firmwareloop 0.7.0__tar.gz → 0.7.1__tar.gz

{firmwareloop-0.7.0 → firmwareloop-0.7.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: firmwareloop
-Version: 0.7.0
+Version: 0.7.1
 Summary: AI Agent Firmware Development and Lab Automation Platform (Dual-Tier MCP Server)
 Author-email: WeilinZhang <19523330249@163.com>
 License: MIT
@@ -18,7 +18,7 @@ Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: pyvisa>=1.14.0
-Requires-Dist: pyvisa-py>=0.7.0
+Requires-Dist: pyvisa-py>=0.7.1
 Requires-Dist: pyserial>=3.5
 Requires-Dist: pytest>=8.0.0
 Requires-Dist: pyocd>=0.36.0
@@ -383,7 +383,7 @@ claude mcp remove --scope user agentic-hil
 ├── demo-firmware/    示例固件（CMake；宿主编译模拟 MCU，闭环验证载体）
 ├── demo-make/        示例固件（Make；构建测试载体）
 ├── docs/             DEPENDENCY_MATRIX / REUSE_PLAN / V0.0.2_GAP_VERIFICATION
-├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.7.0)
+├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.7.1)
 ├── .mcp.example.json 双层 MCP 配置模板（firmwareloop + agentic-hil）
 ├── AGENTS.md         通用智能体规范（Antigravity / Qoder / Cursor 等）
 ├── CLAUDE.md         Claude Code CLI 指南
@@ -393,7 +393,7 @@ claude mcp remove --scope user agentic-hil
 
 ---
 
-## 能力验证状态（v0.7.0）
+## 能力验证状态（v0.7.1）
 
 > 状态定义：`Implemented`（已实现）/ `Simulator Validated`（模拟验证）/
 > `Real Hardware Validated`（真机验证）/ `Experimental` / `Not Implemented`
@@ -416,7 +416,7 @@ claude mcp remove --scope user agentic-hil
 | 自动修复闭环（M6 载体） | Simulator Validated -> Real Hardware Validated 待 DUT |
 | NdtBox 数据采集/调试（fw_ndtdbg_status / fw_ndtdbg_measure, ChipSea Fxx IIC） | Implemented（无硬件 Fail-Closed 已验证）-> Real Hardware Validated 待 NdtBox |
 | NdtBox 目标断电复位（fw_ndtdbg_power_cycle, 仅 io10 断电复位, 无写闸门） | Implemented（单测覆盖时序/探针缺失指引）-> Real Hardware Validated 待 NdtBox |
-| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（84.87.1.1 / 84.87.1.2 真机整片擦写 verify pass；双闸门 Fail-Closed）+ v0.7.0 boot 判据后移/整片重写（待真机复测首试成功率） |
+| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（84.87.1.1 / 84.87.1.2 真机整片擦写 verify pass；双闸门 Fail-Closed）+ v0.7.1 **差分 boot 判据**（真机实测: 擦除后读 0x0000 = 00 00 00 00, 旧"全 FF"判据在该 ROM 上永久误判 → 已改为"仅同一条非平凡应答才熔断", 并提供 `boot_judge: off` 关闭开关） |
 | 抓开机日志（fw_serial_capture + power_cycle_off_ms, 窗口内断电复位） | Implemented（simulator 验证窗口与复位串联）-> Real Hardware Validated 待 NdtBox + DUT |
 
 ---
@@ -430,8 +430,8 @@ claude mcp remove --scope user agentic-hil
 | 写操作 `PERMISSION_DENIED` | 全局 `lab.yaml` 的 `ndtdbg.write_allowed` 为 `false` → 临时改 `true` 并重启 Agent（测试完建议改回 `false`） |
 | sigrok 报 `Failed to receive reply to EP1 command 0x7d` | Saleae 驱动不是 libusb-win32 → 用 Zadig 重装；或设备被 Logic 软件占用（先退出） |
 | `fw_logic_decode` 空帧 | 抓取窗口内无总线事务 → 改用 `fw_ndtdbg_capture_seq`（抓取与寄存器序列同窗口进行），不要串行先抓后写 |
-| 烧录报 `BOOT_NOT_ENTERED`（擦除后 0x0000 仍读回数据） | 目标没进 boot ROM（应答的是运行态 App）→ 仅对目标板断电重启（勿动 BOX）后重试；反复出现时确认 `off_ms`（默认 500ms，独立看门狗芯片需真 POR）与 io10 供电复位接线 |
-| `fw_ndtdbg_flash` 报 `TARGET_MISMATCH: 烧录校验失败 @0x....` | 响应已带 `stage_timings`/`probe_hex`/`first_mismatch_*`：先看 `probe_hex`（非 FFFFFFFF = 根本没进 boot，属上一条），再看失配偏移是否恒定（恒定=页写未落地）；整片重写次数由 `rewrite_times` 控制（默认 3） |
+| 烧录报 `BOOT_NOT_ENTERED`（擦除魔数前后 0x0000 读回**完全相同**的非平凡数据） | 差分判据认定应答者仍是运行态 App（擦除被忽略）→ 仅对目标板断电重启（勿动 BOX）后重试；反复出现时确认 `off_ms`（默认 500ms，独立看门狗芯片需真 POR）与 io10 供电复位接线。若你确认目标 ROM 的 0x0000 语义特殊，用 `boot_judge: off`（lab.yaml/CLI `--boot-judge off`/MCP `boot_judge`）关闭判据，让逐窗校验做唯一判据 |
+| `fw_ndtdbg_flash` 报 `TARGET_MISMATCH: 烧录校验失败 @0x....` | 校验是**权威判据**（不是探测启发式）。信封带 `stage_timings`/`probe_before_hex`/`probe_hex`/`boot_evidence`/`first_mismatch_*`：`boot_evidence=erase_effective` 说明擦除生效 → 看失配偏移是否恒定（恒定=页写未落地）；`inconclusive` 说明探测无区分度（擦除后读回全 00/全 FF）→ 需人工确认是否真进了 boot；整片重写次数由 `rewrite_times` 控制（默认 3） |
 | 串口 `SERIAL_PORT_ERROR: ... PermissionError(13)` | 端口被 GUI 上位机独占（NDT Debug Tool / STDataCollection.exe、串口助手）→ 关闭占用方后 `fw_serial_open`；残留会话用 `fw_serial_close`（已自动等待/强杀进程，端口释放可验证） |
 | `fw_serial_status` 的 `error_class` 为 `UART_BUSY` | 会话未打开或已被占用 → 先 `fw_serial_open`；残留会话 `fw_serial_close` 清理 |
 

