@typecad/framework-zephyr 1.0.0-alpha.16 → 1.0.0-alpha.18

package/dist/doctor.js

@@ -1,7 +1,7 @@
 // ---------------------------------------------------------------------------
 // @typecad/framework-zephyr — Zephyr environment doctor
 //
-// `cuttlefish doctor` (Zephyr framework) — verify west (the Zephyr build tool)
+// `typecad-hal doctor` (Zephyr framework) — verify west (the Zephyr build tool)
 // is installed + responsive, the Zephyr RTOS is inside the framework's declared
 // compat range, and the configured board target exists in the checkout. Exits 0
 // if the environment is OK, non-zero otherwise. Follows the same contract
@@ -11,7 +11,7 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import * as ui from '@typecad/cuttlefish/utils/ui';
-import { loadCuttlefishConfig } from '@typecad/cuttlefish/config-loader';
+import { loadTypecadConfig } from '@typecad/cuttlefish/config-loader';
 import { checkZephyrEnv } from './toolchain/env-check.js';
 import { PINNED_ZEPHYR_MANIFEST_REV, PINNED_ZEPHYR_SDK_VERSION, sdkFingerprint } from '@typecad/cuttlefish/board-catalog';
 import { resolveChipFromBoard } from './chips/resolve.js';
@@ -23,7 +23,7 @@ import { resolveChipFromBoard } from './chips/resolve.js';
 export function runDoctor() {
     ui.printHeader();
     ui.printStep('Checking Zephyr environment...');
-    const config = loadCuttlefishConfig(process.cwd());
+    const config = loadTypecadConfig(process.cwd());
     const buildTarget = config?.buildTarget;
     const result = checkZephyrEnv(buildTarget);
     const c = result.check;
@@ -69,7 +69,7 @@ export function runDoctor() {
         }
     }
     else {
-        ui.printInfo('(no buildTarget in cuttlefish.config.ts — skipping board check)');
+        ui.printInfo('(no buildTarget in typecad-hal.config.ts — skipping board check)');
     }
     // Probe methods — from the board package's table, via the board constants
     // the transpile persists (candidates cover the standard out-dir layouts).

package/dist/dt-config/custom-board.js

@@ -69,7 +69,7 @@ export function generateCustomBoard(projectRoot, chip, rawName) {
             '# package (or add a board package) instead of this file.',
             'board:',
             `  name: ${name}`,
-            `  full_name: Cuttlefish custom board (${chip.soc})`,
+            `  full_name: TypeCAD custom board (${chip.soc})`,
             `  vendor: ${CUSTOM_BOARD_VENDOR}`,
             '  socs:',
             `    - name: ${soc}`,
@@ -95,7 +95,7 @@ export function generateCustomBoard(projectRoot, chip, rawName) {
         ...cb.dtsIncludes.map((inc) => `#include <${inc}>`),
         '',
         '/ {',
-        `	model = "Cuttlefish custom board (${chip.soc})";`,
+        `	model = "TypeCAD custom board (${chip.soc})";`,
         `	compatible = "${CUSTOM_BOARD_VENDOR},${name.replace(/_/g, '-')}";`,
         '',
         '	chosen {',

