        for (int c = 0; c < 4; ++c)
+            for (int r = 0; r < 4; ++r) u[4 * c + r] = t.inv[s[4 * ((c - r + 4) % 4) + r]];
+        for (int i = 0; i < 16; ++i) u[i] ^= roundKeys_[16 * round + i];
+        if (round == 0) {
+            std::memcpy(s, u, 16);
+            break;
+        }
+        for (int c = 0; c < 4; ++c) {
+            const uint8_t* a = u + 4 * c;
+            s[4 * c + 0] = mul(a[0], 14) ^ mul(a[1], 11) ^ mul(a[2], 13) ^ mul(a[3], 9);
+            s[4 * c + 1] = mul(a[0], 9) ^ mul(a[1], 14) ^ mul(a[2], 11) ^ mul(a[3], 13);
+            s[4 * c + 2] = mul(a[0], 13) ^ mul(a[1], 9) ^ mul(a[2], 14) ^ mul(a[3], 11);
+            s[4 * c + 3] = mul(a[0], 11) ^ mul(a[1], 13) ^ mul(a[2], 9) ^ mul(a[3], 14);
+        }
+    }
+    std::memcpy(out, s, 16);
+}
+
+}  // namespace roro::meshcore
@@ -0,0 +1,18 @@
+#pragma once
+
+#include <cstdint>
+
+namespace roro::meshcore {
+
+// AES-128 (FIPS 197), one block at a time, decryption only: what reading a MeshCore message
+// takes. Small and dependency-free, so the same code runs in the PC tests and on the device.
+class Aes128 {
+   public:
+    explicit Aes128(const uint8_t key[16]);
+    void decryptBlock(const uint8_t in[16], uint8_t out[16]) const;
+
+   private:
+    uint8_t roundKeys_[176];
+};
+
+}  // namespace roro::meshcore
@@ -0,0 +1,87 @@
+#include "meshcore_channel.h"
+
+#include <cstring>
+
+#include "aes128.h"
+#include "sha256.h"
+
+namespace roro::meshcore {
+
+namespace {
+// izOH6cXN6mrJ5e26oRXNcg== in base64, as the apps show it.
+const Channel kChannels[] = {
+    {"Public", {0x8b, 0x33, 0x87, 0xe9, 0xc5, 0xcd, 0xea, 0x6a, 0xc9, 0xe5, 0xed, 0xba, 0xa1, 0x15, 0xcd, 0x72}},
+};
+
+void hmacSha256(const uint8_t key[16], const uint8_t* data, size_t len, uint8_t out[32]) {
+    uint8_t pad[64], inner[32];
+    std::memset(pad, 0x36, sizeof pad);
+    for (int i = 0; i < 16; ++i) pad[i] ^= key[i];
+    Sha256 in;
+    in.update(pad, sizeof pad);
+    in.update(data, len);
+    in.finish(inner);
+    std::memset(pad, 0x5C, sizeof pad);
+    for (int i = 0; i < 16; ++i) pad[i] ^= key[i];
+    Sha256 o;
+    o.update(pad, sizeof pad);
+    o.update(inner, sizeof inner);
+    o.finish(out);
+}
+
+// Bytes that aren't printable ASCII become '?': one for a whole UTF-8 character.
+std::string printable(const uint8_t* p, size_t n) {
+    std::string out;
+    for (size_t i = 0; i < n; ++i) {
+        if (p[i] >= 0x20 && p[i] < 0x7F) out += static_cast<char>(p[i]);
+        else if ((p[i] & 0xC0) != 0x80) out += '?';
+    }
+    return out;
+}
+}  // namespace
+
+size_t channelCount() { return sizeof kChannels / sizeof kChannels[0]; }
+const Channel& channel(size_t i) { return kChannels[i]; }
+
+uint8_t channelHash(const Channel& c) {
+    uint8_t h[32];
+    Sha256::hash(c.key, sizeof c.key, h);
+    return h[0];
+}
+
+bool readChannelText(const Packet& p, ChannelText& out) {
+    // The channel's hash, 2 bytes of check, then whole AES blocks.
+    if (p.type != Payload::GroupText || p.payloadLen < 3 + 16 || (p.payloadLen - 3) % 16) return false;
+    const uint8_t* cipher = p.payload + 3;
+    size_t len = p.payloadLen - 3;
+    for (size_t i = 0; i < channelCount(); ++i) {
+        const Channel& c = channel(i);
+        if (channelHash(c) != p.payload[0]) continue;
+        uint8_t mac[32];
+        hmacSha256(c.key, cipher, len, mac);
+        if (mac[0] != p.payload[1] || mac[1] != p.payload[2]) continue;
+        uint8_t plain[192];
+        Aes128 aes(c.key);
+        for (size_t at = 0; at < len; at += 16) aes.decryptBlock(cipher + at, plain + at);
+        // Timestamp, then a byte whose top 6 bits say what follows: 0 is plain text, "name: words".
+        if (plain[4] >> 2) return false;
+        ChannelText t;
+        t.channel = c.name;
+        t.timestamp = static_cast<uint32_t>(plain[0] | plain[1] << 8 | plain[2] << 16 | static_cast<uint32_t>(plain[3]) << 24);
+        size_t end = 5;
+        while (end < len && plain[end]) ++end;  // padded with zeros
+        std::string all = printable(plain + 5, end - 5);
+        size_t colon = all.find(": ");
+        if (colon == std::string::npos) {
+            t.text = all;
+        } else {
+            t.sender = all.substr(0, colon);
+            t.text = all.substr(colon + 2);
+        }
+        out = t;
+        return true;
+    }
+    return false;
+}
+
+}  // namespace roro::meshcore
@@ -0,0 +1,34 @@
+#pragma once
+
+#include <cstddef>
+#include <cstdint>
+#include <string>
+
+#include "meshcore_packet.h"
+
+// MeshCore's channel messages: encrypted with a key everyone on the channel has. The public
+// channel's key is published, so what is said there can be read by anyone listening.
+namespace roro::meshcore {
+
+struct Channel {
+    const char* name;
+    uint8_t key[16];
+};
+
+// The channels whose key is known here: the public one, for now.
+size_t channelCount();
+const Channel& channel(size_t i);
+// What a message on the channel starts with: the first byte of the SHA-256 of its key.
+uint8_t channelHash(const Channel& c);
+
+struct ChannelText {
+    const char* channel = "";
+    uint32_t timestamp = 0;  // the sender's clock, seconds since 1970
+    std::string sender;      // what the sender calls itself: not signed, anyone can claim a name
+    std::string text;        // printable ASCII kept, the rest as '?'
+};
+
+// True when the packet is a text on a known channel and its check (2 bytes of HMAC-SHA256) holds.
+bool readChannelText(const Packet& p, ChannelText& out);
+
+}  // namespace roro::meshcore
@@ -0,0 +1,149 @@
+#include "meshcore_packet.h"
+
+#include <cstring>
+
+namespace roro::meshcore {
+
+namespace {
+int32_t le32(const uint8_t* p) { return static_cast<int32_t>(p[0] | p[1] << 8 | p[2] << 16 | static_cast<uint32_t>(p[3]) << 24); }
+constexpr size_t kMaxPath = 64, kMaxPayload = 184;
+}  // namespace
+
+bool parsePacket(const uint8_t* data, size_t len, Packet& out) {
+    if (!data || len < 2) return false;
+    uint8_t header = data[0];
+    if (header >> 6) return false;  // versions 1 to 3 are reserved
+    uint8_t type = (header >> 2) & 0x0F;
+    if (type >= 0xC && type <= 0xE) return false;  // reserved
+    Packet p;
+    p.route = static_cast<Route>(header & 0x03);
+    p.type = static_cast<Payload>(type);
+    size_t at = 1;
+    p.hasTransport = p.route == Route::TransportFlood || p.route == Route::TransportDirect;
+    if (p.hasTransport) {
+        if (len < at + 5) return false;
+        p.transport[0] = static_cast<uint16_t>(data[at] | data[at + 1] << 8);
+        p.transport[1] = static_cast<uint16_t>(data[at + 2] | data[at + 3] << 8);
+        at += 4;
+    }
+    uint8_t pathLen = data[at++];
+    p.hops = pathLen & 0x3F;
+    p.hashSize = static_cast<uint8_t>((pathLen >> 6) + 1);
+    size_t pathBytes = static_cast<size_t>(p.hops) * p.hashSize;
+    if (p.hashSize > 3 || pathBytes > kMaxPath || at + pathBytes > len) return false;
+    p.path = data + at;
+    at += pathBytes;
+    p.payload = data + at;
+    p.payloadLen = len - at;
+    if (p.payloadLen > kMaxPayload) return false;
+    out = p;
+    return true;
+}
+
+bool parseAdvert(const Packet& p, Advert& out) {
+    constexpr size_t kFixed = 32 + 4 + 64;  // key, timestamp, signature
+    if (p.type != Payload::Advert || p.payloadLen < kFixed + 1) return false;
+    Advert a;
+    std::memcpy(a.key, p.payload, 32);
+    a.timestamp = static_cast<uint32_t>(le32(p.payload + 32));
+    const uint8_t* app = p.payload + kFixed;
+    size_t left = p.payloadLen - kFixed;
+    uint8_t flags = app[0];
+    size_t at = 1;
+    a.kind = flags & 0x0F;
+    if (flags & 0x10) {
+        if (left < at + 8) return false;
+        a.hasLocation = true;
+        a.latE6 = le32(app + at);
+        a.lonE6 = le32(app + at + 4);
+        at += 8;
+    }
+    if (flags & 0x20) at += 2;  // two reserved fields
+    if (flags & 0x40) at += 2;
+    if (at > left) return false;
+    if (flags & 0x80)
+        for (; at < left && app[at]; ++at) a.name += app[at] >= 0x20 && app[at] < 0x7F ? static_cast<char>(app[at]) : '?';
+    out = a;
+    return true;
+}
+
+bool parseDiscover(const Packet& p, Discover& out) {
+    if (p.type != Payload::Control || p.payloadLen < 6) return false;
+    uint8_t sub = p.payload[0] >> 4;
+    Discover d;
+    d.tag = static_cast<uint32_t>(le32(p.payload + 2));
+    if (sub == 0x8) {
+        d.kinds = p.payload[1];
+    } else if (sub == 0x9) {
+        d.response = true;
+        d.kind = p.payload[0] & 0x0F;
+        d.snr = static_cast<int8_t>(p.payload[1]) / 4.0f;
+        d.id = p.payload + 6;
+        d.idLen = p.payloadLen - 6;
+        if (d.idLen != 8 && d.idLen != 32) return false;
+    } else {
+        return false;
+    }
+    out = d;
+    return true;
+}
+
+const char* routeName(Route r) {
+    switch (r) {
+        case Route::TransportFlood: return "flood in a region";
+        case Route::Flood: return "flood";
+        case Route::Direct: return "direct";
+        case Route::TransportDirect: return "direct in a region";
+    }
+    return "?";
+}
+
+const char* payloadName(Payload t) {
+    switch (t) {
+        case Payload::Request: return "request";
+        case Payload::Response: return "response";
+        case Payload::Text: return "text message";
+        case Payload::Ack: return "ack";
+        case Payload::Advert: return "advert";
+        case Payload::GroupText: return "channel message";
+        case Payload::GroupData: return "channel data";
+        case Payload::AnonRequest: return "anonymous request";
+        case Payload::Path: return "returned path";
+        case Payload::Trace: return "trace";
+        case Payload::Multipart: return "multipart";
+        case Payload::Control: return "control";
+        case Payload::RawCustom: return "custom";
+    }
+    return "?";
+}
+
+const char* payloadShort(Payload t) {
+    switch (t) {
+        case Payload::Request: return "req";
+        case Payload::Response: return "rsp";
+        case Payload::Text: return "txt";
+        case Payload::Ack: return "ack";
+        case Payload::Advert: return "adv";
+        case Payload::GroupText: return "chan";
+        case Payload::GroupData: return "cdat";
+        case Payload::AnonRequest: return "anon";
+        case Payload::Path: return "path";
+        case Payload::Trace: return "trace";
+        case Payload::Multipart: return "multi";
+        case Payload::Control: return "ctl";
+        case Payload::RawCustom: return "raw";
+    }
+    return "?";
+}
+
+const char* kindName(uint8_t kind) {
+    switch (kind) {
+        case 1: return "Chat node";
+        case 2: return "Repeater";
+        case 3: return "Room server";
+        case 4: return "Sensor";
+    }
+    return "Node";
+}
+
+}  // namespace roro::meshcore
@@ -0,0 +1,79 @@
+#pragma once
+
+#include <cstddef>
+#include <cstdint>
+#include <string>
+
+// MeshCore's packets as they are on air (its docs/packet_format.md and docs/payloads.md): what is
+// sent in clear, which is the header, the path, and a node's advertisement. meshcore_channel.h
+// reads the public channel's messages.
+namespace roro::meshcore {
+
+// Radio settings: RadioLib's "private" sync word, and the preset its EU/UK networks use.
+constexpr uint8_t kSyncWord = 0x12;
+constexpr uint16_t kPreambleLength = 16;
+constexpr const char* kPresetName = "MeshCore";  // "EU/UK (Narrow)" in its apps
+constexpr uint32_t kEuNarrowHz = 869618000;
+constexpr float kEuNarrowBwKHz = 62.5f;
+constexpr uint8_t kEuNarrowSf = 8, kEuNarrowCr = 8;
+
+// The first byte of the SHA-256 of the public channel's key (izOH6cXN6mrJ5e26oRXNcg==): what a
+// group message on the channel every node has starts with.
+constexpr uint8_t kPublicChannelHash = 0x11;
+
+enum class Route : uint8_t { TransportFlood = 0, Flood = 1, Direct = 2, TransportDirect = 3 };
+enum class Payload : uint8_t {
+    Request = 0x0, Response = 0x1, Text = 0x2, Ack = 0x3, Advert = 0x4, GroupText = 0x5, GroupData = 0x6,
+    AnonRequest = 0x7, Path = 0x8, Trace = 0x9, Multipart = 0xA, Control = 0xB, RawCustom = 0xF,
+};
+
+struct Packet {
+    Route route = Route::Flood;
+    Payload type = Payload::Request;
+    bool hasTransport = false;
+    uint16_t transport[2] = {0, 0};  // the first is the region's; the second is reserved
+    uint8_t hops = 0;       // entries in the path
+    uint8_t hashSize = 1;   // bytes each
+    const uint8_t* path = nullptr;  // hops * hashSize bytes
+    const uint8_t* payload = nullptr;
+    size_t payloadLen = 0;
+
+    bool flood() const { return route == Route::Flood || route == Route::TransportFlood; }
+    // Sent to one node from one node, each named by the first byte of its key.
+    bool addressed() const { return type == Payload::Request || type == Payload::Response || type == Payload::Text || type == Payload::Path; }
+    bool group() const { return type == Payload::GroupText || type == Payload::GroupData; }
+};
+
+// False when the bytes can't be a MeshCore packet: a version other than the first, a reserved
+// type, or a path longer than what follows.
+bool parsePacket(const uint8_t* data, size_t len, Packet& out);
+
+// A node saying who it is, signed: never encrypted.
+struct Advert {
+    uint8_t key[32];
+    uint32_t timestamp = 0;  // the node's clock, seconds since 1970
+    uint8_t kind = 0;        // 1 chat, 2 repeater, 3 room server, 4 sensor
+    bool hasLocation = false;
+    int32_t latE6 = 0, lonE6 = 0;
+    std::string name;  // printable ASCII kept, the rest as '?'
+};
+bool parseAdvert(const Packet& p, Advert& out);
+
+// Control packets that look for nodes nearby, and the answers: sent in clear, to neighbours only.
+struct Discover {
+    bool response = false;
+    uint8_t kinds = 0;     // a request: one bit per kind of node wanted (bit 2: repeaters)
+    uint8_t kind = 0;      // a response: what answers, as in an advert
+    float snr = 0;         // a response: how well it heard the request, dB
+    uint32_t tag = 0;      // random in the request, repeated in its responses
+    const uint8_t* id = nullptr;  // a response: the node's key, or its first 8 bytes
+    size_t idLen = 0;
+};
+bool parseDiscover(const Packet& p, Discover& out);
+
+const char* routeName(Route r);      // "flood", "direct", ...
+const char* payloadName(Payload t);  // "advert", "text", ...
+const char* payloadShort(Payload t); // for a list row: "adv", "txt", ...
+const char* kindName(uint8_t kind);  // "Chat node", "Repeater", ...
+
+}  // namespace roro::meshcore
@@ -35,7 +35,7 @@ const Definition kDefinitions[] = {
    {"wifi_on", Kind::Bool, 1, nullptr, 0, 1},
    {"gnss_on", Kind::Bool, 1, nullptr, 0, 1},
    {"coord_dms", Kind::Bool, 0, nullptr, 0, 1},
-    {"lora_preset", Kind::Int, 0, nullptr, 0, 6},  // LongFast first
+    {"lora_preset", Kind::Int, 7, nullptr, 0, 7},  // MeshCore, after the 7 Meshtastic ones
    {"dns1", Kind::String, 0, "9.9.9.9", 7, 15},  // Quad9
    {"dns2", Kind::String, 0, "1.1.1.1", 0, 15},  // Cloudflare
    {"dns_always", Kind::Bool, 0, nullptr, 0, 1},
@@ -53,6 +53,9 @@ const Definition kDefinitions[] = {
    {"ssh_key", Kind::String, 0, "", 0, 800},
    {"ssh_public", Kind::String, 0, "", 0, 200},
    {"ssh_font", Kind::Int, 1, nullptr, 0, 4},
+    {"launcher_list", Kind::Bool, 0, nullptr, 0, 1},  // off: the grid
+    {"theme", Kind::Int, 0, nullptr, 0, 6},  // roro9stack's own; ui::kThemeCount of them
+    {"theme_light", Kind::Bool, 0, nullptr, 0, 1},
 };
 static_assert(sizeof(kDefinitions) / sizeof(kDefinitions[0]) == static_cast<size_t>(Setting::Count),
              "every Setting needs a definition");
@@ -23,7 +23,7 @@ enum class Setting : uint8_t {
    WifiEnabled,      // bool: the Wi-Fi Service stays Connected when a Saved Network is in range
    GnssEnabled,      // bool: the GNSS Service reads the receiver (M2, Q58)
    CoordinatesDms,   // bool: show degrees, minutes and seconds instead of decimal degrees (Q64)
-    LoraPreset,       // int: the LoRa Scanner's Meshtastic preset, an index into the EU868 list (M3, Q95)
+    LoraPreset,       // int: the LoRa Scanner's preset, an index into lora::scanPreset (M3, Q95): MeshCore by default
    Dns1,             // string: the first DNS server, an IPv4 address (S1, Q108, Q109)
    Dns2,             // string: the second, or empty
    DnsAlways,        // bool: use them on Automatic (DHCP) networks too, instead of DHCP's
@@ -41,6 +41,9 @@ enum class Setting : uint8_t {
    SshKey,           // string: this device's own SSH private key, as OpenSSH writes one: never shown
    SshPublic,        // string: its public half, the line to put in a server's authorized_keys
    SshFont,          // int: the terminal's font, 0 (smallest) to 4
+    LauncherList,     // bool: the Launcher is a list of names instead of a grid of icons (issue #9)
+    Theme,            // int: the colour theme, an index into ui::palette (issue #10)
+    ThemeLight,       // bool: its light side instead of its dark one
    Count
 };

@@ -0,0 +1,47 @@
+#include "grid_model.h"
+
+namespace roro {
+
+void GridModel::setCount(int count) {
+    count_ = count < 0 ? 0 : count;
+    if (count_ == 0) {
+        selected_ = -1;
+        first_ = 0;
+        return;
+    }
+    select(selected_ < 0 ? 0 : selected_);
+}
+
+void GridModel::select(int index) {
+    if (count_ == 0) return;
+    selected_ = index < 0 ? 0 : index >= count_ ? count_ - 1 : index;
+    int row = selected_ / cols_;
+    if (row < first_) first_ = row;
+    if (row >= first_ + rows_) first_ = row - rows_ + 1;
+    int maxFirst = rows() > rows_ ? rows() - rows_ : 0;
+    if (first_ > maxFirst) first_ = maxFirst;
+}
+
+void GridModel::left() {
+    if (count_) select(selected_ == 0 ? count_ - 1 : selected_ - 1);
+}
+
+void GridModel::right() {
+    if (count_) select(selected_ == count_ - 1 ? 0 : selected_ + 1);
+}
+
+void GridModel::up() {
+    if (!count_) return;
+    int col = selected_ % cols_, row = selected_ / cols_;
+    row = row == 0 ? rows() - 1 : row - 1;
+    select(row * cols_ + col);  // past the end of a short last row: the last item
+}
+
+void GridModel::down() {
+    if (!count_) return;
+    int col = selected_ % cols_, row = selected_ / cols_;
+    row = row == rows() - 1 ? 0 : row + 1;
+    select(row * cols_ + col);
+}
+
+}  // namespace roro
@@ -0,0 +1,33 @@
+#pragma once
+
+namespace roro {
+
+// Selection and scrolling for a grid of `cols` columns showing `visibleRows` rows at a time, filled
+// row by row. Left and Right go through every item and wrap around; Up and Down stay in the
+// column and wrap around, landing on the last item where the last row has no such column.
+class GridModel {
+   public:
+    GridModel(int cols, int visibleRows) : cols_(cols), rows_(visibleRows) {}
+
+    void setCount(int count);
+    int count() const { return count_; }
+    int selected() const { return selected_; }  // -1 when empty
+    int cols() const { return cols_; }
+    int rows() const { return count_ ? (count_ - 1) / cols_ + 1 : 0; }
+    int firstVisibleRow() const { return first_; }
+    int visibleRows() const { return rows_; }
+
+    void select(int index);
+    void left();
+    void right();
+    void up();
+    void down();
+
+   private:
+    int cols_, rows_;
+    int count_ = 0;
+    int selected_ = -1;
+    int first_ = 0;
+};
+
+}  // namespace roro
@@ -0,0 +1,59 @@
+#include "palette.h"
+
+namespace roro::ui {
+
+namespace {
+// 0xRRGGBB to RGB565. Every colour below is one the RGB332 frame buffer holds exactly: three bits
+// of red and of green (00 24 49 6d 92 b6 db ff) and two of blue (00 55 aa ff). The themes' own
+// colours were rounded to those, then the ones that fell together or lost their contrast were
+// chosen by hand (test_palette checks both).