{firmwareloop-0.7.0 → firmwareloop-0.7.1}/README.md

@@ -355,7 +355,7 @@ claude mcp remove --scope user agentic-hil
 ├── demo-firmware/    示例固件（CMake；宿主编译模拟 MCU，闭环验证载体）
 ├── demo-make/        示例固件（Make；构建测试载体）
 ├── docs/             DEPENDENCY_MATRIX / REUSE_PLAN / V0.0.2_GAP_VERIFICATION
-├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.7.0)
+├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.7.1)
 ├── .mcp.example.json 双层 MCP 配置模板（firmwareloop + agentic-hil）
 ├── AGENTS.md         通用智能体规范（Antigravity / Qoder / Cursor 等）
 ├── CLAUDE.md         Claude Code CLI 指南
@@ -365,7 +365,7 @@ claude mcp remove --scope user agentic-hil
 
 ---
 
-## 能力验证状态（v0.7.0）
+## 能力验证状态（v0.7.1）
 
 > 状态定义：`Implemented`（已实现）/ `Simulator Validated`（模拟验证）/
 > `Real Hardware Validated`（真机验证）/ `Experimental` / `Not Implemented`
@@ -388,7 +388,7 @@ claude mcp remove --scope user agentic-hil
 | 自动修复闭环（M6 载体） | Simulator Validated -> Real Hardware Validated 待 DUT |
 | NdtBox 数据采集/调试（fw_ndtdbg_status / fw_ndtdbg_measure, ChipSea Fxx IIC） | Implemented（无硬件 Fail-Closed 已验证）-> Real Hardware Validated 待 NdtBox |
 | NdtBox 目标断电复位（fw_ndtdbg_power_cycle, 仅 io10 断电复位, 无写闸门） | Implemented（单测覆盖时序/探针缺失指引）-> Real Hardware Validated 待 NdtBox |
-| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（84.87.1.1 / 84.87.1.2 真机整片擦写 verify pass；双闸门 Fail-Closed）+ v0.7.0 boot 判据后移/整片重写（待真机复测首试成功率） |
+| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（84.87.1.1 / 84.87.1.2 真机整片擦写 verify pass；双闸门 Fail-Closed）+ v0.7.1 **差分 boot 判据**（真机实测: 擦除后读 0x0000 = 00 00 00 00, 旧"全 FF"判据在该 ROM 上永久误判 → 已改为"仅同一条非平凡应答才熔断", 并提供 `boot_judge: off` 关闭开关） |
 | 抓开机日志（fw_serial_capture + power_cycle_off_ms, 窗口内断电复位） | Implemented（simulator 验证窗口与复位串联）-> Real Hardware Validated 待 NdtBox + DUT |
 
 ---
@@ -402,8 +402,8 @@ claude mcp remove --scope user agentic-hil
 | 写操作 `PERMISSION_DENIED` | 全局 `lab.yaml` 的 `ndtdbg.write_allowed` 为 `false` → 临时改 `true` 并重启 Agent（测试完建议改回 `false`） |
 | sigrok 报 `Failed to receive reply to EP1 command 0x7d` | Saleae 驱动不是 libusb-win32 → 用 Zadig 重装；或设备被 Logic 软件占用（先退出） |
 | `fw_logic_decode` 空帧 | 抓取窗口内无总线事务 → 改用 `fw_ndtdbg_capture_seq`（抓取与寄存器序列同窗口进行），不要串行先抓后写 |
-| 烧录报 `BOOT_NOT_ENTERED`（擦除后 0x0000 仍读回数据） | 目标没进 boot ROM（应答的是运行态 App）→ 仅对目标板断电重启（勿动 BOX）后重试；反复出现时确认 `off_ms`（默认 500ms，独立看门狗芯片需真 POR）与 io10 供电复位接线 |
-| `fw_ndtdbg_flash` 报 `TARGET_MISMATCH: 烧录校验失败 @0x....` | 响应已带 `stage_timings`/`probe_hex`/`first_mismatch_*`：先看 `probe_hex`（非 FFFFFFFF = 根本没进 boot，属上一条），再看失配偏移是否恒定（恒定=页写未落地）；整片重写次数由 `rewrite_times` 控制（默认 3） |
+| 烧录报 `BOOT_NOT_ENTERED`（擦除魔数前后 0x0000 读回**完全相同**的非平凡数据） | 差分判据认定应答者仍是运行态 App（擦除被忽略）→ 仅对目标板断电重启（勿动 BOX）后重试；反复出现时确认 `off_ms`（默认 500ms，独立看门狗芯片需真 POR）与 io10 供电复位接线。若你确认目标 ROM 的 0x0000 语义特殊，用 `boot_judge: off`（lab.yaml/CLI `--boot-judge off`/MCP `boot_judge`）关闭判据，让逐窗校验做唯一判据 |
+| `fw_ndtdbg_flash` 报 `TARGET_MISMATCH: 烧录校验失败 @0x....` | 校验是**权威判据**（不是探测启发式）。信封带 `stage_timings`/`probe_before_hex`/`probe_hex`/`boot_evidence`/`first_mismatch_*`：`boot_evidence=erase_effective` 说明擦除生效 → 看失配偏移是否恒定（恒定=页写未落地）；`inconclusive` 说明探测无区分度（擦除后读回全 00/全 FF）→ 需人工确认是否真进了 boot；整片重写次数由 `rewrite_times` 控制（默认 3） |
 | 串口 `SERIAL_PORT_ERROR: ... PermissionError(13)` | 端口被 GUI 上位机独占（NDT Debug Tool / STDataCollection.exe、串口助手）→ 关闭占用方后 `fw_serial_open`；残留会话用 `fw_serial_close`（已自动等待/强杀进程，端口释放可验证） |
 | `fw_serial_status` 的 `error_class` 为 `UART_BUSY` | 会话未打开或已被占用 → 先 `fw_serial_open`；残留会话 `fw_serial_close` 清理 |
 

{firmwareloop-0.7.0 → firmwareloop-0.7.1}/firmwareloop.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: firmwareloop
-Version: 0.7.0
+Version: 0.7.1
 Summary: AI Agent Firmware Development and Lab Automation Platform (Dual-Tier MCP Server)
 Author-email: WeilinZhang <19523330249@163.com>
 License: MIT
@@ -18,7 +18,7 @@ Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: pyvisa>=1.14.0
-Requires-Dist: pyvisa-py>=0.7.0
+Requires-Dist: pyvisa-py>=0.7.1
 Requires-Dist: pyserial>=3.5
 Requires-Dist: pytest>=8.0.0
 Requires-Dist: pyocd>=0.36.0
@@ -383,7 +383,7 @@ claude mcp remove --scope user agentic-hil
 ├── demo-firmware/    示例固件（CMake；宿主编译模拟 MCU，闭环验证载体）
 ├── demo-make/        示例固件（Make；构建测试载体）
 ├── docs/             DEPENDENCY_MATRIX / REUSE_PLAN / V0.0.2_GAP_VERIFICATION
-├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.7.0)
+├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.7.1)
 ├── .mcp.example.json 双层 MCP 配置模板（firmwareloop + agentic-hil）
 ├── AGENTS.md         通用智能体规范（Antigravity / Qoder / Cursor 等）
 ├── CLAUDE.md         Claude Code CLI 指南
@@ -393,7 +393,7 @@ claude mcp remove --scope user agentic-hil
 
