firmwareloop 0.7.2__tar.gz → 0.7.4__tar.gz

{firmwareloop-0.7.2 → firmwareloop-0.7.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: firmwareloop
-Version: 0.7.2
+Version: 0.7.4
 Summary: AI Agent Firmware Development and Lab Automation Platform (Dual-Tier MCP Server)
 Author-email: WeilinZhang <19523330249@163.com>
 License: MIT
@@ -18,7 +18,7 @@ Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: pyvisa>=1.14.0
-Requires-Dist: pyvisa-py>=0.7.2
+Requires-Dist: pyvisa-py>=0.7.4
 Requires-Dist: pyserial>=3.5
 Requires-Dist: pytest>=8.0.0
 Requires-Dist: pyocd>=0.36.0
@@ -383,7 +383,7 @@ claude mcp remove --scope user agentic-hil
 ├── demo-firmware/    示例固件（CMake；宿主编译模拟 MCU，闭环验证载体）
 ├── demo-make/        示例固件（Make；构建测试载体）
 ├── docs/             DEPENDENCY_MATRIX / REUSE_PLAN / V0.0.2_GAP_VERIFICATION
-├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.7.2)
+├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.7.4)
 ├── .mcp.example.json 双层 MCP 配置模板（firmwareloop + agentic-hil）
 ├── AGENTS.md         通用智能体规范（Antigravity / Qoder / Cursor 等）
 ├── CLAUDE.md         Claude Code CLI 指南
@@ -393,7 +393,7 @@ claude mcp remove --scope user agentic-hil
 
 ---
 
-## 能力验证状态（v0.7.2）
+## 能力验证状态（v0.7.4）
 
 > 状态定义：`Implemented`（已实现）/ `Simulator Validated`（模拟验证）/
 > `Real Hardware Validated`（真机验证）/ `Experimental` / `Not Implemented`
@@ -416,7 +416,9 @@ claude mcp remove --scope user agentic-hil
 | 自动修复闭环（M6 载体） | Simulator Validated -> Real Hardware Validated 待 DUT |
 | NdtBox 数据采集/调试（fw_ndtdbg_status / fw_ndtdbg_measure, ChipSea Fxx IIC） | Implemented（无硬件 Fail-Closed 已验证）-> Real Hardware Validated 待 NdtBox |
 | NdtBox 目标断电复位（fw_ndtdbg_power_cycle, 仅 io10 断电复位, 无写闸门） | Implemented（单测覆盖时序/探针缺失指引）-> Real Hardware Validated 待 NdtBox |
-| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（84.87.1.1 / 84.87.1.2 真机整片擦写 verify pass; 2026-09-11 同批文件桥内单体 flash 6/6 pass；双闸门 Fail-Closed）。**v0.7.2 起默认引擎 = 桥内单体 flash**（逐笔 serve 路径现场实测"擦除生效但页写不落地"，保留 `flash_engine: serve` 供 A/B）；差分 boot 判据 + `boot_judge: off` 逃生开关见 0.7.1 |
+| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（84.87.1.1 / 84.87.1.2 真机整片擦写 verify pass; 2026-09-11 同批文件桥内单体 flash 6/6 pass；双闸门 Fail-Closed）。**v0.7.2 起默认引擎 = 桥内单体 flash**（逐笔 serve 路径现场实测"擦除生效但页写不落地"，保留 `flash_engine: serve` 供 A/B）；差分 boot 判据 + `boot_judge: off` 逃生开关见 0.7.1；**待验收声明：默认引擎路径（Python 组 plan → Popen 桥 → 解析信封）尚待真机验收** |
+| 烧后冷启动冒烟（fw_ndtdbg_flash 默认开, `cold_boot_check`） | Implemented（单测覆盖通过/全 FF/期望不符/关闭；`COLD_BOOT_VERIFY_FAILED` 错误类）-> Real Hardware Validated 待真机 |
+| 串口占用取证（`port_probe` 试开硬结论 + `holder_candidates` 候选名单） | Implemented（试开结论可复现；候选按 cmdline/name 标注置信度） |
 | 抓开机日志（fw_serial_capture + power_cycle_off_ms, 窗口内断电复位） | Implemented（simulator 验证窗口与复位串联）-> Real Hardware Validated 待 NdtBox + DUT |
 