package/dist/dt-config/kconfig.js

@@ -246,12 +246,16 @@ export function resolveKconfigFragments(usage, debug) {
         // pinned-CA handshake fails with EPERM at connect (the insecure path
         // skips verification, so it works either way).
         m.set('CONFIG_MBEDTLS_X509_CRT_PARSE_C', 'y');
-        // KNOWN LIMITATION on this Zephyr tree: pinned-CA (verified TLS) fails at
-        // connect — the tf-psa-crypto mbedTLS needs a wider symbol matrix
-        // (RSA public-key parse + PEM/DER glue) than the single-ciphersuite
-        // select pulls in, and forcing the extra symbols regresses the insecure
-        // path. insecure() HTTPS is fully verified; caCert() chain verification
-        // stays open until the upstream matrix is mapped.
+        // KNOWN LIMITATION on this Zephyr tree: pinned-CA (verified TLS) was
+        // observed failing at connect with EPERM — the tf-psa-crypto mbedTLS
+        // needs a wider symbol matrix (RSA public-key parse + PEM/DER glue)
+        // than the single-ciphersuite select pulls in, and forcing the extra
+        // symbols regressed the insecure path (two hardware cycles proved it
+        // upstream). CAVEAT: that diagnosis predates the 2026-09 fix of the
+        // request-fact reset ordering (every option — including caCert — was
+        // being wiped before each send, which alone reproduces connect
+        // failures); the matrix limitation needs a hardware re-run to confirm
+        // it still applies. insecure() HTTPS and no-CA https are unaffected.
         // Handshake/protocol buffers allocate from the mbedTLS heap; MBEDTLS_HEAP_SIZE
         // must hold ~2x MBEDTLS_SSL_MAX_CONTENT_LEN plus working state. 65000 fits on
         // the ESP32; mbedTLS requires the full libc and PEM (not DER) cert format.
@@ -306,12 +310,14 @@ export function resolveKconfigFragments(usage, debug) {
         // pinned-CA handshake fails with EPERM at connect (the insecure path
         // skips verification, so it works either way).
         m.set('CONFIG_MBEDTLS_X509_CRT_PARSE_C', 'y');
-        // KNOWN LIMITATION on this Zephyr tree: pinned-CA (verified TLS) fails at
-        // connect — the tf-psa-crypto mbedTLS needs a wider symbol matrix
-        // (RSA public-key parse + PEM/DER glue) than the single-ciphersuite
-        // select pulls in, and forcing the extra symbols regresses the insecure
-        // path. insecure() HTTPS is fully verified; caCert() chain verification
-        // stays open until the upstream matrix is mapped.
+        // KNOWN LIMITATION on this Zephyr tree: pinned-CA (verified TLS) was
+        // observed failing at connect with EPERM — the tf-psa-crypto mbedTLS
+        // needs a wider symbol matrix (RSA public-key parse + PEM/DER glue)
+        // than the single-ciphersuite select pulls in. CAVEAT: that diagnosis
+        // was made on the HTTPS path and predates the 2026-09 request-fact
+        // reset-ordering fix (options were wiped before every send, which
+        // alone reproduces connect failures); it is shared here because mqtts
+        // pins its CA through the same matrix — re-verify on hardware.
         m.set('CONFIG_MBEDTLS_ENABLE_HEAP', 'y');
         // 2x SSL_MAX_CONTENT_LEN record buffers + CA-chain parse state +
         // handshake working memory. 65000 fit insecure-mode handshakes but the

package/dist/dt-config/overlay.d.ts

@@ -5,7 +5,7 @@ import type { KconfigUsage } from './kconfig.js';
  * Generate the overlay source for a board + usage. Returns the overlay text
  * (caller writes it to app/boards/<board>.overlay via writeIfChanged).
  */
-/** Display wiring from cuttlefish.config.ts (cs/dc/rst/spiFrequency/spiPins). */
+/** Display wiring from typecad-hal.config.ts (cs/dc/rst/spiFrequency/spiPins). */
 export interface DisplayWiring {
     cs?: number;
     dc?: number;
@@ -28,7 +28,7 @@ export interface DisplayWiring {
      *  backlight init is guarded by `DT_HAS_ALIAS` and compiles away. */
     backlightPin?: number;
 }
-/** Touch wiring from cuttlefish.config.ts (irq/resetPin/sda/scl; cs for SPI
+/** Touch wiring from typecad-hal.config.ts (irq/resetPin/sda/scl; cs for SPI
  *  resistive controllers, calibration for the XPT2046 DT binding). */
 export interface TouchWiring {
     /** Touch controller kind — selects the DT node shape (FT6336U node on I2C0

