diff --git a/.gitignore b/.gitignore
index aab93a6..90dee08 100644
--- a/.gitignore
+++ b/.gitignore
@@ -39,3 +39,7 @@ mise.local.toml
 /EVHardware/build
 /EVHardware/.gradle
 /EVHardware/**/build
+
+# Filled-in Kubernetes Secrets (copy of k8s/secrets/secrets.example.yaml). Never commit.
+/k8s/secrets.yaml
+/k8s/secrets/secrets.yaml
diff --git a/.next/cache/_events_79120_d0eaad9b80692b5d.json b/.next/cache/_events_79120_d0eaad9b80692b5d.json
deleted file mode 100644
index a25504d..0000000
--- a/.next/cache/_events_79120_d0eaad9b80692b5d.json
+++ /dev/null
@@ -1 +0,0 @@
-[{"eventName":"NEXT_CLI_SESSION_STOPPED","payload":{"nextVersion":"16.4.0","nodeVersion":"v24.12.0","cliCommand":"dev","durationMilliseconds":348,"turboFlag":true,"pagesDir":false,"appDir":true,"isRspack":false}}]
\ No newline at end of file
diff --git a/.next/cache/_events_79235_382896d082e25d69.json b/.next/cache/_events_79235_382896d082e25d69.json
deleted file mode 100644
index 24ede18..0000000
--- a/.next/cache/_events_79235_382896d082e25d69.json
+++ /dev/null
@@ -1 +0,0 @@
-[{"eventName":"NEXT_CLI_SESSION_STOPPED","payload":{"nextVersion":"16.4.0","nodeVersion":"v24.12.0","cliCommand":"dev","durationMilliseconds":345,"turboFlag":true,"pagesDir":false,"appDir":true,"isRspack":false}}]
\ No newline at end of file
diff --git a/.next/dev/build-manifest.json b/.next/dev/build-manifest.json
deleted file mode 100644
index cc102f9..0000000
--- a/.next/dev/build-manifest.json
+++ /dev/null
@@ -1,15 +0,0 @@
-{
-  "pages": {
-    "/_app": []
-  },
-  "devFiles": [],
-  "polyfillFiles": [],
-  "lowPriorityFiles": [
-    "static/development/_buildManifest.js",
-    "static/development/_ssgManifest.js",
-    "static/development/_clientMiddlewareManifest.js"
-  ],
-  "rootMainFiles": [],
-  "rootMainFilesTree": {},
-  "pagesChunkGroupBootstrapParams": {}
-}
\ No newline at end of file
diff --git a/.next/dev/cache/.rscinfo b/.next/dev/cache/.rscinfo
deleted file mode 100644
index 4830a4e..0000000
--- a/.next/dev/cache/.rscinfo
+++ /dev/null
@@ -1 +0,0 @@
-{"encryption.key":"UT9PfJliySgklhhPCIM4wpEhmx9PMD9GPB4iuPIamyM=","encryption.expire_at":1792761221411}
\ No newline at end of file
diff --git a/.next/dev/cache/turbopack/v16.4.0-e273d5b2/CURRENT b/.next/dev/cache/turbopack/v16.4.0-e273d5b2/CURRENT
deleted file mode 100644
index 5f9b019..0000000
--- a/.next/dev/cache/turbopack/v16.4.0-e273d5b2/CURRENT
+++ /dev/null
@@ -1 +0,0 @@
-{"max_sequence_number":0,"commit_time":"2026-10-09T13:13:41.418251Z"}
diff --git a/.next/dev/fallback-build-manifest.json b/.next/dev/fallback-build-manifest.json
deleted file mode 100644
index cc102f9..0000000
--- a/.next/dev/fallback-build-manifest.json
+++ /dev/null
@@ -1,15 +0,0 @@
-{
-  "pages": {
-    "/_app": []
-  },
-  "devFiles": [],
-  "polyfillFiles": [],
-  "lowPriorityFiles": [
-    "static/development/_buildManifest.js",
-    "static/development/_ssgManifest.js",
-    "static/development/_clientMiddlewareManifest.js"
-  ],
-  "rootMainFiles": [],
-  "rootMainFilesTree": {},
-  "pagesChunkGroupBootstrapParams": {}
-}
\ No newline at end of file
diff --git a/.next/dev/lock b/.next/dev/lock
deleted file mode 100644
index faa33e6..0000000
--- a/.next/dev/lock
+++ /dev/null
@@ -1 +0,0 @@
-{"pid":79123,"port":3001,"hostname":"localhost","appUrl":"http://localhost:3001","startedAt":1791551621304}
\ No newline at end of file
diff --git a/.next/dev/logs/next-development.log b/.next/dev/logs/next-development.log
deleted file mode 100644
index 2cc714a..0000000
--- a/.next/dev/logs/next-development.log
+++ /dev/null
@@ -1,3 +0,0 @@
-{"timestamp":"00:00:01.802","source":"Server","level":"ERROR","message":"Turbopack build encountered 1 error:\n./app\nError: Could not find the Next.js package (next/package.json)\nResolved from: /Users/tcfdonmez/Desktop/Coding/MG/EVABRPUploader/app\nFilesystem root used for resolution: /Users/tcfdonmez/Desktop/Coding/MG/EVABRPUploader\n\nPossible causes:\n  - node_modules is being reorganized by a concurrent install (e.g. pnpm adding a package with a `next` peer dependency). This is transient and should clear once the install completes.\n  - node_modules/next was removed, renamed, or has a broken symlink.\n  - The workspace root is incorrect — see turbopack.root in the Next.js config docs for how to configure it.\n  - In a monorepo, the Next.js package may only exist in a directory above the closest directory containing a package manager lockfile. The workspace root is detected by locating the nearest package manager lockfile.\n  - Next.js is installed globally rather than as a project dependency. This is not supported; install it locally.\n\nNote: To ensure a hermetic build and a portable cache, files outside of the workspace root are not compiled.\n\nhttps://nextjs.org/docs/app/api-reference/config/next-config-js/turbopack#root-directory\n\n"}
-{"timestamp":"00:00:02.079","source":"Server","level":"LOG","message":""}
-{"timestamp":"00:00:02.080","source":"Server","level":"LOG","message":"✓ Generated AGENTS.md for AI agents. Set `agentRules: false` in next.config to disable."}
diff --git a/.next/dev/package.json b/.next/dev/package.json
deleted file mode 100644
index c9a4422..0000000
--- a/.next/dev/package.json
+++ /dev/null
@@ -1,3 +0,0 @@
-{
-  "type": "commonjs"
-}
\ No newline at end of file
diff --git a/.next/dev/prerender-manifest.json b/.next/dev/prerender-manifest.json
deleted file mode 100644
index 4400a7a..0000000
--- a/.next/dev/prerender-manifest.json
+++ /dev/null
@@ -1,6 +0,0 @@
-{
-  "version": 4,
-  "routes": {},
-  "dynamicRoutes": {},
-  "notFoundRoutes": []
-}
\ No newline at end of file
diff --git a/.next/dev/routes-manifest.json b/.next/dev/routes-manifest.json
deleted file mode 100644
index 442224a..0000000
--- a/.next/dev/routes-manifest.json
+++ /dev/null
@@ -1 +0,0 @@
-{"version":3,"caseSensitive":false,"basePath":"","rewrites":{"beforeFiles":[],"afterFiles":[],"fallback":[]},"redirects":[{"source":"/:path+/","destination":"/:path+","permanent":true,"internal":true,"priority":true,"regex":"^(?:\\/((?:[^\\/]+?)(?:\\/(?:[^\\/]+?))*))\\/$"}],"headers":[],"onMatchHeaders":[]}
\ No newline at end of file
diff --git a/.next/dev/server/app-paths-manifest.json b/.next/dev/server/app-paths-manifest.json
deleted file mode 100644
index 9e26dfe..0000000
--- a/.next/dev/server/app-paths-manifest.json
+++ /dev/null
@@ -1 +0,0 @@
-{}
\ No newline at end of file
diff --git a/.next/dev/server/interception-route-rewrite-manifest.js b/.next/dev/server/interception-route-rewrite-manifest.js
deleted file mode 100644
index 24f77ba..0000000
--- a/.next/dev/server/interception-route-rewrite-manifest.js
+++ /dev/null
@@ -1 +0,0 @@
-self.__INTERCEPTION_ROUTE_REWRITE_MANIFEST="[]";
\ No newline at end of file
diff --git a/.next/dev/server/middleware-build-manifest.js b/.next/dev/server/middleware-build-manifest.js
deleted file mode 100644
index 4de4f4f..0000000
--- a/.next/dev/server/middleware-build-manifest.js
+++ /dev/null
@@ -1,15 +0,0 @@
-globalThis.__BUILD_MANIFEST = {
-  "pages": {
-    "/_app": []
-  },
-  "devFiles": [],
-  "polyfillFiles": [],
-  "lowPriorityFiles": [
-    "static/development/_buildManifest.js",
-    "static/development/_ssgManifest.js",
-    "static/development/_clientMiddlewareManifest.js"
-  ],
-  "rootMainFiles": [],
-  "rootMainFilesTree": {},
-  "pagesChunkGroupBootstrapParams": {}
-};
diff --git a/.next/dev/server/middleware-manifest.json b/.next/dev/server/middleware-manifest.json
deleted file mode 100644
index eb7130b..0000000
--- a/.next/dev/server/middleware-manifest.json
+++ /dev/null
@@ -1,6 +0,0 @@
-{
-  "version": 3,
-  "middleware": {},
-  "sortedMiddleware": [],
-  "functions": {}
-}
\ No newline at end of file
diff --git a/.next/dev/server/next-font-manifest.js b/.next/dev/server/next-font-manifest.js
deleted file mode 100644
index dcd0697..0000000
--- a/.next/dev/server/next-font-manifest.js
+++ /dev/null
@@ -1 +0,0 @@
-self.__NEXT_FONT_MANIFEST="{\n  \"app\": {},\n  \"appUsingSizeAdjust\": false,\n  \"pages\": {},\n  \"pagesUsingSizeAdjust\": false\n}"
\ No newline at end of file
diff --git a/.next/dev/server/next-font-manifest.json b/.next/dev/server/next-font-manifest.json
deleted file mode 100644
index 7b7649c..0000000
--- a/.next/dev/server/next-font-manifest.json
+++ /dev/null
@@ -1,6 +0,0 @@
-{
-  "app": {},
-  "appUsingSizeAdjust": false,
-  "pages": {},
-  "pagesUsingSizeAdjust": false
-}
\ No newline at end of file
diff --git a/.next/dev/server/pages-manifest.json b/.next/dev/server/pages-manifest.json
deleted file mode 100644
index 9e26dfe..0000000
--- a/.next/dev/server/pages-manifest.json
+++ /dev/null
@@ -1 +0,0 @@
-{}
\ No newline at end of file
diff --git a/.next/dev/server/preview-props.json b/.next/dev/server/preview-props.json
deleted file mode 100644
index 0969aea..0000000
--- a/.next/dev/server/preview-props.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-  "previewModeId": "a508c818777951bed52c0170453ef7e3",
-  "previewModeSigningKey": "591a19b72d1a845a81057e56fb15a2ced8409045c0ed580013f217b8c4a4ea61",
-  "previewModeEncryptionKey": "ded0359fbc3be263ec7ff240e7fb98fc5b836958070834f5bc954f1092afa91c"
-}
\ No newline at end of file
diff --git a/.next/dev/server/server-reference-manifest.js b/.next/dev/server/server-reference-manifest.js
deleted file mode 100644
index 272af9c..0000000
--- a/.next/dev/server/server-reference-manifest.js
+++ /dev/null
@@ -1 +0,0 @@
-self.__RSC_SERVER_MANIFEST="{\n  \"node\": {},\n  \"edge\": {},\n  \"encryptionKey\": \"UT9PfJliySgklhhPCIM4wpEhmx9PMD9GPB4iuPIamyM=\"\n}"
\ No newline at end of file
diff --git a/.next/dev/server/server-reference-manifest.json b/.next/dev/server/server-reference-manifest.json
deleted file mode 100644
index b5a989e..0000000
--- a/.next/dev/server/server-reference-manifest.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-  "node": {},
-  "edge": {},
-  "encryptionKey": "UT9PfJliySgklhhPCIM4wpEhmx9PMD9GPB4iuPIamyM="
-}
\ No newline at end of file
diff --git a/.next/dev/static/development/_buildManifest.js b/.next/dev/static/development/_buildManifest.js
deleted file mode 100644
index bffda53..0000000
--- a/.next/dev/static/development/_buildManifest.js
+++ /dev/null
@@ -1,8 +0,0 @@
-self.__BUILD_MANIFEST = {
-  "__rewrites": {
-    "afterFiles": [],
-    "beforeFiles": [],
-    "fallback": []
-  },
-  "sortedPages": []
-};self.__BUILD_MANIFEST_CB && self.__BUILD_MANIFEST_CB()
\ No newline at end of file
diff --git a/.next/dev/static/development/_clientMiddlewareManifest.js b/.next/dev/static/development/_clientMiddlewareManifest.js
deleted file mode 100644
index a8acaff..0000000
--- a/.next/dev/static/development/_clientMiddlewareManifest.js
+++ /dev/null
@@ -1 +0,0 @@
-self.__MIDDLEWARE_MATCHERS = [];self.__MIDDLEWARE_MATCHERS_CB && self.__MIDDLEWARE_MATCHERS_CB()
\ No newline at end of file
diff --git a/.next/dev/static/development/_ssgManifest.js b/.next/dev/static/development/_ssgManifest.js
deleted file mode 100644
index 2260768..0000000
--- a/.next/dev/static/development/_ssgManifest.js
+++ /dev/null
@@ -1 +0,0 @@
-self.__SSG_MANIFEST=new Set;self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB()
\ No newline at end of file
diff --git a/.next/dev/types/routes.d.ts b/.next/dev/types/routes.d.ts
deleted file mode 100644
index 15617e1..0000000
--- a/.next/dev/types/routes.d.ts
+++ /dev/null
@@ -1,55 +0,0 @@
-// This file is generated automatically by Next.js
-// Do not edit this file manually
-
-type AppRoutes = never
-type PageRoutes = never
-type LayoutRoutes = never
-type RedirectRoutes = never
-type RewriteRoutes = never
-type Routes = AppRoutes | PageRoutes | LayoutRoutes | RedirectRoutes | RewriteRoutes
-
-
-interface ParamMap {
-}
-
-
-export type ParamsOf<Route extends Routes> = ParamMap[Route]
-
-interface LayoutSlotMap {
-}
-
-
-export type { AppRoutes, PageRoutes, LayoutRoutes, RedirectRoutes, RewriteRoutes, ParamMap }
-
-declare global {
-  /**
-   * Props for Next.js App Router page components
-   * @example
-   * ```tsx
-   * export default function Page(props: PageProps<'/blog/[slug]'>) {
-   *   const { slug } = await props.params
-   *   return <div>Blog post: {slug}</div>
-   * }
-   * ```
-   */
-  interface PageProps<AppRoute extends AppRoutes> {
-    params: Promise<ParamMap[AppRoute]>
-    searchParams: Promise<Record<string, string | string[] | undefined>>
-  }
-
-  /**
-   * Props for Next.js App Router layout components
-   * @example
-   * ```tsx
-   * export default function Layout(props: LayoutProps<'/dashboard'>) {
-   *   return <div>{props.children}</div>
-   * }
-   * ```
-   */
-  type LayoutProps<LayoutRoute extends LayoutRoutes> = {
-    params: Promise<ParamMap[LayoutRoute]>
-    children: React.ReactNode
-  } & {
-    [K in LayoutSlotMap[LayoutRoute]]: React.ReactNode
-  }
-}
diff --git a/AGENTS.md b/AGENTS.md
index fe6a381..36401e6 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -1,132 +1,130 @@
-# AGENTS.md — EVABRPUploader
+# AGENTS.md — Nils' MG4
 
-Context for AI agents and new contributors working in this repository.
-
-EVABRPUploader is part of **EVSuite**. The workspace `AGENTS.md` and normative
-workspace `DESIGN.md` apply; this file contains only telemetry-specific additions.
-
-## App-specific visual direction (2.2.6)
-
-The user explicitly requested a permanent OLED-black theme, charcoal glass-like cards,
-muted gold and cyan accents. These app resources intentionally override the shared
-DESIGN.md palette, DayNight preference and flat-surface rules. Do not overwrite them
-with the shared token generator. Use static gradients rather than continuous effects;
-keep large touch targets, readable text and null telemetry shown as a dash.
-Wide layouts start at 1000dp; narrower windows use a bottom navigation bar.
+Start here. What this repository is, how its parts fit, how to build, test and ship, and the
+rules for changing it. Details live in the documents linked below; `SPECS.md` is the journal
+(status, to-dos, a dated log of every change) and is updated with each change.
 
 ## What this is
 
-An Android Automotive app for the **MG4 (SAIC eh32)** that reads vehicle telemetry and
-pushes it to A Better Route Planner. It runs on the car's head unit (AAOS 9, MT2712).
-
-Fork of Leon Kernan's `ABRP_Uploader`. See `LICENSE.md` — the licence status is
-**unresolved** and that is a real constraint, not paperwork.
-
-## Non-negotiables
-
-1. **Telemetry is read-only.** No vehicle settings may be written. Window automation
-   was removed in 2.2.5 at the user's request, including its service and door listener.
-2. **A failed read is not a zero.** Getters return `Integer`/`Float`/`Boolean` and `null`
-   means "could not read". Null fields are omitted from the payload. Sending 0 for SOC
-   tells ABRP the battery is empty and wrecks a live route plan.
-3. **Fail closed.** Update origin, APK signature, unknown vehicle state — refuse rather
-   than assume.
-4. **Never let a credential reach a URL, a log line, or a crash report.**
-5. **AAOS 9 must stay stable.** A third-party app crashing the head unit is unacceptable.
-   Every car call goes through reflection with try/catch; keep it that way.
-6. **Power matters.** The head unit is awake whenever the car is on. No wake locks, no
-   alarms. The GPS subscription and the upload tick both cost power — keep them in step.
-
-## Architecture
+An app for the **MG4 (SAIC eh32)** head unit plus the backend it talks to:
 
 ```
-AbrpUploadService   foreground service; scheduler thread does all IPC and HTTP
-CarPropertyAdapter  reflection bridge to android.car (not on the compile classpath)
-TelemetryPayload    pure JSON building — no Android types, unit-tested
-UploadCadence       when a tick actually uploads — pure, unit-tested
-UploadSettings      user cadence configuration
-UploadLog           last 20 attempts + derived service state — pure, unit-tested
-SecurePrefs         credentials in EncryptedSharedPreferences, migrates plaintext
-AbrpApi             HTTP; credentials in the POST body, never the query string
-MainActivity        configuration, service state, upload log
+MG4 head unit (Android 9, AAOS, MT2712)
+  app/  "Nils' MG4" ──live data, consumption, charging──▶ server/ (Go) ──▶ InfluxDB 2 ◀── Grafana
+        │                                                   │ relays app releases from the forge
+        └──live data, straight, with the driver's own key──▶ ABRP (A Better Route Planner)
 ```
 
-**Put logic in the pure classes.** Anything Android-free can be unit-tested on the JVM;
-anything inside the service effectively cannot be tested without a car.
+- **app/** — Android app (Java, minSdk 27, runs on API 28). Reads the car through the
+  `EVHardware/` library, shows it (Overview, Consumption, Charging), sends live data to the
+  server and to ABRP, and updates itself.
+- **server/** — Go 1.26 API at `https://car.k8s.stinnesbeck.com`: stores telemetry, consumption
+  and charging in InfluxDB, pairs cars by QR code, carries settings typed on a phone, relays
+  app releases from the private forge. It does **not** talk to ABRP. See `server/README.md`.
+- **k8s/** — plain Kubernetes manifests (InfluxDB, server, Grafana with three provisioned
+  dashboards, Traefik routes). See `k8s/README.md`.
+- **EVHardware/** — vendored shared vehicle layer (PolyForm Noncommercial, see `LICENSE.md`).
 
-## Source sets
+Repository: `ssh://git@git.stinnesbeck.com:2222/nils/mg4.git` (remote `origin`), work branch
+`english-translation`. Upstream fork: `fatih` → github.com/fatihdonmezdev/FatihsMG4.
 
-| Set | Contents | Ships in |
-|---|---|---|
-| `main` | everything shared | all builds |
-| `stable` | `UpdateHook` no-op | stable channel |
-| `unstable` | active GitHub pre-release updater and PackageInstaller result receiver | unstable channel |
-| `debug` | `VhalProbe` — enumerates the whole VHAL | debug builds only |
-| `testUnstable` | OTA policy tests | test only |
+## Rules
 
-The stable channel does not merely disable self-update — the updater is **not in the
-APK**.
+1. **Nothing touches the Kubernetes cluster.** Write and validate manifests only; the owner
+   applies them. No `kubectl` against the cluster, not even read-only, unless asked.
+2. **Secrets.** Filled-in values only in `k8s/secrets/secrets.yaml` (gitignored);
+   `secrets.example.yaml` holds `CHANGE-ME` placeholders only. Stage files explicitly, check the
+   index for changes that are not yours (the owner works in parallel), and scan the staged diff
+   for secrets before every commit. Never print a token.
+3. **Telemetry is read-only.** The app never writes a vehicle setting.
+4. **A failed read is not a zero.** Unreadable values are `null`, omitted from payloads and
+   shown as "—". Sending 0 for SOC tells ABRP the battery is empty.
+5. **Fail closed.** Updates (origin, SHA-256, package, signature), credentials, unknown state.
+6. **No credential in a URL, a log line or a crash report.** Tokens go in headers or bodies.
+7. **The head unit must stay stable.** Every car call is reflection with try/catch; no
+   blocking car reads on the main thread.
+8. **Power.** No wake locks or alarms; GPS pauses while parked and idle.
+9. **Honesty.** Most behaviour cannot be verified off the car. Say what was tested (unit tests,
+   emulator, podman) and what was not. "Not tried on the car" is an acceptable answer.
 
-## Firmware generations
+## The car (confirmed on the owner's car, firmware `SWI68-29958-1300R69`)
 
-MG4 infotainment ships as SWI68 / SWI69 / SWI131 / SWI132 / SWI133 / SWI165, and they
-differ. Property IDs confirmed on one generation are not universal. Anything vehicle-facing
-must tolerate a property simply not existing.
+- Display 1920×720 px at **160 dpi**; the app window is **1778×720 px** (the car's own sidebar),
+  about **1778×640 dp** for layouts. Pages must fit that without scrolling where possible.
+- Signed with the public **AOSP test platform key**; the car build runs as `android.uid.system`.
+- Steering-wheel keys arrive as the broadcast `com.saic.keyevent.hardkey.report`
+  (`android.intent.extra.hardkey.keycode` / `.down` / `.longpress`); the voice key is **287**.
+- Not published by the car: battery, cabin and outside temperature, pack energy and capacity,
+  paint colour (only `ro.build.mtk2712.vehicle_type = AS28`). See `SPECS.md`, `FIRMWARE.md`.
+- No third-party apps in the MG launcher: the app opens by a double press of the voice key.
+- Its internet comes from the car itself (no Wi-Fi needed).
 
-**Two read paths, split by whether the signal is firmware-agnostic:**
+## The app
 
-| Signal | Read path | Firmwares |
-|---|---|---|
-| Speed, outside temp, park | `EVHardware` getters (`getVehicleSpeedKmh`, `getOutsideTempCelsius`, `isVehicleInPark`) | all six — EVHardware branches per generation internally |
-| SOC, range | `CarPropertyAdapter` vendor IDs (`0x2160F404`, `0x2140F41C`) | **SWI68 only** |
-| Charge rate/port, cabin temp | `CarPropertyAdapter` standard-AAOS IDs | wherever the VHAL implements them |
+| Tab | Contents |
+|---|---|
+| Overview | value tiles (battery, range, range/usage/energy since start, 5-min averages of range, usage, power, speed), vehicle info, tyre pressures; read every 0.5 s on a background thread |
+| Consumption / Charging | period totals, daily log, charging sessions and curve |
+| Live data | on/off, ABRP API key and user token, upload frequency |
+| Server | URL, pairing by QR, ingest token, installation ID (read-only), config import |
+| Settings | full screen, voice key, tyre unit, accent colour, battery, charging price, version, update check, install from USB, About |
+| Logs | upload log |
 
-`EVHardware.init()` is called in `AbrpUploadService.onCreate()` (idempotent); it detects
-the generation and picks the right underlying API. Fields it covers therefore work on every
-supported firmware.
+Key classes (`app/src/main/java/com/evsuite/abrp/`): `AbrpUploadService` (foreground service,
+15 s tick), `TelemetryUploader` (+ `TelemetryQueue`, persisted), `TelemetryPayload` (server
+limits), `AbrpApi`/`AbrpConfig`, `ServerHttp`/`ServerConfig`/`PairingClient`/
+`PhoneSettingsClient`, `ConsumptionTracker`/`ConsumptionCloudClient`, `ChargeSessionTracker`,
+`RangeEstimator`, `SecurePrefs`, `ConfigImport`, `SteeringKeyListener`, `MainActivity` (UI).
+Updater (car build only): `app/src/unstable/` `OtaUpdater`, `UpdateHook`, `UsbUpdate`.
 
-**Reference firmware: `SWI68-29958-1300R69`.** The vendor EV IDs still in
-`CarPropertyAdapter` are supported only on SWI68 firmware. EVHardware
-has **no EV-battery abstraction for any generation**, so SOC and range cannot go through it;
-until those vendor IDs are confirmed on the other generations they stay SWI68-only, and on
-another firmware they may silently return nothing (handled safely — the field is omitted, but
-SOC/range would be missing). Re-confirm with `VhalProbe` before trusting the vendor IDs on any
-other generation.
+**Put logic in pure, unit-tested classes** (no Android types); the service and activity are
+hard to test without a car.
 
-## Working here
+**UI conventions:** OLED black, glass cards, an accent the user picks from the MG4 paints —
+always `?attr/evAccent…` (`res/values/attrs_accent.xml`, overlays in `accents.xml`), never a
+hard-coded accent hex. All UI text in `strings.xml`. 72 dp touch targets. Values right-aligned
+with tabular digits. Drop-downs are Material exposed dropdown menus and dialogs go through
+`showKeepingFullScreen` — a Spinner or a plain dialog brings the car's bars back. Android 9
+crashes on gradients with theme colours: use layers.
 
-```bash
-mise run check      # what CI runs: permission gate + lint + unit tests
-mise run build
-mise run logs       # adb logcat, filtered to this app
+**Flavours:** `stable` (no updater at all) and `unstable` (the car build: system UID, OTA and USB
+install). The car always gets `unstable`.
+
+## Build, test, ship
+
+```sh
+nix develop                                   # JDK 21, Android SDK, Go
+./gradlew testStableDebugUnitTest testUnstableDebugUnitTest lintStableDebug
+build-car                                     # build/car/NilsMG4-unstable-<version>.apk + .sha256
+publish-car                                   # pre-release car-<version> on the forge (needs a token)
+cd server && go vet ./... && go test ./... && govulncheck ./...
 ```
 
-Gradle needs JDK 17. If a build fails in `JdkImageTransform` complaining about `jlink`,
-a stale Gradle daemon started by VS Code's Java extension is being reused —
-`pkill -f GradleDaemon` and retry.
+- **Versions:** three-part `versionName` in `app/build.gradle`; raise `versionCode` by one with
+  every build that goes to the car (a lower code is refused as a downgrade).
+- **Getting it to the car:** in-app update (Settings → Check for updates, via the server), or
+  Install from USB stick (APK + `.sha256` in the stick's top folder), or the first time through
+  the Bluetooth-settings file manager (`README.md`). `OTA.md` has the whole flow.
+- **Server image:** `podman build` in `server/`, push to `git.stinnesbeck.com/nils/mg4-server:<v>`,
+  pin the pushed digest in `k8s/server.yaml`. Validate manifests offline with
+  `kustomize build k8s | kubeconform` (see `k8s/README.md`).
+- **Emulator:** `nix run .#car-emulator` (add `-no-window` for headless) starts an Android 9 AOSP
+  emulator at 1920×720, 160 dpi on port 5560 (state in `build/emulator/`). Its image shares the
+  car's platform key, so the car build installs as the system user. `adb shell wm size 1778x640`
+  gives the car's app window (taps then use those coordinates; screenshots stay 1920×720). It has
+  no car data (every value is "—"). While the app is open, `uiautomator dump` never sees an idle
+  screen; use screenshots.
+- **After each change:** a `SPECS.md` done-log entry, docs that the change affects, explicit
+  staging, commit, push.
 
-## Things that will bite you
+## Documents
 
-- **`android.car` is not on the compile classpath.** Everything car-related is reflection.
-  R8 cannot see those uses, so `proguard-rules.pro` keeps them by name.
-- **Unit tests get a stub `org.json`** from `android.jar` that returns null. The real
-  implementation is added as a test dependency; do not remove it.
-- **`service_running` in preferences goes stale-true** after a force-kill. Use
-  `AbrpUploadService.isRunning()`.
-- **Permission changes fail CI** until allowlisted with a justification.
-
-## Honesty requirements
-
-Most of this cannot be verified off a vehicle. When reporting work, state plainly what was
-tested and what was not. "Unit tests pass, not tried on the car" is the expected and
-acceptable answer. Do not imply road-testing that did not happen.
-
-<!-- BEGIN:nextjs-agent-rules -->
-
-## This is NOT the Next.js you know
-
-This version has breaking changes — APIs, conventions, and file structure may all differ from your training data. Read the relevant guide in `node_modules/next/dist/docs/` (resolved from this file's directory; in monorepos the `next` package may not be visible from the repo root) before writing any code. Heed deprecation notices.
-
-This block is written and re-added by `next dev` — verify at `node_modules/next/dist/server/lib/generate-agent-files.js`. Removing it from a diff only re-creates the uncommitted change; committing it with your work keeps the tree clean.
-
-<!-- END:nextjs-agent-rules -->
+| File | What |
+|---|---|
+| `SPECS.md` | journal: architecture, status, signals the car lacks, to-dos, dated done-log |
+| `README.md` | user-facing overview, install, setup, config file |
+| `OTA.md` | releases, the updater's checks, USB install |
+| `FIRMWARE.md` | the head unit, firmware generations, display |
+| `server/README.md`, `k8s/README.md` | API, configuration, deployment |
+| `LICENSE.md` | MIT, EVHardware's PolyForm Noncommercial, the fork chain |
+| `DESIGN.md`, `CHANGELOG.md` | upstream's design system and release history |
diff --git a/CHANGELOG.md b/CHANGELOG.md
index dcb90af..106465e 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -39,7 +39,7 @@
 
 - Charging sessions are now metered on DC only (10 kW and above). An AC charge is an
   overnight affair the head unit sleeps through, so its curve, duration and energy were
-  guesses; the charging screen labels one as `AC şarj (ölçülmüyor)` rather than showing
+  guesses; the charging screen labels one as `AC şarj (ölçülmüyor)` ("AC charging (not metered)") rather than showing
   the previous DC session's figures next to it.
 
 ### Fixed
@@ -246,7 +246,7 @@ All notable changes to this project are documented here. Format follows
 - OTA installs now go through the platform `PackageInstaller` instead of shelling out to
   `pm install -r`. The old path handed the package manager service a file inside the app's
   private cache, which it cannot read from its own process, and every such failure was
-  reported as `Kurulum reddedildi (imza uyuşmuyor?)` — a signature verdict on a correctly
+  reported as `Kurulum reddedildi (imza uyuşmuyor?)` ("installation refused (signature mismatch?)") — a signature verdict on a correctly
   signed build. A session streams the archive from this process, so no second process has
   to reach our cache. Approach taken from merthankaraman/DriveHub_Dort, which solved the
   same problem on the same head unit.
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 89949b1..1d0eb65 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -91,6 +91,5 @@ say what the failure looked like, so the next person recognises it.
 
 ## Licensing
 
-Read [`LICENSE.md`](LICENSE.md) first. The project's licence status is unresolved because
-the upstream fork source has none. Contributions are accepted on the understanding that
-they are offered under MIT once that is settled.
+Read [`LICENSE.md`](LICENSE.md) first. Contributions are accepted under the MIT Licence,
+except changes to `EVHardware/`, which fall under its PolyForm Noncommercial licence.
diff --git a/EVHardware/lib/src/main/java/com/evsuite/hardware/EVHardware.kt b/EVHardware/lib/src/main/java/com/evsuite/hardware/EVHardware.kt
index f6e50c6..9ce7fb5 100644
--- a/EVHardware/lib/src/main/java/com/evsuite/hardware/EVHardware.kt
+++ b/EVHardware/lib/src/main/java/com/evsuite/hardware/EVHardware.kt
@@ -335,18 +335,18 @@ object EVHardware {
     }
 
     /**
-     * État d'ignition courant, en valeurs [IgnitionState] (AAOS).
+     * Current ignition state, as [IgnitionState] (AAOS) values.
      *
-     * CarPropertyManager d'abord. Mais SWI68 n'expose pas IGNITION_STATE via CPM : la
-     * property revient vide, et l'état d'allumage passait pour illisible alors que Katman5
-     * le rapporte correctement — le log le montre (`Katman5: state initial = 2 (RUN/READY)`)
-     * pendant que le diagnostic classait IGNITION_STATE en NOT_READABLE.
+     * CarPropertyManager first. But SWI68 does not expose IGNITION_STATE through CPM: the
+     * property comes back empty, and the ignition state looked unreadable although Katman5
+     * reports it correctly — the log shows it (`Katman5: state initial = 2 (RUN/READY)`) while
+     * the diagnostics classed IGNITION_STATE as NOT_READABLE.
      *
-     * D'où le repli sur le dernier état livré par IVehicleConditionService, converti :
-     * Katman5 parle en [CarIgnitionItem], cette fonction rend du [IgnitionState], et les
-     * deux échelles ne coïncident pas (RUN vaut 2 chez l'un, OFF vaut 2 chez l'autre).
+     * Hence the fallback to the last state delivered by IVehicleConditionService, converted:
+     * Katman5 speaks [CarIgnitionItem], this function returns [IgnitionState], and the two
+     * scales do not line up (RUN is 2 in one, OFF is 2 in the other).
      *
-     * Returns -1 si rien n'est lisible, 0 si la property existe mais ne dit rien.
+     * Returns -1 if nothing is readable, 0 if the property exists but says nothing.
      */
     fun getCurrentIgnitionState(): Int {
         val v0 = getIntPropertyCPM(PROP_IGNITION_STATE, 0)
@@ -356,7 +356,7 @@ object EVHardware {
         return vcmIgnitionAsAaos() ?: global
     }
 
-    /** Le dernier état Katman5 traduit en [IgnitionState], ou null s'il n'y en a pas eu. */
+    /** The last Katman5 state translated into [IgnitionState], or null if there was none. */
     private fun vcmIgnitionAsAaos(): Int? = when (sLastVcmIgnitionState) {
         CarIgnitionItem.OFF       -> IgnitionState.OFF
         CarIgnitionItem.ACCESSORY -> IgnitionState.ACC
diff --git a/FIRMWARE.md b/FIRMWARE.md
index cce5ddc..ae2cea7 100644
--- a/FIRMWARE.md
+++ b/FIRMWARE.md
@@ -11,7 +11,12 @@ development. It must not be treated as a vendor specification.
 | Android | 9 (Pie) — **API 28** |
 | Chipset | MediaTek **MT2712** |
 | Device | `mt2712_saic_eh32` (eh32 = MG4) |
-| Emulator display profile | **1920×1080 @ 160 dpi** |
+| Display | **1920×720 px @ 160 dpi**; the app window is **1778×720 px** (≈1778×640 dp for layouts), the car's own sidebar taking the rest. Confirmed on the car 2026-10-18 (read with app 2.16.2, `SWI68`). |
+| Emulator display profile | **1920×720 @ 160 dpi** |
+| `ro.build.mtk2712.vehicle_type` | `AS28` (a vehicle type code; the paint colour is not among the system properties) |
+
+EVProfile's README gives the display as 1280×480. That is 1920×720 px at 240 dpi expressed in
+dp; on this car the density is 160 dpi, so it does not apply here.
 
 ## Signing caveat
 
@@ -42,5 +47,5 @@ follow the same path. See `AGENTS.md` for the full per-signal split.
 ## Emulator fidelity
 
 The `mise` emulator tasks use an API 33 automotive AVD for the car service and an API 28
-AVD at **1920×1080 @ 160 dpi** for the screen. Neither exposes the SAIC vendor properties,
+AVD at **1920×720 @ 160 dpi** for the screen, as on the car. Neither exposes the SAIC vendor properties,
 so vehicle-specific behaviour still requires on-vehicle validation.
diff --git a/LICENSE b/LICENSE
index 0ab7a2a..12629f3 100644
--- a/LICENSE
+++ b/LICENSE
@@ -2,6 +2,8 @@ MIT License
 
 Copyright (c) 2026 Leon Kernan (original ABRP_Uploader)
 Copyright (c) 2026 EVABRPUploader contributors
+Copyright (c) 2026 FatihsMG4 contributors
+Copyright (c) 2026 Nils Stinnesbeck (Nils' MG4)
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal
diff --git a/LICENSE.md b/LICENSE.md
index b97edd5..4c7c54b 100644
--- a/LICENSE.md
+++ b/LICENSE.md
@@ -1,19 +1,49 @@
 # Licence
 
-This project is released under the **MIT Licence** — see [`LICENSE`](LICENSE).
+Everything in this repository is released under the **MIT Licence** — see
+[`LICENSE`](LICENSE) — **except the `EVHardware/` library**, which has its own licence (below).
 
-## Attribution
+## Where it comes from
 
-EVABRPUploader is a fork of Leon Kernan's `ABRP_Uploader`, and a meaningful part of
-the original work survives in it. The copyright line names both him and this fork's
-contributors, and MIT requires that notice to travel with any copy or substantial portion
-of the software. Keep it.
+Nils' MG4 is a fork of a chain of forks, all MIT:
 
-The upstream repository carried no licence file of its own. Applying MIT here is the
-project owner's decision; if Leon Kernan ever objects, the right response is to honour
-that rather than argue about it.
+- [Leon Kernan's `ABRP_Uploader`](https://github.com/lkernan/ABRP_Uploader), the original. It
+  carries the MIT Licence since 2026-07-29
+  ([its LICENSE](https://github.com/lkernan/ABRP_Uploader/blob/master/LICENSE), commit
+  `75d8f2bc`). Upstream's note that it had no licence predates that.
+- malys' EVABRPUploader, then
+  [fatihdonmezdev/FatihsMG4](https://github.com/fatihdonmezdev/FatihsMG4), both under MIT.
+- This fork, under MIT as well.
+
+MIT requires the copyright notice to travel with any copy or substantial portion of the
+software. `LICENSE` names all of them; keep every line.
+
+## The EVHardware library
+
+`EVHardware/` (the shared vehicle layer from EVSuite) is source-available under the
+**PolyForm Noncommercial License 1.0.0** — see [`EVHardware/LICENSE`](EVHardware/LICENSE) and
+[`EVHardware/LICENSE.md`](EVHardware/LICENSE.md). Commercial use is not permitted, and its
+`Required Notice: Copyright (c) 2026 EVHardware contributors` must go with any copy.
+
+The car app links EVHardware into its APK, so the **built app** may only be used and passed on
+non-commercially, whatever the MIT parts would allow on their own. The server, the Kubernetes
+manifests and the docs do not contain EVHardware and are plain MIT.
+
+EVHardware's own notes say parts of it come from EVProfile, "itself a fork whose upstream
+licence situation is unresolved". Checked on 2026-10-18, that is settled for the code in
+question:
+
+- [malys/EVProfile](https://github.com/malys/EVProfile) is MIT. It is a fork of
+  [SliDeeN/MG4Control](https://github.com/SliDeeN/MG4Control), and its last merge from
+  MG4Control is a commit of 2026-08-02.
+- MG4Control is MIT up to and including 2.6.5 (released 2026-08-05; its licence file dates
+  from 2026-06-24) and GPL v3 or later from 2.6.6 (2026-09-02). Its `LICENCE.md` states that
+  the earlier versions stay MIT for good.
+
+So what EVProfile took from MG4Control dates from MG4Control's MIT period. This covers the
+lineage EVHardware names; it is not an audit of every line in EVHardware.
 
 ## No warranty
 
-MIT disclaims all warranty and liability, and this software runs on a **vehicle** — see
-[`DISCLAIMER.md`](DISCLAIMER.md) for what that means concretely.
+Both licences disclaim all warranty and liability, and this software runs on a **vehicle** —
+see [`DISCLAIMER.md`](DISCLAIMER.md) for what that means concretely.
diff --git a/OTA.md b/OTA.md
index 1e1ad16..6a0c41f 100644
--- a/OTA.md
+++ b/OTA.md
@@ -1,163 +1,104 @@
-# Publishing an OTA release
+# Updating the car app over the air
 
-How to ship an update the car will install by itself. Written for whoever does this
-next — probably me, having forgotten the details.
+How a new car build reaches the head unit without the Bluetooth-settings detour, and what to
+check when it does not.
 
-## First upgrade from 2.2.3 or older
+```
+build-car ─▶ publish-car ─▶ forge pre-release (private repo, git.stinnesbeck.com/nils/mg4)
+                                   │  read with FORGE_TOKEN (read-only, server Secret)
+                                   ▼
+                           car server  /v1/app/releases, /v1/app/assets/…
+                                   │  the car's own paired token
+                                   ▼
+                    app: refresh button → check → SHA-256 → install
+```
 
-Install the platform-signed 2.2.7 APK manually once if the car still runs 2.2.3 or older.
-Those builds use the old `pm install` path; publishing a newer APK does not repair the
-installer already running on the car. Builds from 2.2.4 use `PackageInstaller` sessions.
-Keep the unstable package ID, system shared UID and signing certificate when upgrading.
+The repository stays private and the forge token stays on the server: the car asks its own
+server, with its own token, and never holds a forge credential. The server only relays
+bytes. Every check that decides whether code gets installed is in the app.
 
-The 2.2.5 build removes window automation. It also distinguishes failed release checks
-from a successful check with no newer release. On 2026-09-29, GitHub still published only
-2.2.3 at the last live check. The local 2.2.7 build includes these fixes and the redesigned
-UI; it becomes available to OTA only after publication as a pre-release asset named
-`FatihsMG4-unstable-2.2.7.apk`, together with
-`FatihsMG4-unstable-2.2.7.apk.sha256`.
+## Publishing a release
 
-The vehicle artifact uses `com.evsuite.abrp.unstable`, `android.uid.system`, and the
-DriveHub_Kamera platform key. Its certificate SHA-256 must be
-`c8a2e9bccf597c2fb6dc66bee293fc13f2fc47ec77bc6b2b0d52c11f51192ab8`.
-The stable build used for a Samsung UI preview is a separate package without OTA or the
-vehicle's shared UID; do not use that preview APK for the MG4 upgrade.
+1. **Raise the version** in `app/build.gradle` (`versionCode` must increase; `versionName`
+   is three-part, e.g. `2.16.0`). The car build reports it as `2.16.0-unstable`.
+2. **Build:** `nix develop`, then `build-car`. It signs with the AOSP platform key the head
+   unit trusts, checks the signer, and writes `build/car/NilsMG4-unstable-<version>.apk` and
+   its `.sha256`.
+3. **Publish:** `publish-car`. It creates the pre-release `car-<version>` on the current
+   commit and attaches the APK and the `.sha256`. It needs a forge token that may write the
+   repository's releases, in `~/.config/nilsmg4/forge-token` (or `$FORGE_TOKEN`); the token is
+   only sent in a header, never printed. It refuses a version that is already published.
 
-## What the updater actually looks for
+By hand, the same: in the forge's web UI create a release with tag `car-<version>`, tick
+**pre-release**, and attach both files with exactly their names.
 
-`OtaUpdater.check()` reads `https://api.github.com/repos/fatihdonmezdev/FatihsMG4/releases`
-and walks **every** entry, keeping the highest version rather than the first match. A
-release is a candidate only if all of these hold:
+## What the updater accepts
 
-| Requirement | Where it is enforced | What happens otherwise |
+The app asks the car server for the releases (`GET /v1/app/releases`) and walks every one,
+keeping the highest version:
+
+| Requirement | Where it is enforced | Otherwise |
 |---|---|---|
-| Marked **pre-release** | `release.optBoolean("prerelease")` | Skipped entirely |
-| Asset name contains `unstable` | `name.contains("unstable")` | Asset ignored |
-| Asset name ends `-<version>.apk` | `ASSET_VERSION` regex | No version, asset ignored |
-| Version strictly higher than installed | `isNewer()` | Nothing to do, reports "Güncel" |
-| Download host on the allowlist | `isAllowedUrl()` | Refused and logged |
-| APK signed with the **same certificate** as the running app | Android `PackageInstaller` | Installation is rejected by the platform |
-| Matching `.sha256` asset or `SHA256SUMS` entry | `fetchExpectedSha256()` | Update ignored/refused |
+| Marked **pre-release**, not a draft | `selectUpdate` | Skipped |
+| Asset name contains `unstable` and ends `-<version>.apk` | `ASSET_VERSION` regex | Ignored |
+| Version strictly higher than installed | `isNewer()` | "Up to date" |
+| Every URL https and **exactly** the configured server's host | `isAllowedUrl()` | Refused |
+| A matching `.sha256` (or `SHA256SUMS`) asset, and the APK's bytes match it | `fetchExpectedSha256()`, `download()` | Refused, file deleted |
+| The archive is this app's package | `archiveIsThisPackage()` | Refused |
+| Signed with the **same certificate** as the installed app | Android's installer | Not installed |
 
-The last one is the one that bites. The car runs a platform-signed build; an APK signed
-with a debug key — or anyone else's key — is downloaded, rejected and deleted. Sign every
-release with the same platform key or the update silently never lands.
+The version comes from the **asset file name**, not the tag.
 
-The version comes from the **asset filename**, not the git tag. The tag can stay
-`unstable` forever and be moved; the filename is what identifies a build.
+## Installing
 
-## Release checklist
+Press the refresh button in the app's top bar. The app checks, downloads the APK into
+**Downloads** (with progress), verifies its SHA-256, and hands it to a `PackageInstaller`
+session. As the system user it may install without asking; if the platform wants a
+confirmation, the confirmation screen opens. When a session cannot start at all, the file
+manager opens in Downloads (or, where the head unit has none, open the APK there with the
+Files app). The verified APK stays in Downloads either way.
 
-1. **Raise the version.** `app/build.gradle`, `defaultConfig`:
+At start the app only checks, and shows "Update available" when there is one. It never
+downloads or installs on its own, and the upload service never checks: installing restarts
+the app, which must not happen mid-drive on its own.
 
-   ```gradle
-   versionCode 24          // must increase — Android orders updates by this, not by name
-   versionName "2.2.7"
-   ```
+## Installing from a USB stick
 
-   The unstable flavour appends its own suffix, so `2.2.7` becomes `2.2.7.0-unstable`.
-   Check what the installed build reports before picking a number: the app's About
-   dialog shows it, and `isNewer` compares numerically segment by segment.
+For development, without the forge: copy `NilsMG4-unstable-<version>.apk` **and** its `.sha256`
+from `build/car/` to the top folder of a USB stick, plug it in, and press **Install from USB
+stick** on the Settings tab. The app takes the newest such file that is newer than the installed
+version, checks it against the `.sha256`, checks the package, and installs it with the same
+installer session as an over-the-air update. The car build only; the stable build has no button.
 
-2. **Build.**
-
-   ```bash
-   ./gradlew :app:assembleUnstableDebug
-   ```
-
-3. **Sign with the platform key.** Options come *before* the input APK — apksigner
-   rejects the other order.
-
-   ```bash
-   BT=~/Android/Sdk/build-tools/35.0.0
-   # Local copies from DriveHub_Kamera/tools; private and gitignored.
-   KEYS="$PWD/tools"
-
-   "$BT/zipalign" -f 4 \
-     app/build/outputs/apk/unstable/debug/app-unstable-debug.apk aligned.apk
-
-   "$BT/apksigner" sign \
-     --key  "$KEYS/platform.pk8" \
-     --cert "$KEYS/platform.x509.pem" \
-     --out  FatihsMG4-unstable-2.2.7.apk \
-     aligned.apk
-
-   rm aligned.apk
-   ```
-
-   The output filename **is** the version the updater reads. Name it
-   `FatihsMG4-unstable-<version>.apk`, then create its required integrity sidecar:
-
-   ```bash
-   shasum -a 256 FatihsMG4-unstable-2.2.7.apk \
-     > FatihsMG4-unstable-2.2.7.apk.sha256
-   ```
-
-4. **Verify the signer** before uploading. It must say `CN=Android`:
-
-   ```bash
-   "$BT/apksigner" verify --print-certs FatihsMG4-unstable-2.2.7.apk
-   ```
-
-5. **Publish.** On github.com/fatihdonmezdev/FatihsMG4 → Releases → Draft a new release:
-   - tag: `unstable` (reuse it; the rolling tag is the design)
-   - **tick "Set as a pre-release"** ← the whole thing is inert without this
-   - attach the signed APK and its `.sha256` sidecar
-
-6. **Install it.** Open the app on the head unit and press the refresh button in the top
-   bar. The dialog shows download progress, verifies SHA-256, then reports that the
-   PackageInstaller session has started.
+On the Android 9 emulator (car build, system user) this installed without asking, from the
+storage's top folder; on the car the stick's top folder is used the same way.
 
 ## When it says something else
 
-| Toast | Meaning |
+| Message | Meaning |
 |---|---|
-| `Güncel (2.2.2.0-unstable)` | No release beat the installed version. Check the pre-release tick and the asset filename. |
-| `Güncelleme reddedildi: SHA-256 doğrulaması yok` | APK has no matching sidecar, or the sidecar is invalid/unreachable. |
-| `İndirme veya SHA-256 doğrulaması başarısız` | Download failed or its bytes do not match the published hash. |
-| `Kuruluyor: 2.2.3 — ekrandaki onayı bekleyin` | The session was committed. Not done yet: watch for the platform's own toast, or a confirmation dialog to accept. |
-| `Kurulum reddedildi: imza uyuşmuyor` | Genuinely the wrong key — rebuild and re-sign with `platform.pk8`. Unlike the old catch-all, this one means what it says. |
-| `Kurulum reddedildi: APK okunamadı` | The archive does not parse, or it is built for another package. |
-| `Kurulum başlatılamadı … Log sayfasına bakın` | The session could not be created or committed. `adb logcat -s EVABRP.Update`. |
-| `Kurulum başarısız: INSTALL_FAILED_…` | From `OtaInstallResultReceiver` — the package manager's own words for why it refused. |
-| `Güncelleme kontrolü başarısız` | The check threw. `adb logcat -s EVABRP.Update OtaUpdater` if a cable is available; otherwise the in-app Log page. |
+| `Up to date (2.16.0-unstable)` | No published pre-release is newer. Check the pre-release tick and the asset name. |
+| `Set up the server first (Server tab): updates come through it` | The app has no server URL and token. |
+| `Update check failed` | The server could not be reached, or answered with an error: 404 when updates are off on the server (no `FORGE_TOKEN`), 502 when the forge refused the server's token. |
+| `Update refused: no SHA-256 verification` | The release has no matching `.sha256`, or it is unreadable. |
+| `Download or SHA-256 verification failed (…)` | The download broke off, or the bytes do not match the published hash. |
+| `Update refused: the downloaded file is not this app` | The archive does not parse, or it is another package. |
+| `Installing 2.16.0… the app restarts when it is done` | The session was committed; the result follows as its own toast. |
+| `Installation failed: INSTALL_FAILED_… The APK is in Downloads.` | The package manager's own words. A signature error means the APK was not signed by `build-car`. |
+| `… is in Downloads — tap the file to install` | A session could not start; install from Downloads by hand. |
 
-## How the install works, and why it is not `pm install`
+On the car's Logs tab, or with a cable: `adb logcat -s EVABRP.Update OtaUpdater`.
 
-`OtaUpdater.install()` used to shell out to `/system/bin/pm install -r`. On this head unit
-that fails every time, and the reason is worth writing down because the symptom pointed
-somewhere else entirely.
+## Why a PackageInstaller session, not `pm install`
 
-The downloaded APK lives in `context.getCacheDir()`. `pm` does not install the file itself
-— it passes the path to the package manager service, which opens it from *its* process and
-SELinux context, where an app's private cache is not readable. The install failed, and
-because `install()` returned a bare boolean, the caller reported the only failure it knew
-how to name: `Kurulum reddedildi (imza uyuşmuyor?)`. A correctly signed build, refused with
-a signature error it had not earned. The `pm` output that would have said so was captured
-and thrown away.
-
-It now uses the platform `PackageInstaller`: we open the archive ourselves and stream it
-into a session, so no second process ever has to read our cache. The approach is taken from
+Upstream first shelled out to `/system/bin/pm install -r` with the APK in the app's private
+cache. That fails on this head unit: `pm` hands the path to the package manager service,
+which opens it from its own process and SELinux context, where an app's private cache is not
+readable — and the failure surfaced as a signature error it never was. A session takes no
+path: the app opens the archive itself and streams it in. The approach comes from
 [merthankaraman/DriveHub_Dort](https://github.com/merthankaraman/DriveHub_Dort), which hit
-the same wall on the same hardware.
+the same wall on the same hardware. Upstream later fell back to "download to Downloads and
+tap it"; this fork tries the session first and keeps that as the fallback.
 
-Two consequences for anyone reading a failure:
-
-- **Committing a session is not installing.** `commit()` is asynchronous. The refresh button
-  can only report that an install *started*; the verdict arrives at
-  `OtaInstallResultReceiver` and appears as its own toast.
-- **`STATUS_PENDING_USER_ACTION` is not an error.** The platform is asking the driver to
-  confirm. The receiver launches the confirmation activity the platform hands it.
-
-Still unverified on the car: whether this build installs silently or raises that
-confirmation. Either way it installs, which the old path did not.
-
-## Why installation is manual
-
-`UpdateHook.checkInBackground(this)` performs an availability-only check at app start and
-shows a notification toast when a complete APK + hash pair exists. It never downloads or
-installs. The refresh button is the only trigger for download, verification and installation.
-
-The upload service does **not** check for updates on its tick. Installing a new APK
-restarts the process, and doing that mid-drive would interrupt the telemetry the service
-exists to send.
+**Not yet tried on this car:** whether the session installs silently as the system user, or
+asks for a confirmation.
diff --git a/README.md b/README.md
index d723b58..2c122bd 100644
--- a/README.md
+++ b/README.md
@@ -1,261 +1,237 @@
-# FatihsMG4
+# Nils' MG4
 
-<p align="center"><img src="docs/logo.svg" width="440" alt="FatihsMG4"></p>
+An Android Automotive app for the **MG4 (SAIC eh32)** head unit, plus a small server: the car
+sends its telemetry to my own server at car.k8s.stinnesbeck.com, which stores it in InfluxDB 2
+for the Grafana dashboards, and its live data straight to
+[A Better Route Planner](https://abetterrouteplanner.com).
 
-[![Release](https://img.shields.io/github/v/release/fatihdonmezdev/FatihsMG4?include_prereleases&sort=semver)](https://github.com/fatihdonmezdev/FatihsMG4/releases)
-[![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
+No OBD dongle and no phone in the loop: the app runs on the head unit and reads the car's own
+APIs.
 
-Sends live telemetry from an **MG4 (SAIC eh32)** to
-[A Better Route Planner](https://abetterrouteplanner.com) — battery level, speed, range,
-temperature, charging state and position — straight from the car's own APIs.
-
-No OBD dongle. No Home Assistant. No phone in the loop. The app runs on the car's head
-unit and talks to ABRP directly.
+- Repository: https://git.stinnesbeck.com/nils/mg4
+- Fork of [fatihdonmezdev/FatihsMG4](https://github.com/fatihdonmezdev/FatihsMG4), itself built on malys' EVABRPUploader and Leon Kernan's `ABRP_Uploader`.
+- What changed and what is still to do: [`SPECS.md`](SPECS.md).
 
 > ⚠️ **No warranty, no liability.** This software is provided "as is" and runs on a
-> **vehicle**. Installing it is your decision and your risk — see
+> **vehicle**. Installing it is your decision and your risk; see
 > [`DISCLAIMER.md`](DISCLAIMER.md). Not affiliated with SAIC, MG Motor or Iternio.
-> MG and MG4 are third-party marks used only to identify compatibility; no official origin
-> or approval is claimed.
+> MG and MG4 are third-party marks used only to identify compatibility.
 
-> **Fork notice.** This is a fork of Leon Kernan's `ABRP_Uploader`, substantially
-> reworked. **Read [`LICENSE.md`](LICENSE.md) before redistributing anything** — the
-> upstream project carries no licence, which limits what may legally be published.
+> **Licence.** MIT, like Leon Kernan's original `ABRP_Uploader` and the forks in between —
+> except the bundled `EVHardware/` library, which is PolyForm Noncommercial, so the built app
+> may only be used and shared non-commercially. See [`LICENSE.md`](LICENSE.md).
 
 ---
 
 ## Contents
 
-- [Screenshots](#screenshots)
-- [Overview](#overview)
-- [Install](#install)
-- [Configuration](#configuration)
+- [Screenshot](#screenshot)
+- [How it fits together](#how-it-fits-together)
+- [The app](#the-app)
+- [Install on the car](#install-on-the-car)
+- [Setup](#setup)
 - [Building](#building)
+- [Server and dashboards](#server-and-dashboards)
 - [Project layout](#project-layout)
 - [Project documents](#project-documents)
-- [Security](#security)
-- [Contributing](#contributing)
-- [Legal](#legal)
 - [Credits](#credits)
 
-## Screenshots
+## Screenshot
 
-Version 2.2.6 introduces an OLED-black interface with charcoal cards, muted gold and
-cyan accents, a vehicle overview, and responsive side or bottom navigation. This
-app-specific theme intentionally overrides the shared EVSuite visual tokens.
-Tablet UI previews at 1280×720; vehicle readings are unavailable on this device.
+Version 2.8.2 at the head unit's 1920x720 pixels and 160 dpi, in full screen (Android 9 emulator; no
+vehicle there, so every value shows as a dash).
 
 <p align="center">
-  <img src="screenshots/evabrp-2.2.6-overview.png" width="760" alt="OLED vehicle overview with energy and tyre panels above compact metrics">
-  <img src="screenshots/evabrp-2.2.6-abrp.png" width="760" alt="Dark ABRP account configuration">
+  <img src="screenshots/nilsmg4-2.8.2-overview.png" width="900" alt="Overview tab: battery, range, range estimates, power and speed tiles above the energy and tyre-pressure cards">
 </p>
 
----
+## How it fits together
 
-## Overview
-| Signal | Source | Firmwares |
-|---|---|---|
-| State of charge | `EVHardware` vendor charging service, with a SWI68 property fallback | all supported (fallback SWI68 only) |
-| Range | `EVHardware` vendor charging service, standard AAOS property, then SWI68 fallback | all supported |
-| Speed, parked state | `EVHardware` shared energy snapshot | all supported |
-| Outside temperature | The head unit's weather broadcast, falling back to its map-service query; the vehicle sensor first where one exists | all supported (the vehicle sensor is absent on MG4) |
-| Charging, DC fast charging | Charge port state + charge rate heuristic | where the VHAL implements them |
-| Charged energy this session | `EVHardware` charging-session integration | where the charge rate is readable |
-| State of energy, pack capacity, pack temperature | `EVHardware` typed standard-AAOS reads | where the VHAL implements them |
-| Odometer, tyre pressures | Standard AAOS properties (privileged) | platform-signed installs only |
-| Cabin temperature | `EVHardware` typed HVAC read | where the VHAL implements it |
-| Climate setpoint | `EVHardware` shared energy snapshot | all supported |
-| Position, elevation, heading | GPS | — |
+```
+car ──live telemetry───▶ car.k8s.stinnesbeck.com (Go)
+ │  ──daily chunks─────▶          │
+ │  ──charging sessions▶          ▼
+ │                            InfluxDB 2 ◀── Grafana
+ └──live telemetry─────▶ ABRP
+```
 
-All vehicle telemetry goes through **EVHardware**, which detects the generation
-(SWI68/69/131/132/133/165), owns property ids and units, and applies the shared nullable
-fallback order. `CarPropertyAdapter` remains only as transport for the debug-only VHAL probe
-and is never instantiated by the production service. See [`FIRMWARE.md`](FIRMWARE.md).
+The car sends live data to ABRP itself, with the ABRP credentials set on the Live data tab, so
+ABRP and the server do not depend on each other. The server only stores. The car authenticates
+with the server using a token of its own, obtained by pairing with a phone (below).
 
-Odometer and tyre pressures sit behind privileged AAOS permissions: a platform-signed
-install sends them, any other install simply omits them.
+## The app
 
-A property the car will not give up is **omitted** from the payload, never sent as zero —
-so ABRP is never told the battery is empty because a read failed. Position is held to the
-same rule in time as well as in value: a GPS fix older than `max(5 min, 3 x your upload
-interval)` is dropped rather than resent, so a stale fix cannot report the car back at the
-place it set off from.
+| Tab | What it shows |
+|---|---|
+| **Overview** | Battery, range, range since start and at the 5-minute average with their usage, energy since start, power and speed with their 5-minute averages; odometer, climate setpoint and tyre pressures |
+| **Consumption** | Daily and period consumption, efficiency |
+| **Charging** | Charging sessions and curves, cost in euro |
+| **Live data** | Live data on/off, ABRP credentials for sending directly from the car, upload frequency |
+| **Server** | Server URL, pairing by QR code, ingest token, installation ID, config import |
+| **Settings** | Full screen, voice key, tyre pressure unit, accent colour, battery (usable capacity, manual SoH), charging price, version, update check, About |
+| **Logs** | Upload log |
 
-Telemetry only reads the car. Version 2.2.5 removes window automation entirely; there
-is no window service, door listener or window command path in the app.
+- **Opening the app:** the MG4 launcher does not list third-party apps. **Double-press the
+  voice key** on the steering wheel and the app comes to the front (switch on the Settings
+  tab, on by default).
+- **Full screen:** hides SAIC's top and bottom bars while the app is open; a swipe from the
+  edge shows them briefly (Settings tab, on by default).
+- **Live telemetry:** every 15 s while driving or charging, much less often while parked. A
+  value the car cannot read is left out, never sent as zero, so ABRP is never told the battery
+  is empty because a read failed.
+- **Read-only:** the app never writes a vehicle setting.
 
-## Install
-The MG4 head unit hides Settings and APK install. The known route in:
-The MG4 head unit has no visible way to open Settings or install an APK. The known route
-in (via the on-screen keyboard) is:
+Signals the MG4 does not publish (battery, cabin and outside temperature, pack energy and
+capacity) are listed in [`SPECS.md`](SPECS.md#signals-the-car-does-not-provide).
 
-1. Open any app with a text field and tap it to raise the on-screen keyboard — e.g. the
-   Amazon Music app's email/login field.
-2. **Long-press** the comma `,` (or the `@`) key on the keyboard.
-3. Tap **"Language settings"**.
-4. Tap the **search** icon in the top bar and type **`backup`**. It opens an empty page —
-   now press the **back** arrow, and you land in Android's Settings panel.
-5. Enable **Developer options**, and turn on **"Install unknown apps"** (unknown sources).
-6. In Settings, search **`storage`** — you now have access to internal storage and the USB
-   key. Navigate to the APK and tap it to install.
+## Install on the car
 
-> ⚠️ You are enabling developer options and sideloading on a car. Do this **parked**, and
-> only with an APK you trust. See [DISCLAIMER.md](DISCLAIMER.md).
+The car build (`NilsMG4-unstable-<version>.apk`) runs with the system UID and is signed with the
+AOSP test platform key that the MG4 head unit uses. It installs next to the old FatihsMG4 app
+(package `com.stinnesbeck.nilsmg4.unstable`), not over it.
 
-Two channels. Pick one — they install side by side.
+Without adb, through the head unit's hidden file manager:
 
-| Channel | Auto-update | Use it if |
-|---|---|---|
-| **Stable** | No. Contains no updater at all. | You want the car to run what you put on it |
-| **Unstable** | Yes, from GitHub pre-releases | You are testing and want fixes as they land |
+1. Copy the APK to a USB stick and plug it in.
+2. Open **Bluetooth Settings** and select the car name.
+3. Long-press the **comma** key until the keyboard settings appear.
+4. **Android Keyboard Settings → Languages**, then search for `file` in the box at the top.
+5. That opens the Files app: open the USB stick, tap the APK and install.
 
-Grab the APK from [Releases](https://github.com/fatihdonmezdev/FatihsMG4/releases). Stable builds are the tagged ones; unstable builds
-are marked pre-release.
+With adb:
 
-### Getting the APK onto the car
+```sh
+adb push build/car/NilsMG4-unstable-<version>.apk /data/local/tmp/update.apk
+adb shell "pm install -r -f -d -t /data/local/tmp/update.apk"
+```
 
-The MG4 has no visible file manager. To reach it:
+> ⚠️ Do this **parked**, and only with an APK you trust. See [DISCLAIMER.md](DISCLAIMER.md).
 
-1. Open **Bluetooth Settings** and select the car name.
-2. Long-press the **comma** key until the keyboard settings appear.
-3. **Android Keyboard Settings → Languages**.
-4. Search for `file` in the search box at the top.
-5. That gives you the Files app.
+After that first install, the app updates itself: publish a build with `publish-car`, then
+press the refresh button in the app's top bar (`OTA.md`). The car fetches it through your car
+server, so the repository stays private.
 
-From there, open your USB stick and tap the APK.
+## Setup
 
-### First run
+1. Open the app (voice key double press, or "Open" right after installing).
+2. On the **Server** tab the URL is already `https://car.k8s.stinnesbeck.com`.
+3. Tap **Pair with phone**. Scan the QR code with a phone (or open the address shown and enter
+   the code), and approve with the server's approval password. The car receives its token.
+4. On the **Live data** tab, turn live data on. The service starts with the car from then on.
+5. Enter your ABRP API key and user token on the same tab, so the car sends live data to ABRP.
 
-1. Open the app.
-2. By default, the app prefills the open-source telemetry API key published by the
-   [SAIC Python MQTT Gateway](https://github.com/SAIC-iSmart-API/saic-python-mqtt-gateway#abrp-api-integration).
-   You can replace it with your own key. Get a token from your ABRP account.
-3. Paste the token, press **Test** (read-only — it does not send telemetry), then **Save**.
-4. Turn the switch on. The service restarts with the car from then on.
+### On your phone
 
-Typing a long API key and token on the car's on-screen keyboard is painful. Instead you can
-put them in a text file and tap **Import file** — see [Config file](#config-file) below.
-
-## Configuration
-
-| Setting | Default | Notes |
-|---|---|---|
-| Upload frequency | 60 s | 15 / 30 / 60 / 120 / 300 s. Applies while driving |
-| More often at low battery | On | Tightens to 15 s below the threshold |
-| Low battery threshold | 20 % | Editable, 1–99 |
-| Service on/off | Off | Also the "stop uploading" control |
-
-Parked and unplugged, the app drops to **one upload every 15 minutes** on its own,
-whatever the setting. A state change — parked, plugged in, unplugged — always uploads
-immediately.
+Once the car is paired, **Enter on phone** (Live data tab, and Settings → Charging price) shows a
+QR code. It opens a form on your server where you type the ABRP API key and user token, the
+charging price and the usable capacity, and send them with the approval password. The car
+collects them within a few seconds and saves them through the same checks as the fields on
+screen. The server only passes them on: they are held in memory until the car has them (at most
+ten minutes), never stored or logged.
 
 ### Config file
 
-To avoid typing on the head unit, put your settings in a plain text file and tap **Import file**
-on the **ABRP** tab. The app fills in whatever the file contains. Nothing is sent — press
-**Test**, then **Save** as usual.
-
-The head unit has no file picker, so the file is not chosen by hand: copy it from a PC into
+Instead of typing, put the settings in a text file and tap **Import file** on the Server tab.
+The head unit has no file picker, so copy the file to
 
 ```
-Android/data/com.evsuite.abrp/files/
+Android/data/com.stinnesbeck.nilsmg4.unstable/files/
 ```
 
-on the USB stick (or on the head unit's internal storage), then tap **Import file**. The app
-scans that folder on every mounted volume and takes the first file that parses — the name does
-not matter. If nothing is found it shows the exact path to copy to. On a phone or tablet, where
-a document picker exists, the button falls back to letting you pick any file.
-
-The file is a `key = value` list, one per line. Blank lines and lines starting with `#` are
-ignored, keys are case-insensitive, and any key you leave out keeps its current value:
+on the USB stick or the internal storage. The app scans that folder on every mounted volume and
+takes the first file that parses. Format, one `key = value` per line, `#` for comments; keys left
+out keep their current value:
 
 ```
-# ABRP Uploader config
-api_key = your-abrp-api-key
-token   = your-abrp-user-token
-
-# optional — the cadence controls, same values as the UI
-interval_sec    = 60      # snapped to 15 / 30 / 60 / 120 / 300
+server_url      = https://car.k8s.stinnesbeck.com
+token           = the server's INGEST_TOKEN (not needed after pairing)
+installation_id = only to carry over history from an install older than 2.9.0
+interval_sec    = 60      # 15 / 30 / 60 / 120 / 300
 boost_low_soc   = true
-low_soc_percent = 20      # clamped to 1–99
+low_soc_percent = 20
+abrp_api_key    = your ABRP API key
+abrp_token      = your ABRP user token
+charging_price  = 0.39    # €/kWh
+usable_kwh      = 50.8    # usable battery capacity, for the range estimates
 ```
 
-Only `api_key` and `token` are usually needed. The file is read once on import and not kept —
-your credentials live only in the app's encrypted store afterwards.
+After a successful import the app deletes the file, since it holds the token; credentials live
+only in the app's encrypted store.
+
+The installation ID is derived from the head unit, so a reinstall finds its history again on its
+own. `installation_id` is only needed to carry history over from an install made before 2.9.0.
+A paired token belongs to one installation ID: after changing the ID, pair again.
 
 ### Power
 
-The app holds **no wake lock** and schedules **no alarms**, so it cannot wake a sleeping
-head unit; it costs nothing while the car is off. While the car is on, both the upload tick
-and the GPS subscription cost power, and the GPS interval follows your configured
-frequency.
-
-At defaults that is roughly **59 uploads/hour driving** and **3/hour parked**.
+The app holds **no wake lock** and schedules **no alarms**, so it cannot wake a sleeping head
+unit and costs nothing while the car is off.
 
 ## Building
-Requires JDK 17 and the Android SDK. With [mise](https://mise.jdev):
 
-```bash
-mise install          # JDK
-mise run bootstrap    # Android SDK + local.properties
-mise run check        # permission gate + lint + tests
-mise run build        # debug APK
+With Nix:
+
+```sh
+nix develop                    # JDK 21, Android SDK, Go
+./gradlew assembleStableDebug  # debug APK for a phone or tablet
+build-car                      # car APK, signed with the AOSP test platform key
 ```
 
-Without mise: set `JAVA_HOME` to a JDK 17, write `sdk.dir` into `local.properties`, then
-`./gradlew assembleStableDebug`.
+`build-car` writes `build/car/NilsMG4-unstable-<version>.apk` and a `.sha256` next to it, and
+checks the signing certificate before it finishes.
 
-Release builds are signed from environment variables. These sign the **APK** and have
-nothing to do with your ABRP API key, which you type into the app itself:
+Tests and lint:
 
-| Variable | What it is |
-|---|---|
-| `SIGNING_KEYSTORE` | Path to the keystore file (CI decodes `SIGNING_KEYSTORE_BASE64` into one) |
-| `SIGNING_STORE_PASSWORD` | Opens the keystore container |
-| `SIGNING_KEY_ALIAS` | Which key inside it to sign with (default `platform`) |
-| `SIGNING_KEY_PASSWORD` | Opens that particular key — a keystore protects each key separately |
+```sh
+./gradlew testStableDebugUnitTest testUnstableDebugUnitTest lintStableDebug
+```
 
-**Never commit a keystore or a password.** Put them in `mise.local.toml`, which is
-gitignored, or in GitHub Actions secrets.
+[`mise`](https://mise.jdx.dev) tasks from upstream (`mise run check`, `mise run build`) still
+work for the plain Gradle builds.
+
+## Server and dashboards
+
+- **Server** ([`server/`](server/README.md)): Go, API only. Live telemetry, daily consumption
+  chunks, charging sessions, pairing. Image at
+  `git.stinnesbeck.com/nils/mg4-server`.
+- **Kubernetes** ([`k8s/`](k8s/README.md)): plain manifests for the server, InfluxDB 2 and
+  Grafana, applied by hand with `kubectl apply -k k8s/`. Secrets go in the gitignored
+  `k8s/secrets/secrets.yaml`, from the template next to it.
+- **Grafana dashboards** (`k8s/grafana/dashboards/`): Live, Consumption and Charging, provisioned
+  with the InfluxDB datasource.
 
 ## Project layout
+
 ```
-app/src/main      upload service, ABRP payload and UI
-EVHardware        shared vehicle reads, energy snapshot and integration
-app/src/stable    no-op update hook — the stable channel cannot self-update
-app/src/unstable  audited updater policy; runtime trigger currently suspended
-app/src/debug     VHAL probe tools, absent from every release build
+app/src/main      app: upload service, server client, pairing, UI
+app/src/stable    no-op update hook (no updater in the APK)
+app/src/unstable  car build: system UID, updater (currently pointed nowhere)
+app/src/debug     VHAL probe tools, absent from release builds
 app/src/test      JVM unit tests
+EVHardware        shared vehicle reads per firmware generation
+server/           Go server
+k8s/              Kubernetes manifests and Grafana provisioning
+flake.nix         dev shell and build-car
 ```
 
 ## Project documents
+
 | Document | What it covers |
 |---|---|
-| [DESIGN.md](DESIGN.md) | The EVSuite design system — colour, type, touch targets, icons |
+| [SPECS.md](SPECS.md) | Journal of this fork: architecture, status, to-dos, done log |
+| [FIRMWARE.md](FIRMWARE.md) | MG4 firmware generations and how the app reads each |
 | [AGENTS.md](AGENTS.md) | Context for AI agents working in this repository |
-| [CONTRIBUTING.md](CONTRIBUTING.md) | How to build, test and submit a change |
-| [SECURITY.md](SECURITY.md) | Threat model and vulnerability disclosure |
-| [DISCLAIMER.md](DISCLAIMER.md) | Vehicle-safety disclaimer — read before installing |
-| [CHANGELOG.md](CHANGELOG.md) | Release history |
-| [LICENSE.md](LICENSE.md) | Licence text |
-
-## Security
-See [SECURITY.md](SECURITY.md) for the threat model and how to report a vulnerability
-privately.
-
-## Contributing
-See [`CONTRIBUTING.md`](CONTRIBUTING.md). Short version: this code runs on a moving
-vehicle, so changes need tests and a clear account of what you verified on a car and what
-you did not.
-
-## Legal
-- [`DISCLAIMER.md`](DISCLAIMER.md) — no warranty, no liability, not affiliated with the
-  carmaker or with ABRP.
-- [`LICENSE.md`](LICENSE.md) — unresolved licence status inherited from the fork source.
-  Read it before redistributing.
-- [`SECURITY.md`](SECURITY.md) — how to report a vulnerability privately.
+| [DESIGN.md](DESIGN.md) | The EVSuite design system (the app overrides its palette) |
+| [SECURITY.md](SECURITY.md) | Threat model |
+| [DISCLAIMER.md](DISCLAIMER.md) | Vehicle-safety disclaimer; read before installing |
+| [CHANGELOG.md](CHANGELOG.md) | Upstream release history |
+| [LICENSE.md](LICENSE.md) | Licences: MIT, and PolyForm Noncommercial for `EVHardware/` |
 
 ## Credits
-- Original app: **Leon Kernan** — the car-API approach and the first working uploader.
+
+- **fatihdonmezdev**: [FatihsMG4](https://github.com/fatihdonmezdev/FatihsMG4), the app this fork
+  starts from.
+- **malys**: EVABRPUploader.
+- **Leon Kernan**: the original `ABRP_Uploader`, the car-API approach and the first working
+  uploader.
 - ABRP telemetry API: [Iternio](https://documenter.getpostman.com/view/7396339/SWTK5a8w).
-- Sibling project: **EVProfile**, whose security and CI patterns this repo reuses.
diff --git a/SPECS.md b/SPECS.md
new file mode 100644
index 0000000..aa47a41
--- /dev/null
+++ b/SPECS.md
@@ -0,0 +1,298 @@
+# SPECS — Nils' MG4
+
+Journal for this fork of [fatihdonmezdev/FatihsMG4](https://github.com/fatihdonmezdev/FatihsMG4):
+what has been changed, and what is still to do.
+
+- Our repository: https://git.stinnesbeck.com/nils/mg4
+- Upstream: https://github.com/fatihdonmezdev/FatihsMG4 (itself a fork of malys / EVABRPUploader
+  and Leon Kernan / ABRP_Uploader). Credited in the app's About dialog.
+
+## Architecture: car server at car.k8s.stinnesbeck.com
+
+The car sends everything to our own server, which stores it in InfluxDB 2, and its live data
+straight to ABRP with the ABRP credentials kept (encrypted) in the app. The server does not talk
+to ABRP. Grafana reads InfluxDB directly for the dashboards.
+
+```
+car ──live telemetry───▶ car.k8s.stinnesbeck.com (Go)
+ │  ──daily chunks─────▶          │
+ │  ──charging sessions▶          ▼
+ │                            InfluxDB 2 ◀── Grafana (car-grafana.k8s.stinnesbeck.com)
+ └──live telemetry─────▶ ABRP  api.iternio.com/1/tlm/send
+```
+
+- **Server:** `server/`, Go 1.26, API only — see `server/README.md` for endpoints, configuration
+  and the storage layout. Replaced the Next.js app from upstream (`web/`, removed 2026-10-17).
+- **Dashboards:** Grafana, provisioned from `k8s/grafana/`, reading with a read-only token: Live
+  (stats, SoC/range, power/speed, route map, temperatures, tyres), Consumption (period totals, lifetime, SoH, per-day energy,
+  distance and efficiency) and Charging (totals, session table, curves). Prices in euro.
+- **Pairing:** the car shows a QR code, a phone approves it with the approval password, and the car
+  gets its own token, bound to its installation id (RFC 8628-style; `server/README.md`). The
+  shared `INGEST_TOKEN` still works. The same QR flow carries settings typed on the phone.
+- **Car app:** tabs Overview, Consumption, Charging, Live data (on/off, ABRP credentials,
+  frequency), Server (URL, pairing, token, installation id, config import), Settings (display,
+  voice key, tyre unit, accent colour, battery, charging price, Wi-Fi), Logs. Live telemetry every
+  15 s while driving or charging, to the server and straight to ABRP; consumption chunks and
+  charging sessions to the server.
+- **Deployment:** `k8s/`, plain manifests. **Nothing is ever applied to the cluster by us** —
+  Nils applies them (`k8s/README.md`). TLS comes from Traefik's default certificate.
+
+### Status
+
+Current: app 2.14.2, server 2.5.0 (pinned by digest in `k8s/server.yaml`).
+
+- [x] On the car: QR pairing, values on the Overview, voice-key double press, full screen
+      without black bands.
+- [x] Go server: tests and govulncheck clean; end to end in podman against InfluxDB 2.7.12
+      (telemetry, consumption, charging, pairing, settings from the phone) and Grafana 13.2.3 (all
+      dashboard queries return data).
+- [x] Manifests validated offline (kubeconform, with Traefik CRDs). **Applied by Nils only.**
+- [ ] Check Grafana's host in `k8s/ingress.yaml` (placeholder `car-grafana.k8s.stinnesbeck.com`).
+- [x] Screen on the car: 1920×720 px at 160 dpi, app window 1778×720 px (Logs → SCREEN).
+- [x] Car-colour probe on the car: only `ro.build.mtk2712.vehicle_type = AS28`; the paint colour
+      is not in the system properties. It may be in the VHAL (a debug-build VhalProbe listing
+      would tell); until then the accent is chosen by hand.
+- [ ] Not yet tried on the car: live data straight to ABRP (2.11), Enter on phone (2.12), accent
+      colours (2.14), right-aligned values (2.14.1).
+
+### Signals the car does not provide
+
+Checked 2026-10-17 against what actually reached InfluxDB (`schema.measurementFieldKeys`). The car
+sends soc, est_battery_range, odometer, power, voltage, current, speed, hvac_setpoint, the four
+tyre pressures, GPS (lat, lon, elevation, heading) and the is_* flags. It does **not** send:
+
+- **Battery temperature:** read from `EV_BATTERY_AVERAGE_TEMPERATURE`, an Android 14 property; the
+  head unit runs Android 9, and the SAIC services offer none.
+- **Cabin temperature:** `HVAC_TEMPERATURE_CURRENT` is not published; only the setpoint is.
+- **Outside temperature:** not published by the vehicle (upstream noted the same). Upstream used
+  the head unit's weather service as a stand-in (`HeadUnitWeather`, removed in `ea8032a`);
+  restoring it was considered and declined.
+- **Pack energy (`soe`) and capacity:** not published. The Live dashboard computes energy in pack
+  as SOC × usable capacity, from the hidden dashboard constant `usableKwh` (50.8 kWh for the
+  51 kWh battery) in `k8s/grafana/dashboards/live.json`.
+
+## To do
+
+- [ ] **Grafana high availability needs another database.** Grafana keeps its own state (users,
+      sessions, preferences, provisioned-dashboard records, alerting state) in SQLite at
+      `/var/lib/grafana/grafana.db` on the `grafana-data` PVC. That is fine for one replica, and is
+      why `k8s/grafana.yaml` uses `replicas: 1` and the `Recreate` strategy: only one Grafana may
+      write the file. To run more than one replica, first move Grafana to PostgreSQL or MySQL
+      (`GF_DATABASE_TYPE`, `GF_DATABASE_HOST`, …); the replicas then share that database instead
+      of a volume. The car data itself is in InfluxDB and unaffected.
+- [ ] **EVHardware's comments are partly French.** About 120 comment lines in the vendored
+      `EVHardware/` library (mostly `EVHardware.kt`, some tests), half-translated upstream. The
+      app, the docs and the build files are English.
+
+## Done
+
+- 2026-10-17 — Translated the app UI from Turkish to English.
+- 2026-10-17 — Nix flake: `nix develop` provides JDK 21 and the Android SDK. `build-car` builds the
+  unstable APK and signs it with the AOSP test platform key, which the MG4 head unit uses
+  (cert SHA-256 `c8a2e9bc…192ab8`).
+- 2026-10-17 — OTA update checks disabled by pointing at an unresolvable host (see To do).
+- 2026-10-17 — Renamed to "Nils' MG4": package ID `com.stinnesbeck.nilsmg4` (`.unstable` for the car
+  build), APK names `NilsMG4-*.apk`. It installs next to the old FatihsMG4 app instead of replacing
+  it, and starts with empty settings and history.
+- 2026-10-17 — Server rewritten for InfluxDB 2 with live telemetry and ABRP forwarding; Dockerfile;
+  Kubernetes manifests (not applied).
+- 2026-10-17 — App 2.3.0: Server tab (URL, ingest token, installation id, config import), live
+  telemetry restored from before `ea8032a` and sent to the server, Upload-tab cadence controls
+  reconnected, dead switches removed. The removed ABRP classes' unit tests compile and pass again
+  (AbrpApi and HeadUnitWeather tests deleted with their classes).
+- 2026-10-17 — Accent colour: MG red instead of muted gold. Web app renamed to Nils' MG4.
+- 2026-10-17 — Dashboard translated to English (en-GB formatting); euro instead of lira in the
+  dashboard and the car app's charging tab.
+- 2026-10-17 — Server rewritten in Go (API only); dashboards moved to Grafana with provisioned
+  InfluxDB datasource and three dashboards; the Next.js app (`web/`) removed. Per-host
+  cert-manager certificates dropped in favour of Traefik's default certificate.
+- 2026-10-17 — Pairing by QR code: server 2.1.0 issues per-car tokens after approval on a phone;
+  app 2.4.0 shows the QR code and collects its token. Tested end to end against InfluxDB.
+- 2026-10-17 — Incident: a commit swept the filled-in `secrets.example.yaml` (InfluxDB admin token,
+  INGEST_TOKEN) into git and pushed it. Commit amended and force-pushed; both values regenerated in
+  the now gitignored `k8s/secrets.yaml` (since moved to `k8s/secrets/secrets.yaml`, outside
+  `kubectl apply -f k8s/`). Filled-in secrets live only there from now on.
+- 2026-10-18 — AGENTS.md rewritten as the entry point for agents: what the project is, rules,
+  confirmed car facts, app structure, UI conventions, build/test/ship, documents. It replaces
+  upstream's EVABRPUploader text. The test emulator is now in the flake: `nix run .#car-emulator`
+  (Android 9 AOSP at 1920×720, 160 dpi; the car build installs as the system user — checked).
+- 2026-10-18 — App 2.18.0: Settings → App → "Install from USB stick" (car build only): the newest
+  `NilsMG4-unstable-<version>.apk` newer than the installed one in a stick's top folder, checked
+  against its `.sha256` and the package, installed with the OTA installer session. Tested on the
+  emulator: 2.18.0 installed a 2.18.1 from the storage's top folder silently, as the system user —
+  so the OTA install step should not need a confirmation either.
+- 2026-10-18 — App 2.17.5: Server tab fits the car's window. The "Your private connection" card is
+  gone (its text was out of date); Import from file sits with Save and Test in one row; the
+  installation ID is shown as text, not edited, since it is derived from the head unit (a config
+  file can still carry another one over). The subtitle no longer says the server forwards to ABRP.
+- 2026-10-18 — App 2.17.3: the Overview panel "Energy and temperature" is "Vehicle info" (2.17.4; "Odometer and climate" in 2.17.3):
+  it only holds those two, since the car publishes no pack energy or temperatures.
+- 2026-10-18 — App 2.17.2: Wi-Fi auto-connect removed with its two permissions (ACCESS_ and
+  CHANGE_WIFI_STATE). Upstream used it to keep the head unit on a phone hotspot; this car's head
+  unit has its own connection.
+- 2026-10-18 — App 2.17.1: Settings without the Wi-Fi and saved-networks cards, in three columns
+  (display and steering wheel | battery | charging price and app). Logs keeps only the upload log: the steering-key
+  reports, the car-colour probe and the screen line are gone, their questions answered.
+- 2026-10-18 — App 2.17.0: "Speed, 5-min average" card under Speed. The top bar is one compact line
+  (title and subtitle); version, update check and About moved to an App card on the Settings tab.
+  The Overview fits the car's window without scrolling: checked on the emulator at 1778×640, the
+  layout height the car reports (less page padding, a lower tyre card).
+- 2026-10-18 — App 2.16.4: drop-downs again, as Material exposed dropdown menus: their list leaves
+  the focus with the activity, so full screen stays (a Spinner's list is a focusable window of its
+  own without the full-screen flags). 2.16.3 had replaced them with buttons.
+- 2026-10-18 — App 2.16.3: full screen stays while choosing or reading a dialog. Drop-downs (upload
+  frequency, tyre unit, accent colour) became buttons on the page: a drop-down is a window of its
+  own without the full-screen flags, so the car showed its bars while it was open. Dialogs are
+  shown unfocusable, given the activity's full-screen flags, then allowed focus
+  (`showKeepingFullScreen`); none of them takes typing.
+- 2026-10-18 — From the car (2.16.2): screen 1920×720 px at 160 dpi with a 1778×720 px app
+  window, so EVProfile's 1280×480 does not apply; colour probe found only `vehicle_type = AS28`.
+  FIRMWARE.md, mise.toml and SPECS.md say so.
+- 2026-10-18 — App 2.16.2: Logs → SCREEN shows the panel's pixels and density and the app
+  window in px and dp. The MG4's display figures disagree (1920×720 px used here; EVProfile lists
+  1280×480, which is 1920×720 at 240 dpi in dp; upstream reported a 1778×720 window); FIRMWARE.md
+  lists all three until a photo of that line settles it.
+- 2026-10-18 — EVProfile's licence checked: MIT, forked from SliDeeN/MG4Control and last merged
+  from it on 2026-08-02, inside MG4Control's MIT period (MIT up to 2.6.5 of 2026-08-05, GPL v3
+  from 2.6.6 of 2026-09-02). Recorded in `LICENSE.md`. History scanned for secrets before the
+  repository went public: none.
+- 2026-10-18 — Licence: Leon Kernan's `ABRP_Uploader` has been MIT since 2026-07-29 (its commit
+  `75d8f2bc`), so the "unresolved" notes are gone. `LICENSE` names every copyright holder in the
+  fork chain; `LICENSE.md` explains that `EVHardware/` is PolyForm Noncommercial, which makes the
+  built APK non-commercial. README, AGENTS.md and CONTRIBUTING.md updated.
+- 2026-10-18 — App 2.16.1: the Overview reads the car every 0.5 s (was 2 s), on a background
+  thread; the consumption and charging trackers stay on the 2-second tick (they integrate over
+  time, and the charging tracker writes its session to storage on every sample). Note for
+  emulator tests: uiautomator can no longer dump the screen while the Overview is open, since
+  the UI is never idle.
+- 2026-10-18 — Grafana's read-only InfluxDB token without a manual step: an init container in
+  the Grafana pod creates it with the admin token at every start, deletes the previous one and
+  leaves only the read-only token in a memory volume; the datasource reads it with
+  `$__file{/run/influx/token}`. InfluxDB ignores chosen token values (tested), so it cannot come
+  from the Secret. The `grafana-influx` Secret is gone. Tested in podman: InfluxDB 2.7.12, the
+  script as the Grafana user (twice: rotates, no pile-up), Grafana 13.2.3 datasource healthy.
+- 2026-10-18 — App 2.16.0, server 2.6.0: over-the-air updates from this repository. `publish-car`
+  creates the pre-release `car-<version>` on the private forge with the APK and its `.sha256`;
+  the server relays releases and attachments to the car (`/v1/app/…`, read with a read-only
+  `FORGE_TOKEN`); the app checks them through its server with its own token, allows exactly the
+  server's host, downloads itself (no DownloadManager, so the token stays in the app), verifies
+  SHA-256 and package, and tries a PackageInstaller session before falling back to Downloads.
+  `OTA.md` rewritten for this flow. Not yet tried on the car.
+- 2026-10-18 — App 2.15.0: unsent live samples survive a restart. The queue is saved to
+  `files/telemetry_queue.json` (AtomicFile) at most every 5 minutes and only after a change, and
+  at once when the service stops; it is restored, in order and within its 2000-sample cap, when
+  the service starts. A killed process loses at most 5 minutes. Tested on the emulator across a
+  reboot (6 queued samples back).
+- 2026-10-18 — App 2.14.4: every UI text is in `strings.xml` (Charging, Consumption and Settings
+  labels, toasts, the trip-reset dialog, charging and Wi-Fi states, the daily summary, the "—"
+  placeholder); lint reports no hard-coded text. Upload-log entries stay in code as log text.
+- 2026-10-18 — Translated the rest: `mise.toml`, the comments in `app/build.gradle`, `OTA.md`'s
+  message table (now the updater's current English messages), the Turkish messages quoted in
+  `CHANGELOG.md` and `OTA.md` (glossed), two test messages, the ignition-state comment in
+  `EVHardware.kt`.
+- 2026-10-18 — About dialog: link and QR code point to https://git.stinnesbeck.com/nils/mg4
+  (were Fatih's GitHub). Status section brought up to date.
+- 2026-10-18 — App 2.14.2: "Range, 5-min average", like the usage and power cards (was "Range at 5-min average").
+- 2026-10-18 — App 2.14.1: Overview values and their notes right-aligned, with tabular
+  (equal-width) digits, so 9 → 10 → 100 no longer shifts the text; labels stay left.
+- 2026-10-18 — App 2.14.0: accent colour selectable after the MG4 paints (Settings → Display):
+  Dynamic Red (default), Volcano Orange, Holborn Blue, Racing Green, Camden Grey, Monument Silver,
+  Arctic White, Black Pearl; white, silver and black become light greys and a pearl blue-grey,
+  since they cannot be an accent on black. The accent palette is theme attributes
+  (`attrs_accent.xml`, overlays in `accents.xml`); a change recreates the activity on the same
+  page. Android 9 crashes on gradients with theme colours, so the battery card is layered.
+  Logs tab: "Look for the car colour" lists system properties that mention colour, paint or car
+  model, to find out whether the paint colour can be read (nothing on the emulator).
+- 2026-10-18 — App 2.13.0: tyre pressures in bar by default, kPa or psi selectable (Settings →
+  Display; display only, the car and the server keep kPa). "Power, 5-min average" card under
+  Power: time-weighted mean battery power, standing included.
+- 2026-10-18 — App 2.12.1: no scroll bars (the 2-second refresh kept them from ever fading);
+  "Energy since start" tile (net kWh of the trip, recuperation counted back) left of "Usage since
+  start".
+- 2026-10-18 — App 2.12.0, server 2.5.0: settings entered on a phone. "Enter on phone" shows a QR
+  code; the phone form on the server (approval password) takes the ABRP credentials, charging
+  price and usable capacity, and the car collects them once (RFC 8628-style, like pairing; values
+  in server memory only, at most 10 minutes). The config file also takes `charging_price` and
+  `usable_kwh`. The QR dialog is shared with pairing (`PhoneQrDialog`). Tested end to end with
+  curl against the server image and InfluxDB; the app side on the emulator only up to the dialog.
+- 2026-10-18 — App 2.11.1, server 2.4.0: ABRP forwarding removed from the server. The car and the
+  server use the same mobile connection, so a server fallback for ABRP bought nothing. The car no
+  longer sends `abrpSentUtc`; the server ignores unknown fields, so older apps keep working.
+- 2026-10-18 — App 2.11.0, server 2.3.0:
+  - Live data goes to ABRP straight from the car when ABRP credentials are set in the app
+    (Live data tab or config file: `abrp_api_key`, `abrp_token`), so ABRP keeps getting it
+    while the server is down. The car tells the server the newest sample ABRP took
+    (`abrpSentUtc`); the server forwards only newer ones. Without credentials in the app the
+    server forwards as before. This deliberately puts ABRP credentials in the car again
+    (encrypted, never logged).
+  - Settings regrouped: Live data (on/off, ABRP, frequency), Server, Settings (full screen, voice
+    key, usable capacity and SoH from Consumption, charging price from Charging, Wi-Fi, which
+    lost its own tab). Charging and Live data have their own icons.
+- 2026-10-18 — App 2.10.2: the range shows "∞" instead of "> 999 km" while recuperating.
+- 2026-10-18 — App 2.10.1: net regeneration (recuperating downhill) shows as negative usage, and
+  the range as "> 999 km" with "while recuperating", instead of "needs a few minutes of driving".
+- 2026-10-18 — App 2.10.0: "Range since start" replaces the range at current power. It uses
+  the consumption since the car was switched on, including standing with the climate on, and a
+  new trip starts after 10 minutes without samples or when charging. Usage (kWh/100 km) for both
+  estimates moved into cards of their own under the range tiles, which fit on the full-screen
+  1920x720 overview without scrolling.
+- 2026-10-18 — Code review fixes. App 2.9.0, server 2.2.0, Grafana token:
+  - The server drops a bad value (or a sample without a plausible time) instead of rejecting
+    the batch, and answers 200 with what it dropped; the app sends only values within the
+    server's ranges (speed as a magnitude) and no samples before its clock is set. Before, one
+    reversing sample cost the whole queued batch.
+  - Pairing: the token is handed out and accepted only after the device is saved; wrong-password
+    lockouts and open-request limits are per client address; a paired token only serves its
+    own installation id (403 otherwise).
+  - ABRP forwarding skips samples stamped ahead of the server's clock, which used to block it.
+  - App: settings written in plaintext during a keystore failure move back into encrypted
+    storage; the installation id is derived from ANDROID_ID, so a reinstall keeps its history;
+    the imported config file is deleted; GPS stops when live telemetry is off and pauses while
+    parked and idle; range estimates use the monotonic clock; one HTTP helper (`ServerHttp`)
+    for all server calls; the last Turkish strings translated.
+  - Grafana reads InfluxDB with its own read-only token (`grafana-influx` Secret, created by
+    hand: `k8s/README.md`).
+- 2026-10-18 — README rewritten for Nils' MG4. `OTA.md`, `mise.toml` and
+  `docs/MG4_PLATFORM_INSTALL.md` use the new package ID and `NilsMG4-*.apk` names; `OTA.md` notes
+  that updates are switched off. `CHANGELOG.md` keeps the old ID as upstream history.
+- 2026-10-18 — App 2.8.2: full screen uses the whole display. The MG4 hid its bars but left a black
+  band where they were: LAYOUT_STABLE kept reporting the bars' insets and the fitsSystemWindows root
+  padded for them. Both are off in full screen now.
+- 2026-10-17 — App 2.8.1: three-part version names (`2.8.1-unstable`, `NilsMG4-unstable-2.8.1.apk`).
+  Upstream's fourth part was its CI build number; the version code keeps the x100000 factor so it
+  never falls below codes already installed.
+- 2026-10-17 — App 2.8.0: immersive full screen (switch in the Upload tab, default on). Hides the
+  system bars on the emulator; whether SAIC's own bars on the MG4 can be hidden is only known once
+  tried on the car.
+- 2026-10-17 — App 2.7.1: the voice key works. The car's key report, read off the on-screen log:
+  `android.intent.extra.hardkey.keycode` (Integer), `.down` (Boolean, a report per press and per
+  release), `.longpress` (Boolean). 2.7.0 looked only for short names and never found the code.
+  Floating button removed (it did not show over the MG4 launcher).
+- 2026-10-17 — App 2.7.0: a double press of the steering wheel's voice key (code 287) opens the
+  app, from the head unit's `com.saic.keyevent.hardkey.report` broadcast. Its extras are not
+  documented; the usual names are tried and every report is listed raw on the Logs tab. The
+  floating button (2.6.0) did not show over the MG4 launcher. Pages no longer jump back to the
+  top on every refresh (`StableScrollView`), and the Vehicle tab shows all six value tiles,
+  including both range estimates, in one row at the top.
+- 2026-10-17 — App 2.6.0: floating button to open the app, because the MG4 launcher does not list
+  it. Drawn over other apps (needs the overlay permission, which the car build has through the
+  system UID), draggable, hidden while the app is open, switch in the Upload tab. Tested on an
+  Android 9 AOSP emulator with the car APK (installs as UID 1000 there too), at 1920x1080 and at the
+  head unit's real 1920x720 / 160 dpi, where all tabs and the button were checked as well.
+- 2026-10-17 — App 2.5.0: range estimates at current and 5-minute average power (Vehicle tab).
+- 2026-10-17 — Live dashboard reworked around the signals the car sends: Climate setpoint, Last
+  update and a computed Energy in pack replace the empty temperature tiles; Battery voltage and
+  current replaces the Temperatures chart.
+- 2026-10-17 — Temporary on-screen diagnostics (b2a5b32) to debug blank values without adb;
+  removed again (1002962) once values showed on the car. Revert 1002962 to bring them back.
+
+## Installing on the car
+
+```
+nix develop
+build-car
+adb push build/car/NilsMG4-unstable-<version>.apk /data/local/tmp/update.apk
+adb shell "pm install -r -f -d -t /data/local/tmp/update.apk"
+```
+
+To remove the old upstream app: `adb uninstall com.evsuite.abrp.unstable`.
diff --git a/app/build.gradle b/app/build.gradle
index 8a597c2..1e21cdd 100644
--- a/app/build.gradle
+++ b/app/build.gradle
@@ -10,14 +10,14 @@ android {
         }
     }
 
-    // Signature de l'APK — rien à voir avec la clé d'API ABRP de l'utilisateur.
-    // Ces valeurs servent UNIQUEMENT au build : elles prouvent que l'APK vient bien de
-    // nous et n'entrent jamais dans l'application. La clé d'API et le token ABRP, eux,
-    // sont saisis dans l'app et stockés chiffrés sur l'appareil (voir SecurePrefs).
+    // APK signing — nothing to do with the user's ABRP credentials. These values are ONLY for
+    // the build: they prove the APK comes from us and never enter the app. The ABRP API key and
+    // token are entered in the app and stored encrypted on the device (see SecurePrefs).
+    // The car build is signed by build-car (flake.nix) with the AOSP platform key instead.
     //
-    // Un keystore contient plusieurs clés : SIGNING_STORE_PASSWORD ouvre le conteneur,
-    // SIGNING_KEY_ALIAS choisit la clé, SIGNING_KEY_PASSWORD ouvre cette clé-là.
-    // Lues depuis l'environnement (CI) ou gradle.properties local — JAMAIS commitées.
+    // A keystore holds several keys: SIGNING_STORE_PASSWORD opens the container,
+    // SIGNING_KEY_ALIAS picks the key, SIGNING_KEY_PASSWORD opens that key.
+    // Read from the environment (CI) or a local gradle.properties — NEVER committed.
     def keystorePath = System.getenv("SIGNING_KEYSTORE") ?: project.findProperty("signing.keystore")
     signingConfigs {
         if (keystorePath != null && file(keystorePath).exists()) {
@@ -31,33 +31,27 @@ android {
     }
 
     defaultConfig {
-        applicationId "com.evsuite.abrp"
+        applicationId "com.stinnesbeck.nilsmg4"
         minSdk 27
         targetSdk 36
-        versionCode 56
-        versionName "2.2.39"
+        versionCode 95
+        versionName "2.18.0"
 
-        // MongoDB credentials never ship in the APK. The app only talks to the small
-        // authenticated API in server/, which owns the database connection.
-        buildConfigField "String", "CONSUMPTION_API_URL", "\"${System.getenv('CONSUMPTION_API_URL') ?: ''}\""
-        buildConfigField "String", "CONSUMPTION_API_TOKEN", "\"${System.getenv('CONSUMPTION_API_TOKEN') ?: ''}\""
-        // Fixed installation identity: baked into every build so an APK wipe cannot orphan
-        // the cloud history under a new random UUID. The car's own consumption history lives
-        // under this id in the daily_consumption collection.
-        buildConfigField "String", "CONSUMPTION_INSTALLATION_ID", "\"226b1614-4d18-48f0-8938-3609cfa3db93\""
+        // Nothing about the server ships in the APK: its URL and ingest token are entered in
+        // the app's Server tab (ServerConfig), and the database is only reachable by the server.
 
         testInstrumentationRunner "androidx.test.runner.AndroidJUnitRunner"
     }
 
-    // null quand aucun keystore n'est configuré : le build reste possible sur une
-    // machine sans secrets (APK non signé), au lieu d'échouer.
+    // null when no keystore is configured: the build still works on a machine without
+    // secrets (unsigned APK) instead of failing.
     def platformSigning = signingConfigs.findByName("platform")
 
-    // Deux canaux de distribution :
-    //  - stable  : diffusé en release taguée, AUCUN auto-update. L'utilisateur installe
-    //              lui-même ; rien dans l'app ne va chercher un APK.
-    //  - unstable : pré-releases publiées à chaque push sur master, avec OTA pour que les testeurs
-    //              soient à jour sans manipulation. Installable à côté du stable.
+    // Two distribution channels:
+    //  - stable:   no self-update at all. The user installs it; nothing in the app fetches an
+    //              APK (the updater is not even in this APK).
+    //  - unstable: the car build (system UID, platform-signed), with the OTA updater, so the
+    //              car can update itself from published pre-releases. Installs next to stable.
     flavorDimensions += "channel"
     productFlavors {
         stable {
@@ -67,16 +61,13 @@ android {
         unstable {
             dimension "channel"
             applicationIdSuffix ".unstable"
-            // Android uses versionCode, not versionName, to order package updates. Give
-            // every rolling CI build a strictly increasing code so Package Installer does
-            // not treat a newer unstable APK as the same package version.
-            versionCode defaultConfig.versionCode * 100000 +
-                    (project.findProperty('unstableBuild') ?: '0').toString().toInteger()
-            // Le numéro de build fait partie du COEUR numérique de la version
-            // ("1.0.42-unstable"), pas du suffixe : l'updater compare des segments
-            // numériques, donc deux builds unstable doivent différer avant le premier tiret.
-            // -PunstableBuild=<n> est passé par la CI ; 0 en local.
-            versionName "${defaultConfig.versionName}.${project.findProperty('unstableBuild') ?: '0'}"
+            // Three-part versions, the same as defaultConfig ("2.8.1-unstable"). Upstream added
+            // a fourth part for its CI build number; there is no CI here and the OTA updater is
+            // off. The version code keeps upstream's x100000 so it never drops below codes
+            // already installed on the car (2.8.0.0 was 6600000): a lower code is a downgrade,
+            // which the installer refuses.
+            versionCode defaultConfig.versionCode * 100000
+            versionName defaultConfig.versionName
             versionNameSuffix "-unstable"
             buildConfigField "boolean", "OTA_ENABLED", "true"
         }
@@ -112,25 +103,28 @@ android {
     }
 }
 
-// Version publiée par la CI pour composer le nom de l'asset APK : ce nom DOIT être
-// comparable par l'updater ("FatihsMG4-unstable-1.0.42.apk"). Le tag de la
-// pré-release est la constante "unstable", écrasée à chaque build.
+// The version build-car puts in the APK's file name ("NilsMG4-unstable-2.8.1.apk"), which
+// is also the name the OTA updater reads a release's version from.
 tasks.register('printUnstableVersion') {
     doLast {
-        println "${android.defaultConfig.versionName}.${project.findProperty('unstableBuild') ?: '0'}"
+        println android.defaultConfig.versionName
     }
 }
 
-// Nomme les APK par canal pour que les artefacts de release soient lisibles.
+// Names the APKs by channel so the build outputs are readable.
 androidComponents {
     onVariants(selector().all()) { variant ->
         variant.outputs.each { output ->
             if (variant.buildType == "release") {
-                // Le canal unstable garde un nom de fichier stable : l'updater identifie
-                // la version par le tag de la pré-release, jamais par le nom d'APK.
+                // A fixed name for the unstable release output. What is published for the car
+                // comes from build-car, named NilsMG4-unstable-<version>.apk: that file name is
+                // where the updater reads a release's version from.
                 output.outputFileName.set(variant.flavorName == "unstable"
-                        ? "FatihsMG4-unstable.apk"
-                        : "FatihsMG4-${variant.flavorName}-${output.versionName.get()}.apk")
+                        ? "NilsMG4-unstable.apk"
+                        : "NilsMG4-${variant.flavorName}-${output.versionName.get()}.apk")
+            } else {
+                // Debug builds: NilsMG4-stable-debug.apk, NilsMG4-unstable-debug.apk.
+                output.outputFileName.set("NilsMG4-${variant.flavorName}-${variant.buildType}.apk")
             }
         }
     }
diff --git a/app/src/main/AndroidManifest.xml b/app/src/main/AndroidManifest.xml
index 608eaba..68f3033 100644
--- a/app/src/main/AndroidManifest.xml
+++ b/app/src/main/AndroidManifest.xml
@@ -8,13 +8,12 @@
     <!-- Required from API 33 to post the foreground-service notification, which is the
          only status UI the service has. Without it the notification is silently dropped. -->
     <uses-permission android:name="android.permission.POST_NOTIFICATIONS" />
+    <!-- GPS for the position in live telemetry. -->
+    <uses-permission android:name="android.permission.ACCESS_FINE_LOCATION" />
+    <uses-permission android:name="android.permission.ACCESS_COARSE_LOCATION" />
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_LOCATION" />
+    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_DATA_SYNC" />
 
-    <!-- Wi-Fi auto-join. CHANGE_WIFI_STATE covers enabling the radio and asking the
-         supplicant to join a network the unit already has saved; ACCESS_WIFI_STATE covers
-         reading which one it landed on. No password is ever handled here — see
-         WifiAutoConnect for why this works on this Android 9 unit and not on a newer one. -->
-    <uses-permission android:name="android.permission.ACCESS_WIFI_STATE" />
-    <uses-permission android:name="android.permission.CHANGE_WIFI_STATE" />
 
     <!-- Android Automotive / CarPropertyManager permissions -->
     <uses-permission android:name="android.car.permission.CAR_SPEED" />
@@ -52,7 +51,8 @@
 
         <service
             android:name=".AbrpUploadService"
-            android:exported="false" />
+            android:exported="false"
+            android:foregroundServiceType="dataSync|location" />
 
         <!-- The head unit resumes far more often than it cold-boots, and announces the
              resume with QUICKBOOT_POWERON. Listening only for BOOT_COMPLETED is why
diff --git a/app/src/main/java/com/evsuite/abrp/AbrpApi.java b/app/src/main/java/com/evsuite/abrp/AbrpApi.java
new file mode 100644
index 0000000..b658a09
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/AbrpApi.java
@@ -0,0 +1,59 @@
+package com.evsuite.abrp;
+
+import java.net.URLEncoder;
+import java.nio.charset.StandardCharsets;
+
+/**
+ * ABRP's telemetry API, for sending live data straight from the car.
+ *
+ * Credentials go in the POST body, never in the query string: a URL travels through proxies,
+ * access logs and crash reports, a body does not. Neither is ever logged.
+ */
+final class AbrpApi {
+
+    /** No query string: credentials travel in the body, so the URL is a constant. */
+    static final String SEND_URL = "https://api.iternio.com/1/tlm/send";
+
+    /**
+     * Read-only endpoint used to check credentials. The Test button must never touch
+     * /tlm/send: a placeholder sample would tell ABRP the car really is in that state and
+     * corrupt a live route plan.
+     */
+    static final String VERIFY_URL = "https://api.iternio.com/1/tlm/get_next_charge";
+
+    private AbrpApi() { }
+
+    /** Posts one tlm sample. Throws on a network failure. */
+    static ServerHttp.Response send(AbrpConfig config, String tlmJson) throws Exception {
+        byte[] body = formBody(config.apiKey, config.userToken, tlmJson).getBytes(StandardCharsets.UTF_8);
+        return ServerHttp.send("POST", SEND_URL, null, "application/x-www-form-urlencoded", body);
+    }
+
+    /**
+     * Checks the credentials without writing anything. This endpoint only takes the token as a
+     * query parameter; the API key goes in the Authorization header. One token in one URL when
+     * the user presses Test beats writing fake telemetry on every press.
+     */
+    static ServerHttp.Response verify(AbrpConfig config) throws Exception {
+        String url = VERIFY_URL + "?token=" + URLEncoder.encode(config.userToken, StandardCharsets.UTF_8.name());
+        return ServerHttp.send("GET", url, "APIKEY " + config.apiKey, null, null);
+    }
+
+    /** The form body: credentials and the sample, each URL-encoded. */
+    static String formBody(String apiKey, String userToken, String tlmJson) throws Exception {
+        String utf8 = StandardCharsets.UTF_8.name();
+        return "api_key=" + URLEncoder.encode(apiKey, utf8)
+             + "&token=" + URLEncoder.encode(userToken, utf8)
+             + "&tlm=" + URLEncoder.encode(tlmJson, utf8);
+    }
+
+    /** ABRP answers 200 with {"status":"ok"}; anything else is a rejection. */
+    static boolean accepted(ServerHttp.Response response) {
+        if (!response.ok()) return false;
+        try {
+            return "ok".equals(new org.json.JSONObject(response.body).optString("status"));
+        } catch (Exception e) {
+            return false;
+        }
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/AbrpConfig.java b/app/src/main/java/com/evsuite/abrp/AbrpConfig.java
new file mode 100644
index 0000000..5d20a5d
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/AbrpConfig.java
@@ -0,0 +1,62 @@
+package com.evsuite.abrp;
+
+import android.content.Context;
+import android.content.SharedPreferences;
+
+/**
+ * The ABRP credentials for sending live data straight from the car: the API key (which app is
+ * sending) and the user token (which car in which ABRP account). Kept in {@link SecurePrefs}
+ * next to the server settings, entered on the Live data tab or imported from a config file.
+ *
+ * The car is the only one that sends to ABRP: the server stores live data but does not forward
+ * it. Without these, ABRP gets no live data.
+ */
+final class AbrpConfig {
+
+    static final String KEY_API_KEY = "abrp_api_key";
+    static final String KEY_USER_TOKEN = "abrp_user_token";
+
+    final String apiKey;
+    final String userToken;
+
+    private static volatile AbrpConfig current;
+
+    AbrpConfig(String apiKey, String userToken) {
+        this.apiKey = apiKey;
+        this.userToken = userToken;
+    }
+
+    boolean isConfigured() {
+        return !apiKey.isEmpty() && !userToken.isEmpty();
+    }
+
+    static AbrpConfig get(Context context) {
+        AbrpConfig config = current;
+        if (config != null) return config;
+        synchronized (AbrpConfig.class) {
+            if (current == null) {
+                SharedPreferences prefs = SecurePrefs.get(context);
+                current = new AbrpConfig(prefs.getString(KEY_API_KEY, ""), prefs.getString(KEY_USER_TOKEN, ""));
+            }
+            return current;
+        }
+    }
+
+    /** Stores trimmed values; empty strings switch direct sending off. */
+    static synchronized void save(Context context, String apiKey, String userToken) {
+        String key = apiKey == null ? "" : apiKey.trim();
+        String token = userToken == null ? "" : userToken.trim();
+        SecurePrefs.get(context).edit()
+                .putString(KEY_API_KEY, key)
+                .putString(KEY_USER_TOKEN, token)
+                .apply();
+        current = new AbrpConfig(key, token);
+    }
+
+    /** Plausible as an ABRP credential: no spaces, not absurdly short or long. */
+    static boolean isPlausible(String value) {
+        if (value == null) return false;
+        String v = value.trim();
+        return v.length() >= 8 && v.length() <= 200 && !v.contains(" ");
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/AbrpUploadService.java b/app/src/main/java/com/evsuite/abrp/AbrpUploadService.java
index f8eb323..78da357 100644
--- a/app/src/main/java/com/evsuite/abrp/AbrpUploadService.java
+++ b/app/src/main/java/com/evsuite/abrp/AbrpUploadService.java
@@ -24,11 +24,13 @@ import java.util.concurrent.TimeUnit;
 
 /**
  * Foreground service that polls vehicle telemetry every 15 s, integrates consumption locally,
- * and syncs it to the cloud (MongoDB) in 30-minute delta chunks. Never sends anything to ABRP.
+ * syncs it to the car server in 2-minute delta chunks, and sends live telemetry samples that
+ * the server stores and, with ABRP credentials set, that go straight to ABRP
+ * ({@link TelemetryUploader}).
  *
  * Always-on by design: started at boot (BootReceiver) and on app open, never gated on
- * credentials or a toggle. The only thing it needs is a network for the cloud sync, and a
- * missing one is handled by caching chunks locally until the connection returns.
+ * credentials or a toggle. The only thing it needs is a network, and a missing one is
+ * handled by queueing locally until the connection returns.
  */
 public class AbrpUploadService extends Service {
 
@@ -64,7 +66,8 @@ public class AbrpUploadService extends Service {
     private ConsumptionTracker consumptionTracker;
     private ConsumptionCloudClient consumptionCloudClient;
     private ChargeSessionTracker chargeSessionTracker;
-    private WifiAutoConnect wifi;
+    private TelemetryUploader telemetryUploader;
+    private SteeringKeyListener steeringKeys;
     private ScheduledExecutorService scheduler;
     private SharedPreferences prefs;
 
