bambu-printer-mcp 1.1.32 → 1.1.34

package/src/bambu-network-bridge.ts

@@ -1,7 +1,9 @@
 import { spawn, type ChildProcessWithoutNullStreams } from "node:child_process";
+import { createHash } from "node:crypto";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
+import { BAMBU_NETWORK_CERTIFICATES } from "./bambu-network-certs.js";
 
 const FRAME_MAGIC = 0x52424a50;
 const FRAME_HEADER_SIZE = 16;
@@ -10,6 +12,27 @@ const FRAME_TYPE_JSON_RESPONSE = 2;
 const FRAME_TYPE_BINARY_DATA = 3;
 const FRAME_TYPE_LOG = 4;
 const DEFAULT_REQUEST_TIMEOUT_MS = 120_000;
+// bambu_networking.hpp ConnectStatus.
+const LOCAL_CONNECT_STATUS = ["ok", "failed", "lost"];
+// bambu_networking.hpp BAMBU_NETWORK_ERR_PRINT_LP_PUBLISH_MSG_FAILED.
+const LOCAL_PRINT_PUBLISH_FAILED = -4030;
+// bambu_networking.hpp print errors that name a recoverable cause.
+const BAMBU_NETWORK_PRINT_ERRORS: Record<number, string> = {
+  [-4010]: "the file exceeds the 1 GB upload limit",
+  [-4020]: "FTPS upload to the printer failed",
+  [LOCAL_PRINT_PUBLISH_FAILED]: "the networking plug-in could not send the print command to the printer over MQTT",
+};
+
+/** A parenthesized explanation of a plug-in print result, or "" when it names no known cause. */
+export function describeBambuNetworkPrintError(value: number): string {
+  return BAMBU_NETWORK_PRINT_ERRORS[value] ? ` (${BAMBU_NETWORK_PRINT_ERRORS[value]})` : "";
+}
+/** Waits from native/bambu-native-print.cpp, which prints through the same plug-in calls. */
+export const LOCAL_PRINT_TIMING = Object.freeze({ connectTimeoutMs: 30_000, pollMs: 250, settleMs: 3_000, retryWaitMs: 8_000 });
+
+export type LocalPrinter = { devId: string; devIp: string; username: string; password: string; useSsl: boolean };
+export type BridgeJobUpdate = { status: unknown; code: unknown; msg: unknown };
+export type LocalSession = { installCertificate: () => Promise<void>; settle: (ms: number) => Promise<void>; jobUpdates: BridgeJobUpdate[] };
 
 type JsonObject = Record<string, unknown>;
 
@@ -44,17 +67,44 @@ export type BambuNetworkBridgeStatus = {
   lastStderr: string;
   recentLogs: string[];
   runtime: {
-    macosRuntimeDir: string;
-    macosRuntimeDirExists: boolean;
+    /** Folder passed to the plug-in's set_cert_file. */
+    certDir: string;
+    /** Linux only: absolute plug-in library paths passed to FULU's host. */
+    pluginLibraries?: Record<string, string>;
+    /** macOS only: conventional FULU runtime discovery. */
+    macosRuntimeDir?: string;
+    macosRuntimeDirExists?: boolean;
     macosPluginDir?: string;
     macosPluginDirExists?: boolean;
-    macosMissingRuntimeFiles: string[];
-    macosMissingPluginFiles: string[];
+    macosMissingRuntimeFiles?: string[];
+    macosMissingPluginFiles?: string[];
     suggestedMacCommand?: string;
   };
   note?: string;
 };
 
+/**
+ * The plug-in's certificate folder: BAMBU_NETWORK_CERT_DIR when set, else
+ * Bambu's pinned public certificates written to the agent's config folder,
+ * which the host must already be able to read.
+ */
+export function bambuNetworkCertDir(configDir: string, env: NodeJS.ProcessEnv = process.env): string {
+  return trimEnv(env.BAMBU_NETWORK_CERT_DIR) || path.join(configDir, "cert");
+}
+
+export function prepareBambuNetworkCertDir(configDir: string, env: NodeJS.ProcessEnv = process.env): string {
+  const certDir = bambuNetworkCertDir(configDir, env);
+  if (trimEnv(env.BAMBU_NETWORK_CERT_DIR)) return certDir;
+  fs.mkdirSync(certDir, { recursive: true });
+  for (const [name, { sha256, base64 }] of Object.entries(BAMBU_NETWORK_CERTIFICATES)) {
+    const content = Buffer.from(base64, "base64");
+    if (createHash("sha256").update(content).digest("hex") !== sha256) throw new Error(`Bundled Bambu certificate ${name} does not match its pinned SHA-256.`);
+    const target = path.join(certDir, name);
+    if (!fileExists(target) || !fs.readFileSync(target).equals(content)) fs.writeFileSync(target, content);
+  }
+  return certDir;
+}
+
 export function defaultBambuNetworkConfigDir(): string {
   return path.join(os.homedir(), ".config", "bambu-printer-mcp", "bambu-network");
 }
@@ -94,6 +144,75 @@ function collectMissingFiles(baseDir: string | undefined, files: string[]): stri
   return files.filter((file) => !fileExists(path.join(baseDir, file)));
 }
 
+/**
+ * FULU's Linux host opens its network and source libraries by bare name from
+ * its working directory instead of PJARCZAK_BAMBU_PLUGIN_DIR
+ * (FULU-Foundation/OrcaSlicer-bambulab#51), so name them in that directory
+ * unless they are already set. macOS wrappers run the host in a Linux guest
+ * that may not see host paths, so they are left alone.
+ */
+export function linuxPluginLibraryEnv(env: NodeJS.ProcessEnv, platform: NodeJS.Platform): Record<string, string> {
+  const pluginDir = trimEnv(env.PJARCZAK_BAMBU_PLUGIN_DIR);
+  if (platform !== "linux" || !pluginDir) return {};
+  const libraries: Record<string, string> = {};
+  if (!trimEnv(env.PJARCZAK_BAMBU_NETWORK_SO)) libraries.PJARCZAK_BAMBU_NETWORK_SO = path.resolve(pluginDir, "libbambu_networking.so");
+  if (!trimEnv(env.PJARCZAK_BAMBU_SOURCE_SO)) libraries.PJARCZAK_BAMBU_SOURCE_SO = path.resolve(pluginDir, "libBambuSource.so");
+  return libraries;
+}
+
+/** FULU's Linux host exits 101 when it cannot reopen a socket stdout (FULU-Foundation/OrcaSlicer-bambulab#50). */
+const STDOUT_SOCKET_HINT =
+  "Exit code 101 means FULU's Linux host could not reopen its stdout, which fails when stdout is a socket, as Node.js provides " +
+  "(https://github.com/FULU-Foundation/OrcaSlicer-bambulab/issues/50). Launch the host through a wrapper that pipes its output through cat: " +
+  "https://github.com/DMontgomery40/bambu-printer-mcp/blob/main/docs/FULU.md#linux";
+
+/** Conventional FULU macOS runtime locations; the wrapper command is suggested only when it exists. */
+function macosRuntimeHints(): Partial<BambuNetworkBridgeStatus["runtime"]> {
+  const macosRuntimeDir =
+    trimEnv(process.env.PJARCZAK_MAC_RUNTIME_DIR) ||
+    path.join(os.homedir(), "Library", "Application Support", "OrcaSlicer", "macos-bridge", "runtime");
+  const macosPluginDir =
+    trimEnv(process.env.BAMBU_NETWORK_PLUGIN_DIR) ||
+    trimEnv(process.env.PJARCZAK_BAMBU_PLUGIN_DIR) ||
+    resolveFirstDirectoryWithFile([
+      path.join(os.homedir(), "Library", "Application Support", "OrcaSlicer", "plugins"),
+      "/Applications/Orca Studio.app/Contents/MacOS",
+      "/Applications/OrcaSlicer.app/Contents/MacOS",
+      "/Applications/OrcaSlicer-BMCU.app/Contents/MacOS",
+      "/Applications/Orca Studio.app/Contents/Resources",
+      "/Applications/OrcaSlicer.app/Contents/Resources",
+      "/Applications/OrcaSlicer-BMCU.app/Contents/Resources",
+      macosRuntimeDir,
+    ], "pjarczak-bambu-linux-host-wrapper") ||
+    resolveFirstExistingDirectory([macosRuntimeDir]);
+  const runtimeRequiredFiles = [
+    "libbambu_networking.so",
+    "libBambuSource.so",
+    "pjarczak_bambu_linux_host",
+    "pjarczak_bambu_linux_host_abi1",
+    "pjarczak_bambu_linux_host_abi0",
+    "ca-certificates.crt",
+    "slicer_base64.cer",
+  ];
+  const pluginRequiredFiles = [
+    "pjarczak-bambu-linux-host-wrapper",
+    "install_runtime_macos.sh",
+    "verify_runtime_macos.sh",
+  ];
+  const wrapper = macosPluginDir ? path.join(macosPluginDir, "pjarczak-bambu-linux-host-wrapper") : undefined;
+  return {
+    macosRuntimeDir,
+    macosRuntimeDirExists: fileExists(macosRuntimeDir),
+    macosPluginDir,
+    macosPluginDirExists: macosPluginDir ? fileExists(macosPluginDir) : undefined,
+    macosMissingRuntimeFiles: collectMissingFiles(macosRuntimeDir, runtimeRequiredFiles),
+    macosMissingPluginFiles: collectMissingFiles(macosPluginDir, pluginRequiredFiles),
+    suggestedMacCommand: wrapper && fileExists(wrapper)
+      ? `PJARCZAK_BAMBU_PLUGIN_DIR=${shellQuote(macosRuntimeDir)} ${shellQuote(wrapper)} ${shellQuote(path.join(macosRuntimeDir, "pjarczak_bambu_linux_host"))}`
+      : undefined,
+  };
+}
+
 function readFrameJson(payload: Buffer): unknown {
   const text = payload.toString("utf8");
   return text.length > 0 ? JSON.parse(text) : {};
@@ -119,6 +238,12 @@ function bridgeValueAsNumber(value: unknown, method: string): number {
   throw new Error(`FULU BambuNetwork bridge method ${method} did not return a numeric value.`);
 }
 
