bambu-printer-mcp 1.1.33 → 1.1.34

package/CONTRIBUTORS.md

@@ -6,6 +6,8 @@ Thank you to everyone who builds, tests, reports problems, and shares real print
 
 | Contributor | Contribution |
 | --- | --- |
+| [MorganFreeeman](https://github.com/MorganFreeeman) | Reports in [#67](https://github.com/DMontgomery40/bambu-printer-mcp/issues/67) that every H2D print stopped on stock HS01 nozzles. Supplies idle and mid-print firmware 01.04.00.00 nozzle reports showing a permanent `stat: 1` with `sn: "N/A"`, proposes keeping the check narrow to nozzles without an identity chip, and points out the misleading declined-confirmation advice and the missing settings-table entries. Maintainer validation uses their reports in regressions; no H2D hardware was available. |
+| [Aaron Roberts (aaroberts)](https://github.com/aaroberts) | Diagnoses FULU's Linux host exit 101 and its working-directory library loading in [#68](https://github.com/DMontgomery40/bambu-printer-mcp/issues/68), reports both upstream as [FULU #50](https://github.com/FULU-Foundation/OrcaSlicer-bambulab/issues/50) and [#51](https://github.com/FULU-Foundation/OrcaSlicer-bambulab/issues/51), and shares a working configuration: the `cat` wrapper, absolute plug-in paths, the FULU GUI's session file for cloud login, and the required 02.05.02.5x plug-in. Reports cloud printing on two P1S printers with 1.1.33. The server now sets the library paths and explains exit 101. The host fixes themselves remain with FULU. |
 | [bwees](https://github.com/bwees) | Reports and fixes missing non-preset vendor data in [OrcaSlicer #16700](https://github.com/OrcaSlicer/OrcaSlicer/issues/16700) and [#16706](https://github.com/OrcaSlicer/OrcaSlicer/pull/16706), restoring the authoritative BBL CLI matrix required by cache-based MCP slicing. |
 | [ExPikaPaka](https://github.com/ExPikaPaka), [raistlin7447](https://github.com/raistlin7447), [HanifKoh](https://github.com/HanifKoh), and [SoftFever](https://github.com/SoftFever) | Provide and maintain OrcaSlicer's published preset-cache format, source-profile inheritance and include handling used as the contract for this independent cache reader. Credit covers upstream source and format evidence; it does not claim they tested this MCP integration. |
 | [mygrexit](https://github.com/mygrexit) | Contributes pinned x86-64 Linux X2D native setup, emergency routing and one-shot cleanup in [#56](https://github.com/DMontgomery40/bambu-printer-mcp/pull/56), checked Orca/time-lapse G-code forms in [#57](https://github.com/DMontgomery40/bambu-printer-mcp/pull/57), and model-specific hidden-HMS notices in [#58](https://github.com/DMontgomery40/bambu-printer-mcp/pull/58). Supplies regressions, review corrections, and contributor-reported Debian/X2D read-only, heater-off and print-start evidence in [#55](https://github.com/DMontgomery40/bambu-printer-mcp/issues/55); maintainer validation is offline and mocked. Also reports and fixes hanging Linux X2D stop/heater-off calls in [#61](https://github.com/DMontgomery40/bambu-printer-mcp/pull/61), with never-connecting transport and helper-exit regressions; the release adds protection against expired commands dispatching after reconnection. In [#64](https://github.com/DMontgomery40/bambu-printer-mcp/pull/64), contributes ready-card native job storage, fresh dispatch rechecks and tests, and reports Linux X2D firmware 01.01.01.00 printing to external storage with plug-in 02.08.02.54 and a Bambuddy thumbnail; maintainer verification uses source and mocked transports. |
@@ -37,7 +39,7 @@ Thank you to everyone who builds, tests, reports problems, and shares real print
 
 Thank you also to the existing contributors whose work the project builds on:
 
-- [David Montgomery (DMontgomery40)](https://github.com/DMontgomery40) — project maintainer; contributes the printer-profile, temperature, and hardware-safety reports informing the shared slicing and print checks.
+- [David Montgomery (DMontgomery40)](https://github.com/DMontgomery40) — project maintainer; contributes the printer-profile, temperature, and hardware-safety reports informing the shared slicing and print checks. For 1.1.34, reports the stale A1/P1 camera snapshots and that FULU bridge LAN printing needs no Developer Mode, asks which OrcaSlicer CLI option combinations crash, and supplies the P1S used for the real FULU bridge prints.
 - [rowbotik](https://github.com/rowbotik) — printer, AMS, slicing, and operational work across the existing release history.
 - [len-foss](https://github.com/len-foss) — project code contribution.
 - [thebitrock](https://github.com/thebitrock) — project code contribution.

package/README.md

@@ -179,7 +179,7 @@ See the [changelog](https://github.com/DMontgomery40/bambu-printer-mcp/blob/main
 
 [FULU OrcaSlicer-bambulab](https://github.com/FULU-Foundation/OrcaSlicer-bambulab) is a supported slicer target (`SLICER_TYPE=orcaslicer-bambulab`; aliases include `fulu-orca` and `orca-studio`). Use its GUI to export a sliced project for direct LAN printing, or configure its CLI with matching installed profiles. From 1.1.11, FULU/Orca share the [machine-preset gate and profile safety checks](https://github.com/DMontgomery40/bambu-printer-mcp/blob/main/docs/FULU.md#fulu-and-orca-cli-safety-limit).
 