@@ -93,14 +96,16 @@ public class AbrpUploadService extends Service {
         consumptionTracker = ConsumptionTracker.get(this);
         consumptionCloudClient = new ConsumptionCloudClient(getApplicationContext());
         chargeSessionTracker = ChargeSessionTracker.get(getApplicationContext());
-        wifi = new WifiAutoConnect(getApplicationContext());
+        telemetryUploader = new TelemetryUploader(getApplicationContext());
+        steeringKeys = new SteeringKeyListener(this, prefs);
+        steeringKeys.register();
 
         scheduler.scheduleWithFixedDelay(
                 this::safeUploadCycle,
                 FIRST_UPLOAD_DELAY_SEC, UPLOAD_INTERVAL_SEC, TimeUnit.SECONDS);
 
         uploadLog.record(new UploadLog.Entry(System.currentTimeMillis(), 0, true,
-                "Tüketim servisi başlatıldı"));
+                "Consumption service started"));
         Log.i(TAG, "Service started, consumption tracking armed");
     }
 
@@ -111,15 +116,16 @@ public class AbrpUploadService extends Service {
     }
 
     /**
-     * Enters the foreground. No location type — this service no longer reads GPS. Foreground
-     * service types do not exist before API 29, so on this API-28 head unit a plain
-     * startForeground is the only correct call.
+     * Enters the foreground. Foreground service types do not exist before API 29, so on this
+     * API-28 head unit a plain startForeground is the only correct call; from API 29 the
+     * location type is what lets the GPS subscription run in the background.
      */
     private void startInForeground() {
         Notification notification = buildNotification(lastStatus);
         if (android.os.Build.VERSION.SDK_INT >= android.os.Build.VERSION_CODES.Q) {
             ServiceCompat.startForeground(
-                    this, NOTIF_ID, notification, ServiceInfo.FOREGROUND_SERVICE_TYPE_DATA_SYNC);
+                    this, NOTIF_ID, notification,
+                    ServiceInfo.FOREGROUND_SERVICE_TYPE_DATA_SYNC | ServiceInfo.FOREGROUND_SERVICE_TYPE_LOCATION);
         } else {
             startForeground(NOTIF_ID, notification);
         }
@@ -133,6 +139,11 @@ public class AbrpUploadService extends Service {
         running = false;
         prefs.edit().putBoolean("service_running", false).apply();
         if (scheduler != null) scheduler.shutdownNow();
+        if (telemetryUploader != null) {
+            telemetryUploader.persist(); // what is still queued survives the restart
+            telemetryUploader.stop();
+        }
+        if (steeringKeys != null) steeringKeys.unregister();
         Log.i(TAG, "Service stopped");
     }
 
@@ -149,17 +160,27 @@ public class AbrpUploadService extends Service {
     private void doUpload() {
         long sampleMs = System.currentTimeMillis();
         EnergySnapshot vehicle = energyReader.read(sampleMs);
+        // Keeps the 5-minute range average going while the app is in the background.
+        RangeEstimator.shared().add(android.os.SystemClock.elapsedRealtime(),
+                vehicle.getBatteryPowerKw(), vehicle.getSpeedKmh());
         consumptionTracker.sample(vehicle);
         chargeSessionTracker.sample(vehicle);
         consumptionCloudClient.syncIfDue(consumptionTracker, chargeSessionTracker, sampleMs);
 
-        // Keep the head unit on the phone hotspot — the sync needs a network, and this is
-        // exactly when being offline costs something. Rate-limited internally.
-        if (wifi != null && prefs.getBoolean(MainActivity.WIFI_AUTO_KEY, true)) {
-            wifi.ensureConnected(false);
+        UploadSettings settings = UploadSettings.from(prefs);
+        // Live data goes to the server, to ABRP directly, or both; with neither set up there is
+        // nowhere to send it.
+        if (!ServerConfig.get(this).isConfigured() && !AbrpConfig.get(this).isConfigured()) {
+            telemetryUploader.stop(); // no live telemetry, so no GPS either
+            updateNotification(getString(R.string.server_not_configured));
+        } else if (!settings.abrpUploadEnabled) {
+            telemetryUploader.stop();
+            updateNotification(getString(R.string.notif_tracking_locally));
+        } else {
+            telemetryUploader.tick(vehicle, chargeSessionTracker.snapshot(), settings);
+            int queued = telemetryUploader.queued();
+            updateNotification(queued > 0 ? "Sending telemetry — " + queued + " queued" : "Sending telemetry");
         }
-
-        updateNotification("Tüketim takibi aktif");
     }
 
     // ---------- Notification ----------
diff --git a/app/src/main/java/com/evsuite/abrp/AccentColor.java b/app/src/main/java/com/evsuite/abrp/AccentColor.java
new file mode 100644
index 0000000..762c4f2
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/AccentColor.java
@@ -0,0 +1,51 @@
+package com.evsuite.abrp;
+
+import android.content.Context;
+import android.util.TypedValue;
+
+/**
+ * The app's accent colour, after the MG4 paint colours; Dynamic Red unless another is chosen
+ * (Settings → Display). Each is a theme overlay in res/values/accents.xml that MainActivity lays
+ * over the app theme before it inflates anything; a change recreates the activity.
+ */
+enum AccentColor {
+    DYNAMIC_RED("Dynamic Red", R.style.ThemeOverlay_EV_Accent_DynamicRed),
+    VOLCANO_ORANGE("Volcano Orange", R.style.ThemeOverlay_EV_Accent_VolcanoOrange),
+    HOLBORN_BLUE("Holborn Blue", R.style.ThemeOverlay_EV_Accent_HolbornBlue),
+    RACING_GREEN("Racing Green", R.style.ThemeOverlay_EV_Accent_RacingGreen),
+    CAMDEN_GREY("Camden Grey", R.style.ThemeOverlay_EV_Accent_CamdenGrey),
+    MONUMENT_SILVER("Monument Silver", R.style.ThemeOverlay_EV_Accent_MonumentSilver),
+    ARCTIC_WHITE("Arctic White", R.style.ThemeOverlay_EV_Accent_ArcticWhite),
+    BLACK_PEARL("Black Pearl", R.style.ThemeOverlay_EV_Accent_BlackPearl);
+
+    static final String PREF_KEY = "accent_color";
+    static final AccentColor DEFAULT = DYNAMIC_RED;
+
+    final String label;
+    final int overlay;
+
+    AccentColor(String label, int overlay) {
+        this.label = label;
+        this.overlay = overlay;
+    }
+
+    /** The stored choice; anything unknown falls back to Dynamic Red. */
+    static AccentColor fromPref(String name) {
+        for (AccentColor c : values()) {
+            if (c.name().equals(name)) return c;
+        }
+        return DEFAULT;
+    }
+
+    /** A colour of the current accent palette, e.g. {@code R.attr.evAccent}, for code that draws. */
+    static int resolve(Context context, int attr) {
+        TypedValue value = new TypedValue();
+        context.getTheme().resolveAttribute(attr, value, true);
+        return value.data;
+    }
+
+    /** The colour with its alpha replaced, for glows and grids drawn in code. */
+    static int withAlpha(int color, int alpha) {
+        return (color & 0x00FFFFFF) | (alpha << 24);
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/ChargingGraphView.java b/app/src/main/java/com/evsuite/abrp/ChargingGraphView.java
index 9db5b47..a4c7ccc 100644
--- a/app/src/main/java/com/evsuite/abrp/ChargingGraphView.java
+++ b/app/src/main/java/com/evsuite/abrp/ChargingGraphView.java
@@ -14,7 +14,7 @@ public final class ChargingGraphView extends View {
     private final Paint grid = new Paint(1), line = new Paint(1), text = new Paint(1);
     private final List<float[]> points = new ArrayList<>();
     private final float[] socPower = new float[101];
-    public ChargingGraphView(Context c, AttributeSet a) { super(c,a); java.util.Arrays.fill(socPower, Float.NaN); grid.setColor(0x5548C7D9); line.setColor(0xFFFFC857); line.setStrokeWidth(4); text.setColor(0xFFBDC4C6); text.setTextSize(20); }
+    public ChargingGraphView(Context c, AttributeSet a) { super(c,a); java.util.Arrays.fill(socPower, Float.NaN); grid.setColor(AccentColor.withAlpha(AccentColor.resolve(c, R.attr.evAccentLight), 0x55)); line.setColor(0xFFFFC857); line.setStrokeWidth(4); text.setColor(0xFFBDC4C6); text.setTextSize(20); }
     synchronized void add(Float soc, Float power) {
         if (soc == null || power == null || power >= 0) return;
         float p = Math.abs(power);
@@ -33,13 +33,13 @@ public final class ChargingGraphView extends View {
         invalidate();
     }
     synchronized String tableText() {
-        StringBuilder out = new StringBuilder("SOC       Şarj gücü\n");
+        StringBuilder out = new StringBuilder("SOC       Charge power\n");
         boolean found = false;
         for (int soc=0; soc<=100; soc++) if (!Float.isNaN(socPower[soc])) {
             found = true;
             out.append(String.format(Locale.getDefault(), "%3d %%      %6.1f kW\n", soc, socPower[soc]));
         }
-        return found ? out.toString().trim() : "Henüz şarj ölçümü yok";
+        return found ? out.toString().trim() : "No charging measurements yet";
     }
     @Override protected synchronized void onDraw(Canvas c) {
         super.onDraw(c); float left=58, right=getWidth()-12, top=12, bottom=getHeight()-38;
diff --git a/app/src/main/java/com/evsuite/abrp/ConfigImport.java b/app/src/main/java/com/evsuite/abrp/ConfigImport.java
new file mode 100644
index 0000000..414a65e
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/ConfigImport.java
@@ -0,0 +1,171 @@
+package com.evsuite.abrp;
+
+/**
+ * Parses a configuration text file so the app can be set up without typing on the car's
+ * on-screen keyboard — the ingest token in particular is long and error-prone to enter by
+ * hand. The file is a plain {@code key = value} list, one entry per line:
+ *
+ * <pre>
+ *   # Nils' MG4 config
+ *   server_url      = https://car.k8s.stinnesbeck.com
+ *   token           = 0123abcd...            (the server's INGEST_TOKEN)
+ *   installation_id = 6f1a2b3c-4d5e-4f60-8a9b-0c1d2e3f4a5b
+ *   interval_sec    = 60
+ *   boost_low_soc   = true
+ *   low_soc_percent = 20
+ *   abrp_api_key    = your-abrp-api-key       (optional: send live data to ABRP directly)
+ *   abrp_token      = your-abrp-user-token
+ *   charging_price  = 0.39                    (€/kWh)
+ *   usable_kwh      = 50.8                    (usable battery capacity, for the range estimates)
+ * </pre>
+ *
+ * Usually only server_url and token are needed. installation_id is for a reinstall: it puts
+ * the car back under the id its history is stored with. The cadence keys are optional. Blank lines and
+ * lines starting with {@code #} are ignored, keys are case-insensitive, and surrounding
+ * whitespace is trimmed. Every field is nullable: the caller applies only what the file set,
+ * leaving anything absent untouched.
+ */
+final class ConfigImport {
+
+    final String serverUrl;
+    final String token;
+    final String installationId;
+    final Integer intervalSec;
+    final Boolean boostLowSoc;
+    final Integer lowSocPercent;
+    final String abrpApiKey;
+    final String abrpToken;
+    final Double chargingPrice;
+    final Double usableKwh;
+
+    private ConfigImport(String serverUrl, String token, String installationId, Integer intervalSec,
+                         Boolean boostLowSoc, Integer lowSocPercent, String abrpApiKey, String abrpToken,
+                         Double chargingPrice, Double usableKwh) {
+        this.serverUrl = serverUrl;
+        this.token = token;
+        this.installationId = installationId;
+        this.intervalSec = intervalSec;
+        this.boostLowSoc = boostLowSoc;
+        this.lowSocPercent = lowSocPercent;
+        this.abrpApiKey = abrpApiKey;
+        this.abrpToken = abrpToken;
+        this.chargingPrice = chargingPrice;
+        this.usableKwh = usableKwh;
+    }
+
+    /** True when the file yielded nothing usable — an empty or malformed file, not a config. */
+    boolean isEmpty() {
+        return serverUrl == null && token == null && installationId == null && intervalSec == null
+                && boostLowSoc == null && lowSocPercent == null && abrpApiKey == null && abrpToken == null
+                && chargingPrice == null && usableKwh == null;
+    }
+
+    static ConfigImport parse(String text) {
+        String serverUrl = null, token = null, installationId = null, abrpApiKey = null, abrpToken = null;
+        Integer intervalSec = null, lowSocPercent = null;
+        Boolean boostLowSoc = null;
+        Double chargingPrice = null, usableKwh = null;
+
+        for (String line : text.split("\n", -1)) {
+            line = line.trim();
+            if (line.isEmpty() || line.charAt(0) == '#') continue;
+
+            int sep = line.indexOf('=');
+            if (sep <= 0) continue;
+
+            String key = line.substring(0, sep).trim().toLowerCase(java.util.Locale.US);
+            String value = line.substring(sep + 1).trim();
+            if (value.isEmpty()) continue;
+
+            switch (key) {
+                case "server_url":
+                case "server":
+                case "url":
+                    serverUrl = value;
+                    break;
+                case "token":
+                case "ingest_token":
+                    token = value;
+                    break;
+                case "installation_id":
+                    installationId = value;
+                    break;
+                case "interval_sec":
+                case "upload_interval_sec":
+                    intervalSec = nearestInterval(value);
+                    break;
+                case "boost_low_soc":
+                    boostLowSoc = parseBool(value);
+                    break;
+                case "low_soc_percent":
+                    lowSocPercent = clampPercent(value);
+                    break;
+                case "abrp_api_key":
+                    abrpApiKey = value;
+                    break;
+                case "abrp_token":
+                case "abrp_user_token":
+                    abrpToken = value;
+                    break;
+                case "charging_price":
+                case "price_per_kwh":
+                    chargingPrice = parseDecimal(value);
+                    break;
+                case "usable_kwh":
+                case "usable_capacity_kwh":
+                    usableKwh = parseDecimal(value);
+                    break;
+                default:
+                    // Unknown keys are ignored rather than rejected, so a file can carry
+                    // comments or future keys without breaking an older build.
+                    break;
+            }
+        }
+        return new ConfigImport(serverUrl, token, installationId, intervalSec, boostLowSoc, lowSocPercent,
+                abrpApiKey, abrpToken, chargingPrice, usableKwh);
+    }
+
+    /** Snaps to the nearest offered choice: the UI spinner has no free-form interval. */
+    private static Integer nearestInterval(String value) {
+        int requested;
+        try {
+            requested = Integer.parseInt(value);
+        } catch (NumberFormatException e) {
+            return null;
+        }
+        int best = UploadSettings.INTERVAL_CHOICES_SEC[0];
+        for (int choice : UploadSettings.INTERVAL_CHOICES_SEC) {
+            if (Math.abs(choice - requested) < Math.abs(best - requested)) best = choice;
+        }
+        return best;
+    }
+
+    /** Same 1–99 clamp the manual field enforces, so an import cannot set an unusable value. */
+    private static Integer clampPercent(String value) {
+        try {
+            return Math.max(1, Math.min(99, Integer.parseInt(value)));
+        } catch (NumberFormatException e) {
+            return null;
+        }
+    }
+
+    /**
+     * A decimal with a dot or a comma; null when it is not a number. Ranges are checked where
+     * the value is saved, the same as for the fields on screen.
+     */
+    private static Double parseDecimal(String value) {
+        try {
+            double d = Double.parseDouble(value.replace(',', '.'));
+            return Double.isFinite(d) ? d : null;
+        } catch (NumberFormatException e) {
+            return null;
+        }
+    }
+
+    private static Boolean parseBool(String value) {
+        value = value.toLowerCase(java.util.Locale.US);
+        if (value.equals("true") || value.equals("on") || value.equals("1")) return Boolean.TRUE;
+        if (value.equals("false") || value.equals("off") || value.equals("0")) return Boolean.FALSE;
+        return null;
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/ConsumptionCloudClient.java b/app/src/main/java/com/evsuite/abrp/ConsumptionCloudClient.java
index 118d938..bf217d5 100644
--- a/app/src/main/java/com/evsuite/abrp/ConsumptionCloudClient.java
+++ b/app/src/main/java/com/evsuite/abrp/ConsumptionCloudClient.java
@@ -7,39 +7,31 @@ import android.util.Log;
 import org.json.JSONArray;
 import org.json.JSONObject;
 
-import java.io.BufferedReader;
-import java.io.InputStream;
-import java.io.InputStreamReader;
-import java.io.OutputStream;
-import java.net.HttpURLConnection;
-import java.net.URL;
-import java.nio.charset.StandardCharsets;
 import java.time.LocalDate;
 import java.util.ArrayList;
 import java.util.Collections;
 import java.util.List;
 
 /**
- * Best-effort MongoDB sync through the web API. Never blocks local persistence.
+ * Best-effort sync to the car server. Never blocks local persistence.
  *
- * The installationId is a fixed value baked into BuildConfig — never a random UUID — so an
- * APK wipe cannot orphan the cloud history under a new identity. The consumption UI reads
- * back its own uploaded totals via {@link #fetchHistoryIfDue}, which means an APK reinstall
- * picks up right where the old one left off instead of showing zeroes.
+ * Server URL, token and installation id come from {@link ServerConfig}, read on every use so
+ * a change in the Server tab applies at once. The installation id is kept across updates, and
+ * a reinstall derives the same one from the head unit ({@link ServerConfig#installationIdFor})
+ * or gets it back through the config file, so the history is not orphaned under a new
+ * identity. The consumption UI reads back its own uploaded totals via
+ * {@link #fetchHistoryIfDue}, so a reinstall picks up where the old one left off.
  */
 final class ConsumptionCloudClient {
-    private static final String TAG = "FatihsMG4.Mongo";
+    private static final String TAG = "NilsMG4.Mongo";
     private static final long CONSUMPTION_SYNC_INTERVAL_MS = 2 * 60_000L;
     private static final long CHARGE_RETRY_INTERVAL_MS = 5 * 60_000L;
     private static final long HISTORY_FETCH_INTERVAL_MS = 5 * 60_000L;
-    private static final int TIMEOUT_MS = 8_000;
     private static final String PREFS = "consumption_cloud";
     private static final String CHUNK_CACHE = "chunk_cache";   // JSON array of pending chunks
     private static final int MAX_CHARGES_PER_SYNC = 10;
 
-    private final String endpoint;
-    private final String token;
-    private final String installationId;
+    private final Context context;
     private final SharedPreferences prefs;
     private long lastConsumptionAttemptMs;
     private long lastChargeAttemptMs;
@@ -65,21 +57,19 @@ final class ConsumptionCloudClient {
     }
 
     ConsumptionCloudClient(Context context) {
-        endpoint = BuildConfig.CONSUMPTION_API_URL.trim();
-        token = BuildConfig.CONSUMPTION_API_TOKEN.trim();
+        this.context = context.getApplicationContext();
         prefs = context.getSharedPreferences(PREFS, Context.MODE_PRIVATE);
-        installationId = BuildConfig.CONSUMPTION_INSTALLATION_ID.trim();
-        if (endpoint.isEmpty() || token.isEmpty()) {
-            Log.w(TAG, "Consumption API not configured: endpoint=" + (endpoint.isEmpty() ? "empty" : "ok")
-                    + ", token=" + (token.isEmpty() ? "empty" : "ok"));
-        }
+    }
+
+    private ServerConfig config() {
+        return ServerConfig.get(context);
     }
 
     /**
      * Every 30 minutes, takes a delta chunk from the tracker and sends it. Chunks that fail
      * to send (offline, server error) accumulate in a local cache and are retried on the
      * next cycle — so a drive through a dead-signal area still reaches the cloud once the
-     * head unit is back on the hotspot. Every attempt is logged to the in-app "Kayıtlar" tab.
+     * head unit is back on the hotspot. Every attempt is logged to the in-app "Logs" tab.
      *
      * @param nowMs wall clock, recorded with the payload — the throttle below runs on a
      *              monotonic clock instead, so a backwards NTP correction cannot stall
@@ -87,7 +77,7 @@ final class ConsumptionCloudClient {
      */
     void syncIfDue(ConsumptionTracker tracker, ChargeSessionTracker charges, long nowMs) {
         long elapsed = android.os.SystemClock.elapsedRealtime();
-        if (endpoint.isEmpty() || token.isEmpty()) {
+        if (!config().isConfigured()) {
             Log.i(TAG, "Sync skipped: API not configured");
             return;
         }
@@ -96,7 +86,7 @@ final class ConsumptionCloudClient {
         // Drain any cached chunks first — a backlog from an offline period has priority.
         int cached = drainChunkCache();
         if (cached > 0) {
-            logEvent(true, 200, "Cache boşaltıldı: " + cached + " chunk gönderildi");
+            logEvent(true, 200, "Cache drained: " + cached + " chunk(s) sent");
             invalidateHistory();
         }
 
@@ -115,14 +105,14 @@ final class ConsumptionCloudClient {
         try {
             JSONObject body = consumptionBody(chunk, nowMs);
             if (send("/v1/consumption/daily", "PUT", body)) {
-                logEvent(true, 200, "Chunk " + chunk.date + " gönderildi (+"
+                logEvent(true, 200, "Chunk " + chunk.date + " sent (+"
                         + String.format("%.1f", chunk.day.km) + "km, +"
                         + String.format("%.2f", chunk.day.kwh) + "kWh)");
                 invalidateHistory();
             } else {
                 cacheChunk(body);
                 int pending = pendingChunkCount();
-                logEvent(false, 0, "Chunk gönderilemedi — cache'de bekliyor (" + pending + " chunk)");
+                logEvent(false, 0, "Chunk not sent — waiting in cache (" + pending + " chunk(s))");
             }
         } catch (Exception e) {
             // Network failure: cache the chunk for the next cycle.
@@ -131,7 +121,7 @@ final class ConsumptionCloudClient {
                 cacheChunk(body);
             } catch (Exception ignored) { }
             int pending = pendingChunkCount();
-            logEvent(false, 0, "Çevrimdışı — cache'de bekliyor (" + pending + " chunk): " + e.getMessage());
+            logEvent(false, 0, "Offline — waiting in cache (" + pending + " chunk(s)): " + e.getMessage());
             Log.w(TAG, "Chunk sync failed, cached: " + e.getMessage());
         }
     }
@@ -190,7 +180,7 @@ final class ConsumptionCloudClient {
         return loadChunkCache().length();
     }
 
-    /** Records a cloud-sync attempt to the in-app log (the "Kayıtlar" tab). */
+    /** Records a cloud-sync attempt to the in-app log (the "Logs" tab). */
     private void logEvent(boolean success, int httpStatus, String detail) {
         UploadLog log = AbrpUploadService.log();
         if (log == null) return;
@@ -200,7 +190,7 @@ final class ConsumptionCloudClient {
     private JSONObject consumptionBody(ConsumptionTracker.CloudSnapshot snapshot, long nowMs)
             throws Exception {
         JSONObject body = new JSONObject()
-                .put("installationId", installationId)
+                .put("installationId", config().installationId)
                 .put("recordedAt", nowMs)
                 .put("date", snapshot.date)
                 .put("day", totals(snapshot.day));
@@ -220,7 +210,7 @@ final class ConsumptionCloudClient {
         try {
             syncPendingCharges(charges, pending);
         } catch (Exception e) {
-            logEvent(false, 0, "Şarj session sync hatası: " + e.getMessage());
+            logEvent(false, 0, "Charging session sync error: " + e.getMessage());
             Log.w(TAG, "Charging-session sync unavailable: " + e.getMessage());
         }
     }
@@ -230,15 +220,15 @@ final class ConsumptionCloudClient {
         Log.i(TAG, "Found " + pending.size() + " pending charge sessions");
         int sent = 0;
         for (JSONObject session : pending) {
-            JSONObject body = new JSONObject(session.toString()).put("installationId", installationId);
+            JSONObject body = new JSONObject(session.toString()).put("installationId", config().installationId);
             String id = session.getString("sessionId");
             Log.i(TAG, "Uploading charge session: " + id);
             if (send("/v1/charging-sessions/" + id, "PUT", body)) {
                 charges.markUploaded(id);
-                logEvent(true, 200, "Şarj session gönderildi: " + id);
+                logEvent(true, 200, "Charging session sent: " + id);
                 Log.i(TAG, "Successfully uploaded charge session: " + id);
             } else {
-                logEvent(false, 0, "Şarj session gönderilemedi: " + id);
+                logEvent(false, 0, "Charging session not sent: " + id);
                 Log.w(TAG, "Failed to upload charge session: " + id);
                 return;
             }
@@ -247,36 +237,20 @@ final class ConsumptionCloudClient {
     }
 
     private boolean send(String path, String method, JSONObject body) throws Exception {
-        HttpURLConnection connection = null;
+        String url = trimSlash(config().url) + path;
+        Log.i(TAG, "Sending " + method + " request to " + url);
         try {
-            byte[] bytes = body.toString().getBytes(StandardCharsets.UTF_8);
-            String url = trimSlash(endpoint) + path;
-            Log.i(TAG, "Sending " + method + " request to " + url + " (" + bytes.length + " bytes)");
-            Log.i(TAG, "Body: " + body.toString());
-            connection = (HttpURLConnection) new URL(url).openConnection();
-            connection.setRequestMethod(method);
-            connection.setConnectTimeout(TIMEOUT_MS);
-            connection.setReadTimeout(TIMEOUT_MS);
-            connection.setDoOutput(true);
-            connection.setFixedLengthStreamingMode(bytes.length);
-            connection.setRequestProperty("Content-Type", "application/json");
-            connection.setRequestProperty("Authorization", "Bearer " + token);
-            try (OutputStream out = connection.getOutputStream()) { out.write(bytes); }
-            int status = connection.getResponseCode();
-            Log.i(TAG, "Response: HTTP " + status);
-            if (status < 200 || status >= 300) {
-                String errBody = readErrorBody(connection);
-                Log.w(TAG, "Sync rejected with HTTP " + status + (errBody.isEmpty() ? "" : ": " + errBody));
+            ServerHttp.Response response = ServerHttp.request(method, url, config().token, body);
+            Log.i(TAG, "Response: HTTP " + response.status);
+            if (!response.ok()) {
+                String err = response.excerpt();
+                Log.w(TAG, "Sync rejected with HTTP " + response.status + (err.isEmpty() ? "" : ": " + err));
                 return false;
             }
-            InputStream response = connection.getInputStream();
-            if (response != null) try (InputStream ignored = response) { }
             return true;
         } catch (Exception e) {
             Log.w(TAG, "Network error: " + e.getMessage());
             throw e;
-        } finally {
-            if (connection != null) connection.disconnect();
         }
     }
 
@@ -295,7 +269,7 @@ final class ConsumptionCloudClient {
      * Returns the current cache immediately; the fresh copy lands on the next poll.
      */
     synchronized List<DayRecord> fetchHistoryIfDue() {
-        if (endpoint.isEmpty() || token.isEmpty()) return cachedHistory;
+        if (!config().isConfigured()) return cachedHistory;
         long elapsed = android.os.SystemClock.elapsedRealtime();
         if (lastHistoryFetchMs != 0L && elapsed - lastHistoryFetchMs < HISTORY_FETCH_INTERVAL_MS) {
             return cachedHistory;
@@ -310,11 +284,11 @@ final class ConsumptionCloudClient {
             List<DayRecord> fresh = fetchHistory();
             if (!fresh.isEmpty()) cachedHistory = fresh;
             Log.i(TAG, "Fetched " + fresh.size() + " history records from cloud");
-            logEvent(true, 200, "History çekildi: " + fresh.size() + " gün");
+            logEvent(true, 200, "History fetched: " + fresh.size() + " day(s)");
         } catch (Exception e) {
             String msg = e.getMessage() == null ? e.getClass().getSimpleName() : e.getMessage();
             Log.w(TAG, "History fetch unavailable: " + msg);
-            logEvent(false, 0, "History fetch hatası: " + msg);
+            logEvent(false, 0, "History fetch error: " + msg);
         }
     }
 
@@ -325,11 +299,11 @@ final class ConsumptionCloudClient {
 
     /**
      * Immediately attempts to send every cached chunk and take a fresh one, ignoring the
-     * 2-minute throttle. Called from the UI "Şimdi yükle" button. Returns a one-line
+     * 2-minute throttle. Called from the UI "Upload now" button. Returns a one-line
      * status for the log.
      */
     String flushNow(ConsumptionTracker tracker, long nowMs) {
-        if (endpoint.isEmpty() || token.isEmpty()) return "API yapılandırılmamış";
+        if (!config().isConfigured()) return "API not configured";
         int cached = drainChunkCache();
         ConsumptionTracker.CloudSnapshot chunk = tracker.takeChunkDelta();
         int total = cached;
@@ -348,50 +322,39 @@ final class ConsumptionCloudClient {
         }
         int pending = pendingChunkCount();
         String msg = total > 0
-                ? total + " chunk yüklendi" + (pending > 0 ? ", " + pending + " hâlâ bekliyor" : "")
-                : (pending > 0 ? pending + " chunk yüklenemedi (internet?)" : "Yüklenecek yeni veri yok");
-        logEvent(total > 0, total > 0 ? 200 : 0, "Manuel sync: " + msg);
+                ? total + " chunk(s) uploaded" + (pending > 0 ? ", " + pending + " still pending" : "")
+                : (pending > 0 ? pending + " chunk(s) could not be uploaded (internet?)" : "No new data to upload");
+        logEvent(total > 0, total > 0 ? 200 : 0, "Manual sync: " + msg);
         return msg;
     }
 
     private List<DayRecord> fetchHistory() throws Exception {
-        HttpURLConnection connection = null;
-        try {
-            String url = trimSlash(endpoint) + "/v1/consumption/history/" + installationId;
-            connection = (HttpURLConnection) new URL(url).openConnection();
-            connection.setRequestMethod("GET");
-            connection.setConnectTimeout(TIMEOUT_MS);
-            connection.setReadTimeout(TIMEOUT_MS);
-            connection.setRequestProperty("Authorization", "Bearer " + token);
-            int status = connection.getResponseCode();
-            Log.i(TAG, "History GET response: HTTP " + status);
-            if (status < 200 || status >= 300) {
-                String err = readErrorBody(connection);
-                Log.w(TAG, "History fetch rejected with HTTP " + status + (err.isEmpty() ? "" : ": " + err));
-                logEvent(false, status, "History GET HTTP " + status + (err.isEmpty() ? "" : " — " + err));
-                return cachedHistory;
-            }
-            String body = readBody(connection);
-            JSONObject json = new JSONObject(body);
-            JSONArray records = json.optJSONArray("records");
-            if (records == null) return Collections.emptyList();
-            // Lifetime is derived by the backend (sum of all days), sent once at the response
-            // level. Each DayRecord carries it so the UI's LIFETIME period can read it.
-            ConsumptionTracker.Totals lifetime = json.has("lifetime") && !json.isNull("lifetime")
-                    ? parseTotals(json.getJSONObject("lifetime")) : null;
-            List<DayRecord> result = new ArrayList<>(records.length());
-            for (int i = 0; i < records.length(); i++) {
-                JSONObject r = records.getJSONObject(i);
-                LocalDate date = LocalDate.parse(r.getString("date"));
-                ConsumptionTracker.Totals day = parseTotals(r.getJSONObject("day"));
-                Float soh = r.has("sohPercent") && !r.isNull("sohPercent")
-                        ? (float) r.getDouble("sohPercent") : null;
-                result.add(new DayRecord(date, day, lifetime, soh));
-            }
-            return result;
-        } finally {
-            if (connection != null) connection.disconnect();
+        String url = trimSlash(config().url) + "/v1/consumption/history/" + config().installationId;
+        ServerHttp.Response response = ServerHttp.request("GET", url, config().token, null);
+        Log.i(TAG, "History GET response: HTTP " + response.status);
+        if (!response.ok()) {
+            String err = response.excerpt();
+            Log.w(TAG, "History fetch rejected with HTTP " + response.status + (err.isEmpty() ? "" : ": " + err));
+            logEvent(false, response.status, "History GET HTTP " + response.status + (err.isEmpty() ? "" : " — " + err));
+            return cachedHistory;
         }
+        JSONObject json = new JSONObject(response.body);
+        JSONArray records = json.optJSONArray("records");
+        if (records == null) return Collections.emptyList();
+        // Lifetime is derived by the backend (sum of all days), sent once at the response
+        // level. Each DayRecord carries it so the UI's LIFETIME period can read it.
+        ConsumptionTracker.Totals lifetime = json.has("lifetime") && !json.isNull("lifetime")
+                ? parseTotals(json.getJSONObject("lifetime")) : null;
+        List<DayRecord> result = new ArrayList<>(records.length());
+        for (int i = 0; i < records.length(); i++) {
+            JSONObject r = records.getJSONObject(i);
+            LocalDate date = LocalDate.parse(r.getString("date"));
+            ConsumptionTracker.Totals day = parseTotals(r.getJSONObject("day"));
+            Float soh = r.has("sohPercent") && !r.isNull("sohPercent")
+                    ? (float) r.getDouble("sohPercent") : null;
+            result.add(new DayRecord(date, day, lifetime, soh));
+        }
+        return result;
     }
 
     private static ConsumptionTracker.Totals parseTotals(JSONObject o) {
@@ -400,35 +363,6 @@ final class ConsumptionCloudClient {
                 o.optDouble("hours", 0d), o.optDouble("socDrop", 0d));
     }
 
-    private static String readBody(HttpURLConnection connection) throws Exception {
-        InputStream stream = connection.getInputStream();
-        try (BufferedReader br = new BufferedReader(
-                new InputStreamReader(stream, StandardCharsets.UTF_8))) {
-            StringBuilder sb = new StringBuilder();
-            String line;
-            while ((line = br.readLine()) != null) sb.append(line);
-            return sb.toString();
-        }
-    }
-
-    /** Reads the error response body (truncated) for logging — never throws. */
-    private static String readErrorBody(HttpURLConnection connection) {
-        try {
-            InputStream stream = connection.getErrorStream();
-            if (stream == null) return "";
-            try (BufferedReader br = new BufferedReader(
-                    new InputStreamReader(stream, StandardCharsets.UTF_8))) {
-                StringBuilder sb = new StringBuilder();
-                String line;
-                while ((line = br.readLine()) != null) sb.append(line);
-                String body = sb.toString();
-                return body.length() > 300 ? body.substring(0, 300) + "…" : body;
-            }
-        } catch (Exception e) {
-            return "";
-        }
-    }
-
     private static String trimSlash(String value) {
         int end = value.length();
         while (end > 0 && value.charAt(end - 1) == '/') end--;
diff --git a/app/src/main/java/com/evsuite/abrp/ConsumptionTracker.java b/app/src/main/java/com/evsuite/abrp/ConsumptionTracker.java
index 2f9395a..c00ddcc 100644
--- a/app/src/main/java/com/evsuite/abrp/ConsumptionTracker.java
+++ b/app/src/main/java/com/evsuite/abrp/ConsumptionTracker.java
@@ -216,7 +216,7 @@ final class ConsumptionTracker {
         if (cloudLifetime.km > local.km) {
             lifetime.set(cloudLifetime.km, cloudLifetime.kwh, cloudLifetime.hours, cloudLifetime.soc);
             persist();
-            Log.i("FatihsMG4.Consumption", "Lifetime baseline synced from cloud: "
+            Log.i("NilsMG4.Consumption", "Lifetime baseline synced from cloud: "
                     + cloudLifetime.km + " km (was " + local.km + " km)");
         }
     }
diff --git a/app/src/main/java/com/evsuite/abrp/DoublePressDetector.java b/app/src/main/java/com/evsuite/abrp/DoublePressDetector.java
new file mode 100644
index 0000000..1f3863f
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/DoublePressDetector.java
@@ -0,0 +1,46 @@
+package com.evsuite.abrp;
+
+/**
+ * Spots a double press of one steering-wheel key from the head unit's key broadcasts.
+ *
+ * The broadcast format is not documented, so this copes with all the shapes it could take:
+ *  - no up/down information at all: every broadcast is one press;
+ *  - separate down and up broadcasts: only releases count. If the meaning of the action field
+ *    is the other way round, downs count instead — still exactly one per press, so a double
+ *    press is found either way;
+ *  - a long press resets, so holding the key never opens anything.
+ *
+ * Android-free and unit-tested; the window is longer than the stock 300 ms, because a
+ * deliberate double press on a steering wheel is slower than one on a touch screen.
+ */
+final class DoublePressDetector {
+
+    static final long WINDOW_MS = 500;
+
+    private final int keyCode;
+    private long lastPressAt = Long.MIN_VALUE;
+
+    DoublePressDetector(int keyCode) {
+        this.keyCode = keyCode;
+    }
+
+    /**
+     * @param down true for a key-down, false for a release, null when the broadcast does not say
+     * @param longPress true when the broadcast marks a long press
+     * @return true exactly once per double press
+     */
+    synchronized boolean accept(int code, Boolean down, boolean longPress, long atMillis) {
+        if (code != keyCode) return false;
+        if (longPress) {
+            lastPressAt = Long.MIN_VALUE;
+            return false;
+        }
+        if (Boolean.TRUE.equals(down)) return false;
+        if (lastPressAt != Long.MIN_VALUE && atMillis - lastPressAt <= WINDOW_MS) {
+            lastPressAt = Long.MIN_VALUE; // a third press starts over
+            return true;
+        }
+        lastPressAt = atMillis;
+        return false;
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/MainActivity.java b/app/src/main/java/com/evsuite/abrp/MainActivity.java
index 530b3ed..4034672 100644
--- a/app/src/main/java/com/evsuite/abrp/MainActivity.java
+++ b/app/src/main/java/com/evsuite/abrp/MainActivity.java
@@ -16,6 +16,8 @@ import android.widget.TextView;
 import java.time.LocalDate;
 import java.util.List;
 
+import androidx.activity.result.ActivityResultLauncher;
+import androidx.activity.result.contract.ActivityResultContracts;
 import androidx.annotation.NonNull;
 import androidx.appcompat.app.AppCompatActivity;
 import androidx.appcompat.app.AppCompatDelegate;
@@ -33,22 +35,22 @@ import com.evsuite.hardware.telemetry.EnergyTelemetryReader;
 
 public class MainActivity extends AppCompatActivity {
 
-    /** Shared with {@link AbrpUploadService}, which reads it on every tick. */
-    static final String WIFI_AUTO_KEY = "wifi_auto_connect";
-    private static final String REPOSITORY_URL = "https://github.com/fatihdonmezdev/FatihsMG4";
+    private static final String REPOSITORY_URL = "https://git.stinnesbeck.com/nils/mg4";
 
     /** Navigation destinations in page order. Parallel to {@link #panes}. */
     private static final int[] TAB_IDS =
-            { R.id.tabVehicle, R.id.tabConsumption, R.id.tabCharging, R.id.tabService, R.id.tabWifi,
-              R.id.tabLog };
+            { R.id.tabVehicle, R.id.tabConsumption, R.id.tabCharging, R.id.tabService, R.id.tabServer,
+              R.id.tabSettings, R.id.tabLog };
 
     private static final int[] PAGE_TITLES = {
             R.string.design_overview_title, R.string.consumption_title, R.string.charging_title,
-            R.string.design_service_title, R.string.design_wifi_title, R.string.design_log_title
+            R.string.design_service_title, R.string.design_server_title, R.string.design_settings_title,
+            R.string.design_log_title
     };
     private static final int[] PAGE_SUBTITLES = {
             R.string.design_overview_subtitle, R.string.consumption_subtitle, R.string.charging_subtitle,
-            R.string.design_service_subtitle, R.string.design_wifi_subtitle, R.string.design_log_subtitle
+            R.string.design_service_subtitle, R.string.design_server_subtitle, R.string.design_settings_subtitle,
+            R.string.design_log_subtitle
     };
 
     // Status colours come from the palette, not from the Material swatches: #4CAF50 and
@@ -61,18 +63,17 @@ public class MainActivity extends AppCompatActivity {
     private TextView          statusText;
     private TextView callLogText;
     private View servicePane;
+    private View serverPane;
     private View logPane;
     private View vehiclePane;
     private View consumptionPane;
     private View chargingPane;
-    private View wifiPane;
+    /** Display, battery, charging price and Wi-Fi. */
+    private View settingsPane;
 
-    /** The six pages in navigation order. Parallel to {@link #TAB_IDS}. */
+    /** The pages in navigation order. Parallel to {@link #TAB_IDS}. */
     private View[] panes;
 
-    /** Wi-Fi page. The helper is the same one the upload service uses on its own tick. */
-    private WifiAutoConnect wifi;
-    private TextView wifiSsid, wifiState, wifiSavedList;
 
     /**
      * Value cells of the Vehicle page, looked up once and refreshed on the UI tick.
@@ -81,10 +82,20 @@ public class MainActivity extends AppCompatActivity {
      * page shows what the car reports, whether or not the upload service is running, and a
      * signal the vehicle does not publish must show a dash rather than a zero.
      */
+    /** Used only on the overview-read thread. */
     private EnergyTelemetryReader vehicleReader;
     private TextView vehSoc, vehRange, vehPower, vehSpeed, vehOdometer,
             vehCharging, vehHvac,
-            vehTireFl, vehTireFr, vehTireRl, vehTireRr;
+            vehTireFl, vehTireFr, vehTireRl, vehTireRr,
+            vehRangeTrip, vehRangeTripNote, vehRangeAverage, vehRangeAverageNote,
+            vehUsageTrip, vehUsageTripNote, vehUsageAverage, vehUsageAverageNote,
+            vehEnergyTrip, vehEnergyTripNote, vehPowerAverage, vehPowerAverageNote,
+            vehSpeedAverage, vehSpeedAverageNote;
+
+    /** Usable pack capacity for the range estimates; the car does not publish it. */
+    static final String USABLE_KWH_KEY = "usable_kwh";
+    private TextInputLayout usableCapacityLayout;
+    private TextInputEditText usableCapacityInput;
     private ConsumptionTracker consumptionTracker;
     private ConsumptionCloudClient consumptionCloudClient;
     private ConsumptionTracker.Period consumptionPeriod = ConsumptionTracker.Period.LIFETIME;
@@ -102,6 +113,30 @@ public class MainActivity extends AppCompatActivity {
     private ChargeSessionTracker chargeSessionTracker;
     private ChargingGraphView chargeGraph;
 
+    /** Server page. */
+    private TextInputLayout serverUrlLayout, serverTokenLayout;
+    private TextInputEditText serverUrlInput, serverTokenInput;
+    /** Shown, not edited: derived from the head unit (ServerConfig.installationIdFor). */
+    private TextView installationIdText;
+    private View connectionStatusRow, connectionIndicator;
+    private TextView connectionStatusText;
+
+    /** Upload page: live telemetry switch and cadence. */
+    private SwitchMaterial liveTelemetrySwitch, boostSwitch, voiceKeySwitch, fullScreenSwitch;
+    private com.google.android.material.textfield.MaterialAutoCompleteTextView intervalChoices;
+    private TextInputLayout lowSocLayout;
+    private TextInputEditText lowSocInput;
+
+    /**
+     * Picks a config text file. Only reachable on devices that ship a document picker — the
+     * MG4 head unit does not, which is why {@link #startConfigImport()} scans the app's own
+     * folders first and only falls back to this.
+     */
+    private final ActivityResultLauncher<String[]> configPicker =
+            registerForActivityResult(new ActivityResultContracts.OpenDocument(), uri -> {
+                if (uri != null) importConfig(uri);
+            });
+
     /**
      * Inflates a page with no parent, then gives it the MATCH_PARENT/MATCH_PARENT layout
      * params ViewPager2 requires of its items — inflating detached leaves them null, and
@@ -176,9 +211,8 @@ public class MainActivity extends AppCompatActivity {
         @Override public void run() {
             refreshStatus();
             refreshCallLog();
-            refreshVehicle();
+            sampleTrackers();
             refreshConsumption();
-            refreshWifi();
             uiHandler.postDelayed(this, 2_000L);
         }
     };
@@ -189,11 +223,12 @@ public class MainActivity extends AppCompatActivity {
     protected void onCreate(Bundle savedInstanceState) {
         getDelegate().setLocalNightMode(AppCompatDelegate.MODE_NIGHT_YES);
         super.onCreate(savedInstanceState);
+        prefs = getSharedPreferences("abrp_prefs", MODE_PRIVATE);
+        // Before anything is inflated: every ?attr/evAccent… resolves against this overlay.
+        getTheme().applyStyle(AccentColor.fromPref(prefs.getString(AccentColor.PREF_KEY, null)).overlay, true);
         setContentView(R.layout.activity_main);
 
-        ((TextView) findViewById(R.id.version_badge)).setText("v" + BuildConfig.VERSION_NAME);
 
-        prefs = getSharedPreferences("abrp_prefs", MODE_PRIVATE);
 
         // The pages are inflated here, once, and handed to the pager as fixed,
         // non-recycled items. That is what lets every widget below be looked up now and
@@ -201,36 +236,78 @@ public class MainActivity extends AppCompatActivity {
         // in activity_main.xml — a recycled page would invalidate these references as
         // soon as the user swiped away from it.
         servicePane = inflatePane(R.layout.pane_service);
+        serverPane  = inflatePane(R.layout.pane_server);
         vehiclePane   = inflatePane(R.layout.pane_vehicle);
         consumptionPane = inflatePane(R.layout.pane_consumption);
         chargingPane = inflatePane(R.layout.pane_charging);
-        wifiPane    = inflatePane(R.layout.pane_wifi);
+        settingsPane = inflatePane(R.layout.pane_settings);
         logPane     = inflatePane(R.layout.pane_log);
-        panes = new View[] { vehiclePane, consumptionPane, chargingPane, servicePane, wifiPane, logPane };
+        panes = new View[] { vehiclePane, consumptionPane, chargingPane, servicePane, serverPane,
+                settingsPane, logPane };
 
         bindVehiclePane();
         bindConsumptionPane();
         bindChargingPane();
-        bindWifiPane();
+        bindServerPane();
+        bindServicePane();
+        requestLocationPermissionIfNeeded();
 
         statusText          = servicePane.findViewById(R.id.status_text);
         callLogText = logPane.findViewById(R.id.call_log_text);
         logPane.findViewById(R.id.flush_now_button).setOnClickListener(v -> manualFlush());
 
         setUpPager();
-        findViewById(R.id.about_button).setOnClickListener(v -> showAbout());
-        findViewById(R.id.update_button).setOnClickListener(v -> checkForUpdate(v));
+        // Back on the page that was open when the activity was recreated (accent colour change).
+        if (savedInstanceState != null) {
+            ((ViewPager2) findViewById(R.id.content)).setCurrentItem(savedInstanceState.getInt(STATE_PAGE, 0), false);
+        }
+        ((TextView) settingsPane.findViewById(R.id.settings_version))
+                .setText(getString(R.string.settings_version, BuildConfig.VERSION_NAME));
+        settingsPane.findViewById(R.id.settings_about_button).setOnClickListener(v -> showAbout());
+        settingsPane.findViewById(R.id.settings_update_button).setOnClickListener(v -> checkForUpdate(v));
+        View usbButton = settingsPane.findViewById(R.id.settings_usb_button);
+        usbButton.setOnClickListener(v -> installFromUsb(v));
+        // The stable build installs nothing itself, so it has no use for the button.
+        if (!UpdateHook.isSupported()) usbButton.setVisibility(View.GONE);
 
         // Unstable builds check for a newer pre-release; the stable flavor's UpdateHook is
         // a no-op and does not even contain the updater.
         UpdateHook.checkInBackground(this);
 
-        // The service is always-on: it tracks consumption and syncs to MongoDB cloud.
+        // The service is always-on: it tracks consumption and sends everything to the server.
         // startForegroundService is idempotent — if the service is already up this
         // is a no-op aside from delivering a new intent.
         startForegroundService(new Intent(this, AbrpUploadService.class));
     }
 
+    /**
+     * Shows a dialog without bringing the car's bars back. A dialog is a window of its own, and
+     * the system shows the bars when a window without the full-screen flags takes focus. So it
+     * is shown unfocusable, given the activity's flags, and only then allowed focus. None of the
+     * dialogs here take typing, which an unfocusable window would block.
+     */
+    @SuppressWarnings("deprecation") // the WindowInsetsController API starts at 30; this is 28
+    private void showKeepingFullScreen(android.app.Dialog dialog) {
+        android.view.Window window = dialog.getWindow();
+        if (window == null || !UploadSettings.fullScreen(prefs)) {
+            dialog.show();
+            return;
+        }
+        window.setFlags(android.view.WindowManager.LayoutParams.FLAG_NOT_FOCUSABLE,
+                android.view.WindowManager.LayoutParams.FLAG_NOT_FOCUSABLE);
+        dialog.show();
+        window.getDecorView().setSystemUiVisibility(getWindow().getDecorView().getSystemUiVisibility());
+        window.clearFlags(android.view.WindowManager.LayoutParams.FLAG_NOT_FOCUSABLE);
+    }
+
+    private static final String STATE_PAGE = "page";
+
+    @Override
+    protected void onSaveInstanceState(Bundle outState) {
+        super.onSaveInstanceState(outState);
+        outState.putInt(STATE_PAGE, ((ViewPager2) findViewById(R.id.content)).getCurrentItem());
+    }
+
     private void showAbout() {
         String version;
         try {
@@ -250,7 +327,7 @@ public class MainActivity extends AppCompatActivity {
                 .setView(content)
                 .create();
         content.<MaterialButton>findViewById(R.id.about_close).setOnClickListener(v -> dialog.dismiss());
-        dialog.show();
+        showKeepingFullScreen(dialog);
         if (dialog.getWindow() != null) {
             dialog.getWindow().setBackgroundDrawable(new ColorDrawable(Color.TRANSPARENT));
             android.util.DisplayMetrics metrics = getResources().getDisplayMetrics();
@@ -265,6 +342,46 @@ public class MainActivity extends AppCompatActivity {
         super.onResume();
         // Poll state and log only while the screen is up; onPause cancels it.
         uiHandler.post(uiRefresh);
+        uiHandler.post(overviewRefresh);
+    }
+
+    @Override
+    public void onWindowFocusChanged(boolean hasFocus) {
+        super.onWindowFocusChanged(hasFocus);
+        // The system shows its bars again when focus moves (a dialog, the bars swiped in);
+        // re-applying on regaining focus keeps the app full screen.
+        if (hasFocus) applyFullScreen();
+    }
+
+    /**
+     * Immersive full screen: the head unit's top and bottom bars are hidden while the app is
+     * in front, and a swipe from the edge shows them briefly. On the MG4 those bars are SAIC's
+     * own (climate strip, hazard and home shortcuts); if the platform keeps them, these flags
+     * simply have no effect.
+     *
+     * The content takes the space the bars leave: no LAYOUT_STABLE (it reports the bars' insets
+     * even while they are hidden), and the root stops padding itself for them. On the MG4 that
+     * padding stayed as a black band where the bars had been (2.8.1).
+     */
+    @SuppressWarnings("deprecation") // the WindowInsetsController API starts at 30; this is 28
+    private void applyFullScreen() {
+        View decor = getWindow().getDecorView();
+        boolean full = UploadSettings.fullScreen(prefs);
+        View root = findViewById(R.id.app_root);
+        if (root != null) {
+            root.setFitsSystemWindows(!full);
+            if (full) root.setPadding(0, 0, 0, 0);
+            root.requestApplyInsets();
+        }
+        if (full) {
+            decor.setSystemUiVisibility(View.SYSTEM_UI_FLAG_IMMERSIVE_STICKY
+                    | View.SYSTEM_UI_FLAG_LAYOUT_HIDE_NAVIGATION
+                    | View.SYSTEM_UI_FLAG_LAYOUT_FULLSCREEN
+                    | View.SYSTEM_UI_FLAG_HIDE_NAVIGATION
+                    | View.SYSTEM_UI_FLAG_FULLSCREEN);
+        } else {
+            decor.setSystemUiVisibility(View.SYSTEM_UI_FLAG_VISIBLE);
+        }
     }
 
     @Override
@@ -272,6 +389,13 @@ public class MainActivity extends AppCompatActivity {
         super.onPause();
         // Stop polling off-screen: this activity has no reason to spend cycles then.
         uiHandler.removeCallbacks(uiRefresh);
+        uiHandler.removeCallbacks(overviewRefresh);
+    }
+
+    @Override
+    protected void onDestroy() {
+        carReader.shutdownNow();
+        super.onDestroy();
     }
 
     // ---------- Update check ----------
@@ -288,13 +412,24 @@ public class MainActivity extends AppCompatActivity {
      * SHA-256 verified; the final result remains visible until dismissed.
      */
     private void checkForUpdate(View button) {
+        runUpdate(button, R.string.update_checking, listener -> UpdateHook.checkInBackground(this, listener));
+    }
+
+    /** Installs the newest car build from the top folder of a USB stick (unstable builds). */
+    private void installFromUsb(View button) {
+        runUpdate(button, R.string.update_usb_looking, listener -> UpdateHook.installFromUsbInBackground(this, listener));
+    }
+
+    /** The update dialog: progress while [start] runs, then its result. */
+    private void runUpdate(View button, int startText,
+                           java.util.function.Consumer<UpdateHook.Listener> start) {
         button.setEnabled(false);
         android.widget.LinearLayout panel = new android.widget.LinearLayout(this);
         panel.setOrientation(android.widget.LinearLayout.VERTICAL);
         int padding = (int) (24 * getResources().getDisplayMetrics().density);
         panel.setPadding(padding, padding, padding, padding);
         TextView status = new TextView(this);
-        status.setText(R.string.update_checking);
+        status.setText(startText);
         status.setTextAppearance(R.style.Text_EV_Body);
         android.widget.ProgressBar progress = new android.widget.ProgressBar(this, null,
                 android.R.attr.progressBarStyleHorizontal);
@@ -311,8 +446,8 @@ public class MainActivity extends AppCompatActivity {
                 .setView(panel)
                 .setCancelable(false)
                 .create();
-        dialog.show();
-        UpdateHook.checkInBackground(this, new UpdateHook.Listener() {
+        showKeepingFullScreen(dialog);
+        start.accept(new UpdateHook.Listener() {
             @Override public void onProgress(int percent) {
                 if (percent < 0) {
                     progress.setIndeterminate(true);
@@ -328,52 +463,743 @@ public class MainActivity extends AppCompatActivity {
             @Override public void onResult(String message) {
                 button.setEnabled(true);
                 dialog.dismiss();
-                new MaterialAlertDialogBuilder(MainActivity.this)
+                showKeepingFullScreen(new MaterialAlertDialogBuilder(MainActivity.this)
                         .setTitle(R.string.update_dialog_title)
                         .setMessage(message)
                         .setPositiveButton(android.R.string.ok, null)
-                        .show();
+                        .create());
             }
         });
     }
 
-    // ---------- Wi-Fi page ----------
+    // ---------- Server page ----------
 
-    private void bindWifiPane() {
-        wifi = new WifiAutoConnect(getApplicationContext());
-        wifiSsid      = wifiPane.findViewById(R.id.wifi_ssid);
-        wifiState     = wifiPane.findViewById(R.id.wifi_state);
-        wifiSavedList = wifiPane.findViewById(R.id.wifi_saved_list);
+    private void bindServerPane() {
+        serverUrlLayout      = serverPane.findViewById(R.id.server_url_layout);
+        serverTokenLayout    = serverPane.findViewById(R.id.server_token_layout);
+        serverUrlInput       = serverPane.findViewById(R.id.server_url_input);
+        serverTokenInput     = serverPane.findViewById(R.id.server_token_input);
+        installationIdText   = serverPane.findViewById(R.id.installation_id_text);
+        connectionStatusRow  = serverPane.findViewById(R.id.connection_status_row);
+        connectionIndicator  = serverPane.findViewById(R.id.connection_indicator);
+        connectionStatusText = serverPane.findViewById(R.id.connection_status_text);
+        showServerConfig();
 
-        SwitchMaterial auto = wifiPane.findViewById(R.id.wifi_auto_switch);
-        auto.setChecked(prefs.getBoolean(WIFI_AUTO_KEY, true));
-        auto.setOnCheckedChangeListener((btn, checked) ->
-                prefs.edit().putBoolean(WIFI_AUTO_KEY, checked).apply());
+        serverPane.findViewById(R.id.server_save_button).setOnClickListener(v -> {
+            if (saveServerConfig(textOf(serverUrlInput), textOf(serverTokenInput),
+                    ServerConfig.get(this).installationId)) {
+                setConnectionStatus(COLOR_OK, getString(R.string.server_saved));
+            }
+        });
+        serverPane.findViewById(R.id.server_test_button).setOnClickListener(v -> testConnection());
+        serverPane.findViewById(R.id.server_pair_button).setOnClickListener(v -> startPairing());
+        serverPane.findViewById(R.id.import_button).setOnClickListener(v -> startConfigImport());
+    }
 
-        wifiPane.findViewById(R.id.wifi_connect_button).setOnClickListener(v -> {
-            // force: the driver is asking now, so the rate limit does not apply.
-            WifiAutoConnect.Result r = wifi.ensureConnected(true);
-            wifiState.setText(r.message);
-            refreshWifi();
+    private void showServerConfig() {
+        ServerConfig config = ServerConfig.get(this);
+        serverUrlInput.setText(config.url);
+        serverTokenInput.setText(config.token);
+        installationIdText.setText(getString(R.string.installation_id_info, config.installationId));
+    }
+
+    /** Validates, marks the bad fields, and saves only when all three are good. */
+    private boolean saveServerConfig(String rawUrl, String rawToken, String rawId) {
+        String url = ServerConfig.normalizeUrl(rawUrl);
+        String token = rawToken == null ? "" : rawToken.trim();
+        String id = rawId == null ? "" : rawId.trim().toLowerCase(java.util.Locale.US);
+        serverUrlLayout.setError(url == null ? getString(R.string.server_err_url) : null);
+        serverTokenLayout.setError(ServerConfig.isValidToken(token) ? null : getString(R.string.server_err_token));
+        // Only an imported config file can bring a different id; the field is not editable.
+        if (!ServerConfig.isValidInstallationId(id)) {
+            setConnectionStatus(COLOR_ERROR, getString(R.string.server_err_installation_id));
+            return false;
+        }
+        if (url == null || !ServerConfig.isValidToken(token)) return false;
+        ServerConfig.save(this, url, token, id);
+        if (consumptionCloudClient != null) consumptionCloudClient.invalidateHistory();
+        showServerConfig();
+        refreshStatus();
+        return true;
+    }
+
+    /**
+     * Checks reachability, then the token, without writing anything: the health endpoint
+     * first, then the car's own history read, which needs the ingest token. Uses what is in
+     * the fields, saved or not, so a typo can be caught before it is stored.
+     */
+    private void testConnection() {
+        String url = ServerConfig.normalizeUrl(textOf(serverUrlInput));
+        String token = textOf(serverTokenInput);
+        String id = ServerConfig.get(this).installationId;
+        if (url == null) {
+            serverUrlLayout.setError(getString(R.string.server_err_url));
+            return;
+        }
+        setConnectionStatus(COLOR_PENDING, getString(R.string.conn_testing));
+        new Thread(() -> {
+            String message;
+            int color;
+            try {
+                int health = httpGet(url + "/v1/health", null);
+                if (health != 200) {
+                    message = getString(R.string.conn_err_http, health);
+                    color = COLOR_ERROR;
+                } else {
+                    int auth = httpGet(url + "/v1/consumption/history/" + id, token);
+                    if (auth == 200) { message = getString(R.string.conn_ok); color = COLOR_OK; }
+                    else if (auth == 401) { message = getString(R.string.conn_err_auth); color = COLOR_ERROR; }
+                    else { message = getString(R.string.conn_err_http, auth); color = COLOR_ERROR; }
+                }
+            } catch (java.net.SocketTimeoutException e) {
+                message = getString(R.string.conn_err_timeout);
+                color = COLOR_ERROR;
+            } catch (Exception e) {
+                message = describeNetworkError(e, url);
+                color = COLOR_ERROR;
+            }
+            final String m = message;
+            final int c = color;
+            runOnUiThread(() -> setConnectionStatus(c, m));
+        }, "server-test").start();
+    }
+
+    /**
+     * Pairs this car with the server through a phone: the server opens a pairing request, the
+     * dialog shows its code as a QR code, and a background thread polls until the request is
+     * approved, denied or expired. On approval the car's own token is saved with the URL from
+     * the field and the installation id, exactly as Save would.
+     */
+    private void startPairing() {
+        String url = ServerConfig.normalizeUrl(textOf(serverUrlInput));
+        if (url == null) {
+            serverUrlLayout.setError(getString(R.string.server_err_url));
+            return;
+        }
+        serverUrlLayout.setError(null);
+        String installationId = ServerConfig.get(this).installationId;
+
+        PhoneQrDialog ui = new PhoneQrDialog(R.string.pair_title, R.string.pair_starting);
+        final boolean[] cancelled = ui.cancelled;
+
+        new Thread(() -> {
+            String outcome;
+            int color = COLOR_ERROR;
+            try {
+                PairingClient.Request request = PairingClient.start(url, installationId);
+                android.graphics.Bitmap bitmap = QrCode.generate(request.verificationUriComplete, 416);
+                runOnUiThread(() -> ui.showRequest(request, bitmap, R.string.pair_scan, R.string.pair_waiting));
+                PairingClient.PollResult result = null;
+                while (!cancelled[0] && System.currentTimeMillis() < request.expiresAtMs) {
+                    Thread.sleep(request.intervalMs);
+                    if (cancelled[0]) break;
+                    try {
+                        result = PairingClient.poll(url, request.deviceCode);
+                    } catch (java.io.IOException e) {
+                        continue; // a dropped connection mid-wait is not a failed pairing
+                    }
+                    if (result.outcome != PairingClient.Outcome.PENDING) break;
+                }
+                if (cancelled[0]) return;
+                if (result != null && result.outcome == PairingClient.Outcome.APPROVED) {
+                    ServerConfig.save(this, url, result.token, installationId);
+                    outcome = getString(R.string.pair_ok);
+                    color = COLOR_OK;
+                } else if (result != null && result.outcome == PairingClient.Outcome.DENIED) {
+                    outcome = getString(R.string.pair_denied);
+                } else {
+                    outcome = getString(R.string.pair_expired);
+                }
+            } catch (PairingClient.NotEnabledException e) {
+                outcome = getString(R.string.pair_not_enabled);
+            } catch (PairingClient.HttpStatusException e) {
+                outcome = e.status == 404 ? getString(R.string.pair_err_old_server)
+                        : getString(R.string.err_http, e.status);
+            } catch (InterruptedException e) {
+                return;
+            } catch (Exception e) {
+                outcome = describeNetworkError(e, url);
+            }
+            final String message = outcome;
+            final int c = color;
+            runOnUiThread(() -> {
+                setConnectionStatus(c, message);
+                if (c == COLOR_OK) {
+                    if (consumptionCloudClient != null) consumptionCloudClient.invalidateHistory();
+                    showServerConfig();
+                    serverTokenLayout.setError(null);
+                    refreshStatus();
+                    if (!cancelled[0]) ui.dialog.dismiss();
+                    return;
+                }
+                // Keep the dialog up with the reason, instead of closing it on a failure the
+                // driver would otherwise only see as a flicker.
+                if (!cancelled[0]) ui.finish(message, c);
+            });
+        }, "server-pairing").start();
+    }
+
+    /**
+     * Settings typed on a phone instead of the car's keyboard: the server opens a request for
+     * this car, the dialog shows it as a QR code, and the values the phone sends (ABRP
+     * credentials, charging price, usable capacity) are applied through the same checks as the
+     * fields here. Needs the server set up, since the request is made with this car's token.
+     */
+    private void startPhoneSettings() {
+        ServerConfig config = ServerConfig.get(this);
+        PhoneQrDialog ui = new PhoneQrDialog(R.string.phone_settings_title, R.string.pair_starting);
+        if (!config.isConfigured()) {
+            ui.finish(getString(R.string.phone_settings_needs_server), COLOR_ERROR);
+            return;
+        }
+        new Thread(() -> {
+            String outcome;
+            int color = COLOR_ERROR;
+            PhoneSettingsClient.Settings received = null;
+            try {
+                PairingClient.Request request = PhoneSettingsClient.start(config);
+                android.graphics.Bitmap bitmap = QrCode.generate(request.verificationUriComplete, 416);
+                runOnUiThread(() -> ui.showRequest(request, bitmap, R.string.phone_settings_scan,
+                        R.string.phone_settings_waiting));
+                while (!ui.cancelled[0] && System.currentTimeMillis() < request.expiresAtMs) {
+                    Thread.sleep(request.intervalMs);
+                    if (ui.cancelled[0]) return;
+                    try {
+                        received = PhoneSettingsClient.poll(config, request.deviceCode);
+                    } catch (java.io.IOException e) {
+                        continue; // a dropped connection mid-wait is not a failure
+                    }
+                    if (received != null) break;
+                }
+                if (ui.cancelled[0]) return;
+                outcome = received == null ? getString(R.string.pair_expired_settings) : null;
+            } catch (PairingClient.NotEnabledException e) {
+                outcome = getString(R.string.phone_settings_not_enabled);
+            } catch (PairingClient.HttpStatusException e) {
+                outcome = e.status == 410 ? getString(R.string.pair_expired_settings)
+                        : getString(R.string.err_http, e.status);
+            } catch (InterruptedException e) {
+                return;
+            } catch (Exception e) {
+                outcome = describeNetworkError(e, config.url);
+            }
+            final PhoneSettingsClient.Settings settings = received;
+            final String failure = outcome;
+            runOnUiThread(() -> {
+                if (ui.cancelled[0]) return;
+                if (settings == null) {
+                    ui.finish(failure, COLOR_ERROR);
+                    return;
+                }
+                String applied = applyPhoneSettings(settings);
+                ui.finish(applied, applied.equals(getString(R.string.phone_settings_applied)) ? COLOR_OK : COLOR_ERROR);
+            });
+        }, "phone-settings").start();
+    }
+
+    /**
+     * Puts what the phone sent into the fields and saves each through its own Save, so the
+     * same limits apply as when typed here. A credential sent alone is paired with the one
+     * already stored. Returns the message for the dialog. UI thread.
+     */
+    private String applyPhoneSettings(PhoneSettingsClient.Settings s) {
+        boolean ok = true;
+        if (s.abrpApiKey != null || s.abrpToken != null) {
+            AbrpConfig current = AbrpConfig.get(this);
+            ok &= saveAbrpConfig(s.abrpApiKey != null ? s.abrpApiKey : current.apiKey,
+                    s.abrpToken != null ? s.abrpToken : current.userToken);
+        }
+        if (s.pricePerKwh != null) {
+            chargePriceInput.setText(String.format(java.util.Locale.US, "%.2f", s.pricePerKwh));
+            saveChargePrice();
+            ok &= chargePriceLayout.getError() == null;
+        }
+        if (s.usableKwh != null) {
+            usableCapacityInput.setText(String.format(java.util.Locale.US, "%.1f", s.usableKwh));
+            saveUsableCapacity();
+            ok &= usableCapacityLayout.getError() == null;
+        }
+        return getString(ok ? R.string.phone_settings_applied : R.string.phone_settings_partly);
+    }
+
+    /**
+     * The dialog of both phone flows (pairing, settings): a QR code beside the code to type
+     * and a status line. The QR code and code stay hidden until the server has answered.
+     */
+    private final class PhoneQrDialog {
+        final TextView instructions, code, status;
+        final ImageView qr;
+        final androidx.appcompat.app.AlertDialog dialog;
+        /** Set when the driver closes the dialog; the polling thread then stops. */
+        final boolean[] cancelled = {false};
+
+        PhoneQrDialog(int title, int startingText) {
+            float density = getResources().getDisplayMetrics().density;
+            int pad = (int) (24 * density);
+            // On the head unit's wide, low screen the QR code sits left of the text: stacked, the
+            // code and status below a 240 dp QR code were cut off. Scrollable either way, so
+            // nothing can be clipped on any screen.
+            android.util.DisplayMetrics metrics = getResources().getDisplayMetrics();
+            boolean wide = metrics.widthPixels > metrics.heightPixels;
+            android.widget.LinearLayout panel = new android.widget.LinearLayout(MainActivity.this);
+            panel.setOrientation(wide ? android.widget.LinearLayout.HORIZONTAL : android.widget.LinearLayout.VERTICAL);
+            panel.setGravity(wide ? android.view.Gravity.CENTER_VERTICAL : android.view.Gravity.CENTER_HORIZONTAL);
+            panel.setPadding(pad, pad, pad, pad);
+            android.widget.LinearLayout column = new android.widget.LinearLayout(MainActivity.this);
+            column.setOrientation(android.widget.LinearLayout.VERTICAL);
+            instructions = new TextView(MainActivity.this);
+            instructions.setTextAppearance(R.style.Text_EV_Secondary);
+            qr = new ImageView(MainActivity.this);
+            qr.setContentDescription(getString(R.string.pair_qr_description));
+            int qrSize = (int) (240 * density);
+            code = new TextView(MainActivity.this);
+            code.setTextAppearance(R.style.Text_EV_Title);
+            code.setTypeface(android.graphics.Typeface.MONOSPACE, android.graphics.Typeface.BOLD);
+            code.setTextSize(36);
+            code.setLetterSpacing(0.15f);
+            code.setTextColor(AccentColor.resolve(MainActivity.this, R.attr.evAccentLight));
+            status = new TextView(MainActivity.this);
+            status.setTextAppearance(R.style.Text_EV_Body);
+            status.setText(startingText);
+            android.widget.LinearLayout.LayoutParams qrParams = new android.widget.LinearLayout.LayoutParams(qrSize, qrSize);
+            android.widget.LinearLayout.LayoutParams columnParams;
+            if (wide) {
+                qrParams.rightMargin = pad;
+                columnParams = new android.widget.LinearLayout.LayoutParams(
+                        0, android.view.ViewGroup.LayoutParams.WRAP_CONTENT, 1f);
+                panel.addView(qr, qrParams);
+                panel.addView(column, columnParams);
+                column.addView(instructions);
+            } else {
+                qrParams.topMargin = pad / 2;
+                qrParams.bottomMargin = pad / 2;
+                columnParams = new android.widget.LinearLayout.LayoutParams(
+                        android.view.ViewGroup.LayoutParams.MATCH_PARENT, android.view.ViewGroup.LayoutParams.WRAP_CONTENT);
+                panel.addView(instructions);
+                panel.addView(qr, qrParams);
+                panel.addView(column, columnParams);
+            }
+            android.widget.LinearLayout.LayoutParams codeParams = new android.widget.LinearLayout.LayoutParams(
+                    android.view.ViewGroup.LayoutParams.WRAP_CONTENT, android.view.ViewGroup.LayoutParams.WRAP_CONTENT);
+            codeParams.topMargin = pad / 2;
+            codeParams.bottomMargin = pad / 2;
+            column.addView(code, codeParams);
+            column.addView(status);
+            android.widget.ScrollView scroll = new android.widget.ScrollView(MainActivity.this);
+            scroll.addView(panel);
+
+            dialog = new MaterialAlertDialogBuilder(MainActivity.this)
+                    .setTitle(title)
+                    .setView(scroll)
+                    .setNegativeButton(R.string.pair_cancel, null)
+                    .create();
+            // Shown only once the server has answered, so a failure leaves no empty QR frame.
+            qr.setVisibility(View.GONE);
+            code.setVisibility(View.GONE);
+            dialog.setOnDismissListener(d -> cancelled[0] = true);
+            showKeepingFullScreen(dialog);
+        }
+
+        /** Shows the request: QR code, the code in the sentence and below it. UI thread. */
+        void showRequest(PairingClient.Request request, android.graphics.Bitmap bitmap, int scanText, int waitingText) {
+            instructions.setText(getString(scanText, request.verificationUri, request.userCode));
+            if (bitmap != null) {
+                qr.setImageBitmap(bitmap);
+                qr.setVisibility(View.VISIBLE);
+            }
+            code.setText(request.userCode);
+            code.setVisibility(View.VISIBLE);
+            status.setText(waitingText);
+        }
+
+        /** Keeps the dialog up with the outcome instead of closing it. UI thread. */
+        void finish(String message, int color) {
+            qr.setVisibility(View.GONE);
+            code.setVisibility(View.GONE);
+            instructions.setVisibility(View.GONE);
+            status.setText(message);
+            status.setTextColor(color);
+            android.widget.Button close = dialog.getButton(android.content.DialogInterface.BUTTON_NEGATIVE);
+            if (close != null) close.setText(R.string.pair_close);
+        }
+    }
+
+    /**
+     * A network failure in words the driver can act on: a name that does not resolve, a
+     * server that does not answer, or a status. Shared by Test connection and pairing.
+     */
+    private String describeNetworkError(Exception e, String url) {
+        String host = Uri.parse(url).getHost();
+        if (host == null) host = url;
+        if (e instanceof java.net.UnknownHostException) return getString(R.string.err_dns, host);
+        if (e instanceof java.net.SocketTimeoutException || e instanceof java.net.ConnectException
+                || e instanceof java.net.NoRouteToHostException) {
+            return getString(R.string.err_unreachable, host);
+        }
+        if (e instanceof PairingClient.HttpStatusException) {
+            return getString(R.string.err_http, ((PairingClient.HttpStatusException) e).status);
+        }
+        return getString(R.string.pair_error, e.getClass().getSimpleName());
+    }
+
+    private static int httpGet(String url, String token) throws java.io.IOException {
+        java.net.HttpURLConnection connection = (java.net.HttpURLConnection) new java.net.URL(url).openConnection();
+        try {
+            connection.setConnectTimeout(8_000);
+            connection.setReadTimeout(8_000);
+            if (token != null) connection.setRequestProperty("Authorization", "Bearer " + token);
+            return connection.getResponseCode();
+        } finally {
+            connection.disconnect();
+        }
+    }
+
+    private void setConnectionStatus(int color, String message) {
+        connectionStatusRow.setVisibility(View.VISIBLE);
+        connectionIndicator.getBackground().mutate().setTint(color);
+        connectionStatusText.setText(message);
+        connectionStatusText.setTextColor(color);
+    }
+
+    // ---------- Config import ----------
+
+    /**
+     * The MG4 head unit ships no document picker — SAF answers "FileManagement is no supported
+     * on this device" — so the file is found by scanning instead. getExternalFilesDirs() returns
+     * this app's own folder on internal storage and on every mounted volume including a USB
+     * stick, and those need no storage permission at any API level. The picker stays as the
+     * fallback for phones and tablets, where the user may keep the file anywhere.
+     */
+    private void startConfigImport() {
+        java.io.File found = findConfigFile();
+        if (found != null) {
+            importConfig(found);
+            return;
+        }
+        try {
+            // Any MIME: the MG4 Files app tags .txt inconsistently, so filtering by type hides
+            // the very file the user is trying to pick. They select it by name instead.
+            configPicker.launch(new String[]{"*/*"});
+        } catch (android.content.ActivityNotFoundException e) {
+            setConnectionStatus(COLOR_ERROR, getString(R.string.import_err_not_found, configDirHint()));
+        }
+    }
+
+    /**
+     * First readable file in an app-specific folder that parses as a config. Names are not
+     * filtered: the user copies one file to the folder, whatever they called it.
+     */
+    private java.io.File findConfigFile() {
+        for (java.io.File dir : getExternalFilesDirs(null)) {
+            if (dir == null) continue;
+            java.io.File[] files = dir.listFiles();
+            if (files == null) continue;
+            for (java.io.File f : files) {
+                if (f.isFile() && f.canRead() && f.length() > 0 && f.length() <= 64 * 1024
+                        && !ConfigImport.parse(readText(f)).isEmpty()) {
+                    return f;
+                }
+            }
+        }
+        return null;
+    }
+
+    /** File text, or "" when unreadable — callers treat that as "not a config". */
+    private String readText(java.io.File file) {
+        try (java.io.InputStream in = new java.io.FileInputStream(file)) {
+            return readCapped(in);
+        } catch (Exception e) {
+            return "";
+        }
+    }
+
+    /** Capped so a wrong file picked by mistake is not slurped whole into memory. */
+    private String readCapped(java.io.InputStream in) throws java.io.IOException {
+        java.io.ByteArrayOutputStream buf = new java.io.ByteArrayOutputStream();
+        byte[] chunk = new byte[4096];
+        int n;
+        while ((n = in.read(chunk)) != -1 && buf.size() < 64 * 1024) buf.write(chunk, 0, n);
+        return buf.toString(java.nio.charset.StandardCharsets.UTF_8.name());
+    }
+
+    /** Where the user should drop the file. */
+    private String configDirHint() {
+        java.io.File[] dirs = getExternalFilesDirs(null);
+        return dirs.length > 0 && dirs[0] != null ? dirs[0].getAbsolutePath() : "";
+    }
+
+    /**
+     * Imports a scanned file and then deletes it: it holds the ingest token in plaintext, maybe
+     * on a USB stick, and the settings live in encrypted storage from now on.
+     */
+    private void importConfig(java.io.File file) {
+        String text = readText(file);
+        if (text.isEmpty()) {
+            setConnectionStatus(COLOR_ERROR, getString(R.string.import_err_read));
+            return;
+        }
+        if (!applyConfig(text)) return;
+        boolean deleted;
+        try {
+            deleted = file.delete();
+        } catch (SecurityException e) {
+            deleted = false;
+        }
+        if (deleted) {
+            setConnectionStatus(COLOR_OK, getString(R.string.import_ok_deleted));
+        } else {
+            setConnectionStatus(COLOR_ERROR, getString(R.string.import_ok_not_deleted, file.getAbsolutePath()));
+        }
+    }
+
+    private void importConfig(Uri uri) {
+        String text;
+        try (java.io.InputStream in = getContentResolver().openInputStream(uri)) {
+            if (in == null) throw new java.io.IOException("no stream");
+            text = readCapped(in);
+        } catch (Exception e) {
+            setConnectionStatus(COLOR_ERROR, getString(R.string.import_err_read));
+            return;
+        }
+        applyConfig(text);
+    }
+
+    /**
+     * Applies whatever the file sets; absent keys keep their current value, so a file with
+     * only the token does not wipe the URL. Server settings are validated and saved together;
+     * cadence keys go to the plain prefs the same way the Upload page writes them.
+     */
+    private boolean applyConfig(String text) {
+        ConfigImport config = ConfigImport.parse(text);
+        if (config.isEmpty()) {
+            setConnectionStatus(COLOR_ERROR, getString(R.string.import_err_empty));
+            return false;
+        }
+        ServerConfig current = ServerConfig.get(this);
+        if (config.serverUrl != null || config.token != null || config.installationId != null) {
+            boolean saved = saveServerConfig(
+                    config.serverUrl != null ? config.serverUrl : current.url,
+                    config.token != null ? config.token : current.token,
+                    config.installationId != null ? config.installationId : current.installationId);
+            if (!saved) {
+                // Show what the file said, so the marked field is the one to fix in the file.
+                if (config.serverUrl != null) serverUrlInput.setText(config.serverUrl);
+                if (config.token != null) serverTokenInput.setText(config.token);
+                return false;
+            }
+        }
+        if (config.abrpApiKey != null || config.abrpToken != null) {
+            AbrpConfig abrp = AbrpConfig.get(this);
+            if (!saveAbrpConfig(config.abrpApiKey != null ? config.abrpApiKey : abrp.apiKey,
+                    config.abrpToken != null ? config.abrpToken : abrp.userToken)) {
+                setConnectionStatus(COLOR_ERROR, getString(R.string.abrp_invalid));
+                return false;
+            }
+        }
+        if (config.chargingPrice != null || config.usableKwh != null) {
+            // Through the same Save as the fields (and the phone form), with the same limits.
+            String applied = applyPhoneSettings(new PhoneSettingsClient.Settings(
+                    null, null, config.chargingPrice, config.usableKwh));
+            if (!applied.equals(getString(R.string.phone_settings_applied))) {
+                setConnectionStatus(COLOR_ERROR, getString(R.string.import_err_values));
+                return false;
+            }
+        }
+        SharedPreferences.Editor edit = prefs.edit();
+        if (config.intervalSec != null) edit.putInt(UploadSettings.KEY_INTERVAL_SEC, config.intervalSec);
+        if (config.boostLowSoc != null) edit.putBoolean(UploadSettings.KEY_BOOST_LOW_SOC, config.boostLowSoc);
+        if (config.lowSocPercent != null) edit.putInt(UploadSettings.KEY_LOW_SOC_PERCENT, config.lowSocPercent);
+        edit.apply();
+        bindCadenceControls();
+        setConnectionStatus(COLOR_OK, getString(R.string.import_ok));
+        refreshStatus();
+        return true;
+    }
+
+    // ---------- Upload page ----------
+
+    private void bindServicePane() {
+        voiceKeySwitch = settingsPane.findViewById(R.id.voice_key_switch);
+        voiceKeySwitch.setChecked(UploadSettings.voiceKeyOpensApp(prefs));
+        voiceKeySwitch.setOnCheckedChangeListener((btn, checked) ->
+                prefs.edit().putBoolean(UploadSettings.KEY_VOICE_KEY_OPENS, checked).apply());
+        bindTireUnit();
+        bindAccentColor();
+        fullScreenSwitch = settingsPane.findViewById(R.id.full_screen_switch);
+        fullScreenSwitch.setChecked(UploadSettings.fullScreen(prefs));
+        fullScreenSwitch.setOnCheckedChangeListener((btn, checked) -> {
+            prefs.edit().putBoolean(UploadSettings.KEY_FULL_SCREEN, checked).apply();
+            applyFullScreen();
+        });
+        liveTelemetrySwitch = servicePane.findViewById(R.id.abrp_upload_switch);
+        intervalChoices = servicePane.findViewById(R.id.interval_choices);
+        boostSwitch = servicePane.findViewById(R.id.boost_switch);
+        lowSocInput = servicePane.findViewById(R.id.low_soc_input);
+        lowSocLayout = servicePane.findViewById(R.id.low_soc_layout);
+        liveTelemetrySwitch.setChecked(UploadSettings.from(prefs).abrpUploadEnabled);
+        liveTelemetrySwitch.setOnCheckedChangeListener((btn, checked) -> {
+            prefs.edit().putBoolean(UploadSettings.KEY_ABRP_UPLOAD_ENABLED, checked).apply();
+            refreshStatus();
+        });
+        bindCadenceControls();
+        bindAbrpControls();
+    }
+
+    // ---------- ABRP, directly from the car ----------
+
+    private TextInputEditText abrpApiKeyInput, abrpTokenInput;
+    private TextView abrpStatusText;
+
+    private void bindAbrpControls() {
+        abrpApiKeyInput = servicePane.findViewById(R.id.abrp_api_key_input);
+        abrpTokenInput = servicePane.findViewById(R.id.abrp_token_input);
+        abrpStatusText = servicePane.findViewById(R.id.abrp_status_text);
+        AbrpConfig current = AbrpConfig.get(this);
+        abrpApiKeyInput.setText(current.apiKey);
+        abrpTokenInput.setText(current.userToken);
+        servicePane.findViewById(R.id.abrp_save_button).setOnClickListener(v ->
+                saveAbrpConfig(text(abrpApiKeyInput), text(abrpTokenInput)));
+        servicePane.findViewById(R.id.abrp_test_button).setOnClickListener(v -> testAbrpConfig());
+        servicePane.findViewById(R.id.abrp_phone_button).setOnClickListener(v -> startPhoneSettings());
+    }
+
+    private static String text(TextInputEditText input) {
+        CharSequence raw = input.getText();
+        return raw == null ? "" : raw.toString().trim();
+    }
+
+    /** Both set and plausible, or both empty (direct sending off). Returns whether it saved. */
+    private boolean saveAbrpConfig(String apiKey, String token) {
+        boolean clear = apiKey.isEmpty() && token.isEmpty();
+        if (!clear && !(AbrpConfig.isPlausible(apiKey) && AbrpConfig.isPlausible(token))) {
+            abrpStatusText.setText(R.string.abrp_invalid);
+            return false;
+        }
+        AbrpConfig.save(this, apiKey, token);
+        abrpApiKeyInput.setText(apiKey);
+        abrpTokenInput.setText(token);
+        abrpStatusText.setText(clear ? R.string.abrp_cleared : R.string.abrp_saved);
+        refreshStatus();
+        return true;
+    }
+
+    /** Read-only check against ABRP; never sends telemetry. Off the main thread. */
+    private void testAbrpConfig() {
+        AbrpConfig config = new AbrpConfig(text(abrpApiKeyInput), text(abrpTokenInput));
+        if (!config.isConfigured()) {
+            abrpStatusText.setText(R.string.abrp_not_set);
+            return;
+        }
+        abrpStatusText.setText(R.string.abrp_testing);
+        new Thread(() -> {
+            String message;
+            try {
+                ServerHttp.Response response = AbrpApi.verify(config);
+                message = response.ok() ? getString(R.string.abrp_test_ok)
+                        : getString(R.string.abrp_test_failed, response.status);
+            } catch (Exception e) {
+                message = getString(R.string.abrp_test_offline, e.getClass().getSimpleName());
+            }
+            String shown = message;
+            runOnUiThread(() -> abrpStatusText.setText(shown));
+        }, "abrp-test").start();
+    }
+
+    /**
+     * A single choice as a drop-down (Widget.EV.Dropdown). An exposed dropdown menu rather than
+     * a Spinner: a Spinner's list is a focusable window of its own without the full-screen
+     * flags, and the car showed its bars while it was open; this list leaves the focus with
+     * the activity. setSimpleItems keeps every option listed (a plain adapter would filter the
+     * list down to the current text). Rebinding is safe.
+     */
+    private void bindChoices(com.google.android.material.textfield.MaterialAutoCompleteTextView view,
+                             String[] labels, int selected, java.util.function.IntConsumer onPick) {
+        view.setOnItemClickListener(null);
+        view.setSimpleItems(labels);
+        view.setText(labels[selected], false);
+        view.setOnItemClickListener((parent, item, position, id) -> onPick.accept(position));
+    }
+
+    /** The accent colour; a change recreates the activity so every view takes it. */
+    private void bindAccentColor() {
+        AccentColor[] colors = AccentColor.values();
+        String[] labels = new String[colors.length];
+        for (int i = 0; i < colors.length; i++) labels[i] = colors[i].label;
+        AccentColor current = AccentColor.fromPref(prefs.getString(AccentColor.PREF_KEY, null));
+        bindChoices(settingsPane.findViewById(R.id.accent_choices), labels, current.ordinal(), position -> {
+            if (colors[position] == current) return;
+            prefs.edit().putString(AccentColor.PREF_KEY, colors[position].name()).apply();
+            recreate();
         });
     }
 
-    private void refreshWifi() {
-        if (wifi == null) return;
-        String ssid = wifi.currentSsid();
-        wifiSsid.setText(ssid == null ? getString(R.string.wifi_not_connected) : ssid);
-        if (ssid != null) {
-            wifiState.setText("Bağlı ♥");
-        } else if (!wifi.isWifiEnabled()) {
-            wifiState.setText("Wi-Fi kapalı");
-        }
-        // Left alone otherwise: a message the button just set says more about what is
-        // happening than "not connected" would.
+    /** Tyre pressure unit: display only, read on every refresh of the Overview. */
+    private void bindTireUnit() {
+        PressureUnit[] units = PressureUnit.values();
+        String[] labels = new String[units.length];
+        for (int i = 0; i < units.length; i++) labels[i] = units[i].label;
+        int current = PressureUnit.fromPref(prefs.getString(PressureUnit.PREF_KEY, null)).ordinal();
+        bindChoices(settingsPane.findViewById(R.id.tire_unit_choices), labels, current, position ->
+                prefs.edit().putString(PressureUnit.PREF_KEY, units[position].name()).apply());
+    }
 
-        java.util.List<String> saved = wifi.savedNetworkNames();
-        wifiSavedList.setText(saved.isEmpty()
-                ? getString(R.string.wifi_saved_empty)
-                : android.text.TextUtils.join("\n", saved));
+    /** The service reads these settings on every tick, so a change applies without a restart. */
+    private void bindCadenceControls() {
+        UploadSettings current = UploadSettings.from(prefs);
+
+        String[] labels = new String[UploadSettings.INTERVAL_CHOICES_SEC.length];
+        int selected = 0;
+        for (int i = 0; i < UploadSettings.INTERVAL_CHOICES_SEC.length; i++) {
+            int sec = UploadSettings.INTERVAL_CHOICES_SEC[i];
+            labels[i] = sec >= 60
+                    ? getResources().getQuantityString(R.plurals.interval_minutes, sec / 60, sec / 60)
+                    : getResources().getQuantityString(R.plurals.interval_seconds, sec, sec);
+            if (sec == current.intervalSec) selected = i;
+        }
+        bindChoices(intervalChoices, labels, selected, position ->
+                prefs.edit().putInt(UploadSettings.KEY_INTERVAL_SEC,
+                        UploadSettings.INTERVAL_CHOICES_SEC[position]).apply());
+
+        boostSwitch.setOnCheckedChangeListener(null);
+        boostSwitch.setChecked(current.boostLowSoc);
+        lowSocLayout.setEnabled(current.boostLowSoc);
+        lowSocInput.setEnabled(current.boostLowSoc);
+        boostSwitch.setOnCheckedChangeListener((button, checked) -> {
+            prefs.edit().putBoolean(UploadSettings.KEY_BOOST_LOW_SOC, checked).apply();
+            lowSocLayout.setEnabled(checked);
+            lowSocInput.setEnabled(checked);
+        });
+
+        lowSocInput.setText(String.valueOf(current.lowSocPercent));
+        lowSocInput.setOnFocusChangeListener((view, hasFocus) -> {
+            if (!hasFocus) saveLowSocThreshold();
+        });
+    }
+
+    /** Clamped to 1-99: 0 would never trigger and 100 would boost permanently. */
+    private void saveLowSocThreshold() {
+        CharSequence raw = lowSocInput.getText();
+        int value;
+        try {
+            value = Integer.parseInt(raw == null ? "" : raw.toString().trim());
+        } catch (NumberFormatException e) {
+            value = UploadSettings.DEFAULT_LOW_SOC_PERCENT;
+        }
+        value = Math.max(1, Math.min(99, value));
+        lowSocInput.setText(String.valueOf(value));
+        prefs.edit().putInt(UploadSettings.KEY_LOW_SOC_PERCENT, value).apply();
+    }
+
+    /**
+     * GPS for the telemetry position. On the car the app runs as the system user and holds
+     * it already; this only asks where it does not, such as a phone running the stable build.
+     */
+    private void requestLocationPermissionIfNeeded() {
+        if (checkSelfPermission(android.Manifest.permission.ACCESS_FINE_LOCATION)
+                != PackageManager.PERMISSION_GRANTED) {
+            requestPermissions(new String[]{android.Manifest.permission.ACCESS_FINE_LOCATION,
+                    android.Manifest.permission.ACCESS_COARSE_LOCATION}, 1);
+        }
     }
 
     // ---------- Vehicle page ----------
@@ -391,6 +1217,71 @@ public class MainActivity extends AppCompatActivity {
         vehTireFr    = vehiclePane.findViewById(R.id.vehicle_tire_fr);
         vehTireRl    = vehiclePane.findViewById(R.id.vehicle_tire_rl);
         vehTireRr    = vehiclePane.findViewById(R.id.vehicle_tire_rr);
+        vehRangeTrip        = vehiclePane.findViewById(R.id.vehicle_range_trip);
+        vehRangeTripNote    = vehiclePane.findViewById(R.id.vehicle_range_trip_note);
+        vehRangeAverage     = vehiclePane.findViewById(R.id.vehicle_range_average);
+        vehRangeAverageNote = vehiclePane.findViewById(R.id.vehicle_range_average_note);
+        vehUsageTrip        = vehiclePane.findViewById(R.id.vehicle_usage_trip);
+        vehUsageTripNote    = vehiclePane.findViewById(R.id.vehicle_usage_trip_note);
+        vehUsageAverage     = vehiclePane.findViewById(R.id.vehicle_usage_average);
+        vehUsageAverageNote = vehiclePane.findViewById(R.id.vehicle_usage_average_note);
+        vehEnergyTrip       = vehiclePane.findViewById(R.id.vehicle_energy_trip);
+        vehEnergyTripNote   = vehiclePane.findViewById(R.id.vehicle_energy_trip_note);
+        vehPowerAverage     = vehiclePane.findViewById(R.id.vehicle_power_average);
+        vehPowerAverageNote = vehiclePane.findViewById(R.id.vehicle_power_average_note);
+        vehSpeedAverage     = vehiclePane.findViewById(R.id.vehicle_speed_average);
+        vehSpeedAverageNote = vehiclePane.findViewById(R.id.vehicle_speed_average_note);
+    }
+
+    private double usableKwh() {
+        return prefs.getFloat(USABLE_KWH_KEY, (float) RangeEstimator.DEFAULT_USABLE_KWH);
+    }
+
+    /**
+     * The range estimates since start and at the 5-minute average, each with its usage in a
+     * card below it. Since start needs the car to have moved; the average needs a minute or more
+     * of driving, which the service has usually collected already.
+     */
+    private void refreshRangeEstimates(EnergySnapshot s) {
+        RangeEstimator estimator = RangeEstimator.shared();
+        long monotonicMs = android.os.SystemClock.elapsedRealtime();
+        estimator.add(monotonicMs, s.getBatteryPowerKw(), s.getSpeedKmh());
+        Double remaining = RangeEstimator.remainingKwh(s.getSocPercent(), usableKwh());
+        RangeEstimator.Estimate trip = estimator.sinceStart(remaining);
+        Double power = estimator.averagePowerKw(monotonicMs);
+        vehPowerAverage.setText(power == null ? "—" : getString(R.string.power_kw, power));
+        vehPowerAverageNote.setText(power == null ? R.string.power_waiting : R.string.usage_last_5_min);
+        Double speed = estimator.averageSpeedKmh(monotonicMs);
+        vehSpeedAverage.setText(speed == null ? "—" : getString(R.string.speed_kmh, speed));
+        vehSpeedAverageNote.setText(speed == null ? R.string.power_waiting : R.string.usage_last_5_min);
+        Double energy = estimator.energySinceStart();
+        vehEnergyTrip.setText(energy == null ? "—" : getString(R.string.energy_kwh, energy));
+        vehEnergyTripNote.setText(energy == null ? R.string.energy_trip_waiting : R.string.energy_trip_note);
+        showEstimate(vehRangeTrip, vehRangeTripNote, vehUsageTrip, vehUsageTripNote, trip,
+                trip == null ? "" : getString(R.string.usage_over_distance, trip.distanceKm),
+                R.string.range_trip_waiting);
+        showEstimate(vehRangeAverage, vehRangeAverageNote, vehUsageAverage, vehUsageAverageNote,
+                estimator.average(remaining, monotonicMs), getString(R.string.usage_last_5_min),
+                R.string.range_waiting);
+    }
+
+    private void showEstimate(TextView range, TextView rangeNote, TextView usage, TextView usageNote,
+                              RangeEstimator.Estimate e, String basis, int whyNot) {
+        if (e == null) {
+            range.setText("—");
+            rangeNote.setText(whyNot);
+            usage.setText("—");
+            usageNote.setText(whyNot);
+            return;
+        }
+        // Recuperating, the pack gains energy: the range is unbounded. Coasting at speed costs
+        // almost nothing, which would read as thousands of km.
+        range.setText(e.kwhPer100Km <= 0 ? "∞"
+                : e.rangeKm > 999 ? getString(R.string.range_over, 999)
+                : String.format(java.util.Locale.US, "%.0f km", e.rangeKm));
+        rangeNote.setText(e.kwhPer100Km <= 0 ? getString(R.string.range_recuperating) : "");
+        usage.setText(getString(R.string.range_consumption, e.kwhPer100Km));
+        usageNote.setText(basis);
     }
 
     /**
@@ -400,16 +1291,73 @@ public class MainActivity extends AppCompatActivity {
      * is not work to repeat every two seconds. A read that throws leaves the cells as they
      * were rather than blanking the page — a transient miss is not news worth showing.
      */
-    private void refreshVehicle() {
+    // ---------- Overview: read every half second, off the main thread ----------
+
+    /** How often the Overview reads the car while it is on screen. */
+    private static final long OVERVIEW_REFRESH_MS = 500L;
+
+    /** One reader thread; a read that is still running makes the next tick skip, not queue. */
+    private final java.util.concurrent.ExecutorService carReader =
+            java.util.concurrent.Executors.newSingleThreadExecutor(r -> new Thread(r, "overview-read"));
+    private final java.util.concurrent.atomic.AtomicBoolean reading =
+            new java.util.concurrent.atomic.AtomicBoolean();
+    /** The newest reading, for the slower work on the 2-second tick. */
+    private volatile EnergySnapshot latestSnapshot;
+
+    private final Runnable overviewRefresh = new Runnable() {
+        @Override public void run() {
+            readVehicle();
+            uiHandler.postDelayed(this, OVERVIEW_REFRESH_MS);
+        }
+    };
+
+    /**
+     * About twenty calls into the car's services: on a background thread, so the screen never
+     * waits for them; the values are shown on the main thread once they are in.
+     */
+    private void readVehicle() {
+        if (!reading.compareAndSet(false, true)) return;
+        try {
+            carReader.execute(() -> {
+                try {
+                    if (vehicleReader == null) {
+                        vehicleReader = new EnergyTelemetryReader(getApplicationContext());
+                    }
+                    // The timestamp is passed explicitly: its Kotlin default is not visible from Java.
+                    EnergySnapshot s = vehicleReader.read(System.currentTimeMillis());
+                    latestSnapshot = s;
+                    runOnUiThread(() -> {
+                        if (!isDestroyed()) showVehicle(s);
+                    });
+                } catch (Throwable ignored) {
+                    // Leave the last good reading on screen.
+                } finally {
+                    reading.set(false);
+                }
+            });
+        } catch (java.util.concurrent.RejectedExecutionException e) {
+            reading.set(false); // the activity is going away
+        }
+    }
+
+    /**
+     * The consumption and charging trackers stay on the 2-second tick: they integrate over
+     * time, so a faster rate adds nothing, and the charging tracker writes its session to
+     * storage on every sample while charging.
+     */
+    private void sampleTrackers() {
+        EnergySnapshot s = latestSnapshot;
+        if (s == null) return;
         try {
-            if (vehicleReader == null) {
-                vehicleReader = new EnergyTelemetryReader(getApplicationContext());
-            }
-            // The timestamp is passed explicitly: its Kotlin default is not visible from Java.
-            EnergySnapshot s = vehicleReader.read(System.currentTimeMillis());
             ConsumptionTracker.get(this).sample(s);
             refreshCharging(s);
+        } catch (Throwable ignored) {
+            // A tracker failure must not stop the page.
+        }
+    }
 
+    private void showVehicle(EnergySnapshot s) {
+        try {
             vehSoc.setText(fmt(s.getSocPercent(), "%.0f %%"));
             vehRange.setText(fmt(s.getRangeKm(), "%.0f km"));
             vehPower.setText(fmt(s.getBatteryPowerKw(), "%.1f kW"));
@@ -418,11 +1366,13 @@ public class MainActivity extends AppCompatActivity {
             vehHvac.setText(fmt(s.getClimate().getDriverTargetCelsius(), "%.0f °C"));
 
             vehCharging.setText(chargingLabel(s));
+            refreshRangeEstimates(s);
 
-            vehTireFl.setText(fmt(s.getTirePressures().getFrontLeftKpa(), "%.0f kPa"));
-            vehTireFr.setText(fmt(s.getTirePressures().getFrontRightKpa(), "%.0f kPa"));
-            vehTireRl.setText(fmt(s.getTirePressures().getRearLeftKpa(), "%.0f kPa"));
-            vehTireRr.setText(fmt(s.getTirePressures().getRearRightKpa(), "%.0f kPa"));
+            PressureUnit unit = PressureUnit.fromPref(prefs.getString(PressureUnit.PREF_KEY, null));
+            vehTireFl.setText(unit.format(s.getTirePressures().getFrontLeftKpa()));
+            vehTireFr.setText(unit.format(s.getTirePressures().getFrontRightKpa()));
+            vehTireRl.setText(unit.format(s.getTirePressures().getRearLeftKpa()));
+            vehTireRr.setText(unit.format(s.getTirePressures().getRearRightKpa()));
         } catch (Throwable ignored) {
             // Leave the last good reading on screen.
         }
@@ -443,12 +1393,16 @@ public class MainActivity extends AppCompatActivity {
         consumptionDateButton.setOnClickListener(v -> showConsumptionDatePicker());
         consumptionPane.findViewById(R.id.consumption_refresh).setOnClickListener(v -> refreshFromCloud());
         consumptionReset = consumptionPane.findViewById(R.id.consumption_reset);
-        consumptionSohLayout = consumptionPane.findViewById(R.id.consumption_soh_layout);
-        consumptionSohInput = consumptionPane.findViewById(R.id.consumption_soh_input);
+        consumptionSohLayout = settingsPane.findViewById(R.id.consumption_soh_layout);
+        consumptionSohInput = settingsPane.findViewById(R.id.consumption_soh_input);
         Float savedSoh = consumptionTracker.sohPercent();
         if (savedSoh != null) consumptionSohInput.setText(String.format(
                 java.util.Locale.US, "%.1f", savedSoh));
-        consumptionPane.findViewById(R.id.consumption_soh_save).setOnClickListener(v -> saveSoh());
+        settingsPane.findViewById(R.id.consumption_soh_save).setOnClickListener(v -> saveSoh());
+        usableCapacityLayout = settingsPane.findViewById(R.id.usable_capacity_layout);
+        usableCapacityInput = settingsPane.findViewById(R.id.usable_capacity_input);
+        usableCapacityInput.setText(String.format(java.util.Locale.US, "%.1f", usableKwh()));
+        settingsPane.findViewById(R.id.usable_capacity_save).setOnClickListener(v -> saveUsableCapacity());
         bindPeriodButton(R.id.consumption_lifetime, ConsumptionTracker.Period.LIFETIME);
         bindPeriodButton(R.id.consumption_week, ConsumptionTracker.Period.WEEK);
         bindPeriodButton(R.id.consumption_month, ConsumptionTracker.Period.MONTH);
@@ -457,17 +1411,32 @@ public class MainActivity extends AppCompatActivity {
         selectPeriodButton(R.id.consumption_lifetime);
         consumptionReset.setOnClickListener(v -> {
             if (consumptionPeriod != ConsumptionTracker.Period.TRIP_A && consumptionPeriod != ConsumptionTracker.Period.TRIP_B) return;
-            String name = consumptionPeriod == ConsumptionTracker.Period.TRIP_A ? "Trip A" : "Trip B";
-            new MaterialAlertDialogBuilder(this).setTitle(name + " sıfırlansın mı?")
-                    .setMessage("Bu sayacın kayıtlı tüketim geçmişi kalıcı olarak silinir.")
-                    .setNegativeButton("Vazgeç", null)
-                    .setPositiveButton("Sıfırla", (d, w) -> {
+            String name = getString(consumptionPeriod == ConsumptionTracker.Period.TRIP_A
+                    ? R.string.consumption_trip_a : R.string.consumption_trip_b);
+            showKeepingFullScreen(new MaterialAlertDialogBuilder(this)
+                    .setTitle(getString(R.string.trip_reset_title, name))
+                    .setMessage(R.string.trip_reset_message)
+                    .setNegativeButton(R.string.pair_cancel, null)
+                    .setPositiveButton(R.string.trip_reset_confirm, (d, w) -> {
                         consumptionTracker.reset(consumptionPeriod);
                         refreshConsumption();
-                    }).show();
+                    }).create());
         });
     }
 
+    private void saveUsableCapacity() {
+        try {
+            float value = Float.parseFloat(textOf(usableCapacityInput).replace(',', '.'));
+            if (!(value >= 10f && value <= 150f)) throw new NumberFormatException();
+            prefs.edit().putFloat(USABLE_KWH_KEY, value).apply();
+            usableCapacityLayout.setError(null);
+            usableCapacityInput.setText(String.format(java.util.Locale.US, "%.1f", value));
+            Toast.makeText(this, R.string.usable_capacity_saved, Toast.LENGTH_SHORT).show();
+        } catch (NumberFormatException e) {
+            usableCapacityLayout.setError(getString(R.string.usable_capacity_invalid));
+        }
+    }
+
     private void saveSoh() {
         String raw = textOf(consumptionSohInput).replace(',', '.');
         try {
@@ -475,9 +1444,9 @@ public class MainActivity extends AppCompatActivity {
             if (!consumptionTracker.setSohPercent(value)) throw new NumberFormatException();
             consumptionSohLayout.setError(null);
             consumptionSohInput.setText(String.format(java.util.Locale.US, "%.1f", value));
-            Toast.makeText(this, "SoH kaydedildi", Toast.LENGTH_SHORT).show();
+            Toast.makeText(this, R.string.soh_saved, Toast.LENGTH_SHORT).show();
         } catch (NumberFormatException e) {
-            consumptionSohLayout.setError("1 ile 100 arasında bir değer girin");
+            consumptionSohLayout.setError(getString(R.string.soh_invalid));
         }
     }
 
@@ -499,9 +1468,10 @@ public class MainActivity extends AppCompatActivity {
             MaterialButton button = consumptionPane.findViewById(id);
             boolean selected = id == selectedId;
             button.setSelected(selected);
-            button.setTextColor(selected ? 0xFFD8C39A : COLOR_PENDING);
+            int accent = AccentColor.resolve(this, R.attr.evAccent);
+            button.setTextColor(selected ? accent : COLOR_PENDING);
             button.setStrokeColor(android.content.res.ColorStateList.valueOf(
-                    selected ? 0xFFD8C39A : 0xFF3A4143));
+                    selected ? accent : 0xFF3A4143));
         }
     }
 
@@ -519,11 +1489,12 @@ public class MainActivity extends AppCompatActivity {
         chargeTotalCost = chargingPane.findViewById(R.id.charge_total_cost);
         chargeGraph = chargingPane.findViewById(R.id.charge_graph);
         chargeCurveTable = chargingPane.findViewById(R.id.charge_curve_table);
-        chargePriceLayout = chargingPane.findViewById(R.id.charge_price_layout);
-        chargePriceInput = chargingPane.findViewById(R.id.charge_price_input);
+        chargePriceLayout = settingsPane.findViewById(R.id.charge_price_layout);
+        chargePriceInput = settingsPane.findViewById(R.id.charge_price_input);
         chargePriceInput.setText(String.format(java.util.Locale.US, "%.2f",
                 chargeSessionTracker.pricePerKwh()));
-        chargingPane.findViewById(R.id.charge_price_save).setOnClickListener(v -> saveChargePrice());
+        settingsPane.findViewById(R.id.charge_price_save).setOnClickListener(v -> saveChargePrice());
+        settingsPane.findViewById(R.id.settings_phone_button).setOnClickListener(v -> startPhoneSettings());
     }
 
     private void saveChargePrice() {
@@ -533,9 +1504,9 @@ public class MainActivity extends AppCompatActivity {
             if (!chargeSessionTracker.setPricePerKwh(value)) throw new NumberFormatException();
             chargePriceLayout.setError(null);
             chargePriceInput.setText(String.format(java.util.Locale.US, "%.2f", value));
-            Toast.makeText(this, "Şarj fiyatı kaydedildi", Toast.LENGTH_SHORT).show();
+            Toast.makeText(this, R.string.price_saved, Toast.LENGTH_SHORT).show();
         } catch (NumberFormatException e) {
-            chargePriceLayout.setError("Geçerli bir ₺/kWh değeri girin");
+            chargePriceLayout.setError(getString(R.string.price_invalid));
         }
     }
 
@@ -550,9 +1521,9 @@ public class MainActivity extends AppCompatActivity {
         // below — which then describe the previous DC session — be read as this charge.
         boolean dc = ChargingState.isDcCharging(
                 code, s.getChargePortConnected(), s.getBatteryPowerKw(), s.getSpeedKmh());
-        chargeStatus.setText(dc ? "DC hızlı şarj"
-                : charging ? "AC şarj (ölçülmüyor)"
-                : (session.startedAtMs > 0 ? "Son şarj" : "Şarj yok"));
+        chargeStatus.setText(dc ? R.string.charge_dc
+                : charging ? R.string.charge_ac_not_metered
+                : (session.startedAtMs > 0 ? R.string.charge_last : R.string.charging_not_charging));
         chargeSoc.setText(fmt(s.getSocPercent(), "%.1f %%"));
         chargeStartSoc.setText(fmt(session.startSocPercent, "%.1f %%"));
         chargeVoltage.setText(fmt(s.getBatteryVoltageV(), "%.1f V"));
@@ -563,7 +1534,7 @@ public class MainActivity extends AppCompatActivity {
                 java.util.Locale.getDefault(), "%.2f kWh", session.gridEnergyKwh) : "—");
         long sec = session.durationSeconds;
         chargeDuration.setText(session.startedAtMs > 0 ? String.format(java.util.Locale.getDefault(), "%02d:%02d:%02d", sec/3600,(sec%3600)/60,sec%60) : "—");
-        chargeTotalCost.setText(session.startedAtMs > 0 ? String.format(java.util.Locale.getDefault(), "%.2f ₺", session.totalCost) : "—");
+        chargeTotalCost.setText(session.startedAtMs > 0 ? String.format(java.util.Locale.getDefault(), "€%.2f", session.totalCost) : "—");
         chargeGraph.setPoints(session.points);
         chargeCurveTable.setText(chargeGraph.tableText());
     }
@@ -586,20 +1557,19 @@ public class MainActivity extends AppCompatActivity {
         consumptionSpeed.setText(t.hours <= 0 ? "—" : String.format(java.util.Locale.getDefault(),
                 "%.1f km/h", t.km / t.hours));
         long minutes = Math.round(t.hours * 60d);
-        consumptionTime.setText(String.format(java.util.Locale.getDefault(), "%d sa %02d dk",
+        consumptionTime.setText(String.format(java.util.Locale.getDefault(), "%d h %02d min",
                 minutes / 60, minutes % 60));
         consumptionSoc.setText(String.format(java.util.Locale.getDefault(), "%.1f %%", t.soc));
         // Daily history: cloud first, local fallback for today (not yet uploaded).
         ConsumptionTracker.Totals day = cloudDay(selectedConsumptionDate);
         if (day == null) day = consumptionTracker.totalsForDay(selectedConsumptionDate);
         if (day.km == 0 && day.kwh == 0 && day.hours == 0 && day.soc == 0) {
-            consumptionDailyHistory.setText("Bu tarih için kayıt yok");
+            consumptionDailyHistory.setText(R.string.consumption_no_records);
         } else {
             String average = day.km < 0.1 ? "—" : String.format(java.util.Locale.getDefault(),
                     "%.1f kWh/100 km", day.kwh * 100d / day.km);
             long dayMinutes = Math.round(day.hours * 60d);
-            consumptionDailyHistory.setText(String.format(java.util.Locale.getDefault(),
-                    "Mesafe       %.1f km\nEnerji       %.2f kWh\nOrtalama     %s\nSüre         %d sa %02d dk\nSOC farkı    %.1f %%",
+            consumptionDailyHistory.setText(getString(R.string.consumption_day_summary,
                     day.km, day.kwh, average, dayMinutes / 60, dayMinutes % 60, day.soc));
         }
     }
@@ -653,7 +1623,7 @@ public class MainActivity extends AppCompatActivity {
         dialog.getDatePicker().setMaxDate(System.currentTimeMillis());
         dialog.getDatePicker().setMinDate(java.time.LocalDate.now().minusMonths(4)
                 .atStartOfDay(zone).toInstant().toEpochMilli());
-        dialog.show();
+        showKeepingFullScreen(dialog);
     }
 
     /**
@@ -662,21 +1632,21 @@ public class MainActivity extends AppCompatActivity {
      * The codes are the vehicle's own — see EVHardware.PROP_VENDOR_CHARGE_STATUS. An
      * unrecognised code is shown as itself rather than guessed at.
      */
-    private static String chargingLabel(EnergySnapshot s) {
+    private String chargingLabel(EnergySnapshot s) {
         Integer status = s.getChargingStatus();
         if (status != null) {
             switch (status) {
-                case 1:  return "AC şarj ♥";
-                case 10: return "DC hızlı şarj ♥";
-                case 5:  return "Bağlanıyor…";
-                case 7:  return "Kabloda, şarj yok";
-                case 8:  return "Durduruldu";
-                case 0:  return "Şarj yok";
-                default: return "Durum " + status;
+                case 1:  return getString(R.string.charge_status_ac);
+                case 10: return getString(R.string.charge_status_dc);
+                case 5:  return getString(R.string.charge_status_connecting);
+                case 7:  return getString(R.string.charge_status_plugged);
+                case 8:  return getString(R.string.charge_status_stopped);
+                case 0:  return getString(R.string.charging_not_charging);
+                default: return getString(R.string.charge_status_code, status);
             }
         }
         Boolean plugged = s.getChargePortConnected();
-        if (plugged != null) return plugged ? "Bağlı ♥" : "Bağlı değil";
+        if (plugged != null) return getString(plugged ? R.string.charge_status_connected : R.string.charge_status_unplugged);
         return "—";
     }
 
@@ -689,13 +1659,13 @@ public class MainActivity extends AppCompatActivity {
     // ---------- Call log ----------
 
     /**
-     * "Şimdi yükle" button — forces a cache drain + fresh chunk on a background thread,
-     * ignoring the 2-minute throttle. The result lands in the upload log (Kayıtlar tab).
+     * "Upload now" button — forces a cache drain + fresh chunk on a background thread,
+     * ignoring the 2-minute throttle. The result lands in the upload log (Logs tab).
      */
     private void manualFlush() {
         if (consumptionCloudClient == null || consumptionTracker == null) return;
         AbrpUploadService.log().record(new UploadLog.Entry(
-                System.currentTimeMillis(), 0, true, "Manuel sync başlatıldı…"));
+                System.currentTimeMillis(), 0, true, "Manual sync started…"));
         new Thread(() -> {
             String result = consumptionCloudClient.flushNow(
                     consumptionTracker, System.currentTimeMillis());
@@ -704,19 +1674,19 @@ public class MainActivity extends AppCompatActivity {
     }
 