package/dist/dt-config/overlay.js

@@ -24,11 +24,11 @@ export function generateOverlay(chip, usage, display, wiring, touch, diagnostics
     if (touch && touch.controller !== 'xpt2046' && (touch.sda === undefined || touch.scl === undefined)) {
         diagnostics.push({
             severity: "warning",
-            message: `touch: I2C controller '${touch.controller}' has no sda/scl pins in cuttlefish.config.ts — the overlay enables the bus without a pin assignment, so the controller may never answer. Add touch.sda and touch.scl (the board's default I2C pins are rarely the wired ones).`,
+            message: `touch: I2C controller '${touch.controller}' has no sda/scl pins in typecad-hal.config.ts — the overlay enables the bus without a pin assignment, so the controller may never answer. Add touch.sda and touch.scl (the board's default I2C pins are rarely the wired ones).`,
         });
     }
     const lines = [
-        '/* Auto-generated by @typecad/framework-zephyr from cuttlefish.config.ts. */',
+        '/* Auto-generated by @typecad/framework-zephyr from typecad-hal.config.ts. */',
         '/* Enables peripherals the program uses. West merges this over the board DT. */',
         '',
     ];

package/dist/framework.manifest.d.ts

@@ -9,7 +9,7 @@ declare const _default: {
     entrypoint: {
         entrypointFunctionName: string;
         requiresLoopFunction: boolean;
-        sourceExtension: "cpp" | "h" | "ino" | "cc";
+        sourceExtension: "cpp" | "ino" | "cc" | "h";
         generateHeaderFile: boolean;
         overrideBaseName?: string | undefined;
         outputSubdirectory?: string | undefined;
@@ -22,7 +22,7 @@ declare const _default: {
     };
     hal: Record<string, {
         supported: boolean;
-        ops: Record<string, "stub" | "polyfill" | "supported" | "unsupported" | "probe-inconclusive">;
+        ops: Record<string, "stub" | "polyfill" | "unsupported" | "supported" | "probe-inconclusive">;
         partialCoverage: boolean;
         unsupportedReason?: string | undefined;
     }>;
@@ -50,7 +50,7 @@ declare const _default: {
     };
     typeEmission: {
         normalizeCppType: boolean;
-        mathHeader: "<cmath>" | "none" | "<math.h>" | "<Arduino.h>";
+        mathHeader: "none" | "<cmath>" | "<math.h>" | "<Arduino.h>";
         needsStdString: boolean;
         needsStdVector: boolean;
         needsIostream: boolean;

package/dist/framework.manifest.js

@@ -359,14 +359,17 @@ export default defineFrameworkManifest({
             supported: true,
             partialCoverage: false,
             // MQTT 3.1.1 client over Zephyr <zephyr/net/mqtt.h> (mqtts:// TLS via
-            // MQTT_TRANSPORT_SECURE + the shared mbedTLS matrix, encryption only — the
-            // HAL surface has no CA-pinning op, so peer verify is NONE). The __tc_mqtt
-            // shim resolves the broker, runs the mqtt_input/mqtt_live poll loop on a
-            // background k_thread, and dispatches incoming PUBLISHes to the user's
+            // MQTT_TRANSPORT_SECURE + the shared mbedTLS matrix). caCert pins the
+            // broker's CA (DER-decoded at emit, tls_credential_add sec tag,
+            // TLS_PEER_VERIFY_REQUIRED); mqtts:// without a CA stays
+            // encrypted-but-unverified (TLS_PEER_VERIFY_NONE). The __tc_mqtt
+            // shim resolves the broker, runs the mqtt_input/mqtt_live poll loop on
+            // a background k_thread, and dispatches incoming PUBLISHes to the user's
             // onMessage callback. Requires a networked target (ESP32 WiFi);
             // profileDiagnostics flags usage on a radioless chip.
             ops: {
-                'mqtt.connect': 'supported', 'mqtt.on_message': 'supported',
+                'mqtt.connect': 'supported', 'mqtt.set_ca_cert': 'supported',
+                'mqtt.on_message': 'supported',
                 'mqtt.subscribe': 'supported', 'mqtt.publish': 'supported',
                 'mqtt.connected': 'supported', 'mqtt.disconnect': 'supported',
             },
@@ -502,10 +505,10 @@ export default defineFrameworkManifest({
     compat: {
         zephyr: '>=4.3 <5.0',
     },
-    // `cuttlefish doctor` prints the detected Zephyr version + compat result and
+    // `typecad-hal doctor` prints the detected Zephyr version + compat result and
     // previews how the configured board target resolves for that version.
     doctor: { available: true },
-    // `cuttlefish licenses` enumerates the Zephyr kernel + west manifest projects
+    // `typecad-hal licenses` enumerates the Zephyr kernel + west manifest projects
     // and resolves each one's SPDX license (mirrors framework-arduino).
     licenses: { available: true },
 });

