firmwareloop 0.1.6__tar.gz → 0.1.7__tar.gz

{firmwareloop-0.1.6 → firmwareloop-0.1.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: firmwareloop
-Version: 0.1.6
+Version: 0.1.7
 Summary: AI Agent Firmware Development and Lab Automation Platform (Dual-Tier MCP Server)
 Author-email: WeilinZhang <19523330249@163.com>
 License: MIT
@@ -134,7 +134,8 @@ fwloop ndtdebugtool "C:/Users/weilin.zhang/Desktop/zwl/NdtDebugTool-v1.0.19"
 > 完成以上两步后，Agent 侧即可直接调用 NdtBox 相关工具：
 > `fw_ndtdbg_status`（版本/连通性/模组通断）、`fw_ndtdbg_measure`（数据轮询采集）、
 > `fw_ndtdbg_read_reg` / `fw_ndtdbg_write_reg`（任意寄存器读写，写需 `write_allowed` + `confirm` 双门控）、
-> `fw_ndtdbg_capture_seq`（寄存器序列 + Saleae 波形同窗口取证）。
+> `fw_ndtdbg_capture_seq`（寄存器序列 + Saleae 波形同窗口取证）、
+> `fw_ndtdbg_flash`（.bin/.nfw 整片擦写烧录，需 `write_allowed` + `confirm` 双门控，默认拒绝）。
 > 前置硬件要求：NdtBox 已装 CH341 驱动；如需 Saleae 波形证据，另装 sigrok-cli 并配置
 > `libusb-win32` 驱动（详见 `docs/` 交付说明）。测试时请退出 STDataCollection.exe 上位机（USB 独占）。
 
@@ -362,7 +363,7 @@ claude mcp remove --scope user agentic-hil
 ├── demo-firmware/    示例固件（CMake；宿主编译模拟 MCU，闭环验证载体）
 ├── demo-make/        示例固件（Make；构建测试载体）
 ├── docs/             DEPENDENCY_MATRIX / REUSE_PLAN / V0.0.2_GAP_VERIFICATION
-├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.1.6)
+├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.1.7)
 ├── .mcp.example.json 双层 MCP 配置模板（firmwareloop + agentic-hil）
 ├── AGENTS.md         通用智能体规范（Antigravity / Qoder / Cursor 等）
 ├── CLAUDE.md         Claude Code CLI 指南
@@ -372,7 +373,7 @@ claude mcp remove --scope user agentic-hil
 
 ---
 
-## 能力验证状态（v0.1.6）
+## 能力验证状态（v0.1.7）
 
 > 状态定义：`Implemented`（已实现）/ `Simulator Validated`（模拟验证）/
 > `Real Hardware Validated`（真机验证）/ `Experimental` / `Not Implemented`
@@ -393,6 +394,7 @@ claude mcp remove --scope user agentic-hil
 | Safety Policy（limits.yaml） | Implemented（simulator 校验）-> 外置权威配置 |
 | 自动修复闭环（M6 载体） | Simulator Validated -> Real Hardware Validated 待 DUT |
 | NdtBox 数据采集/调试（fw_ndtdbg_status / fw_ndtdbg_measure, ChipSea Fxx IIC） | Implemented（无硬件 Fail-Closed 已验证）-> Real Hardware Validated 待 NdtBox |
+| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Implemented（时序对齐原厂 UpdateFW, 双闸门 Fail-Closed 已验证）-> Real Hardware 待烧录验收 |
 
 ---
 

{firmwareloop-0.1.6 → firmwareloop-0.1.7}/README.md

@@ -106,7 +106,8 @@ fwloop ndtdebugtool "C:/Users/weilin.zhang/Desktop/zwl/NdtDebugTool-v1.0.19"
 > 完成以上两步后，Agent 侧即可直接调用 NdtBox 相关工具：
 > `fw_ndtdbg_status`（版本/连通性/模组通断）、`fw_ndtdbg_measure`（数据轮询采集）、
 > `fw_ndtdbg_read_reg` / `fw_ndtdbg_write_reg`（任意寄存器读写，写需 `write_allowed` + `confirm` 双门控）、
-> `fw_ndtdbg_capture_seq`（寄存器序列 + Saleae 波形同窗口取证）。
+> `fw_ndtdbg_capture_seq`（寄存器序列 + Saleae 波形同窗口取证）、
+> `fw_ndtdbg_flash`（.bin/.nfw 整片擦写烧录，需 `write_allowed` + `confirm` 双门控，默认拒绝）。
 > 前置硬件要求：NdtBox 已装 CH341 驱动；如需 Saleae 波形证据，另装 sigrok-cli 并配置
 > `libusb-win32` 驱动（详见 `docs/` 交付说明）。测试时请退出 STDataCollection.exe 上位机（USB 独占）。
 