     /**
-     * Tüketim sekmesi "Yenile" button — sends cached chunks + fresh delta, invalidates the
+     * Consumption tab "Refresh" button — sends cached chunks + fresh delta, invalidates the
      * history cache so the next poll fetches fresh data from the cloud, then refreshes the UI.
      */
     private void refreshFromCloud() {
         if (consumptionCloudClient == null || consumptionTracker == null) return;
         AbrpUploadService.log().record(new UploadLog.Entry(
-                System.currentTimeMillis(), 0, true, "Tüketim yenileniyor…"));
+                System.currentTimeMillis(), 0, true, "Refreshing consumption…"));
         new Thread(() -> {
             consumptionCloudClient.flushNow(consumptionTracker, System.currentTimeMillis());
             consumptionCloudClient.invalidateHistory();
             runOnUiThread(() -> {
                 refreshConsumption();
-                Toast.makeText(this, "Tüketim yenilendi", Toast.LENGTH_SHORT).show();
+                Toast.makeText(this, R.string.consumption_refreshed, Toast.LENGTH_SHORT).show();
             });
         }, "cloud-refresh").start();
     }
@@ -764,8 +1734,20 @@ public class MainActivity extends AppCompatActivity {
                 break;
             case RUNNING:
             case STARTING:
-                statusText.setText("Tüketim takibi aktif");
-                statusText.setTextColor(COLOR_OK);
+                boolean server = ServerConfig.get(this).isConfigured();
+                if (!server && !AbrpConfig.get(this).isConfigured()) {
+                    statusText.setText(R.string.server_not_configured);
+                    statusText.setTextColor(COLOR_ERROR);
+                } else if (!server && UploadSettings.from(prefs).abrpUploadEnabled) {
+                    statusText.setText(R.string.state_abrp_only);
+                    statusText.setTextColor(COLOR_PENDING);
+                } else if (!UploadSettings.from(prefs).abrpUploadEnabled) {
+                    statusText.setText(R.string.state_tracking_locally);
+                    statusText.setTextColor(COLOR_PENDING);
+                } else {
+                    statusText.setText(R.string.state_running);
+                    statusText.setTextColor(COLOR_OK);
+                }
                 break;
             case STOPPED:
             default:
diff --git a/app/src/main/java/com/evsuite/abrp/PairingClient.java b/app/src/main/java/com/evsuite/abrp/PairingClient.java
new file mode 100644
index 0000000..8990af1
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/PairingClient.java
@@ -0,0 +1,94 @@
+package com.evsuite.abrp;
+
+import org.json.JSONObject;
+
+/**
+ * The car's side of pairing with the server (an OAuth device-authorization flow): ask for a
+ * pairing request, show its code as a QR code, then poll until a phone has approved it and
+ * collect this car's own token. Blocking calls — run them off the main thread.
+ */
+final class PairingClient {
+
+    /** A pairing request as the server opened it. */
+    static final class Request {
+        final String deviceCode;
+        final String userCode;
+        final String verificationUri;
+        final String verificationUriComplete;
+        final long expiresAtMs;
+        final long intervalMs;
+
+        Request(String deviceCode, String userCode, String verificationUri, String verificationUriComplete,
+                long expiresAtMs, long intervalMs) {
+            this.deviceCode = deviceCode;
+            this.userCode = userCode;
+            this.verificationUri = verificationUri;
+            this.verificationUriComplete = verificationUriComplete;
+            this.expiresAtMs = expiresAtMs;
+            this.intervalMs = intervalMs;
+        }
+    }
+
+    enum Outcome { PENDING, APPROVED, DENIED, EXPIRED }
+
+    static final class PollResult {
+        final Outcome outcome;
+        final String token;
+
+        PollResult(Outcome outcome, String token) {
+            this.outcome = outcome;
+            this.token = token;
+        }
+    }
+
+    /** Thrown when pairing is switched off on the server (no APPROVAL_PASSWORD). */
+    static final class NotEnabledException extends Exception { }
+
+    /** The server answered with a status the flow does not expect. */
+    static final class HttpStatusException extends java.io.IOException {
+        final int status;
+
+        HttpStatusException(int status) {
+            super("HTTP " + status);
+            this.status = status;
+        }
+    }
+
+    /** What the server says when APPROVAL_PASSWORD is unset; any other 404 is a missing route. */
+    static final String NOT_ENABLED_MESSAGE = "pairing is not enabled";
+
+    private PairingClient() { }
+
+    static Request start(String serverUrl, String installationId) throws Exception {
+        ServerHttp.Response r = post(serverUrl + "/v1/pair/start",
+                new JSONObject().put("installationId", installationId));
+        // Only the server's own answer means "switched off". A 404 without it is a server (or
+        // proxy) that has no pairing route at all, e.g. one older than 2.1.0.
+        if (r.status == 404 && r.body.contains(NOT_ENABLED_MESSAGE)) throw new NotEnabledException();
+        if (r.status != 201) throw new HttpStatusException(r.status);
+        JSONObject json = new JSONObject(r.body);
+        long now = System.currentTimeMillis();
+        return new Request(
+                json.getString("deviceCode"),
+                json.getString("userCode"),
+                json.getString("verificationUri"),
+                json.getString("verificationUriComplete"),
+                now + json.optLong("expiresIn", 600) * 1000L,
+                Math.max(2, json.optLong("interval", 5)) * 1000L);
+    }
+
+    static PollResult poll(String serverUrl, String deviceCode) throws Exception {
+        ServerHttp.Response r = post(serverUrl + "/v1/pair/poll", new JSONObject().put("deviceCode", deviceCode));
+        switch (r.status) {
+            case 200: return new PollResult(Outcome.APPROVED, new JSONObject(r.body).getString("token"));
+            case 202: return new PollResult(Outcome.PENDING, null);
+            case 403: return new PollResult(Outcome.DENIED, null);
+            case 410: return new PollResult(Outcome.EXPIRED, null);
+            default: throw new HttpStatusException(r.status);
+        }
+    }
+
+    private static ServerHttp.Response post(String url, JSONObject json) throws Exception {
+        return ServerHttp.request("POST", url, null, json);
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/PhoneSettingsClient.java b/app/src/main/java/com/evsuite/abrp/PhoneSettingsClient.java
new file mode 100644
index 0000000..f7eec56
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/PhoneSettingsClient.java
@@ -0,0 +1,66 @@
+package com.evsuite.abrp;
+
+import org.json.JSONObject;
+
+/**
+ * The car's side of entering settings on a phone: open a request on the server (with this
+ * car's token), show it as a QR code, then poll until the phone has sent the values, which
+ * the server hands out once. Same codes and QR flow as pairing ({@link PairingClient}).
+ * Blocking calls — run them off the main thread.
+ */
+final class PhoneSettingsClient {
+
+    /** What the phone sent; null fields were left empty there. */
+    static final class Settings {
+        final String abrpApiKey;
+        final String abrpToken;
+        final Double pricePerKwh;
+        final Double usableKwh;
+
+        Settings(String abrpApiKey, String abrpToken, Double pricePerKwh, Double usableKwh) {
+            this.abrpApiKey = abrpApiKey;
+            this.abrpToken = abrpToken;
+            this.pricePerKwh = pricePerKwh;
+            this.usableKwh = usableKwh;
+        }
+
+        static Settings parse(String body) throws Exception {
+            JSONObject json = new JSONObject(body);
+            return new Settings(text(json, "abrpApiKey"), text(json, "abrpToken"),
+                    json.has("pricePerKwh") ? json.getDouble("pricePerKwh") : null,
+                    json.has("usableKwh") ? json.getDouble("usableKwh") : null);
+        }
+
+        private static String text(JSONObject json, String key) {
+            String value = json.optString(key, "").trim();
+            return value.isEmpty() ? null : value;
+        }
+    }
+
+    private PhoneSettingsClient() { }
+
+    static PairingClient.Request start(ServerConfig config) throws Exception {
+        ServerHttp.Response r = ServerHttp.request("POST", config.url + "/v1/settings/start", config.token,
+                new JSONObject().put("installationId", config.installationId));
+        if (r.status == 404) throw new PairingClient.NotEnabledException();
+        if (r.status != 201) throw new PairingClient.HttpStatusException(r.status);
+        JSONObject json = new JSONObject(r.body);
+        long now = System.currentTimeMillis();
+        return new PairingClient.Request(
+                json.getString("deviceCode"),
+                json.getString("userCode"),
+                json.getString("verificationUri"),
+                json.getString("verificationUriComplete"),
+                now + json.optLong("expiresIn", 600) * 1000L,
+                Math.max(2, json.optLong("interval", 5)) * 1000L);
+    }
+
+    /** Null while the phone has not sent anything; throws once the request has expired (410). */
+    static Settings poll(ServerConfig config, String deviceCode) throws Exception {
+        ServerHttp.Response r = ServerHttp.request("POST", config.url + "/v1/settings/poll", config.token,
+                new JSONObject().put("deviceCode", deviceCode));
+        if (r.status == 202) return null;
+        if (r.status == 200) return Settings.parse(r.body);
+        throw new PairingClient.HttpStatusException(r.status);
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/PremiumBackdropView.java b/app/src/main/java/com/evsuite/abrp/PremiumBackdropView.java
index 7261c20..b74e90c 100644
--- a/app/src/main/java/com/evsuite/abrp/PremiumBackdropView.java
+++ b/app/src/main/java/com/evsuite/abrp/PremiumBackdropView.java
@@ -8,7 +8,10 @@ import android.graphics.Shader;
 import android.util.AttributeSet;
 import android.view.View;
 
-/** Static, low-opacity light behind the glass panels; no blur passes or animation loop. */
+/**
+ * Static, low-opacity light behind the glass panels, in the accent colour; no blur passes or
+ * animation loop.
+ */
 public final class PremiumBackdropView extends View {
     private final Paint cyan = new Paint(Paint.ANTI_ALIAS_FLAG);
     private final Paint gold = new Paint(Paint.ANTI_ALIAS_FLAG);
@@ -20,10 +23,12 @@ public final class PremiumBackdropView extends View {
 
     @Override protected void onSizeChanged(int w, int h, int oldw, int oldh) {
         float radius = Math.max(1, Math.max(w, h) * 0.65f);
+        int deep = AccentColor.resolve(getContext(), R.attr.evAccentDeep);
+        int stroke = AccentColor.resolve(getContext(), R.attr.evAccentStroke);
         cyan.setShader(new RadialGradient(w * 0.70f, 0, radius,
-                new int[]{0x2419565B, 0x00000000}, null, Shader.TileMode.CLAMP));
+                new int[]{AccentColor.withAlpha(deep, 0x48), 0x00000000}, null, Shader.TileMode.CLAMP));
         gold.setShader(new RadialGradient(w, h, radius * 0.65f,
-                new int[]{0x1C8B693A, 0x00000000}, null, Shader.TileMode.CLAMP));
+                new int[]{AccentColor.withAlpha(stroke, 0x1C), 0x00000000}, null, Shader.TileMode.CLAMP));
     }
 
     @Override protected void onDraw(Canvas canvas) {
diff --git a/app/src/main/java/com/evsuite/abrp/PressureUnit.java b/app/src/main/java/com/evsuite/abrp/PressureUnit.java
new file mode 100644
index 0000000..51fd5ea
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/PressureUnit.java
@@ -0,0 +1,40 @@
+package com.evsuite.abrp;
+
+import java.util.Locale;
+
+/**
+ * The unit tyre pressures are shown in. The car reports kPa; this only changes the display.
+ * Android-free, unit-tested.
+ */
+enum PressureUnit {
+    BAR("bar", "%.1f bar", 0.01),
+    KPA("kPa", "%.0f kPa", 1.0),
+    PSI("psi", "%.1f psi", 0.145038);
+
+    static final String PREF_KEY = "tire_pressure_unit";
+    static final PressureUnit DEFAULT = BAR;
+
+    final String label;
+    private final String pattern;
+    private final double perKpa;
+
+    PressureUnit(String label, String pattern, double perKpa) {
+        this.label = label;
+        this.pattern = pattern;
+        this.perKpa = perKpa;
+    }
+
+    /** A reading in this unit, or a dash for none. */
+    String format(Float kpa) {
+        if (kpa == null || kpa.isNaN() || kpa.isInfinite()) return "—";
+        return String.format(Locale.US, pattern, kpa * perKpa);
+    }
+
+    /** The stored choice; anything unknown falls back to bar. */
+    static PressureUnit fromPref(String name) {
+        for (PressureUnit u : values()) {
+            if (u.name().equals(name)) return u;
+        }
+        return DEFAULT;
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/RangeEstimator.java b/app/src/main/java/com/evsuite/abrp/RangeEstimator.java
new file mode 100644
index 0000000..956fa97
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/RangeEstimator.java
@@ -0,0 +1,206 @@
+package com.evsuite.abrp;
+
+import java.util.ArrayDeque;
+import java.util.Iterator;
+
+/**
+ * Estimated range from the energy left in the pack and how fast it is being used.
+ *
+ *   since start: remaining kWh / (energy used / distance driven since the car was switched on)
+ *   average:     remaining kWh / (energy used / distance driven over the last 5 minutes)
+ *
+ * "Since start" is a trip like the car's own trip computer: it begins with the first sample
+ * after the head unit wakes (or after charging), so it includes standing with the climate on.
+ * A gap of {@link #TRIP_RESET_GAP_MS} without samples is the car having been off, and starts
+ * a new trip; so does charging.
+ *
+ * Remaining energy is SOC x usable capacity: the car publishes no pack energy, so the capacity
+ * is a setting. An estimate is null when it cannot mean anything — not moved yet, too little
+ * data — rather than a misleading number. Net regeneration is shown as it is: negative usage.
+ *
+ * Fed by both the service tick (15 s) and the open Vehicle page (2 s); the integration is
+ * time-weighted, so the two rates mix correctly. Times are on the monotonic clock
+ * (SystemClock.elapsedRealtime): the head unit sets its wall clock from GPS, and a jump back
+ * would make every new sample look out of order. Free of Android types, unit-tested.
+ */
+final class RangeEstimator {
+
+    static final long WINDOW_MS = 5 * 60_000L;
+    /** Less than this much driving in the window is too little to average. */
+    static final long MIN_WINDOW_MS = 60_000L;
+    static final double MIN_DISTANCE_KM = 0.2;
+    /** A gap between samples longer than this (app paused, car off) is not integrated. */
+    static final long MAX_GAP_MS = 60_000L;
+
+    /** No sample for this long: the car was off, and the next sample starts a new trip. */
+    static final long TRIP_RESET_GAP_MS = 10 * 60_000L;
+    /** Standing still and taking in more than this: charging, which ends the trip. */
+    static final double CHARGING_KW = -1.0;
+
+    static final double DEFAULT_USABLE_KWH = 50.8; // MG4 51 kWh battery
+
+    private static final RangeEstimator SHARED = new RangeEstimator();
+
+    static RangeEstimator shared() { return SHARED; }
+
+    /** An estimate: the range, the consumption it is based on, and the distance behind it. */
+    static final class Estimate {
+        final double rangeKm;
+        final double kwhPer100Km;
+        final double distanceKm;
+
+        Estimate(double rangeKm, double kwhPer100Km, double distanceKm) {
+            this.rangeKm = rangeKm;
+            this.kwhPer100Km = kwhPer100Km;
+            this.distanceKm = distanceKm;
+        }
+    }
+
+    private static final class Sample {
+        final long timeMs;
+        final double powerKw;
+        final double speedKmh;
+
+        Sample(long timeMs, double powerKw, double speedKmh) {
+            this.timeMs = timeMs;
+            this.powerKw = powerKw;
+            this.speedKmh = speedKmh;
+        }
+    }
+
+    private final ArrayDeque<Sample> samples = new ArrayDeque<>();
+
+    // The trip since start: running totals, so it is not limited to the 5-minute window.
+    private double tripEnergyKwh;
+    private double tripDistanceKm;
+    private Sample tripLast;
+
+    /** Power in kW, positive leaving the battery; speed in km/h. Unread values are skipped. */
+    synchronized void add(long timeMs, Float powerKw, Float speedKmh) {
+        if (powerKw == null || speedKmh == null || !Float.isFinite(powerKw) || !Float.isFinite(speedKmh)) return;
+        Sample last = samples.peekLast();
+        if (last != null && timeMs <= last.timeMs) return; // out of order or duplicate tick
+        Sample sample = new Sample(timeMs, powerKw, Math.max(0f, speedKmh));
+        addToTrip(sample);
+        samples.addLast(sample);
+        while (!samples.isEmpty() && samples.peekFirst().timeMs < timeMs - WINDOW_MS) samples.removeFirst();
+    }
+
+    static Double remainingKwh(Float socPercent, double usableKwh) {
+        if (socPercent == null || !Float.isFinite(socPercent) || usableKwh <= 0) return null;
+        return Math.max(0, Math.min(100, socPercent)) / 100.0 * usableKwh;
+    }
+
+    private void addToTrip(Sample s) {
+        boolean charging = s.speedKmh < 1 && s.powerKw < CHARGING_KW;
+        if (charging || (tripLast != null && s.timeMs - tripLast.timeMs > TRIP_RESET_GAP_MS)) {
+            tripEnergyKwh = 0;
+            tripDistanceKm = 0;
+            tripLast = null;
+        }
+        if (charging) return; // the trip starts again after the charge
+        if (tripLast != null) {
+            long dt = s.timeMs - tripLast.timeMs;
+            if (dt > 0 && dt <= MAX_GAP_MS) {
+                double hours = dt / 3_600_000.0;
+                tripEnergyKwh += (tripLast.powerKw + s.powerKw) / 2 * hours;
+                tripDistanceKm += (tripLast.speedKmh + s.speedKmh) / 2 * hours;
+            }
+        }
+        tripLast = s;
+    }
+
+    /** Net energy taken from the pack since start, in kWh; null before the trip's first sample. */
+    synchronized Double energySinceStart() {
+        return tripLast == null ? null : tripEnergyKwh;
+    }
+
+    /** Range at the consumption since start; null until the trip has some distance behind it. */
+    synchronized Estimate sinceStart(Double remainingKwh) {
+        if (remainingKwh == null || tripDistanceKm < MIN_DISTANCE_KM) return null;
+        return estimate(remainingKwh, tripEnergyKwh, tripDistanceKm);
+    }
+
+    synchronized Estimate average(Double remainingKwh, long nowMs) {
+        if (remainingKwh == null) return null;
+        double energyKwh = 0, distanceKm = 0;
+        long covered = 0;
+        Sample previous = null;
+        for (Iterator<Sample> it = samples.iterator(); it.hasNext(); ) {
+            Sample s = it.next();
+            if (s.timeMs < nowMs - WINDOW_MS) continue;
+            if (previous != null) {
+                long dt = s.timeMs - previous.timeMs;
+                if (dt > 0 && dt <= MAX_GAP_MS) {
+                    double hours = dt / 3_600_000.0;
+                    energyKwh += (previous.powerKw + s.powerKw) / 2 * hours;
+                    distanceKm += (previous.speedKmh + s.speedKmh) / 2 * hours;
+                    covered += dt;
+                }
+            }
+            previous = s;
+        }
+        if (covered < MIN_WINDOW_MS || distanceKm < MIN_DISTANCE_KM) return null;
+        return estimate(remainingKwh, energyKwh, distanceKm);
+    }
+
+    /**
+     * Net regeneration (downhill, recuperating) is a real reading: the usage is negative, and
+     * the range is unbounded rather than negative.
+     */
+    private static Estimate estimate(double remainingKwh, double energyKwh, double distanceKm) {
+        double kwhPerKm = energyKwh / distanceKm;
+        double rangeKm = kwhPerKm > 0 ? remainingKwh / kwhPerKm : Double.POSITIVE_INFINITY;
+        return new Estimate(rangeKm, kwhPerKm * 100, distanceKm);
+    }
+
+    /**
+     * Mean battery power over the last five minutes, time-weighted, standing included; null with
+     * less than a minute of samples. Positive is drawn from the pack, as the Power tile shows it.
+     */
+    synchronized Double averagePowerKw(long nowMs) {
+        double energyKwh = 0;
+        long covered = 0;
+        Sample previous = null;
+        for (Sample s : samples) {
+            if (s.timeMs < nowMs - WINDOW_MS) continue;
+            if (previous != null) {
+                long dt = s.timeMs - previous.timeMs;
+                if (dt > 0 && dt <= MAX_GAP_MS) {
+                    energyKwh += (previous.powerKw + s.powerKw) / 2 * (dt / 3_600_000.0);
+                    covered += dt;
+                }
+            }
+            previous = s;
+        }
+        if (covered < MIN_WINDOW_MS) return null;
+        return energyKwh / (covered / 3_600_000.0);
+    }
+
+    /** Mean speed over the last five minutes, time-weighted, standing included; null below a minute. */
+    synchronized Double averageSpeedKmh(long nowMs) {
+        double distanceKm = 0;
+        long covered = 0;
+        Sample previous = null;
+        for (Sample s : samples) {
+            if (s.timeMs < nowMs - WINDOW_MS) continue;
+            if (previous != null) {
+                long dt = s.timeMs - previous.timeMs;
+                if (dt > 0 && dt <= MAX_GAP_MS) {
+                    distanceKm += (previous.speedKmh + s.speedKmh) / 2 * (dt / 3_600_000.0);
+                    covered += dt;
+                }
+            }
+            previous = s;
+        }
+        if (covered < MIN_WINDOW_MS) return null;
+        return distanceKm / (covered / 3_600_000.0);
+    }
+
+    synchronized void clear() {
+        samples.clear();
+        tripEnergyKwh = 0;
+        tripDistanceKm = 0;
+        tripLast = null;
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/SecurePrefs.java b/app/src/main/java/com/evsuite/abrp/SecurePrefs.java
new file mode 100644
index 0000000..d4ced58
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/SecurePrefs.java
@@ -0,0 +1,99 @@
+package com.evsuite.abrp;
+
+import android.content.Context;
+import android.content.SharedPreferences;
+import android.util.Log;
+
+import androidx.security.crypto.EncryptedSharedPreferences;
+import androidx.security.crypto.MasterKey;
+
+import java.util.HashMap;
+import java.util.Map;
+
+/**
+ * Encrypted storage for the server settings — above all the ingest token, which `adb backup`
+ * would otherwise hand out with the regular SharedPreferences file. Backed by an
+ * AndroidKeyStore master key.
+ *
+ * If the keystore fails, the settings go to a plaintext file for that run rather than the app
+ * crashing on the head unit. The next run that opens the encrypted store moves them back in
+ * and deletes the file ({@link #mergePlaintext}), so a token saved meanwhile is neither lost
+ * nor left in plaintext.
+ */
+final class SecurePrefs {
+
+    private static final String TAG        = "SecurePrefs";
+    private static final String FILE_NAME  = "server_secure_prefs";
+    private static final String PLAIN_NAME = "server_prefs";
+
+    private static SharedPreferences instance;
+
+    private SecurePrefs() { }
+
+    /**
+     * Encrypted preferences, or a plaintext file if the crypto stack is unavailable. Falling
+     * back keeps the app usable on a head unit with a broken keystore instead of crashing it.
+     */
+    static synchronized SharedPreferences get(Context context) {
+        if (instance != null) return instance;
+        Context app = context.getApplicationContext();
+        try {
+            MasterKey masterKey = new MasterKey.Builder(app)
+                    .setKeyScheme(MasterKey.KeyScheme.AES256_GCM)
+                    .build();
+            SharedPreferences encrypted = EncryptedSharedPreferences.create(
+                    app,
+                    FILE_NAME,
+                    masterKey,
+                    EncryptedSharedPreferences.PrefKeyEncryptionScheme.AES256_SIV,
+                    EncryptedSharedPreferences.PrefValueEncryptionScheme.AES256_GCM);
+            migrateFromPlaintext(app, encrypted);
+            instance = encrypted;
+        } catch (Exception e) {
+            Log.e(TAG, "Encrypted preferences unavailable, falling back to plaintext", e);
+            instance = app.getSharedPreferences(PLAIN_NAME, Context.MODE_PRIVATE);
+        }
+        return instance;
+    }
+
+    /** Moves what a fallback run wrote into the encrypted store, then deletes the plaintext. */
+    private static void migrateFromPlaintext(Context app, SharedPreferences encrypted) {
+        SharedPreferences plain = app.getSharedPreferences(PLAIN_NAME, Context.MODE_PRIVATE);
+        Map<String, ?> leftover = plain.getAll();
+        if (leftover.isEmpty()) return;
+        Map<String, String> moves = mergePlaintext(strings(leftover), strings(encrypted.getAll()));
+        SharedPreferences.Editor edit = encrypted.edit();
+        for (Map.Entry<String, String> e : moves.entrySet()) edit.putString(e.getKey(), e.getValue());
+        if (edit.commit()) {
+            plain.edit().clear().commit();
+            Log.i(TAG, "Moved " + moves.size() + " setting(s) from plaintext into encrypted storage");
+        }
+    }
+
+    /**
+     * What to write into the encrypted store from a fallback run's plaintext file. The plaintext
+     * is newer, so its URL and token win — that is a pairing done while the keystore was down.
+     * The installation id is the exception: the encrypted one is what the car's history is
+     * stored under, and a fallback run may only have made up a new one.
+     */
+    static Map<String, String> mergePlaintext(Map<String, String> plain, Map<String, String> encrypted) {
+        Map<String, String> moves = new HashMap<>();
+        for (Map.Entry<String, String> e : plain.entrySet()) {
+            if (e.getValue() == null) continue;
+            String existing = encrypted.get(e.getKey());
+            if (ServerConfig.KEY_INSTALLATION_ID.equals(e.getKey()) && existing != null && !existing.isEmpty()) {
+                continue;
+            }
+            moves.put(e.getKey(), e.getValue());
+        }
+        return moves;
+    }
+
+    private static Map<String, String> strings(Map<String, ?> all) {
+        Map<String, String> out = new HashMap<>();
+        for (Map.Entry<String, ?> e : all.entrySet()) {
+            if (e.getValue() instanceof String) out.put(e.getKey(), (String) e.getValue());
+        }
+        return out;
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/ServerConfig.java b/app/src/main/java/com/evsuite/abrp/ServerConfig.java
new file mode 100644
index 0000000..7a94d42
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/ServerConfig.java
@@ -0,0 +1,132 @@
+package com.evsuite.abrp;
+
+import android.content.Context;
+import android.content.SharedPreferences;
+
+import java.util.Locale;
+import java.util.UUID;
+import java.util.regex.Pattern;
+
+/**
+ * Where the car's data goes: the server URL, its ingest token, and the installation id the
+ * data is stored under. Entered in the Server tab or imported from a config file, kept in
+ * {@link SecurePrefs}.
+ *
+ * Read through {@link #get}, which caches one immutable snapshot for the process and is
+ * replaced on {@link #save}: the service and the activity both see a change at once, without
+ * a restart.
+ */
+final class ServerConfig {
+
+    static final String KEY_URL             = "server_url";
+    static final String KEY_TOKEN           = "ingest_token";
+    static final String KEY_INSTALLATION_ID = "installation_id";
+
+    /** Same rule as the server: a version 1–5 UUID with the RFC 4122 variant. */
+    private static final Pattern UUID_PATTERN = Pattern.compile(
+            "^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$",
+            Pattern.CASE_INSENSITIVE);
+
+    /** Pre-filled so pairing needs no typing in the car; can still be changed. */
+    static final String DEFAULT_URL = "https://car.k8s.stinnesbeck.com";
+
+    /** The server refuses shorter ingest tokens outright. */
+    static final int MIN_TOKEN_LENGTH = 24;
+
+    final String url;
+    final String token;
+    final String installationId;
+
+    private static volatile ServerConfig current;
+
+    ServerConfig(String url, String token, String installationId) {
+        this.url = url;
+        this.token = token;
+        this.installationId = installationId;
+    }
+
+    boolean isConfigured() {
+        return !url.isEmpty() && !token.isEmpty();
+    }
+
+    // ANDROID_ID on purpose: it is hashed into the installation id, so a reinstall keeps its
+    // history (installationIdFor). It is never sent or logged as it is.
+    @android.annotation.SuppressLint("HardwareIds")
+    static ServerConfig get(Context context) {
+        ServerConfig config = current;
+        if (config != null) return config;
+        synchronized (ServerConfig.class) {
+            if (current != null) return current;
+            SharedPreferences prefs = SecurePrefs.get(context);
+            String id = prefs.getString(KEY_INSTALLATION_ID, "");
+            if (!isValidInstallationId(id)) {
+                // First start, or the first after a reinstall: derived from the head unit, so
+                // the history stays under the same id (see installationIdFor).
+                String androidId = null;
+                try {
+                    androidId = android.provider.Settings.Secure.getString(
+                            context.getApplicationContext().getContentResolver(),
+                            android.provider.Settings.Secure.ANDROID_ID);
+                } catch (RuntimeException ignored) {
+                    // no id from the platform: a random one below
+                }
+                id = installationIdFor(androidId);
+                if (id == null) id = UUID.randomUUID().toString();
+                prefs.edit().putString(KEY_INSTALLATION_ID, id).apply();
+            }
+            current = new ServerConfig(prefs.getString(KEY_URL, DEFAULT_URL), prefs.getString(KEY_TOKEN, ""), id);
+            return current;
+        }
+    }
+
+    /** Stores already-validated values; see {@link #validate}. */
+    static synchronized void save(Context context, String url, String token, String installationId) {
+        SecurePrefs.get(context).edit()
+                .putString(KEY_URL, url)
+                .putString(KEY_TOKEN, token)
+                .putString(KEY_INSTALLATION_ID, installationId)
+                .apply();
+        current = new ServerConfig(url, token, installationId);
+    }
+
+    // ---------- Validation (pure, unit-tested) ----------
+
+    /**
+     * The URL as it will be used: trimmed, without a trailing slash. Null when it is not an
+     * https URL with a host — the token travels in a header, so plain http is refused.
+     */
+    static String normalizeUrl(String raw) {
+        if (raw == null) return null;
+        String url = raw.trim();
+        while (url.endsWith("/")) url = url.substring(0, url.length() - 1);
+        if (!url.toLowerCase(Locale.US).startsWith("https://")) return null;
+        String rest = url.substring("https://".length());
+        if (rest.isEmpty() || rest.startsWith("/") || rest.contains(" ") || rest.contains("?")
+                || rest.contains("#") || rest.contains("@")) return null;
+        return url;
+    }
+
+    static boolean isValidToken(String token) {
+        return token != null && token.trim().length() >= MIN_TOKEN_LENGTH && !token.trim().contains(" ");
+    }
+
+    /**
+     * The installation id for a head unit, or null without a usable ANDROID_ID. From Android 8
+     * ANDROID_ID is fixed per device and signing key and survives an uninstall, so a
+     * reinstall of the same platform-signed build finds its history again without importing
+     * the id. Hashed into a name-based UUID: the server expects a UUID, and the raw
+     * ANDROID_ID never leaves the car. An id already stored (or imported) always wins over it.
+     */
+    static String installationIdFor(String androidId) {
+        if (androidId == null) return null;
+        String trimmed = androidId.trim();
+        // The emulator-era constant that many devices once shared; not an identity.
+        if (trimmed.isEmpty() || trimmed.equalsIgnoreCase("9774d56d682e549c")) return null;
+        byte[] name = ("nilsmg4:" + trimmed.toLowerCase(Locale.US)).getBytes(java.nio.charset.StandardCharsets.UTF_8);
+        return UUID.nameUUIDFromBytes(name).toString();
+    }
+
+    static boolean isValidInstallationId(String id) {
+        return id != null && UUID_PATTERN.matcher(id.trim()).matches();
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/ServerHttp.java b/app/src/main/java/com/evsuite/abrp/ServerHttp.java
new file mode 100644
index 0000000..96d8526
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/ServerHttp.java
@@ -0,0 +1,97 @@
+package com.evsuite.abrp;
+
+import org.json.JSONObject;
+
+import java.io.ByteArrayOutputStream;
+import java.io.InputStream;
+import java.io.OutputStream;
+import java.net.HttpURLConnection;
+import java.net.URL;
+import java.nio.charset.StandardCharsets;
+
+/**
+ * One JSON request to the car server, shared by telemetry, consumption sync and pairing (and,
+ * through {@link #send}, the direct ABRP upload).
+ * Blocking, with short timeouts — call it off the main thread.
+ *
+ * The token goes in the Authorization header, never the URL, and is never logged. The answer
+ * body is read for every status (error bodies name the problem) and capped, so a wrong server
+ * cannot fill memory.
+ */
+final class ServerHttp {
+
+    static final int TIMEOUT_MS = 8_000;
+    private static final int MAX_BODY_BYTES = 64 * 1024;
+
+    /** Status and body of an answer. */
+    static final class Response {
+        final int status;
+        final String body;
+
+        Response(int status, String body) {
+            this.status = status;
+            this.body = body;
+        }
+
+        boolean ok() { return status >= 200 && status < 300; }
+
+        /** The body for a log line: short, on one line. */
+        String excerpt() {
+            String text = body.replace('\n', ' ').trim();
+            return text.length() > 300 ? text.substring(0, 300) + "…" : text;
+        }
+    }
+
+    private ServerHttp() { }
+
+    /**
+     * Sends {@code json} (or nothing, when null) with {@code method} to {@code url}.
+     * {@code token} may be null for the unauthenticated pairing calls.
+     */
+    static Response request(String method, String url, String token, JSONObject json) throws Exception {
+        byte[] body = json == null ? null : json.toString().getBytes(StandardCharsets.UTF_8);
+        return send(method, url, token == null ? null : "Bearer " + token, "application/json", body);
+    }
+
+    /**
+     * The request underneath, also used for ABRP ({@link AbrpApi}): {@code authorization} is the
+     * whole header value or null, {@code body} null for none.
+     */
+    static Response send(String method, String url, String authorization, String contentType, byte[] body)
+            throws Exception {
+        HttpURLConnection connection = (HttpURLConnection) new URL(url).openConnection();
+        try {
+            connection.setRequestMethod(method);
+            connection.setConnectTimeout(TIMEOUT_MS);
+            connection.setReadTimeout(TIMEOUT_MS);
+            if (authorization != null) connection.setRequestProperty("Authorization", authorization);
+            if (body != null) {
+                connection.setDoOutput(true);
+                connection.setFixedLengthStreamingMode(body.length);
+                connection.setRequestProperty("Content-Type", contentType);
+                try (OutputStream out = connection.getOutputStream()) { out.write(body); }
+            }
+            int status = connection.getResponseCode();
+            return new Response(status, readBody(connection, status));
+        } finally {
+            connection.disconnect();
+        }
+    }
+
+    private static String readBody(HttpURLConnection connection, int status) {
+        try {
+            InputStream in = status < 400 ? connection.getInputStream() : connection.getErrorStream();
+            if (in == null) return "";
+            try (InputStream stream = in) {
+                ByteArrayOutputStream buf = new ByteArrayOutputStream();
+                byte[] chunk = new byte[4096];
+                int n;
+                while ((n = stream.read(chunk)) != -1 && buf.size() < MAX_BODY_BYTES) buf.write(chunk, 0, n);
+                return buf.toString(StandardCharsets.UTF_8.name());
+            }
+        } catch (Exception e) {
+            // The status is what matters; an unreadable body is just empty.
+            return "";
+        }
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/StableScrollView.java b/app/src/main/java/com/evsuite/abrp/StableScrollView.java
new file mode 100644
index 0000000..bf56944
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/StableScrollView.java
@@ -0,0 +1,59 @@
+package com.evsuite.abrp;
+
+import android.content.Context;
+import android.util.AttributeSet;
+import android.widget.ScrollView;
+
+/**
+ * A ScrollView that keeps the position the driver scrolled to.
+ *
+ * The pages live in ViewPager2's RecyclerView. When the live values change, the tiles ask for
+ * a new layout, and the RecyclerView lays the pages out once already while it is still
+ * measuring, with a provisional height at which the content seems to fit. ScrollView.onLayout
+ * then clamps the scroll position to 0, and the real layout that follows keeps it there: every
+ * refresh threw the page back to the top (seen in a stack trace on the emulator).
+ *
+ * Here only scrolling that is not part of a layout counts as the driver's position, and every
+ * layout restores it. ScrollView.scrollTo clamps against the real content height, so a
+ * position that no longer exists still ends at the bottom rather than past it.
+ *
+ * No scroll bar: a ScrollView shows its bar on every layout, and the live values lay the page
+ * out every two seconds, so on the car it never faded. The pages scroll by touch.
+ */
+public class StableScrollView extends ScrollView {
+
+    private int wantedScrollY;
+    private boolean inLayout;
+
+    public StableScrollView(Context context) {
+        super(context);
+        setVerticalScrollBarEnabled(false);
+    }
+
+    public StableScrollView(Context context, AttributeSet attrs) {
+        super(context, attrs);
+        setVerticalScrollBarEnabled(false);
+    }
+
+    public StableScrollView(Context context, AttributeSet attrs, int defStyleAttr) {
+        super(context, attrs, defStyleAttr);
+        setVerticalScrollBarEnabled(false);
+    }
+
+    @Override
+    protected void onScrollChanged(int l, int t, int oldl, int oldt) {
+        super.onScrollChanged(l, t, oldl, oldt);
+        if (!inLayout) wantedScrollY = t;
+    }
+
+    @Override
+    protected void onLayout(boolean changed, int l, int t, int r, int b) {
+        inLayout = true;
+        try {
+            super.onLayout(changed, l, t, r, b);
+            if (getScrollY() != wantedScrollY) scrollTo(getScrollX(), wantedScrollY);
+        } finally {
+            inLayout = false;
+        }
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/SteeringKeyListener.java b/app/src/main/java/com/evsuite/abrp/SteeringKeyListener.java
new file mode 100644
index 0000000..080955b
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/SteeringKeyListener.java
@@ -0,0 +1,104 @@
+package com.evsuite.abrp;
+
+import android.content.BroadcastReceiver;
+import android.content.Context;
+import android.content.Intent;
+import android.content.IntentFilter;
+import android.content.SharedPreferences;
+import android.os.Bundle;
+import android.util.Log;
+import android.view.KeyEvent;
+
+/**
+ * Opens the app on a double press of the steering wheel's voice key.
+ *
+ * The head unit reports steering-wheel keys as the broadcast {@link #ACTION}; code 287 is the
+ * voice key (see EVHardware's PhysicalButtonEventDecoder). The extras' format was read off the
+ * car (see {@link SteeringKeyReport}).
+ *
+ * Registered by the always-on service on the main thread; never throws into the head unit.
+ */
+final class SteeringKeyListener {
+
+    static final String ACTION = "com.saic.keyevent.hardkey.report";
+    static final int VOICE_KEY = 287;
+    private static final String TAG = "NilsMG4.SteeringKey";
+
+    private final Context context;
+    private final SharedPreferences prefs;
+    private final DoublePressDetector detector = new DoublePressDetector(VOICE_KEY);
+    private boolean registered;
+
+    private final BroadcastReceiver receiver = new BroadcastReceiver() {
+        @Override
+        public void onReceive(Context c, Intent intent) {
+            try {
+                handle(intent);
+            } catch (RuntimeException e) {
+                Log.w(TAG, "Key broadcast not handled: " + e);
+            }
+        }
+    };
+
+    SteeringKeyListener(Context context, SharedPreferences prefs) {
+        this.context = context.getApplicationContext();
+        this.prefs = prefs;
+    }
+
+    void register() {
+        try {
+            // Exported on purpose: the report comes from the head unit's own key service, another
+            // app. The flag is required from API 33 and absent on this API-28 head unit;
+            // ContextCompat picks the right call for the platform underneath.
+            androidx.core.content.ContextCompat.registerReceiver(context, receiver, new IntentFilter(ACTION),
+                    androidx.core.content.ContextCompat.RECEIVER_EXPORTED);
+            registered = true;
+        } catch (RuntimeException e) {
+            Log.w(TAG, "Key broadcasts not available: " + e);
+        }
+    }
+
+    void unregister() {
+        if (!registered) return;
+        try {
+            context.unregisterReceiver(receiver);
+        } catch (RuntimeException ignored) {
+            // already gone
+        }
+        registered = false;
+    }
+
+    private void handle(Intent intent) {
+        Bundle extras = intent.getExtras();
+        SteeringKeyReport key = read(extras);
+        boolean opens = false;
+        if (key.code != null && UploadSettings.voiceKeyOpensApp(prefs)) {
+            opens = detector.accept(key.code, key.down, key.longPress, android.os.SystemClock.elapsedRealtime());
+        }
+        if (opens) {
+            try {
+                context.startActivity(new Intent(context, MainActivity.class)
+                        .addFlags(Intent.FLAG_ACTIVITY_NEW_TASK | Intent.FLAG_ACTIVITY_REORDER_TO_FRONT));
+            } catch (RuntimeException e) {
+                Log.w(TAG, "App not opened: " + e);
+            }
+        }
+    }
+
+    // ---------- Reading the broadcast ----------
+
+    /** An embedded KeyEvent if there is one, otherwise the extras by name (SteeringKeyReport). */
+    static SteeringKeyReport read(Bundle extras) {
+        if (extras == null) return SteeringKeyReport.parse(null);
+        java.util.Map<String, Object> values = new java.util.HashMap<>();
+        for (String k : extras.keySet()) {
+            Object v = extras.get(k);
+            if (v instanceof KeyEvent) {
+                KeyEvent e = (KeyEvent) v;
+                return new SteeringKeyReport(e.getKeyCode(), e.getAction() == KeyEvent.ACTION_DOWN, e.isLongPress());
+            }
+            values.put(k, v);
+        }
+        return SteeringKeyReport.parse(values);
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/SteeringKeyReport.java b/app/src/main/java/com/evsuite/abrp/SteeringKeyReport.java
new file mode 100644
index 0000000..eb864de
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/SteeringKeyReport.java
@@ -0,0 +1,82 @@
+package com.evsuite.abrp;
+
+import java.util.HashMap;
+import java.util.Locale;
+import java.util.Map;
+
+/**
+ * Reads one steering-wheel key report from the broadcast's extras.
+ *
+ * Seen on the MG4 (2026-10-17, on-screen key log): the head unit sends
+ *   android.intent.extra.hardkey.keycode   = 287   (Integer)
+ *   android.intent.extra.hardkey.down      = true  (Boolean, then false on release)
+ *   android.intent.extra.hardkey.longpress = false (Boolean)
+ * Names are matched on their last dot-separated part, case-insensitively, so this exact form
+ * and simpler ones ("keyCode", "down", …) are both understood.
+ *
+ * Android-free (the extras arrive as a plain map), unit-tested.
+ */
+final class SteeringKeyReport {
+
+    final Integer code;
+    final Boolean down;
+    final boolean longPress;
+
+    SteeringKeyReport(Integer code, Boolean down, boolean longPress) {
+        this.code = code;
+        this.down = down;
+        this.longPress = longPress;
+    }
+
+    private static final String[] CODE_NAMES = {"keycode", "key_code", "keyvalue", "key_value", "code", "key"};
+    private static final String[] ACTION_NAMES = {"keyaction", "key_action", "action", "keystate", "key_state",
+            "state", "event", "type"};
+    private static final String[] DOWN_NAMES = {"down", "isdown", "pressed", "ispressed"};
+    private static final String[] LONG_NAMES = {"longpress", "islongpress", "long_press", "islong", "long"};
+
+    static SteeringKeyReport parse(Map<String, Object> extras) {
+        Map<String, Object> byName = new HashMap<>();
+        if (extras != null) {
+            for (Map.Entry<String, Object> e : extras.entrySet()) {
+                String key = e.getKey();
+                String last = key.substring(key.lastIndexOf('.') + 1).toLowerCase(Locale.US);
+                byName.putIfAbsent(last, e.getValue());
+            }
+        }
+        Integer code = firstInt(byName, CODE_NAMES);
+        Boolean down = null;
+        boolean longPress = false;
+        // KeyEvent's own convention for a numeric action: 0 down, 1 up; anything else is long.
+        Integer action = firstInt(byName, ACTION_NAMES);
+        if (action != null) {
+            if (action == 0) down = true;
+            else if (action == 1) down = false;
+            else longPress = true;
+        }
+        Boolean explicitDown = firstBoolean(byName, DOWN_NAMES);
+        if (explicitDown != null) down = explicitDown;
+        Boolean explicitLong = firstBoolean(byName, LONG_NAMES);
+        if (explicitLong != null) longPress = explicitLong;
+        return new SteeringKeyReport(code, down, longPress);
+    }
+
+    private static Integer firstInt(Map<String, Object> byName, String[] names) {
+        for (String n : names) {
+            Object v = byName.get(n);
+            if (v instanceof Integer) return (Integer) v;
+            if (v instanceof Long) return (int) (long) (Long) v;
+            if (v instanceof String) {
+                try { return Integer.parseInt(((String) v).trim()); } catch (NumberFormatException ignored) { }
+            }
+        }
+        return null;
+    }
+
+    private static Boolean firstBoolean(Map<String, Object> byName, String[] names) {
+        for (String n : names) {
+            Object v = byName.get(n);
+            if (v instanceof Boolean) return (Boolean) v;
+        }
+        return null;
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/TelemetryPayload.java b/app/src/main/java/com/evsuite/abrp/TelemetryPayload.java
new file mode 100644
index 0000000..031431f
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/TelemetryPayload.java
@@ -0,0 +1,267 @@
+package com.evsuite.abrp;
+
+import org.json.JSONException;
+import org.json.JSONObject;
+
+/**
+ * Builds one live telemetry sample in ABRP's tlm format. The car server stores it and forwards
+ * the newest one to ABRP, so the field names and units are exactly ABRP's.
+ *
+ * Kept free of Android types so it can be unit-tested on the JVM: the caller
+ * pulls the values out of the car adapter and the Location, this class only
+ * decides what ends up in the payload.
+ *
+ * Every vehicle field is nullable and a null field is OMITTED. A property that
+ * cannot be read is not a zero: sending soc:0 because a getter threw tells ABRP
+ * the battery is empty and wrecks the user's route plan.
+ *
+ * Fields are set by name rather than passed positionally. The payload now carries
+ * 24 optional values and a positional build(...) call had become a wall of nulls
+ * that no reader could check against the ABRP field list.
+ */
+final class TelemetryPayload {
+
+    /** Only value that is always present. Epoch SECONDS, not milliseconds. */
+    private final long utc;
+
+    // --- High priority (ABRP: "many features will only be usable with enough data") ---
+    Integer soc;             // %
+    Float   speedKmh;        // km/h
+    Float   powerKw;         // kW, ABRP sign: positive leaving the battery
+    Boolean charging;
+    Boolean dcfc;
+    Boolean parked;
+    Double  lat;             // °
+    Double  lon;             // °
+
+    // --- Lower priority ---
+    Integer rangeKm;         // km, vehicle's own estimate
+    Float   cabinTemp;       // °C
+    Float   battTempC;       // °C, traction battery
+    Float   capacityKwh;     // kWh, usable pack capacity
+    Float   soeKwh;          // kWh, energy currently in the pack
+    Double  kwhCharged;      // kWh, taken by the pack during the current charge session
+    Float   extTempC;        // °C, outside
+    Float   voltageV;        // V, traction battery
+    Float   currentA;        // A, traction battery
+    Float   odometerKm;      // km
+    Float   hvacSetpointC;   // °C, climate setpoint
+    Float   tirePressureFlKpa;
+    Float   tirePressureFrKpa;
+    Float   tirePressureRlKpa;
+    Float   tirePressureRrKpa;
+    Double  elevation;       // m
+    Float   heading;         // °
+
+    TelemetryPayload(long utc) {
+        this.utc = utc;
+    }
+
+    /** Build the {@code tlm} JSON object. Only utc is always present. */
+    String build() {
+        JSONObject tlm = new JSONObject();
+        try {
+            tlm.put("utc", utc);
+
+            putIfPresent(tlm, "soc", soc);
+            // Reversing reads negative; ABRP and the server take speed as a magnitude.
+            putIfPresent(tlm, "speed", speedKmh == null ? null : Math.round(Math.abs(speedKmh)));
+            putIfPresent(tlm, "est_battery_range", rangeKm);
+            if (powerKw != null) tlm.put("power", round2(powerKw));
+            putIfPresent(tlm, "is_charging", boolToInt(charging));
+            putIfPresent(tlm, "is_dcfc", boolToInt(dcfc));
+            putIfPresent(tlm, "is_parked", boolToInt(parked));
+
+            // Only send cabin_temp if we got a plausible reading — 0.0 likely
+            // means the property isn't supported on this VHAL.
+            if (isPlausibleTemp(cabinTemp)) {
+                tlm.put("cabin_temp", Math.round(cabinTemp));
+            }
+            // Same guard for the pack: a VHAL that does not implement the property
+            // answers 0.0, and "battery at 0 °C" is a reading ABRP acts on.
+            if (isPlausibleTemp(battTempC)) {
+                tlm.put("batt_temp", Math.round(battTempC));
+            }
+            // hvac_setpoint is a user setting, so 0 °C is not a real value either —
+            // no cabin climate control is ever set to freezing.
+            if (isPlausibleTemp(hvacSetpointC)) {
+                tlm.put("hvac_setpoint", Math.round(hvacSetpointC));
+            }
+
+            // A pack cannot hold 0 kWh and a car cannot have driven 0 km by the time
+            // it runs this app: both zeros mean "property not implemented".
+            if (capacityKwh != null && capacityKwh > 0f) {
+                tlm.put("capacity", round2(capacityKwh));
+            }
+            if (odometerKm != null && odometerKm > 0f) {
+                tlm.put("odometer", Math.round(odometerKm));
+            }
+            // Same reasoning as capacity: a car that is running this app has some energy
+            // in its pack, so 0 kWh is the VHAL saying it does not implement the property.
+            if (soeKwh != null && soeKwh > 0f) {
+                tlm.put("soe", round2(soeKwh));
+            }
+            // 0.0 IS meaningful here — it is a charge session that has just begun — so
+            // This one is guarded on null only. EVHardware's charging-session meter sends
+            // null between sessions.
+            if (kwhCharged != null) {
+                tlm.put("kwh_charged", kwhCharged.doubleValue());
+            }
+            if (isPlausibleTemp(extTempC)) {
+                tlm.put("ext_temp", Math.round(extTempC));
+            }
+            // A pack under load is never at 0 V; 0 is the property not being implemented.
+            if (voltageV != null && voltageV > 0f && voltageV < 1500f) {
+                tlm.put("voltage", round2(voltageV));
+            }
+            // 0 A is a real reading (idle), so this one is guarded on range only.
+            if (currentA != null && currentA > -2000f && currentA < 2000f) {
+                tlm.put("current", round2(currentA));
+            }
+
+            putIfPresent(tlm, "tire_pressure_fl", kpa(tirePressureFlKpa));
+            putIfPresent(tlm, "tire_pressure_fr", kpa(tirePressureFrKpa));
+            putIfPresent(tlm, "tire_pressure_rl", kpa(tirePressureRlKpa));
+            putIfPresent(tlm, "tire_pressure_rr", kpa(tirePressureRrKpa));
+
+            if (lat != null && lon != null) {
+                tlm.put("lat", lat.doubleValue());
+                tlm.put("lon", lon.doubleValue());
+                putIfPresent(tlm, "elevation", elevation == null ? null : Math.round(elevation));
+                putIfPresent(tlm, "heading", heading == null ? null : Math.round(heading));
+            }
+        } catch (JSONException e) {
+            // JSONObject.put only throws on NaN/Infinity values, which the guards above
+            // already exclude. Returning just the timestamp keeps the upload alive.
+            return "{\"utc\":" + utc + "}";
+        }
+        dropOutOfRange(tlm);
+        return tlm.toString();
+    }
+
+    /**
+     * The server's range for every numeric field (server/model.go, telemetryNumbers). A value
+     * outside it is left out here, as an unread one would be: the server would drop it anyway,
+     * and an older server rejects the whole batch for it.
+     */
+    static final java.util.Map<String, double[]> SERVER_LIMITS = new java.util.HashMap<>();
+    static {
+        SERVER_LIMITS.put("soc", new double[]{0, 100});
+        SERVER_LIMITS.put("speed", new double[]{0, 400});
+        SERVER_LIMITS.put("power", new double[]{-1000, 1000});
+        SERVER_LIMITS.put("est_battery_range", new double[]{0, 2000});
+        SERVER_LIMITS.put("capacity", new double[]{0, 500});
+        SERVER_LIMITS.put("soe", new double[]{0, 500});
+        SERVER_LIMITS.put("kwh_charged", new double[]{0, 1000});
+        SERVER_LIMITS.put("odometer", new double[]{0, 10_000_000});
+        SERVER_LIMITS.put("lat", new double[]{-90, 90});
+        SERVER_LIMITS.put("lon", new double[]{-180, 180});
+        SERVER_LIMITS.put("elevation", new double[]{-1000, 10_000});
+        SERVER_LIMITS.put("heading", new double[]{0, 360});
+        SERVER_LIMITS.put("batt_temp", new double[]{-60, 100});
+        SERVER_LIMITS.put("cabin_temp", new double[]{-60, 100});
+        SERVER_LIMITS.put("ext_temp", new double[]{-60, 70});
+        SERVER_LIMITS.put("hvac_setpoint", new double[]{0, 40});
+        SERVER_LIMITS.put("voltage", new double[]{0, 1500});
+        SERVER_LIMITS.put("current", new double[]{-2000, 2000});
+        SERVER_LIMITS.put("tire_pressure_fl", new double[]{0, 1000});
+        SERVER_LIMITS.put("tire_pressure_fr", new double[]{0, 1000});
+        SERVER_LIMITS.put("tire_pressure_rl", new double[]{0, 1000});
+        SERVER_LIMITS.put("tire_pressure_rr", new double[]{0, 1000});
+    }
+
+    private static void dropOutOfRange(JSONObject tlm) {
+        for (java.util.Map.Entry<String, double[]> limit : SERVER_LIMITS.entrySet()) {
+            String key = limit.getKey();
+            if (!tlm.has(key)) continue;
+            double value = tlm.optDouble(key, Double.NaN);
+            if (Double.isNaN(value) || value < limit.getValue()[0] || value > limit.getValue()[1]) tlm.remove(key);
+        }
+        // A position is only a position as a pair.
+        if (tlm.has("lat") != tlm.has("lon")) {
+            tlm.remove("lat");
+            tlm.remove("lon");
+        }
+    }
+
+    /** Epoch seconds the server accepts: from 2001. Earlier means the head unit's clock is not set yet. */
+    static final long MIN_UTC = 1_000_000_000L;
+
+    static boolean isPlausibleUtc(long utcSeconds) {
+        return utcSeconds >= MIN_UTC;
+    }
+
+    /**
+     * True for a temperature that a sensor could actually have measured. Excludes exactly
+     * 0.0, which is what an unimplemented VHAL property returns — see cabin_temp above.
+     *
+     * Package-private because the service asks the same question before deciding whether to
+     * look for an outside temperature somewhere other than the car.
+     */
+    static boolean isPlausibleTemp(Float celsius) {
+        return celsius != null && celsius > -50f && celsius < 80f && celsius != 0f;
+    }
+
+    /**
+     * Rounded kPa, or null when the reading is outside anything a road tyre reports.
+     * A flat tyre still reads well above zero, so 0 means the wheel has no sensor.
+     */
+    private static Integer kpa(Float pressure) {
+        if (pressure == null || pressure < 50f || pressure > 500f) return null;
+        return Math.round(pressure);
+    }
+
+    private static void putIfPresent(JSONObject json, String key, Object value)
+            throws JSONException {
+        if (value != null) json.put(key, value);
+    }
+
+    private static Integer boolToInt(Boolean value) {
+        return value == null ? null : (value ? 1 : 0);
+    }
+
+    /** ABRP expects kW with 2 decimals; avoids a locale-dependent String.format. */
+    private static double round2(float value) {
+        return Math.round(value * 100.0) / 100.0;
+    }
+
+    /**
+     * Every field {@link #build()} can emit, in the order the summary lists them.
+     * Used only to work out what was left out — see {@link #summarize(String)}.
+     */
+    private static final String[] ALL_FIELDS = {
+            "utc", "soc", "speed", "power", "est_battery_range", "cabin_temp",
+            "batt_temp", "hvac_setpoint", "capacity", "soe", "kwh_charged", "odometer",
+            "is_charging", "is_dcfc", "is_parked", "lat", "lon", "elevation", "heading",
+            "tire_pressure_fl", "tire_pressure_fr", "tire_pressure_rl", "tire_pressure_rr",
+            "ext_temp", "voltage", "current",
+    };
+
+    /**
+     * One-line, human-readable digest of an upload: what was sent, and what was left out.
+     *
+     * Derived from the JSON that actually goes on the wire rather than from the fields
+     * above, so it cannot drift away from the payload it claims to describe — which is
+     * the whole point of having it when a value on the ABRP side looks wrong.
+     */
+    static String summarize(String tlmJson) {
+        JSONObject tlm;
+        try {
+            tlm = new JSONObject(tlmJson);
+        } catch (JSONException e) {
+            return "unparseable payload: " + tlmJson;
+        }
+        StringBuilder sent = new StringBuilder();
+        StringBuilder omitted = new StringBuilder();
+        for (String field : ALL_FIELDS) {
+            if (tlm.has(field)) {
+                if (sent.length() > 0) sent.append(' ');
+                sent.append(field).append('=').append(tlm.opt(field));
+            } else {
+                if (omitted.length() > 0) omitted.append(',');
+                omitted.append(field);
+            }
+        }
+        return sent + (omitted.length() == 0 ? "" : " | omitted: " + omitted);
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/TelemetryQueue.java b/app/src/main/java/com/evsuite/abrp/TelemetryQueue.java
new file mode 100644
index 0000000..a93d827
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/TelemetryQueue.java
@@ -0,0 +1,112 @@
+package com.evsuite.abrp;
+
+import java.util.ArrayDeque;
+import java.util.ArrayList;
+import java.util.List;
+
+/**
+ * Live samples waiting to reach the server, oldest first.
+ *
+ * Bounded: while the car is offline the oldest samples are dropped once {@link #capacity}
+ * is reached, so a long dead spot costs the start of the gap, never the head unit's memory.
+ * Kept in memory and saved to a file now and then (TelemetryUploader), so a reboot or a
+ * killed process on the way through a dead spot does not lose the drive. {@link #encode} and
+ * {@link #decode} are the file format: a JSON array of the samples as they are sent.
+ *
+ * Free of Android types so the policy is unit-tested on the JVM.
+ */
+final class TelemetryQueue {
+
+    /** About eight hours at one sample per 15-second tick. */
+    static final int DEFAULT_CAPACITY = 2000;
+    /** The server takes at most 500 samples per request. */
+    static final int MAX_BATCH = 500;
+
+    private final int capacity;
+    private final ArrayDeque<String> samples = new ArrayDeque<>();
+    private int dropped;
+
+    TelemetryQueue() { this(DEFAULT_CAPACITY); }
+
+    TelemetryQueue(int capacity) { this.capacity = capacity; }
+
+    /** Counts every change, so the owner can tell whether there is anything new to save. */
+    private long version;
+
+    synchronized void add(String sampleJson) {
+        version++;
+        if (samples.size() >= capacity) {
+            samples.removeFirst();
+            dropped++;
+        }
+        samples.addLast(sampleJson);
+    }
+
+    /** Up to {@link #MAX_BATCH} of the oldest samples, still queued until {@link #remove}. */
+    synchronized List<String> peekBatch() {
+        List<String> batch = new ArrayList<>(Math.min(samples.size(), MAX_BATCH));
+        for (String sample : samples) {
+            if (batch.size() >= MAX_BATCH) break;
+            batch.add(sample);
+        }
+        return batch;
+    }
+
+    /** Drops the oldest {@code count} samples once the server has confirmed them. */
+    synchronized void remove(int count) {
+        if (count > 0) version++;
+        for (int i = 0; i < count && !samples.isEmpty(); i++) samples.removeFirst();
+    }
+
+    /** The newest sample, or null when the queue is empty; it stays queued. */
+    synchronized String newest() { return samples.peekLast(); }
+
+    synchronized int size() { return samples.size(); }
+
+    synchronized long version() { return version; }
+
+    /** Every queued sample, oldest first, as {@link #encode} writes them. */
+    synchronized String encode() {
+        org.json.JSONArray array = new org.json.JSONArray();
+        for (String sample : samples) array.put(sample);
+        return array.toString();
+    }
+
+    /**
+     * Puts saved samples back in front of anything queued since, oldest first and within the
+     * capacity. Unreadable input restores nothing: a damaged file costs the backlog, never
+     * the app.
+     */
+    synchronized int restore(String saved) {
+        List<String> restored = decode(saved);
+        if (restored.isEmpty()) return 0;
+        ArrayDeque<String> merged = new ArrayDeque<>(restored);
+        merged.addAll(samples);
+        while (merged.size() > capacity) {
+            merged.removeFirst();
+            dropped++;
+        }
+        samples.clear();
+        samples.addAll(merged);
+        version++;
+        return restored.size();
+    }
+
+    static List<String> decode(String saved) {
+        List<String> out = new ArrayList<>();
+        if (saved == null || saved.isEmpty()) return out;
+        try {
+            org.json.JSONArray array = new org.json.JSONArray(saved);
+            for (int i = 0; i < array.length(); i++) {
+                String sample = array.optString(i, null);
+                if (sample != null && sample.startsWith("{")) out.add(sample);
+            }
+        } catch (org.json.JSONException e) {
+            out.clear();
+        }
+        return out;
+    }
+
+    /** Samples lost to the capacity limit since the queue was created. */
+    synchronized int dropped() { return dropped; }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/TelemetryUploader.java b/app/src/main/java/com/evsuite/abrp/TelemetryUploader.java
new file mode 100644
index 0000000..f4f558c
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/TelemetryUploader.java
@@ -0,0 +1,382 @@
+package com.evsuite.abrp;
+
+import android.content.Context;
+import android.location.Location;
+import android.location.LocationListener;
+import android.location.LocationManager;
+import android.os.Bundle;
+import android.os.Looper;
+import android.os.SystemClock;
+import android.util.Log;
+
+import com.evsuite.hardware.telemetry.EnergySnapshot;
+import com.evsuite.hardware.telemetry.TirePressureSnapshot;
+
+import org.json.JSONArray;
+import org.json.JSONObject;
+
+import java.util.List;
+import java.util.Objects;
+
+/**
+ * Live telemetry to the car server, which stores it, and the newest sample straight to ABRP.
+ *
+ * Called on every service tick. While the car is in use every tick becomes a sample; the
+ * queue is sent when {@link UploadCadence} says so — every tick on a state change, otherwise
+ * at the configured interval. Parked and not charging, a sample is only taken when one is
+ * sent, every 15 minutes: nothing changes, and a sample every 15 s overnight is waste. The GPS
+ * subscription follows the same rule: it is paused while parked and idle, and those samples
+ * carry the fix the car parked with. {@link #stop} ends it when live telemetry is off.
+ *
+ * Runs on the service's scheduler thread; the HTTP calls block it, with short timeouts.
+ * Location updates arrive on the main looper and are only read here.
+ */
+final class TelemetryUploader {
+
+    private static final String TAG = "NilsMG4.Telemetry";
+    /** Batches per tick: a backlog drains over a few ticks instead of stalling one. */
+    private static final int MAX_BATCHES_PER_TICK = 2;
+    /** A fix older than this no longer says where the car is; position is omitted. */
+    private static final long MIN_LOCATION_MAX_AGE_MS = 5 * 60_000L;
+    private static final long LOCATION_RETRY_MS = 30_000L;
+
+    private final Context context;
+    private final TelemetryQueue queue = new TelemetryQueue();
+    private final ChargingSignal chargingSignal = new ChargingSignal();
+
+    private volatile Location lastLocation;
+    /** The fix kept while parked and idle, with the GPS paused; null otherwise. */
+    private volatile Location parkedLocation;
+    /** Whether the GPS should run; a request still queued on the main looper checks it. */
+    private volatile boolean locationWanted;
+    private volatile boolean locationActive;
+    private volatile long lastLocationRequestMs;
+    private LocationManager locationManager;
+
+    private long lastUploadAttemptMs;
+    private Boolean lastParked;
+    private Boolean lastCharging;
+
+    TelemetryUploader(Context context) {
+        this.context = context.getApplicationContext();
+        load();
+    }
+
+    // ---------- Keeping the queue across restarts ----------
+
+    private static final String QUEUE_FILE = "telemetry_queue.json";
+    /**
+     * At most this often, and only after a change: the flash is not written every 15 s, and a
+     * killed process loses at most this much. A clean stop saves at once ({@link #persist}).
+     */
+    private static final long SAVE_INTERVAL_MS = 5 * 60_000L;
+
+    private long savedVersion;
+    private long lastSaveMs;
+
+    private android.util.AtomicFile queueFile() {
+        return new android.util.AtomicFile(new java.io.File(context.getFilesDir(), QUEUE_FILE));
+    }
+
+    private synchronized void load() {
+        try {
+            byte[] bytes = queueFile().readFully();
+            int restored = queue.restore(new String(bytes, java.nio.charset.StandardCharsets.UTF_8));
+            if (restored > 0) Log.i(TAG, restored + " queued sample(s) restored");
+        } catch (java.io.FileNotFoundException e) {
+            // nothing saved yet
+        } catch (Exception e) {
+            Log.w(TAG, "Saved queue not read: " + e.getClass().getSimpleName());
+        }
+        savedVersion = queue.version();
+        lastSaveMs = SystemClock.elapsedRealtime();
+    }
+
+    private void maybeSave() {
+        if (SystemClock.elapsedRealtime() - lastSaveMs >= SAVE_INTERVAL_MS) persist();
+    }
+
+    /** Saves the queue if it changed since the last save. Atomic: a crash keeps the old file. */
+    synchronized void persist() {
+        long version = queue.version();
+        lastSaveMs = SystemClock.elapsedRealtime();
+        if (version == savedVersion) return;
+        android.util.AtomicFile file = queueFile();
+        java.io.FileOutputStream out = null;
+        try {
+            out = file.startWrite();
+            out.write(queue.encode().getBytes(java.nio.charset.StandardCharsets.UTF_8));
+            file.finishWrite(out);
+            savedVersion = version;
+        } catch (Exception e) {
+            if (out != null) file.failWrite(out);
+            Log.w(TAG, "Queue not saved: " + e.getClass().getSimpleName());
+        }
+    }
+
+    // ---------- Tick ----------
+
+    void tick(EnergySnapshot vehicle, ChargeSessionTracker.Snapshot session, UploadSettings settings) {
+        long nowMs = System.currentTimeMillis();
+
+        Integer soc = vehicle.getSocPercent() == null ? null : Math.round(vehicle.getSocPercent());
+        Float powerKw = vehicle.getBatteryPowerKw();
+        Boolean parked = vehicle.getParked();
+        // The charge port property need not be implemented; ChargingSignal falls back to the
+        // charge rate and the park state, exactly as the removed ABRP uploader did.
+        Boolean charging = chargingSignal.evaluate(
+                nowMs, vehicle.getChargePortConnected(), powerKw == null ? null : -powerKw, parked, soc);
+        Boolean dcfc = charging == null || powerKw == null ? null
+                : charging && ChargingState.isDcCharging(vehicle.getChargingStatus(),
+                        vehicle.getChargePortConnected(), powerKw, vehicle.getSpeedKmh());
+
+        boolean stateChanged = !Objects.equals(parked, lastParked) || !Objects.equals(charging, lastCharging);
+        lastParked = parked;
+        lastCharging = charging;
+
+        boolean idle = Boolean.TRUE.equals(parked) && Boolean.FALSE.equals(charging);
+        if (idle) {
+            // Parked and idle the car does not move: keep one fresh fix and stop the GPS until
+            // the car is in use again. Without a fix yet (just started, or in a garage) it
+            // keeps looking.
+            if (parkedLocation == null) parkedLocation = freshLocation(settings);
+            if (parkedLocation == null) ensureLocationUpdates(settings);
+            else if (locationWanted) stop();
+        } else {
+            parkedLocation = null;
+            ensureLocationUpdates(settings);
+        }
+        boolean uploadDue = UploadCadence.shouldUpload(
+                nowMs, lastUploadAttemptMs, parked, charging, soc, stateChanged, settings);
+        // Before the head unit has set its clock the sample's time is meaningless, and the
+        // server would drop it anyway.
+        boolean clockSet = TelemetryPayload.isPlausibleUtc(nowMs / 1000);
+        if (clockSet && (!idle || uploadDue)) {
+            queue.add(buildSample(nowMs, vehicle, session, settings, soc, charging, dcfc, parked, idle));
+        }
+        if (!uploadDue) {
+            maybeSave();
+            return;
+        }
+        // Cadence counts attempts, not successes: retrying every tick while offline would
+        // spend power exactly when it buys nothing.
+        lastUploadAttemptMs = nowMs;
+        flush();
+        maybeSave();
+    }
+
+    int queued() { return queue.size(); }
+
+    // ---------- Sample ----------
+
+    private String buildSample(long nowMs, EnergySnapshot vehicle, ChargeSessionTracker.Snapshot session,
+                               UploadSettings settings, Integer soc, Boolean charging, Boolean dcfc, Boolean parked,
+                               boolean idle) {
+        TelemetryPayload tlm = new TelemetryPayload(nowMs / 1000);
+        tlm.soc = soc;
+        tlm.speedKmh = vehicle.getSpeedKmh();
+        tlm.rangeKm = vehicle.getRangeKm() == null ? null : Math.round(vehicle.getRangeKm());
+        tlm.powerKw = vehicle.getBatteryPowerKw();
+        tlm.charging = charging;
+        tlm.dcfc = dcfc;
+        tlm.parked = parked;
+        tlm.cabinTemp = vehicle.getCabinTempCelsius();
+        tlm.battTempC = vehicle.getBatteryTempCelsius();
+        tlm.extTempC = vehicle.getOutsideTempCelsius();
+        tlm.capacityKwh = vehicle.getBatteryCapacityKwh();
+        tlm.soeKwh = vehicle.getBatteryEnergyKwh();
+        tlm.odometerKm = vehicle.getOdometerKm();
+        tlm.hvacSetpointC = vehicle.getClimate().getDriverTargetCelsius();
+        tlm.voltageV = vehicle.getBatteryVoltageV();
+        tlm.currentA = vehicle.getBatteryCurrentA();
+        // Only DC charges are metered, so only those carry an energy figure.
+        if (Boolean.TRUE.equals(dcfc) && session != null && session.charging) tlm.kwhCharged = session.energyKwh;
+        TirePressureSnapshot tires = vehicle.getTirePressures();
+        tlm.tirePressureFlKpa = tires.getFrontLeftKpa();
+        tlm.tirePressureFrKpa = tires.getFrontRightKpa();
+        tlm.tirePressureRlKpa = tires.getRearLeftKpa();
+        tlm.tirePressureRrKpa = tires.getRearRightKpa();
+        Location loc = idle ? parkedLocation : freshLocation(settings);
+        if (loc != null) {
+            tlm.lat = loc.getLatitude();
+            tlm.lon = loc.getLongitude();
+            tlm.elevation = loc.hasAltitude() ? loc.getAltitude() : null;
+            tlm.heading = loc.hasBearing() ? loc.getBearing() : null;
+        }
+        return tlm.build();
+    }
+
+    // ---------- Upload ----------
+
+    private void flush() {
+        // ABRP first and on its own: live data must not wait for, or fail with, the server.
+        sendNewestToAbrp();
+        ServerConfig config = ServerConfig.get(context);
+        if (!config.isConfigured()) {
+            // Kept for the server once one is set up; the queue is bounded.
+            Log.i(TAG, "Telemetry not sent to a server: none configured (" + queue.size() + " queued)");
+            return;
+        }
+        for (int i = 0; i < MAX_BATCHES_PER_TICK && queue.size() > 0; i++) {
+            List<String> batch = queue.peekBatch();
+            String summary = TelemetryPayload.summarize(batch.get(batch.size() - 1));
+            try {
+                ServerHttp.Response response = post(config, batch);
+                int status = response.status;
+                boolean ok = response.ok();
+                AbrpUploadService.log().record(new UploadLog.Entry(System.currentTimeMillis(), status, ok,
+                        ok ? "Telemetry: " + batch.size() + " sample(s) sent" + droppedNote(response)
+                           : "Telemetry rejected (" + batch.size() + " queued): " + response.excerpt(), summary));
+                if (!ok) {
+                    // The server drops bad values itself and answers 200, so a 400 is a request
+                    // it cannot read at all and will never take: drop the batch rather than
+                    // block the queue behind it forever. Anything else (401, 403, 5xx) is kept.
+                    if (status == 400) queue.remove(batch.size());
+                    return;
+                }
+                queue.remove(batch.size());
+            } catch (Exception e) {
+                AbrpUploadService.log().record(new UploadLog.Entry(System.currentTimeMillis(), 0, false,
+                        "Telemetry offline — " + queue.size() + " queued: " + e.getClass().getSimpleName(),
+                        summary));
+                return;
+            }
+        }
+    }
+
+    private ServerHttp.Response post(ServerConfig config, List<String> batch) throws Exception {
+        JSONArray samples = new JSONArray();
+        for (String sample : batch) samples.put(new JSONObject(sample));
+        JSONObject body = new JSONObject()
+                .put("installationId", config.installationId)
+                .put("samples", samples);
+        return ServerHttp.request("POST", config.url + "/v1/telemetry", config.token, body);
+    }
+
+    // ---------- ABRP, directly ----------
+
+    /** Older than this, a sample is history rather than live state, and ABRP gets nothing. */
+    private static final long ABRP_MAX_AGE_S = 5 * 60;
+
+    /** Time of the newest sample ABRP accepted from the car; 0 before the first. */
+    private volatile long lastAbrpUtc;
+
+    /**
+     * Sends the newest queued sample straight to ABRP when ABRP credentials are set: once per
+     * upload, only if it is newer than the last one sent and still live. It stays queued for
+     * the server either way; the server does not forward to ABRP.
+     */
+    private void sendNewestToAbrp() {
+        AbrpConfig abrp = AbrpConfig.get(context);
+        if (!abrp.isConfigured()) return;
+        String newest = queue.newest();
+        if (newest == null) return;
+        long utc = utcOf(newest);
+        if (utc <= lastAbrpUtc || System.currentTimeMillis() / 1000 - utc > ABRP_MAX_AGE_S) return;
+        String summary = TelemetryPayload.summarize(newest);
+        try {
+            ServerHttp.Response response = AbrpApi.send(abrp, newest);
+            boolean ok = AbrpApi.accepted(response);
+            if (ok) lastAbrpUtc = utc;
+            // ABRP's answer is not quoted: it can echo the request, credentials included.
+            AbrpUploadService.log().record(new UploadLog.Entry(System.currentTimeMillis(), response.status, ok,
+                    ok ? "ABRP: live data sent" : "ABRP rejected: HTTP " + response.status, summary));
+        } catch (Exception e) {
+            AbrpUploadService.log().record(new UploadLog.Entry(System.currentTimeMillis(), 0, false,
+                    "ABRP offline: " + e.getClass().getSimpleName(), summary));
+        }
+    }
+
+    static long utcOf(String sampleJson) {
+        try {
+            return new JSONObject(sampleJson).optLong("utc", 0L);
+        } catch (Exception e) {
+            return 0L;
+        }
+    }
+
+    /** ", 2 value(s) dropped by the server" when it left anything out, for the upload log. */
+    static String droppedNote(ServerHttp.Response response) {
+        try {
+            int dropped = new JSONObject(response.body).optInt("droppedCount", 0);
+            return dropped > 0 ? ", " + dropped + " value(s) dropped by the server" : "";
+        } catch (Exception e) {
+            return ""; // an older server answers 204 with no body
+        }
+    }
+
+    // ---------- Location ----------
+
+    private final LocationListener locationListener = new LocationListener() {
+        @Override public void onLocationChanged(Location location) { lastLocation = location; }
+        @Override public void onStatusChanged(String provider, int status, Bundle extras) { }
+        @Override public void onProviderEnabled(String provider) { locationActive = false; }
+        @Override public void onProviderDisabled(String provider) {
+            // A stale fix is worse than none: it would put the car back where it was.
+            lastLocation = null;
+            locationActive = false;
+        }
+    };
+
+    /** Subscribes to GPS once, and again after a failure or a provider change. */
+    private void ensureLocationUpdates(UploadSettings settings) {
+        locationWanted = true;
+        if (locationActive) return;
+        long now = SystemClock.elapsedRealtime();
+        if (lastLocationRequestMs != 0L && now - lastLocationRequestMs < LOCATION_RETRY_MS) return;
+        lastLocationRequestMs = now;
+        new android.os.Handler(Looper.getMainLooper()).post(() -> requestLocationUpdates(settings));
+    }
+
+    private void requestLocationUpdates(UploadSettings settings) {
+        if (!locationWanted) return; // stopped while this request was queued
+        try {
+            if (locationManager == null) {
+                locationManager = (LocationManager) context.getSystemService(Context.LOCATION_SERVICE);
+            }
+            try { locationManager.removeUpdates(locationListener); } catch (Exception ignored) { }
+            if (!locationManager.isProviderEnabled(LocationManager.GPS_PROVIDER)) {
+                Log.w(TAG, "GPS provider disabled — position omitted, will retry");
+                return;
+            }
+            // Matched to the upload interval: fixes between uploads would only be thrown away.
+            locationManager.requestLocationUpdates(LocationManager.GPS_PROVIDER,
+                    Math.min(settings.intervalMs(), 15_000L), 0f, locationListener, Looper.getMainLooper());
+            locationActive = true;
+            Location last = locationManager.getLastKnownLocation(LocationManager.GPS_PROVIDER);
+            if (last != null && locationAgeMs(last) <= MIN_LOCATION_MAX_AGE_MS) lastLocation = last;
+        } catch (SecurityException e) {
+            Log.w(TAG, "Location permission not granted: " + e.getMessage());
+        } catch (Exception e) {
+            Log.w(TAG, "Location unavailable: " + e.getMessage());
+        }
+    }
+
+    /** Ends the GPS subscription; the next tick that needs a position starts it again. */
+    void stop() {
+        locationWanted = false;
+        try {
+            if (locationManager != null) locationManager.removeUpdates(locationListener);
+        } catch (Exception ignored) { }
+        locationActive = false;
+        lastLocationRequestMs = 0L;
+    }
+
+    private Location freshLocation(UploadSettings settings) {
+        Location loc = lastLocation;
+        if (loc == null) return null;
+        long maxAge = Math.max(MIN_LOCATION_MAX_AGE_MS, 3 * settings.intervalMs());
+        return locationAgeMs(loc) <= maxAge ? loc : null;
+    }
+
+    /**
+     * Age on the monotonic clock: the head unit sets its wall clock from GPS, so a fix's
+     * wall-clock time can jump. A provider that does not stamp the monotonic clock leaves 0;
+     * such a fix counts as fresh rather than blanking the position for good.
+     */
+    private static long locationAgeMs(Location loc) {
+        long fixNanos = loc.getElapsedRealtimeNanos();
+        if (fixNanos <= 0L) return 0L;
+        return Math.max(0L, (SystemClock.elapsedRealtimeNanos() - fixNanos) / 1_000_000L);
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/UploadCadence.java b/app/src/main/java/com/evsuite/abrp/UploadCadence.java
new file mode 100644
index 0000000..4cf5737
--- /dev/null
+++ b/app/src/main/java/com/evsuite/abrp/UploadCadence.java
@@ -0,0 +1,66 @@
+package com.evsuite.abrp;
+
+/**
+ * Decides whether a given scheduler tick should actually upload.
+ *
+ * The service ticks at a fixed short rate; this class thins the uploads out. A car parked
+ * overnight and not charging does not need a sample every minute — that is wasted data and
+ * power — but nothing may be lost while driving or charging, where ABRP needs the
+ * resolution to keep a route plan accurate.
+ *
+ * Free of Android types so the policy can be unit-tested directly.
+ */
+final class UploadCadence {
+
+    /**
+     * Parked and not charging: one keep-alive sample every 15 minutes. The car is not
+     * moving and its SOC is not changing, so anything more is spent for nothing.
+     */
+    static final long PARKED_INTERVAL_MS = 900_000L;
+
+    private UploadCadence() { }
+
+    /**
+     * @param nowMs         current time
+     * @param lastUploadMs  when the last upload was attempted, 0 if never
+     * @param parked        null when the gear could not be read
+     * @param charging      null when the charge port state could not be read
+     * @param socPercent    null when the battery level could not be read
+     * @param stateChanged  true if parked/charging differ from the previous tick
+     * @param settings      user-configured cadence
+     */
+    static boolean shouldUpload(long nowMs, long lastUploadMs,
+                                Boolean parked, Boolean charging, Integer socPercent,
+                                boolean stateChanged, UploadSettings settings) {
+        // Never uploaded yet: send immediately so ABRP sees the car come online.
+        if (lastUploadMs <= 0L) return true;
+
+        // A transition (just parked, plugged in, unplugged) is exactly what ABRP must
+        // learn straight away — never make it wait for the slow interval.
+        if (stateChanged) return true;
+
+        return nowMs - lastUploadMs >= intervalFor(parked, charging, socPercent, settings);
+    }
+
+    /**
+     * Interval that applies in the given state.
+     *
+     * Unknown state counts as active: if the gear or charge port could not be read we do
+     * not know the car is idle, and under-reporting a moving car is worse than a few
+     * extra requests from a stationary one.
+     */
+    static long intervalFor(Boolean parked, Boolean charging, Integer socPercent,
+                            UploadSettings settings) {
+        boolean idle = Boolean.TRUE.equals(parked) && Boolean.FALSE.equals(charging);
+        if (idle) return PARKED_INTERVAL_MS;
+
+        // Low battery: the driver is picking a charge stop and ABRP needs a tighter SOC
+        // curve to get the arrival estimate right. Only while actually in use — a car
+        // parked at 5 % is still parked and gains nothing from fast polling.
+        if (settings.boostLowSoc && socPercent != null
+                && socPercent <= settings.lowSocPercent) {
+            return Math.min(settings.intervalMs(), UploadSettings.BOOSTED_INTERVAL_SEC * 1000L);
+        }
+        return settings.intervalMs();
+    }
+}
diff --git a/app/src/main/java/com/evsuite/abrp/UploadSettings.java b/app/src/main/java/com/evsuite/abrp/UploadSettings.java
index a6f7607..7a867a3 100644
--- a/app/src/main/java/com/evsuite/abrp/UploadSettings.java
+++ b/app/src/main/java/com/evsuite/abrp/UploadSettings.java
@@ -1,14 +1,92 @@
 package com.evsuite.abrp;
 
+import android.content.SharedPreferences;
+
 /**
- * Placeholder — the service is always-on and samples on a fixed 15-second scheduler, so
- * there is no user-configurable upload policy left. Kept as an empty shell so any stray
- * references compile during the ABRP removal; will be deleted once all callers are gone.
+ * User-configurable upload policy.
+ *
+ * Defaults are deliberately conservative. The head unit is awake whenever the car is on,
+ * and both the upload tick and the GPS subscription cost power the whole time, so the
+ * default cadence is the slowest one that still keeps an ABRP route plan usable.
  */
 final class UploadSettings {
 
-    static final String KEY_AUTOSTART = "autostart";
-    static final boolean DEFAULT_AUTOSTART = true;
+    static final String KEY_INTERVAL_SEC    = "upload_interval_sec";
+    static final String KEY_BOOST_LOW_SOC   = "boost_low_soc";
+    static final String KEY_LOW_SOC_PERCENT = "low_soc_percent";
+    static final String KEY_AUTOSTART       = "autostart";
+    static final String KEY_ABRP_UPLOAD_ENABLED = "abrp_upload_enabled";
+    /** Hide the head unit's system bars while the app is open. */
+    static final String KEY_FULL_SCREEN = "full_screen";
 