+constexpr uint16_t c(uint32_t rgb) {
+    return static_cast<uint16_t>(((rgb >> 19) & 0x1F) << 11 | ((rgb >> 10) & 0x3F) << 5 | ((rgb >> 3) & 0x1F));
+}
+
+const char* const kNames[kThemeCount] = {"roro9stack", "Catppuccin", "Dracula", "Nord", "ANSI terminal", "Gruvbox", "Solarized"};
+
+// background, text, muted, faint, bar, barMuted, accent, onAccent, warning, message, good, red, yellow, violet
+constexpr Palette kPalettes[kThemeCount][2] = {
+    {
+        {c(0x000000), c(0xffffff), c(0x9292aa), c(0x494955), c(0x494955), c(0xb6b6aa), c(0x00dbff), c(0x000055), c(0xff9200), c(0xff92ff), c(0x49db55), c(0xff2455), c(0xffdb00), c(0xb692ff)},  // roro9stack, dark
+        {c(0xffffff), c(0x000055), c(0x4949aa), c(0xb6dbff), c(0xb6dbff), c(0x4949aa), c(0x0092aa), c(0xffffff), c(0xb64900), c(0xb600aa), c(0x006d00), c(0xb60000), c(0x926d00), c(0x6d49ff)},  // roro9stack, light
+    },
+    {
+        {c(0x000000), c(0xdbdbff), c(0x9292ff), c(0x494955), c(0x242455), c(0xb6b6ff), c(0xdbb6ff), c(0x000000), c(0xffb655), c(0xff92ff), c(0x92ffaa), c(0xff6daa), c(0xffdb55), c(0x6db6ff)},  // Catppuccin, dark
+        {c(0xffffff), c(0x242455), c(0x6d6daa), c(0xb6b6aa), c(0xb6b6aa), c(0x494955), c(0x9249ff), c(0xffffff), c(0xdb6d00), c(0xdb6daa), c(0x499255), c(0xdb0055), c(0xdb9200), c(0x246dff)},  // Catppuccin, light
+    },
+    {
+        {c(0x242455), c(0xffffff), c(0x6d6daa), c(0x494955), c(0x494955), c(0xb6b6aa), c(0xb692ff), c(0x242455), c(0xffb655), c(0xff6daa), c(0x49ff55), c(0xff4955), c(0xffffaa), c(0x92dbff)},  // Dracula, dark
+        {c(0xffffff), c(0x242400), c(0x6d6d55), c(0xdbdbff), c(0xdbdbff), c(0x6d6d55), c(0x6d49aa), c(0xffffff), c(0x924900), c(0x922455), c(0x246d00), c(0xdb4900), c(0x926d00), c(0x006daa)},  // Dracula, light
+    },
+    {
+        {c(0x242455), c(0xdbffff), c(0x9292aa), c(0x494955), c(0x494955), c(0xdbdbff), c(0x92dbff), c(0x242455), c(0xdb9255), c(0xb692aa), c(0x92b6aa), c(0xb66d55), c(0xdbdbaa), c(0x9292aa)},  // Nord, dark
+        {c(0xdbffff), c(0x242455), c(0x494955), c(0xdbdbff), c(0xdbdbff), c(0x494955), c(0x496daa), c(0xdbffff), c(0xb64900), c(0x9249aa), c(0x496d00), c(0xb66d55), c(0xb66d00), c(0x9292aa)},  // Nord, light
+    },
+    {
+        {c(0x000000), c(0xb6b6aa), c(0x6d6d55), c(0x494955), c(0x0000aa), c(0xb6b6aa), c(0x49ff55), c(0x000000), c(0xffff55), c(0xff49ff), c(0x49ffff), c(0xff4955), c(0xffff55), c(0x4949ff)},  // ANSI terminal, dark
+        {c(0xffffff), c(0x000000), c(0x494955), c(0xb6b6aa), c(0xb6b6aa), c(0x494955), c(0x0000aa), c(0xffffff), c(0xb64900), c(0xb600aa), c(0x006d00), c(0xb60000), c(0xb64900), c(0x00b6aa)},  // ANSI terminal, light
+    },
+    {
+        {c(0x242400), c(0xdbdbaa), c(0x929255), c(0x492400), c(0x492400), c(0xdbb6aa), c(0xffb655), c(0x242400), c(0xff9200), c(0xdb92aa), c(0xb6b600), c(0xff4955), c(0xffb655), c(0x92b6aa)},  // Gruvbox, dark
+        {c(0xffffaa), c(0x494955), c(0x6d6d55), c(0xdbdbaa), c(0xdbdbaa), c(0x494955), c(0xb64900), c(0xffffaa), c(0xb66d00), c(0x924955), c(0x6d6d00), c(0x920000), c(0xb66d00), c(0x006d55)},  // Gruvbox, light
+    },
+    {
+        {c(0x002455), c(0xb6b6aa), c(0x6d92aa), c(0x004955), c(0x004955), c(0x9292aa), c(0x2492aa), c(0xffffff), c(0xdb4900), c(0xdb24aa), c(0x929200), c(0xdb2455), c(0xb69200), c(0x6d6daa)},  // Solarized, dark
+        {c(0xffffff), c(0x244955), c(0x9292aa), c(0xdbdbaa), c(0xdbdbaa), c(0x6d6daa), c(0x2492aa), c(0xffffff), c(0xdb4900), c(0xdb24aa), c(0x929200), c(0xdb2455), c(0xb69200), c(0x6d6daa)},  // Solarized, light
+    },
+};
+}  // namespace
+
+const char* themeName(int theme) { return kNames[theme < 0 || theme >= kThemeCount ? 0 : theme]; }
+
+const Palette& palette(int theme, bool light) { return kPalettes[theme < 0 || theme >= kThemeCount ? 0 : theme][light ? 1 : 0]; }
+
+uint32_t rgb888(uint16_t c) {
+    // As the display shows an RGB332 pixel: the bits kept, spread over 8.
+    uint32_t r = ((c >> 13) & 7) * 0x49 >> 1, g = ((c >> 8) & 7) * 0x49 >> 1, b = ((c >> 3) & 3) * 0x55;
+    return r << 16 | g << 8 | b;
+}
+
+}  // namespace roro::ui
@@ -0,0 +1,29 @@
+#pragma once
+
+#include <cstdint>
+
+// The colour themes (issue #10): each a dark and a light set of the same roles, as RGB565.
+namespace roro::ui {
+
+struct Palette {
+    uint16_t background, text;
+    uint16_t muted;     // secondary text
+    uint16_t faint;     // grid lines, what stays behind
+    uint16_t bar;       // the Status Bar's background
+    uint16_t barMuted;  // what is idle, on the bar
+    uint16_t accent;    // what is chosen, what is live: also the fill behind a selected row
+    uint16_t onAccent;  // text on an accent, warning or message fill
+    uint16_t warning;
+    uint16_t message;   // someone wrote
+    uint16_t good;      // a Fix, the best of a set
+    uint16_t red, yellow, violet;  // to tell things apart (the constellations of the Sky view)
+};
+
+constexpr int kThemeCount = 7;
+const char* themeName(int theme);                 // "roro9stack", "Catppuccin", "Dracula", ...
+const Palette& palette(int theme, bool light);    // out of range: the first
+
+// What the 8-bit frame buffer shows for a colour, as 0xRRGGBB.
+uint32_t rgb888(uint16_t rgb565);
+
+}  // namespace roro::ui
@@ -2,7 +2,7 @@
 # Flash the firmware over USB, then open the serial monitor.
 # Usage: scripts/flash.sh [--debug] [port]   USB (default: the first Espressif device found)
 #        scripts/flash.sh --ota [host]       Wi-Fi: build, sign and push a Firmware Update
-#                                            (host: the device's IP from Settings > Firmware, or $RORO_OTA_HOST)
+#                                            (host: the device's IP from Settings > System > Firmware, or $RORO_OTA_HOST)
 # --debug (USB only): once flashed, switches the Debug Console on and gives it the token in
 #   ~/.config/roro9stack/debug-token, over the serial port (ADR 0010, Q192), so scripts/rdbg.py works
 #   at once. The settings survive later updates: it is needed once for a device, not at each flash.
@@ -0,0 +1,115 @@
+#!/usr/bin/env python3
+"""Turns the Launcher's icons (assets/icons/<App id>.png) into C arrays: src/ui/icons.h and icons.cpp.
+
+An icon is 32 x 32 and one colour: a pixel is drawn where the picture is light and opaque, and left
+alone where it is dark or transparent. Any image editor's PNG will do (grey, RGB, palette, with or
+without alpha, 1 or 8 bits a channel, not interlaced). Run this after changing a picture:
+
+    python3 scripts/make_icons.py
+
+CI runs it with --check, which fails when the arrays are not what the pictures give.
+"""
+import os
+import struct
+import sys
+import zlib
+
+ROOT = os.path.join(os.path.dirname(os.path.abspath(__file__)), "..")
+SOURCE = os.path.join(ROOT, "assets", "icons")
+SIZE = 32
+
+
+def read_png(path):
+    """The picture as rows of booleans: True where a pixel is drawn."""
+    data = open(path, "rb").read()
+    if data[:8] != b"\x89PNG\r\n\x1a\n":
+        raise ValueError("not a PNG")
+    at, idat, palette, alpha = 8, b"", None, None
+    while at < len(data):
+        (length,), kind = struct.unpack(">I", data[at:at + 4]), data[at + 4:at + 8]
+        body = data[at + 8:at + 8 + length]
+        at += 12 + length
+        if kind == b"IHDR":
+            width, height, depth, colour, _, _, interlace = struct.unpack(">IIBBBBB", body)
+        elif kind == b"PLTE":
+            palette = [body[i:i + 3] for i in range(0, len(body), 3)]
+        elif kind == b"tRNS":
+            alpha = body
+        elif kind == b"IDAT":
+            idat += body
+    if interlace or depth not in (1, 8) or (depth == 1 and colour not in (0, 3)):
+        raise ValueError("save it as a plain 8-bit or 1-bit PNG, not interlaced")
+    channels = {0: 1, 2: 3, 3: 1, 4: 2, 6: 4}[colour]
+    step = channels if depth == 8 else 1  # bytes a pixel, for the filters
+    stride = (width * channels * depth + 7) // 8
+    raw, rows, before = zlib.decompress(idat), [], bytes(stride)
+    for y in range(height):
+        kind, line = raw[y * (stride + 1)], bytearray(raw[y * (stride + 1) + 1:(y + 1) * (stride + 1)])
+        for i in range(stride):
+            a = line[i - step] if i >= step else 0
+            b, c = before[i], before[i - step] if i >= step else 0
+            if kind == 1:
+                line[i] = (line[i] + a) & 255
+            elif kind == 2:
+                line[i] = (line[i] + b) & 255
+            elif kind == 3:
+                line[i] = (line[i] + (a + b) // 2) & 255
+            elif kind == 4:
+                p = a + b - c
+                pa, pb, pc = abs(p - a), abs(p - b), abs(p - c)
+                line[i] = (line[i] + (a if pa <= pb and pa <= pc else b if pb <= pc else c)) & 255
+        before = bytes(line)
+        row = []
+        for x in range(width):
+            if depth == 1:
+                v = (line[x // 8] >> (7 - x % 8)) & 1
+                px = [v * 255] if colour == 0 else [v]
+            else:
+                px = line[x * channels:(x + 1) * channels]
+            if colour == 3:
+                opaque = alpha is None or px[0] >= len(alpha) or alpha[px[0]] > 127
+                light = sum(palette[px[0]]) > 381
+            elif colour in (0, 4):
+                opaque, light = colour == 0 or px[1] > 127, px[0] > 127
+            else:
+                opaque, light = colour == 2 or px[3] > 127, sum(px[:3]) > 381
+            row.append(opaque and light)
+        rows.append(row)
+    return rows
+
+
+def main():
+    names = sorted(f[:-4] for f in os.listdir(SOURCE) if f.endswith(".png"))
+    header = ["// Made by scripts/make_icons.py from assets/icons/*.png: change the pictures, not this file.", "#pragma once", "",
+              "#include <cstdint>", "", "namespace roro::icons {", "",
+              "// One bit a pixel, the leftmost first, a row after another: what Canvas::drawBitmap takes.",
+              f"constexpr int kSize = {SIZE};", ""]
+    body = ["// Made by scripts/make_icons.py from assets/icons/*.png: change the pictures, not this file.", '#include "icons.h"', "",
+            "namespace roro::icons {", ""]
+    for name in names:
+        rows = read_png(os.path.join(SOURCE, name + ".png"))
+        if len(rows) != SIZE or len(rows[0]) != SIZE:
+            sys.exit(f"{name}.png is {len(rows[0])} x {len(rows)}: an icon is {SIZE} x {SIZE}")
+        ident = name.replace("-", "_")
+        header.append(f"extern const uint8_t {ident}[{SIZE * SIZE // 8}];  // {name}.png")
+        body.append(f"const uint8_t {ident}[{SIZE * SIZE // 8}] = {{")
+        for row in rows:
+            packed = [sum(0x80 >> i for i in range(8) if row[b * 8 + i]) for b in range(SIZE // 8)]
+            body.append("    " + ", ".join(f"0x{v:02x}" for v in packed) + ",  // " + "".join("#" if v else "." for v in row))
+        body += ["};", ""]
+    header += ["", "}  // namespace roro::icons", ""]
+    body += ["}  // namespace roro::icons", ""]
+    out = {os.path.join(ROOT, "src", "ui", "icons.h"): "\n".join(header), os.path.join(ROOT, "src", "ui", "icons.cpp"): "\n".join(body)}
+    if "--check" in sys.argv:
+        stale = [os.path.relpath(p, ROOT) for p, text in out.items() if not os.path.exists(p) or open(p).read() != text]
+        if stale:
+            sys.exit("out of date: " + ", ".join(stale) + " (run scripts/make_icons.py)")
+        print(f"{len(names)} icons, up to date")
+        return
+    for path, text in out.items():
+        open(path, "w").write(text)
+    print(f"{len(names)} icons written")
+
+
+if __name__ == "__main__":
+    main()
@@ -2,7 +2,7 @@
 """Pushes a signed Update File to a Cardputer over Wi-Fi (TCP 3232) and reports the result.

 Usage: scripts/ota_push.py <file.ota> <host>
-<host> is the device's IP (shown in Settings > Firmware).
+<host> is the device's IP (shown in Settings > System > Firmware).
 """
 import socket
 import sys
@@ -1,11 +1,11 @@
 #!/usr/bin/env python3
-"""The Debug Console, over Wi-Fi (TCP 2323, see ADR 0010). Switch it on first: Settings > Debug Console.
+"""The Debug Console, over Wi-Fi (TCP 2323, see ADR 0010). Switch it on first: Settings > System > Debug Console.

 Usage: scripts/rdbg.py [-H host] [-t token] [-b] [command ...]
  no command   interactive: type commands, see every console line live; Ctrl-D or `quit` leaves
  command      runs it and prints what follows, until the console has been quiet for a moment
-  -H host      the device's IP (Settings > Debug Console), default $RORO_OTA_HOST
-  -t token     the device's token (also --token), as Settings > Debug Console shows it: dashes and
+  -H host      the device's IP (Settings > System > Debug Console), default $RORO_OTA_HOST
+  -t token     the device's token (also --token), as Settings > System > Debug Console shows it: dashes and
               case don't matter. Otherwise $RORO_DEBUG_TOKEN, otherwise ~/.config/roro9stack/debug-token
  -b           also print the backlog the device sends on connecting (boot messages and so on)

@@ -55,7 +55,7 @@ def find_token(given):
    token = tidy_token(token or "")
    if not token:
        sys.exit("No token: pass -t <token>, set RORO_DEBUG_TOKEN, or put it in " + TOKEN_FILE +
-                 "\n(the device shows it in Settings > Debug Console)")
+                 "\n(the device shows it in Settings > System > Debug Console)")
    return token


@@ -63,7 +63,7 @@ def log_in(sock, token):
    """Answers the device's challenge; returns the banner line, or exits saying what went wrong."""
    first = read_until(sock, b"\n", 10)
    if first is None:
-        sys.exit("device: nothing came back. Is the console switched on (Settings > Debug Console)?")
+        sys.exit("device: nothing came back. Is the console switched on (Settings > System > Debug Console)?")
    line = first.decode(errors="replace").strip()
    if line.startswith("locked"):
        sys.exit("device: closed for a minute after too many wrong tokens")
@@ -75,7 +75,7 @@ def log_in(sock, token):
    if banner is None:
        sys.exit("device: no answer")
    if banner.startswith(b"denied"):
-        sys.exit("device: wrong token (Settings > Debug Console shows the right one)")
+        sys.exit("device: wrong token (Settings > System > Debug Console shows the right one)")
    return banner


@@ -326,7 +326,7 @@ def main():
    try:
        sock = socket.create_connection((host, PORT), timeout=10)
    except OSError as e:
-        sys.exit(f"device: can't connect to {host}:{PORT} ({e}). Is the console switched on (Settings > Debug Console)?")
+        sys.exit(f"device: can't connect to {host}:{PORT} ({e}). Is the console switched on (Settings > System > Debug Console)?")
    with sock:
        banner = log_in(sock, token)
        show = sys.stdout if backlog or not args else None
@@ -47,7 +47,7 @@ PREVIOUS="$(git -C "$SRC" describe --tags --abbrev=0 "$VERSION^" 2>/dev/null ||
    echo
    echo "## Files"
    echo
-    echo "- \`$NAME.ota\`: the signed Update File. Copy it to \`/updates\` on the SD card and install it from Settings > Firmware or the Storage App, or push it over Wi-Fi with \`scripts/ota_push.py\`."
+    echo "- \`$NAME.ota\`: the signed Update File. Copy it to \`/updates\` on the SD card and install it from Settings > System > Firmware or the Storage App, or push it over Wi-Fi with \`scripts/ota_push.py\`."
    echo "- \`$NAME-factory.bin\`: the whole flash image, for a first install over USB at offset 0."
    echo "- \`$NAME.elf.gz\`: the symbols, to decode a crash report from this build."
    echo "- \`SHA256SUMS\`: checksums of the three."
@@ -2,7 +2,7 @@
 """Copies a file to the Cardputer's SD card over the USB serial console (the `sd put` command).

 Usage: scripts/sd_put.sh <file> [card path]
-The card path defaults to /updates/<file name>, where Settings > Firmware finds Update Files.
+The card path defaults to /updates/<file name>, where Settings > System > Firmware finds Update Files.
 The device acknowledges each chunk once it's on the card, checks the SHA-256 of the whole file,
 and only then renames <card path>.part to <card path>.
 """
@@ -20,6 +20,8 @@ scripts/ci.sh

 This runs the host-side unit tests (`test/`, `native` environment), then builds the firmware. The output is `.pio/build/cardputer-adv/firmware.factory.bin`.

+`scripts/make_icons.py` turns the Launcher's icons (`assets/icons/<App id>.png`, 32 × 32, one colour) into the arrays in `src/ui/icons.cpp`; run it after changing a picture. CI fails when the two don't match.
+
 `scripts/coverage.sh` runs the same tests with coverage counters and writes a line-by-line report to `.pio/coverage/index.html`. The badge above is its figure for `main`: the share of the lines of `lib/` that the host tests run. `lib/` is the logic that compiles on a PC; `lib/SD` (the card's driver) and `src/` (the Apps, the Services, everything that needs the device) have no host tests and aren't in that figure.

 The framework is rebuilt with the TLS settings in `platformio.ini` (`custom_sdkconfig`, ADR 0006), so the first build after a fresh checkout takes about 6 minutes; later builds take about 15 seconds when little has changed. The platform knows the framework is already rebuilt by `sdkconfig.defaults` in the project folder, which it writes and git ignores: delete it and the next build rebuilds the framework. CI keeps that file, a build cache and ccache in its volume (docs/milestones/R1.md).
@@ -36,19 +36,19 @@ scripts/ota_keygen.sh                  # once: creates the signing key (see ADR
 scripts/flash.sh --ota 10.39.39.12     # build, sign and push; or set RORO_OTA_HOST
 ```

-The device shows the push address in **Settings → Firmware**. It installs a correctly signed update right away, restarts (waiting up to 60 s if you're typing), and runs the new firmware on **Probation**. If the new firmware crashes, or can't reconnect Wi-Fi within 3 minutes, it rolls back to the previous one and says so.
+The device shows the push address in **Settings → System → Firmware**. It installs a correctly signed update right away, restarts (waiting up to 60 s if you're typing), and runs the new firmware on **Probation**. If the new firmware crashes, or can't reconnect Wi-Fi within 3 minutes, it rolls back to the previous one and says so.

-To install from the SD card instead, copy the `.ota` file from `.pio/build/cardputer-adv/` into `/updates` on the card, then use **Settings → Firmware**. With the Cardputer on USB, the card can stay in: `scripts/sd_put.sh <file.ota>` sends it over the serial console into `/updates` (about 30 s for 1.6 MB, checked with SHA-256 before it's renamed into place; `SD_PUT_DEBUG=1` shows the console while it runs).
+To install from the SD card instead, copy the `.ota` file from `.pio/build/cardputer-adv/` into `/updates` on the card, then use **Settings → System → Firmware**. With the Cardputer on USB, the card can stay in: `scripts/sd_put.sh <file.ota>` sends it over the serial console into `/updates` (about 30 s for 1.6 MB, checked with SHA-256 before it's renamed into place; `SD_PUT_DEBUG=1` shows the console while it runs).

 **The private key** lives in `~/.config/roro9stack/ota-key.pem` and must never be committed. If it's lost, generate a new pair and flash once over USB. (CI signs releases with a copy kept as a repository secret, ADR 0008.)

 ### Updates from Gitea

-With no PC and no card, the device can install the project's releases itself (docs/milestones/R1.md). In **Settings → Firmware**:
+With no PC and no card, the device can install the project's releases itself (docs/milestones/R1.md). In **Settings → System → Firmware**:

 - **Latest release** checks the server (Enter, or `c`) and says `v0.11.0 (new)` or `(current)`. Enter again opens the release: its version, date, size and the tag's message, with **Install** when it's newer. The download goes straight into the inactive slot, so no card is needed; the signature is checked after the first 160 bytes, before anything is written, and the image's hash at the end. The new firmware then runs on Probation as for any update.
 - **Older releases** lists the last ten, newest first. Opening an older one offers to go back to it, with a different question.
- **Settings → Check for updates** (on by default): once a day, with Wi-Fi up and the clock set, the device looks at the latest release and says `v0.11.0 is out: see Settings > Firmware`, once per version. It installs nothing by itself, and doesn't announce a version that already failed and rolled back on this device.
+- **Settings → System → Check for updates** (on by default): once a day, with Wi-Fi up and the clock set, the device looks at the latest release and says `v0.11.0 is out: see Settings > System > Firmware`, once per version. It installs nothing by itself, and doesn't announce a version that already failed and rolled back on this device.

 The connection is checked against the two ISRG roots Let's Encrypt chains end in (ADR 0009), not the usual bundle of about 130 authorities. Whatever the connection, the Update File's own signature is what decides what gets installed.

@@ -34,8 +34,8 @@ scripts/flash.sh --ota 10.39.39.12                     # builds, signs and pushe
 {{ diagram(src="ways-in.svg", min_width=580, caption="Every path ends at the same Update Service and the same signature check.") }}

 1. **Push over Wi-Fi** to TCP 3232: `scripts/flash.sh --ota`. The device always listens while Wi-Fi is connected.
-2. **From the SD card**: a `.ota` in `/updates`, installed from Settings → Firmware, from the Storage App, or with the `install <path>` command. Put it there by hand, with `scripts/rdbg.py put` over Wi-Fi, or with `scripts/sd_put.sh` over USB.
-3. **From the project's releases** on Gitea, which the device downloads itself over TLS (Settings → Firmware, or `update check` / `update install <tag>`): see [Flash and update](/dev/build/flash/).
+2. **From the SD card**: a `.ota` in `/updates`, installed from Settings → System → Firmware, from the Storage App, or with the `install <path>` command. Put it there by hand, with `scripts/rdbg.py put` over Wi-Fi, or with `scripts/sd_put.sh` over USB.
+3. **From the project's releases** on Gitea, which the device downloads itself over TLS (Settings → System → Firmware, or `update check` / `update install <tag>`): see [Flash and update](/dev/build/flash/).

 All three feed the same parser: the **header and signature are checked first**, the image is written to the **other app slot** while it is hashed, and the slot becomes the next boot **only if the hash matches**. Anything wrong ends in a Toast and **nothing changes**. A downgrade is allowed, and shows "older than the installed version".