 ---
 
-## 能力验证状态（v0.7.0）
+## 能力验证状态（v0.7.1）
 
 > 状态定义：`Implemented`（已实现）/ `Simulator Validated`（模拟验证）/
 > `Real Hardware Validated`（真机验证）/ `Experimental` / `Not Implemented`
@@ -416,7 +416,7 @@ claude mcp remove --scope user agentic-hil
 | 自动修复闭环（M6 载体） | Simulator Validated -> Real Hardware Validated 待 DUT |
 | NdtBox 数据采集/调试（fw_ndtdbg_status / fw_ndtdbg_measure, ChipSea Fxx IIC） | Implemented（无硬件 Fail-Closed 已验证）-> Real Hardware Validated 待 NdtBox |
 | NdtBox 目标断电复位（fw_ndtdbg_power_cycle, 仅 io10 断电复位, 无写闸门） | Implemented（单测覆盖时序/探针缺失指引）-> Real Hardware Validated 待 NdtBox |
-| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（84.87.1.1 / 84.87.1.2 真机整片擦写 verify pass；双闸门 Fail-Closed）+ v0.7.0 boot 判据后移/整片重写（待真机复测首试成功率） |
+| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（84.87.1.1 / 84.87.1.2 真机整片擦写 verify pass；双闸门 Fail-Closed）+ v0.7.1 **差分 boot 判据**（真机实测: 擦除后读 0x0000 = 00 00 00 00, 旧"全 FF"判据在该 ROM 上永久误判 → 已改为"仅同一条非平凡应答才熔断", 并提供 `boot_judge: off` 关闭开关） |
 | 抓开机日志（fw_serial_capture + power_cycle_off_ms, 窗口内断电复位） | Implemented（simulator 验证窗口与复位串联）-> Real Hardware Validated 待 NdtBox + DUT |
 
 ---
@@ -430,8 +430,8 @@ claude mcp remove --scope user agentic-hil
 | 写操作 `PERMISSION_DENIED` | 全局 `lab.yaml` 的 `ndtdbg.write_allowed` 为 `false` → 临时改 `true` 并重启 Agent（测试完建议改回 `false`） |
 | sigrok 报 `Failed to receive reply to EP1 command 0x7d` | Saleae 驱动不是 libusb-win32 → 用 Zadig 重装；或设备被 Logic 软件占用（先退出） |
 | `fw_logic_decode` 空帧 | 抓取窗口内无总线事务 → 改用 `fw_ndtdbg_capture_seq`（抓取与寄存器序列同窗口进行），不要串行先抓后写 |
-| 烧录报 `BOOT_NOT_ENTERED`（擦除后 0x0000 仍读回数据） | 目标没进 boot ROM（应答的是运行态 App）→ 仅对目标板断电重启（勿动 BOX）后重试；反复出现时确认 `off_ms`（默认 500ms，独立看门狗芯片需真 POR）与 io10 供电复位接线 |
-| `fw_ndtdbg_flash` 报 `TARGET_MISMATCH: 烧录校验失败 @0x....` | 响应已带 `stage_timings`/`probe_hex`/`first_mismatch_*`：先看 `probe_hex`（非 FFFFFFFF = 根本没进 boot，属上一条），再看失配偏移是否恒定（恒定=页写未落地）；整片重写次数由 `rewrite_times` 控制（默认 3） |
+| 烧录报 `BOOT_NOT_ENTERED`（擦除魔数前后 0x0000 读回**完全相同**的非平凡数据） | 差分判据认定应答者仍是运行态 App（擦除被忽略）→ 仅对目标板断电重启（勿动 BOX）后重试；反复出现时确认 `off_ms`（默认 500ms，独立看门狗芯片需真 POR）与 io10 供电复位接线。若你确认目标 ROM 的 0x0000 语义特殊，用 `boot_judge: off`（lab.yaml/CLI `--boot-judge off`/MCP `boot_judge`）关闭判据，让逐窗校验做唯一判据 |
+| `fw_ndtdbg_flash` 报 `TARGET_MISMATCH: 烧录校验失败 @0x....` | 校验是**权威判据**（不是探测启发式）。信封带 `stage_timings`/`probe_before_hex`/`probe_hex`/`boot_evidence`/`first_mismatch_*`：`boot_evidence=erase_effective` 说明擦除生效 → 看失配偏移是否恒定（恒定=页写未落地）；`inconclusive` 说明探测无区分度（擦除后读回全 00/全 FF）→ 需人工确认是否真进了 boot；整片重写次数由 `rewrite_times` 控制（默认 3） |
 | 串口 `SERIAL_PORT_ERROR: ... PermissionError(13)` | 端口被 GUI 上位机独占（NDT Debug Tool / STDataCollection.exe、串口助手）→ 关闭占用方后 `fw_serial_open`；残留会话用 `fw_serial_close`（已自动等待/强杀进程，端口释放可验证） |
 | `fw_serial_status` 的 `error_class` 为 `UART_BUSY` | 会话未打开或已被占用 → 先 `fw_serial_open`；残留会话 `fw_serial_close` 清理 |
 

{firmwareloop-0.7.0 → firmwareloop-0.7.1}/firmwareloop.egg-info/requires.txt

@@ -1,5 +1,5 @@
 pyvisa>=1.14.0
-pyvisa-py>=0.7.0
+pyvisa-py>=0.7.1
 pyserial>=3.5
 pytest>=8.0.0
 pyocd>=0.36.0

{firmwareloop-0.7.0 → firmwareloop-0.7.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "firmwareloop"
-version = "0.7.0"
+version = "0.7.1"
 description = "AI Agent Firmware Development and Lab Automation Platform (Dual-Tier MCP Server)"
 readme = "README.md"
 authors = [
@@ -14,7 +14,7 @@ license = { text = "MIT" }
 requires-python = ">=3.10"
 dependencies = [
     "pyvisa>=1.14.0",
-    "pyvisa-py>=0.7.0",
+    "pyvisa-py>=0.7.1",
     "pyserial>=3.5",
     "pytest>=8.0.0",
     "pyocd>=0.36.0",

{firmwareloop-0.7.0 → firmwareloop-0.7.1}/tools/__init__.py

@@ -2,4 +2,4 @@
 FirmwareLoop - AI Agent Firmware Development and Lab Automation Platform.
 """
 
-__version__ = "0.7.0"
+__version__ = "0.7.1"

{firmwareloop-0.7.0 → firmwareloop-0.7.1}/tools/fw_mcp_server.py

@@ -1,6 +1,6 @@
 #!/usr/bin/env python3
 """
-fw_mcp_server.py - FirmwareLoop High-Level Workflow & Device MCP Server (v0.7.0).
+fw_mcp_server.py - FirmwareLoop High-Level Workflow & Device MCP Server (v0.7.1).
 
