bambu-printer-mcp 1.0.8 → 1.1.2

package/src/printers/bambu.ts

@@ -1,18 +1,59 @@
 import { createHash } from "node:crypto";
 import fs from "node:fs/promises";
+import { readFileSync, existsSync } from "node:fs";
 import path from "node:path";
+import os from "node:os";
+import { Readable } from "node:stream";
 import JSZip from "jszip";
 import { Client as FTPClient } from "basic-ftp";
-import { Readable } from "node:stream";
 import { BambuPrinter } from "bambu-js";
+import * as mqtt from "mqtt";
 import {
   BambuClient,
   GCodeFileCommand,
   GCodeLineCommand,
   PushAllCommand,
+  UpdateFanCommand,
+  UpdateLightCommand,
   UpdateStateCommand,
 } from "bambu-node";
 
+/**
+ * Post-Jan-2025 H2D firmware requires mTLS with a Bambu-issued client cert.
+ * Loads cert+key once from:
+ *   - BAMBU_CLIENT_CERT / BAMBU_CLIENT_KEY env vars (paths), or
+ *   - ~/Desktop/bambu certs/embedded-cert.pem + embedded-key.pem (default)
+ * Returns null if files missing — caller falls back to no-cert TLS.
+ */
+function loadClientCreds(): { cert: Buffer; key: Buffer } | null {
+  const defaultDir = path.join(os.homedir(), "Desktop", "bambu certs");
+  const certPath = process.env.BAMBU_CLIENT_CERT || path.join(defaultDir, "embedded-cert.pem");
+  const keyPath = process.env.BAMBU_CLIENT_KEY || path.join(defaultDir, "embedded-key.pem");
+  try {
+    if (!existsSync(certPath) || !existsSync(keyPath)) return null;
+    return { cert: readFileSync(certPath), key: readFileSync(keyPath) };
+  } catch {
+    return null;
+  }
+}
+
+const CLIENT_CREDS = loadClientCreds();
+
+const COMMAND_SETTLE_MS = 300;
+
+const MODEL_ID_TO_NAME: Record<string, string> = {
+  O1D: "H2D",
+  O1E: "H2D Pro",
+  O1S: "H2S",
+  N2S: "A1",
+  A1M: "A1 Mini",
+  C11: "P1P",
+  C12: "P1S",
+  "BL-P001": "X1C",
+  "BL-P002": "X1",
+  C13: "X1E",
+};
+
 interface BambuPrintOptionsInternal {
   projectName: string;
   filePath: string;
@@ -25,6 +66,15 @@ interface BambuPrintOptionsInternal {
   layerInspect?: boolean;
   timelapse?: boolean;
   amsMapping?: number[];
+  /**
+   * Per-used-filament absolute tray index, one entry per position in the
+   * selected plate's `filament_ids`. Example: plate uses project filament 1
+   * only, and you want to pull from AMS 0 tray 1 -> pass `[1]`. The server
+   * expands this into the project-level `ams_mapping` array at the right
+   * position automatically (H2-series). Preferred over `amsMapping` for
+   * ergonomic callers; `amsMapping` takes precedence if both are set.
+   */
+  amsSlots?: number[];
   md5?: string;
 }
 
@@ -32,14 +82,240 @@ interface ProjectFileMetadata {
   plateFileName: string;
   plateInternalPath: string;
   md5: string;
+  /** Number of filament slots declared at project level (length the H2
+   * firmware expects for `ams_mapping`). Parsed from the gcode header
+   * `; filament_colour = ...` list. */
+  projectFilamentCount: number;
+  /** 0-based positions in the project filament list that the selected plate
+   * actually uses, from `Metadata/plate_<n>.json.filament_ids`. For a
+   * single-filament cube that pulls only project filament 1, this is `[1]`. */
+  usedFilamentPositions: number[];
+}
+
+function sleep(ms: number): Promise<void> {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+
+function resolveModelName(data: Record<string, any>): string {
+  const modelId = `${data?.model_id ?? ""}`.toUpperCase();
+  return (
+    MODEL_ID_TO_NAME[modelId] ||
+    data?.model ||
+    data?.device?.devModel ||
+    data?.device?.dev_model ||
+    "Unknown"
+  );
+}
+
+async function invokeWithoutAck(printer: BambuClient, command: { invoke(client: BambuClient): Promise<void> }) {
+  await command.invoke(printer);
+  await sleep(COMMAND_SETTLE_MS);
+}
+
+function getPrinterKey(host: string, serial: string, token: string): string {
+  return `${host}-${serial}-${token}`;
+}
+
+class TolerantBambuClient extends BambuClient {
+  /**
+   * H2D-class firmware streams push status immediately after subscribe, but
+   * never answers bambu-node's initial get_version round-trip. Avoid treating
+   * that missing ACK as a failed connection.
+   */
+  protected override async onConnect(): Promise<void> {
+    const subscribe = (this as any).subscribe.bind(this);
+    await subscribe(`device/${this.config.serialNumber}/report`);
+  }
+
+  /**
+   * H2S/H2D printers don't respond to get_version with module info.
+   * Infer model from serial number prefix so downstream code (Job, status
+   * parsing, etc.) has a valid printerModel instead of undefined.
+   */
+  private inferModelFromSerial(): string | undefined {
+    const sn = this.config.serialNumber;
+    if (sn.startsWith("093")) return "H2S";
+    if (sn.startsWith("094")) return "H2D";
+    if (sn.startsWith("00M")) return "X1C";
+    if (sn.startsWith("00W")) return "X1";
+    if (sn.startsWith("03W")) return "X1E";
+    if (sn.startsWith("01S")) return "P1P";
+    if (sn.startsWith("01P")) return "P1S";
+    if (sn.startsWith("030")) return "A1";
+    if (sn.startsWith("039")) return "A1M";
+    return undefined;
+  }
+
+  /**
+   * Override bambu-node's MQTT connect to pass a client cert+key for mTLS.
+   * Post-Jan-2025 H2D firmware rejects TLS handshakes without a valid Bambu-
+   * issued client certificate. Options mirror the upstream implementation
+   * plus `cert`/`key` when creds are available.
+   */
+  override async connect(): Promise<[void]> {
+    await new Promise<void>((resolve, reject) => {
+      const self: any = this;
+      if (self.mqttClient) {
+        throw new Error("Can't establish a new connection while running another one!");
+      }
+      const tlsOpts: Record<string, unknown> = {
+        username: "bblp",
+        password: self.config.accessToken,
+        reconnectPeriod: self.clientOptions.reconnectInterval,
+        connectTimeout: self.clientOptions.connectTimeout,
+        keepalive: self.clientOptions.keepAlive,
+        resubscribe: true,
+        rejectUnauthorized: false,
+      };
+      if (CLIENT_CREDS) {
+        tlsOpts.cert = CLIENT_CREDS.cert;
+        tlsOpts.key = CLIENT_CREDS.key;
+      }
+      const client = mqtt.connect(
+        `mqtts://${self.config.host}:${self.config.port}`,
+        tlsOpts as any
+      );
+      self.mqttClient = client;
+      client.on("connect", async (...args: any[]) => {
+        try {
+          await self.onConnect(...args);
+          self.emit("client:connect");
+          resolve();
+        } catch (e) {
+          reject(e);
+        }
+      });
+      client.on("disconnect", () => {
+        self.emit("client:disconnect", false);
+        self.emit("printer:statusUpdate", self._printerStatus, "OFFLINE");
+        self._printerStatus = "OFFLINE";
+        if (self.currentJob) self.emit("job:pause", self.currentJob, true);
+      });
+      client.on("offline", () => {
+        self.emit("client:disconnect", true);
+        self.emit("printer:statusUpdate", self._printerStatus, "OFFLINE");
+        self._printerStatus = "OFFLINE";
+        if (self.currentJob) self.emit("job:pause", self.currentJob, true);
+      });
+      client.on("message", (topic: string, payload: Buffer) =>
+        self.emit("rawMessage", topic, payload)
+      );
+      client.on("error", (err: Error) => {
+        self.emit("client:error", err);
+        reject(err);
+      });
+    });
+    // H2S/H2D printers don't respond to get_version with module info.
+    // Infer model from serial number prefix so downstream code works.
+    if (!this.data.model) {
+      const inferred = this.inferModelFromSerial();
+      if (inferred) {
+        (this.data as any).model = inferred;
+        this.emit("printer:dataUpdate", this.data, { model: inferred } as any);
+      }
+    }
+    return [undefined as unknown as void];
+  }
+}
+
+/** Build FTPS secureOptions that include the client cert+key when available. */
+function ftpsSecureOptions(): Record<string, unknown> {
+  const opts: Record<string, unknown> = { rejectUnauthorized: false };
+  if (CLIENT_CREDS) {
+    opts.cert = CLIENT_CREDS.cert;
+    opts.key = CLIENT_CREDS.key;
+  }
+  return opts;
 }
 
