firestar5683
02ae25b975
Count distinct touch releases by their original timestamps, retain taps during valid Park dwell, and let preparation earn its own admission. Cancel only the pending C4 startup camera redirect for a freshly parked open game. All session, physical, alert, control, noOutput, ignition and input authority checks remain unchanged. 231 focused native cases, original before regressions, current successor entry/decoder qualification, canonical lint/type checks and independent review. Host functional evidence; no device changes or headroom claim.
StarPilot native UI
StarPilot uses separate large (C3) and compact (C4) layouts over the native camera, model renderer and application lifecycle. The same presentation components serve the device and Galaxy's sample layout preview.
Runtime ownership
runtime_app.pyconnects the native navigation, touch handling, camera layers and settings owners. It cancels pending gestures when pages change.runtime_snapshot.pyprojects service observations and saved preferences into display state. Message validity, age and drive identity remain separate from saved configuration.shell.pycombines Home, Settings and Onroad. Renderers consume snapshots; input handlers emit requests to the owner responsible for the action.onroad.pycomposes profile-specific widgets, overlays and alerts.onroad_customization.pyowns the versioned layout and color document; the Galaxy editor and native renderers use the same widget registry.ui_state.pyinselfdrive/uifollows hardwared's effective started state. Physical ignition remains separate. Camera reception, model filters and transition updates must continue when a settled opaque settings page skips their painting.
Preference editors do not grant driving authority. Feature owners validate configuration changes; control consumers and native safety retain their own checks. A speed-limit action carries the displayed decision's session and identity, which the planner verifies before accepting it. Hiding or moving a widget must preserve the corresponding hit target and must not hide alerts.
Shared feature contracts live with speed limits, conditional modes, lateral control, AOL, longitudinal control, models and Galaxy.
Running and previewing
From the repository root, ./c3 and ./c4 launch the large and compact UI in
an isolated host runtime. Each accepts an optional leading build-job count.
SP_C3_COMPILE_ONLY=1 or SP_C4_COMPILE_ONLY=1 prepares that runtime without
opening a window. Host settings are kept in its private Params store.
For a deterministic presentation capture with supplied sample state:
./dev python -m openpilot.starpilot.ui.preview_shell \
--profile compact \
--font-directory openpilot/starpilot/ui/assets/fonts \
--asset-directory openpilot/selfdrive/assets \
--output /tmp/starpilot-ui-preview
Use --profile large for C3. preview_typography, preview_home,
preview_settings, preview_device, preview_software and
preview_slc_actions provide narrower fixtures; each exposes its arguments
with --help. Previews require a graphics context. They do not launch driving
services, operate a vehicle or establish device performance.
Arabesque Files
The large UI's Developer panel opens Arabesque. Its dock offers Terminal and Files; Desktop closes the active tool. Files provides touch navigation, small UTF-8 text previews, new folders, rename, copy, move and confirmed permanent deletion. Copy and move use a destination picker, one item at a time.
Writes are limited to Home and Data, with the running software, Params, persistence and recording roots protected. Links and special files are read-only; folders containing them cannot be copied. Moves require the same filesystem; use Copy between filesystems. Text previews stop at 256 KiB. File work requires confirmed off-road access. Closing Files cancels pending work; an interrupted recursive deletion can already have removed some items.
Performance diagnostics
UI_FRAME_TIMING=1 ./c4 (or ./c3) enables phase timing. UI Debug Mode also
shows FPS and enables timing. Slow-frame warnings separate drawing, caller
updates and presentation wall time from thread CPU time; camera, model and
other nested phases help locate the work. Nested timings overlap and must not
be added together.
Without continuous tracing, a slow-frame warning starts a bounded diagnostic
window: up to 360 slow samples over six seconds, followed by a 60-second
cooldown. The log reports per-phase medians and maxima. Frame pacing and the
uiDebug message schema are unchanged.
Compare the same source, assets, saved layout, input sequence and render mode when measuring an optimization. Preserve update and input behavior as well as pixels. Offscreen rendering and component timings exclude parts of the running application; verify sustained performance on the device with its normal camera and model workload.
Assets and recovery
startup.py validates bundled fonts and artwork before acquiring graphics
resources. Missing or modified assets select the upstream UI and log the
reason. STARPILOT_UI=upstream explicitly selects that recovery presentation.
STARPILOT_UI_DEV=1 instead fails visibly when custom assets are invalid; the
explicit upstream selection takes precedence.
STARPILOT_UI_FONT_DIR can point to a complete, validated Inter/Unifont bitmap
set. Sora's Home wordmark uses its bundled bitmap. Font descriptors, atlases and
artwork have source-controlled hash manifests. Keep their glyph metrics and
profile scales together; do not regenerate atlases as part of a routine build.
Close owned fonts and textures before destroying the graphics context.
The adjacent LICENSE and asset notices retain applicable code, font and image attribution. Hash validation establishes asset identity, not redistribution rights.