@@ -334,7 +335,7 @@ claude mcp remove --scope user agentic-hil
 ├── demo-firmware/    示例固件（CMake；宿主编译模拟 MCU，闭环验证载体）
 ├── demo-make/        示例固件（Make；构建测试载体）
 ├── docs/             DEPENDENCY_MATRIX / REUSE_PLAN / V0.0.2_GAP_VERIFICATION
-├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.1.6)
+├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.1.7)
 ├── .mcp.example.json 双层 MCP 配置模板（firmwareloop + agentic-hil）
 ├── AGENTS.md         通用智能体规范（Antigravity / Qoder / Cursor 等）
 ├── CLAUDE.md         Claude Code CLI 指南
@@ -344,7 +345,7 @@ claude mcp remove --scope user agentic-hil
 
 ---
 
-## 能力验证状态（v0.1.6）
+## 能力验证状态（v0.1.7）
 
 > 状态定义：`Implemented`（已实现）/ `Simulator Validated`（模拟验证）/
 > `Real Hardware Validated`（真机验证）/ `Experimental` / `Not Implemented`
@@ -365,6 +366,7 @@ claude mcp remove --scope user agentic-hil
 | Safety Policy（limits.yaml） | Implemented（simulator 校验）-> 外置权威配置 |
 | 自动修复闭环（M6 载体） | Simulator Validated -> Real Hardware Validated 待 DUT |
 | NdtBox 数据采集/调试（fw_ndtdbg_status / fw_ndtdbg_measure, ChipSea Fxx IIC） | Implemented（无硬件 Fail-Closed 已验证）-> Real Hardware Validated 待 NdtBox |
+| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Implemented（时序对齐原厂 UpdateFW, 双闸门 Fail-Closed 已验证）-> Real Hardware 待烧录验收 |
 
 ---
 

{firmwareloop-0.1.6 → firmwareloop-0.1.7}/firmwareloop.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: firmwareloop
-Version: 0.1.6
+Version: 0.1.7
 Summary: AI Agent Firmware Development and Lab Automation Platform (Dual-Tier MCP Server)
 Author-email: WeilinZhang <19523330249@163.com>
 License: MIT
@@ -134,7 +134,8 @@ fwloop ndtdebugtool "C:/Users/weilin.zhang/Desktop/zwl/NdtDebugTool-v1.0.19"
 > 完成以上两步后，Agent 侧即可直接调用 NdtBox 相关工具：
 > `fw_ndtdbg_status`（版本/连通性/模组通断）、`fw_ndtdbg_measure`（数据轮询采集）、
 > `fw_ndtdbg_read_reg` / `fw_ndtdbg_write_reg`（任意寄存器读写，写需 `write_allowed` + `confirm` 双门控）、
-> `fw_ndtdbg_capture_seq`（寄存器序列 + Saleae 波形同窗口取证）。
+> `fw_ndtdbg_capture_seq`（寄存器序列 + Saleae 波形同窗口取证）、
+> `fw_ndtdbg_flash`（.bin/.nfw 整片擦写烧录，需 `write_allowed` + `confirm` 双门控，默认拒绝）。
 > 前置硬件要求：NdtBox 已装 CH341 驱动；如需 Saleae 波形证据，另装 sigrok-cli 并配置
 > `libusb-win32` 驱动（详见 `docs/` 交付说明）。测试时请退出 STDataCollection.exe 上位机（USB 独占）。
 
@@ -362,7 +363,7 @@ claude mcp remove --scope user agentic-hil
 ├── demo-firmware/    示例固件（CMake；宿主编译模拟 MCU，闭环验证载体）
 ├── demo-make/        示例固件（Make；构建测试载体）
 ├── docs/             DEPENDENCY_MATRIX / REUSE_PLAN / V0.0.2_GAP_VERIFICATION
-├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.1.6)
+├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.1.7)
 ├── .mcp.example.json 双层 MCP 配置模板（firmwareloop + agentic-hil）
 ├── AGENTS.md         通用智能体规范（Antigravity / Qoder / Cursor 等）
 ├── CLAUDE.md         Claude Code CLI 指南
@@ -372,7 +373,7 @@ claude mcp remove --scope user agentic-hil
 
 ---
 
-## 能力验证状态（v0.1.6）
+## 能力验证状态（v0.1.7）
 
 > 状态定义：`Implemented`（已实现）/ `Simulator Validated`（模拟验证）/
 > `Real Hardware Validated`（真机验证）/ `Experimental` / `Not Implemented`
@@ -393,6 +394,7 @@ claude mcp remove --scope user agentic-hil
 | Safety Policy（limits.yaml） | Implemented（simulator 校验）-> 外置权威配置 |
 | 自动修复闭环（M6 载体） | Simulator Validated -> Real Hardware Validated 待 DUT |
 | NdtBox 数据采集/调试（fw_ndtdbg_status / fw_ndtdbg_measure, ChipSea Fxx IIC） | Implemented（无硬件 Fail-Closed 已验证）-> Real Hardware Validated 待 NdtBox |
+| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Implemented（时序对齐原厂 UpdateFW, 双闸门 Fail-Closed 已验证）-> Real Hardware 待烧录验收 |
 