-The optional FULU **BambuNetwork bridge** exposes `bambu_network_bridge_status`, `bambu_network_call`, and `print_3mf_bambu_network`, also reachable through `print_3mf` with `connection_mode: "bambu_network"`. Slicer selection does not enable the bridge. It needs a separately installed FULU runtime and an explicit launch command; cloud printing also needs an authenticated BambuNetwork session.
+The optional FULU **BambuNetwork bridge** exposes `bambu_network_bridge_status`, `bambu_network_call`, and `print_3mf_bambu_network`, also reachable through `print_3mf` with `connection_mode: "bambu_network"`. Slicer selection does not enable the bridge. It needs a separately installed FULU runtime and an explicit launch command; cloud printing also needs an authenticated BambuNetwork session. On Linux, FULU's v1.0.0 host needs a small `cat` wrapper and the 02.05.02.5x plug-in; the guide covers both. LAN bridge prints open the plug-in's own LAN session with Bambu's printer certificate, which the server supplies.
 
 **[Follow the FULU setup guide](https://github.com/DMontgomery40/bambu-printer-mcp/blob/main/docs/FULU.md)** for the direct LAN recipe, Linux/Windows/macOS bridge setup, connection probes, authentication, and troubleshooting. Bridge protocol tests and a successful handshake do not establish a successful physical print.
 
@@ -623,7 +623,7 @@ Capture a single JPEG frame from the printer's chamber camera. Read-only.
 
 Two transports are wired in, picked by `bambu_model`:
 
-- **TCP-on-6000** for **A1, A1 mini, P1S, P1P**. Native protocol per [OpenBambuAPI/video.md](https://github.com/Doridian/OpenBambuAPI/blob/main/video.md): TLS on port 6000, 80-byte auth packet (`bblp` + access token), repeating 16-byte frame header + JPEG payload.
+- **TCP-on-6000** for **A1, A1 mini, P1S, P1P**. Native protocol per [OpenBambuAPI/video.md](https://github.com/Doridian/OpenBambuAPI/blob/main/video.md): TLS on port 6000, 80-byte auth packet (`bblp` + access token), repeating 16-byte frame header + JPEG payload. The printer first replays the last frame it buffered, which after an idle period can show the chamber as it was long ago, so the tool skips that frame and returns the next live one (about 3 s). If no live frame follows within `timeout_ms`, it fails instead of returning a possibly stale image.
 - **RTSP** for **X1, X1 Carbon, X1E, P2S, X2D** and **H2, H2S, H2D, H2C, H2D Pro**. Shells out to ffmpeg with `rtsps://bblp:<token>@<host>:322/streaming/live/1 -frames:v 1`. The H2 series wasn't documented in OpenBambuAPI's `video.md` but its firmware uses the same RTSP endpoint as X1 (verified live against an H2S, 2026-04-27).
 
 **Requires ffmpeg in PATH** for the RTSP path. Install with `brew install ffmpeg` on macOS. Configure a trusted custom binary with the server-side `FFMPEG_PATH` environment variable, or set `MCP_ALLOW_EXECUTABLE_ARG=1` before using the `ffmpeg_path` tool argument. The TCP-on-6000 path uses native Node TLS and does not require ffmpeg.
@@ -1115,6 +1115,8 @@ Slice an STL or 3MF file using an external slicer and return the path to the out
 
 **FULU/Orca CLI safety:** from 1.1.11, these backends require the exact model/nozzle preset from the selected installation and stop on profile preparation failures. A process override cannot bypass that gate. See [configuration and validation limits](https://github.com/DMontgomery40/bambu-printer-mcp/blob/main/docs/FULU.md#fulu-and-orca-cli-safety-limit).
 
+**OrcaSlicer CLI transforms:** OrcaSlicer 2.4.2's CLI segfaults when `scale` or `rotate_x`/`rotate_y` moves an object below the bed while arranging, which is the default for STL input. For STL input with `orcaslicer` or `orcaslicer-bambulab`, the server applies `scale` and the rotations to a copy of the mesh in the CLI's order and leaves those flags out. For 3MF input it refuses `scale` above 1, `rotate_x` or `rotate_y` together with `arrange: true`. `repetitions` copies an STL with Orca's `--clone-objects`. `clone_objects` takes one total count, because the CLI counts copies per loaded file. With `arrange: false`, an STL that is not already on the plate fails to slice. A failure names the slicer's own reason.
+
 `slicer_path` and `slicer_profile` fall back to the `SLICER_PATH` and `SLICER_PROFILE` environment variables when omitted. Per-call `slicer_path` overrides require `MCP_ALLOW_EXECUTABLE_ARG=1`.
 