package/dist/index.js

@@ -1,7 +1,7 @@
 // ---------------------------------------------------------------------------
 // @typecad/framework-zephyr — public exports
 //
-// The cuttlefish loader (framework-package.ts) requires a `FrameworkStrategy`
+// The typecad-hal loader (framework-package.ts) requires a `FrameworkStrategy`
 // export (the PlatformStrategy class it instantiates) and an optional
 // `Toolchain`. This package aliases ZephyrStrategy → FrameworkStrategy.
 // ---------------------------------------------------------------------------
@@ -9,17 +9,17 @@ export { ZephyrStrategy as FrameworkStrategy } from './strategy.js';
 export { ZephyrStrategy } from './strategy.js';
 export { Toolchain } from './toolchain/index.js';
 export { bossacTouchReset } from './toolchain/bossac-touch.js';
-// Create-time starter debug artifacts. The `cuttlefish create` flow reads this
+// Create-time starter debug artifacts. The `typecad-hal create` flow reads this
 // optional named export off the loaded framework module (same loader pattern
 // as doctor/licenses) and calls it for freshly scaffolded projects, so F5 in
 // VS Code works before the first build. No-ops for non-GDB targets.
 export { writeProjectDebugArtifacts } from './toolchain/debug-config.js';
-// `cuttlefish doctor` — verify the installed Zephyr is reachable + inside the
+// `typecad-hal doctor` — verify the installed Zephyr is reachable + inside the
 // declared compat range, and preview board-target normalization. Re-exported
 // under the dispatcher-facing alias `doctor` so the loader picks it up as
 // mod.doctor (see framework-package.ts).
 export { runDoctor as doctor } from './doctor.js';
-// `cuttlefish licenses` — enumerate the Zephyr kernel + west manifest projects
+// `typecad-hal licenses` — enumerate the Zephyr kernel + west manifest projects
 // and resolve each one's SPDX license. Re-exported under the dispatcher-facing
 // alias `licenses` so the loader picks it up as mod.licenses (see
 // framework-package.ts). Mirrors framework-arduino's presenter.
@@ -28,6 +28,6 @@ export { runLicensesPresenter as licenses } from './licenses.js';
 // registry — every board reconstructs from its generated manifest).
 export { setActiveChip, getActiveChip, NO_BOARD_CHIP, } from './chips/index.js';
 // Board catalog sync — regenerate the local board overlay from the user's
-// own Zephyr tree (`cuttlefish board sync`), so board add/change/remove
+// own Zephyr tree (`typecad-hal board sync`), so board add/change/remove
 // tracks `west update` instead of cuttlefish releases.
 export { syncBoardCatalog, ensureFreshBoardCatalog, loadBoardCatalogOverlay, resetBoardCatalogOverlayCache, } from './sdk/board-catalog-sync.js';