@@ -21,7 +21,7 @@
    <rect class="wi-panel" x="288" y="176" width="200" height="88" rx="8"/>
    <text x="302" y="200" font-size="12" font-weight="600">SD card</text>
    <text x="302" y="219" font-size="11">/updates/*.ota</text>
-    <text x="302" y="238" font-size="11" class="wi-dim">Settings → Firmware,</text>
+    <text x="302" y="238" font-size="11" class="wi-dim">Settings → System → Firmware,</text>
    <text x="302" y="254" font-size="11" class="wi-dim">or install &lt;path&gt;</text>

    <rect class="wi-hot" x="536" y="32" width="208" height="158" rx="8"/>
@@ -21,7 +21,7 @@ boot other        restart into the other app slot (manual Rollback)
 log level <0-5>   ESP-IDF log level (0 none ... 5 verbose)
 ls [folder] | du <path> | mkdir <path> | rm [-r] [-f] <path> | cp [-f] <from> <to> | mv [-f] <from> <to> | cancel   the SD card, with the Storage App's rules (rm -r for a folder; -f: the Shell doesn't ask; * and ? in a name: /notes/*.txt)
 screenshot [seconds]   the screen as a PNG in /screenshots on the card, now or after a pause
-lora probe | lora status | lora rx on|off | lora preset <name>   the LoRa radio, receive only
+lora probe | lora status | lora rx on|off | lora preset <name>   the LoRa radio, receive only; a Meshtastic preset (LongFast...) or MeshCore
 lora capture start|stop   a LoRa Capture to /captures/lora (pcap, LoRaTap)
 lora sweep on [from MHz] [to MHz] [step kHz] | lora sweep off | lora sweep dump   RSSI across a band (863 870 100)
 lora custom <MHz> <BW kHz> <SF> <CR 5-8> <sync hex> [preamble]   e.g. 868.1 125 7 5 34 8 (LoRaWAN)
@@ -37,7 +37,7 @@ gemini get <url>  fetch a Gemini page and report header, size, certificate, heap
 irc start | irc stop | irc dump | irc say <buffer> <text>
 install <path.ota>   Update from SD
 update check | update list | update status | update install <tag>   the project's releases on Gitea
-sd card | sd list | cat <path> | log <text> | burst | sound on|off | short | normal
+sd card | sd list | cat <path> | log <text> | burst | sound on|off | theme [0-6] [light|dark] | short | normal
 Irc | Wifi | Gnss | Gemini | Lora | Storage | Notes | Shell | System | Settings   open that App: a capital letter is an App, not a command
 ping <host> [count] [size] | nslookup <name> [server] | port <host> <port> | traceroute <host> | cancel   is it there, does its name resolve, is its port open, which way; one at a time
 tls <host> [port] | ntp [server]   a TLS handshake: who the certificate is for, by whom, until when, and whether this device trusts it; a time server's clock against this one
@@ -45,8 +45,8 @@ ifconfig | arp | netstat   the interfaces (Wi-Fi and the VPN), their addresses,
 uname   the firmware, its version and the chip it is built for
 scp [-f] [-P port] <file on the card> user@host:path | scp [-f] [-P port] user@host:path <file on the card>   one file over SSH, with this device's key or, in the Shell, a password, to a server the SSH App already trusts; -f replaces a file on the card; `cancel` stops it
 ssh user@host[:port] | ssh status | ssh stop   a terminal on another machine, in the SSH App; the password is asked there, never here
-vpn status | vpn up [seconds] | vpn down | vpn import [path] | vpn forget | vpn auto on|off   the WireGuard tunnel (Settings > VPN); import reads /vpn/wg0.conf; with seconds, it goes down by itself
-debug status | debug off [seconds]   the Debug Console over Wi-Fi (Settings > Debug Console); with seconds, it comes back
+vpn status | vpn up [seconds] | vpn down | vpn import [path] | vpn forget | vpn auto on|off   the WireGuard tunnel (Settings > Network > VPN); import reads /vpn/wg0.conf; with seconds, it goes down by itself
+debug status | debug off [seconds]   the Debug Console over Wi-Fi (Settings > System > Debug Console); with seconds, it comes back
 debug on | debug token <16 to 64 characters> | debug token new   (USB serial only) switch it on, set its token
 crash abort|wdt   crash on purpose (to test crash reports and Safe Mode)
 wifi ip ... try <seconds> | wifi ip keep   a trial IP setting: back to the previous one unless kept
@@ -71,6 +71,7 @@ In **Safe Mode** (see [Crashes and Safe Mode](/dev/debug/crashes/)) only a few r
 | `burst` | Publishes 5 Notifications at once |
 | `key up\|down\|left\|right\|select\|back\|home\|del\|tab\|space\|help\|shot`, or `key <char>` | Injects a key press (`help` is Fn+h: the keys of the screen that is showing; `shot` is Fn+p: a screenshot). `ctrl-`, `alt-` and `shift-` before it hold that key: `key ctrl-down`, `key alt-up`, `key ctrl-b` |
 | `sound on` / `sound off` | Toggles the Sound setting (beep + LED) |
+| `theme` / `theme <0-6> [light\|dark]` | Lists the colour themes, or picks one and its side |
 | `short` / `normal` | Screen timeouts 5 s / 10 s, or 30 s / 60 s |
 | `wifi add <ssid><TAB><password>` | Adds a Saved Network (so credentials stay out of the repo) |
 | `wifi ip <ssid> dhcp` / `wifi ip <ssid> <address>/<prefix> [gateway]` | A Saved Network's IP setting: Automatic, or Fixed. Add `try <seconds>` to go back to the previous setting unless `wifi ip keep` follows |
@@ -96,13 +97,13 @@ In **Safe Mode** (see [Crashes and Safe Mode](/dev/debug/crashes/)) only a few r
 | `ls [folder]` / `du <path>` | Lists a folder of the SD card with sizes and dates, or counts the files and bytes under a path |
 | `screenshot [seconds]` | The screen as a PNG in `/screenshots` on the card, now or after a pause to get to the screen you want (240 x 135, about 33 KB). Over the Debug Console a bare `screenshot` sends the screen to the PC instead |
 | `cp [-f] <from> <to>` / `mv [-f] <from> <to>` / `rm [-r] [-f] <path>` / `mkdir <path>` / `cancel` | What the Storage App does, with its rules: copy (folders too), move or rename, delete (`rm -r` for a folder and what's in it, as Unix has it), new folder. `-f` replaces a file that's in the way; `*` and `?` in the last part of a path (`ls`, `du`, `rm`, `cp`, `mv`) run the command for each name matched, 64 at most; a tab separates paths that hold spaces; `cancel` stops a copy or a delete |
-| `install <path>` | Update from SD with that `.ota` file, as Settings → Firmware does |
+| `install <path>` | Update from SD with that `.ota` file, as Settings → System → Firmware does |
 | `update check` / `update list` / `update status` / `update install <tag>` | The project's releases on Gitea: look at the latest, list the last ten, say what's known, or download and install one |
 | `update pretend <version>` / `update probe <host>` / `update damage cut\|flip <n>` / `update daily` | Pretend to run another version (so a release counts as an update), see whether a server's certificate is accepted, cut or damage the next download, run the daily check again |
 | `lora probe` | Finds the radio: chip, oscillator, antenna switch, DIO1 interrupt, noise floor |
 | `lora status` | Radio settings, who's listening, packet and error counters, noise floor, task stack |
 | `lora rx on` / `lora rx off` | Listens and prints each packet on the console |
-| `lora preset <name>` / `lora custom <MHz> <BW kHz> <SF> <CR> <sync hex> [preamble]` | Receive settings: a Meshtastic preset, or anything else (`lora custom 868.1 125 7 5 34 8` for LoRaWAN) |
+| `lora preset <name>` / `lora custom <MHz> <BW kHz> <SF> <CR> <sync hex> [preamble]` | Receive settings: a Meshtastic preset or `MeshCore`, or anything else (`lora custom 868.1 125 7 5 34 8` for LoRaWAN) |
 | `lora capture start` / `lora capture stop` | A LoRa Capture, as `c` in the App |
 | `lora sweep on [from MHz] [to MHz] [step kHz]` / `lora sweep off` / `lora sweep dump` | Sweep a band (863 870 100 by default), with a summary every 2 s (floor, strongest, peaks), or print the latest pass |
 | `gnss quiet on` / `gnss quiet off` | The "Pause GNSS for LoRa" setting |
@@ -16,7 +16,7 @@ Before version 0.12 this was a separate *Debug Build* with a token compiled in f

 ## On the device

-**Settings → Debug Console:**
+**Settings → System → Debug Console:**

 | Row | Does |
 |---|---|
@@ -44,7 +44,7 @@ tag = "M3"
 | Q92 | A **Radio Service** owns the SX1262: driver, bus lock, IRQ task. The LoRa Scanner uses it in M3; the Mesh Service sits on top of it in M4. |
 | Q93 | Every radio transfer takes the shared bus lock (`SPI.beginTransaction`, as the card does). DIO1's interrupt only wakes the task; no SPI in the ISR. **Done when** a Gemini page streams to the card while the Sniffer receives, with no lost packets and no card errors (`lora status` counters). |
 | Q94 | **Receive only:** the Radio Service has no transmit function in M3. It doesn't exist, rather than being unused. |
-| Q95 | Sniffer defaults: **EU868 LongFast**, 869.525 MHz, BW 250 kHz, SF 11, CR 4/5, sync word 0x2B, preamble 16 (Q19). The other Meshtastic presets are offered, plus custom settings. |
+| Q95 | Sniffer defaults: **EU868 LongFast**, 869.525 MHz, BW 250 kHz, SF 11, CR 4/5, sync word 0x2B, preamble 16 (Q19). The other Meshtastic presets are offered, plus custom settings. *Later, the default became is the MeshCore preset (869.618 MHz, BW 62.5 kHz, SF 8, CR 4/8, sync word 0x12): it is what is heard here.* |
 | Q96 | The Sniffer lists packets (time, RSSI, SNR, frequency error, length; hex dump on Enter) **and decodes the Meshtastic header**: the first 16 bytes are never encrypted (destination, sender, packet ID, hop limit and hop start, channel hash, next hop, relay node). Host-tested. Payload decryption is M4. |
 | Q97 | A Sniffer **Capture** is pcap with **LoRaTap** headers (link type 270), for Wireshark. Started by hand, Status Bar mark, its own Clean-up category, the 90% rule. |
 | Q98 | **Sweep** steps across the Region's band (863–870 MHz) in 100 kHz steps by default, reading instant RSSI: bars with peak hold, and a waterfall, Wi-Fi Tools style. Optionally CAD on the preset's frequency to tell LoRa traffic from noise. |
@@ -8,7 +8,7 @@ docs = true
 source = "docs/milestones/U1.md"
 tag = "U1"
 +++
-**Status:** in progress. Shipped: the help key (issue #69) and the key tables the website shares with it (#72), both in **v0.13.0**; the screenshot key (#83, **v0.17.0**). Not started: screen recording (#17), a Launcher of tiles (#9), themes (#10).
+**Status:** in progress. Shipped: the help key (issue #69) and the key tables the website shares with it (#72), both in **v0.13.0**; the screenshot key (#83, **v0.17.0**). The Launcher as a grid of icons (#9) and themes (#10) are done, not released yet. Not started: screen recording (#17).

 **Goal:** the interface is consistent and uncrowded: the same thing is done the same way on every screen, and the 135 pixels of height go to content.

@@ -67,3 +67,79 @@ A screenshot could only be taken by typing `screenshot` in the Shell, where "now
 **Checked on the device** (2026-10-07, with `key shot`): in the Launcher, a 33,383-byte PNG appears in `/screenshots` and is the Launcher; with the help panel open, the picture is of the panel (which now lists Fn p) and the panel stays open; on Settings > Debug Console, no file is written; back on the Settings list, one is. The test pictures were removed.

 **Not checked:** the real Fn+p on the keyboard (the mapper is host-tested); the two Toasts that refuse, which weren't looked at (one of them is on the page that mustn't be photographed); a device with no card.
+
+## The Launcher as a grid (issue #9)
+
+The Launcher was a list of names. It is now a grid of icons.
+
+| Question in the issue | Decided |
+|---|---|
+| Layout | **4 × 3** tiles of 60 × 36, so the 11 Apps are on one page. Only the selected App's name is written, on a line under the grid: a name under every tile doesn't fit 60 pixels ("LoRa Scanner"). More than 12 Apps: the rows scroll |
+| Icons | **The website's own**: its nine 16 × 16 pictures (`site/static/img/icons-dark.svg`), doubled to 32 × 32, and two drawn the same way for SSH and the Shell. 1 bit a pixel (128 bytes each, in flash). The pictures are PNGs in `assets/icons/`, named after the App's id; `scripts/make_icons.py` writes `src/ui/icons.cpp` from them and CI checks the two match |
+| Colours | **The website's**: cyan (#00dbff) on black, and the selected tile slate (#494955, the Status Bar's) on a cyan fill with notched corners. Both are RGB332 colours. The name under the grid is white |
+| Live state | **A dot** on the tile, from `App::badge()`: IRC (unread messages), GNSS (a Track recording), the LoRa Scanner (a Capture running), SSH (a session open). The Launcher asks every App on each pass and redraws when an answer changes |
+| Order | As registered, as before |
+| Shortcuts | None for now |
+| The list | Kept: **Settings > Launcher**, Grid or List. Both keep the same selection |
+
+- `GridModel` (`lib/ui`) holds the selection and the scrolling, host-tested: left and right go through every item and wrap; up and down stay in the column, and land on the last item where the last row is short.
+- An App registered without an icon shows its first letter in a frame.
+- No animation: not asked for, and not measured.
+
+## The website's colours, on every screen
+
+Every screen takes its colours from `src/ui/theme.h`, so the palette changed there, to the website's (`site/static/css/site.css`, dark side). Each is a colour the RGB332 frame buffer holds exactly.
+
+| | Was | Is |
+|---|---|---|
+| Accent | teal-blue | cyan `#00dbff` |
+| A selected row, a dialog's chosen button | darker teal, white text | cyan, dark blue text (`#000055`) |
+| Status Bar | `#202020`, which the frame buffer showed as a dull olive | slate `#494955`; what is idle on it in light grey `#b6b6aa` |
+| Muted text | grey, as the frame buffer rounded it | the same grey, exact: `#9292aa` |
+| Warning | orange | the website's orange `#ff9200` |
+| Someone wrote (unread count, a mention, a message Toast) | green | pink `#ff92ff` |
+| Good (a Fix, the quietest channel, a live task) | the same green | green `#49db55`, the one colour that isn't the website's: it has no green |
+| Text on a Toast | black | dark blue |
+
+Looked at on the device, by screenshot: the Launcher, IRC, Wi-Fi Tools (menu, channel occupancy), GNSS (position, sky), Gemini, the LoRa Scanner (Sniffer, Sweep, presets), Storage, Notes, SSH, the Shell, System, Settings and the help panel. Not looked at: dialogs, a warning or a message Toast, the SSH terminal (which keeps its own 16 ANSI colours), the Setup screens.
+
+## Themes (issue #10)
+
+Seven themes, each with a dark and a light side, chosen in **Settings > Theme** and **Settings > Light or dark**: roro9stack (the website's, the default), Catppuccin (Mocha and Latte), Dracula (and Alucard), Nord, ANSI terminal, Gruvbox, Solarized.
+
+| Question in the issue | Decided |
+|---|---|
+| Which themes | The seven above. Not the high-contrast and phosphor ones the issue suggested: ANSI terminal dark (grey and green on black) and light (black on white) come close |
+| Fonts and spacing too | No: colours only |
+| Themes from the SD card | No: built in |
+| A preview while picking | The Setting applies at once, so the Settings screen is the preview |
+| Constellation colours | From the theme (its accent, its "good", and three roles named red, yellow and violet), so they read on every background |
+| Light by day, dark by night | No |
+
+- **A palette is 14 roles** (`lib/ui/src/palette.h`): background, text, muted, faint, the bar and its idle marks, accent, what is drawn on an accent, warning, message, good, and red, yellow and violet.
+- **`theme::kText` and the others are now references** into the palette in use (`src/ui/theme.h`), so no App changed: they still read as constants. The main loop applies the palette when either Setting changes, and draws everything again.
+- **RGB332.** Every colour in the table is one the frame buffer holds exactly. The themes' own colours were rounded to those; where two roles fell together or lost contrast, one was picked by hand (Nord's accent and muted text, Gruvbox's greys, Solarized's surfaces). `test_palette` checks that every colour is exact, and 18 contrast ratios for each of the 14 palettes (text on background at 4.5 or more, the rest at 2 to 3).
+- **What it costs in fidelity:** blue has four levels, so Dracula and Nord share a dark background (#242455), which was Catppuccin's too: Catppuccin dark is on black instead (its "crust"), with that blue for its bar and its brighter accents (peach, pink, green, sky), to tell it from Dracula; Solarized light's cream becomes white, and Gruvbox's dark brown becomes a dark olive (#242400).
+- `theme [0-6] [light|dark]` on the consoles lists them or picks one.
+
+**Looked at on the device**, by screenshot: the Launcher in all 14; and in Gruvbox light, Settings, GNSS (position and sky), the Sweep, Storage, the help panel, Gemini and Wi-Fi Tools' channel occupancy. Nothing was drawn for black only.
+
+**Kept as they are:** the SSH terminal's 16 ANSI colours and its black background, the Sweep's waterfall scale, pictures, and the screen shown while the device powers off.
+
+**Not looked at:** the other 12 palettes beyond the Launcher, dialogs and Toasts in any theme but the default, the Setup screens. In Gruvbox light, the Sky view's GPS, GLONASS and BeiDou colours are three close shades of brown and red.
+
+## Settings in groups
+
+Settings had grown to 21 rows in one list. It now opens on five groups, each a short list of its own:
+
+| Group | Rows |
+|---|---|
+| This device | Long name, Short name, Region, Timezone, Sound & LED |
+| Display | Brightness, Dim after, Screen off after, Theme, Light or dark, Launcher |
+| GNSS and radio | GNSS, Pause GNSS for LoRa, Coordinates, Probe MACs |
+| Network | Wi-Fi, VPN |
+| System | Check for updates, Firmware, Debug Console, About |
+
+- Enter opens a group, Back returns to the groups with the selection on the one just left, and Back from the groups leaves Settings. An open group has its name over its rows.
+- `SettingsMenu` (`lib/apps_model`) holds the groups and which one is open; every index is into what is listed. Host-tested: every setting is in exactly one group, and no group has more rows than fit under its name.
+- The guide, the how-tos, the README, the scripts' messages and the firmware's own (the Toast for a new release, the GNSS App's hint) name the new paths: "Settings > System > Firmware". The milestone notes and the devlog keep the paths of their day.
@@ -12,7 +12,7 @@ Press **<kbd>Fn</kbd> + <kbd>h</kbd>**, on any screen: it lists the keys that wo

 ## Can I send messages over the mesh?

-**Not yet.** The LoRa Scanner **listens** to Meshtastic traffic and shows what it hears, but nothing is transmitted. A mesh messenger is the goal and is planned in two milestones, one for receiving and one for transmitting; it waits for a second node to test against.
+**Not yet.** The LoRa Scanner **listens** to Meshtastic or MeshCore traffic and shows what it hears, but nothing is transmitted. A mesh messenger is the goal and is planned in two milestones, one for receiving and one for transmitting; it waits for a second node to test against.

 ## Is this Meshtastic?

@@ -39,7 +39,7 @@ The browser flasher uses Web Serial, which Chrome and Edge have on desktop and F

 ## How do I update it?

-Three ways, all with the same signed update file: from the project's releases on the device itself (**Settings → Firmware**), from the SD card, or pushed over Wi-Fi from a PC. See [Updates](/guide/updates/) and [Install an update from the SD card](/howto/update-from-sd/).
+Three ways, all with the same signed update file: from the project's releases on the device itself (**Settings → System → Firmware**), from the SD card, or pushed over Wi-Fi from a PC. See [Updates](/guide/updates/) and [Install an update from the SD card](/howto/update-from-sd/).

 ## Is it safe to update? What if it goes wrong?

@@ -51,7 +51,7 @@ Yes: it is [open source](https://git.twis.la/twisla/roro9stack) (GPL-3.0). The d

 ## Does it phone home? What about privacy?

-**The firmware contacts the project's server once a day,** to see whether a new release exists: **Settings → Check for updates**, on by default, only when Wi-Fi is up and the clock is set. It installs nothing by itself, and you can switch it off. Besides that, the device talks to what you ask it to: the IRC server and Gemini capsules you open, DNS servers (9.9.9.9 and 1.1.1.1 by default) and time servers (pool.ntp.org and time.cloudflare.com by default), all of which you can change. There is no account, no analytics and no telemetry.
+**The firmware contacts the project's server once a day,** to see whether a new release exists: **Settings → System → Check for updates**, on by default, only when Wi-Fi is up and the clock is set. It installs nothing by itself, and you can switch it off. Besides that, the device talks to what you ask it to: the IRC server and Gemini capsules you open, DNS servers (9.9.9.9 and 1.1.1.1 by default) and time servers (pool.ntp.org and time.cloudflare.com by default), all of which you can change. There is no account, no analytics and no telemetry.

 **It listens on the network only for what you switched on:** the port that receives signed firmware updates, always; the Debug Console, the card shared with a browser and the VPN, only while you have them on. The SSH App connects out to the server you name and listens for nothing.

@@ -36,7 +36,13 @@ While you type text (a note, an IRC line, a setting), `;` `.` `,` `/` type their

 ## The Launcher

-The home screen lists the Apps. Move with the arrows, open one with <kbd>Enter</kbd>. Back inside an App returns here.
+The home screen shows the Apps as a grid of icons, four to a row, with the name of the selected one written under the grid. Move with the four arrows, open an App with <kbd>Enter</kbd>. Back inside an App returns here.
+
+Left and right go through every App and wrap around; up and down stay in the column.
+
+**An orange dot on an icon** says something is going on in that App: unread messages in IRC, a Track being recorded in GNSS, a Capture running in the LoRa Scanner, a session open in SSH.
+
+If you prefer the list of names the Launcher used to be, **Settings → Display → Launcher** switches between **Grid** and **List**. In the list, a `*` on the right stands for the dot.

 ## The Status Bar

@@ -51,7 +57,7 @@ A strip at the top of every screen: the name of the App on the left, and on the
 | bars and `W` | Wi-Fi connected, with its signal; `W?` is searching; `MON` is the Wi-Fi radio in its monitoring mode, which pauses IRC |
 | `SSH` | An [SSH session](/guide/ssh/) is open, whatever App is in front |
 | `VPN` | The [WireGuard tunnel](/guide/vpn/) is wanted; brighter once the server has answered |
-| `DBG` | The Debug Console is switched on (Settings → Debug Console); brighter while a PC is connected to it |
+| `DBG` | The Debug Console is switched on (Settings → System → Debug Console); brighter while a PC is connected to it |
 | `REC` | A GNSS Track is being recorded |
 | `CAP` | A LoRa capture is being recorded |
 | `L` | The radio is listening; it lights up for a moment on each packet. `SW` while a Sweep runs |
@@ -7,13 +7,13 @@ tag = "GNSS"
 screens = ["sky.png"]
 +++

-GNSS needs the **Cap LoRa-1262**, an antenna with a view of the sky, and **Settings → GNSS** switched **On**. Otherwise the App says `GNSS is off` (or `paused`, when "Pause GNSS for LoRa" has put the receiver on standby while the radio listens). A first fix outdoors can take a while: the App says how long it has been searching.
+GNSS needs the **Cap LoRa-1262**, an antenna with a view of the sky, and **Settings → GNSS and radio → GNSS** switched **On**. Otherwise the App says `GNSS is off` (or `paused`, when "Pause GNSS for LoRa" has put the receiver on standby while the radio listens). A first fix outdoors can take a while: the App says how long it has been searching.

 ## Position

 The first view shows the fix (`No Fix`, `2D Fix` or `3D Fix`, and how many satellites it uses), then:

- **Lat** and **Lon**, in decimal degrees or degrees, minutes and seconds (**Settings → Coordinates**);
+- **Lat** and **Lon**, in decimal degrees or degrees, minutes and seconds (**Settings → GNSS and radio → Coordinates**);
 - the **Locator**, the Maidenhead grid square;
 - **Altitude**, **Speed** and the direction you are moving;
 - **HDOP**, the horizontal precision: a smaller number is better;
@@ -13,14 +13,45 @@ The Scanner uses the **Cap LoRa-1262**. It **never transmits**: it listens and s

 The first view lists what the radio hears, newest first: the time, the RSSI (signal strength, in dBm) and the SNR (signal over noise, in dB). For a **Meshtastic** packet it also shows the sender and the receiver (the last four hex digits of their numbers) and the number of hops.

+For a **MeshCore** packet it shows what the packet is, who it concerns and how many repeaters are in its path:
+
+| Row | Is |
+|---|---|
+| `adv Brussels-R1 2h` | A node saying who it is, by its name, heard through 2 repeaters |
+| `txt a3>7f` | A private message from the node whose key starts with `a3` to the one starting with `7f` (`req`, `rsp` and `path` look the same) |
+| `Alice: hello 1h` | A message on the **public channel**, read: who says they sent it, and the start of what it says |
+| `chan #5c 1h` | A message on another channel, still encrypted; `#5c` is the channel's byte |
+| `who's there?` | Someone nearby searching for nodes (repeaters, usually) |
+| `here 18a6` | A node answering that search; `18a6` starts its key |
+| `ack`, `anon`, `trace`, `ctl` | An acknowledgement, a login, a trace, other control packets |
+
 | Key | Does |
 |---|---|
-| <kbd>Enter</kbd> | The details of a packet: the Meshtastic header, which is never encrypted, and a hex dump |
-| <kbd>p</kbd> | Picks one of the 7 Meshtastic presets allowed in EU868 (LongFast by default) |
+| <kbd>Enter</kbd> | The details of a packet: what is never encrypted (below), and a hex dump |
+| <kbd>p</kbd> | Picks what to listen to: **MeshCore** (the default), or one of the 7 Meshtastic presets allowed in EU868 |
 | <kbd>c</kbd> | Starts or stops a **capture** |
 | <kbd>Tab</kbd> | Switches to the Sweep |

-The Scanner shows the header and the bytes; it does not decrypt the message itself, which Meshtastic encrypts with the channel's key.
+The Scanner shows the header and the bytes. Meshtastic and MeshCore both encrypt the message itself, and the Scanner reads only one kind: what is said on MeshCore's public channel, whose key is published.
+
+**One network at a time.** The radio listens on one frequency with one setting, and the two networks share neither: on a Meshtastic preset no MeshCore packet is heard, and the other way round.
+
+### MeshCore
+
+The **MeshCore** preset is the setting its networks use in Europe, "EU/UK (Narrow)": 869.618 MHz, 62.5 kHz wide, SF8, coding rate 4/8. A network set up differently needs `lora custom` in the [Shell](/guide/shell/).
+
+<kbd>Enter</kbd> on a MeshCore packet shows:
+
+- what it is and how it travels: **flood** (every repeater passes it on, and adds itself to the path) or **direct** (it carries the route to follow);
+- the path, one repeater a hop, each named by the first byte of its key;
+- for an **advert**, which is signed and never encrypted: the node's name, its kind (chat node, repeater, room server, sensor), the start of its key, and its position if it gives one;
+- for a **search** and its **answers**, also in clear: what kind of node is wanted; and in an answer the node's kind, the start of its key, and how well it heard the search;
+- for a message on the **public channel**: the name the sender gives, when the sender's clock says it was sent (UTC), and the text;
+- for any other message: the first byte of the sender's and the receiver's keys, or the channel's byte, and how many bytes are encrypted.
+
+The public channel is the one every MeshCore node starts with, and its key is the same everywhere, so anyone listening can read it. Private messages and other channels stay encrypted. The sender's name is part of the message and is not signed: anyone can write any name. Letters outside plain ASCII (accents, emoji) show as `?`.
+
+A byte is all a packet says about who it is from: two nodes can share it. The name comes only with a node's advert, which a node sends now and then, so a quiet network can take a while to show its names.

 ## Capture

@@ -32,7 +63,7 @@ A capture records packets into a **pcap** file with LoRaTap headers in `/capture

 ## The GNSS receiver raises the noise

-The GNSS receiver on the same Cap makes the radio's noise floor about **8 dB** worse while it runs. **Settings → Pause GNSS for LoRa** (off by default) puts the receiver on standby while the radio listens, except while a Track is being recorded.