 class BambuClientStore {
   private printers: Map<string, BambuClient> = new Map();
   private initialConnectionPromises: Map<string, Promise<void>> = new Map();
+  private reportSnapshots: Map<string, Record<string, any>> = new Map();
+  private initialReportPromises: Map<string, Promise<void>> = new Map();
+  private initialReportResolvers: Map<string, () => void> = new Map();
+
+  private ensureInitialReportPromise(key: string): Promise<void> {
+    const existing = this.initialReportPromises.get(key);
+    if (existing) {
+      return existing;
+    }
+
+    const promise = new Promise<void>((resolve) => {
+      this.initialReportResolvers.set(key, resolve);
+    });
+    this.initialReportPromises.set(key, promise);
+    return promise;
+  }
+
+  private resolveInitialReport(key: string): void {
+    const resolve = this.initialReportResolvers.get(key);
+    if (!resolve) {
+      return;
+    }
+
+    this.initialReportResolvers.delete(key);
+    resolve();
+  }
+
+  private updateReportSnapshot(key: string, update: Record<string, any>): void {
+    if (!update || Object.keys(update).length === 0) {
+      return;
+    }
+
+    const previous = this.reportSnapshots.get(key) || {};
+    this.reportSnapshots.set(key, { ...previous, ...update });
+    this.resolveInitialReport(key);
+  }
+
+  private clearPrinterState(key: string): void {
+    this.printers.delete(key);
+    this.initialConnectionPromises.delete(key);
+    this.reportSnapshots.delete(key);
+    this.initialReportPromises.delete(key);
+    this.initialReportResolvers.delete(key);
+  }
+
+  getCachedReport(host: string, serial: string, token: string): Record<string, any> | null {
+    return this.reportSnapshots.get(getPrinterKey(host, serial, token)) || null;
+  }
+
+  async waitForInitialReport(
+    host: string,
+    serial: string,
+    token: string,
+    timeoutMs = 4000
+  ): Promise<Record<string, any> | null> {
+    const key = getPrinterKey(host, serial, token);
+    const existing = this.reportSnapshots.get(key);
+
+    if (!existing || Object.keys(existing).length === 0) {
+      // No MQTT data yet — wait for the first push.
+      const reportPromise = this.ensureInitialReportPromise(key);
+      try {
+        await Promise.race([
+          reportPromise,
+          sleep(timeoutMs).then(() => {
+            throw new Error(`Timed out waiting for initial printer report after ${timeoutMs}ms.`);
+          }),
+        ]);
+      } catch (error) {
+        console.warn(`No initial printer report received for ${serial}:`, error);
+      }
+    }
+
+    // Short settle: the first MQTT push from the printer is a sparse "hello"
+    // with only model/modules. A second push carrying the full status
+    // (gcode_state, ams, hms, temperatures, fans, etc.) arrives afterward
+    // and gets merged into reportSnapshots via incremental update.
+    // This settle runs regardless of whether data arrived before or during
+    // the promise race above, so the merge has time to complete.
+    await sleep(500);
+    return this.reportSnapshots.get(key) || null;
+  }
 
   async getPrinter(host: string, serial: string, token: string): Promise<BambuClient> {
-    const key = `${host}-${serial}`;
+    const key = getPrinterKey(host, serial, token);
 
     if (this.printers.has(key)) {
       return this.printers.get(key)!;
@@ -53,11 +329,28 @@ class BambuClientStore {
       throw new Error(`Existing Bambu client connection for ${key} failed.`);
     }
 
-    const printer = new BambuClient({
+    const printer = new TolerantBambuClient({
       host,
       serialNumber: serial,
       accessToken: token,
     });
+    this.ensureInitialReportPromise(key);
+
+    printer.on("rawMessage", (_topic, payload) => {
+      try {
+        const parsed = JSON.parse(payload.toString());
+        const printMessage = parsed?.print;
+        if (printMessage && typeof printMessage === "object") {
+          this.updateReportSnapshot(key, printMessage);
+        }
+      } catch {
+        // Ignore unrelated payloads.
+      }
+    });
+
+    printer.on("printer:dataUpdate", (data) => {
+      this.updateReportSnapshot(key, data);
+    });
 
     printer.on("client:connect", () => {
       this.printers.set(key, printer);
@@ -65,13 +358,11 @@ class BambuClientStore {
     });
 
     printer.on("client:error", () => {
-      this.printers.delete(key);
-      this.initialConnectionPromises.delete(key);
+      this.clearPrinterState(key);
     });
 
     printer.on("client:disconnect", () => {
-      this.printers.delete(key);
-      this.initialConnectionPromises.delete(key);
+      this.clearPrinterState(key);
     });
 
     const connectPromise = printer.connect().then(() => {});
@@ -81,7 +372,7 @@ class BambuClientStore {
       await connectPromise;
       return printer;
     } catch (error) {
-      this.initialConnectionPromises.delete(key);
+      this.clearPrinterState(key);
       throw error;
     }
   }
@@ -104,6 +395,9 @@ class BambuClientStore {
     await Promise.allSettled(disconnectPromises);
     this.printers.clear();
     this.initialConnectionPromises.clear();
+    this.reportSnapshots.clear();
+    this.initialReportPromises.clear();
+    this.initialReportResolvers.clear();
   }
 }
 