package/dist/licenses.d.ts

@@ -47,13 +47,13 @@ export declare function scanZephyrLicenses(runner: ZephyrLicensesRunner, all?: b
 /** @internal Test-only override of the default runner. Pass null to simulate west-not-found. */
 export declare function __setLicensesRunnerForTest(runner: ZephyrLicensesRunner | null | undefined): void;
 /**
- * `cuttlefish licenses` (Zephyr) presenter. Enumerates the Zephyr kernel +
+ * `typecad-hal licenses` (Zephyr) presenter. Enumerates the Zephyr kernel +
  * west manifest projects, resolves each one's license, classifies copyleft
  * risk, and renders a sorted table. Warns on unknown licenses; sets
  * process.exitCode under --strict when any strong-copyleft dependency is
  * present. Never calls process.exit().
  *
  * Default scope = only the modules the firmware actually links (from the last
- * `cuttlefish build`); `--all` lists every west manifest module.
+ * `typecad-hal build`); `--all` lists every west manifest module.
  */
 export declare function runLicensesPresenter(strict: boolean, all: boolean): void;

package/dist/licenses.js

@@ -1,7 +1,7 @@
 // ---------------------------------------------------------------------------
 // @typecad/framework-zephyr — Zephyr license scanner
 //
-// Zephyr-specific enumeration + presenter for the `cuttlefish licenses`
+// Zephyr-specific enumeration + presenter for the `typecad-hal licenses`
 // subcommand. The framework-agnostic SPDX detection engine lives in the shared
 // cuttlefish core (`@typecad/cuttlefish/api/shared`); this module owns only the
 // Zephyr pieces: discovering the west workspace, enumerating the Zephyr kernel
@@ -12,7 +12,7 @@
 //     links, derived from the build's `compile_commands.json` (a module is
 //     listed iff its sources were compiled). A west manifest carries every
 //     vendor HAL/library; almost none are linked by a single project, so the
-//     default filters them out. Requires a prior `cuttlefish build` — without
+//     default filters them out. Requires a prior `typecad-hal build` — without
 //     one, only the kernel is reported with a hint to build first.
 //   - `--all`: every west manifest project (the whole workspace).
 //
@@ -23,7 +23,7 @@ import { spawnSync } from 'node:child_process';
 import { readFileSync, readdirSync } from 'node:fs';
 import * as path from 'node:path';
 import * as ui from '@typecad/cuttlefish/utils/ui';
-import { loadCuttlefishConfig } from '@typecad/cuttlefish/config-loader';
+import { loadTypecadConfig } from '@typecad/cuttlefish/config-loader';
 import { resolveLibraryLicense, RISK_RANK, riskBracket, statusMark, countByRisk, } from '@typecad/cuttlefish/api/shared';
 import { discoverWest } from './toolchain/west-discover.js';
 import { westSpawn } from './toolchain/west-spawn.js';
@@ -271,14 +271,14 @@ export function __setLicensesRunnerForTest(runner) {
     testRunner = runner;
 }
 /**
- * `cuttlefish licenses` (Zephyr) presenter. Enumerates the Zephyr kernel +
+ * `typecad-hal licenses` (Zephyr) presenter. Enumerates the Zephyr kernel +
  * west manifest projects, resolves each one's license, classifies copyleft
  * risk, and renders a sorted table. Warns on unknown licenses; sets
  * process.exitCode under --strict when any strong-copyleft dependency is
  * present. Never calls process.exit().
  *
  * Default scope = only the modules the firmware actually links (from the last
- * `cuttlefish build`); `--all` lists every west manifest module.
+ * `typecad-hal build`); `--all` lists every west manifest module.
  */
 export function runLicensesPresenter(strict, all) {
     ui.printHeader();
@@ -289,7 +289,7 @@ export function runLicensesPresenter(strict, all) {
     // never blocks the license scan.
     let buildTarget;
     try {
-        buildTarget = loadCuttlefishConfig(process.cwd())?.buildTarget;
+        buildTarget = loadTypecadConfig(process.cwd())?.buildTarget;
     }
     catch {
         /* best-effort */
@@ -314,8 +314,8 @@ export function runLicensesPresenter(strict, all) {
     // Project scope with no build: only the kernel is reported. Hint the user to
     // build (which records which modules actually link) or use --all.
     if (result.needsBuild) {
-        ui.printInfo('(no build found — only the Zephyr kernel is shown. Run `cuttlefish build` to scope ' +
-            'this report to the modules your firmware actually links, or use `cuttlefish licenses --all` ' +
+        ui.printInfo('(no build found — only the Zephyr kernel is shown. Run `typecad-hal build` to scope ' +
+            'this report to the modules your firmware actually links, or use `typecad-hal licenses --all` ' +
             'for every west module.)');
     }
     const counts = countByRisk(result.entries);