+The GNSS receiver on the same Cap makes the radio's noise floor about **8 dB** worse while it runs. **Settings → GNSS and radio → Pause GNSS for LoRa** (off by default) puts the receiver on standby while the radio listens, except while a Track is being recorded.

 ## The keys, as the device lists them

@@ -6,23 +6,51 @@ weight = 11
 tag = "Settings"
 +++

-Move with the arrows. On a toggle, a choice or a slider, left and right change the value; <kbd>Enter</kbd> opens a text field or a list of choices, or a page marked `>`. Back leaves.
+Settings opens on five **groups**. <kbd>Enter</kbd> opens a group, and Back returns to the groups; Back from the groups leaves Settings.
+
+Inside a group, move with the arrows. On a toggle, a choice or a slider, left and right change the value; <kbd>Enter</kbd> opens a text field or a list of choices, or a page marked `>`.
+
+### This device

 | Setting | What it is |
 |---|---|
 | **Long name**, **Short name** | The names you gave in the first-start Setup (up to 39 bytes, and up to 4 characters) |
 | **Region** | The regulatory region; EU868 |
 | **Timezone** | For the clock and the dates in file names |
+| **Sound & LED** | The beep and the flash on a [Toast](/guide/basics/) |
+
+### Display
+
+| Setting | What it is |
+|---|---|
 | **Brightness** | A slider |
 | **Dim after**, **Screen off after** | Screen timeouts. Dimming must come before the screen turns off |
-| **Sound & LED** | The beep and the flash on a [Toast](/guide/basics/) |
+| **Theme** | The colours of every screen: **roro9stack** (the website's), **Catppuccin**, **Dracula**, **Nord**, **ANSI terminal**, **Gruvbox** or **Solarized** |
+| **Light or dark** | Which side of the theme: every one has both |
+| **Launcher** | The home screen as a **Grid** of icons or a **List** of names (see [The basics](/guide/basics/#the-launcher)) |
+
+### GNSS and radio
+
+| Setting | What it is |
+|---|---|
 | **GNSS** | Switches the receiver on and off (see [GNSS](/guide/gnss/)) |
 | **Pause GNSS for LoRa** | Puts the receiver on standby while the radio listens (see [LoRa Scanner](/guide/lora-scanner/)) |
 | **Coordinates** | Decimal degrees, or degrees, minutes and seconds |
+| **Probe MACs** | Whether the Wi-Fi Tools' logs of probe requests keep the addresses as they are (**Raw**) or **Pseudonymised** |
+
+### Network
+
+| Setting | What it is |
+|---|---|
 | **Wi-Fi** | The page below |
+| **VPN** | A WireGuard tunnel: its switch, "Start with Wi-Fi", and importing its configuration from the card. See [VPN](/guide/vpn/) |
+
+### System
+
+| Setting | What it is |
+|---|---|
 | **Check for updates** | Once a day, see [Updates](/guide/updates/) |
 | **Firmware** | The page described in [Updates](/guide/updates/) |
-| **VPN** | A WireGuard tunnel: its switch, "Start with Wi-Fi", and importing its configuration from the card. See [VPN](/guide/vpn/) |
 | **Debug Console** | Off unless you switch it on. It lets a PC on the same network read the device's console and drive it, with a token shown on this page: see [the developer docs](/dev/debug/switch-it-on/). Leave it off if that means nothing to you |
 | **About** | The firmware version, the node number, battery, memory, uptime, clock and licence |

@@ -48,3 +76,11 @@ Two DNS servers (9.9.9.9 and 1.1.1.1 by default), used on Fixed networks, or on
 What <kbd>Fn</kbd> + <kbd>h</kbd> shows on these screens. These tables are generated from the firmware's own lists, so they are always the current ones.

 {{ keys(scopes=["settings", "settings-choice", "wifi", "wifi-servers", "wifi-network", "wifi-status", "wifi-scan", "wifi-name", "vpn", "debug-console"]) }}
+
+## Themes
+
+A theme changes the colours and nothing else: the fonts and the layout stay. It applies at once, to every App, and is kept across restarts.
+
+The screen shows **256 colours**, so a theme here is the nearest the screen can do to the palette it is named after, not an exact copy: pale backgrounds turn white or cream, and dark ones turn a deep blue or olive. Each theme is checked for contrast after that rounding.
+
+Three things keep their own colours whatever the theme: the SSH terminal (the 16 colours a remote program asks for), the Sweep's waterfall (its colours are a scale of signal strength), and pictures.
@@ -36,7 +36,7 @@ The App says why when it refuses.

 - **Text** (`.txt`, `.log`, `.gmi`, `.csv`, and anything that looks like text): only a screenful is read from the card, so a file of any size opens at once, and logs open at the end. Up and down move a line, left and right a page, <kbd>t</kbd> and <kbd>b</kbd> go to the top and the end, and <kbd>e</kbd> edits it, whatever its size (as in [Notes](/guide/notes/)).
 - **Pictures** (`.png`, `.jpg`, `.bmp`, `.gif`): see [Pictures](#pictures) below.
- **Captures** (`.pcap`): the packets as the [LoRa Scanner](/guide/lora-scanner/) lists them; <kbd>Enter</kbd> shows one with its Meshtastic header and bytes.
+- **Captures** (`.pcap`): the packets as the [LoRa Scanner](/guide/lora-scanner/) lists them; <kbd>Enter</kbd> shows one with its Meshtastic or MeshCore header and bytes.
 - **Tracks** (`.gpx`): the number of points, the start, the duration and the distance.
 - **Update files** (`.ota`): the version, and whether the file would install: it is checked as an install checks it, signature and contents, without writing anything. <kbd>Enter</kbd> then installs it (see [Updates](/guide/updates/)).
 - **Anything else:** a hex dump.
@@ -9,7 +9,7 @@ screens = ["update.png"]

 Every update is one **signed file** (`.ota`). The device installs only a file signed with the project's key, so it cannot be tricked into installing anything else, whichever way the file arrives.

-## Settings → Firmware
+## Settings → System → Firmware

 The page shows the **version** running, its **status**, the address to **push updates to** over Wi-Fi, and:

@@ -21,7 +21,7 @@ An install needs Wi-Fi if it is a download. The new firmware is checked before a

 ## Check for updates

-**Settings → Check for updates** is on by default. Once a day, with Wi-Fi up and the clock set, the device looks at the latest release and says `v0.11.0 is out: see Settings > Firmware`, once per version. It installs **nothing** by itself, and it does not announce a version that already failed and rolled back on this device.
+**Settings → System → Check for updates** is on by default. Once a day, with Wi-Fi up and the clock set, the device looks at the latest release and says `v0.11.0 is out: see Settings > System > Firmware`, once per version. It installs **nothing** by itself, and it does not announce a version that already failed and rolled back on this device.

 ## Probation and Rollback

@@ -15,14 +15,14 @@ You need a WireGuard server, yours or a provider's, and the configuration file i

 1. On the server, make a configuration for a new client, as you would for a phone.
 2. Copy the file to the SD card as **`/vpn/wg0.conf`**.
-3. On the device: **Settings → VPN → Import /vpn/wg0.conf**.
+3. On the device: **Settings → Network → VPN → Import /vpn/wg0.conf**.
 4. Say yes when it offers to **delete the file**: the configuration is now stored in the device, and the file on the card still holds the private key in clear.

 If the file can't be used, the page says which line and why. The key itself is never shown, anywhere, once imported.

 ## Using it

-**Settings → VPN** has a switch. `VPN` appears in the [Status Bar](/guide/basics/#the-status-bar) while the tunnel is wanted, and turns bright once the server has answered. The page shows the state, the server, this device's address in the tunnel, what goes through it, and how long ago the server was last heard.
+**Settings → Network → VPN** has a switch. `VPN` appears in the [Status Bar](/guide/basics/#the-status-bar) while the tunnel is wanted, and turns bright once the server has answered. The page shows the state, the server, this device's address in the tunnel, what goes through it, and how long ago the server was last heard.

 - **The switch is for now.** It doesn't survive a restart.
 - **Start with Wi-Fi**, off by default, starts the tunnel whenever Wi-Fi connects.
@@ -9,12 +9,12 @@ tag = "LoRa Scanner"
 The radio only **listens**: nothing is transmitted. You need the **Cap LoRa-1262** and an **SD card**.

 1. **Open the LoRa Scanner.** The Status Bar shows `L` while the radio listens.
-2. **Pick a preset with <kbd>p</kbd>.** The Scanner offers the 7 Meshtastic presets allowed in EU868; LongFast is the default.
+2. **Pick a preset with <kbd>p</kbd>.** The Scanner offers MeshCore (the default) and the 7 Meshtastic presets allowed in EU868.
 3. **Wait for packets.** Each line is a packet: the time, RSSI and SNR, and for a Meshtastic packet the sender, the receiver and the hops. <kbd>Enter</kbd> shows a packet's header and its bytes.
 4. **Press <kbd>c</kbd> to start a capture.** The Status Bar shows `CAP`. It keeps recording with the App closed.
 5. **Press <kbd>c</kbd> again to stop.**
 6. **Get the file.** It is in `/captures/lora/`, a `.pcap` with LoRaTap headers. In the [Storage App](/guide/storage/) you can already look at its packets; on a computer, open it in Wireshark.

-**What you will and will not see.** Meshtastic's header is never encrypted, so who sent a packet and how far it hopped is visible. The message itself is encrypted with the channel's key, and the Scanner does not decrypt it.
+**What you will and will not see.** Meshtastic's header is never encrypted, so who sent a packet and how far it hopped is visible. The message itself is encrypted with the channel's key, and the Scanner does not decrypt it. MeshCore's public channel is the exception: its key is published, and the Scanner [reads what is said there](/guide/lora-scanner/#meshcore).

 **Hearing nothing is normal** if no node is in range, or if the preset does not match what the nodes nearby use. The [Sweep](/guide/lora-scanner/) (<kbd>Tab</kbd>) shows whether anything is on the air at all across 863 to 870 MHz.
@@ -6,14 +6,14 @@ weight = 4
 tag = "Wi-Fi"
 +++

-1. **Add the network first.** In **Settings → Wi-Fi**, choose **Add a network**, pick it and type the password. (A hidden network has its own entry, which asks for the name first.)
+1. **Add the network first.** In **Settings → Network → Wi-Fi**, choose **Add a network**, pick it and type the password. (A hidden network has its own entry, which asks for the name first.)
 2. **Open the network's page:** <kbd>Enter</kbd> on it in the list of saved networks.
 3. **Set *IP address* to *Fixed*.** The address, the prefix and the gateway start from what the network is giving the device at that moment, so you only change what is wrong.
   - **Address:** four numbers, like `10.39.39.13`.
   - **Prefix:** 1 to 30. 24 is 255.255.255.0.
   - **Gateway:** optional; empty means none.
 4. **Leave the page.** The setting is checked and applied then; a bad address is refused with the reason.
-5. **Check it.** Back in **Settings → Wi-Fi**, <kbd>Enter</kbd> on **Status** shows the address, the mask, the gateway, the DNS and NTP servers, and where each came from.
+5. **Check it.** Back in **Settings → Network → Wi-Fi**, <kbd>Enter</kbd> on **Status** shows the address, the mask, the gateway, the DNS and NTP servers, and where each came from.

 ## DNS and time

@@ -8,7 +8,7 @@ tag = "GNSS"

 You need the **Cap LoRa-1262**, an **SD card**, and a place with a view of the sky.

-1. **Switch the receiver on:** **Settings → GNSS** to *On*. The Status Bar shows `G` once it is searching.
+1. **Switch the receiver on:** **Settings → GNSS and radio → GNSS** to *On*. The Status Bar shows `G` once it is searching.
 2. **Open the GNSS App** and wait for a fix. The first line says `Searching: n in view` and how long it has been, then `3D Fix, n of m satellites`. The first fix outdoors can take a while.
 3. **The clock must be set.** A fix sets it, and so does Wi-Fi. A Track will not start without one: the App says `Waiting for the time`.
 4. **Press <kbd>r</kbd>.** The bottom line says `REC`, with the number of points and how long it has been going, and the Status Bar shows `REC`. You can leave the App: the Track keeps recording.
@@ -14,5 +14,5 @@ tag = "Screen"

 - It needs an SD card.
 - The files are PNGs of 240 by 135 pixels, named by date and time.
- **It refuses on Settings → Debug Console**, the page that shows the console's token: a picture of it would be a copy of the token.
+- **It refuses on Settings → System → Debug Console**, the page that shows the console's token: a picture of it would be a copy of the token.
 - From the [Shell](/guide/shell/), `screenshot 5` takes the picture five seconds later, for a screen you can't press keys on.
@@ -8,7 +8,7 @@ tag = "Updates"

 1. **Get the update file.** On the [Downloads page](/downloads/), take the `.ota` file of the release you want: `roro9stack-<version>.ota`. Every release has one.
 2. **Copy it to `/updates`** on the SD card, from a computer. If the folder is not there, create it. (With the Cardputer on USB, a developer can also send it with `scripts/sd_put.sh`; see the [README](https://git.twis.la/twisla/roro9stack#firmware-updates-over-wi-fi-ota).)
-3. **Put the card in the Cardputer.** Open **Settings → Firmware.** Under *On the SD card* the file is listed. If it says `No .ota files in /updates`, the name or the folder is wrong.
+3. **Put the card in the Cardputer.** Open **Settings → System → Firmware.** Under *On the SD card* the file is listed. If it says `No .ota files in /updates`, the name or the folder is wrong.
 4. **Press Enter on the file,** then **Install**. The device checks the signature and the contents before it writes anything, installs, and restarts. It waits up to 60 seconds if you are typing.
 5. **After the restart** the new firmware is on **Probation**: if it crashes or cannot get Wi-Fi back within 3 minutes, the device goes back to the previous version by itself and says so.

@@ -12,7 +12,7 @@ You need a WireGuard server, and a **client configuration** made on it for the C
 2. On the Cardputer, open **Storage** and press <kbd>w</kbd>; open the page on the phone ([Move files with your phone](/howto/phone-files/)).
 3. In the page, tap **New folder**, name it `vpn`, go into it, and **upload `wg0.conf`**.
 4. On the Cardputer, press Back to stop sharing.
-5. Open **Settings → VPN → Import /vpn/wg0.conf**. You should see "Imported", and a question: **delete the file**. Say yes: the configuration is now in the device, and the file still holds the private key in clear.
+5. Open **Settings → Network → VPN → Import /vpn/wg0.conf**. You should see "Imported", and a question: **delete the file**. Say yes: the configuration is now in the device, and the file still holds the private key in clear.
 6. Switch **VPN** to On. `VPN` appears in the Status Bar, and turns bright once the server has answered, usually within seconds. The page says "It is up".
 7. To have it start by itself, switch on **Start with Wi-Fi**.

@@ -5,7 +5,7 @@
 num = "01"
 tag = "LoRa Scanner"
 title = "See what is on the air"
-text = "Lists every packet it hears with time, RSSI, SNR, sender and hops, reading the Meshtastic header. A Sweep shows signal strength from 863 to 870 MHz. Capture to a pcap for Wireshark."
+text = "Lists every packet it hears with time, RSSI, SNR, sender and hops, reading the Meshtastic or MeshCore header. A Sweep shows signal strength from 863 to 870 MHz. Capture to a pcap for Wireshark."
 fact = "Only listens, never transmits"
 icon = 1

@@ -36,7 +36,7 @@ rows = [
 id = "launcher"
 title = "The Launcher"
 rows = [
-    ["; .", "up, down"],
+    ["; . , /", "move"],
    ["Enter", "open the App"],
 ]

@@ -206,7 +206,7 @@ title = "LoRa Scanner, the packets"
 rows = [
    ["; .", "up, down"],
    ["Enter", "the packet's details"],
-    ["p", "pick a Meshtastic preset"],
+    ["p", "pick a preset"],
    ["c", "start a Capture, or stop it"],
    ["Tab", "the Sweep"],
 ]
@@ -488,8 +488,9 @@ id = "settings"
 title = "Settings"
 rows = [
    ["; .", "up, down"],
-    ["Enter", "edit, or open the page"],
+    ["Enter", "open the group or the page, or edit"],
    [", /", "change a switch or a slider"],
+    ["`", "back to the groups"],
 ]

 [[scope]]
@@ -11,7 +11,7 @@
  </header>

  <div class="prose">
-    <p>Each release has a <strong>signed update file</strong> (<code>.ota</code>: copy it to <code>/updates</code> on the SD card and install it from Settings → Firmware or the Storage App, or push it over Wi-Fi), a <strong>factory image</strong> (<code>-factory.bin</code>, the whole flash at offset 0 for a first install over USB), the <strong>symbols</strong> (<code>.elf.gz</code>, to decode a crash report) and <code>SHA256SUMS</code>.</p>
+    <p>Each release has a <strong>signed update file</strong> (<code>.ota</code>: copy it to <code>/updates</code> on the SD card and install it from Settings → System → Firmware or the Storage App, or push it over Wi-Fi), a <strong>factory image</strong> (<code>-factory.bin</code>, the whole flash at offset 0 for a first install over USB), the <strong>symbols</strong> (<code>.elf.gz</code>, to decode a crash report) and <code>SHA256SUMS</code>.</p>
  </div>

  {% if releases %}
@@ -15,7 +15,7 @@

 namespace roro {

-// Settings → Debug Console (ADR 0010): the switch, where to connect, and the token, which is shown
+// Settings → System → Debug Console (ADR 0010): the switch, where to connect, and the token, which is shown
 // here and nowhere else. Switching on makes a token if there's none; a new one, or one typed by
 // hand, ends the connection of whoever holds the old one.
 class DebugConsolePage {
@@ -264,10 +264,9 @@ void FileViewer::openPacket(int index) {
    if (tap) {
        std::snprintf(line, sizeof line, "%.0f dBm, SNR %.1f dB, noise %.0f", rx.rssi, rx.snr, rx.noiseFloor);
        details_.push_back(line);
-        std::snprintf(line, sizeof line, "%.4f MHz, SF%u, %.0f kHz", rx.frequencyHz / 1e6, rx.spreadingFactor, rx.bandwidthKHz);
+        std::snprintf(line, sizeof line, "%.4f MHz, SF%u, %g kHz", rx.frequencyHz / 1e6, rx.spreadingFactor, rx.bandwidthKHz);
        details_.push_back(line);
-        if (rx.syncWord == meshtastic::kSyncWord)
-            for (auto& l : lora::headerLines(body + skip, have - skip)) details_.push_back(l);
+        for (auto& l : lora::headerLines(body + skip, have - skip, lora::protocolOf(rx.syncWord))) details_.push_back(l);
    }
    for (auto& l : lora::hexDump(body + skip, have - skip)) details_.push_back(l);
    if (have < r.length) details_.push_back("(the first bytes only)");
@@ -391,7 +390,7 @@ void FileViewer::refresh() {
            size_t have = std::min<size_t>(r.length, n - files::kPcapRecordSize);
            if (tap && files::parseLoraTap(body, have, rx)) {
                shown_.push_back(lora::row({body + lora::kLoraTapSize, have - lora::kLoraTapSize, rx.rssi, rx.snr, true,
-                                            rx.syncWord == meshtastic::kSyncWord},
+                                            lora::protocolOf(rx.syncWord)},
                                           clockTime(r.seconds)));
            } else {
                shown_.push_back(clockTime(r.seconds) + "  " + std::to_string(r.length) + " bytes");
@@ -18,7 +18,7 @@

 namespace roro {

-// Settings → Firmware: the running version and its Probation, where to push Firmware Updates, the
+// Settings → System → Firmware: the running version and its Probation, where to push Firmware Updates, the
 // project's releases on Gitea (the latest, and the ten before it), and the Update Files on the SD
 // card (in /updates) to install from.
 class FirmwarePage {
@@ -534,7 +534,7 @@ void GeminiApp::drawLine(Canvas& c, size_t i, int firstRow, int y, int rowsLeft)
    for (int r = firstRow; r < static_cast<int>(rows.size()) && r - firstRow < rowsLeft; r++) {
        int ry = y + (r - firstRow) * theme::kLineHeight;
        if (isSelected) c.fillRect(0, ry, theme::kWidth - 3, theme::kLineHeight, theme::kSelection);
-        c.setTextColor(isSelected ? theme::kText : st.color);
+        c.setTextColor(isSelected ? theme::kOnAccent : st.color);
        std::string text = rows[r];
        if (g.type == LineType::Preformatted) text = hscroll_ < static_cast<int>(text.size()) ? text.substr(hscroll_) : "";
        c.drawString(text.c_str(), kMargin, ry + 1);
@@ -17,14 +17,14 @@ using namespace gnss;

 namespace {

-// One colour per constellation, readable in the 8-bit frame buffer.
+// One colour per constellation, from the theme: readable on its background.
 uint16_t colorOf(Constellation c) {
    switch (c) {
        case Constellation::Gps: return theme::kAccent;
-        case Constellation::Glonass: return 0xF8C8;  // red
-        case Constellation::Galileo: return theme::kMessage;
-        case Constellation::BeiDou: return 0xFEA0;   // yellow
-        case Constellation::Qzss: return 0xC99F;     // violet
+        case Constellation::Glonass: return theme::kRed;
+        case Constellation::Galileo: return theme::kGood;
+        case Constellation::BeiDou: return theme::kYellow;
+        case Constellation::Qzss: return theme::kViolet;
        default: return theme::kText;
    }
 }
@@ -76,7 +76,7 @@ void GnssApp::draw(Canvas& c) {
        c.drawString(held ? "GNSS is paused" : "GNSS is off", 4, area.y + 4);
        c.setFont(&fonts::body);
        c.setTextColor(theme::kMuted);
-        c.drawString(held ? "The LoRa radio is listening, and" : "Settings > GNSS turns it on.", 4, area.y + 22);
+        c.drawString(held ? "The LoRa radio is listening, and" : "On: Settings > GNSS and radio > GNSS", 4, area.y + 22);
        if (held) c.drawString("Settings pauses GNSS for it.", 4, area.y + 22 + theme::kLineHeight);
        return;
    }
@@ -96,7 +96,7 @@ void GnssApp::drawPosition(Canvas& c) {
    char line[64];

    c.setFont(&fonts::bold);
-    c.setTextColor(s.fix == FixType::None ? theme::kWarning : theme::kMessage);
+    c.setTextColor(s.fix == FixType::None ? theme::kWarning : theme::kGood);
    if (!gnss_.receiving(now)) std::snprintf(line, sizeof line, "No data from the receiver");
    else if (s.fix == FixType::None)
        std::snprintf(line, sizeof line, "Searching: %u in view, %s", (unsigned)s.satellites.size(),
@@ -155,10 +155,10 @@ void GnssApp::drawSky(Canvas& c) {

    // The sky from above: horizon, 30° and 60° elevation rings, north up.
    c.drawCircle(cx, cy, radius, theme::kMuted);
-    c.drawCircle(cx, cy, radius * 2 / 3, 0x4208);
-    c.drawCircle(cx, cy, radius / 3, 0x4208);
-    c.drawFastHLine(cx - radius, cy, 2 * radius, 0x4208);
-    c.drawFastVLine(cx, cy - radius, 2 * radius, 0x4208);
+    c.drawCircle(cx, cy, radius * 2 / 3, theme::kFaint);
+    c.drawCircle(cx, cy, radius / 3, theme::kFaint);
+    c.drawFastHLine(cx - radius, cy, 2 * radius, theme::kFaint);
+    c.drawFastVLine(cx, cy - radius, 2 * radius, theme::kFaint);
    c.setFont(&fonts::small);
    c.setTextColor(theme::kMuted);
    c.setTextDatum(middle_center);
@@ -201,7 +201,7 @@ void GnssApp::drawSky(Canvas& c) {
        c.drawString("No satellites", x, y);
        y += theme::kLineHeight;
    }
-    c.setTextColor(s.fix == FixType::None ? theme::kWarning : theme::kMessage);
+    c.setTextColor(s.fix == FixType::None ? theme::kWarning : theme::kGood);
    c.drawString(fixLabel(s.fix), x, y + 4);
    c.setFont(&fonts::small);
    c.setTextColor(theme::kMuted);
@@ -18,6 +18,7 @@ class GnssApp : public App {
    void update(uint32_t nowMs) override;
    void draw(Canvas& c) override;
    void help(std::vector<KeyHelp>& out) const override;
+    bool badge() const override { return gnss_.tracking(); }

   private:
    void drawPosition(Canvas& c);
@@ -26,6 +26,7 @@ class IrcApp : public App {
    void draw(Canvas& c) override;
    void help(std::vector<KeyHelp>& out) const override;
    const char* helpTitle() const override;
+    bool badge() const override { return irc_.totalUnread() > 0; }

   private:
    enum class Page { Chat, Settings };
@@ -1,27 +1,111 @@
 #include "launcher_app.h"

+#include "ui/fonts.h"
+#include "ui/icons.h"
 #include "ui/widgets.h"

 namespace roro {

-void LauncherApp::onEnter() { list_.setCount(static_cast<int>(manager_->visibleApps().size())); }
+void LauncherApp::onEnter() {
+    int count = static_cast<int>(manager_->visibleApps().size());
+    list_.setCount(count);
+    grid_.setCount(count);
+    badges_ = badges();
+}

 bool LauncherApp::onKey(const KeyEvent& e) {
+    bool list = asList();
    switch (e.key) {
-        case Key::Up: list_.up(); break;
-        case Key::Down: list_.down(); break;
+        case Key::Up: list ? list_.up() : grid_.up(); break;
+        case Key::Down: list ? list_.down() : grid_.down(); break;
+        case Key::Left:
+            if (list) return false;
+            grid_.left();
+            break;
+        case Key::Right:
+            if (list) return false;
+            grid_.right();
+            break;
        case Key::Select:
            if (list_.selected() >= 0) manager_->open(manager_->visibleApps()[list_.selected()]->id);
            return true;
        default: return false;
    }
+    // The view that didn't move follows.