 You can provide either `template_3mf_path` or `template_name` when you want to slice from a saved template. `template_name` resolves through the local template registry directory configured for the server.

package/dist/bambu-network-bridge.d.ts

@@ -1,3 +1,29 @@
+/** A parenthesized explanation of a plug-in print result, or "" when it names no known cause. */
+export declare function describeBambuNetworkPrintError(value: number): string;
+/** Waits from native/bambu-native-print.cpp, which prints through the same plug-in calls. */
+export declare const LOCAL_PRINT_TIMING: Readonly<{
+    connectTimeoutMs: 30000;
+    pollMs: 250;
+    settleMs: 3000;
+    retryWaitMs: 8000;
+}>;
+export type LocalPrinter = {
+    devId: string;
+    devIp: string;
+    username: string;
+    password: string;
+    useSsl: boolean;
+};
+export type BridgeJobUpdate = {
+    status: unknown;
+    code: unknown;
+    msg: unknown;
+};
+export type LocalSession = {
+    installCertificate: () => Promise<void>;
+    settle: (ms: number) => Promise<void>;
+    jobUpdates: BridgeJobUpdate[];
+};
 type JsonObject = Record<string, unknown>;
 export type BambuNetworkBridgeOptions = {
     bridgeCommand?: string;
@@ -22,17 +48,37 @@ export type BambuNetworkBridgeStatus = {
     lastStderr: string;
     recentLogs: string[];
     runtime: {
-        macosRuntimeDir: string;
-        macosRuntimeDirExists: boolean;
+        /** Folder passed to the plug-in's set_cert_file. */
+        certDir: string;
+        /** Linux only: absolute plug-in library paths passed to FULU's host. */
+        pluginLibraries?: Record<string, string>;
+        /** macOS only: conventional FULU runtime discovery. */
+        macosRuntimeDir?: string;
+        macosRuntimeDirExists?: boolean;
         macosPluginDir?: string;
         macosPluginDirExists?: boolean;
-        macosMissingRuntimeFiles: string[];
-        macosMissingPluginFiles: string[];
+        macosMissingRuntimeFiles?: string[];
+        macosMissingPluginFiles?: string[];
         suggestedMacCommand?: string;
     };
     note?: string;
 };
+/**
+ * The plug-in's certificate folder: BAMBU_NETWORK_CERT_DIR when set, else
+ * Bambu's pinned public certificates written to the agent's config folder,
+ * which the host must already be able to read.
+ */
+export declare function bambuNetworkCertDir(configDir: string, env?: NodeJS.ProcessEnv): string;
+export declare function prepareBambuNetworkCertDir(configDir: string, env?: NodeJS.ProcessEnv): string;
 export declare function defaultBambuNetworkConfigDir(): string;
+/**
+ * FULU's Linux host opens its network and source libraries by bare name from
+ * its working directory instead of PJARCZAK_BAMBU_PLUGIN_DIR
+ * (FULU-Foundation/OrcaSlicer-bambulab#51), so name them in that directory
+ * unless they are already set. macOS wrappers run the host in a Linux guest
+ * that may not see host paths, so they are left alone.
+ */
+export declare function linuxPluginLibraryEnv(env: NodeJS.ProcessEnv, platform: NodeJS.Platform): Record<string, string>;
 export declare class BambuNetworkBridge {
     private child?;
     private commandLine?;
@@ -45,6 +91,13 @@ export declare class BambuNetworkBridge {
     private lastStderr;
     private recentLogs;
     private inferredExpectedNetworkVersion?;
+    /** Whether the host accepted the certificate folder and callbacks a LAN session needs. */
+    private localSessionReady;
+    /**
+     * The plug-in holds one LAN printer connection and the host one event queue,
+     * so LAN sessions run one at a time, as Bambu Studio connects one printer.
+     */
+    private localSessionTail;
     resolveBridgeCommand(override?: string): string;
     resolveConfigDir(override?: string): string;
     resolveCountryCode(override?: string): string;
@@ -54,6 +107,27 @@ export declare class BambuNetworkBridge {
         agent: number;
         handshake: unknown;
     }>;
+    /**
+     * Open the plug-in's own LAN MQTT session with a printer, in the order Bambu
+     * Studio and native/bambu-native-print.cpp use: connect, install the
+     * printer's application certificate (again on each "wait_info"), wait for
+     * the local connection, request the printer's state and let the key
+     * exchange settle. Without the certificate the plug-in uploads a job but
+     * cannot encrypt or publish project_file (-4030). The session is closed
+     * after `run`, so printer reports stop accumulating in the host's queue.
+     */
+    withLocalSession<T>(printer: LocalPrinter, options: BambuNetworkBridgeOptions, assertActive: () => void, timing: typeof LOCAL_PRINT_TIMING, run: (session: LocalSession) => Promise<T>): Promise<T>;
+    private runLocalSession;
+    /**
+     * Run a LAN print method in a local session. A synchronous -4030 means the
+     * plug-in published nothing, so it is retried once after the certificate
+     * exchange, as the native helper does; each attempt passes the caller's
+     * fresh pre-dispatch checks.
+     */
+    startLocalPrint(printer: LocalPrinter, method: string, payload: JsonObject, options?: BambuNetworkBridgeOptions, assertActive?: () => void, timing?: typeof LOCAL_PRINT_TIMING): Promise<{
+        result: unknown;
+        jobUpdates: BridgeJobUpdate[];
+    }>;
     callWithAgent(method: string, payload?: JsonObject, options?: BambuNetworkBridgeOptions): Promise<unknown>;
     stop(): Promise<void>;
     private ensureStarted;