 Exposes high-level firmware engineering and hardware management tools to AI Coding
 Agents (Antigravity CLI, Claude Code CLI, Qoder IDE, CodeBuddy IDE, Cursor) via the Model Context
@@ -332,7 +332,7 @@ def handle_fw_ndtdbg_write_reg(args: Dict[str, Any]) -> Dict[str, Any]:
 def handle_fw_ndtdbg_flash(args: Dict[str, Any]) -> Dict[str, Any]:
     """Erase + flash a .bin/.nfw image onto the NdtBox target chip (ChipSea Fxx) over IIC.
 
-    P1-3 (0.7.0): 去掉按签名重试 —— "TARGET_MISMATCH @0x0000" 正是"根本没进 boot"的
+    P1-3 (0.7.1): 去掉按签名重试 —— "TARGET_MISMATCH @0x0000" 正是"根本没进 boot"的
     特征签名 (旧 boot 判据假阳的同一条错误路径), 盲目重试只会重复同一失败路径。
     整片重写 (<= rewrite_times) 现由 flash_exec 内部完成, 结果带 rewrite_count;
     BOOT_NOT_ENTERED 直接返回指引 (需断电重启, 重试无意义)。
@@ -344,6 +344,8 @@ def handle_fw_ndtdbg_flash(args: Dict[str, Any]) -> Dict[str, Any]:
         cmd.extend(["--off-ms", str(int(args["off_ms"]))])
     if args.get("rewrite_times") is not None:
         cmd.extend(["--rewrite-times", str(max(0, int(args["rewrite_times"])))])
+    if args.get("boot_judge"):
+        cmd.extend(["--boot-judge", str(args["boot_judge"])])
     if args.get("confirm"):
         cmd.append("--confirm")
     _ndtdbg_reg_args(args, cmd)
@@ -1770,7 +1772,7 @@ TOOLS_REGISTRY = {
         "handler": handle_fw_ndtdbg_write_reg,
     },
     "fw_ndtdbg_flash": {
-        "description": "Erase and flash a .bin/.nfw firmware image onto the NdtBox target chip (ChipSea Fxx) over IIC via NdtDebugTool (power-cycle reset into boot -> erase magic AA 55 A5 5A -> BOOT JUDGEMENT: 0x0000 must read all-0xFF, a running App answers its own static registers and is rejected with BOOT_NOT_ENTERED -> 128B page writes -> 256B read-back verify, whole-chip rewrite on mismatch -> finish 'PASs'). DESTRUCTIVE full-chip erase: requires lab.yaml ndtdbg.write_allowed: true AND confirm: true, otherwise PERMISSION_DENIED.",
+        "description": "Erase and flash a .bin/.nfw firmware image onto the NdtBox target chip (ChipSea Fxx) over IIC via NdtDebugTool (power-cycle reset into boot -> erase magic AA 55 A5 5A -> differential BOOT JUDGEMENT: 0x0000 is sampled once BEFORE the power cycle and once AFTER the erase; only an identical NON-TRIVIAL reading (the same App answering before and after a command only the boot ROM executes) raises BOOT_NOT_ENTERED - all-00/all-FF/no-ACK are inconclusive and proceed, because a real ROM may answer 0x0000 with 00 00 00 00 after erase -> 128B page writes -> 256B read-back verify = the authoritative criterion, whole-chip rewrite on mismatch -> finish 'PASs'). DESTRUCTIVE full-chip erase: requires lab.yaml ndtdbg.write_allowed: true AND confirm: true, otherwise PERMISSION_DENIED.",
         "inputSchema": {
             "type": "object",
             "properties": {
@@ -1799,7 +1801,12 @@ TOOLS_REGISTRY = {
                 },
                 "rewrite_times": {
                     "type": "integer",
-                    "description": "Whole-chip rewrite budget when read-back verify mismatches (aligned with ChipSea.cs REWRITE_TIMES). Default 3; 0 disables rewriting. The result carries rewrite_count/attempts, and a failed flash reports stage_timings/probe_hex/first_mismatch_* for post-mortem",
+                    "description": "Whole-chip rewrite budget when read-back verify mismatches (aligned with ChipSea.cs REWRITE_TIMES). Default 3; 0 disables rewriting. The result carries rewrite_count/attempts, and a failed flash reports stage_timings/probe_before_hex/probe_hex/boot_evidence/first_mismatch_* for post-mortem",
+                },
+                "boot_judge": {
+                    "type": "string",
+                    "enum": ["diff", "off"],
+                    "description": "Boot-probe criterion. 'diff' (default): compare 0x0000 before the power cycle vs after the erase, and raise BOOT_NOT_ENTERED only when both reads are identical NON-TRIVIAL data (proof the same running App answered the erase magic). 'off': only record probe evidence (probe_before_hex/probe_hex/boot_evidence) and never block - the 256B read-back verify stays the sole criterion, i.e. exactly the bridge/GUI behaviour. Use 'off' if a target ROM reports an unexpected 0x0000 signature",
                 },
                 "dll_dir": {
                     "type": "string",
@@ -2300,7 +2307,7 @@ def process_request(req: Dict[str, Any]) -> Optional[Dict[str, Any]]:
                 },
                 "serverInfo": {
                     "name": "firmwareloop",
-                    "version": "0.7.0"
+                    "version": "0.7.1"
                 }
             }
         }
@@ -2435,7 +2442,7 @@ def _settle_stashed_entrypoints(stashed) -> None:
 def handle_cli_update() -> int:
     """Handle `firmwareloop update` command."""
     print("============================================================")
-    print("  FirmwareLoop Auto-Updater (v0.7.0)")
+    print("  FirmwareLoop Auto-Updater (v0.7.1)")
     print("============================================================")
 
     is_git_repo = os.path.exists(os.path.join(REPO_ROOT, ".git"))
@@ -2866,7 +2873,7 @@ def set_ndtdbg_dlldir(dll_path: str) -> str:
 def handle_cli_setup() -> int:
     """Handle `firmwareloop setup` command: simultaneously configure Antigravity CLI, Claude Code CLI, Qoder IDE, and CodeBuddy IDE."""
     print("============================================================")
-    print("  FirmwareLoop Multi-Agent Global Setup Helper (v0.7.0)")
+    print("  FirmwareLoop Multi-Agent Global Setup Helper (v0.7.1)")
     print("============================================================")
     print("")
 