-    private UploadSettings() { }
+    static boolean fullScreen(SharedPreferences prefs) {
+        return prefs.getBoolean(KEY_FULL_SCREEN, true);
+    }
+
+    /** A double press of the steering wheel's voice key opens the app. */
+    static final String KEY_VOICE_KEY_OPENS = "voice_key_opens_app";
+
+    static boolean voiceKeyOpensApp(SharedPreferences prefs) {
+        return prefs.getBoolean(KEY_VOICE_KEY_OPENS, true);
+    }
+
+    /**
+     * On by default: an ABRP plan is only useful if it is fed from the moment the drive
+     * starts, and nobody opens this app before setting off. Kept as a switch because a
+     * service that starts itself must also be switchable off.
+     */
+    static final boolean DEFAULT_AUTOSTART = true;
+    static final boolean DEFAULT_ABRP_UPLOAD_ENABLED = true;
+
+    /**
+     * Default cadence while driving. 60 s is roughly 1.5 km between points at motorway
+     * speed, which ABRP can still track; going much slower makes the live plan lag
+     * reality. Parked and idle backs off far further on its own — see UploadCadence.
+     */
+    static final int DEFAULT_INTERVAL_SEC = 60;
+
+    /** Offered in the UI. Kept short so the list stays a single glance on a car screen. */
+    static final int[] INTERVAL_CHOICES_SEC = { 15, 30, 60, 120, 300 };
+
+    static final boolean DEFAULT_BOOST_LOW_SOC = true;
+
+    /** Below this, range planning gets tight and ABRP needs a finer SOC curve. */
+    static final int DEFAULT_LOW_SOC_PERCENT = 20;
+
+    /** Cadence used while SOC is low and the boost is enabled. */
+    static final int BOOSTED_INTERVAL_SEC = 15;
+
+    final int intervalSec;
+    final boolean boostLowSoc;
+    final int lowSocPercent;
+    final boolean abrpUploadEnabled;
+
+    UploadSettings(int intervalSec, boolean boostLowSoc, int lowSocPercent) {
+        this(intervalSec, boostLowSoc, lowSocPercent, DEFAULT_ABRP_UPLOAD_ENABLED);
+    }
+
+    UploadSettings(int intervalSec, boolean boostLowSoc, int lowSocPercent,
+                   boolean abrpUploadEnabled) {
+        this.intervalSec = intervalSec;
+        this.boostLowSoc = boostLowSoc;
+        this.lowSocPercent = lowSocPercent;
+        this.abrpUploadEnabled = abrpUploadEnabled;
+    }
+
+    static UploadSettings from(SharedPreferences prefs) {
+        return new UploadSettings(
+                prefs.getInt(KEY_INTERVAL_SEC, DEFAULT_INTERVAL_SEC),
+                prefs.getBoolean(KEY_BOOST_LOW_SOC, DEFAULT_BOOST_LOW_SOC),
+                prefs.getInt(KEY_LOW_SOC_PERCENT, DEFAULT_LOW_SOC_PERCENT),
+                prefs.getBoolean(KEY_ABRP_UPLOAD_ENABLED, DEFAULT_ABRP_UPLOAD_ENABLED));
+    }
+
+    static UploadSettings defaults() {
+        return new UploadSettings(
+                DEFAULT_INTERVAL_SEC, DEFAULT_BOOST_LOW_SOC, DEFAULT_LOW_SOC_PERCENT);
+    }
+
+    long intervalMs() {
+        return intervalSec * 1000L;
+    }
 }
diff --git a/app/src/main/java/com/evsuite/abrp/WifiAutoConnect.java b/app/src/main/java/com/evsuite/abrp/WifiAutoConnect.java
deleted file mode 100644
index 5e89f8b..0000000
--- a/app/src/main/java/com/evsuite/abrp/WifiAutoConnect.java
+++ /dev/null
@@ -1,163 +0,0 @@
-package com.evsuite.abrp;
-
-import android.content.Context;
-import android.net.wifi.WifiConfiguration;
-import android.net.wifi.WifiInfo;
-import android.net.wifi.WifiManager;
-import android.util.Log;
-
-import java.util.List;
-
-/**
- * Brings Wi-Fi up and joins a network the head unit already knows.
- *
- * The point is the phone hotspot: the car has the credentials saved, but the driver still
- * has to walk into Settings and tap the network every time. This does that tap.
- *
- * <b>Why this works here and would not on a newer phone.</b> {@code getConfiguredNetworks}
- * and {@code enableNetwork} were deprecated in API 29 and, from that release, return an
- * empty list and refuse the call for ordinary apps — Android handed network choice to the
- * user through a system picker. This head unit runs Android 9 (API 28), where both are
- * still honoured, and the build is platform-signed, so it is the same UID family the
- * Settings app itself uses. Neither fact is portable: on a Pixel this class would find
- * nothing and change nothing. It is deliberately written to fail quietly if so.
- *
- * Nothing here creates or edits a network. It only enables one the unit was already
- * configured with, which is why no password ever passes through this app.
- */
-final class WifiAutoConnect {
-
-    private static final String TAG = "EVABRP.Wifi";
-
-    /** Re-checking faster than this achieves nothing: a join takes seconds to settle. */
-    private static final long MIN_ATTEMPT_INTERVAL_MS = 30_000L;
-
-    private final WifiManager wifi;
-    private long lastAttemptMs;
-
-    WifiAutoConnect(Context context) {
-        this.wifi = (WifiManager) context.getApplicationContext()
-                .getSystemService(Context.WIFI_SERVICE);
-    }
-
-    /** The SSID the unit is associated with, or null when it is not on Wi-Fi. */
-    String currentSsid() {
-        try {
-            if (wifi == null || !wifi.isWifiEnabled()) return null;
-            WifiInfo info = wifi.getConnectionInfo();
-            if (info == null) return null;
-            String ssid = info.getSSID();
-            if (ssid == null) return null;
-            // The framework quotes the SSID and reports this placeholder when it will not
-            // say — usually because location is off. Neither is a network name.
-            ssid = ssid.replace("\"", "").trim();
-            if (ssid.isEmpty() || "<unknown ssid>".equals(ssid) || "0x".equals(ssid)) return null;
-            return ssid;
-        } catch (Throwable t) {
-            return null;
-        }
-    }
-
-    boolean isWifiEnabled() {
-        try {
-            return wifi != null && wifi.isWifiEnabled();
-        } catch (Throwable t) {
-            return false;
-        }
-    }
-
-    /** Saved network names, for the UI to show what it can reach. Empty if the OS refuses. */
-    List<String> savedNetworkNames() {
-        java.util.List<String> names = new java.util.ArrayList<>();
-        try {
-            if (wifi == null) return names;
-            List<WifiConfiguration> saved = wifi.getConfiguredNetworks();
-            if (saved == null) return names;
-            for (WifiConfiguration c : saved) {
-                if (c == null || c.SSID == null) continue;
-                String name = c.SSID.replace("\"", "").trim();
-                if (!name.isEmpty() && !names.contains(name)) names.add(name);
-            }
-        } catch (SecurityException e) {
-            Log.w(TAG, "Saved networks unavailable: permission denied");
-        } catch (Throwable t) {
-            Log.w(TAG, "getConfiguredNetworks refused: " + t.getMessage());
-        }
-        return names;
-    }
-
-    /**
-     * One attempt to get onto a saved network, rate-limited.
-     *
-     * @param force ignore the rate limit — for the button, which a driver only presses
-     *              because the automatic attempt has not worked yet.
-     * @return what happened, for the log and the UI. Never null.
-     */
-    Result ensureConnected(boolean force) {
-        if (wifi == null) return Result.UNSUPPORTED;
-
-        String ssid = currentSsid();
-        if (ssid != null) return Result.alreadyOn(ssid);
-
-        long now = System.currentTimeMillis();
-        if (!force && now - lastAttemptMs < MIN_ATTEMPT_INTERVAL_MS) return Result.WAITING;
-        lastAttemptMs = now;
-
-        try {
-            if (!wifi.isWifiEnabled()) {
-                // Also gone for ordinary apps from API 29, and also still honoured here.
-                if (!wifi.setWifiEnabled(true)) return Result.CANNOT_ENABLE;
-                // The radio needs a moment before it will associate; the next tick retries.
-                return Result.ENABLING;
-            }
-
-            List<WifiConfiguration> saved = wifi.getConfiguredNetworks();
-            if (saved == null || saved.isEmpty()) return Result.NO_SAVED_NETWORKS;
-
-            // A scan would let us prefer a network that is actually in range, but the results
-            // are themselves throttled and location-gated. Asking the supplicant to pick from
-            // what it knows is both simpler and what the Settings screen effectively does.
-            wifi.reconnect();
-            for (WifiConfiguration c : saved) {
-                if (c == null) continue;
-                // Second argument true: disable the others for this attempt, so the
-                // supplicant commits to this one rather than drifting between them.
-                if (wifi.enableNetwork(c.networkId, true)) {
-                    String name = c.SSID == null ? "?" : c.SSID.replace("\"", "").trim();
-                    Log.i(TAG, "enableNetwork accepted for " + name);
-                    return Result.attempting(name);
-                }
-            }
-            return Result.REFUSED;
-        } catch (SecurityException e) {
-            Log.w(TAG, "Wi-Fi connection refused: permission denied");
-            return Result.REFUSED;
-        } catch (Throwable t) {
-            Log.w(TAG, "connect attempt failed: " + t.getMessage());
-            return Result.REFUSED;
-        }
-    }
-
-    /** Outcome of one attempt. {@link #connected} is the only one that means we are online. */
-    static final class Result {
-        final boolean connected;
-        final String ssid;
-        final String message;
-
-        private Result(boolean connected, String ssid, String message) {
-            this.connected = connected;
-            this.ssid = ssid;
-            this.message = message;
-        }
-
-        static Result alreadyOn(String ssid) { return new Result(true, ssid, "Bağlı: " + ssid); }
-        static Result attempting(String ssid) { return new Result(false, ssid, "Bağlanılıyor: " + ssid); }
-
-        static final Result UNSUPPORTED = new Result(false, null, "Wi-Fi yönetilemiyor");
-        static final Result WAITING = new Result(false, null, "Bekleniyor…");
-        static final Result ENABLING = new Result(false, null, "Wi-Fi açılıyor…");
-        static final Result CANNOT_ENABLE = new Result(false, null, "Wi-Fi açılamadı");
-        static final Result NO_SAVED_NETWORKS = new Result(false, null, "Kayıtlı ağ yok");
-        static final Result REFUSED = new Result(false, null, "Sistem izin vermedi");
-    }
-}
diff --git a/app/src/main/res/color/input_stroke.xml b/app/src/main/res/color/input_stroke.xml
index 852e4d5..1928860 100644
--- a/app/src/main/res/color/input_stroke.xml
+++ b/app/src/main/res/color/input_stroke.xml
@@ -1 +1 @@
-<selector xmlns:android="http://schemas.android.com/apk/res/android"><item android:state_focused="true" android:color="@color/ev_accent"/><item android:color="@color/ev_outline"/></selector>
+<selector xmlns:android="http://schemas.android.com/apk/res/android"><item android:state_focused="true" android:color="?attr/evAccent"/><item android:color="@color/ev_outline"/></selector>
diff --git a/app/src/main/res/color/nav_tab_background.xml b/app/src/main/res/color/nav_tab_background.xml
index 42a552f..efd63c6 100644
--- a/app/src/main/res/color/nav_tab_background.xml
+++ b/app/src/main/res/color/nav_tab_background.xml
@@ -1 +1 @@
-<selector xmlns:android="http://schemas.android.com/apk/res/android"><item android:state_selected="true" android:color="@color/ev_gold_surface"/><item android:color="@color/ev_transparent"/></selector>
+<selector xmlns:android="http://schemas.android.com/apk/res/android"><item android:state_selected="true" android:color="?attr/evAccentSurface"/><item android:color="@color/ev_transparent"/></selector>
diff --git a/app/src/main/res/color/nav_tab_foreground.xml b/app/src/main/res/color/nav_tab_foreground.xml
index 64477ea..6abaedc 100644
--- a/app/src/main/res/color/nav_tab_foreground.xml
+++ b/app/src/main/res/color/nav_tab_foreground.xml
@@ -1 +1 @@
-<selector xmlns:android="http://schemas.android.com/apk/res/android"><item android:state_selected="true" android:color="@color/ev_accent"/><item android:color="@color/ev_text_secondary"/></selector>
+<selector xmlns:android="http://schemas.android.com/apk/res/android"><item android:state_selected="true" android:color="?attr/evAccent"/><item android:color="@color/ev_text_secondary"/></selector>
diff --git a/app/src/main/res/color/nav_tab_stroke.xml b/app/src/main/res/color/nav_tab_stroke.xml
index 62d6c16..3c88fab 100644
--- a/app/src/main/res/color/nav_tab_stroke.xml
+++ b/app/src/main/res/color/nav_tab_stroke.xml
@@ -1 +1 @@
-<selector xmlns:android="http://schemas.android.com/apk/res/android"><item android:state_selected="true" android:color="#806F6045"/><item android:color="@color/ev_transparent"/></selector>
+<selector xmlns:android="http://schemas.android.com/apk/res/android"><item android:state_selected="true" android:color="?attr/evAccentStroke"/><item android:color="@color/ev_transparent"/></selector>
diff --git a/app/src/main/res/color/switch_thumb.xml b/app/src/main/res/color/switch_thumb.xml
index deef655..656d80c 100644
--- a/app/src/main/res/color/switch_thumb.xml
+++ b/app/src/main/res/color/switch_thumb.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <selector xmlns:android="http://schemas.android.com/apk/res/android">
     <item android:state_enabled="false" android:color="@color/ev_outline" />
-    <item android:state_checked="true" android:color="@color/ev_cyan" />
+    <item android:state_checked="true" android:color="?attr/evAccentLight" />
     <item android:color="@color/ev_text_secondary" />
 </selector>
diff --git a/app/src/main/res/color/switch_track.xml b/app/src/main/res/color/switch_track.xml
index 0154b5b..176f030 100644
--- a/app/src/main/res/color/switch_track.xml
+++ b/app/src/main/res/color/switch_track.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <selector xmlns:android="http://schemas.android.com/apk/res/android">
     <item android:state_enabled="false" android:color="@color/ev_surface_raised" />
-    <item android:state_checked="true" android:color="#345E60" />
+    <item android:state_checked="true" android:color="?attr/evAccentTrack" />
     <item android:color="@color/ev_outline" />
 </selector>
diff --git a/app/src/main/res/drawable/bg_battery_card.xml b/app/src/main/res/drawable/bg_battery_card.xml
index bf08638..37f6020 100644
--- a/app/src/main/res/drawable/bg_battery_card.xml
+++ b/app/src/main/res/drawable/bg_battery_card.xml
@@ -1 +1,15 @@
-<shape xmlns:android="http://schemas.android.com/apk/res/android"><gradient android:angle="315" android:startColor="#E5183032" android:centerColor="#F012191A" android:endColor="#FA121212"/><corners android:radius="24dp"/><stroke android:width="1dp" android:color="#40528C8C"/></shape>
+<?xml version="1.0" encoding="utf-8"?>
+<!-- The accent-tinted card: an accent surface under a neutral fade. Built as layers because a
+     gradient with ?attr colours crashes on Android 9 (fixed in 10); solid and stroke are fine. -->
+<layer-list xmlns:android="http://schemas.android.com/apk/res/android">
+    <item>
+        <shape><solid android:color="?attr/evAccentSurface"/><corners android:radius="24dp"/></shape>
+    </item>
+    <item>
+        <shape>
+            <gradient android:angle="315" android:startColor="#00121212" android:centerColor="#D0121212" android:endColor="#FA121212"/>
+            <corners android:radius="24dp"/>
+            <stroke android:width="1dp" android:color="?attr/evAccentStroke"/>
+        </shape>
+    </item>
+</layer-list>
diff --git a/app/src/main/res/drawable/bg_input_panel.xml b/app/src/main/res/drawable/bg_input_panel.xml
index 1b78256..8eb88fe 100644
--- a/app/src/main/res/drawable/bg_input_panel.xml
+++ b/app/src/main/res/drawable/bg_input_panel.xml
@@ -1 +1 @@
-<shape xmlns:android="http://schemas.android.com/apk/res/android"><solid android:color="#101213"/><corners android:radius="16dp"/><stroke android:width="1dp" android:color="#263233"/></shape>
+<shape xmlns:android="http://schemas.android.com/apk/res/android"><solid android:color="#101213"/><corners android:radius="16dp"/><stroke android:width="1dp" android:color="?attr/evAccentDeep"/></shape>
diff --git a/app/src/main/res/drawable/bg_topbar.xml b/app/src/main/res/drawable/bg_topbar.xml
index 1d5b3ba..1a26e08 100644
--- a/app/src/main/res/drawable/bg_topbar.xml
+++ b/app/src/main/res/drawable/bg_topbar.xml
@@ -9,7 +9,7 @@
     </item>
     <item android:gravity="bottom" android:height="2dp">
         <shape android:shape="rectangle">
-            <solid android:color="@color/ev_accent" />
+            <solid android:color="?attr/evAccent" />
         </shape>
     </item>
 </layer-list>
diff --git a/app/src/main/res/drawable/bg_version_badge.xml b/app/src/main/res/drawable/bg_version_badge.xml
index 81362e0..d87eb68 100644
--- a/app/src/main/res/drawable/bg_version_badge.xml
+++ b/app/src/main/res/drawable/bg_version_badge.xml
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <shape xmlns:android="http://schemas.android.com/apk/res/android" android:shape="rectangle">
-    <solid android:color="@color/ev_cyan_deep" />
-    <stroke android:width="1dp" android:color="@color/ev_cyan" />
+    <solid android:color="?attr/evAccentDeep" />
+    <stroke android:width="1dp" android:color="?attr/evAccentLight" />
     <corners android:radius="14dp" />
 </shape>
diff --git a/app/src/main/res/drawable/ic_chevron_down.xml b/app/src/main/res/drawable/ic_chevron_down.xml
index 8cd2a5d..c290ce9 100644
--- a/app/src/main/res/drawable/ic_chevron_down.xml
+++ b/app/src/main/res/drawable/ic_chevron_down.xml
@@ -2,5 +2,5 @@
 <vector xmlns:android="http://schemas.android.com/apk/res/android"
     android:width="24dp" android:height="24dp" android:viewportWidth="24" android:viewportHeight="24">
     <path android:pathData="M6,9 L12,15 L18,9" android:fillColor="@android:color/transparent"
-        android:strokeColor="@color/ev_accent" android:strokeWidth="1.8" android:strokeLineCap="round" android:strokeLineJoin="round" />
+        android:strokeColor="?attr/evAccent" android:strokeWidth="1.8" android:strokeLineCap="round" android:strokeLineJoin="round" />
 </vector>
diff --git a/app/src/main/res/drawable/ic_info.xml b/app/src/main/res/drawable/ic_info.xml
index 91a111e..b61bd65 100644
--- a/app/src/main/res/drawable/ic_info.xml
+++ b/app/src/main/res/drawable/ic_info.xml
@@ -1 +1 @@
-<vector xmlns:android="http://schemas.android.com/apk/res/android" android:width="24dp" android:height="24dp" android:viewportWidth="24" android:viewportHeight="24"><path android:pathData="M12,3 A9,9 0,1 0,12 21 A9,9 0,1 0,12 3 M12,10 L12,17 M12,7 L12,7.2" android:fillColor="#00000000" android:strokeColor="#D8C39A" android:strokeWidth="1.6" android:strokeLineCap="round"/></vector>
+<vector xmlns:android="http://schemas.android.com/apk/res/android" android:width="24dp" android:height="24dp" android:viewportWidth="24" android:viewportHeight="24"><path android:pathData="M12,3 A9,9 0,1 0,12 21 A9,9 0,1 0,12 3 M12,10 L12,17 M12,7 L12,7.2" android:fillColor="#00000000" android:strokeColor="?attr/evAccent" android:strokeWidth="1.6" android:strokeLineCap="round"/></vector>
diff --git a/app/src/main/res/drawable/ic_tab_charging.xml b/app/src/main/res/drawable/ic_tab_charging.xml
new file mode 100644
index 0000000..c331058
--- /dev/null
+++ b/app/src/main/res/drawable/ic_tab_charging.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Lightning bolt: the Charging tab. Tinted by @color/nav_tab_foreground. -->
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="#FFFFFFFF"
+        android:pathData="M13,2L4,14H11L10,22L20,9H13L13,2Z" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_tab_live.xml b/app/src/main/res/drawable/ic_tab_live.xml
new file mode 100644
index 0000000..0db73a1
--- /dev/null
+++ b/app/src/main/res/drawable/ic_tab_live.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Broadcast waves around a dot: the Live data tab. Tinted by @color/nav_tab_foreground. -->
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:fillColor="#FFFFFFFF"
+        android:pathData="M12,10a2,2 0,1 1,0 4a2,2 0,1 1,0 -4z" />
+    <path
+        android:strokeColor="#FFFFFFFF"
+        android:strokeWidth="2"
+        android:strokeLineCap="round"
+        android:fillColor="#00000000"
+        android:pathData="M8.5,8.5A5,5 0,0 0,8.5 15.5M15.5,8.5A5,5 0,0 1,15.5 15.5M5.6,5.6A9,9 0,0 0,5.6 18.4M18.4,5.6A9,9 0,0 1,18.4 18.4" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_tab_log.xml b/app/src/main/res/drawable/ic_tab_log.xml
index 67ce1ca..feb44c6 100644
--- a/app/src/main/res/drawable/ic_tab_log.xml
+++ b/app/src/main/res/drawable/ic_tab_log.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="utf-8"?>
-<!-- Terminal : onglet Log. Teinté par @color/nav_tab_foreground. -->
+<!-- Terminal: the Logs tab. Tinted by @color/nav_tab_foreground. -->
 <vector xmlns:android="http://schemas.android.com/apk/res/android"
     android:width="24dp"
     android:height="24dp"
diff --git a/app/src/main/res/drawable/ic_tab_server.xml b/app/src/main/res/drawable/ic_tab_server.xml
new file mode 100644
index 0000000..3f45ef0
--- /dev/null
+++ b/app/src/main/res/drawable/ic_tab_server.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Arrow into a tray: the Server tab (where the telemetry goes). Tinted by
+     @color/nav_tab_foreground. -->
+<vector xmlns:android="http://schemas.android.com/apk/res/android"
+    android:width="24dp"
+    android:height="24dp"
+    android:viewportWidth="24"
+    android:viewportHeight="24">
+    <path
+        android:strokeColor="#FFFFFFFF"
+        android:strokeWidth="2"
+        android:strokeLineCap="round"
+        android:strokeLineJoin="round"
+        android:fillColor="#00000000"
+        android:pathData="M4,14V19H20V14" />
+    <path
+        android:strokeColor="#FFFFFFFF"
+        android:strokeWidth="2"
+        android:strokeLineCap="round"
+        android:strokeLineJoin="round"
+        android:fillColor="#00000000"
+        android:pathData="M12,3V13M8,7L12,3L16,7" />
+</vector>
diff --git a/app/src/main/res/drawable/ic_tab_service.xml b/app/src/main/res/drawable/ic_tab_service.xml
index 40bd181..14b498e 100644
--- a/app/src/main/res/drawable/ic_tab_service.xml
+++ b/app/src/main/res/drawable/ic_tab_service.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="utf-8"?>
-<!-- Engrenage : onglet Service. Teinté par @color/nav_tab_foreground. -->
+<!-- Gear: the Settings tab. Tinted by @color/nav_tab_foreground. -->
 <vector xmlns:android="http://schemas.android.com/apk/res/android"
     android:width="24dp"
     android:height="24dp"
diff --git a/app/src/main/res/drawable/ic_tab_wifi.xml b/app/src/main/res/drawable/ic_tab_wifi.xml
deleted file mode 100644
index 30b440f..0000000
--- a/app/src/main/res/drawable/ic_tab_wifi.xml
+++ /dev/null
@@ -1,12 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<!-- Wi-Fi arcs, for the Wi-Fi page. -->
-<vector xmlns:android="http://schemas.android.com/apk/res/android"
-    android:width="24dp"
-    android:height="24dp"
-    android:viewportWidth="24"
-    android:viewportHeight="24"
-    android:tint="?attr/colorControlNormal">
-    <path
-        android:fillColor="@android:color/white"
-        android:pathData="M1,9l2,2c4.97,-4.97 13.03,-4.97 18,0l2,-2C16.93,2.93 7.08,2.93 1,9zM9,17l3,3 3,-3c-1.65,-1.66 -4.34,-1.66 -6,0zM5,13l2,2c2.76,-2.76 7.24,-2.76 10,0l2,-2C15.14,9.14 8.87,9.14 5,13z" />
-</vector>
diff --git a/app/src/main/res/drawable/ic_vehicle_outline.xml b/app/src/main/res/drawable/ic_vehicle_outline.xml
index f1e7624..806b126 100644
--- a/app/src/main/res/drawable/ic_vehicle_outline.xml
+++ b/app/src/main/res/drawable/ic_vehicle_outline.xml
@@ -1,5 +1,5 @@
 <vector xmlns:android="http://schemas.android.com/apk/res/android" android:width="92dp" android:height="180dp" android:viewportWidth="92" android:viewportHeight="180">
-<path android:pathData="M27,12 Q46,5 65,12 Q74,18 74,38 L78,130 Q79,157 64,164 L28,164 Q13,157 14,130 L18,38 Q18,18 27,12Z" android:fillColor="#151D1E" android:strokeColor="#85BDBF" android:strokeWidth="1.4"/>
-<path android:pathData="M24,45 Q46,37 68,45 L63,65 Q46,61 29,65Z M28,129 Q46,135 64,129 L66,148 Q46,155 26,148Z M28,72 L28,122 M64,72 L64,122 M23,28 L35,25 M57,25 L69,28 M23,157 L35,159 M57,159 L69,157" android:fillColor="#102D30" android:strokeColor="#527B7C" android:strokeWidth="1.3"/>
-<path android:pathData="M10,43 L10,67 M82,43 L82,67 M10,120 L10,144 M82,120 L82,144" android:fillColor="#00000000" android:strokeColor="#D8C39A" android:strokeWidth="5" android:strokeLineCap="round"/>
+<path android:pathData="M27,12 Q46,5 65,12 Q74,18 74,38 L78,130 Q79,157 64,164 L28,164 Q13,157 14,130 L18,38 Q18,18 27,12Z" android:fillColor="?attr/evAccentSurface" android:strokeColor="?attr/evAccentLight" android:strokeWidth="1.4"/>
+<path android:pathData="M24,45 Q46,37 68,45 L63,65 Q46,61 29,65Z M28,129 Q46,135 64,129 L66,148 Q46,155 26,148Z M28,72 L28,122 M64,72 L64,122 M23,28 L35,25 M57,25 L69,28 M23,157 L35,159 M57,159 L69,157" android:fillColor="?attr/evAccentDeep" android:strokeColor="?attr/evAccentStroke" android:strokeWidth="1.3"/>
+<path android:pathData="M10,43 L10,67 M82,43 L82,67 M10,120 L10,144 M82,120 L82,144" android:fillColor="#00000000" android:strokeColor="?attr/evAccent" android:strokeWidth="5" android:strokeLineCap="round"/>
 </vector>
diff --git a/app/src/main/res/layout-w1000dp/activity_main.xml b/app/src/main/res/layout-w1000dp/activity_main.xml
index c1cae25..ccf2bf9 100644
--- a/app/src/main/res/layout-w1000dp/activity_main.xml
+++ b/app/src/main/res/layout-w1000dp/activity_main.xml
@@ -4,25 +4,23 @@
     <LinearLayout android:layout_width="match_parent" android:layout_height="match_parent" android:orientation="horizontal">
         <ScrollView android:layout_width="192dp" android:layout_height="match_parent" android:layout_margin="16dp" android:fillViewport="true" android:background="@drawable/bg_sidebar" android:scrollbars="none">
             <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="12dp">
-                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_brand" android:textAppearance="@style/Text.EV.Hero" android:textColor="@color/ev_accent" android:paddingStart="14dp" android:paddingTop="8dp" />
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_brand" android:textAppearance="@style/Text.EV.Hero" android:textColor="?attr/evAccent" android:paddingStart="14dp" android:paddingTop="8dp" />
                 <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_brand_caption" android:textAppearance="@style/Text.EV.Secondary" android:paddingStart="14dp" android:layout_marginBottom="24dp" />
                 <com.google.android.material.button.MaterialButton android:id="@+id/tabVehicle" style="@style/Widget.EV.NavTab" android:layout_width="match_parent" android:layout_height="64dp" android:layout_marginBottom="6dp" android:text="@string/tab_vehicle" app:icon="@drawable/ic_tab_vehicle" />
                 <com.google.android.material.button.MaterialButton android:id="@+id/tabConsumption" style="@style/Widget.EV.NavTab" android:layout_width="match_parent" android:layout_height="64dp" android:layout_marginBottom="6dp" android:text="@string/tab_consumption" app:icon="@drawable/ic_tab_vehicle" />
-                <com.google.android.material.button.MaterialButton android:id="@+id/tabCharging" style="@style/Widget.EV.NavTab" android:layout_width="match_parent" android:layout_height="64dp" android:layout_marginBottom="6dp" android:text="@string/tab_charging" app:icon="@drawable/ic_tab_service" />
-                <com.google.android.material.button.MaterialButton android:id="@+id/tabService" style="@style/Widget.EV.NavTab" android:layout_width="match_parent" android:layout_height="64dp" android:layout_marginBottom="6dp" android:text="@string/tab_service" app:icon="@drawable/ic_tab_service" />
-                <com.google.android.material.button.MaterialButton android:id="@+id/tabWifi" style="@style/Widget.EV.NavTab" android:layout_width="match_parent" android:layout_height="64dp" android:layout_marginBottom="6dp" android:text="@string/tab_wifi" app:icon="@drawable/ic_tab_wifi" />
+                <com.google.android.material.button.MaterialButton android:id="@+id/tabCharging" style="@style/Widget.EV.NavTab" android:layout_width="match_parent" android:layout_height="64dp" android:layout_marginBottom="6dp" android:text="@string/tab_charging" app:icon="@drawable/ic_tab_charging" />
+                <com.google.android.material.button.MaterialButton android:id="@+id/tabService" style="@style/Widget.EV.NavTab" android:layout_width="match_parent" android:layout_height="64dp" android:layout_marginBottom="6dp" android:text="@string/tab_service" app:icon="@drawable/ic_tab_live" />
+                <com.google.android.material.button.MaterialButton android:id="@+id/tabServer" style="@style/Widget.EV.NavTab" android:layout_width="match_parent" android:layout_height="64dp" android:layout_marginBottom="6dp" android:text="@string/tab_server" app:icon="@drawable/ic_tab_server" />
+                <com.google.android.material.button.MaterialButton android:id="@+id/tabSettings" style="@style/Widget.EV.NavTab" android:layout_width="match_parent" android:layout_height="64dp" android:layout_marginBottom="6dp" android:text="@string/tab_settings" app:icon="@drawable/ic_tab_service" />
                 <com.google.android.material.button.MaterialButton android:id="@+id/tabLog" style="@style/Widget.EV.NavTab" android:layout_width="match_parent" android:layout_height="64dp" android:layout_marginBottom="6dp" android:text="@string/tab_log" app:icon="@drawable/ic_tab_log" />
             </LinearLayout>
         </ScrollView>
         <LinearLayout android:layout_width="0dp" android:layout_weight="1" android:layout_height="match_parent" android:orientation="vertical">
-            <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="horizontal" android:gravity="center_vertical" android:paddingStart="24dp" android:paddingEnd="24dp" android:paddingTop="16dp" android:paddingBottom="8dp">
-                <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:orientation="vertical">
-                    <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_overview_title" android:textAppearance="@style/Text.EV.Title" android:id="@+id/header_title" android:textSize="32sp" />
-                    <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_overview_subtitle" android:textAppearance="@style/Text.EV.Secondary" android:id="@+id/header_subtitle" android:layout_marginTop="6dp" />
-                </LinearLayout>
-                <TextView android:id="@+id/version_badge" style="@style/Text.EV.VersionBadge" android:layout_width="wrap_content" android:layout_height="wrap_content" android:layout_marginEnd="8dp" />
-                <com.google.android.material.button.MaterialButton android:id="@+id/update_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="72dp" android:layout_height="72dp" android:minWidth="0dp" android:padding="0dp" android:contentDescription="@string/update_check" app:icon="@drawable/ic_refresh" app:iconGravity="textStart" app:iconPadding="0dp" app:iconTint="@color/ev_accent" />
-                <com.google.android.material.button.MaterialButton android:id="@+id/about_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="72dp" android:layout_height="72dp" android:layout_marginStart="8dp" android:minWidth="0dp" android:padding="0dp" android:contentDescription="@string/about_action" app:icon="@drawable/ic_info" app:iconGravity="textStart" app:iconPadding="0dp" />
+            <!-- One compact line: the Overview has to fit the car's 1778×720 px window (about 640 dp for
+                 layouts). Version, update check and About are on the Settings tab. -->
+            <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="horizontal" android:gravity="center_vertical" android:baselineAligned="true" android:paddingStart="24dp" android:paddingEnd="24dp" android:paddingTop="10dp" android:paddingBottom="2dp">
+                <TextView android:id="@+id/header_title" android:layout_width="wrap_content" android:layout_height="wrap_content" android:text="@string/design_overview_title" android:textAppearance="@style/Text.EV.Title" android:textSize="24sp" android:maxLines="1" />
+                <TextView android:id="@+id/header_subtitle" android:layout_width="0dp" android:layout_weight="1" android:layout_height="wrap_content" android:layout_marginStart="16dp" android:text="@string/design_overview_subtitle" android:textAppearance="@style/Text.EV.Secondary" android:maxLines="1" android:ellipsize="end" />
             </LinearLayout>
             <androidx.viewpager2.widget.ViewPager2 android:id="@+id/content" android:layout_width="match_parent" android:layout_height="0dp" android:layout_weight="1" />
         </LinearLayout>
diff --git a/app/src/main/res/layout-w1000dp/pane_service.xml b/app/src/main/res/layout-w1000dp/pane_service.xml
index 9eced4d..1298c51 100644
--- a/app/src/main/res/layout-w1000dp/pane_service.xml
+++ b/app/src/main/res/layout-w1000dp/pane_service.xml
@@ -1,24 +1,41 @@
 <?xml version="1.0" encoding="utf-8"?>
-<ScrollView xmlns:android="http://schemas.android.com/apk/res/android" xmlns:app="http://schemas.android.com/apk/res-auto" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true" android:clipToPadding="false">
+<com.evsuite.abrp.StableScrollView xmlns:android="http://schemas.android.com/apk/res/android" xmlns:app="http://schemas.android.com/apk/res-auto" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true" android:clipToPadding="false">
     <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="horizontal" android:padding="24dp" android:baselineAligned="false">
-        <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:orientation="vertical" android:layout_marginEnd="16dp" android:padding="24dp" android:background="@drawable/bg_glass">
-            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_service_controls" android:textAppearance="@style/Text.EV.Eyebrow" />
-            <TextView android:id="@+id/status_text" android:layout_width="match_parent" android:layout_height="wrap_content" android:background="@drawable/bg_input_panel" android:padding="16dp" android:layout_marginTop="20dp" android:layout_marginBottom="12dp" android:text="@string/status_stopped" android:textAppearance="@style/Text.EV.Body" />
-            <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/service_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/label_upload_enabled" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
-            <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/abrp_upload_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/label_abrp_upload_enabled" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
-            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/hint_abrp_upload_enabled" android:textAppearance="@style/Text.EV.Secondary" />
-            <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/autostart_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/label_autostart" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
-            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/hint_autostart" android:textAppearance="@style/Text.EV.Secondary" />
+        <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:orientation="vertical" android:layout_marginEnd="16dp">
+            <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_service_controls" android:textAppearance="@style/Text.EV.Eyebrow" />
+                <TextView android:id="@+id/status_text" android:layout_width="match_parent" android:layout_height="wrap_content" android:background="@drawable/bg_input_panel" android:padding="16dp" android:layout_marginTop="20dp" android:layout_marginBottom="12dp" android:text="@string/state_stopped" android:textAppearance="@style/Text.EV.Body" />
+                <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/abrp_upload_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/label_abrp_upload_enabled" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/hint_abrp_upload_enabled" android:textAppearance="@style/Text.EV.Secondary" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass" android:layout_marginTop="16dp">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_abrp_title" android:textAppearance="@style/Text.EV.Eyebrow" />
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:text="@string/hint_abrp_direct" android:textAppearance="@style/Text.EV.Secondary" />
+                <com.google.android.material.textfield.TextInputLayout android:id="@+id/abrp_api_key_layout" style="@style/Widget.EV.Input" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="18dp" android:hint="@string/hint_abrp_api_key" app:endIconMode="password_toggle" app:endIconMinSize="72dp">
+                    <com.google.android.material.textfield.TextInputEditText android:id="@+id/abrp_api_key_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:inputType="textPassword" android:singleLine="true" android:textSize="20sp" />
+                </com.google.android.material.textfield.TextInputLayout>
+                <com.google.android.material.textfield.TextInputLayout android:id="@+id/abrp_token_layout" style="@style/Widget.EV.Input" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="18dp" android:hint="@string/hint_abrp_token" app:endIconMode="password_toggle" app:endIconMinSize="72dp">
+                    <com.google.android.material.textfield.TextInputEditText android:id="@+id/abrp_token_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:inputType="textPassword" android:singleLine="true" android:textSize="20sp" />
+                </com.google.android.material.textfield.TextInputLayout>
+                <com.google.android.material.button.MaterialButton android:id="@+id/abrp_save_button" style="@style/Widget.EV.Button" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/btn_save" android:layout_marginTop="20dp" />
+                <com.google.android.material.button.MaterialButton android:id="@+id/abrp_test_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/btn_test" android:layout_marginTop="8dp" />
+                <com.google.android.material.button.MaterialButton android:id="@+id/abrp_phone_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/btn_phone_settings" android:layout_marginTop="8dp" />
+                <TextView android:id="@+id/abrp_status_text" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:textAppearance="@style/Text.EV.Body" />
+            </LinearLayout>
         </LinearLayout>
-        <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass">
-            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_service_timing" android:textAppearance="@style/Text.EV.Eyebrow" />
-            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/label_frequency" android:textAppearance="@style/Text.EV.Body" android:layout_marginTop="20dp" />
-            <Spinner android:id="@+id/interval_spinner" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:layout_marginTop="12dp" android:background="@drawable/bg_input_panel" android:popupBackground="@color/ev_surface_raised" android:contentDescription="@string/label_frequency" android:spinnerMode="dropdown" />
-            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/hint_frequency" android:textAppearance="@style/Text.EV.Secondary" android:layout_marginTop="12dp" />
-            <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/boost_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/label_boost_low_soc" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
-            <com.google.android.material.textfield.TextInputLayout android:id="@+id/low_soc_layout" style="@style/Widget.EV.Input" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:hint="@string/label_low_soc_threshold">
-                <com.google.android.material.textfield.TextInputEditText android:id="@+id/low_soc_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:inputType="number" android:maxLength="2" android:textSize="20sp" />
-            </com.google.android.material.textfield.TextInputLayout>
+        <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:orientation="vertical">
+            <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_service_timing" android:textAppearance="@style/Text.EV.Eyebrow" />
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/label_frequency" android:textAppearance="@style/Text.EV.Body" android:layout_marginTop="20dp" />
+                <com.google.android.material.textfield.TextInputLayout style="@style/Widget.EV.Dropdown" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp">
+                    <com.google.android.material.textfield.MaterialAutoCompleteTextView android:id="@+id/interval_choices" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:inputType="none" android:textSize="20sp" app:simpleItemLayout="@layout/dropdown_item" />
+                </com.google.android.material.textfield.TextInputLayout>
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/hint_frequency" android:textAppearance="@style/Text.EV.Secondary" android:layout_marginTop="12dp" />
+                <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/boost_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/label_boost_low_soc" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
+                <com.google.android.material.textfield.TextInputLayout android:id="@+id/low_soc_layout" style="@style/Widget.EV.Input" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:hint="@string/label_low_soc_threshold">
+                    <com.google.android.material.textfield.TextInputEditText android:id="@+id/low_soc_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:inputType="number" android:maxLength="2" android:textSize="20sp" />
+                </com.google.android.material.textfield.TextInputLayout>
+            </LinearLayout>
         </LinearLayout>
     </LinearLayout>
-</ScrollView>
+</com.evsuite.abrp.StableScrollView>
diff --git a/app/src/main/res/layout-w1000dp/pane_settings.xml b/app/src/main/res/layout-w1000dp/pane_settings.xml
new file mode 100644
index 0000000..92822d7
--- /dev/null
+++ b/app/src/main/res/layout-w1000dp/pane_settings.xml
@@ -0,0 +1,56 @@
+<?xml version="1.0" encoding="utf-8"?>
+<com.evsuite.abrp.StableScrollView xmlns:android="http://schemas.android.com/apk/res/android" xmlns:app="http://schemas.android.com/apk/res-auto" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true" android:clipToPadding="false">
+    <!-- Three columns: display and steering wheel | battery | charging price and the app. -->
+    <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="horizontal" android:padding="24dp" android:baselineAligned="false">
+        <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:orientation="vertical" android:layout_marginEnd="16dp">
+            <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_display_title" android:textAppearance="@style/Text.EV.Eyebrow" />
+                <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/full_screen_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/label_full_screen" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/hint_full_screen" android:textAppearance="@style/Text.EV.Secondary" />
+                <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/voice_key_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/label_voice_key" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/hint_voice_key" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/label_tire_unit" android:textAppearance="@style/Text.EV.Body" android:layout_marginTop="20dp" />
+                <com.google.android.material.textfield.TextInputLayout style="@style/Widget.EV.Dropdown" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp">
+                    <com.google.android.material.textfield.MaterialAutoCompleteTextView android:id="@+id/tire_unit_choices" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:inputType="none" android:textSize="20sp" app:simpleItemLayout="@layout/dropdown_item" />
+                </com.google.android.material.textfield.TextInputLayout>
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/label_accent" android:textAppearance="@style/Text.EV.Body" android:layout_marginTop="20dp" />
+                <com.google.android.material.textfield.TextInputLayout style="@style/Widget.EV.Dropdown" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp">
+                    <com.google.android.material.textfield.MaterialAutoCompleteTextView android:id="@+id/accent_choices" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:inputType="none" android:textSize="20sp" app:simpleItemLayout="@layout/dropdown_item" />
+                </com.google.android.material.textfield.TextInputLayout>
+            </LinearLayout>
+        </LinearLayout>
+        <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:orientation="vertical" android:layout_marginEnd="16dp">
+            <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_battery_settings_title" android:textAppearance="@style/Text.EV.Eyebrow" />
+                <com.google.android.material.textfield.TextInputLayout android:id="@+id/consumption_soh_layout" style="@style/Widget.Material3.TextInputLayout.OutlinedBox" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:hint="@string/settings_manual_soh" app:suffixText="@string/unit_percent">
+                    <com.google.android.material.textfield.TextInputEditText android:id="@+id/consumption_soh_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:inputType="numberDecimal" android:maxLength="5" android:minHeight="72dp"/>
+                </com.google.android.material.textfield.TextInputLayout>
+                <com.google.android.material.button.MaterialButton android:id="@+id/consumption_soh_save" style="@style/Widget.EV.Button" android:layout_width="match_parent" android:layout_height="72dp" android:layout_marginTop="8dp" android:text="@string/settings_save_soh_value"/>
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="8dp" android:text="@string/settings_soh_note" android:textAppearance="@style/Text.EV.Secondary"/>
+                <com.google.android.material.textfield.TextInputLayout android:id="@+id/usable_capacity_layout" style="@style/Widget.Material3.TextInputLayout.OutlinedBox" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="20dp" android:hint="@string/hint_usable_capacity" app:suffixText="@string/unit_kwh">
+                    <com.google.android.material.textfield.TextInputEditText android:id="@+id/usable_capacity_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:inputType="numberDecimal" android:maxLength="5" android:minHeight="72dp"/>
+                </com.google.android.material.textfield.TextInputLayout>
+                <com.google.android.material.button.MaterialButton android:id="@+id/usable_capacity_save" style="@style/Widget.EV.Button" android:layout_width="match_parent" android:layout_height="72dp" android:layout_marginTop="8dp" android:text="@string/btn_save_capacity"/>
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="8dp" android:text="@string/helper_usable_capacity" android:textAppearance="@style/Text.EV.Secondary"/>
+            </LinearLayout>
+        </LinearLayout>
+        <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:orientation="vertical">
+            <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_price_title" android:textAppearance="@style/Text.EV.Eyebrow" />
+                <com.google.android.material.textfield.TextInputLayout android:id="@+id/charge_price_layout" style="@style/Widget.Material3.TextInputLayout.OutlinedBox" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:hint="@string/settings_unit_price" app:suffixText="@string/unit_eur_per_kwh">
+                    <com.google.android.material.textfield.TextInputEditText android:id="@+id/charge_price_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:inputType="numberDecimal" android:maxLength="10" android:minHeight="72dp"/>
+                </com.google.android.material.textfield.TextInputLayout>
+                <com.google.android.material.button.MaterialButton android:id="@+id/charge_price_save" style="@style/Widget.EV.Button" android:layout_width="match_parent" android:layout_height="72dp" android:layout_marginTop="8dp" android:text="@string/settings_save_price"/>
+                <com.google.android.material.button.MaterialButton android:id="@+id/settings_phone_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/btn_phone_settings" android:layout_marginTop="8dp" />
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="8dp" android:text="@string/hint_phone_settings" android:textAppearance="@style/Text.EV.Secondary" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass" android:layout_marginTop="16dp">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_app_title" android:textAppearance="@style/Text.EV.Eyebrow" />
+                <TextView android:id="@+id/settings_version" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:textAppearance="@style/Text.EV.Body" />
+                <com.google.android.material.button.MaterialButton android:id="@+id/settings_update_button" style="@style/Widget.EV.Button" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="16dp" android:text="@string/btn_check_update" app:icon="@drawable/ic_refresh" />
+                <com.google.android.material.button.MaterialButton android:id="@+id/settings_usb_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="8dp" android:text="@string/btn_usb_update" />
+                <com.google.android.material.button.MaterialButton android:id="@+id/settings_about_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="8dp" android:text="@string/btn_about" app:icon="@drawable/ic_info" />
+            </LinearLayout>
+        </LinearLayout>
+    </LinearLayout>
+</com.evsuite.abrp.StableScrollView>
diff --git a/app/src/main/res/layout-w1000dp/pane_vehicle.xml b/app/src/main/res/layout-w1000dp/pane_vehicle.xml
index 676aa76..ea5ac85 100644
--- a/app/src/main/res/layout-w1000dp/pane_vehicle.xml
+++ b/app/src/main/res/layout-w1000dp/pane_vehicle.xml
@@ -1,6 +1,64 @@
 <?xml version="1.0" encoding="utf-8"?>
-<ScrollView xmlns:android="http://schemas.android.com/apk/res/android" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true" android:clipToPadding="false">
-    <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp">
+<com.evsuite.abrp.StableScrollView xmlns:android="http://schemas.android.com/apk/res/android" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true" android:clipToPadding="false">
+    <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:paddingStart="24dp" android:paddingEnd="24dp" android:paddingTop="12dp" android:paddingBottom="12dp">
+        <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="horizontal" android:baselineAligned="false">
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_battery_card" android:layout_weight="1" android:layout_marginEnd="10dp">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_battery_short" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_soc" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_charging" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass" android:layout_weight="1" android:layout_marginEnd="10dp">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_range" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_range" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:layout_marginEnd="10dp" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_range_trip" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_range_trip" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_range_trip_note" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:layout_marginEnd="10dp" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_range_average" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_range_average" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_range_average_note" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass" android:layout_weight="1" android:layout_marginEnd="10dp">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_power" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_power" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass" android:layout_weight="1" android:layout_marginEnd="10dp">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_speed" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_speed" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+            </LinearLayout>
+        </LinearLayout>
+        <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="16dp" android:orientation="horizontal" android:baselineAligned="false">
+            <Space android:layout_width="0dp" android:layout_height="1dp" android:layout_weight="1" android:layout_marginEnd="10dp" />
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:layout_marginEnd="10dp" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_energy_trip" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_energy_trip" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_energy_trip_note" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:layout_marginEnd="10dp" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_usage_trip" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_usage_trip" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_usage_trip_note" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:layout_marginEnd="10dp" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_usage_average" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_usage_average" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_usage_average_note" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:layout_marginEnd="10dp" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_power_average" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_power_average" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_power_average_note" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:layout_marginEnd="10dp" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_speed_average" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_speed_average" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_speed_average_note" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+        </LinearLayout>
+        <Space android:layout_width="1dp" android:layout_height="16dp" />
         <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="horizontal" android:baselineAligned="false">
             <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:orientation="vertical" android:layout_marginEnd="16dp" android:padding="20dp" android:background="@drawable/bg_glass">
                 <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_energy" android:textAppearance="@style/Text.EV.Eyebrow" android:layout_marginBottom="12dp" />
@@ -17,45 +75,25 @@
             </LinearLayout>
             <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:orientation="vertical" android:padding="20dp" android:background="@drawable/bg_glass">
                 <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_tires" android:textAppearance="@style/Text.EV.Eyebrow" />
-                <LinearLayout android:layout_width="match_parent" android:layout_height="224dp" android:orientation="horizontal" android:gravity="center_vertical">
+                <LinearLayout android:layout_width="match_parent" android:layout_height="196dp" android:orientation="horizontal" android:gravity="center_vertical">
                     <LinearLayout android:layout_width="0dp" android:layout_height="match_parent" android:layout_weight="1" android:orientation="vertical" android:gravity="center">
                         <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_tire_fl" android:textAppearance="@style/Text.EV.Secondary" android:gravity="center" />
-                        <TextView android:id="@+id/vehicle_tire_fl" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="@color/ev_cyan" />
+                        <TextView android:id="@+id/vehicle_tire_fl" android:fontFeatureSettings="tnum" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="?attr/evAccentLight" />
                         <Space android:layout_width="1dp" android:layout_height="44dp" />
                         <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_tire_rl" android:textAppearance="@style/Text.EV.Secondary" android:gravity="center" />
-                        <TextView android:id="@+id/vehicle_tire_rl" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="@color/ev_cyan" />
+                        <TextView android:id="@+id/vehicle_tire_rl" android:fontFeatureSettings="tnum" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="?attr/evAccentLight" />
                     </LinearLayout>
                     <ImageView android:layout_width="92dp" android:layout_height="180dp" android:src="@drawable/ic_vehicle_outline" android:contentDescription="@string/design_car_desc" />
                     <LinearLayout android:layout_width="0dp" android:layout_height="match_parent" android:layout_weight="1" android:orientation="vertical" android:gravity="center">
                         <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_tire_fr" android:textAppearance="@style/Text.EV.Secondary" android:gravity="center" />
-                        <TextView android:id="@+id/vehicle_tire_fr" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="@color/ev_cyan" />
+                        <TextView android:id="@+id/vehicle_tire_fr" android:fontFeatureSettings="tnum" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="?attr/evAccentLight" />
                         <Space android:layout_width="1dp" android:layout_height="44dp" />
                         <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_tire_rr" android:textAppearance="@style/Text.EV.Secondary" android:gravity="center" />
-                        <TextView android:id="@+id/vehicle_tire_rr" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="@color/ev_cyan" />
+                        <TextView android:id="@+id/vehicle_tire_rr" android:fontFeatureSettings="tnum" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="?attr/evAccentLight" />
                     </LinearLayout>
                 </LinearLayout>
                 <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_no_data" android:textAppearance="@style/Text.EV.Secondary" />
             </LinearLayout>
         </LinearLayout>
-        <Space android:layout_width="1dp" android:layout_height="16dp" />
-        <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="horizontal" android:baselineAligned="false">
-            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_battery_card" android:layout_weight="1" android:layout_marginEnd="10dp">
-                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_battery_short" android:textAppearance="@style/Text.EV.Secondary" />
-                <TextView android:id="@+id/vehicle_soc" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
-                <TextView android:id="@+id/vehicle_charging" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:textAppearance="@style/Text.EV.Secondary" android:textColor="@color/ev_cyan" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
-            </LinearLayout>
-            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass" android:layout_weight="1" android:layout_marginEnd="10dp">
-                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_range" android:textAppearance="@style/Text.EV.Secondary" />
-                <TextView android:id="@+id/vehicle_range" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
-            </LinearLayout>
-            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass" android:layout_weight="1" android:layout_marginEnd="10dp">
-                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_power" android:textAppearance="@style/Text.EV.Secondary" />
-                <TextView android:id="@+id/vehicle_power" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
-            </LinearLayout>
-            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass" android:layout_weight="1" android:layout_marginEnd="10dp">
-                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_speed" android:textAppearance="@style/Text.EV.Secondary" />
-                <TextView android:id="@+id/vehicle_speed" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
-            </LinearLayout>
-        </LinearLayout>
     </LinearLayout>
-</ScrollView>
+</com.evsuite.abrp.StableScrollView>
diff --git a/app/src/main/res/layout-w1000dp/pane_wifi.xml b/app/src/main/res/layout-w1000dp/pane_wifi.xml
deleted file mode 100644
index a6485be..0000000
--- a/app/src/main/res/layout-w1000dp/pane_wifi.xml
+++ /dev/null
@@ -1,17 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<ScrollView xmlns:android="http://schemas.android.com/apk/res/android" xmlns:app="http://schemas.android.com/apk/res-auto" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true" android:clipToPadding="false">
-    <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="horizontal" android:padding="24dp" android:baselineAligned="false">
-        <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1.3" android:orientation="vertical" android:layout_marginEnd="16dp" android:padding="24dp" android:background="@drawable/bg_glass">
-            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/wifi_card_title" android:textAppearance="@style/Text.EV.Eyebrow" />
-            <TextView android:id="@+id/wifi_ssid" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:textAppearance="@style/Text.EV.Metric" android:layout_marginTop="20dp" />
-            <TextView android:id="@+id/wifi_state" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:textAppearance="@style/Text.EV.Secondary" android:layout_marginTop="12dp" />
-            <com.google.android.material.button.MaterialButton android:id="@+id/wifi_connect_button" style="@style/Widget.EV.Button" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/wifi_connect_now" android:layout_marginTop="24dp" />
-            <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/wifi_auto_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/wifi_auto_label" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
-            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/wifi_auto_hint" android:textAppearance="@style/Text.EV.Secondary" />
-        </LinearLayout>
-        <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass">
-            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/wifi_saved_title" android:textAppearance="@style/Text.EV.Eyebrow" />
-            <TextView android:id="@+id/wifi_saved_list" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="20dp" android:textAppearance="@style/Text.EV.Body" android:lineSpacingExtra="16dp" />
-        </LinearLayout>
-    </LinearLayout>
-</ScrollView>
diff --git a/app/src/main/res/layout-w600dp/dialog_about.xml b/app/src/main/res/layout-w600dp/dialog_about.xml
index d0994a6..73569f8 100644
--- a/app/src/main/res/layout-w600dp/dialog_about.xml
+++ b/app/src/main/res/layout-w600dp/dialog_about.xml
@@ -4,14 +4,14 @@
     <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/about_title" android:textAppearance="@style/Text.EV.Eyebrow" android:layout_marginBottom="24dp"/>
     <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="horizontal" android:baselineAligned="false">
       <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:layout_marginEnd="32dp" android:orientation="vertical">
-        <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_brand" android:textAppearance="@style/Text.EV.Hero" android:textColor="@color/ev_accent"/>
+        <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_brand" android:textAppearance="@style/Text.EV.Hero" android:textColor="?attr/evAccent"/>
         <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_brand_caption" android:textAppearance="@style/Text.EV.Title" android:layout_marginTop="12dp"/>
         <TextView android:id="@+id/about_version" android:layout_width="match_parent" android:layout_height="wrap_content" android:textAppearance="@style/Text.EV.Secondary" android:layout_marginTop="8dp"/>
         <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/about_attribution" android:textAppearance="@style/Text.EV.Secondary" android:lineSpacingMultiplier="1.3" android:layout_marginTop="24dp"/>
       </LinearLayout>
       <LinearLayout android:layout_width="240dp" android:layout_height="wrap_content" android:orientation="vertical">
         <ImageView android:id="@+id/about_qr_code" android:layout_width="160dp" android:layout_height="160dp" android:layout_gravity="center_horizontal" android:background="#FFFFFF" android:padding="8dp" android:scaleType="fitCenter" android:contentDescription="@string/about_qr_description"/>
-        <TextView android:id="@+id/about_repository" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:gravity="center" android:clickable="true" android:focusable="true" android:background="?attr/selectableItemBackground" android:text="@string/about_repository" android:textAppearance="@style/Text.EV.Secondary" android:textColor="@color/ev_cyan" android:paddingTop="12dp" android:paddingBottom="12dp"/>
+        <TextView android:id="@+id/about_repository" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:gravity="center" android:clickable="true" android:focusable="true" android:background="?attr/selectableItemBackground" android:text="@string/about_repository" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:paddingTop="12dp" android:paddingBottom="12dp"/>
       </LinearLayout>
     </LinearLayout>
     <View android:layout_width="match_parent" android:layout_height="1dp" android:background="@color/ev_outline" android:layout_marginTop="24dp" android:layout_marginBottom="12dp"/>
diff --git a/app/src/main/res/layout/activity_main.xml b/app/src/main/res/layout/activity_main.xml
index 4a92f4f..1a8270b 100644
--- a/app/src/main/res/layout/activity_main.xml
+++ b/app/src/main/res/layout/activity_main.xml
@@ -2,22 +2,20 @@
 <FrameLayout xmlns:android="http://schemas.android.com/apk/res/android" xmlns:app="http://schemas.android.com/apk/res-auto" android:id="@+id/app_root" android:layout_width="match_parent" android:layout_height="match_parent" android:fitsSystemWindows="true" android:background="@color/ev_background">
   <com.evsuite.abrp.PremiumBackdropView android:layout_width="match_parent" android:layout_height="match_parent"/>
   <LinearLayout android:layout_width="match_parent" android:layout_height="match_parent" android:orientation="vertical">
-    <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="horizontal" android:gravity="center_vertical" android:paddingStart="24dp" android:paddingEnd="24dp" android:paddingTop="16dp" android:paddingBottom="8dp">
-      <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_weight="1" android:orientation="vertical">
-        <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_overview_title" android:textAppearance="@style/Text.EV.Title" android:id="@+id/header_title" android:textSize="24sp"/>
-        <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_overview_subtitle" android:textAppearance="@style/Text.EV.Secondary" android:id="@+id/header_subtitle" android:layout_marginTop="6dp"/>
-      </LinearLayout>
-      <TextView android:id="@+id/version_badge" style="@style/Text.EV.VersionBadge" android:layout_width="wrap_content" android:layout_height="wrap_content" android:layout_marginEnd="8dp"/>
-      <com.google.android.material.button.MaterialButton android:id="@+id/update_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="72dp" android:layout_height="72dp" android:minWidth="0dp" android:padding="0dp" android:contentDescription="@string/update_check" app:icon="@drawable/ic_refresh" app:iconGravity="textStart" app:iconPadding="0dp" app:iconTint="@color/ev_accent"/>
-      <com.google.android.material.button.MaterialButton android:id="@+id/about_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="72dp" android:layout_height="72dp" android:layout_marginStart="8dp" android:minWidth="0dp" android:padding="0dp" android:contentDescription="@string/about_action" app:icon="@drawable/ic_info" app:iconGravity="textStart" app:iconPadding="0dp"/>
+    <!-- One compact line: the Overview has to fit the car's 1778×720 px window (about 640 dp for
+         layouts). Version, update check and About are on the Settings tab. -->
+    <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="horizontal" android:gravity="center_vertical" android:baselineAligned="true" android:paddingStart="24dp" android:paddingEnd="24dp" android:paddingTop="10dp" android:paddingBottom="2dp">
+        <TextView android:id="@+id/header_title" android:layout_width="wrap_content" android:layout_height="wrap_content" android:text="@string/design_overview_title" android:textAppearance="@style/Text.EV.Title" android:textSize="24sp" android:maxLines="1" />
+        <TextView android:id="@+id/header_subtitle" android:layout_width="0dp" android:layout_weight="1" android:layout_height="wrap_content" android:layout_marginStart="16dp" android:text="@string/design_overview_subtitle" android:textAppearance="@style/Text.EV.Secondary" android:maxLines="1" android:ellipsize="end" />
     </LinearLayout>
     <androidx.viewpager2.widget.ViewPager2 android:id="@+id/content" android:layout_width="match_parent" android:layout_height="0dp" android:layout_weight="1"/>
     <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="horizontal" android:padding="8dp" android:background="@drawable/bg_sidebar">
       <com.google.android.material.button.MaterialButton android:id="@+id/tabVehicle" style="@style/Widget.EV.NavTab.Compact" android:layout_width="0dp" android:layout_height="76dp" android:layout_weight="1" android:text="@string/tab_vehicle" app:icon="@drawable/ic_tab_vehicle"/>
       <com.google.android.material.button.MaterialButton android:id="@+id/tabConsumption" style="@style/Widget.EV.NavTab.Compact" android:layout_width="0dp" android:layout_height="76dp" android:layout_weight="1" android:text="@string/tab_consumption" app:icon="@drawable/ic_tab_vehicle"/>
-      <com.google.android.material.button.MaterialButton android:id="@+id/tabCharging" style="@style/Widget.EV.NavTab.Compact" android:layout_width="0dp" android:layout_height="76dp" android:layout_weight="1" android:text="@string/tab_charging" app:icon="@drawable/ic_tab_service"/>
-      <com.google.android.material.button.MaterialButton android:id="@+id/tabService" style="@style/Widget.EV.NavTab.Compact" android:layout_width="0dp" android:layout_height="76dp" android:layout_weight="1" android:text="@string/tab_service" app:icon="@drawable/ic_tab_service"/>
-      <com.google.android.material.button.MaterialButton android:id="@+id/tabWifi" style="@style/Widget.EV.NavTab.Compact" android:layout_width="0dp" android:layout_height="76dp" android:layout_weight="1" android:text="@string/tab_wifi" app:icon="@drawable/ic_tab_wifi"/>
+      <com.google.android.material.button.MaterialButton android:id="@+id/tabCharging" style="@style/Widget.EV.NavTab.Compact" android:layout_width="0dp" android:layout_height="76dp" android:layout_weight="1" android:text="@string/tab_charging" app:icon="@drawable/ic_tab_charging"/>
+      <com.google.android.material.button.MaterialButton android:id="@+id/tabService" style="@style/Widget.EV.NavTab.Compact" android:layout_width="0dp" android:layout_height="76dp" android:layout_weight="1" android:text="@string/tab_service" app:icon="@drawable/ic_tab_live"/>
+      <com.google.android.material.button.MaterialButton android:id="@+id/tabServer" style="@style/Widget.EV.NavTab.Compact" android:layout_width="0dp" android:layout_height="76dp" android:layout_weight="1" android:text="@string/tab_server" app:icon="@drawable/ic_tab_server"/>
+      <com.google.android.material.button.MaterialButton android:id="@+id/tabSettings" style="@style/Widget.EV.NavTab.Compact" android:layout_width="0dp" android:layout_height="76dp" android:layout_weight="1" android:text="@string/tab_settings" app:icon="@drawable/ic_tab_service"/>
       <com.google.android.material.button.MaterialButton android:id="@+id/tabLog" style="@style/Widget.EV.NavTab.Compact" android:layout_width="0dp" android:layout_height="76dp" android:layout_weight="1" android:text="@string/tab_log" app:icon="@drawable/ic_tab_log"/>
     </LinearLayout>
   </LinearLayout>
diff --git a/app/src/main/res/layout/dialog_about.xml b/app/src/main/res/layout/dialog_about.xml
index 5b4a7ac..d552f4c 100644
--- a/app/src/main/res/layout/dialog_about.xml
+++ b/app/src/main/res/layout/dialog_about.xml
@@ -2,13 +2,13 @@
 <ScrollView xmlns:android="http://schemas.android.com/apk/res/android" android:layout_width="match_parent" android:layout_height="wrap_content" android:background="@drawable/bg_glass" android:clipToOutline="true">
   <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="28dp">
     <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/about_title" android:textAppearance="@style/Text.EV.Eyebrow" android:layout_marginBottom="24dp"/>
-    <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_brand" android:textAppearance="@style/Text.EV.Hero" android:textColor="@color/ev_accent"/>
+    <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_brand" android:textAppearance="@style/Text.EV.Hero" android:textColor="?attr/evAccent"/>
     <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_brand_caption" android:textAppearance="@style/Text.EV.Title" android:layout_marginTop="12dp"/>
     <TextView android:id="@+id/about_version" android:layout_width="match_parent" android:layout_height="wrap_content" android:textAppearance="@style/Text.EV.Secondary" android:layout_marginTop="8dp"/>
     <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/about_attribution" android:textAppearance="@style/Text.EV.Secondary" android:lineSpacingMultiplier="1.3" android:layout_marginTop="24dp"/>
     <Space android:layout_width="1dp" android:layout_height="24dp"/>
     <ImageView android:id="@+id/about_qr_code" android:layout_width="160dp" android:layout_height="160dp" android:layout_gravity="center_horizontal" android:background="#FFFFFF" android:padding="8dp" android:scaleType="fitCenter" android:contentDescription="@string/about_qr_description"/>
-    <TextView android:id="@+id/about_repository" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:gravity="center" android:clickable="true" android:focusable="true" android:background="?attr/selectableItemBackground" android:text="@string/about_repository" android:textAppearance="@style/Text.EV.Secondary" android:textColor="@color/ev_cyan" android:paddingTop="12dp" android:paddingBottom="12dp"/>
+    <TextView android:id="@+id/about_repository" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:gravity="center" android:clickable="true" android:focusable="true" android:background="?attr/selectableItemBackground" android:text="@string/about_repository" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:paddingTop="12dp" android:paddingBottom="12dp"/>
     <View android:layout_width="match_parent" android:layout_height="1dp" android:background="@color/ev_outline" android:layout_marginTop="24dp" android:layout_marginBottom="12dp"/>
     <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/about_made_with_love" android:textAppearance="@style/Text.EV.Secondary" android:layout_marginBottom="12dp"/>
     <com.google.android.material.button.MaterialButton android:id="@+id/about_close" style="@style/Widget.EV.Button.Outlined" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/about_close"/>
diff --git a/app/src/main/res/layout/dropdown_item.xml b/app/src/main/res/layout/dropdown_item.xml
new file mode 100644
index 0000000..623a16f
--- /dev/null
+++ b/app/src/main/res/layout/dropdown_item.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- One row of a drop-down list (Widget.EV.Dropdown): a full touch target, body text size. -->
+<TextView xmlns:android="http://schemas.android.com/apk/res/android"
+    android:layout_width="match_parent"
+    android:layout_height="wrap_content"
+    android:minHeight="@dimen/touch_target"
+    android:gravity="center_vertical"
+    android:paddingStart="20dp"
+    android:paddingEnd="20dp"
+    android:textAppearance="@style/Text.EV.Body"
+    android:textColor="@color/ev_text_primary"
+    android:maxLines="1"
+    android:ellipsize="end" />
diff --git a/app/src/main/res/layout/pane_charging.xml b/app/src/main/res/layout/pane_charging.xml
index 4d561aa..02e6819 100644
--- a/app/src/main/res/layout/pane_charging.xml
+++ b/app/src/main/res/layout/pane_charging.xml
@@ -1,31 +1,24 @@
 <?xml version="1.0" encoding="utf-8"?>
-<ScrollView xmlns:android="http://schemas.android.com/apk/res/android" xmlns:app="http://schemas.android.com/apk/res-auto" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true">
+<com.evsuite.abrp.StableScrollView xmlns:android="http://schemas.android.com/apk/res/android" xmlns:app="http://schemas.android.com/apk/res-auto" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true">
  <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp">
   <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="20dp" android:background="@drawable/bg_glass">
-   <TextView android:id="@+id/charge_status" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="Şarj yok" android:textAppearance="@style/Text.EV.Title" android:textColor="@color/ev_cyan"/>
+   <TextView android:id="@+id/charge_status" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/charging_not_charging" android:textAppearance="@style/Text.EV.Title" android:textColor="?attr/evAccentLight"/>
    <GridLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:columnCount="2" android:layout_marginTop="12dp">
-    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="SOC" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_soc" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="—" android:textAppearance="@style/DataValue"/>
-    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="Başlangıç SOC" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_start_soc" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="—" android:textAppearance="@style/DataValue"/>
-    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="Batarya voltajı" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_voltage" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="—" android:textAppearance="@style/DataValue"/>
-    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="Batarya akımı" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_current" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="—" android:textAppearance="@style/DataValue"/>
-    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="Şarj gücü" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_power" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="—" android:textAppearance="@style/DataValue"/>
-    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="Bataryaya giren net enerji" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_energy" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="—" android:textAppearance="@style/DataValue"/>
-    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="Şebekeden alınan (+%10)" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_grid_energy" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="—" android:textAppearance="@style/DataValue"/>
-    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="Şarj süresi" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_duration" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="—" android:textAppearance="@style/DataValue"/>
-    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="Toplam ücret" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_total_cost" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="—" android:textAppearance="@style/DataValue"/>
+    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/charging_soc" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_soc" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/no_value" android:textAppearance="@style/DataValue"/>
+    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/charging_start_soc" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_start_soc" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/no_value" android:textAppearance="@style/DataValue"/>
+    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/charging_battery_voltage" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_voltage" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/no_value" android:textAppearance="@style/DataValue"/>
+    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/charging_battery_current" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_current" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/no_value" android:textAppearance="@style/DataValue"/>
+    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/charging_power_label" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_power" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/no_value" android:textAppearance="@style/DataValue"/>
+    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/charging_net_energy_into_battery" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_energy" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/no_value" android:textAppearance="@style/DataValue"/>
+    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/charging_drawn_from_grid" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_grid_energy" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/no_value" android:textAppearance="@style/DataValue"/>
+    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/charging_time_label" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_duration" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/no_value" android:textAppearance="@style/DataValue"/>
+    <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/charging_total_cost" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/charge_total_cost" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="10dp" android:text="@string/no_value" android:textAppearance="@style/DataValue"/>
    </GridLayout>
   </LinearLayout>
   <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="20dp" android:layout_marginTop="16dp" android:background="@drawable/bg_glass">
-   <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="ŞARJ FİYATI" android:textAppearance="@style/Text.EV.Eyebrow"/>
-   <com.google.android.material.textfield.TextInputLayout android:id="@+id/charge_price_layout" style="@style/Widget.Material3.TextInputLayout.OutlinedBox" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:hint="Birim fiyat" app:suffixText="₺/kWh">
-    <com.google.android.material.textfield.TextInputEditText android:id="@+id/charge_price_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:inputType="numberDecimal" android:maxLength="10" android:minHeight="72dp"/>
-   </com.google.android.material.textfield.TextInputLayout>
-   <com.google.android.material.button.MaterialButton android:id="@+id/charge_price_save" style="@style/Widget.EV.Button" android:layout_width="match_parent" android:layout_height="72dp" android:layout_marginTop="8dp" android:text="Fiyatı kaydet"/>
-  </LinearLayout>
-  <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="20dp" android:layout_marginTop="16dp" android:background="@drawable/bg_glass">
-   <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="ŞARJ EĞRİSİ" android:textAppearance="@style/Text.EV.Eyebrow"/>
+   <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/charging_curve_title" android:textAppearance="@style/Text.EV.Eyebrow"/>
    <com.evsuite.abrp.ChargingGraphView android:id="@+id/charge_graph" android:layout_width="match_parent" android:layout_height="280dp" android:layout_marginTop="12dp"/>
-   <TextView android:id="@+id/charge_curve_table" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="16dp" android:fontFamily="monospace" android:text="Henüz şarj ölçümü yok" android:textAppearance="@style/Text.EV.Body" android:textColor="@color/ev_cyan"/>
+   <TextView android:id="@+id/charge_curve_table" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="16dp" android:fontFamily="monospace" android:text="@string/charging_no_charging_measurements_yet" android:textAppearance="@style/Text.EV.Body" android:textColor="?attr/evAccentLight"/>
   </LinearLayout>
  </LinearLayout>
-</ScrollView>
+</com.evsuite.abrp.StableScrollView>
diff --git a/app/src/main/res/layout/pane_consumption.xml b/app/src/main/res/layout/pane_consumption.xml
index bb614af..1d59919 100644
--- a/app/src/main/res/layout/pane_consumption.xml
+++ b/app/src/main/res/layout/pane_consumption.xml
@@ -1,43 +1,35 @@
 <?xml version="1.0" encoding="utf-8"?>
-<ScrollView xmlns:android="http://schemas.android.com/apk/res/android" xmlns:app="http://schemas.android.com/apk/res-auto" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true">
+<com.evsuite.abrp.StableScrollView xmlns:android="http://schemas.android.com/apk/res/android" xmlns:app="http://schemas.android.com/apk/res-auto" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true">
   <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp">
     <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="20dp" android:background="@drawable/bg_glass">
       <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="horizontal" android:gravity="center_vertical">
-        <TextView android:layout_width="0dp" android:layout_weight="1" android:layout_height="wrap_content" android:text="TÜKETİM DÖNEMİ" android:textAppearance="@style/Text.EV.Eyebrow"/>
-        <com.google.android.material.button.MaterialButton android:id="@+id/consumption_refresh" style="@style/Widget.EV.Button.Outlined" android:layout_width="48dp" android:layout_height="48dp" android:minWidth="0dp" android:padding="0dp" android:contentDescription="Yenile" app:icon="@drawable/ic_refresh" app:iconGravity="textStart" app:iconPadding="0dp" app:iconTint="@color/ev_accent"/>
+        <TextView android:layout_width="0dp" android:layout_weight="1" android:layout_height="wrap_content" android:text="@string/consumption_period_title" android:textAppearance="@style/Text.EV.Eyebrow"/>
+        <com.google.android.material.button.MaterialButton android:id="@+id/consumption_refresh" style="@style/Widget.EV.Button.Outlined" android:layout_width="48dp" android:layout_height="48dp" android:minWidth="0dp" android:padding="0dp" android:contentDescription="@string/btn_refresh" app:icon="@drawable/ic_refresh" app:iconGravity="textStart" app:iconPadding="0dp" app:iconTint="?attr/evAccent"/>
       </LinearLayout>
       <HorizontalScrollView android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="8dp" android:scrollbars="none">
        <LinearLayout android:layout_width="wrap_content" android:layout_height="wrap_content" android:orientation="horizontal">
-        <com.google.android.material.button.MaterialButton android:id="@+id/consumption_lifetime" style="@style/Widget.EV.Button.Outlined" android:layout_width="wrap_content" android:layout_height="56dp" android:text="Tüm zamanlar"/>
-        <com.google.android.material.button.MaterialButton android:id="@+id/consumption_week" style="@style/Widget.EV.Button.Outlined" android:layout_width="wrap_content" android:layout_height="56dp" android:layout_marginStart="8dp" android:text="Son 7 gün"/>
-        <com.google.android.material.button.MaterialButton android:id="@+id/consumption_month" style="@style/Widget.EV.Button.Outlined" android:layout_width="wrap_content" android:layout_height="56dp" android:layout_marginStart="8dp" android:text="Son 30 gün"/>
-        <com.google.android.material.button.MaterialButton android:id="@+id/consumption_trip_a" style="@style/Widget.EV.Button.Outlined" android:layout_width="wrap_content" android:layout_height="56dp" android:layout_marginStart="8dp" android:text="Trip A"/>
-        <com.google.android.material.button.MaterialButton android:id="@+id/consumption_trip_b" style="@style/Widget.EV.Button.Outlined" android:layout_width="wrap_content" android:layout_height="56dp" android:layout_marginStart="8dp" android:text="Trip B"/>
+        <com.google.android.material.button.MaterialButton android:id="@+id/consumption_lifetime" style="@style/Widget.EV.Button.Outlined" android:layout_width="wrap_content" android:layout_height="56dp" android:text="@string/consumption_lifetime"/>
+        <com.google.android.material.button.MaterialButton android:id="@+id/consumption_week" style="@style/Widget.EV.Button.Outlined" android:layout_width="wrap_content" android:layout_height="56dp" android:layout_marginStart="8dp" android:text="@string/consumption_last_7_days"/>
+        <com.google.android.material.button.MaterialButton android:id="@+id/consumption_month" style="@style/Widget.EV.Button.Outlined" android:layout_width="wrap_content" android:layout_height="56dp" android:layout_marginStart="8dp" android:text="@string/consumption_last_30_days"/>
+        <com.google.android.material.button.MaterialButton android:id="@+id/consumption_trip_a" style="@style/Widget.EV.Button.Outlined" android:layout_width="wrap_content" android:layout_height="56dp" android:layout_marginStart="8dp" android:text="@string/consumption_trip_a"/>
+        <com.google.android.material.button.MaterialButton android:id="@+id/consumption_trip_b" style="@style/Widget.EV.Button.Outlined" android:layout_width="wrap_content" android:layout_height="56dp" android:layout_marginStart="8dp" android:text="@string/consumption_trip_b"/>
        </LinearLayout>
       </HorizontalScrollView>
       <GridLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:columnCount="2">
-        <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="Mesafe" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/consumption_distance" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="—" android:textAppearance="@style/DataValue"/>
-        <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="Net enerji" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/consumption_energy" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="—" android:textAppearance="@style/DataValue"/>
-        <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="Ortalama tüketim" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/consumption_average" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="—" android:textAppearance="@style/DataValue"/>
-        <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="Ortalama hız" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/consumption_speed" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="—" android:textAppearance="@style/DataValue"/>
-        <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="Süre" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/consumption_time" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="—" android:textAppearance="@style/DataValue"/>
-        <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="SOC farkı" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/consumption_soc" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="—" android:textAppearance="@style/DataValue"/>
+        <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="@string/consumption_distance" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/consumption_distance" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="@string/no_value" android:textAppearance="@style/DataValue"/>
+        <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="@string/consumption_net_energy" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/consumption_energy" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="@string/no_value" android:textAppearance="@style/DataValue"/>
+        <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="@string/consumption_average_consumption" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/consumption_average" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="@string/no_value" android:textAppearance="@style/DataValue"/>
+        <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="@string/consumption_average_speed" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/consumption_speed" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="@string/no_value" android:textAppearance="@style/DataValue"/>
+        <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="@string/consumption_duration" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/consumption_time" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="@string/no_value" android:textAppearance="@style/DataValue"/>
+        <TextView android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="@string/consumption_soc_change" android:textAppearance="@style/DataLabel"/><TextView android:id="@+id/consumption_soc" android:layout_width="0dp" android:layout_columnWeight="1" android:padding="12dp" android:text="@string/no_value" android:textAppearance="@style/DataValue"/>
       </GridLayout>
-      <com.google.android.material.button.MaterialButton android:id="@+id/consumption_reset" style="@style/Widget.EV.Button.Outlined" android:layout_width="match_parent" android:layout_height="64dp" android:layout_marginTop="12dp" android:text="Seçili tripi sıfırla" android:visibility="gone"/>
+      <com.google.android.material.button.MaterialButton android:id="@+id/consumption_reset" style="@style/Widget.EV.Button.Outlined" android:layout_width="match_parent" android:layout_height="64dp" android:layout_marginTop="12dp" android:text="@string/consumption_reset_selected_trip" android:visibility="gone"/>
     </LinearLayout>
-    <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:text="Son 7/30 gün, tüm zamanlar ve Trip A/B cihazda kalıcı saklanır; uygulama ve OTA güncellemeleriyle silinmez." android:textAppearance="@style/Text.EV.Secondary"/>
+    <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:text="@string/consumption_stored_note" android:textAppearance="@style/Text.EV.Secondary"/>
     <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="20dp" android:layout_marginTop="16dp" android:background="@drawable/bg_glass">
-      <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="BATARYA SAĞLIĞI (SOH)" android:textAppearance="@style/Text.EV.Eyebrow"/>
-      <com.google.android.material.textfield.TextInputLayout android:id="@+id/consumption_soh_layout" style="@style/Widget.Material3.TextInputLayout.OutlinedBox" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:hint="Manuel SoH (%)" app:suffixText="%">
-        <com.google.android.material.textfield.TextInputEditText android:id="@+id/consumption_soh_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:inputType="numberDecimal" android:maxLength="5" android:minHeight="72dp"/>
-      </com.google.android.material.textfield.TextInputLayout>
-      <com.google.android.material.button.MaterialButton android:id="@+id/consumption_soh_save" style="@style/Widget.EV.Button" android:layout_width="match_parent" android:layout_height="72dp" android:layout_marginTop="8dp" android:text="SoH değerini kaydet"/>
-      <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="8dp" android:text="Bu manuel değer cihazda saklanır ve MongoDB'deki tüm zamanlar kaydına eklenir." android:textAppearance="@style/Text.EV.Secondary"/>
-    </LinearLayout>
-    <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="20dp" android:layout_marginTop="16dp" android:background="@drawable/bg_glass">
-      <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="GÜNLÜK KAYIT · SON 4 AY" android:textAppearance="@style/Text.EV.Eyebrow"/>
-      <com.google.android.material.button.MaterialButton android:id="@+id/consumption_date_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="match_parent" android:layout_height="56dp" android:layout_marginTop="12dp" android:text="Tarih seç"/>
-      <TextView android:id="@+id/consumption_daily_history" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:fontFamily="monospace" android:text="Henüz günlük veri yok" android:textAppearance="@style/Text.EV.Body" android:textColor="@color/ev_cyan"/>
+      <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/consumption_daily_log_title" android:textAppearance="@style/Text.EV.Eyebrow"/>
+      <com.google.android.material.button.MaterialButton android:id="@+id/consumption_date_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="match_parent" android:layout_height="56dp" android:layout_marginTop="12dp" android:text="@string/consumption_pick_a_date"/>
+      <TextView android:id="@+id/consumption_daily_history" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:fontFamily="monospace" android:text="@string/consumption_no_daily_data_yet" android:textAppearance="@style/Text.EV.Body" android:textColor="?attr/evAccentLight"/>
     </LinearLayout>
   </LinearLayout>
-</ScrollView>
+</com.evsuite.abrp.StableScrollView>
diff --git a/app/src/main/res/layout/pane_log.xml b/app/src/main/res/layout/pane_log.xml
index 31ea5d8..7bfc7fc 100644
--- a/app/src/main/res/layout/pane_log.xml
+++ b/app/src/main/res/layout/pane_log.xml
@@ -1,8 +1,8 @@
 <?xml version="1.0" encoding="utf-8"?>
-<ScrollView xmlns:android="http://schemas.android.com/apk/res/android" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true" android:clipToPadding="false">
+<com.evsuite.abrp.StableScrollView xmlns:android="http://schemas.android.com/apk/res/android" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true" android:clipToPadding="false">
     <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass">
         <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/label_call_log" android:textAppearance="@style/Text.EV.Eyebrow" />
         <com.google.android.material.button.MaterialButton android:id="@+id/flush_now_button" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="16dp" android:text="@string/btn_flush_now" app:icon="@drawable/ic_refresh" app:iconGravity="textStart" style="@style/Widget.EV.Button.Outlined" xmlns:app="http://schemas.android.com/apk/res-auto" />
         <TextView android:id="@+id/call_log_text" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="20dp" android:minHeight="180dp" android:text="@string/call_log_empty" android:textAppearance="@style/Text.EV.Body" android:fontFamily="monospace" android:textSize="17sp" android:lineSpacingExtra="12dp" android:textIsSelectable="true" />
     </LinearLayout>
-</ScrollView>
+</com.evsuite.abrp.StableScrollView>
diff --git a/app/src/main/res/layout/pane_server.xml b/app/src/main/res/layout/pane_server.xml
new file mode 100644
index 0000000..51b5762
--- /dev/null
+++ b/app/src/main/res/layout/pane_server.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="utf-8"?>
+<com.evsuite.abrp.StableScrollView xmlns:android="http://schemas.android.com/apk/res/android" xmlns:app="http://schemas.android.com/apk/res-auto" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true" android:clipToPadding="false">
+    <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:paddingStart="24dp" android:paddingEnd="24dp" android:paddingTop="12dp" android:paddingBottom="12dp">
+        <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass">
+            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/server_card_title" android:textAppearance="@style/Text.EV.Eyebrow" />
+            <com.google.android.material.textfield.TextInputLayout android:id="@+id/server_url_layout" style="@style/Widget.EV.Input" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="18dp" android:hint="@string/hint_server_url" app:helperText="@string/helper_server_url">
+                <com.google.android.material.textfield.TextInputEditText android:id="@+id/server_url_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:inputType="textUri" android:singleLine="true" android:textSize="20sp" />
+            </com.google.android.material.textfield.TextInputLayout>
+            <com.google.android.material.button.MaterialButton android:id="@+id/server_pair_button" style="@style/Widget.EV.Button" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="16dp" android:text="@string/btn_pair" />
+            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="8dp" android:text="@string/pair_hint" android:textAppearance="@style/Text.EV.Secondary" />
+            <com.google.android.material.textfield.TextInputLayout android:id="@+id/server_token_layout" style="@style/Widget.EV.Input" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="18dp" android:hint="@string/hint_server_token" app:endIconMode="password_toggle" app:endIconMinSize="72dp" app:helperText="@string/helper_server_token">
+                <com.google.android.material.textfield.TextInputEditText android:id="@+id/server_token_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:inputType="textPassword" android:singleLine="true" android:textSize="20sp" />
+            </com.google.android.material.textfield.TextInputLayout>
+            <TextView android:id="@+id/installation_id_text" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="14dp" android:textAppearance="@style/Text.EV.Secondary" android:textIsSelectable="true" />
+            <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="16dp" android:orientation="horizontal">
+                <com.google.android.material.button.MaterialButton android:id="@+id/server_save_button" style="@style/Widget.EV.Button" android:layout_width="0dp" android:layout_weight="1" android:layout_height="wrap_content" android:text="@string/btn_save" android:layout_marginEnd="12dp" />
+                <com.google.android.material.button.MaterialButton android:id="@+id/server_test_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="0dp" android:layout_weight="1" android:layout_height="wrap_content" android:text="@string/btn_test" android:layout_marginEnd="12dp" />
+                <com.google.android.material.button.MaterialButton android:id="@+id/import_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="0dp" android:layout_weight="1" android:layout_height="wrap_content" android:text="@string/btn_import" />
+            </LinearLayout>
+            <LinearLayout android:id="@+id/connection_status_row" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="16dp" android:gravity="center_vertical" android:orientation="horizontal" android:visibility="gone">
+                <View android:id="@+id/connection_indicator" android:layout_width="10dp" android:layout_height="10dp" android:layout_marginEnd="12dp" android:background="@drawable/circle_indicator" />
+                <TextView android:id="@+id/connection_status_text" android:layout_width="match_parent" android:layout_height="wrap_content" android:textAppearance="@style/Text.EV.Body" />
+            </LinearLayout>
+        </LinearLayout>
+    </LinearLayout>
+</com.evsuite.abrp.StableScrollView>
diff --git a/app/src/main/res/layout/pane_service.xml b/app/src/main/res/layout/pane_service.xml
index 9d8557f..b53b64f 100644
--- a/app/src/main/res/layout/pane_service.xml
+++ b/app/src/main/res/layout/pane_service.xml
@@ -1,20 +1,32 @@
 <?xml version="1.0" encoding="utf-8"?>
-<ScrollView xmlns:android="http://schemas.android.com/apk/res/android" xmlns:app="http://schemas.android.com/apk/res-auto" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true" android:clipToPadding="false">
+<com.evsuite.abrp.StableScrollView xmlns:android="http://schemas.android.com/apk/res/android" xmlns:app="http://schemas.android.com/apk/res-auto" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true" android:clipToPadding="false">
     <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp">
         <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass">
             <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_service_controls" android:textAppearance="@style/Text.EV.Eyebrow" />
-            <TextView android:id="@+id/status_text" android:layout_width="match_parent" android:layout_height="wrap_content" android:background="@drawable/bg_input_panel" android:padding="16dp" android:layout_marginTop="20dp" android:layout_marginBottom="12dp" android:text="@string/status_stopped" android:textAppearance="@style/Text.EV.Body" />
-            <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/service_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/label_upload_enabled" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
+            <TextView android:id="@+id/status_text" android:layout_width="match_parent" android:layout_height="wrap_content" android:background="@drawable/bg_input_panel" android:padding="16dp" android:layout_marginTop="20dp" android:layout_marginBottom="12dp" android:text="@string/state_stopped" android:textAppearance="@style/Text.EV.Body" />
             <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/abrp_upload_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/label_abrp_upload_enabled" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
             <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/hint_abrp_upload_enabled" android:textAppearance="@style/Text.EV.Secondary" />
-            <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/autostart_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/label_autostart" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
-            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/hint_autostart" android:textAppearance="@style/Text.EV.Secondary" />
         </LinearLayout>
-        <Space android:layout_width="1dp" android:layout_height="20dp" />
-        <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass">
+        <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass" android:layout_marginTop="16dp">
+            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_abrp_title" android:textAppearance="@style/Text.EV.Eyebrow" />
+            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:text="@string/hint_abrp_direct" android:textAppearance="@style/Text.EV.Secondary" />
+            <com.google.android.material.textfield.TextInputLayout android:id="@+id/abrp_api_key_layout" style="@style/Widget.EV.Input" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="18dp" android:hint="@string/hint_abrp_api_key" app:endIconMode="password_toggle" app:endIconMinSize="72dp">
+                <com.google.android.material.textfield.TextInputEditText android:id="@+id/abrp_api_key_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:inputType="textPassword" android:singleLine="true" android:textSize="20sp" />
+            </com.google.android.material.textfield.TextInputLayout>
+            <com.google.android.material.textfield.TextInputLayout android:id="@+id/abrp_token_layout" style="@style/Widget.EV.Input" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="18dp" android:hint="@string/hint_abrp_token" app:endIconMode="password_toggle" app:endIconMinSize="72dp">
+                <com.google.android.material.textfield.TextInputEditText android:id="@+id/abrp_token_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:inputType="textPassword" android:singleLine="true" android:textSize="20sp" />
+            </com.google.android.material.textfield.TextInputLayout>
+            <com.google.android.material.button.MaterialButton android:id="@+id/abrp_save_button" style="@style/Widget.EV.Button" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/btn_save" android:layout_marginTop="20dp" />
+            <com.google.android.material.button.MaterialButton android:id="@+id/abrp_test_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/btn_test" android:layout_marginTop="8dp" />
+            <com.google.android.material.button.MaterialButton android:id="@+id/abrp_phone_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/btn_phone_settings" android:layout_marginTop="8dp" />
+            <TextView android:id="@+id/abrp_status_text" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:textAppearance="@style/Text.EV.Body" />
+        </LinearLayout>
+        <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass" android:layout_marginTop="16dp">
             <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_service_timing" android:textAppearance="@style/Text.EV.Eyebrow" />
             <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/label_frequency" android:textAppearance="@style/Text.EV.Body" android:layout_marginTop="20dp" />
-            <Spinner android:id="@+id/interval_spinner" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:layout_marginTop="12dp" android:background="@drawable/bg_input_panel" android:popupBackground="@color/ev_surface_raised" android:contentDescription="@string/label_frequency" android:spinnerMode="dropdown" />
+            <com.google.android.material.textfield.TextInputLayout style="@style/Widget.EV.Dropdown" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp">
+                <com.google.android.material.textfield.MaterialAutoCompleteTextView android:id="@+id/interval_choices" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:inputType="none" android:textSize="20sp" app:simpleItemLayout="@layout/dropdown_item" />
+            </com.google.android.material.textfield.TextInputLayout>
             <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/hint_frequency" android:textAppearance="@style/Text.EV.Secondary" android:layout_marginTop="12dp" />
             <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/boost_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/label_boost_low_soc" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
             <com.google.android.material.textfield.TextInputLayout android:id="@+id/low_soc_layout" style="@style/Widget.EV.Input" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:hint="@string/label_low_soc_threshold">
@@ -22,4 +34,4 @@
             </com.google.android.material.textfield.TextInputLayout>
         </LinearLayout>
     </LinearLayout>
-</ScrollView>
+</com.evsuite.abrp.StableScrollView>
diff --git a/app/src/main/res/layout/pane_settings.xml b/app/src/main/res/layout/pane_settings.xml
new file mode 100644
index 0000000..437f3e5
--- /dev/null
+++ b/app/src/main/res/layout/pane_settings.xml
@@ -0,0 +1,49 @@
+<?xml version="1.0" encoding="utf-8"?>
+<com.evsuite.abrp.StableScrollView xmlns:android="http://schemas.android.com/apk/res/android" xmlns:app="http://schemas.android.com/apk/res-auto" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true" android:clipToPadding="false">
+    <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp">
+        <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass">
+            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_display_title" android:textAppearance="@style/Text.EV.Eyebrow" />
+            <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/full_screen_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/label_full_screen" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
+            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/hint_full_screen" android:textAppearance="@style/Text.EV.Secondary" />
+            <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/voice_key_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/label_voice_key" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
+            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/hint_voice_key" android:textAppearance="@style/Text.EV.Secondary" />
+            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/label_tire_unit" android:textAppearance="@style/Text.EV.Body" android:layout_marginTop="20dp" />
+            <com.google.android.material.textfield.TextInputLayout style="@style/Widget.EV.Dropdown" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp">
+                <com.google.android.material.textfield.MaterialAutoCompleteTextView android:id="@+id/tire_unit_choices" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:inputType="none" android:textSize="20sp" app:simpleItemLayout="@layout/dropdown_item" />
+            </com.google.android.material.textfield.TextInputLayout>
+            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/label_accent" android:textAppearance="@style/Text.EV.Body" android:layout_marginTop="20dp" />
+            <com.google.android.material.textfield.TextInputLayout style="@style/Widget.EV.Dropdown" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp">
+                <com.google.android.material.textfield.MaterialAutoCompleteTextView android:id="@+id/accent_choices" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:inputType="none" android:textSize="20sp" app:simpleItemLayout="@layout/dropdown_item" />
+            </com.google.android.material.textfield.TextInputLayout>
+        </LinearLayout>
+        <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass" android:layout_marginTop="16dp">
+            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_battery_settings_title" android:textAppearance="@style/Text.EV.Eyebrow" />
+            <com.google.android.material.textfield.TextInputLayout android:id="@+id/consumption_soh_layout" style="@style/Widget.Material3.TextInputLayout.OutlinedBox" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:hint="@string/settings_manual_soh" app:suffixText="@string/unit_percent">
+                <com.google.android.material.textfield.TextInputEditText android:id="@+id/consumption_soh_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:inputType="numberDecimal" android:maxLength="5" android:minHeight="72dp"/>
+            </com.google.android.material.textfield.TextInputLayout>
+            <com.google.android.material.button.MaterialButton android:id="@+id/consumption_soh_save" style="@style/Widget.EV.Button" android:layout_width="match_parent" android:layout_height="72dp" android:layout_marginTop="8dp" android:text="@string/settings_save_soh_value"/>
+            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="8dp" android:text="@string/settings_soh_note" android:textAppearance="@style/Text.EV.Secondary"/>
+            <com.google.android.material.textfield.TextInputLayout android:id="@+id/usable_capacity_layout" style="@style/Widget.Material3.TextInputLayout.OutlinedBox" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="20dp" android:hint="@string/hint_usable_capacity" app:suffixText="@string/unit_kwh">
+                <com.google.android.material.textfield.TextInputEditText android:id="@+id/usable_capacity_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:inputType="numberDecimal" android:maxLength="5" android:minHeight="72dp"/>
+            </com.google.android.material.textfield.TextInputLayout>
+            <com.google.android.material.button.MaterialButton android:id="@+id/usable_capacity_save" style="@style/Widget.EV.Button" android:layout_width="match_parent" android:layout_height="72dp" android:layout_marginTop="8dp" android:text="@string/btn_save_capacity"/>
+            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="8dp" android:text="@string/helper_usable_capacity" android:textAppearance="@style/Text.EV.Secondary"/>
+        </LinearLayout>
+        <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass" android:layout_marginTop="16dp">
+            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_price_title" android:textAppearance="@style/Text.EV.Eyebrow" />
+            <com.google.android.material.textfield.TextInputLayout android:id="@+id/charge_price_layout" style="@style/Widget.Material3.TextInputLayout.OutlinedBox" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:hint="@string/settings_unit_price" app:suffixText="@string/unit_eur_per_kwh">
+                <com.google.android.material.textfield.TextInputEditText android:id="@+id/charge_price_input" android:layout_width="match_parent" android:layout_height="wrap_content" android:inputType="numberDecimal" android:maxLength="10" android:minHeight="72dp"/>
+            </com.google.android.material.textfield.TextInputLayout>
+            <com.google.android.material.button.MaterialButton android:id="@+id/charge_price_save" style="@style/Widget.EV.Button" android:layout_width="match_parent" android:layout_height="72dp" android:layout_marginTop="8dp" android:text="@string/settings_save_price"/>
+            <com.google.android.material.button.MaterialButton android:id="@+id/settings_phone_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/btn_phone_settings" android:layout_marginTop="8dp" />
+            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="8dp" android:text="@string/hint_phone_settings" android:textAppearance="@style/Text.EV.Secondary" />
+        </LinearLayout>
+        <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass" android:layout_marginTop="16dp">
+            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_app_title" android:textAppearance="@style/Text.EV.Eyebrow" />
+            <TextView android:id="@+id/settings_version" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="12dp" android:textAppearance="@style/Text.EV.Body" />
+            <com.google.android.material.button.MaterialButton android:id="@+id/settings_update_button" style="@style/Widget.EV.Button" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="16dp" android:text="@string/btn_check_update" app:icon="@drawable/ic_refresh" />
+            <com.google.android.material.button.MaterialButton android:id="@+id/settings_usb_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="8dp" android:text="@string/btn_usb_update" />
+            <com.google.android.material.button.MaterialButton android:id="@+id/settings_about_button" style="@style/Widget.EV.Button.Outlined" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="8dp" android:text="@string/btn_about" app:icon="@drawable/ic_info" />
+        </LinearLayout>
+    </LinearLayout>
+</com.evsuite.abrp.StableScrollView>
diff --git a/app/src/main/res/layout/pane_vehicle.xml b/app/src/main/res/layout/pane_vehicle.xml
index f4cc6c7..5993153 100644
--- a/app/src/main/res/layout/pane_vehicle.xml
+++ b/app/src/main/res/layout/pane_vehicle.xml
@@ -1,6 +1,61 @@
 <?xml version="1.0" encoding="utf-8"?>
-<ScrollView xmlns:android="http://schemas.android.com/apk/res/android" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true" android:clipToPadding="false">
-    <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp">
+<com.evsuite.abrp.StableScrollView xmlns:android="http://schemas.android.com/apk/res/android" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true" android:clipToPadding="false">
+    <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:paddingStart="24dp" android:paddingEnd="24dp" android:paddingTop="12dp" android:paddingBottom="12dp">
+        <GridLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="horizontal" android:columnCount="2">
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_battery_card" android:layout_columnWeight="1" android:layout_margin="4dp">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_battery_short" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_soc" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_charging" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass" android:layout_columnWeight="1" android:layout_margin="4dp">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_range" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_range" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_columnWeight="1" android:layout_margin="4dp" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_range_trip" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_range_trip" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_range_trip_note" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_columnWeight="1" android:layout_margin="4dp" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_range_average" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_range_average" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_range_average_note" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_columnWeight="1" android:layout_margin="4dp" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_energy_trip" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_energy_trip" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_energy_trip_note" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_columnWeight="1" android:layout_margin="4dp" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_usage_trip" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_usage_trip" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_usage_trip_note" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_columnWeight="1" android:layout_margin="4dp" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_usage_average" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_usage_average" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_usage_average_note" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass" android:layout_columnWeight="1" android:layout_margin="4dp">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_power" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_power" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_columnWeight="1" android:layout_margin="4dp" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_power_average" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_power_average" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_power_average_note" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass" android:layout_columnWeight="1" android:layout_margin="4dp">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_speed" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_speed" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+            </LinearLayout>
+            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:layout_columnWeight="1" android:layout_margin="4dp" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass">
+                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_speed_average" android:textAppearance="@style/Text.EV.Secondary" />
+                <TextView android:id="@+id/vehicle_speed_average" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:gravity="end" android:fontFeatureSettings="tnum" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
+                <TextView android:id="@+id/vehicle_speed_average_note" android:gravity="end" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="" android:textAppearance="@style/Text.EV.Secondary" android:textColor="?attr/evAccentLight" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
+            </LinearLayout>
+        </GridLayout>
+        <Space android:layout_width="1dp" android:layout_height="16dp" />
         <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="20dp" android:background="@drawable/bg_glass">
             <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_energy" android:textAppearance="@style/Text.EV.Eyebrow" android:layout_marginBottom="12dp" />
             <TableLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:stretchColumns="0" android:shrinkColumns="0">
@@ -16,44 +71,24 @@
         </LinearLayout>
         <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="20dp" android:background="@drawable/bg_glass" android:layout_marginTop="16dp">
             <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_tires" android:textAppearance="@style/Text.EV.Eyebrow" />
-            <LinearLayout android:layout_width="match_parent" android:layout_height="224dp" android:orientation="horizontal" android:gravity="center_vertical">
+            <LinearLayout android:layout_width="match_parent" android:layout_height="196dp" android:orientation="horizontal" android:gravity="center_vertical">
                 <LinearLayout android:layout_width="0dp" android:layout_height="match_parent" android:layout_weight="1" android:orientation="vertical" android:gravity="center">
                     <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_tire_fl" android:textAppearance="@style/Text.EV.Secondary" android:gravity="center" />
-                    <TextView android:id="@+id/vehicle_tire_fl" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="@color/ev_cyan" />
+                    <TextView android:id="@+id/vehicle_tire_fl" android:fontFeatureSettings="tnum" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="?attr/evAccentLight" />
                     <Space android:layout_width="1dp" android:layout_height="44dp" />
                     <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_tire_rl" android:textAppearance="@style/Text.EV.Secondary" android:gravity="center" />
-                    <TextView android:id="@+id/vehicle_tire_rl" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="@color/ev_cyan" />
+                    <TextView android:id="@+id/vehicle_tire_rl" android:fontFeatureSettings="tnum" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="?attr/evAccentLight" />
                 </LinearLayout>
                 <ImageView android:layout_width="92dp" android:layout_height="180dp" android:src="@drawable/ic_vehicle_outline" android:contentDescription="@string/design_car_desc" />
                 <LinearLayout android:layout_width="0dp" android:layout_height="match_parent" android:layout_weight="1" android:orientation="vertical" android:gravity="center">
                     <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_tire_fr" android:textAppearance="@style/Text.EV.Secondary" android:gravity="center" />
-                    <TextView android:id="@+id/vehicle_tire_fr" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="@color/ev_cyan" />
+                    <TextView android:id="@+id/vehicle_tire_fr" android:fontFeatureSettings="tnum" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="?attr/evAccentLight" />
                     <Space android:layout_width="1dp" android:layout_height="44dp" />
                     <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_tire_rr" android:textAppearance="@style/Text.EV.Secondary" android:gravity="center" />
-                    <TextView android:id="@+id/vehicle_tire_rr" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="@color/ev_cyan" />
+                    <TextView android:id="@+id/vehicle_tire_rr" android:fontFeatureSettings="tnum" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/no_value" android:textAppearance="@style/Text.EV.Body" android:gravity="center" android:layout_marginTop="8dp" android:textColor="?attr/evAccentLight" />
                 </LinearLayout>
             </LinearLayout>
             <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_no_data" android:textAppearance="@style/Text.EV.Secondary" />
         </LinearLayout>
-        <Space android:layout_width="1dp" android:layout_height="16dp" />
-        <GridLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="horizontal" android:columnCount="2">
-            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_battery_card" android:layout_columnWeight="1" android:layout_margin="4dp">
-                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/design_battery_short" android:textAppearance="@style/Text.EV.Secondary" />
-                <TextView android:id="@+id/vehicle_soc" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
-                <TextView android:id="@+id/vehicle_charging" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:textAppearance="@style/Text.EV.Secondary" android:textColor="@color/ev_cyan" android:textSize="16sp" android:maxLines="1" android:ellipsize="end" />
-            </LinearLayout>
-            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass" android:layout_columnWeight="1" android:layout_margin="4dp">
-                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_range" android:textAppearance="@style/Text.EV.Secondary" />
-                <TextView android:id="@+id/vehicle_range" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
-            </LinearLayout>
-            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass" android:layout_columnWeight="1" android:layout_margin="4dp">
-                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_power" android:textAppearance="@style/Text.EV.Secondary" />
-                <TextView android:id="@+id/vehicle_power" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
-            </LinearLayout>
-            <LinearLayout android:layout_width="0dp" android:layout_height="wrap_content" android:orientation="vertical" android:minHeight="112dp" android:padding="16dp" android:background="@drawable/bg_glass" android:layout_columnWeight="1" android:layout_margin="4dp">
-                <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/vehicle_row_speed" android:textAppearance="@style/Text.EV.Secondary" />
-                <TextView android:id="@+id/vehicle_speed" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:layout_marginTop="6dp" android:textAppearance="@style/Text.EV.Metric.Compact" android:maxLines="1" android:autoSizeTextType="uniform" android:autoSizeMinTextSize="18sp" android:autoSizeMaxTextSize="28sp" android:autoSizeStepGranularity="1sp" />
-            </LinearLayout>
-        </GridLayout>
     </LinearLayout>
-</ScrollView>
+</com.evsuite.abrp.StableScrollView>
diff --git a/app/src/main/res/layout/pane_wifi.xml b/app/src/main/res/layout/pane_wifi.xml
deleted file mode 100644
index 80d7398..0000000
--- a/app/src/main/res/layout/pane_wifi.xml
+++ /dev/null
@@ -1,18 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<ScrollView xmlns:android="http://schemas.android.com/apk/res/android" xmlns:app="http://schemas.android.com/apk/res-auto" android:layout_width="match_parent" android:layout_height="match_parent" android:fillViewport="true" android:clipToPadding="false">
-    <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp">
-        <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass">
-            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/wifi_card_title" android:textAppearance="@style/Text.EV.Eyebrow" />
-            <TextView android:id="@+id/wifi_ssid" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:textAppearance="@style/Text.EV.Metric" android:layout_marginTop="20dp" />
-            <TextView android:id="@+id/wifi_state" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="—" android:textAppearance="@style/Text.EV.Secondary" android:layout_marginTop="12dp" />
-            <com.google.android.material.button.MaterialButton android:id="@+id/wifi_connect_button" style="@style/Widget.EV.Button" android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/wifi_connect_now" android:layout_marginTop="24dp" />
-            <com.google.android.material.switchmaterial.SwitchMaterial android:id="@+id/wifi_auto_switch" android:layout_width="match_parent" android:layout_height="wrap_content" android:minHeight="72dp" android:text="@string/wifi_auto_label" android:textAppearance="@style/Text.EV.Body" android:paddingTop="8dp" android:paddingBottom="8dp" app:useMaterialThemeColors="true" app:thumbTint="@color/switch_thumb" app:trackTint="@color/switch_track" android:textColor="@color/ev_text_primary" />
-            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/wifi_auto_hint" android:textAppearance="@style/Text.EV.Secondary" />
-        </LinearLayout>
-        <Space android:layout_width="1dp" android:layout_height="20dp" />
-        <LinearLayout android:layout_width="match_parent" android:layout_height="wrap_content" android:orientation="vertical" android:padding="24dp" android:background="@drawable/bg_glass">
-            <TextView android:layout_width="match_parent" android:layout_height="wrap_content" android:text="@string/wifi_saved_title" android:textAppearance="@style/Text.EV.Eyebrow" />
-            <TextView android:id="@+id/wifi_saved_list" android:layout_width="match_parent" android:layout_height="wrap_content" android:layout_marginTop="20dp" android:textAppearance="@style/Text.EV.Body" android:lineSpacingExtra="16dp" />
-        </LinearLayout>
-    </LinearLayout>
-</ScrollView>
diff --git a/app/src/main/res/layout/spinner_dropdown.xml b/app/src/main/res/layout/spinner_dropdown.xml
deleted file mode 100644
index 562c36f..0000000
--- a/app/src/main/res/layout/spinner_dropdown.xml
+++ /dev/null
@@ -1,8 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<TextView xmlns:android="http://schemas.android.com/apk/res/android"
-    android:layout_width="match_parent" android:layout_height="wrap_content"
-    android:minHeight="72dp" android:gravity="center_vertical"
-    android:paddingStart="20dp" android:paddingEnd="20dp"
-    android:paddingTop="12dp" android:paddingBottom="12dp"
-    android:background="?attr/selectableItemBackground"
-    android:textAppearance="@style/Text.EV.Body" />
diff --git a/app/src/main/res/layout/spinner_value.xml b/app/src/main/res/layout/spinner_value.xml
deleted file mode 100644
index 59ab3bf..0000000
--- a/app/src/main/res/layout/spinner_value.xml
+++ /dev/null
@@ -1,8 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<TextView xmlns:android="http://schemas.android.com/apk/res/android"
-    android:layout_width="match_parent" android:layout_height="wrap_content"
-    android:minHeight="72dp" android:gravity="center_vertical"
-    android:paddingStart="20dp" android:paddingEnd="20dp"
-    android:paddingTop="12dp" android:paddingBottom="12dp"
-    android:drawableEnd="@drawable/ic_chevron_down" android:drawablePadding="16dp"
-    android:textAppearance="@style/Text.EV.Body" />
diff --git a/app/src/main/res/values/accents.xml b/app/src/main/res/values/accents.xml
new file mode 100644
index 0000000..b781709
--- /dev/null
+++ b/app/src/main/res/values/accents.xml
@@ -0,0 +1,87 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- Accent palettes after the MG4 paint colours, applied over the app theme by MainActivity
+     (AccentColor.java). Each: accent, text on it, light and deep variants, the tinted card
+     surface, a muted stroke and the switch track. White, silver and black cannot be an accent on
+     an OLED-black screen as they are, so they become cool light greys and a pearl blue-grey. -->
+<resources>
+    <!-- Dynamic Red -->
+    <style name="ThemeOverlay.EV.Accent.DynamicRed" parent="">
+        <item name="evAccent">#E0424C</item>
+        <item name="evOnAccent">#1A0B0C</item>
+        <item name="evAccentLight">#FF9A9E</item>
+        <item name="evAccentDeep">#3A1215</item>
+        <item name="evAccentSurface">#2A1416</item>
+        <item name="evAccentStroke">#80703A3D</item>
+        <item name="evAccentTrack">#5E3436</item>
+    </style>
+    <!-- Volcano Orange -->
+    <style name="ThemeOverlay.EV.Accent.VolcanoOrange" parent="">
+        <item name="evAccent">#F2762E</item>
+        <item name="evOnAccent">#1F0E04</item>
+        <item name="evAccentLight">#FFB68A</item>
+        <item name="evAccentDeep">#3D1E0C</item>
+        <item name="evAccentSurface">#2B190F</item>
+        <item name="evAccentStroke">#80774A2E</item>
+        <item name="evAccentTrack">#6A4430</item>
+    </style>
+    <!-- Holborn Blue -->
+    <style name="ThemeOverlay.EV.Accent.HolbornBlue" parent="">
+        <item name="evAccent">#4A86E0</item>
+        <item name="evOnAccent">#04101F</item>
+        <item name="evAccentLight">#A6C8FF</item>
+        <item name="evAccentDeep">#10233F</item>
+        <item name="evAccentSurface">#141C2A</item>
+        <item name="evAccentStroke">#80354E70</item>
+        <item name="evAccentTrack">#34486A</item>
+    </style>
+    <!-- Racing Green -->
+    <style name="ThemeOverlay.EV.Accent.RacingGreen" parent="">
+        <item name="evAccent">#3FA66A</item>
+        <item name="evOnAccent">#04140B</item>
+        <item name="evAccentLight">#9EDDB6</item>
+        <item name="evAccentDeep">#0F2C1B</item>
+        <item name="evAccentSurface">#132118</item>
+        <item name="evAccentStroke">#80305C42</item>
+        <item name="evAccentTrack">#2F5A42</item>
+    </style>
+    <!-- Camden Grey -->
+    <style name="ThemeOverlay.EV.Accent.CamdenGrey" parent="">
+        <item name="evAccent">#8C959C</item>
+        <item name="evOnAccent">#0E1113</item>
+        <item name="evAccentLight">#C9D0D5</item>
+        <item name="evAccentDeep">#23282C</item>
+        <item name="evAccentSurface">#1C1F21</item>
+        <item name="evAccentStroke">#80505860</item>
+        <item name="evAccentTrack">#454C52</item>
+    </style>
+    <!-- Monument Silver -->
+    <style name="ThemeOverlay.EV.Accent.MonumentSilver" parent="">
+        <item name="evAccent">#B8C0C7</item>
+        <item name="evOnAccent">#121516</item>
+        <item name="evAccentLight">#E3E8EC</item>
+        <item name="evAccentDeep">#2A2F33</item>
+        <item name="evAccentSurface">#1E2124</item>
+        <item name="evAccentStroke">#80646B72</item>
+        <item name="evAccentTrack">#565D63</item>
+    </style>
+    <!-- Arctic White -->
+    <style name="ThemeOverlay.EV.Accent.ArcticWhite" parent="">
+        <item name="evAccent">#ECEEF0</item>
+        <item name="evOnAccent">#121314</item>
+        <item name="evAccentLight">#FFFFFF</item>
+        <item name="evAccentDeep">#2E3033</item>
+        <item name="evAccentSurface">#202224</item>
+        <item name="evAccentStroke">#80767A7E</item>
+        <item name="evAccentTrack">#62666A</item>
+    </style>
+    <!-- Black Pearl -->
+    <style name="ThemeOverlay.EV.Accent.BlackPearl" parent="">
+        <item name="evAccent">#7D88A0</item>
+        <item name="evOnAccent">#0B0E13</item>
+        <item name="evAccentLight">#BCC5D6</item>
+        <item name="evAccentDeep">#1C212A</item>
+        <item name="evAccentSurface">#171A20</item>
+        <item name="evAccentStroke">#804A5263</item>
+        <item name="evAccentTrack">#3E4656</item>
+    </style>
+</resources>
diff --git a/app/src/main/res/values/attrs_accent.xml b/app/src/main/res/values/attrs_accent.xml
new file mode 100644
index 0000000..518aa16
--- /dev/null
+++ b/app/src/main/res/values/attrs_accent.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+<!-- The accent palette, a theme attribute each so it can follow the chosen MG4 paint colour
+     (values/accents.xml, AccentColor.java). Layouts, colour lists and drawables use ?attr/… for
+     these; the fixed neutrals stay in colors.xml. -->
+<resources>
+    <attr name="evAccent" format="color" />
+    <attr name="evOnAccent" format="color" />
+    <attr name="evAccentLight" format="color" />
+    <attr name="evAccentDeep" format="color" />
+    <attr name="evAccentSurface" format="color" />
+    <attr name="evAccentStroke" format="color" />
+    <attr name="evAccentTrack" format="color" />
+</resources>
diff --git a/app/src/main/res/values/colors.xml b/app/src/main/res/values/colors.xml
index 35475b4..6fdc37f 100644
--- a/app/src/main/res/values/colors.xml
+++ b/app/src/main/res/values/colors.xml
@@ -1,5 +1,7 @@
 <?xml version="1.0" encoding="utf-8"?>
-<!-- User-requested app-specific OLED palette. -->
+<!-- User-requested app-specific OLED palette: the fixed neutrals. The accent colours are theme
+     attributes (values/attrs_accent.xml) that follow the chosen MG4 paint colour
+     (values/accents.xml); Dynamic Red, the red of the launcher icon, is the default. -->
 <resources>
   <color name="ev_background">#000000</color>
   <color name="ev_surface">#121212</color>
@@ -7,11 +9,11 @@
   <color name="ev_outline">#363B3D</color>
   <color name="ev_text_primary">#F4F3EF</color>
   <color name="ev_text_secondary">#BDC4C6</color>
-  <color name="ev_accent">#D8C39A</color>
-  <color name="ev_on_accent">#17140E</color>
-  <color name="ev_cyan">#A0E2E0</color>
-  <color name="ev_cyan_deep">#103436</color>
-  <color name="ev_gold_surface">#28241B</color>
+  <color name="ev_accent">#E0424C</color>
+  <color name="ev_on_accent">#1A0B0C</color>
+  <color name="ev_cyan">#FF9A9E</color>
+  <color name="ev_cyan_deep">#3A1215</color>
+  <color name="ev_gold_surface">#2A1416</color>
   <color name="ev_ok">#A4DCC1</color>
   <color name="ev_warn">#E9CA96</color>
   <color name="ev_error">#FFB4AB</color>
diff --git a/app/src/main/res/values/strings.xml b/app/src/main/res/values/strings.xml
index 194577a..5ea54dc 100644
--- a/app/src/main/res/values/strings.xml
+++ b/app/src/main/res/values/strings.xml
@@ -1,86 +1,145 @@
 <resources>
-    <string name="app_name">FatihsMG4</string>
+    <string name="app_name">Nils\' MG4</string>
 
     <!-- Main screen -->
-    <string name="tab_abrp">ABRP</string>
-    <string name="tab_service">Aktarım</string>
-    <string name="tab_vehicle">Genel</string>
-    <string name="tab_consumption">Tüketim</string>
-    <string name="tab_charging">Şarj</string>
-    <string name="consumption_title">Tüketim</string>
-    <string name="consumption_subtitle">Başlangıç, motor, tüm zamanlar ve trip sayaçları</string>
-    <string name="charging_title">Şarj</string>
-    <string name="charging_subtitle">Canlı batarya değerleri ve SOC/güç eğrisi</string>
-    <string name="tab_wifi">Wi-Fi</string>
-    <string name="tab_log">Kayıtlar</string>
+    <string name="tab_service">Live data</string>
+    <string name="tab_vehicle">Overview</string>
+    <string name="tab_consumption">Consumption</string>
+    <string name="tab_charging">Charging</string>
+    <string name="consumption_title">Consumption</string>
+    <string name="consumption_subtitle">Since start, motor, lifetime and trip counters</string>
+    <string name="charging_title">Charging</string>
+    <string name="charging_subtitle">Live battery values and SOC/power curve</string>
+    <string name="tab_server">Server</string>
+    <string name="tab_settings">Settings</string>
+    <string name="tab_log">Logs</string>
 
-    <!-- Wi-Fi page -->
-    <string name="wifi_card_title">Wi-Fi Bağlantısı</string>
-    <string name="wifi_current">Bağlı ağ</string>
-    <string name="wifi_state">Durum</string>
-    <string name="wifi_connect_now">Şimdi Bağlan</string>
-    <string name="wifi_auto_label">Arka planda otomatik bağlan</string>
-    <string name="wifi_auto_hint">Yükleme servisi çalışırken bağlantı koptuğunda kayıtlı ağlara kendi kendine bağlanmayı dener.</string>
-    <string name="wifi_saved_title">Kayıtlı Ağlar</string>
-    <string name="wifi_saved_empty">Kayıtlı ağ okunamadı</string>
-    <string name="wifi_not_connected">Bağlı değil</string>
 
     <!-- Vehicle page -->
-    <string name="vehicle_live_data">Canlı Araç Verileri</string>
-    <string name="vehicle_tires">Lastik Basınçları</string>
-    <string name="vehicle_row_soc">Şarj (SOC)</string>
-    <string name="vehicle_row_range">Menzil</string>
-    <string name="vehicle_row_power">Güç</string>
-    <string name="vehicle_row_speed">Hız</string>
-    <string name="vehicle_row_odometer">Kilometre</string>
-    <string name="vehicle_row_batt_temp">Batarya Sıcaklığı</string>
-    <string name="vehicle_row_cabin_temp">Kabin Sıcaklığı</string>
-    <string name="vehicle_row_hvac">Klima Ayarı</string>
-    <string name="vehicle_row_capacity">Batarya Kapasitesi</string>
-    <string name="vehicle_row_charging">Şarj Durumu</string>
-    <string name="vehicle_tire_fl">Ön Sol</string>
-    <string name="vehicle_tire_fr">Ön Sağ</string>
-    <string name="vehicle_tire_rl">Arka Sol</string>
-    <string name="vehicle_tire_rr">Arka Sağ</string>
-    <string name="card_config">Configuration</string>
-    <string name="hint_api_key">ABRP API Key</string>
-    <string name="default_abrp_api_key" translatable="false">8cfc314b-03cd-4efe-ab7d-4431cd8f2e2d</string>
-    <string name="helper_api_key">Default: open-source ABRP telemetry key. You may replace it with your own.</string>
-    <string name="api_key_required">Enter your ABRP API key first</string>
-    <string name="hint_token">ABRP User Token</string>
-    <string name="helper_token">Find your token in the ABRP app: Settings → Connections → Generic (Manual Entry)</string>
-    <string name="desc_toggle_api_key">Show or hide API key</string>
-    <string name="desc_toggle_token">Show or hide user token</string>
-    <string name="btn_save">Kaydet</string>
-    <string name="btn_test">Bağlantıyı test et</string>
-    <string name="btn_import">Dosyadan al</string>
+    <string name="vehicle_live_data">Live Vehicle Data</string>
+    <string name="vehicle_tires">Tire Pressures</string>
+    <string name="vehicle_row_soc">Charge (SOC)</string>
+    <string name="vehicle_row_range">Range</string>
+    <string name="vehicle_row_power">Power</string>
+    <string name="vehicle_row_range_trip">Range since start</string>
+    <string name="vehicle_row_range_average">Range, 5-min average</string>
+    <string name="vehicle_row_usage_trip">Usage since start</string>
+    <string name="vehicle_row_energy_trip">Energy since start</string>
+    <string name="vehicle_row_power_average">Power, 5-min average</string>
+    <string name="power_kw">%1$.1f kW</string>
+    <string name="power_waiting">needs a minute of data</string>
+    <string name="label_tire_unit">Tyre pressure unit</string>
+    <string name="label_accent">Accent colour</string>
+    <string name="energy_kwh">%1$.1f kWh</string>
+    <string name="energy_trip_note">net, after recuperation</string>
+    <string name="energy_trip_waiting">once the car is on</string>
+    <string name="vehicle_row_usage_average">Usage, 5-min average</string>
+    <string name="range_consumption">%1$.1f kWh/100 km</string>
+    <string name="range_over">&gt; %1$d km</string>
+    <string name="range_waiting">needs a few minutes of driving</string>
+    <string name="range_recuperating">while recuperating</string>
+    <string name="range_trip_waiting">once the car has moved</string>
+    <string name="usage_over_distance">over %1$.1f km</string>
+    <string name="usage_last_5_min">over the last 5 minutes</string>
+    <string name="hint_usable_capacity">Usable battery capacity</string>
+    <string name="btn_save_capacity">Save capacity</string>
+    <string name="helper_usable_capacity">Used for the range estimates on the Overview. The 51 kWh MG4 battery has 50.8 kWh usable, the 64 kWh one 61.7, the 77 kWh one 74.4.</string>
+    <string name="usable_capacity_saved">Usable capacity saved</string>
+    <string name="usable_capacity_invalid">Enter a value between 10 and 150 kWh</string>
+    <string name="vehicle_row_speed">Speed</string>
+    <string name="vehicle_row_odometer">Odometer</string>
+    <string name="vehicle_row_batt_temp">Battery Temperature</string>
+    <string name="vehicle_row_cabin_temp">Cabin Temperature</string>
+    <string name="vehicle_row_hvac">Climate Setpoint</string>
+    <string name="vehicle_row_capacity">Battery Capacity</string>
+    <string name="vehicle_row_charging">Charging Status</string>
+    <string name="vehicle_tire_fl">Front Left</string>
+    <string name="vehicle_tire_fr">Front Right</string>
+    <string name="vehicle_tire_rl">Rear Left</string>
+    <string name="vehicle_tire_rr">Rear Right</string>
+    <string name="btn_save">Save</string>
+    <string name="btn_test">Test connection</string>
+    <string name="btn_import">Import from file</string>
+    <string name="installation_id_info">Installation ID %1$s · derived from the head unit; your data is stored under it</string>
+
+    <!-- Server page -->
+    <string name="server_card_title">Car server</string>
+    <string name="hint_server_url">Server URL</string>
+    <string name="helper_server_url">For example https://car.k8s.stinnesbeck.com</string>
+    <string name="hint_server_token">Ingest token</string>
+    <string name="helper_server_token">The server\'s INGEST_TOKEN, at least 24 characters</string>
+    <string name="server_err_url">Enter an https:// URL</string>
+    <string name="btn_pair">Pair with phone</string>
+    <string name="pair_hint">Shows a QR code: scan it with your phone and approve with the approval password. The token below is then filled in for you.</string>
+    <string name="pair_title">Pair with phone</string>
+    <string name="pair_scan">Scan the QR code with your phone, or open %1$s and enter the code %2$s:</string>
+    <string name="pair_waiting">Waiting for approval…</string>
+    <string name="pair_starting">Contacting the server…</string>
+    <string name="pair_ok">Paired — this car now has its own token</string>
+    <string name="pair_denied">Pairing was denied on the phone</string>
+    <string name="pair_expired">The code expired — press Pair with phone again</string>
+    <string name="pair_not_enabled">Pairing is not enabled on the server (no APPROVAL_PASSWORD)</string>
+    <string name="pair_error">Pairing failed: %1$s</string>
+    <string name="pair_close">Close</string>
+    <string name="pair_err_old_server">The server has no pairing (HTTP 404). It needs server version 2.1.0 or newer.</string>
+    <string name="err_dns">Server name %1$s not found. Is it in public DNS?</string>
+    <string name="err_unreachable">Server %1$s not reachable</string>
+    <string name="err_http">Server answered HTTP %1$d</string>
+    <string name="pair_cancel">Cancel</string>
+    <string name="pair_qr_description">QR code to approve this car on your phone</string>
+    <string name="server_err_token">The token must be at least 24 characters, without spaces</string>
+    <string name="server_err_installation_id">Not a valid ID (UUID)</string>
+    <string name="server_saved">Server settings saved</string>
+    <string name="server_not_configured">Server not configured — open the Server tab</string>
 
     <!-- Config file import -->
-    <string name="import_ok">Config imported — press Test to verify</string>
+    <string name="import_ok">Config imported and saved — press Test to verify</string>
+    <string name="import_ok_deleted">Config imported and saved; the file was deleted</string>
+    <string name="import_ok_not_deleted">Config imported and saved, but the file could not be deleted. It holds your token: delete %1$s</string>
     <string name="import_err_read">Could not read that file</string>
-    <string name="import_err_empty">No ABRP settings found in that file</string>
+    <string name="import_err_values">The charging price or usable capacity in the file is not plausible</string>
+    <string name="import_err_empty">No settings found in that file</string>
     <string name="import_err_not_found">No config file found. Copy it to %1$s</string>
 
     <!-- Connection test -->
     <string name="conn_testing">Testing…</string>
-    <string name="conn_ok">Connected — API responding OK</string>
-    <string name="conn_err_auth">Auth failed — check your API key and token</string>
+    <string name="conn_ok">Connected — server accepts the token</string>
+    <string name="conn_err_auth">Token rejected — check it against the server\'s INGEST_TOKEN</string>
     <string name="perm_denied_location">Location denied — telemetry will have no position. Grant it in Settings to send GPS to ABRP.</string>
     <string name="perm_denied_car">Vehicle data denied — no battery %%, speed or range will be sent. Grant it in Settings.</string>
     <string name="perm_denied_all">Location and vehicle data denied — only a timestamp will be sent. Grant both in Settings.</string>
     <string name="conn_err_no_internet">No internet connection</string>
     <string name="conn_err_timeout">Connection timed out</string>
     <string name="conn_err_http">Server error (HTTP %1$d)</string>
-    <string name="token_required">Enter your ABRP token first</string>
 
-    <string name="card_service">Upload Service</string>
-    <string name="label_upload_enabled">Enable background telemetry</string>
-    <string name="label_abrp_upload_enabled">Upload telemetry to ABRP</string>
-    <string name="hint_abrp_upload_enabled">Turn this off when DiPlay sends ABRP data. Local consumption tracking and background telemetry keep running.</string>
-    <string name="label_autostart">Start automatically with the car</string>
-    <string name="hint_autostart">Uploading resumes on its own when the head unit powers up. Turn this off to start it by hand from this screen.</string>
+    <string name="label_full_screen">Full screen</string>
+    <string name="hint_full_screen">Hides the car\'s top and bottom bars while this app is open. Swipe in from the top or bottom edge to show them briefly, e.g. for the climate controls.</string>
+    <string name="label_voice_key">Double-press the voice key to open this app</string>
+    <string name="hint_voice_key">Press the voice key on the steering wheel twice quickly. The voice assistant may still react to the presses.</string>
+    <string name="label_abrp_upload_enabled">Send live data</string>
+    <string name="hint_abrp_upload_enabled">To your server, which stores it, and straight to ABRP when the ABRP credentials below are set. Consumption and charging tracking keep running when this is off.</string>
+    <string name="hint_abrp_direct">The car sends live data to ABRP itself with your ABRP API key and user token. Without them, ABRP gets no live data; your server only stores it.</string>
+    <string name="hint_abrp_api_key">ABRP API key</string>
+    <string name="hint_abrp_token">ABRP user token</string>
+    <string name="abrp_saved">Saved: the car sends live data to ABRP directly</string>
+    <string name="abrp_cleared">Cleared: ABRP gets no live data</string>
+    <string name="abrp_invalid">Enter both, without spaces, or leave both empty</string>
+    <string name="abrp_testing">Checking with ABRP…</string>
+    <string name="abrp_test_ok">ABRP accepted these credentials</string>
+    <string name="abrp_test_failed">ABRP refused: HTTP %1$d</string>
+    <string name="abrp_test_offline">ABRP not reachable: %1$s</string>
+    <string name="abrp_not_set">Set both first</string>
+    <string name="btn_phone_settings">Enter on phone</string>
+    <string name="hint_phone_settings">Type the ABRP credentials, charging price and usable capacity on your phone instead: a QR code opens a form on your server.</string>
+    <string name="phone_settings_title">Enter settings on your phone</string>
+    <string name="phone_settings_scan">Scan the QR code with your phone, or open %1$s and enter the code %2$s. Fill in what you want to change and send it with the approval password.</string>
+    <string name="phone_settings_waiting">Waiting for the phone…</string>
+    <string name="phone_settings_needs_server">Set up the server first (Server tab): the form for the phone runs on your server.</string>
+    <string name="phone_settings_not_enabled">Not available on the server: it needs version 2.5.0 or newer and an APPROVAL_PASSWORD</string>
+    <string name="pair_expired_settings">The code expired — press Enter on phone again</string>
+    <string name="phone_settings_applied">Settings from the phone saved</string>
+    <string name="phone_settings_partly">Some values from the phone were not plausible and were not saved</string>
 
-    <string name="status_stopped">Service not running</string>
 
     <!-- Cadence configuration -->
     <string name="label_frequency">Upload frequency</string>
@@ -100,14 +159,15 @@
     <string name="state_stopped">Stopped</string>
     <string name="state_starting">Starting…</string>
     <string name="state_running">Running</string>
-    <string name="state_tracking_locally">Tracking locally — ABRP upload off</string>
-    <string name="notif_tracking_locally">Tracking locally — ABRP upload off</string>
+    <string name="state_abrp_only">Running — live data to ABRP only, no server set up</string>
+    <string name="state_tracking_locally">Tracking locally — live telemetry off</string>
+    <string name="notif_tracking_locally">Tracking locally — live telemetry off</string>
     <string name="state_error">In error — last %1$d uploads failed</string>
 
     <!-- Call log -->
     <string name="label_call_log">Recent uploads</string>
     <string name="call_log_empty">No upload attempted yet.</string>
-    <string name="btn_flush_now">Şimdi yükle</string>
+    <string name="btn_flush_now">Upload now</string>
     <string name="status_starting">Starting…</string>
     <string name="status_running_no_upload">Running — waiting for first upload</string>
     <string name="status_last_upload">Last upload: %1$s (%2$s)</string>
@@ -118,21 +178,91 @@
     <string name="notif_channel_desc">Shows vehicle telemetry upload status</string>
     <string name="notif_title">ABRP Uploader</string>
     <string name="notif_action_stop">Stop</string>
-    <string name="ota_install_success">Güncelleme kuruldu — uygulamayı yeniden başlatın</string>
-    <string name="ota_install_failed">Kurulum başarısız: %1$s</string>
-    <string name="update_check">Güncelleme kontrol et</string>
-    <string name="update_checking">Yeni OTA sürümü kontrol ediliyor…</string>
-    <string name="update_dialog_title">Yazılım güncellemesi</string>
-    <string name="update_downloading">İndiriliyor ve doğrulanıyor…</string>
-    <string name="update_downloading_percent">İndiriliyor… %1$d%%</string>
+    <string name="ota_install_success">Update installed — restart the app</string>
+    <string name="ota_install_failed">Installation failed: %1$s. The APK is in Downloads.</string>
+    <string name="update_check">Check for updates</string>
+    <string name="update_checking">Checking for a new OTA version…</string>
+    <string name="update_usb_looking">Looking on the USB stick…</string>
+    <string name="btn_usb_update">Install from USB stick</string>
+    <string name="update_dialog_title">Software update</string>
+    <string name="btn_check_update">Check for updates</string>
+    <string name="btn_about">About Nils\' MG4</string>
+    <string name="settings_version">Version %1$s</string>
+    <string name="vehicle_row_speed_average">Speed, 5-min average</string>
+    <string name="speed_kmh">%1$.0f km/h</string>
+    <string name="update_downloading">Downloading and verifying…</string>
+    <string name="update_downloading_percent">Downloading… %1$d%%</string>
     <string name="about_action">About</string>
-    <string name="about_title">Fatih\'sMG4 Hakkında</string>
+    <string name="about_title">About Nils\' MG4</string>
     <string name="about_version">Version %1$s</string>
-    <string name="about_attribution">Fork of malys / EVABRPUploader\nand Leon Kernan / ABRP_Uploader</string>
-    <string name="about_repository">github.com/fatihdonmezdev/FatihsMG4</string>
+    <string name="about_attribution">Fork of fatihdonmezdev / FatihsMG4,\nmalys / EVABRPUploader\nand Leon Kernan / ABRP_Uploader</string>
+    <string name="about_repository">git.stinnesbeck.com/nils/mg4</string>
     <string name="about_made_with_love">MG4 EH32 · SWI69</string>
-    <string name="about_logo_description">FatihsMG4 logo</string>
+    <string name="about_logo_description">Nils\' MG4 logo</string>
     <string name="about_qr_description">QR code for the project repository</string>
     <string name="about_version_unknown">unknown</string>
     <string name="about_close">Close</string>
+
+    <!-- Charging, Consumption and Settings texts, moved here from the layouts (2.14.4) -->
+    <string name="charging_not_charging">Not charging</string>
+    <string name="charging_soc">SOC</string>
+    <string name="charging_start_soc">Start SOC</string>
+    <string name="charging_battery_voltage">Battery voltage</string>
+    <string name="charging_battery_current">Battery current</string>
+    <string name="charging_power_label">Charging power</string>
+    <string name="charging_net_energy_into_battery">Net energy into battery</string>
+    <string name="charging_drawn_from_grid" formatted="false">Drawn from grid (+10%)</string>
+    <string name="charging_time_label">Charging time</string>
+    <string name="charging_total_cost">Total cost</string>
+    <string name="charging_curve_title">CHARGING CURVE</string>
+    <string name="charging_no_charging_measurements_yet">No charging measurements yet</string>
+    <string name="consumption_period_title">CONSUMPTION PERIOD</string>
+    <string name="consumption_lifetime">Lifetime</string>
+    <string name="consumption_last_7_days">Last 7 days</string>
+    <string name="consumption_last_30_days">Last 30 days</string>
+    <string name="consumption_trip_a">Trip A</string>
+    <string name="consumption_trip_b">Trip B</string>
+    <string name="consumption_distance">Distance</string>
+    <string name="consumption_net_energy">Net energy</string>
+    <string name="consumption_average_consumption">Average consumption</string>
+    <string name="consumption_average_speed">Average speed</string>
+    <string name="consumption_duration">Duration</string>
+    <string name="consumption_soc_change">SOC change</string>
+    <string name="consumption_reset_selected_trip">Reset selected trip</string>
+    <string name="consumption_stored_note">Last 7/30 days, lifetime and Trip A/B are stored permanently on the device; app and OTA updates do not erase them.</string>
+    <string name="consumption_daily_log_title">DAILY LOG · LAST 4 MONTHS</string>
+    <string name="consumption_pick_a_date">Pick a date</string>
+    <string name="consumption_no_daily_data_yet">No daily data yet</string>
+    <string name="settings_manual_soh" formatted="false">Manual SoH (%)</string>
+    <string name="unit_percent" formatted="false">%</string>
+    <string name="settings_save_soh_value">Save SoH value</string>
+    <string name="settings_soh_note">This manual value is stored on the device and sent to your server with the daily totals.</string>
+    <string name="unit_kwh">kWh</string>
+    <string name="settings_unit_price">Unit price</string>
+    <string name="unit_eur_per_kwh">€/kWh</string>
+    <string name="settings_save_price">Save price</string>
+    <string name="trip_reset_title">Reset %1$s?</string>
+    <string name="trip_reset_message">This counter\'s recorded consumption history will be permanently deleted.</string>
+    <string name="trip_reset_confirm">Reset</string>
+    <string name="soh_saved">SoH saved</string>
+    <string name="soh_invalid">Enter a value between 1 and 100</string>
+    <string name="price_saved">Charging price saved</string>
+    <string name="price_invalid">Enter a valid €/kWh value</string>
+    <string name="charge_dc">DC fast charging</string>
+    <string name="charge_ac_not_metered">AC charging (not metered)</string>
+    <string name="charge_last">Last charge</string>
+    <string name="consumption_no_records">No records for this date</string>
+    <string name="consumption_day_summary">Distance     %1$.1f km\nEnergy       %2$.2f kWh\nAverage      %3$s\nDuration     %4$d h %5$02d min\nSOC change   %6$.1f %%</string>
+    <string name="consumption_refreshed">Consumption refreshed</string>
+    <string name="charge_status_ac">AC charging ♥</string>
+    <string name="charge_status_dc">DC fast charging ♥</string>
+    <string name="charge_status_connecting">Connecting…</string>
+    <string name="charge_status_plugged">Plugged in, not charging</string>
+    <string name="charge_status_stopped">Stopped</string>
+    <string name="charge_status_code">Status %1$d</string>
+    <string name="charge_status_connected">Connected ♥</string>
+    <string name="charge_status_unplugged">Not connected</string>
+    <!-- A value that cannot be read: never 0 (AGENTS.md). -->
+    <string name="no_value" translatable="false">—</string>
+    <string name="btn_refresh">Refresh</string>
 </resources>
diff --git a/app/src/main/res/values/strings_design.xml b/app/src/main/res/values/strings_design.xml
index 8564ab9..1c8dc16 100644
--- a/app/src/main/res/values/strings_design.xml
+++ b/app/src/main/res/values/strings_design.xml
@@ -1,28 +1,31 @@
 <?xml version="1.0"?>
 <resources>
-  <string name="design_battery_short">Batarya</string>
+  <string name="design_battery_short">Battery</string>
   <string name="design_probe">VHAL Probe</string>
   <string name="design_brand">MG&#x2074;</string>
-  <string name="design_brand_caption">Fatih&#x2019;s MG4</string>
-  <string name="design_brand_footer">ELEKTR&#x130;KLE YOLDA</string>
-  <string name="design_overview_title">S&#xFC;r&#xFC;&#x15F;e bir bak&#x131;&#x15F;.</string>
-  <string name="design_overview_subtitle">Arac&#x131;ndan gelen veriler, tek bir yerde.</string>
-  <string name="design_abrp_title">Rotana ba&#x11F;lan.</string>
-  <string name="design_abrp_subtitle">ABRP hesab&#x131;nla arac&#x131;n&#x131; bulu&#x15F;tur.</string>
-  <string name="design_service_title">Sen yola odaklan.</string>
-  <string name="design_service_subtitle">Verilerin arka planda g&#xFC;ncel kals&#x131;n.</string>
-  <string name="design_wifi_title">Ba&#x11F;lant&#x131;da kal.</string>
-  <string name="design_wifi_subtitle">Yolculu&#x11F;unun internet ba&#x11F;lant&#x131;s&#x131;.</string>
-  <string name="design_log_title">Her aktar&#x131;m, burada.</string>
-  <string name="design_log_subtitle">Son g&#xF6;nderimlerin durumu ve ayr&#x131;nt&#x131;lar&#x131;.</string>
-  <string name="design_battery">BATARYA</string>
-  <string name="design_energy">ENERJ&#x130; VE SICAKLIK</string>
-  <string name="design_tires">LAST&#x130;K BASIN&#xC7;LARI</string>
-  <string name="design_account">HESAP BA&#x11E;LANTISI</string>
-  <string name="design_private_title">Sana &#xF6;zel ba&#x11F;lant&#x131;.</string>
-  <string name="design_private_body">Token, arac&#x131;n&#x131; ABRP hesab&#x131;na ba&#x11F;lar. Bilgilerin bu cihazda &#x15F;ifreli saklan&#x131;r.</string>
-  <string name="design_no_data">Okunamayan veriler &#x2014; olarak g&#xF6;sterilir.</string>
-  <string name="design_service_controls">AKTARIM KONTROL&#xDC;</string>
-  <string name="design_service_timing">G&#xDC;NCELLEME SIKLI&#x11E;I</string>
-  <string name="design_car_desc">Lastik bas&#x131;n&#xE7;lar&#x131;n&#x131;n ara&#xE7; &#xFC;zerindeki konumlar&#x131;</string>
+  <string name="design_brand_caption">Nils&#x2019; MG4</string>
+  <string name="design_brand_footer">ON THE ROAD, ELECTRIC</string>
+  <string name="design_overview_title">Your drive at a glance.</string>
+  <string name="design_overview_subtitle">Data from your car, all in one place.</string>
+  <string name="design_server_title">Where your data goes.</string>
+  <string name="design_server_subtitle">Your own server stores it; the car sends live data to ABRP itself.</string>
+  <string name="design_service_title">Live data.</string>
+  <string name="design_service_subtitle">Where your car\'s live data goes, and how often.</string>
+  <string name="design_settings_title">Settings.</string>
+  <string name="design_settings_subtitle">Display, battery, charging price and updates.</string>
+  <string name="design_log_title">Every upload, right here.</string>
+  <string name="design_log_subtitle">Status and details of recent uploads.</string>
+  <string name="design_battery">BATTERY</string>
+  <string name="design_energy">VEHICLE INFO</string>
+  <string name="design_tires">TIRE PRESSURES</string>
+  <string name="design_account">SERVER LINK</string>
+  <string name="design_no_data">Values that cannot be read are shown as &#x2014;.</string>
+  <string name="design_service_controls">LIVE DATA</string>
+  <string name="design_abrp_title">ABRP, DIRECTLY FROM THE CAR</string>
+  <string name="design_display_title">DISPLAY AND STEERING WHEEL</string>
+  <string name="design_battery_settings_title">BATTERY</string>
+  <string name="design_app_title">APP</string>
+  <string name="design_price_title">CHARGING PRICE</string>
+  <string name="design_service_timing">UPDATE FREQUENCY</string>
+  <string name="design_car_desc">Tire pressure positions on the vehicle</string>
 </resources>
diff --git a/app/src/main/res/values/styles_app.xml b/app/src/main/res/values/styles_app.xml
index cfeef15..7c74ff9 100644
--- a/app/src/main/res/values/styles_app.xml
+++ b/app/src/main/res/values/styles_app.xml
@@ -39,19 +39,32 @@
     <item name="boxCornerRadiusTopEnd">16dp</item>
     <item name="boxCornerRadiusBottomStart">16dp</item>
     <item name="boxCornerRadiusBottomEnd">16dp</item>
-    <item name="hintTextColor">@color/ev_accent</item>
+    <item name="hintTextColor">?attr/evAccent</item>
     <item name="endIconTint">@color/ev_text_secondary</item>
     <item name="helperTextTextAppearance">@style/Text.EV.Secondary</item>
   </style>
+  <!-- A drop-down that keeps the app full screen: an exposed dropdown menu's list does not take
+       focus from the activity's window, unlike a Spinner's, so the car's bars stay hidden. -->
+  <style name="Widget.EV.Dropdown" parent="Widget.Material3.TextInputLayout.OutlinedBox.ExposedDropdownMenu">
+    <item name="boxBackgroundColor">@color/ev_background</item>
+    <item name="boxStrokeColor">@color/input_stroke</item>
+    <item name="boxStrokeWidth">1dp</item>
+    <item name="boxStrokeWidthFocused">2dp</item>
+    <item name="boxCornerRadiusTopStart">16dp</item>
+    <item name="boxCornerRadiusTopEnd">16dp</item>
+    <item name="boxCornerRadiusBottomStart">16dp</item>
+    <item name="boxCornerRadiusBottomEnd">16dp</item>
+    <item name="endIconTint">?attr/evAccent</item>
+  </style>
   <style name="Text.EV.Eyebrow" parent="Text.EV.SectionHeader">
     <item name="android:textSize">16sp</item>
-    <item name="android:textColor">@color/ev_accent</item>
+    <item name="android:textColor">?attr/evAccent</item>
     <item name="android:fontFamily">sans-serif-medium</item>
     <item name="android:letterSpacing">0.12</item>
   </style>
   <style name="Text.EV.VersionBadge" parent="Text.EV.Secondary">
     <item name="android:background">@drawable/bg_version_badge</item>
-    <item name="android:textColor">@color/ev_cyan</item>
+    <item name="android:textColor">?attr/evAccentLight</item>
     <item name="android:textSize">13sp</item>
     <item name="android:fontFamily">sans-serif-medium</item>
     <item name="android:paddingStart">10dp</item>
diff --git a/app/src/main/res/values/styles_ev.xml b/app/src/main/res/values/styles_ev.xml
index 5506109..fcafe9a 100644
--- a/app/src/main/res/values/styles_ev.xml
+++ b/app/src/main/res/values/styles_ev.xml
@@ -22,8 +22,8 @@
         <item name="android:textAllCaps">false</item>
         <item name="android:fontFamily">sans-serif-medium</item>
         <item name="android:letterSpacing">0.01</item>
-        <item name="backgroundTint">@color/ev_accent</item>
-        <item name="android:textColor">@color/ev_on_accent</item>
+        <item name="backgroundTint">?attr/evAccent</item>
+        <item name="android:textColor">?attr/evOnAccent</item>
         <item name="elevation">0dp</item>
         <item name="shapeAppearanceOverlay">@style/ShapeAppearanceOverlay.EV.Button</item>
         <item name="android:minHeight">@dimen/touch_target</item>
@@ -65,7 +65,7 @@
          16sp floor without shouting. -->
     <style name="Text.EV.SectionHeader" parent="TextAppearance.Material3.LabelLarge">
         <item name="android:textSize">@dimen/text_label</item>
-        <item name="android:textColor">@color/ev_accent</item>
+        <item name="android:textColor">?attr/evAccent</item>
         <item name="android:letterSpacing">0.12</item>
         <item name="android:textStyle">bold</item>
     </style>
@@ -96,4 +96,5 @@
     <style name="ShapeAppearanceOverlay.EV.Button" parent="">
         <item name="cornerSize">18dp</item>
     </style>
+
 </resources>
diff --git a/app/src/main/res/values/themes.xml b/app/src/main/res/values/themes.xml
index d6cc7f8..9432ab5 100644
--- a/app/src/main/res/values/themes.xml
+++ b/app/src/main/res/values/themes.xml
@@ -3,15 +3,23 @@
 
     <!-- User-requested OLED theme. MainActivity fixes night mode for system widgets too. -->
     <style name="Theme.EVABRPUploader" parent="Theme.Material3.DayNight.NoActionBar">
-        <item name="colorPrimary">@color/ev_accent</item>
-        <item name="colorSecondary">@color/ev_cyan</item>
-        <item name="colorControlActivated">@color/ev_cyan</item>
+        <!-- Dynamic Red; MainActivity lays the chosen accent over these (values/accents.xml). -->
+        <item name="evAccent">#E0424C</item>
+        <item name="evOnAccent">#1A0B0C</item>
+        <item name="evAccentLight">#FF9A9E</item>
+        <item name="evAccentDeep">#3A1215</item>
+        <item name="evAccentSurface">#2A1416</item>
+        <item name="evAccentStroke">#80703A3D</item>
+        <item name="evAccentTrack">#5E3436</item>
+        <item name="colorPrimary">?attr/evAccent</item>
+        <item name="colorSecondary">?attr/evAccentLight</item>
+        <item name="colorControlActivated">?attr/evAccentLight</item>
         <item name="android:fontFamily">sans-serif</item>
         <item name="android:windowLightStatusBar">false</item>
         <item name="android:windowLightNavigationBar">false</item>
         <item name="android:navigationBarColor">@color/ev_background</item>
         <item name="android:forceDarkAllowed" tools:targetApi="q">false</item>
-        <item name="colorOnPrimary">@color/ev_on_accent</item>
+        <item name="colorOnPrimary">?attr/evOnAccent</item>
         <item name="colorSurface">@color/ev_surface</item>
         <item name="colorSurfaceContainer">@color/ev_surface_raised</item>
         <item name="android:colorBackground">@color/ev_background</item>
diff --git a/app/src/stable/java/com/evsuite/abrp/UpdateHook.java b/app/src/stable/java/com/evsuite/abrp/UpdateHook.java
index ed29e05..67824a6 100644
--- a/app/src/stable/java/com/evsuite/abrp/UpdateHook.java
+++ b/app/src/stable/java/com/evsuite/abrp/UpdateHook.java
@@ -27,7 +27,12 @@ final class UpdateHook {
 