+    if (list) grid_.select(list_.selected());
+    else list_.select(grid_.selected());
    requestRedraw();
    return true;
 }

-void LauncherApp::draw(Canvas& c) {
+uint32_t LauncherApp::badges() const {
+    uint32_t bits = 0;
    auto apps = manager_->visibleApps();
-    widgets::list(c, list_, theme::kContent, [&](int i) { return std::string(apps[i]->title); });
+    for (size_t i = 0; i < apps.size() && i < 32; ++i)
+        if (apps[i]->app->badge()) bits |= 1u << i;
+    return bits;
+}
+
+void LauncherApp::update(uint32_t) {
+    uint32_t now = badges();
+    if (now == badges_) return;
+    badges_ = now;
+    requestRedraw();
+}
+
+void LauncherApp::draw(Canvas& c) {
+    if (!asList()) return drawGrid(c);
+    auto apps = manager_->visibleApps();
+    widgets::list(c, list_, theme::kContent, [&](int i) { return std::string(apps[i]->title); },
+                  [&](int i) { return std::string(badges_ & (1u << i) ? "*" : ""); });
+}
+
+void LauncherApp::drawGrid(Canvas& c) {
+    using namespace theme;
+    auto apps = manager_->visibleApps();
+    int selected = grid_.selected();
+    for (int row = 0; row < kRows; ++row) {
+        for (int col = 0; col < kCols; ++col) {
+            int i = (grid_.firstVisibleRow() + row) * kCols + col;
+            if (i >= static_cast<int>(apps.size())) break;
+            int x = kContent.x + col * kTileW, y = kContent.y + row * kTileH;
+            int ix = x + (kTileW - icons::kSize) / 2, iy = y + (kTileH - icons::kSize) / 2;
+            // As on the website: cyan on black, and the chosen one on a cyan tile with notched corners,
+            // in the Status Bar's slate.
+            uint16_t ink = i == selected ? kFaint : kAccent;
+            if (i == selected) {
+                int tx = ix - 6, tw = icons::kSize + 12;
+                c.fillRect(tx + 4, y, tw - 8, kTileH, kAccent);
+                c.fillRect(tx + 2, y + 2, tw - 4, kTileH - 4, kAccent);
+                c.fillRect(tx, y + 4, tw, kTileH - 8, kAccent);
+            }
+            if (apps[i]->icon) {
+                c.drawBitmap(ix, iy, apps[i]->icon, icons::kSize, icons::kSize, ink);
+            } else {  // an App without a picture: its first letter, framed
+                c.drawRect(ix + 2, iy + 2, icons::kSize - 4, icons::kSize - 4, ink);
+                c.setFont(&fonts::large);
+                c.setTextColor(ink);
+                c.setTextDatum(middle_center);
+                c.drawString(std::string(1, apps[i]->title[0]).c_str(), ix + icons::kSize / 2, iy + icons::kSize / 2);
+            }
+            if (badges_ & (1u << i)) {  // a square dot on the icon's corner, with a margin to stand out from it
+                c.fillRect(ix + icons::kSize - 6, iy - 1, 10, 10, i == selected ? kAccent : kBackground);
+                c.fillRect(ix + icons::kSize - 4, iy + 1, 6, 6, kWarning);
+            }
+        }
+    }
+    // More rows than fit: where these are among them.
+    if (grid_.rows() > kRows) {
+        int h = kRows * kTileH, barH = h * kRows / grid_.rows();
+        c.fillRect(kContent.x + kContent.w - 2, kContent.y + (h - barH) * grid_.firstVisibleRow() / (grid_.rows() - kRows), 2, barH, kMuted);
+    }
+    if (selected >= 0) {
+        c.setFont(&fonts::bold);
+        c.setTextColor(kText);
+        c.setTextDatum(top_center);
+        c.drawString(apps[selected]->title, kContent.x + kContent.w / 2, kContent.y + kRows * kTileH + 1);
+    }
+    c.setTextDatum(top_left);
 }

 }  // namespace roro
@@ -3,23 +3,40 @@
 #include "app.h"
 #include "app_keys.h"
 #include "app_manager.h"
+#include "grid_model.h"
 #include "list_model.h"
+#include "settings.h"
 #include "ui/theme.h"

 namespace roro {

-// Home screen: lists the visible Apps; Select opens one.
+// Home screen: the visible Apps as a grid of icons, with the selected one's name under it, or as
+// a list of names (Settings > Display > Launcher). Select opens one. An App with something going on has a
+// dot on its tile (App::badge, issue #9).
 class LauncherApp : public App {
   public:
    void setManager(AppManager& manager) { manager_ = &manager; }
+    void setSettings(const Settings& settings) { settings_ = &settings; }
    void onEnter() override;
    bool onKey(const KeyEvent& e) override;
+    void update(uint32_t nowMs) override;
    void draw(Canvas& c) override;
    void help(std::vector<KeyHelp>& out) const override { keys::add(out, keys::kLauncher); }

   private:
+    static constexpr int kCols = 4, kRows = 3;
+    static constexpr int kTileW = theme::kWidth / kCols, kTileH = 36;
+
+    bool asList() const { return settings_ && settings_->getBool(Setting::LauncherList); }
+    uint32_t badges() const;  // one bit a visible App
+    void drawGrid(Canvas& c);
+
    AppManager* manager_ = nullptr;
+    const Settings* settings_ = nullptr;
+    // One selection, kept in both: the view can change in the Settings.
    ListModel list_{theme::kContent.h / theme::kLineHeight};
+    GridModel grid_{kCols, kRows};
+    uint32_t badges_ = 0;
 };

 }  // namespace roro
@@ -7,7 +7,7 @@
 #include <cstdio>
 #include <ctime>

-#include "meshtastic_presets.h"
+#include "scan_presets.h"
 #include "packet_view.h"
 #include "sweep_view.h"
 #include "ui/canvas.h"
@@ -21,8 +21,8 @@ constexpr uint32_t kMessageMs = 4000;
 }

 void LoraScannerApp::onEnter() {
-    int i = std::clamp<int>(settings_.getInt(Setting::LoraPreset), 0, meshtastic::kEu868PresetCount - 1);
-    const meshtastic::Preset& p = meshtastic::kEu868Presets[i];
+    int i = std::clamp<int>(settings_.getInt(Setting::LoraPreset), 0, lora::scanPresetCount() - 1);
+    lora::ScanPreset p = lora::scanPreset(i);
    if (std::string(radio_.config().name) != p.name) radio_.setPreset(p);
    radio_.listen(RadioService::App, true);
    view_ = View::Packets;
@@ -48,7 +48,7 @@ void LoraScannerApp::showSweep(bool on) {
    requestRedraw();
 }

-bool LoraScannerApp::meshtasticSettings() const { return radio_.config().syncWord == meshtastic::kSyncWord; }
+lora::Protocol LoraScannerApp::protocol() const { return lora::protocolOf(radio_.config().syncWord); }

 void LoraScannerApp::say(const std::string& text) {
    message_ = text;
@@ -83,8 +83,8 @@ bool LoraScannerApp::onKey(const KeyEvent& e) {
        else if (e.key == Key::Select) {
            int i = presets_.selected();
            settings_.setInt(Setting::LoraPreset, i);
-            radio_.setPreset(meshtastic::kEu868Presets[i]);
-            say(std::string("Listening on ") + meshtastic::kEu868Presets[i].name);
+            radio_.setPreset(lora::scanPreset(i));
+            say(std::string("Listening on ") + lora::scanPreset(i).name);
            view_ = View::Packets;
        } else if (e.key == Key::Back) view_ = View::Packets;
        else return true;
@@ -104,7 +104,7 @@ bool LoraScannerApp::onKey(const KeyEvent& e) {
        return true;
    }
    if (e.key == Key::Char && (e.ch == 'p' || e.ch == 'P')) {
-        presets_.setCount(meshtastic::kEu868PresetCount);
+        presets_.setCount(lora::scanPresetCount());
        presets_.select(settings_.getInt(Setting::LoraPreset));
        view_ = View::Presets;
        requestRedraw();
@@ -133,8 +133,8 @@ void LoraScannerApp::openDetails() {
    details_.push_back(line);
    std::snprintf(line, sizeof line, "%.4f MHz, off by %.0f Hz", p.rx.frequencyHz / 1e6, p.frequencyError);
    details_.push_back(line);
-    if (meshtasticSettings())
-        for (auto& l : lora::headerLines(p.data, p.len)) details_.push_back(l);
+    if (p.crcOk)
+        for (auto& l : lora::headerLines(p.data, p.len, lora::protocolOf(p.rx.syncWord))) details_.push_back(l);
    for (auto& l : lora::hexDump(p.data, p.len)) details_.push_back(l);
    detailsTop_ = 0;
    view_ = View::Details;
@@ -238,10 +238,12 @@ void LoraScannerApp::drawPackets(Canvas& c) {
        c.setFont(&fonts::body);
        c.setTextColor(theme::kMuted);
        c.drawString("No packets yet.", 4, list.y + 4);
-        c.drawString(meshtasticSettings() ? "Meshtastic nodes in range show here." : "Custom settings.", 4,
+        lora::Protocol heard = protocol();
+        c.drawString(heard == lora::Protocol::Meshtastic ? "Meshtastic nodes in range show here."
+                     : heard == lora::Protocol::MeshCore ? "MeshCore nodes in range show here." : "Custom settings.", 4,
                     list.y + 4 + theme::kLineHeight);
    } else {
-        bool mesh = meshtasticSettings();
+        lora::Protocol mesh = protocol();
        widgets::list(c, packets_, list, [&](int i) {
            RadioPacket p;
            if (!radio_.packet(newest - i, p)) return std::string("(gone)");
@@ -265,14 +267,14 @@ void LoraScannerApp::drawPresets(Canvas& c) {
    const auto& area = theme::kContent;
    c.setFont(&fonts::small);
    c.setTextColor(theme::kMuted);
-    c.drawString("Meshtastic presets allowed in EU868", 4, area.y + 2);
+    c.drawString("Meshtastic in EU868, and MeshCore", 4, area.y + 2);
    widgets::list(
        c, presets_, {area.x, area.y + 12, area.w, (kListRows + 1) * theme::kLineHeight},
-        [](int i) { return std::string(meshtastic::kEu868Presets[i].name); },
+        [](int i) { return std::string(lora::scanPreset(i).name); },
        [](int i) {
            char v[24];
-            const auto& p = meshtastic::kEu868Presets[i];
-            std::snprintf(v, sizeof v, "SF%u %.0fk %.3f", p.sf, p.bwKHz, meshtastic::eu868FrequencyHz(p) / 1e6);
+            lora::ScanPreset p = lora::scanPreset(i);
+            std::snprintf(v, sizeof v, "SF%u %gk %.3f", p.sf, p.bwKHz, p.frequencyHz / 1e6);
            return std::string(v);
        });
 }
@@ -325,7 +327,7 @@ void LoraScannerApp::drawSweep(Canvas& c) {
    uint32_t hz = radio_.config().frequencyHz;
    if (hz >= f.fromHz && hz <= f.fromHz + (f.steps - 1) * f.stepHz) {
        int x = x0 + static_cast<int>((hz - f.fromHz) / f.stepHz) * cell + cell / 2;
-        for (int y = barTop; y < barBottom; y += 3) c.drawPixel(x, y, theme::kMessage);
+        for (int y = barTop; y < barBottom; y += 3) c.drawPixel(x, y, theme::kGood);
    }

    // The waterfall.
@@ -14,7 +14,7 @@
 namespace roro {

 // The LoRa Scanner (docs/milestones/M3.md). Sniffer: the packets the radio hears, newest first,
-// with the Meshtastic header read (Q96) and a hex dump on Enter; p picks the preset (Q95), c starts
+// with the Meshtastic or MeshCore header read (Q96) and a hex dump on Enter; p picks the preset (Q95), c starts
 // or stops a Capture (Q97). The radio listens while the App is open (Q100). Tab: Sweep, the band's
 // RSSI as bars with peak hold and a waterfall (Q98); it pauses the Sniffer while shown (Q99).
 class LoraScannerApp : public App {
@@ -28,6 +28,7 @@ class LoraScannerApp : public App {
    void draw(Canvas& c) override;
    void help(std::vector<KeyHelp>& out) const override;
    const char* helpTitle() const override;
+    bool badge() const override { return capture_.capturing(); }

   private:
    enum class View { Packets, Details, Presets, Sweep };
@@ -40,7 +41,7 @@ class LoraScannerApp : public App {
    void showSweep(bool on);
    void openDetails();
    std::string timeOf(const RadioPacket& p) const;
-    bool meshtasticSettings() const;
+    lora::Protocol protocol() const;  // whose packets the radio is set for
    void say(const std::string& text);  // a line in the footer for a few seconds

    RadioService& radio_;
@@ -15,7 +15,9 @@ using Row = SettingsMenu::Row;

 void SettingsApp::onEnter() {
    page_ = Page::Menu;
+    menu_.close();
    list_.setCount(menu_.count());
+    list_.select(0);
 }

 void SettingsApp::warn(const std::string& text) {
@@ -56,7 +58,12 @@ bool SettingsApp::onMenuKey(const KeyEvent& e) {
            if (menu_.kind(i) == Kind::Toggle) menu_.toggle(i);
            return true;
        case Key::Select: break;
-        default: return false;  // Back leaves Settings
+        case Key::Back:
+            if (!menu_.close()) return false;  // from the groups, Back leaves Settings
+            list_.setCount(menu_.count());
+            list_.select(menu_.groupIndex());
+            return true;
+        default: return false;
    }
    editingRow_ = i;
    switch (menu_.kind(i)) {
@@ -72,6 +79,11 @@ bool SettingsApp::onMenuKey(const KeyEvent& e) {
            break;
        case Kind::Toggle: menu_.toggle(i); break;
        case Kind::Slider: break;
+        case Kind::Group:
+            menu_.open(i);
+            list_.setCount(menu_.count());
+            list_.select(0);
+            break;
        case Kind::Page:
            switch (menu_.row(i)) {
                case Row::Wifi:
@@ -194,16 +206,27 @@ std::vector<std::string> SettingsApp::aboutLines() const {
 void SettingsApp::draw(Canvas& c) {
    const auto& area = theme::kContent;
    switch (page_) {
-        case Page::Menu:
+        case Page::Menu: {
+            // An open group has its name on a line of its own, over its rows.
+            theme::Rect rows = area;
+            if (menu_.inGroup()) {
+                c.setFont(&fonts::bold);
+                c.setTextDatum(top_left);
+                c.setTextColor(theme::kMuted);
+                c.drawString(menu_.title().c_str(), 4, area.y + 1);
+                rows.y += theme::kLineHeight;
+                rows.h -= theme::kLineHeight;
+            }
            widgets::list(
-                c, list_, area, [this](int i) { return menu_.label(i); },
+                c, list_, rows, [this](int i) { return menu_.label(i); },
                [this](int i) {
                    auto kind = menu_.kind(i);
-                    if (kind == Kind::Page) return std::string(">");
+                    if (kind == Kind::Page || kind == Kind::Group) return std::string(">");
                    if (kind == Kind::Slider) return "< " + menu_.value(i) + " >";
                    return menu_.value(i);
                });
            break;
+        }
        case Page::Text:
            c.setFont(&fonts::body);
            c.setTextColor(theme::kMuted);
@@ -35,7 +35,7 @@ struct SettingsAppDeps {
    VpnService& vpn;
 };

-// Settings: every user-facing setting, plus the Wi-Fi, Firmware, Debug Console and About pages.
+// Settings: every user-facing setting, in groups, plus the Wi-Fi, VPN, Firmware, Debug Console and About pages.
 class SettingsApp : public App {
   public:
    explicit SettingsApp(const SettingsAppDeps& deps)
@@ -311,7 +311,9 @@ bool SshApp::onKey(const KeyEvent& e) {
 }

 void SshApp::update(uint32_t nowMs) {
-    if (!message_.empty() && nowMs - messageMs_ >= kMessageMs) {
+    // nowMs was read before this pass handled its keys: a message a key just set is "later" than it,
+    // and an unsigned difference would call that 49 days old, and clear it at once.
+    if (!message_.empty() && static_cast<int32_t>(nowMs - messageMs_) >= static_cast<int32_t>(kMessageMs)) {
        message_.clear();
        requestRedraw();
    }
@@ -422,7 +424,7 @@ void SshApp::drawTerminal(Canvas& c) {
            c.setFont(&fonts::small);
            c.setTextDatum(top_right);
            c.fillRect(area.x + area.w - 5 * static_cast<int>(where.size()) - 3, area.y, 5 * static_cast<int>(where.size()) + 3, 9, theme::kAccent);
-            c.setTextColor(0x0000);
+            c.setTextColor(theme::kOnAccent);
            c.drawString(where.c_str(), area.x + area.w - 1, area.y + 1);
            c.setTextDatum(top_left);
        }
@@ -28,6 +28,7 @@ class SshApp : public App {
    bool textEntryActive() const override { return view_ == View::Entry || (view_ == View::Session && !dialog_); }
    void help(std::vector<KeyHelp>& out) const override;
    const char* helpTitle() const override;
+    bool badge() const override { return ssh_.active(); }
    void update(uint32_t nowMs) override;
    void draw(Canvas& c) override;

@@ -232,7 +232,7 @@ void SystemApp::drawOverview(Canvas& c) {
            const auto& h = loadHistory_[core];
            for (size_t i = 1; i < h.size(); i++) {
                int x0 = gx + 1 + static_cast<int>((i - 1) * gw / kHistory), x1 = gx + 1 + static_cast<int>(i * gw / kHistory);
-                c.drawLine(x0, gy + gh - h.at(i - 1) * gh / 100, x1, gy + gh - h.at(i) * gh / 100, core ? theme::kMessage : theme::kAccent);
+                c.drawLine(x0, gy + gh - h.at(i - 1) * gh / 100, x1, gy + gh - h.at(i) * gh / 100, core ? theme::kGood : theme::kAccent);
            }
        }
    }
@@ -290,7 +290,7 @@ void SystemApp::drawMemory(Canvas& c) {
    struct {
        size_t bytes;
        uint16_t color;
-    } floors[] = {{GeminiService::kStartFloor, theme::kMuted}, {GeminiService::kSteadyFloor, theme::kWarning}, {GeminiService::kTransientFloor, theme::kMessage}};
+    } floors[] = {{GeminiService::kStartFloor, theme::kMuted}, {GeminiService::kSteadyFloor, theme::kWarning}, {GeminiService::kTransientFloor, theme::kGood}};
    for (auto& f : floors) {
        int kb = static_cast<int>(f.bytes / 1024), y = yOf(kb);
        for (int x = gx + 1; x < gx + gw - 1; x += 4) c.drawPixel(x, y, f.color);
@@ -335,13 +335,13 @@ void SystemApp::drawNetwork(Canvas& c) {
    for (size_t i = 0; i < kUsers; i++) {
        bool active = rateIn_[i] || rateOut_[i];
        c.setTextDatum(top_left);
-        c.setTextColor(active ? theme::kMessage : theme::kText);
+        c.setTextColor(active ? theme::kGood : theme::kText);
        c.drawString(net::userName(static_cast<net::User>(i)), 4, y);
        c.setTextDatum(top_right);
        c.setTextColor(theme::kText);
        c.drawString(net::formatTraffic(traffic_[i].in).c_str(), 124, y);
        c.drawString(net::formatTraffic(traffic_[i].out).c_str(), 168, y);
-        c.setTextColor(active ? theme::kMessage : theme::kMuted);
+        c.setTextColor(active ? theme::kGood : theme::kMuted);
        c.drawString(active ? net::formatTraffic(rateIn_[i] + rateOut_[i]).c_str() : "-", area.w - 4, y);
        y += theme::kLineHeight;
    }
@@ -16,7 +16,7 @@

 namespace roro {

-// Settings > VPN (issue #8): the switch, "Start with Wi-Fi", importing a `.conf` from the card
+// Settings > Network > VPN (issue #8): the switch, "Start with Wi-Fi", importing a `.conf` from the card
 // and forgetting it, and what the tunnel is doing. No key is ever on this page.
 class VpnPage {
   public:
@@ -17,7 +17,7 @@

 namespace roro {

-// Settings → Wi-Fi: the On/Off switch, the connection and its details, DNS and NTP servers, and
+// Settings → Network → Wi-Fi: the On/Off switch, the connection and its details, DNS and NTP servers, and
 // the Saved Networks: adding one from a scan or by name (hidden), and each one's own page with its
 // IP setting, Automatic or Fixed (docs/milestones/S1.md, Q113). Owned by the Settings App.
 class WifiSettingsPage {
@@ -232,9 +232,9 @@ void WifiToolsApp::drawChannels(Canvas& c) {
    for (int ch = 1; ch <= 13; ch++) {
        int x = x0 + (ch - 1) * slot;
        int h = static_cast<int>(load[ch] / maxLoad * barMaxH);
-        uint16_t color = ch == best ? theme::kMessage : (ch == 1 || ch == 6 || ch == 11) ? theme::kAccent : theme::kMuted;
+        uint16_t color = ch == best ? theme::kGood : (ch == 1 || ch == 6 || ch == 11) ? theme::kAccent : theme::kMuted;
        if (h > 0) c.fillRect(x, baseY - h, slot - 4, h, color);
-        c.setTextColor(ch == best ? theme::kMessage : theme::kText);
+        c.setTextColor(ch == best ? theme::kGood : theme::kText);
        c.setTextDatum(top_center);
        c.drawString(std::to_string(ch).c_str(), x + (slot - 4) / 2, baseY + 3);
        c.setTextDatum(top_left);
@@ -265,7 +265,7 @@ void WifiToolsApp::drawTracker(Canvas& c) {
    int strength = lost ? 0 : std::min(100, std::max(0, (tracker_.latest() + 95) * 100 / 60));
    int barW = area.w - 8;
    c.drawRect(4, area.y + 60, barW, 8, theme::kMuted);
-    c.fillRect(5, area.y + 61, (barW - 2) * strength / 100, 6, theme::kMessage);
+    c.fillRect(5, area.y + 61, (barW - 2) * strength / 100, 6, theme::kGood);

    const int gy = area.y + 74, gh = area.h - 76;
    const auto& h = tracker_.history();
@@ -62,6 +62,7 @@
 #include "safe_mode.h"
 #include "settings.h"
 #include "storage_paths.h"
+#include "ui/icons.h"
 #include "ui/notifier.h"
 #include "ui/screen.h"
 #include "scp_args.h"
@@ -192,6 +193,7 @@ void setup() {
    Serial.begin(115200);

    settings.load();
+    theme::apply(ui::palette(settings.getInt(Setting::Theme), settings.getBool(Setting::ThemeLight)));
    if (safeMode) return setupSafeMode(crashes);

    battery = new BatteryService(bus);
@@ -230,19 +232,20 @@ void setup() {

    apps = new AppManager(launcher);
    launcher.setManager(*apps);
-    apps->registerApp({"irc", "IRC", false, new IrcApp(*irc, *clockService, bus)});
-    apps->registerApp({"wifi-tools", "Wi-Fi Tools", false, new WifiToolsApp(*wifi, *storageService, *clockService)});
-    apps->registerApp({"gnss", "GNSS", false, new GnssApp(*gnssService, settings)});
-    apps->registerApp({"gemini", "Gemini", false, new GeminiApp(*geminiService)});
-    apps->registerApp({"lora", "LoRa Scanner", false, new LoraScannerApp(*radioService, *loraCapture, settings, *clockService)});
-    apps->registerApp({"storage", "Storage", false, new StorageApp(*fileOps, *storageService, *clockService, *update, *power, bus, *new WebShare(*storageService, *fileOps, *wifi))});
-    apps->registerApp({"notes", "Notes", false, new NotesApp(*fileOps, *storageService, *clockService, *power)});
+    launcher.setSettings(settings);
+    apps->registerApp({"irc", "IRC", false, new IrcApp(*irc, *clockService, bus), icons::irc});
+    apps->registerApp({"wifi-tools", "Wi-Fi Tools", false, new WifiToolsApp(*wifi, *storageService, *clockService), icons::wifi_tools});
+    apps->registerApp({"gnss", "GNSS", false, new GnssApp(*gnssService, settings), icons::gnss});
+    apps->registerApp({"gemini", "Gemini", false, new GeminiApp(*geminiService), icons::gemini});
+    apps->registerApp({"lora", "LoRa Scanner", false, new LoraScannerApp(*radioService, *loraCapture, settings, *clockService), icons::lora});
+    apps->registerApp({"storage", "Storage", false, new StorageApp(*fileOps, *storageService, *clockService, *update, *power, bus, *new WebShare(*storageService, *fileOps, *wifi)), icons::storage});
+    apps->registerApp({"notes", "Notes", false, new NotesApp(*fileOps, *storageService, *clockService, *power), icons::notes});
    sshService = new SshService(settings);
    sshApp = new SshApp(*sshService, settings, *storageService);
    scpService = new ScpService(settings, *storageService, *fileOps);
-    apps->registerApp({"ssh", "SSH", false, sshApp});
+    apps->registerApp({"ssh", "SSH", false, sshApp, icons::ssh});
    shellApp = new ShellApp(shellRun, shellProbe, shellList, shellCount, helpText(), *apps);
-    apps->registerApp({"shell", "Shell", false, shellApp});
+    apps->registerApp({"shell", "Shell", false, shellApp, icons::shell});
    shellApp->asking = [] { return scpService->asking(); };
    shellApp->answer = [](const std::string& password) { scpService->answer(password); };
    shellApp->abort = [] { scpService->cancel(); };
@@ -252,9 +255,9 @@ void setup() {
    // A long note being rewritten (issue #47): the editor waits for the card, so it draws from there.