@@ -2991,7 +2998,7 @@ def handle_cli_setup() -> int:
 def handle_cli_init(chip: Optional[str] = None, upgrade: bool = False) -> int:
     """Handle `firmwareloop init [target_chip]` command."""
     print("============================================================")
-    print("  FirmwareLoop Multi-Agent Project Initializer (v0.7.0)")
+    print("  FirmwareLoop Multi-Agent Project Initializer (v0.7.1)")
     print("============================================================")
     cwd = os.getcwd()
     print(f"[*] Initializing multi-agent guidelines & bench config in:\n    {cwd}\n")
@@ -3024,7 +3031,7 @@ def handle_cli_init(chip: Optional[str] = None, upgrade: bool = False) -> int:
 
 
 def print_cli_help() -> None:
-    print("""FirmwareLoop (fwloop) — AI Agent Firmware Engineering & Lab Automation Platform (v0.7.0)
+    print("""FirmwareLoop (fwloop) — AI Agent Firmware Engineering & Lab Automation Platform (v0.7.1)
 
 Usage:
   fwloop [command]   (or: firmwareloop [command])
@@ -3070,7 +3077,7 @@ def main() -> None:
                 sys.exit(2)
             sys.exit(handle_cli_ndtdebugtool(args[1]))
         elif cmd in ["version", "-v", "--version"]:
-            print("FirmwareLoop v0.7.0")
+            print("FirmwareLoop v0.7.1")
             sys.exit(0)
         elif cmd in ["help", "-h", "--help"]:
             print_cli_help()

{firmwareloop-0.7.0 → firmwareloop-0.7.1}/tools/lib/ndtdbg.py

@@ -262,9 +262,9 @@ PAGE_READ_GAP_MS = 10      # 回读窗口间隔 (ReadFwAndCheck Thread.Sleep(10)
 def _flash_envelope(timings: dict | None = None, **extra) -> dict:
     """P1-2: 烧录成功/失败共用同一组诊断字段。
 
-    分阶段耗时 (stage_timings) + boot 探测原始数据 (probe_hex) + 首个失配点
-    (first_mismatch_offset/expect/got) + 页数与重写次数——失败不再是"只有一句话",
-    能当场区分 "探测假阳 (根本没进 boot)" 与 "进了 boot 但页写没落地"。
+    分阶段耗时 (stage_timings) + boot 探测原始数据 (probe_before_hex/probe_hex) +
+    判据结论 (boot_evidence) + 首个失配点 (first_mismatch_offset/expect/got) +
+    页数与重写次数——失败不再是"只有一句话", 能当场区分"根本没进 boot"与"页写没落地"。
     """
     out: dict = {"stage_timings": dict(timings or {})}
     for key, val in extra.items():
@@ -273,6 +273,38 @@ def _flash_envelope(timings: dict | None = None, **extra) -> dict:
     return out
 
 
+BOOT_JUDGE_MODES = ("diff", "off")
+
+
+def classify_boot_evidence(before: bytes | None, after: bytes | None) -> str:
+    """烧录 boot 判据 (0.7.1 差分判据, 取代被实战证伪的"擦除后必须全 FF")。
+
+    返回: 'app_still_answering' (唯一熔断情形) | 'erase_effective' | 'inconclusive' | 'not_evaluated'
+
+    实战铁证 (2026-09-11, CSA37F72): 擦除后读 0x0000 = `00 00 00 00` 而非 FF ——
+    桥内单体 flash (无判据、时序同 GUI) 对同一批文件全部 verify pass ⇒ "全 FF" 只是
+    该 ROM 的**未验证假设**, 一旦当硬判据就会永久误判 BOOT_NOT_ENTERED。
+
+    现判据只在"有正面证据表明应答者仍是运行态固件"时熔断:
+      * 两次读数不同 (含"有应答 -> 无应答") ⇒ 擦除生效 ⇒ 继续;
+      * 任一侧无应答 (None) ⇒ 无法比对 ⇒ 不确定, 继续;
+      * 两次相同但内容是全 00/全 FF ⇒ 无法区分 (本 ROM 擦除后正是全 00, 而某些固件
+        的静态寄存器也可能全 0) ⇒ 不确定, 继续;
+      * 两次相同且是非平凡数据 (如 `25 01 18 01`) ⇒ 擦除魔数 (boot ROM 专属命令)
+        前后是同一条应答 ⇒ 魔数被忽略, 应答者仍是 App ⇒ 熔断。
+    一切不确定情形都放行, 由页写后的逐窗回读校验做权威兜底 (fail-closed)。
+    """
+    if before is None and after is None:
+        return "inconclusive"
+    if before is None or after is None:
+        return "erase_effective"     # 一侧有内容: 相较之下状态变了
+    if before != after:
+        return "erase_effective"
+    if all(b in (0x00, 0xFF) for b in after):
+        return "inconclusive"        # 全 00/全 FF 无区分度
+    return "app_still_answering"
+
+
 def load_firmware(file_path: str) -> tuple[str, bytes]:
     """读取固件: .nfw 去 256 头 / .bin 128 对齐 0xFF 补齐 (ChipSea.cs LoadFile)。返回 (类型, 载荷)。"""
     if not os.path.isfile(file_path):
@@ -615,25 +647,38 @@ class NdtBoxIo:
             "duration_actual_ms": int((time.monotonic() - started) * 1000),
         }
 
+    def _probe_0000(self) -> bytes | None:
+        """读 0x0000 4 字节 (boot 判据探测): 有应答返回字节, 无应答 (TARGET_MISMATCH) 返回 None。
+
+        BUS_TIMEOUT (clock-stretch 挂死) / PROTOCOL_ERROR (会话错位) 上抛——这两种状态下
+        任何继续操作都不可信 (fail-closed)。
+        """
+        try:
+            return self.raw_write_read(b"\x00\x00", 4)
+        except NdtBoxError as exc:
+            if exc.error_class == "TARGET_MISMATCH":
+                return None
+            raise
+
     def flash_exec(self, plan: dict, timeout_ms: int | None = None) -> dict:
         """Python 驱动整条 UpdateFW 序列 (0.4.0 serve 化): usb2io 断电复位进 boot +
         擦除 -> 页写 -> 回读校验 -> 完成魔数, 全部 I2C 事务经 serve 会话 (同进程同
         会话连续, 复刻原厂 GUI 进程模型)。校验 (逐窗 vs expect_hex) 在本模块完成,
-        失败 Fail-Closed 抛 TARGET_MISMATCH (信封带 stage_timings/probe_hex/first_mismatch_*)。
+        并是 burn 成功与否的**权威判据**; 失败 Fail-Closed 抛 TARGET_MISMATCH
+        (信封带 stage_timings/probe_*/boot_evidence/first_mismatch_*)。
         校验不一致时按 rewrite_times 整片重写 (对齐 ChipSea.cs REWRITE_TIMES)。
 
         plan: {"off_ms":500,"erase_ms":2000,"page_gap_ms":30,"read_gap_ms":10,
-               "rewrite_times":3,
+               "rewrite_times":3,"boot_judge":"diff",
                "writes":["<2B 地址+128B 数据帧 hex>",...],
                "windows":[{"off":0,"expect_hex":"<256B hex>"},...]}
 