     /** Answers immediately that this channel does not self-update. */
     static void checkInBackground(Context context, Listener listener) {
-        if (listener != null) listener.onResult("Bu sürümde otomatik güncelleme yok");
+        if (listener != null) listener.onResult("This build has no automatic updates");
+    }
+
+    /** Answers immediately that this channel does not install updates. */
+    static void installFromUsbInBackground(Context context, Listener listener) {
+        if (listener != null) listener.onResult("This build does not install updates");
     }
 
     static boolean isSupported() { return false; }
diff --git a/app/src/test/java/com/evsuite/abrp/AbrpApiTest.java b/app/src/test/java/com/evsuite/abrp/AbrpApiTest.java
index 6852511..e63fd0e 100644
--- a/app/src/test/java/com/evsuite/abrp/AbrpApiTest.java
+++ b/app/src/test/java/com/evsuite/abrp/AbrpApiTest.java
@@ -6,45 +6,35 @@ import static org.junit.Assert.assertTrue;
 
 import org.junit.Test;
 
-/**
- * [T-912] Credentials must reach ABRP in the request body. A URL is logged by
- * proxies, CDNs and crash reporters; a body is not.
- */
+/** The direct ABRP request and its answer — pure JVM, nothing is sent. */
 public class AbrpApiTest {
 
     @Test
-    public void endpointUrlCarriesNoCredentials() {
-        assertFalse(AbrpApi.API_URL.contains("?"));
-        assertFalse(AbrpApi.API_URL.contains("api_key"));
-        assertFalse(AbrpApi.API_URL.contains("token"));
+    public void credentialsGoInTheBodyEncoded() throws Exception {
+        String body = AbrpApi.formBody("key+1", "tok&en", "{\"utc\":1790000000,\"soc\":80}");
+        assertEquals("api_key=key%2B1&token=tok%26en&tlm=%7B%22utc%22%3A1790000000%2C%22soc%22%3A80%7D", body);
+        assertFalse(AbrpApi.SEND_URL.contains("?"));
     }
 
     @Test
-    public void endpointIsHttps() {
-        assertTrue(AbrpApi.API_URL.startsWith("https://"));
-        assertTrue(AbrpApi.VERIFY_URL.startsWith("https://"));
-    }
-
-    /** [T-913] The Test button must not be able to write telemetry. */
-    @Test
-    public void credentialCheckDoesNotTargetTheTelemetryWriteEndpoint() {
-        assertFalse("le test de connexion ne doit jamais viser /tlm/send",
-                AbrpApi.VERIFY_URL.contains("/tlm/send"));
-        assertTrue(AbrpApi.VERIFY_URL.contains("get_next_charge"));
+    public void onlyAnOkStatusIsAccepted() {
+        assertTrue(AbrpApi.accepted(new ServerHttp.Response(200, "{\"status\":\"ok\"}")));
+        assertFalse(AbrpApi.accepted(new ServerHttp.Response(200, "{\"status\":\"error\",\"errors\":[\"bad token\"]}")));
+        assertFalse(AbrpApi.accepted(new ServerHttp.Response(401, "{\"status\":\"ok\"}")));
+        assertFalse(AbrpApi.accepted(new ServerHttp.Response(200, "not json")));
     }
 
     @Test
-    public void bodyCarriesAllThreeParameters() throws Exception {
-        String body = AbrpApi.formBody("KEY", "TOK", "{\"utc\":1}");
-        assertTrue(body.contains("api_key=KEY"));
-        assertTrue(body.contains("token=TOK"));
-        assertTrue(body.contains("tlm="));
+    public void credentialsMustLookLikeCredentials() {
+        assertTrue(AbrpConfig.isPlausible("0a1b2c3d-4e5f-6789"));
+        assertFalse(AbrpConfig.isPlausible("short"));
+        assertFalse(AbrpConfig.isPlausible("has a space in it"));
+        assertFalse(AbrpConfig.isPlausible(null));
     }
 
     @Test
-    public void bodyIsFormEncoded() throws Exception {
-        // A token with URL-significant characters must not break the body layout.
-        String body = AbrpApi.formBody("a+b/c", "d&e=f", "{\"utc\":1}");
-        assertEquals("api_key=a%2Bb%2Fc&token=d%26e%3Df&tlm=%7B%22utc%22%3A1%7D", body);
+    public void theSampleTimeIsReadFromItsJson() {
+        assertEquals(1790000000L, TelemetryUploader.utcOf("{\"utc\":1790000000,\"soc\":5}"));
+        assertEquals(0L, TelemetryUploader.utcOf("garbage"));
     }
 }
diff --git a/app/src/test/java/com/evsuite/abrp/AccentColorTest.java b/app/src/test/java/com/evsuite/abrp/AccentColorTest.java
new file mode 100644
index 0000000..2229a9d
--- /dev/null
+++ b/app/src/test/java/com/evsuite/abrp/AccentColorTest.java
@@ -0,0 +1,22 @@
+package com.evsuite.abrp;
+
+import static org.junit.Assert.assertEquals;
+
+import org.junit.Test;
+
+/** The accent colour choice — pure JVM. */
+public class AccentColorTest {
+
+    @Test
+    public void dynamicRedUnlessAnotherWasChosen() {
+        assertEquals(AccentColor.DYNAMIC_RED, AccentColor.fromPref(null));
+        assertEquals(AccentColor.DYNAMIC_RED, AccentColor.fromPref("PINK"));
+        assertEquals(AccentColor.VOLCANO_ORANGE, AccentColor.fromPref("VOLCANO_ORANGE"));
+    }
+
+    @Test
+    public void alphaIsReplacedNotMixed() {
+        assertEquals(0x55A6C8FF, AccentColor.withAlpha(0xFFA6C8FF, 0x55));
+        assertEquals(0x00123456, AccentColor.withAlpha(0x80123456, 0));
+    }
+}
diff --git a/app/src/test/java/com/evsuite/abrp/ConfigImportTest.java b/app/src/test/java/com/evsuite/abrp/ConfigImportTest.java
index 61dff8f..058ab62 100644
--- a/app/src/test/java/com/evsuite/abrp/ConfigImportTest.java
+++ b/app/src/test/java/com/evsuite/abrp/ConfigImportTest.java
@@ -8,34 +8,37 @@ import static org.junit.Assert.assertTrue;
 import org.junit.Test;
 
 /**
- * ABRP config file parsing — pure JVM, no Android needed.
+ * Config file parsing — pure JVM, no Android needed.
  *
- * The file exists so a user does not have to type a long api_key and token on the car's
+ * The file exists so a user does not have to type a long server URL and token on the car's
  * on-screen keyboard, so the parser must be forgiving about whitespace, case and comments
  * while never inventing a value the file did not set.
  */
 public class ConfigImportTest {
 
     @Test
-    public void parsesCredentials() {
-        ConfigImport c = ConfigImport.parse("api_key = abc123\ntoken = def456\n");
-        assertEquals("abc123", c.apiKey);
+    public void parsesServerSettings() {
+        ConfigImport c = ConfigImport.parse("server_url = https://car.example.com\ntoken = def456\n"
+                + "installation_id = 6f1a2b3c-4d5e-4f60-8a9b-0c1d2e3f4a5b\n");
+        assertEquals("https://car.example.com", c.serverUrl);
         assertEquals("def456", c.token);
+        assertEquals("6f1a2b3c-4d5e-4f60-8a9b-0c1d2e3f4a5b", c.installationId);
         assertFalse(c.isEmpty());
     }
 
     @Test
     public void ignoresCommentsBlankLinesAndCase() {
         ConfigImport c = ConfigImport.parse(
-                "# my config\n\n  API_KEY =  key  \n# token below\nTOKEN=tok\n");
-        assertEquals("key", c.apiKey);
+                "# my config\n\n  SERVER_URL =  https://x.example  \n# token below\nTOKEN=tok\n");
+        assertEquals("https://x.example", c.serverUrl);
         assertEquals("tok", c.token);
     }
 
     @Test
     public void absentKeysStayNullSoNothingIsWiped() {
         ConfigImport c = ConfigImport.parse("token = only-token\n");
-        assertNull(c.apiKey);
+        assertNull(c.serverUrl);
+        assertNull(c.installationId);
         assertEquals("only-token", c.token);
         assertNull(c.intervalSec);
         assertNull(c.boostLowSoc);
@@ -80,8 +83,27 @@ public class ConfigImportTest {
 
     @Test
     public void aliasKeysAreAccepted() {
-        ConfigImport c = ConfigImport.parse("apikey = k\nuser_token = t\n");
-        assertEquals("k", c.apiKey);
+        ConfigImport c = ConfigImport.parse("url = https://k.example\ningest_token = t\n");
+        assertEquals("https://k.example", c.serverUrl);
         assertEquals("t", c.token);
     }
+
+    @Test
+    public void abrpCredentialsAreRead() {
+        ConfigImport c = ConfigImport.parse("abrp_api_key = key-1234567890\nABRP_TOKEN = token-abcdefghij\n");
+        assertEquals("key-1234567890", c.abrpApiKey);
+        assertEquals("token-abcdefghij", c.abrpToken);
+        assertFalse(c.isEmpty());
+        assertEquals("token-2", ConfigImport.parse("abrp_user_token = token-2").abrpToken);
+    }
+
+    @Test
+    public void chargingPriceAndUsableCapacityAreRead() {
+        ConfigImport c = ConfigImport.parse("charging_price = 0,39\nusable_kwh = 50.8\n");
+        assertEquals(0.39, c.chargingPrice, 1e-9);
+        assertEquals(50.8, c.usableKwh, 1e-9);
+        assertFalse(c.isEmpty());
+        assertNull(ConfigImport.parse("charging_price = cheap").chargingPrice);
+        assertEquals(0.5, ConfigImport.parse("price_per_kwh = 0.5").chargingPrice, 1e-9);
+    }
 }
diff --git a/app/src/test/java/com/evsuite/abrp/DoublePressDetectorTest.java b/app/src/test/java/com/evsuite/abrp/DoublePressDetectorTest.java
new file mode 100644
index 0000000..6f05bd6
--- /dev/null
+++ b/app/src/test/java/com/evsuite/abrp/DoublePressDetectorTest.java
@@ -0,0 +1,57 @@
+package com.evsuite.abrp;
+
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+/** Double-press detection for the voice key (287) — pure JVM. */
+public class DoublePressDetectorTest {
+
+    private static final int VOICE = 287;
+
+    @Test
+    public void broadcastsWithoutUpDownCountAsPresses() {
+        DoublePressDetector d = new DoublePressDetector(VOICE);
+        assertFalse(d.accept(VOICE, null, false, 1_000));
+        assertTrue(d.accept(VOICE, null, false, 1_350));
+    }
+
+    @Test
+    public void withDownAndUpOnlyReleasesCount() {
+        DoublePressDetector d = new DoublePressDetector(VOICE);
+        assertFalse(d.accept(VOICE, true, false, 1_000));
+        assertFalse(d.accept(VOICE, false, false, 1_080));
+        assertFalse(d.accept(VOICE, true, false, 1_250));
+        assertTrue(d.accept(VOICE, false, false, 1_330));
+    }
+
+    @Test
+    public void tooSlowIsTwoSinglePresses() {
+        DoublePressDetector d = new DoublePressDetector(VOICE);
+        assertFalse(d.accept(VOICE, null, false, 1_000));
+        assertFalse(d.accept(VOICE, null, false, 1_000 + DoublePressDetector.WINDOW_MS + 1));
+    }
+
+    @Test
+    public void otherKeysAndLongPressesDoNotCount() {
+        DoublePressDetector d = new DoublePressDetector(VOICE);
+        assertFalse(d.accept(17, null, false, 1_000));
+        assertFalse(d.accept(VOICE, null, false, 1_100));
+        assertFalse(d.accept(17, null, false, 1_200));   // another key in between is ignored
+        assertTrue(d.accept(VOICE, null, false, 1_300));
+
+        DoublePressDetector held = new DoublePressDetector(VOICE);
+        assertFalse(held.accept(VOICE, null, false, 1_000));
+        assertFalse(held.accept(VOICE, true, true, 1_100));  // long press resets
+        assertFalse(held.accept(VOICE, false, false, 1_300));
+    }
+
+    @Test
+    public void threePressesOpenOnceAndStartOver() {
+        DoublePressDetector d = new DoublePressDetector(VOICE);
+        assertFalse(d.accept(VOICE, null, false, 1_000));
+        assertTrue(d.accept(VOICE, null, false, 1_200));
+        assertFalse(d.accept(VOICE, null, false, 1_400));
+    }
+}
diff --git a/app/src/test/java/com/evsuite/abrp/HeadUnitWeatherTest.java b/app/src/test/java/com/evsuite/abrp/HeadUnitWeatherTest.java
deleted file mode 100644
index 2f8f45e..0000000
--- a/app/src/test/java/com/evsuite/abrp/HeadUnitWeatherTest.java
+++ /dev/null
@@ -1,109 +0,0 @@
-package com.evsuite.abrp;
-
-import static org.junit.Assert.assertEquals;
-import static org.junit.Assert.assertNull;
-import static org.junit.Assert.assertTrue;
-
-import org.junit.Test;
-
-/**
- * The broadcast parser, on the JVM.
- *
- * What is under test is not the vendor's payload — that shape is unverified and may well be
- * something else on the car. It is that the parser finds a temperature wherever the payload
- * puts it, refuses to invent one, and says what it was given when it fails, because the
- * diagnostic is the only thing that reaches a driver with no adb.
- */
-public class HeadUnitWeatherTest {
-
-    @Test
-    public void readsATemperatureAndThePlaceItIsFor() {
-        HeadUnitWeather weather = new HeadUnitWeather();
-        weather.acceptPayload((
-                "{\"code\":0,\"weather\":{\"temperature\":27,\"unit\":\"C\","
-                        + "\"address\":\"Toulouse\",\"conditionType\":1}}"));
-        assertEquals(27f, weather.temperatureC(), 0.01f);
-        assertEquals("Toulouse", weather.place());
-        // The diagnostic carries the reading's age: a broadcast arrives when the weather app
-        // refreshes, so "where from" without "how long ago" does not say whether to trust it.
-        assertEquals("Toulouse/0min", weather.diagnostic());
-    }
-
-    @Test
-    public void findsTheValueWhereverThePayloadNests_it() {
-        HeadUnitWeather weather = new HeadUnitWeather();
-        weather.acceptPayload((
-                "{\"data\":{\"current\":[{\"tempValue\":\"18.5\",\"tempUnit\":\"C\"}]}}"));
-        assertEquals(18.5f, weather.temperatureC(), 0.01f);
-    }
-
-    @Test
-    public void convertsAFahrenheitPayload() {
-        HeadUnitWeather weather = new HeadUnitWeather();
-        weather.acceptPayload(("{\"temperature\":81,\"temperatureUnit\":\"F\"}"));
-        assertEquals(27.2f, weather.temperatureC(), 0.1f);
-    }
-
-    @Test
-    public void anUnnamedUnitIsTakenAsCelsius() {
-        HeadUnitWeather weather = new HeadUnitWeather();
-        weather.acceptPayload(("{\"temp\":21}"));
-        assertEquals(21f, weather.temperatureC(), 0.01f);
-    }
-
-    @Test
-    public void aPayloadWithoutATemperatureReportsWhatItWasGiven() {
-        HeadUnitWeather weather = new HeadUnitWeather();
-        weather.acceptPayload(("{\"conditionType\":3,\"address\":\"Toulouse\"}"));
-        assertNull(weather.temperatureC());
-        assertTrue(weather.diagnostic(), weather.diagnostic().startsWith("no temperature in {"));
-        assertTrue(weather.diagnostic(), weather.diagnostic().contains("conditionType"));
-    }
-
-    @Test
-    public void readsThePlaceFromACityKeyToo() {
-        HeadUnitWeather weather = new HeadUnitWeather();
-        weather.acceptPayload("{\"temp\":14,\"city\":\"Auzeville\"}");
-        assertEquals(14f, weather.temperatureC(), 0.01f);
-        assertEquals("Auzeville", weather.place());
-    }
-
-    @Test
-    public void aBroadcastWithNothingReadableIsReportedNotGuessed() {
-        HeadUnitWeather weather = new HeadUnitWeather();
-        weather.acceptPayload(null);
-        assertNull(weather.temperatureC());
-        assertEquals("broadcast carried no JSON", weather.diagnostic());
-    }
-
-    @Test
-    public void beforeAnyBroadcastTheDiagnosticSaysSo() {
-        HeadUnitWeather weather = new HeadUnitWeather();
-        assertNull(weather.temperatureC());
-        assertEquals("no broadcast yet", weather.diagnostic());
-    }
-
-    @Test
-    public void malformedJsonDoesNotEscapeTheReceiver() {
-        HeadUnitWeather weather = new HeadUnitWeather();
-        weather.acceptPayload(("{not json at all"));
-        assertNull(weather.temperatureC());
-        assertTrue(weather.diagnostic(), weather.diagnostic().contains("reading broadcast"));
-    }
-
-    @Test
-    public void aRestoredReadingIsReportedWithItsAge() {
-        HeadUnitWeather weather = new HeadUnitWeather();
-        weather.restore(19.5f, "Toulouse", System.currentTimeMillis() - 45 * 60 * 1000L);
-        assertEquals(19.5f, weather.temperatureC(), 0.01f);
-        assertEquals("Toulouse/45min", weather.diagnostic());
-    }
-
-    @Test
-    public void anAbsentStickyBroadcastIsNotMistakenForAFailedParse() {
-        HeadUnitWeather weather = new HeadUnitWeather();
-        weather.accept(null);
-        assertNull(weather.temperatureC());
-        assertEquals("none held, none sent yet", weather.diagnostic());
-    }
-}
diff --git a/app/src/test/java/com/evsuite/abrp/PairingClientTest.java b/app/src/test/java/com/evsuite/abrp/PairingClientTest.java
new file mode 100644
index 0000000..c9b6844
--- /dev/null
+++ b/app/src/test/java/com/evsuite/abrp/PairingClientTest.java
@@ -0,0 +1,146 @@
+package com.evsuite.abrp;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+import static org.junit.Assert.fail;
+
+import java.io.BufferedReader;
+import java.io.InputStreamReader;
+import java.io.OutputStream;
+import java.net.InetAddress;
+import java.net.ServerSocket;
+import java.net.Socket;
+import java.nio.charset.StandardCharsets;
+import java.util.ArrayDeque;
+import java.util.Deque;
+
+import org.junit.After;
+import org.junit.Before;
+import org.junit.Test;
+
+/** The car's pairing client against a stand-in that answers like the Go server. */
+public class PairingClientTest {
+
+    private ServerSocket socket;
+    private Thread thread;
+    private String url;
+    private final Deque<Integer> pollStatuses = new ArrayDeque<>();
+    private volatile int startStatus = 201;
+    private volatile String startErrorBody = "{\"error\":\"pairing is not enabled\"}";
+    private volatile String lastStartBody;
+
+    @Before
+    public void setUp() throws Exception {
+        socket = new ServerSocket(0, 10, InetAddress.getLoopbackAddress());
+        url = "http://127.0.0.1:" + socket.getLocalPort();
+        thread = new Thread(() -> {
+            while (!socket.isClosed()) {
+                try (Socket client = socket.accept()) {
+                    handle(client);
+                } catch (Exception ignored) {
+                    // socket closed in tearDown
+                }
+            }
+        });
+        thread.start();
+    }
+
+    @After
+    public void tearDown() throws Exception {
+        socket.close();
+        thread.join(2000);
+    }
+
+    /** Minimal HTTP/1.1: one request per connection, body by Content-Length. */
+    private void handle(Socket client) throws Exception {
+        BufferedReader in = new BufferedReader(new InputStreamReader(client.getInputStream(), StandardCharsets.UTF_8));
+        String requestLine = in.readLine();
+        int length = 0;
+        for (String line = in.readLine(); line != null && !line.isEmpty(); line = in.readLine()) {
+            if (line.toLowerCase(java.util.Locale.US).startsWith("content-length:")) {
+                length = Integer.parseInt(line.substring(15).trim());
+            }
+        }
+        char[] body = new char[length];
+        int read = 0;
+        while (read < length) read += in.read(body, read, length - read);
+        String path = requestLine.split(" ")[1];
+        int status;
+        String response;
+        if (path.equals("/v1/pair/start")) {
+            lastStartBody = new String(body);
+            status = startStatus;
+            response = status == 201
+                    ? "{\"deviceCode\":\"dev-code\",\"userCode\":\"K7F-3QX\",\"verificationUri\":\"https://car.example.com/pair\","
+                      + "\"verificationUriComplete\":\"https://car.example.com/pair?code=K7F-3QX\",\"expiresIn\":600,\"interval\":5}"
+                    : startErrorBody;
+        } else {
+            Integer next;
+            synchronized (pollStatuses) { next = pollStatuses.poll(); }
+            status = next == null ? 410 : next;
+            response = status == 200 ? "{\"token\":\"car-token-0123456789abcdefghij\",\"deviceId\":\"d1\"}"
+                    : status == 202 ? "{\"status\":\"authorization_pending\"}" : "{\"error\":\"x\"}";
+        }
+        byte[] bytes = response.getBytes(StandardCharsets.UTF_8);
+        OutputStream out = client.getOutputStream();
+        out.write(("HTTP/1.1 " + status + " X\r\nContent-Type: application/json\r\nContent-Length: " + bytes.length
+                + "\r\nConnection: close\r\n\r\n").getBytes(StandardCharsets.UTF_8));
+        out.write(bytes);
+        out.flush();
+    }
+
+    @Test
+    public void startSendsTheInstallationAndReadsTheCodes() throws Exception {
+        long before = System.currentTimeMillis();
+        PairingClient.Request request = PairingClient.start(url, "6f1a2b3c-4d5e-4f60-8a9b-0c1d2e3f4a5b");
+        assertTrue(lastStartBody, lastStartBody.contains("6f1a2b3c-4d5e-4f60-8a9b-0c1d2e3f4a5b"));
+        assertEquals("dev-code", request.deviceCode);
+        assertEquals("K7F-3QX", request.userCode);
+        assertEquals("https://car.example.com/pair?code=K7F-3QX", request.verificationUriComplete);
+        assertEquals(5000L, request.intervalMs);
+        assertTrue(request.expiresAtMs >= before + 600_000L);
+    }
+
+    @Test
+    public void pollMapsEveryServerAnswer() throws Exception {
+        synchronized (pollStatuses) {
+            pollStatuses.add(202);
+            pollStatuses.add(200);
+            pollStatuses.add(403);
+            pollStatuses.add(410);
+        }
+        PairingClient.PollResult pending = PairingClient.poll(url, "dev-code");
+        assertEquals(PairingClient.Outcome.PENDING, pending.outcome);
+        assertNull(pending.token);
+        PairingClient.PollResult approved = PairingClient.poll(url, "dev-code");
+        assertEquals(PairingClient.Outcome.APPROVED, approved.outcome);
+        assertEquals("car-token-0123456789abcdefghij", approved.token);
+        assertEquals(PairingClient.Outcome.DENIED, PairingClient.poll(url, "dev-code").outcome);
+        assertEquals(PairingClient.Outcome.EXPIRED, PairingClient.poll(url, "dev-code").outcome);
+    }
+
+    @Test
+    public void aServerWithoutPairingIsNotMistakenForPairingSwitchedOff() throws Exception {
+        // e.g. server 2.0.0, or a proxy's own 404 page
+        startStatus = 404;
+        startErrorBody = "404 page not found";
+        try {
+            PairingClient.start(url, "6f1a2b3c-4d5e-4f60-8a9b-0c1d2e3f4a5b");
+            fail("expected HttpStatusException");
+        } catch (PairingClient.HttpStatusException expected) {
+            assertEquals(404, expected.status);
+        }
+    }
+
+    @Test
+    public void pairingSwitchedOffOnTheServerIsReportedAsSuch() throws Exception {
+        startStatus = 404;
+        try {
+            PairingClient.start(url, "6f1a2b3c-4d5e-4f60-8a9b-0c1d2e3f4a5b");
+            fail("expected NotEnabledException");
+        } catch (PairingClient.NotEnabledException expected) {
+            // the dialog says pairing is off instead of a generic failure
+        }
+    }
+}
diff --git a/app/src/test/java/com/evsuite/abrp/PhoneSettingsClientTest.java b/app/src/test/java/com/evsuite/abrp/PhoneSettingsClientTest.java
new file mode 100644
index 0000000..761d5e5
--- /dev/null
+++ b/app/src/test/java/com/evsuite/abrp/PhoneSettingsClientTest.java
@@ -0,0 +1,29 @@
+package com.evsuite.abrp;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertNull;
+
+import org.junit.Test;
+
+/** Reading what the phone sent, as the server hands it out — pure JVM. */
+public class PhoneSettingsClientTest {
+
+    @Test
+    public void everythingTheServerSends() throws Exception {
+        PhoneSettingsClient.Settings s = PhoneSettingsClient.Settings.parse(
+                "{\"abrpApiKey\":\"api-key-1234\",\"abrpToken\":\" user-token-5678 \",\"pricePerKwh\":0.39,\"usableKwh\":50.8}");
+        assertEquals("api-key-1234", s.abrpApiKey);
+        assertEquals("user-token-5678", s.abrpToken);
+        assertEquals(0.39, s.pricePerKwh, 1e-9);
+        assertEquals(50.8, s.usableKwh, 1e-9);
+    }
+
+    @Test
+    public void whatThePhoneLeftEmptyStaysUnset() throws Exception {
+        PhoneSettingsClient.Settings s = PhoneSettingsClient.Settings.parse("{\"abrpToken\":\"user-token-5678\"}");
+        assertNull(s.abrpApiKey);
+        assertNull(s.pricePerKwh);
+        assertNull(s.usableKwh);
+        assertEquals("user-token-5678", s.abrpToken);
+    }
+}
diff --git a/app/src/test/java/com/evsuite/abrp/PressureUnitTest.java b/app/src/test/java/com/evsuite/abrp/PressureUnitTest.java
new file mode 100644
index 0000000..b7d8485
--- /dev/null
+++ b/app/src/test/java/com/evsuite/abrp/PressureUnitTest.java
@@ -0,0 +1,29 @@
+package com.evsuite.abrp;
+
+import static org.junit.Assert.assertEquals;
+
+import org.junit.Test;
+
+/** Tyre pressure display units — pure JVM. */
+public class PressureUnitTest {
+
+    @Test
+    public void kpaFromTheCarInEachUnit() {
+        assertEquals("2.5 bar", PressureUnit.BAR.format(250f));
+        assertEquals("250 kPa", PressureUnit.KPA.format(250f));
+        assertEquals("36.3 psi", PressureUnit.PSI.format(250f));
+    }
+
+    @Test
+    public void anUnreadPressureStaysADash() {
+        assertEquals("—", PressureUnit.BAR.format(null));
+        assertEquals("—", PressureUnit.PSI.format(Float.NaN));
+    }
+
+    @Test
+    public void barUnlessSomethingElseWasChosen() {
+        assertEquals(PressureUnit.BAR, PressureUnit.fromPref(null));
+        assertEquals(PressureUnit.BAR, PressureUnit.fromPref("nonsense"));
+        assertEquals(PressureUnit.PSI, PressureUnit.fromPref("PSI"));
+    }
+}
diff --git a/app/src/test/java/com/evsuite/abrp/RangeEstimatorTest.java b/app/src/test/java/com/evsuite/abrp/RangeEstimatorTest.java
new file mode 100644
index 0000000..47834ea
--- /dev/null
+++ b/app/src/test/java/com/evsuite/abrp/RangeEstimatorTest.java
@@ -0,0 +1,155 @@
+package com.evsuite.abrp;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertNotNull;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+/** Range estimates from power and speed — pure JVM. */
+public class RangeEstimatorTest {
+
+    private static final double USABLE = 50.8;
+
+    @Test
+    public void remainingEnergyIsSocTimesUsableCapacity() {
+        assertEquals(25.4, RangeEstimator.remainingKwh(50f, USABLE), 1e-9);
+        assertEquals(50.8, RangeEstimator.remainingKwh(120f, USABLE), 1e-9); // clamped
+        assertNull(RangeEstimator.remainingKwh(null, USABLE));
+    }
+
+    @Test
+    public void sinceStartCoversTheWholeTripNotJustFiveMinutes() {
+        RangeEstimator r = new RangeEstimator();
+        // 10 minutes at 30 kW then 10 minutes at 10 kW, both at 100 km/h: 20 kWh/100 km overall.
+        for (long t = 0; t <= 600_000; t += 15_000) r.add(t, 30f, 100f);
+        for (long t = 615_000; t <= 1_200_000; t += 15_000) r.add(t, 10f, 100f);
+        RangeEstimator.Estimate trip = r.sinceStart(25.4);
+        assertNotNull(trip);
+        assertEquals(20.0, trip.kwhPer100Km, 0.2);   // plus the 15 s step between the two
+        assertEquals(127.0, trip.rangeKm, 1.0);
+        assertEquals(33.3, trip.distanceKm, 0.1);
+        // The 5-minute average only sees the economical end.
+        assertEquals(10.0, r.average(25.4, 1_200_000).kwhPer100Km, 0.1);
+    }
+
+    @Test
+    public void standingWithTheClimateOnCountsTowardsTheTrip() {
+        RangeEstimator r = new RangeEstimator();
+        for (long t = 0; t <= 120_000; t += 15_000) r.add(t, 3f, 0f);       // warming up
+        for (long t = 135_000; t <= 735_000; t += 15_000) r.add(t, 15f, 60f);
+        assertTrue(r.sinceStart(25.4).kwhPer100Km > 15.0);
+    }
+
+    @Test
+    public void aLongGapOrChargingStartsANewTrip() {
+        RangeEstimator r = new RangeEstimator();
+        for (long t = 0; t <= 600_000; t += 15_000) r.add(t, 30f, 100f);
+        long later = 600_000 + RangeEstimator.TRIP_RESET_GAP_MS + 1;      // the car was off
+        for (long t = later; t <= later + 600_000; t += 15_000) r.add(t, 10f, 100f);
+        assertEquals(10.0, r.sinceStart(25.4).kwhPer100Km, 0.1);
+
+        long charge = later + 615_000;
+        r.add(charge, -7f, 0f);                                             // plugged in
+        assertNull(r.sinceStart(25.4));
+    }
+
+    @Test
+    public void noSinceStartBeforeAnyDistanceOrWithoutSoc() {
+        RangeEstimator r = new RangeEstimator();
+        assertNull(r.sinceStart(25.4));
+        for (long t = 0; t <= 60_000; t += 15_000) r.add(t, 2f, 0f);
+        assertNull(r.sinceStart(25.4));                                     // not moved yet
+        for (long t = 75_000; t <= 300_000; t += 15_000) r.add(t, 15f, 60f);
+        assertNull(r.sinceStart(null));
+    }
+
+    @Test
+    public void averageIntegratesEnergyOverDistance() {
+        RangeEstimator r = new RangeEstimator();
+        // 4 minutes at a steady 20 kW and 100 km/h, sampled every 2 s: 20 kWh/100 km.
+        for (long t = 0; t <= 240_000; t += 2_000) r.add(t, 20f, 100f);
+        RangeEstimator.Estimate e = r.average(25.4, 240_000);
+        assertNotNull(e);
+        assertEquals(20.0, e.kwhPer100Km, 1e-6);
+        assertEquals(127.0, e.rangeKm, 1e-6);
+    }
+
+    @Test
+    public void averageMixesTheServiceAndScreenRates() {
+        RangeEstimator r = new RangeEstimator();
+        // A slow 15 s service tick for two minutes, then the 2 s screen tick: still 20 kWh/100 km.
+        for (long t = 0; t < 120_000; t += 15_000) r.add(t, 20f, 100f);
+        for (long t = 120_000; t <= 240_000; t += 2_000) r.add(t, 20f, 100f);
+        assertEquals(20.0, r.average(25.4, 240_000).kwhPer100Km, 1e-6);
+    }
+
+    @Test
+    public void averageOnlyCoversTheLastFiveMinutes() {
+        RangeEstimator r = new RangeEstimator();
+        for (long t = 0; t <= 300_000; t += 2_000) r.add(t, 40f, 100f);        // thirsty start
+        for (long t = 302_000; t <= 900_000; t += 2_000) r.add(t, 10f, 100f);  // then economical
+        assertEquals(10.0, r.average(25.4, 900_000).kwhPer100Km, 1e-6);
+    }
+
+    @Test
+    public void noAverageWithTooLittleDataOrDistanceOrAcrossAGap() {
+        RangeEstimator r = new RangeEstimator();
+        for (long t = 0; t <= 30_000; t += 2_000) r.add(t, 20f, 100f);
+        assertNull("30 s is too little", r.average(25.4, 30_000));
+
+        RangeEstimator parked = new RangeEstimator();
+        for (long t = 0; t <= 240_000; t += 2_000) parked.add(t, 1f, 0f);
+        assertNull("no distance", parked.average(25.4, 240_000));
+
+        RangeEstimator gap = new RangeEstimator();
+        gap.add(0, 20f, 100f);
+        gap.add(200_000, 20f, 100f); // the app was closed in between
+        assertNull("a gap is not integrated", gap.average(25.4, 200_000));
+
+        RangeEstimator downhill = new RangeEstimator();
+        for (long t = 0; t <= 240_000; t += 2_000) downhill.add(t, -5f, 80f);
+        RangeEstimator.Estimate regen = downhill.average(25.4, 240_000);
+        assertNotNull("net regeneration is a reading", regen);
+        assertEquals(-6.25, regen.kwhPer100Km, 0.01);
+        assertTrue(Double.isInfinite(regen.rangeKm));
+    }
+
+    @Test
+    public void energySinceStartIsTheNetEnergyOfTheTrip() {
+        RangeEstimator r = new RangeEstimator();
+        assertNull(r.energySinceStart());
+        r.add(0, 3f, 0f);
+        assertEquals(0.0, r.energySinceStart(), 1e-9);                 // the trip has begun
+        for (long t = 15_000; t <= 600_000; t += 15_000) r.add(t, 30f, 100f);
+        // 10 minutes at 30 kW = 5 kWh, plus the first 15 s ramp from 3 kW.
+        assertEquals(5.0, r.energySinceStart(), 0.1);
+        for (long t = 615_000; t <= 735_000; t += 15_000) r.add(t, -20f, 60f); // downhill
+        assertTrue(r.energySinceStart() < 5.0);                         // recuperation counts back
+    }
+
+    @Test
+    public void averagePowerOverTheLastFiveMinutes() {
+        RangeEstimator r = new RangeEstimator();
+        r.add(0, 20f, 50f);
+        assertNull(r.averagePowerKw(0));                                   // too little yet
+        for (long t = 15_000; t <= 300_000; t += 15_000) r.add(t, 20f, 50f);
+        assertEquals(20.0, r.averagePowerKw(300_000), 1e-6);
+        // Standing with the climate on counts: half the window at 2 kW.
+        for (long t = 315_000; t <= 450_000; t += 15_000) r.add(t, 2f, 0f);
+        assertEquals(11.0, r.averagePowerKw(450_000), 1.0);
+    }
+
+    @Test
+    public void averageSpeedOverTheLastFiveMinutes() {
+        RangeEstimator r = new RangeEstimator();
+        r.add(0, 10f, 60f);
+        assertNull(r.averageSpeedKmh(0));
+        for (long t = 15_000; t <= 300_000; t += 15_000) r.add(t, 10f, 60f);
+        assertEquals(60.0, r.averageSpeedKmh(300_000), 1e-6);
+        // Half the window standing at lights halves the average.
+        for (long t = 315_000; t <= 450_000; t += 15_000) r.add(t, 1f, 0f);
+        assertEquals(30.0, r.averageSpeedKmh(450_000), 4.0);
+    }
+}
diff --git a/app/src/test/java/com/evsuite/abrp/SecurePrefsTest.java b/app/src/test/java/com/evsuite/abrp/SecurePrefsTest.java
new file mode 100644
index 0000000..cb60b31
--- /dev/null
+++ b/app/src/test/java/com/evsuite/abrp/SecurePrefsTest.java
@@ -0,0 +1,40 @@
+package com.evsuite.abrp;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+
+import java.util.HashMap;
+import java.util.Map;
+
+import org.junit.Test;
+
+/** Moving a keystore-fallback run's settings back into encrypted storage — pure JVM. */
+public class SecurePrefsTest {
+
+    private static Map<String, String> map(String... kv) {
+        Map<String, String> m = new HashMap<>();
+        for (int i = 0; i < kv.length; i += 2) m.put(kv[i], kv[i + 1]);
+        return m;
+    }
+
+    @Test
+    public void aTokenSavedDuringTheFallbackIsKept() {
+        Map<String, String> moves = SecurePrefs.mergePlaintext(
+                map(ServerConfig.KEY_TOKEN, "new-token", ServerConfig.KEY_URL, "https://car.example.com"),
+                map(ServerConfig.KEY_TOKEN, "old-token"));
+        assertEquals("new-token", moves.get(ServerConfig.KEY_TOKEN));
+        assertEquals("https://car.example.com", moves.get(ServerConfig.KEY_URL));
+    }
+
+    @Test
+    public void theStoredInstallationIdWins() {
+        Map<String, String> moves = SecurePrefs.mergePlaintext(
+                map(ServerConfig.KEY_INSTALLATION_ID, "made-up-in-the-fallback"),
+                map(ServerConfig.KEY_INSTALLATION_ID, "the-one-history-is-under"));
+        assertFalse(moves.containsKey(ServerConfig.KEY_INSTALLATION_ID));
+
+        // With none stored yet, the fallback's id is the only one there is.
+        moves = SecurePrefs.mergePlaintext(map(ServerConfig.KEY_INSTALLATION_ID, "only-one"), map());
+        assertEquals("only-one", moves.get(ServerConfig.KEY_INSTALLATION_ID));
+    }
+}
diff --git a/app/src/test/java/com/evsuite/abrp/ServerConfigTest.java b/app/src/test/java/com/evsuite/abrp/ServerConfigTest.java
new file mode 100644
index 0000000..ea803d4
--- /dev/null
+++ b/app/src/test/java/com/evsuite/abrp/ServerConfigTest.java
@@ -0,0 +1,64 @@
+package com.evsuite.abrp;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+
+import org.junit.Test;
+
+/** What the Server tab and the config import accept — pure JVM. */
+public class ServerConfigTest {
+
+    @Test
+    public void urlIsTrimmedAndLosesTrailingSlashes() {
+        assertEquals("https://car.example.com", ServerConfig.normalizeUrl("  https://car.example.com//  "));
+        assertEquals("https://car.example.com/base", ServerConfig.normalizeUrl("https://car.example.com/base/"));
+    }
+
+    @Test
+    public void plainHttpAndJunkAreRefused() {
+        // The token travels in a header; over plain http anyone on the hotspot could read it.
+        assertNull(ServerConfig.normalizeUrl("http://car.example.com"));
+        assertNull(ServerConfig.normalizeUrl("car.example.com"));
+        assertNull(ServerConfig.normalizeUrl("https://"));
+        assertNull(ServerConfig.normalizeUrl("https:///path"));
+        assertNull(ServerConfig.normalizeUrl("https://user@car.example.com"));
+        assertNull(ServerConfig.normalizeUrl("https://car.example.com/?x=1"));
+        assertNull(ServerConfig.normalizeUrl(null));
+    }
+
+    @Test
+    public void tokenMustMeetTheServersMinimum() {
+        assertTrue(ServerConfig.isValidToken("0123456789abcdef01234567"));
+        assertFalse(ServerConfig.isValidToken("too-short"));
+        assertFalse(ServerConfig.isValidToken("0123456789abcdef 01234567"));
+        assertFalse(ServerConfig.isValidToken(null));
+    }
+
+    @Test
+    public void installationIdMustBeAUuidTheServerAccepts() {
+        assertTrue(ServerConfig.isValidInstallationId("6f1a2b3c-4d5e-4f60-8a9b-0c1d2e3f4a5b"));
+        assertTrue(ServerConfig.isValidInstallationId(java.util.UUID.randomUUID().toString()));
+        assertFalse(ServerConfig.isValidInstallationId("6f1a2b3c-4d5e-0f60-8a9b-0c1d2e3f4a5b")); // version 0
+        assertFalse(ServerConfig.isValidInstallationId("not-a-uuid"));
+        assertFalse(ServerConfig.isValidInstallationId(""));
+    }
+
+    @Test
+    public void theInstallationIdFollowsTheHeadUnit() {
+        String id = ServerConfig.installationIdFor("a1b2c3d4e5f60718");
+        assertTrue(id, ServerConfig.isValidInstallationId(id));
+        // The same head unit gets the same id after a reinstall; another gets another.
+        assertEquals(id, ServerConfig.installationIdFor(" A1B2C3D4E5F60718 "));
+        assertFalse(id.equals(ServerConfig.installationIdFor("0000000000000001")));
+        assertFalse(id.contains("a1b2c3d4e5f60718"));
+    }
+
+    @Test
+    public void noUsableAndroidIdMeansNoDerivedId() {
+        assertNull(ServerConfig.installationIdFor(null));
+        assertNull(ServerConfig.installationIdFor(""));
+        assertNull(ServerConfig.installationIdFor("9774d56d682e549c"));
+    }
+}
diff --git a/app/src/test/java/com/evsuite/abrp/SteeringKeyReportTest.java b/app/src/test/java/com/evsuite/abrp/SteeringKeyReportTest.java
new file mode 100644
index 0000000..57cdc08
--- /dev/null
+++ b/app/src/test/java/com/evsuite/abrp/SteeringKeyReportTest.java
@@ -0,0 +1,66 @@
+package com.evsuite.abrp;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertFalse;
+import static org.junit.Assert.assertNull;
+import static org.junit.Assert.assertTrue;
+
+import java.util.HashMap;
+import java.util.Map;
+
+import org.junit.Test;
+
+/** Reading the head unit's key reports, as seen on the MG4 — pure JVM. */
+public class SteeringKeyReportTest {
+
+    private static Map<String, Object> car(int code, boolean down, boolean longPress) {
+        Map<String, Object> m = new HashMap<>();
+        m.put("android.intent.extra.hardkey.keycode", code);
+        m.put("android.intent.extra.hardkey.down", down);
+        m.put("android.intent.extra.hardkey.longpress", longPress);
+        return m;
+    }
+
+    @Test
+    public void readsTheMg4Format() {
+        SteeringKeyReport r = SteeringKeyReport.parse(car(287, true, false));
+        assertEquals(Integer.valueOf(287), r.code);
+        assertEquals(Boolean.TRUE, r.down);
+        assertFalse(r.longPress);
+        assertEquals(Boolean.FALSE, SteeringKeyReport.parse(car(287, false, false)).down);
+        assertTrue(SteeringKeyReport.parse(car(287, true, true)).longPress);
+    }
+
+    @Test
+    public void theDoublePressFromTheCarOpensTheApp() {
+        // The sequence logged on the MG4 at 23:31:02: down .300, up .442, down .545, up .721.
+        DoublePressDetector d = new DoublePressDetector(SteeringKeyListener.VOICE_KEY);
+        long[] at = {300, 442, 545, 721};
+        boolean[] down = {true, false, true, false};
+        boolean opened = false;
+        for (int i = 0; i < at.length; i++) {
+            SteeringKeyReport r = SteeringKeyReport.parse(car(287, down[i], false));
+            opened |= d.accept(r.code, r.down, r.longPress, at[i]);
+        }
+        assertTrue(opened);
+    }
+
+    @Test
+    public void simpleNamesStillWork() {
+        Map<String, Object> m = new HashMap<>();
+        m.put("keyCode", 17);
+        m.put("action", 1);
+        SteeringKeyReport r = SteeringKeyReport.parse(m);
+        assertEquals(Integer.valueOf(17), r.code);
+        assertEquals(Boolean.FALSE, r.down);
+    }
+
+    @Test
+    public void nothingUsableStaysUnknown() {
+        SteeringKeyReport r = SteeringKeyReport.parse(new HashMap<>());
+        assertNull(r.code);
+        assertNull(r.down);
+        assertFalse(r.longPress);
+        assertNull(SteeringKeyReport.parse(null).code);
+    }
+}
diff --git a/app/src/test/java/com/evsuite/abrp/TelemetryPayloadTest.java b/app/src/test/java/com/evsuite/abrp/TelemetryPayloadTest.java
index dc184a0..d19934a 100644
--- a/app/src/test/java/com/evsuite/abrp/TelemetryPayloadTest.java
+++ b/app/src/test/java/com/evsuite/abrp/TelemetryPayloadTest.java
@@ -50,7 +50,7 @@ public class TelemetryPayloadTest {
                 "batt_temp", "capacity", "odometer", "hvac_setpoint",
                 "tire_pressure_fl", "tire_pressure_fr",
                 "tire_pressure_rl", "tire_pressure_rr"}) {
-            assertFalse("le champ " + field + " aurait dû être omis", json.contains(field));
+            assertFalse("field " + field + " should have been omitted", json.contains(field));
         }
     }
 
@@ -60,7 +60,7 @@ public class TelemetryPayloadTest {
         TelemetryPayload t = new TelemetryPayload(1L);
         t.speedKmh = 48.4f;
         JSONObject json = new JSONObject(t.build());
-        assertFalse("soc illisible aurait dû être omis", json.has("soc"));
+        assertFalse("an unreadable soc should have been omitted", json.has("soc"));
         assertEquals(48, json.getInt("speed"));
     }
 
@@ -311,4 +311,45 @@ public class TelemetryPayloadTest {
         assertTrue(summary, summary.startsWith("utc=1700000000"));
         assertTrue(summary, summary.contains("| omitted: soc,speed,"));
     }
+
+    // ---------- The server's ranges (server/model.go) ----------
+
+    @Test
+    public void reversingSendsSpeedAsAMagnitude() throws Exception {
+        TelemetryPayload t = new TelemetryPayload(1_700_000_000L);
+        t.speedKmh = -4.2f;
+        assertEquals(4, new JSONObject(t.build()).getInt("speed"));
+    }
+
+    @Test
+    public void valuesOutsideTheServersRangeAreLeftOut() throws Exception {
+        TelemetryPayload t = new TelemetryPayload(1_700_000_000L);
+        t.soc = 55;
+        t.extTempC = 72f;        // plausible to the car's guard, above the server's 70
+        t.hvacSetpointC = 50f;   // a HI sentinel, above the server's 40
+        t.rangeKm = 2500;
+        JSONObject json = new JSONObject(t.build());
+        assertEquals(55, json.getInt("soc"));
+        assertFalse(json.has("ext_temp"));
+        assertFalse(json.has("hvac_setpoint"));
+        assertFalse(json.has("est_battery_range"));
+    }
+
+    @Test
+    public void theAppsLimitsMatchEveryNumericServerField() {
+        String[] serverFields = {"soc", "speed", "power", "est_battery_range", "capacity", "soe",
+                "kwh_charged", "odometer", "lat", "lon", "elevation", "heading", "batt_temp",
+                "cabin_temp", "ext_temp", "hvac_setpoint", "voltage", "current",
+                "tire_pressure_fl", "tire_pressure_fr", "tire_pressure_rl", "tire_pressure_rr"};
+        for (String field : serverFields) {
+            assertTrue(field, TelemetryPayload.SERVER_LIMITS.containsKey(field));
+        }
+    }
+
+    @Test
+    public void aClockBefore2001IsNotATime() {
+        assertFalse(TelemetryPayload.isPlausibleUtc(0L));
+        assertFalse(TelemetryPayload.isPlausibleUtc(999_999_999L));
+        assertTrue(TelemetryPayload.isPlausibleUtc(1_790_000_000L));
+    }
 }
diff --git a/app/src/test/java/com/evsuite/abrp/TelemetryQueueTest.java b/app/src/test/java/com/evsuite/abrp/TelemetryQueueTest.java
new file mode 100644
index 0000000..76bee73
--- /dev/null
+++ b/app/src/test/java/com/evsuite/abrp/TelemetryQueueTest.java
@@ -0,0 +1,83 @@
+package com.evsuite.abrp;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertTrue;
+
+import java.util.List;
+
+import org.junit.Test;
+
+/** The offline buffer for live samples — pure JVM. */
+public class TelemetryQueueTest {
+
+    @Test
+    public void batchesOldestFirstAndKeepsThemUntilConfirmed() {
+        TelemetryQueue queue = new TelemetryQueue();
+        queue.add("a");
+        queue.add("b");
+        assertEquals(List.of("a", "b"), queue.peekBatch());
+        // Not confirmed yet: a failed request must not lose them.
+        assertEquals(2, queue.size());
+        queue.remove(2);
+        assertEquals(0, queue.size());
+    }
+
+    @Test
+    public void aBatchNeverExceedsWhatTheServerAccepts() {
+        TelemetryQueue queue = new TelemetryQueue();
+        for (int i = 0; i < 1200; i++) queue.add(String.valueOf(i));
+        List<String> batch = queue.peekBatch();
+        assertEquals(TelemetryQueue.MAX_BATCH, batch.size());
+        assertEquals("0", batch.get(0));
+    }
+
+    @Test
+    public void whenFullTheOldestSamplesAreDropped() {
+        TelemetryQueue queue = new TelemetryQueue(3);
+        for (String s : new String[]{"a", "b", "c", "d", "e"}) queue.add(s);
+        assertEquals(List.of("c", "d", "e"), queue.peekBatch());
+        assertEquals(2, queue.dropped());
+    }
+
+    @Test
+    public void aSavedQueueComesBackInOrder() {
+        TelemetryQueue q = new TelemetryQueue(10);
+        q.add("{\"utc\":1}");
+        q.add("{\"utc\":2}");
+        TelemetryQueue restarted = new TelemetryQueue(10);
+        restarted.add("{\"utc\":3}");                 // taken after the restart
+        assertEquals(2, restarted.restore(q.encode()));
+        assertEquals(java.util.Arrays.asList("{\"utc\":1}", "{\"utc\":2}", "{\"utc\":3}"), restarted.peekBatch());
+    }
+
+    @Test
+    public void restoringKeepsTheCapacityByDroppingTheOldest() {
+        TelemetryQueue q = new TelemetryQueue(10);
+        for (int i = 1; i <= 4; i++) q.add("{\"utc\":" + i + "}");
+        TelemetryQueue small = new TelemetryQueue(3);
+        small.restore(q.encode());
+        assertEquals(java.util.Arrays.asList("{\"utc\":2}", "{\"utc\":3}", "{\"utc\":4}"), small.peekBatch());
+        assertEquals(1, small.dropped());
+    }
+
+    @Test
+    public void aDamagedFileRestoresNothing() {
+        TelemetryQueue q = new TelemetryQueue(10);
+        assertEquals(0, q.restore("[\"{\\\"utc\\\":1}\", trunc"));
+        assertEquals(0, q.restore(""));
+        assertEquals(0, q.restore(null));
+        assertEquals(0, q.size());
+    }
+
+    @Test
+    public void everyChangeMovesTheVersion() {
+        TelemetryQueue q = new TelemetryQueue(10);
+        long v0 = q.version();
+        q.add("{\"utc\":1}");
+        long v1 = q.version();
+        q.remove(0);
+        assertEquals(v1, q.version());                     // nothing removed, nothing to save
+        q.remove(1);
+        assertTrue(q.version() > v1 && v1 > v0);
+    }
+}
diff --git a/app/src/test/java/com/evsuite/abrp/TelemetryUploaderTest.java b/app/src/test/java/com/evsuite/abrp/TelemetryUploaderTest.java
new file mode 100644
index 0000000..517fe2f
--- /dev/null
+++ b/app/src/test/java/com/evsuite/abrp/TelemetryUploaderTest.java
@@ -0,0 +1,19 @@
+package com.evsuite.abrp;
+
+import static org.junit.Assert.assertEquals;
+
+import org.junit.Test;
+
+/** Reading the server's answer to a telemetry batch — pure JVM. */
+public class TelemetryUploaderTest {
+
+    @Test
+    public void theLogSaysWhatTheServerDropped() {
+        assertEquals(", 2 value(s) dropped by the server", TelemetryUploader.droppedNote(
+                new ServerHttp.Response(200, "{\"stored\":3,\"droppedCount\":2,\"dropped\":[]}")));
+        assertEquals("", TelemetryUploader.droppedNote(
+                new ServerHttp.Response(200, "{\"stored\":3,\"droppedCount\":0,\"dropped\":[]}")));
+        // An older server answers 204 without a body.
+        assertEquals("", TelemetryUploader.droppedNote(new ServerHttp.Response(204, "")));
+    }
+}
diff --git a/app/src/testUnstable/java/com/evsuite/abrp/OtaUpdaterTest.java b/app/src/testUnstable/java/com/evsuite/abrp/OtaUpdaterTest.java
index 4211434..89839e4 100644
--- a/app/src/testUnstable/java/com/evsuite/abrp/OtaUpdaterTest.java
+++ b/app/src/testUnstable/java/com/evsuite/abrp/OtaUpdaterTest.java
@@ -24,46 +24,55 @@ import java.nio.charset.StandardCharsets;
  */
 public class OtaUpdaterTest {
 
-    // ---- URL allowlist ----
+    // ---- URL allowlist: exactly the configured car server ----
+
+    private static final String HOST = "car.example.com";
 
     @Test
-    public void httpsFromAnAllowedHostIsAccepted() {
-        assertTrue(OtaUpdater.isAllowedUrl(
-                "https://github.com/malys/EVABRPUploader/releases/download/v1.2.0/app.apk"));
-        assertTrue(OtaUpdater.isAllowedUrl(
-                "https://objects.githubusercontent.com/github-production-release-asset/x.apk"));
+    public void httpsFromTheServerIsAccepted() {
+        assertTrue(OtaUpdater.isAllowedUrl("https://car.example.com/v1/app/assets/7/11/app.apk", HOST));
     }
 
     @Test
-    public void httpIsRejectedEvenOnAnAllowedHost() {
-        assertFalse(OtaUpdater.isAllowedUrl("http://github.com/malys/app.apk"));
+    public void httpIsRejectedEvenFromTheServer() {
+        assertFalse(OtaUpdater.isAllowedUrl("http://car.example.com/v1/app/assets/7/11/app.apk", HOST));
     }
 
     @Test
     public void foreignHostsAreRejected() {
-        assertFalse(OtaUpdater.isAllowedUrl("https://evil.example.com/app.apk"));
+        assertFalse(OtaUpdater.isAllowedUrl("https://evil.example.com/app.apk", HOST));
+        assertFalse(OtaUpdater.isAllowedUrl("https://github.com/fatihdonmezdev/FatihsMG4/app.apk", HOST));
     }
 
     @Test
     public void lookalikeHostsAreRejected() {
         // Exact match, never a suffix test.
-        assertFalse(OtaUpdater.isAllowedUrl("https://github.com.attacker.net/app.apk"));
-        assertFalse(OtaUpdater.isAllowedUrl("https://evil-github.com/app.apk"));
-        assertFalse(OtaUpdater.isAllowedUrl("https://notgithub.com/app.apk"));
+        assertFalse(OtaUpdater.isAllowedUrl("https://car.example.com.attacker.net/app.apk", HOST));
+        assertFalse(OtaUpdater.isAllowedUrl("https://evil-car.example.com/app.apk", HOST));
+        assertFalse(OtaUpdater.isAllowedUrl("https://example.com/app.apk", HOST));
     }
 
     @Test
     public void unparsableOrNonHttpUrlsAreRejected() {
-        assertFalse(OtaUpdater.isAllowedUrl(""));
-        assertFalse(OtaUpdater.isAllowedUrl("not a url"));
-        assertFalse(OtaUpdater.isAllowedUrl("ftp://github.com/app.apk"));
-        assertFalse(OtaUpdater.isAllowedUrl("file:///sdcard/Download/app.apk"));
+        assertFalse(OtaUpdater.isAllowedUrl("", HOST));
+        assertFalse(OtaUpdater.isAllowedUrl(null, HOST));
+        assertFalse(OtaUpdater.isAllowedUrl("not a url", HOST));
+        assertFalse(OtaUpdater.isAllowedUrl("ftp://car.example.com/app.apk", HOST));
+        assertFalse(OtaUpdater.isAllowedUrl("file:///sdcard/Download/app.apk", HOST));
+        assertFalse(OtaUpdater.isAllowedUrl("https://car.example.com/app.apk", null)); // no server set up
     }
 
     @Test
     public void hostMatchingIgnoresCase() {
-        assertTrue(OtaUpdater.isAllowedUrl("https://GitHub.com/malys/app.apk"));
-        assertTrue(OtaUpdater.isAllowedUrl("HTTPS://github.com/malys/app.apk"));
+        assertTrue(OtaUpdater.isAllowedUrl("https://Car.Example.com/app.apk", HOST));
+        assertTrue(OtaUpdater.isAllowedUrl("HTTPS://car.example.com/app.apk", HOST));
+    }
+
+    @Test
+    public void theAllowedHostIsTheConfiguredServers() {
+        assertEquals("car.example.com", OtaUpdater.allowedHost(new ServerConfig("https://Car.Example.com", "t", "i")));
+        assertEquals("https://car.example.com/v1/app/releases",
+                OtaUpdater.releasesUrl(new ServerConfig("https://car.example.com", "t", "i")));
     }
 
     // ---- Version comparison ----
@@ -102,13 +111,13 @@ public class OtaUpdaterTest {
     @Test
     public void versionIsReadFromTheAssetName() {
         // The release tag is the constant "unstable", so the asset name carries the build.
-        assertEquals("1.0.42", OtaUpdater.versionFromAssetName("FatihsMG4-unstable-1.0.42.apk"));
-        assertEquals("1.0.100", OtaUpdater.versionFromAssetName("FatihsMG4-unstable-1.0.100.APK"));
+        assertEquals("1.0.42", OtaUpdater.versionFromAssetName("NilsMG4-unstable-1.0.42.apk"));
+        assertEquals("1.0.100", OtaUpdater.versionFromAssetName("NilsMG4-unstable-1.0.100.APK"));
     }
 
     @Test
     public void assetNameWithoutAVersionIsIgnored() {
-        assertNull(OtaUpdater.versionFromAssetName("FatihsMG4-unstable.apk"));
+        assertNull(OtaUpdater.versionFromAssetName("NilsMG4-unstable.apk"));
         assertNull(OtaUpdater.versionFromAssetName("unstable"));
     }
 
@@ -125,20 +134,20 @@ public class OtaUpdaterTest {
     public void sha256SidecarFormatsAreParsed() {
         String hash = "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef";
         assertEquals(hash, OtaUpdater.parseExpectedSha256(hash,
-                "FatihsMG4-unstable-2.2.7.apk"));
+                "NilsMG4-unstable-2.2.7.apk"));
         assertEquals(hash, OtaUpdater.parseExpectedSha256(
-                hash + "  *FatihsMG4-unstable-2.2.7.apk\n",
-                "FatihsMG4-unstable-2.2.7.apk"));
+                hash + "  *NilsMG4-unstable-2.2.7.apk\n",
+                "NilsMG4-unstable-2.2.7.apk"));
         assertNull(OtaUpdater.parseExpectedSha256(hash + "  another.apk",
-                "FatihsMG4-unstable-2.2.7.apk"));
+                "NilsMG4-unstable-2.2.7.apk"));
         assertNull(OtaUpdater.parseExpectedSha256("not-a-hash",
-                "FatihsMG4-unstable-2.2.7.apk"));
+                "NilsMG4-unstable-2.2.7.apk"));
     }
 
     @Test
     public void updateWithoutHashSidecarIsReportedButCannotBeVerified() throws Exception {
         JSONArray releases = new JSONArray().put(releaseWithoutHashes(true, asset("2.2.7")));
-        OtaUpdater.Update update = OtaUpdater.selectUpdate(releases, "2.2.6.0-unstable");
+        OtaUpdater.Update update = OtaUpdater.selectUpdate(releases, "2.2.6.0-unstable", HOST);
         assertEquals("2.2.7", update.versionName);
         assertNull(update.hashUrl);
     }
@@ -148,28 +157,28 @@ public class OtaUpdaterTest {
         JSONArray releases = new JSONArray().put(release(true,
                 asset("2.2.3"), asset("2.2.6"), asset("2.2.4")))
                 .put(release(true, asset("2.2.5")));
-        OtaUpdater.Update update = OtaUpdater.selectUpdate(releases, "2.2.2.0-unstable");
+        OtaUpdater.Update update = OtaUpdater.selectUpdate(releases, "2.2.2.0-unstable", HOST);
         assertEquals("2.2.6", update.versionName);
-        assertTrue(update.apkUrl.endsWith("FatihsMG4-unstable-2.2.6.apk"));
+        assertTrue(update.apkUrl.endsWith("NilsMG4-unstable-2.2.6.apk"));
     }
 
     @Test
     public void stableDraftForeignAndUnversionedAssetsCannotWin() throws Exception {
         JSONObject foreign = asset("9.0.0").put("browser_download_url", "https://example.com/app.apk");
-        JSONObject unversioned = asset("9.0.0").put("name", "FatihsMG4-unstable.apk");
-        JSONObject stableName = asset("9.0.0").put("name", "FatihsMG4-stable-9.0.0.apk");
+        JSONObject unversioned = asset("9.0.0").put("name", "NilsMG4-unstable.apk");
+        JSONObject stableName = asset("9.0.0").put("name", "NilsMG4-stable-9.0.0.apk");
         JSONArray releases = new JSONArray()
                 .put(release(false, asset("9.0.0")))
                 .put(release(true, asset("9.0.0")).put("draft", true))
                 .put(release(true, foreign, unversioned, stableName, asset("2.2.5")));
-        assertEquals("2.2.5", OtaUpdater.selectUpdate(releases, "2.2.4.0-unstable").versionName);
+        assertEquals("2.2.5", OtaUpdater.selectUpdate(releases, "2.2.4.0-unstable", HOST).versionName);
     }
 
     @Test
     public void successfulCheckFindsUpdateAndDisconnects() throws Exception {
         Response response = new Response(200,
                 new JSONArray().put(release(true, asset("2.2.5"))).toString());
-        assertEquals("2.2.5", OtaUpdater.check("2.2.4.0-unstable", response).versionName);
+        assertEquals("2.2.5", OtaUpdater.check("2.2.4.0-unstable", response, HOST).versionName);
         assertTrue(response.disconnected);
     }
 
@@ -177,7 +186,7 @@ public class OtaUpdaterTest {
     public void successfulCheckWithOnlyOlderOrEqualVersionsIsCurrent() throws Exception {
         Response response = new Response(200,
                 new JSONArray().put(release(true, asset("2.2.3"), asset("2.2.5"))).toString());
-        assertNull(OtaUpdater.check("2.2.5.0-unstable", response));
+        assertNull(OtaUpdater.check("2.2.5.0-unstable", response, HOST));
         assertTrue(response.disconnected);
     }
 
@@ -185,7 +194,7 @@ public class OtaUpdaterTest {
     public void rateLimitMustNotBeReportedAsCurrent() throws Exception {
         Response response = new Response(403, "{}");
         try {
-            OtaUpdater.check("2.2.4.0-unstable", response);
+            OtaUpdater.check("2.2.4.0-unstable", response, HOST);
         } finally {
             assertTrue(response.disconnected);
         }
@@ -195,7 +204,7 @@ public class OtaUpdaterTest {
     public void malformedResponseMustNotBeReportedAsCurrent() throws Exception {
         Response response = new Response(200, "<html>unavailable</html>");
         try {
-            OtaUpdater.check("2.2.4.0-unstable", response);
+            OtaUpdater.check("2.2.4.0-unstable", response, HOST);
         } finally {
             assertTrue(response.disconnected);
         }
@@ -209,16 +218,16 @@ public class OtaUpdaterTest {
             }
         };
         try {
-            OtaUpdater.check("2.2.4.0-unstable", response);
+            OtaUpdater.check("2.2.4.0-unstable", response, HOST);
         } finally {
             assertTrue(response.disconnected);
         }
     }
 
     private static JSONObject asset(String version) throws Exception {
-        String name = "FatihsMG4-unstable-" + version + ".apk";
+        String name = "NilsMG4-unstable-" + version + ".apk";
         return new JSONObject().put("name", name).put("browser_download_url",
-                "https://github.com/fatihdonmezdev/FatihsMG4/releases/download/unstable/" + name);
+                "https://car.example.com/v1/app/assets/7/11/" + name);
     }
 
     private static JSONObject release(boolean prerelease, JSONObject... assets) throws Exception {
@@ -249,7 +258,7 @@ public class OtaUpdaterTest {
         boolean disconnected;
 
         Response(int status, String body) throws Exception {
-            super(new URL("https://api.github.com/repos/fatihdonmezdev/FatihsMG4/releases"));
+            super(new URL("https://car.example.com/v1/app/releases"));
             this.status = status;
             this.body = body;
         }
@@ -262,8 +271,6 @@ public class OtaUpdaterTest {
         @Override public void connect() { }
     }
 
-    // The `pm install -r` exit-code test that stood here is gone with the shell-out it
-    // covered. Installation is now a PackageInstaller session, whose every step needs a real
-    // PackageManager — there is no pure part of it left to exercise on the JVM. What used to
-    // be asserted here is now reported by OtaInstallResultReceiver, on the car.
+    // Installation is a PackageInstaller session, whose every step needs a real PackageManager
+    // — nothing of it can be exercised on the JVM. OtaInstallResultReceiver reports it on the car.
 }
diff --git a/app/src/testUnstable/java/com/evsuite/abrp/UsbUpdateTest.java b/app/src/testUnstable/java/com/evsuite/abrp/UsbUpdateTest.java
new file mode 100644
index 0000000..abef740
--- /dev/null
+++ b/app/src/testUnstable/java/com/evsuite/abrp/UsbUpdateTest.java
@@ -0,0 +1,38 @@
+package com.evsuite.abrp;
+
+import static org.junit.Assert.assertEquals;
+import static org.junit.Assert.assertNull;
+
+import java.io.File;
+
+import org.junit.Test;
+
+/** Finding a car build on a USB stick — pure JVM. */
+public class UsbUpdateTest {
+
+    @Test
+    public void theStickRootIsFourLevelsAboveTheAppFolder() {
+        assertEquals(new File("/storage/1234-ABCD"), UsbUpdate.volumeRoot(
+                new File("/storage/1234-ABCD/Android/data/com.stinnesbeck.nilsmg4.unstable/files")));
+        assertEquals(new File("/storage/emulated/0"), UsbUpdate.volumeRoot(
+                new File("/storage/emulated/0/Android/data/com.stinnesbeck.nilsmg4.unstable/files")));
+        assertNull(UsbUpdate.volumeRoot(new File("/data/user/0/com.stinnesbeck.nilsmg4.unstable/files")));
+        assertNull(UsbUpdate.volumeRoot(null));
+    }
+
+    @Test
+    public void theNewestNewerCarBuildIsPicked() {
+        String[] names = {"NilsMG4-unstable-2.17.4.apk", "NilsMG4-unstable-2.18.0.apk", "NilsMG4-unstable-2.18.0.apk.sha256",
+                "NilsMG4-unstable-2.17.10.apk", "NilsMG4-stable-9.0.0.apk", "FatihsMG4-unstable-9.9.9.apk", "notes.txt"};
+        assertEquals("NilsMG4-unstable-2.18.0.apk", UsbUpdate.pickNewest(names, "2.17.5-unstable"));
+        assertEquals("NilsMG4-unstable-2.17.10.apk", UsbUpdate.pickNewest(
+                new String[]{"NilsMG4-unstable-2.17.4.apk", "NilsMG4-unstable-2.17.10.apk"}, "2.17.5-unstable"));
+    }
+
+    @Test
+    public void nothingNewerMeansNothing() {
+        assertNull(UsbUpdate.pickNewest(new String[]{"NilsMG4-unstable-2.17.5.apk"}, "2.17.5-unstable"));
+        assertNull(UsbUpdate.pickNewest(new String[0], "2.17.5-unstable"));
+        assertNull(UsbUpdate.pickNewest(null, "2.17.5-unstable"));
+    }
+}
diff --git a/app/src/unstable/AndroidManifest.xml b/app/src/unstable/AndroidManifest.xml
index 1e4f316..54d3c67 100644
--- a/app/src/unstable/AndroidManifest.xml
+++ b/app/src/unstable/AndroidManifest.xml
@@ -27,7 +27,7 @@
             android:name=".OtaInstallResultReceiver"
             android:exported="false">
             <intent-filter>
-                <action android:name="com.evsuite.abrp.OTA_INSTALL_RESULT" />
+                <action android:name="com.stinnesbeck.nilsmg4.OTA_INSTALL_RESULT" />
             </intent-filter>
         </receiver>
     </application>
diff --git a/app/src/unstable/java/com/evsuite/abrp/OtaInstallResultReceiver.java b/app/src/unstable/java/com/evsuite/abrp/OtaInstallResultReceiver.java
index 3a4611a..2aabac1 100644
--- a/app/src/unstable/java/com/evsuite/abrp/OtaInstallResultReceiver.java
+++ b/app/src/unstable/java/com/evsuite/abrp/OtaInstallResultReceiver.java
@@ -19,7 +19,7 @@ import android.widget.Toast;
  */
 public final class OtaInstallResultReceiver extends BroadcastReceiver {
 
-    static final String ACTION_INSTALL_RESULT = "com.evsuite.abrp.OTA_INSTALL_RESULT";
+    static final String ACTION_INSTALL_RESULT = "com.stinnesbeck.nilsmg4.OTA_INSTALL_RESULT";
 
     private static final String TAG = "EVABRP.Update";
 
diff --git a/app/src/unstable/java/com/evsuite/abrp/OtaUpdater.java b/app/src/unstable/java/com/evsuite/abrp/OtaUpdater.java
index b180804..528b61f 100644
--- a/app/src/unstable/java/com/evsuite/abrp/OtaUpdater.java
+++ b/app/src/unstable/java/com/evsuite/abrp/OtaUpdater.java
@@ -1,17 +1,15 @@
 package com.evsuite.abrp;
 
-import android.app.PendingIntent;
 import android.app.DownloadManager;
+import android.app.PendingIntent;
 import android.content.ClipData;
 import android.content.Context;
 import android.content.Intent;
 import android.content.pm.PackageInstaller;
 import android.content.pm.ResolveInfo;
-import android.database.Cursor;
 import android.net.Uri;
 import android.os.Build;
 import android.os.Environment;
-import android.os.ParcelFileDescriptor;
 import android.provider.Settings;
 import android.util.Log;
 
@@ -43,38 +41,34 @@ import java.security.MessageDigest;
  * stable build. Unstable testers get updates without manual work, and accept that channel's
  * risk.
  *
- * Security posture is the one EVProfile settled on in its own OTA work:
- *  - the APK URL comes from a remote JSON document and is never trusted: https only,
- *    exact-match host allowlist, checked again before it reaches the system downloader;
- *  - the downloaded APK must be signed by the same certificate as the running app, or it
- *    is deleted rather than offered for install;
- *  - both checks fail closed.
+ * Releases come from the car server (server/releases.go), which relays them from the private
+ * forge repository: the car asks with its own paired token and never holds a forge
+ * credential. The server only carries bytes; the checks are all here:
+ *  - every URL in the release list is untrusted: https only, and exactly the configured
+ *    server's host (no suffix match), checked again before anything is fetched;
+ *  - the APK must match the SHA-256 published next to it, or it is deleted;
+ *  - it must be this app's package, and the installer refuses any other signing key;
+ *  - every check fails closed.
  */
 final class OtaUpdater {
 
     private static final String TAG = "OtaUpdater";
-    private static final String CACHE_PREFIX = "FatihsMG4-ota-";
+    private static final String CACHE_PREFIX = "NilsMG4-ota-";
 
-    /**
-     * Pre-releases live here; the unstable channel tracks them.
-     *
-     * This fork's own repository, deliberately: an update pulled from upstream would be
-     * signed with a different key, and Android refuses to install over a platform-signed
-     * build with anything but the same signature. Pointing here means the check finds
-     * nothing until this repository publishes a release, which is the intended quiet.
-     */
-    private static final String RELEASES_API =
-            "https://api.github.com/repos/fatihdonmezdev/FatihsMG4/releases";
+    /** The release list on the car server, for the server configured in the app. */
+    static String releasesUrl(ServerConfig config) {
+        return config.url + "/v1/app/releases";
+    }
 
-    /**
-     * Hosts an update may come from. The githubusercontent entries are the CDNs GitHub
-     * redirects release-asset downloads to; without them the download fails.
-     */
-    private static final List<String> ALLOWED_HOSTS = Arrays.asList(
-            "api.github.com",
-            "github.com",
-            "objects.githubusercontent.com",
-            "release-assets.githubusercontent.com");
+    /** The one host updates may come from: the configured server's. Null if unusable. */
+    static String allowedHost(ServerConfig config) {
+        try {
+            String host = new URI(config.url).getHost();
+            return host == null ? null : host.toLowerCase(Locale.US);
+        } catch (Exception e) {
+            return null;
+        }
+    }
 
     private static final java.util.regex.Pattern ASSET_VERSION =
             java.util.regex.Pattern.compile("-(\\d[0-9.]*?)\\.apk$",
@@ -82,6 +76,7 @@ final class OtaUpdater {
 
     private static final int TIMEOUT_MS = 10_000;
     private static final int MAX_HASH_BYTES = 16 * 1024;
+    private static final long MAX_APK_BYTES = 64L * 1024 * 1024;
 
     private OtaUpdater() { }
 
@@ -114,13 +109,14 @@ final class OtaUpdater {
     }
 
     /**
-     * True if [url] is https and points at an allowed host.
+     * True if [url] is https and points at exactly [allowedHost].
      *
-     * Rejects http (including an https -> http downgrade), unknown hosts, unparsable
-     * URLs, and lookalikes such as "github.com.attacker.net" — the host match is exact,
-     * never a suffix test.
+     * Rejects http (including an https -> http downgrade), other hosts, unparsable URLs, and
+     * lookalikes such as "car.example.com.attacker.net" — the host match is exact, never a
+     * suffix test.
      */
-    static boolean isAllowedUrl(String url) {
+    static boolean isAllowedUrl(String url, String allowedHost) {
+        if (url == null || allowedHost == null) return false;
         URI uri;
         try {
             uri = new URI(url);
@@ -129,7 +125,7 @@ final class OtaUpdater {
         }
         if (uri.getScheme() == null || !uri.getScheme().equalsIgnoreCase("https")) return false;
         String host = uri.getHost();
-        return host != null && ALLOWED_HOSTS.contains(host.toLowerCase(java.util.Locale.US));
+        return host != null && host.toLowerCase(Locale.US).equals(allowedHost.toLowerCase(Locale.US));
     }
 
     /**
@@ -162,7 +158,7 @@ final class OtaUpdater {
 
     /**
      * Version carried by an unstable asset name:
-     * "FatihsMG4-unstable-1.0.42.apk" -> "1.0.42".
+     * "NilsMG4-unstable-1.0.42.apk" -> "1.0.42".
      *
      * The release tag is the fixed string "unstable" (one rolling pre-release), so the asset
      * name is what identifies a build. Returns null when the name carries no version.
@@ -186,19 +182,22 @@ final class OtaUpdater {
     }
 
     /**
-     * Asks GitHub for the newest pre-release and returns it if it beats [currentVersion].
-     * Runs on the caller's thread — never call from the main thread.
+     * Asks the car server for the newest pre-release and returns it if it beats
+     * [currentVersion]. Runs on the caller's thread — never call from the main thread.
      */
-    static Update check(String currentVersion) throws IOException {
-        return check(currentVersion, (HttpURLConnection) new URL(RELEASES_API).openConnection());
+    static Update check(ServerConfig config, String currentVersion) throws IOException {
+        HttpURLConnection conn = (HttpURLConnection) new URL(releasesUrl(config)).openConnection();
+        // The car's own token, in a header; never in a URL or a log line.
+        conn.setRequestProperty("Authorization", "Bearer " + config.token);
+        return check(currentVersion, conn, allowedHost(config));
     }
 
     /** Connection seam for exercising real response handling without a device or network. */
-    static Update check(String currentVersion, HttpURLConnection conn) throws IOException {
+    static Update check(String currentVersion, HttpURLConnection conn, String allowedHost) throws IOException {
         try {
             conn.setInstanceFollowRedirects(false);
-            conn.setRequestProperty("Accept", "application/vnd.github.v3+json");
-            conn.setRequestProperty("User-Agent", "FatihsMG4-Android");
+            conn.setRequestProperty("Accept", "application/json");
+            conn.setRequestProperty("User-Agent", "NilsMG4-Android");
             conn.setConnectTimeout(TIMEOUT_MS);
             conn.setReadTimeout(TIMEOUT_MS);
             int status = conn.getResponseCode();
@@ -212,7 +211,7 @@ final class OtaUpdater {
                 while ((line = br.readLine()) != null) body.append(line);
             }
 
-            return selectUpdate(new JSONArray(body.toString()), currentVersion);
+            return selectUpdate(new JSONArray(body.toString()), currentVersion, allowedHost);
         } catch (JSONException e) {
             throw new IOException("Invalid release response", e);
         } finally {
@@ -221,7 +220,7 @@ final class OtaUpdater {
     }
 
     /** Scan every asset of every pre-release; asset ordering does not imply version order. */
-    static Update selectUpdate(JSONArray releases, String currentVersion) throws JSONException {
+    static Update selectUpdate(JSONArray releases, String currentVersion, String allowedHost) throws JSONException {
         Update best = null;
         for (int i = 0; i < releases.length(); i++) {
             JSONObject release = releases.getJSONObject(i);
@@ -236,24 +235,24 @@ final class OtaUpdater {
                 if (version == null || !isNewer(version, currentVersion)) continue;
                 if (best != null && !isNewer(version, best.versionName)) continue;
                 String url = asset.optString("browser_download_url", "");
-                String hashUrl = findHashUrl(assets, name);
+                String hashUrl = findHashUrl(assets, name, allowedHost);
                 // Keep the candidate even when the sidecar is absent so the UI can report
                 // a broken release instead of incorrectly saying the app is current.
                 // fetchExpectedSha256 still fails closed before any APK is downloaded.
-                if (isAllowedUrl(url)) best = new Update(version, url, name, hashUrl);
+                if (isAllowedUrl(url, allowedHost)) best = new Update(version, url, name, hashUrl);
             }
         }
         return best;
     }
 
-    private static String findHashUrl(JSONArray assets, String apkName) throws JSONException {
+    private static String findHashUrl(JSONArray assets, String apkName, String allowedHost) throws JSONException {
         String exact = apkName + ".sha256";
         String sums = null;
         for (int i = 0; i < assets.length(); i++) {
             JSONObject asset = assets.getJSONObject(i);
             String name = asset.optString("name", "");
             String url = asset.optString("browser_download_url", "");
-            if (!isAllowedUrl(url)) continue;
+            if (!isAllowedUrl(url, allowedHost)) continue;
             if (exact.equalsIgnoreCase(name)) return url;
             if ("SHA256SUMS".equalsIgnoreCase(name)) sums = url;
         }
@@ -280,24 +279,25 @@ final class OtaUpdater {
         return value != null && value.matches("(?i)[a-f0-9]{64}");
     }
 
-    static String fetchExpectedSha256(Update update) throws IOException {
-        if (update == null || !isAllowedUrl(update.hashUrl))
+    static String fetchExpectedSha256(Update update, ServerConfig config) throws IOException {
+        if (update == null || !isAllowedUrl(update.hashUrl, allowedHost(config)))
             throw new IOException("Missing SHA-256 sidecar");
-        String body = readSmallText(update.hashUrl);
+        String body = readSmallText(update.hashUrl, config);
         String hash = parseExpectedSha256(body, update.apkName);
         if (hash == null) throw new IOException("Invalid SHA-256 sidecar");
         return hash;
     }
 
-    private static String readSmallText(String initialUrl) throws IOException {
+    private static String readSmallText(String initialUrl, ServerConfig config) throws IOException {
         URL current = new URL(initialUrl);
         for (int redirects = 0; redirects <= 5; redirects++) {
-            if (!isAllowedUrl(current.toString())) throw new IOException("Hash URL refused");
+            if (!isAllowedUrl(current.toString(), allowedHost(config))) throw new IOException("Hash URL refused");
             HttpURLConnection connection = (HttpURLConnection) current.openConnection();
+            connection.setRequestProperty("Authorization", "Bearer " + config.token);
             connection.setInstanceFollowRedirects(false);
             connection.setConnectTimeout(TIMEOUT_MS);
             connection.setReadTimeout(TIMEOUT_MS);
-            connection.setRequestProperty("User-Agent", "FatihsMG4-Android");
+            connection.setRequestProperty("User-Agent", "NilsMG4-Android");
             try {
                 int status = connection.getResponseCode();
                 if (status >= 300 && status <= 399) {
@@ -341,64 +341,64 @@ final class OtaUpdater {
     }
 
     /**
-     * Downloads into private cache. Every redirect URL is validated before it is followed.
+     * Downloads the APK from the car server into the public Downloads folder, hashing it on
+     * the way. Done here rather than with the system DownloadManager, so the car's token stays
+     * in this app instead of another app's download database. A wrong hash deletes the file.
+     * No redirects: the server streams the file itself.
      */
-    static File download(Context context, Update update, String expectedSha256,
+    static File download(Update update, String expectedSha256, ServerConfig config,
                          ProgressListener listener) {
-        if (!isAllowedUrl(update.apkUrl)) {
-            Log.w(TAG, "Refusing to download from " + update.apkUrl);
+        if (!isAllowedUrl(update.apkUrl, allowedHost(config))) {
+            Log.w(TAG, "Refusing to download from an unexpected host");
             return null;
         }
-        DownloadManager manager = (DownloadManager) context.getSystemService(Context.DOWNLOAD_SERVICE);
-        if (manager == null) return null;
-        String publicName = downloadFileName(update.versionName);
-        File publicFile = new File(Environment.getExternalStoragePublicDirectory(
-                Environment.DIRECTORY_DOWNLOADS), publicName);
-        if (publicFile.exists() && !publicFile.delete()) return null;
-        long downloadId = -1L;
+        File downloads = Environment.getExternalStoragePublicDirectory(Environment.DIRECTORY_DOWNLOADS);
+        if (downloads == null || (!downloads.isDirectory() && !downloads.mkdirs())) return null;
+        File target = new File(downloads, downloadFileName(update.versionName));
+        HttpURLConnection connection = null;
+        boolean ok = false;
         try {
-            DownloadManager.Request request = new DownloadManager.Request(Uri.parse(update.apkUrl))
-                    .setTitle("FatihsMG4 " + update.versionName)
-                    .setDescription("Güncelleme indiriliyor")
-                    .setNotificationVisibility(DownloadManager.Request.VISIBILITY_VISIBLE_NOTIFY_COMPLETED)
-                    .setDestinationInExternalPublicDir(Environment.DIRECTORY_DOWNLOADS, publicName)
-                    .setAllowedOverMetered(true)
-                    .setAllowedOverRoaming(true);
-            downloadId = manager.enqueue(request);
-            while (true) {
-                try (Cursor cursor = manager.query(new DownloadManager.Query().setFilterById(downloadId))) {
-                    if (cursor == null || !cursor.moveToFirst()) return null;
-                    int status = cursor.getInt(cursor.getColumnIndexOrThrow(DownloadManager.COLUMN_STATUS));
-                    long received = cursor.getLong(cursor.getColumnIndexOrThrow(
-                            DownloadManager.COLUMN_BYTES_DOWNLOADED_SO_FAR));
-                    long total = cursor.getLong(cursor.getColumnIndexOrThrow(
-                            DownloadManager.COLUMN_TOTAL_SIZE_BYTES));
-                    if (listener != null) listener.onProgress(total > 0
-                            ? (int) Math.min(100, received * 100 / total) : -1);
-                    if (status == DownloadManager.STATUS_SUCCESSFUL) break;
-                    if (status == DownloadManager.STATUS_FAILED) return null;
-                }
-                Thread.sleep(250L);
-            }
-
-            MessageDigest digest = MessageDigest.getInstance("SHA-256");
-            try (ParcelFileDescriptor descriptor = manager.openDownloadedFile(downloadId);
-                 java.io.InputStream input = new ParcelFileDescriptor.AutoCloseInputStream(descriptor)) {
-                byte[] buffer = new byte[64 * 1024];
-                int count;
-                while ((count = input.read(buffer)) != -1) {
-                    digest.update(buffer, 0, count);
-                }
-            }
-            if (!hex(digest.digest()).equalsIgnoreCase(expectedSha256)) {
-                if (!publicFile.delete()) Log.w(TAG, "Could not remove invalid OTA file");
+            connection = (HttpURLConnection) new URL(update.apkUrl).openConnection();
+            connection.setInstanceFollowRedirects(false);
+            connection.setConnectTimeout(TIMEOUT_MS);
+            connection.setReadTimeout(30_000);
+            connection.setRequestProperty("Authorization", "Bearer " + config.token);
+            connection.setRequestProperty("User-Agent", "NilsMG4-Android");
+            if (connection.getResponseCode() != HttpURLConnection.HTTP_OK) {
+                Log.w(TAG, "Update download returned " + connection.getResponseCode());
                 return null;
             }
-            return publicFile;
+            long total = connection.getContentLengthLong();
+            MessageDigest digest = MessageDigest.getInstance("SHA-256");
+            long received = 0;
+            int lastPercent = -2;
+            try (java.io.InputStream in = connection.getInputStream();
+                 FileOutputStream out = new FileOutputStream(target, false)) {
+                byte[] buffer = new byte[64 * 1024];
+                int count;
+                while ((count = in.read(buffer)) != -1) {
+                    out.write(buffer, 0, count);
+                    digest.update(buffer, 0, count);
+                    received += count;
+                    if (received > MAX_APK_BYTES) throw new IOException("APK too large");
+                    int percent = total > 0 ? (int) Math.min(100, received * 100 / total) : -1;
+                    if (listener != null && percent != lastPercent) {
+                        listener.onProgress(percent);
+                        lastPercent = percent;
+                    }
+                }
+                out.getFD().sync();
+            }
+            ok = hex(digest.digest()).equalsIgnoreCase(expectedSha256);
+            if (!ok) Log.w(TAG, "Update APK does not match its SHA-256");
+            return ok ? target : null;
         } catch (Exception e) {
-            Log.w(TAG, "Update download failed", e);
+            Log.w(TAG, "Update download failed: " + e.getClass().getSimpleName());
+            return null;
+        } finally {
+            if (connection != null) connection.disconnect();
+            if (!ok && target.exists() && !target.delete()) Log.w(TAG, "Could not remove a bad update file");
         }
-        return null;
     }
 
     private static String hex(byte[] bytes) {
@@ -564,7 +564,7 @@ final class OtaUpdater {
         Intent install = new Intent(Intent.ACTION_VIEW)
                 .setDataAndType(contentUri, "application/vnd.android.package-archive")
                 .addFlags(Intent.FLAG_ACTIVITY_NEW_TASK | Intent.FLAG_GRANT_READ_URI_PERMISSION);
-        install.setClipData(ClipData.newRawUri("FatihsMG4 update", contentUri));
+        install.setClipData(ClipData.newRawUri("Nils' MG4 update", contentUri));
         grantToInstallers(context, contentUri);
         if (install.resolveActivity(context.getPackageManager()) == null) {
             throw new IllegalStateException("No package installer activity");
@@ -579,7 +579,7 @@ final class OtaUpdater {
         if (downloads == null || (!downloads.isDirectory() && !downloads.mkdirs())) {
             throw new IllegalStateException("Downloads directory unavailable");
         }
-        File destination = new File(downloads, "FatihsMG4-OTA-update.apk");
+        File destination = new File(downloads, "NilsMG4-OTA-update.apk");
         try (FileInputStream input = new FileInputStream(source);
              FileOutputStream output = new FileOutputStream(destination, false)) {
             byte[] buffer = new byte[64 * 1024];
diff --git a/app/src/unstable/java/com/evsuite/abrp/UpdateHook.java b/app/src/unstable/java/com/evsuite/abrp/UpdateHook.java
index 8629c21..f4ba4b4 100644
--- a/app/src/unstable/java/com/evsuite/abrp/UpdateHook.java
+++ b/app/src/unstable/java/com/evsuite/abrp/UpdateHook.java
@@ -10,9 +10,9 @@ import java.util.concurrent.atomic.AtomicBoolean;
 /**
  * Drives {@link OtaUpdater} — UNSTABLE BUILDS ONLY.
  *
- * Upstream keeps this seam inert pending a safety and legal audit of the published suite.
- * This fork publishes its own builds from its own repository, signed with the platform key
- * the head unit already trusts, so that audit does not govern here and the seam is live.
+ * Releases are this fork's own car builds, published as pre-releases on the private forge and
+ * relayed by the car server (OtaUpdater); they are signed with the platform key the head unit
+ * already trusts.
  *
  * Installation goes through the platform {@link android.content.pm.PackageInstaller}, not
  * {@code pm install -r}: that shelled out with a path inside our private cache, which the
@@ -21,8 +21,11 @@ import java.util.concurrent.atomic.AtomicBoolean;
  * authority for signing-certificate compatibility; the app verifies SHA-256 and package name
  * before handing it the archive.
  *
- * Committing a session is asynchronous, so the message this returns says an install has been
- * started, never that one finished. {@link OtaInstallResultReceiver} has the verdict.
+ * The verified APK stays in Downloads either way. The app first offers it to a PackageInstaller
+ * session — as the system user it may install without asking — and only if that cannot start
+ * does it open the file manager there, to tap the file. Committing a session is asynchronous,
+ * so the message says an install has started, never that one finished;
+ * {@link OtaInstallResultReceiver} has the verdict.
  */
 final class UpdateHook {
 
@@ -44,13 +47,15 @@ final class UpdateHook {
         Context app = context.getApplicationContext();
         new Thread(() -> {
             try {
+                ServerConfig config = ServerConfig.get(app);
+                if (!config.isConfigured()) return;
                 String current = app.getPackageManager()
                         .getPackageInfo(app.getPackageName(), 0).versionName;
-                OtaUpdater.Update update = OtaUpdater.check(current);
+                OtaUpdater.Update update = OtaUpdater.check(config, current);
                 if (update != null && update.hashUrl != null)
                     new android.os.Handler(android.os.Looper.getMainLooper())
                             .post(() -> android.widget.Toast.makeText(app,
-                                "Güncelleme hazır: " + update.versionName,
+                                "Update available: " + update.versionName,
                                 android.widget.Toast.LENGTH_LONG).show());
             } catch (Throwable t) {
                 Log.w(TAG, "Startup update check failed", t);
@@ -69,7 +74,7 @@ final class UpdateHook {
         Context app = context.getApplicationContext();
         android.os.Handler main = new android.os.Handler(android.os.Looper.getMainLooper());
         if (!checking.compareAndSet(false, true)) {
-            if (listener != null) main.post(() -> listener.onResult("Güncelleme kontrolü zaten sürüyor"));
+            if (listener != null) main.post(() -> listener.onResult("Update check already in progress"));
             return;
         }
         new Thread(() -> {
@@ -78,7 +83,7 @@ final class UpdateHook {
                 message = runCheck(app, listener, main);
             } catch (Throwable t) {
                 Log.w(TAG, "Update check threw", t);
-                message = "Güncelleme kontrolü başarısız";
+                message = "Update check failed";
             } finally {
                 checking.set(false);
             }
@@ -89,6 +94,81 @@ final class UpdateHook {
         }, "ota-check").start();
     }
 
+    /**
+     * Installs the newest car build from the top folder of a USB stick (UsbUpdate), with the
+     * same checks as the over-the-air update except the server. Background thread; [listener]
+     * is called on the main thread.
+     */
+    static void installFromUsbInBackground(Context context, Listener listener) {
+        Context app = context.getApplicationContext();
+        android.os.Handler main = new android.os.Handler(android.os.Looper.getMainLooper());
+        if (!checking.compareAndSet(false, true)) {
+            if (listener != null) main.post(() -> listener.onResult("Update check already in progress"));
+            return;
+        }
+        new Thread(() -> {
+            String message;
+            try {
+                message = runUsbInstall(app);
+            } catch (Throwable t) {
+                Log.w(TAG, "USB install threw", t);
+                message = "Installing from USB failed";
+            } finally {
+                checking.set(false);
+            }
+            if (listener != null) {
+                final String result = message;
+                main.post(() -> listener.onResult(result));
+            }
+        }, "usb-install").start();
+    }
+
+    private static String runUsbInstall(Context app) throws Exception {
+        String current = app.getPackageManager().getPackageInfo(app.getPackageName(), 0).versionName;
+        File best = null;
+        String bestName = null;
+        for (File dir : app.getExternalFilesDirs(null)) {
+            File root = UsbUpdate.volumeRoot(dir);
+            if (root == null) continue;
+            String[] names = root.list();
+            String name = UsbUpdate.pickNewest(names, bestName == null ? current
+                    : OtaUpdater.versionFromAssetName(bestName));
+            if (name != null) {
+                best = new File(root, name);
+                bestName = name;
+            }
+        }
+        if (best == null) {
+            return "No newer NilsMG4-unstable-<version>.apk on a USB stick (installed: " + current + ")";
+        }
+        File sidecar = new File(best.getPath() + ".sha256");
+        String expected = sidecar.isFile() && sidecar.length() < 16 * 1024
+                ? OtaUpdater.parseExpectedSha256(new String(java.nio.file.Files.readAllBytes(sidecar.toPath()),
+                        java.nio.charset.StandardCharsets.UTF_8), best.getName())
+                : null;
+        if (expected == null) return "Not installed: " + best.getName() + ".sha256 is missing or unreadable";
+        java.security.MessageDigest digest = java.security.MessageDigest.getInstance("SHA-256");
+        try (java.io.InputStream in = new java.io.FileInputStream(best)) {
+            byte[] buffer = new byte[64 * 1024];
+            int count;
+            while ((count = in.read(buffer)) != -1) digest.update(buffer, 0, count);
+        }
+        StringBuilder hex = new StringBuilder();
+        for (byte b : digest.digest()) hex.append(String.format(java.util.Locale.US, "%02x", b));
+        if (!hex.toString().equalsIgnoreCase(expected)) return "Not installed: " + best.getName() + " does not match its SHA-256";
+        String version = OtaUpdater.versionFromAssetName(best.getName());
+        switch (OtaUpdater.install(app, best)) {
+            case SESSION_STARTED:
+                return "Installing " + version + " from USB… the app restarts when it is done";
+            case INSTALL_UI_STARTED:
+                return "Confirm the installation of " + version + " on the screen";
+            case UNREADABLE_ARCHIVE:
+                return "Not installed: " + best.getName() + " is not this app";
+            default:
+                return "Not installed: the installer could not start";
+        }
+    }
+
     /** The blocking part. Returns a line describing what happened, for the UI. */
     private static String runCheck(Context app, Listener listener,
                                    android.os.Handler main) throws IOException {
@@ -97,28 +177,40 @@ final class UpdateHook {
             current = app.getPackageManager()
                     .getPackageInfo(app.getPackageName(), 0).versionName;
         } catch (Exception e) {
-            return "Sürüm okunamadı";
+            return "Could not read version";
         }
 
-        OtaUpdater.Update update = OtaUpdater.check(current);
-        if (update == null) return "Güncel (" + current + ")";
+        ServerConfig config = ServerConfig.get(app);
+        if (!config.isConfigured()) return "Set up the server first (Server tab): updates come through it";
+        OtaUpdater.Update update = OtaUpdater.check(config, current);
+        if (update == null) return "Up to date (" + current + ")";
 
         Log.i(TAG, "Update available: " + update.versionName);
         String expectedHash;
         try {
-            expectedHash = OtaUpdater.fetchExpectedSha256(update);
+            expectedHash = OtaUpdater.fetchExpectedSha256(update, config);
         } catch (IOException e) {
-            Log.w(TAG, "OTA hash unavailable", e);
-            return "Güncelleme reddedildi: SHA-256 doğrulaması yok";
+            Log.w(TAG, "OTA hash unavailable: " + e.getMessage());
+            return "Update refused: no SHA-256 verification";
         }
-        File apk = OtaUpdater.download(app, update, expectedHash, percent -> {
+        File apk = OtaUpdater.download(update, expectedHash, config, percent -> {
             if (listener != null) main.post(() -> listener.onProgress(percent));
         });
-        if (apk == null) return "İndirme veya SHA-256 doğrulaması başarısız ("
+        if (apk == null) return "Download or SHA-256 verification failed ("
                 + update.versionName + ")";
 
+        switch (OtaUpdater.install(app, apk)) {
+            case SESSION_STARTED:
+                return "Installing " + update.versionName + "… the app restarts when it is done";
+            case INSTALL_UI_STARTED:
+                return "Confirm the installation of " + update.versionName + " on the screen";
+            case UNREADABLE_ARCHIVE:
+                return "Update refused: the downloaded file is not this app";
+            default:
+                break;
+        }
         if (!OtaUpdater.openDownloads(app))
-            return "APK Downloads'a indirildi; dosya yöneticisi açılamadı";
-        return update.versionName + ".apk Downloads'a indirildi — dosyaya dokunup kurun";
+            return update.versionName + " is in Downloads; open it with the Files app to install";
+        return update.versionName + ".apk is in Downloads — tap the file to install";
     }
 }
diff --git a/app/src/unstable/java/com/evsuite/abrp/UsbUpdate.java b/app/src/unstable/java/com/evsuite/abrp/UsbUpdate.java
new file mode 100644
index 0000000..5697180
--- /dev/null
+++ b/app/src/unstable/java/com/evsuite/abrp/UsbUpdate.java
@@ -0,0 +1,52 @@
+package com.evsuite.abrp;
+
+import java.io.File;
+import java.util.Locale;
+
+/**
+ * Installing a car build from a USB stick — UNSTABLE BUILDS ONLY. For development: copy
+ * {@code NilsMG4-unstable-<version>.apk} and its {@code .sha256} (both from build-car) to the top
+ * folder of a stick, plug it in, press the button on the Settings tab.
+ *
+ * The same checks as the over-the-air update apply, minus the server: the newest such file that
+ * is newer than the installed version, a matching SHA-256 sidecar, this app's package, and the
+ * installer's own signature check. The pure parts are here, unit-tested; UpdateHook does the IO.
+ */
+final class UsbUpdate {
+
+    private UsbUpdate() { }
+
+    /**
+     * The top folder of the volume an app-specific folder lives on:
+     * /storage/1234-ABCD/Android/data/<package>/files → /storage/1234-ABCD. Null when the path
+     * does not have that shape. This is how a stick is found without a file picker, which the
+     * head unit does not have.
+     */
+    static File volumeRoot(File appFilesDir) {
+        if (appFilesDir == null) return null;
+        File data = appFilesDir.getParentFile() == null ? null : appFilesDir.getParentFile().getParentFile();
+        File android = data == null ? null : data.getParentFile();
+        if (!"files".equals(appFilesDir.getName()) || data == null || !"data".equals(data.getName())
+                || android == null || !"Android".equals(android.getName())) return null;
+        return android.getParentFile();
+    }
+
+    /**
+     * The car-build APK to install among [names]: the highest version that is newer than
+     * [currentVersion], or null. Only names build-car writes count.
+     */
+    static String pickNewest(String[] names, String currentVersion) {
+        String best = null, bestVersion = null;
+        if (names == null) return null;
+        for (String name : names) {
+            if (name == null || !name.toLowerCase(Locale.US).startsWith("nilsmg4-unstable-")) continue;
+            String version = OtaUpdater.versionFromAssetName(name);
+            if (version == null || !OtaUpdater.isNewer(version, currentVersion)) continue;
+            if (bestVersion == null || OtaUpdater.isNewer(version, bestVersion)) {
+                best = name;
+                bestVersion = version;
+            }
+        }
+        return best;
+    }
+}
diff --git a/docs/MG4_PLATFORM_INSTALL.md b/docs/MG4_PLATFORM_INSTALL.md
index 32f923d..816f234 100644
--- a/docs/MG4_PLATFORM_INSTALL.md
+++ b/docs/MG4_PLATFORM_INSTALL.md
@@ -57,15 +57,15 @@ later install says `No such file or directory`, re-push.
 ## Verifying the Install
 
 ```bash
-adb shell pm path com.evsuite.abrp.unstable
-# -> package:/data/app/com.evsuite.abrp.unstable-.../base.apk
+adb shell pm path com.stinnesbeck.nilsmg4.unstable
+# -> package:/data/app/com.stinnesbeck.nilsmg4.unstable-.../base.apk
 ```
 
 To confirm the platform signature matches the system:
 
 ```bash
 BUILD_TOOLS="$ANDROID_HOME/build-tools/36.0.0"
-adb pull "$(adb shell pm path com.evsuite.abrp.unstable | sed 's/package://')" /tmp/installed.apk
+adb pull "$(adb shell pm path com.stinnesbeck.nilsmg4.unstable | sed 's/package://')" /tmp/installed.apk
 "$BUILD_TOOLS/apksigner" verify --print-certs /tmp/installed.apk
 # SHA-256 cert digest should match tools/platform.x509.pem
 ```
@@ -73,7 +73,7 @@ adb pull "$(adb shell pm path com.evsuite.abrp.unstable | sed 's/package://')" /
 ## Uninstalling
 
 ```bash
-adb uninstall com.evsuite.abrp.unstable
+adb uninstall com.stinnesbeck.nilsmg4.unstable
 ```
 