    NoteEditor::onProgress = [](const std::string& name, int percent) { screen.renderUpdate("Saving", name, percent); };
    apps->registerApp({"system", "System", false,
-                       new SystemApp(*wifi, *battery, *storageService, *radioService, *gnssService, nvs)});
+                       new SystemApp(*wifi, *battery, *storageService, *radioService, *gnssService, nvs), icons::system});
    apps->registerApp({"settings", "Settings", false,
-                       new SettingsApp({settings, bus, *apps, *battery, *storageService, *clockService, *wifi, *savedNetworks, *update, *vpnService})});
+                       new SettingsApp({settings, bus, *apps, *battery, *storageService, *clockService, *wifi, *savedNetworks, *update, *vpnService}), icons::settings});
    apps->registerApp({"demo", "Widget demo", true, new DemoApp(bus)});
    apps->registerApp({"setup", "Setup", true, new SetupApp(settings, *apps)});

@@ -676,7 +679,7 @@ static const char* const kHelp =
    "log level <0-5>   ESP-IDF log level (0 none ... 5 verbose)\n"
    "ls [folder] | du <path> | mkdir <path> | rm [-r] [-f] <path> | cp [-f] <from> <to> | mv [-f] <from> <to> | cancel   the SD card, with the Storage App's rules (rm -r for a folder; -f: the Shell doesn't ask; * and ? in a name: /notes/*.txt)\n"
    "screenshot [seconds]   the screen as a PNG in /screenshots on the card, now or after a pause\n"
-    "lora probe | lora status | lora rx on|off | lora preset <name>   the LoRa radio, receive only\n"
+    "lora probe | lora status | lora rx on|off | lora preset <name>   the LoRa radio, receive only; a Meshtastic preset (LongFast...) or MeshCore\n"
    "lora capture start|stop   a LoRa Capture to /captures/lora (pcap, LoRaTap)\n"
    "lora sweep on [from MHz] [to MHz] [step kHz] | lora sweep off | lora sweep dump   RSSI across a band (863 870 100)\n"
    "lora custom <MHz> <BW kHz> <SF> <CR 5-8> <sync hex> [preamble]   e.g. 868.1 125 7 5 34 8 (LoRaWAN)\n"
@@ -692,7 +695,7 @@ static const char* const kHelp =
    "irc start | irc stop | irc dump | irc say <buffer> <text>\n"
    "install <path.ota>   Update from SD\n"
    "update check | update list | update status | update install <tag>   the project's releases on Gitea\n"
-    "sd card | sd list | cat <path> | log <text> | burst | sound on|off | short | normal\n"
+    "sd card | sd list | cat <path> | log <text> | burst | sound on|off | theme [0-6] [light|dark] | short | normal\n"
    "Irc | Wifi | Gnss | Gemini | Lora | Storage | Notes | Shell | System | Settings   open that App: a capital letter is an App, not a command\n"
    "ping <host> [count] [size] | nslookup <name> [server] | port <host> <port> | traceroute <host> | cancel   is it there, does its name resolve, is its port open, which way; one at a time\n"
    "tls <host> [port] | ntp [server]   a TLS handshake: who the certificate is for, by whom, until when, and whether this device trusts it; a time server's clock against this one\n"
@@ -700,8 +703,8 @@ static const char* const kHelp =
    "uname   the firmware, its version and the chip it is built for\n"
    "scp [-f] [-P port] <file on the card> user@host:path | scp [-f] [-P port] user@host:path <file on the card>   one file over SSH, with this device's key or, in the Shell, a password, to a server the SSH App already trusts; -f replaces a file on the card; `cancel` stops it\n"
    "ssh user@host[:port] | ssh status | ssh stop   a terminal on another machine, in the SSH App; the password is asked there, never here\n"
-    "vpn status | vpn up [seconds] | vpn down | vpn import [path] | vpn forget | vpn auto on|off   the WireGuard tunnel (Settings > VPN); import reads /vpn/wg0.conf; with seconds, it goes down by itself\n"
-    "debug status | debug off [seconds]   the Debug Console over Wi-Fi (Settings > Debug Console); with seconds, it comes back\n"
+    "vpn status | vpn up [seconds] | vpn down | vpn import [path] | vpn forget | vpn auto on|off   the WireGuard tunnel (Settings > Network > VPN); import reads /vpn/wg0.conf; with seconds, it goes down by itself\n"
+    "debug status | debug off [seconds]   the Debug Console over Wi-Fi (Settings > System > Debug Console); with seconds, it comes back\n"
    "debug on | debug token <16 to 64 characters> | debug token new   (USB serial only) switch it on, set its token\n"
    "crash abort|wdt   crash on purpose (to test crash reports and Safe Mode)\n"
    "wifi ip ... try <seconds> | wifi ip keep   a trial IP setting: back to the previous one unless kept\n"
@@ -894,13 +897,13 @@ static void debugCommand(const String& args, bool fromSerial) {
        debugResumes = true;
        console.printf("debug: off for %lu s\n", (unsigned long)seconds);
    } else if (!fromSerial) {
-        console.println("debug: over USB serial only (or Settings > Debug Console)");
+        console.println("debug: over USB serial only (or Settings > System > Debug Console)");
    } else if (args == "on") {
        DebugConsole::switchOn(settings);
-        console.println("debug: on (the token is in Settings > Debug Console)");
+        console.println("debug: on (the token is in Settings > System > Debug Console)");
    } else if (args == "token new") {
        settings.setString(Setting::DebugToken, DebugConsole::freshToken());
-        console.println("debug: a new token (it is in Settings > Debug Console)");
+        console.println("debug: a new token (it is in Settings > System > Debug Console)");
    } else if (args.startsWith("token ")) {
        std::string token = debug::tidyToken(args.substring(6).c_str());
        bool ok = debug::validToken(token) && settings.setString(Setting::DebugToken, token);
@@ -1133,11 +1136,12 @@ static void runCommand(String line, bool fromSerial = false) {
        }
    }
    if (line.startsWith("lora preset ") && radioService) {
-        const meshtastic::Preset* p = meshtastic::findPreset(line.substring(12).c_str());
-        if (p) radioService->setPreset(*p);
-        console.printf("lora preset: %s\n", p ? p->name : "unknown (LongFast LongSlow MediumSlow MediumFast ShortSlow ShortFast LongMod)");
+        lora::ScanPreset p;
+        bool found = lora::findScanPreset(line.substring(12).c_str(), p);
+        if (found) radioService->setPreset(p);
+        console.printf("lora preset: %s\n", found ? p.name : "unknown (LongFast LongSlow MediumSlow MediumFast ShortSlow ShortFast LongMod MeshCore)");
    }
-    if (line == "gnss quiet on" || line == "gnss quiet off") {  // Settings > Pause GNSS for LoRa (issue #20)
+    if (line == "gnss quiet on" || line == "gnss quiet off") {  // Settings > GNSS and radio > Pause GNSS for LoRa (issue #20)
        settings.setBool(Setting::GnssQuietForLora, line.endsWith("on"));
        console.printf("gnss quiet: %s\n", line.endsWith("on") ? "GNSS pauses while the LoRa radio listens" : "GNSS stays on");
    }
@@ -1325,6 +1329,14 @@ static void runCommand(String line, bool fromSerial = false) {
        settings.setBool(Setting::DnsAlways, line.endsWith("on"));
        wifi->serversChanged();
    }
+    if (line == "theme" || line.startsWith("theme ")) {  // theme [0-6] [light|dark]
+        std::string rest = line.length() > 6 ? line.substring(6).c_str() : "";
+        if (!rest.empty() && isdigit(static_cast<unsigned char>(rest[0]))) settings.setInt(Setting::Theme, rest[0] - '0');
+        if (rest.find("light") != std::string::npos) settings.setBool(Setting::ThemeLight, true);
+        if (rest.find("dark") != std::string::npos) settings.setBool(Setting::ThemeLight, false);
+        for (int t = 0; t < ui::kThemeCount; ++t)
+            console.printf("theme: %d %s%s\n", t, ui::themeName(t), t == settings.getInt(Setting::Theme) ? (settings.getBool(Setting::ThemeLight) ? " (light)" : " (dark)") : "");
+    }
    if (line == "sound off") settings.setBool(Setting::Sound, false);
    if (line == "sound on") settings.setBool(Setting::Sound, true);
    if (line == "short") {
@@ -1564,6 +1576,15 @@ static void loopPass() {
    StatusInfo status = currentStatus();
    const Toast* toast = notifier->toasts().current(now);
    bool toastChanged = notifier->toasts().takeChanged();
+    // The theme, when the Settings (or the `theme` command) changed it: every colour is drawn again.
+    static int shownTheme = settings.getInt(Setting::Theme) * 2 + settings.getBool(Setting::ThemeLight);
+    int wantedTheme = settings.getInt(Setting::Theme) * 2 + settings.getBool(Setting::ThemeLight);
+    if (wantedTheme != shownTheme) {
+        shownTheme = wantedTheme;
+        theme::apply(ui::palette(wantedTheme / 2, wantedTheme % 2));
+        screen.invalidate();
+        redrawAfterUpdate = true;
+    }
    if (apps->takeRedraw() || toastChanged || status != lastStatus || redrawAfterUpdate) {
        lastStatus = status;
        redrawAfterUpdate = false;
@@ -16,7 +16,7 @@ namespace roro {

 // The GNSS receiver on the Cap LoRa-1262 (see CONTEXT.md and docs/milestones/M2.md): reads its
 // NMEA from the main loop's tick (about 450 bytes/s, so a 512-byte UART buffer covers a second),
-// holds the current Fix, and sets the clock from it. Settings → GNSS switches it on and off.
+// holds the current Fix, and sets the clock from it. Settings → GNSS and radio → GNSS switches it on and off.
 class GnssService : public Service {
   public:
    static constexpr int kRxPin = 15, kTxPin = 13;  // measured: M2 step 1
@@ -39,9 +39,8 @@ constexpr float kDeafBelow = -108.0f;
 RadioService* RadioService::instance_ = nullptr;

 RadioService::RadioService() : lock_(xSemaphoreCreateMutex()) {
-    const meshtastic::Preset& p = meshtastic::kEu868Presets[0];  // LongFast (Q95)
-    config_ = {meshtastic::eu868FrequencyHz(p), p.bwKHz, p.sf, p.cr, meshtastic::kSyncWord, meshtastic::kPreambleLength,
-               p.name};
+    lora::ScanPreset p = lora::scanPreset(lora::kDefaultScanPreset);
+    config_ = {p.frequencyHz, p.bwKHz, p.sf, p.cr, p.syncWord, p.preamble, p.name};
 }

 void RadioService::start() {
@@ -334,10 +333,9 @@ RadioService::Config RadioService::config() const {
    return c;
 }

-void RadioService::setPreset(const meshtastic::Preset& p) {
+void RadioService::setPreset(const lora::ScanPreset& p) {
    xSemaphoreTake(lock_, portMAX_DELAY);
-    config_ = {meshtastic::eu868FrequencyHz(p), p.bwKHz, p.sf, p.cr, meshtastic::kSyncWord, meshtastic::kPreambleLength,
-               p.name};
+    config_ = {p.frequencyHz, p.bwKHz, p.sf, p.cr, p.syncWord, p.preamble, p.name};
    xSemaphoreGive(lock_);
    configChanged_ = true;
    wake(kRequest);
@@ -374,7 +372,14 @@ void RadioService::tick(uint32_t nowMs) {
        console.printf("lora: #%lu %u B %.1f dBm SNR %.1f dB%s", (unsigned long)p.seq, p.len, p.rx.rssi, p.rx.snr,
                       p.crcOk ? "" : " (bad CRC)");
        meshtastic::PacketHeader h;
-        if (meshtastic::parseHeader(p.data, p.len, h))
+        lora::Protocol protocol = lora::protocolOf(p.rx.syncWord);
+        if (protocol == lora::Protocol::MeshCore && p.crcOk) {  // what the Scanner's details show, on one line
+            const char* sep = " | ";
+            for (auto& l : lora::headerLines(p.data, p.len, protocol)) {
+                console.printf("%s%s", sep, l.c_str());
+                sep = "; ";
+            }
+        } else if (protocol == lora::Protocol::Meshtastic && meshtastic::parseHeader(p.data, p.len, h))
            console.printf(" | %s > %s, ch 0x%02X, hops %d/%u%s", meshtastic::nodeId(h.from).c_str(),
                           meshtastic::nodeId(h.to).c_str(), h.channelHash, h.hopsAway(), h.hopStart(),
                           h.viaMqtt() ? ", via MQTT" : "");
@@ -400,7 +405,7 @@ void RadioService::printStatus(Print& out) const {
    Counters n = counters();
    out.printf("radio: %s, %s, antenna switch %s\n", present_ ? "SX1262" : "no radio",
               tcxo_ > 0 ? "TCXO 1.8 V" : "crystal", expander_ ? "on (expander 0x43 P0)" : "expander missing");
-    out.printf("radio: %s, %s %.3f MHz, BW %.0f kHz, SF %u, CR 4/%u, sync 0x%02X, preamble %u\n",
+    out.printf("radio: %s, %s %.3f MHz, BW %g kHz, SF %u, CR 4/%u, sync 0x%02X, preamble %u\n",
               sweeping_ ? "sweeping" : listening_ ? "listening" : "asleep", c.name, c.frequencyHz / 1e6, c.bandwidthKHz, c.spreadingFactor,
               c.codingRate, c.syncWord, c.preamble);
    out.printf("radio: clients%s%s%s%s\n", clients_ ? "" : " none", clients_ & App ? " App" : "",
@@ -10,7 +10,7 @@
 #include <memory>

 #include "loratap.h"
-#include "meshtastic_presets.h"
+#include "scan_presets.h"
 #include "service.h"

 class SX1262;
@@ -74,7 +74,7 @@ class RadioService : public Service {
    bool listening() const { return listening_; }
    void listen(Client client, bool on);
    Config config() const;
-    void setPreset(const meshtastic::Preset& preset);
+    void setPreset(const lora::ScanPreset& preset);
    void setConfig(const Config& config);  // custom settings (Q95), named "Custom"

    uint32_t received() const { return seq_; }  // seq of the newest packet
@@ -284,7 +284,7 @@ void UpdateService::serve() {
            if (r == Request::BackgroundCheck && gitea_.latest(latest) &&
                release::shouldAnnounce(latest, runningVersion(), failedVersion(), announced_)) {
                announced_ = latest.tag;
-                notify(latest.tag + " is out: see Settings > Firmware", NotificationLevel::Info);  // 48 bytes at most
+                notify(latest.tag + " is out: Settings > System > Firmware", NotificationLevel::Info);  // 48 bytes at most
            }
            break;
        }
@@ -0,0 +1,391 @@
+// Made by scripts/make_icons.py from assets/icons/*.png: change the pictures, not this file.
+#include "icons.h"
+
+namespace roro::icons {
+
+const uint8_t gemini[128] = {
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x3f, 0xff, 0xff, 0xfc,  // ..############################..
+    0x3f, 0xff, 0xff, 0xfc,  // ..############################..
+    0x33, 0x30, 0x00, 0x0c,  // ..##..##..##................##..
+    0x33, 0x30, 0x00, 0x0c,  // ..##..##..##................##..
+    0x30, 0x00, 0x00, 0x0c,  // ..##........................##..
+    0x30, 0x00, 0x00, 0x0c,  // ..##........................##..
+    0x3f, 0xff, 0xff, 0xfc,  // ..############################..
+    0x3f, 0xff, 0xff, 0xfc,  // ..############################..
+    0x30, 0x00, 0x00, 0x0c,  // ..##........................##..
+    0x30, 0x00, 0x00, 0x0c,  // ..##........................##..
+    0x30, 0xc0, 0xc0, 0x0c,  // ..##....##......##..........##..
+    0x30, 0xc0, 0xc0, 0x0c,  // ..##....##......##..........##..
+    0x30, 0x30, 0x30, 0x0c,  // ..##......##......##........##..
+    0x30, 0x30, 0x30, 0x0c,  // ..##......##......##........##..
+    0x30, 0x0c, 0x0c, 0x0c,  // ..##........##......##......##..
+    0x30, 0x0c, 0x0c, 0x0c,  // ..##........##......##......##..
+    0x30, 0x30, 0x30, 0x0c,  // ..##......##......##........##..
+    0x30, 0x30, 0x30, 0x0c,  // ..##......##......##........##..
+    0x30, 0xc0, 0xc0, 0x0c,  // ..##....##......##..........##..
+    0x30, 0xc0, 0xc0, 0x0c,  // ..##....##......##..........##..
+    0x30, 0x00, 0x00, 0x0c,  // ..##........................##..
+    0x30, 0x00, 0x00, 0x0c,  // ..##........................##..
+    0x3f, 0xff, 0xff, 0xfc,  // ..############################..
+    0x3f, 0xff, 0xff, 0xfc,  // ..############################..
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+};
+
+const uint8_t gnss[128] = {
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x3f, 0xc0, 0x00,  // ..........########..............
+    0x00, 0x3f, 0xc0, 0x00,  // ..........########..............
+    0x03, 0xc0, 0x0f, 0x00,  // ......####..........####........
+    0x03, 0xc0, 0x0f, 0x00,  // ......####..........####........
+    0x0c, 0x00, 0x0f, 0x30,  // ....##..............####..##....
+    0x0c, 0x00, 0x0f, 0x30,  // ....##..............####..##....
+    0x30, 0x00, 0x00, 0x0c,  // ..##........................##..
+    0x30, 0x00, 0x00, 0x0c,  // ..##........................##..
+    0x30, 0x0f, 0xf0, 0x0c,  // ..##........########........##..
+    0x30, 0x0f, 0xf0, 0x0c,  // ..##........########........##..
+    0x00, 0x30, 0x0c, 0x0c,  // ..........##........##......##..
+    0x00, 0x30, 0x0c, 0x0c,  // ..........##........##......##..
+    0x3c, 0x30, 0x0c, 0x0c,  // ..####....##........##......##..
+    0x3c, 0x30, 0x0c, 0x0c,  // ..####....##........##......##..
+    0x3c, 0x30, 0x0c, 0x0c,  // ..####....##........##......##..
+    0x3c, 0x30, 0x0c, 0x0c,  // ..####....##........##......##..
+    0x00, 0x30, 0x0c, 0x0c,  // ..........##........##......##..
+    0x00, 0x30, 0x0c, 0x0c,  // ..........##........##......##..
+    0x30, 0x0f, 0xf0, 0x0c,  // ..##........########........##..
+    0x30, 0x0f, 0xf0, 0x0c,  // ..##........########........##..
+    0x30, 0x00, 0x00, 0x0c,  // ..##........................##..
+    0x30, 0x00, 0x00, 0x0c,  // ..##........................##..
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x03, 0xc0, 0x03, 0xc0,  // ......####............####......
+    0x03, 0xc0, 0x03, 0xc0,  // ......####............####......
+    0x00, 0x3f, 0xfc, 0x00,  // ..........############..........
+    0x00, 0x3f, 0xfc, 0x00,  // ..........############..........
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+};
+
+const uint8_t irc[128] = {
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x0f, 0xff, 0xff, 0xf0,  // ....########################....
+    0x0f, 0xff, 0xff, 0xf0,  // ....########################....
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x0f, 0xff, 0xff, 0xf0,  // ....########################....
+    0x0f, 0xff, 0xff, 0xf0,  // ....########################....
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+};
+
+const uint8_t lora[128] = {
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x0c, 0x00, 0x00,  // ............##..................
+    0x00, 0x0c, 0x00, 0x00,  // ............##..................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x0c, 0x00, 0x00,  // ............##..................
+    0x00, 0x0c, 0x00, 0x00,  // ............##..................
+    0x00, 0x0c, 0x0c, 0x00,  // ............##......##..........
+    0x00, 0x0c, 0x0c, 0x00,  // ............##......##..........
+    0x00, 0x0c, 0x00, 0x00,  // ............##..................
+    0x00, 0x0c, 0x00, 0x00,  // ............##..................
+    0x00, 0x0c, 0x0c, 0x00,  // ............##......##..........
+    0x00, 0x0c, 0x0c, 0x00,  // ............##......##..........
+    0x00, 0x0c, 0x0c, 0x00,  // ............##......##..........
+    0x00, 0x0c, 0x0c, 0x00,  // ............##......##..........
+    0x00, 0xcc, 0x0c, 0xc0,  // ........##..##......##..##......
+    0x00, 0xcc, 0x0c, 0xc0,  // ........##..##......##..##......
+    0x00, 0xcc, 0xcc, 0xc0,  // ........##..##..##..##..##......
+    0x00, 0xcc, 0xcc, 0xc0,  // ........##..##..##..##..##......
+    0x0c, 0xcc, 0xcc, 0xc0,  // ....##..##..##..##..##..##......
+    0x0c, 0xcc, 0xcc, 0xc0,  // ....##..##..##..##..##..##......
+    0x0c, 0xcc, 0xcc, 0xc0,  // ....##..##..##..##..##..##......
+    0x0c, 0xcc, 0xcc, 0xc0,  // ....##..##..##..##..##..##......
+    0x0c, 0xcc, 0xcc, 0xc0,  // ....##..##..##..##..##..##......
+    0x0c, 0xcc, 0xcc, 0xc0,  // ....##..##..##..##..##..##......
+    0x3f, 0xff, 0xff, 0xfc,  // ..############################..
+    0x3f, 0xff, 0xff, 0xfc,  // ..############################..
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+};
+
+const uint8_t notes[128] = {
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0xc3, 0x0c, 0x00,  // ........##....##....##..........
+    0x00, 0xc3, 0x0c, 0x00,  // ........##....##....##..........
+    0x00, 0xc3, 0x0c, 0x00,  // ........##....##....##..........
+    0x00, 0xc3, 0x0c, 0x00,  // ........##....##....##..........
+    0x0f, 0xff, 0xff, 0xf0,  // ....########################....
+    0x0f, 0xff, 0xff, 0xf0,  // ....########################....
+    0x0c, 0xc3, 0x0c, 0x30,  // ....##..##....##....##....##....
+    0x0c, 0xc3, 0x0c, 0x30,  // ....##..##....##....##....##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0xff, 0xff, 0x30,  // ....##..################..##....
+    0x0c, 0xff, 0xff, 0x30,  // ....##..################..##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0xff, 0xff, 0x30,  // ....##..################..##....
+    0x0c, 0xff, 0xff, 0x30,  // ....##..################..##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0xff, 0xc0, 0x30,  // ....##..##########........##....
+    0x0c, 0xff, 0xc0, 0x30,  // ....##..##########........##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0f, 0xff, 0xff, 0xf0,  // ....########################....
+    0x0f, 0xff, 0xff, 0xf0,  // ....########################....
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+};
+
+const uint8_t settings[128] = {
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x0f, 0xf0, 0x00,  // ............########............
+    0x00, 0x0f, 0xf0, 0x00,  // ............########............
+    0x03, 0xcc, 0x33, 0xc0,  // ......####..##....##..####......
+    0x03, 0xcc, 0x33, 0xc0,  // ......####..##....##..####......
+    0x0c, 0x30, 0x0c, 0x30,  // ....##....##........##....##....
+    0x0c, 0x30, 0x0c, 0x30,  // ....##....##........##....##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x03, 0x0f, 0xf0, 0xc0,  // ......##....########....##......
+    0x03, 0x0f, 0xf0, 0xc0,  // ......##....########....##......
+    0x3c, 0x3c, 0x3c, 0x3c,  // ..####....####....####....####..
+    0x3c, 0x3c, 0x3c, 0x3c,  // ..####....####....####....####..
+    0x30, 0x30, 0x0c, 0x0c,  // ..##......##........##......##..
+    0x30, 0x30, 0x0c, 0x0c,  // ..##......##........##......##..
+    0x30, 0x30, 0x0c, 0x0c,  // ..##......##........##......##..
+    0x30, 0x30, 0x0c, 0x0c,  // ..##......##........##......##..
+    0x3c, 0x3c, 0x3c, 0x3c,  // ..####....####....####....####..
+    0x3c, 0x3c, 0x3c, 0x3c,  // ..####....####....####....####..
+    0x03, 0x0f, 0xf0, 0xc0,  // ......##....########....##......