-        boot-in 判据 (F1, 2026-09-11 F72 实战修正): 擦除魔数 AA55A55A 是 boot ROM 专属
-        命令, App 不实现就只会忽略——而"运行态固件不应答 0x0000"的旧假设不成立
-        (App 注册的静态寄存器 iic_test @0x00 会正常应答 25 01 18 01 02 05 00 01),
-        旧判据因此假阳, 擦除/378 页写全发给运行中的 App, 最后报误导性的 "校验失败
-        @0x0000"。故判据后移到擦除 + erase_ms 之后读 0x0000: 全 FF (或读无应答) =
-        ROM 已擦除; 读到任何非 FF 数据 = 仍在跟 App 说话 -> BOOT_NOT_ENTERED。
-        时序随之与 GUI/桥内 flash 等价: vbrt -> 100ms(boot ready) -> 擦除魔数。
+        boot 判据 (0.7.1 差分判据; 详见 classify_boot_evidence):
+        断电复位**前**读一次 0x0000 作为基线 (在关键窗口之外, 不影响"断电->擦除"间隔,
+        时序仍与 GUI/桥内 flash 等价: vbrt -> 100ms(boot ready) -> 擦除魔数), 擦除
+        + erase_ms 后再读一次, 只在"两次是同一条非平凡应答"时判 BOOT_NOT_ENTERED;
+        全 00/全 FF/任一侧无应答一律放行, 由页写后的逐窗校验兜底。boot_judge="off"
+        完全关闭该判据 (仅记录证据, 不熔断)。
         """
         import time
         off_ms = int(plan.get("off_ms", DEFAULT_OFF_MS))
@@ -641,6 +686,10 @@ class NdtBoxIo:
         page_gap = int(plan.get("page_gap_ms", PAGE_WRITE_GAP_MS))
         read_gap = int(plan.get("read_gap_ms", PAGE_READ_GAP_MS))
         rewrite_times = max(0, int(plan.get("rewrite_times", _REWRITE_TIMES)))
+        boot_judge = str(plan.get("boot_judge", "diff") or "diff").lower()
+        if boot_judge not in BOOT_JUDGE_MODES:
+            raise NdtBoxError("CONFIG_ERROR",
+                              f"boot_judge 非法 (可选 {'/'.join(BOOT_JUDGE_MODES)})", boot_judge)
         pages = plan.get("writes", [])
         windows = plan.get("windows", [])
         t_all = time.monotonic()
@@ -648,9 +697,20 @@ class NdtBoxIo:
         timings = {"power_cycle_ms": 0, "boot_probe_ms": 0, "erase_ms": 0,
                    "write_ms": 0, "verify_ms": 0}
         probe_hex: str | None = None
+        probe_before_hex: str | None = None
+        boot_evidence = "not_evaluated" if boot_judge == "off" else "inconclusive"
         rewrite_count = 0
         with self.session():
             for attempt in range(rewrite_times + 1):
+                # --- 0) 基線探测 (仅在首试判据开启时): 断电复位前采样 0x0000 ---
+                # 放在 vbrt 之前 => "断电 -> 擦除魔数" 窗口内不多任何事务 (与桥内
+                # 单体 flash/GUI 时序一致), 同时拿到"运行态固件应答长什么样"的基线。
+                if boot_judge == "diff" and attempt == 0:
+                    t_stage = time.monotonic()
+                    probe_before = self._probe_0000()
+                    if probe_before:
+                        probe_before_hex = probe_before.hex().upper()
+                    timings["boot_probe_ms"] += round((time.monotonic() - t_stage) * 1000)
                 # --- 1) 断电复位进 boot (IOoperation.VBRTOFF) ---
                 t_stage = time.monotonic()
                 self.vbrt_reset(off_ms)
@@ -668,6 +728,8 @@ class NdtBoxIo:
                             "擦除命令超时无应答 (目标未进 boot 或总线挂死)。请仅对目标板断电重启 "
                             "(勿动 BOX), 然后重新调用 fw_ndtdbg_flash", exc.detail,
                             _flash_envelope(timings, probe_hex=probe_hex,
+                                            probe_before_hex=probe_before_hex,
+                                            boot_evidence=boot_evidence,
                                             rewrite_count=rewrite_count)) from exc
                     raise NdtBoxError(
                         "BOOT_NOT_ENTERED",
@@ -677,34 +739,38 @@ class NdtBoxIo:
                         "独立看门狗芯片需要真断电)",
                         exc.detail,
                         _flash_envelope(timings, probe_hex=probe_hex,
+                                        probe_before_hex=probe_before_hex,
+                                        boot_evidence=boot_evidence,
                                         rewrite_count=rewrite_count)) from exc
                 time.sleep(erase_ms / 1000.0)
                 timings["erase_ms"] += round((time.monotonic() - t_stage) * 1000)
-                # --- 3) boot 判据 (擦除后 0x0000 全 FF = ROM 已擦除; 非 FF = 还在跟 App 说话) ---
+                # --- 3) boot 判据 (差分: 只有"魔数前后同一条非平凡应答"才熔断) ---
                 t_stage = time.monotonic()
-                probe: bytes | None = None
-                try:
-                    probe = self.raw_write_read(b"\x00\x00", 4)
-                except NdtBoxError as exc:
-                    if exc.error_class == "BUS_TIMEOUT":
-                        raise   # clock-stretch 挂死: 上抛 (信封已带断电指引)
-                    probe = None   # 无应答: ROM 在 boot 窗口内的读协议不确定, 交给后续校验兜底
+                probe = self._probe_0000()
                 timings["boot_probe_ms"] += round((time.monotonic() - t_stage) * 1000)
                 if probe:
                     probe_hex = probe.hex().upper()
-                if probe and any(b != 0xFF for b in probe):
+                if boot_judge == "diff" and attempt == 0:
+                    boot_evidence = classify_boot_evidence(
+                        bytes.fromhex(probe_before_hex) if probe_before_hex else None, probe)
+                elif boot_judge == "off":
+                    boot_evidence = "not_evaluated"
+                # 重写轮次不再判据 (基线已过期), 证据沿用首试结论
+                if boot_evidence == "app_still_answering":
                     raise NdtBoxError(
                         "BOOT_NOT_ENTERED",
-                        f"擦除后 0x0000 仍读回数据 ({probe_hex}): 目标未进入 boot ROM —— "
-                        "擦除魔数被忽略, 说明当前应答的是目标固件本身 (它在该地址注册了会应答本"
-                        "工具读协议的寄存器, 实测 iic_test[8] @0x00 = 25 01 18 01 02 05 00 01)。"
+                        f"擦除魔数前后 0x0000 读回完全相同 ({probe_hex}): 擦除被忽略 ⇒ 目标未进入 "
+                        "boot ROM (该命令只有 boot ROM 执行, 同一条应答说明应答者仍是运行态固件)。"
                         "请仅对目标板断电重启 (勿动 BOX) 后重试; 若反复出现: ①确认 off_ms 足以构成"
                         "真 POR (默认 500ms, 独立看门狗芯片只有上电/掉电/复位脚能清零); ②检查 "
                         "usb2io IO10 供电复位接线; ③确认烧录的是本芯片 boot ROM 支持的协议; "
                         "④若目标固件由你 (agent) 改动过, 先确认它确实使能了 I2C 从机 (从机未 init "
-                        "或提前 return 时该地址不应答, 现象会变成读回全 FF, 与掉电不可区分)",
+                        "或提前 return 时该地址不应答, 现象会变成读回全 FF, 与掉电不可区分)。"
+                        "如仍要强制烧录: lab.yaml ndtdbg.flash.boot_judge: off / CLI --boot-judge off",
                         None,
                         _flash_envelope(timings, probe_hex=probe_hex,
+                                        probe_before_hex=probe_before_hex,
+                                        boot_evidence=boot_evidence,
                                         pages_written=0, rewrite_count=rewrite_count))
                 # --- 4) 逐页写 (WriteFw) ---
                 t_stage = time.monotonic()
@@ -739,11 +805,17 @@ class NdtBoxIo:
                     if attempt < rewrite_times:
                         rewrite_count += 1   # 整片重写 (ChipSea.cs REWRITE_TIMES 语义)
                         continue
+                    hint = ("校验是烧录成功与否的权威判据 (非探测启发式): 若 probe 前后一致且为"
+                            "全 00/全 FF, 说明本次未进 boot 与'擦除生效'无法区分——请检查目标是否"
+                            "真的断电复位 (off_ms/IO10 接线)、以及目标固件是否使能了 I2C 从机; "
+                            "必要时可 --boot-judge off 关闭探测判据 (不改变校验)")
                     raise NdtBoxError(
                         "TARGET_MISMATCH",
                         f"烧录校验失败 @0x{mismatch['offset']:04X} (整片重写 {rewrite_count} 次后仍不一致)",
-                        f"expect={mismatch['expect']} got={mismatch['got']}",
+                        f"expect={mismatch['expect']} got={mismatch['got']}; {hint}",
                         _flash_envelope(timings, probe_hex=probe_hex,
+                                        probe_before_hex=probe_before_hex,
+                                        boot_evidence=boot_evidence,
                                         pages_written=len(pages),
                                         pages_written_total=len(pages) * (rewrite_count + 1),
                                         rewrite_count=rewrite_count,
@@ -759,7 +831,9 @@ class NdtBoxIo:
                 timings["total_ms"] = round((time.monotonic() - t_all) * 1000)
                 out = {"verify": "pass", "pages_written": len(pages),
                        "read_windows": len(windows), "rewrite_count": rewrite_count,
-                       "attempts": rewrite_count + 1, "probe_hex": probe_hex,
+                       "attempts": rewrite_count + 1,
+                       "probe_hex": probe_hex, "probe_before_hex": probe_before_hex,
+                       "boot_evidence": boot_evidence, "boot_judge": boot_judge,
                        "off_ms": off_ms, "stage_timings": timings}
                 # 兼容 0.6.x 的扁平键 (P3 分阶段耗时): 由 stage_timings 派生, 单一来源
                 out.update({"reset_ms": timings["power_cycle_ms"],
@@ -1118,21 +1192,22 @@ class ChipSeaFxx:
 