 ---
 

{firmwareloop-0.1.6 → firmwareloop-0.1.7}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "firmwareloop"
-version = "0.1.6"
+version = "0.1.7"
 description = "AI Agent Firmware Development and Lab Automation Platform (Dual-Tier MCP Server)"
 readme = "README.md"
 authors = [

{firmwareloop-0.1.6 → firmwareloop-0.1.7}/tools/__init__.py

@@ -2,4 +2,4 @@
 FirmwareLoop - AI Agent Firmware Development and Lab Automation Platform.
 """
 
-__version__ = "0.1.6"
+__version__ = "0.1.7"

{firmwareloop-0.1.6 → firmwareloop-0.1.7}/tools/fw_mcp_server.py

@@ -1,6 +1,6 @@
 #!/usr/bin/env python3
 """
-fw_mcp_server.py - FirmwareLoop High-Level Workflow & Device MCP Server (v0.1.6).
+fw_mcp_server.py - FirmwareLoop High-Level Workflow & Device MCP Server (v0.1.7).
 
 Exposes high-level firmware engineering and hardware management tools to AI Coding
 Agents (Antigravity CLI, Claude Code CLI, Qoder IDE, CodeBuddy IDE, Cursor) via the Model Context
@@ -19,6 +19,7 @@ Tools provided:
   - fw_ndtdbg_read_reg: NdtBox IIC register read (ndtdbg_cli.py)
   - fw_ndtdbg_write_reg: NdtBox IIC register write, double-gated (ndtdbg_cli.py)
   - fw_ndtdbg_capture_seq: NdtBox register sequence + concurrent I2C capture for waveform evidence (ndtdbg_cli.py)
+  - fw_ndtdbg_flash: NdtBox IIC firmware flash (.bin/.nfw, full-chip erase, double-gated) (ndtdbg_cli.py)
   - fw_logic_capture: Logic analyzer protocol capture (logic_capture.ps1)
   - fw_logic_decode: Logic analyzer protocol decoding & assertion (logic_decode.ps1)
   - fw_get_evidence: Read structured audit run evidence (artifacts/runs/)
@@ -306,6 +307,18 @@ def handle_fw_ndtdbg_write_reg(args: Dict[str, Any]) -> Dict[str, Any]:
     return res
 
 
+def handle_fw_ndtdbg_flash(args: Dict[str, Any]) -> Dict[str, Any]:
+    """Erase + flash a .bin/.nfw image onto the NdtBox target chip (ChipSea Fxx) over IIC."""
+    cli_script = os.path.join(REPO_ROOT, "tools", "ndtdbg_cli.py")
+    cmd = [PYTHON_EXE, cli_script, "flash-bin", "--file", str(args.get("file_path")),
+           "--erase-ms", str(int(args.get("erase_ms", 2000)))]
+    if args.get("confirm"):
+        cmd.append("--confirm")
+    _ndtdbg_reg_args(args, cmd)
+    timeout_s = min(max(int(args.get("timeout_seconds", 300)), 30), 900)
+    return run_process(cmd, timeout=timeout_s)
+
+
 def handle_fw_ndtdbg_capture_seq(args: Dict[str, Any]) -> Dict[str, Any]:
     """单次调用内并发: 逻辑分析仪抓取与 NdtBox 寄存器序列同时进行。
 