package/dist/bambu-network-bridge.js

@@ -1,7 +1,9 @@
 import { spawn } from "node:child_process";
+import { createHash } from "node:crypto";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
+import { BAMBU_NETWORK_CERTIFICATES } from "./bambu-network-certs.js";
 const FRAME_MAGIC = 0x52424a50;
 const FRAME_HEADER_SIZE = 16;
 const FRAME_TYPE_JSON_REQUEST = 1;
@@ -9,6 +11,45 @@ const FRAME_TYPE_JSON_RESPONSE = 2;
 const FRAME_TYPE_BINARY_DATA = 3;
 const FRAME_TYPE_LOG = 4;
 const DEFAULT_REQUEST_TIMEOUT_MS = 120000;
+// bambu_networking.hpp ConnectStatus.
+const LOCAL_CONNECT_STATUS = ["ok", "failed", "lost"];
+// bambu_networking.hpp BAMBU_NETWORK_ERR_PRINT_LP_PUBLISH_MSG_FAILED.
+const LOCAL_PRINT_PUBLISH_FAILED = -4030;
+// bambu_networking.hpp print errors that name a recoverable cause.
+const BAMBU_NETWORK_PRINT_ERRORS = {
+    [-4010]: "the file exceeds the 1 GB upload limit",
+    [-4020]: "FTPS upload to the printer failed",
+    [LOCAL_PRINT_PUBLISH_FAILED]: "the networking plug-in could not send the print command to the printer over MQTT",
+};
+/** A parenthesized explanation of a plug-in print result, or "" when it names no known cause. */
+export function describeBambuNetworkPrintError(value) {
+    return BAMBU_NETWORK_PRINT_ERRORS[value] ? ` (${BAMBU_NETWORK_PRINT_ERRORS[value]})` : "";
+}
+/** Waits from native/bambu-native-print.cpp, which prints through the same plug-in calls. */
+export const LOCAL_PRINT_TIMING = Object.freeze({ connectTimeoutMs: 30000, pollMs: 250, settleMs: 3000, retryWaitMs: 8000 });
+/**
+ * The plug-in's certificate folder: BAMBU_NETWORK_CERT_DIR when set, else
+ * Bambu's pinned public certificates written to the agent's config folder,
+ * which the host must already be able to read.
+ */
+export function bambuNetworkCertDir(configDir, env = process.env) {
+    return trimEnv(env.BAMBU_NETWORK_CERT_DIR) || path.join(configDir, "cert");
+}
+export function prepareBambuNetworkCertDir(configDir, env = process.env) {
+    const certDir = bambuNetworkCertDir(configDir, env);
+    if (trimEnv(env.BAMBU_NETWORK_CERT_DIR))
+        return certDir;
+    fs.mkdirSync(certDir, { recursive: true });
+    for (const [name, { sha256, base64 }] of Object.entries(BAMBU_NETWORK_CERTIFICATES)) {
+        const content = Buffer.from(base64, "base64");
+        if (createHash("sha256").update(content).digest("hex") !== sha256)
+            throw new Error(`Bundled Bambu certificate ${name} does not match its pinned SHA-256.`);
+        const target = path.join(certDir, name);
+        if (!fileExists(target) || !fs.readFileSync(target).equals(content))
+            fs.writeFileSync(target, content);
+    }
+    return certDir;
+}
 export function defaultBambuNetworkConfigDir() {
     return path.join(os.homedir(), ".config", "bambu-printer-mcp", "bambu-network");
 }
@@ -40,6 +81,72 @@ function collectMissingFiles(baseDir, files) {
         return files;
     return files.filter((file) => !fileExists(path.join(baseDir, file)));
 }
+/**
+ * FULU's Linux host opens its network and source libraries by bare name from
+ * its working directory instead of PJARCZAK_BAMBU_PLUGIN_DIR
+ * (FULU-Foundation/OrcaSlicer-bambulab#51), so name them in that directory
+ * unless they are already set. macOS wrappers run the host in a Linux guest
+ * that may not see host paths, so they are left alone.
+ */
+export function linuxPluginLibraryEnv(env, platform) {
+    const pluginDir = trimEnv(env.PJARCZAK_BAMBU_PLUGIN_DIR);
+    if (platform !== "linux" || !pluginDir)
+        return {};
+    const libraries = {};
+    if (!trimEnv(env.PJARCZAK_BAMBU_NETWORK_SO))
+        libraries.PJARCZAK_BAMBU_NETWORK_SO = path.resolve(pluginDir, "libbambu_networking.so");
+    if (!trimEnv(env.PJARCZAK_BAMBU_SOURCE_SO))
+        libraries.PJARCZAK_BAMBU_SOURCE_SO = path.resolve(pluginDir, "libBambuSource.so");
+    return libraries;
+}
+/** FULU's Linux host exits 101 when it cannot reopen a socket stdout (FULU-Foundation/OrcaSlicer-bambulab#50). */
+const STDOUT_SOCKET_HINT = "Exit code 101 means FULU's Linux host could not reopen its stdout, which fails when stdout is a socket, as Node.js provides " +
+    "(https://github.com/FULU-Foundation/OrcaSlicer-bambulab/issues/50). Launch the host through a wrapper that pipes its output through cat: " +
+    "https://github.com/DMontgomery40/bambu-printer-mcp/blob/main/docs/FULU.md#linux";
+/** Conventional FULU macOS runtime locations; the wrapper command is suggested only when it exists. */
+function macosRuntimeHints() {
+    const macosRuntimeDir = trimEnv(process.env.PJARCZAK_MAC_RUNTIME_DIR) ||
+        path.join(os.homedir(), "Library", "Application Support", "OrcaSlicer", "macos-bridge", "runtime");
+    const macosPluginDir = trimEnv(process.env.BAMBU_NETWORK_PLUGIN_DIR) ||
+        trimEnv(process.env.PJARCZAK_BAMBU_PLUGIN_DIR) ||
+        resolveFirstDirectoryWithFile([
+            path.join(os.homedir(), "Library", "Application Support", "OrcaSlicer", "plugins"),
+            "/Applications/Orca Studio.app/Contents/MacOS",
+            "/Applications/OrcaSlicer.app/Contents/MacOS",