     def flash_bin(self, file_path: str, erase_ms: int = 2000,
                   off_ms: int | None = None, rewrite_times: int | None = None,
-                  progress=None) -> dict:
+                  boot_judge: str | None = None, progress=None) -> dict:
         """经 NdtBox IIC 烧录 .bin/.nfw 固件到芯海 Fxx (UpdateFW 语义)。
 
         时序逐行对齐 ChipSea.cs UpdateFW, 进程模型对齐原厂 STDataCollection GUI:
-          VBRTOFF(off_ms) 断电复位进 boot -> 100ms -> 擦除魔数 -> erase_ms ->
-          擦除后 0x0000 判据 (F1) -> 逐 128B 页写(30ms) -> 200ms ->
-          逐 256B 窗回读校验(10ms) -> 不一致整片重写 (<= rewrite_times) ->
-          完成魔数 "PASs" -> VBRTOFF(off_ms) 复位加载。
+          [判据基线探测 0x0000 (在窗口之外)] -> VBRTOFF(off_ms) 断电复位进 boot
+          -> 100ms -> 擦除魔数 -> erase_ms -> 差分 boot 判据 ->
+          逐 128B 页写(30ms) -> 200ms -> 逐 256B 窗回读校验(10ms, 权威判据)
+          -> 不一致整片重写 (<= rewrite_times) -> 完成魔数 "PASs" -> VBRTOFF 复位加载。
         全程经同一 serve 会话连续执行 (同进程同 USB 会话), ~15s 量级。
         帧组装在本层 (可单测); 校验失败 Fail-Closed 抛 NdtBoxError, 信封带
-        stage_timings/probe_hex/first_mismatch_* (P1-2)。
+        stage_timings/probe_before_hex/probe_hex/boot_evidence/first_mismatch_* (P1-2)。
 