@@ -1265,6 +1278,47 @@ TOOLS_REGISTRY = {
         },
         "handler": handle_fw_ndtdbg_write_reg,
     },
+    "fw_ndtdbg_flash": {
+        "description": "Erase and flash a .bin/.nfw firmware image onto the NdtBox target chip (ChipSea Fxx) over IIC via NdtDebugTool (power-cycle reset into boot -> erase magic AA 55 A5 5A -> 128B page writes -> 256B read-back verify -> finish 'PASs'). DESTRUCTIVE full-chip erase: requires lab.yaml ndtdbg.write_allowed: true AND confirm: true, otherwise PERMISSION_DENIED.",
+        "inputSchema": {
+            "type": "object",
+            "properties": {
+                "file_path": {
+                    "type": "string",
+                    "description": "Firmware image path (.bin auto-padded to 128-byte alignment with 0xFF; .nfw stripped of its 256-byte header)",
+                },
+                "confirm": {
+                    "type": "boolean",
+                    "description": "Acknowledge the destructive full-chip erase (double-gated with lab.yaml ndtdbg.write_allowed)",
+                    "default": False,
+                },
+                "erase_ms": {
+                    "type": "integer",
+                    "description": "Erase wait in ms (align with factory UpdateFW: 2000)",
+                    "default": 2000,
+                },
+                "timeout_seconds": {
+                    "type": "integer",
+                    "description": "CLI process timeout; budget ~30s per 64KB image (page writes paced at 30ms)",
+                    "default": 300,
+                },
+                "dll_dir": {
+                    "type": "string",
+                    "description": "NdtDebugTool lib directory containing USBIOX.DLL and usb2io.dll; default from lab.yaml ndtdbg.dll_dir",
+                },
+                "slave_addr": {
+                    "type": "string",
+                    "description": "IIC slave address (e.g. 0xA0); default from lab.yaml ndtdbg.slave_addr",
+                },
+                "speed": {
+                    "type": "integer",
+                    "description": "IIC speed 0=20kHz 1=100kHz; default from lab.yaml ndtdbg.iic_speed",
+                },
+            },
+            "required": ["file_path"],
+        },
+        "handler": handle_fw_ndtdbg_flash,
+    },
     "fw_ndtdbg_capture_seq": {
         "description": "One-call protocol evidence: concurrently runs a NdtBox register write sequence (default 0xBE=01, 0x01=BE 42, poll 0x01, readback 0xBE) and a 3s Saleae/sigrok I2C capture, returning the capture path for fw_logic_decode.",
         "inputSchema": {
@@ -1433,7 +1487,7 @@ def process_request(req: Dict[str, Any]) -> Optional[Dict[str, Any]]:
                 },
                 "serverInfo": {
                     "name": "firmwareloop",
-                    "version": "0.1.6"
+                    "version": "0.1.7"
                 }
             }
         }
@@ -1525,7 +1579,7 @@ def process_request(req: Dict[str, Any]) -> Optional[Dict[str, Any]]:
 def handle_cli_update() -> int:
     """Handle `firmwareloop update` command."""
     print("============================================================")
-    print("  FirmwareLoop Auto-Updater (v0.1.6)")
+    print("  FirmwareLoop Auto-Updater (v0.1.7)")
     print("============================================================")
 
     is_git_repo = os.path.exists(os.path.join(REPO_ROOT, ".git"))
@@ -1795,7 +1849,7 @@ def set_ndtdbg_dlldir(dll_path: str) -> str:
 def handle_cli_setup() -> int:
     """Handle `firmwareloop setup` command: simultaneously configure Antigravity CLI, Claude Code CLI, Qoder IDE, and CodeBuddy IDE."""
     print("============================================================")
-    print("  FirmwareLoop Multi-Agent Global Setup Helper (v0.1.6)")
+    print("  FirmwareLoop Multi-Agent Global Setup Helper (v0.1.7)")
     print("============================================================")
     print("")
 
@@ -1920,7 +1974,7 @@ def handle_cli_setup() -> int:
 def handle_cli_init() -> int:
     """Handle `firmwareloop init` command."""
     print("============================================================")
-    print("  FirmwareLoop Multi-Agent Project Initializer (v0.1.6)")
+    print("  FirmwareLoop Multi-Agent Project Initializer (v0.1.7)")
     print("============================================================")
     cwd = os.getcwd()
     print(f"[*] Initializing multi-agent guidelines & bench config in:\n    {cwd}\n")
@@ -1941,7 +1995,7 @@ def handle_cli_init() -> int:
 
 
 def print_cli_help() -> None:
-    print("""FirmwareLoop (fwloop) — AI Agent Firmware Engineering & Lab Automation Platform (v0.1.6)
+    print("""FirmwareLoop (fwloop) — AI Agent Firmware Engineering & Lab Automation Platform (v0.1.7)
 
 Usage:
   fwloop [command]   (or: firmwareloop [command])
@@ -1981,7 +2035,7 @@ def main() -> None:
                 sys.exit(2)
             sys.exit(handle_cli_ndtdebugtool(args[1]))
         elif cmd in ["version", "-v", "--version"]:
-            print("FirmwareLoop v0.1.6")
+            print("FirmwareLoop v0.1.7")
             sys.exit(0)
         elif cmd in ["help", "-h", "--help"]:
             print_cli_help()

{firmwareloop-0.1.6 → firmwareloop-0.1.7}/tools/lib/ndtdbg.py

@@ -92,6 +92,53 @@ def pad_bin_128(file_bytes: bytes) -> bytes:
     return file_bytes + b"\xFF" * pad
 