+function bridgeNumericResult(value: unknown): number | undefined {
+  return typeof value === "object" && value !== null && typeof (value as { value?: unknown }).value === "number"
+    ? (value as { value: number }).value
+    : undefined;
+}
+
 function assertBridgeOk(value: unknown, method: string): void {
   if (isBridgeFailure(value)) {
     const errorText = value.error === undefined ? "unknown bridge error" : String(value.error);
@@ -138,6 +263,13 @@ export class BambuNetworkBridge {
   private lastStderr = "";
   private recentLogs: string[] = [];
   private inferredExpectedNetworkVersion?: string;
+  /** Whether the host accepted the certificate folder and callbacks a LAN session needs. */
+  private localSessionReady = false;
+  /**
+   * The plug-in holds one LAN printer connection and the host one event queue,
+   * so LAN sessions run one at a time, as Bambu Studio connects one printer.
+   */
+  private localSessionTail: Promise<void> = Promise.resolve();
 
   resolveBridgeCommand(override?: string): string {
     return (
@@ -172,47 +304,18 @@ export class BambuNetworkBridge {
     const configDir = this.resolveConfigDir(options.configDir);
     const countryCode = this.resolveCountryCode(options.countryCode);
 
-    const macosRuntimeDir =
-      trimEnv(process.env.PJARCZAK_MAC_RUNTIME_DIR) ||
-      path.join(os.homedir(), "Library", "Application Support", "OrcaSlicer", "macos-bridge", "runtime");
-    const macosPluginDir =
-      trimEnv(process.env.BAMBU_NETWORK_PLUGIN_DIR) ||
-      trimEnv(process.env.PJARCZAK_BAMBU_PLUGIN_DIR) ||
-      resolveFirstDirectoryWithFile([
-        path.join(os.homedir(), "Library", "Application Support", "OrcaSlicer", "plugins"),
-        "/Applications/Orca Studio.app/Contents/MacOS",
-        "/Applications/OrcaSlicer.app/Contents/MacOS",
-        "/Applications/OrcaSlicer-BMCU.app/Contents/MacOS",
-        "/Applications/Orca Studio.app/Contents/Resources",
-        "/Applications/OrcaSlicer.app/Contents/Resources",
-        "/Applications/OrcaSlicer-BMCU.app/Contents/Resources",
-        macosRuntimeDir,
-      ], "pjarczak-bambu-linux-host-wrapper") ||
-      resolveFirstExistingDirectory([macosRuntimeDir]);
-
-    const runtimeRequiredFiles = [
-      "libbambu_networking.so",
-      "libBambuSource.so",
-      "pjarczak_bambu_linux_host",
-      "pjarczak_bambu_linux_host_abi1",
-      "pjarczak_bambu_linux_host_abi0",
-      "ca-certificates.crt",
-      "slicer_base64.cer",
-    ];
-    const pluginRequiredFiles = [
-      "pjarczak-bambu-linux-host-wrapper",
-      "install_runtime_macos.sh",
-      "verify_runtime_macos.sh",
-    ];
-
-    let suggestedMacCommand: string | undefined;
-    if (macosPluginDir) {
-      const wrapper = path.join(macosPluginDir, "pjarczak-bambu-linux-host-wrapper");
-      const host = path.join(macosRuntimeDir, "pjarczak_bambu_linux_host");
-      suggestedMacCommand =
-        `PJARCZAK_BAMBU_PLUGIN_DIR=${shellQuote(macosRuntimeDir)} ` +
-        `${shellQuote(wrapper)} ${shellQuote(host)}`;
+    const runtime: BambuNetworkBridgeStatus["runtime"] = { certDir: bambuNetworkCertDir(configDir) };
+    if (process.platform === "linux") {
+      const pluginLibraries = {
+        ...Object.fromEntries(["PJARCZAK_BAMBU_NETWORK_SO", "PJARCZAK_BAMBU_SOURCE_SO"].flatMap(name => {
+          const value = trimEnv(process.env[name]);
+          return value ? [[name, value]] : [];
+        })),
+        ...linuxPluginLibraryEnv(process.env, process.platform),
+      };
+      if (Object.keys(pluginLibraries).length) runtime.pluginLibraries = pluginLibraries;
     }
+    if (process.platform === "darwin") Object.assign(runtime, macosRuntimeHints());
 
     return {
       configured: command.length > 0,
@@ -225,15 +328,7 @@ export class BambuNetworkBridge {
       agentReady: this.agentId !== undefined,
       lastStderr: this.lastStderr,
       recentLogs: this.recentLogs.slice(-10),
-      runtime: {
-        macosRuntimeDir,
-        macosRuntimeDirExists: fileExists(macosRuntimeDir),
-        macosPluginDir,
-        macosPluginDirExists: macosPluginDir ? fileExists(macosPluginDir) : undefined,
-        macosMissingRuntimeFiles: collectMissingFiles(macosRuntimeDir, runtimeRequiredFiles),
-        macosMissingPluginFiles: collectMissingFiles(macosPluginDir, pluginRequiredFiles),
-        suggestedMacCommand,
-      },
+      runtime,
       note: command
         ? undefined
         : "Set BAMBU_NETWORK_BRIDGE_COMMAND to the FULU OrcaSlicer-bambulab Linux host or macOS/WSL wrapper command.",
@@ -294,13 +389,15 @@ export class BambuNetworkBridge {
     const configDir = this.resolveConfigDir(options.configDir);
     const countryCode = this.resolveCountryCode(options.countryCode);
     const userInfo = trimEnv(options.userInfo) || trimEnv(process.env.BAMBU_NETWORK_USER_INFO) || "";
-    const key = `${command}\n${configDir}\n${countryCode}\n${userInfo}`;
+    const certDir = bambuNetworkCertDir(configDir);
+    const key = `${command}\n${configDir}\n${countryCode}\n${userInfo}\n${certDir}`;
 