@@ -156,10 +450,51 @@ export class BambuImplementation {
     const gcodeBuffer = await selectedEntry.async("nodebuffer");
     const md5 = createHash("md5").update(gcodeBuffer).digest("hex");
 
+    // Project filament count: parse the gcode header line
+    // `; filament_colour = #FFFFFF;#FF911A80;#DCF478;#DCF478`
+    // This is the authoritative source -- it always reflects the slicer's
+    // project filament list length. We only scan the first ~32KB of the
+    // gcode to keep this cheap even on large plates.
+    let projectFilamentCount = 1;
+    const head = gcodeBuffer.slice(0, 32 * 1024).toString("utf8");
+    const colourLine = head.match(/;\s*filament_colour\s*=\s*([^\n\r]+)/i);
+    if (colourLine) {
+      projectFilamentCount = colourLine[1].split(";").filter((s) => s.trim()).length;
+    } else {
+      // Fallback: count filament_ids header entries.
+      const idsLine = head.match(/;\s*filament_ids\s*=\s*([^\n\r]+)/i);
+      if (idsLine) {
+        projectFilamentCount = idsLine[1].split(";").filter((s) => s.trim()).length;
+      }
+    }
+
+    // Used filament positions: from Metadata/plate_<n>.json.filament_ids.
+    // These are 0-based positions into the project filament list that the
+    // selected plate actually consumes.
+    let usedFilamentPositions: number[] = [];
+    const plateJsonName = selectedEntry.name.replace(/\.gcode$/i, ".json");
+    const plateJsonEntry = zip.file(plateJsonName);
+    if (plateJsonEntry) {
+      try {
+        const raw = await plateJsonEntry.async("string");
+        const json = JSON.parse(raw);
+        if (Array.isArray(json.filament_ids)) {
+          usedFilamentPositions = json.filament_ids
+            .filter((n: unknown) => Number.isInteger(n))
+            .map((n: number) => n);
+        }
+      } catch {
+        // tolerate malformed plate_N.json -- caller can pass amsMapping directly
+      }
+    }
+    if (usedFilamentPositions.length === 0) usedFilamentPositions = [0];
+
     return {
       plateFileName: path.posix.basename(selectedEntry.name),
       plateInternalPath: selectedEntry.name,
       md5,
+      projectFilamentCount,
+      usedFilamentPositions,
     };
   }
 
@@ -168,16 +503,16 @@ export class BambuImplementation {
       const printer = await this.getPrinter(host, serial, token);
 
       try {
-        await printer.executeCommand(new PushAllCommand());
+        await invokeWithoutAck(printer, new PushAllCommand());
       } catch (error) {
         console.warn("PushAllCommand failed, continuing with cached status", error);
       }
 
-      if (!printer.data || Object.keys(printer.data).length === 0) {
-        await new Promise((resolve) => setTimeout(resolve, 1500));
-      }
-
-      const data = printer.data;
+      const cachedData = await this.printerStore.waitForInitialReport(host, serial, token);
+      const data =
+        cachedData && Object.keys(cachedData).length > 0
+          ? cachedData
+          : printer.data;
 
       return {
         status: data.gcode_state || "UNKNOWN",
@@ -201,7 +536,7 @@ export class BambuImplementation {
           totalLayers: data.total_layer_num || 0,
         },
         ams: data.ams || null,
-        model: data.model || "Unknown",
+        model: resolveModelName(data),
         serial,
         raw: data,
       };
@@ -221,62 +556,207 @@ export class BambuImplementation {
       throw new Error("print3mf requires a .3mf input file.");
     }
 
+    // Normalise remote filename: collapse double-extension artifacts like
+    // "Cube.gcode.3mf.gcode.3mf" -> "Cube.gcode.3mf" so firmware can identify
+    // the container format from the extension.
+    let remoteFileName = path.basename(options.filePath);
+    remoteFileName = remoteFileName.replace(/\.gcode\.3mf\.gcode\.3mf$/i, ".gcode.3mf");
+
+    // H2S/H2D land files at the FTP root and reference them via ftp:///<name>.
+    // P1/A1/X1 use /cache/<name> and file:///sdcard/cache/<name>.
+    const isH2 = serial.startsWith("093") || serial.startsWith("094");
+    const remoteProjectPath = isH2 ? remoteFileName : `cache/${remoteFileName}`;
+    const remoteUploadPath = isH2 ? `/${remoteFileName}` : `/cache/${remoteFileName}`;
+    const projectUrl = isH2
+      ? `ftp:///${remoteFileName}`
+      : `file:///sdcard/${remoteProjectPath}`;
+
+    // Upload via basic-ftp directly (bypasses bambu-js double-path bug)
+    await this.ftpUpload(host, token, options.filePath, remoteUploadPath);
+
+    // Pre-sliced .gcode.3mf files: routing depends on firmware generation.
+    // P1/A1/X1 series: project_file returns 405004002 for .gcode.3mf (firmware
+    // doesn't recognise the container), so use gcode_file instead.
+    // H2S/H2D: gcode_file is not supported; project_file works because the
+    // firmware can open the zip and find Metadata/plate_<n>.gcode directly.
+    if (options.filePath.toLowerCase().endsWith(".gcode.3mf")) {
+      if (!isH2) {
+        const printer = await this.getPrinter(host, serial, token);
+        await invokeWithoutAck(printer, new GCodeFileCommand({ fileName: remoteProjectPath }));
+        return {
+          status: "success",
+          message: `Uploaded and started gcode.3mf print: ${options.projectName}`,
+          remoteProjectPath,
+        };
+      }
+      // H2S/H2D: fall through to project_file path below
+    }
+
     const projectMetadata = await this.resolveProjectFileMetadata(
       options.filePath,
       options.plateIndex
     );
 
-    const remoteFileName = path.basename(options.filePath);
-    const remoteProjectPath = `cache/${remoteFileName}`;
-
-    // Upload via basic-ftp directly (bypasses bambu-js double-path bug)
-    await this.ftpUpload(host, token, options.filePath, `/cache/${remoteFileName}`);
-
     // Send project_file command via bambu-node MQTT (bypasses bambu-js
     // hardcoded use_ams=true and missing ams_mapping support)
     const printer = await this.getPrinter(host, serial, token);
     const md5 = options.md5 ?? projectMetadata.md5;
 