 Add `-k` to keep data/cache around (useful when re-installing to test without
@@ -92,7 +92,7 @@ SDK="$HOME/Library/Android/sdk"
 BT="$SDK/build-tools/36.0.0"
 IN=app/build/outputs/apk/unstable/debug/app-unstable-debug.apk
 ALIGNED=app/build/outputs/apk/unstable/debug/app-unstable-debug-aligned.apk
-OUT=FatihsMG4-unstable-platform.apk
+OUT=NilsMG4-unstable-platform.apk
 "$BT/zipalign" -f 4 "$IN" "$ALIGNED"
 "$BT/apksigner" sign --key tools/platform.pk8 --cert tools/platform.x509.pem --out "$OUT" "$ALIGNED"
 "$BT/apksigner" verify --verbose "$OUT"
diff --git a/flake.lock b/flake.lock
new file mode 100644
index 0000000..bb38431
--- /dev/null
+++ b/flake.lock
@@ -0,0 +1,27 @@
+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1791956154,
+        "narHash": "sha256-jBYGPi4udQ9uo4KQp9m2J0546nJVQitG15gvZSaVVAs=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "55bfb4d7437bd4e09ab7cba58a43bd68eb310044",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/flake.nix b/flake.nix
new file mode 100644
index 0000000..6a9d01d
--- /dev/null
+++ b/flake.nix
@@ -0,0 +1,239 @@
+{
+  description = "NilsMG4 — Android Automotive build environment";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+  };
+
+  outputs = { self, nixpkgs }:
+    let
+      systems = [ "x86_64-linux" "aarch64-linux" ];
+      forAllSystems = f: nixpkgs.lib.genAttrs systems (system: f (import nixpkgs {
+        inherit system;
+        config = {
+          allowUnfree = true;
+          android_sdk.accept_license = true;
+        };
+      }));
+
+      # Must match app/build.gradle (compileSdk 36.1) and EVHardware/lib (compileSdk 36).
+      buildToolsVersion = "36.0.0";
+    in
+    {
+      devShells = forAllSystems (pkgs:
+        let
+          android = pkgs.androidenv.composeAndroidPackages {
+            platformVersions = [ "36" "36.1" ];
+            buildToolsVersions = [ buildToolsVersion ];
+            includeEmulator = false;
+            includeNDK = false;
+            includeSources = false;
+            includeSystemImages = false;
+          };
+          sdk = "${android.androidsdk}/libexec/android-sdk";
+          # gradle/gradle-daemon-jvm.properties pins the daemon to JDK 21.
+          jdk = pkgs.jdk21;
+          buildTools = "${sdk}/build-tools/${buildToolsVersion}";
+
+          # AGP otherwise downloads an aapt2 binary from Maven, which is dynamically linked
+          # against a generic FHS and does not run on NixOS. Use the SDK's patched one.
+          # Gradle is also pointed at the Nix JDK so the daemon toolchain criteria are met
+          # locally instead of downloading a (non-NixOS) JDK through foojay.
+          gradleOpts = builtins.concatStringsSep " " [
+            "-Dorg.gradle.project.android.aapt2FromMavenOverride=${buildTools}/aapt2"
+            "-Dorg.gradle.java.installations.paths=${jdk.home}"
+            "-Dorg.gradle.java.installations.auto-download=false"
+          ];
+
+          # The MG4 head unit is signed with the public AOSP test platform key, so that is
+          # the key a system-UID (unstable) build must carry. See tools/README.md and OTA.md.
+          aospKeys = "https://raw.githubusercontent.com/aosp-mirror/platform_build/android-9.0.0_r1/target/product/security";
+          platformCertSha256 = "c8a2e9bccf597c2fb6dc66bee293fc13f2fc47ec77bc6b2b0d52c11f51192ab8";
+
+          buildCar = pkgs.writeShellApplication {
+            name = "build-car";
+            runtimeInputs = [ jdk pkgs.curl pkgs.openssl pkgs.coreutils pkgs.gnugrep pkgs.gawk ];
+            text = ''
+              root=$(git rev-parse --show-toplevel 2>/dev/null || pwd)
+              cd "$root"
+              if [ ! -f app/build.gradle ]; then
+                echo "build-car: run this from the NilsMG4 checkout" >&2
+                exit 1
+              fi
+
+              export ANDROID_HOME=${sdk} ANDROID_SDK_ROOT=${sdk} JAVA_HOME=${jdk.home}
+              export GRADLE_OPTS="${gradleOpts}"
+              echo "sdk.dir=$ANDROID_HOME" > local.properties
+
+              # Keys live in tools/, which .gitignore keeps out of the repository.
+              for f in platform.pk8 platform.x509.pem; do
+                if [ ! -f "tools/$f" ]; then
+                  echo "Fetching AOSP test key tools/$f"
+                  curl -sSfL -o "tools/$f" "${aospKeys}/$f"
+                fi
+              done
+              cert=$(openssl x509 -in tools/platform.x509.pem -outform der | sha256sum | cut -d' ' -f1)
+              if [ "$cert" != "${platformCertSha256}" ]; then
+                echo "build-car: tools/platform.x509.pem has SHA-256 $cert, expected ${platformCertSha256}" >&2
+                exit 1
+              fi
+
+              ./gradlew assembleUnstableDebug "$@"
+              version=$(./gradlew -q printUnstableVersion "$@" | tail -1)
+
+              in=app/build/outputs/apk/unstable/debug/NilsMG4-unstable-debug.apk
+              mkdir -p build/car
+              aligned=build/car/aligned.apk
+              out="build/car/NilsMG4-unstable-$version.apk"
+
+              "${buildTools}/zipalign" -f -p 4 "$in" "$aligned"
+              # Options come before the input APK; apksigner rejects the other order.
+              "${buildTools}/apksigner" sign \
+                --key tools/platform.pk8 --cert tools/platform.x509.pem \
+                --out "$out" "$aligned"
+              rm -f "$aligned" "$out.idsig"
+
+              signer=$("${buildTools}/apksigner" verify --print-certs "$out" \
+                | awk -F': ' '/Signer #1 certificate SHA-256 digest/ { print $2 }')
+              if [ "$signer" != "${platformCertSha256}" ]; then
+                echo "build-car: $out is signed with $signer, expected ${platformCertSha256}" >&2
+                rm -f "$out"
+                exit 1
+              fi
+              sha256sum "$out" | cut -d' ' -f1 > "$out.sha256"
+
+              echo
+              echo "Signed with the AOSP platform key: $out"
+              echo "Install on the head unit:"
+              echo "  adb push $out /data/local/tmp/update.apk"
+              echo "  adb shell \"pm install -r -f -d -t /data/local/tmp/update.apk\""
+            '';
+          };
+
+          # Publishes the current car build as a pre-release on the forge, where the car
+          # server relays it to the in-app updater (server/releases.go, OTA.md). Needs a forge
+          # token with write access to the repository's releases, from $FORGE_TOKEN or
+          # ~/.config/nilsmg4/forge-token; it is sent in a header and never printed.
+          publishCar = pkgs.writeShellApplication {
+            name = "publish-car";
+            runtimeInputs = [ pkgs.curl pkgs.jq pkgs.coreutils pkgs.git ];
+            text = ''
+              forge=''${FORGE_URL:-https://git.stinnesbeck.com}
+              repo=''${FORGE_REPO:-nils/mg4}
+              token=''${FORGE_TOKEN:-}
+              if [ -z "$token" ] && [ -f "$HOME/.config/nilsmg4/forge-token" ]; then
+                token=$(tr -d '[:space:]' < "$HOME/.config/nilsmg4/forge-token")
+              fi
+              if [ -z "$token" ]; then
+                echo "publish-car: no token. Put one in ~/.config/nilsmg4/forge-token (or \$FORGE_TOKEN)." >&2
+                exit 1
+              fi
+              root=$(git rev-parse --show-toplevel)
+              cd "$root"
+              version=$(grep -m1 'versionName "' app/build.gradle | sed 's/.*versionName "\(.*\)".*/\1/')
+              apk="build/car/NilsMG4-unstable-$version.apk"
+              if [ ! -f "$apk" ] || [ ! -f "$apk.sha256" ]; then
+                echo "publish-car: $apk (and .sha256) not found; run build-car first" >&2
+                exit 1
+              fi
+              if [ "$(sha256sum "$apk" | cut -d' ' -f1)" != "$(cat "$apk.sha256")" ]; then
+                echo "publish-car: $apk does not match its .sha256" >&2
+                exit 1
+              fi
+              tag="car-$version"
+              commit=$(git rev-parse HEAD)
+              api="$forge/api/v1/repos/$repo"
+              auth=(-H "Authorization: token $token")
+
+              if curl -sSf "''${auth[@]}" "$api/releases/tags/$tag" >/dev/null 2>&1; then
+                echo "publish-car: $tag already exists; bump the version before publishing again" >&2
+                exit 1
+              fi
+              body=$(jq -n --arg tag "$tag" --arg commit "$commit" --arg name "Car build $version" \
+                '{tag_name: $tag, target_commitish: $commit, name: $name, prerelease: true,
+                  body: "Platform-signed car build, installed by the in-app updater."}')
+              id=$(curl -sSf "''${auth[@]}" -H "Content-Type: application/json" -d "$body" \
+                "$api/releases" | jq -r .id)
+              for f in "$apk" "$apk.sha256"; do
+                curl -sSf "''${auth[@]}" -F "attachment=@$f" \
+                  "$api/releases/$id/assets?name=$(basename "$f")" >/dev/null
+              done
+              echo "Published $tag ($(basename "$apk") and .sha256) at $forge/$repo/releases/tag/$tag"
+            '';
+          };
+        in
+        {
+          default = pkgs.mkShell {
+            packages = [ jdk android.androidsdk buildCar publishCar pkgs.go pkgs.gopls pkgs.govulncheck pkgs.influxdb2-server pkgs.influxdb2-cli ];
+
+            ANDROID_HOME = sdk;
+            ANDROID_SDK_ROOT = sdk;
+            JAVA_HOME = jdk.home;
+
+            GRADLE_OPTS = gradleOpts;
+
+            shellHook = ''
+              echo "sdk.dir=$ANDROID_HOME" > local.properties
+              echo "NilsMG4 dev shell — JDK $(java -version 2>&1 | head -1 | cut -d'"' -f2), SDK at $ANDROID_HOME"
+              echo "  ./gradlew assembleStableDebug     # debug APK"
+              echo "  ./gradlew assembleUnstableDebug   # build that can update itself (OTA)"
+              echo "  build-car                         # unstable build signed for the car"
+              echo "  publish-car                       # publish it for the in-app updater"
+            '';
+          };
+        });
+
+      # An Android 9 emulator shaped like the head unit, for testing the car build: the AOSP
+      # "default" image is signed with the same public platform key, so the car APK installs
+      # there as the system user too. 1920x720 at 160 dpi; `adb shell wm size 1778x640` gives
+      # the app window the car leaves. No vehicle data: every value shows "—". Not in the dev
+      # shell, because the emulator and its image are a large download.
+      #   nix run .#car-emulator        (from the checkout; state in build/emulator/)
+      packages.x86_64-linux.car-emulator =
+        let
+          pkgs = import nixpkgs {
+            system = "x86_64-linux";
+            config = { allowUnfree = true; android_sdk.accept_license = true; };
+          };
+          emu = (pkgs.androidenv.composeAndroidPackages {
+            platformVersions = [ "28" ];
+            includeEmulator = true;
+            includeSystemImages = true;
+            systemImageTypes = [ "default" ];
+            abiVersions = [ "x86_64" ];
+            includeNDK = false;
+          }).androidsdk;
+        in
+        pkgs.writeShellApplication {
+          name = "car-emulator";
+          runtimeInputs = [ pkgs.coreutils pkgs.gnugrep ];
+          text = ''
+            root=$(git rev-parse --show-toplevel 2>/dev/null || pwd)
+            state="$root/build/emulator"
+            mkdir -p "$state/avd" "$state/home"
+            export ANDROID_HOME=${emu}/libexec/android-sdk ANDROID_SDK_ROOT=${emu}/libexec/android-sdk
+            export ANDROID_AVD_HOME="$state/avd" ANDROID_EMULATOR_HOME="$state/home" ANDROID_USER_HOME="$state/home"
+            avd="$state/avd/mg4test.avd"
+            if [ ! -d "$avd" ]; then
+              echo no | ${emu}/bin/avdmanager create avd -n mg4test \
+                -k "system-images;android-28;default;x86_64" --force -p "$avd"
+              {
+                echo "hw.lcd.width=1920"
+                echo "hw.lcd.height=720"
+                echo "hw.lcd.density=160"
+                echo "hw.ramSize=2G"
+                echo "disk.dataPartition.size=10G"
+              } >> "$avd/config.ini"
+            fi
+            echo "Starting the MG4-shaped emulator on port 5560 (adb: emulator-5560); Ctrl-C stops it."
+            echo "adb: ${emu}/bin/adb -s emulator-5560"
+            exec "$ANDROID_HOME/emulator/emulator" -avd mg4test -no-audio -no-boot-anim \
+              -gpu swiftshader_indirect -no-snapshot -port 5560 "$@"
+          '';
+        };
+      apps.x86_64-linux.car-emulator = {
+        type = "app";
+        program = "${self.packages.x86_64-linux.car-emulator}/bin/car-emulator";
+      };
+    };
+}
diff --git a/k8s/README.md b/k8s/README.md
new file mode 100644
index 0000000..cefdaa7
--- /dev/null
+++ b/k8s/README.md
@@ -0,0 +1,66 @@
+# Kubernetes manifests — car.k8s.stinnesbeck.com
+
+Plain manifests for the car server, InfluxDB 2 and Grafana. They are only files: nothing here
+is applied automatically. Apply them yourself.
+
+| File | What |
+|---|---|
+| `namespace.yaml` | Namespace `mg4` |
+| `influxdb.yaml` | InfluxDB 2.7.12 StatefulSet (10Gi PVC, default storage class), cluster-internal Service, NetworkPolicy admitting only the server and Grafana |
+| `server.yaml` | Go server Deployment (1 replica, non-root, read-only root filesystem) and Service |
+| `grafana.yaml` | Grafana 13.2.3 Deployment (1Gi PVC), Service; datasource and dashboards provisioned |
+| `grafana/` | The provisioned InfluxDB datasource and the MG4 dashboards (Live, Consumption, Charging) |
+| `ingress.yaml` | Traefik `IngressRoute`s for car.k8s.stinnesbeck.com and Grafana, TLS from Traefik's default certificate |
+| `secrets/secrets.example.yaml` | **Template** for the Secrets; placeholders only, not in `kustomization.yaml` |
+| `secrets/secrets.yaml` | Your filled-in copy — **gitignored**, never committed |
+| `kustomization.yaml` | Everything except the Secrets; generates the Grafana ConfigMaps |
+
+## Before the first apply
+
+1. **Check `ingress.yaml`:** Grafana's host (placeholder `car-grafana.k8s.stinnesbeck.com`).
+   Both routes use the `traefik-internal` class, and both hosts must be
+   covered by Traefik's default certificate.
+2. **Create the Secrets.** `cp k8s/secrets/secrets.example.yaml k8s/secrets/secrets.yaml` (gitignored), replace
+   every `CHANGE-ME` there (`openssl rand -hex 32`): `influxdb-auth`, `mg4-server` (ingest token,
+   approval password for pairing, the forge token for app updates) and `grafana-admin`.
+   Keep the template itself on placeholders only.
+3. **Registry access.** The `mg4-server` package on git.stinnesbeck.com is public, so no pull
+   secret is needed. If you make it private, add an `imagePullSecrets` entry to `server.yaml`.
+
+## Apply
+
+```sh
+kubectl apply -f k8s/namespace.yaml
+kubectl apply -f k8s/secrets/secrets.yaml
+kubectl apply -k k8s/
+```
+
+Use **`-k`**, not `-f k8s/`: plain `-f` applies the files without kustomize, so the Grafana
+ConfigMaps (datasource and dashboards) are never created and Grafana does not start.
+
+## Grafana's InfluxDB token
+
+Grafana reads InfluxDB with a token that can only read the `mg4` bucket. Nothing to do: an init
+container in the Grafana pod creates it at every start with the admin token, deletes the one
+from the previous start, and hands Grafana only the read-only token (in a memory-backed volume).
+The Grafana process itself never sees the admin token. InfluxDB generates every token but the
+admin one itself, which is why this cannot be a value in the Secret.
+
+## App updates
+
+The server relays the app's releases from the private repository to the car's updater
+(`OTA.md`). It reads them with `FORGE_TOKEN` from the `mg4-server` Secret: create a token in
+the forge that can only **read** the `nils/mg4` repository, put it there, apply the Secret and
+restart the server. Without it, updates are off (the car's updater gets a 404). `FORGE_URL`
+and `FORGE_REPO` are set in `server.yaml`.
+
+## Notes
+
+- InfluxDB's setup mode runs only on an empty volume. Changing `admin-token` in the Secret later
+  does not change the token inside InfluxDB.
+- The server uses the InfluxDB admin token; a token scoped to read/write on the `mg4` bucket can
+  replace it later. Grafana has its own read-only token (above).
+- The dashboards are read-only in Grafana's UI. Change the JSON in `grafana/dashboards/`; the
+  ConfigMap name changes with its content, which rolls Grafana.
+- The server image is pinned by digest in `server.yaml`. To upgrade, push a new tag and put its
+  digest there (`skopeo inspect docker://git.stinnesbeck.com/nils/mg4-server:<tag>`).
diff --git a/k8s/grafana.yaml b/k8s/grafana.yaml
new file mode 100644
index 0000000..6c8a9d7
--- /dev/null
+++ b/k8s/grafana.yaml
@@ -0,0 +1,201 @@
+# Grafana for the dashboards. The InfluxDB datasource and the three MG4 dashboards are
+# provisioned from k8s/grafana/ (ConfigMaps generated by kustomization.yaml); the dashboards
+# are read-only in the UI — change the JSON in git instead.
+#
+# Grafana reads InfluxDB with a token that can only read the mg4 bucket. InfluxDB generates
+# every token but the admin one (a chosen value is ignored), so the init container makes it at
+# each start: it alone gets the admin token, creates a fresh read-only token, deletes the one
+# from the previous start, and leaves only the read-only token in a memory-backed volume for
+# Grafana. Nothing to do by hand, and the Grafana process never sees the admin token.
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: grafana-data
+  namespace: mg4
+  labels:
+    app.kubernetes.io/name: grafana
+    app.kubernetes.io/part-of: mg4
+spec:
+  accessModes: ["ReadWriteOnce"]
+  # No storageClassName: the cluster's default class is used.
+  resources:
+    requests:
+      storage: 1Gi
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: grafana
+  namespace: mg4
+  labels:
+    app.kubernetes.io/name: grafana
+    app.kubernetes.io/part-of: mg4
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate # the SQLite database on the volume allows one writer
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: grafana
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: grafana
+        app.kubernetes.io/part-of: mg4
+    spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 472
+        runAsGroup: 472
+        fsGroup: 472
+        seccompProfile:
+          type: RuntimeDefault
+      initContainers:
+        - name: influx-read-token
+          image: docker.io/library/influxdb:2.7.12-alpine
+          command:
+            - sh
+            - -c
+            - |
+              set -eu
+              desc="grafana read-only (made by the Grafana pod at start)"
+              export INFLUX_CONFIGS_PATH=/tmp/influx-configs
+              bucket=$(influx bucket find --name mg4 --hide-headers | cut -f1)
+              old=$(influx auth list --hide-headers | awk -F'\t' -v d="$desc" '$2 == d { print $1 }')
+              token=$(influx auth create --description "$desc" --read-bucket "$bucket" --hide-headers | cut -f3)
+              [ -n "$token" ] || { echo "no token created" >&2; exit 1; }
+              printf '%s' "$token" > /run/influx/token
+              for id in $old; do influx auth delete --id "$id" > /dev/null; done
+              echo "read-only token for Grafana ready"
+          env:
+            - name: INFLUX_HOST
+              value: http://influxdb.mg4.svc:8086
+            - name: INFLUX_ORG
+              value: mg4
+            - name: INFLUX_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: influxdb-auth
+                  key: admin-token
+          volumeMounts:
+            - name: influx-token
+              mountPath: /run/influx
+          resources:
+            requests:
+              cpu: 10m
+              memory: 32Mi
+            limits:
+              memory: 128Mi
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop: ["ALL"]
+      containers:
+        - name: grafana
+          image: docker.io/grafana/grafana:13.2.3
+          ports:
+            - name: http
+              containerPort: 3000
+          env:
+            - name: GF_SERVER_ROOT_URL
+              value: https://car-grafana.k8s.stinnesbeck.com
+            - name: GF_SECURITY_ADMIN_USER
+              value: admin
+            - name: GF_SECURITY_ADMIN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: grafana-admin
+                  key: admin-password
+            - name: GF_USERS_ALLOW_SIGN_UP
+              value: "false"
+            - name: GF_AUTH_ANONYMOUS_ENABLED
+              value: "false"
+            - name: GF_ANALYTICS_REPORTING_ENABLED
+              value: "false"
+            - name: GF_ANALYTICS_CHECK_FOR_UPDATES
+              value: "false"
+            # Read by datasources.yaml; the token is the file the init container wrote.
+            - name: INFLUX_URL
+              value: http://influxdb.mg4.svc:8086
+          volumeMounts:
+            - name: data
+              mountPath: /var/lib/grafana
+            - name: datasources
+              mountPath: /etc/grafana/provisioning/datasources
+            - name: dashboard-provider
+              mountPath: /etc/grafana/provisioning/dashboards
+            - name: dashboards
+              mountPath: /var/lib/grafana/dashboards/mg4
+            - name: influx-token
+              mountPath: /run/influx
+              readOnly: true
+          # The first start creates and migrates Grafana's database: measured 44 s at 0.5 CPU
+          # and 3 minutes at 0.1 CPU. The startup probe allows up to 10 minutes for that, and
+          # liveness/readiness only begin once it succeeded, so a slow first start is never
+          # killed mid-migration (which would restart it slowly again, in a loop).
+          startupProbe:
+            httpGet:
+              path: /api/health
+              port: http
+            periodSeconds: 10
+            timeoutSeconds: 5
+            failureThreshold: 60
+          readinessProbe:
+            httpGet:
+              path: /api/health
+              port: http
+            periodSeconds: 10
+            timeoutSeconds: 5
+          livenessProbe:
+            httpGet:
+              path: /api/health
+              port: http
+            periodSeconds: 30
+            timeoutSeconds: 5
+            failureThreshold: 3
+          # About 406 MiB in steady state in the cluster: request what it uses, and leave room
+          # for long-range dashboard queries before the limit OOM-kills it.
+          resources:
+            requests:
+              cpu: 250m
+              memory: 512Mi
+            limits:
+              memory: 1Gi
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop: ["ALL"]
+      volumes:
+        - name: data
+          persistentVolumeClaim:
+            claimName: grafana-data
+        - name: datasources
+          configMap:
+            name: grafana-datasources
+        - name: dashboard-provider
+          configMap:
+            name: grafana-dashboard-provider
+        - name: dashboards
+          configMap:
+            name: grafana-dashboards
+        # The read-only InfluxDB token, in memory only; made anew at every start.
+        - name: influx-token
+          emptyDir:
+            medium: Memory
+            sizeLimit: 1Mi
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: grafana
+  namespace: mg4
+  labels:
+    app.kubernetes.io/name: grafana
+    app.kubernetes.io/part-of: mg4
+spec:
+  selector:
+    app.kubernetes.io/name: grafana
+  ports:
+    - name: http
+      port: 80
+      targetPort: http
diff --git a/k8s/grafana/dashboards.yaml b/k8s/grafana/dashboards.yaml
new file mode 100644
index 0000000..de37763
--- /dev/null
+++ b/k8s/grafana/dashboards.yaml
@@ -0,0 +1,11 @@
+# Loads the dashboard JSON files in the mounted folder into a "MG4" folder. They are
+# managed in git: edits in the UI are not saved back, change the JSON instead.
+apiVersion: 1
+providers:
+  - name: mg4
+    folder: MG4
+    type: file
+    disableDeletion: true
+    allowUiUpdates: false
+    options:
+      path: /var/lib/grafana/dashboards/mg4
diff --git a/k8s/grafana/dashboards/charging.json b/k8s/grafana/dashboards/charging.json
new file mode 100644
index 0000000..9550abd
--- /dev/null
+++ b/k8s/grafana/dashboards/charging.json
@@ -0,0 +1,517 @@
+{
+  "uid": "mg4-charging",
+  "title": "MG4 - Charging",
+  "description": "DC charging sessions metered by the car. Prices in euro, as entered in the car's Charging tab.",
+  "tags": [
+    "mg4"
+  ],
+  "timezone": "browser",
+  "editable": false,
+  "graphTooltip": 1,
+  "schemaVersion": 39,
+  "version": 1,
+  "time": {
+    "from": "now-90d",
+    "to": "now"
+  },
+  "refresh": "",
+  "templating": {
+    "list": [
+      {
+        "name": "installationId",
+        "label": "Car",
+        "type": "query",
+        "datasource": {
+          "type": "influxdb",
+          "uid": "mg4-influxdb"
+        },
+        "query": "import \"influxdata/influxdb/schema\"\nschema.tagValues(bucket: \"mg4\", tag: \"installationId\", start: -400d)",
+        "definition": "installationId tag values",
+        "refresh": 1,
+        "includeAll": false,
+        "multi": false,
+        "current": {},
+        "hide": 0,
+        "sort": 1
+      }
+    ]
+  },
+  "annotations": {
+    "list": []
+  },
+  "panels": [
+    {
+      "id": 1,
+      "type": "stat",
+      "title": "DC sessions",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 0,
+        "y": 0,
+        "w": 6,
+        "h": 4
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"charging_session\" and r.installationId == \"${installationId}\" and r._field == \"energyKwh\")\n  |> group()\n  |> count()"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "none",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          },
+          "decimals": 0
+        },
+        "overrides": []
+      },
+      "options": {
+        "reduceOptions": {
+          "calcs": [
+            "lastNotNull"
+          ],
+          "fields": "",
+          "values": false
+        },
+        "colorMode": "value",
+        "graphMode": "none",
+        "textMode": "value"
+      }
+    },
+    {
+      "id": 2,
+      "type": "stat",
+      "title": "Drawn from grid",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 6,
+        "y": 0,
+        "w": 6,
+        "h": 4
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"charging_session\" and r.installationId == \"${installationId}\" and r._field == \"gridEnergyKwh\")\n  |> group()\n  |> sum()"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "kwatth",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          },
+          "decimals": 1
+        },
+        "overrides": []
+      },
+      "options": {
+        "reduceOptions": {
+          "calcs": [
+            "lastNotNull"
+          ],
+          "fields": "",
+          "values": false
+        },
+        "colorMode": "value",
+        "graphMode": "none",
+        "textMode": "value"
+      },
+      "description": "Net energy into the battery plus 10 % charging loss."
+    },
+    {
+      "id": 3,
+      "type": "stat",
+      "title": "Paid",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 12,
+        "y": 0,
+        "w": 6,
+        "h": 4
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"charging_session\" and r.installationId == \"${installationId}\" and r._field == \"totalCost\")\n  |> group()\n  |> sum()"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "currencyEUR",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          },
+          "decimals": 2
+        },
+        "overrides": []
+      },
+      "options": {
+        "reduceOptions": {
+          "calcs": [
+            "lastNotNull"
+          ],
+          "fields": "",
+          "values": false
+        },
+        "colorMode": "value",
+        "graphMode": "none",
+        "textMode": "value"
+      }
+    },
+    {
+      "id": 4,
+      "type": "stat",
+      "title": "Peak power",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 18,
+        "y": 0,
+        "w": 6,
+        "h": 4
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"charging_curve\" and r.installationId == \"${installationId}\" and r._field == \"powerKw\")\n  |> group()\n  |> max()\n  |> keep(columns: [\"_value\"])"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "kwatt",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          },
+          "decimals": 0
+        },
+        "overrides": []
+      },
+      "options": {
+        "reduceOptions": {
+          "calcs": [
+            "lastNotNull"
+          ],
+          "fields": "",
+          "values": false
+        },
+        "colorMode": "value",
+        "graphMode": "none",
+        "textMode": "value"
+      }
+    },
+    {
+      "id": 5,
+      "type": "table",
+      "title": "Sessions",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 0,
+        "y": 4,
+        "w": 24,
+        "h": 9
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"charging_session\" and r.installationId == \"${installationId}\")\n  |> pivot(rowKey: [\"_time\"], columnKey: [\"_field\"], valueColumn: \"_value\")\n  |> group()\n  |> map(fn: (r) => ({r with gained: if exists r.endSocPercent and exists r.startSocPercent then r.endSocPercent - r.startSocPercent else 0.0}))\n  |> keep(columns: [\"_time\", \"startSocPercent\", \"endSocPercent\", \"gained\", \"energyKwh\", \"gridEnergyKwh\", \"durationSeconds\", \"pricePerKwh\", \"totalCost\"])\n  |> sort(columns: [\"_time\"], desc: true)"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {},
+        "overrides": [
+          {
+            "matcher": {
+              "id": "byName",
+              "options": "_time"
+            },
+            "properties": [
+              {
+                "id": "displayName",
+                "value": "Start"
+              },
+              {
+                "id": "unit",
+                "value": "dateTimeAsIso"
+              }
+            ]
+          },
+          {
+            "matcher": {
+              "id": "byRegexp",
+              "options": "startSocPercent|endSocPercent|gained"
+            },
+            "properties": [
+              {
+                "id": "unit",
+                "value": "percent"
+              },
+              {
+                "id": "decimals",
+                "value": 0
+              }
+            ]
+          },
+          {
+            "matcher": {
+              "id": "byName",
+              "options": "startSocPercent"
+            },
+            "properties": [
+              {
+                "id": "displayName",
+                "value": "SoC start"
+              }
+            ]
+          },
+          {
+            "matcher": {
+              "id": "byName",
+              "options": "endSocPercent"
+            },
+            "properties": [
+              {
+                "id": "displayName",
+                "value": "SoC end"
+              }
+            ]
+          },
+          {
+            "matcher": {
+              "id": "byName",
+              "options": "gained"
+            },
+            "properties": [
+              {
+                "id": "displayName",
+                "value": "Charge added"
+              }
+            ]
+          },
+          {
+            "matcher": {
+              "id": "byName",
+              "options": "energyKwh"
+            },
+            "properties": [
+              {
+                "id": "displayName",
+                "value": "Net into battery"
+              },
+              {
+                "id": "unit",
+                "value": "kwatth"
+              },
+              {
+                "id": "decimals",
+                "value": 2
+              }
+            ]
+          },
+          {
+            "matcher": {
+              "id": "byName",
+              "options": "gridEnergyKwh"
+            },
+            "properties": [
+              {
+                "id": "displayName",
+                "value": "From grid (+10%)"
+              },
+              {
+                "id": "unit",
+                "value": "kwatth"
+              },
+              {
+                "id": "decimals",
+                "value": 2
+              }
+            ]
+          },
+          {
+            "matcher": {
+              "id": "byName",
+              "options": "durationSeconds"
+            },
+            "properties": [
+              {
+                "id": "displayName",
+                "value": "Duration"
+              },
+              {
+                "id": "unit",
+                "value": "dtdurations"
+              }
+            ]
+          },
+          {
+            "matcher": {
+              "id": "byName",
+              "options": "pricePerKwh"
+            },
+            "properties": [
+              {
+                "id": "displayName",
+                "value": "Price"
+              },
+              {
+                "id": "unit",
+                "value": "currencyEUR"
+              },
+              {
+                "id": "decimals",
+                "value": 2
+              }
+            ]
+          },
+          {
+            "matcher": {
+              "id": "byName",
+              "options": "totalCost"
+            },
+            "properties": [
+              {
+                "id": "displayName",
+                "value": "Cost"
+              },
+              {
+                "id": "unit",
+                "value": "currencyEUR"
+              },
+              {
+                "id": "decimals",
+                "value": 2
+              }
+            ]
+          }
+        ]
+      },
+      "options": {
+        "showHeader": true,
+        "cellHeight": "sm"
+      },
+      "transformations": [
+        {
+          "id": "organize",
+          "options": {
+            "indexByName": {
+              "_time": 0,
+              "durationSeconds": 1,
+              "startSocPercent": 2,
+              "endSocPercent": 3,
+              "gained": 4,
+              "energyKwh": 5,
+              "gridEnergyKwh": 6,
+              "pricePerKwh": 7,
+              "totalCost": 8
+            }
+          }
+        }
+      ]
+    },
+    {
+      "id": 6,
+      "type": "timeseries",
+      "title": "Charging curves",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 0,
+        "y": 13,
+        "w": 24,
+        "h": 9
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"charging_curve\" and r.installationId == \"${installationId}\" and (r._field == \"powerKw\" or r._field == \"socPercent\"))\n  |> group(columns: [\"_field\"])\n  |> keep(columns: [\"_time\", \"_field\", \"_value\"])\n  |> sort(columns: [\"_time\"])"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "kwatt",
+          "custom": {
+            "lineWidth": 2,
+            "fillOpacity": 8,
+            "spanNulls": 600000,
+            "showPoints": "never"
+          }
+        },
+        "overrides": [
+          {
+            "matcher": {
+              "id": "byRegexp",
+              "options": ".*socPercent.*"
+            },
+            "properties": [
+              {
+                "id": "unit",
+                "value": "percent"
+              },
+              {
+                "id": "custom.axisPlacement",
+                "value": "right"
+              }
+            ]
+          }
+        ]
+      },
+      "options": {
+        "legend": {
+          "displayMode": "list",
+          "placement": "bottom"
+        },
+        "tooltip": {
+          "mode": "multi"
+        }
+      },
+      "description": "Only DC charges above 10 kW are metered. Pick a time range around a session to see its curve."
+    }
+  ]
+}
diff --git a/k8s/grafana/dashboards/consumption.json b/k8s/grafana/dashboards/consumption.json
new file mode 100644
index 0000000..ff1e6b3
--- /dev/null
+++ b/k8s/grafana/dashboards/consumption.json
@@ -0,0 +1,415 @@
+{
+  "uid": "mg4-consumption",
+  "title": "MG4 - Consumption",
+  "description": "Daily consumption, summed from the chunks the car sends while driving.",
+  "tags": [
+    "mg4"
+  ],
+  "timezone": "browser",
+  "editable": false,
+  "graphTooltip": 1,
+  "schemaVersion": 39,
+  "version": 1,
+  "time": {
+    "from": "now-30d",
+    "to": "now"
+  },
+  "refresh": "",
+  "templating": {
+    "list": [
+      {
+        "name": "installationId",
+        "label": "Car",
+        "type": "query",
+        "datasource": {
+          "type": "influxdb",
+          "uid": "mg4-influxdb"
+        },
+        "query": "import \"influxdata/influxdb/schema\"\nschema.tagValues(bucket: \"mg4\", tag: \"installationId\", start: -400d)",
+        "definition": "installationId tag values",
+        "refresh": 1,
+        "includeAll": false,
+        "multi": false,
+        "current": {},
+        "hide": 0,
+        "sort": 1
+      }
+    ]
+  },
+  "annotations": {
+    "list": []
+  },
+  "panels": [
+    {
+      "id": 1,
+      "type": "stat",
+      "title": "Distance",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 0,
+        "y": 0,
+        "w": 5,
+        "h": 4
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"consumption_chunk\" and r.installationId == \"${installationId}\" and r._field == \"km\")\n  |> group()\n  |> sum()"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "suffix: km",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          },
+          "decimals": 1
+        },
+        "overrides": []
+      },
+      "options": {
+        "reduceOptions": {
+          "calcs": [
+            "lastNotNull"
+          ],
+          "fields": "",
+          "values": false
+        },
+        "colorMode": "value",
+        "graphMode": "none",
+        "textMode": "value"
+      }
+    },
+    {
+      "id": 2,
+      "type": "stat",
+      "title": "Energy used",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 5,
+        "y": 0,
+        "w": 5,
+        "h": 4
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"consumption_chunk\" and r.installationId == \"${installationId}\" and r._field == \"kwh\")\n  |> group()\n  |> sum()"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "kwatth",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          },
+          "decimals": 2
+        },
+        "overrides": []
+      },
+      "options": {
+        "reduceOptions": {
+          "calcs": [
+            "lastNotNull"
+          ],
+          "fields": "",
+          "values": false
+        },
+        "colorMode": "value",
+        "graphMode": "none",
+        "textMode": "value"
+      }
+    },
+    {
+      "id": 3,
+      "type": "stat",
+      "title": "Average",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 10,
+        "y": 0,
+        "w": 5,
+        "h": 4
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"consumption_chunk\" and r.installationId == \"${installationId}\" and (r._field == \"km\" or r._field == \"kwh\"))\n  |> group(columns: [\"_field\"])\n  |> sum()\n  |> group()\n  |> pivot(rowKey: [], columnKey: [\"_field\"], valueColumn: \"_value\")\n  |> map(fn: (r) => ({efficiency: if r.km >= 1.0 then r.kwh * 100.0 / r.km else 0.0}))"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "suffix: kWh/100 km",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          },
+          "decimals": 1
+        },
+        "overrides": []
+      },
+      "options": {
+        "reduceOptions": {
+          "calcs": [
+            "lastNotNull"
+          ],
+          "fields": "",
+          "values": false
+        },
+        "colorMode": "value",
+        "graphMode": "none",
+        "textMode": "value"
+      },
+      "description": "kWh/100 km over the selected range."
+    },
+    {
+      "id": 4,
+      "type": "stat",
+      "title": "Lifetime distance",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 15,
+        "y": 0,
+        "w": 5,
+        "h": 4
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: 0)\n  |> filter(fn: (r) => r._measurement == \"consumption_chunk\" and r.installationId == \"${installationId}\" and r._field == \"km\")\n  |> group()\n  |> sum()"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "suffix: km",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          },
+          "decimals": 0
+        },
+        "overrides": []
+      },
+      "options": {
+        "reduceOptions": {
+          "calcs": [
+            "lastNotNull"
+          ],
+          "fields": "",
+          "values": false
+        },
+        "colorMode": "value",
+        "graphMode": "none",
+        "textMode": "value"
+      }
+    },
+    {
+      "id": 5,
+      "type": "stat",
+      "title": "Battery health (SoH)",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 20,
+        "y": 0,
+        "w": 4,
+        "h": 4
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: 0)\n  |> filter(fn: (r) => r._measurement == \"consumption_chunk\" and r.installationId == \"${installationId}\" and r._field == \"sohPercent\")\n  |> group()\n  |> last()\n  |> keep(columns: [\"_value\"])"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "percent",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          },
+          "decimals": 1
+        },
+        "overrides": []
+      },
+      "options": {
+        "reduceOptions": {
+          "calcs": [
+            "lastNotNull"
+          ],
+          "fields": "",
+          "values": false
+        },
+        "colorMode": "value",
+        "graphMode": "none",
+        "textMode": "value"
+      },
+      "description": "The manual SoH entered in the car's Consumption tab."
+    },
+    {
+      "id": 6,
+      "type": "barchart",
+      "title": "Energy per day",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 0,
+        "y": 4,
+        "w": 12,
+        "h": 9
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"consumption_chunk\" and r.installationId == \"${installationId}\" and r._field == \"kwh\")\n  |> group(columns: [\"date\"])\n  |> sum()\n  |> group()\n  |> map(fn: (r) => ({date: r.date, kwh: r._value}))\n  |> sort(columns: [\"date\"])"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "kwatth",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          }
+        },
+        "overrides": []
+      },
+      "options": {
+        "xField": "date",
+        "showValue": "never",
+        "legend": {
+          "showLegend": false
+        },
+        "xTickLabelRotation": -45
+      }
+    },
+    {
+      "id": 7,
+      "type": "barchart",
+      "title": "Distance per day",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 12,
+        "y": 4,
+        "w": 12,
+        "h": 9
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"consumption_chunk\" and r.installationId == \"${installationId}\" and r._field == \"km\")\n  |> group(columns: [\"date\"])\n  |> sum()\n  |> group()\n  |> map(fn: (r) => ({date: r.date, km: r._value}))\n  |> sort(columns: [\"date\"])"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "suffix: km",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          }
+        },
+        "overrides": []
+      },
+      "options": {
+        "xField": "date",
+        "showValue": "never",
+        "legend": {
+          "showLegend": false
+        },
+        "xTickLabelRotation": -45
+      }
+    },
+    {
+      "id": 8,
+      "type": "barchart",
+      "title": "Efficiency per day (kWh/100 km)",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 0,
+        "y": 13,
+        "w": 24,
+        "h": 8
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"consumption_chunk\" and r.installationId == \"${installationId}\" and (r._field == \"km\" or r._field == \"kwh\"))\n  |> group(columns: [\"date\", \"_field\"])\n  |> sum()\n  |> group()\n  |> pivot(rowKey: [\"date\"], columnKey: [\"_field\"], valueColumn: \"_value\")\n  |> filter(fn: (r) => r.km >= 1.0)\n  |> map(fn: (r) => ({date: r.date, efficiency: r.kwh * 100.0 / r.km}))\n  |> sort(columns: [\"date\"])"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "suffix: kWh/100 km",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          }
+        },
+        "overrides": []
+      },
+      "options": {
+        "xField": "date",
+        "showValue": "never",
+        "legend": {
+          "showLegend": false
+        },
+        "xTickLabelRotation": -45
+      }
+    }
+  ]
+}
diff --git a/k8s/grafana/dashboards/live.json b/k8s/grafana/dashboards/live.json
new file mode 100644
index 0000000..73605d9
--- /dev/null
+++ b/k8s/grafana/dashboards/live.json
@@ -0,0 +1,647 @@
+{
+  "uid": "mg4-live",
+  "title": "MG4 - Live",
+  "description": "Live telemetry from the car, as stored before it is forwarded to ABRP.",
+  "tags": [
+    "mg4"
+  ],
+  "timezone": "browser",
+  "editable": false,
+  "graphTooltip": 1,
+  "schemaVersion": 39,
+  "version": 1,
+  "time": {
+    "from": "now-24h",
+    "to": "now"
+  },
+  "refresh": "30s",
+  "templating": {
+    "list": [
+      {
+        "name": "installationId",
+        "label": "Car",
+        "type": "query",
+        "datasource": {
+          "type": "influxdb",
+          "uid": "mg4-influxdb"
+        },
+        "query": "import \"influxdata/influxdb/schema\"\nschema.tagValues(bucket: \"mg4\", tag: \"installationId\", start: -400d)",
+        "definition": "installationId tag values",
+        "refresh": 1,
+        "includeAll": false,
+        "multi": false,
+        "current": {},
+        "hide": 0,
+        "sort": 1
+      },
+      {
+        "name": "usableKwh",
+        "label": "Usable battery capacity (kWh)",
+        "type": "constant",
+        "query": "50.8",
+        "hide": 2,
+        "description": "MG4 51 kWh battery: 50.8 kWh usable."
+      }
+    ]
+  },
+  "annotations": {
+    "list": []
+  },
+  "panels": [
+    {
+      "id": 1,
+      "type": "stat",
+      "title": "State of charge",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 0,
+        "y": 0,
+        "w": 4,
+        "h": 4
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: -30d)\n  |> filter(fn: (r) => r._measurement == \"telemetry\" and r.installationId == \"${installationId}\" and r._field == \"soc\")\n  |> last()"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "percent",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          },
+          "decimals": 0
+        },
+        "overrides": []
+      },
+      "options": {
+        "reduceOptions": {
+          "calcs": [
+            "lastNotNull"
+          ],
+          "fields": "",
+          "values": false
+        },
+        "colorMode": "value",
+        "graphMode": "none",
+        "textMode": "value"
+      }
+    },
+    {
+      "id": 2,
+      "type": "stat",
+      "title": "Range",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 4,
+        "y": 0,
+        "w": 4,
+        "h": 4
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: -30d)\n  |> filter(fn: (r) => r._measurement == \"telemetry\" and r.installationId == \"${installationId}\" and r._field == \"est_battery_range\")\n  |> last()"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "suffix: km",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          },
+          "decimals": 0
+        },
+        "overrides": []
+      },
+      "options": {
+        "reduceOptions": {
+          "calcs": [
+            "lastNotNull"
+          ],
+          "fields": "",
+          "values": false
+        },
+        "colorMode": "value",
+        "graphMode": "none",
+        "textMode": "value"
+      }
+    },
+    {
+      "id": 3,
+      "type": "stat",
+      "title": "Odometer",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 8,
+        "y": 0,
+        "w": 4,
+        "h": 4
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: -30d)\n  |> filter(fn: (r) => r._measurement == \"telemetry\" and r.installationId == \"${installationId}\" and r._field == \"odometer\")\n  |> last()"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "suffix: km",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          },
+          "decimals": 0
+        },
+        "overrides": []
+      },
+      "options": {
+        "reduceOptions": {
+          "calcs": [
+            "lastNotNull"
+          ],
+          "fields": "",
+          "values": false
+        },
+        "colorMode": "value",
+        "graphMode": "none",
+        "textMode": "value"
+      }
+    },
+    {
+      "id": 4,
+      "type": "stat",
+      "title": "Climate setpoint",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 12,
+        "y": 0,
+        "w": 4,
+        "h": 4
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: -30d)\n  |> filter(fn: (r) => r._measurement == \"telemetry\" and r.installationId == \"${installationId}\" and r._field == \"hvac_setpoint\")\n  |> last()"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "celsius",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          },
+          "decimals": 0
+        },
+        "overrides": []
+      },
+      "options": {
+        "reduceOptions": {
+          "calcs": [
+            "lastNotNull"
+          ],
+          "fields": "",
+          "values": false
+        },
+        "colorMode": "value",
+        "graphMode": "none",
+        "textMode": "value"
+      }
+    },
+    {
+      "id": 5,
+      "type": "stat",
+      "title": "Last update",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 16,
+        "y": 0,
+        "w": 4,
+        "h": 4
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: -30d)\n  |> filter(fn: (r) => r._measurement == \"telemetry\" and r.installationId == \"${installationId}\" and r._field == \"soc\")\n  |> last()\n  |> map(fn: (r) => ({_value: int(v: r._time) / 1000000}))"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "dateTimeFromNow",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          }
+        },
+        "overrides": []
+      },
+      "options": {
+        "reduceOptions": {
+          "calcs": [
+            "lastNotNull"
+          ],
+          "fields": "",
+          "values": false
+        },
+        "colorMode": "value",
+        "graphMode": "none",
+        "textMode": "value"
+      },
+      "description": "When the car last reported."
+    },
+    {
+      "id": 6,
+      "type": "stat",
+      "title": "Energy in pack",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 20,
+        "y": 0,
+        "w": 4,
+        "h": 4
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: -30d)\n  |> filter(fn: (r) => r._measurement == \"telemetry\" and r.installationId == \"${installationId}\" and r._field == \"soc\")\n  |> last()\n  |> map(fn: (r) => ({_value: r._value / 100.0 * float(v: \"${usableKwh}\")}))"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "kwatth",
+          "color": {
+            "mode": "fixed",
+            "fixedColor": "#E0424C"
+          },
+          "decimals": 1
+        },
+        "overrides": []
+      },
+      "options": {
+        "reduceOptions": {
+          "calcs": [
+            "lastNotNull"
+          ],
+          "fields": "",
+          "values": false
+        },
+        "colorMode": "value",
+        "graphMode": "none",
+        "textMode": "value"
+      },
+      "description": "Computed: state of charge × usable capacity (dashboard constant usableKwh, 50.8 kWh for the 51 kWh battery). The car publishes no pack energy itself."
+    },
+    {
+      "id": 7,
+      "type": "timeseries",
+      "title": "State of charge and range",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 0,
+        "y": 4,
+        "w": 12,
+        "h": 8
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"telemetry\" and r.installationId == \"${installationId}\" and (r._field == \"soc\" or r._field == \"est_battery_range\"))\n  |> aggregateWindow(every: v.windowPeriod, fn: mean, createEmpty: false)\n  |> keep(columns: [\"_time\", \"_field\", \"_value\"])"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "percent",
+          "custom": {
+            "lineWidth": 2,
+            "fillOpacity": 8,
+            "spanNulls": 600000,
+            "showPoints": "never"
+          }
+        },
+        "overrides": [
+          {
+            "matcher": {
+              "id": "byRegexp",
+              "options": ".*est_battery_range.*"
+            },
+            "properties": [
+              {
+                "id": "unit",
+                "value": "suffix: km"
+              },
+              {
+                "id": "custom.axisPlacement",
+                "value": "right"
+              }
+            ]
+          }
+        ]
+      },
+      "options": {
+        "legend": {
+          "displayMode": "list",
+          "placement": "bottom"
+        },
+        "tooltip": {
+          "mode": "multi"
+        }
+      }
+    },
+    {
+      "id": 8,
+      "type": "timeseries",
+      "title": "Power and speed",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 12,
+        "y": 4,
+        "w": 12,
+        "h": 8
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"telemetry\" and r.installationId == \"${installationId}\" and (r._field == \"power\" or r._field == \"speed\"))\n  |> aggregateWindow(every: v.windowPeriod, fn: mean, createEmpty: false)\n  |> keep(columns: [\"_time\", \"_field\", \"_value\"])"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "kwatt",
+          "custom": {
+            "lineWidth": 2,
+            "fillOpacity": 8,
+            "spanNulls": 600000,
+            "showPoints": "never"
+          }
+        },
+        "overrides": [
+          {
+            "matcher": {
+              "id": "byRegexp",
+              "options": ".*speed.*"
+            },
+            "properties": [
+              {
+                "id": "unit",
+                "value": "velocitykmh"
+              },
+              {
+                "id": "custom.axisPlacement",
+                "value": "right"
+              }
+            ]
+          }
+        ]
+      },
+      "options": {
+        "legend": {
+          "displayMode": "list",
+          "placement": "bottom"
+        },
+        "tooltip": {
+          "mode": "multi"
+        }
+      },
+      "description": "Power is positive leaving the battery, negative while charging or regenerating."
+    },
+    {
+      "id": 9,
+      "type": "geomap",
+      "title": "Where the car was",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 0,
+        "y": 12,
+        "w": 12,
+        "h": 12
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"telemetry\" and r.installationId == \"${installationId}\" and (r._field == \"lat\" or r._field == \"lon\"))\n  |> pivot(rowKey: [\"_time\"], columnKey: [\"_field\"], valueColumn: \"_value\")\n  |> keep(columns: [\"_time\", \"lat\", \"lon\"])\n  |> sort(columns: [\"_time\"])"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {},
+        "overrides": []
+      },
+      "options": {
+        "view": {
+          "id": "fit",
+          "lat": 0,
+          "lon": 0,
+          "zoom": 15,
+          "padding": 10,
+          "allLayers": true
+        },
+        "controls": {
+          "showZoom": true,
+          "mouseWheelZoom": true
+        },
+        "basemap": {
+          "type": "default",
+          "name": "Basemap"
+        },
+        "layers": [
+          {
+            "type": "route",
+            "name": "Drive",
+            "config": {
+              "style": {
+                "color": {
+                  "fixed": "#E0424C"
+                },
+                "size": {
+                  "fixed": 3
+                },
+                "opacity": 0.9
+              }
+            },
+            "location": {
+              "mode": "coords",
+              "latitude": "lat",
+              "longitude": "lon"
+            }
+          }
+        ]
+      }
+    },
+    {
+      "id": 10,
+      "type": "timeseries",
+      "title": "Battery voltage and current",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 12,
+        "y": 12,
+        "w": 12,
+        "h": 6
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"telemetry\" and r.installationId == \"${installationId}\" and (r._field == \"voltage\" or r._field == \"current\"))\n  |> aggregateWindow(every: v.windowPeriod, fn: mean, createEmpty: false)\n  |> keep(columns: [\"_time\", \"_field\", \"_value\"])"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "volt",
+          "custom": {
+            "lineWidth": 2,
+            "fillOpacity": 8,
+            "spanNulls": 600000,
+            "showPoints": "never"
+          }
+        },
+        "overrides": [
+          {
+            "matcher": {
+              "id": "byRegexp",
+              "options": ".*current.*"
+            },
+            "properties": [
+              {
+                "id": "unit",
+                "value": "amp"
+              },
+              {
+                "id": "custom.axisPlacement",
+                "value": "right"
+              }
+            ]
+          }
+        ]
+      },
+      "options": {
+        "legend": {
+          "displayMode": "list",
+          "placement": "bottom"
+        },
+        "tooltip": {
+          "mode": "multi"
+        }
+      },
+      "description": "Traction battery. Current is negative while charging or regenerating."
+    },
+    {
+      "id": 11,
+      "type": "timeseries",
+      "title": "Tire pressures",
+      "datasource": {
+        "type": "influxdb",
+        "uid": "mg4-influxdb"
+      },
+      "gridPos": {
+        "x": 12,
+        "y": 18,
+        "w": 12,
+        "h": 6
+      },
+      "targets": [
+        {
+          "refId": "A",
+          "datasource": {
+            "type": "influxdb",
+            "uid": "mg4-influxdb"
+          },
+          "query": "from(bucket: \"mg4\")\n  |> range(start: v.timeRangeStart, stop: v.timeRangeStop)\n  |> filter(fn: (r) => r._measurement == \"telemetry\" and r.installationId == \"${installationId}\" and (r._field == \"tire_pressure_fl\" or r._field == \"tire_pressure_fr\" or r._field == \"tire_pressure_rl\" or r._field == \"tire_pressure_rr\"))\n  |> aggregateWindow(every: v.windowPeriod, fn: mean, createEmpty: false)\n  |> keep(columns: [\"_time\", \"_field\", \"_value\"])"
+        }
+      ],
+      "fieldConfig": {
+        "defaults": {
+          "unit": "pressurekpa",
+          "custom": {
+            "lineWidth": 2,
+            "fillOpacity": 8,
+            "spanNulls": 600000,
+            "showPoints": "never"
+          }
+        },
+        "overrides": []
+      },
+      "options": {
+        "legend": {
+          "displayMode": "list",
+          "placement": "bottom"
+        },
+        "tooltip": {
+          "mode": "multi"
+        }
+      }
+    }
+  ]
+}
diff --git a/k8s/grafana/datasources.yaml b/k8s/grafana/datasources.yaml
new file mode 100644
index 0000000..cf0094e
--- /dev/null
+++ b/k8s/grafana/datasources.yaml
@@ -0,0 +1,18 @@
+# Provisioned InfluxDB datasource. The URL comes from the environment (INFLUX_URL); the token is
+# a read-only one the Grafana pod's init container writes to /run/influx/token at each start
+# (grafana.yaml). No credential is stored in this file.
+apiVersion: 1
+datasources:
+  - name: InfluxDB (mg4)
+    uid: mg4-influxdb
+    type: influxdb
+    access: proxy
+    url: $INFLUX_URL
+    isDefault: true
+    editable: false
+    jsonData:
+      version: Flux
+      organization: mg4
+      defaultBucket: mg4
+    secureJsonData:
+      token: $__file{/run/influx/token}
diff --git a/k8s/influxdb.yaml b/k8s/influxdb.yaml
new file mode 100644
index 0000000..03247a5
--- /dev/null
+++ b/k8s/influxdb.yaml
@@ -0,0 +1,134 @@
+# InfluxDB 2, cluster-internal only. On first start (empty volume) the image's setup mode
+# creates the org, the bucket and the admin token from the influxdb-auth Secret; on later
+# starts those variables are ignored and the data on the volume wins.
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: influxdb
+  namespace: mg4
+  labels:
+    app.kubernetes.io/name: influxdb
+    app.kubernetes.io/part-of: mg4
+spec:
+  serviceName: influxdb
+  replicas: 1
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: influxdb
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: influxdb
+        app.kubernetes.io/part-of: mg4
+    spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 1000
+        runAsGroup: 1000
+        fsGroup: 1000
+        seccompProfile:
+          type: RuntimeDefault
+      containers:
+        - name: influxdb
+          image: docker.io/library/influxdb:2.7.12-alpine
+          ports:
+            - name: http
+              containerPort: 8086
+          env:
+            - name: INFLUXD_REPORTING_DISABLED
+              value: "true"
+            - name: DOCKER_INFLUXDB_INIT_MODE
+              value: setup
+            - name: DOCKER_INFLUXDB_INIT_ORG
+              value: mg4
+            - name: DOCKER_INFLUXDB_INIT_BUCKET
+              value: mg4
+            - name: DOCKER_INFLUXDB_INIT_USERNAME
+              value: admin
+            - name: DOCKER_INFLUXDB_INIT_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: influxdb-auth
+                  key: admin-password
+            - name: DOCKER_INFLUXDB_INIT_ADMIN_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: influxdb-auth
+                  key: admin-token
+          volumeMounts:
+            - name: data
+              mountPath: /var/lib/influxdb2
+            - name: config
+              mountPath: /etc/influxdb2
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: http
+            periodSeconds: 10
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: http
+            initialDelaySeconds: 30
+            periodSeconds: 30
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              memory: 1Gi
+          securityContext:
+            allowPrivilegeEscalation: false
+            capabilities:
+              drop: ["ALL"]
+      volumes:
+        - name: config
+          emptyDir: {}
+  volumeClaimTemplates:
+    - metadata:
+        name: data
+      spec:
+        accessModes: ["ReadWriteOnce"]
+        # No storageClassName: the cluster's default class is used.
+        resources:
+          requests:
+            storage: 10Gi
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: influxdb
+  namespace: mg4
+  labels:
+    app.kubernetes.io/name: influxdb
+    app.kubernetes.io/part-of: mg4
+spec:
+  selector:
+    app.kubernetes.io/name: influxdb
+  ports:
+    - name: http
+      port: 8086
+      targetPort: http
+---
+# Only the server and Grafana may reach InfluxDB. Has no effect on a CNI without
+# NetworkPolicy support.
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: influxdb-from-server-and-grafana
+  namespace: mg4
+spec:
+  podSelector:
+    matchLabels:
+      app.kubernetes.io/name: influxdb
+  policyTypes: ["Ingress"]
+  ingress:
+    - from:
+        - podSelector:
+            matchLabels:
+              app.kubernetes.io/name: mg4-server
+        - podSelector:
+            matchLabels:
+              app.kubernetes.io/name: grafana
+      ports:
+        - port: 8086
diff --git a/k8s/ingress.yaml b/k8s/ingress.yaml
new file mode 100644
index 0000000..0719533
--- /dev/null
+++ b/k8s/ingress.yaml
@@ -0,0 +1,41 @@
+# Routes on the traefik-internal class, like the rest of *.k8s.stinnesbeck.com. No tls section
+# and no per-host Certificate: TLS is configured on Traefik's websecure entrypoint, which serves
+# the default certificate.
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: mg4-server
+  namespace: mg4
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - kind: Rule
+      match: Host(`car.k8s.stinnesbeck.com`)
+      services:
+        - kind: Service
+          name: mg4-server
+          namespace: mg4
+          port: 80
+---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: grafana
+  namespace: mg4
+  annotations:
+    kubernetes.io/ingress.class: traefik-internal
+spec:
+  entryPoints:
+    - websecure
+  routes:
+    - kind: Rule
+      # CHECK: placeholder host. It must be covered by Traefik's default certificate.
+      match: Host(`car-grafana.k8s.stinnesbeck.com`)
+      services:
+        - kind: Service
+          name: grafana
+          namespace: mg4
+          port: 80
diff --git a/k8s/kustomization.yaml b/k8s/kustomization.yaml
new file mode 100644
index 0000000..a82bbc6
--- /dev/null
+++ b/k8s/kustomization.yaml
@@ -0,0 +1,28 @@
+# Apply with `kubectl apply -k k8s/` — not `-f k8s/`, which skips the Grafana ConfigMaps below.
+# The Secrets are not included: create them from secrets/secrets.example.yaml first.
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - namespace.yaml
+  - influxdb.yaml
+  - server.yaml
+  - grafana.yaml
+  - ingress.yaml
+generatorOptions:
+  labels:
+    app.kubernetes.io/part-of: mg4
+configMapGenerator:
+  - name: grafana-datasources
+    namespace: mg4
+    files:
+      - mg4.yaml=grafana/datasources.yaml
+  - name: grafana-dashboard-provider
+    namespace: mg4
+    files:
+      - mg4.yaml=grafana/dashboards.yaml
+  - name: grafana-dashboards
+    namespace: mg4
+    files:
+      - grafana/dashboards/live.json
+      - grafana/dashboards/consumption.json
+      - grafana/dashboards/charging.json
diff --git a/k8s/namespace.yaml b/k8s/namespace.yaml
new file mode 100644
index 0000000..dc634fe
--- /dev/null
+++ b/k8s/namespace.yaml
@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: mg4
diff --git a/k8s/secrets/secrets.example.yaml b/k8s/secrets/secrets.example.yaml
new file mode 100644
index 0000000..1d20e10
--- /dev/null
+++ b/k8s/secrets/secrets.example.yaml
@@ -0,0 +1,43 @@
+# TEMPLATE ONLY — not part of kustomization.yaml. Copy it to k8s/secrets/secrets.yaml
+# (gitignored), fill in real values there, and apply that file yourself. Never put real values
+# in here. This folder is outside `kubectl apply -f k8s/`, which does not recurse.
+#
+#   openssl rand -hex 32     for every token and password below
+apiVersion: v1
+kind: Secret
+metadata:
+  name: influxdb-auth
+  namespace: mg4
+type: Opaque
+stringData:
+  admin-password: CHANGE-ME-at-least-8-characters
+  admin-token: CHANGE-ME-openssl-rand-hex-32
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: mg4-server
+  namespace: mg4
+type: Opaque
+stringData:
+  # The car's write token, entered in the app. At least 24 characters, or the server
+  # refuses to start.
+  INGEST_TOKEN: CHANGE-ME-openssl-rand-hex-32
+  # Approves a car on your phone when it pairs by QR code (at least 12 characters). Leave it
+  # empty to switch pairing off; then only the INGEST_TOKEN above works.
+  APPROVAL_PASSWORD: CHANGE-ME-at-least-12-characters
+  # A forge token that can only READ the nils/mg4 repository, for app updates (the server
+  # relays the releases to the car; k8s/README.md, "App updates"). Leave it empty to switch
+  # updates off.
+  FORGE_TOKEN: CHANGE-ME-read-only-forge-token
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: grafana-admin
+  namespace: mg4
+type: Opaque
+stringData:
+  # Grafana's admin login (user "admin"). Only read on first start: change it in Grafana
+  # afterwards, or reset it with grafana cli.
+  admin-password: CHANGE-ME
diff --git a/k8s/server.yaml b/k8s/server.yaml
new file mode 100644
index 0000000..e9912a6
--- /dev/null
+++ b/k8s/server.yaml
@@ -0,0 +1,99 @@
+# The car server (Go). One replica on purpose: pending pairing requests and the wrong-password
+# counters are kept in memory.
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: mg4-server
+  namespace: mg4
+  labels:
+    app.kubernetes.io/name: mg4-server
+    app.kubernetes.io/part-of: mg4
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: mg4-server
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: mg4-server
+        app.kubernetes.io/part-of: mg4
+    spec:
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 65532
+        runAsGroup: 65532
+        seccompProfile:
+          type: RuntimeDefault
+      containers:
+        - name: server
+          # 2.6.0, pinned by digest so a re-pushed tag cannot change what runs.
+          image: git.stinnesbeck.com/nils/mg4-server@sha256:35ff5973836620c1e69f06b00163cf95183f938cb9830355452d4161c6c46e33
+          ports:
+            - name: http
+              containerPort: 8080
+          env:
+            - name: INFLUX_URL
+              value: http://influxdb.mg4.svc:8086
+            - name: INFLUX_ORG
+              value: mg4
+            - name: INFLUX_BUCKET
+              value: mg4
+            # Where a phone reaches the server; the pairing QR code points here.
+            - name: PUBLIC_URL
+              value: https://car.k8s.stinnesbeck.com
+            # App updates: the releases of this repository, relayed to the car. Read with
+            # FORGE_TOKEN from the mg4-server Secret; leave that empty to switch updates off.
+            - name: FORGE_URL
+              value: https://git.stinnesbeck.com
+            - name: FORGE_REPO
+              value: nils/mg4
+            - name: INFLUX_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: influxdb-auth
+                  key: admin-token
+          # INGEST_TOKEN, APPROVAL_PASSWORD, FORGE_TOKEN.
+          envFrom:
+            - secretRef:
+                name: mg4-server
+          readinessProbe:
+            httpGet:
+              path: /v1/health
+              port: http
+            periodSeconds: 10
+          livenessProbe:
+            httpGet:
+              path: /v1/health
+              port: http
+            initialDelaySeconds: 5
+            periodSeconds: 30
+          resources:
+            requests:
+              cpu: 10m
+              memory: 32Mi
+            limits:
+              memory: 128Mi
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+            capabilities:
+              drop: ["ALL"]
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: mg4-server
+  namespace: mg4
+  labels:
+    app.kubernetes.io/name: mg4-server
+    app.kubernetes.io/part-of: mg4
+spec:
+  selector:
+    app.kubernetes.io/name: mg4-server
+  ports:
+    - name: http
+      port: 80
+      targetPort: http
diff --git a/mise.toml b/mise.toml
index 5253fd6..9e312ff 100644
--- a/mise.toml
+++ b/mise.toml
@@ -1,17 +1,16 @@
-# Environnement de développement — EVABRPUploader.
+# Development environment with mise (the Nix flake, `nix develop`, is the other way in).
 #
-# Commité volontairement : il décrit comment construire le projet, pas la machine de
-# quelqu'un. Les chemins passent par {{env.HOME}} / JAVA_HOME, jamais en dur.
-# Pour une surcharge locale (chemin de keystore, SDK ailleurs), créer un mise.local.toml
-# — celui-là reste ignoré par git.
+# Committed on purpose: it describes how to build the project, not someone's machine. Paths
+# go through {{env.HOME}} / JAVA_HOME, never hard-coded. For a local override (keystore path,
+# SDK elsewhere), create a mise.local.toml — that one stays ignored by git.
 #
-#   mise install       installe le JDK
-#   mise run bootstrap installe le SDK Android si absent
-#   mise run test      tests unitaires
-#   mise tasks         liste tout
+#   mise install       installs the JDK
+#   mise run bootstrap installs the Android SDK if missing
+#   mise run test      unit tests
+#   mise tasks         lists everything
 #
-# Pourquoi épingler le JDK : le JDK par défaut de la machine (26) n'est pas supporté
-# par AGP et fait échouer le build avec une erreur de version de classe peu parlante.
+# Why the JDK is pinned: the machine's default JDK (26) is not supported by AGP and fails the
+# build with an unhelpful class-version error.
 
 [tools]
 java = "17"
@@ -24,62 +23,61 @@ _.path = [
     "{{env.HOME}}/Android/Sdk/cmdline-tools/latest/bin",
 ]
 
-# Version du SDK requise par app/build.gradle (compileSdk = 36).
+# SDK version app/build.gradle needs (compileSdk = 36).
 COMPILE_SDK = "36"
 BUILD_TOOLS = "36.0.0"
 
-# Secrets de SIGNATURE D'APK — sans rapport avec la clé d'API ABRP, qui se saisit dans
-# l'application. À définir hors du dépôt : décommenter dans un mise.local.toml (ignoré
-# par git) et pointer vers un keystore local, JAMAIS vers un fichier du dépôt.
+# APK SIGNING secrets — nothing to do with the ABRP API key, which is entered in the app.
+# Set them outside the repository: uncomment in a mise.local.toml (ignored by git) and point
+# at a local keystore, NEVER at a file in the repository. The car build is signed by
+# `build-car` (flake.nix) instead.
 # SIGNING_KEYSTORE = "{{env.HOME}}/.keystores/signing.keystore"
 # SIGNING_STORE_PASSWORD = "…"
 # SIGNING_KEY_ALIAS = "platform"
 # SIGNING_KEY_PASSWORD = "…"
 
-# Gradle doit tourner sur le JDK que mise vient d'installer. Sans -Dorg.gradle.java.home,
-# Gradle peut réutiliser un daemon lancé par un autre JDK — typiquement celui embarqué par
-# l'extension Java de VS Code, un JRE 21 sans jlink : le build échoue alors sur
-# JdkImageTransform, avec un message qui n'a rien à voir avec le code.
-# JAVA_HOME est posé par [tools] ci-dessus : $JAVA_HOME est résolu par le shell au moment
-# de l'exécution, donc ceci reste portable d'une machine à l'autre.
-# ── Émulateur ────────────────────────────────────────────────────────────────────
+# Gradle must run on the JDK mise just installed. Without -Dorg.gradle.java.home, Gradle may
+# reuse a daemon started by another JDK — typically the one bundled with VS Code's Java
+# extension, a JRE 21 without jlink: the build then fails in JdkImageTransform, with a message
+# that has nothing to do with the code. JAVA_HOME is set by [tools] above; $JAVA_HOME is
+# resolved by the shell at run time, so this stays portable between machines.
+# ── Emulator ─────────────────────────────────────────────────────────────────────
 #
-# ATTENTION sur la fidélité : le véhicule tourne en AAOS 9 (API 28). Google ne publie
-# AUCUNE image système Automotive en dessous d'API 33 — vérifié avec sdkmanager --list.
-# Il n'existe donc pas d'émulateur qui reproduise à la fois l'OS et l'API voiture du MG4.
-# D'où deux profils, chacun fidèle sur un axe :
+# A WORD on fidelity: the car runs AAOS 9 (API 28). Google publishes NO Automotive system
+# image below API 33 — checked with sdkmanager --list. So no emulator reproduces both the OS
+# and the car API of the MG4. Hence two profiles, each faithful on one axis:
 #
-#   emulator-car     API 33 Automotive — a bien un CarPropertyManager, mauvaise version
-#                    d'OS. Pour tester le cycle de vie du service et le chemin voiture.
-#                    Les propriétés VENDEUR SAIC (0x216xxxxx : SOC, autonomie) n'existent
-#                    pas dans l'émulateur : ces lectures échoueront, c'est normal.
-#   emulator-screen  API 28 tablette — bonne version d'OS et bon écran (1920x1080 @ 160dpi,
-#                    12,8" HD comme le MG4), mais AUCUN service voiture.
-#                    Pour l'UI, les layouts et la densité.
+#   emulator-car     API 33 Automotive — has a CarPropertyManager, wrong OS version. For the
+#                    service lifecycle and the car path. SAIC VENDOR properties (0x216xxxxx:
+#                    SOC, range) do not exist in the emulator: those reads fail, as expected.
+#   emulator-screen  API 28 tablet — right OS version and right screen (1920x720 @ 160 dpi,
+#                    12.8" HD like the MG4), but NO car services. For the UI, layouts and
+#                    density. (The AOSP API 28 image also shares the car's platform key, so the
+#                    car build installs there as the system user.)
 #
-# Rien de tout cela ne remplace un essai sur le véhicule.
-# Densité cible du projet : 160 dpi.
-# Écran 12,8" 1920x1080. Firmware de référence : SWI68-29958-1300R69.
+# None of this replaces a test on the car.
+# Screen 1920x720 px at 160 dpi, as on the car (app window 1778x720). Reference firmware:
+# SWI68-29958-1300R69.
 
 EMU_CAR_AVD = "evabrp-car"
 EMU_CAR_IMAGE = "system-images;android-33;android-automotive;x86_64"
 EMU_SCREEN_AVD = "evabrp-screen"
 EMU_SCREEN_IMAGE = "system-images;android-28;google_apis;x86_64"
 EMU_WIDTH = "1920"
-EMU_HEIGHT = "1080"
+EMU_HEIGHT = "720"
 EMU_DENSITY = "160"
 
 [tasks.bootstrap]
-description = "Installe le SDK Android (platform + build-tools) s'il manque"
+description = "Installs the Android SDK (platform + build-tools) if missing"
 run = """
 set -e
 if [ -d "$ANDROID_HOME/platforms/android-$COMPILE_SDK" ]; then
-  echo "SDK $COMPILE_SDK déjà présent → rien à faire"
+  echo "SDK $COMPILE_SDK already present, nothing to do"
   exit 0
 fi
 mkdir -p "$ANDROID_HOME"
 if [ ! -x "$ANDROID_HOME/cmdline-tools/latest/bin/sdkmanager" ]; then
-  echo "Téléchargement des commandline-tools…"
+  echo "Downloading the command-line tools…"
   tmp=$(mktemp -d)
   curl -sSL -o "$tmp/tools.zip" \
     https://dl.google.com/android/repository/commandlinetools-linux-11076708_latest.zip
@@ -92,59 +90,59 @@ yes | "$ANDROID_HOME/cmdline-tools/latest/bin/sdkmanager" --sdk_root="$ANDROID_H
 "$ANDROID_HOME/cmdline-tools/latest/bin/sdkmanager" --sdk_root="$ANDROID_HOME" \
   "platform-tools" "platforms;android-$COMPILE_SDK" "build-tools;$BUILD_TOOLS"
 echo "sdk.dir=$ANDROID_HOME" > local.properties
-echo "SDK installé, local.properties écrit"
+echo "SDK installed, local.properties written"
 """
 
 [tasks.build]
-description = "Compile l'APK debug"
+description = "Builds the debug APK"
 run = './gradlew -Dorg.gradle.java.home=$JAVA_HOME assembleStableDebug'
 
 [tasks.test]
-description = "Tests unitaires JVM"
+description = "JVM unit tests"
 run = './gradlew -Dorg.gradle.java.home=$JAVA_HOME testStableDebugUnitTest testUnstableDebugUnitTest'
 
 [tasks.lint]
-description = "Analyse lint Android"
+description = "Android lint"
 run = './gradlew -Dorg.gradle.java.home=$JAVA_HOME lintStableDebug lintUnstableDebug'
 
 [tasks.permissions]
-description = "Contrôle de dérive des permissions (le même que la CI)"
+description = "Permission drift check (the same as CI)"
 run = "bash .github/security/check-permissions.sh"
 
 [tasks.check]
-description = "Ce que la CI exécute : permissions + lint + tests"
+description = "What CI runs: permissions + lint + tests"
 depends = ["permissions", "lint", "test"]
 
 [tasks.install]
-description = "Installe l'APK debug sur le véhicule connecté en ADB"
+description = "Installs the debug APK on the car connected over ADB"
 run = './gradlew -Dorg.gradle.java.home=$JAVA_HOME installStableDebug'
 
 [tasks.logs]
-description = "Suit les logs de l'app sur le véhicule"
-run = "adb logcat -s AbrpUploadService:V CarPropertyAdapter:V VhalProbe:V SecurePrefs:V OtaUpdater:V UpdateHook:V"
+description = "Follows the app's logs on the car"
+run = "adb logcat -s AbrpUploadService:V CarPropertyAdapter:V VhalProbe:V SecurePrefs:V OtaUpdater:V UpdateHook:V NilsMG4.Telemetry:V NilsMG4.Mongo:V NilsMG4.SteeringKey:V EVABRP.Boot:V"
 
 [tasks.release]
-description = "APK release des deux canaux (stable sans OTA, unstable avec OTA)"
+description = "Release APKs of both channels (stable without OTA, unstable with OTA)"
 run = './gradlew -Dorg.gradle.java.home=$JAVA_HOME assembleStableRelease assembleUnstableRelease'
 
 [tasks.clean]
 run = './gradlew -Dorg.gradle.java.home=$JAVA_HOME clean'
 
 [tasks.emulator-setup]
-description = "Installe l'émulateur + les images système et crée les deux AVD"
+description = "Installs the emulator and system images and creates both AVDs"
 run = '''
 set -e
 SDK="$ANDROID_HOME/cmdline-tools/latest/bin/sdkmanager"
 AVDM="$ANDROID_HOME/cmdline-tools/latest/bin/avdmanager"
 
 if [ ! -e /dev/kvm ]; then
-  echo "ERREUR : /dev/kvm absent — pas d'accélération matérielle, l'émulateur sera inutilisable." >&2
-  echo "Sous WSL2 : activer la virtualisation imbriquée côté Windows." >&2
+  echo "ERROR: /dev/kvm missing — no hardware acceleration, the emulator would be unusable." >&2
+  echo "On WSL2: enable nested virtualisation on the Windows side." >&2
   exit 1
 fi
 if ! id -nG | tr ' ' '\n' | grep -qx kvm; then
-  echo "ATTENTION : utilisateur absent du groupe kvm. Corriger avec :" >&2
-  echo "  sudo usermod -aG kvm $USER   # puis se reconnecter" >&2
+  echo "WARNING: user is not in the kvm group. Fix with:" >&2
+  echo "  sudo usermod -aG kvm $USER   # then log in again" >&2
 fi
 
 yes | "$SDK" --sdk_root="$ANDROID_HOME" --licenses > /dev/null
@@ -153,13 +151,13 @@ yes | "$SDK" --sdk_root="$ANDROID_HOME" --licenses > /dev/null
 create_avd() {
   name="$1"; image="$2"; device="$3"
   if "$AVDM" list avd 2>/dev/null | grep -q "Name: $name"; then
-    echo "AVD $name déjà présent"
+    echo "AVD $name already exists"
   else
     echo no | "$AVDM" create avd -n "$name" -k "$image" -d "$device" --force
   fi
   cfg="$HOME/.android/avd/$name.avd/config.ini"
-  # Écran du MG4. Sans ça l'AVD garde la densité du profil générique et les layouts
-  # ne ressemblent pas à ce que voit le conducteur.
+  # The MG4's screen. Without this the AVD keeps the generic profile's density and the
+  # layouts do not look like what the driver sees.
   sed -i '/^hw.lcd/d;/^disk.dataPartition.size/d' "$cfg"
   {
     echo "hw.lcd.width=$EMU_WIDTH"
@@ -167,55 +165,55 @@ create_avd() {
     echo "hw.lcd.density=$EMU_DENSITY"
     echo "disk.dataPartition.size=4G"
   } >> "$cfg"
-  echo "AVD $name configuré en ${EMU_WIDTH}x${EMU_HEIGHT} @ ${EMU_DENSITY}dpi"
+  echo "AVD $name set to ${EMU_WIDTH}x${EMU_HEIGHT} @ ${EMU_DENSITY}dpi"
 }
 
 create_avd "$EMU_CAR_AVD" "$EMU_CAR_IMAGE" "automotive_1024p_landscape"
 create_avd "$EMU_SCREEN_AVD" "$EMU_SCREEN_IMAGE" "pixel_c"
 '''
 
-# swiftshader_indirect, pas « host » : WSL2 n'expose aucun GPU réel (uniquement Mesa
-# llvmpipe). Avec -gpu host l'émulateur meurt au démarrage sur « Your GPU cannot be used
-# for hardware rendering », avant qu'aucune fenêtre n'apparaisse — d'où l'icône de tray
-# sans émulateur visible. Le rendu logiciel est plus lent, mais il démarre.
+# swiftshader_indirect, not "host": WSL2 exposes no real GPU (only Mesa llvmpipe). With
+# -gpu host the emulator dies at start-up on "Your GPU cannot be used for hardware
+# rendering", before any window appears — hence a tray icon and no visible emulator.
+# Software rendering is slower, but it starts.
 [tasks.emulator-car]
-description = "Lance l'émulateur Automotive (API 33 — a un CarPropertyManager)"
+description = "Starts the Automotive emulator (API 33 — has a CarPropertyManager)"
 run = '''
 set -e
 "$ANDROID_HOME/emulator/emulator" -avd "$EMU_CAR_AVD" \
   -gpu swiftshader_indirect -no-snapshot-save -no-boot-anim &
 "$ANDROID_HOME/platform-tools/adb" wait-for-device
-echo "Émulateur voiture prêt."
+echo "Car emulator ready."
 '''
 
 [tasks.emulator-screen]
-description = "Lance l'émulateur écran MG4 (API 28, 1920x1080 @ 160dpi — pas de service voiture)"
+description = "Starts the MG4 screen emulator (API 28, 1920x720 @ 160dpi — no car services)"
 run = '''
 set -e
 "$ANDROID_HOME/emulator/emulator" -avd "$EMU_SCREEN_AVD" \
   -gpu swiftshader_indirect -no-snapshot-save -no-boot-anim &
 "$ANDROID_HOME/platform-tools/adb" wait-for-device
-echo "Émulateur écran prêt."
+echo "Screen emulator ready."
 '''
 
 [tasks.emulator-stop]
-description = "Arrête l'émulateur en cours"
+description = "Stops the running emulator"
 run = '"$ANDROID_HOME/platform-tools/adb" emu kill || true'
 