     if (this.agentId !== undefined && this.agentKey === key) {
       return { agent: this.agentId, handshake: this.handshake };
     }
 
     fs.mkdirSync(configDir, { recursive: true });
+    prepareBambuNetworkCertDir(configDir);
 
     this.handshake = await this.request("bridge.handshake", {}, options);
     assertBridgeOk(this.handshake, "bridge.handshake");
@@ -310,6 +407,15 @@ export class BambuNetworkBridge {
       this.handshake = await this.request("bridge.handshake", {}, options);
       assertBridgeOk(this.handshake, "bridge.handshake");
     }
+    const loaded = this.handshake as { network_loaded?: unknown; network_status?: unknown } | undefined;
+    if (loaded?.network_loaded === false && typeof loaded.network_status === "string" && /file open failed/i.test(loaded.network_status)) {
+      throw new Error(
+        `FULU BambuNetwork bridge could not open its networking library (${loaded.network_status}). ` +
+        "Set PJARCZAK_BAMBU_PLUGIN_DIR to the directory containing libbambu_networking.so and libBambuSource.so, " +
+        "or set PJARCZAK_BAMBU_NETWORK_SO and PJARCZAK_BAMBU_SOURCE_SO to their absolute paths: " +
+        "https://github.com/DMontgomery40/bambu-printer-mcp/blob/main/docs/FULU.md#linux"
+      );
+    }
 
     const created = await this.request("net.create_agent", { log_dir: configDir, country_code: countryCode }, options);
     assertBridgeOk(created, "net.create_agent");
@@ -323,8 +429,18 @@ export class BambuNetworkBridge {
 
     await withAgent("net.set_config_dir", { config_dir: configDir });
     await withAgent("net.init_log");
+    // Bambu Studio and FULU's GUI set this before starting the agent. The
+    // plug-in verifies a LAN printer with printer.cer from this folder, and
+    // FULU's host crashes on connect_printer when no folder was ever set.
+    const certificates = await withAgent("net.set_cert_file", { folder: certDir, filename: "slicer_base64.cer" }, false);
     await withAgent("net.set_country_code", { country_code: countryCode });
     await withAgent("net.start");
+    // The plug-in runs callbacks through queue_on_main; FULU's host executes
+    // them on its own dispatcher and queues on_local_connect for poll_events.
+    // Cloud jobs and probes do not depend on these, so a host without them
+    // still starts; a LAN session refuses before connecting instead.
+    const callbacks = [await withAgent("net.set_queue_on_main_fn", {}, false), await withAgent("net.set_on_local_connect_fn", {}, false)];
+    const localSessionReady = ![certificates, ...callbacks].some(isBridgeFailure);
     await withAgent("net.connect_server", {}, false);
 
     if (userInfo) {
@@ -333,9 +449,160 @@ export class BambuNetworkBridge {
 
     this.agentId = agent;
     this.agentKey = key;
+    this.localSessionReady = localSessionReady;
     return { agent, handshake: this.handshake };
   }
 
+  /**
+   * Open the plug-in's own LAN MQTT session with a printer, in the order Bambu
+   * Studio and native/bambu-native-print.cpp use: connect, install the
+   * printer's application certificate (again on each "wait_info"), wait for
+   * the local connection, request the printer's state and let the key
+   * exchange settle. Without the certificate the plug-in uploads a job but
+   * cannot encrypt or publish project_file (-4030). The session is closed
+   * after `run`, so printer reports stop accumulating in the host's queue.
+   */
+  async withLocalSession<T>(
+    printer: LocalPrinter,
+    options: BambuNetworkBridgeOptions,
+    assertActive: () => void,
+    timing: typeof LOCAL_PRINT_TIMING,
+    run: (session: LocalSession) => Promise<T>
+  ): Promise<T> {
+    const previous = this.localSessionTail;
+    let release!: () => void;
+    this.localSessionTail = new Promise<void>(resolve => { release = resolve; });
+    try {
+      await previous;
+      return await this.runLocalSession(printer, options, assertActive, timing, run);
+    } finally {
+      release();
+    }
+  }
+
+  private async runLocalSession<T>(
+    printer: LocalPrinter,
+    options: BambuNetworkBridgeOptions,
+    assertActive: () => void,
+    timing: typeof LOCAL_PRINT_TIMING,
+    run: (session: LocalSession) => Promise<T>
+  ): Promise<T> {
+    const jobUpdates: BridgeJobUpdate[] = [];
+    const installCertificate = async () => {
+      await this.callWithAgent("net.install_device_cert", { dev_id: printer.devId, lan_only: true }, options);
+      await this.callWithAgent("net.update_cert", {}, options);
+    };
+    // Drain queued events: collect job reports, return this printer's
+    // local-connect statuses, and reinstall the certificate on "wait_info".
+    const pump = async (): Promise<unknown[]> => {
+      const polled = await this.request("bridge.poll_events", { limit: 1024 }, options) as { events?: unknown };
+      assertBridgeOk(polled, "bridge.poll_events");
+      const statuses: unknown[] = [];
+      let waitInfo = false;
+      for (const event of Array.isArray(polled?.events) ? polled.events : []) {
+        if (event?.name === "job.update_status") jobUpdates.push({ status: event.payload?.status, code: event.payload?.code, msg: event.payload?.msg });
+        const eventDev = event?.payload?.dev_id;
+        if (eventDev !== undefined && eventDev !== "" && eventDev !== printer.devId) continue;
+        if (event?.name === "on_local_connect") statuses.push(event.payload.status);
+        if ((event?.name === "on_local_message" || event?.name === "on_message") && event.payload?.msg === "wait_info") waitInfo = true;
+      }
+      if (waitInfo) await installCertificate();
+      return statuses;
+    };
+    const settle = async (ms: number) => {
+      for (const deadline = Date.now() + ms; Date.now() < deadline;) {