-    // Build AMS mapping per OpenBambuAPI spec: 5-element array
-    // [-1,-1,-1,-1,0] means slot 0 only; pad unused slots with -1
-    let amsMapping: number[];
+    // Build AMS mapping.
+    //
+    // Convention: position = project-level filament index, value = absolute
+    // tray index (0-3 = AMS 0 trays, 4-7 = AMS 1, 8-11 = AMS 2, 128+ = AMS-HT,
+    // 254 = external spool, -1 = unused). Required on AMS-equipped printers
+    // even when you think "no AMS" -- firmware looks up the mapping table
+    // whenever the 3MF declares filaments, and a missing/invalid mapping
+    // fails with 0700-8012-032015 "Failed to get AMS mapping table".
+    //
+    // For H2-series the array length MUST equal the project-level filament
+    // count declared by the slicer (parsed from the gcode header's
+    // `filament_colour` list). For P1/A1/X1 we pad to length 5 per the
+    // historical bambu-js behavior.
+    //
+    // Caller ergonomics: callers typically know only "I want to pull this
+    // print's filaments from these AMS slots" in the order the plate uses
+    // them. We expose `amsSlots` for that -- one entry per position in
+    // `plate_N.json.filament_ids` -- and expand to a full project-level
+    // array here. `amsMapping` is the raw escape hatch (takes precedence
+    // when both are supplied).
+    const validateTrayValue = (v: unknown, label: string): void => {
+      if (
+        !Number.isInteger(v) ||
+        (v as number) < -1 ||
+        ((v as number) > 15 && (v as number) < 128) ||
+        (v as number) > 254
+      ) {
+        throw new Error(
+          `${label} values must be integers in [-1, 15] (absolute tray) or 128-254 (HT/external); got ${v}`
+        );
+      }
+    };
+
+    let baseMapping: number[];
     if (options.amsMapping && options.amsMapping.length > 0) {
-      amsMapping = Array.from({ length: 5 }, (_, i) =>
-        i < options.amsMapping!.length ? options.amsMapping![i] : -1
+      for (const v of options.amsMapping) validateTrayValue(v, "ams_mapping");
+      baseMapping = options.amsMapping.slice();
+    } else if (options.amsSlots && options.amsSlots.length > 0) {
+      for (const v of options.amsSlots) validateTrayValue(v, "amsSlots");
+      const positions = projectMetadata.usedFilamentPositions;
+      if (options.amsSlots.length !== positions.length) {
+        throw new Error(
+          `amsSlots length ${options.amsSlots.length} does not match used filament count ${positions.length} (plate uses positions ${JSON.stringify(positions)}). Provide one tray per used filament, or use amsMapping for a raw project-level array.`
+        );
+      }
+      const projectLen = Math.max(
+        projectMetadata.projectFilamentCount,
+        ...positions.map((p) => p + 1)
       );
+      baseMapping = Array<number>(projectLen).fill(-1);
+      positions.forEach((pos, i) => {
+        baseMapping[pos] = options.amsSlots![i];
+      });
     } else {
-      amsMapping = [-1, -1, -1, -1, 0];
+      if (isH2 && projectMetadata.usedFilamentPositions.length > 0) {
+        throw new Error(
+          `H2 project_file requires amsSlots or amsMapping for sliced files with declared filaments. Plate uses project filament positions ${JSON.stringify(projectMetadata.usedFilamentPositions)}.`
+        );
+      }
+      const positions = projectMetadata.usedFilamentPositions;
+      const projectLen = Math.max(
+        projectMetadata.projectFilamentCount,
+        ...positions.map((p) => p + 1),
+        1
+      );
+      baseMapping = Array<number>(projectLen).fill(-1);
+      positions.forEach((pos, i) => {
+        baseMapping[pos] = i;
+      });
     }
 
-    const projectFileCmd = {
-      print: {
-        command: "project_file",
-        param: `Metadata/${projectMetadata.plateFileName}`,
-        url: `ftp://${remoteFileName}`,
-        subtask_name: options.projectName,
-        md5,
-        flow_cali: options.flowCalibration ?? true,
-        layer_inspect: options.layerInspect ?? true,
-        vibration_cali: options.vibrationCalibration ?? true,
-        bed_leveling: options.bedLeveling ?? true,
-        bed_type: options.bedType || "textured_plate",
-        timelapse: options.timelapse ?? false,
-        use_ams: options.useAMS !== false,
-        ams_mapping: amsMapping,
-        profile_id: "0",
-        project_id: "0",
-        sequence_id: "0",
-        subtask_id: "0",
-        task_id: "0",
-      },
-    };
+    let amsMapping: number[];
+    let amsMapping2: Array<{ ams_id: number; slot_id: number }>;
+    if (isH2) {
+      const projLen = Math.max(projectMetadata.projectFilamentCount, baseMapping.length, 1);
+      amsMapping = Array.from({ length: projLen }, (_, i) =>
+        i < baseMapping.length ? baseMapping[i] : -1
+      );
+      amsMapping2 = amsMapping.map((v) => {
+        if (v < 0 || v === 255) return { ams_id: 255, slot_id: 255 };
+        if (v === 254) return { ams_id: 254, slot_id: 254 };
+        if (v >= 128) return { ams_id: 128, slot_id: v - 128 };
+        return { ams_id: Math.floor(v / 4), slot_id: v % 4 };
+      });
+    } else {
+      amsMapping = Array.from({ length: 5 }, (_, i) =>
+        i < baseMapping.length ? baseMapping[i] : -1
+      );
+      amsMapping2 = [];
+    }
+
+    const b = (v: any) => (v ? 1 : 0);
+    let projectFileCmd: Record<string, any>;
+    if (isH2) {
+      const submissionId = String(Date.now() & 0x7fffffff);
+      projectFileCmd = {
+        print: {
+          sequence_id: "0",
+          command: "project_file",
+          param: `Metadata/${projectMetadata.plateFileName}`,
+          url: projectUrl,
+          file: remoteFileName,
+          md5,
+          bed_type: options.bedType || "auto",
+          timelapse: b(options.timelapse),
+          bed_leveling: b(options.bedLeveling ?? true),
+          auto_bed_leveling: 1,
+          flow_cali: b(options.flowCalibration ?? false),
+          vibration_cali: b(options.vibrationCalibration ?? true),
+          layer_inspect: b(options.layerInspect ?? false),
+          use_ams: options.useAMS !== false,
+          cfg: "0",
+          extrude_cali_flag: 0,
+          extrude_cali_manual_mode: 0,
+          nozzle_offset_cali: 2,
+          subtask_name: remoteFileName.replace(/\.3mf$/i, ""),
+          profile_id: "0",
+          project_id: submissionId,
+          subtask_id: submissionId,
+          task_id: submissionId,
+          ams_mapping: amsMapping,
+          ams_mapping2: amsMapping2,
+        },
+      };
+    } else {
+      projectFileCmd = {
+        print: {
+          command: "project_file",
+          param: `Metadata/${projectMetadata.plateFileName}`,
+          url: projectUrl,
+          subtask_name: options.projectName,
+          md5,
+          flow_cali: options.flowCalibration ?? true,
+          layer_inspect: options.layerInspect ?? true,
+          vibration_cali: options.vibrationCalibration ?? true,
+          bed_leveling: options.bedLeveling ?? true,
+          bed_type: options.bedType || "textured_plate",
+          timelapse: options.timelapse ?? false,
+          use_ams: options.useAMS !== false,
+          ams_mapping: amsMapping,
+          profile_id: "0",
+          project_id: "0",
+          sequence_id: "0",
+          subtask_id: "0",
+          task_id: "0",
+        },
+      };
+    }
 
     await printer.publish(projectFileCmd);
     await new Promise((resolve) => setTimeout(resolve, 300));
 
     return {
       status: "success",
-      message: `Uploaded 3MF and sent project_file print command: ${options.projectName}`,
+      message: `Uploaded and started 3MF print: ${options.projectName}`,
       remoteProjectPath,
       plateFile: projectMetadata.plateFileName,
       platePath: projectMetadata.plateInternalPath,
@@ -289,13 +769,135 @@ export class BambuImplementation {
     const printer = await this.getPrinter(host, serial, token);
 
     try {
-      await printer.executeCommand(new UpdateStateCommand({ state: "stop" }));
+      await invokeWithoutAck(printer, new UpdateStateCommand({ state: "stop" }));
       return { status: "success", message: "Cancel command sent successfully." };
     } catch (error) {
       throw new Error(`Failed to cancel print: ${(error as Error).message}`);
     }
   }
 