+            "/Applications/OrcaSlicer-BMCU.app/Contents/MacOS",
+            "/Applications/Orca Studio.app/Contents/Resources",
+            "/Applications/OrcaSlicer.app/Contents/Resources",
+            "/Applications/OrcaSlicer-BMCU.app/Contents/Resources",
+            macosRuntimeDir,
+        ], "pjarczak-bambu-linux-host-wrapper") ||
+        resolveFirstExistingDirectory([macosRuntimeDir]);
+    const runtimeRequiredFiles = [
+        "libbambu_networking.so",
+        "libBambuSource.so",
+        "pjarczak_bambu_linux_host",
+        "pjarczak_bambu_linux_host_abi1",
+        "pjarczak_bambu_linux_host_abi0",
+        "ca-certificates.crt",
+        "slicer_base64.cer",
+    ];
+    const pluginRequiredFiles = [
+        "pjarczak-bambu-linux-host-wrapper",
+        "install_runtime_macos.sh",
+        "verify_runtime_macos.sh",
+    ];
+    const wrapper = macosPluginDir ? path.join(macosPluginDir, "pjarczak-bambu-linux-host-wrapper") : undefined;
+    return {
+        macosRuntimeDir,
+        macosRuntimeDirExists: fileExists(macosRuntimeDir),
+        macosPluginDir,
+        macosPluginDirExists: macosPluginDir ? fileExists(macosPluginDir) : undefined,
+        macosMissingRuntimeFiles: collectMissingFiles(macosRuntimeDir, runtimeRequiredFiles),
+        macosMissingPluginFiles: collectMissingFiles(macosPluginDir, pluginRequiredFiles),
+        suggestedMacCommand: wrapper && fileExists(wrapper)
+            ? `PJARCZAK_BAMBU_PLUGIN_DIR=${shellQuote(macosRuntimeDir)} ${shellQuote(wrapper)} ${shellQuote(path.join(macosRuntimeDir, "pjarczak_bambu_linux_host"))}`
+            : undefined,
+    };
+}
 function readFrameJson(payload) {
     const text = payload.toString("utf8");
     return text.length > 0 ? JSON.parse(text) : {};
@@ -57,6 +164,11 @@ function bridgeValueAsNumber(value, method) {
     }
     throw new Error(`FULU BambuNetwork bridge method ${method} did not return a numeric value.`);
 }
+function bridgeNumericResult(value) {
+    return typeof value === "object" && value !== null && typeof value.value === "number"
+        ? value.value
+        : undefined;
+}
 function assertBridgeOk(value, method) {
     if (isBridgeFailure(value)) {
         const errorText = value.error === undefined ? "unknown bridge error" : String(value.error);
@@ -70,6 +182,13 @@ export class BambuNetworkBridge {
         this.nextRequestId = 1;
         this.lastStderr = "";
         this.recentLogs = [];
+        /** Whether the host accepted the certificate folder and callbacks a LAN session needs. */
+        this.localSessionReady = false;
+        /**
+         * The plug-in holds one LAN printer connection and the host one event queue,
+         * so LAN sessions run one at a time, as Bambu Studio connects one printer.
+         */
+        this.localSessionTail = Promise.resolve();
     }
     resolveBridgeCommand(override) {
         return (trimEnv(override) ||
@@ -94,43 +213,20 @@ export class BambuNetworkBridge {
         const command = this.resolveBridgeCommand(options.bridgeCommand);
         const configDir = this.resolveConfigDir(options.configDir);
         const countryCode = this.resolveCountryCode(options.countryCode);
-        const macosRuntimeDir = trimEnv(process.env.PJARCZAK_MAC_RUNTIME_DIR) ||
-            path.join(os.homedir(), "Library", "Application Support", "OrcaSlicer", "macos-bridge", "runtime");
-        const macosPluginDir = trimEnv(process.env.BAMBU_NETWORK_PLUGIN_DIR) ||
-            trimEnv(process.env.PJARCZAK_BAMBU_PLUGIN_DIR) ||
-            resolveFirstDirectoryWithFile([
-                path.join(os.homedir(), "Library", "Application Support", "OrcaSlicer", "plugins"),
-                "/Applications/Orca Studio.app/Contents/MacOS",
-                "/Applications/OrcaSlicer.app/Contents/MacOS",
-                "/Applications/OrcaSlicer-BMCU.app/Contents/MacOS",
-                "/Applications/Orca Studio.app/Contents/Resources",
-                "/Applications/OrcaSlicer.app/Contents/Resources",
-                "/Applications/OrcaSlicer-BMCU.app/Contents/Resources",
-                macosRuntimeDir,
-            ], "pjarczak-bambu-linux-host-wrapper") ||
-            resolveFirstExistingDirectory([macosRuntimeDir]);
-        const runtimeRequiredFiles = [
-            "libbambu_networking.so",
-            "libBambuSource.so",
-            "pjarczak_bambu_linux_host",
-            "pjarczak_bambu_linux_host_abi1",
-            "pjarczak_bambu_linux_host_abi0",
-            "ca-certificates.crt",
-            "slicer_base64.cer",
-        ];
-        const pluginRequiredFiles = [
-            "pjarczak-bambu-linux-host-wrapper",
-            "install_runtime_macos.sh",
-            "verify_runtime_macos.sh",
-        ];
-        let suggestedMacCommand;
-        if (macosPluginDir) {
-            const wrapper = path.join(macosPluginDir, "pjarczak-bambu-linux-host-wrapper");
-            const host = path.join(macosRuntimeDir, "pjarczak_bambu_linux_host");
-            suggestedMacCommand =
-                `PJARCZAK_BAMBU_PLUGIN_DIR=${shellQuote(macosRuntimeDir)} ` +
-                    `${shellQuote(wrapper)} ${shellQuote(host)}`;