+        assertActive();
+        await pump();
+        await new Promise(resolve => setTimeout(resolve, timing.pollMs));
+      }
+    };
+
+    await this.ensureAgent(options);
+    assertActive();
+    if (!this.localSessionReady) {
+      throw new Error("FULU BambuNetwork bridge host did not accept the certificate folder or local-connection callbacks a LAN print needs. Update the FULU runtime; no print command was sent.");
+    }
+    for (const callback of ["net.set_on_printer_connected_fn", "net.set_on_local_message_fn"]) {
+      assertBridgeOk(await this.callWithAgent(callback, {}, options), callback);
+    }
+    await this.callWithAgent("net.update_cert", {}, options);
+    await pump();
+    assertActive();
+    const requested = await this.callWithAgent("net.connect_printer", {
+      dev_id: printer.devId, dev_ip: printer.devIp, username: printer.username, password: printer.password, use_ssl: printer.useSsl,
+    }, options);
+    assertBridgeOk(requested, "net.connect_printer");
+    const connectResult = bridgeValueAsNumber(requested, "net.connect_printer");
+    if (connectResult !== 0) {
+      throw new Error(`FULU BambuNetwork bridge could not start a LAN connection to printer ${printer.devId} (net.connect_printer returned ${connectResult}). No print command was sent.`);
+    }
+
+    let connected = false;
+    try {
+      await installCertificate();
+      const deadline = Date.now() + timing.connectTimeoutMs;
+      while (!connected) {
+        assertActive();
+        for (const status of await pump()) {
+          if (status === 0) {
+            connected = true;
+            continue;
+          }
+          const reason = typeof status === "number" && LOCAL_CONNECT_STATUS[status] ? LOCAL_CONNECT_STATUS[status] : `reported status ${status}`;
+          throw new Error(`FULU BambuNetwork bridge LAN connection to printer ${printer.devId} at ${printer.devIp} ${reason}. Check the printer IP, LAN access code and LAN mode. No print command was sent.`);
+        }
+        if (connected) break;
+        if (Date.now() >= deadline) {
+          throw new Error(`FULU BambuNetwork bridge did not connect to printer ${printer.devId} at ${printer.devIp} over LAN within ${Math.round(timing.connectTimeoutMs / 1000)} s. No print command was sent.`);
+        }
+        await new Promise(resolve => setTimeout(resolve, timing.pollMs));
+      }
+      // Bambu Studio asks a newly connected printer for its full state and
+      // security metadata before building the encrypted project_file message.
+      for (const [message, qos] of [
+        [{ pushing: { sequence_id: "1", command: "pushall", version: 1, push_target: 1 } }, 0],
+        [{ info: { sequence_id: "2", command: "get_version" } }, 1],
+        [{ system: { sequence_id: "3", command: "get_access_code" } }, 0],
+      ] as const) {
+        await this.callWithAgent("net.send_message_to_printer", { dev_id: printer.devId, msg: JSON.stringify(message), qos, flag: 0 }, options);
+      }
+      await settle(timing.settleMs);
+      const result = await run({ installCertificate, settle, jobUpdates });
+      await pump();
+      return result;
+    } finally {
+      const cleanupFailed = (step: string) => (error: unknown) => console.error(`FULU BambuNetwork bridge ${step} after the LAN session failed: ${error instanceof Error ? error.message : error}`);
+      if (connected) await this.callWithAgent("net.disconnect_printer", {}, options).catch(cleanupFailed("disconnect"));
+      await this.request("bridge.poll_events", { limit: 4096 }, options).catch(cleanupFailed("event cleanup"));
+    }
+  }
+
+  /**
+   * Run a LAN print method in a local session. A synchronous -4030 means the
+   * plug-in published nothing, so it is retried once after the certificate
+   * exchange, as the native helper does; each attempt passes the caller's
+   * fresh pre-dispatch checks.
+   */
+  async startLocalPrint(
+    printer: LocalPrinter,
+    method: string,
+    payload: JsonObject,
+    options: BambuNetworkBridgeOptions = {},
+    assertActive: () => void = () => {},
+    timing: typeof LOCAL_PRINT_TIMING = LOCAL_PRINT_TIMING
+  ): Promise<{ result: unknown; jobUpdates: BridgeJobUpdate[] }> {
+    return await this.withLocalSession(printer, options, assertActive, timing, async session => {
+      let result = await this.callWithAgent(method, payload, options);
+      if (bridgeNumericResult(result) === LOCAL_PRINT_PUBLISH_FAILED) {
+        await session.settle(timing.retryWaitMs);
+        await session.installCertificate();
+        await session.settle(timing.settleMs);
+        result = await this.callWithAgent(method, payload, options);
+      }
+      return { result, jobUpdates: session.jobUpdates };
+    });
+  }
+
   async callWithAgent(
     method: string,
     payload: JsonObject = {},
@@ -401,6 +668,7 @@ export class BambuNetworkBridge {
     this.child = spawn(shell, shellArgs, {
       env: {
         ...process.env,
+        ...linuxPluginLibraryEnv(process.env, process.platform),
         PJARCZAK_BAMBU_COUNTRY_CODE: this.resolveCountryCode(),
         PJARCZAK_EXPECTED_BAMBU_NETWORK_VERSION:
           this.inferredExpectedNetworkVersion ||
@@ -424,7 +692,8 @@ export class BambuNetworkBridge {
         return;
       }
       this.rejectAllPending(
-        new Error(`FULU BambuNetwork bridge exited (code=${code ?? "null"}, signal=${signal ?? "null"}). ${this.lastStderr}`.trim())
+        new Error(`FULU BambuNetwork bridge exited (code=${code ?? "null"}, signal=${signal ?? "null"}). ${this.lastStderr}`.trim() +
+          (code === 101 ? ` ${STDOUT_SOCKET_HINT}` : ""))
       );
       this.child = undefined;
       this.commandLine = undefined;