 
+# ---------------------------------------------------------------------------
+# 固件烧录 (对齐 ChipSea.cs UpdateFW: 断电复位 -> 整片擦除 -> 页写 -> 回读校验 -> 完成魔数)
+# ---------------------------------------------------------------------------
+
+FLASH_WRITE_PAGE = 128     # WriteFw 每事务 128 字节负载 (IIC 写共 130B = 2B 页地址 + 负载)
+FLASH_READ_WINDOW = 256    # ReadFwAndCheck 每窗回读 256 字节
+ERASE_MAGIC = b"\xAA\x55\xA5\x5A"    # EreaseChipCmd 写 @0x0000
+FINISH_MAGIC = b"\x50\x41\x53\x73"   # UpgradeFinishCmd "PASs" 写 @0x0000
+BOOT_READY_MS = 100        # VBRTOFF 上电后到发擦除命令的等待 (UpdateFW Thread.Sleep(100))
+PAGE_WRITE_GAP_MS = 30     # 页写间隔 (WriteFw Thread.Sleep(30))
+PAGE_READ_GAP_MS = 10      # 回读窗口间隔 (ReadFwAndCheck Thread.Sleep(10))
+
+
+def load_firmware(file_path: str) -> tuple[str, bytes]:
+    """读取固件: .nfw 去 256 头 / .bin 128 对齐 0xFF 补齐 (ChipSea.cs LoadFile)。返回 (类型, 载荷)。"""
+    if not os.path.isfile(file_path):
+        raise NdtBoxError("CONFIG_ERROR", "固件文件不存在", file_path)
+    ext = os.path.splitext(file_path)[1].lower()
+    try:
+        with open(file_path, "rb") as fh:
+            raw = fh.read()
+    except OSError as exc:
+        raise NdtBoxError("CONFIG_ERROR", "固件文件读取失败", str(exc)) from exc
+    if ext == ".nfw":
+        return "nfw", strip_nfw(raw)
+    if ext == ".bin":
+        if not raw:
+            raise NdtBoxError("CONFIG_ERROR", ".bin 固件为空", file_path)
+        return "bin", pad_bin_128(raw)
+    raise NdtBoxError("CONFIG_ERROR", "仅支持 .bin / .nfw 固件文件", ext or "(无后缀)")
+
+
+def build_page_write_frame(offset: int, page: bytes) -> bytes:
+    """页写帧: 页地址大端 2 字节 + <=128 字节负载 (ChipSea.cs WriteFw 逐页自 0x0000 递增)。"""
+    if len(page) > FLASH_WRITE_PAGE:
+        raise NdtBoxError("CONFIG_ERROR", "页负载超过 128 字节", str(len(page)))
+    if not 0 <= offset <= 0xFFFF:
+        raise NdtBoxError("CONFIG_ERROR", "页地址越界 (0..0xFFFF)", hex(offset))
+    return offset.to_bytes(2, "big") + page
+
+
+def expected_read_window(fw: bytes, offset: int) -> bytes:
+    """回读期望窗口: 256 字节, 末窗不足部分 0xFF 补齐 (ChipSea.cs ReadFwAndCheck)。"""
+    window = fw[offset:offset + FLASH_READ_WINDOW]
+    return window + b"\xFF" * (FLASH_READ_WINDOW - len(window))
+
+
 # ---------------------------------------------------------------------------
 # 桥调用层
 # ---------------------------------------------------------------------------
@@ -156,6 +203,24 @@ class NdtBoxIo:
             raise NdtBoxError("CONFIG_ERROR", "写入数据过长 (<=128)", str(len(data)))
         self._bridge("write", RegAddr=reg, Data=data.hex())
 
+    def raw_write_read(self, write: bytes, read_len: int = 0) -> bytes | None:
+        """原始 IIC 事务 (对齐 IIC.WriteRead): 写 write 字节(不含从机地址) 再读 read_len 字节。
+
+        覆盖 ChipSea 烧录的多字节地址形态 (页写 130B / 页读 [hi,lo]+256)。
+        """
+        if not write:
+            raise NdtBoxError("CONFIG_ERROR", "raw 写字节为空", None)
+        if 1 + len(write) > 256:
+            raise NdtBoxError("CONFIG_ERROR", "raw 写事务过长 (含从机地址须 <=256)", str(len(write)))
+        if not 0 <= read_len <= 256:
+            raise NdtBoxError("CONFIG_ERROR", "raw 读长度越界 (0..256)", str(read_len))
+        data = self._bridge("raw", WriteHex=write.hex(), ReadLen=read_len)
+        return bytes.fromhex(data["hex"].replace(" ", "")) if read_len > 0 else None
+
+    def vbrt_reset(self, off_ms: int = 200) -> dict:
+        """模组断电 off_ms 后恢复上电 (usb2io.dll IO10)——复位进入 IIC boot (IOoperation.VBRTOFF)。"""
+        return self._bridge("vbrt", OffMs=off_ms)
+
     def close(self) -> dict:
         return self._bridge("close")
 