+        const runtime = { certDir: bambuNetworkCertDir(configDir) };
+        if (process.platform === "linux") {
+            const pluginLibraries = {
+                ...Object.fromEntries(["PJARCZAK_BAMBU_NETWORK_SO", "PJARCZAK_BAMBU_SOURCE_SO"].flatMap(name => {
+                    const value = trimEnv(process.env[name]);
+                    return value ? [[name, value]] : [];
+                })),
+                ...linuxPluginLibraryEnv(process.env, process.platform),
+            };
+            if (Object.keys(pluginLibraries).length)
+                runtime.pluginLibraries = pluginLibraries;
         }
+        if (process.platform === "darwin")
+            Object.assign(runtime, macosRuntimeHints());
         return {
             configured: command.length > 0,
             command,
@@ -142,15 +238,7 @@ export class BambuNetworkBridge {
             agentReady: this.agentId !== undefined,
             lastStderr: this.lastStderr,
             recentLogs: this.recentLogs.slice(-10),
-            runtime: {
-                macosRuntimeDir,
-                macosRuntimeDirExists: fileExists(macosRuntimeDir),
-                macosPluginDir,
-                macosPluginDirExists: macosPluginDir ? fileExists(macosPluginDir) : undefined,
-                macosMissingRuntimeFiles: collectMissingFiles(macosRuntimeDir, runtimeRequiredFiles),
-                macosMissingPluginFiles: collectMissingFiles(macosPluginDir, pluginRequiredFiles),
-                suggestedMacCommand,
-            },
+            runtime,
             note: command
                 ? undefined
                 : "Set BAMBU_NETWORK_BRIDGE_COMMAND to the FULU OrcaSlicer-bambulab Linux host or macOS/WSL wrapper command.",
@@ -202,11 +290,13 @@ export class BambuNetworkBridge {
         const configDir = this.resolveConfigDir(options.configDir);
         const countryCode = this.resolveCountryCode(options.countryCode);
         const userInfo = trimEnv(options.userInfo) || trimEnv(process.env.BAMBU_NETWORK_USER_INFO) || "";
-        const key = `${command}\n${configDir}\n${countryCode}\n${userInfo}`;
+        const certDir = bambuNetworkCertDir(configDir);
+        const key = `${command}\n${configDir}\n${countryCode}\n${userInfo}\n${certDir}`;
         if (this.agentId !== undefined && this.agentKey === key) {
             return { agent: this.agentId, handshake: this.handshake };
         }
         fs.mkdirSync(configDir, { recursive: true });
+        prepareBambuNetworkCertDir(configDir);
         this.handshake = await this.request("bridge.handshake", {}, options);
         assertBridgeOk(this.handshake, "bridge.handshake");
         if (this.needsExpectedVersionRetry(this.handshake) && !trimEnv(process.env.PJARCZAK_EXPECTED_BAMBU_NETWORK_VERSION)) {
@@ -215,6 +305,13 @@ export class BambuNetworkBridge {
             this.handshake = await this.request("bridge.handshake", {}, options);
             assertBridgeOk(this.handshake, "bridge.handshake");
         }
+        const loaded = this.handshake;
+        if (loaded?.network_loaded === false && typeof loaded.network_status === "string" && /file open failed/i.test(loaded.network_status)) {
+            throw new Error(`FULU BambuNetwork bridge could not open its networking library (${loaded.network_status}). ` +
+                "Set PJARCZAK_BAMBU_PLUGIN_DIR to the directory containing libbambu_networking.so and libBambuSource.so, " +
+                "or set PJARCZAK_BAMBU_NETWORK_SO and PJARCZAK_BAMBU_SOURCE_SO to their absolute paths: " +
+                "https://github.com/DMontgomery40/bambu-printer-mcp/blob/main/docs/FULU.md#linux");
+        }
         const created = await this.request("net.create_agent", { log_dir: configDir, country_code: countryCode }, options);
         assertBridgeOk(created, "net.create_agent");
         const agent = bridgeValueAsNumber(created, "net.create_agent");
@@ -226,16 +323,162 @@ export class BambuNetworkBridge {
         };
         await withAgent("net.set_config_dir", { config_dir: configDir });
         await withAgent("net.init_log");
+        // Bambu Studio and FULU's GUI set this before starting the agent. The
+        // plug-in verifies a LAN printer with printer.cer from this folder, and
+        // FULU's host crashes on connect_printer when no folder was ever set.
+        const certificates = await withAgent("net.set_cert_file", { folder: certDir, filename: "slicer_base64.cer" }, false);
         await withAgent("net.set_country_code", { country_code: countryCode });
         await withAgent("net.start");
+        // The plug-in runs callbacks through queue_on_main; FULU's host executes
+        // them on its own dispatcher and queues on_local_connect for poll_events.
+        // Cloud jobs and probes do not depend on these, so a host without them
+        // still starts; a LAN session refuses before connecting instead.
+        const callbacks = [await withAgent("net.set_queue_on_main_fn", {}, false), await withAgent("net.set_on_local_connect_fn", {}, false)];
+        const localSessionReady = ![certificates, ...callbacks].some(isBridgeFailure);