package/src/bambu-network-certs.ts

@@ -0,0 +1,154 @@
+/**
+ * Bambu's public certificates from Bambu Studio v02.08.02.61 resources/cert,
+ * the folder Bambu Studio and FULU's GUI pass to the networking plug-in's
+ * set_cert_file. printer.cer holds the BBL CA roots that sign each printer's
+ * LAN MQTT certificate; slicer_base64.cer is the cloud certificate. FULU's
+ * standalone Linux host runtime ships only slicer_base64.cer, so its plug-in
+ * cannot verify a LAN printer without these. Exact bytes, pinned by SHA-256
+ * (the same pins as scripts/setup-bambu-native.mjs).
+ */
+export const BAMBU_NETWORK_CERTIFICATES: Readonly<Record<"printer.cer" | "slicer_base64.cer", { sha256: string; base64: string }>> = Object.freeze({
+  "printer.cer": {
+    sha256: "36f2bcee347ec7adce719b5fd350099591a4d3d0ec4e039c7019890d78e152a0",
+    base64:
+      "LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUZmekNDQTJlZ0F3SUJBZ0lVWHR6UjZ0UmlML1JIQlJYT295RlUwK1hybGlv" +
+      "d0RRWUpLb1pJaHZjTkFRRUwKQlFBd1JqRUxNQWtHQTFVRUJoTUNRMDR4SVRBZkJnTlZCQW9NR0VKQ1RDQlVaV05vYm05c2IyZHBa" +
+      "WE1nUTI4dQpJRXgwWkRFVU1CSUdBMVVFQXd3TFFrSk1JRU5CTWlCU1UwRXdJQmNOTWpVd05qRTNNREV6T0RBNFdoZ1BNakExCk1E" +
+      "QTJNVGN3TVRNNE1EaGFNRVl4Q3pBSkJnTlZCQVlUQWtOT01TRXdId1lEVlFRS0RCaENRa3dnVkdWamFHNXYKYkc5bmFXVnpJRU52" +
+      "TGlCTWRHUXhGREFTQmdOVkJBTU1DMEpDVENCRFFUSWdVbE5CTUlJQ0lqQU5CZ2txaGtpRwo5dzBCQVFFRkFBT0NBZzhBTUlJQ0Nn" +
+      "S0NBZ0VBbzQ1NTBHNGM0MmdUS3pRcWl4d0tUMDg5Uml6SWRacHlPY0dBCjY3OXJQYU9kV3NNcVZ3bllQUDJGcE1xWEtrakZiZWRF" +
+      "K1NwR2xvaTJOS0N1aVBOVlJicTlQSE9PWndUczdZTG8KYk93ZjUzRkp1TzZ2UkZwekZmWDF0bGM5emxGcUp2Wm5ZTzlOZ0hwTXlz" +
+      "aWRvY1djZ3JETi9TSUR5d2dQQjVDVgpiWWczVnZ6dWE5ZndaeDllNUtUOXhkNUlwVHFkVHJXUzQ3alFPVktMaGRRQ2JKRklsTXJi" +
+      "bE93TEJBeCtmSG9rCndxaDZ0a0k2S3R1eXlqdzhEeXNlYmkxbmRXakt0WjJtVzQ3cjh4Wi9KK3ozRVpxY3lKTVk2TVJ0eC96YjFq" +
+      "QkYKdUh0a2pyYjVLdjFETXpTS2xrYU5KSWJ2QytNaytoSTk3VytTakxTUnVJZEM3K29KVXpXYVN6Z3U5Y2pYQ1ZmbQpxOHQ0SUwv" +
+      "MzVoUDY5UEs5NUxnTGVjdElyUDk2Q1lBVC9hVk1HMTlGckZXMFFXRXlmVCtrekc0amt1bWZQYkhxClkybk5rRU4wK3RqajNoNFdk" +
+      "enJXZ1FFb2pLL2xoZmNSRlZrdHM3NCthWm9NcFFQK3ZtTDE3Q0ttU3pYazVvL2UKSzIxeGd4SmR6TWJkenRmVHBpYmlYazBhYmZP" +
+      "cE4rMVZSKzNOWWErYlJPQUtOeUdhUmVFR3N5VzJiamNqTng1MQo1VnF6ajNTVnhoTVNwNXZmRjlFNEExakU5OU0vbDlqUURNNlJ6" +
+      "a1QwbE1jY0dBZDV0VVNkTnZEbHJxdFFhUWlLCnYvWnNYUGdYTFRXZk9wdmFMTkVnd2RNZ1pNdWhqcGt3dkFaeW9ZZmVGOWt5eWRq" +
+      "RGg3YnZyWC8vY3ovVm9wQVUKbHhVdFF0TUNBd0VBQWFOak1HRXdIUVlEVlIwT0JCWUVGTlZKZ1FhZDFzTlROMGp4Vmt3YkovWE0x" +
+      "YW4xTUI4RwpBMVVkSXdRWU1CYUFGTlZKZ1FhZDFzTlROMGp4Vmt3YkovWE0xYW4xTUE4R0ExVWRFd0VCL3dRRk1BTUJBZjh3CkRn" +
+      "WURWUjBQQVFIL0JBUURBZ0VHTUEwR0NTcUdTSWIzRFFFQkN3VUFBNElDQVFCRlpES01KZnAvTjRnQmVGSGgKTWlGZWhhVXlNUzZl" +
+      "OW16clRmTUxKTEpvajZKb3BhOVY5aklmY0NFQkdadVJUaHFGY0FUVitVZEZIU0lOcFVjSAp1cGNDWW5helRSQzRkbjFobnhuUTFv" +
+      "alFjSHhkR3A5eEd3L1ljbEFLRDk3ZDhiUFNoZkJNVDF0bzl6Yk1LN1Q1Ckw4emdxZzAxWUlPS2pRazBIY2QwKzBpVXI2bTh6UTVQ" +
+      "OFJsM1FYcUF5ZVdncW1ZUXJyalRXd1BzZ2RmSE5YS1gKdkRyeDcvY3FyeTVsS1U4MDJoVXBsS01CeGVsdjRXODQwN1l0ajFsZkpP" +
+      "d3Z4cXh4c0ZVNWpTd2NVRzN6bzJ2awpRdGpSczhtNUJLdXA1SzFPUFlra1B1N0xkODlYMFhwVTA3My9kTkRHMTF1eGIxZURLcnRO" +
+      "UDZ2WnVaak5FMlBxCjhIQ29JMUV0UCtJdHlxdFVNdkhpNloyenNtbEEyNWJyb1Zpb2VVS3hqbEllY3BROUpSL0ZoRHU5Q1dORi9u" +
+      "RFcKTFNPUk5hTU16Z3NNU3pJK0hDaVVocU4rcU1JdlZQNnJ6R1RKendxei9sYzVMZitaUENuR0E5V0pUVDR1UEloZgp1ZmJabW5V" +
+      "SjM1V3VXS0h4b3ZEc3FCaDg4elE5c1orZWk0SGk0dlZ6T2hVZ2ZHM2FMb1NRRVlxUm9xYWJvQU5oCndDd3p5dVcyUnY1NHU1UVNC" +
+      "YmQ2R3gxT3B2c1dtTFBXZDIvaUwya0lTbDV3Zm1MR1Z5ZHZTSmErcmJPZnVBeTcKeWNWUWFjVkRRQ0FuYmhvVnJReTcrNDU0UXNL" +
+      "U1czWlY2QmN5UnJvcmV3Q3lDWWdkN255eGZseEhaVEJFeWtYWApoYUdOZS9LRk52SkJNT0l1SVV6a25SUm1pUT09Ci0tLS0tRU5E" +
+      "IENFUlRJRklDQVRFLS0tLS0KLS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUI4ekNDQVptZ0F3SUJBZ0lVZTYxakdRNFJ6" +
+      "SUM4aytzTnVxYkkvQ2FOcVBJd0NnWUlLb1pJemowRUF3SXcKUmpFTE1Ba0dBMVVFQmhNQ1EwNHhJVEFmQmdOVkJBb01HRUpDVENC" +