+  async pauseJob(host: string, serial: string, token: string): Promise<any> {
+    const printer = await this.getPrinter(host, serial, token);
+    try {
+      await invokeWithoutAck(printer, new UpdateStateCommand({ state: "pause" }));
+      return { status: "success", message: "Pause command sent successfully." };
+    } catch (error) {
+      throw new Error(`Failed to pause print: ${(error as Error).message}`);
+    }
+  }
+
+  async resumeJob(host: string, serial: string, token: string): Promise<any> {
+    const printer = await this.getPrinter(host, serial, token);
+    try {
+      await invokeWithoutAck(printer, new UpdateStateCommand({ state: "resume" }));
+      return { status: "success", message: "Resume command sent successfully." };
+    } catch (error) {
+      throw new Error(`Failed to resume print: ${(error as Error).message}`);
+    }
+  }
+
+  async clearHmsErrors(host: string, serial: string, token: string): Promise<any> {
+    const printer = await this.getPrinter(host, serial, token);
+    await printer.publish({
+      print: {
+        command: "clean_print_error",
+        sequence_id: "0",
+      },
+    });
+    await sleep(COMMAND_SETTLE_MS);
+    return { status: "success", message: "HMS clear command sent." };
+  }
+
+  async setPrintSpeed(host: string, serial: string, token: string, speedMode: string | number): Promise<any> {
+    const printer = await this.getPrinter(host, serial, token);
+    const normalized =
+      typeof speedMode === "number" ? String(Math.trunc(speedMode)) : speedMode.trim().toLowerCase();
+    const mode =
+      normalized === "silent" ? 1 :
+      normalized === "standard" ? 2 :
+      normalized === "sport" ? 3 :
+      normalized === "ludicrous" ? 4 :
+      Number(normalized);
+
+    if (!Number.isInteger(mode) || mode < 1 || mode > 4) {
+      throw new Error("Print speed mode must be one of: silent, standard, sport, ludicrous, 1, 2, 3, 4.");
+    }
+
+    await printer.publish({
+      print: {
+        command: "print_speed",
+        param: String(mode),
+        sequence_id: "0",
+      },
+    });
+    await sleep(COMMAND_SETTLE_MS);
+    const names = ["", "silent", "standard", "sport", "ludicrous"];
+    return {
+      status: "success",
+      message: `Print speed command sent for ${names[mode]}.`,
+      mode,
+      label: names[mode],
+    };
+  }
+
+  async setAirductMode(host: string, serial: string, token: string, mode: string): Promise<any> {
+    const printer = await this.getPrinter(host, serial, token);
+    const normalizedMode = mode.trim().toLowerCase();
+    if (normalizedMode !== "cooling" && normalizedMode !== "heating") {
+      throw new Error("Airduct mode must be one of: cooling, heating.");
+    }
+
+    await printer.publish({
+      print: {
+        command: "set_airduct",
+        modeId: normalizedMode === "cooling" ? 0 : 1,
+        submode: -1,
+        sequence_id: "0",
+      },
+    });
+    await sleep(COMMAND_SETTLE_MS);
+    return {
+      status: "success",
+      message: `Airduct mode command sent for ${normalizedMode}.`,
+      mode: normalizedMode,
+    };
+  }
+
+  async rereadAmsRfid(
+    host: string,
+    serial: string,
+    token: string,
+    amsId: number,
+    slotId: number
+  ): Promise<any> {
+    const printer = await this.getPrinter(host, serial, token);
+    const normalizedAmsId = Math.trunc(amsId);
+    const normalizedSlotId = Math.trunc(slotId);
+
+    if (!Number.isInteger(normalizedAmsId) || normalizedAmsId < 0 || normalizedAmsId > 3) {
+      throw new Error("ams_id must be an integer from 0 to 3.");
+    }
+    if (!Number.isInteger(normalizedSlotId) || normalizedSlotId < 0 || normalizedSlotId > 3) {
+      throw new Error("slot_id must be an integer from 0 to 3.");
+    }
+
+    await printer.publish({
+      print: {
+        command: "ams_get_rfid",
+        ams_id: normalizedAmsId,
+        slot_id: normalizedSlotId,
+        sequence_id: "0",
+      },
+    });
+    await sleep(COMMAND_SETTLE_MS);
+    return {
+      status: "success",
+      message: `AMS RFID re-read command sent for AMS ${normalizedAmsId} slot ${normalizedSlotId}.`,
+      ams_id: normalizedAmsId,
+      slot_id: normalizedSlotId,
+    };
+  }
+
   async setTemperature(
     host: string,
     serial: string,
@@ -328,7 +930,7 @@ export class BambuImplementation {
       );
     }
 
-    await printer.executeCommand(new GCodeLineCommand({ gcodes: [gcode] }));
+    await invokeWithoutAck(printer, new GCodeLineCommand({ gcodes: [gcode] }));
     return {
       status: "success",
       message: `Temperature command sent for ${normalizedComponent}.`,
@@ -336,6 +938,148 @@ export class BambuImplementation {
     };
   }
 