         await withAgent("net.connect_server", {}, false);
         if (userInfo) {
             await withAgent("net.change_user", { user_info: userInfo });
         }
         this.agentId = agent;
         this.agentKey = key;
+        this.localSessionReady = localSessionReady;
         return { agent, handshake: this.handshake };
     }
+    /**
+     * Open the plug-in's own LAN MQTT session with a printer, in the order Bambu
+     * Studio and native/bambu-native-print.cpp use: connect, install the
+     * printer's application certificate (again on each "wait_info"), wait for
+     * the local connection, request the printer's state and let the key
+     * exchange settle. Without the certificate the plug-in uploads a job but
+     * cannot encrypt or publish project_file (-4030). The session is closed
+     * after `run`, so printer reports stop accumulating in the host's queue.
+     */
+    async withLocalSession(printer, options, assertActive, timing, run) {
+        const previous = this.localSessionTail;
+        let release;
+        this.localSessionTail = new Promise(resolve => { release = resolve; });
+        try {
+            await previous;
+            return await this.runLocalSession(printer, options, assertActive, timing, run);
+        }
+        finally {
+            release();
+        }
+    }
+    async runLocalSession(printer, options, assertActive, timing, run) {
+        const jobUpdates = [];
+        const installCertificate = async () => {
+            await this.callWithAgent("net.install_device_cert", { dev_id: printer.devId, lan_only: true }, options);
+            await this.callWithAgent("net.update_cert", {}, options);
+        };
+        // Drain queued events: collect job reports, return this printer's
+        // local-connect statuses, and reinstall the certificate on "wait_info".
+        const pump = async () => {
+            const polled = await this.request("bridge.poll_events", { limit: 1024 }, options);
+            assertBridgeOk(polled, "bridge.poll_events");
+            const statuses = [];
+            let waitInfo = false;
+            for (const event of Array.isArray(polled?.events) ? polled.events : []) {
+                if (event?.name === "job.update_status")
+                    jobUpdates.push({ status: event.payload?.status, code: event.payload?.code, msg: event.payload?.msg });
+                const eventDev = event?.payload?.dev_id;
+                if (eventDev !== undefined && eventDev !== "" && eventDev !== printer.devId)
+                    continue;
+                if (event?.name === "on_local_connect")
+                    statuses.push(event.payload.status);
+                if ((event?.name === "on_local_message" || event?.name === "on_message") && event.payload?.msg === "wait_info")
+                    waitInfo = true;
+            }
+            if (waitInfo)
+                await installCertificate();
+            return statuses;
+        };
+        const settle = async (ms) => {
+            for (const deadline = Date.now() + ms; Date.now() < deadline;) {
+                assertActive();
+                await pump();
+                await new Promise(resolve => setTimeout(resolve, timing.pollMs));
+            }
+        };
+        await this.ensureAgent(options);
+        assertActive();
+        if (!this.localSessionReady) {
+            throw new Error("FULU BambuNetwork bridge host did not accept the certificate folder or local-connection callbacks a LAN print needs. Update the FULU runtime; no print command was sent.");
+        }
+        for (const callback of ["net.set_on_printer_connected_fn", "net.set_on_local_message_fn"]) {
+            assertBridgeOk(await this.callWithAgent(callback, {}, options), callback);
+        }
+        await this.callWithAgent("net.update_cert", {}, options);
+        await pump();
+        assertActive();
+        const requested = await this.callWithAgent("net.connect_printer", {
+            dev_id: printer.devId, dev_ip: printer.devIp, username: printer.username, password: printer.password, use_ssl: printer.useSsl,
+        }, options);
+        assertBridgeOk(requested, "net.connect_printer");
+        const connectResult = bridgeValueAsNumber(requested, "net.connect_printer");
+        if (connectResult !== 0) {
+            throw new Error(`FULU BambuNetwork bridge could not start a LAN connection to printer ${printer.devId} (net.connect_printer returned ${connectResult}). No print command was sent.`);
+        }
+        let connected = false;
+        try {
+            await installCertificate();
+            const deadline = Date.now() + timing.connectTimeoutMs;
+            while (!connected) {
+                assertActive();
+                for (const status of await pump()) {
+                    if (status === 0) {
+                        connected = true;
+                        continue;
+                    }
+                    const reason = typeof status === "number" && LOCAL_CONNECT_STATUS[status] ? LOCAL_CONNECT_STATUS[status] : `reported status ${status}`;