+      "VVpXTm9ibTlzYjJkcFpYTWdRMjh1SUV4MApaREVVTUJJR0ExVUVBd3dMUWtKTUlFTkJNaUJGUTBNd0lCY05NalV3TmpFM01ERXpP" +
+      "RE0xV2hnUE1qQTFNREEyCk1UY3dNVE00TXpWYU1FWXhDekFKQmdOVkJBWVRBa05PTVNFd0h3WURWUVFLREJoQ1Frd2dWR1ZqYUc1" +
+      "dmJHOW4KYVdWeklFTnZMaUJNZEdReEZEQVNCZ05WQkFNTUMwSkNUQ0JEUVRJZ1JVTkRNRmt3RXdZSEtvWkl6ajBDQVFZSQpLb1pJ" +
+      "emowREFRY0RRZ0FFcEtURjd3UlN0eTREWHBHSnpnQ1B3Umg4Z2hMbHhVQzNxSmJ5RWdMcVR2SmdiaXdZCkFQUEhLN2tWYlZtZXJr" +
+      "cWhIT1Q0UWVXUmxURzNkT1FHTEEyVnBhTmpNR0V3SFFZRFZSME9CQllFRkt1UnBzalkKUkVPeUlLSDdId09FNmpoR0JkNk5NQjhH" +
+      "QTFVZEl3UVlNQmFBRkt1UnBzallSRU95SUtIN0h3T0U2amhHQmQ2TgpNQThHQTFVZEV3RUIvd1FGTUFNQkFmOHdEZ1lEVlIwUEFR" +
+      "SC9CQVFEQWdFR01Bb0dDQ3FHU000OUJBTUNBMGdBCk1FVUNJRXJCaVVtM1ZkdFAzcno0a2I4YUxwSTVwK0J6TDdNOXZFbEJHV1dK" +
+      "eHBITUFpRUEzcjV0SldWR3d1eGkKWUNyQjFjNDBLWUZSRnlhaEdyaE9KWkFqL1loUmRuVT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUt" +
+      "LS0tLQotLS0tLUJFR0lOIENFUlRJRklDQVRFLS0tLS0KTUlJRWVUQ0NBMkdnQXdJQkFnSVVPcStsTklhQzJ4c3N3a0ZxajVKUHlW" +
+      "Qmw0NWN3RFFZSktvWklodmNOQVFFTApCUUF3UWpFTE1Ba0dBMVVFQmhNQ1EwNHhJakFnQmdOVkJBb01HVUpDVENCVVpXTm9ibTlz" +
+      "YjJkcFpYTWdRMjh1CkxDQk1kR1F4RHpBTkJnTlZCQU1NQmtKQ1RDQkRRVEFlRncweU5UQTJNVGN3TWpBeE1qZGFGdzB6TlRBMk1U" +
+      "VXcKTWpBeE1qZGFNRVl4Q3pBSkJnTlZCQVlUQWtOT01TRXdId1lEVlFRS0RCaENRa3dnVkdWamFHNXZiRzluYVdWegpJRU52TGlC" +
+      "TWRHUXhGREFTQmdOVkJBTU1DMEpDVENCRFFUSWdVbE5CTUlJQ0lqQU5CZ2txaGtpRzl3MEJBUUVGCkFBT0NBZzhBTUlJQ0NnS0NB" +
+      "Z0VBbzQ1NTBHNGM0MmdUS3pRcWl4d0tUMDg5Uml6SWRacHlPY0dBNjc5clBhT2QKV3NNcVZ3bllQUDJGcE1xWEtrakZiZWRFK1Nw" +
+      "R2xvaTJOS0N1aVBOVlJicTlQSE9PWndUczdZTG9iT3dmNTNGSgp1TzZ2UkZwekZmWDF0bGM5emxGcUp2Wm5ZTzlOZ0hwTXlzaWRv" +
+      "Y1djZ3JETi9TSUR5d2dQQjVDVmJZZzNWdnp1CmE5ZndaeDllNUtUOXhkNUlwVHFkVHJXUzQ3alFPVktMaGRRQ2JKRklsTXJibE93" +
+      "TEJBeCtmSG9rd3FoNnRrSTYKS3R1eXlqdzhEeXNlYmkxbmRXakt0WjJtVzQ3cjh4Wi9KK3ozRVpxY3lKTVk2TVJ0eC96YjFqQkZ1" +
+      "SHRranJiNQpLdjFETXpTS2xrYU5KSWJ2QytNaytoSTk3VytTakxTUnVJZEM3K29KVXpXYVN6Z3U5Y2pYQ1ZmbXE4dDRJTC8zCjVo" +
+      "UDY5UEs5NUxnTGVjdElyUDk2Q1lBVC9hVk1HMTlGckZXMFFXRXlmVCtrekc0amt1bWZQYkhxWTJuTmtFTjAKK3RqajNoNFdkenJX" +
+      "Z1FFb2pLL2xoZmNSRlZrdHM3NCthWm9NcFFQK3ZtTDE3Q0ttU3pYazVvL2VLMjF4Z3hKZAp6TWJkenRmVHBpYmlYazBhYmZPcE4r" +
+      "MVZSKzNOWWErYlJPQUtOeUdhUmVFR3N5VzJiamNqTng1MTVWcXpqM1NWCnhoTVNwNXZmRjlFNEExakU5OU0vbDlqUURNNlJ6a1Qw" +
+      "bE1jY0dBZDV0VVNkTnZEbHJxdFFhUWlLdi9ac1hQZ1gKTFRXZk9wdmFMTkVnd2RNZ1pNdWhqcGt3dkFaeW9ZZmVGOWt5eWRqRGg3" +
+      "YnZyWC8vY3ovVm9wQVVseFV0UXRNQwpBd0VBQWFOak1HRXdEd1lEVlIwVEFRSC9CQVV3QXdFQi96QU9CZ05WSFE4QkFmOEVCQU1D" +
+      "QVFZd0hRWURWUjBPCkJCWUVGTlZKZ1FhZDFzTlROMGp4Vmt3YkovWE0xYW4xTUI4R0ExVWRJd1FZTUJhQUZJODBRbWpjWjA2UHhD" +
+      "S2UKeFh4SjVhdmRSTDRlTUEwR0NTcUdTSWIzRFFFQkN3VUFBNElCQVFBdlM4dHlmYWdhR3NGZjlZbmNBMmtvL05hNQo5QlZGKzhU" +
+      "bFVvKzMyb3pud0lWcFMxQWhTZ0xQNnJOVmVrWE5GS2J1UDVodHVkTFExN1pSQkpJL1VNVnlZRURxCklON3h2N1pqK3pKd0Y2VzZo" +
+      "YVlyamIyVms4aWd3MVh2TlVMWmZ2Vk5OS0lrdkpVaVZxRXNsV3JDK2s3NGNyay8KV3Y4Q2hWZit6cXZmSU42TFYzZXNhR1JMMDJK" +
+      "M0FwclFHYjdERGhSMUVlZlFNU2NEa05wR0pNVW12Q21ma25ybAppSzhxZ3ZRTjFTV083SlJmNmZOS0hzTjFaUXZ5UDBwZ0xXeHBU" +
+      "M1YwLzAvV3R0cVgzY01HdUpGK2pWVXptL05oCnhZaEZld0c4dmMzS3pUam53UUFwTUE2Q1c1NTRGT0pXRnlPRDJqbjV5SkxUM1Z1" +
+      "ZSthWURRUnA0YktNeAotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCi0tLS0tQkVHSU4gQ0VSVElGSUNBVEUtLS0tLQpNSUlDcmpD" +
+      "Q0FaYWdBd0lCQWdJVU9xK2xOSWFDMnhzc3drRnFqNUpQeVZCbDQ1Z3dEUVlKS29aSWh2Y05BUUVMCkJRQXdRakVMTUFrR0ExVUVC" +
+      "aE1DUTA0eElqQWdCZ05WQkFvTUdVSkNUQ0JVWldOb2JtOXNiMmRwWlhNZ1EyOHUKTENCTWRHUXhEekFOQmdOVkJBTU1Ca0pDVENC" +
+      "RFFUQWVGdzB5TlRBMk1UY3dNakF4TkRkYUZ3MHpOVEEyTVRVdwpNakF4TkRkYU1FWXhDekFKQmdOVkJBWVRBa05PTVNFd0h3WURW" +
+      "UVFLREJoQ1Frd2dWR1ZqYUc1dmJHOW5hV1Z6CklFTnZMaUJNZEdReEZEQVNCZ05WQkFNTUMwSkNUQ0JEUVRJZ1JVTkRNRmt3RXdZ" +
+      "SEtvWkl6ajBDQVFZSUtvWkkKemowREFRY0RRZ0FFcEtURjd3UlN0eTREWHBHSnpnQ1B3Umg4Z2hMbHhVQzNxSmJ5RWdMcVR2Smdi" +