+  async setFanSpeed(
+    host: string,
+    serial: string,
+    token: string,
+    fan: string | number,
+    speed: number
+  ) {
+    const printer = await this.getPrinter(host, serial, token);
+    const normalizedFan = typeof fan === "number" ? fan : fan.trim().toLowerCase();
+    const fanId =
+      normalizedFan === 1 || normalizedFan === "1" || normalizedFan === "part" || normalizedFan === "part_cooling"
+        ? 1
+        : normalizedFan === 2 || normalizedFan === "2" || normalizedFan === "aux" || normalizedFan === "auxiliary"
+          ? 2
+          : normalizedFan === 3 || normalizedFan === "3" || normalizedFan === "chamber"
+            ? 3
+            : null;
+
+    if (fanId === null) {
+      throw new Error("Unsupported fan. Use one of: part, auxiliary, chamber, 1, 2, 3.");
+    }
+
+    const targetSpeed = Math.round(speed);
+    if (targetSpeed < 0 || targetSpeed > 100) {
+      throw new Error("Fan speed must be between 0 and 100 percent.");
+    }
+
+    await invokeWithoutAck(
+      printer,
+      new UpdateFanCommand({ fan: fanId as any, speed: targetSpeed as any })
+    );
+    return {
+      status: "success",
+      message: `Fan speed command sent for fan ${fanId}.`,
+      fan: fanId,
+      speed: targetSpeed,
+    };
+  }
+
+  async setLight(
+    host: string,
+    serial: string,
+    token: string,
+    light: string,
+    mode: string
+  ) {
+    const printer = await this.getPrinter(host, serial, token);
+    const normalizedLight = light.trim();
+    const normalizedMode = mode.trim().toLowerCase();
+    const validModes = new Set(["on", "off", "flashing"]);
+
+    if (!normalizedLight) {
+      throw new Error("Light node is required, for example: chamber_light.");
+    }
+    if (!validModes.has(normalizedMode)) {
+      throw new Error("Light mode must be one of: on, off, flashing.");
+    }
+
+    await invokeWithoutAck(
+      printer,
+      new UpdateLightCommand({
+        light: normalizedLight as any,
+        mode: normalizedMode as any,
+      })
+    );
+    return {
+      status: "success",
+      message: `Light command sent for ${normalizedLight}.`,
+      light: normalizedLight,
+      mode: normalizedMode,
+    };
+  }
+
+  async setAmsDrying(
+    host: string,
+    serial: string,
+    token: string,
+    action: string,
+    amsId: number
+  ): Promise<any> {
+    const printer = await this.getPrinter(host, serial, token);
+    const normalizedAction = action.trim().toLowerCase();
+    if (normalizedAction !== "start" && normalizedAction !== "stop") {
+      throw new Error("AMS drying action must be one of: start, stop.");
+    }
+
+    const normalizedAmsId = Math.trunc(amsId);
+    if (!Number.isInteger(normalizedAmsId) || normalizedAmsId < 0 || normalizedAmsId > 3) {
+      throw new Error("ams_id must be an integer from 0 to 3.");
+    }
+
+    const param = normalizedAction === "start" ? "start_drying" : "stop_drying";
+    await printer.publish({
+      print: {
+        command: "ams_control",
+        ams_id: normalizedAmsId,
+        param,
+        sequence_id: "0",
+      },
+    });
+    await sleep(COMMAND_SETTLE_MS);
+
+    const label = normalizedAction === "start" ? "started" : "stopped";
+    return {
+      status: "success",
+      message: `AMS drying ${label} for AMS ${normalizedAmsId}.`,
+      action: normalizedAction,
+      ams_id: normalizedAmsId,
+    };
+  }
+
+  async skipObjects(
+    host: string,
+    serial: string,
+    token: string,
+    objectIds: number[]
+  ) {
+    const printer = await this.getPrinter(host, serial, token);
+    const normalizedObjectIds = objectIds
+      .map((id) => Math.trunc(id))
+      .filter((id) => Number.isInteger(id) && id >= 0);
+
+    if (normalizedObjectIds.length === 0) {
+      throw new Error("At least one non-negative object id is required.");
+    }
+
+    await printer.publish({
+      print: {
+        sequence_id: "0",
+        command: "skip_objects",
+        obj_list: normalizedObjectIds,
+      },
+    });
+    await sleep(COMMAND_SETTLE_MS);
+
+    return {
+      status: "success",
+      message: "Skip objects command sent.",
+      object_ids: normalizedObjectIds,
+    };
+  }
+
   async getFiles(host: string, serial: string, token: string) {
     const printer = new BambuPrinter(host, serial, token);
     const directories = ["cache", "timelapse", "logs"];
@@ -423,7 +1167,8 @@ export class BambuImplementation {
   }
 
   async startJob(host: string, serial: string, token: string, filename: string) {
-    if (filename.toLowerCase().endsWith(".3mf")) {
+    const lower = filename.toLowerCase();
+    if (lower.endsWith(".3mf") && !lower.endsWith(".gcode.3mf")) {
       throw new Error("Use print_3mf for .3mf project files.");
     }
 
@@ -434,7 +1179,7 @@ export class BambuImplementation {
       ? normalizedFileName
       : `cache/${normalizedFileName}`;
 
-    await printer.executeCommand(new GCodeFileCommand({ fileName: remoteFile }));
+    await invokeWithoutAck(printer, new GCodeFileCommand({ fileName: remoteFile }));
 
     return {
       status: "success",
@@ -443,6 +1188,402 @@ export class BambuImplementation {
     };
   }
 
