I'm trying to do the same thing but have pretty limited experience with this sort of thing. Would anyone be willing to guide me in the right direction on how to achieve this? I am a coder, but mostly on the web side.
You'll need console access, which requires opening the device and potentially soldering on to the board.
You'll need to set up a build environment and be capable of building openwrt from source.
You'll need to use tftp to load the first image(initramfs-kernel) to the device in order to boot it and write the final image(squashfs-sysupgrade).
For the console, There are plenty of how-tos on the general parts of that. Specifics for this particular device: the console 'pads' are below the large top heat-sink, near the ethernet port. Remove the top heat sink for access. I've gotten away with just using pressure to hold a pin header in place long enough to load the images, but depending on your equipment you may need to solder something.
Running it without the heatsink doesn't seem to bother it, I kept an eye on the temperature during the load and flash operations and it never got even warm enough to be uncomfortable to touch.
Once you have your build environment setup, drop this patch file into openwrt/target/linux/generic/pending-5.15/ and build.
You'll need to interrupt the boot sequence via the console, and tftp boot if from the initramfs-kernel.bin file first, then use sysupgrade from there to write the squashfs-sysupgrade.bin file
Okay so I understood about 50% of what you said here, but I believe I'm capable of doing it with some hand holding. I have plenty of soldering experience and actually successfully soldered a control board onto a nintendo game & watch handheld, but I'm going to need a lot of help with this. Are you available over zoom for a short chat? I can also pay you for your time, if need be.
What device am I using to interface with the unit?
Here is how my test model is connected. I notched the heat sink so I could replace it and still access the ports. I've ordered a 3.5mm audio jack to install for permanent access without removing the cover.
FWIW I was able to get this to flash the -factory bin and it almost worked, except the factory UI tried to retain settings and overwrote a few files that stopped it from booting.
I don't know much about the system but there may be a way to modify the first-boot actions to fix and allow this to be flashed via ui instead of having to do the console lthing.
You'll need some sort of terminal progam. Windows I typically use putty. the serial port settings are 115200/n/8/1. the n/8/1 is always the default, but putty usually defaults to 9600 for the speed.
btw all of this is pretty universal to AP hardware, nothing specific to the wavlink here except just the exact physical location of the connections on the board.
linux...just use screen or minicom.
screen /dev/ttyUSB0 115200
Something strange... if I have the TTL connected when I power the unit with PoE, the blue light does NOT come on. If I power it with PoE and THEN connect the 3 TTL wires, the blue stays on.
In neither circumstance do I get anything on my terminal when I connect. Any ideas what I'm doing wrong?