+      "aXdZQVBQSApLN2tWYlZtZXJrcWhIT1Q0UWVXUmxURzNkT1FHTEEyVnBhTmpNR0V3RHdZRFZSMFRBUUgvQkFVd0F3RUIvekFPCkJn" +
+      "TlZIUThCQWY4RUJBTUNBUVl3SFFZRFZSME9CQllFRkt1UnBzallSRU95SUtIN0h3T0U2amhHQmQ2Tk1COEcKQTFVZEl3UVlNQmFB" +
+      "Rkk4MFFtamNaMDZQeENLZXhYeEo1YXZkUkw0ZU1BMEdDU3FHU0liM0RRRUJDd1VBQTRJQgpBUUNnNlBqVVNTWlYrNGJ2ZWpjVk12" +
+      "Z1htS3pmRDk1b3NXbjBjdG5vTUJ4UERhK20rR2crQmNMVDJJbEZBZTNFCktZTXZ1NFQyOTVXUWM5MnJqS1lxVzZjaXJGcHBuZzl1" +
+      "RUZXMm1aTGlteGFTbXV0c1RmdEUzc2JNVk1KL1NMWU4KUFY3VEZ2Nm1jQlNJRldYd21CT0lwYmg0QlVjVmZPTlR2ZFNmSXFmeUFW" +
+      "eHNxNHh6YzJuYzZoUEJwQW0yMUF5agpUb0MxZXYvVGJESjhWbGxGWmlFVm1XV2xJUDNhTnpBbThTMm1PcHhQQjJXbmFuYVpIU3J2" +
+      "WExGaHN0eXp3cmpECnlPMS9pc09aN3d0cjdyY3VUSmRFdnZ2Q2ltT1psa2ZSaGFEb1Rldzl0UTBFMkZWcHp6U2ludzAycW1RMXhJ" +
+      "RTkKNS9INVp6SlNQa3BlQUhXRVBuS2t4ZzB2Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0KLS0tLS1CRUdJTiBDRVJUSUZJQ0FU" +
+      "RS0tLS0tCk1JSURaVENDQWsyZ0F3SUJBZ0lVVjFGY2t3WEVseWVrMW9uRm5ROWtMN0JrNE44d0RRWUpLb1pJaHZjTkFRRUwKQlFB" +
+      "d1FqRUxNQWtHQTFVRUJoTUNRMDR4SWpBZ0JnTlZCQW9NR1VKQ1RDQlVaV05vYm05c2IyZHBaWE1nUTI4dQpMQ0JNZEdReER6QU5C" +
+      "Z05WQkFNTUJrSkNUQ0JEUVRBZUZ3MHlNakEwTURRd016UXlNVEZhRncwek1qQTBNREV3Ck16UXlNVEZhTUVJeEN6QUpCZ05WQkFZ" +
+      "VEFrTk9NU0l3SUFZRFZRUUtEQmxDUWt3Z1ZHVmphRzV2Ykc5bmFXVnoKSUVOdkxpd2dUSFJrTVE4d0RRWURWUVFEREFaQ1Frd2dR" +
+      "MEV3Z2dFaU1BMEdDU3FHU0liM0RRRUJBUVVBQTRJQgpEd0F3Z2dFS0FvSUJBUURMM3BuRGR4R09rNVo2dnVnaVQ0ZHBNMGp1KzNY" +
+      "YXR4ejA5VVk3bWJqNHRrSWRieTRICm9lRWRpWVNaamM1TEpuZ0p1Q0h3dEViQkp0MUJyaVJkU1ZyRjZNOUQyVWFCRHlhbUVvMGR4" +
+      "d1NhVnhaaURWV0MKZWVDUGRFTHBGWmRFaFNOVGFUNE83emd2Y25Gc2ZITWEvMHZNQWt2RTdpMHFwM21qRXpZTGZ6NjBheGNEb0pM" +
+      "awpwN242eEtYSStjSmJBNElsVG9GanBTbGRQbUMreW5PbzdZQU9zWHQ3QVlLWTZHbHowQndVVnpTSnhVKy8rVkZ5Ci9Rcm1ZR053" +
+      "bHJRdGRSRUhlUmkwU05LMzJ4MStiT25kZkpQMHNvanVJckRqS3NkQ0x5ZTVDU1pJdnFuYm93d1cKMWpSd1pnVEJSMjlacDJuekNv" +
+      "eEpZY1U5VFNRcC80S1p1V05WQWdNQkFBR2pVekJSTUIwR0ExVWREZ1FXQkJTUApORUpvM0dkT2o4UWluc1Y4U2VXcjNVUytIakFm" +
+      "QmdOVkhTTUVHREFXZ0JTUE5FSm8zR2RPajhRaW5zVjhTZVdyCjNVUytIakFQQmdOVkhSTUJBZjhFQlRBREFRSC9NQTBHQ1NxR1NJ" +
+      "YjNEUUVCQ3dVQUE0SUJBUUFCbEJJVDVaZUcKZmdjSzFMT2gxQ045c1R6eE1DTGJ0VFBGRjFOR0dBMTNtQXB1NmoxaDVZRUxiU0tj" +
+      "VXFmWHpNblZlQWIwNkh0dQozQ29Db2Urd2o3TE9OVEZPKyt2Qm0yL2lmNkp0L0RVdzFDQUVjTnlxZWg2RVMwTlg4TEpSVlNlMHFk" +
+      "VHhQSnVBCkJkT29vOTZpWDg5clJQb3hlZWQxY3BxNWhad2Jla2EzK0NKR1Y3Nml0V3AzNVVwNXJtbVVxcmx5UU9yL1dheDYKaXRv" +
+      "c0l6RzBNZmhnVXpVNTFBMlAvaFNuRDNORE1Ydit3VVkvQXZxZ0lMN3U3ZmJES25rdTFHekVLSWtmSDhobQpSczZkOFNDVTg5eHly" +
+      "d3pRMFBSODUzaXJIYXMzV3JIVnFhYjNQK3FOd1IwWWlyTDBRazdYdC9xM08xZ3JpTmcyCkJsYmpnM29icEhvOQotLS0tLUVORCBD" +
+      "RVJUSUZJQ0FURS0tLS0t",
+  },
+  "slicer_base64.cer": {
+    sha256: "f504dc1c37bc9741b7a95198914e67f3f6f1d917b1e45eaa14b9e84eb7b51ec8",
+    base64:
+      "LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUY3ekNDQk5lZ0F3SUJBZ0lRQm5XSDBPTmY1dE1XNlZyNXhtWXhEREFOQmdr" +
+      "cWhraUc5dzBCQVFzRkFEQloKTVFzd0NRWURWUVFHRXdKVlV6RVZNQk1HQTFVRUNoTU1SR2xuYVVObGNuUWdTVzVqTVRNd01RWURW" +
+      "UVFERXlwUwpZWEJwWkZOVFRDQlVURk1nUkZZZ1VsTkJJRTFwZUdWa0lGTklRVEkxTmlBeU1ESXdJRU5CTFRFd0hoY05NakV3Ck56" +
+      "RXpNREF3TURBd1doY05Nakl3TnpFek1qTTFPVFU1V2pBWk1SY3dGUVlEVlFRRERBNHFMbUpoYldKMWJHRmkKTG1OdmJUQ0NBU0l3" +
+      "RFFZSktvWklodmNOQVFFQkJRQURnZ0VQQURDQ0FRb0NnZ0VCQUt4c3pMZGpBS21TMkpscQpaNTI4WkVsM0VxWkd2MWp1UnZ2TTR4" +
+      "cCtvcGVNWENzMWpLc2IxV2ZpZUZBL0tqWEJ6NG51ZVpzRkxhYnB5aXBBCjlvUFBkOG9HajhzWjRoOENJYk1iejJHeG1VVktUb1Ra" +
+      "OWYzd1lwMHNXRFVQVHhoWEd3L0p6cXk2bWN3cWhvQ08KUWJWck5hUUNxUXVOcElLTWx2UFg1YUsxQTBRL0FzZE4ybXBWdFNHMENw" +
+      "cGNSZjVaRTQyelZGUGcxaWVReGdpSAp3NkxXTGlaM0NHcHRueVAxc0JsSUx6VTQ4cXJoMUQwN1ptdUVITDA1cEo3ZFFBc2hzK0Jr" +
+      "bFJ6eXpUZ2lVKzFlCitRZVBGYXExRG9zekZlMndMS3Z1UjhPL1JaOGZGS0pzTnlodE80b21jMklTR3ZSb3lrN3FLU3JGUU9jNG1l" +
+      "a1kKMDJzSUZHVUNBd0VBQWFPQ0F2RXdnZ0x0TUI4R0ExVWRJd1FZTUJhQUZLU041YjU4ZWVSd0kyMHVLVFN0STFqYwo5VEYvTUIw" +
+      "R0ExVWREZ1FXQkJUUDIrTDR0YjJhOGZsMXBPWSt6RmxBNEdOamtqQW5CZ05WSFJFRUlEQWVnZzRxCkxtSmhiV0oxYkdGaUxtTnZi" +