+  /**
+   * Capture a single JPEG frame from the printer's chamber camera.
+   *
+   * Protocol per https://github.com/Doridian/OpenBambuAPI/blob/main/video.md
+   *
+   *   Connect TLS to <host>:6000 (self-signed cert -- skip verification).
+   *   Send an 80-byte auth packet:
+   *     [0..4]   uint32 LE  payload size = 0x40  (64)
+   *     [4..8]   uint32 LE  type         = 0x3000
+   *     [8..12]  uint32 LE  flags        = 0
+   *     [12..16] uint32 LE  0
+   *     [16..48] "bblp" + null padding to 32 bytes
+   *     [48..80] access token + null padding to 32 bytes
+   *
+   *   The server then streams frames as repeating:
+   *     [0..4]   uint32 LE  payload size
+   *     [4..8]   uint32 LE  itrack (0)
+   *     [8..12]  uint32 LE  flags  (1)
+   *     [12..16] uint32 LE  0
+   *     [16..16+payloadSize] JPEG (FF D8 ... FF D9)
+   *
+   * Verified models per upstream docs: A1, A1 mini, P1S, P1P. X1/X1C/X1E
+   * and P2S use RTSP on port 322 instead -- not implemented yet. H2/H2S/H2D
+   * are not documented; we fail fast rather than guess at the protocol.
+   *
+   * Read-only; no confirm gate. Default 8s timeout for cold-start latency.
+   */
+  async cameraSnapshot(
+    host: string,
+    _serial: string,
+    token: string,
+    options: {
+      savePath?: string;
+      timeoutMs?: number;
+      bambuModel?: string;
+      /**
+       * Reserved. Earlier this flag let callers probe the H2 series via
+       * the A1/P1 TCP-on-6000 path. Diagnostics confirmed the printer
+       * does not speak that protocol; H2 uses RTSP, same as X1. The
+       * flag is now ignored. Kept on the type to avoid breaking
+       * existing callers.
+       */
+      experimental?: boolean;
+      /**
+       * Optional override for the ffmpeg binary path used by the RTSP
+       * path. Defaults to `ffmpeg` (relies on $PATH).
+       */
+      ffmpegPath?: string;
+    } = {}
+  ): Promise<{
+    status: string;
+    format: string;
+    sizeBytes: number;
+    base64: string;
+    savedTo?: string;
+    width?: number;
+    height?: number;
+    note?: string;
+    transport?: "tcp-6000" | "rtsps-322";
+  }> {
+    const timeoutMs = options.timeoutMs ?? 8_000;
+    const model = (options.bambuModel ?? "").toLowerCase();
+    // P1/A1 series still use the proprietary TCP-on-6000 framed JPEG path
+    // (per https://github.com/Doridian/OpenBambuAPI/blob/main/video.md).
+    const TCP_CAMERA_MODELS = new Set(["a1", "a1mini", "p1s", "p1p"]);
+    // X1, P2S, AND H2 (H2S/H2D/H2C) all use RTSP on port 322. The
+    // OpenBambuAPI doc only mentions X1/P2S, but the HA bambulab
+    // integration's models.py shows the printer reports its own
+    // `ipcam.rtsp_url` for these models, and Parker (H2S) rejects the
+    // A1/P1 80-byte auth packet on port 6000 (verified 2026-04-27 --
+    // see PROGRESS.md "H2 probe results").
+    const RTSP_MODELS = new Set([
+      "x1", "x1c", "x1carbon", "x1e", "p2s",
+      "h2", "h2s", "h2d", "h2c", "h2dpro",
+    ]);
+
+    if (!model) {
+      throw new Error(
+        "camera_snapshot requires bambu_model or BAMBU_MODEL so it can choose the correct Bambu camera protocol."
+      );
+    }
+
+    if (RTSP_MODELS.has(model)) {
+      const jpeg = await this.fetchRtspCameraFrame(host, token, timeoutMs, options.ffmpegPath);
+      const result: any = {
+        status: "success",
+        format: "image/jpeg",
+        sizeBytes: jpeg.length,
+        base64: jpeg.toString("base64"),
+        transport: "rtsps-322",
+      };
+      if (options.savePath) {
+        const fsSync = await import("node:fs");
+        fsSync.writeFileSync(options.savePath, jpeg);
+        result.savedTo = options.savePath;
+      }
+      return result;
+    }
+
+    if (model && !TCP_CAMERA_MODELS.has(model)) {
+      throw new Error(
+        `camera_snapshot: model "${model}" is not a known Bambu Lab printer model. Supported: ${[...TCP_CAMERA_MODELS, ...RTSP_MODELS].sort().join(", ")}`
+      );
+    }
+
+    const jpeg = await this.fetchTcpCameraFrame(host, token, timeoutMs);
+
+    const result: any = {
+      status: "success",
+      format: "image/jpeg",
+      sizeBytes: jpeg.length,
+      base64: jpeg.toString("base64"),
+      transport: "tcp-6000",
+    };
+
+    if (options.savePath) {
+      const fsSync = await import("node:fs");
+      fsSync.writeFileSync(options.savePath, jpeg);
+      result.savedTo = options.savePath;
+    }
+
+    return result;
+  }
+
+  /**
+   * Pull a single JPEG frame from the printer's RTSP/RTSPS stream using
+   * ffmpeg. Used for X1, P2S, and H2 series.
+   *
+   * URL pattern verified against HA bambulab's models.py example:
+   *   rtsps://bblp:<access_code>@<host>:322/streaming/live/1
+   *
+   * ffmpeg invocation:
+   *   ffmpeg -rtsp_transport tcp -i <url> -frames:v 1 -f image2 -c:v mjpeg -y <out>
+   *
+   * -rtsp_transport tcp avoids UDP NAT/firewall issues. -frames:v 1
+   * makes ffmpeg exit as soon as one frame lands. -y overwrites the temp
+   * file. The Bambu printer presents a self-signed cert; ffmpeg's TLS
+   * layer accepts that by default (no host verification).
+   */
+  private async fetchRtspCameraFrame(
+    host: string,
+    token: string,
+    timeoutMs: number,
+    ffmpegPath?: string
+  ): Promise<Buffer> {
+    const fsSync = await import("node:fs");
+    const os = await import("node:os");
+    const pathMod = await import("node:path");
+    const { spawn } = await import("node:child_process");
+
+    const tmpOut = pathMod.join(os.tmpdir(), `bambu-snap-${Date.now()}-${Math.random().toString(16).slice(2)}.jpg`);
+    const url = `rtsps://bblp:${encodeURIComponent(token)}@${host}:322/streaming/live/1`;
+    const bin = ffmpegPath ?? "ffmpeg";
+    // Note: ffmpeg's `-stimeout` was removed in 8.0 and renamed across the
+    // 5.x/6.x line; we rely on the outer kill timer instead so we don't
+    // have to detect ffmpeg version. -rtsp_transport tcp avoids UDP NAT
+    // headaches; -frames:v 1 makes ffmpeg exit on first frame.
+    const args = [
+      "-rtsp_transport", "tcp",
+      "-i", url,
+      "-frames:v", "1",
+      "-f", "image2",
+      "-c:v", "mjpeg",
+      "-y",
+      "-loglevel", "error",
+      tmpOut,
+    ];
+
+    return new Promise((resolve, reject) => {
+      let stderr = "";
+      const proc = spawn(bin, args, { stdio: ["ignore", "pipe", "pipe"] });
+      const killTimer = setTimeout(() => {
+        try { proc.kill("SIGKILL"); } catch { /* ignore */ }
+        reject(new Error(`camera_snapshot: ffmpeg timed out after ${timeoutMs}ms`));
+      }, timeoutMs + 1000);
+
+      proc.stderr.on("data", (d) => { stderr += d.toString(); });
+      proc.on("error", (err) => {
+        clearTimeout(killTimer);
+        if ((err as any).code === "ENOENT") {
+          reject(new Error(
+            `camera_snapshot: ffmpeg binary not found at "${bin}". Install with \`brew install ffmpeg\` or pass ffmpegPath.`
+          ));
+        } else {
+          reject(err);
+        }
+      });
+      proc.on("close", (code) => {
+        clearTimeout(killTimer);
+        if (code !== 0) {
+          // Strip access code from error messages so we don't leak credentials.
+          const safeStderr = stderr.split(token).join("<token-redacted>").trim();
+          reject(new Error(
+            `camera_snapshot: ffmpeg exited ${code}. stderr: ${safeStderr.slice(-1000)}`
+          ));
+          try { fsSync.unlinkSync(tmpOut); } catch { /* ignore */ }
+          return;
+        }
+        try {
+          const jpeg = fsSync.readFileSync(tmpOut);
+          fsSync.unlinkSync(tmpOut);
+          if (jpeg.length < 4 || jpeg[0] !== 0xff || jpeg[1] !== 0xd8) {
+            reject(new Error("camera_snapshot: ffmpeg produced output that does not start with JPEG SOI"));
+            return;
+          }
+          resolve(jpeg);
+        } catch (err) {
+          reject(err);
+        }
+      });
+    });