 [tasks.run]
-description = "Compile, installe et lance l'APK sur l'émulateur ou le véhicule connecté"
+description = "Builds, installs and starts the APK on the emulator or the connected car"
 depends = ["build"]
 run = '''
 set -e
 ADB="$ANDROID_HOME/platform-tools/adb"
 if [ -z "$($ADB devices | sed '1d' | grep -w device || true)" ]; then
-  echo "Aucun appareil connecté. Lancer d'abord 'mise run emulator-car' ou 'mise run emulator-screen'," >&2
-  echo "ou brancher le véhicule en ADB." >&2
+  echo "No device connected. Start 'mise run emulator-car' or 'mise run emulator-screen' first," >&2
+  echo "or connect the car over ADB." >&2
   exit 1
 fi
 APK=$(ls -t app/build/outputs/apk/stable/debug/*.apk | head -1)
-echo "Installation de $APK"
+echo "Installing $APK"
 $ADB install -r -g "$APK"
-$ADB shell am start -n "com.evsuite.abrp/com.evsuite.abrp.MainActivity"
-echo "Lancé. Logs : mise run logs"
+$ADB shell am start -n "com.stinnesbeck.nilsmg4/com.evsuite.abrp.MainActivity"
+echo "Started. Logs: mise run logs"
 '''
diff --git a/screenshots/nilsmg4-2.8.2-overview.png b/screenshots/nilsmg4-2.8.2-overview.png
new file mode 100644
index 0000000..1bfb9bd
Binary files /dev/null and b/screenshots/nilsmg4-2.8.2-overview.png differ
diff --git a/server/.dockerignore b/server/.dockerignore
new file mode 100644
index 0000000..6f1931b
--- /dev/null
+++ b/server/.dockerignore
@@ -0,0 +1,4 @@
+*
+!go.mod
+!go.sum
+!*.go
diff --git a/server/Dockerfile b/server/Dockerfile
new file mode 100644
index 0000000..c373c44
--- /dev/null
+++ b/server/Dockerfile
@@ -0,0 +1,16 @@
+# The car server: one static Go binary on distroless, running as non-root.
+# Configuration comes from the environment at runtime; nothing secret is baked in.
+
+FROM docker.io/library/golang:1.26.9-alpine AS build
+WORKDIR /src
+ENV CGO_ENABLED=0 GOFLAGS=-trimpath GOTOOLCHAIN=local
+COPY go.mod go.sum ./
+RUN go mod download && go mod verify
+COPY *.go ./
+RUN go vet ./... && go test ./... && go build -ldflags="-s -w" -o /out/server .
+
+FROM gcr.io/distroless/static-debian12:nonroot
+COPY --from=build /out/server /server
+USER 65532:65532
+EXPOSE 8080
+ENTRYPOINT ["/server"]
diff --git a/server/README.md b/server/README.md
new file mode 100644
index 0000000..ba23ee7
--- /dev/null
+++ b/server/README.md
@@ -0,0 +1,123 @@
+# Nils' MG4 — car server
+
+A small Go service at car.k8s.stinnesbeck.com: the API the car writes to. Data lives in
+InfluxDB 2; Grafana reads it from there for the dashboards (`../k8s/grafana/`). The car sends
+its live data to ABRP itself; the server does not talk to ABRP (removed in 2.4.0).
+
+```
+car ──live telemetry───▶ server
+    ──daily chunks─────▶   │
+    ──charging sessions▶   ▼
+                       InfluxDB 2 ◀── Grafana
+```
+
+## Configuration
+
+Environment only; the server refuses to start when a required value is missing.
+
+| Name | Notes |
+|---|---|
+| `INFLUX_URL`, `INFLUX_TOKEN`, `INFLUX_ORG` | required; the token needs read/write on the bucket |
+| `INFLUX_BUCKET` | default `mg4` |
+| `INGEST_TOKEN` | required, at least 24 characters: `openssl rand -hex 32` |
+| `APPROVAL_PASSWORD` | optional, at least 12 characters; switches pairing on (see below) |
+| `PUBLIC_URL` | the address a phone uses, for the pairing QR code; derived from the request if empty |
+| `FORGE_URL`, `FORGE_REPO`, `FORGE_TOKEN` | optional; app updates (below). The token only needs to read the repository |
+| `LISTEN_ADDR` | default `:8080` |
+
+## Endpoints
+
+The ingest endpoints accept `Authorization: Bearer <token>` with either the shared `INGEST_TOKEN`
+or a paired car's own token. A paired token only works for the installation id it was paired
+with (403 otherwise); the shared token works for any.
+
+- `POST /v1/telemetry` — `{ installationId, samples: [...] }`, up to 500 samples in ABRP's `tlm`
+  field names and units (`utc` in epoch seconds; flags as 0/1 or booleans). Unknown fields are
+  dropped, known ones bounded: a value out of range is dropped on its own, and a sample without
+  a plausible time (before 2001, or more than an hour ahead) is dropped whole. The rest is stored
+  and the answer is `200 {stored, droppedCount, dropped}`, even when nothing was usable, since
+  the car would only send it again.
+- `PUT /v1/consumption/daily` — one delta chunk of a day's consumption.
+- `PUT /v1/charging-sessions/{sessionId}` — a finished DC session with its curve.
+- `GET /v1/consumption/history/{installationId}` — the car reads its own totals back.
+- `GET /v1/health` — `{"status":"ok"}`.
+
+A malformed request is a 400 naming the field; a database failure is a 500 without detail.
+
+## App updates
+
+`GET /v1/app/releases` and `GET /v1/app/assets/{release}/{asset}/{name}`, with the car's token:
+the repository's releases, read from the forge with `FORGE_TOKEN`, in GitHub's field names
+with download URLs pointing back at this server, and their attachments streamed through. The
+repository stays private and the forge token never reaches the car; redirects away from the
+forge are not followed. The car verifies everything itself (`OTA.md`). 404 when unset.
+
+## Settings from a phone
+
+The ABRP credentials are long to type on the car. With pairing on, the car (with its own token)
+opens `POST /v1/settings/start` `{installationId}` and shows `verificationUriComplete` as a QR
+code. The phone fills in the form at `/settings?code=…` (ABRP API key and user token, charging
+price, usable capacity; empty fields are left alone) and sends it with the approval password.
+The car polls `POST /v1/settings/poll` `{deviceCode}`: 202 pending, 200 with the values (handed
+out once, `Cache-Control: no-store`), 410 expired or unknown. A paired token only reaches its own
+installation's request. The values live in memory only, at most ten minutes, and are never
+stored, logged or put back into the page.
+
+## Pairing a car by QR code
+
+So nobody types a token in the car. Modelled on the OAuth device authorization grant (RFC 8628);
+on only when `APPROVAL_PASSWORD` is set.
+
+1. The car calls `POST /v1/pair/start` `{installationId}` and shows the returned
+   `verificationUriComplete` as a QR code, plus the short `userCode` (e.g. `K7F-3QX`).
+2. The phone opens `/pair?code=…`, the owner checks the code and approves with the approval
+   password. Five wrong passwords from one address lock that address out for a minute; other
+   addresses are unaffected (the address is the last `X-Forwarded-For` entry, which Traefik sets).
+   An address may hold three open requests; a car starting again replaces its own.
+3. The car polls `POST /v1/pair/poll` `{deviceCode}`: 202 pending, 200 with its own token
+   (handed out once), 403 denied, 410 expired (after 10 minutes) or unknown.
+
+Each car gets its own 43-character token; only its SHA-256 is stored (measurement `device` in
+the same bucket), and the token is only handed out, and only accepted, once the device is
+persisted, so a restart never loses a paired car. Manage cars with the approval password:
+
+```sh
+curl -H "Authorization: Bearer $APPROVAL_PASSWORD" https://car.k8s.stinnesbeck.com/v1/devices
+curl -X POST -H "Authorization: Bearer $APPROVAL_PASSWORD" https://car.k8s.stinnesbeck.com/v1/devices/<id>/revoke
+```
+
+## Storage
+
+One bucket, `installationId` tag on every point:
+
+| Measurement | Timestamp | Tags | Fields |
+|---|---|---|---|
+| `telemetry` | sample `utc` | — | the ABRP fields that were sent |
+| `consumption_chunk` | `recordedAt` | `date` | km, kwh, hours, socDrop, sohPercent |
+| `charging_session` | `startedAt` | `sessionId` | endedAtMs, duration, energy, cost, start/end SOC |
+| `charging_curve` | point time | `sessionId` | powerKw, socPercent |
+| `device` | paired at | `deviceId` | tokenHash, installationId, revoked |
+
+A point with the same measurement, tags and timestamp replaces the earlier one, so the car's
+retries are idempotent: a cached chunk is re-sent with its original `recordedAt`. Days and the
+lifetime total are summed from the chunks when read. Numbers are always written as floats,
+because InfluxDB fixes a field's type on first write.
+
+## Development
+
+```sh
+nix develop          # from the repository root: Go, govulncheck, InfluxDB 2
+cd server
+go test ./...
+govulncheck ./...
+```
+
+## Container image
+
+```sh
+podman build -t git.stinnesbeck.com/nils/mg4-server:<version> .
+podman push git.stinnesbeck.com/nils/mg4-server:<version>
+```
+
+The build runs `go vet` and the tests. The image is a static binary on distroless (about
+11 MB), running as UID 65532 on port 8080.
diff --git a/server/api.go b/server/api.go
new file mode 100644
index 0000000..a9d380e
--- /dev/null
+++ b/server/api.go
@@ -0,0 +1,228 @@
+package main
+
+import (
+	"crypto/subtle"
+	"encoding/json"
+	"errors"
+	"io"
+	"log/slog"
+	"net/http"
+	"strings"
+	"time"
+)
+
+// API serves the car. Every endpoint but /v1/health needs the ingest token.
+//
+//	POST /v1/telemetry                           live samples, stored
+//	PUT  /v1/consumption/daily                   one delta chunk of a day's consumption
+//	PUT  /v1/charging-sessions/{sessionId}       one finished DC charging session
+//	GET  /v1/consumption/history/{installationId} the car reads its own totals back
+//	GET  /v1/health                              unauthenticated liveness probe
+//	     /v1/settings/…, /settings                settings typed on a phone (handoff_http.go)
+//	GET  /v1/app/…                               app updates from the forge (releases.go)
+//
+// A car authenticates with the shared INGEST_TOKEN or with its own token from pairing
+// (pairing_http.go).
+type API struct {
+	Store       Store
+	IngestToken string
+	Pairing     *Pairing
+	// Handoff carries settings typed on a phone to the car (handoff.go).
+	Handoff *Handoff
+	// Releases relays the app's releases from the private forge to the car (releases.go).
+	Releases *Releases
+	// PublicURL is the server's address as a phone reaches it, for the pairing QR code;
+	// derived from the request when empty.
+	PublicURL string
+}
+
+const maxBodyBytes = 512 * 1024
+
+func (a *API) Routes() http.Handler {
+	mux := http.NewServeMux()
+	mux.HandleFunc("GET /v1/health", func(w http.ResponseWriter, r *http.Request) {
+		writeJSON(w, http.StatusOK, map[string]string{"status": "ok"})
+	})
+	mux.HandleFunc("POST /v1/telemetry", a.ingest(a.telemetry))
+	mux.HandleFunc("PUT /v1/consumption/daily", a.ingest(a.consumption))
+	mux.HandleFunc("PUT /v1/charging-sessions/{sessionId}", a.ingest(a.chargingSession))
+	mux.HandleFunc("GET /v1/consumption/history/{installationId}", a.ingest(a.history))
+	a.pairingRoutes(mux)
+	a.handoffRoutes(mux)
+	a.releaseRoutes(mux)
+	return mux
+}
+
+// caller is who sent an ingest request. A paired car's token is bound to the installation
+// id it was paired with; the shared INGEST_TOKEN may write and read for any.
+type caller struct {
+	installationID string // empty for the shared token
+}
+
+// mayUse reports whether the caller may write or read data stored under id.
+func (c caller) mayUse(id string) bool {
+	return c.installationID == "" || strings.EqualFold(c.installationID, id)
+}
+
+// errOtherInstallation is a 403: a paired car's token used for another car's data.
+var errOtherInstallation = errors.New("this token belongs to another installation; pair again after changing the installation id")
+
+// authenticate accepts the shared token (compared in constant time; main refuses to start
+// with one under 24 characters, so an empty or short one never matches) or a paired car's
+// own, unrevoked token.
+func (a *API) authenticate(r *http.Request) (caller, bool) {
+	header := r.Header.Get("Authorization")
+	supplied, ok := strings.CutPrefix(header, "Bearer ")
+	if !ok || supplied == "" {
+		return caller{}, false
+	}
+	if len(a.IngestToken) >= minIngestTokenLength &&
+		subtle.ConstantTimeCompare([]byte(supplied), []byte(a.IngestToken)) == 1 {
+		return caller{}, true
+	}
+	d, ok := a.Pairing.Authorized(supplied)
+	if !ok {
+		return caller{}, false
+	}
+	return caller{installationID: d.InstallationID}, true
+}
+
+type handler func(w http.ResponseWriter, r *http.Request, c caller, body []byte) error
+
+// ingest wraps a handler with the token check, the body limit and error mapping: a
+// validation failure is a 400 naming the field, another car's data a 403; anything else
+// is a 500 whose detail stays in the server log.
+func (a *API) ingest(h handler) http.HandlerFunc {
+	return func(w http.ResponseWriter, r *http.Request) {
+		c, ok := a.authenticate(r)
+		if !ok {
+			writeJSON(w, http.StatusUnauthorized, map[string]string{"error": "unauthorized"})
+			return
+		}
+		body, err := io.ReadAll(io.LimitReader(r.Body, maxBodyBytes+1))
+		if err != nil {
+			writeJSON(w, http.StatusBadRequest, map[string]string{"error": "body could not be read"})
+			return
+		}
+		if len(body) > maxBodyBytes {
+			writeJSON(w, http.StatusBadRequest, map[string]string{"error": "body is too large"})
+			return
+		}
+		if err := h(w, r, c, body); err != nil {
+			if errors.Is(err, errOtherInstallation) {
+				writeJSON(w, http.StatusForbidden, map[string]string{"error": err.Error()})
+				return
+			}
+			var verr *ValidationError
+			if errors.As(err, &verr) {
+				writeJSON(w, http.StatusBadRequest, map[string]string{"error": verr.Error()})
+				return
+			}
+			slog.Error("request failed", "method", r.Method, "path", r.URL.Path, "error", err)
+			writeJSON(w, http.StatusInternalServerError, map[string]string{"error": "internal server error"})
+		}
+	}
+}
+
+// maxDroppedListed caps the dropped values named in a telemetry response and log line.
+const maxDroppedListed = 20
+
+// telemetry stores the batch. The answer says how many samples were stored and what was
+// dropped; a batch with nothing usable is still a 200, since sending it again would not help.
+func (a *API) telemetry(w http.ResponseWriter, r *http.Request, c caller, body []byte) error {
+	batch, err := validateTelemetryBatch(body, time.Now())
+	if err != nil {
+		return err
+	}
+	if !c.mayUse(batch.InstallationID) {
+		return errOtherInstallation
+	}
+	if len(batch.Samples) > 0 {
+		if err := a.Store.WriteTelemetry(r.Context(), batch.InstallationID, batch.Samples); err != nil {
+			return err
+		}
+	}
+	dropped := batch.Dropped
+	if len(dropped) > maxDroppedListed {
+		dropped = dropped[:maxDroppedListed]
+	}
+	if len(batch.Dropped) > 0 {
+		slog.Warn("telemetry values dropped", "installation", batch.InstallationID,
+			"count", len(batch.Dropped), "first", dropped)
+	}
+	writeJSON(w, http.StatusOK, map[string]any{
+		"stored":       len(batch.Samples),
+		"droppedCount": len(batch.Dropped),
+		"dropped":      append([]string{}, dropped...),
+	})
+	return nil
+}
+
+// consumption stores one delta chunk at its recordedAt. Reads add a day's chunks up, so a
+// chunk the car re-sends from its offline cache replaces itself instead of counting twice.
+func (a *API) consumption(w http.ResponseWriter, r *http.Request, c caller, body []byte) error {
+	chunk, err := validateConsumption(body)
+	if err != nil {
+		return err
+	}
+	if !c.mayUse(chunk.InstallationID) {
+		return errOtherInstallation
+	}
+	if err := a.Store.WriteConsumptionChunk(r.Context(), chunk); err != nil {
+		return err
+	}
+	w.WriteHeader(http.StatusNoContent)
+	return nil
+}
+
+func (a *API) chargingSession(w http.ResponseWriter, r *http.Request, c caller, body []byte) error {
+	session, err := validateChargingSession(body, r.PathValue("sessionId"))
+	if err != nil {
+		return err
+	}
+	if !c.mayUse(session.InstallationID) {
+		return errOtherInstallation
+	}
+	if err := a.Store.WriteChargingSession(r.Context(), session); err != nil {
+		return err
+	}
+	w.WriteHeader(http.StatusNoContent)
+	return nil
+}
+
+// history is the car's read-back of its own uploaded totals, so an app reinstall does not
+// blank its Consumption tab. Up to 400 days, newest first, plus the lifetime sum of all.
+func (a *API) history(w http.ResponseWriter, r *http.Request, c caller, _ []byte) error {
+	id, err := validUUID(r.PathValue("installationId"), "installationId")
+	if err != nil {
+		return err
+	}
+	if !c.mayUse(id) {
+		return errOtherInstallation
+	}
+	chunks, err := a.Store.ReadConsumptionChunks(r.Context(), id)
+	if err != nil {
+		return err
+	}
+	days := aggregateDays(chunks)
+	var lifetime Totals
+	if len(days) > 0 {
+		lifetime = days[0].Lifetime
+	}
+	if len(days) > 400 {
+		days = days[:400]
+	}
+	writeJSON(w, http.StatusOK, struct {
+		Records  []DailyConsumption `json:"records"`
+		Lifetime Totals             `json:"lifetime"`
+	}{Records: days, Lifetime: lifetime})
+	return nil
+}
+
+func writeJSON(w http.ResponseWriter, status int, value any) {
+	w.Header().Set("Content-Type", "application/json")
+	w.WriteHeader(status)
+	if err := json.NewEncoder(w).Encode(value); err != nil {
+		slog.Warn("response not written", "error", err)
+	}
+}
diff --git a/server/api_test.go b/server/api_test.go
new file mode 100644
index 0000000..fb53862
--- /dev/null
+++ b/server/api_test.go
@@ -0,0 +1,206 @@
+package main
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"sync"
+	"testing"
+)
+
+type fakeStore struct {
+	mu        sync.Mutex
+	telemetry []TelemetrySample
+	chunks    []ConsumptionChunk
+	sessions  []ChargingSession
+	devices   []Device
+	fail      error
+}
+
+func (f *fakeStore) WriteTelemetry(_ context.Context, _ string, s []TelemetrySample) error {
+	f.mu.Lock()
+	defer f.mu.Unlock()
+	if f.fail != nil {
+		return f.fail
+	}
+	f.telemetry = append(f.telemetry, s...)
+	return nil
+}
+
+func (f *fakeStore) WriteConsumptionChunk(_ context.Context, c ConsumptionChunk) error {
+	f.mu.Lock()
+	defer f.mu.Unlock()
+	if f.fail != nil {
+		return f.fail
+	}
+	f.chunks = append(f.chunks, c)
+	return nil
+}
+
+func (f *fakeStore) WriteChargingSession(_ context.Context, s ChargingSession) error {
+	f.mu.Lock()
+	defer f.mu.Unlock()
+	f.sessions = append(f.sessions, s)
+	return f.fail
+}
+
+func (f *fakeStore) SaveDevice(_ context.Context, d Device) error {
+	f.mu.Lock()
+	defer f.mu.Unlock()
+	if f.fail != nil {
+		return f.fail
+	}
+	f.devices = append(f.devices, d)
+	return nil
+}
+
+func (f *fakeStore) LoadDevices(context.Context) ([]Device, error) {
+	f.mu.Lock()
+	defer f.mu.Unlock()
+	return f.devices, f.fail
+}
+
+func (f *fakeStore) ReadConsumptionChunks(context.Context, string) ([]ConsumptionChunk, error) {
+	f.mu.Lock()
+	defer f.mu.Unlock()
+	return f.chunks, f.fail
+}
+
+const (
+	testToken            = "ingest-test-token-0123456789abcdef"
+	testApprovalPassword = "approval-password-123"
+)
+
+func newTestAPI() (*API, *fakeStore) {
+	store := &fakeStore{}
+	return &API{Store: store, IngestToken: testToken,
+		Pairing: NewPairing(testApprovalPassword, nil), Handoff: NewHandoff(), PublicURL: "https://car.example.com"}, store
+}
+
+func do(t *testing.T, h http.Handler, method, path, token, body string) *httptest.ResponseRecorder {
+	t.Helper()
+	req := httptest.NewRequest(method, path, strings.NewReader(body))
+	if token != "" {
+		req.Header.Set("Authorization", "Bearer "+token)
+	}
+	rec := httptest.NewRecorder()
+	h.ServeHTTP(rec, req)
+	return rec
+}
+
+func TestHealthNeedsNoToken(t *testing.T) {
+	api, _ := newTestAPI()
+	rec := do(t, api.Routes(), "GET", "/v1/health", "", "")
+	if rec.Code != 200 || strings.TrimSpace(rec.Body.String()) != `{"status":"ok"}` {
+		t.Fatalf("%d %s", rec.Code, rec.Body)
+	}
+}
+
+func TestEveryOtherEndpointNeedsTheIngestToken(t *testing.T) {
+	api, _ := newTestAPI()
+	h := api.Routes()
+	for _, c := range []struct{ method, path string }{
+		{"POST", "/v1/telemetry"},
+		{"PUT", "/v1/consumption/daily"},
+		{"PUT", "/v1/charging-sessions/" + testSession},
+		{"GET", "/v1/consumption/history/" + testInstallation},
+	} {
+		for _, token := range []string{"", "wrong-token-0123456789abcdef", testToken + "x"} {
+			if rec := do(t, h, c.method, c.path, token, "{}"); rec.Code != 401 {
+				t.Errorf("%s %s with %q: want 401, got %d", c.method, c.path, token, rec.Code)
+			}
+		}
+	}
+}
+
+func TestTelemetryIsStoredAndBadValuesAreDropped(t *testing.T) {
+	api, store := newTestAPI()
+	h := api.Routes()
+	rec := do(t, h, "POST", "/v1/telemetry", testToken, string(telemetryBody(`{"utc":1790000000,"soc":80}`)))
+	if rec.Code != 200 || len(store.telemetry) != 1 || !strings.Contains(rec.Body.String(), `"stored":1`) {
+		t.Fatalf("%d %s, stored %d", rec.Code, rec.Body, len(store.telemetry))
+	}
+	// One bad value costs that value, not the batch: the car drops what the server rejects.
+	rec = do(t, h, "POST", "/v1/telemetry", testToken,
+		string(telemetryBody(`{"utc":1790000000,"soc":120,"speed":-3},{"utc":1790000015,"soc":79}`)))
+	if rec.Code != 200 || len(store.telemetry) != 3 || !strings.Contains(rec.Body.String(), "samples[0].soc") ||
+		!strings.Contains(rec.Body.String(), "samples[0].speed") || !strings.Contains(rec.Body.String(), `"stored":2`) {
+		t.Fatalf("%d %s, stored %d", rec.Code, rec.Body, len(store.telemetry))
+	}
+	if _, ok := store.telemetry[1].Numbers["soc"]; ok {
+		t.Fatal("out-of-range soc stored")
+	}
+	// Nothing usable is still a 200: sending it again would not help.
+	rec = do(t, h, "POST", "/v1/telemetry", testToken, string(telemetryBody(`{"utc":5}`)))
+	if rec.Code != 200 || len(store.telemetry) != 3 || !strings.Contains(rec.Body.String(), `"stored":0`) {
+		t.Fatalf("%d %s", rec.Code, rec.Body)
+	}
+	// A malformed request is still a 400.
+	if rec := do(t, h, "POST", "/v1/telemetry", testToken, `{"installationId":"nope","samples":[]}`); rec.Code != 400 {
+		t.Fatalf("malformed: %d", rec.Code)
+	}
+	if rec := do(t, h, "GET", "/v1/telemetry", testToken, ""); rec.Code != 405 {
+		t.Fatalf("GET on a POST route: want 405, got %d", rec.Code)
+	}
+}
+
+func TestAFailedWriteIsA500WithoutDetail(t *testing.T) {
+	api, store := newTestAPI()
+	store.fail = errors.New("influx says: token xyz rejected")
+	rec := do(t, api.Routes(), "POST", "/v1/telemetry", testToken, string(telemetryBody(`{"utc":1790000000,"soc":80}`)))
+	if rec.Code != 500 || strings.Contains(rec.Body.String(), "xyz") {
+		t.Fatalf("%d %s", rec.Code, rec.Body)
+	}
+}
+
+func TestOversizedBodiesAreRejected(t *testing.T) {
+	api, _ := newTestAPI()
+	big := `{"x":"` + strings.Repeat("a", maxBodyBytes) + `"}`
+	if rec := do(t, api.Routes(), "PUT", "/v1/consumption/daily", testToken, big); rec.Code != 400 {
+		t.Fatalf("want 400, got %d", rec.Code)
+	}
+}
+
+func TestHistoryReturnsDaysNewestFirstAndTheLifetime(t *testing.T) {
+	api, _ := newTestAPI()
+	h := api.Routes()
+	day := func(date string, at int64) string {
+		return `{"installationId":"` + testInstallation + `","date":"` + date + `","recordedAt":` +
+			jsonInt(at) + `,"day":{"km":2.5,"kwh":0.4,"hours":0.03,"socDrop":0.6}}`
+	}
+	// Two chunks on one day and one on the next. Retry dedupe is InfluxDB's overwrite and is
+	// covered by the end-to-end check, not this fake.
+	for _, body := range []string{day("2026-10-16", 1000), day("2026-10-16", 2000), day("2026-10-17", 3000)} {
+		if rec := do(t, h, "PUT", "/v1/consumption/daily", testToken, body); rec.Code != 204 {
+			t.Fatalf("chunk: %d %s", rec.Code, rec.Body)
+		}
+	}
+	rec := do(t, h, "GET", "/v1/consumption/history/"+testInstallation, testToken, "")
+	if rec.Code != 200 {
+		t.Fatalf("%d %s", rec.Code, rec.Body)
+	}
+	var got struct {
+		Records []struct {
+			Date string `json:"date"`
+			Day  Totals `json:"day"`
+		} `json:"records"`
+		Lifetime Totals `json:"lifetime"`
+	}
+	if err := json.Unmarshal(rec.Body.Bytes(), &got); err != nil {
+		t.Fatal(err)
+	}
+	if len(got.Records) != 2 || got.Records[0].Date != "2026-10-17" || got.Records[1].Day.Km != 5 || got.Lifetime.Km != 7.5 {
+		t.Fatalf("%s", rec.Body)
+	}
+	if rec := do(t, h, "GET", "/v1/consumption/history/not-a-uuid", testToken, ""); rec.Code != 400 {
+		t.Fatalf("bad id: want 400, got %d", rec.Code)
+	}
+}
+
+func jsonInt(v int64) string {
+	b, _ := json.Marshal(v)
+	return string(b)
+}
diff --git a/server/days.go b/server/days.go
new file mode 100644
index 0000000..2651bc6
--- /dev/null
+++ b/server/days.go
@@ -0,0 +1,51 @@
+package main
+
+import "sort"
+
+// aggregateDays folds chunks into days, newest day first, each with its running lifetime
+// total. Pure, so the arithmetic is tested without a database.
+func aggregateDays(chunks []ConsumptionChunk) []DailyConsumption {
+	type day struct {
+		DailyConsumption
+		sohAt  int64
+		hasSoh bool
+	}
+	byDate := map[string]*day{}
+	for _, chunk := range chunks {
+		d, ok := byDate[chunk.Date]
+		if !ok {
+			d = &day{DailyConsumption: DailyConsumption{
+				InstallationID: chunk.InstallationID,
+				Date:           chunk.Date,
+				RecordedAt:     chunk.RecordedAt,
+			}}
+			byDate[chunk.Date] = d
+		}
+		d.Day.add(chunk.Day)
+		if chunk.RecordedAt.After(d.RecordedAt) {
+			d.RecordedAt = chunk.RecordedAt
+		}
+		// The newest manual SoH of the day wins.
+		at := chunk.RecordedAt.UnixMilli()
+		if chunk.SohPercent != nil && (!d.hasSoh || at > d.sohAt) {
+			soh := *chunk.SohPercent
+			d.SohPercent = &soh
+			d.sohAt = at
+			d.hasSoh = true
+		}
+	}
+	days := make([]DailyConsumption, 0, len(byDate))
+	for _, d := range byDate {
+		days = append(days, d.DailyConsumption)
+	}
+	sort.Slice(days, func(i, j int) bool { return days[i].Date < days[j].Date })
+	var running Totals
+	for i := range days {
+		running.add(days[i].Day)
+		days[i].Lifetime = running
+	}
+	for i, j := 0, len(days)-1; i < j; i, j = i+1, j-1 {
+		days[i], days[j] = days[j], days[i]
+	}
+	return days
+}
diff --git a/server/go.mod b/server/go.mod
new file mode 100644
index 0000000..ed82e11
--- /dev/null
+++ b/server/go.mod
@@ -0,0 +1,15 @@
+module git.stinnesbeck.com/nils/mg4/server
+
+go 1.26.0
+
+toolchain go1.26.9
+
+require github.com/influxdata/influxdb-client-go/v2 v2.14.0
+
+require (
+	github.com/apapsch/go-jsonmerge/v2 v2.0.0 // indirect
+	github.com/google/uuid v1.3.1 // indirect
+	github.com/influxdata/line-protocol v0.0.0-20200327222509-2487e7298839 // indirect
+	github.com/oapi-codegen/runtime v1.0.0 // indirect
+	golang.org/x/net v0.60.0 // indirect
+)
diff --git a/server/go.sum b/server/go.sum
new file mode 100644
index 0000000..7303d63
--- /dev/null
+++ b/server/go.sum
@@ -0,0 +1,27 @@
+github.com/RaveNoX/go-jsoncommentstrip v1.0.0/go.mod h1:78ihd09MekBnJnxpICcwzCMzGrKSKYe4AqU6PDYYpjk=
+github.com/apapsch/go-jsonmerge/v2 v2.0.0 h1:axGnT1gRIfimI7gJifB699GoE/oq+F2MU7Dml6nw9rQ=
+github.com/apapsch/go-jsonmerge/v2 v2.0.0/go.mod h1:lvDnEdqiQrp0O42VQGgmlKpxL1AP2+08jFMw88y4klk=
+github.com/bmatcuk/doublestar v1.1.1/go.mod h1:UD6OnuiIn0yFxxA2le/rnRU1G4RaI4UvFv1sNto9p6w=
+github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
+github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
+github.com/google/uuid v1.3.1 h1:KjJaJ9iWZ3jOFZIf1Lqf4laDRCasjl0BCmnEGxkdLb4=
+github.com/google/uuid v1.3.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/influxdata/influxdb-client-go/v2 v2.14.0 h1:AjbBfJuq+QoaXNcrova8smSjwJdUHnwvfjMF71M1iI4=
+github.com/influxdata/influxdb-client-go/v2 v2.14.0/go.mod h1:Ahpm3QXKMJslpXl3IftVLVezreAUtBOTZssDrjZEFHI=
+github.com/influxdata/line-protocol v0.0.0-20200327222509-2487e7298839 h1:W9WBk7wlPfJLvMCdtV4zPulc4uCPrlywQOmbFOhgQNU=
+github.com/influxdata/line-protocol v0.0.0-20200327222509-2487e7298839/go.mod h1:xaLFMmpvUxqXtVkUJfg9QmT88cDaCJ3ZKgdZ78oO8Qo=
+github.com/juju/gnuflag v0.0.0-20171113085948-2ce1bb71843d/go.mod h1:2PavIy+JPciBPrBUjwbNvtwB6RQlve+hkpll6QSNmOE=
+github.com/oapi-codegen/runtime v1.0.0 h1:P4rqFX5fMFWqRzY9M/3YF9+aPSPPB06IzP2P7oOxrWo=
+github.com/oapi-codegen/runtime v1.0.0/go.mod h1:LmCUMQuPB4M/nLXilQXhHw+BLZdDb18B34OO356yJ/A=
+github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
+github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/spkg/bom v0.0.0-20160624110644-59b7046e48ad/go.mod h1:qLr4V1qq6nMqFKkMo8ZTx3f+BZEkzsRUY10Xsm2mwU0=
+github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
+github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
+github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
+github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
+golang.org/x/net v0.60.0 h1:79p50tfZlm0J9YfoDsSi639qSXNGVwEzOPLCxM2FsYU=
+golang.org/x/net v0.60.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
diff --git a/server/handoff.go b/server/handoff.go
new file mode 100644
index 0000000..9ea46aa
--- /dev/null
+++ b/server/handoff.go
@@ -0,0 +1,132 @@
+package main
+
+import (
+	"errors"
+	"strings"
+	"sync"
+	"time"
+)
+
+// Handoff lets a phone fill in settings the car would otherwise need its on-screen keyboard
+// for: the ABRP credentials above all, which are long. The car opens a request and shows it as
+// a QR code, the phone fills in a form (with the approval password), and the car, polling,
+// collects the values once.
+//
+// The values only pass through: they are held in memory until the car collects them, or for
+// the request's ten minutes, and are never stored, logged or echoed back to the page.
+type Handoff struct {
+	Now func() time.Time
+
+	mu       sync.Mutex
+	byDevice map[string]*handoffRequest
+	byUser   map[string]*handoffRequest
+}
+
+// maxPendingHandoffs bounds memory; only an authenticated car can open one.
+const maxPendingHandoffs = 200
+
+// PhoneSettings is what the phone may set. A nil or empty field leaves the car's value alone.
+type PhoneSettings struct {
+	AbrpAPIKey  string   `json:"abrpApiKey,omitempty"`
+	AbrpToken   string   `json:"abrpToken,omitempty"`
+	PricePerKwh *float64 `json:"pricePerKwh,omitempty"`
+	UsableKwh   *float64 `json:"usableKwh,omitempty"`
+}
+
+func (s PhoneSettings) empty() bool {
+	return s.AbrpAPIKey == "" && s.AbrpToken == "" && s.PricePerKwh == nil && s.UsableKwh == nil
+}
+
+type handoffRequest struct {
+	deviceCode     string
+	userCode       string
+	installationID string
+	expires        time.Time
+	settings       *PhoneSettings // set by the phone, handed to the car once
+}
+
+var errAlreadyFilled = errors.New("these settings were already sent")
+
+func NewHandoff() *Handoff {
+	return &Handoff{Now: time.Now, byDevice: map[string]*handoffRequest{}, byUser: map[string]*handoffRequest{}}
+}
+
+func (h *Handoff) expireLocked(now time.Time) {
+	for code, r := range h.byDevice {
+		if now.After(r.expires) {
+			delete(h.byDevice, code)
+			delete(h.byUser, r.userCode)
+		}
+	}
+}
+
+// Start opens a request for a car; a new one replaces the same installation's open request.
+func (h *Handoff) Start(installationID string) (*handoffRequest, error) {
+	h.mu.Lock()
+	defer h.mu.Unlock()
+	now := h.Now()
+	h.expireLocked(now)
+	for _, r := range h.byDevice {
+		if strings.EqualFold(r.installationID, installationID) {
+			delete(h.byDevice, r.deviceCode)
+			delete(h.byUser, r.userCode)
+		}
+	}
+	if len(h.byDevice) >= maxPendingHandoffs {
+		return nil, errTooMany
+	}
+	r := &handoffRequest{deviceCode: randomString(32), installationID: installationID, expires: now.Add(pairingTTL)}
+	for {
+		r.userCode = newUserCode()
+		if _, taken := h.byUser[r.userCode]; !taken {
+			break
+		}
+	}
+	h.byDevice[r.deviceCode] = r
+	h.byUser[r.userCode] = r
+	out := *r
+	return &out, nil
+}
+
+// Open reports whether a user code belongs to a request still waiting for the phone.
+func (h *Handoff) Open(userCode string) bool {
+	h.mu.Lock()
+	defer h.mu.Unlock()
+	h.expireLocked(h.Now())
+	r, ok := h.byUser[normalizeUserCode(userCode)]
+	return ok && r.settings == nil
+}
+
+// Fill stores what the phone entered, once.
+func (h *Handoff) Fill(userCode string, s PhoneSettings) error {
+	h.mu.Lock()
+	defer h.mu.Unlock()
+	h.expireLocked(h.Now())
+	r, ok := h.byUser[normalizeUserCode(userCode)]
+	if !ok {
+		return errUnknownCode
+	}
+	if r.settings != nil {
+		return errAlreadyFilled
+	}
+	r.settings = &s
+	return nil
+}
+
+// Poll is the car's side: nil while the phone has not sent anything, the settings exactly
+// once, then errUnknownCode. installationID must be the one the request was opened for.
+func (h *Handoff) Poll(deviceCode string, mayUse func(installationID string) bool) (*PhoneSettings, error) {
+	h.mu.Lock()
+	defer h.mu.Unlock()
+	h.expireLocked(h.Now())
+	r, ok := h.byDevice[deviceCode]
+	if !ok || !mayUse(r.installationID) {
+		return nil, errUnknownCode
+	}
+	if r.settings == nil {
+		return nil, nil
+	}
+	delete(h.byDevice, r.deviceCode)
+	delete(h.byUser, r.userCode)
+	return r.settings, nil
+}
diff --git a/server/handoff_http.go b/server/handoff_http.go
new file mode 100644
index 0000000..cfc8a76
--- /dev/null
+++ b/server/handoff_http.go
@@ -0,0 +1,240 @@
+package main
+
+import (
+	"errors"
+	"html/template"
+	"log/slog"
+	"net/http"
+	"net/url"
+	"strconv"
+	"strings"
+	"time"
+)
+
+// HTTP side of entering settings on the phone (handoff.go).
+//
+//	POST /v1/settings/start   car, with its token: open a request   {installationId} → codes and URL
+//	POST /v1/settings/poll    car, with its token: collect          {deviceCode} → 202 / 200 settings / 410
+//	GET  /settings?code=…     phone: the form
+//	POST /settings            phone: send it (needs the approval password)
+//
+// Switched on together with pairing, by APPROVAL_PASSWORD: the phone page needs it.
+
+func (a *API) handoffRoutes(mux *http.ServeMux) {
+	mux.HandleFunc("POST /v1/settings/start", a.ingest(a.settingsStart))
+	mux.HandleFunc("POST /v1/settings/poll", a.ingest(a.settingsPoll))
+	mux.HandleFunc("GET /settings", a.settingsPage)
+	mux.HandleFunc("POST /settings", a.settingsSubmit)
+}
+
+func (a *API) handoffEnabled() bool { return a.Handoff != nil && a.Pairing.Enabled() }
+
+var errHandoffOff = errors.New("entering settings on the phone is not enabled")
+
+func (a *API) settingsStart(w http.ResponseWriter, r *http.Request, c caller, body []byte) error {
+	if !a.handoffEnabled() {
+		writeJSON(w, http.StatusNotFound, map[string]string{"error": errHandoffOff.Error()})
+		return nil
+	}
+	o, err := decodeObject(body)
+	if err != nil {
+		return err
+	}
+	id, err := validUUID(o["installationId"], "installationId")
+	if err != nil {
+		return err
+	}
+	if !c.mayUse(id) {
+		return errOtherInstallation
+	}
+	req, err := a.Handoff.Start(id)
+	if err != nil {
+		writeJSON(w, http.StatusTooManyRequests, map[string]string{"error": err.Error()})
+		return nil
+	}
+	base := a.publicURL(r) + "/settings"
+	writeJSON(w, http.StatusCreated, map[string]any{
+		"deviceCode":              req.deviceCode,
+		"userCode":                req.userCode,
+		"verificationUri":         base,
+		"verificationUriComplete": base + "?code=" + url.QueryEscape(req.userCode),
+		"expiresIn":               int(pairingTTL / time.Second),
+		"interval":                int(pairingInterval / time.Second),
+	})
+	return nil
+}
+
+func (a *API) settingsPoll(w http.ResponseWriter, r *http.Request, c caller, body []byte) error {
+	if !a.handoffEnabled() {
+		writeJSON(w, http.StatusNotFound, map[string]string{"error": errHandoffOff.Error()})
+		return nil
+	}
+	o, err := decodeObject(body)
+	if err != nil {
+		return err
+	}
+	code, _ := o["deviceCode"].(string)
+	settings, err := a.Handoff.Poll(code, c.mayUse)
+	switch {
+	case err != nil:
+		writeJSON(w, http.StatusGone, map[string]string{"error": "expired_token"})
+	case settings == nil:
+		writeJSON(w, http.StatusAccepted, map[string]string{"status": "pending"})
+	default:
+		// The answer carries credentials: never cached anywhere on the way.
+		w.Header().Set("Cache-Control", "no-store")
+		writeJSON(w, http.StatusOK, settings)
+	}
+	return nil
+}
+
+// ---------- Phone page ----------
+
+type settingsPageData struct {
+	Code    string
+	Price   string
+	Usable  string
+	Error   string
+	Done    bool
+	Message string
+}
+
+var settingsTemplate = template.Must(template.New("settings").Parse(`<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Car settings — Nils' MG4</title>
+<style>` + pageStyle + `.hint{font-size:13px;color:#8E9597;margin:4px 0 0}</style></head><body><main>
+<h1>Car settings</h1>
+{{if .Done}}
+<p class="ok">{{.Message}}</p>
+{{else}}
+<p>Fill in what you want to change; empty fields leave the car's value as it is. The car picks the values up within a few seconds.</p>
+<form method="post" action="/settings" autocomplete="off">
+{{if .Code}}<div class="code">{{.Code}}</div><input type="hidden" name="code" value="{{.Code}}">
+{{else}}<label for="code">Code shown on the car</label>
+<input id="code" name="code" autocapitalize="characters" placeholder="XXX-XXX" required>{{end}}
+<label for="abrpApiKey">ABRP API key</label>
+<input id="abrpApiKey" name="abrpApiKey" type="password" autocomplete="off" spellcheck="false">
+<label for="abrpToken">ABRP user token</label>
+<input id="abrpToken" name="abrpToken" type="password" autocomplete="off" spellcheck="false">
+<p class="hint">The car needs both to send live data to ABRP.</p>
+<label for="price">Charging price (€/kWh)</label>
+<input id="price" name="price" inputmode="decimal" value="{{.Price}}">
+<label for="usable">Usable battery capacity (kWh)</label>
+<input id="usable" name="usable" inputmode="decimal" value="{{.Usable}}">
+<input type="text" name="username" value="mg4-approval" autocomplete="username" hidden readonly>
+<label for="password">Approval password</label>
+<input id="password" name="password" type="password" autocomplete="current-password" required>
+{{if .Error}}<p class="error">{{.Error}}</p>{{end}}
+<div class="row"><button class="approve">Send to the car</button></div>
+</form>
+{{end}}
+</main></body></html>`))
+
+func renderSettingsPage(w http.ResponseWriter, status int, data settingsPageData) {
+	h := w.Header()
+	h.Set("Content-Type", "text/html; charset=utf-8")
+	h.Set("Content-Security-Policy", "default-src 'none'; style-src 'unsafe-inline'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'")
+	h.Set("X-Content-Type-Options", "nosniff")
+	h.Set("Referrer-Policy", "no-referrer")
+	h.Set("Cache-Control", "no-store")
+	w.WriteHeader(status)
+	if err := settingsTemplate.Execute(w, data); err != nil {
+		slog.Warn("settings page not rendered", "error", err)
+	}
+}
+
+func (a *API) settingsPage(w http.ResponseWriter, r *http.Request) {
+	if !a.handoffEnabled() {
+		http.NotFound(w, r)
+		return
+	}
+	data := settingsPageData{}
+	if raw := r.URL.Query().Get("code"); raw != "" {
+		if a.Handoff.Open(raw) {
+			data.Code = normalizeUserCode(raw)
+		} else {
+			data.Error = "This code is unknown or has expired. Start again on the car."
+		}
+	}
+	renderSettingsPage(w, http.StatusOK, data)
+}
+
+// phoneSettingsFromForm checks what the phone sent. Credentials are never put back into the
+// page; the numbers are, so a typo is fixed without typing them again.
+func phoneSettingsFromForm(form url.Values) (PhoneSettings, error) {
+	var s PhoneSettings
+	for _, f := range []struct {
+		name string
+		dst  *string
+	}{{"abrpApiKey", &s.AbrpAPIKey}, {"abrpToken", &s.AbrpToken}} {
+		v := strings.TrimSpace(form.Get(f.name))
+		if v == "" {
+			continue
+		}
+		if len(v) < 8 || len(v) > 200 || strings.ContainsAny(v, " \t\r\n") {
+			return PhoneSettings{}, errors.New("the ABRP API key or user token does not look right")
+		}
+		*f.dst = v
+	}
+	for _, f := range []struct {
+		name     string
+		min, max float64
+		dst      **float64
+		label    string
+	}{{"price", 0, 100, &s.PricePerKwh, "charging price"}, {"usable", 10, 150, &s.UsableKwh, "usable capacity"}} {
+		v := strings.ReplaceAll(strings.TrimSpace(form.Get(f.name)), ",", ".")
+		if v == "" {
+			continue
+		}
+		n, err := strconv.ParseFloat(v, 64)
+		if err != nil || n < f.min || n > f.max {
+			return PhoneSettings{}, errors.New("the " + f.label + " is not a plausible number")
+		}
+		*f.dst = &n
+	}
+	if s.empty() {
+		return PhoneSettings{}, errors.New("nothing filled in")
+	}
+	return s, nil
+}
+
+func (a *API) settingsSubmit(w http.ResponseWriter, r *http.Request) {
+	if !a.handoffEnabled() {
+		http.NotFound(w, r)
+		return
+	}
+	r.Body = http.MaxBytesReader(w, r.Body, 8192)
+	if err := r.ParseForm(); err != nil {
+		renderSettingsPage(w, http.StatusBadRequest, settingsPageData{Error: "The form could not be read."})
+		return
+	}
+	code := normalizeUserCode(r.PostForm.Get("code"))
+	back := settingsPageData{Code: code, Price: r.PostForm.Get("price"), Usable: r.PostForm.Get("usable")}
+	switch err := a.Pairing.CheckAdmin(r.PostForm.Get("password"), clientAddress(r)); {
+	case errors.Is(err, errTooManyFailed):
+		back.Error = err.Error() + "."
+		renderSettingsPage(w, http.StatusTooManyRequests, back)
+		return
+	case err != nil:
+		back.Error = "Wrong password."
+		renderSettingsPage(w, http.StatusUnauthorized, back)
+		return
+	}
+	settings, err := phoneSettingsFromForm(r.PostForm)
+	if err != nil {
+		back.Error = strings.ToUpper(err.Error()[:1]) + err.Error()[1:] + "."
+		renderSettingsPage(w, http.StatusBadRequest, back)
+		return
+	}
+	switch err := a.Handoff.Fill(code, settings); {
+	case errors.Is(err, errAlreadyFilled):
+		renderSettingsPage(w, http.StatusConflict, settingsPageData{Error: "These settings were already sent. Start again on the car to send more."})
+		return
+	case err != nil:
+		renderSettingsPage(w, http.StatusNotFound, settingsPageData{Error: "This code is unknown or has expired. Start again on the car."})
+		return
+	}
+	slog.Info("settings sent from a phone")
+	renderSettingsPage(w, http.StatusOK, settingsPageData{Done: true,
+		Message: "Sent. The car picks the settings up within a few seconds — you can close this page."})
+}
diff --git a/server/handoff_test.go b/server/handoff_test.go
new file mode 100644
index 0000000..cb94947
--- /dev/null
+++ b/server/handoff_test.go
@@ -0,0 +1,143 @@
+package main
+
+import (
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"net/url"
+	"strings"
+	"testing"
+	"time"
+)
+
+func startHandoff(t *testing.T, h http.Handler, token string) (deviceCode, userCode string) {
+	t.Helper()
+	rec := do(t, h, "POST", "/v1/settings/start", token, `{"installationId":"`+testInstallation+`"}`)
+	if rec.Code != 201 {
+		t.Fatalf("start: %d %s", rec.Code, rec.Body)
+	}
+	var got map[string]any
+	if err := json.Unmarshal(rec.Body.Bytes(), &got); err != nil {
+		t.Fatal(err)
+	}
+	if got["verificationUriComplete"] != "https://car.example.com/settings?code="+got["userCode"].(string) {
+		t.Fatalf("uri %v", got["verificationUriComplete"])
+	}
+	return got["deviceCode"].(string), got["userCode"].(string)
+}
+
+func sendSettings(t *testing.T, h http.Handler, form url.Values) *httptest.ResponseRecorder {
+	t.Helper()
+	req := httptest.NewRequest("POST", "/settings", strings.NewReader(form.Encode()))
+	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
+	rec := httptest.NewRecorder()
+	h.ServeHTTP(rec, req)
+	return rec
+}
+
+func TestSettingsTravelFromThePhoneToTheCarOnce(t *testing.T) {
+	api, _ := newTestAPI()
+	h := api.Routes()
+	if rec := do(t, h, "POST", "/v1/settings/start", "", `{"installationId":"`+testInstallation+`"}`); rec.Code != 401 {
+		t.Fatalf("start without a token: %d", rec.Code)
+	}
+	deviceCode, userCode := startHandoff(t, h, testToken)
+	poll := func() *httptest.ResponseRecorder {
+		return do(t, h, "POST", "/v1/settings/poll", testToken, `{"deviceCode":"`+deviceCode+`"}`)
+	}
+	if rec := poll(); rec.Code != 202 {
+		t.Fatalf("before the phone: %d", rec.Code)
+	}
+	page := do(t, h, "GET", "/settings?code="+userCode, "", "")
+	if page.Code != 200 || !strings.Contains(page.Body.String(), userCode) {
+		t.Fatalf("page %d", page.Code)
+	}
+
+	form := url.Values{"code": {userCode}, "abrpApiKey": {"api-key-1234"}, "abrpToken": {"user-token-5678"},
+		"price": {"0,39"}, "password": {"wrong"}}
+	if rec := sendSettings(t, h, form); rec.Code != 401 || strings.Contains(rec.Body.String(), "user-token-5678") {
+		t.Fatalf("wrong password: %d (credentials must not be echoed)", rec.Code)
+	}
+	form.Set("password", testApprovalPassword)
+	if rec := sendSettings(t, h, form); rec.Code != 200 {
+		t.Fatalf("send: %d %s", rec.Code, rec.Body)
+	}
+	if rec := sendSettings(t, h, form); rec.Code != 409 {
+		t.Fatalf("sent twice: %d", rec.Code)
+	}
+
+	rec := poll()
+	var got PhoneSettings
+	if rec.Code != 200 || json.Unmarshal(rec.Body.Bytes(), &got) != nil {
+		t.Fatalf("collect: %d %s", rec.Code, rec.Body)
+	}
+	if got.AbrpAPIKey != "api-key-1234" || got.AbrpToken != "user-token-5678" || got.PricePerKwh == nil ||
+		*got.PricePerKwh != 0.39 || got.UsableKwh != nil {
+		t.Fatalf("settings %+v", got)
+	}
+	if rec.Header().Get("Cache-Control") != "no-store" {
+		t.Fatal("credentials cacheable")
+	}
+	if rec := poll(); rec.Code != 410 {
+		t.Fatalf("collected twice: %d", rec.Code)
+	}
+}
+
+func TestSettingsAreOnlyForTheCarThatAsked(t *testing.T) {
+	api, _ := newTestAPI()
+	h := api.Routes()
+	deviceCode, userCode := startHandoff(t, h, testToken)
+	_ = api.Handoff.Fill(userCode, PhoneSettings{AbrpToken: "user-token-5678"})
+	// A car paired as another installation cannot open a request for this one, nor collect it.
+	other := caller{installationID: "7e2b3c4d-5e6f-4a70-9b8c-1d2e3f4a5b6c"}
+	if s, err := api.Handoff.Poll(deviceCode, other.mayUse); s != nil || err == nil {
+		t.Fatal("another car collected the settings")
+	}
+	if s, err := api.Handoff.Poll(deviceCode, caller{}.mayUse); s == nil || err != nil {
+		t.Fatalf("the car itself could not collect: %v", err)
+	}
+}
+
+func TestPhoneSettingsAreChecked(t *testing.T) {
+	for name, form := range map[string]url.Values{
+		"nothing":        {},
+		"short token":    {"abrpToken": {"abc"}},
+		"spaced key":     {"abrpApiKey": {"has a space here"}},
+		"price absurd":   {"price": {"250"}},
+		"usable too low": {"usable": {"3"}},
+		"not a number":   {"price": {"cheap"}},
+	} {
+		if _, err := phoneSettingsFromForm(form); err == nil {
+			t.Errorf("%s accepted", name)
+		}
+	}
+	s, err := phoneSettingsFromForm(url.Values{"usable": {" 50,8 "}})
+	if err != nil || s.UsableKwh == nil || *s.UsableKwh != 50.8 || s.AbrpToken != "" {
+		t.Fatalf("%+v %v", s, err)
+	}
+}
+
+func TestHandoffRequestsExpireAndAreReplaced(t *testing.T) {
+	h := NewHandoff()
+	first, _ := h.Start(testInstallation)
+	second, _ := h.Start(testInstallation)
+	if _, err := h.Poll(first.deviceCode, caller{}.mayUse); err == nil {
+		t.Fatal("the replaced request is still open")
+	}
+	h.Now = func() time.Time { return time.Now().Add(pairingTTL + time.Second) }
+	if err := h.Fill(second.userCode, PhoneSettings{AbrpToken: "user-token-5678"}); err == nil {
+		t.Fatal("an expired request took settings")
+	}
+}
+
+func TestPhoneSettingsNeedPairingSwitchedOn(t *testing.T) {
+	api, _ := newTestAPI()
+	api.Pairing = NewPairing("", nil)
+	h := api.Routes()
+	if rec := do(t, h, "POST", "/v1/settings/start", testToken, `{"installationId":"`+testInstallation+`"}`); rec.Code != 404 {
+		t.Fatalf("start: %d", rec.Code)
+	}
+	if rec := do(t, h, "GET", "/settings", "", ""); rec.Code != 404 {
+		t.Fatalf("page: %d", rec.Code)
+	}
+}
diff --git a/server/logic_test.go b/server/logic_test.go
new file mode 100644
index 0000000..366086e
--- /dev/null
+++ b/server/logic_test.go
@@ -0,0 +1,67 @@
+package main
+
+import (
+	"testing"
+	"time"
+)
+
+func chunk(date string, atMs int64, km, kwh float64, soh *float64) ConsumptionChunk {
+	return ConsumptionChunk{
+		InstallationID: testInstallation, Date: date, RecordedAt: time.UnixMilli(atMs),
+		Day: Totals{Km: km, Kwh: kwh, Hours: km / 50, SocDrop: kwh / 0.6}, SohPercent: soh,
+	}
+}
+
+func ptr(f float64) *float64 { return &f }
+
+func TestAggregateDaysSumsPerDayNewestFirstWithRunningLifetime(t *testing.T) {
+	days := aggregateDays([]ConsumptionChunk{
+		chunk("2026-10-16", 1000, 10, 2, nil),
+		chunk("2026-10-17", 3000, 5, 1, nil),
+		chunk("2026-10-16", 2000, 20, 3, nil),
+	})
+	if len(days) != 2 || days[0].Date != "2026-10-17" || days[1].Date != "2026-10-16" {
+		t.Fatalf("order: %+v", days)
+	}
+	if days[1].Day.Km != 30 || days[1].Day.Kwh != 5 || days[1].RecordedAt.UnixMilli() != 2000 {
+		t.Fatalf("day sums: %+v", days[1])
+	}
+	if days[1].Lifetime.Km != 30 || days[0].Lifetime.Km != 35 || days[0].Lifetime.Kwh != 6 {
+		t.Fatalf("lifetime: %+v / %+v", days[0].Lifetime, days[1].Lifetime)
+	}
+}
+
+func TestAggregateDaysNewestSohWins(t *testing.T) {
+	days := aggregateDays([]ConsumptionChunk{
+		chunk("2026-10-16", 2000, 1, 1, ptr(96)),
+		chunk("2026-10-16", 1000, 1, 1, ptr(98)),
+		chunk("2026-10-17", 3000, 1, 1, nil),
+	})
+	if *days[1].SohPercent != 96 {
+		t.Fatalf("want 96, got %v", *days[1].SohPercent)
+	}
+	if days[0].SohPercent != nil {
+		t.Fatal("a day without SoH got one")
+	}
+}
+
+func TestLoadConfigFailsClosed(t *testing.T) {
+	env := map[string]string{
+		"INFLUX_URL": "http://influxdb:8086", "INFLUX_TOKEN": "t", "INFLUX_ORG": "mg4",
+		"INGEST_TOKEN": "0123456789abcdef01234567",
+	}
+	get := func(k string) string { return env[k] }
+	c, err := loadConfig(get)
+	if err != nil || c.listenAddr != ":8080" || c.influxBucket != "mg4" {
+		t.Fatalf("defaults: %+v %v", c, err)
+	}
+	env["INGEST_TOKEN"] = "short"
+	if _, err := loadConfig(get); err == nil {
+		t.Fatal("short ingest token accepted")
+	}
+	env["INGEST_TOKEN"] = "0123456789abcdef01234567"
+	delete(env, "INFLUX_TOKEN")
+	if _, err := loadConfig(get); err == nil {
+		t.Fatal("missing InfluxDB token accepted")
+	}
+}
diff --git a/server/main.go b/server/main.go
new file mode 100644
index 0000000..521d7a4
--- /dev/null
+++ b/server/main.go
@@ -0,0 +1,131 @@
+// Command server is the Nils' MG4 car server: the API the car writes its telemetry,
+// consumption and charging sessions to, stored in InfluxDB 2. The car sends live data to ABRP
+// itself.
+// Dashboards are Grafana's job; Grafana reads the same bucket directly.
+package main
+
+import (
+	"context"
+	"errors"
+	"fmt"
+	"log/slog"
+	"net/http"
+	"os"
+	"os/signal"
+	"strings"
+	"syscall"
+	"time"
+)
+
+const (
+	minIngestTokenLength      = 24
+	minApprovalPasswordLength = 12
+)
+
+type config struct {
+	listenAddr   string
+	influxURL    string
+	influxToken  string
+	influxOrg    string
+	influxBucket string
+	ingestToken  string
+	approvalPass string
+	publicURL    string
+	forgeURL     string
+	forgeRepo    string
+	forgeToken   string
+}
+
+// loadConfig reads the environment and fails closed: a missing InfluxDB setting or a
+// short ingest token stops the server from starting rather than serving something broken.
+func loadConfig(getenv func(string) string) (config, error) {
+	c := config{
+		listenAddr:   getenv("LISTEN_ADDR"),
+		influxURL:    getenv("INFLUX_URL"),
+		influxToken:  getenv("INFLUX_TOKEN"),
+		influxOrg:    getenv("INFLUX_ORG"),
+		influxBucket: getenv("INFLUX_BUCKET"),
+		ingestToken:  getenv("INGEST_TOKEN"),
+		approvalPass: getenv("APPROVAL_PASSWORD"),
+		publicURL:    getenv("PUBLIC_URL"),
+		forgeURL:     getenv("FORGE_URL"),
+		forgeRepo:    getenv("FORGE_REPO"),
+		forgeToken:   getenv("FORGE_TOKEN"),
+	}
+	if c.listenAddr == "" {
+		c.listenAddr = ":8080"
+	}
+	if c.influxBucket == "" {
+		c.influxBucket = "mg4"
+	}
+	for name, value := range map[string]string{"INFLUX_URL": c.influxURL, "INFLUX_TOKEN": c.influxToken, "INFLUX_ORG": c.influxOrg} {
+		if value == "" {
+			return config{}, fmt.Errorf("%s is not configured", name)
+		}
+	}
+	if len(c.ingestToken) < minIngestTokenLength {
+		return config{}, fmt.Errorf("INGEST_TOKEN must be at least %d characters", minIngestTokenLength)
+	}
+	// Pairing is optional; when it is on, its password guards token issuance and must not
+	// be guessable.
+	// App updates are optional; when the forge is named it must be https, so the token
+	// never crosses the network in the clear.
+	if c.forgeURL != "" && !strings.HasPrefix(c.forgeURL, "https://") {
+		return config{}, errors.New("FORGE_URL must be an https URL")
+	}
+	if c.approvalPass != "" && len(c.approvalPass) < minApprovalPasswordLength {
+		return config{}, fmt.Errorf("APPROVAL_PASSWORD must be at least %d characters", minApprovalPasswordLength)
+	}
+	return c, nil
+}
+
+func main() {
+	slog.SetDefault(slog.New(slog.NewTextHandler(os.Stderr, nil)))
+	cfg, err := loadConfig(os.Getenv)
+	if err != nil {
+		slog.Error("invalid configuration", "error", err)
+		os.Exit(1)
+	}
+
+	store := NewInfluxStore(cfg.influxURL, cfg.influxToken, cfg.influxOrg, cfg.influxBucket)
+	defer store.Close()
+	// Paired cars' tokens must be known before the first request; starting without them
+	// would answer every paired car with 401, so a failed load stops the start instead.
+	loadCtx, cancelLoad := context.WithTimeout(context.Background(), 30*time.Second)
+	devices, err := store.LoadDevices(loadCtx)
+	cancelLoad()
+	if err != nil {
+		slog.Error("paired devices could not be loaded", "error", err)
+		os.Exit(1)
+	}
+	pairing := NewPairing(cfg.approvalPass, devices)
+	releases := &Releases{ForgeURL: cfg.forgeURL, Repo: cfg.forgeRepo, Token: cfg.forgeToken}
+	api := &API{Store: store, IngestToken: cfg.ingestToken, Pairing: pairing, Handoff: NewHandoff(),
+		Releases: releases, PublicURL: cfg.publicURL}
+
+	srv := &http.Server{
+		Addr:              cfg.listenAddr,
+		Handler:           api.Routes(),
+		ReadHeaderTimeout: 10 * time.Second,
+		ReadTimeout:       30 * time.Second,
+		WriteTimeout:      30 * time.Second,
+		IdleTimeout:       120 * time.Second,
+	}
+
+	ctx, stop := signal.NotifyContext(context.Background(), os.Interrupt, syscall.SIGTERM)
+	defer stop()
+	go func() {
+		slog.Info("listening", "addr", cfg.listenAddr, "bucket", cfg.influxBucket,
+			"pairing", pairing.Enabled(), "pairedDevices", len(devices), "appUpdates", releases.enabled())
+		if err := srv.ListenAndServe(); err != nil && !errors.Is(err, http.ErrServerClosed) {
+			slog.Error("server failed", "error", err)
+			os.Exit(1)
+		}
+	}()
+	<-ctx.Done()
+	shutdown, cancel := context.WithTimeout(context.Background(), 10*time.Second)
+	defer cancel()
+	if err := srv.Shutdown(shutdown); err != nil {
+		slog.Error("shutdown", "error", err)
+	}
+}
diff --git a/server/model.go b/server/model.go
new file mode 100644
index 0000000..b121c87
--- /dev/null
+++ b/server/model.go
@@ -0,0 +1,110 @@
+package main
+
+import "time"
+
+// Totals are one day's (or one chunk's) consumption counters.
+type Totals struct {
+	Km      float64 `json:"km"`
+	Kwh     float64 `json:"kwh"`
+	Hours   float64 `json:"hours"`
+	SocDrop float64 `json:"socDrop"`
+}
+
+func (t *Totals) add(o Totals) {
+	t.Km += o.Km
+	t.Kwh += o.Kwh
+	t.Hours += o.Hours
+	t.SocDrop += o.SocDrop
+}
+
+// ConsumptionChunk is one 2-minute delta of a day's consumption, as the car sends it.
+// Days are built from these when history is read.
+type ConsumptionChunk struct {
+	InstallationID string
+	Date           string // the car's local date, YYYY-MM-DD
+	RecordedAt     time.Time
+	Day            Totals
+	SohPercent     *float64
+}
+
+// DailyConsumption is a day folded from its chunks.
+type DailyConsumption struct {
+	InstallationID string    `json:"installationId"`
+	Date           string    `json:"date"`
+	RecordedAt     time.Time `json:"recordedAt"`
+	Day            Totals    `json:"day"`
+	SohPercent     *float64  `json:"sohPercent,omitempty"`
+	// Lifetime is the running total up to and including this day; not part of the
+	// car's history response, which carries one lifetime for all days.
+	Lifetime Totals `json:"-"`
+}
+
+type CurvePoint struct {
+	Timestamp  time.Time
+	PowerKw    float64
+	SocPercent *float64
+}
+
+type ChargingSession struct {
+	InstallationID      string
+	SessionID           string
+	StartedAt           time.Time
+	EndedAt             time.Time
+	DurationSeconds     float64
+	EnergyKwh           float64
+	ChargingLossPercent float64
+	GridEnergyKwh       float64
+	PricePerKwh         float64
+	TotalCost           float64
+	IsDemo              bool
+	StartSocPercent     *float64
+	EndSocPercent       *float64
+	Curve               []CurvePoint
+}
+
+// telemetryNumbers are the numeric live fields, named and unit-ed as ABRP's tlm/send
+// expects them, with the range each one must fall in.
+var telemetryNumbers = map[string][2]float64{
+	"soc":               {0, 100},        // %
+	"speed":             {0, 400},        // km/h
+	"power":             {-1000, 1000},   // kW, positive leaving the battery
+	"est_battery_range": {0, 2000},       // km
+	"capacity":          {0, 500},        // kWh
+	"soe":               {0, 500},        // kWh
+	"soh":               {0, 100},        // %
+	"kwh_charged":       {0, 1000},       // kWh, this charge session
+	"odometer":          {0, 10_000_000}, // km
+	"lat":               {-90, 90},       // °
+	"lon":               {-180, 180},     // °
+	"elevation":         {-1000, 10_000}, // m
+	"heading":           {0, 360},        // °
+	"batt_temp":         {-60, 100},      // °C
+	"cabin_temp":        {-60, 100},      // °C
+	"ext_temp":          {-60, 70},       // °C
+	"hvac_setpoint":     {0, 40},         // °C
+	"hvac_power":        {0, 50},         // kW
+	"voltage":           {0, 1500},       // V
+	"current":           {-2000, 2000},   // A
+	"tire_pressure_fl":  {0, 1000},       // kPa
+	"tire_pressure_fr":  {0, 1000},       // kPa
+	"tire_pressure_rl":  {0, 1000},       // kPa
+	"tire_pressure_rr":  {0, 1000},       // kPa
+}
+
+// telemetryFlags are the boolean live fields; ABRP takes them as 0/1.
+var telemetryFlags = []string{"is_charging", "is_dcfc", "is_parked"}
+
+// TelemetrySample is one live sample. Only UTC is always present; an unread signal is
+// absent from Numbers and Flags, never 0.
+type TelemetrySample struct {
+	UTC     int64 // epoch seconds
+	Numbers map[string]float64
+	Flags   map[string]bool
+}
+
+type TelemetryBatch struct {
+	InstallationID string
+	Samples        []TelemetrySample
+	// Dropped names the values and samples validation left out, e.g. "samples[3].speed".
+	Dropped []string
+}
diff --git a/server/pairing.go b/server/pairing.go
new file mode 100644
index 0000000..4b698ee
--- /dev/null
+++ b/server/pairing.go
@@ -0,0 +1,370 @@
+package main
+
+import (
+	"crypto/rand"
+	"crypto/sha256"
+	"crypto/subtle"
+	"encoding/base64"
+	"encoding/hex"
+	"errors"
+	"strings"
+	"sync"
+	"time"
+)
+
+// Pairing lets a car get its own ingest token without anyone typing it: the car asks for a
+// pairing request and shows its code as a QR code, a phone opens the approval page, the
+// owner signs in with the approval password and approves, and the car — polling meanwhile —
+// receives a token once. Modelled on the OAuth device authorization grant (RFC 8628).
+//
+// Pending requests live in memory only: they last ten minutes, and the server runs as one
+// replica. Approved devices are persisted (see Device) so their tokens survive a restart.
+
+const (
+	pairingTTL      = 10 * time.Minute
+	pairingInterval = 5 * time.Second
+	// Pending requests per client address, and in all. A car needs one; a client that opens
+	// more only crowds out its own, and the total bounds memory.
+	maxPendingPerClient = 3
+	maxPendingPairing   = 1000
+	// After this many wrong approval passwords from one client address in a window, that
+	// address waits for the window. Other addresses are not affected, so a stranger guessing
+	// cannot lock the owner out. The global cap only bounds guessing spread over many
+	// addresses; it is far above anything a person types.
+	maxFailedLogins       = 5
+	maxFailedLoginsGlobal = 100
+	failedLoginsWindow    = time.Minute
+	// Unambiguous characters only: no 0/O, 1/I/L, so a code reads right off a car screen.
+	userCodeAlphabet = "ABCDEFGHJKMNPQRSTUVWXYZ23456789"
+)
+
+var (
+	errUnknownCode   = errors.New("unknown or expired code")
+	errNotPending    = errors.New("request already decided")
+	errTooManyFailed = errors.New("too many wrong passwords, try again in a minute")
+	errWrongPassword = errors.New("wrong password")
+	errTooMany       = errors.New("too many pending pairing requests")
+)
+
+// Device is a paired car. Only the SHA-256 of its token is kept.
+type Device struct {
+	ID             string
+	InstallationID string
+	TokenHash      string
+	CreatedAt      time.Time
+	Revoked        bool
+}
+
+type pairingState int
+
+const (
+	pairingPending pairingState = iota
+	// pairingSaving: approved, and the device is being persisted. The car still sees
+	// pending, so it cannot collect a token whose device might not be saved.
+	pairingSaving
+	pairingApproved
+	pairingDenied
+)
+
+type pairingRequest struct {
+	deviceCode     string
+	userCode       string
+	installationID string
+	client         string // address that opened the request
+	expires        time.Time
+	state          pairingState
+	token          string // set on approval, handed out once
+	deviceID       string
+}
+
+// Pairing holds pending requests and the known devices. The clock is injectable for tests.
+type Pairing struct {
+	ApprovalPassword string
+	Now              func() time.Time
+
+	mu       sync.Mutex
+	byDevice map[string]*pairingRequest
+	byUser   map[string]*pairingRequest
+	devices  map[string]Device // by token hash
+	// Wrong passwords: per client address, and all of them together.
+	failures       map[string][]time.Time
+	globalFailures []time.Time
+}
+
+func NewPairing(password string, devices []Device) *Pairing {
+	p := &Pairing{
+		ApprovalPassword: password,
+		Now:              time.Now,
+		byDevice:         map[string]*pairingRequest{},
+		byUser:           map[string]*pairingRequest{},
+		devices:          map[string]Device{},
+		failures:         map[string][]time.Time{},
+	}
+	for _, d := range devices {
+		p.devices[d.TokenHash] = d
+	}
+	return p
+}
+
+func (p *Pairing) Enabled() bool { return p != nil && p.ApprovalPassword != "" }
+
+func randomString(n int) string {
+	b := make([]byte, n)
+	if _, err := rand.Read(b); err != nil {
+		panic(err) // crypto/rand does not fail on supported platforms
+	}
+	return base64.RawURLEncoding.EncodeToString(b)
+}
+
+func newUserCode() string {
+	b := make([]byte, 6)
+	if _, err := rand.Read(b); err != nil {
+		panic(err)
+	}
+	code := make([]byte, 0, 7)
+	for i, v := range b {
+		if i == 3 {
+			code = append(code, '-')
+		}
+		// 256 % 31 leaves a slight bias; irrelevant for a 10-minute code that also needs
+		// the approval password.
+		code = append(code, userCodeAlphabet[int(v)%len(userCodeAlphabet)])
+	}
+	return string(code)
+}
+
+// normalizeUserCode accepts what a person types: any case, with or without the dash.
+func normalizeUserCode(code string) string {
+	code = strings.ToUpper(strings.TrimSpace(code))
+	code = strings.ReplaceAll(code, "-", "")
+	code = strings.ReplaceAll(code, " ", "")
+	if len(code) != 6 {
+		return ""
+	}
+	return code[:3] + "-" + code[3:]
+}
+
+func hashToken(token string) string {
+	sum := sha256.Sum256([]byte(token))
+	return hex.EncodeToString(sum[:])
+}
+
+func (p *Pairing) expireLocked(now time.Time) {
+	for code, r := range p.byDevice {
+		// A request being saved is finished by Commit or Forget, not expired under them.
+		if now.After(r.expires) && r.state != pairingSaving {
+			delete(p.byDevice, code)
+			delete(p.byUser, r.userCode)
+		}
+	}
+}
+
+func (p *Pairing) dropLocked(r *pairingRequest) {
+	delete(p.byDevice, r.deviceCode)
+	delete(p.byUser, r.userCode)
+}
+
+// Start opens a pairing request for a car. A new request replaces the same installation's
+// undecided one; a client already holding maxPendingPerClient requests gets errTooMany.
+func (p *Pairing) Start(installationID, client string) (*pairingRequest, error) {
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	now := p.Now()
+	p.expireLocked(now)
+	perClient := 0
+	for _, r := range p.byDevice {
+		if r.state == pairingPending && strings.EqualFold(r.installationID, installationID) {
+			p.dropLocked(r)
+			continue
+		}
+		if r.client == client {
+			perClient++
+		}
+	}
+	if perClient >= maxPendingPerClient || len(p.byDevice) >= maxPendingPairing {
+		return nil, errTooMany
+	}
+	r := &pairingRequest{
+		deviceCode:     randomString(32),
+		installationID: installationID,
+		client:         client,
+		expires:        now.Add(pairingTTL),
+	}
+	for {
+		r.userCode = newUserCode()
+		if _, taken := p.byUser[r.userCode]; !taken {
+			break
+		}
+	}
+	p.byDevice[r.deviceCode] = r
+	p.byUser[r.userCode] = r
+	out := *r
+	return &out, nil
+}
+
+// Lookup returns the pending request for a user code, for the approval page.
+func (p *Pairing) Lookup(userCode string) (pairingRequest, error) {
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	p.expireLocked(p.Now())
+	r, ok := p.byUser[normalizeUserCode(userCode)]
+	if !ok {
+		return pairingRequest{}, errUnknownCode
+	}
+	return *r, nil
+}
+
+func recentOnly(times []time.Time, now time.Time) []time.Time {
+	recent := times[:0]
+	for _, t := range times {
+		if now.Sub(t) < failedLoginsWindow {
+			recent = append(recent, t)
+		}
+	}
+	return recent
+}
+
+// checkPasswordLocked counts failures per client address and refuses a client while it
+// has too many recent ones (or while too many arrive from everywhere at once).
+func (p *Pairing) checkPasswordLocked(password, client string, now time.Time) error {
+	for c, times := range p.failures {
+		if recent := recentOnly(times, now); len(recent) == 0 {
+			delete(p.failures, c)
+		} else {
+			p.failures[c] = recent
+		}
+	}
+	p.globalFailures = recentOnly(p.globalFailures, now)
+	if len(p.failures[client]) >= maxFailedLogins || len(p.globalFailures) >= maxFailedLoginsGlobal {
+		return errTooManyFailed
+	}
+	if subtle.ConstantTimeCompare([]byte(password), []byte(p.ApprovalPassword)) != 1 {
+		p.failures[client] = append(p.failures[client], now)
+		p.globalFailures = append(p.globalFailures, now)
+		return errWrongPassword
+	}
+	return nil
+}
+
+// Decide approves or denies a pending request. On approval it returns the new device, which
+// the caller must persist and then Commit (or Forget, if saving failed): until Commit the
+// car keeps seeing pending and the token is not accepted anywhere.
+func (p *Pairing) Decide(userCode, password, client string, approve bool) (Device, error) {
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	now := p.Now()
+	if err := p.checkPasswordLocked(password, client, now); err != nil {
+		return Device{}, err
+	}
+	p.expireLocked(now)
+	r, ok := p.byUser[normalizeUserCode(userCode)]
+	if !ok {
+		return Device{}, errUnknownCode
+	}
+	if r.state != pairingPending {
+		return Device{}, errNotPending
+	}
+	if !approve {
+		r.state = pairingDenied
+		return Device{}, nil
+	}
+	token := randomString(32) // 43 characters
+	d := Device{
+		ID:             randomString(9),
+		InstallationID: r.installationID,
+		TokenHash:      hashToken(token),
+		CreatedAt:      now,
+	}
+	r.state = pairingSaving
+	r.token = token
+	r.deviceID = d.ID
+	return d, nil
+}
+
+// Commit finishes an approval once its device is persisted: the token now works, and the
+// car collects it at its next poll.
+func (p *Pairing) Commit(userCode string, d Device) {
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	p.devices[d.TokenHash] = d
+	if r, ok := p.byUser[normalizeUserCode(userCode)]; ok && r.deviceID == d.ID {
+		r.state = pairingApproved
+	}
+}
+
+// Forget undoes an approval whose device could not be persisted, so no token is handed out
+// that would stop working at the next restart. The request is pending again.
+func (p *Pairing) Forget(userCode string, d Device) {
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	if r, ok := p.byUser[normalizeUserCode(userCode)]; ok && r.deviceID == d.ID {
+		r.state = pairingPending
+		r.token = ""
+		r.deviceID = ""
+	}
+}
+
+// Poll is what the car calls: pending, the token (exactly once), denied, or unknown.
+func (p *Pairing) Poll(deviceCode string) (state pairingState, token, deviceID string, err error) {
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	p.expireLocked(p.Now())
+	r, ok := p.byDevice[deviceCode]
+	if !ok {
+		return 0, "", "", errUnknownCode
+	}
+	switch r.state {
+	case pairingSaving:
+		return pairingPending, "", "", nil
+	case pairingApproved, pairingDenied:
+		// Decided: hand the outcome out once, then forget the request.
+		p.dropLocked(r)
+	}
+	return r.state, r.token, r.deviceID, nil
+}
+
+// Authorized returns the paired, unrevoked device a token belongs to.
+func (p *Pairing) Authorized(token string) (Device, bool) {
+	if p == nil || token == "" {
+		return Device{}, false
+	}
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	d, ok := p.devices[hashToken(token)]
+	if !ok || d.Revoked {
+		return Device{}, false
+	}
+	return d, true
+}
+
+func (p *Pairing) Devices() []Device {
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	out := make([]Device, 0, len(p.devices))
+	for _, d := range p.devices {
+		out = append(out, d)
+	}
+	return out
+}
+
+// Revoke marks a device revoked and returns it for persisting.
+func (p *Pairing) Revoke(id string) (Device, bool) {
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	for hash, d := range p.devices {
+		if d.ID == id {
+			d.Revoked = true
+			p.devices[hash] = d
+			return d, true
+		}
+	}
+	return Device{}, false
+}
+
+// CheckAdmin verifies the approval password for the device-management API, with the same
+// failure counting as the approval page.
+func (p *Pairing) CheckAdmin(password, client string) error {
+	p.mu.Lock()
+	defer p.mu.Unlock()
+	return p.checkPasswordLocked(password, client, p.Now())
+}
diff --git a/server/pairing_http.go b/server/pairing_http.go
new file mode 100644
index 0000000..bece390
--- /dev/null
+++ b/server/pairing_http.go
@@ -0,0 +1,318 @@
+package main
+
+import (
+	"errors"
+	"html/template"
+	"io"
+	"log/slog"
+	"net"
+	"net/http"
+	"net/url"
+	"strings"
+	"time"
+)
+
+// HTTP side of pairing.
+//
+//	POST /v1/pair/start            car: open a request          {installationId} → codes and URL
+//	POST /v1/pair/poll             car: collect the outcome     {deviceCode} → 202 / 200 token / 403 / 410
+//	GET  /pair[?code=XXX-XXX]      phone: approval page
+//	POST /pair                     phone: approve or deny (needs the approval password)
+//	GET  /v1/devices               list paired cars             Bearer <APPROVAL_PASSWORD>
+//	POST /v1/devices/{id}/revoke   revoke a car's token         Bearer <APPROVAL_PASSWORD>
+//
+// Start and poll need no token — the car does not have one yet. What they hand out is
+// worthless until a person who knows the approval password approves it.
+
+func (a *API) pairingRoutes(mux *http.ServeMux) {
+	mux.HandleFunc("POST /v1/pair/start", a.pairStart)
+	mux.HandleFunc("POST /v1/pair/poll", a.pairPoll)
+	mux.HandleFunc("GET /pair", a.pairPage)
+	mux.HandleFunc("POST /pair", a.pairDecide)
+	mux.HandleFunc("GET /v1/devices", a.listDevices)
+	mux.HandleFunc("POST /v1/devices/{id}/revoke", a.revokeDevice)
+}
+
+func (a *API) pairingDisabled(w http.ResponseWriter) bool {
+	if a.Pairing.Enabled() {
+		return false
+	}
+	writeJSON(w, http.StatusNotFound, map[string]string{"error": "pairing is not enabled"})
+	return true
+}
+
+func readSmallJSON(r *http.Request) (object, error) {
+	body, err := io.ReadAll(io.LimitReader(r.Body, 4097))
+	if err != nil || len(body) > 4096 {
+		return nil, invalid("body is too large")
+	}
+	return decodeObject(body)
+}
+
+// publicURL is where the phone should go: PUBLIC_URL when set, otherwise what the request
+// came in on (behind Traefik, the forwarded scheme and host).
+func (a *API) publicURL(r *http.Request) string {
+	if a.PublicURL != "" {
+		return strings.TrimRight(a.PublicURL, "/")
+	}
+	scheme := "http"
+	if r.TLS != nil || r.Header.Get("X-Forwarded-Proto") == "https" {
+		scheme = "https"
+	}
+	host := r.Header.Get("X-Forwarded-Host")
+	if host == "" {
+		host = r.Host
+	}
+	return scheme + "://" + host
+}
+
+func (a *API) pairStart(w http.ResponseWriter, r *http.Request) {
+	if a.pairingDisabled(w) {
+		return
+	}
+	o, err := readSmallJSON(r)
+	if err != nil {
+		writeJSON(w, http.StatusBadRequest, map[string]string{"error": err.Error()})
+		return
+	}
+	id, err := validUUID(o["installationId"], "installationId")
+	if err != nil {
+		writeJSON(w, http.StatusBadRequest, map[string]string{"error": err.Error()})
+		return
+	}
+	req, err := a.Pairing.Start(id, clientAddress(r))
+	if err != nil {
+		writeJSON(w, http.StatusTooManyRequests, map[string]string{"error": err.Error()})
+		return
+	}
+	base := a.publicURL(r) + "/pair"
+	writeJSON(w, http.StatusCreated, map[string]any{
+		"deviceCode":              req.deviceCode,
+		"userCode":                req.userCode,
+		"verificationUri":         base,
+		"verificationUriComplete": base + "?code=" + url.QueryEscape(req.userCode),
+		"expiresIn":               int(pairingTTL / time.Second),
+		"interval":                int(pairingInterval / time.Second),
+	})
+}
+
+func (a *API) pairPoll(w http.ResponseWriter, r *http.Request) {
+	if a.pairingDisabled(w) {
+		return
+	}
+	o, err := readSmallJSON(r)
+	if err != nil {
+		writeJSON(w, http.StatusBadRequest, map[string]string{"error": err.Error()})
+		return
+	}
+	code, _ := o["deviceCode"].(string)
+	state, token, deviceID, err := a.Pairing.Poll(code)
+	switch {
+	case err != nil:
+		writeJSON(w, http.StatusGone, map[string]string{"error": "expired_token"})
+	case state == pairingPending:
+		writeJSON(w, http.StatusAccepted, map[string]string{"status": "authorization_pending"})
+	case state == pairingDenied:
+		writeJSON(w, http.StatusForbidden, map[string]string{"error": "access_denied"})
+	default:
+		writeJSON(w, http.StatusOK, map[string]string{"token": token, "deviceId": deviceID})
+	}
+}
+
+// clientAddress is who is asking, for the per-client limits: the last X-Forwarded-For entry,
+// which is the one Traefik adds (anything left of it comes from the client and can be
+// made up), or the connection's own address without a proxy.
+func clientAddress(r *http.Request) string {
+	if forwarded := r.Header.Values("X-Forwarded-For"); len(forwarded) > 0 {
+		last := forwarded[len(forwarded)-1]
+		if i := strings.LastIndex(last, ","); i >= 0 {
+			last = last[i+1:]
+		}
+		if addr := strings.TrimSpace(last); addr != "" {
+			return addr
+		}
+	}
+	if host, _, err := net.SplitHostPort(r.RemoteAddr); err == nil {
+		return host
+	}
+	return r.RemoteAddr
+}
+
+// ---------- Approval page ----------
+
+type pageData struct {
+	Code    string
+	Message string
+	Error   string
+	Done    bool
+}
+
+// pageStyle is shared by the phone pages (pairing, settings): dark, MG red, no scripts.
+const pageStyle = `
+:root{color-scheme:dark}
+body{margin:0;min-height:100vh;display:flex;align-items:center;justify-content:center;background:#000;color:#F4F3EF;font:16px/1.5 system-ui,sans-serif}
+main{width:min(92vw,420px);background:#121212;border:1px solid #363B3D;border-radius:16px;padding:28px}
+h1{margin:0 0 4px;font-size:22px}p{color:#BDC4C6;margin:8px 0 18px}
+.code{font:600 34px/1.2 ui-monospace,monospace;letter-spacing:4px;color:#FF9A9E;text-align:center;margin:18px 0}
+label{display:block;font-size:14px;color:#BDC4C6;margin:14px 0 6px}
+input{box-sizing:border-box;width:100%;padding:14px;border-radius:10px;border:1px solid #363B3D;background:#000;color:#F4F3EF;font-size:18px}
+.row{display:flex;gap:10px;margin-top:20px}
+button{flex:1;padding:14px;border-radius:10px;border:0;font-size:17px;font-weight:600;cursor:pointer}
+.approve{background:#E0424C;color:#1A0B0C}.deny{background:#2A1416;color:#FF9A9E;border:1px solid #3A1215}
+.error{color:#FFB4AB}.ok{color:#A4DCC1}
+`
+
+var pairTemplate = template.Must(template.New("pair").Parse(`<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>Pair a car — Nils' MG4</title>
+<style>` + pageStyle + `</style></head><body><main>
+<h1>Pair a car</h1>
+{{if .Done}}
+<p class="ok">{{.Message}}</p>
+{{else}}
+<p>Check that this code matches the one on the car's screen, then approve with the approval password.</p>
+<form method="post" action="/pair" autocomplete="on">
+{{if .Code}}<div class="code">{{.Code}}</div><input type="hidden" name="code" value="{{.Code}}">
+{{else}}<label for="code">Code shown on the car</label>
+<input id="code" name="code" autocapitalize="characters" autocomplete="off" placeholder="XXX-XXX" required>{{end}}
+<input type="text" name="username" value="mg4-approval" autocomplete="username" hidden readonly>
+<label for="password">Approval password</label>
+<input id="password" name="password" type="password" autocomplete="current-password" required {{if .Code}}autofocus{{end}}>
+{{if .Error}}<p class="error">{{.Error}}</p>{{end}}
+<div class="row"><button class="approve" name="action" value="approve">Approve</button>
+<button class="deny" name="action" value="deny" formnovalidate>Deny</button></div>
+</form>
+{{end}}
+</main></body></html>`))
+
+func renderPage(w http.ResponseWriter, status int, data pageData) {
+	h := w.Header()
+	h.Set("Content-Type", "text/html; charset=utf-8")
+	// No scripts at all, no framing, forms only back to this page.
+	h.Set("Content-Security-Policy", "default-src 'none'; style-src 'unsafe-inline'; form-action 'self'; frame-ancestors 'none'; base-uri 'none'")
+	h.Set("X-Content-Type-Options", "nosniff")
+	h.Set("Referrer-Policy", "no-referrer")
+	h.Set("Cache-Control", "no-store")
+	w.WriteHeader(status)
+	if err := pairTemplate.Execute(w, data); err != nil {
+		slog.Warn("pair page not rendered", "error", err)
+	}
+}
+
+func (a *API) pairPage(w http.ResponseWriter, r *http.Request) {
+	if !a.Pairing.Enabled() {
+		http.NotFound(w, r)
+		return
+	}
+	data := pageData{}
+	if raw := r.URL.Query().Get("code"); raw != "" {
+		if req, err := a.Pairing.Lookup(raw); err == nil && req.state == pairingPending {
+			data.Code = req.userCode
+		} else {
+			data.Error = "This code is unknown or has expired. Start pairing again on the car."
+		}
+	}
+	renderPage(w, http.StatusOK, data)
+}
+
+func (a *API) pairDecide(w http.ResponseWriter, r *http.Request) {
+	if !a.Pairing.Enabled() {
+		http.NotFound(w, r)
+		return
+	}
+	r.Body = http.MaxBytesReader(w, r.Body, 4096)
+	if err := r.ParseForm(); err != nil {
+		renderPage(w, http.StatusBadRequest, pageData{Error: "The form could not be read."})
+		return
+	}
+	code := normalizeUserCode(r.PostForm.Get("code"))
+	approve := r.PostForm.Get("action") != "deny"
+	device, err := a.Pairing.Decide(code, r.PostForm.Get("password"), clientAddress(r), approve)
+	switch {
+	case errors.Is(err, errWrongPassword):
+		renderPage(w, http.StatusUnauthorized, pageData{Code: code, Error: "Wrong password."})
+		return
+	case errors.Is(err, errTooManyFailed):
+		renderPage(w, http.StatusTooManyRequests, pageData{Code: code, Error: err.Error() + "."})
+		return
+	case errors.Is(err, errUnknownCode), errors.Is(err, errNotPending):
+		renderPage(w, http.StatusNotFound, pageData{Error: "This code is unknown, expired or already used. Start pairing again on the car."})
+		return
+	case err != nil:
+		renderPage(w, http.StatusInternalServerError, pageData{Code: code, Error: "Something went wrong."})
+		return
+	}
+	if !approve {
+		renderPage(w, http.StatusOK, pageData{Done: true, Message: "Denied. The car was not paired."})
+		return
+	}
+	// Persist before the car can collect the token: a token that vanished at the next
+	// restart would look like a pairing that worked.
+	if err := a.Store.SaveDevice(r.Context(), device); err != nil {
+		a.Pairing.Forget(code, device)
+		slog.Error("device not saved", "error", err)
+		renderPage(w, http.StatusInternalServerError, pageData{Code: code, Error: "The car could not be saved. Try again."})
+		return
+	}
+	a.Pairing.Commit(code, device)
+	slog.Info("car paired", "device", device.ID, "installation", device.InstallationID)
+	renderPage(w, http.StatusOK, pageData{Done: true, Message: "Approved. The car finishes pairing on its own within a few seconds — you can close this page."})
+}
+
+// ---------- Device management ----------
+
+func (a *API) adminAuthorized(w http.ResponseWriter, r *http.Request) bool {
+	if a.pairingDisabled(w) {
+		return false
+	}
+	supplied, ok := strings.CutPrefix(r.Header.Get("Authorization"), "Bearer ")
+	if !ok {
+		writeJSON(w, http.StatusUnauthorized, map[string]string{"error": "unauthorized"})
+		return false
+	}
+	switch err := a.Pairing.CheckAdmin(supplied, clientAddress(r)); {
+	case errors.Is(err, errTooManyFailed):
+		writeJSON(w, http.StatusTooManyRequests, map[string]string{"error": err.Error()})
+		return false
+	case err != nil:
+		writeJSON(w, http.StatusUnauthorized, map[string]string{"error": "unauthorized"})
+		return false
+	}
+	return true
+}
+
+type deviceJSON struct {
+	ID             string    `json:"id"`
+	InstallationID string    `json:"installationId"`
+	CreatedAt      time.Time `json:"createdAt"`
+	Revoked        bool      `json:"revoked"`
+}
+
+func (a *API) listDevices(w http.ResponseWriter, r *http.Request) {
+	if !a.adminAuthorized(w, r) {
+		return
+	}
+	out := []deviceJSON{}
+	for _, d := range a.Pairing.Devices() {
+		out = append(out, deviceJSON{d.ID, d.InstallationID, d.CreatedAt, d.Revoked})
+	}
+	writeJSON(w, http.StatusOK, map[string]any{"devices": out})
+}
+
+func (a *API) revokeDevice(w http.ResponseWriter, r *http.Request) {
+	if !a.adminAuthorized(w, r) {
+		return
+	}
+	d, ok := a.Pairing.Revoke(r.PathValue("id"))
+	if !ok {
+		writeJSON(w, http.StatusNotFound, map[string]string{"error": "no such device"})
+		return
+	}
+	if err := a.Store.SaveDevice(r.Context(), d); err != nil {
+		slog.Error("revocation not saved", "error", err)
+		writeJSON(w, http.StatusInternalServerError, map[string]string{"error": "revoked until restart only; saving failed"})
+		return
+	}
+	slog.Info("car revoked", "device", d.ID)
+	w.WriteHeader(http.StatusNoContent)
+}
diff --git a/server/pairing_test.go b/server/pairing_test.go
new file mode 100644
index 0000000..2be5f00
--- /dev/null
+++ b/server/pairing_test.go
@@ -0,0 +1,331 @@
+package main
+
+import (
+	"encoding/json"
+	"errors"
+	"net/http"
+	"net/http/httptest"
+	"net/url"
+	"regexp"
+	"strings"
+	"testing"
+	"time"
+)
+
+func startPairing(t *testing.T, h http.Handler) (deviceCode, userCode, uriComplete string) {
+	t.Helper()
+	rec := do(t, h, "POST", "/v1/pair/start", "", `{"installationId":"`+testInstallation+`"}`)
+	if rec.Code != 201 {
+		t.Fatalf("start: %d %s", rec.Code, rec.Body)
+	}
+	var got map[string]any
+	if err := json.Unmarshal(rec.Body.Bytes(), &got); err != nil {
+		t.Fatal(err)
+	}
+	return got["deviceCode"].(string), got["userCode"].(string), got["verificationUriComplete"].(string)
+}
+
+func poll(t *testing.T, h http.Handler, deviceCode string) (int, map[string]string) {
+	t.Helper()
+	rec := do(t, h, "POST", "/v1/pair/poll", "", `{"deviceCode":"`+deviceCode+`"}`)
+	var got map[string]string
+	_ = json.Unmarshal(rec.Body.Bytes(), &got)
+	return rec.Code, got
+}
+
+func submit(t *testing.T, h http.Handler, code, password, action string) *httptest.ResponseRecorder {
+	t.Helper()
+	return submitFrom(t, h, "", code, password, action)
+}
+
+// submitFrom submits the approval form as if from forwardedFor, the address Traefik adds.
+func submitFrom(t *testing.T, h http.Handler, forwardedFor, code, password, action string) *httptest.ResponseRecorder {
+	t.Helper()
+	form := url.Values{"code": {code}, "password": {password}, "action": {action}}
+	req := httptest.NewRequest("POST", "/pair", strings.NewReader(form.Encode()))
+	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
+	if forwardedFor != "" {
+		req.Header.Set("X-Forwarded-For", forwardedFor)
+	}
+	rec := httptest.NewRecorder()
+	h.ServeHTTP(rec, req)
+	return rec
+}
+
+func TestPairingHappyPath(t *testing.T) {
+	api, store := newTestAPI()
+	h := api.Routes()
+	deviceCode, userCode, uri := startPairing(t, h)
+	if !regexpUserCode.MatchString(userCode) {
+		t.Fatalf("user code %q", userCode)
+	}
+	if uri != "https://car.example.com/pair?code="+userCode {
+		t.Fatalf("verification URI %q", uri)
+	}
+	if status, _ := poll(t, h, deviceCode); status != 202 {
+		t.Fatalf("before approval: want 202, got %d", status)
+	}
+
+	// The phone opens the link: the page shows the code and asks for the password.
+	page := do(t, h, "GET", "/pair?code="+strings.ToLower(strings.ReplaceAll(userCode, "-", "")), "", "")
+	if page.Code != 200 || !strings.Contains(page.Body.String(), userCode) {
+		t.Fatalf("page: %d", page.Code)
+	}
+	if csp := page.Header().Get("Content-Security-Policy"); !strings.Contains(csp, "frame-ancestors 'none'") {
+		t.Fatalf("CSP %q", csp)
+	}
+
+	if rec := submit(t, h, userCode, testApprovalPassword, "approve"); rec.Code != 200 || !strings.Contains(rec.Body.String(), "Approved") {
+		t.Fatalf("approve: %d %s", rec.Code, rec.Body)
+	}
+	if len(store.devices) != 1 || store.devices[0].InstallationID != testInstallation {
+		t.Fatalf("device not persisted: %+v", store.devices)
+	}
+	status, got := poll(t, h, deviceCode)
+	if status != 200 || len(got["token"]) < minIngestTokenLength || got["deviceId"] == "" {
+		t.Fatalf("after approval: %d %v", status, got)
+	}
+	// Only the hash is stored, never the token.
+	if store.devices[0].TokenHash == got["token"] || store.devices[0].TokenHash != hashToken(got["token"]) {
+		t.Fatal("stored token hash is wrong")
+	}
+	// The token is handed out once.
+	if status, _ := poll(t, h, deviceCode); status != 410 {
+		t.Fatalf("second collection: want 410, got %d", status)
+	}
+	// And it works on the ingest endpoints.
+	rec := do(t, h, "POST", "/v1/telemetry", got["token"], string(telemetryBody(`{"utc":1790000000,"soc":80}`)))
+	if rec.Code != 200 {
+		t.Fatalf("paired token on telemetry: %d %s", rec.Code, rec.Body)
+	}
+}
+
+func TestPairingWrongPasswordAndLockout(t *testing.T) {
+	api, store := newTestAPI()
+	h := api.Routes()
+	deviceCode, userCode, _ := startPairing(t, h)
+	for i := 0; i < maxFailedLogins; i++ {
+		if rec := submit(t, h, userCode, "wrong", "approve"); rec.Code != 401 {
+			t.Fatalf("attempt %d: want 401, got %d", i, rec.Code)
+		}
+	}
+	// Locked now — even the right password waits.
+	if rec := submit(t, h, userCode, testApprovalPassword, "approve"); rec.Code != 429 {
+		t.Fatalf("locked: want 429, got %d", rec.Code)
+	}
+	if status, _ := poll(t, h, deviceCode); status != 202 || len(store.devices) != 0 {
+		t.Fatal("a locked-out attempt changed the request")
+	}
+	// The lockout is per address: someone guessing elsewhere does not lock the owner out.
+	if rec := submitFrom(t, h, "198.51.100.7", userCode, testApprovalPassword, "deny"); rec.Code != 200 {
+		t.Fatalf("other address locked out too: %d", rec.Code)
+	}
+	deviceCode, userCode, _ = startPairing(t, h)
+	// After the window the right password works again.
+	api.Pairing.Now = func() time.Time { return time.Now().Add(failedLoginsWindow + time.Second) }
+	if rec := submit(t, h, userCode, testApprovalPassword, "approve"); rec.Code != 200 {
+		t.Fatalf("after the window: want 200, got %d %s", rec.Code, rec.Body)
+	}
+}
+
+func TestPairingDenyAndExpiry(t *testing.T) {
+	api, _ := newTestAPI()
+	h := api.Routes()
+	deviceCode, userCode, _ := startPairing(t, h)
+	if rec := submit(t, h, userCode, testApprovalPassword, "deny"); rec.Code != 200 || !strings.Contains(rec.Body.String(), "Denied") {
+		t.Fatalf("deny: %d", rec.Code)
+	}
+	if status, _ := poll(t, h, deviceCode); status != 403 {
+		t.Fatalf("denied: want 403, got %d", status)
+	}
+	if rec := submit(t, h, userCode, testApprovalPassword, "approve"); rec.Code != 404 {
+		t.Fatalf("a decided code was approvable: %d", rec.Code)
+	}
+
+	deviceCode, userCode, _ = startPairing(t, h)
+	api.Pairing.Now = func() time.Time { return time.Now().Add(pairingTTL + time.Second) }
+	if status, _ := poll(t, h, deviceCode); status != 410 {
+		t.Fatalf("expired: want 410, got %d", status)
+	}
+	if rec := submit(t, h, userCode, testApprovalPassword, "approve"); rec.Code != 404 {
+		t.Fatalf("an expired code was approvable: %d", rec.Code)
+	}
+}
+
+func TestPairingNotPersistedMeansNoToken(t *testing.T) {
+	api, store := newTestAPI()
+	h := api.Routes()
+	deviceCode, userCode, _ := startPairing(t, h)
+	store.fail = errors.New("influx down")
+	if rec := submit(t, h, userCode, testApprovalPassword, "approve"); rec.Code != 500 {
+		t.Fatalf("want 500, got %d", rec.Code)
+	}
+	if status, _ := poll(t, h, deviceCode); status != 202 {
+		t.Fatalf("a token was handed out that was never saved: %d", status)
+	}
+	store.fail = nil
+	if rec := submit(t, h, userCode, testApprovalPassword, "approve"); rec.Code != 200 {
+		t.Fatalf("retry: %d", rec.Code)
+	}
+	if status, _ := poll(t, h, deviceCode); status != 200 {
+		t.Fatalf("after retry: %d", status)
+	}
+}
+
+func TestRevokedTokenIsRejected(t *testing.T) {
+	api, store := newTestAPI()
+	h := api.Routes()
+	deviceCode, userCode, _ := startPairing(t, h)
+	submit(t, h, userCode, testApprovalPassword, "approve")
+	_, got := poll(t, h, deviceCode)
+	token := got["token"]
+
+	if rec := do(t, h, "GET", "/v1/devices", "wrong-password", ""); rec.Code != 401 {
+		t.Fatalf("devices without the password: %d", rec.Code)
+	}
+	if rec := do(t, h, "GET", "/v1/devices", token, ""); rec.Code != 401 {
+		t.Fatal("a car token opened the device list")
+	}
+	rec := do(t, h, "GET", "/v1/devices", testApprovalPassword, "")
+	if rec.Code != 200 || !strings.Contains(rec.Body.String(), got["deviceId"]) || strings.Contains(rec.Body.String(), store.devices[0].TokenHash) {
+		t.Fatalf("list: %d %s", rec.Code, rec.Body)
+	}
+	if rec := do(t, h, "POST", "/v1/devices/"+got["deviceId"]+"/revoke", testApprovalPassword, ""); rec.Code != 204 {
+		t.Fatalf("revoke: %d", rec.Code)
+	}
+	if last := store.devices[len(store.devices)-1]; !last.Revoked {
+		t.Fatal("revocation not persisted")
+	}
+	if rec := do(t, h, "POST", "/v1/telemetry", token, string(telemetryBody(`{"utc":1790000000}`))); rec.Code != 401 {
+		t.Fatalf("revoked token accepted: %d", rec.Code)
+	}
+	// The shared ingest token is unaffected.
+	if rec := do(t, h, "POST", "/v1/telemetry", testToken, string(telemetryBody(`{"utc":1790000000,"soc":1}`))); rec.Code != 200 {
+		t.Fatalf("shared token: %d", rec.Code)
+	}
+}
+
+func TestPairedDevicesSurviveARestart(t *testing.T) {
+	devices := []Device{{ID: "d1", TokenHash: hashToken("restored-token-0123456789abcdef"), CreatedAt: time.Now()},
+		{ID: "d2", TokenHash: hashToken("revoked-token-0123456789abcdef"), CreatedAt: time.Now(), Revoked: true}}
+	p := NewPairing(testApprovalPassword, devices)
+	_, restored := p.Authorized("restored-token-0123456789abcdef")
+	_, revoked := p.Authorized("revoked-token-0123456789abcdef")
+	if !restored || revoked {
+		t.Fatal("restored devices not honoured")
+	}
+}
+
+func TestPairingOffWithoutAPassword(t *testing.T) {
+	api, _ := newTestAPI()
+	api.Pairing = NewPairing("", nil)
+	h := api.Routes()
+	if rec := do(t, h, "POST", "/v1/pair/start", "", `{"installationId":"`+testInstallation+`"}`); rec.Code != 404 {
+		t.Fatalf("start: %d", rec.Code)
+	}
+	if rec := do(t, h, "GET", "/pair", "", ""); rec.Code != 404 {
+		t.Fatalf("page: %d", rec.Code)
+	}
+	if rec := do(t, h, "GET", "/v1/devices", "", ""); rec.Code != 404 {
+		t.Fatalf("devices: %d", rec.Code)
+	}
+}
+
+func TestUserCodesNormalise(t *testing.T) {
+	for in, want := range map[string]string{"k7f-3qx": "K7F-3QX", " K7F3QX ": "K7F-3QX", "k7f 3qx": "K7F-3QX", "K7F-3Q": "", "": ""} {
+		if got := normalizeUserCode(in); got != want {
+			t.Errorf("%q: got %q, want %q", in, got, want)
+		}
+	}
+}
+
+func TestApprovalPasswordMustBeLongEnough(t *testing.T) {
+	env := map[string]string{"INFLUX_URL": "u", "INFLUX_TOKEN": "t", "INFLUX_ORG": "o",
+		"INGEST_TOKEN": "0123456789abcdef01234567", "APPROVAL_PASSWORD": "short"}
+	if _, err := loadConfig(func(k string) string { return env[k] }); err == nil {
+		t.Fatal("short approval password accepted")
+	}
+}
+
+var regexpUserCode = regexp.MustCompile(`^[` + userCodeAlphabet + `]{3}-[` + userCodeAlphabet + `]{3}$`)
+
+func TestPairedTokenOnlyServesItsOwnInstallation(t *testing.T) {
+	api, _ := newTestAPI()
+	h := api.Routes()
+	deviceCode, userCode, _ := startPairing(t, h)
+	submit(t, h, userCode, testApprovalPassword, "approve")
+	_, got := poll(t, h, deviceCode)
+	token := got["token"]
+	other := "7e2b3c4d-5e6f-4a70-9b8c-1d2e3f4a5b6c"
+	body := `{"installationId":"` + other + `","samples":[{"utc":1790000000,"soc":5}]}`
+	if rec := do(t, h, "POST", "/v1/telemetry", token, body); rec.Code != 403 {
+		t.Fatalf("telemetry for another car: %d", rec.Code)
+	}
+	if rec := do(t, h, "GET", "/v1/consumption/history/"+other, token, ""); rec.Code != 403 {
+		t.Fatalf("another car's history: %d", rec.Code)
+	}
+	if rec := do(t, h, "GET", "/v1/consumption/history/"+testInstallation, token, ""); rec.Code != 200 {
+		t.Fatalf("own history: %d", rec.Code)
+	}
+	// The shared token serves any installation.
+	if rec := do(t, h, "POST", "/v1/telemetry", testToken, body); rec.Code != 200 {
+		t.Fatalf("shared token: %d", rec.Code)
+	}
+}
+
+func TestATokenIsCollectableOnlyOnceSaved(t *testing.T) {
+	p := NewPairing(testApprovalPassword, nil)
+	r, err := p.Start(testInstallation, "192.0.2.1")
+	if err != nil {
+		t.Fatal(err)
+	}
+	d, err := p.Decide(r.userCode, testApprovalPassword, "192.0.2.1", true)
+	if err != nil {
+		t.Fatal(err)
+	}
+	// Saving is in flight: the car still waits, and the token is not accepted yet.
+	if state, token, _, _ := p.Poll(r.deviceCode); state != pairingPending || token != "" {
+		t.Fatalf("collectable while saving: %v %q", state, token)
+	}
+	p.Forget(r.userCode, d)
+	if _, err := p.Decide(r.userCode, testApprovalPassword, "192.0.2.1", true); err != nil {
+		t.Fatalf("not approvable again after a failed save: %v", err)
+	}
+}
+
+func TestPairingStartsAreLimitedPerAddress(t *testing.T) {
+	p := NewPairing(testApprovalPassword, nil)
+	ids := []string{"6f1a2b3c-4d5e-4f60-8a9b-0c1d2e3f4a51", "6f1a2b3c-4d5e-4f60-8a9b-0c1d2e3f4a52",
+		"6f1a2b3c-4d5e-4f60-8a9b-0c1d2e3f4a53", "6f1a2b3c-4d5e-4f60-8a9b-0c1d2e3f4a54"}
+	for _, id := range ids[:maxPendingPerClient] {
+		if _, err := p.Start(id, "203.0.113.9"); err != nil {
+			t.Fatal(err)
+		}
+	}
+	if _, err := p.Start(ids[3], "203.0.113.9"); !errors.Is(err, errTooMany) {
+		t.Fatalf("over the per-address limit: %v", err)
+	}
+	// The car on its own address is unaffected, and starting again replaces its request.
+	first, err := p.Start(testInstallation, "192.0.2.1")
+	if err != nil {
+		t.Fatal(err)
+	}
+	if _, err := p.Start(testInstallation, "192.0.2.1"); err != nil {
+		t.Fatal(err)
+	}
+	if _, _, _, err := p.Poll(first.deviceCode); !errors.Is(err, errUnknownCode) {
+		t.Fatal("the replaced request is still open")
+	}
+}
+
+func TestClientAddressTakesTheProxysEntry(t *testing.T) {
+	req := httptest.NewRequest("GET", "/", nil)
+	req.Header.Set("X-Forwarded-For", "10.9.9.9, 198.51.100.7")
+	if got := clientAddress(req); got != "198.51.100.7" {
+		t.Fatalf("got %q", got)
+	}
+	req.Header.Del("X-Forwarded-For")
+	if got := clientAddress(req); got != "192.0.2.1" {
+		t.Fatalf("without a proxy: %q", got)
+	}
+}
diff --git a/server/releases.go b/server/releases.go
new file mode 100644
index 0000000..ce3d356
--- /dev/null
+++ b/server/releases.go
@@ -0,0 +1,209 @@
+package main
+
+import (
+	"context"
+	"encoding/json"
+	"errors"
+	"fmt"
+	"io"
+	"log/slog"
+	"net/http"
+	"net/url"
+	"strconv"
+	"strings"
+	"time"
+)
+
+// Releases relays the app's own releases from the private forge repository to the car, for
+// the in-app updater. The repository stays private and the forge token stays here: the car
+// asks this server with its own token and never holds a forge credential.
+//
+//	GET /v1/app/releases                           the repo's releases, GitHub-shaped
+//	GET /v1/app/assets/{release}/{asset}/{name}    one attachment, streamed through
+//
+// The car still checks everything itself (SHA-256 sidecar, package name, signature by the
+// installer); this only carries bytes. Off unless FORGE_URL, FORGE_REPO and FORGE_TOKEN are set.
+type Releases struct {
+	ForgeURL string // e.g. https://git.stinnesbeck.com
+	Repo     string // owner/name
+	Token    string // read-only on the repository
+	Client   *http.Client
+}
+
+const (
+	maxReleaseListBytes = 1 << 20
+	maxAssetBytes       = 64 << 20
+	// An APK over a slow mobile link takes longer than the server's general write timeout.
+	assetWriteTimeout = 10 * time.Minute
+)
+
+func (rel *Releases) enabled() bool {
+	return rel != nil && rel.ForgeURL != "" && rel.Repo != "" && rel.Token != ""
+}
+
+func (rel *Releases) client() *http.Client {
+	if rel.Client != nil {
+		return rel.Client
+	}
+	return &http.Client{Timeout: 5 * time.Minute, CheckRedirect: rel.sameHostOnly}
+}
+
+// sameHostOnly keeps the token on the forge: a redirect elsewhere is refused, not followed
+// with the Authorization header.
+func (rel *Releases) sameHostOnly(req *http.Request, via []*http.Request) error {
+	forge, err := url.Parse(rel.ForgeURL)
+	if err != nil || req.URL.Host != forge.Host || req.URL.Scheme != forge.Scheme {
+		return errors.New("redirect away from the forge refused")
+	}
+	if len(via) > 5 {
+		return errors.New("too many redirects")
+	}
+	return nil
+}
+
+func (rel *Releases) get(ctx context.Context, path string) (*http.Response, error) {
+	req, err := http.NewRequestWithContext(ctx, http.MethodGet, strings.TrimRight(rel.ForgeURL, "/")+path, nil)
+	if err != nil {
+		return nil, err
+	}
+	req.Header.Set("Authorization", "token "+rel.Token)
+	req.Header.Set("Accept", "application/json")
+	return rel.client().Do(req)
+}
+
+type forgeAsset struct {
+	ID   int64  `json:"id"`
+	Name string `json:"name"`
+	Size int64  `json:"size"`
+}
+
+type forgeRelease struct {
+	ID         int64        `json:"id"`
+	TagName    string       `json:"tag_name"`
+	Prerelease bool         `json:"prerelease"`
+	Draft      bool         `json:"draft"`
+	Assets     []forgeAsset `json:"assets"`
+}
+
+// carRelease is what the car's updater reads: GitHub's field names, with download URLs that
+// point back at this server.
+type carRelease struct {
+	TagName    string     `json:"tag_name"`
+	Prerelease bool       `json:"prerelease"`
+	Draft      bool       `json:"draft"`
+	Assets     []carAsset `json:"assets"`
+}
+
+type carAsset struct {
+	Name               string `json:"name"`
+	Size               int64  `json:"size"`
+	BrowserDownloadURL string `json:"browser_download_url"`
+}
+
+func (a *API) releaseRoutes(mux *http.ServeMux) {
+	mux.HandleFunc("GET /v1/app/releases", a.ingest(a.appReleases))
+	mux.HandleFunc("GET /v1/app/assets/{release}/{asset}/{name}", a.ingest(a.appAsset))
+}
+
+func (a *API) releasesOff(w http.ResponseWriter) bool {
+	if a.Releases.enabled() {
+		return false
+	}
+	writeJSON(w, http.StatusNotFound, map[string]string{"error": "app updates are not enabled"})
+	return true
+}
+
+func (a *API) appReleases(w http.ResponseWriter, r *http.Request, _ caller, _ []byte) error {
+	if a.releasesOff(w) {
+		return nil
+	}
+	resp, err := a.Releases.get(r.Context(), "/api/v1/repos/"+a.Releases.Repo+"/releases?limit=20")
+	if err != nil {
+		return fmt.Errorf("forge releases: %w", err)
+	}
+	defer resp.Body.Close()
+	if resp.StatusCode != http.StatusOK {
+		slog.Warn("forge refused the release list", "status", resp.StatusCode)
+		writeJSON(w, http.StatusBadGateway, map[string]string{"error": "the forge did not answer"})
+		return nil
+	}
+	var releases []forgeRelease
+	if err := json.NewDecoder(io.LimitReader(resp.Body, maxReleaseListBytes)).Decode(&releases); err != nil {
+		return fmt.Errorf("forge releases: %w", err)
+	}
+	base := a.publicURL(r) + "/v1/app/assets/"
+	out := make([]carRelease, 0, len(releases))
+	for _, rel := range releases {
+		cr := carRelease{TagName: rel.TagName, Prerelease: rel.Prerelease, Draft: rel.Draft, Assets: []carAsset{}}
+		for _, as := range rel.Assets {
+			cr.Assets = append(cr.Assets, carAsset{Name: as.Name, Size: as.Size,
+				BrowserDownloadURL: base + strconv.FormatInt(rel.ID, 10) + "/" + strconv.FormatInt(as.ID, 10) +
+					"/" + url.PathEscape(as.Name)})
+		}
+		out = append(out, cr)
+	}
+	writeJSON(w, http.StatusOK, out)
+	return nil
+}
+
+// appAsset streams one release attachment. The forge's own metadata names the file, so a car
+// cannot ask for anything but an attachment of this repository's releases.
+func (a *API) appAsset(w http.ResponseWriter, r *http.Request, _ caller, _ []byte) error {
+	if a.releasesOff(w) {
+		return nil
+	}
+	releaseID, err1 := strconv.ParseInt(r.PathValue("release"), 10, 64)
+	assetID, err2 := strconv.ParseInt(r.PathValue("asset"), 10, 64)
+	if err1 != nil || err2 != nil || releaseID <= 0 || assetID <= 0 {
+		return invalid("release or asset is invalid")
+	}
+	meta, err := a.Releases.get(r.Context(), fmt.Sprintf("/api/v1/repos/%s/releases/%d/assets/%d",
+		a.Releases.Repo, releaseID, assetID))
+	if err != nil {
+		return fmt.Errorf("forge asset: %w", err)
+	}
+	var asset struct {
+		Name string `json:"name"`
+		UUID string `json:"uuid"`
+	}
+	decodeErr := json.NewDecoder(io.LimitReader(meta.Body, 64<<10)).Decode(&asset)
+	meta.Body.Close()
+	if meta.StatusCode == http.StatusNotFound {
+		writeJSON(w, http.StatusNotFound, map[string]string{"error": "no such asset"})
+		return nil
+	}
+	if meta.StatusCode != http.StatusOK || decodeErr != nil || asset.UUID == "" {
+		slog.Warn("forge refused the asset", "status", meta.StatusCode)
+		writeJSON(w, http.StatusBadGateway, map[string]string{"error": "the forge did not answer"})
+		return nil
+	}
+	if asset.Name != r.PathValue("name") {
+		writeJSON(w, http.StatusNotFound, map[string]string{"error": "no such asset"})
+		return nil
+	}
+	file, err := a.Releases.get(r.Context(), "/attachments/"+url.PathEscape(asset.UUID))
+	if err != nil {
+		return fmt.Errorf("forge download: %w", err)
+	}
+	defer file.Body.Close()
+	if file.StatusCode != http.StatusOK {
+		slog.Warn("forge refused the download", "status", file.StatusCode)
+		writeJSON(w, http.StatusBadGateway, map[string]string{"error": "the forge did not answer"})
+		return nil
+	}
+	if err := http.NewResponseController(w).SetWriteDeadline(time.Now().Add(assetWriteTimeout)); err != nil {
+		slog.Warn("asset write deadline not extended", "error", err)
+	}
+	h := w.Header()
+	h.Set("Content-Type", "application/octet-stream")
+	h.Set("Content-Disposition", `attachment; filename="`+strings.ReplaceAll(asset.Name, `"`, "")+`"`)
+	h.Set("Cache-Control", "no-store")
+	if file.ContentLength > 0 && file.ContentLength <= maxAssetBytes {
+		h.Set("Content-Length", strconv.FormatInt(file.ContentLength, 10))
+	}
+	w.WriteHeader(http.StatusOK)
+	if _, err := io.Copy(w, io.LimitReader(file.Body, maxAssetBytes)); err != nil {
+		slog.Warn("asset transfer cut short", "asset", asset.Name, "error", err)
+	}
+	return nil
+}
diff --git a/server/releases_test.go b/server/releases_test.go
new file mode 100644
index 0000000..4c0c7e0
--- /dev/null
+++ b/server/releases_test.go
@@ -0,0 +1,115 @@
+package main
+
+import (
+	"encoding/json"
+	"net/http"
+	"net/http/httptest"
+	"strings"
+	"testing"
+)
+
+const testForgeToken = "forge-read-token-0123456789"
+
+// fakeForge answers like Gitea for one pre-release with an APK and its sidecar, and only to
+// the right token.
+func fakeForge(t *testing.T) *httptest.Server {
+	t.Helper()
+	mux := http.NewServeMux()
+	auth := func(h http.HandlerFunc) http.HandlerFunc {
+		return func(w http.ResponseWriter, r *http.Request) {
+			if r.Header.Get("Authorization") != "token "+testForgeToken {
+				http.NotFound(w, r) // a private repository looks absent without a login
+				return
+			}
+			h(w, r)
+		}
+	}
+	mux.HandleFunc("GET /api/v1/repos/nils/mg4/releases", auth(func(w http.ResponseWriter, r *http.Request) {
+		_, _ = w.Write([]byte(`[{"id":7,"tag_name":"car-2.16.0","prerelease":true,"draft":false,"assets":[
+			{"id":11,"name":"NilsMG4-unstable-2.16.0.apk","size":4},
+			{"id":12,"name":"NilsMG4-unstable-2.16.0.apk.sha256","size":64}]}]`))
+	}))
+	mux.HandleFunc("GET /api/v1/repos/nils/mg4/releases/7/assets/11", auth(func(w http.ResponseWriter, r *http.Request) {
+		_, _ = w.Write([]byte(`{"id":11,"name":"NilsMG4-unstable-2.16.0.apk","uuid":"abc-uuid"}`))
+	}))
+	mux.HandleFunc("GET /attachments/abc-uuid", auth(func(w http.ResponseWriter, r *http.Request) {
+		_, _ = w.Write([]byte("APK!"))
+	}))
+	return httptest.NewTLSServer(mux)
+}
+
+func releasesAPI(t *testing.T, forge *httptest.Server) http.Handler {
+	t.Helper()
+	api, _ := newTestAPI()
+	api.Releases = &Releases{ForgeURL: forge.URL, Repo: "nils/mg4", Token: testForgeToken, Client: forge.Client()}
+	return api.Routes()
+}
+
+func TestReleasesAreRelayedWithDownloadsThroughTheServer(t *testing.T) {
+	forge := fakeForge(t)
+	defer forge.Close()
+	h := releasesAPI(t, forge)
+	if rec := do(t, h, "GET", "/v1/app/releases", "", ""); rec.Code != 401 {
+		t.Fatalf("without the car's token: %d", rec.Code)
+	}
+	rec := do(t, h, "GET", "/v1/app/releases", testToken, "")
+	if rec.Code != 200 {
+		t.Fatalf("%d %s", rec.Code, rec.Body)
+	}
+	var got []carRelease
+	if err := json.Unmarshal(rec.Body.Bytes(), &got); err != nil {
+		t.Fatal(err)
+	}
+	if len(got) != 1 || !got[0].Prerelease || len(got[0].Assets) != 2 ||
+		got[0].Assets[0].BrowserDownloadURL != "https://car.example.com/v1/app/assets/7/11/NilsMG4-unstable-2.16.0.apk" {
+		t.Fatalf("releases %+v", got)
+	}
+	if strings.Contains(rec.Body.String(), testForgeToken) || strings.Contains(rec.Body.String(), forge.URL) {
+		t.Fatal("the forge or its token leaked to the car")
+	}
+	file := do(t, h, "GET", "/v1/app/assets/7/11/NilsMG4-unstable-2.16.0.apk", testToken, "")
+	if file.Code != 200 || file.Body.String() != "APK!" {
+		t.Fatalf("download %d %q", file.Code, file.Body)
+	}
+	// The name must be the asset's own: no asking for one file under another's name.
+	if rec := do(t, h, "GET", "/v1/app/assets/7/11/other.apk", testToken, ""); rec.Code != 404 {
+		t.Fatalf("wrong name: %d", rec.Code)
+	}
+}
+
+func TestAWrongForgeTokenIsABadGatewayNotALeak(t *testing.T) {
+	forge := fakeForge(t)
+	defer forge.Close()
+	api, _ := newTestAPI()
+	api.Releases = &Releases{ForgeURL: forge.URL, Repo: "nils/mg4", Token: "wrong", Client: forge.Client()}
+	if rec := do(t, api.Routes(), "GET", "/v1/app/releases", testToken, ""); rec.Code != 502 {
+		t.Fatalf("%d", rec.Code)
+	}
+}
+
+func TestAppUpdatesAreOffWithoutAForge(t *testing.T) {
+	api, _ := newTestAPI()
+	if rec := do(t, api.Routes(), "GET", "/v1/app/releases", testToken, ""); rec.Code != 404 {
+		t.Fatalf("%d", rec.Code)
+	}
+}
+
+func TestRedirectsAwayFromTheForgeAreRefused(t *testing.T) {
+	rel := &Releases{ForgeURL: "https://git.example.com"}
+	away, _ := http.NewRequest("GET", "https://elsewhere.example.com/x", nil)
+	if rel.sameHostOnly(away, nil) == nil {
+		t.Fatal("redirect to another host followed")
+	}
+	same, _ := http.NewRequest("GET", "https://git.example.com/attachments/x", nil)
+	if err := rel.sameHostOnly(same, nil); err != nil {
+		t.Fatal(err)
+	}
+}
+
+func TestForgeURLMustBeHTTPS(t *testing.T) {
+	env := map[string]string{"INFLUX_URL": "u", "INFLUX_TOKEN": "t", "INFLUX_ORG": "o",
+		"INGEST_TOKEN": "0123456789abcdef01234567", "FORGE_URL": "http://git.example.com"}
+	if _, err := loadConfig(func(k string) string { return env[k] }); err == nil {
+		t.Fatal("plain http forge accepted")
+	}
+}
diff --git a/server/store.go b/server/store.go
new file mode 100644
index 0000000..0dab1a8
--- /dev/null
+++ b/server/store.go
@@ -0,0 +1,200 @@
+package main
+
+import (
+	"context"
+	"fmt"
+	"strings"
+	"time"
+
+	influxdb2 "github.com/influxdata/influxdb-client-go/v2"
+	"github.com/influxdata/influxdb-client-go/v2/api"
+	"github.com/influxdata/influxdb-client-go/v2/api/write"
+)
+
+// Store is what the handlers need from the database; a fake implements it in tests.
+type Store interface {
+	WriteTelemetry(ctx context.Context, installationID string, samples []TelemetrySample) error
+	WriteConsumptionChunk(ctx context.Context, chunk ConsumptionChunk) error
+	WriteChargingSession(ctx context.Context, session ChargingSession) error
+	ReadConsumptionChunks(ctx context.Context, installationID string) ([]ConsumptionChunk, error)
+	SaveDevice(ctx context.Context, d Device) error
+	LoadDevices(ctx context.Context) ([]Device, error)
+}
+
+// InfluxStore keeps everything in one InfluxDB 2 bucket; every point carries an
+// installationId tag. Grafana reads the same bucket directly.
+//
+//	telemetry          time = sample utc                  ABRP tlm fields (floats and booleans)
+//	consumption_chunk  time = recordedAt   tags: date     km, kwh, hours, socDrop, sohPercent
+//	charging_session   time = startedAt    tags: sessionId summary fields
+//	charging_curve     time = point time   tags: sessionId powerKw, socPercent
+//	device             time = createdAt    tags: deviceId  tokenHash, installationId, revoked
+//
+// Idempotency comes from InfluxDB itself: a point with the same measurement, tags and
+// timestamp replaces the earlier one. The car re-sends a cached chunk with its original
+// recordedAt and a session under its own id, so a retry overwrites instead of adding.
+//
+// Every number is written as a float. InfluxDB fixes a field's type on first write, so
+// a 0 written as an integer would make every later 0.5 a rejected write.
+type InfluxStore struct {
+	client influxdb2.Client
+	write  api.WriteAPIBlocking
+	query  api.QueryAPI
+	bucket string
+}
+
+const tagInstallation = "installationId"
+
+func NewInfluxStore(url, token, org, bucket string) *InfluxStore {
+	client := influxdb2.NewClientWithOptions(url, token,
+		influxdb2.DefaultOptions().SetHTTPRequestTimeout(10).SetPrecision(time.Millisecond))
+	return &InfluxStore{
+		client: client,
+		write:  client.WriteAPIBlocking(org, bucket),
+		query:  client.QueryAPI(org),
+		bucket: bucket,
+	}
+}
+
+func (s *InfluxStore) Close() { s.client.Close() }
+
+func (s *InfluxStore) WriteTelemetry(ctx context.Context, id string, samples []TelemetrySample) error {
+	points := make([]*write.Point, 0, len(samples))
+	for _, sample := range samples {
+		fields := make(map[string]any, len(sample.Numbers)+len(sample.Flags))
+		for k, v := range sample.Numbers {
+			fields[k] = v
+		}
+		for k, v := range sample.Flags {
+			fields[k] = v
+		}
+		if len(fields) == 0 {
+			// A point needs at least one field; a bare timestamp says nothing anyway.
+			continue
+		}
+		points = append(points, influxdb2.NewPoint("telemetry",
+			map[string]string{tagInstallation: id}, fields, time.Unix(sample.UTC, 0)))
+	}
+	if len(points) == 0 {
+		return nil
+	}
+	return s.write.WritePoint(ctx, points...)
+}
+
+func (s *InfluxStore) WriteConsumptionChunk(ctx context.Context, c ConsumptionChunk) error {
+	fields := map[string]any{"km": c.Day.Km, "kwh": c.Day.Kwh, "hours": c.Day.Hours, "socDrop": c.Day.SocDrop}
+	if c.SohPercent != nil {
+		fields["sohPercent"] = *c.SohPercent
+	}
+	return s.write.WritePoint(ctx, influxdb2.NewPoint("consumption_chunk",
+		map[string]string{tagInstallation: c.InstallationID, "date": c.Date}, fields, c.RecordedAt))
+}
+
+func (s *InfluxStore) WriteChargingSession(ctx context.Context, cs ChargingSession) error {
+	tags := map[string]string{tagInstallation: cs.InstallationID, "sessionId": cs.SessionID}
+	summary := map[string]any{
+		"endedAtMs":           cs.EndedAt.UnixMilli(),
+		"durationSeconds":     cs.DurationSeconds,
+		"energyKwh":           cs.EnergyKwh,
+		"chargingLossPercent": cs.ChargingLossPercent,
+		"gridEnergyKwh":       cs.GridEnergyKwh,
+		"pricePerKwh":         cs.PricePerKwh,
+		"totalCost":           cs.TotalCost,
+		"isDemo":              cs.IsDemo,
+	}
+	if cs.StartSocPercent != nil {
+		summary["startSocPercent"] = *cs.StartSocPercent
+	}
+	if cs.EndSocPercent != nil {
+		summary["endSocPercent"] = *cs.EndSocPercent
+	}
+	points := []*write.Point{influxdb2.NewPoint("charging_session", tags, summary, cs.StartedAt)}
+	for _, p := range cs.Curve {
+		fields := map[string]any{"powerKw": p.PowerKw}
+		if p.SocPercent != nil {
+			fields["socPercent"] = *p.SocPercent
+		}
+		points = append(points, influxdb2.NewPoint("charging_curve", tags, fields, p.Timestamp))
+	}
+	return s.write.WritePoint(ctx, points...)
+}
+
+// fluxString quotes a value as a Flux string literal. Ids are validated UUIDs before they
+// get here; the escaping is for the bucket name and as a second line of defence.
+func fluxString(value string) string {
+	return `"` + strings.NewReplacer(`\`, `\\`, `"`, `\"`, "$", `\$`).Replace(value) + `"`
+}
+
+func (s *InfluxStore) ReadConsumptionChunks(ctx context.Context, id string) ([]ConsumptionChunk, error) {
+	query := fmt.Sprintf(`from(bucket: %s)
+  |> range(start: 0)
+  |> filter(fn: (r) => r._measurement == "consumption_chunk" and r.installationId == %s)
+  |> pivot(rowKey: ["_time"], columnKey: ["_field"], valueColumn: "_value")`,
+		fluxString(s.bucket), fluxString(id))
+	result, err := s.query.Query(ctx, query)
+	if err != nil {
+		return nil, err
+	}
+	defer result.Close()
+	var chunks []ConsumptionChunk
+	for result.Next() {
+		r := result.Record()
+		date, _ := r.ValueByKey("date").(string)
+		chunk := ConsumptionChunk{
+			InstallationID: id,
+			Date:           date,
+			RecordedAt:     r.Time(),
+			Day: Totals{
+				Km:      floatValue(r.ValueByKey("km")),
+				Kwh:     floatValue(r.ValueByKey("kwh")),
+				Hours:   floatValue(r.ValueByKey("hours")),
+				SocDrop: floatValue(r.ValueByKey("socDrop")),
+			},
+		}
+		if soh, ok := r.ValueByKey("sohPercent").(float64); ok {
+			chunk.SohPercent = &soh
+		}
+		chunks = append(chunks, chunk)
+	}
+	return chunks, result.Err()
+}
+
+func floatValue(v any) float64 {
+	f, _ := v.(float64)
+	return f
+}
+
+// SaveDevice writes a paired car. Re-saving it (a revocation) overwrites the same point,
+// because measurement, tag and timestamp stay the same.
+func (s *InfluxStore) SaveDevice(ctx context.Context, d Device) error {
+	return s.write.WritePoint(ctx, influxdb2.NewPoint("device",
+		map[string]string{"deviceId": d.ID},
+		map[string]any{"tokenHash": d.TokenHash, "installationId": d.InstallationID, "revoked": d.Revoked},
+		d.CreatedAt))
+}
+
+func (s *InfluxStore) LoadDevices(ctx context.Context) ([]Device, error) {
+	query := fmt.Sprintf(`from(bucket: %s)
+  |> range(start: 0)
+  |> filter(fn: (r) => r._measurement == "device")
+  |> pivot(rowKey: ["_time"], columnKey: ["_field"], valueColumn: "_value")`, fluxString(s.bucket))
+	result, err := s.query.Query(ctx, query)
+	if err != nil {
+		return nil, err
+	}
+	defer result.Close()
+	var devices []Device
+	for result.Next() {
+		r := result.Record()
+		id, _ := r.ValueByKey("deviceId").(string)
+		hash, _ := r.ValueByKey("tokenHash").(string)
+		installation, _ := r.ValueByKey("installationId").(string)
+		revoked, _ := r.ValueByKey("revoked").(bool)
+		if id == "" || hash == "" {
+			continue
+		}
+		devices = append(devices, Device{ID: id, InstallationID: installation, TokenHash: hash,
+			CreatedAt: r.Time(), Revoked: revoked})
+	}
+	return devices, result.Err()
+}
diff --git a/server/validate.go b/server/validate.go
new file mode 100644
index 0000000..c82cbe3
--- /dev/null
+++ b/server/validate.go
@@ -0,0 +1,347 @@
+package main
+
+import (
+	"bytes"
+	"encoding/json"
+	"fmt"
+	"math"
+	"regexp"
+	"sort"
+	"time"
+)
+
+// Request validation for the ingest endpoints, ported rule for rule from the TypeScript
+// server. The car is the only writer and it is trusted, but a bad field is written once
+// and read forever: every number is bounded, and an out-of-range value is rejected rather
+// than stored and quietly plotted.
+
+// ValidationError is a 400: the message may name the bad field.
+type ValidationError struct{ msg string }
+
+func (e *ValidationError) Error() string { return e.msg }
+
+func invalid(format string, args ...any) error {
+	return &ValidationError{msg: fmt.Sprintf(format, args...)}
+}
+
+var (
+	uuidPattern    = regexp.MustCompile(`(?i)^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$`)
+	isoDatePattern = regexp.MustCompile(`^\d{4}-\d{2}-\d{2}$`)
+)
+
+const (
+	maxSamples      = 500
+	maxCurvePoints  = 720
+	maxSafeInteger  = 1<<53 - 1
+	utcMin          = 1_000_000_000 // epoch seconds: 2001…
+	utcMax          = 9_999_999_999 // …2286; milliseconds would be far above
+	totalsMaxAbs    = 10_000_000
+	chargingLossPct = 10
+)
+
+// object is a decoded JSON object whose numbers stay json.Number, so integers and
+// floats can be told apart and nothing is rounded on the way in.
+type object map[string]any
+
+func decodeObject(body []byte) (object, error) {
+	dec := json.NewDecoder(bytes.NewReader(body))
+	dec.UseNumber()
+	var value any
+	if err := dec.Decode(&value); err != nil {
+		return nil, invalid("body is not valid JSON")
+	}
+	if dec.More() {
+		return nil, invalid("body is not valid JSON")
+	}
+	return asObject(value, "body")
+}
+
+func asObject(value any, name string) (object, error) {
+	o, ok := value.(map[string]any)
+	if !ok {
+		if name == "body" {
+			return nil, invalid("body is required")
+		}
+		return nil, invalid("%s is invalid", name)
+	}
+	return object(o), nil
+}
+
+func (o object) has(key string) bool {
+	v, ok := o[key]
+	return ok && v != nil
+}
+
+func number(value any, name string) (float64, error) {
+	n, ok := value.(json.Number)
+	if !ok {
+		return 0, invalid("%s is invalid", name)
+	}
+	f, err := n.Float64()
+	if err != nil || math.IsNaN(f) || math.IsInf(f, 0) {
+		return 0, invalid("%s is invalid", name)
+	}
+	return f, nil
+}
+
+func bounded(value any, min, max float64, name string) (float64, error) {
+	f, err := number(value, name)
+	if err != nil || f < min || f > max {
+		return 0, invalid("%s is invalid", name)
+	}
+	return f, nil
+}
+
+// integer accepts a whole, non-negative number up to 2^53-1 — what JavaScript and the
+// car's JSON can carry exactly.
+func integer(value any, name string) (int64, error) {
+	f, err := number(value, name)
+	if err != nil || f != math.Trunc(f) || f < 0 || f > maxSafeInteger {
+		return 0, invalid("%s is invalid", name)
+	}
+	return int64(f), nil
+}
+
+func validDate(value any, name string) (time.Time, error) {
+	ms, err := integer(value, name)
+	if err != nil {
+		return time.Time{}, err
+	}
+	return time.UnixMilli(ms).UTC(), nil
+}
+
+func validUUID(value any, name string) (string, error) {
+	s, ok := value.(string)
+	if !ok || !uuidPattern.MatchString(s) {
+		return "", invalid("%s is invalid", name)
+	}
+	return s, nil
+}
+
+func optionalBounded(o object, key string, min, max float64, name string) (*float64, error) {
+	if !o.has(key) {
+		return nil, nil
+	}
+	f, err := bounded(o[key], min, max, name)
+	if err != nil {
+		return nil, err
+	}
+	return &f, nil
+}
+
+func validTotals(value any, name string) (Totals, error) {
+	o, err := asObject(value, name)
+	if err != nil {
+		return Totals{}, err
+	}
+	var t Totals
+	for _, field := range []struct {
+		key string
+		dst *float64
+	}{{"km", &t.Km}, {"kwh", &t.Kwh}, {"hours", &t.Hours}, {"socDrop", &t.SocDrop}} {
+		f, err := number(o[field.key], name+"."+field.key)
+		if err != nil || math.Abs(f) > totalsMaxAbs {
+			return Totals{}, invalid("%s.%s is invalid", name, field.key)
+		}
+		*field.dst = f
+	}
+	return t, nil
+}
+
+func validateConsumption(body []byte) (ConsumptionChunk, error) {
+	o, err := decodeObject(body)
+	if err != nil {
+		return ConsumptionChunk{}, err
+	}
+	date, ok := o["date"].(string)
+	if !ok || !isoDatePattern.MatchString(date) {
+		return ConsumptionChunk{}, invalid("date is invalid")
+	}
+	id, err := validUUID(o["installationId"], "installationId")
+	if err != nil {
+		return ConsumptionChunk{}, err
+	}
+	recordedAt, err := validDate(o["recordedAt"], "recordedAt")
+	if err != nil {
+		return ConsumptionChunk{}, err
+	}
+	day, err := validTotals(o["day"], "day")
+	if err != nil {
+		return ConsumptionChunk{}, err
+	}
+	// A lifetime from an older app is still validated, so a malformed one is still a 400,
+	// but it is not stored: lifetime is derived from the day totals when read.
+	if o.has("lifetime") {
+		if _, err := validTotals(o["lifetime"], "lifetime"); err != nil {
+			return ConsumptionChunk{}, err
+		}
+	}
+	soh, err := optionalBounded(o, "sohPercent", 0, 100, "sohPercent")
+	if err != nil {
+		return ConsumptionChunk{}, err
+	}
+	return ConsumptionChunk{InstallationID: id, Date: date, RecordedAt: recordedAt, Day: day, SohPercent: soh}, nil
+}
+
+func validateChargingSession(body []byte, pathSessionID string) (ChargingSession, error) {
+	o, err := decodeObject(body)
+	if err != nil {
+		return ChargingSession{}, err
+	}
+	sessionID, err := validUUID(o["sessionId"], "sessionId")
+	if err != nil {
+		return ChargingSession{}, err
+	}
+	if sessionID != pathSessionID {
+		return ChargingSession{}, invalid("sessionId does not match path")
+	}
+	rawCurve, ok := o["curve"].([]any)
+	if !ok || len(rawCurve) > maxCurvePoints {
+		return ChargingSession{}, invalid("curve is invalid")
+	}
+	curve := make([]CurvePoint, 0, len(rawCurve))
+	for _, entry := range rawCurve {
+		p, err := asObject(entry, "curve")
+		if err != nil {
+			return ChargingSession{}, err
+		}
+		ts, err := validDate(p["timestampMs"], "curve.timestampMs")
+		if err != nil {
+			return ChargingSession{}, err
+		}
+		power, err := bounded(p["powerKw"], 0, 1000, "curve.powerKw")
+		if err != nil {
+			return ChargingSession{}, err
+		}
+		soc, err := optionalBounded(p, "socPercent", 0, 100, "curve.socPercent")
+		if err != nil {
+			return ChargingSession{}, err
+		}
+		curve = append(curve, CurvePoint{Timestamp: ts, PowerKw: power, SocPercent: soc})
+	}
+	s := ChargingSession{SessionID: sessionID, Curve: curve, ChargingLossPercent: chargingLossPct}
+	if s.EnergyKwh, err = bounded(o["energyKwh"], 0, 1000, "energyKwh"); err != nil {
+		return ChargingSession{}, err
+	}
+	if s.PricePerKwh, err = bounded(o["pricePerKwh"], 0, 1_000_000, "pricePerKwh"); err != nil {
+		return ChargingSession{}, err
+	}
+	if s.InstallationID, err = validUUID(o["installationId"], "installationId"); err != nil {
+		return ChargingSession{}, err
+	}
+	if s.StartedAt, err = validDate(o["startedAt"], "startedAt"); err != nil {
+		return ChargingSession{}, err
+	}
+	if s.EndedAt, err = validDate(o["endedAt"], "endedAt"); err != nil {
+		return ChargingSession{}, err
+	}
+	if s.DurationSeconds, err = bounded(o["durationSeconds"], 0, 604800, "durationSeconds"); err != nil {
+		return ChargingSession{}, err
+	}
+	if s.StartSocPercent, err = optionalBounded(o, "startSocPercent", 0, 100, "startSocPercent"); err != nil {
+		return ChargingSession{}, err
+	}
+	if s.EndSocPercent, err = optionalBounded(o, "endSocPercent", 0, 100, "endSocPercent"); err != nil {
+		return ChargingSession{}, err
+	}
+	// The car's own loss and grid figures are not trusted: the server applies its fixed 10 %.
+	s.GridEnergyKwh = s.EnergyKwh * 1.1
+	s.TotalCost = s.GridEnergyKwh * s.PricePerKwh
+	s.IsDemo = o["isDemo"] == true
+	return s, nil
+}
+
+// validateTelemetryBatch checks a batch of live samples in ABRP's tlm field names and
+// units. Unknown fields are dropped rather than rejected, so a newer app can add one
+// without a server release; a flag may be 0/1 or a boolean.
+//
+// Only a malformed request is a 400. A bad value inside a sample costs that value, and a
+// sample without a usable time costs that sample: the car drops a batch the server
+// rejects, and one sensor reading out of range must not take hours of queued driving with
+// it. What was dropped is listed in Dropped, for the response and the log.
+func validateTelemetryBatch(body []byte, now time.Time) (TelemetryBatch, error) {
+	o, err := decodeObject(body)
+	if err != nil {
+		return TelemetryBatch{}, err
+	}
+	id, err := validUUID(o["installationId"], "installationId")
+	if err != nil {
+		return TelemetryBatch{}, err
+	}
+	raw, ok := o["samples"].([]any)
+	if !ok || len(raw) == 0 || len(raw) > maxSamples {
+		return TelemetryBatch{}, invalid("samples is invalid")
+	}
+	batch := TelemetryBatch{InstallationID: id, Samples: make([]TelemetrySample, 0, len(raw))}
+	latest := now.Add(maxClockAhead).Unix()
+	for i, entry := range raw {
+		name := fmt.Sprintf("samples[%d]", i)
+		sample, dropped, ok := validateSample(entry, name, latest)
+		batch.Dropped = append(batch.Dropped, dropped...)
+		if ok {
+			batch.Samples = append(batch.Samples, sample)
+		}
+	}
+	return batch, nil
+}
+
+// maxClockAhead is how far in the future a sample may be stamped. The head unit sets its
+// clock from GPS; a sample from further ahead has a wrong time, and stored there it would
+// pose as the car's latest state until that time came.
+const maxClockAhead = time.Hour
+
+// validateSample keeps every valid field of one sample. It returns false when the sample
+// as a whole is unusable: not an object, or no plausible time. dropped names what was left
+// out.
+func validateSample(entry any, name string, latestUTC int64) (sample TelemetrySample, dropped []string, ok bool) {
+	o, err := asObject(entry, name)
+	if err != nil {
+		return TelemetrySample{}, []string{name}, false
+	}
+	utc, err := integer(o["utc"], name+".utc")
+	if err != nil || utc < utcMin || utc > utcMax || utc > latestUTC {
+		return TelemetrySample{}, []string{name + ".utc"}, false
+	}
+	sample = TelemetrySample{UTC: utc, Numbers: map[string]float64{}, Flags: map[string]bool{}}
+	for field, limits := range telemetryNumbers {
+		if !o.has(field) {
+			continue
+		}
+		f, err := bounded(o[field], limits[0], limits[1], name+"."+field)
+		if err != nil {
+			dropped = append(dropped, name+"."+field)
+			continue
+		}
+		sample.Numbers[field] = f
+	}
+	for _, field := range telemetryFlags {
+		if !o.has(field) {
+			continue
+		}
+		switch v := o[field].(type) {
+		case bool:
+			sample.Flags[field] = v
+		case json.Number:
+			switch v.String() {
+			case "1":
+				sample.Flags[field] = true
+			case "0":
+				sample.Flags[field] = false
+			default:
+				dropped = append(dropped, name+"."+field)
+			}
+		default:
+			dropped = append(dropped, name+"."+field)
+		}
+	}
+	// A position is only a position as a pair.
+	_, hasLat := sample.Numbers["lat"]
+	_, hasLon := sample.Numbers["lon"]
+	if hasLat != hasLon {
+		delete(sample.Numbers, "lat")
+		delete(sample.Numbers, "lon")
+		dropped = append(dropped, name+".lat/lon")
+	}
+	sort.Strings(dropped)
+	return sample, dropped, true
+}
diff --git a/server/validate_test.go b/server/validate_test.go
new file mode 100644
index 0000000..8d05212
--- /dev/null
+++ b/server/validate_test.go
@@ -0,0 +1,207 @@
+package main
+
+import (
+	"errors"
+	"strings"
+	"testing"
+	"time"
+)
+
+const (
+	testInstallation = "6f1a2b3c-4d5e-4f60-8a9b-0c1d2e3f4a5b"
+	testSession      = "11111111-2222-4333-8444-555555555555"
+	testNowS         = 1_790_000_000
+)
+
+// testNow is the sample time the telemetry tests send, as "now" for the clock-ahead check.
+var testNow = time.Unix(testNowS, 0)
+
+func isValidationError(err error) bool {
+	var v *ValidationError
+	return errors.As(err, &v)
+}
+
+func TestConsumptionAcceptsAWellFormedChunk(t *testing.T) {
+	c, err := validateConsumption([]byte(`{"installationId":"` + testInstallation + `","date":"2026-10-07",
+		"recordedAt":1760000000000,"day":{"km":42.5,"kwh":7.25,"hours":0.9,"socDrop":11.5},
+		"lifetime":{"km":12000,"kwh":2100,"hours":240,"socDrop":3400},"sohPercent":97.5}`))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if c.Date != "2026-10-07" || c.Day.Kwh != 7.25 || c.RecordedAt.UnixMilli() != 1760000000000 || *c.SohPercent != 97.5 {
+		t.Fatalf("unexpected chunk %+v", c)
+	}
+}
+
+func TestConsumptionMissingSohIsOmittedNotDefaulted(t *testing.T) {
+	// The car omits a field it could not read. Writing 0 would be a battery at nothing.
+	c, err := validateConsumption([]byte(`{"installationId":"` + testInstallation + `","date":"2026-10-07",
+		"recordedAt":1,"day":{"km":1,"kwh":1,"hours":1,"socDrop":1}}`))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if c.SohPercent != nil {
+		t.Fatalf("SoH should be absent, got %v", *c.SohPercent)
+	}
+}
+
+func TestConsumptionRejectsBadInput(t *testing.T) {
+	base := map[string]string{
+		"installationId": `"` + testInstallation + `"`, "date": `"2026-10-07"`, "recordedAt": "1",
+		"day": `{"km":1,"kwh":1,"hours":1,"socDrop":1}`,
+	}
+	cases := map[string][2]string{
+		"bad id":             {"installationId", `"nope"`},
+		"german date":        {"date", `"07.10.2026"`},
+		"negative timestamp": {"recordedAt", "-5"},
+		"fractional time":    {"recordedAt", "1.5"},
+		"string number":      {"day", `{"km":"1","kwh":1,"hours":1,"socDrop":1}`},
+		"huge totals":        {"day", `{"km":1e9,"kwh":1,"hours":1,"socDrop":1}`},
+		"missing field":      {"day", `{"km":1,"kwh":1,"hours":1}`},
+		"bad lifetime":       {"lifetime", `{"km":1}`},
+		"soh above 100":      {"sohPercent", "101"},
+	}
+	for name, change := range cases {
+		fields := map[string]string{}
+		for k, v := range base {
+			fields[k] = v
+		}
+		fields[change[0]] = change[1]
+		var parts []string
+		for k, v := range fields {
+			parts = append(parts, `"`+k+`":`+v)
+		}
+		if _, err := validateConsumption([]byte("{" + strings.Join(parts, ",") + "}")); !isValidationError(err) {
+			t.Errorf("%s: want ValidationError, got %v", name, err)
+		}
+	}
+	for _, body := range []string{"", "[]", "null", "{", `{"a":1}{"b":2}`} {
+		if _, err := validateConsumption([]byte(body)); !isValidationError(err) {
+			t.Errorf("body %q: want ValidationError, got %v", body, err)
+		}
+	}
+}
+
+func chargingBody(overrides string) []byte {
+	return []byte(`{"installationId":"` + testInstallation + `","sessionId":"` + testSession + `",
+		"startedAt":1760500000000,"endedAt":1760501800000,"durationSeconds":1800,"energyKwh":30,
+		"pricePerKwh":0.59,"startSocPercent":20,"endSocPercent":80,
+		"curve":[{"timestampMs":1760500060000,"powerKw":95,"socPercent":21},{"timestampMs":1760500120000,"powerKw":110}]` +
+		overrides + `}`)
+}
+
+func TestChargingSessionAppliesTheServersLossAndCost(t *testing.T) {
+	// The car's own grid and cost figures are not trusted; the server applies 10 % loss.
+	s, err := validateChargingSession(chargingBody(`,"gridEnergyKwh":1,"totalCost":1`), testSession)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if s.GridEnergyKwh != 33 || s.TotalCost != 33*0.59 || s.ChargingLossPercent != 10 {
+		t.Fatalf("grid %v cost %v loss %v", s.GridEnergyKwh, s.TotalCost, s.ChargingLossPercent)
+	}
+	if len(s.Curve) != 2 || s.Curve[1].SocPercent != nil || *s.Curve[0].SocPercent != 21 {
+		t.Fatalf("curve not kept as sent: %+v", s.Curve)
+	}
+}
+
+func TestChargingSessionMustMatchItsPath(t *testing.T) {
+	if _, err := validateChargingSession(chargingBody(""), "22222222-2222-4333-8444-555555555555"); !isValidationError(err) {
+		t.Fatalf("want ValidationError, got %v", err)
+	}
+}
+
+func TestChargingSessionRejectsOversizedCurvesAndBadPoints(t *testing.T) {
+	points := strings.Repeat(`{"timestampMs":1,"powerKw":1},`, 721)
+	long := []byte(`{"installationId":"` + testInstallation + `","sessionId":"` + testSession + `","curve":[` +
+		strings.TrimSuffix(points, ",") + `]}`)
+	if _, err := validateChargingSession(long, testSession); !isValidationError(err) {
+		t.Errorf("721 points: want ValidationError, got %v", err)
+	}
+	bad := []byte(strings.Replace(string(chargingBody("")), `"powerKw":95`, `"powerKw":-5`, 1))
+	if _, err := validateChargingSession(bad, testSession); !isValidationError(err) {
+		t.Errorf("negative power: want ValidationError, got %v", err)
+	}
+}
+
+func telemetryBody(samples string) []byte {
+	return []byte(`{"installationId":"` + testInstallation + `","samples":[` + samples + `]}`)
+}
+
+func TestTelemetryKeepsOnlyWhatWasSent(t *testing.T) {
+	b, err := validateTelemetryBatch(telemetryBody(
+		`{"utc":1790000000,"soc":81,"power":-12.5,"speed":0,"lat":52.1,"lon":7.6,"is_charging":1,"is_dcfc":false}`), testNow)
+	if err != nil {
+		t.Fatal(err)
+	}
+	s := b.Samples[0]
+	if s.UTC != testNowS || s.Numbers["soc"] != 81 || s.Numbers["power"] != -12.5 || s.Numbers["lat"] != 52.1 {
+		t.Fatalf("numbers %+v", s.Numbers)
+	}
+	if v, ok := s.Numbers["speed"]; !ok || v != 0 {
+		t.Fatal("a real 0 must be kept")
+	}
+	if s.Flags["is_charging"] != true || s.Flags["is_dcfc"] != false || len(s.Flags) != 2 {
+		t.Fatalf("flags %+v", s.Flags)
+	}
+	// An unread signal stays absent: a missing SOC must never become 0.
+	if _, ok := s.Numbers["est_battery_range"]; ok {
+		t.Fatal("absent field invented")
+	}
+}
+
+func TestTelemetryDropsUnknownFields(t *testing.T) {
+	b, err := validateTelemetryBatch(telemetryBody(`{"utc":1790000000,"future_field":3}`), testNow)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(b.Samples[0].Numbers) != 0 || len(b.Samples[0].Flags) != 0 {
+		t.Fatalf("unknown field kept: %+v", b.Samples[0])
+	}
+}
+
+func TestTelemetryDropsBadValuesAndKeepsTheRest(t *testing.T) {
+	for name, c := range map[string]struct {
+		sample  string
+		dropped string
+		kept    bool // the sample itself survives
+	}{
+		"milliseconds":      {`{"utc":1790000000000,"soc":5}`, "samples[0].utc", false},
+		"fractional utc":    {`{"utc":1790000000.5,"soc":5}`, "samples[0].utc", false},
+		"clock unset":       {`{"utc":0,"soc":5}`, "samples[0].utc", false},
+		"clock a day ahead": {`{"utc":1790086400,"soc":5}`, "samples[0].utc", false},
+		"not an object":     {`5`, "samples[0]", false},
+		"soc above 100":     {`{"utc":1790000000,"soc":101,"speed":20}`, "samples[0].soc", true},
+		"reversing":         {`{"utc":1790000000,"soc":5,"speed":-4}`, "samples[0].speed", true},
+		"string speed":      {`{"utc":1790000000,"soc":5,"speed":"fast"}`, "samples[0].speed", true},
+		"flag 2":            {`{"utc":1790000000,"soc":5,"is_parked":2}`, "samples[0].is_parked", true},
+		"half position":     {`{"utc":1790000000,"soc":5,"lat":52.1}`, "samples[0].lat/lon", true},
+	} {
+		b, err := validateTelemetryBatch(telemetryBody(c.sample), testNow)
+		if err != nil {
+			t.Errorf("%s: the batch was rejected: %v", name, err)
+			continue
+		}
+		if len(b.Dropped) != 1 || b.Dropped[0] != c.dropped {
+			t.Errorf("%s: dropped %v, want %s", name, b.Dropped, c.dropped)
+		}
+		if (len(b.Samples) == 1) != c.kept {
+			t.Errorf("%s: %d samples kept", name, len(b.Samples))
+		}
+		if c.kept && b.Samples[0].Numbers["soc"] != 5 && name != "soc above 100" {
+			t.Errorf("%s: the valid soc was lost", name)
+		}
+	}
+}
+
+func TestTelemetryRejectsEmptyAndOversizedBatches(t *testing.T) {
+	if _, err := validateTelemetryBatch(telemetryBody(""), testNow); !isValidationError(err) {
+		t.Error("empty batch accepted")
+	}
+	many := strings.TrimSuffix(strings.Repeat(`{"utc":1790000000},`, 501), ",")
+	if _, err := validateTelemetryBatch(telemetryBody(many), testNow); !isValidationError(err) {
+		t.Error("501 samples accepted")
+	}
+	if _, err := validateTelemetryBatch([]byte(`{"installationId":"nope","samples":[{"utc":1790000000}]}`), testNow); !isValidationError(err) {
+		t.Error("bad installation id accepted")
+	}
+}
diff --git a/settings.gradle b/settings.gradle
index 98c922f..c8d83b5 100644
--- a/settings.gradle
+++ b/settings.gradle
@@ -22,7 +22,7 @@ dependencyResolutionManagement {
     }
 }
 