@@ -220,3 +285,65 @@ class ChipSeaFxx:
             raise NdtBoxError("CONFIG_ERROR", "poll 时长必须 > 0", str(duration_ms))
         return self._io._bridge("poll", DurationMs=int(duration_ms), IntervalMs=int(interval_ms),
                                 ReadyTimeoutMs=int(ready_timeout_ms))
+
+    # -- 固件烧录 (对齐 ChipSea.cs UpdateFW: 仅芯海 Fxx, 整片擦写) --
+
+    def flash_bin(self, file_path: str, erase_ms: int = 2000,
+                  progress=None) -> dict:
+        """经 NdtBox IIC 烧录 .bin/.nfw 固件到芯海 Fxx。
+
+        时序逐行对齐 ChipSea.cs UpdateFW:
+          LoadFile -> VBRTOFF(200) 断电复位进 boot -> 100ms -> 擦除魔数 -> erase_ms ->
+          逐 128B 页写(30ms 间隔) -> 200ms -> 逐 256B 窗回读校验(10ms 间隔) ->
+          完成魔数 "PASs" -> VBRTOFF(200) 复位加载新固件。
+
+        progress(phase, done, total) 在 write/verify 阶段回调。
+        校验不匹配抛 TARGET_MISMATCH (Fail-Closed, 不伪造成功)。
+        """
+        import time
+
+        fw_type, fw = load_firmware(file_path)
+        started = time.monotonic()
+        pages = [fw[i:i + FLASH_WRITE_PAGE] for i in range(0, len(fw), FLASH_WRITE_PAGE)]
+        windows = list(range(0, len(fw), FLASH_READ_WINDOW))
+
+        self._io.vbrt_reset(200)
+        time.sleep(BOOT_READY_MS / 1000.0)
+        self._io.raw_write_read(b"\x00\x00" + ERASE_MAGIC, 0)
+        time.sleep(0.010)
+        time.sleep(erase_ms / 1000.0)
+
+        for i, page in enumerate(pages):
+            self._io.raw_write_read(build_page_write_frame(i * FLASH_WRITE_PAGE, page), 0)
+            time.sleep(PAGE_WRITE_GAP_MS / 1000.0)
+            if progress:
+                progress("write", i + 1, len(pages))
+
+        time.sleep(0.200)
+        for i, off in enumerate(windows):
+            expect = expected_read_window(fw, off)
+            got = self._io.raw_write_read(off.to_bytes(2, "big"), FLASH_READ_WINDOW)
+            if got != expect:
+                diff = next(k for k in range(FLASH_READ_WINDOW) if got[k] != expect[k])
+                raise NdtBoxError(
+                    "TARGET_MISMATCH",
+                    f"烧录校验失败 @0x{off + diff:04X}",
+                    f"expect={expect[diff:diff + 8].hex()} got={got[diff:diff + 8].hex()}")
+            time.sleep(PAGE_READ_GAP_MS / 1000.0)
+            if progress:
+                progress("verify", i + 1, len(windows))
+
+        self._io.raw_write_read(b"\x00\x00" + FINISH_MAGIC, 0)
+        time.sleep(0.010)
+        self._io.vbrt_reset(200)
+
+        return {
+            "file": file_path,
+            "file_type": fw_type,
+            "fw_len": len(fw),
+            "pages_written": len(pages),
+            "read_windows": len(windows),
+            "erase_ms": erase_ms,
+            "verify": "pass",
+            "duration_ms": int((time.monotonic() - started) * 1000),
+        }

{firmwareloop-0.1.6 → firmwareloop-0.1.7}/tools/ndtdbg_bridge.ps1

@@ -4,7 +4,7 @@
 # 输出: stdout 单行 JSON {ok, action, data} 或 {ok:false, error_class, error, detail}。
 param(
     [Parameter(Mandatory = $true)]
-    [ValidateSet("open", "read", "write", "version", "connect", "poll", "close")]
+    [ValidateSet("open", "read", "write", "version", "connect", "poll", "close", "raw", "vbrt")]
     [string]$Action,
 
     [string]$DllDir,
@@ -16,6 +16,11 @@ param(
     [int]$Len = 1,
     [string]$Data = "",         # 十六进制字符串, 空格或连续皆可: "A5 01 02"
 