+  }
+
+  /**
+   * Open the TLS-on-6000 socket, send the 80-byte auth packet, and read
+   * a single complete JPEG frame. Returns the JPEG bytes.
+   */
+  private async fetchTcpCameraFrame(
+    host: string,
+    token: string,
+    timeoutMs: number
+  ): Promise<Buffer> {
+    const tls = await import("node:tls");
+
+    const auth = Buffer.alloc(80, 0);
+    auth.writeUInt32LE(0x40, 0);    // payload size
+    auth.writeUInt32LE(0x3000, 4);  // type
+    // flags=0, reserved=0 are already zero from Buffer.alloc.
+    auth.write("bblp", 16, 4, "ascii");
+    auth.write(token, 48, Math.min(32, Buffer.byteLength(token, "ascii")), "ascii");
+
+    return new Promise((resolve, reject) => {
+      const chunks: Buffer[] = [];
+      let totalLen = 0;
+      const FRAME_HEADER_BYTES = 16;
+      let payloadSize: number | null = null;
+      let settled = false;
+
+      const finish = (err: Error | null, jpeg?: Buffer) => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(timer);
+        socket.destroy();
+        if (err) reject(err);
+        else if (jpeg) resolve(jpeg);
+        else reject(new Error("camera_snapshot: ended without jpeg payload"));
+      };
+
+      const timer = setTimeout(
+        () => finish(new Error(`camera_snapshot: timed out after ${timeoutMs}ms`)),
+        timeoutMs
+      );
+
+      const socket = tls.connect(
+        {
+          host,
+          port: 6000,
+          rejectUnauthorized: false,
+          // The printer uses TLS for confidentiality but presents a self-signed cert.
+          // Same trust posture as the FTPS path (basic-ftp with rejectUnauthorized: false).
+        },
+        () => {
+          socket.write(auth);
+        }
+      );
+
+      socket.on("data", (data: Buffer) => {
+        chunks.push(data);
+        totalLen += data.length;
+
+        if (payloadSize === null && totalLen >= FRAME_HEADER_BYTES) {
+          const merged = Buffer.concat(chunks, totalLen);
+          payloadSize = merged.readUInt32LE(0);
+          if (payloadSize <= 0 || payloadSize > 5_000_000) {
+            finish(
+              new Error(
+                `camera_snapshot: unreasonable payload size ${payloadSize} from header; auth likely failed.`
+              )
+            );
+            return;
+          }
+          // Reset chunk list to remaining bytes after the header.
+          const remainder = merged.subarray(FRAME_HEADER_BYTES);
+          chunks.length = 0;
+          chunks.push(remainder);
+          totalLen = remainder.length;
+        }
+
+        if (payloadSize !== null && totalLen >= payloadSize) {
+          const merged = Buffer.concat(chunks, totalLen);
+          const jpeg = merged.subarray(0, payloadSize);
+          if (jpeg[0] !== 0xff || jpeg[1] !== 0xd8) {
+            finish(
+              new Error(
+                `camera_snapshot: payload does not start with JPEG SOI (FF D8); got ${jpeg[0].toString(16)} ${jpeg[1].toString(16)}.`
+              )
+            );
+            return;
+          }
+          finish(null, jpeg);
+        }
+      });
+
+      socket.on("error", (err) => finish(err));
+      socket.on("end", () =>
+        finish(
+          new Error("camera_snapshot: connection ended before a full JPEG frame arrived")
+        )
+      );
+    });
+  }
+
+  /**
+   * Delete a single file from the printer's SD card via FTPS.
+   *
+   * Destructive. Caller MUST set confirm=true; otherwise we return without
+   * touching the printer. Path is normalized the same way uploadFile()
+   * normalizes -- if the caller passes a bare filename, we look in cache/.
+   * Path traversal (`..`) is rejected.
+   *
+   * Only the printer-managed directories (cache/, timelapse/, logs/) are
+   * accepted as parents to avoid letting an agent wander further into the
+   * filesystem than expected.
+   */
+  async deleteFile(
+    host: string,
+    _serial: string,
+    token: string,
+    filename: string,
+    confirm: unknown
+  ): Promise<{ status: string; deleted: boolean; remotePath: string; message?: string }> {
+    if (confirm !== true) {
+      return {
+        status: "skipped",
+        deleted: false,
+        remotePath: filename,
+        message:
+          "delete_printer_file requires confirm:true. No FTP request was made.",
+      };
+    }
+
+    const normalizedFileName = filename.replace(/^\/+/, "");
+    if (normalizedFileName.length === 0) {
+      throw new Error("delete_printer_file: filename is required.");
+    }
+    if (
+      normalizedFileName.split("/").some((seg) => seg === "..")
+    ) {
+      throw new Error(
+        `delete_printer_file: path traversal segments are not allowed (got "${filename}").`
+      );
+    }
+
+    const remotePath = normalizedFileName.includes("/")
+      ? normalizedFileName
+      : `cache/${normalizedFileName}`;
+    const topDir = remotePath.split("/")[0];
+    const ALLOWED_DIRS = new Set(["cache", "timelapse", "logs"]);
+    if (!ALLOWED_DIRS.has(topDir)) {
+      throw new Error(
+        `delete_printer_file: refusing to delete outside cache/, timelapse/, logs/. Got "${remotePath}".`
+      );
+    }
+
+    await this.ftpDelete(host, token, `/${remotePath}`);
+
+    return {
+      status: "success",
+      deleted: true,
+      remotePath,
+    };
+  }
+
+  /**
+   * Delete a single remote file via FTPS, using basic-ftp directly so we
+   * get the same TLS-session-ticket handshake as ftpUpload().
+   */
+  private async ftpDelete(host: string, token: string, remotePath: string): Promise<void> {
+    const client = new FTPClient(15_000);
+    try {
+      await client.access({
+        host,
+        port: 990,
+        user: "bblp",
+        password: token,
+        secure: "implicit",
+        secureOptions: ftpsSecureOptions(),
+      });
+      await this.waitForTlsSession(client);
+      const absoluteRemote = remotePath.startsWith("/") ? remotePath : `/${remotePath}`;
+      await client.remove(absoluteRemote);
+    } finally {
+      client.close();
+    }
+  }
+
   /**
    * Upload a file to the printer via FTP using basic-ftp directly.
    * Bypasses bambu-js's sendFile which has a double-path bug (ensureDir CDs
@@ -455,7 +1596,7 @@ export class BambuImplementation {
     localPath: string,
     remotePath: string
   ): Promise<void> {
-    const client = new FTPClient(30_000);
+    const client = new FTPClient(15_000);
     try {
       await client.access({
         host,
@@ -463,8 +1604,14 @@ export class BambuImplementation {
         user: "bblp",
         password: token,
         secure: "implicit",
-        secureOptions: { rejectUnauthorized: false },
+        secureOptions: ftpsSecureOptions(),
       });
+      // With TLS 1.3 the session ticket arrives asynchronously; basic-ftp calls
+      // getSession() when opening the data channel and gets undefined if the
+      // ticket hasn't arrived yet, causing a fresh TLS negotiation that Bambu
+      // printers reject. Wait for the session ticket before proceeding.
+      await this.waitForTlsSession(client);
+      // Use absolute path to avoid CWD side-effects
       const absoluteRemote = remotePath.startsWith("/") ? remotePath : `/${remotePath}`;
       const fileData = await fs.readFile(localPath);
       await client.uploadFrom(Readable.from(fileData), absoluteRemote);
@@ -473,6 +1620,19 @@ export class BambuImplementation {
     }
   }
 
+  private async waitForTlsSession(ftpClient: FTPClient): Promise<void> {
+    const socket = (ftpClient as any).ftp?.socket;
+    if (!socket || typeof socket.getSession !== "function") return;
+    if (socket.getSession()) return;
+    await new Promise<void>((resolve) => {
+      const timeout = setTimeout(resolve, 1000);
+      socket.once("session", () => {
+        clearTimeout(timeout);
+        resolve();
+      });
+    });
+  }
+
   async disconnectAll(): Promise<void> {
     await this.printerStore.disconnectAll();
   }