-rootProject.name = "FatihsMG4"
+rootProject.name = "NilsMG4"
 include ':app'
 include ':evhardware'
 project(':evhardware').projectDir = file('EVHardware/lib')
diff --git a/web/.env.example b/web/.env.example
deleted file mode 100644
index 5cd72df..0000000
--- a/web/.env.example
+++ /dev/null
@@ -1,5 +0,0 @@
-MONGODB_URI=mongodb+srv://username:password@cluster.example.mongodb.net/
-MONGODB_DATABASE=fatihsmg4
-INGEST_TOKEN=replace-with-a-long-random-write-token
-SESSION_SECRET=replace-with-a-long-random-session-secret
-DASHBOARD_PASSWORD=replace-with-a-strong-dashboard-password
diff --git a/web/.gitignore b/web/.gitignore
deleted file mode 100644
index 27dfd45..0000000
--- a/web/.gitignore
+++ /dev/null
@@ -1,7 +0,0 @@
-node_modules
-.next
-# Every .env variant is secret except the committed template.
-.env*
-!.env.example
-next-env.d.ts
-*.tsbuildinfo
diff --git a/web/README.md b/web/README.md
deleted file mode 100644
index 9715a88..0000000
--- a/web/README.md
+++ /dev/null
@@ -1,68 +0,0 @@
-# FatihsMG4 web
-
-Next.js app on Vercel: the ingest API the car writes to, and a phone-shaped dashboard for
-reading the history back. Replaces the standalone Express service that used to live in
-`server/`.
-
-**The car never connects to MongoDB and never holds a MongoDB URI.** The URI is a Vercel
-environment variable and is only ever read by a server-side route.
-
-## Two credentials, on purpose
-
-| | Who holds it | What it opens |
-|---|---|---|
-| `INGEST_TOKEN` | the car, in the APK | the `PUT` endpoints — write only |
-| `DASHBOARD_PASSWORD` | you, in a browser | the dashboard and the `GET` history |
-
-The APK is published, so its token must be assumed extractable: anyone can `unzip` an APK
-and read its strings. That is survivable here because the write token cannot read anything
-back. The password is never compiled into anything.
-
-## Environment variables
-
-Set all five in Vercel → Settings → Environment Variables, for Production and Preview.
-
-| Name | Notes |
-|---|---|
-| `MONGODB_URI` | Atlas connection string |
-| `MONGODB_DATABASE` | defaults to `fatihsmg4` |
-| `INGEST_TOKEN` | `openssl rand -hex 32` |
-| `DASHBOARD_PASSWORD` | at least 8 characters, or login is refused outright |
-| `SESSION_SECRET` | `openssl rand -hex 32`; rotating it signs every browser out |
-
-Atlas network access must allow Vercel's egress, which is not a fixed address on the Hobby
-plan — either allow `0.0.0.0/0` and rely on the database user's credentials, or use Atlas
-private networking on a paid plan.
-
-## Endpoints
-
-Write, `Authorization: Bearer <INGEST_TOKEN>`:
-
-- `PUT /v1/consumption/daily`
-- `PUT /v1/charging-sessions/:sessionId`
-
-Read, session cookie or `Authorization: Bearer <DASHBOARD_PASSWORD>`:
-
-- `GET /v1/history/:installationId/consumption`
-- `GET /v1/history/:installationId/charging`
-
-`GET /v1/health` is unauthenticated and returns `{"status":"ok"}`.
-
-The car builds its URLs as `CONSUMPTION_API_URL + /v1/...`, so the Android build variable
-is the bare origin — `https://your-app.vercel.app`, no trailing path.
-
-## Indexes
-
-There is no boot step on Vercel, so `ensureIndexes()` runs on the first write of each warm
-lambda and is skipped afterwards. The unique indexes on `(installationId, date)` and
-`(installationId, sessionId)` are what make the upserts idempotent when the car retries a
-record it could not confirm.
-
-## Local development
-
-```sh
-cp .env.example .env.local   # Next loads .env.local automatically
-npm install
-npm run dev
-npm test                     # pure validation and session-signing tests, no database
-```
diff --git a/web/next.config.mjs b/web/next.config.mjs
deleted file mode 100644
index 1f0ce49..0000000
--- a/web/next.config.mjs
+++ /dev/null
@@ -1,6 +0,0 @@
-/** @type {import('next').NextConfig} */
-const nextConfig = {
-  // Every page reads live telemetry; a cached shell would show yesterday's drive.
-  experimental: { serverActions: { bodySizeLimit: "1mb" } },
-};
-export default nextConfig;
diff --git a/web/package-lock.json b/web/package-lock.json
deleted file mode 100644
index d4aa3dd..0000000
--- a/web/package-lock.json
+++ /dev/null
@@ -1,1145 +0,0 @@
-{
-  "name": "fatihsmg4-web",
-  "version": "1.0.0",
-  "lockfileVersion": 3,
-  "requires": true,
-  "packages": {
-    "": {
-      "name": "fatihsmg4-web",
-      "version": "1.0.0",
-      "dependencies": {
-        "mongodb": "^6.20.0",
-        "next": "^15.5.4",
-        "react": "^19.1.0",
-        "react-dom": "^19.1.0"
-      },
-      "devDependencies": {
-        "@types/node": "^22.15.3",
-        "@types/react": "^19.1.2",
-        "typescript": "^5.8.3"
-      },
-      "engines": {
-        "node": ">=22"
-      }
-    },
-    "node_modules/@emnapi/runtime": {
-      "version": "1.11.3",
-      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.3.tgz",
-      "integrity": "sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA==",
-      "license": "MIT",
-      "optional": true,
-      "dependencies": {
-        "tslib": "^2.4.0"
-      }
-    },
-    "node_modules/@img/colour": {
-      "version": "1.1.0",
-      "resolved": "https://registry.npmjs.org/@img/colour/-/colour-1.1.0.tgz",
-      "integrity": "sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==",
-      "license": "MIT",
-      "optional": true,
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/@img/sharp-darwin-arm64": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.35.5.tgz",
-      "integrity": "sha512-QRUlFQ0WxvdWyqqG/WtI3iupfD5rBzmCHXSdPsY91sAtVtTo7Q4cb6zOccZ3gqEqkr0f1As1ehLqmEpDsRf+lg==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      },
-      "optionalDependencies": {
-        "@img/sharp-libvips-darwin-arm64": "1.3.4"
-      }
-    },
-    "node_modules/@img/sharp-darwin-x64": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.5.tgz",
-      "integrity": "sha512-+BR255RhDlpygUpOc/Jdt1nT6DQ3XG/ERo5wbcdOf5Q320dKtPCKPLR1LJs9VGXRaMa8l1uUa0tkCNOXiAxZUw==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      },
-      "optionalDependencies": {
-        "@img/sharp-libvips-darwin-x64": "1.3.4"
-      }
-    },
-    "node_modules/@img/sharp-freebsd-wasm32": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-freebsd-wasm32/-/sharp-freebsd-wasm32-0.35.5.tgz",
-      "integrity": "sha512-Y/z91nEZ4uIBX5X3nfTovjU9lHNKFYbL2lpHCLVNmXQK03VIZvXBBt0KxbPGp2SdGSF+2mQU4e+hQaWOt86iAw==",
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "freebsd"
-      ],
-      "dependencies": {
-        "@img/sharp-wasm32": "0.35.5"
-      },
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@img/sharp-libvips-darwin-arm64": {
-      "version": "1.3.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.3.4.tgz",
-      "integrity": "sha512-5R89nBYiRdUlSWJxPhO+GVtaXzXSxKnRu/xqMn3KTA3L9EB9Oy/P+Nn2f2vlhPuUdy/Zusb2DarbyTpGCfEDuw==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "LGPL-3.0-or-later",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@img/sharp-libvips-darwin-x64": {
-      "version": "1.3.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.3.4.tgz",
-      "integrity": "sha512-iR2OKH80yi0U+dUplyh3/xdpFvps6YkCwsXenIJxqxR1v9o+xtKTGbS9H7cps+2Vxjc8B1j96p75NmTGjIhtpQ==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "LGPL-3.0-or-later",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@img/sharp-libvips-linux-arm": {
-      "version": "1.3.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.3.4.tgz",
-      "integrity": "sha512-LmRtTsOHuvM2+wlO2Db37dx5MiZhB0FvSunciw48YjdOkZz9KAiRbm8ujeMOA1INqmei5NapFxYEK1D1ZSidmw==",
-      "cpu": [
-        "arm"
-      ],
-      "license": "LGPL-3.0-or-later",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@img/sharp-libvips-linux-arm64": {
-      "version": "1.3.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.3.4.tgz",
-      "integrity": "sha512-Y3dgX/6lE2QhQb+Gxy0WZxfg9MEm/JBjamZpS2IklP7xIQoKN4hzAm7KcMVGtaVDt3neE9OKBC7vAfonA/Lr1A==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "LGPL-3.0-or-later",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@img/sharp-libvips-linux-ppc64": {
-      "version": "1.3.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.3.4.tgz",
-      "integrity": "sha512-Le6boB8Tai0Nis+gIxIpKx68UDVVIqdR8Tin5Yf1z2LJJQLDJvCDRqRu+jC2qCoD+eIomonmOwB4smBRxfVpYQ==",
-      "cpu": [
-        "ppc64"
-      ],
-      "license": "LGPL-3.0-or-later",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@img/sharp-libvips-linux-riscv64": {
-      "version": "1.3.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.3.4.tgz",
-      "integrity": "sha512-aHkkIEHPRdQEegJN20MLmGtxYD9R2wQr3Cwpddnu5+YKMt6Uzax7S9h5gpZTo8wyrGuZSlfQ63OevL5mTyOC7Q==",
-      "cpu": [
-        "riscv64"
-      ],
-      "license": "LGPL-3.0-or-later",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@img/sharp-libvips-linux-s390x": {
-      "version": "1.3.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.3.4.tgz",
-      "integrity": "sha512-ra/mB6MikESDUO7Yg+Mi95bFBb9GsObURuhnOv3OqknjGe9sZrG8tCe9q0xSIGrtLgvgw0gKnFWcK4blSgQOuQ==",
-      "cpu": [
-        "s390x"
-      ],
-      "license": "LGPL-3.0-or-later",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@img/sharp-libvips-linux-x64": {
-      "version": "1.3.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.3.4.tgz",
-      "integrity": "sha512-GJ//SSXbnwSDes02umB3nDJLFcQzw8a18V8fyhqr6tV515tOEMdImjjxj1AoafMRz56F3PHgftnj1QEKSU1zkw==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "LGPL-3.0-or-later",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@img/sharp-libvips-linuxmusl-arm64": {
-      "version": "1.3.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.3.4.tgz",
-      "integrity": "sha512-hvulFwtjUcagsis6BBxHwGFwWoNZjgYmULGVrZcyfNbjA8hKILbRxGg15/7w5HDyXHXUos/j6baAWqnCyQ2DWA==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "LGPL-3.0-or-later",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@img/sharp-libvips-linuxmusl-x64": {
-      "version": "1.3.4",
-      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.3.4.tgz",
-      "integrity": "sha512-6zXKeE/p39I1AmA3cJG35eyBGNqNddLnUXjhwBnsGjFPWqf5VKkDBEqaEkPDoTEtkxwi2vv8Tcr2mDyP4So7Fg==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "LGPL-3.0-or-later",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@img/sharp-linux-arm": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.35.5.tgz",
-      "integrity": "sha512-LEaXK2WdXVK5ykcw0buWyPMsmLLL2vpHLD6yrNSW+JGEL3BZPA4tpKN6iaMc4AxTTAoaX/sU1rOL51lcIz48ZQ==",
-      "cpu": [
-        "arm"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      },
-      "optionalDependencies": {
-        "@img/sharp-libvips-linux-arm": "1.3.4"
-      }
-    },
-    "node_modules/@img/sharp-linux-arm64": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.35.5.tgz",
-      "integrity": "sha512-LYVx5JTsOM2CBzmxreh+nl64/3H6Xb09iSLknqH47z2T2DFFxDeFLP5y4dJwe6H7uGQlHPyEEtIqyo3DYsRwdQ==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      },
-      "optionalDependencies": {
-        "@img/sharp-libvips-linux-arm64": "1.3.4"
-      }
-    },
-    "node_modules/@img/sharp-linux-ppc64": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.35.5.tgz",
-      "integrity": "sha512-QVxAAq8evVRI9ia2vqgwrmWucn5Dfv+JdWzj75pD8omHLPSP7f8p20O8jxzjCcuCEQEOtYOZUmX1hkiZ0kdevA==",
-      "cpu": [
-        "ppc64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      },
-      "optionalDependencies": {
-        "@img/sharp-libvips-linux-ppc64": "1.3.4"
-      }
-    },
-    "node_modules/@img/sharp-linux-riscv64": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.35.5.tgz",
-      "integrity": "sha512-LtdreXguaavKODPIfzJ4kffx7UNt1omwtK0rch4EBbbSTXPnxWmYSayXdLJw0fJzQ97kHt1gL/yh4tvU+nCyRQ==",
-      "cpu": [
-        "riscv64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      },
-      "optionalDependencies": {
-        "@img/sharp-libvips-linux-riscv64": "1.3.4"
-      }
-    },
-    "node_modules/@img/sharp-linux-s390x": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.5.tgz",
-      "integrity": "sha512-UZasTOFiYzotTsGOCu42BfUzP6Tu6Do/947iRm1RsLKvlllxwGcn4RN27LibGWceix4Y+Pmw3jsnTcCQIgWjqA==",
-      "cpu": [
-        "s390x"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      },
-      "optionalDependencies": {
-        "@img/sharp-libvips-linux-s390x": "1.3.4"
-      }
-    },
-    "node_modules/@img/sharp-linux-x64": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.35.5.tgz",
-      "integrity": "sha512-SxFtLTeJInhAA9Q836kux2vZNeOBQEx658qvbboZScr0wIARym3IcGmW7KpVD5sbVg0Ojy+udFQdayYIZyoNog==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      },
-      "optionalDependencies": {
-        "@img/sharp-libvips-linux-x64": "1.3.4"
-      }
-    },
-    "node_modules/@img/sharp-linuxmusl-arm64": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.35.5.tgz",
-      "integrity": "sha512-9HbMclmI1zlNkFRs3z9/eBtDjfD0sGlrX1z6b1qwmiFY5ElDLh4BC0LPBdVp7z1DXFiKlIcznf+ZlsuZzLxQqg==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      },
-      "optionalDependencies": {
-        "@img/sharp-libvips-linuxmusl-arm64": "1.3.4"
-      }
-    },
-    "node_modules/@img/sharp-linuxmusl-x64": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.35.5.tgz",
-      "integrity": "sha512-4KOphqB035HrVdqLZfCgMzzERrQkkzOwRhl4OAkRO1YCldbaFjySXMaK534Mo0V+LndnlJk+sbUyLeU0ULyD1A==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      },
-      "optionalDependencies": {
-        "@img/sharp-libvips-linuxmusl-x64": "1.3.4"
-      }
-    },
-    "node_modules/@img/sharp-wasm32": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.35.5.tgz",
-      "integrity": "sha512-Ptsga1su4tQx+LLF1ECS9U6nz5kmrXKo6XVbtR48Ke3ZRxxgaWBu7IDtEe1quo8hiupwm6WFqxVlXaSf7IINGQ==",
-      "license": "Apache-2.0 AND LGPL-3.0-or-later AND MIT",
-      "optional": true,
-      "dependencies": {
-        "@emnapi/runtime": "^1.11.3"
-      },
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@img/sharp-webcontainers-wasm32": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-webcontainers-wasm32/-/sharp-webcontainers-wasm32-0.35.5.tgz",
-      "integrity": "sha512-hfhF/FmoQyTUkA0bIKFOtw536BQSeBMe6BF6QyWlrPxT754+TFLaZ7sKKTfvvM0yJgKgaYTwnFCIZ/GuDw5SUA==",
-      "cpu": [
-        "wasm32"
-      ],
-      "license": "Apache-2.0",
-      "optional": true,
-      "dependencies": {
-        "@img/sharp-wasm32": "0.35.5"
-      },
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@img/sharp-win32-arm64": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.35.5.tgz",
-      "integrity": "sha512-X4t7g+7ZA5DKblCBEXGjUqqemj4vczING/5viFwAL8h4N3qYeyjwdCvRLHi4EdOUI+2Z7UFlp1VM+p/AuEtm6Q==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "Apache-2.0 AND LGPL-3.0-or-later",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@img/sharp-win32-ia32": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.35.5.tgz",
-      "integrity": "sha512-5Zm82LoBc43nhwNybZlG7Y1KO//Zhsn306fQl29ZOuStHLGTo3BWL83q3cznX0poxSAMuYL1On/BHBxkBeKr6A==",
-      "cpu": [
-        "ia32"
-      ],
-      "license": "Apache-2.0 AND LGPL-3.0-or-later",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": "^20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@img/sharp-win32-x64": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.35.5.tgz",
-      "integrity": "sha512-x76eH0vEiHlcMQu8Y8IenntaACtddpT6W0wmXtWrnKcnKI7ME5DdgqhAD6SEWOEl1v2zDvkZDhFA9KnURwpfqg==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "Apache-2.0 AND LGPL-3.0-or-later",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      }
-    },
-    "node_modules/@mongodb-js/saslprep": {
-      "version": "1.6.0",
-      "resolved": "https://registry.npmjs.org/@mongodb-js/saslprep/-/saslprep-1.6.0.tgz",
-      "integrity": "sha512-19jGXfpctLDJUELLUZGJ5BllcLT7rHdF+gTTaN2jzqu0bGkUhpdcYtgK2Vux+g3zuBAa0TM/W666QMIjYhYujw==",
-      "license": "MIT",
-      "dependencies": {
-        "sparse-bitfield": "^3.0.3"
-      }
-    },
-    "node_modules/@next/env": {
-      "version": "15.5.27",
-      "resolved": "https://registry.npmjs.org/@next/env/-/env-15.5.27.tgz",
-      "integrity": "sha512-WC5hvVqiuFOcRyz6gKPeJkiVvSMf3scNeAV49CdWtVqxmUlzh8UKR6YHt9yiNkh8LngtzqSlVz07/Ma3ZAzchA==",
-      "license": "MIT"
-    },
-    "node_modules/@next/swc-darwin-arm64": {
-      "version": "15.5.27",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-arm64/-/swc-darwin-arm64-15.5.27.tgz",
-      "integrity": "sha512-fBA9QurmK4+uj4wNhmRTuO5zMVRaBHCvp6H93zTG/5i6Yi6TewbvbesXB8YQNj8T99Cwrow87hHiFV6wL/hyMA==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "engines": {
-        "node": ">= 10"
-      }
-    },
-    "node_modules/@next/swc-darwin-x64": {
-      "version": "15.5.27",
-      "resolved": "https://registry.npmjs.org/@next/swc-darwin-x64/-/swc-darwin-x64-15.5.27.tgz",
-      "integrity": "sha512-FGZwJwry8qZNHxD/nfwrCwCHHrqx6epqItkkxbYcBQEQ2uw5S43bY83fQB5zbAsZE7TELMjoYkbhsQ4oKM7wwg==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "darwin"
-      ],
-      "engines": {
-        "node": ">= 10"
-      }
-    },
-    "node_modules/@next/swc-linux-arm64-gnu": {
-      "version": "15.5.27",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-gnu/-/swc-linux-arm64-gnu-15.5.27.tgz",
-      "integrity": "sha512-GQulAaJYNF1RYuatlsw9/uzbKz4if2V7Ic9nVO+P0ljYPm4yBRTFIl6g5YkKTw40lMLbpy9edLoH44g3jSHMYA==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10"
-      }
-    },
-    "node_modules/@next/swc-linux-arm64-musl": {
-      "version": "15.5.27",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-arm64-musl/-/swc-linux-arm64-musl-15.5.27.tgz",
-      "integrity": "sha512-URFFsUmu8Pi0/1qdnUI7tx7keZw1Mt5zHfrIX1RfDG9Nih8DYxK54WZsDJUX2ZTlii1jgotL7qcbwKnSAES6xQ==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10"
-      }
-    },
-    "node_modules/@next/swc-linux-x64-gnu": {
-      "version": "15.5.27",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-gnu/-/swc-linux-x64-gnu-15.5.27.tgz",
-      "integrity": "sha512-aJp74z7uvU5jQhyH7lyk+4qSRcTdKbKT9NQE3jiO9kWYkoHZjKi0zzHDbCoZ+v2sJDEiJ/z58R0UlWMGWNF3HA==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10"
-      }
-    },
-    "node_modules/@next/swc-linux-x64-musl": {
-      "version": "15.5.27",
-      "resolved": "https://registry.npmjs.org/@next/swc-linux-x64-musl/-/swc-linux-x64-musl-15.5.27.tgz",
-      "integrity": "sha512-ILl2bQ8MbpvyMpY8AXljb3BXs0MJSC8HXZ6QV5AWpVS7ZELqNPtrHvhUk+SNarvjvICXX8bCS287TCi+gUFVYg==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "linux"
-      ],
-      "engines": {
-        "node": ">= 10"
-      }
-    },
-    "node_modules/@next/swc-win32-arm64-msvc": {
-      "version": "15.5.27",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-arm64-msvc/-/swc-win32-arm64-msvc-15.5.27.tgz",
-      "integrity": "sha512-1MB9Rh5y8TOPN2x7naNTJNkCZQav9c70AI7EBYXxsEewwOffC4DjjwBwKf20NBvcA+u+5jDv7nVmHxunlP2d7Q==",
-      "cpu": [
-        "arm64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">= 10"
-      }
-    },
-    "node_modules/@next/swc-win32-x64-msvc": {
-      "version": "15.5.27",
-      "resolved": "https://registry.npmjs.org/@next/swc-win32-x64-msvc/-/swc-win32-x64-msvc-15.5.27.tgz",
-      "integrity": "sha512-XtYgpGOswgnyBWXzOEG6q9RhvnSw0CEZ0MbWqCsl5PISgt9EzvJvNW5mU5n1PsphX/lnamzxjgQXH2GUJL8nqg==",
-      "cpu": [
-        "x64"
-      ],
-      "license": "MIT",
-      "optional": true,
-      "os": [
-        "win32"
-      ],
-      "engines": {
-        "node": ">= 10"
-      }
-    },
-    "node_modules/@swc/helpers": {
-      "version": "0.5.15",
-      "resolved": "https://registry.npmjs.org/@swc/helpers/-/helpers-0.5.15.tgz",
-      "integrity": "sha512-JQ5TuMi45Owi4/BIMAJBoSQoOJu12oOk/gADqlcUL9JEdHB8vyjUSsxqeNXnmXHjYKMi2WcYtezGEEhqUI/E2g==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "tslib": "^2.8.0"
-      }
-    },
-    "node_modules/@types/node": {
-      "version": "22.20.5",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-22.20.5.tgz",
-      "integrity": "sha512-U2+DNr+wSjpsTS/wZGYHq7GcwfuSmKiKvoPvK22zwTlRhU91yOniN4qRR5KhIjvif7ysw/dz/hKmfDH0Ris4aA==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "undici-types": "~6.21.0"
-      }
-    },
-    "node_modules/@types/react": {
-      "version": "19.3.0",
-      "resolved": "https://registry.npmjs.org/@types/react/-/react-19.3.0.tgz",
-      "integrity": "sha512-N0rFCuH9YoxG9/m61l9MfpJKfmLOVU0em7ipIz6TRgSSkvReLB9vL85GB+yr8Bs5leqpvg96JSwF4ZS1s4viQg==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "csstype": "^3.2.2"
-      }
-    },
-    "node_modules/@types/webidl-conversions": {
-      "version": "7.0.3",
-      "resolved": "https://registry.npmjs.org/@types/webidl-conversions/-/webidl-conversions-7.0.3.tgz",
-      "integrity": "sha512-CiJJvcRtIgzadHCYXw7dqEnMNRjhGZlYK05Mj9OyktqV8uVT8fD2BFOB7S1uwBE3Kj2Z+4UyPmFw/Ixgw/LAlA==",
-      "license": "MIT"
-    },
-    "node_modules/@types/whatwg-url": {
-      "version": "11.0.5",
-      "resolved": "https://registry.npmjs.org/@types/whatwg-url/-/whatwg-url-11.0.5.tgz",
-      "integrity": "sha512-coYR071JRaHa+xoEvvYqvnIHaVqaYrLPbsufM9BF63HkwI5Lgmy2QR8Q5K/lYDYo5AK82wOvSOS0UsLTpTG7uQ==",
-      "license": "MIT",
-      "dependencies": {
-        "@types/webidl-conversions": "*"
-      }
-    },
-    "node_modules/bson": {
-      "version": "6.10.4",
-      "resolved": "https://registry.npmjs.org/bson/-/bson-6.10.4.tgz",
-      "integrity": "sha512-WIsKqkSC0ABoBJuT1LEX+2HEvNmNKKgnTAyd0fL8qzK4SH2i9NXg+t08YtdZp/V9IZ33cxe3iV4yM0qg8lMQng==",
-      "license": "Apache-2.0",
-      "engines": {
-        "node": ">=16.20.1"
-      }
-    },
-    "node_modules/caniuse-lite": {
-      "version": "1.0.30001815",
-      "resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001815.tgz",
-      "integrity": "sha512-uDybUEyfgbyJJ93J1vikTylBX31AkdVYeVPeffMQpf8XN7hSfr0oZOn4VFOIMNvtU5+rHvC5Udg2TgtJKHm23Q==",
-      "funding": [
-        {
-          "type": "opencollective",
-          "url": "https://opencollective.com/browserslist"
-        },
-        {
-          "type": "tidelift",
-          "url": "https://tidelift.com/funding/github/npm/caniuse-lite"
-        },
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/ai"
-        }
-      ],
-      "license": "CC-BY-4.0"
-    },
-    "node_modules/client-only": {
-      "version": "0.0.1",
-      "resolved": "https://registry.npmjs.org/client-only/-/client-only-0.0.1.tgz",
-      "integrity": "sha512-IV3Ou0jSMzZrd3pZ48nLkT9DA7Ag1pnPzaiQhpW7c3RbcqqzvzzVu+L8gfqMp/8IM2MQtSiqaCxrrcfu8I8rMA==",
-      "license": "MIT"
-    },
-    "node_modules/csstype": {
-      "version": "3.2.3",
-      "resolved": "https://registry.npmjs.org/csstype/-/csstype-3.2.3.tgz",
-      "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/detect-libc": {
-      "version": "2.1.2",
-      "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
-      "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
-      "license": "Apache-2.0",
-      "optional": true,
-      "engines": {
-        "node": ">=8"
-      }
-    },
-    "node_modules/memory-pager": {
-      "version": "1.5.0",
-      "resolved": "https://registry.npmjs.org/memory-pager/-/memory-pager-1.5.0.tgz",
-      "integrity": "sha512-ZS4Bp4r/Zoeq6+NLJpP+0Zzm0pR8whtGPf1XExKLJBAczGMnSi3It14OiNCStjQjM6NU1okjQGSxgEZN8eBYKg==",
-      "license": "MIT"
-    },
-    "node_modules/mongodb": {
-      "version": "6.21.0",
-      "resolved": "https://registry.npmjs.org/mongodb/-/mongodb-6.21.0.tgz",
-      "integrity": "sha512-URyb/VXMjJ4da46OeSXg+puO39XH9DeQpWCslifrRn9JWugy0D+DvvBvkm2WxmHe61O/H19JM66p1z7RHVkZ6A==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "@mongodb-js/saslprep": "^1.3.0",
-        "bson": "^6.10.4",
-        "mongodb-connection-string-url": "^3.0.2"
-      },
-      "engines": {
-        "node": ">=16.20.1"
-      },
-      "peerDependencies": {
-        "@aws-sdk/credential-providers": "^3.188.0",
-        "@mongodb-js/zstd": "^1.1.0 || ^2.0.0",
-        "gcp-metadata": "^5.2.0",
-        "kerberos": "^2.0.1",
-        "mongodb-client-encryption": ">=6.0.0 <7",
-        "snappy": "^7.3.2",
-        "socks": "^2.7.1"
-      },
-      "peerDependenciesMeta": {
-        "@aws-sdk/credential-providers": {
-          "optional": true
-        },
-        "@mongodb-js/zstd": {
-          "optional": true
-        },
-        "gcp-metadata": {
-          "optional": true
-        },
-        "kerberos": {
-          "optional": true
-        },
-        "mongodb-client-encryption": {
-          "optional": true
-        },
-        "snappy": {
-          "optional": true
-        },
-        "socks": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/mongodb-connection-string-url": {
-      "version": "3.0.2",
-      "resolved": "https://registry.npmjs.org/mongodb-connection-string-url/-/mongodb-connection-string-url-3.0.2.tgz",
-      "integrity": "sha512-rMO7CGo/9BFwyZABcKAWL8UJwH/Kc2x0g72uhDWzG48URRax5TCIcJ7Rc3RZqffZzO/Gwff/jyKwCU9TN8gehA==",
-      "license": "Apache-2.0",
-      "dependencies": {
-        "@types/whatwg-url": "^11.0.2",
-        "whatwg-url": "^14.1.0 || ^13.0.0"
-      }
-    },
-    "node_modules/nanoid": {
-      "version": "3.3.20",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.20.tgz",
-      "integrity": "sha512-uKdg2G3GNCKQn9byYOpxbGqrT2fGO5KRt5J/8b3pok8rT6qxGWF6hxMyJiEYtAf+FVyYuD9hRaDqX5uPFYJ4ZQ==",
-      "funding": [
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/ai"
-        }
-      ],
-      "license": "MIT",
-      "bin": {
-        "nanoid": "bin/nanoid.cjs"
-      },
-      "engines": {
-        "node": "^10 || ^12 || ^13.7 || ^14 || >=15.0.1"
-      }
-    },
-    "node_modules/next": {
-      "version": "15.5.27",
-      "resolved": "https://registry.npmjs.org/next/-/next-15.5.27.tgz",
-      "integrity": "sha512-F82CrlPZ8GRxBH9RIIoR3qU1t5RT3dv1K8moe8SjlDEquiFipvEI13R1Om90TaUOEwShkWCMlg8+gvTNzfMhvg==",
-      "license": "MIT",
-      "dependencies": {
-        "@next/env": "15.5.27",
-        "@swc/helpers": "0.5.15",
-        "caniuse-lite": "^1.0.30001579",
-        "postcss": "8.4.31",
-        "styled-jsx": "5.1.6"
-      },
-      "bin": {
-        "next": "dist/bin/next"
-      },
-      "engines": {
-        "node": "^18.18.0 || ^19.8.0 || >= 20.0.0"
-      },
-      "optionalDependencies": {
-        "@next/swc-darwin-arm64": "15.5.27",
-        "@next/swc-darwin-x64": "15.5.27",
-        "@next/swc-linux-arm64-gnu": "15.5.27",
-        "@next/swc-linux-arm64-musl": "15.5.27",
-        "@next/swc-linux-x64-gnu": "15.5.27",
-        "@next/swc-linux-x64-musl": "15.5.27",
-        "@next/swc-win32-arm64-msvc": "15.5.27",
-        "@next/swc-win32-x64-msvc": "15.5.27",
-        "sharp": "^0.34.3 || ^0.35.4"
-      },
-      "peerDependencies": {
-        "@opentelemetry/api": "^1.1.0",
-        "@playwright/test": "^1.51.1",
-        "babel-plugin-react-compiler": "*",
-        "react": "^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0",
-        "react-dom": "^18.2.0 || 19.0.0-rc-de68d2f4-20241204 || ^19.0.0",
-        "sass": "^1.3.0"
-      },
-      "peerDependenciesMeta": {
-        "@opentelemetry/api": {
-          "optional": true
-        },
-        "@playwright/test": {
-          "optional": true
-        },
-        "babel-plugin-react-compiler": {
-          "optional": true
-        },
-        "sass": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/picocolors": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
-      "integrity": "sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==",
-      "license": "ISC"
-    },
-    "node_modules/postcss": {
-      "version": "8.4.31",
-      "resolved": "https://registry.npmjs.org/postcss/-/postcss-8.4.31.tgz",
-      "integrity": "sha512-PS08Iboia9mts/2ygV3eLpY5ghnUcfLV/EXTOW1E2qYxJKGGBUtNjN76FYHnMs36RmARn41bC0AZmn+rR0OVpQ==",
-      "funding": [
-        {
-          "type": "opencollective",
-          "url": "https://opencollective.com/postcss/"
-        },
-        {
-          "type": "tidelift",
-          "url": "https://tidelift.com/funding/github/npm/postcss"
-        },
-        {
-          "type": "github",
-          "url": "https://github.com/sponsors/ai"
-        }
-      ],
-      "license": "MIT",
-      "dependencies": {
-        "nanoid": "^3.3.6",
-        "picocolors": "^1.0.0",
-        "source-map-js": "^1.0.2"
-      },
-      "engines": {
-        "node": "^10 || ^12 || >=14"
-      }
-    },
-    "node_modules/punycode": {
-      "version": "2.3.1",
-      "resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
-      "integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=6"
-      }
-    },
-    "node_modules/react": {
-      "version": "19.3.0",
-      "resolved": "https://registry.npmjs.org/react/-/react-19.3.0.tgz",
-      "integrity": "sha512-E8LUcbtBWt20bbl2YoHfx4ZDBdxVTfOKtCZn9cDSJ4l6/nuoApcpIBcj47t2wZoVX8g2ZHuMHbiShgCR1T5Sog==",
-      "license": "MIT",
-      "peer": true,
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
-    "node_modules/react-dom": {
-      "version": "19.3.0",
-      "resolved": "https://registry.npmjs.org/react-dom/-/react-dom-19.3.0.tgz",
-      "integrity": "sha512-JDk8dgif51OjFoDE70+OT9ICyYr+69HlmihNwp1+Nsfbna3t5sIiCa9ZJktDmQ4/1b/rn26hIAR2uYXDMr5r0Q==",
-      "license": "MIT",
-      "peer": true,
-      "dependencies": {
-        "scheduler": "^0.28.0"
-      },
-      "peerDependencies": {
-        "react": "^19.3.0"
-      }
-    },
-    "node_modules/scheduler": {
-      "version": "0.28.0",
-      "resolved": "https://registry.npmjs.org/scheduler/-/scheduler-0.28.0.tgz",
-      "integrity": "sha512-juorfCmIkIw8tT+p5BXSm6PJjQF/ycEYmKyzURCIt/RaZIhL+PulbQ9Yu2z1HdOJDdqDTlxA1+xKBmHXJsczAw==",
-      "license": "MIT"
-    },
-    "node_modules/semver": {
-      "version": "7.8.5",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
-      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
-      "license": "ISC",
-      "optional": true,
-      "bin": {
-        "semver": "bin/semver.js"
-      },
-      "engines": {
-        "node": ">=10"
-      }
-    },
-    "node_modules/sharp": {
-      "version": "0.35.5",
-      "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.35.5.tgz",
-      "integrity": "sha512-Ywn4OnzGukp7CDMrp08RQ50YKmuwG47brZgIVPTvBaaAfQlRlygrRqSrxdCiL9M+LlzLBiJ68IR1QqvzHyjC7g==",
-      "license": "Apache-2.0",
-      "optional": true,
-      "dependencies": {
-        "@img/colour": "^1.1.0",
-        "detect-libc": "^2.1.2",
-        "semver": "^7.8.5"
-      },
-      "engines": {
-        "node": ">=20.9.0"
-      },
-      "funding": {
-        "url": "https://opencollective.com/libvips"
-      },
-      "optionalDependencies": {
-        "@img/sharp-darwin-arm64": "0.35.5",
-        "@img/sharp-darwin-x64": "0.35.5",
-        "@img/sharp-freebsd-wasm32": "0.35.5",
-        "@img/sharp-libvips-darwin-arm64": "1.3.4",
-        "@img/sharp-libvips-darwin-x64": "1.3.4",
-        "@img/sharp-libvips-linux-arm": "1.3.4",
-        "@img/sharp-libvips-linux-arm64": "1.3.4",
-        "@img/sharp-libvips-linux-ppc64": "1.3.4",
-        "@img/sharp-libvips-linux-riscv64": "1.3.4",
-        "@img/sharp-libvips-linux-s390x": "1.3.4",
-        "@img/sharp-libvips-linux-x64": "1.3.4",
-        "@img/sharp-libvips-linuxmusl-arm64": "1.3.4",
-        "@img/sharp-libvips-linuxmusl-x64": "1.3.4",
-        "@img/sharp-linux-arm": "0.35.5",
-        "@img/sharp-linux-arm64": "0.35.5",
-        "@img/sharp-linux-ppc64": "0.35.5",
-        "@img/sharp-linux-riscv64": "0.35.5",
-        "@img/sharp-linux-s390x": "0.35.5",
-        "@img/sharp-linux-x64": "0.35.5",
-        "@img/sharp-linuxmusl-arm64": "0.35.5",
-        "@img/sharp-linuxmusl-x64": "0.35.5",
-        "@img/sharp-webcontainers-wasm32": "0.35.5",
-        "@img/sharp-win32-arm64": "0.35.5",
-        "@img/sharp-win32-ia32": "0.35.5",
-        "@img/sharp-win32-x64": "0.35.5"
-      },
-      "peerDependenciesMeta": {
-        "@types/node": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/source-map-js": {
-      "version": "1.2.2",
-      "resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.2.tgz",
-      "integrity": "sha512-KGj/8Y43x35aZVDtt+J4mK1hoLGHULMYfSkODJNQjNDC3oW1PqPoxMwo0pLUsWM/UEGzON/NxeHywEfNXNP3Vw==",
-      "license": "BSD-3-Clause",
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
-    "node_modules/sparse-bitfield": {
-      "version": "3.0.3",
-      "resolved": "https://registry.npmjs.org/sparse-bitfield/-/sparse-bitfield-3.0.3.tgz",
-      "integrity": "sha512-kvzhi7vqKTfkh0PZU+2D2PIllw2ymqJKujUcyPMd9Y75Nv4nPbGJZXNhxsgdQab2BmlDct1YnfQCguEvHr7VsQ==",
-      "license": "MIT",
-      "dependencies": {
-        "memory-pager": "^1.0.2"
-      }
-    },
-    "node_modules/styled-jsx": {
-      "version": "5.1.6",
-      "resolved": "https://registry.npmjs.org/styled-jsx/-/styled-jsx-5.1.6.tgz",
-      "integrity": "sha512-qSVyDTeMotdvQYoHWLNGwRFJHC+i+ZvdBRYosOFgC+Wg1vx4frN2/RG/NA7SYqqvKNLf39P2LSRA2pu6n0XYZA==",
-      "license": "MIT",
-      "dependencies": {
-        "client-only": "0.0.1"
-      },
-      "engines": {
-        "node": ">= 12.0.0"
-      },
-      "peerDependencies": {
-        "react": ">= 16.8.0 || 17.x.x || ^18.0.0-0 || ^19.0.0-0"
-      },
-      "peerDependenciesMeta": {
-        "@babel/core": {
-          "optional": true
-        },
-        "babel-plugin-macros": {
-          "optional": true
-        }
-      }
-    },
-    "node_modules/tr46": {
-      "version": "5.1.1",
-      "resolved": "https://registry.npmjs.org/tr46/-/tr46-5.1.1.tgz",
-      "integrity": "sha512-hdF5ZgjTqgAntKkklYw0R03MG2x/bSzTtkxmIRw/sTNV8YXsCJ1tfLAX23lhxhHJlEf3CRCOCGGWw3vI3GaSPw==",
-      "license": "MIT",
-      "dependencies": {
-        "punycode": "^2.3.1"
-      },
-      "engines": {
-        "node": ">=18"
-      }
-    },
-    "node_modules/tslib": {
-      "version": "2.8.1",
-      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
-      "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==",
-      "license": "0BSD"
-    },
-    "node_modules/typescript": {
-      "version": "5.9.3",
-      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
-      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
-      "dev": true,
-      "license": "Apache-2.0",
-      "bin": {
-        "tsc": "bin/tsc",
-        "tsserver": "bin/tsserver"
-      },
-      "engines": {
-        "node": ">=14.17"
-      }
-    },
-    "node_modules/undici-types": {
-      "version": "6.21.0",
-      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
-      "integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
-      "dev": true,
-      "license": "MIT"
-    },
-    "node_modules/webidl-conversions": {
-      "version": "7.0.0",
-      "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-7.0.0.tgz",
-      "integrity": "sha512-VwddBukDzu71offAQR975unBIGqfKZpM+8ZX6ySk8nYhVoo5CYaZyzt3YBvYtRtO+aoGlqxPg/B87NGVZ/fu6g==",
-      "license": "BSD-2-Clause",
-      "engines": {
-        "node": ">=12"
-      }
-    },
-    "node_modules/whatwg-url": {
-      "version": "14.2.0",
-      "resolved": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-14.2.0.tgz",
-      "integrity": "sha512-De72GdQZzNTUBBChsXueQUnPKDkg/5A5zp7pFDuQAj5UFoENpiACU0wlCvzpAGnTkj++ihpKwKyYewn/XNUbKw==",
-      "license": "MIT",
-      "dependencies": {
-        "tr46": "^5.1.0",
-        "webidl-conversions": "^7.0.0"
-      },
-      "engines": {
-        "node": ">=18"
-      }
-    }
-  }
-}
diff --git a/web/package.json b/web/package.json
deleted file mode 100644
index 0cf8888..0000000
--- a/web/package.json
+++ /dev/null
@@ -1,27 +0,0 @@
-{
-  "name": "fatihsmg4-web",
-  "version": "1.0.0",
-  "private": true,
-  "scripts": {
-    "dev": "next dev",
-    "build": "next build",
-    "start": "next start",
-    "lint": "next lint",
-    "test": "node --test --experimental-strip-types test/*.test.ts"
-  },
-  "engines": {
-    "node": ">=22"
-  },
-  "dependencies": {
-    "mongodb": "^6.20.0",
-    "next": "^15.5.4",
-    "react": "^19.1.0",
-    "react-dom": "^19.1.0"
-  },
-  "devDependencies": {
-    "@types/node": "^22.15.3",
-    "@types/react": "^19.1.2",
-    "typescript": "^5.8.3"
-  },
-  "type": "module"
-}
\ No newline at end of file
diff --git a/web/src/app/api/session/route.ts b/web/src/app/api/session/route.ts
deleted file mode 100644
index 9cbbcda..0000000
--- a/web/src/app/api/session/route.ts
+++ /dev/null
@@ -1,24 +0,0 @@
-import { NextResponse } from "next/server";
-import { SESSION_COOKIE, checkDashboardPassword, issueSessionValue, sessionCookieOptions } from "@/lib/session";
-
-export const runtime = "nodejs";
-export const dynamic = "force-dynamic";
-
-/**
- * Deliberately slow to fail. The password is the only thing between the open internet and
- * the history, and a quarter second is unnoticeable once but ruinous for anyone working
- * through a list.
- */
-export async function POST(request: Request) {
-  const form = await request.formData();
-  const password = String(form.get("password") ?? "");
-  if (!checkDashboardPassword(password)) {
-    await new Promise((resolve) => setTimeout(resolve, 250));
-    return NextResponse.redirect(new URL("/login?error=1", request.url), { status: 303 });
-  }
-  const response = NextResponse.redirect(new URL("/", request.url), { status: 303 });
-  // Set on the response rather than through the cookies() store: a freshly constructed
-  // redirect does not reliably carry what that store recorded.
-  response.cookies.set(SESSION_COOKIE, issueSessionValue(), sessionCookieOptions);
-  return response;
-}
diff --git a/web/src/app/charging/page.tsx b/web/src/app/charging/page.tsx
deleted file mode 100644
index 16f8279..0000000
--- a/web/src/app/charging/page.tsx
+++ /dev/null
@@ -1,100 +0,0 @@
-import { requireSession } from "@/lib/auth";
-import { loadOverview, sumCharging } from "@/lib/data";
-import { dateTime, duration, money, num, precise } from "@/lib/format";
-import { ChargeCurveChart } from "@/components/charts";
-import { Row, Shell, Tile } from "@/components/shell";
-
-export const dynamic = "force-dynamic";
-
-export default async function ChargingPage() {
-  await requireSession();
-  const { installationId, sessions } = await loadOverview(1, 200);
-
-  if (!installationId || sessions.length === 0) {
-    return (
-      <Shell active="/charging" title="Şarj">
-        <div className="card">
-          <p className="empty">
-            Şarj kaydı yok. Yalnızca 10 kW üstü DC şarjlar ölçülür; AC şarj kaydedilmez.
-          </p>
-        </div>
-      </Shell>
-    );
-  }
-
-  const total = sumCharging(sessions);
-
-  return (
-    <Shell active="/charging" title="Şarj" subtitle={`${sessions.length} DC seans`}>
-      <div className="tiles">
-        <Tile label="Bataryaya giren net" value={precise(total.energyKwh)} unit="kWh" tone="gold" />
-        <Tile label="Şebekeden alınan (+%10)" value={precise(total.gridEnergyKwh)} unit="kWh" tone="gold" />
-        <Tile label="Toplam ödenen" value={money(total.cost)} tone="gold" />
-        <Tile
-          label="Ortalama birim"
-          value={total.gridEnergyKwh > 0 ? money(total.cost / total.gridEnergyKwh) : "—"}
-          note="kWh başına"
-          tone="teal"
-        />
-        <Tile label="En yüksek güç" value={num(total.peakKw)} unit="kW" tone="teal" />
-      </div>
-
-      <section className="card">
-        <h2 className="card-title">Seanslar</h2>
-        <ul className="list">
-          {sessions.map((session) => {
-            const gained =
-              session.startSocPercent !== undefined && session.endSocPercent !== undefined
-                ? session.endSocPercent - session.startSocPercent
-                : null;
-            const peak = session.curve.reduce((max, point) => Math.max(max, point.powerKw), 0);
-            const average =
-              session.durationSeconds > 0 ? (session.energyKwh * 3600) / session.durationSeconds : 0;
-            return (
-              <li key={session.sessionId}>
-                <details className="session">
-                  <summary>
-                    <div>
-                      <div className="session-when">{dateTime(session.startedAt)}</div>
-                      <div className="session-meta">
-                        {session.isDemo && "Demo · "}
-                        {duration(session.durationSeconds)}
-                        {gained !== null && ` · %${num(session.startSocPercent as number)} → %${num(session.endSocPercent as number)}`}
-                      </div>
-                    </div>
-                    <div className="session-energy">
-                      {precise(session.energyKwh)}
-                      <span className="session-cost"> kWh</span>
-                      <div className="session-cost">{money(session.totalCost)}</div>
-                    </div>
-                  </summary>
-                  <div className="session-body">
-                    <ChargeCurveChart
-                      curve={session.curve.map((point) => ({
-                        timestamp: new Date(point.timestamp).toISOString(),
-                        powerKw: point.powerKw,
-                        socPercent: point.socPercent,
-                      }))}
-                    />
-                    <div className="rows" style={{ marginTop: 14 }}>
-                      <Row label="Başlangıç" value={dateTime(session.startedAt)} />
-                      <Row label="Bitiş" value={dateTime(session.endedAt)} />
-                      <Row label="Ölçülen süre" value={duration(session.durationSeconds)} />
-                      <Row label="Bataryaya giren net" value={`${precise(session.energyKwh)} kWh`} />
-                      <Row label="Şebekeden alınan (+%10)" value={`${precise(session.gridEnergyKwh ?? session.energyKwh * 1.1)} kWh`} />
-                      <Row label="Kazanılan doluluk" value={gained === null ? "—" : `%${num(gained)}`} />
-                      <Row label="Tepe güç" value={peak > 0 ? `${num(peak)} kW` : "—"} />
-                      <Row label="Ortalama güç" value={average > 0 ? `${num(average)} kW` : "—"} />
-                      <Row label="Birim fiyat" value={`${money(session.pricePerKwh)}/kWh`} />
-                      <Row label="Tutar" value={money(session.totalCost)} />
-                    </div>
-                  </div>
-                </details>
-              </li>
-            );
-          })}
-        </ul>
-      </section>
-    </Shell>
-  );
-}
diff --git a/web/src/app/consumption/page.tsx b/web/src/app/consumption/page.tsx
deleted file mode 100644
index 163546a..0000000
--- a/web/src/app/consumption/page.tsx
+++ /dev/null
@@ -1,178 +0,0 @@
-import Link from "next/link";
-import { requireSession } from "@/lib/auth";
-import { loadOverview, sumDays } from "@/lib/data";
-import { duration, efficiency, isoDate, num, precise } from "@/lib/format";
-import { DailyEnergyChart, EfficiencyChart } from "@/components/charts";
-import { Row, Shell, Tile } from "@/components/shell";
-
-export const dynamic = "force-dynamic";
-
-export default async function ConsumptionPage({
-  searchParams,
-}: {
-  searchParams: Promise<{ date?: string }>;
-}) {
-  await requireSession();
-  const { date: selectedDate } = await searchParams;
-  const { installationId, days } = await loadOverview(90, 1);
-
-  if (!installationId || days.length === 0) {
-    return (
-      <Shell active="/consumption" title="Tüketim">
-        <div className="card">
-          <p className="empty">Günlük tüketim kaydı yok. Araç günü kapattığında yüklenir.</p>
-        </div>
-      </Shell>
-    );
-  }
-
-  const chartDays = days.map((day) => ({ date: day.date, kwh: day.day.kwh, km: day.day.km }));
-  const total = sumDays(days);
-  // Lifetime is derived: the sum of every day's totals, same as the backend computes.
-  const lifetime = { km: total.km, kwh: total.kwh, hours: total.hours, socDrop: 0 };
-  // Newest first for reading; the charts above keep chronological order.
-  const table = [...days].reverse();
-
-  // Find the selected day's record (if any). table is newest-first; a Map would be overkill
-  // for ≤90 entries.
-  const selected = selectedDate ? table.find((d) => d.date === selectedDate) : null;
-  const hasFilter = !!selectedDate;
-  const validFilter = hasFilter && !!selected;
-
-  // Date input bounds: oldest record to today.
-  const minDate = days[0].date; // days is chronological (oldest first after loadOverview reverse)
-  const maxDate = new Date().toISOString().slice(0, 10);
-
-  return (
-    <Shell
-      active="/consumption"
-      title="Tüketim"
-      subtitle={hasFilter ? (validFilter ? isoDate(selectedDate!) : "Seçili gün kaydı yok") : `${days.length} günlük kayıt`}
-    >
-      {/* Date filter */}
-      <section className="card">
-        <form className="filter-form" method="get" action="/consumption">
-          <label className="filter-label" htmlFor="date-picker">
-            Tarihe göre filtrele
-          </label>
-          <div className="filter-row">
-            <input
-              id="date-picker"
-              type="date"
-              name="date"
-              defaultValue={selectedDate ?? ""}
-              min={minDate}
-              max={maxDate}
-              className="field date-input"
-            />
-            <button className="button filter-button" type="submit">Filtrele</button>
-            {hasFilter && (
-              <Link className="filter-clear" href="/consumption">Temizle</Link>
-            )}
-          </div>
-        </form>
-      </section>
-
-      {/* Selected day detail — shown above the period tiles when a filter is active */}
-      {hasFilter && (
-        <section className="card">
-          <h2 className="card-title">{isoDate(selectedDate!)}</h2>
-          {validFilter && selected ? (
-            <>
-              <div className="tiles">
-                <Tile label="Mesafe" value={num(selected.day.km)} unit="km" tone="teal" />
-                <Tile label="Enerji" value={precise(selected.day.kwh)} unit="kWh" tone="gold" />
-                <Tile label="Ortalama" value={efficiency(selected.day.kwh, selected.day.km)} tone="teal" />
-                <Tile
-                  label="Ortalama hız"
-                  value={selected.day.hours > 0 ? num(selected.day.km / selected.day.hours) : "—"}
-                  unit={selected.day.hours > 0 ? "km/h" : undefined}
-                />
-              </div>
-              <div className="rows">
-                <Row label="Sürüş süresi" value={duration(selected.day.hours * 3600)} />
-                <Row label="Doluluk düşüşü" value={`%${num(selected.day.socDrop)}`} />
-                <Row label="O gün sonu ömür boyu" value={selected.lifetime ? `${num(selected.lifetime.km)} km` : "—"} />
-              </div>
-            </>
-          ) : (
-            <p className="empty">Bu tarih için tüketim kaydı yok.</p>
-          )}
-        </section>
-      )}
-
-      <div className="tiles">
-        <Tile label="Toplam mesafe" value={num(total.km)} unit="km" tone="teal" />
-        <Tile label="Toplam enerji" value={precise(total.kwh)} unit="kWh" tone="gold" />
-        <Tile label="Ortalama" value={efficiency(total.kwh, total.km)} tone="teal" />
-        <Tile
-          label="Ortalama hız"
-          value={total.hours > 0 ? num(total.km / total.hours) : "—"}
-          unit={total.hours > 0 ? "km/h" : undefined}
-        />
-      </div>
-
-      <section className="card">
-        <h2 className="card-title">Günlük enerji</h2>
-        <DailyEnergyChart days={chartDays} />
-      </section>
-
-      <section className="card">
-        <h2 className="card-title">Verimlilik eğilimi</h2>
-        <EfficiencyChart days={chartDays} />
-      </section>
-
-      <section className="card">
-        <h2 className="card-title">Ömür boyu</h2>
-        <div className="rows">
-          <Row label="Mesafe" value={`${num(lifetime.km)} km`} />
-          <Row label="Enerji" value={`${precise(lifetime.kwh)} kWh`} />
-          <Row label="Ortalama" value={efficiency(lifetime.kwh, lifetime.km)} />
-          <Row label="Sürüş süresi" value={duration(lifetime.hours * 3600)} />
-        </div>
-      </section>
-
-      <section className="card">
-        <h2 className="card-title">Gün gün</h2>
-        <ul className="list">
-          {table.map((day) => {
-            const isSelected = hasFilter && day.date === selectedDate;
-            return (
-              <li key={day.date}>
-                <details className={`session${isSelected ? " selected" : ""}`} open={isSelected}>
-                  <summary>
-                    <div>
-                      <div className="session-when">
-                        <Link href={`/consumption?date=${day.date}`} className="day-link">
-                          {isoDate(day.date)}
-                        </Link>
-                      </div>
-                      <div className="session-meta">
-                        {num(day.day.km)} km · {efficiency(day.day.kwh, day.day.km)}
-                      </div>
-                    </div>
-                    <div className="session-energy">
-                      {precise(day.day.kwh)}
-                      <span className="session-cost"> kWh</span>
-                    </div>
-                  </summary>
-                  <div className="session-body">
-                    <div className="rows">
-                      <Row label="Sürüş süresi" value={duration(day.day.hours * 3600)} />
-                      <Row
-                        label="Ortalama hız"
-                        value={day.day.hours > 0 ? `${num(day.day.km / day.day.hours)} km/h` : "—"}
-                      />
-                      <Row label="Doluluk düşüşü" value={`%${num(day.day.socDrop)}`} />
-                      <Row label="O gün sonu ömür boyu" value={day.lifetime ? `${num(day.lifetime.km)} km` : "—"} />
-                    </div>
-                  </div>
-                </details>
-              </li>
-            );
-          })}
-        </ul>
-      </section>
-    </Shell>
-  );
-}
diff --git a/web/src/app/globals.css b/web/src/app/globals.css
deleted file mode 100644
index d10dbbc..0000000
--- a/web/src/app/globals.css
+++ /dev/null
@@ -1,430 +0,0 @@
-/*
- * The car's palette, from app/src/main/res/values/colors.xml.
- *
- * Permanent OLED black with charcoal cards and muted gold/cyan accents — the same visual
- * direction AGENTS.md pins for the head unit, so the phone and the dash read as one app.
- * No light mode: this is looked at in a dark car as often as anywhere else.
- */
-:root {
-  --bg: #000000;
-  --surface: #121212;
-  --raised: #1b1d1e;
-  --outline: #363b3d;
-  --text: #f4f3ef;
-  --muted: #bdc4c6;
-  --accent: #d8c39a;
-  --on-accent: #17140e;
-  --cyan: #a0e2e0;
-  --cyan-deep: #103436;
-  --gold-surface: #28241b;
-  --ok: #a4dcc1;
-  --warn: #e9ca96;
-  --error: #ffb4ab;
-
-  --radius: 18px;
-  --gap: 12px;
-}
-
-* {
-  box-sizing: border-box;
-}
-
-html,
-body {
-  margin: 0;
-  padding: 0;
-  background: var(--bg);
-  color: var(--text);
-  font-family: ui-sans-serif, system-ui, -apple-system, "Segoe UI", Roboto, sans-serif;
-  -webkit-font-smoothing: antialiased;
-  font-variant-numeric: tabular-nums;
-}
-
-a {
-  color: inherit;
-  text-decoration: none;
-}
-
-/* The phone frame. Wide windows get the same column rather than a stretched dashboard. */
-.shell {
-  max-width: 480px;
-  margin: 0 auto;
-  min-height: 100dvh;
-  padding: 20px 16px calc(84px + env(safe-area-inset-bottom));
-  display: flex;
-  flex-direction: column;
-  gap: var(--gap);
-}
-
-.header {
-  display: flex;
-  align-items: baseline;
-  justify-content: space-between;
-  margin-bottom: 4px;
-}
-
-.title {
-  font-size: 26px;
-  font-weight: 650;
-  letter-spacing: -0.4px;
-  margin: 0;
-}
-
-.subtitle {
-  color: var(--muted);
-  font-size: 13px;
-  margin: 2px 0 0;
-}
-
-.card {
-  background: var(--surface);
-  border: 1px solid var(--outline);
-  border-radius: var(--radius);
-  padding: 16px;
-}
-
-.card-title {
-  font-size: 12px;
-  letter-spacing: 1.1px;
-  text-transform: uppercase;
-  color: var(--muted);
-  margin: 0 0 12px;
-  font-weight: 600;
-}
-
-/* Headline numbers: two per row, gold for energy/cost, cyan for distance/efficiency. */
-.tiles {
-  display: grid;
-  grid-template-columns: 1fr 1fr;
-  gap: var(--gap);
-}
-
-.tile {
-  background: var(--surface);
-  border: 1px solid var(--outline);
-  border-radius: var(--radius);
-  padding: 14px 16px;
-}
-
-.tile.gold {
-  background: linear-gradient(160deg, var(--gold-surface), var(--surface) 70%);
-}
-
-.tile.teal {
-  background: linear-gradient(160deg, var(--cyan-deep), var(--surface) 70%);
-}
-
-.tile-label {
-  font-size: 11px;
-  letter-spacing: 0.8px;
-  text-transform: uppercase;
-  color: var(--muted);
-  margin: 0;
-}
-
-.tile-value {
-  font-size: 24px;
-  font-weight: 650;
-  margin: 6px 0 0;
-  letter-spacing: -0.5px;
-}
-
-.tile-unit {
-  font-size: 13px;
-  font-weight: 500;
-  color: var(--muted);
-  margin-left: 3px;
-}
-
-.tile-note {
-  font-size: 11px;
-  color: var(--muted);
-  margin: 4px 0 0;
-}
-
-/* Key/value rows inside a card. */
-.rows {
-  display: flex;
-  flex-direction: column;
-  gap: 10px;
-}
-
-.row {
-  display: flex;
-  justify-content: space-between;
-  align-items: baseline;
-  gap: 12px;
-  font-size: 14px;
-}
-
-.row + .row {
-  border-top: 1px solid var(--outline);
-  padding-top: 10px;
-}
-
-.row-key {
-  color: var(--muted);
-}
-
-.row-value {
-  font-weight: 600;
-}
-
-.list {
-  display: flex;
-  flex-direction: column;
-  gap: 10px;
-  list-style: none;
-  margin: 0;
-  padding: 0;
-}
-
-.session {
-  background: var(--surface);
-  border: 1px solid var(--outline);
-  border-radius: var(--radius);
-  padding: 14px 16px;
-}
-
-.session summary {
-  cursor: pointer;
-  list-style: none;
-  display: flex;
-  justify-content: space-between;
-  align-items: center;
-  gap: 10px;
-}
-
-.session summary::-webkit-details-marker {
-  display: none;
-}
-
-.session-when {
-  font-size: 14px;
-  font-weight: 600;
-}
-
-.session-meta {
-  font-size: 12px;
-  color: var(--muted);
-  margin-top: 3px;
-}
-
-.session-energy {
-  text-align: right;
-  font-size: 18px;
-  font-weight: 650;
-  color: var(--accent);
-  white-space: nowrap;
-}
-
-.session-cost {
-  font-size: 12px;
-  color: var(--muted);
-  font-weight: 500;
-}
-
-.session-body {
-  margin-top: 14px;
-  padding-top: 14px;
-  border-top: 1px solid var(--outline);
-}
-
-.chart {
-  width: 100%;
-  height: auto;
-  display: block;
-  overflow: visible;
-}
-
-.legend {
-  display: flex;
-  gap: 14px;
-  font-size: 11px;
-  color: var(--muted);
-  margin-top: 8px;
-}
-
-.swatch {
-  display: inline-block;
-  width: 9px;
-  height: 9px;
-  border-radius: 2px;
-  margin-right: 5px;
-  vertical-align: baseline;
-}
-
-.empty {
-  color: var(--muted);
-  font-size: 14px;
-  text-align: center;
-  padding: 28px 12px;
-}
-
-/* Bottom navigation — the car app falls back to the same pattern below 1000dp. */
-.nav {
-  position: fixed;
-  left: 0;
-  right: 0;
-  bottom: 0;
-  background: rgba(10, 10, 10, 0.92);
-  backdrop-filter: blur(14px);
-  border-top: 1px solid var(--outline);
-  padding: 8px 0 calc(8px + env(safe-area-inset-bottom));
-}
-
-.nav-inner {
-  max-width: 480px;
-  margin: 0 auto;
-  display: grid;
-  grid-template-columns: repeat(3, 1fr);
-}
-
-.nav a {
-  text-align: center;
-  padding: 8px 4px;
-  font-size: 11px;
-  color: var(--muted);
-  font-weight: 600;
-  letter-spacing: 0.3px;
-}
-
-.nav a[aria-current="page"] {
-  color: var(--accent);
-}
-
-.nav-icon {
-  display: block;
-  font-size: 17px;
-  margin-bottom: 2px;
-}
-
-/* Login */
-.login {
-  min-height: 100dvh;
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  padding: 24px;
-}
-
-.login-card {
-  width: 100%;
-  max-width: 360px;
-  background: var(--surface);
-  border: 1px solid var(--outline);
-  border-radius: var(--radius);
-  padding: 28px 24px;
-}
-
-.field {
-  width: 100%;
-  background: var(--raised);
-  border: 1px solid var(--outline);
-  border-radius: 12px;
-  color: var(--text);
-  padding: 13px 14px;
-  font-size: 16px;
-  margin-top: 16px;
-}
-
-.field:focus {
-  outline: none;
-  border-color: var(--accent);
-}
-
-.button {
-  width: 100%;
-  margin-top: 14px;
-  background: var(--accent);
-  color: var(--on-accent);
-  border: none;
-  border-radius: 12px;
-  padding: 13px;
-  font-size: 15px;
-  font-weight: 650;
-  cursor: pointer;
-}
-
-.error {
-  color: var(--error);
-  font-size: 13px;
-  margin: 14px 0 0;
-}
-
-.signout {
-  font: inherit;
-  font-size: 12px;
-  color: var(--muted);
-  background: none;
-  border: 1px solid var(--outline);
-  border-radius: 999px;
-  padding: 5px 12px;
-  cursor: pointer;
-}
-
-/* ---------- Consumption date filter ---------- */
-
-.filter-form {
-  display: flex;
-  flex-direction: column;
-  gap: 10px;
-}
-
-.filter-label {
-  font-size: 12px;
-  text-transform: uppercase;
-  letter-spacing: 0.5px;
-  color: var(--muted);
-}
-
-.filter-row {
-  display: flex;
-  align-items: center;
-  gap: 10px;
-  flex-wrap: wrap;
-}
-
-.date-input {
-  width: auto;
-  min-width: 0;
-  flex: 1 1 150px;
-  margin-top: 0;
-  color-scheme: dark;
-}
-
-.filter-button {
-  width: auto;
-  margin-top: 0;
-  padding: 12px 18px;
-  flex: 0 0 auto;
-}
-
-.filter-clear {
-  font: inherit;
-  font-size: 13px;
-  color: var(--muted);
-  text-decoration: none;
-  border: 1px solid var(--outline);
-  border-radius: 12px;
-  padding: 11px 14px;
-  flex: 0 0 auto;
-}
-
-.filter-clear:active {
-  border-color: var(--accent);
-}
-
-/* Highlighted selected day in the day-by-day list */
-.session.selected {
-  border-color: var(--accent);
-}
-
-.day-link {
-  color: var(--text);
-  text-decoration: none;
-}
-
-.day-link:active {
-  color: var(--accent);
-}
diff --git a/web/src/app/layout.tsx b/web/src/app/layout.tsx
deleted file mode 100644
index a3a2aeb..0000000
--- a/web/src/app/layout.tsx
+++ /dev/null
@@ -1,23 +0,0 @@
-import type { Metadata, Viewport } from "next";
-import "./globals.css";
-
-export const metadata: Metadata = {
-  title: "FatihsMG4",
-  description: "MG4 tüketim ve şarj geçmişi",
-};
-
-export const viewport: Viewport = {
-  themeColor: "#000000",
-  width: "device-width",
-  initialScale: 1,
-  // The dashboard is pinned to a phone-width column; zooming it is still the reader's call.
-  maximumScale: 5,
-};
-
-export default function RootLayout({ children }: { children: React.ReactNode }) {
-  return (
-    <html lang="tr">
-      <body>{children}</body>
-    </html>
-  );
-}
diff --git a/web/src/app/login/page.tsx b/web/src/app/login/page.tsx
deleted file mode 100644
index 459543d..0000000
--- a/web/src/app/login/page.tsx
+++ /dev/null
@@ -1,48 +0,0 @@
-import { redirect } from "next/navigation";
-import { hasSession } from "@/lib/auth";
-
-export const dynamic = "force-dynamic";
-
-export default async function LoginPage({
-  searchParams,
-}: {
-  searchParams: Promise<{ error?: string }>;
-}) {
-  if (await hasSession()) redirect("/");
-  const { error } = await searchParams;
-  return (
-    <div className="login">
-      <form className="login-card" action="/api/session" method="post">
-        <h1 className="title">FatihsMG4</h1>
-        <p className="subtitle">Tüketim ve şarj geçmişi</p>
-        {/*
-          A hidden username so password managers will offer to save this.
-          Most of them ignore a lone password field — they key a saved entry on
-          (origin, username), and with nothing to key on they stay quiet. There is only
-          ever one account here, so the value is fixed and the server never reads it.
-        */}
-        <input
-          type="text"
-          name="username"
-          value="fatih"
-          autoComplete="username"
-          readOnly
-          hidden
-        />
-        <input
-          className="field"
-          type="password"
-          name="password"
-          placeholder="Parola"
-          autoComplete="current-password"
-          autoFocus
-          required
-        />
-        <button className="button" type="submit">
-          Giriş
-        </button>
-        {error && <p className="error">Parola hatalı.</p>}
-      </form>
-    </div>
-  );
-}
diff --git a/web/src/app/logout/route.ts b/web/src/app/logout/route.ts
deleted file mode 100644
index 8b016f6..0000000
--- a/web/src/app/logout/route.ts
+++ /dev/null
@@ -1,22 +0,0 @@
-import { NextResponse } from "next/server";
-import { SESSION_COOKIE } from "@/lib/session";
-
-export const runtime = "nodejs";
-export const dynamic = "force-dynamic";
-
-/**
- * POST only, deliberately.
- *
- * This used to answer GET behind a `<Link>`, so Next's viewport prefetch called it on
- * every render and cleared the cookie before the reader had clicked anything — which
- * presented as the session expiring on every navigation. Anything that changes state has
- * to be unreachable by a prefetch, a crawler or a preloading browser, and that means not
- * answering GET.
- */
-export async function POST(request: Request) {
-  const response = NextResponse.redirect(new URL("/login", request.url), { status: 303 });
-  // Cleared on the response itself rather than through the cookies() store: a freshly
-  // constructed redirect does not reliably carry what that store recorded.
-  response.cookies.set(SESSION_COOKIE, "", { path: "/", maxAge: 0 });
-  return response;
-}
diff --git a/web/src/app/page.tsx b/web/src/app/page.tsx
deleted file mode 100644
index a6cae0f..0000000
--- a/web/src/app/page.tsx
+++ /dev/null
@@ -1,99 +0,0 @@
-import { requireSession } from "@/lib/auth";
-import { loadOverview, sumCharging, sumDays } from "@/lib/data";
-import { dateTime, duration, efficiency, money, num, precise } from "@/lib/format";
-import { DailyEnergyChart } from "@/components/charts";
-import { Row, Shell, Tile } from "@/components/shell";
-
-export const dynamic = "force-dynamic";
-
-export default async function OverviewPage() {
-  await requireSession();
-  const { installationId, installationCount, days, sessions } = await loadOverview(30, 200);
-
-  if (!installationId) {
-    return (
-      <Shell active="/" title="Özet">
-        <div className="card">
-          <p className="empty">
-            Henüz veri yok. Araç ilk günlük kaydı gönderdiğinde burada görünecek.
-          </p>
-        </div>
-      </Shell>
-    );
-  }
-
-  const charge = sumCharging(sessions);
-  const recent = sumDays(days);
-  const lifetime = days.length > 0 ? days[days.length - 1].lifetime : null;
-  const soh = [...days].reverse().find((day) => day.sohPercent !== undefined)?.sohPercent;
-  const lastSession = sessions[0];
-
-  return (
-    <Shell
-      active="/"
-      title="Özet"
-      subtitle={installationCount > 1 ? `${installationCount} araçtan en günceli` : "MG4"}
-    >
-      <div className="tiles">
-        <Tile
-          label="Şebekeden alınan"
-          value={precise(charge.gridEnergyKwh)}
-          unit="kWh"
-          note={`${charge.sessions} DC şarj`}
-          tone="gold"
-        />
-        <Tile
-          label="Ödenen"
-          value={money(charge.cost)}
-          note={charge.gridEnergyKwh > 0 ? `${money(charge.cost / charge.gridEnergyKwh)}/kWh ort.` : undefined}
-          tone="gold"
-        />
-        <Tile label="Son 30 gün" value={num(recent.km)} unit="km" note={efficiency(recent.kwh, recent.km)} tone="teal" />
-        <Tile
-          label="Ömür boyu"
-          value={lifetime ? num(lifetime.km) : "—"}
-          unit="km"
-          note={lifetime ? efficiency(lifetime.kwh, lifetime.km) : undefined}
-          tone="teal"
-        />
-      </div>
-
-      <section className="card">
-        <h2 className="card-title">Son 30 gün</h2>
-        <DailyEnergyChart days={days.map((day) => ({ date: day.date, kwh: day.day.kwh, km: day.day.km }))} />
-      </section>
-
-      {lastSession && (
-        <section className="card">
-          <h2 className="card-title">Son şarj</h2>
-          <div className="rows">
-            <Row label="Tarih" value={dateTime(lastSession.startedAt)} />
-            <Row label="Bataryaya giren net" value={`${precise(lastSession.energyKwh)} kWh`} />
-            <Row label="Şebekeden alınan (+%10)" value={`${precise(lastSession.gridEnergyKwh ?? lastSession.energyKwh * 1.1)} kWh`} />
-            <Row
-              label="Doluluk"
-              value={
-                lastSession.startSocPercent !== undefined && lastSession.endSocPercent !== undefined
-                  ? `%${num(lastSession.startSocPercent)} → %${num(lastSession.endSocPercent)}`
-                  : "—"
-              }
-            />
-            <Row label="Süre" value={duration(lastSession.durationSeconds)} />
-            <Row label="Ücret" value={money(lastSession.totalCost)} />
-          </div>
-        </section>
-      )}
-
-      <section className="card">
-        <h2 className="card-title">Batarya ve toplamlar</h2>
-        <div className="rows">
-          <Row label="Sağlık (SOH)" value={soh === undefined ? "—" : `%${num(soh)}`} />
-          <Row label="Toplam şarj süresi" value={duration(charge.seconds)} />
-          <Row label="Görülen en yüksek güç" value={charge.peakKw > 0 ? `${num(charge.peakKw)} kW` : "—"} />
-          <Row label="Şarjla kazanılan doluluk" value={charge.socGained > 0 ? `%${num(charge.socGained)}` : "—"} />
-          <Row label="Kayıtlı gün" value={`${days.length}`} />
-        </div>
-      </section>
-    </Shell>
-  );
-}
diff --git a/web/src/app/v1/charging-sessions/[sessionId]/route.ts b/web/src/app/v1/charging-sessions/[sessionId]/route.ts
deleted file mode 100644
index d36ff88..0000000
--- a/web/src/app/v1/charging-sessions/[sessionId]/route.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-import { NextResponse } from "next/server";
-import { handle, parseJson, requireIngest } from "@/lib/api";
-import { chargingCollection, ensureIndexes } from "@/lib/mongo";
-import { validateChargingSession } from "@/lib/validate";
-
-export const runtime = "nodejs";
-export const dynamic = "force-dynamic";
-
-export async function PUT(request: Request, context: { params: Promise<{ sessionId: string }> }) {
-  const denied = requireIngest(request);
-  if (denied) return denied;
-  return handle(async () => {
-    const { sessionId } = await context.params;
-    const record = validateChargingSession(await parseJson(request), sessionId);
-    await ensureIndexes();
-    const collection = await chargingCollection();
-    const updatedAt = new Date();
-    await collection.updateOne(
-      { installationId: record.installationId, sessionId: record.sessionId },
-      { $set: { ...record, updatedAt }, $setOnInsert: { createdAt: updatedAt } },
-      { upsert: true },
-    );
-    return new NextResponse(null, { status: 204 });
-  });
-}
diff --git a/web/src/app/v1/consumption/daily/route.ts b/web/src/app/v1/consumption/daily/route.ts
deleted file mode 100644
index 7397ba6..0000000
--- a/web/src/app/v1/consumption/daily/route.ts
+++ /dev/null
@@ -1,48 +0,0 @@
-import { NextResponse } from "next/server";
-import { handle, parseJson, requireIngest } from "@/lib/api";
-import { consumptionCollection, ensureIndexes } from "@/lib/mongo";
-import { validateConsumption } from "@/lib/validate";
-
-export const runtime = "nodejs";
-export const dynamic = "force-dynamic";
-
-/**
- * Upsert on (installationId, date), incrementally. The car sends a 2-minute delta chunk
- * (not a cumulative total), so each PUT adds to the day's running totals rather than
- * overwriting them. The app does NOT send lifetime — the backend derives it as the sum of
- * all days' totals when history is read, so an APK wipe that zeroes the local counter can
- * never corrupt the cloud's lifetime.
- *
- * $setOnInsert must not touch `day` at all: $inc on `day.km` and $setOnInsert on `day`
- * conflict in MongoDB. On an insert, $inc treats a missing field as 0 and adds to it.
- */
-export async function PUT(request: Request) {
-  const denied = requireIngest(request);
-  if (denied) return denied;
-  return handle(async () => {
-    const record = validateConsumption(await parseJson(request));
-    await ensureIndexes();
-    const collection = await consumptionCollection();
-    const updatedAt = new Date();
-    const $set: Record<string, unknown> = { updatedAt };
-    if (record.sohPercent !== undefined) $set.sohPercent = record.sohPercent;
-    await collection.updateOne(
-      { installationId: record.installationId, date: record.date },
-      {
-        $inc: {
-          "day.km": record.day.km,
-          "day.kwh": record.day.kwh,
-          "day.hours": record.day.hours,
-          "day.socDrop": record.day.socDrop,
-        },
-        $set,
-        $setOnInsert: {
-          createdAt: updatedAt,
-        },
-      },
-      { upsert: true },
-    );
-    return new NextResponse(null, { status: 204 });
-  });
-}
-
diff --git a/web/src/app/v1/consumption/history/[installationId]/route.ts b/web/src/app/v1/consumption/history/[installationId]/route.ts
deleted file mode 100644
index e44811f..0000000
--- a/web/src/app/v1/consumption/history/[installationId]/route.ts
+++ /dev/null
@@ -1,43 +0,0 @@
-import { NextResponse } from "next/server";
-import { handle, requireIngest } from "@/lib/api";
-import { consumptionCollection } from "@/lib/mongo";
-import { validateUuid } from "@/lib/validate";
-
-export const runtime = "nodejs";
-export const dynamic = "force-dynamic";
-
-/**
- * Ingest-token-authenticated history read for the head-unit app.
- *
- * The dashboard history endpoints under /v1/history use the dashboard password (a
- * browser-only credential). The head unit only holds the ingest token, which was
- * write-only by design — but the car's consumption UI now reads back its own uploaded
- * totals so an APK wipe does not blank the display. The installationId is a fixed UUID
- * baked into the APK, so an extracted token plus a guessed installationId is the only
- * exposure, and the data revealed is the owner's own consumption history.
- */
-export async function GET(request: Request, context: { params: Promise<{ installationId: string }> }) {
-  const denied = requireIngest(request);
-  if (denied) return denied;
-  return handle(async () => {
-    const { installationId } = await context.params;
-    const collection = await consumptionCollection();
-    const records = await collection
-      .find({ installationId: validateUuid(installationId, "installationId") }, { projection: { _id: 0 } })
-      .sort({ date: -1 })
-      .limit(400)
-      .toArray();
-    // Lifetime = sum of every day's totals. Derived, never stored, so a corrupted or
-    // stale lifetime field in any single document cannot poison the total.
-    const lifetime = records.reduce(
-      (sum, r) => ({
-        km: sum.km + (r.day?.km ?? 0),
-        kwh: sum.kwh + (r.day?.kwh ?? 0),
-        hours: sum.hours + (r.day?.hours ?? 0),
-        socDrop: sum.socDrop + (r.day?.socDrop ?? 0),
-      }),
-      { km: 0, kwh: 0, hours: 0, socDrop: 0 },
-    );
-    return NextResponse.json({ records, lifetime });
-  });
-}
diff --git a/web/src/app/v1/health/route.ts b/web/src/app/v1/health/route.ts
deleted file mode 100644
index 4efb85e..0000000
--- a/web/src/app/v1/health/route.ts
+++ /dev/null
@@ -1,9 +0,0 @@
-import { NextResponse } from "next/server";
-
-export const runtime = "nodejs";
-export const dynamic = "force-dynamic";
-
-/** Unauthenticated on purpose: it reveals nothing and the car has no other probe. */
-export function GET() {
-  return NextResponse.json({ status: "ok" });
-}
diff --git a/web/src/app/v1/history/[installationId]/charging/route.ts b/web/src/app/v1/history/[installationId]/charging/route.ts
deleted file mode 100644
index 73dd795..0000000
--- a/web/src/app/v1/history/[installationId]/charging/route.ts
+++ /dev/null
@@ -1,22 +0,0 @@
-import { NextResponse } from "next/server";
-import { handle, requireReader } from "@/lib/api";
-import { chargingCollection } from "@/lib/mongo";
-import { validateUuid } from "@/lib/validate";
-
-export const runtime = "nodejs";
-export const dynamic = "force-dynamic";
-
-export async function GET(request: Request, context: { params: Promise<{ installationId: string }> }) {
-  const denied = await requireReader(request);
-  if (denied) return denied;
-  return handle(async () => {
-    const { installationId } = await context.params;
-    const collection = await chargingCollection();
-    const records = await collection
-      .find({ installationId: validateUuid(installationId, "installationId") }, { projection: { _id: 0 } })
-      .sort({ startedAt: -1 })
-      .limit(200)
-      .toArray();
-    return NextResponse.json({ records });
-  });
-}
diff --git a/web/src/app/v1/history/[installationId]/consumption/route.ts b/web/src/app/v1/history/[installationId]/consumption/route.ts
deleted file mode 100644
index 19d108c..0000000
--- a/web/src/app/v1/history/[installationId]/consumption/route.ts
+++ /dev/null
@@ -1,22 +0,0 @@
-import { NextResponse } from "next/server";
-import { handle, requireReader } from "@/lib/api";
-import { consumptionCollection } from "@/lib/mongo";
-import { validateUuid } from "@/lib/validate";
-
-export const runtime = "nodejs";
-export const dynamic = "force-dynamic";
-
-export async function GET(request: Request, context: { params: Promise<{ installationId: string }> }) {
-  const denied = await requireReader(request);
-  if (denied) return denied;
-  return handle(async () => {
-    const { installationId } = await context.params;
-    const collection = await consumptionCollection();
-    const records = await collection
-      .find({ installationId: validateUuid(installationId, "installationId") }, { projection: { _id: 0 } })
-      .sort({ date: -1 })
-      .limit(400)
-      .toArray();
-    return NextResponse.json({ records });
-  });
-}
diff --git a/web/src/components/charts.tsx b/web/src/components/charts.tsx
deleted file mode 100644
index b02c6be..0000000
--- a/web/src/components/charts.tsx
+++ /dev/null
@@ -1,267 +0,0 @@
-/*
- * Hand-rolled SVG charts.
- *
- * A charting library would be the larger part of the bundle for three small plots, and
- * these are server-rendered: no hydration, no client JavaScript, and they draw correctly
- * before anything loads. Each one states its own units in the legend rather than relying
- * on a tooltip, because a tooltip needs a pointer and this is read on a phone.
- */
-
-const GOLD = "#d8c39a";
-const CYAN = "#a0e2e0";
-const GRID = "#363b3d";
-const MUTED = "#bdc4c6";
-
-interface Plot {
-  width: number;
-  height: number;
-  padTop: number;
-  padRight: number;
-  padBottom: number;
-  padLeft: number;
-}
-
-const PLOT: Plot = { width: 320, height: 150, padTop: 10, padRight: 8, padBottom: 20, padLeft: 34 };
-
-function innerWidth(plot: Plot) {
-  return plot.width - plot.padLeft - plot.padRight;
-}
-function innerHeight(plot: Plot) {
-  return plot.height - plot.padTop - plot.padBottom;
-}
-
-/** A rounded axis maximum, so the gridline labels are readable numbers. */
-function niceMax(value: number): number {
-  if (!(value > 0)) return 1;
-  const magnitude = 10 ** Math.floor(Math.log10(value));
-  const normalised = value / magnitude;
-  const step = normalised <= 1 ? 1 : normalised <= 2 ? 2 : normalised <= 5 ? 5 : 10;
-  return step * magnitude;
-}
-
-function Grid({ plot, max, format }: { plot: Plot; max: number; format: (value: number) => string }) {
-  const lines = [0, 0.5, 1];
-  return (
-    <g>
-      {lines.map((fraction) => {
-        const y = plot.padTop + innerHeight(plot) * (1 - fraction);
-        return (
-          <g key={fraction}>
-            <line
-              x1={plot.padLeft}
-              x2={plot.width - plot.padRight}
-              y1={y}
-              y2={y}
-              stroke={GRID}
-              strokeWidth={1}
-              strokeDasharray={fraction === 0 ? undefined : "2 4"}
-            />
-            <text x={plot.padLeft - 6} y={y + 3.5} fill={MUTED} fontSize={9} textAnchor="end">
-              {format(max * fraction)}
-            </text>
-          </g>
-        );
-      })}
-    </g>
-  );
-}
-
-export interface DayDatum {
-  date: string;
-  kwh: number;
-  km: number;
-}
-
-/**
- * Daily energy as bars. Days with no record are absent rather than drawn as zero — the
- * car was not driven, which is not the same as a day of zero consumption, and the same
- * distinction the telemetry side makes between a failed read and a zero.
- */
-export function DailyEnergyChart({ days }: { days: DayDatum[] }) {
-  if (days.length === 0) return <p className="empty">Henüz günlük kayıt yok</p>;
-  const plot = PLOT;
-  const max = niceMax(Math.max(...days.map((day) => day.kwh)));
-  const slot = innerWidth(plot) / days.length;
-  const barWidth = Math.max(1.5, Math.min(14, slot * 0.62));
-  return (
-    <>
-      <svg className="chart" viewBox={`0 0 ${plot.width} ${plot.height}`} role="img"
-           aria-label="Gün gün tüketilen enerji">
-        <Grid plot={plot} max={max} format={(value) => value.toFixed(0)} />
-        {days.map((day, index) => {
-          const height = (day.kwh / max) * innerHeight(plot);
-          const x = plot.padLeft + slot * (index + 0.5) - barWidth / 2;
-          return (
-            <rect
-              key={day.date}
-              x={x}
-              y={plot.padTop + innerHeight(plot) - height}
-              width={barWidth}
-              height={Math.max(height, day.kwh > 0 ? 1 : 0)}
-              rx={2}
-              fill={GOLD}
-              opacity={0.92}
-            >
-              <title>{`${day.date} — ${day.kwh.toFixed(2)} kWh, ${day.km.toFixed(1)} km`}</title>
-            </rect>
-          );
-        })}
-        <text x={plot.padLeft} y={plot.height - 6} fill={MUTED} fontSize={9}>
-          {shortDate(days[0].date)}
-        </text>
-        <text x={plot.width - plot.padRight} y={plot.height - 6} fill={MUTED} fontSize={9} textAnchor="end">
-          {shortDate(days[days.length - 1].date)}
-        </text>
-      </svg>
-      <div className="legend">
-        <span>
-          <span className="swatch" style={{ background: GOLD }} />
-          Günlük enerji (kWh)
-        </span>
-      </div>
-    </>
-  );
-}
-
-/** Efficiency over time. Days under 1 km are dropped: the ratio is meaningless there. */
-export function EfficiencyChart({ days }: { days: DayDatum[] }) {
-  const points = days
-    .filter((day) => day.km >= 1 && day.kwh > 0)
-    .map((day) => ({ date: day.date, value: (day.kwh * 100) / day.km }));
-  if (points.length < 2) return <p className="empty">Grafik için yeterli gün yok</p>;
-  const plot = PLOT;
-  const max = niceMax(Math.max(...points.map((point) => point.value)));
-  const step = innerWidth(plot) / Math.max(1, points.length - 1);
-  const path = points
-    .map((point, index) => {
-      const x = plot.padLeft + step * index;
-      const y = plot.padTop + innerHeight(plot) * (1 - point.value / max);
-      return `${index === 0 ? "M" : "L"}${x.toFixed(2)} ${y.toFixed(2)}`;
-    })
-    .join(" ");
-  const average = points.reduce((total, point) => total + point.value, 0) / points.length;
-  const averageY = plot.padTop + innerHeight(plot) * (1 - average / max);
-  return (
-    <>
-      <svg className="chart" viewBox={`0 0 ${plot.width} ${plot.height}`} role="img"
-           aria-label="Gün gün ortalama tüketim">
-        <Grid plot={plot} max={max} format={(value) => value.toFixed(0)} />
-        <line
-          x1={plot.padLeft}
-          x2={plot.width - plot.padRight}
-          y1={averageY}
-          y2={averageY}
-          stroke={GOLD}
-          strokeWidth={1}
-          strokeDasharray="4 4"
-          opacity={0.7}
-        />
-        <path d={path} fill="none" stroke={CYAN} strokeWidth={2} strokeLinejoin="round" strokeLinecap="round" />
-        {points.map((point, index) => (
-          <circle
-            key={point.date}
-            cx={plot.padLeft + step * index}
-            cy={plot.padTop + innerHeight(plot) * (1 - point.value / max)}
-            r={1.8}
-            fill={CYAN}
-          >
-            <title>{`${point.date} — ${point.value.toFixed(1)} kWh/100 km`}</title>
-          </circle>
-        ))}
-      </svg>
-      <div className="legend">
-        <span>
-          <span className="swatch" style={{ background: CYAN }} />
-          kWh/100 km
-        </span>
-        <span>
-          <span className="swatch" style={{ background: GOLD }} />
-          Ortalama {average.toFixed(1)}
-        </span>
-      </div>
-    </>
-  );
-}
-
-export interface CurveDatum {
-  timestamp: string;
-  powerKw: number;
-  socPercent?: number;
-}
-
-/**
- * Charge curve: power against time, with SOC on its own 0–100 scale.
- *
- * Two quantities on one plot because the shape of a DC charge is the relationship between
- * them — the taper is only legible next to the percentage that caused it.
- */
-export function ChargeCurveChart({ curve }: { curve: CurveDatum[] }) {
-  if (curve.length < 2) return <p className="empty">Bu seans için eğri kaydı yok</p>;
-  const plot = { ...PLOT, padRight: 26 };
-  const times = curve.map((point) => new Date(point.timestamp).getTime());
-  const start = times[0];
-  const span = Math.max(1, times[times.length - 1] - start);
-  const maxPower = niceMax(Math.max(...curve.map((point) => point.powerKw)));
-
-  const x = (time: number) => plot.padLeft + (innerWidth(plot) * (time - start)) / span;
-  const yPower = (kw: number) => plot.padTop + innerHeight(plot) * (1 - kw / maxPower);
-  const ySoc = (percent: number) => plot.padTop + innerHeight(plot) * (1 - percent / 100);
-
-  const powerPath = curve
-    .map((point, index) => `${index === 0 ? "M" : "L"}${x(times[index]).toFixed(2)} ${yPower(point.powerKw).toFixed(2)}`)
-    .join(" ");
-  const areaPath = `${powerPath} L${x(times[times.length - 1]).toFixed(2)} ${(plot.padTop + innerHeight(plot)).toFixed(2)} L${x(start).toFixed(2)} ${(plot.padTop + innerHeight(plot)).toFixed(2)} Z`;
-
-  const socPoints = curve
-    .map((point, index) => ({ point, index }))
-    .filter((entry) => typeof entry.point.socPercent === "number");
-  const socPath = socPoints
-    .map((entry, order) =>
-      `${order === 0 ? "M" : "L"}${x(times[entry.index]).toFixed(2)} ${ySoc(entry.point.socPercent as number).toFixed(2)}`)
-    .join(" ");
-
-  return (
-    <>
-      <svg className="chart" viewBox={`0 0 ${plot.width} ${plot.height}`} role="img"
-           aria-label="Şarj gücü ve doluluk eğrisi">
-        <Grid plot={plot} max={maxPower} format={(value) => value.toFixed(0)} />
-        <defs>
-          <linearGradient id="powerFill" x1="0" x2="0" y1="0" y2="1">
-            <stop offset="0%" stopColor={GOLD} stopOpacity={0.32} />
-            <stop offset="100%" stopColor={GOLD} stopOpacity={0.02} />
-          </linearGradient>
-        </defs>
-        <path d={areaPath} fill="url(#powerFill)" stroke="none" />
-        <path d={powerPath} fill="none" stroke={GOLD} strokeWidth={2} strokeLinejoin="round" />
-        {socPath && <path d={socPath} fill="none" stroke={CYAN} strokeWidth={1.6} strokeDasharray="5 3" />}
-        <text x={plot.width - plot.padRight + 4} y={plot.padTop + 4} fill={MUTED} fontSize={9}>
-          100%
-        </text>
-        <text x={plot.width - plot.padRight + 4} y={plot.padTop + innerHeight(plot)} fill={MUTED} fontSize={9}>
-          0%
-        </text>
-        <text x={plot.padLeft} y={plot.height - 6} fill={MUTED} fontSize={9}>
-          0 dk
-        </text>
-        <text x={plot.width - plot.padRight} y={plot.height - 6} fill={MUTED} fontSize={9} textAnchor="end">
-          {Math.round(span / 60000)} dk
-        </text>
-      </svg>
-      <div className="legend">
-        <span>
-          <span className="swatch" style={{ background: GOLD }} />
-          Güç (kW)
-        </span>
-        <span>
-          <span className="swatch" style={{ background: CYAN }} />
-          Doluluk (%)
-        </span>
-      </div>
-    </>
-  );
-}
-
-function shortDate(iso: string): string {
-  const [, month, day] = iso.split("-");
-  return `${day}.${month}`;
-}
diff --git a/web/src/components/shell.tsx b/web/src/components/shell.tsx
deleted file mode 100644
index a9320aa..0000000
--- a/web/src/components/shell.tsx
+++ /dev/null
@@ -1,99 +0,0 @@
-import Link from "next/link";
-import type { ReactNode } from "react";
-
-const TABS = [
-  { href: "/", label: "Özet", icon: "◈" },
-  { href: "/consumption", label: "Tüketim", icon: "▤" },
-  { href: "/charging", label: "Şarj", icon: "⚡" },
-] as const;
-
-export type Tab = (typeof TABS)[number]["href"];
-
-/**
- * The phone frame and the bottom tab bar.
- *
- * `active` is passed in rather than read from the pathname so every page stays a server
- * component — the whole dashboard renders without shipping a line of client JavaScript.
- */
-export function Shell({
-  active,
-  title,
-  subtitle,
-  children,
-}: {
-  active: Tab;
-  title: string;
-  subtitle?: string;
-  children: ReactNode;
-}) {
-  return (
-    <>
-      <main className="shell">
-        <header className="header">
-          <div>
-            <h1 className="title">{title}</h1>
-            {subtitle && <p className="subtitle">{subtitle}</p>}
-          </div>
-          {/*
-            A form, not a link. Next prefetches links that are in the viewport, and this
-            one is in every page header — as a GET route it was fetched on render and
-            signed the reader out before they touched it, which looked like the session
-            expiring on every navigation. Nothing with a side effect may answer GET.
-          */}
-          <form action="/logout" method="post">
-            <button className="signout" type="submit">
-              Çıkış
-            </button>
-          </form>
-        </header>
-        {children}
-      </main>
-      <nav className="nav">
-        <div className="nav-inner">
-          {TABS.map((tab) => (
-            <Link key={tab.href} href={tab.href} aria-current={tab.href === active ? "page" : undefined}>
-              <span className="nav-icon" aria-hidden>
-                {tab.icon}
-              </span>
-              {tab.label}
-            </Link>
-          ))}
-        </div>
-      </nav>
-    </>
-  );
-}
-
-export function Tile({
-  label,
-  value,
-  unit,
-  note,
-  tone,
-}: {
-  label: string;
-  value: string;
-  unit?: string;
-  note?: string;
-  tone?: "gold" | "teal";
-}) {
-  return (
-    <div className={`tile${tone ? ` ${tone}` : ""}`}>
-      <p className="tile-label">{label}</p>
-      <p className="tile-value">
-        {value}
-        {unit && <span className="tile-unit">{unit}</span>}
-      </p>
-      {note && <p className="tile-note">{note}</p>}
-    </div>
-  );
-}
-
-export function Row({ label, value }: { label: string; value: string }) {
-  return (
-    <div className="row">
-      <span className="row-key">{label}</span>
-      <span className="row-value">{value}</span>
-    </div>
-  );
-}
diff --git a/web/src/lib/api.ts b/web/src/lib/api.ts
deleted file mode 100644
index 327e63b..0000000
--- a/web/src/lib/api.ts
+++ /dev/null
@@ -1,53 +0,0 @@
-import { NextResponse } from "next/server";
-import { hasIngestToken, hasSession, checkDashboardPassword } from "./auth";
-import { ValidationError } from "./validate";
-
-/** Every endpoint touches MongoDB, which rules out the edge runtime. */
-export const runtime = "nodejs";
-export const dynamic = "force-dynamic";
-
-export function unauthorized(): NextResponse {
-  return NextResponse.json({ error: "unauthorized" }, { status: 401 });
-}
-
-/**
- * Wraps a handler so a validation failure is a 400 and anything else is a 500 whose
- * detail stays in the server log. An error message is allowed to name a bad field; it is
- * never allowed to carry a connection string.
- */
-export async function handle(work: () => Promise<NextResponse>): Promise<NextResponse> {
-  try {
-    return await work();
-  } catch (error) {
-    if (error instanceof ValidationError) {
-      return NextResponse.json({ error: error.message }, { status: 400 });
-    }
-    console.error("Request failed", error);
-    return NextResponse.json({ error: "internal server error" }, { status: 500 });
-  }
-}
-
-export function requireIngest(request: Request): NextResponse | null {
-  return hasIngestToken(request) ? null : unauthorized();
-}
-
-/**
- * Read access: the dashboard's own session cookie, or the dashboard password as a bearer
- * token so a native client can read the same history without a browser.
- */
-export async function requireReader(request: Request): Promise<NextResponse | null> {
-  if (await hasSession()) return null;
-  const header = request.headers.get("authorization") ?? "";
-  if (header.startsWith("Bearer ") && checkDashboardPassword(header.slice(7))) return null;
-  return unauthorized();
-}
-
-export async function parseJson(request: Request): Promise<unknown> {
-  const raw = await request.text();
-  if (raw.length > 512 * 1024) throw new ValidationError("body is too large");
-  try {
-    return JSON.parse(raw);
-  } catch {
-    throw new ValidationError("body is not valid JSON");
-  }
-}
diff --git a/web/src/lib/auth.ts b/web/src/lib/auth.ts
deleted file mode 100644
index c1355b5..0000000
--- a/web/src/lib/auth.ts
+++ /dev/null
@@ -1,20 +0,0 @@
-/**
- * The Next-aware half of authentication. Everything cryptographic lives in
- * {@link ./session}, which imports nothing from Next and is therefore unit-testable
- * without a request, a build, or a running server.
- */
-import { cookies } from "next/headers";
-import { redirect } from "next/navigation";
-import { SESSION_COOKIE, isValidSessionValue } from "./session";
-
-export * from "./session";
-
-export async function hasSession(): Promise<boolean> {
-  const store = await cookies();
-  return isValidSessionValue(store.get(SESSION_COOKIE)?.value);
-}
-
-/** For pages: send an unauthenticated visitor to the password screen. */
-export async function requireSession(): Promise<void> {
-  if (!(await hasSession())) redirect("/login");
-}
diff --git a/web/src/lib/data.ts b/web/src/lib/data.ts
deleted file mode 100644
index b23bf5b..0000000
--- a/web/src/lib/data.ts
+++ /dev/null
@@ -1,86 +0,0 @@
-import { chargingCollection, consumptionCollection, type ChargingSession, type DailyConsumption } from "./mongo";
-
-/**
- * Reads for the dashboard.
- *
- * Every query is scoped to one installation id. There is one car today, but the id is in
- * the schema and in the unique indexes, so scoping now costs nothing and means a second
- * head unit does not silently merge its history into the first one's charts.
- */
-
-export interface Overview {
-  installationId: string | null;
-  installationCount: number;
-  days: DailyConsumption[];
-  sessions: ChargingSession[];
-}
-
-/** The installation that reported most recently — the car in use, if there are ever two. */
-export async function latestInstallationId(): Promise<{ id: string | null; count: number }> {
-  const collection = await consumptionCollection();
-  const ids = await collection.distinct("installationId");
-  if (ids.length === 0) {
-    const charging = await chargingCollection();
-    const chargingIds = await charging.distinct("installationId");
-    return { id: chargingIds[0] ?? null, count: chargingIds.length };
-  }
-  if (ids.length === 1) return { id: ids[0], count: 1 };
-  const newest = await collection.find({}, { projection: { installationId: 1 } })
-    .sort({ date: -1 }).limit(1).next();
-  return { id: newest?.installationId ?? ids[0], count: ids.length };
-}
-
-export async function loadOverview(dayLimit = 60, sessionLimit = 60): Promise<Overview> {
-  const { id, count } = await latestInstallationId();
-  if (!id) return { installationId: null, installationCount: 0, days: [], sessions: [] };
-  const [consumption, charging] = await Promise.all([consumptionCollection(), chargingCollection()]);
-  const [days, sessions] = await Promise.all([
-    consumption.find({ installationId: id }, { projection: { _id: 0 } })
-      .sort({ date: -1 }).limit(dayLimit).toArray(),
-    charging.find({ installationId: id }, { projection: { _id: 0 } })
-      .sort({ startedAt: -1 }).limit(sessionLimit).toArray(),
-  ]);
-  // Charts read left-to-right in time; the queries sort newest-first so the limit keeps
-  // the recent end rather than the beginning of history.
-  return { installationId: id, installationCount: count, days: days.reverse(), sessions };
-}
-
-export interface ChargeTotals {
-  energyKwh: number;
-  gridEnergyKwh: number;
-  cost: number;
-  sessions: number;
-  seconds: number;
-  socGained: number;
-  peakKw: number;
-}
-
-export function sumCharging(sessions: ChargingSession[]): ChargeTotals {
-  return sessions.reduce<ChargeTotals>(
-    (total, session) => ({
-      energyKwh: total.energyKwh + session.energyKwh,
-      gridEnergyKwh: total.gridEnergyKwh + (session.gridEnergyKwh ?? session.energyKwh * 1.1),
-      cost: total.cost + session.totalCost,
-      sessions: total.sessions + 1,
-      seconds: total.seconds + session.durationSeconds,
-      socGained:
-        total.socGained +
-        (session.startSocPercent !== undefined && session.endSocPercent !== undefined
-          ? Math.max(0, session.endSocPercent - session.startSocPercent)
-          : 0),
-      peakKw: Math.max(total.peakKw, ...session.curve.map((point) => point.powerKw), 0),
-    }),
-    { energyKwh: 0, gridEnergyKwh: 0, cost: 0, sessions: 0, seconds: 0, socGained: 0, peakKw: 0 },
-  );
-}
-
-export function sumDays(days: DailyConsumption[]) {
-  return days.reduce(
-    (total, record) => ({
-      km: total.km + record.day.km,
-      kwh: total.kwh + record.day.kwh,
-      hours: total.hours + record.day.hours,
-    }),
-    { km: 0, kwh: 0, hours: 0 },
-  );
-}
diff --git a/web/src/lib/format.ts b/web/src/lib/format.ts
deleted file mode 100644
index 19869fc..0000000
--- a/web/src/lib/format.ts
+++ /dev/null
@@ -1,48 +0,0 @@
-/** Turkish formatting for every user-facing number and date. */
-
-const NUMBER = new Intl.NumberFormat("tr-TR", { maximumFractionDigits: 1 });
-const PRECISE = new Intl.NumberFormat("tr-TR", { minimumFractionDigits: 2, maximumFractionDigits: 2 });
-const CURRENCY = new Intl.NumberFormat("tr-TR", { style: "currency", currency: "TRY", maximumFractionDigits: 2 });
-const DATE = new Intl.DateTimeFormat("tr-TR", { day: "numeric", month: "long", year: "numeric" });
-const DATE_TIME = new Intl.DateTimeFormat("tr-TR", {
-  day: "numeric",
-  month: "short",
-  hour: "2-digit",
-  minute: "2-digit",
-});
-
-export function num(value: number): string {
-  return NUMBER.format(value);
-}
-
-export function precise(value: number): string {
-  return PRECISE.format(value);
-}
-
-export function money(value: number): string {
-  return CURRENCY.format(value);
-}
-
-export function isoDate(iso: string): string {
-  const [year, month, day] = iso.split("-").map(Number);
-  return DATE.format(new Date(Date.UTC(year, month - 1, day)));
-}
-
-export function dateTime(value: Date | string): string {
-  return DATE_TIME.format(new Date(value));
-}
-
-/** `2 sa 05 dk` — the same shape the car's charging pane uses. */
-export function duration(seconds: number): string {
-  const total = Math.max(0, Math.round(seconds));
-  const hours = Math.floor(total / 3600);
-  const minutes = Math.floor((total % 3600) / 60);
-  if (hours === 0) return `${minutes} dk`;
-  return `${hours} sa ${String(minutes).padStart(2, "0")} dk`;
-}
-
-/** Energy per 100 km, or a dash — never a ratio computed from a distance of nothing. */
-export function efficiency(kwh: number, km: number): string {
-  if (km < 1) return "—";
-  return `${num((kwh * 100) / km)} kWh/100 km`;
-}
diff --git a/web/src/lib/mongo.ts b/web/src/lib/mongo.ts
deleted file mode 100644
index 508dcc6..0000000
--- a/web/src/lib/mongo.ts
+++ /dev/null
@@ -1,100 +0,0 @@
-import { MongoClient, type Collection, type Db } from "mongodb";
-
-/**
- * One MongoClient per warm lambda, cached on globalThis.
- *
- * A serverless function is re-entered far more often than it is cold-started, and a fresh
- * MongoClient per request opens a fresh pool per request — Atlas starts refusing
- * connections long before the traffic justifies it. The global survives module reloads in
- * dev, where Next re-evaluates modules on every edit.
- */
-const globalForMongo = globalThis as unknown as { mongoClient?: Promise<MongoClient> };
-
-export interface Totals {
-  km: number;
-  kwh: number;
-  hours: number;
-  socDrop: number;
-}
-
-export interface DailyConsumption {
-  installationId: string;
-  date: string;
-  recordedAt: Date;
-  day: Totals;
-  /** Optional — the backend derives lifetime as the sum of all days' totals. */
-  lifetime?: Totals;
-  sohPercent?: number;
-  createdAt: Date;
-  updatedAt: Date;
-}
-
-export interface CurvePoint {
-  timestamp: Date;
-  powerKw: number;
-  socPercent?: number;
-}
-
-export interface ChargingSession {
-  installationId: string;
-  sessionId: string;
-  startedAt: Date;
-  endedAt: Date;
-  durationSeconds: number;
-  energyKwh: number;
-  chargingLossPercent: number;
-  gridEnergyKwh: number;
-  pricePerKwh: number;
-  totalCost: number;
-  isDemo?: boolean;
-  startSocPercent?: number;
-  endSocPercent?: number;
-  curve: CurvePoint[];
-  createdAt: Date;
-  updatedAt: Date;
-}
-
-function clientPromise(): Promise<MongoClient> {
-  const uri = process.env.MONGODB_URI;
-  if (!uri) throw new Error("MONGODB_URI is not configured");
-  if (!globalForMongo.mongoClient) {
-    globalForMongo.mongoClient = new MongoClient(uri, {
-      serverSelectionTimeoutMS: 10_000,
-      maxPoolSize: 10,
-    }).connect();
-  }
-  return globalForMongo.mongoClient;
-}
-
-async function db(): Promise<Db> {
-  const client = await clientPromise();
-  return client.db(process.env.MONGODB_DATABASE || "fatihsmg4");
-}
-
-export async function consumptionCollection(): Promise<Collection<DailyConsumption>> {
-  return (await db()).collection<DailyConsumption>("daily_consumption");
-}
-
-export async function chargingCollection(): Promise<Collection<ChargingSession>> {
-  return (await db()).collection<ChargingSession>("charging_sessions");
-}
-
-/**
- * Creates the indexes the Express service used to create at boot.
- *
- * There is no boot here — a lambda starts on a request — so this runs on the first write
- * of each warm instance and is skipped afterwards. `createIndex` is idempotent, but it is
- * still a round trip, and the uniqueness constraints are what make the upserts safe.
- */
-let indexesEnsured = false;
-export async function ensureIndexes(): Promise<void> {
-  if (indexesEnsured) return;
-  const [consumption, charging] = await Promise.all([consumptionCollection(), chargingCollection()]);
-  await Promise.all([
-    consumption.createIndex({ installationId: 1, date: 1 }, { unique: true }),
-    consumption.createIndex({ installationId: 1, date: -1 }),
-    charging.createIndex({ installationId: 1, sessionId: 1 }, { unique: true }),
-    charging.createIndex({ installationId: 1, startedAt: -1 }),
-  ]);
-  indexesEnsured = true;
-}
diff --git a/web/src/lib/session.ts b/web/src/lib/session.ts
deleted file mode 100644
index db335e2..0000000
--- a/web/src/lib/session.ts
+++ /dev/null
@@ -1,80 +0,0 @@
-import crypto from "node:crypto";
-
-/**
- * Two separate credentials, deliberately.
- *
- * The car holds {@link INGEST_TOKEN} and can only write. It is baked into a build that
- * lives on a head unit and is published as an APK, so it must be assumed extractable —
- * and an extracted write token buys nothing but the ability to post junk under an
- * installation id the attacker would have to guess.
- *
- * Reading the history needs the dashboard password, which never leaves the browser's
- * cookie jar and is never compiled into anything.
- */
-export const SESSION_COOKIE = "fatihsmg4_session";
-const SESSION_TTL_SECONDS = 60 * 60 * 24 * 30;
-
-/** Constant-time compare that does not leak length through an early return. */
-function sameSecret(supplied: string, expected: string): boolean {
-  const a = crypto.createHash("sha256").update(supplied).digest();
-  const b = crypto.createHash("sha256").update(expected).digest();
-  return crypto.timingSafeEqual(a, b);
-}
-
-function requireEnv(name: string): string {
-  const value = process.env[name];
-  if (!value) throw new Error(`${name} is not configured`);
-  return value;
-}
-
-/** Does this request carry the car's write token? */
-export function hasIngestToken(request: Request): boolean {
-  const expected = process.env.INGEST_TOKEN;
-  if (!expected || expected.length < 24) return false;
-  const header = request.headers.get("authorization") ?? "";
-  if (!header.startsWith("Bearer ")) return false;
-  return sameSecret(header.slice(7), expected);
-}
-
-export function checkDashboardPassword(supplied: string): boolean {
-  const expected = process.env.DASHBOARD_PASSWORD;
-  if (!expected || expected.length < 8) return false;
-  return sameSecret(supplied, expected);
-}
-
-/**
- * `<expiry>.<hmac>` — no server-side session store, which a serverless deployment has
- * nowhere to keep anyway. The expiry is inside the signed payload, so a browser that
- * keeps the cookie past its date cannot use it.
- */
-export function issueSessionValue(): string {
-  const expiresAt = Math.floor(Date.now() / 1000) + SESSION_TTL_SECONDS;
-  return `${expiresAt}.${sign(String(expiresAt))}`;
-}
-
-function sign(payload: string): string {
-  return crypto.createHmac("sha256", requireEnv("SESSION_SECRET")).update(payload).digest("hex");
-}
-
-export function isValidSessionValue(value: string | undefined): boolean {
-  if (!value) return false;
-  const separator = value.lastIndexOf(".");
-  if (separator <= 0) return false;
-  const expiresAt = Number(value.slice(0, separator));
-  if (!Number.isSafeInteger(expiresAt) || expiresAt * 1000 < Date.now()) return false;
-  try {
-    const expected = Buffer.from(sign(String(expiresAt)), "hex");
-    const supplied = Buffer.from(value.slice(separator + 1), "hex");
-    return expected.length === supplied.length && crypto.timingSafeEqual(expected, supplied);
-  } catch {
-    return false;
-  }
-}
-
-export const sessionCookieOptions = {
-  httpOnly: true,
-  secure: process.env.NODE_ENV === "production",
-  sameSite: "lax",
-  path: "/",
-  maxAge: SESSION_TTL_SECONDS,
-} as const;
diff --git a/web/src/lib/validate.ts b/web/src/lib/validate.ts
deleted file mode 100644
index 1184fc0..0000000
--- a/web/src/lib/validate.ts
+++ /dev/null
@@ -1,116 +0,0 @@
-/**
- * Request validation for the ingest endpoints — a direct port of the Express service's
- * rules, kept pure so it can be unit-tested without a database or a request.
- *
- * The car is the only writer and it is trusted, but a bad field here is written once and
- * read forever. Every number is bounded; an out-of-range value is rejected rather than
- * stored and quietly plotted.
- */
-import type { ChargingSession, CurvePoint, DailyConsumption, Totals } from "./mongo";
-
-export class ValidationError extends Error {}
-
-const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
-const ISO_DATE = /^\d{4}-\d{2}-\d{2}$/;
-
-export type ConsumptionInput = Omit<DailyConsumption, "createdAt" | "updatedAt">;
-export type ChargingInput = Omit<ChargingSession, "createdAt" | "updatedAt">;
-
-export function validateConsumption(body: unknown): ConsumptionInput {
-  const record = asObject(body);
-  const date = record.date;
-  if (typeof date !== "string" || !ISO_DATE.test(date)) throw new ValidationError("date is invalid");
-  const sohPercent = record.sohPercent;
-  const lifetime = record.lifetime;
-  return {
-    installationId: validateUuid(record.installationId, "installationId"),
-    date,
-    recordedAt: validateDate(record.recordedAt, "recordedAt"),
-    day: validateTotals(record.day, "day"),
-    // Lifetime is optional — the backend derives it from day totals, and the app no longer
-    // sends it. Legacy documents may still carry one; new chunks do not.
-    ...(lifetime === undefined ? {} : { lifetime: validateTotals(lifetime, "lifetime") }),
-    ...(sohPercent === undefined ? {} : { sohPercent: bounded(sohPercent, 0, 100, "sohPercent") }),
-  };
-}
-
-export function validateChargingSession(body: unknown, pathSessionId: string): ChargingInput {
-  const record = asObject(body);
-  const sessionId = validateUuid(record.sessionId, "sessionId");
-  if (sessionId !== pathSessionId) throw new ValidationError("sessionId does not match path");
-  if (!Array.isArray(record.curve) || record.curve.length > 720) {
-    throw new ValidationError("curve is invalid");
-  }
-  const curve: CurvePoint[] = record.curve.map((entry) => {
-    const point = asObject(entry);
-    const socPercent = point.socPercent;
-    return {
-      timestamp: validateDate(point.timestampMs, "curve.timestampMs"),
-      powerKw: bounded(point.powerKw, 0, 1000, "curve.powerKw"),
-      ...(socPercent === undefined ? {} : { socPercent: bounded(socPercent, 0, 100, "curve.socPercent") }),
-    };
-  });
-  const startSocPercent = record.startSocPercent;
-  const endSocPercent = record.endSocPercent;
-  const isDemo = record.isDemo;
-  const energyKwh = bounded(record.energyKwh, 0, 1000, "energyKwh");
-  const pricePerKwh = bounded(record.pricePerKwh, 0, 1_000_000, "pricePerKwh");
-  const chargingLossPercent = 10;
-  const gridEnergyKwh = energyKwh * 1.1;
-  return {
-    installationId: validateUuid(record.installationId, "installationId"),
-    sessionId,
-    startedAt: validateDate(record.startedAt, "startedAt"),
-    endedAt: validateDate(record.endedAt, "endedAt"),
-    durationSeconds: bounded(record.durationSeconds, 0, 604800, "durationSeconds"),
-    energyKwh,
-    chargingLossPercent,
-    gridEnergyKwh,
-    pricePerKwh,
-    totalCost: gridEnergyKwh * pricePerKwh,
-    ...(isDemo === true ? { isDemo: true } : {}),
-    ...(startSocPercent === undefined ? {} : { startSocPercent: bounded(startSocPercent, 0, 100, "startSocPercent") }),
-    ...(endSocPercent === undefined ? {} : { endSocPercent: bounded(endSocPercent, 0, 100, "endSocPercent") }),
-    curve,
-  };
-}
-
-export function validateUuid(value: unknown, name: string): string {
-  if (typeof value !== "string" || !UUID.test(value)) throw new ValidationError(`${name} is invalid`);
-  return value;
-}
-
-function asObject(value: unknown): Record<string, unknown> {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    throw new ValidationError("body is required");
-  }
-  return value as Record<string, unknown>;
-}
-
-/** Epoch milliseconds on the wire; a Date in the database. */
-function validateDate(value: unknown, name: string): Date {
-  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) {
-    throw new ValidationError(`${name} is invalid`);
-  }
-  return new Date(value);
-}
-
-function bounded(value: unknown, min: number, max: number, name: string): number {
-  if (typeof value !== "number" || !Number.isFinite(value) || value < min || value > max) {
-    throw new ValidationError(`${name} is invalid`);
-  }
-  return value;
-}
-
-function validateTotals(value: unknown, name: string): Totals {
-  const record = asObject(value);
-  const result = {} as Totals;
-  for (const field of ["km", "kwh", "hours", "socDrop"] as const) {
-    const number = record[field];
-    if (typeof number !== "number" || !Number.isFinite(number) || Math.abs(number) > 10_000_000) {
-      throw new ValidationError(`${name}.${field} is invalid`);
-    }
-    result[field] = number;
-  }
-  return result;
-}
diff --git a/web/test/session.test.ts b/web/test/session.test.ts
deleted file mode 100644
index 6d14b6f..0000000
--- a/web/test/session.test.ts
+++ /dev/null
@@ -1,44 +0,0 @@
-import assert from "node:assert/strict";
-import { test } from "node:test";
-
-process.env.SESSION_SECRET = "0123456789abcdef0123456789abcdef";
-process.env.DASHBOARD_PASSWORD = "correct-horse-battery";
-process.env.INGEST_TOKEN = "a".repeat(64);
-
-const { checkDashboardPassword, hasIngestToken, isValidSessionValue, issueSessionValue } =
-  await import("../src/lib/session.ts");
-
-test("a freshly issued session validates and a tampered one does not", () => {
-  const value = issueSessionValue();
-  assert.equal(isValidSessionValue(value), true);
-  const [expiry, signature] = value.split(".");
-  // Moving the expiry out invalidates the signature, so a cookie cannot extend itself.
-  assert.equal(isValidSessionValue(`${Number(expiry) + 86_400}.${signature}`), false);
-  assert.equal(isValidSessionValue(`${expiry}.${"0".repeat(signature.length)}`), false);
-  assert.equal(isValidSessionValue(undefined), false);
-  assert.equal(isValidSessionValue("garbage"), false);
-});
-
-test("an expired session is refused even with a valid signature", async () => {
-  const past = Math.floor(Date.now() / 1000) - 10;
-  // Signed by the same secret, so only the embedded expiry rejects it.
-  const crypto = await import("node:crypto");
-  const signature = crypto.createHmac("sha256", process.env.SESSION_SECRET as string)
-    .update(String(past)).digest("hex");
-  assert.equal(isValidSessionValue(`${past}.${signature}`), false);
-});
-
-test("the dashboard password is exact", () => {
-  assert.equal(checkDashboardPassword("correct-horse-battery"), true);
-  assert.equal(checkDashboardPassword("correct-horse-batter"), false);
-  assert.equal(checkDashboardPassword(""), false);
-});
-
-test("the ingest token is only accepted as a bearer header", () => {
-  const token = "a".repeat(64);
-  const bearer = (value: string) => new Request("https://x/v1", { headers: { authorization: value } });
-  assert.equal(hasIngestToken(bearer(`Bearer ${token}`)), true);
-  assert.equal(hasIngestToken(bearer(token)), false);
-  assert.equal(hasIngestToken(bearer(`Bearer ${"b".repeat(64)}`)), false);
-  assert.equal(hasIngestToken(new Request("https://x/v1")), false);
-});
diff --git a/web/test/validate.test.ts b/web/test/validate.test.ts
deleted file mode 100644
index eeef907..0000000
--- a/web/test/validate.test.ts
+++ /dev/null
@@ -1,99 +0,0 @@
-import assert from "node:assert/strict";
-import { test } from "node:test";
-import { ValidationError, validateChargingSession, validateConsumption } from "../src/lib/validate.ts";
-
-const INSTALLATION = "6f1a2b3c-4d5e-4f60-8a9b-0c1d2e3f4a5b";
-const SESSION = "11111111-2222-4333-8444-555555555555";
-
-const day = { km: 42.5, kwh: 7.25, hours: 0.9, socDrop: 11.5 };
-
-test("accepts a well-formed daily record", () => {
-  const record = validateConsumption({
-    installationId: INSTALLATION,
-    date: "2026-10-07",
-    recordedAt: 1_760_000_000_000,
-    day,
-    lifetime: { km: 12000, kwh: 2100, hours: 240, socDrop: 3400 },
-    sohPercent: 97.5,
-  });
-  assert.equal(record.date, "2026-10-07");
-  assert.equal(record.day.kwh, 7.25);
-  assert.ok(record.recordedAt instanceof Date);
-});
-
-test("a missing SOH is omitted rather than defaulted", () => {
-  // The car omits a field it could not read. Writing 0 here would be a battery at
-  // nothing, which is the same class of lie the telemetry side refuses to send.
-  const record = validateConsumption({
-    installationId: INSTALLATION,
-    date: "2026-10-07",
-    recordedAt: 1,
-    day,
-    lifetime: day,
-  });
-  assert.equal("sohPercent" in record, false);
-});
-
-test("rejects malformed identifiers, dates and out-of-range numbers", () => {
-  const base = { installationId: INSTALLATION, date: "2026-10-07", recordedAt: 1, day, lifetime: day };
-  assert.throws(() => validateConsumption({ ...base, installationId: "nope" }), ValidationError);
-  assert.throws(() => validateConsumption({ ...base, date: "07.10.2026" }), ValidationError);
-  assert.throws(() => validateConsumption({ ...base, sohPercent: 140 }), ValidationError);
-  assert.throws(() => validateConsumption({ ...base, day: { ...day, kwh: "7" } }), ValidationError);
-  assert.throws(() => validateConsumption({ ...base, recordedAt: -1 }), ValidationError);
-  assert.throws(() => validateConsumption(null), ValidationError);
-});
-
-test("a charging session must match the id in its path", () => {
-  const body = {
-    installationId: INSTALLATION,
-    sessionId: SESSION,
-    startedAt: 1_760_000_000_000,
-    endedAt: 1_760_002_000_000,
-    durationSeconds: 1800,
-    energyKwh: 31.4,
-    chargingLossPercent: 10,
-    gridEnergyKwh: 34.54,
-    pricePerKwh: 7.5,
-    totalCost: 235.5,
-    isDemo: true,
-    startSocPercent: 18,
-    endSocPercent: 72,
-    curve: [{ timestampMs: 1_760_000_060_000, powerKw: 84.2, socPercent: 20 }],
-  };
-  const record = validateChargingSession(body, SESSION);
-  assert.equal(record.curve.length, 1);
-  assert.equal(record.curve[0].powerKw, 84.2);
-  assert.equal(record.chargingLossPercent, 10);
-  assert.equal(record.gridEnergyKwh, 34.54);
-  assert.equal(record.totalCost, 259.05);
-  assert.equal(record.isDemo, true);
-  assert.throws(() => validateChargingSession(body, "11111111-2222-4333-8444-555555555556"), ValidationError);
-});
-
-test("refuses a curve longer than the car can produce", () => {
-  const curve = Array.from({ length: 721 }, (_unused, index) => ({
-    timestampMs: 1_760_000_000_000 + index * 60_000,
-    powerKw: 50,
-  }));
-  assert.throws(
-    () =>
-      validateChargingSession(
-        {
-          installationId: INSTALLATION,
-          sessionId: SESSION,
-          startedAt: 1,
-          endedAt: 2,
-          durationSeconds: 1,
-          energyKwh: 1,
-          chargingLossPercent: 10,
-          gridEnergyKwh: 1.1,
-          pricePerKwh: 1,
-          totalCost: 1,
-          curve,
-        },
-        SESSION,
-      ),
-    ValidationError,
-  );
-});
diff --git a/web/tsconfig.json b/web/tsconfig.json
deleted file mode 100644
index 90069c0..0000000
--- a/web/tsconfig.json
+++ /dev/null
@@ -1,21 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "lib": ["dom", "dom.iterable", "ES2022"],
-    "allowJs": false,
-    "skipLibCheck": true,
-    "strict": true,
-    "noEmit": true,
-    "esModuleInterop": true,
-    "module": "esnext",
-    "moduleResolution": "bundler",
-    "resolveJsonModule": true,
-    "isolatedModules": true,
-    "jsx": "preserve",
-    "incremental": true,
-    "plugins": [{ "name": "next" }],
-    "paths": { "@/*": ["./src/*"] }
-  },
-  "include": ["next-env.d.ts", "**/*.ts", "**/*.tsx", ".next/types/**/*.ts"],
-  "exclude": ["node_modules"]
-}