         off_ms 默认 DEFAULT_OFF_MS=500 (独立看门狗芯片需真 POR); rewrite_times
-        默认 _REWRITE_TIMES=3 (对齐 ChipSea.cs)。progress(phase, done, total) 在
-        verify 阶段末回调。
+        默认 _REWRITE_TIMES=3 (对齐 ChipSea.cs); boot_judge 默认 "diff" (差分判据,
+        只在有正面证据表明应答者仍是运行态固件时熔断; "off" = 完全关闭, 仅记录证据)。
+        progress(phase, done, total) 在 verify 阶段末回调。
         """
         import time
         fw_type, fw = load_firmware(file_path)
@@ -1145,6 +1220,7 @@ class ChipSeaFxx:
             "page_gap_ms": PAGE_WRITE_GAP_MS,
             "read_gap_ms": PAGE_READ_GAP_MS,
             "rewrite_times": _REWRITE_TIMES if rewrite_times is None else max(0, int(rewrite_times)),
+            "boot_judge": str(boot_judge or "diff").lower(),
             "writes": [build_page_write_frame(off, fw[off:off + FLASH_WRITE_PAGE]).hex()
                        for off in pages],
             "windows": [{"off": off, "expect_hex": expected_read_window(fw, off).hex()}
@@ -1162,6 +1238,10 @@ class ChipSeaFxx:
             "erase_ms": int(erase_ms),
             "off_ms": plan["off_ms"],
             "rewrite_times": plan["rewrite_times"],
+            "boot_judge": plan["boot_judge"],
+            "boot_evidence": res.get("boot_evidence"),
+            "probe_hex": res.get("probe_hex"),
+            "probe_before_hex": res.get("probe_before_hex"),
             "rewrite_count": res.get("rewrite_count", 0),
             "attempts": res.get("attempts", 1),
             "stage_timings": res.get("stage_timings"),

{firmwareloop-0.7.0 → firmwareloop-0.7.1}/tools/ndtdbg_cli.py

@@ -504,7 +504,8 @@ def cmd_stream(io: NdtBoxIo, config: dict, specs: list, interval_ms, duration_s:
 
 
 def cmd_flash_bin(io: NdtBoxIo, config: dict, file_path: str, erase_ms: int, confirm: bool,
-                  off_ms: int | None = None, rewrite_times: int | None = None) -> None:
+                  off_ms: int | None = None, rewrite_times: int | None = None,
+                  boot_judge: str | None = None) -> None:
     # 烧录 = 整片擦除 + 页写, 破坏性高于 write-reg, 同款双闸门
     ndt_cfg = config.get("ndtdbg") or {}
     allowed = ndt_cfg.get("write_allowed", False)
@@ -516,22 +517,27 @@ def cmd_flash_bin(io: NdtBoxIo, config: dict, file_path: str, erase_ms: int, con
                      f"生效配置: {effective_config_desc()}"))
     # P1-1: off_ms 可配置 (CLI --off-ms > lab.yaml ndtdbg.flash.off_ms > 内置 500ms)。
     # 独立看门狗芯片 (如 CSA37F72 IWDG_S) 只有真 POR 能清零, 200ms 可能只是深度掉压。
+    flash_cfg = ndt_cfg.get("flash") or {}
     if off_ms is None:
-        flash_cfg = ndt_cfg.get("flash") or {}
         off_ms = flash_cfg.get("off_ms")
+    # 0.7.1: boot 判据可整体关闭 (差分判据仍是启发式; 现场遇到与本 ROM 行为不符的
+    # 目标时, 用 off 让页写后的逐窗校验做唯一判据 —— 即桥内单体 flash 的语义)
+    if boot_judge is None:
+        boot_judge = flash_cfg.get("boot_judge")
 
     def progress(phase: str, done: int, total: int) -> None:
         print(f"[flash-bin] {phase} {done}/{total}", file=sys.stderr, flush=True)
 
     result = ChipSeaFxx(io).flash_bin(file_path, erase_ms=erase_ms, off_ms=off_ms,
-                                      rewrite_times=rewrite_times, progress=progress)
+                                      rewrite_times=rewrite_times, boot_judge=boot_judge,
+                                      progress=progress)
     result["authorization"] = {"write_allowed": True,
                                "granted_by": write_allowed_source() or "(default false)",
                                "chain": list(_CONFIG_FILES)}
     ok("flash-bin", result,
        log=f"UpdateFW({file_path}): {result['fw_len']}B, {result['pages_written']} pages, "
            f"off_ms={result.get('off_ms')}, rewrite={result.get('rewrite_count', 0)}, "
-           f"verify={result['verify']}")
+           f"boot_judge={result.get('boot_judge')}, verify={result['verify']}")
 
 
 # --------------------------------------------------------------------------- main
@@ -582,6 +588,9 @@ def build_parser() -> argparse.ArgumentParser:
                         "独立看门狗芯片需要真 POR)")
     f.add_argument("--rewrite-times", type=int, default=None,
                    help="校验不一致时整片重写次数上限 (默认对齐 ChipSea.cs 的 3; 0=不重写)")
+    f.add_argument("--boot-judge", choices=["diff", "off"], default=None,
+                   help="boot 判据 (默认 diff: 只有'擦除魔数前后同一条非平凡应答'才熔断; "
+                        "off: 完全关闭探测判据, 仅记录证据, 由逐窗校验做唯一判据)")
 
     st = sub.add_parser("stream", parents=[common],
                         help="高速连续采集寄存器组到 CSV (单会话长驻, 只读)")
@@ -641,7 +650,8 @@ def main(argv=None) -> None:
             cmd_poll(io, args.duration_ms, args.interval_ms, args.max_frames, args.full)
         elif args.cmd == "flash-bin":
             cmd_flash_bin(io, config, args.file, args.erase_ms, args.confirm,
-                          off_ms=args.off_ms, rewrite_times=args.rewrite_times)
+                          off_ms=args.off_ms, rewrite_times=args.rewrite_times,
+                          boot_judge=args.boot_judge)
         elif args.cmd == "stream":
             specs = [parse_reg_spec(s) for s in args.regs]
             cmd_stream(io, config, specs, args.interval_ms, args.duration_s,

{firmwareloop-0.7.0 → firmwareloop-0.7.1}/tools/setup-agent-mcp.ps1

@@ -1,6 +1,6 @@
 <#
 .SYNOPSIS
-    Dual-Tier MCP setup and registration helper (v0.7.0).
+    Dual-Tier MCP setup and registration helper (v0.7.1).
     Inspects installed AI coding agents (Qoder, Claude Code, Antigravity, Cursor)
     and configures global MCP / skills or prints exact registration commands.
 
@@ -242,7 +242,7 @@ if ($Json) {
     Write-FwJson ([pscustomobject]$report)
 } else {
     Write-Host "============================================================" -ForegroundColor Cyan
-    Write-Host "  FirmwareLoop Dual-Tier MCP & Agent Setup Helper (v0.7.0)" -ForegroundColor Green
+    Write-Host "  FirmwareLoop Dual-Tier MCP & Agent Setup Helper (v0.7.1)" -ForegroundColor Green
     Write-Host "============================================================" -ForegroundColor Cyan
     Write-Host ""
     Write-Host "[1] Google Antigravity / Gemini CLI:" -ForegroundColor Yellow