+      "WUlNWW1GdFluVnNZV0l1WTI5dE1BNEdBMVVkRHdFQi93UUVBd0lGb0RBZEJnTlYKSFNVRUZqQVVCZ2dyQmdFRkJRY0RBUVlJS3dZ" +
+      "QkJRVUhBd0l3UGdZRFZSMGdCRGN3TlRBekJnWm5nUXdCQWdFdwpLVEFuQmdnckJnRUZCUWNDQVJZYmFIUjBjRG92TDNkM2R5NWth" +
+      "V2RwWTJWeWRDNWpiMjB2UTFCVE1JR0ZCZ2dyCkJnRUZCUWNCQVFSNU1IY3dKQVlJS3dZQkJRVUhNQUdHR0doMGRIQTZMeTl2WTNO" +
+      "d0xtUnBaMmxqWlhKMExtTnYKYlRCUEJnZ3JCZ0VGQlFjd0FvWkRhSFIwY0RvdkwyTmhZMlZ5ZEhNdVpHbG5hV05sY25RdVkyOXRM" +
+      "MUpoY0dsawpVMU5NVkV4VFJGWlNVMEZOYVhobFpGTklRVEkxTmpJd01qQkRRUzB4TG1OeWREQUpCZ05WSFJNRUFqQUFNSUlCCmZn" +
+      "WUtLd1lCQkFIV2VRSUVBZ1NDQVc0RWdnRnFBV2dBZGdBcGViN3duams1SWZCV2M1OWpwWGZsdmxkOW5HQUsKK1BsTlhTWmNKVjNI" +
+      "aEFBQUFYcWVwZEJsQUFBRUF3QkhNRVVDSUcrQVVPdnNqV1VIMDdBK0FaTkNyVVJackxYLwo2MldSVXcrM2FTWlhxSG8vQWlFQW9r" +
+      "c1dpMm13bTZrNEZDZW45VThNeTNJbmVEU1lxbnY3K2JoODhLOExrdHdBCmRnQlJvN0QxL1FGNW5GWnR1RGQ0and5a2Vzd2JKOHYz" +
+      "bm9oQ21nMysxSXNGNVFBQUFYcWVwZERWQUFBRUF3QkgKTUVVQ0lRRDZLYk5YRWZaT1pnN1MvdURIRlRWY00xczByemw0ZWtQNFhW" +
+      "cHlRSHQ5MkFJZ0pVbndQMzlDY1NjTwppZ1dZSm1yeGpCQTMxR25XajE4THVLeURWMWpYSmNRQWRnQkJ5TXF4M3lKR1NoREdvVG9K" +
+      "UW9kZVRqR0xHd1ByCjYwdkhhUENRWXBZRzlnQUFBWHFlcGRCRUFBQUVBd0JITUVVQ0lRQ3Y3dWZlY21CVmhwbVF1aUpFV1R6dFkw" +
+      "ck4KbnBnWnZnQlVNL3ppVlo0d1VBSWdRQXVHbUM5KzZzbkQwUklud3R0Ly9WdmRZcERYT2RpVVN3ZG4zdXc0NXNjdwpEUVlKS29a" +
+      "SWh2Y05BUUVMQlFBRGdnRUJBTEJSMFhuSFNBRm0zODN3TDM0VGcvZnFjdWtwWUFFTGZ4MG9zczVpCnZGUWhERUZndVovUXhjaDcw" +
+      "UmZBTnYyK0hETFVKNUJIWmZFRnpPQVZFc2xlalBEL2xPZFZKZVozWGE3azhXZXAKZDJudi9hVmR1UmlUOUc4Q0JFa3MrVWxXKzlW" +
+      "NmwvWVB5YThJMWh4bWRLWm5YWlhrSm1kOUJia1A4SndieHNzcApxUEYzRzlkc1Y1RTBab0RTWkZuOXgzSkpIM1QzNUZkSXJ4b0sv" +
+      "K3MvK3ZvbzdPbkRPWkdqekZrRjUrWW00ajZ1Cks2dW9vMVRXSmFDOW1NQ2FiNElneXJ5alNiVlNvNDlROUdsdXRvaGR2aEZrNEhD" +
+      "SWRmejJ3M0JYM29XdFJ3LzIKdUtLTHlEamRYeWYzVFlqWWFTYmJhblNmRDEycGQwWUsyejAvK0daUHZoMUtiN1E9Ci0tLS0tRU5E" +
+      "IENFUlRJRklDQVRFLS0tLS0KLS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURyekNDQXBlZ0F3SUJBZ0lRQ0R2Z1ZwQkNS" +
+      "ckdoZFdySldaSEhTakFOQmdrcWhraUc5dzBCQVFVRkFEQmgKTVFzd0NRWURWUVFHRXdKVlV6RVZNQk1HQTFVRUNoTU1SR2xuYVVO" +
+      "bGNuUWdTVzVqTVJrd0Z3WURWUVFMRXhCMwpkM2N1WkdsbmFXTmxjblF1WTI5dE1TQXdIZ1lEVlFRREV4ZEVhV2RwUTJWeWRDQkhi" +
+      "RzlpWVd3Z1VtOXZkQ0JEClFUQWVGdzB3TmpFeE1UQXdNREF3TURCYUZ3MHpNVEV4TVRBd01EQXdNREJhTUdFeEN6QUpCZ05WQkFZ" +
+      "VEFsVlQKTVJVd0V3WURWUVFLRXd4RWFXZHBRMlZ5ZENCSmJtTXhHVEFYQmdOVkJBc1RFSGQzZHk1a2FXZHBZMlZ5ZEM1agpiMjB4" +
+      "SURBZUJnTlZCQU1URjBScFoybERaWEowSUVkc2IySmhiQ0JTYjI5MElFTkJNSUlCSWpBTkJna3Foa2lHCjl3MEJBUUVGQUFPQ0FR" +
+      "OEFNSUlCQ2dLQ0FRRUE0anZoRVhMZXFLVFRvMWVxVUtLUEMzZVF5YUtsN2hMT2xsc0IKQ1NETUFaT25UakMzVS9kRHhHa0FWNTNp" +
+      "alNMZGh3WkFBSUVKenM0Ymc3L2Z6VHR4UnVMV1pzY0ZzM1luRm85NwpuaDZWZmU2M1NLTUkydGF2ZWd3NUJtVi9TbDBmdkJmNHE3" +
+      "N3VLTmQwZjNwNG1WbUZhRzVjSXpKTHYwN0E2RnB0CjQzQy9keEMvL0FIMmhkbW9SQkJZTXFsMUdOWFJvcjVINGlkcTlKb3orRWtJ" +
+      "WUl2VVg3UTZoTCtocWtwTWZUN1AKVDE5c2RsNmdTemVSbnR3aTVtM09GQnFPYXN2K3piTVVaQmZIV3ltZU1yL3k3dnJUQzBMVXE3" +
+      "ZEJNdG9NMU8vNApnZFc3alZnL3RSdm9TU2lpY05veEJOMzNzaGJ5VEFwT0I2anRTajFldFgramtNT3ZKd0lEQVFBQm8yTXdZVEFP" +
+      "CkJnTlZIUThCQWY4RUJBTUNBWVl3RHdZRFZSMFRBUUgvQkFVd0F3RUIvekFkQmdOVkhRNEVGZ1FVQTk1UU5WYlIKVEx0bThLUGlH" +
+      "eHZEbDdJOTBWVXdId1lEVlIwakJCZ3dGb0FVQTk1UU5WYlJUTHRtOEtQaUd4dkRsN0k5MFZVdwpEUVlKS29aSWh2Y05BUUVGQlFB" +
+      "RGdnRUJBTXVjTjZwSUV4SUsrdDFFbkU5U3NQVGZyZ1QxZVhrSW95UVkvRXNyCmhNQXR1ZFhIL3ZUQkgxakx1RzJjZW5Ubm1DbXJF" +
+      "YlhqY0tDaHpVeUltWk9Na1hEaXF3OGN2cE9wLzJQVjVBZGcKMDZPL25Wc0o4ZFdPNDFQMGptUDZQNmZidEdiZlltYlcwVzVCamZJ" +
+      "dHRlcDNTcCtkV09JcldjQkFJKzB0S0lKRgpQbmxVa2lhWTRJQklxRGZ2OE5aNVlCYmVyT2dPelc2c1JCYzRMMG5hNFVVK0tyazJV" +
+      "ODg2VUFiM0x1akVWMGxzCllTRVkxUVN0ZUR3c09vQnJwK3V2RlJUcDJJbkJ1VGhzNHBGc2l2OWt1WGNsVnpEQUd5U2o0ZHpwMzBk" +
+      "OHRiUWsKQ0FVdzdDMjlDNzlGdjFDNXFmUHJtQUVTcmNpSXhwZzBYNDBLUE1icDFaV1ZiZDQ9Ci0tLS0tRU5EIENFUlRJRklDQVRF" +
+      "LS0tLS0K",
+  },
+});