+                    throw new Error(`FULU BambuNetwork bridge LAN connection to printer ${printer.devId} at ${printer.devIp} ${reason}. Check the printer IP, LAN access code and LAN mode. No print command was sent.`);
+                }
+                if (connected)
+                    break;
+                if (Date.now() >= deadline) {
+                    throw new Error(`FULU BambuNetwork bridge did not connect to printer ${printer.devId} at ${printer.devIp} over LAN within ${Math.round(timing.connectTimeoutMs / 1000)} s. No print command was sent.`);
+                }
+                await new Promise(resolve => setTimeout(resolve, timing.pollMs));
+            }
+            // Bambu Studio asks a newly connected printer for its full state and
+            // security metadata before building the encrypted project_file message.
+            for (const [message, qos] of [
+                [{ pushing: { sequence_id: "1", command: "pushall", version: 1, push_target: 1 } }, 0],
+                [{ info: { sequence_id: "2", command: "get_version" } }, 1],
+                [{ system: { sequence_id: "3", command: "get_access_code" } }, 0],
+            ]) {
+                await this.callWithAgent("net.send_message_to_printer", { dev_id: printer.devId, msg: JSON.stringify(message), qos, flag: 0 }, options);
+            }
+            await settle(timing.settleMs);
+            const result = await run({ installCertificate, settle, jobUpdates });
+            await pump();
+            return result;
+        }
+        finally {
+            const cleanupFailed = (step) => (error) => console.error(`FULU BambuNetwork bridge ${step} after the LAN session failed: ${error instanceof Error ? error.message : error}`);
+            if (connected)
+                await this.callWithAgent("net.disconnect_printer", {}, options).catch(cleanupFailed("disconnect"));
+            await this.request("bridge.poll_events", { limit: 4096 }, options).catch(cleanupFailed("event cleanup"));
+        }
+    }
+    /**
+     * Run a LAN print method in a local session. A synchronous -4030 means the
+     * plug-in published nothing, so it is retried once after the certificate
+     * exchange, as the native helper does; each attempt passes the caller's
+     * fresh pre-dispatch checks.
+     */
+    async startLocalPrint(printer, method, payload, options = {}, assertActive = () => { }, timing = LOCAL_PRINT_TIMING) {
+        return await this.withLocalSession(printer, options, assertActive, timing, async (session) => {
+            let result = await this.callWithAgent(method, payload, options);
+            if (bridgeNumericResult(result) === LOCAL_PRINT_PUBLISH_FAILED) {
+                await session.settle(timing.retryWaitMs);
+                await session.installCertificate();
+                await session.settle(timing.settleMs);
+                result = await this.callWithAgent(method, payload, options);
+            }
+            return { result, jobUpdates: session.jobUpdates };
+        });
+    }
     async callWithAgent(method, payload = {}, options = {}) {
         const { agent } = await this.ensureAgent(options);
         return await this.request(method, { ...payload, agent }, options);
@@ -287,6 +530,7 @@ export class BambuNetworkBridge {
         this.child = spawn(shell, shellArgs, {
             env: {
                 ...process.env,
+                ...linuxPluginLibraryEnv(process.env, process.platform),
                 PJARCZAK_BAMBU_COUNTRY_CODE: this.resolveCountryCode(),
                 PJARCZAK_EXPECTED_BAMBU_NETWORK_VERSION: this.inferredExpectedNetworkVersion ||
                     process.env.PJARCZAK_EXPECTED_BAMBU_NETWORK_VERSION ||
@@ -307,7 +551,8 @@ export class BambuNetworkBridge {
             if (this.child !== spawnedChild) {
                 return;
             }
-            this.rejectAllPending(new Error(`FULU BambuNetwork bridge exited (code=${code ?? "null"}, signal=${signal ?? "null"}). ${this.lastStderr}`.trim()));
+            this.rejectAllPending(new Error(`FULU BambuNetwork bridge exited (code=${code ?? "null"}, signal=${signal ?? "null"}). ${this.lastStderr}`.trim() +
+                (code === 101 ? ` ${STDOUT_SOCKET_HINT}` : "")));
             this.child = undefined;
             this.commandLine = undefined;
             this.agentId = undefined;

package/dist/bambu-network-certs.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Bambu's public certificates from Bambu Studio v02.08.02.61 resources/cert,
+ * the folder Bambu Studio and FULU's GUI pass to the networking plug-in's
+ * set_cert_file. printer.cer holds the BBL CA roots that sign each printer's
+ * LAN MQTT certificate; slicer_base64.cer is the cloud certificate. FULU's
+ * standalone Linux host runtime ships only slicer_base64.cer, so its plug-in
+ * cannot verify a LAN printer without these. Exact bytes, pinned by SHA-256
+ * (the same pins as scripts/setup-bambu-native.mjs).
+ */
+export declare const BAMBU_NETWORK_CERTIFICATES: Readonly<Record<"printer.cer" | "slicer_base64.cer", {
+    sha256: string;
+    base64: string;
+}>>;