+    0x03, 0x0f, 0xf0, 0xc0,  // ......##....########....##......
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0x30, 0x0c, 0x30,  // ....##....##........##....##....
+    0x0c, 0x30, 0x0c, 0x30,  // ....##....##........##....##....
+    0x03, 0xcc, 0x33, 0xc0,  // ......####..##....##..####......
+    0x03, 0xcc, 0x33, 0xc0,  // ......####..##....##..####......
+    0x00, 0x0f, 0xf0, 0x00,  // ............########............
+    0x00, 0x0f, 0xf0, 0x00,  // ............########............
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+};
+
+const uint8_t shell[128] = {
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x3c, 0x00, 0x00, 0x00,  // ..####..........................
+    0x3c, 0x00, 0x00, 0x00,  // ..####..........................
+    0x0f, 0x00, 0x00, 0x00,  // ....####........................
+    0x0f, 0x00, 0x00, 0x00,  // ....####........................
+    0x03, 0xc0, 0x00, 0x00,  // ......####......................
+    0x03, 0xc0, 0x00, 0x00,  // ......####......................
+    0x00, 0xf0, 0x00, 0x00,  // ........####....................
+    0x00, 0xf0, 0x00, 0x00,  // ........####....................
+    0x00, 0x3c, 0x00, 0x00,  // ..........####..................
+    0x00, 0x3c, 0x00, 0x00,  // ..........####..................
+    0x00, 0x0f, 0x00, 0x00,  // ............####................
+    0x00, 0x0f, 0x00, 0x00,  // ............####................
+    0x00, 0x3c, 0x00, 0x00,  // ..........####..................
+    0x00, 0x3c, 0x00, 0x00,  // ..........####..................
+    0x00, 0xf0, 0x00, 0x00,  // ........####....................
+    0x00, 0xf0, 0x00, 0x00,  // ........####....................
+    0x03, 0xc0, 0x00, 0x00,  // ......####......................
+    0x03, 0xc0, 0x00, 0x00,  // ......####......................
+    0x0f, 0x00, 0x00, 0x00,  // ....####........................
+    0x0f, 0x00, 0x00, 0x00,  // ....####........................
+    0x3c, 0x00, 0xff, 0xfc,  // ..####..........##############..
+    0x3c, 0x00, 0xff, 0xfc,  // ..####..........##############..
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+};
+
+const uint8_t ssh[128] = {
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x0f, 0xf0, 0x00, 0x00,  // ....########....................
+    0x0f, 0xf0, 0x00, 0x00,  // ....########....................
+    0x30, 0x0c, 0x00, 0x00,  // ..##........##..................
+    0x30, 0x0c, 0x00, 0x00,  // ..##........##..................
+    0xc0, 0x03, 0x00, 0x00,  // ##............##................
+    0xc0, 0x03, 0x00, 0x00,  // ##............##................
+    0xc3, 0xc3, 0xff, 0xff,  // ##....####....##################
+    0xc3, 0xc3, 0xff, 0xff,  // ##....####....##################
+    0xc3, 0xc3, 0x00, 0xcc,  // ##....####....##........##..##..
+    0xc3, 0xc3, 0x00, 0xcc,  // ##....####....##........##..##..
+    0xc0, 0x03, 0x00, 0xcc,  // ##............##........##..##..
+    0xc0, 0x03, 0x00, 0xcc,  // ##............##........##..##..
+    0x30, 0x0c, 0x00, 0x00,  // ..##........##..................
+    0x30, 0x0c, 0x00, 0x00,  // ..##........##..................
+    0x0f, 0xf0, 0x00, 0x00,  // ....########....................
+    0x0f, 0xf0, 0x00, 0x00,  // ....########....................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+};
+
+const uint8_t storage[128] = {
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x03, 0xff, 0xf0, 0x00,  // ......##############............
+    0x03, 0xff, 0xf0, 0x00,  // ......##############............
+    0x03, 0x00, 0x0c, 0x00,  // ......##............##..........
+    0x03, 0x00, 0x0c, 0x00,  // ......##............##..........
+    0x03, 0x33, 0x03, 0x00,  // ......##..##..##......##........
+    0x03, 0x33, 0x03, 0x00,  // ......##..##..##......##........
+    0x03, 0x33, 0x00, 0xc0,  // ......##..##..##........##......
+    0x03, 0x33, 0x00, 0xc0,  // ......##..##..##........##......
+    0x03, 0x33, 0x00, 0xc0,  // ......##..##..##........##......
+    0x03, 0x33, 0x00, 0xc0,  // ......##..##..##........##......
+    0x03, 0x33, 0x00, 0xc0,  // ......##..##..##........##......
+    0x03, 0x33, 0x00, 0xc0,  // ......##..##..##........##......
+    0x03, 0x00, 0x00, 0xc0,  // ......##................##......
+    0x03, 0x00, 0x00, 0xc0,  // ......##................##......
+    0x03, 0x00, 0x00, 0xc0,  // ......##................##......
+    0x03, 0x00, 0x00, 0xc0,  // ......##................##......
+    0x03, 0x3f, 0xfc, 0xc0,  // ......##..############..##......
+    0x03, 0x3f, 0xfc, 0xc0,  // ......##..############..##......
+    0x03, 0x30, 0x0c, 0xc0,  // ......##..##........##..##......
+    0x03, 0x30, 0x0c, 0xc0,  // ......##..##........##..##......
+    0x03, 0x30, 0x0c, 0xc0,  // ......##..##........##..##......
+    0x03, 0x30, 0x0c, 0xc0,  // ......##..##........##..##......
+    0x03, 0x3f, 0xfc, 0xc0,  // ......##..############..##......
+    0x03, 0x3f, 0xfc, 0xc0,  // ......##..############..##......
+    0x03, 0x00, 0x00, 0xc0,  // ......##................##......
+    0x03, 0x00, 0x00, 0xc0,  // ......##................##......
+    0x03, 0xff, 0xff, 0xc0,  // ......####################......
+    0x03, 0xff, 0xff, 0xc0,  // ......####################......
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+};
+
+const uint8_t system[128] = {
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0xff, 0xff, 0x00,  // ........################........
+    0x00, 0xff, 0xff, 0x00,  // ........################........
+    0x0f, 0xc0, 0x03, 0xf0,  // ....######............######....
+    0x0f, 0xc0, 0x03, 0xf0,  // ....######............######....
+    0x00, 0xcf, 0xf3, 0x00,  // ........##..########..##........
+    0x00, 0xcf, 0xf3, 0x00,  // ........##..########..##........
+    0x00, 0xcf, 0xf3, 0x00,  // ........##..########..##........
+    0x00, 0xcf, 0xf3, 0x00,  // ........##..########..##........
+    0x00, 0xcf, 0xf3, 0x00,  // ........##..########..##........
+    0x00, 0xcf, 0xf3, 0x00,  // ........##..########..##........
+    0x00, 0xcf, 0xf3, 0x00,  // ........##..########..##........
+    0x00, 0xcf, 0xf3, 0x00,  // ........##..########..##........
+    0x0f, 0xc0, 0x03, 0xf0,  // ....######............######....
+    0x0f, 0xc0, 0x03, 0xf0,  // ....######............######....
+    0x00, 0xff, 0xff, 0x00,  // ........################........
+    0x00, 0xff, 0xff, 0x00,  // ........################........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+};
+
+const uint8_t wifi_tools[128] = {
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x3f, 0xfc, 0x00,  // ..........############..........
+    0x00, 0x3f, 0xfc, 0x00,  // ..........############..........
+    0x03, 0xc0, 0x03, 0xc0,  // ......####............####......
+    0x03, 0xc0, 0x03, 0xc0,  // ......####............####......
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x0c, 0x00, 0x00, 0x30,  // ....##....................##....
+    0x30, 0x3f, 0xfc, 0x0c,  // ..##......############......##..
+    0x30, 0x3f, 0xfc, 0x0c,  // ..##......############......##..
+    0x03, 0xc0, 0x03, 0xc0,  // ......####............####......
+    0x03, 0xc0, 0x03, 0xc0,  // ......####............####......
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x0f, 0xf0, 0x00,  // ............########............
+    0x00, 0x0f, 0xf0, 0x00,  // ............########............
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x30, 0x0c, 0x00,  // ..........##........##..........
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x03, 0xc0, 0x00,  // ..............####..............
+    0x00, 0x03, 0xc0, 0x00,  // ..............####..............
+    0x00, 0x03, 0xc0, 0x00,  // ..............####..............
+    0x00, 0x03, 0xc0, 0x00,  // ..............####..............
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+    0x00, 0x00, 0x00, 0x00,  // ................................
+};
+
+}  // namespace roro::icons
@@ -0,0 +1,23 @@
+// Made by scripts/make_icons.py from assets/icons/*.png: change the pictures, not this file.
+#pragma once
+
+#include <cstdint>
+
+namespace roro::icons {
+
+// One bit a pixel, the leftmost first, a row after another: what Canvas::drawBitmap takes.
+constexpr int kSize = 32;
+
+extern const uint8_t gemini[128];  // gemini.png
+extern const uint8_t gnss[128];  // gnss.png
+extern const uint8_t irc[128];  // irc.png
+extern const uint8_t lora[128];  // lora.png
+extern const uint8_t notes[128];  // notes.png
+extern const uint8_t settings[128];  // settings.png
+extern const uint8_t shell[128];  // shell.png
+extern const uint8_t ssh[128];  // ssh.png
+extern const uint8_t storage[128];  // storage.png
+extern const uint8_t system[128];  // system.png
+extern const uint8_t wifi_tools[128];  // wifi-tools.png
+
+}  // namespace roro::icons
@@ -14,6 +14,8 @@ class Screen {
    // Takes over the screen while a Firmware Update is received or about to restart.
    void renderUpdate(const std::string& title, const std::string& detail, int percent);
    Canvas& canvas() { return canvas_; }
+    // The colours changed: an App that keeps what it drew has to draw it all again.
+    void invalidate() { lost_ = true; }

   private:
    Canvas canvas_;
@@ -2,17 +2,31 @@

 #include <cstdint>

+#include "palette.h"
+
 namespace roro::theme {

-// RGB565
-constexpr uint16_t kBackground = 0x0000;
-constexpr uint16_t kText = 0xFFFF;
-constexpr uint16_t kMuted = 0x8410;      // grey
-constexpr uint16_t kAccent = 0x2CBF;     // teal-blue
-constexpr uint16_t kSelection = 0x1A6F;  // darker accent behind selected rows
-constexpr uint16_t kBar = 0x2104;        // Status Bar background
-constexpr uint16_t kWarning = 0xFC60;    // orange
-constexpr uint16_t kMessage = 0x3666;    // green
+// The colours every screen draws with: the theme chosen in the Settings (issue #10, lib/ui's
+// palette.h), set at boot and whenever it changes. They read as constants, and are references into
+// the palette in use, so a draw after apply() is in the new colours.
+inline ui::Palette current = ui::palette(0, false);
+inline void apply(const ui::Palette& p) { current = p; }
+
+inline const uint16_t& kBackground = current.background;
+inline const uint16_t& kText = current.text;
+inline const uint16_t& kAccent = current.accent;       // what is chosen, what is live
+inline const uint16_t& kOnAccent = current.onAccent;   // text and pictures on an accent fill
+inline const uint16_t& kSelection = current.accent;    // behind a selected row, whose text is kOnAccent
+inline const uint16_t& kMuted = current.muted;
+inline const uint16_t& kFaint = current.faint;         // grid lines, what stays behind
+inline const uint16_t& kBar = current.bar;             // Status Bar background
+inline const uint16_t& kBarMuted = current.barMuted;   // what is idle, on the bar
+inline const uint16_t& kWarning = current.warning;
+inline const uint16_t& kMessage = current.message;     // someone wrote
+inline const uint16_t& kGood = current.good;           // a Fix, the best of a set
+inline const uint16_t& kRed = current.red;             // these three: to tell things apart
+inline const uint16_t& kYellow = current.yellow;
+inline const uint16_t& kViolet = current.violet;

 constexpr int kWidth = 240;
 constexpr int kHeight = 135;
@@ -32,43 +32,43 @@ void statusBar(Canvas& c, const StatusInfo& info) {
    if (info.unread > 0) right("[" + std::to_string(info.unread) + "]", kMessage);
    if (info.batteryPercent >= 0)
        right(std::to_string(info.batteryPercent) + "%", info.batteryPercent <= 15 ? kWarning : kText);
-    if (info.sdPresent) right("SD", info.sdLevel >= 80 ? kWarning : kMuted);
+    if (info.sdPresent) right("SD", info.sdLevel >= 80 ? kWarning : kBarMuted);
    switch (info.wifi) {
        case StatusInfo::Wifi::Connected: {
            // Three signal bars, then the label.
            for (int i = 0; i < 3; i++) {
                int h = 2 + 2 * i;
-                c.fillRect(x - 10 + 4 * i, 9 - h, 3, h, i < info.wifiBars ? kText : kMuted);
+                c.fillRect(x - 10 + 4 * i, 9 - h, 3, h, i < info.wifiBars ? kText : kBackground);
            }
            x -= 14;
            right("W", kText);
            break;
        }
-        case StatusInfo::Wifi::Searching: right("W?", kMuted); break;
+        case StatusInfo::Wifi::Searching: right("W?", kBarMuted); break;
        case StatusInfo::Wifi::Monitoring: right("MON", kAccent); break;
        case StatusInfo::Wifi::None: break;
    }
    switch (info.vpn) {  // Q252: there while the tunnel is wanted, bright once the peer has answered
-        case StatusInfo::Vpn::Trying: right("VPN", kMuted); break;
+        case StatusInfo::Vpn::Trying: right("VPN", kBarMuted); break;
        case StatusInfo::Vpn::Up: right("VPN", kAccent); break;
        case StatusInfo::Vpn::Off: break;
    }
    if (info.ssh) right("SSH", kAccent);  // Q260: a session goes on, whatever App is in front
    switch (info.debug) {  // Q190: there while the console listens, bright with someone connected
-        case StatusInfo::Debug::On: right("DBG", kMuted); break;
+        case StatusInfo::Debug::On: right("DBG", kBarMuted); break;
        case StatusInfo::Debug::Client: right("DBG", kAccent); break;
        case StatusInfo::Debug::Off: break;
    }
    if (info.tracking) right("REC", kWarning);
    if (info.capturing) right("CAP", kWarning);
    switch (info.radio) {  // Q101: muted while listening, bright for a moment on each packet
-        case StatusInfo::Radio::Listening: right("L", kMuted); break;
+        case StatusInfo::Radio::Listening: right("L", kBarMuted); break;
        case StatusInfo::Radio::Packet: right("L", kAccent); break;
-        case StatusInfo::Radio::Sweep: right("SW", kMuted); break;  // the Sniffer is paused
+        case StatusInfo::Radio::Sweep: right("SW", kBarMuted); break;  // the Sniffer is paused
        case StatusInfo::Radio::None: break;
    }
    switch (info.gnss) {  // Q61: muted while searching, normal with a Fix, the count with a 3D Fix
-        case StatusInfo::Gnss::Searching: right("G", kMuted); break;
+        case StatusInfo::Gnss::Searching: right("G", kBarMuted); break;
        case StatusInfo::Gnss::TwoD: right("G", kText); break;
        case StatusInfo::Gnss::ThreeD: right("G" + std::to_string(info.gnssSatellites), kText); break;
        case StatusInfo::Gnss::None: break;
@@ -88,10 +88,10 @@ void list(Canvas& c, const ListModel& model, Rect area, const std::function<std:
        int y = area.y + row * kLineHeight;
        bool selected = i == model.selected();
        if (selected) c.fillRect(area.x, y, area.w - 4, kLineHeight, kSelection);
-        c.setTextColor(kText);
+        c.setTextColor(selected ? kOnAccent : kText);
        c.drawString(label(i).c_str(), area.x + 4, y + 1);
        if (value) {
-            c.setTextColor(selected ? kText : kMuted);
+            c.setTextColor(selected ? kOnAccent : kMuted);
            c.setTextDatum(top_right);
            c.drawString(value(i).c_str(), area.x + area.w - 8, y + 1);
            c.setTextDatum(top_left);
@@ -159,7 +159,7 @@ void dialog(Canvas& c, const std::string& title, const std::string& message, con
        bool selected = i == model.selected();
        if (selected) c.fillRect(x, box.y + box.h - 19, w, 15, kAccent);
        else c.drawRect(x, box.y + box.h - 19, w, 15, kMuted);
-        c.setTextColor(selected ? kBackground : kText);
+        c.setTextColor(selected ? kOnAccent : kText);
        c.drawString(buttons[i].c_str(), x + 6, box.y + box.h - 17);
        x -= 6;
    }
@@ -174,7 +174,7 @@ void toast(Canvas& c, const Toast& t) {
    if (w > kWidth - 8) w = kWidth - 8;
    int x = (kWidth - w) / 2, y = kHeight - 22;
    c.fillRect(x, y, w, 18, color);
-    c.setTextColor(kBackground);
+    c.setTextColor(kOnAccent);
    c.setTextDatum(top_left);
    c.setClipRect(x + 4, y, w - 8, 18);
    c.drawString(t.text.c_str(), x + 8, y + 3);
@@ -0,0 +1,97 @@
+#include <unity.h>
+
+#include "grid_model.h"
+
+using namespace roro;
+
+void setUp() {}
+void tearDown() {}
+
+void test_empty_grid_has_no_selection() {
+    GridModel g(4, 3);
+    TEST_ASSERT_EQUAL(-1, g.selected());
+    g.right();
+    g.down();
+    TEST_ASSERT_EQUAL(-1, g.selected());
+    TEST_ASSERT_EQUAL(0, g.rows());
+}
+
+void test_left_and_right_go_through_every_item() {
+    GridModel g(4, 3);
+    g.setCount(11);
+    TEST_ASSERT_EQUAL(0, g.selected());
+    g.right();
+    TEST_ASSERT_EQUAL(1, g.selected());
+    g.select(3);
+    g.right();  // onto the next row
+    TEST_ASSERT_EQUAL(4, g.selected());
+    g.left();
+    TEST_ASSERT_EQUAL(3, g.selected());
+    g.select(10);
+    g.right();  // around
+    TEST_ASSERT_EQUAL(0, g.selected());
+    g.left();
+    TEST_ASSERT_EQUAL(10, g.selected());
+}
+
+void test_up_and_down_stay_in_the_column() {
+    GridModel g(4, 3);
+    g.setCount(11);  // rows of 4, 4 and 3
+    g.select(1);
+    g.down();
+    TEST_ASSERT_EQUAL(5, g.selected());
+    g.down();
+    TEST_ASSERT_EQUAL(9, g.selected());
+    g.down();  // around
+    TEST_ASSERT_EQUAL(1, g.selected());
+    g.up();
+    TEST_ASSERT_EQUAL(9, g.selected());
+}
+
+void test_a_short_last_row_gives_its_last_item() {
+    GridModel g(4, 3);
+    g.setCount(11);
+    g.select(7);  // the fourth column, which the last row doesn't have
+    g.down();
+    TEST_ASSERT_EQUAL(10, g.selected());
+    g.select(3);
+    g.up();
+    TEST_ASSERT_EQUAL(10, g.selected());
+}
+
+void test_rows_scroll_to_keep_the_selection_in_view() {
+    GridModel g(4, 3);
+    g.setCount(18);  // 5 rows
+    TEST_ASSERT_EQUAL(5, g.rows());
+    TEST_ASSERT_EQUAL(0, g.firstVisibleRow());
+    g.select(12);  // the fourth row
+    TEST_ASSERT_EQUAL(1, g.firstVisibleRow());
+    g.select(17);
+    TEST_ASSERT_EQUAL(2, g.firstVisibleRow());
+    g.select(5);
+    TEST_ASSERT_EQUAL(1, g.firstVisibleRow());
+    g.select(0);
+    TEST_ASSERT_EQUAL(0, g.firstVisibleRow());
+}
+
+void test_a_smaller_count_keeps_the_selection_inside() {
+    GridModel g(4, 3);
+    g.setCount(18);
+    g.select(17);
+    g.setCount(6);
+    TEST_ASSERT_EQUAL(5, g.selected());
+    TEST_ASSERT_EQUAL(0, g.firstVisibleRow());
+    g.setCount(0);
+    TEST_ASSERT_EQUAL(-1, g.selected());
+}
+
+int main() {
+    UNITY_BEGIN();
+    RUN_TEST(test_empty_grid_has_no_selection);
+    RUN_TEST(test_left_and_right_go_through_every_item);
+    RUN_TEST(test_up_and_down_stay_in_the_column);
+    RUN_TEST(test_a_short_last_row_gives_its_last_item);
+    RUN_TEST(test_rows_scroll_to_keep_the_selection_in_view);
+    RUN_TEST(test_a_smaller_count_keeps_the_selection_inside);
+    return UNITY_END();
+}
@@ -0,0 +1,286 @@
+#include <unity.h>
+
+#include <cstring>
+#include <string>
+#include <vector>
+
+#include "aes128.h"
+#include "meshcore_channel.h"
+#include "meshcore_packet.h"
+#include "packet_view.h"
+#include "scan_presets.h"
+
+using namespace roro;
+using namespace roro::meshcore;
+
+void setUp() {}
+void tearDown() {}
+
+// A flood advert relayed by two repeaters (1-byte hashes), from a repeater that says where it is.
+static std::vector<uint8_t> advert(const char* name, bool location = true, uint8_t pathByte = 2) {
+    std::vector<uint8_t> v = {static_cast<uint8_t>(0x04 << 2 | 0x01), pathByte};
+    for (int i = 0; i < (pathByte & 0x3F) * ((pathByte >> 6) + 1); ++i) v.push_back(static_cast<uint8_t>(0xa3 + i));
+    for (int i = 0; i < 32; ++i) v.push_back(static_cast<uint8_t>(0xc0 + i));  // key
+    v.insert(v.end(), {0x00, 0x5e, 0xd0, 0x68});                              // timestamp
+    v.insert(v.end(), 64, 0x55);                                               // signature
+    v.push_back(static_cast<uint8_t>(0x80 | (location ? 0x10 : 0) | 0x02));   // named, repeater
+    if (location) {
+        int32_t lat = 50860320, lon = 4300480;
+        for (int i = 0; i < 4; ++i) v.push_back(static_cast<uint8_t>(lat >> (8 * i)));
+        for (int i = 0; i < 4; ++i) v.push_back(static_cast<uint8_t>(lon >> (8 * i)));
+    }
+    v.insert(v.end(), name, name + std::strlen(name));
+    return v;
+}
+
+void test_header_route_type_and_path() {
+    auto v = advert("Brussels-R1");
+    Packet p;
+    TEST_ASSERT_TRUE(parsePacket(v.data(), v.size(), p));
+    TEST_ASSERT_TRUE(p.route == Route::Flood);
+    TEST_ASSERT_TRUE(p.type == Payload::Advert);
+    TEST_ASSERT_FALSE(p.hasTransport);
+    TEST_ASSERT_EQUAL(2, p.hops);
+    TEST_ASSERT_EQUAL(1, p.hashSize);
+    TEST_ASSERT_EQUAL_HEX8(0xa3, p.path[0]);
+    TEST_ASSERT_EQUAL_HEX8(0xc0, p.payload[0]);
+}
+
+void test_transport_codes_and_wider_hashes() {
+    // Direct in a region, a text message, two hops of 2 bytes each.