+    [string]$WriteHex = "",     # raw: 写事务字节 (不含从机地址, 桥负责前置), 对齐 IIC.WriteRead(wBuf[0]=slave)
+    [int]$ReadLen = 0,          # raw: 读字节数 (0=纯写)
+
+    [int]$OffMs = 200,          # vbrt: 模组断电时长 ms (IO10 拉高), 结束后恢复上电
+
     [int]$DurationMs = 1000,    # poll 时长
     [int]$IntervalMs = 10,      # poll 采样间隔
     [int]$ReadyTimeoutMs = 2000 # poll 数据就绪轮询超时
@@ -55,6 +60,16 @@ namespace STDataCollection {
     [DllImport("USBIOX.DLL", CallingConvention = CallingConvention.StdCall)]
     public static extern bool USBIO_StreamI2C(uint iIndex, uint iWriteLength, IntPtr iWriteBuffer, uint iReadLength, IntPtr oReadBuffer);
   }
+  public static class U2io {
+    [DllImport("USB2IO.dll", CallingConvention = CallingConvention.StdCall, CharSet = CharSet.Auto)]
+    public static extern IntPtr USB2IO_Open(int Nbr);
+    [DllImport("USB2IO.dll", CallingConvention = CallingConvention.StdCall, CharSet = CharSet.Auto)]
+    public static extern int USB2IO_SetIoCfg(IntPtr h, int IoNbr, int IoCfg);
+    [DllImport("USB2IO.dll", CallingConvention = CallingConvention.StdCall, CharSet = CharSet.Auto)]
+    public static extern int USB2IO_SetIoOut(IntPtr h, int IoNbr, int IoOut);
+    [DllImport("USB2IO.dll", CallingConvention = CallingConvention.StdCall, CharSet = CharSet.Auto)]
+    public static extern int USB2IO_Close(IntPtr h);
+  }
 }
 "@
 }
@@ -228,6 +243,34 @@ try {
             Write-Output (@{ ok = $true; action = "poll"; data = @{ frame_count = $frames.Count; checksum_errors = $checksumErrors; ready_timeouts = $deadFrames; interval_ms = $IntervalMs; frames = $frames } } | ConvertTo-Json -Compress -Depth 6)
             exit 0
         }
+        "raw" {
+            # 对齐 ChipSea.cs 的多字节地址事务: 写 [slave, wBuf...] 再读 ReadLen 字节 (IIC.WriteRead 语义)
+            $wb = Parse-Hex $WriteHex
+            if ($wb.Count -eq 0) { Fail "CONFIG_ERROR" "raw 需要 -WriteHex (不含从机地址的写事务字节)" $null }
+            if (($wb.Count + 1) -gt 256) { Fail "CONFIG_ERROR" "raw 写事务过长 (含从机地址须 <=256)" $wb.Count }
+            if ($ReadLen -lt 0 -or $ReadLen -gt 256) { Fail "CONFIG_ERROR" "raw -ReadLen 越界 (0..256)" $ReadLen }
+            $h = Open-Device 0
+            $rb = New-Object byte[] $ReadLen
+            if (-not (Invoke-WriteRead $h $wb $rb)) { Fail "TARGET_MISMATCH" ("IIC raw 事务无应答 (w={0}B r={1}B)" -f $wb.Count, $ReadLen) (($wb | ForEach-Object { $_.ToString("X2") }) -join " ") }
+            [STDataCollection.Icb]::USBIO_CloseDevice([uint32]0) | Out-Null
+            $dataOut = @{ written = $wb.Count; read = $ReadLen }
+            if ($ReadLen -gt 0) { $dataOut.hex = (($rb | ForEach-Object { $_.ToString("X2") }) -join " ") }
+            Write-Output (@{ ok = $true; action = "raw"; data = $dataOut } | ConvertTo-Json -Compress -Depth 4)
+            exit 0
+        }
+        "vbrt" {
+            # 模组供电脚 (IO10) 对齐 IOoperation.VBRTON/VBRTOFF: usb2io.dll 设备号 1, IO10 配置 3=输出, 1=断电 0=上电
+            $h2 = [STDataCollection.U2io]::USB2IO_Open(1)
+            if ([int]$h2 -eq -1) { Fail "PROBE_NOT_FOUND" "USB2IO 打开失败 (设备 1); 确认 DllDir 含 usb2io.dll 且 NdtBox 已连接" $null }
+            [STDataCollection.U2io]::USB2IO_SetIoCfg($h2, 10, 3) | Out-Null
+            [STDataCollection.U2io]::USB2IO_SetIoOut($h2, 10, 1) | Out-Null
+            Start-Sleep -Milliseconds $OffMs
+            [STDataCollection.U2io]::USB2IO_SetIoOut($h2, 10, 0) | Out-Null
+            Start-Sleep -Milliseconds 50
+            [STDataCollection.U2io]::USB2IO_Close($h2) | Out-Null
+            Write-Output (@{ ok = $true; action = "vbrt"; data = @{ off_ms = $OffMs; powered_on = $true } } | ConvertTo-Json -Compress -Depth 4)
+            exit 0
+        }
     }
 } catch {
     Fail "UNKNOWN_ERROR" "bridge 异常: $($_.Exception.Message)" $_.ScriptStackTrace