package/dist/lowering/fs.js

@@ -51,7 +51,7 @@ export function fsInitLines() {
         '        __tc_fs_mounted = true;',
         '    } else {',
         '        char __tc_fs_err[48];',
-        '        (void)snprintf(__tc_fs_err, sizeof(__tc_fs_err), "cuttlefish-fs: mount failed rc=%d", rc);',
+        '        (void)snprintf(__tc_fs_err, sizeof(__tc_fs_err), "typecad-hal-fs: mount failed rc=%d", rc);',
         '        __tc_println(__tc_fs_err);',
         '    }',
         '}',

package/dist/lowering/gpio.js

@@ -24,38 +24,6 @@ export function dtSpecVarName(dtSpec) {
 function findDtSpec(chip, pin) {
     return chip.gpio.dtSpecs.find((s) => s.pin === pin);
 }
-// HAL passes UPPERCASE modes ("OUTPUT") while docs say lowercase ("output").
-// The *_pullup / *_pulldown modes map to GPIO_INPUT (Zephyr does not have
-// separate input+pull mode flags) and OR in a GPIO_PULL_UP / GPIO_PULL_DOWN
-// bit via `dtFlagsForMode` — without that bit the pin floats, so INPUT_PULLUP
-// was a silent no-op (bug B1). Mirrors the gpio_pullup_en/gpio_pulldown_en
-// extras framework-esp32 emits for the same modes.
-const MODE_MAP = {
-    output: 'GPIO_OUTPUT',
-    OUTPUT: 'GPIO_OUTPUT',
-    input: 'GPIO_INPUT',
-    INPUT: 'GPIO_INPUT',
-    input_pullup: 'GPIO_INPUT',
-    INPUT_PULLUP: 'GPIO_INPUT',
-    input_pulldown: 'GPIO_INPUT',
-    INPUT_PULLDOWN: 'GPIO_INPUT',
-};
-/** Additional DT flag bits for a HAL mode, OR'd into the configure flags.
- *  Returns '' for modes with no extra bits so the join leaves the mode alone. */
-function dtFlagsForMode(mode) {
-    const m = (mode ?? '').toLowerCase();
-    if (m === 'input_pullup')
-        return ' | GPIO_PULL_UP';
-    if (m === 'input_pulldown')
-        return ' | GPIO_PULL_DOWN';
-    return '';
-}
-/** Combined mode + pull flags for a HAL mode string, e.g.
- *  'INPUT_PULLUP' → 'GPIO_INPUT | GPIO_PULL_UP'. */
-function flagsForMode(mode) {
-    const base = MODE_MAP[mode] ?? 'GPIO_INPUT';
-    return base + dtFlagsForMode(mode);
-}
 // ── Thin GPIO (hal/gpio-pin.ts) — flag tokens ─────────────────────────────
 //
 // "GPIO.OUTPUT | GPIO.PULL_UP" token text maps name-for-name onto the GPIO_*