+    const uint8_t v[] = {0x02 << 2 | 0x03, 0x2b, 0x1a, 0x00, 0x00, 0x40 | 2, 0x11, 0x22, 0x33, 0x44, 0x7f, 0xa3, 0xde, 0xad, 1, 2, 3};
+    Packet p;
+    TEST_ASSERT_TRUE(parsePacket(v, sizeof v, p));
+    TEST_ASSERT_TRUE(p.route == Route::TransportDirect);
+    TEST_ASSERT_TRUE(p.hasTransport);
+    TEST_ASSERT_EQUAL_HEX16(0x1a2b, p.transport[0]);
+    TEST_ASSERT_EQUAL(2, p.hops);
+    TEST_ASSERT_EQUAL(2, p.hashSize);
+    TEST_ASSERT_EQUAL_size_t(7, p.payloadLen);
+    TEST_ASSERT_EQUAL_HEX8(0x7f, p.payload[0]);
+    TEST_ASSERT_TRUE(p.addressed());
+}
+
+void test_what_is_not_a_meshcore_packet() {
+    Packet p;
+    const uint8_t version[] = {0x40 | 0x05, 0x00, 1, 2};      // a version that doesn't exist yet
+    const uint8_t reserved[] = {0x0c << 2 | 0x01, 0x00, 1, 2}; // a reserved type
+    const uint8_t longPath[] = {0x05, 0x09, 1, 2, 3};          // nine hops, three bytes left
+    const uint8_t badHash[] = {0x05, 0xc1, 1, 2, 3, 4};        // 4-byte hashes aren't defined
+    TEST_ASSERT_FALSE(parsePacket(version, sizeof version, p));
+    TEST_ASSERT_FALSE(parsePacket(reserved, sizeof reserved, p));
+    TEST_ASSERT_FALSE(parsePacket(longPath, sizeof longPath, p));
+    TEST_ASSERT_FALSE(parsePacket(badHash, sizeof badHash, p));
+    TEST_ASSERT_FALSE(parsePacket(version, 1, p));
+}
+
+void test_advert() {
+    auto v = advert("Brussels-R1");
+    Packet p;
+    Advert a;
+    TEST_ASSERT_TRUE(parsePacket(v.data(), v.size(), p));
+    TEST_ASSERT_TRUE(parseAdvert(p, a));
+    TEST_ASSERT_EQUAL_STRING("Brussels-R1", a.name.c_str());
+    TEST_ASSERT_EQUAL(2, a.kind);
+    TEST_ASSERT_TRUE(a.hasLocation);
+    TEST_ASSERT_EQUAL_INT32(50860320, a.latE6);
+    TEST_ASSERT_EQUAL_INT32(4300480, a.lonE6);
+    TEST_ASSERT_EQUAL_HEX32(0x68d05e00, a.timestamp);
+    TEST_ASSERT_EQUAL_HEX8(0xc0, a.key[0]);
+
+    auto plain = advert("n", false, 0);
+    TEST_ASSERT_TRUE(parsePacket(plain.data(), plain.size(), p));
+    TEST_ASSERT_TRUE(parseAdvert(p, a));
+    TEST_ASSERT_FALSE(a.hasLocation);
+    TEST_ASSERT_EQUAL_STRING("n", a.name.c_str());
+
+    v.resize(60);  // cut short: still a packet, not an advert that can be read
+    TEST_ASSERT_TRUE(parsePacket(v.data(), v.size(), p));
+    TEST_ASSERT_FALSE(parseAdvert(p, a));
+}
+
+void test_rows() {
+    auto v = advert("Brussels-R1");
+    lora::PacketSummary s{v.data(), v.size(), -97.4f, 6.25f, true, lora::Protocol::MeshCore};
+    TEST_ASSERT_EQUAL_STRING("21:45:07 -97 6.2 adv Brussels-R1 2h", lora::row(s, "21:45:07").c_str());
+    auto longName = advert("A repeater with a very long name");
+    lora::PacketSummary l{longName.data(), longName.size(), -117.0f, -12.25f, true, lora::Protocol::MeshCore};
+    TEST_ASSERT_TRUE(lora::row(l, "21:45:07").size() <= 38);
+
+    const uint8_t text[] = {0x02 << 2 | 0x02, 0x00, 0x7f, 0xa3, 0xde, 0xad, 1, 2, 3};
+    lora::PacketSummary t{text, sizeof text, -80.0f, 9.0f, true, lora::Protocol::MeshCore};
+    TEST_ASSERT_EQUAL_STRING("21:45:07 -80 9.0 txt a3>7f", lora::row(t, "21:45:07").c_str());
+
+    const uint8_t group[] = {0x05 << 2 | 0x01, 0x01, 0x42, 0x11, 0xbe, 0xef, 1, 2, 3, 4};
+    lora::PacketSummary g{group, sizeof group, -80.0f, 9.0f, true, lora::Protocol::MeshCore};
+    TEST_ASSERT_EQUAL_STRING("21:45:07 -80 9.0 chan #11 1h", lora::row(g, "21:45:07").c_str());
+
+    // Not MeshCore after all (sync word 0x12 is anyone's): the bytes are counted, no more.
+    const uint8_t other[] = {0xff, 0x00, 1, 2};
+    lora::PacketSummary o{other, sizeof other, -80.0f, 9.0f, true, lora::Protocol::MeshCore};
+    TEST_ASSERT_EQUAL_STRING("21:45:07 -80 9.0 4 B", lora::row(o, "21:45:07").c_str());
+}
+
+void test_detail_lines() {
+    auto v = advert("Brussels-R1");
+    auto lines = lora::headerLines(v.data(), v.size(), lora::Protocol::MeshCore);
+    TEST_ASSERT_EQUAL_size_t(5, lines.size());
+    TEST_ASSERT_EQUAL_STRING("MeshCore advert, flood", lines[0].c_str());
+    TEST_ASSERT_EQUAL_STRING("Through a3 a4", lines[1].c_str());
+    TEST_ASSERT_EQUAL_STRING("Repeater Brussels-R1", lines[2].c_str());
+    TEST_ASSERT_EQUAL_STRING("Key c0c1c2c3c4c5c6c7...", lines[3].c_str());
+    TEST_ASSERT_EQUAL_STRING("At 50.86032, 4.30048", lines[4].c_str());
+
+    const uint8_t group[] = {0x05 << 2 | 0x01, 0x00, 0x11, 0xbe, 0xef, 1, 2, 3, 4};
+    lines = lora::headerLines(group, sizeof group, lora::Protocol::MeshCore);
+    TEST_ASSERT_EQUAL_size_t(3, lines.size());
+    TEST_ASSERT_EQUAL_STRING("MeshCore channel message, flood", lines[0].c_str());
+    TEST_ASSERT_EQUAL_STRING("Heard first hand: no repeater yet", lines[1].c_str());
+    TEST_ASSERT_EQUAL_STRING("Channel 0x11 (public?), 4 B encrypted", lines[2].c_str());
+
+    const uint8_t text[] = {0x02 << 2 | 0x02, 0x01, 0x42, 0x7f, 0xa3, 0xde, 0xad, 1, 2, 3};
+    lines = lora::headerLines(text, sizeof text, lora::Protocol::MeshCore);
+    TEST_ASSERT_EQUAL_STRING("MeshCore text message, direct", lines[0].c_str());
+    TEST_ASSERT_EQUAL_STRING("Route 42", lines[1].c_str());
+    TEST_ASSERT_EQUAL_STRING("From ..a3 to ..7f, 3 B encrypted", lines[2].c_str());
+
+    for (auto& l : lines) TEST_ASSERT_TRUE(l.size() <= 38);
+    TEST_ASSERT_EQUAL_size_t(0, lora::headerLines(text, sizeof text, lora::Protocol::None).size());
+}
+
+// As received near Brussels on 2026-10-09: a search for repeaters, and one answering.
+void test_discover_as_heard() {
+    const uint8_t ask[] = {0x2e, 0x00, 0x80, 0x04, 0xbb, 0xdd, 0x5f, 0x5a, 0x00, 0x00, 0x00, 0x00};
+    const uint8_t answer[] = {0x2e, 0x00, 0x92, 0x2d, 0xbb, 0xdd, 0x5f, 0x5a, 0x18, 0xa6, 0x3f, 0xae, 0xf4, 0x01, 0x9b, 0xee,
+                              0xd0, 0x4f, 0xfd, 0xd3, 0xd1, 0x72, 0x65, 0xba, 0x4b, 0x9e, 0xeb, 0xd0, 0xdf, 0xb0, 0xb2, 0xc4,
+                              0x94, 0xec, 0x50, 0x5b, 0x03, 0x20, 0x59, 0x9d};
+    Packet p;
+    Discover d;
+    TEST_ASSERT_TRUE(parsePacket(ask, sizeof ask, p));
+    TEST_ASSERT_TRUE(p.route == Route::Direct);
+    TEST_ASSERT_TRUE(p.type == Payload::Control);
+    TEST_ASSERT_TRUE(parseDiscover(p, d));
+    TEST_ASSERT_FALSE(d.response);
+    TEST_ASSERT_EQUAL_HEX8(0x04, d.kinds);
+    TEST_ASSERT_EQUAL_HEX32(0x5a5fddbb, d.tag);
+    TEST_ASSERT_TRUE(parsePacket(answer, sizeof answer, p));
+    TEST_ASSERT_TRUE(parseDiscover(p, d));
+    TEST_ASSERT_TRUE(d.response);
+    TEST_ASSERT_EQUAL(2, d.kind);
+    TEST_ASSERT_EQUAL_FLOAT(11.25f, d.snr);
+    TEST_ASSERT_EQUAL_HEX32(0x5a5fddbb, d.tag);
+    TEST_ASSERT_EQUAL_size_t(32, d.idLen);
+
+    lora::PacketSummary a{ask, sizeof ask, -107.0f, -7.0f, true, lora::Protocol::MeshCore};
+    TEST_ASSERT_EQUAL_STRING("20:44:01 -107 -7.0 who's there?", lora::row(a, "20:44:01").c_str());
+    lora::PacketSummary r{answer, sizeof answer, -96.0f, 3.0f, true, lora::Protocol::MeshCore};
+    TEST_ASSERT_EQUAL_STRING("20:44:02 -96 3.0 here 18a6", lora::row(r, "20:44:02").c_str());
+
+    auto lines = lora::headerLines(ask, sizeof ask, lora::Protocol::MeshCore);
+    TEST_ASSERT_EQUAL_size_t(4, lines.size());
+    TEST_ASSERT_EQUAL_STRING("MeshCore control, direct", lines[0].c_str());
+    TEST_ASSERT_EQUAL_STRING("No route in it: to a neighbour", lines[1].c_str());
+    TEST_ASSERT_EQUAL_STRING("A search for nodes nearby", lines[2].c_str());
+    TEST_ASSERT_EQUAL_STRING("Wanted: Repeater", lines[3].c_str());
+    lines = lora::headerLines(answer, sizeof answer, lora::Protocol::MeshCore);
+    TEST_ASSERT_EQUAL_size_t(5, lines.size());
+    TEST_ASSERT_EQUAL_STRING("Repeater answering a search", lines[2].c_str());
+    TEST_ASSERT_EQUAL_STRING("Key 18a63faef4019bee...", lines[3].c_str());
+    TEST_ASSERT_EQUAL_STRING("It heard the search at 11.2 dB SNR", lines[4].c_str());
+}
+
+void test_aes128_decrypts_the_standard_block() {  // FIPS 197, appendix C.1
+    uint8_t key[16], in[16] = {0x69, 0xc4, 0xe0, 0xd8, 0x6a, 0x7b, 0x04, 0x30, 0xd8, 0xcd, 0xb7, 0x80, 0x70, 0xb4, 0xc5, 0x5a}, out[16];
+    for (int i = 0; i < 16; ++i) key[i] = static_cast<uint8_t>(i);
+    Aes128(key).decryptBlock(in, out);
+    for (int i = 0; i < 16; ++i) TEST_ASSERT_EQUAL_HEX8(i * 0x11, out[i]);
+}
+
+// Messages on the public channel, relayed twice, encrypted and signed with openssl:
+// "Alice: hello from Brussels" and "Zo\xc3\xa9: \xc3\xa7a va ?", both sent at 1791575000.
+static const uint8_t kHello[] = {0x15, 0x02, 0xa3, 0x7f, 0x11, 0x20, 0x14, 0x90, 0xb7, 0xe1, 0x1d, 0x46, 0x5f,
+                                 0x3f, 0xac, 0x4f, 0x98, 0xa8, 0xc6, 0x07, 0x79, 0x4c, 0x96, 0x19, 0x5e, 0x54,
+                                 0x60, 0x67, 0x2b, 0x2e, 0xec, 0x0e, 0xe4, 0x6a, 0xbc, 0x8b, 0x51, 0x38, 0xfd};
+static const uint8_t kAccents[] = {0x15, 0x02, 0xa3, 0x7f, 0x11, 0x19, 0xdd, 0x85, 0x58, 0xc5, 0x73, 0x2d, 0x55,
+                                   0x4d, 0xf4, 0xfd, 0x02, 0x47, 0xdc, 0xfa, 0xa2, 0xce, 0x3b, 0xcb, 0xb1, 0x8e,
+                                   0x8f, 0x66, 0xc7, 0xd6, 0x61, 0x30, 0x3c, 0xbe, 0x29, 0xd7, 0xb8, 0x08, 0x26};
+
+void test_public_channel_message() {
+    TEST_ASSERT_EQUAL_HEX8(kPublicChannelHash, channelHash(channel(0)));
+    Packet p;
+    ChannelText t;
+    TEST_ASSERT_TRUE(parsePacket(kHello, sizeof kHello, p));
+    TEST_ASSERT_TRUE(readChannelText(p, t));
+    TEST_ASSERT_EQUAL_STRING("Public", t.channel);
+    TEST_ASSERT_EQUAL_UINT32(1791575000, t.timestamp);
+    TEST_ASSERT_EQUAL_STRING("Alice", t.sender.c_str());
+    TEST_ASSERT_EQUAL_STRING("hello from Brussels", t.text.c_str());
+
+    TEST_ASSERT_TRUE(parsePacket(kAccents, sizeof kAccents, p));
+    TEST_ASSERT_TRUE(readChannelText(p, t));
+    TEST_ASSERT_EQUAL_STRING("Zo?", t.sender.c_str());  // one '?' for a character outside ASCII
+    TEST_ASSERT_EQUAL_STRING("?a va ?", t.text.c_str());
+
+    // One bit wrong and the check fails: nothing is made up from it.
+    std::vector<uint8_t> bad(kHello, kHello + sizeof kHello);
+    bad[20] ^= 1;
+    TEST_ASSERT_TRUE(parsePacket(bad.data(), bad.size(), p));
+    TEST_ASSERT_FALSE(readChannelText(p, t));
+    // Another channel with the same first byte, or not whole blocks: left encrypted.
+    bad.assign(kHello, kHello + sizeof kHello - 1);
+    TEST_ASSERT_TRUE(parsePacket(bad.data(), bad.size(), p));
+    TEST_ASSERT_FALSE(readChannelText(p, t));
+}
+
+void test_public_channel_message_shown() {
+    lora::PacketSummary s{kHello, sizeof kHello, -97, 6.2f, true, lora::Protocol::MeshCore};
+    std::string row = lora::row(s, "21:45:07");
+    TEST_ASSERT_EQUAL_STRING("21:45:07 -97 6.2 Alice: hello from 2h", row.c_str());
+    TEST_ASSERT_LESS_OR_EQUAL(38, row.size());
+    auto lines = lora::headerLines(kHello, sizeof kHello, lora::Protocol::MeshCore);
+    TEST_ASSERT_EQUAL_size_t(5, lines.size());
+    TEST_ASSERT_EQUAL_STRING("MeshCore channel message, flood", lines[0].c_str());
+    TEST_ASSERT_EQUAL_STRING("Through a3 7f", lines[1].c_str());
+    TEST_ASSERT_EQUAL_STRING("On the Public channel, from Alice", lines[2].c_str());
+    TEST_ASSERT_EQUAL_STRING("Sent 2026-10-09 19:43:20 UTC", lines[3].c_str());
+    TEST_ASSERT_EQUAL_STRING("hello from Brussels", lines[4].c_str());
+}
+
+void test_scan_presets() {
+    TEST_ASSERT_EQUAL_size_t(8, lora::scanPresetCount());
+    TEST_ASSERT_EQUAL_STRING("MeshCore", lora::scanPreset(lora::kDefaultScanPreset).name);
+    lora::ScanPreset p = lora::scanPreset(0);  // the order stays: a preset is stored by number
+    TEST_ASSERT_EQUAL_STRING("LongFast", p.name);
+    TEST_ASSERT_EQUAL_UINT32(869525000u, p.frequencyHz);
+    TEST_ASSERT_EQUAL_HEX8(0x2B, p.syncWord);
+    TEST_ASSERT_TRUE(lora::findScanPreset("meshcore", p));
+    TEST_ASSERT_EQUAL_STRING("MeshCore", p.name);
+    TEST_ASSERT_EQUAL_UINT32(869618000u, p.frequencyHz);
+    TEST_ASSERT_EQUAL_FLOAT(62.5f, p.bwKHz);
+    TEST_ASSERT_EQUAL(8, p.sf);
+    TEST_ASSERT_EQUAL(8, p.cr);
+    TEST_ASSERT_EQUAL_HEX8(0x12, p.syncWord);
+    TEST_ASSERT_EQUAL(16, p.preamble);
+    TEST_ASSERT_TRUE(p.protocol == lora::Protocol::MeshCore);
+    TEST_ASSERT_TRUE(lora::protocolOf(0x12) == lora::Protocol::MeshCore);
+    TEST_ASSERT_TRUE(lora::protocolOf(0x2B) == lora::Protocol::Meshtastic);
+    TEST_ASSERT_TRUE(lora::protocolOf(0x34) == lora::Protocol::None);
+    TEST_ASSERT_FALSE(lora::findScanPreset("ShortTurbo", p));
+    TEST_ASSERT_FALSE(lora::findScanPreset("MeshCor", p));
+}
+
+int main() {
+    UNITY_BEGIN();
+    RUN_TEST(test_header_route_type_and_path);
+    RUN_TEST(test_transport_codes_and_wider_hashes);
+    RUN_TEST(test_what_is_not_a_meshcore_packet);
+    RUN_TEST(test_advert);
+    RUN_TEST(test_rows);
+    RUN_TEST(test_detail_lines);
+    RUN_TEST(test_discover_as_heard);
+    RUN_TEST(test_aes128_decrypts_the_standard_block);
+    RUN_TEST(test_public_channel_message);
+    RUN_TEST(test_public_channel_message_shown);
+    RUN_TEST(test_scan_presets);
+    return UNITY_END();
+}
@@ -17,30 +17,30 @@ static const uint8_t kMeshtastic[] = {
 };

 void test_row_for_a_meshtastic_packet() {
-    PacketSummary p{kMeshtastic, sizeof kMeshtastic, -97.4f, 6.25f, true, true};
+    PacketSummary p{kMeshtastic, sizeof kMeshtastic, -97.4f, 6.25f, true, Protocol::Meshtastic};
    // Time, RSSI, SNR, then who sent it to whom (by default short name: the last 4 hex digits,
    // as Meshtastic names a Node) and how far it came. Fits 40 columns with two node numbers.
    TEST_ASSERT_EQUAL_STRING("21:45:07 -97 6.2 5678>all 1/3", row(p, "21:45:07").c_str());
    const uint8_t direct[] = {0x0a, 0x0b, 0x0c, 0x0d, 0xc4, 0xd3, 0xb2, 0xa1, 1, 2, 3, 4, 0x6a, 8, 0, 0xaa};
-    PacketSummary d{direct, sizeof direct, -117.0f, -9.25f, true, true};
+    PacketSummary d{direct, sizeof direct, -117.0f, -9.25f, true, Protocol::Meshtastic};
    TEST_ASSERT_EQUAL_STRING("21:45:07 -117 -9.2 d3c4>0b0a 1/3", row(d, "21:45:07").c_str());
    TEST_ASSERT_TRUE(row(d, "21:45:07").size() <= 38);
 }

 void test_row_for_something_else() {
    const uint8_t data[] = {0x40, 0x01, 0x02};
-    PacketSummary p{data, sizeof data, -120.6f, -7.5f, true, false};
+    PacketSummary p{data, sizeof data, -120.6f, -7.5f, true, Protocol::None};
    TEST_ASSERT_EQUAL_STRING("21:45:07 -121 -7.5 3 B", row(p, "21:45:07").c_str());
 }

 // Not on Meshtastic settings (LoRaWAN, say): the same bytes aren't read as a Meshtastic header.
 void test_row_not_meshtastic() {
-    PacketSummary p{kMeshtastic, sizeof kMeshtastic, -97.0f, 6.0f, true, false};
+    PacketSummary p{kMeshtastic, sizeof kMeshtastic, -97.0f, 6.0f, true, Protocol::None};
    TEST_ASSERT_EQUAL_STRING("21:45:07 -97 6.0 19 B", row(p, "21:45:07").c_str());
 }

 void test_row_with_a_bad_crc() {
-    PacketSummary p{kMeshtastic, sizeof kMeshtastic, -97.0f, 6.0f, false, true};
+    PacketSummary p{kMeshtastic, sizeof kMeshtastic, -97.0f, 6.0f, false, Protocol::Meshtastic};
    TEST_ASSERT_EQUAL_STRING("21:45:07 -97 6.0 bad CRC, 19 B", row(p, "21:45:07").c_str());
 }

--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
twislaandClaude Opus 5.5	0c52613b72	Settings: its rows in five groups CI / build (pull_request) Successful in 2m22s Details Site / build (pull_request) Successful in 10s Details Settings had grown to 21 rows in one list. It opens on five groups (This device, Display, GNSS and radio, Network, System); Enter opens one, Back returns to the groups, and Back from the groups leaves Settings. SettingsMenu holds the groups and which one is open (host-tested: every setting is in exactly one group). The guide, the how-tos, the README, the scripts' messages and the firmware's own name the new paths, such as "Settings > System > Firmware". Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0162FokPdvY2KsS4NBfwyWPk	2026-10-10 00:11:52 +02:00
twislaandClaude Opus 5.5	37335b4829	UI: seven themes, each dark and light, chosen in the Settings Settings > Theme and Settings > Light or dark pick the colours of every screen (issue #10): roro9stack (the website's, the default), Catppuccin, Dracula, Nord, ANSI terminal, Gruvbox and Solarized. - A palette is 14 roles (lib/ui/src/palette.h). theme::kText and the others are now references into the one in use, so the Apps are unchanged; the main loop applies it when a Setting changes. - Every colour is one the RGB332 frame buffer holds exactly: the themes' own were rounded, and those that fell together or lost contrast were picked by hand. test_palette checks exactness and 18 contrast ratios for each palette. - The Sky view's constellation colours come from the theme. - `theme [0-6] [light\|dark]` on the consoles. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0162FokPdvY2KsS4NBfwyWPk	2026-10-10 00:11:52 +02:00
twislaandClaude Opus 5.5	10627e6e18	Launcher: the selected icon in slate, the name in white The selected icon was dark blue on its cyan tile, which read as black: it is the Status Bar's slate now. The App's name under the grid is white instead of cyan. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0162FokPdvY2KsS4NBfwyWPk	2026-10-09 23:23:20 +02:00
twislaandClaude Opus 5.5	e2326e113b	Launcher: a grid of icons, with badges; the list stays as a Setting The Launcher shows the Apps as a 4 x 3 grid of 32 x 32 icons, the selected one's name under it (issue #9). The icons are the website's own, doubled, and two drawn the same way for SSH and the Shell; they are PNGs in assets/icons, turned into arrays by scripts/make_icons.py, which CI checks. The selected tile is the website's: dark blue on cyan, with notched corners. - GridModel (lib/ui, host-tested) holds the selection and the scrolling. - App::badge(): a dot on the tile for unread IRC messages, a Track recording, a Capture running, an SSH session open. - Settings > Launcher: Grid or List. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0162FokPdvY2KsS4NBfwyWPk	2026-10-09 23:14:37 +02:00
twislaandClaude Opus 5.5	aadfd8cb37	UI: the website's colours, on every screen The theme takes the website's palette, each a colour the RGB332 frame buffer holds exactly: cyan for the accent, a selected row and a chosen button in cyan with dark blue text, a slate Status Bar (the grey it asked for was shown as a dull olive), the website's orange for warnings and its pink for messages. "Good" (a Fix, the quietest channel) keeps a green of its own, which the website doesn't have. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0162FokPdvY2KsS4NBfwyWPk	2026-10-09 23:14:37 +02:00
twislaandClaude Opus 5.5	b1c80c912f	SSH App: its messages were cleared the moment they were set The bottom-line message (a malformed address, not enough memory, a session still closing) is timed from millis() when a key sets it, and update() compared that with the pass's own time, read before the keys were handled. The unsigned difference wrapped, so the message was cleared before it was ever drawn: Enter on a new connection that was refused looked like it did nothing. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0162FokPdvY2KsS4NBfwyWPk	2026-10-09 23:14:20 +02:00
twisla	015a9c59bc	Merge pull request 'LoRa Scanner: a MeshCore preset (the default), its packets and public channel read' (#96 ) from meshcore-scanner into main CI / build (push) Successful in 1m0s Details Site / build (push) Successful in 13s Details	2026-10-09 20:23:28 +00:00
twislaandClaude Opus 5.5	305818466f	LoRa Scanner: MeshCore by default, and its public channel read CI / build (pull_request) Successful in 2m19s Details Site / build (pull_request) Successful in 9s Details The MeshCore preset is the default for a new device, in the Settings and in the radio before the Scanner is opened. The setting now accepts it: it only took the 7 Meshtastic presets, so MeshCore picked in the App was not saved. Messages on MeshCore's public channel are decrypted with the channel's published key (AES-128, checked with 2 bytes of HMAC-SHA256): the row shows who says they sent it and the start of the text, the details the sender, the time and the whole text. Other channels and private messages stay encrypted. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0162FokPdvY2KsS4NBfwyWPk	2026-10-09 22:19:14 +02:00
twislaandClaude Opus 5.5	3339d9ee59	LoRa Scanner: MeshCore searches for nodes and their answers, read The first two MeshCore packets heard were these: a search for repeaters and a repeater answering. Both are in clear; they are the test's bytes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0162FokPdvY2KsS4NBfwyWPk	2026-10-09 20:51:15 +02:00
twislaandClaude Opus 5.5	8ba41f72b6	LoRa Scanner: a MeshCore preset, and its packets read - MeshCore joins the presets (EU/UK Narrow: 869.618 MHz, 62.5 kHz, SF8, CR 4/8, sync 0x12), after the Meshtastic ones so stored choices keep their number; `lora preset MeshCore` on the console - lib/meshcore reads what MeshCore sends in clear: header, path, and a node's advert (name, kind, key, position) - the list row, the details, a Capture's viewer and the console echo read a packet by the sync word it was received on - the bandwidth is printed as 62.5, not 62 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0162FokPdvY2KsS4NBfwyWPk	2026-10-09 20:30:29 +02:00