{firmwareloop-0.1.6 → firmwareloop-0.1.7}/tools/ndtdbg_cli.py

@@ -135,6 +135,21 @@ def cmd_poll(io: NdtBoxIo, duration_ms: int, interval_ms: int, max_frames: int,
     ok("poll", result, log=f"poll({duration_ms}ms, {interval_ms}ms): {len(frames)} frames")
 
 
+def cmd_flash_bin(io: NdtBoxIo, config: dict, file_path: str, erase_ms: int, confirm: bool) -> None:
+    # 烧录 = 整片擦除 + 页写, 破坏性高于 write-reg, 同款双闸门
+    if not confirm or not (config.get("ndtdbg") or {}).get("write_allowed", False):
+        fail("PERMISSION_DENIED",
+             "固件烧录被默认禁止",
+             detail="flash-bin 为整片擦写: 需 lab.yaml ndtdbg.write_allowed: true 且 CLI 传 --confirm")
+
+    def progress(phase: str, done: int, total: int) -> None:
+        print(f"[flash-bin] {phase} {done}/{total}", file=sys.stderr, flush=True)
+
+    result = ChipSeaFxx(io).flash_bin(file_path, erase_ms=erase_ms, progress=progress)
+    ok("flash-bin", result,
+       log=f"UpdateFW({file_path}): {result['fw_len']}B, {result['pages_written']} pages, verify={result['verify']}")
+
+
 # --------------------------------------------------------------------------- main
 
 def build_parser() -> argparse.ArgumentParser:
@@ -145,7 +160,7 @@ def build_parser() -> argparse.ArgumentParser:
     common.add_argument("--slave-addr", help="IIC 从机地址, 默认 0xA0 (支持 0x 前缀)")
     common.add_argument("--speed", help="IIC 速度 0=20kHz 1=100kHz, 默认 1")
     common.add_argument("--lab-config", help="显式指定 lab.yaml 路径")
-    common.add_argument("--confirm", action="store_true", help="write-reg 需与 lab.yaml write_allowed 双确认")
+    common.add_argument("--confirm", action="store_true", help="write-reg / flash-bin 需与 lab.yaml write_allowed 双确认")
     sub = p.add_subparsers(dest="cmd", required=True)
 
     sub.add_parser("status", parents=[common], help="连通性 + 固件版本 + 模组通断")
@@ -165,6 +180,12 @@ def build_parser() -> argparse.ArgumentParser:
     p_poll.add_argument("--interval-ms", type=int, default=10)
     p_poll.add_argument("--max-frames", type=int, default=4, help="非 --full 时保留的帧样本数")
     p_poll.add_argument("--full", action="store_true", help="输出全部帧 (可能较大)")
+
+    f = sub.add_parser("flash-bin", parents=[common],
+                       help="烧录 .bin/.nfw 固件 (整片擦写, 默认禁止, 需网关+--confirm)")
+    f.add_argument("--file", required=True,
+                   help="固件文件 (.bin 自动 128 对齐补 0xFF; .nfw 去 256 头)")
+    f.add_argument("--erase-ms", type=int, default=2000, help="擦除等待 ms (对齐原厂 2000)")
     return p
 
 
@@ -187,6 +208,8 @@ def main(argv=None) -> None:
             cmd_write_reg(io, config, args.addr, args.data, args.confirm)
         elif args.cmd == "poll":
             cmd_poll(io, args.duration_ms, args.interval_ms, args.max_frames, args.full)
+        elif args.cmd == "flash-bin":
+            cmd_flash_bin(io, config, args.file, args.erase_ms, args.confirm)
         else:  # pragma: no cover
             fail("CONFIG_ERROR", f"unknown cmd: {args.cmd}")
     except NdtBoxError as exc:

{firmwareloop-0.1.6 → firmwareloop-0.1.7}/tools/setup-agent-mcp.ps1

@@ -1,6 +1,6 @@
 <#
 .SYNOPSIS
-    Dual-Tier MCP setup and registration helper (v0.1.6).
+    Dual-Tier MCP setup and registration helper (v0.1.7).
     Inspects installed AI coding agents (Qoder, Claude Code, Antigravity, Cursor)
     and configures global MCP / skills or prints exact registration commands.
 
@@ -242,7 +242,7 @@ if ($Json) {
     Write-FwJson ([pscustomobject]$report)
 } else {
     Write-Host "============================================================" -ForegroundColor Cyan
-    Write-Host "  FirmwareLoop Dual-Tier MCP & Agent Setup Helper (v0.1.6)" -ForegroundColor Green
+    Write-Host "  FirmwareLoop Dual-Tier MCP & Agent Setup Helper (v0.1.7)" -ForegroundColor Green
     Write-Host "============================================================" -ForegroundColor Cyan
     Write-Host ""
     Write-Host "[1] Google Antigravity / Gemini CLI:" -ForegroundColor Yellow