 ---
@@ -435,8 +437,11 @@ claude mcp remove --scope user agentic-hil
 | 串口 `SERIAL_PORT_ERROR: ... PermissionError(13)` | 端口被 GUI 上位机独占（NDT Debug Tool / STDataCollection.exe、串口助手）→ 关闭占用方后 `fw_serial_open`；残留会话用 `fw_serial_close`（已自动等待/强杀进程，端口释放可验证） |
 | `fw_serial_status` 的 `error_class` 为 `UART_BUSY` | 会话未打开或已被占用 → 先 `fw_serial_open`；残留会话 `fw_serial_close` 清理 |
 | `fw_serial_*` 报 `PermissionError(13)` / `rx_bytes: 0` | 串口被独占：**退出 NDT Debug Tool GUI（STDataCollection.exe）**——它打开时会同时占住 Box 串口与 USB-IIC 通道；失败信封/`fw_serial_status` 的 `suspected_holders` 会直接列出嫌疑进程（注意别杀 MCP server 的 python） |
-| 烧录"擦除生效（probe 从非 00 变 00）但校验读回全 FF"、`pages_written` 已发出 | v0.7.1 及更早的逐笔 serve 路径问题 → v0.7.2 起默认走 `flash_engine: bridge`（桥内单体，与 GUI 同进程模型）；要复现/排查旧行为用 `flash_engine: "serve"` |
+| 烧录"擦除生效（probe 从非 00 变 00）但校验读回全 FF"、`pages_written` 已发出 | v0.7.1 及更早的逐笔 serve 路径问题 → v0.7.4 起默认走 `flash_engine: bridge`（桥内单体，与 GUI 同进程模型）；要复现/排查旧行为用 `flash_engine: "serve"` |
 | 长调用（capture/measure）客户端超时 | MCP stdio 循环是**单线程**的：长调用会让同会话其它调用排队（含 3s 的小调用）→ 缩短窗口，或用 `fw_ndtdbg_stream_start` job 模式 |
+| 烧录报 `INCOMPLETE_FLASH` | 桥内 flash 连续 30s 无进度（疑似卡在写入中途）→ **芯片处于半擦写态，勿直接使用，必须重新完整烧录**；信封带 `chip_state: partially_erased` 与 `post_kill_power_cycle`（已尝试复位） |
+| 烧录报 `COLD_BOOT_VERIFY_FAILED` | **Flash 字节已通过逐窗校验，但断电重上电后目标没有有效应答/与期望不符**（现场失败形态：烧录工具报成功、当场可读，冷启动后却读不到版本）→ 按固件冷启动路径排查（看门狗/时钟/外设初始化）；或用 `cold_boot_expect` 指定期望值、`cold_boot_check: false` 关闭 |
+| `fw_serial_status` 的 `port_probe.openable = false` | 端口当前**无法独占打开**（硬结论）→ 看 `holder_candidates`（`source: cmdline` 比 `name` 准，候选≠持有者）确认占用方 |
 
 完整速查表与手工部署细节见 [`Fwloop_setup_pack/README.md`](Fwloop_setup_pack/README.md)。
 

{firmwareloop-0.7.2 → firmwareloop-0.7.4}/README.md

@@ -355,7 +355,7 @@ claude mcp remove --scope user agentic-hil
 ├── demo-firmware/    示例固件（CMake；宿主编译模拟 MCU，闭环验证载体）
 ├── demo-make/        示例固件（Make；构建测试载体）
 ├── docs/             DEPENDENCY_MATRIX / REUSE_PLAN / V0.0.2_GAP_VERIFICATION
-├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.7.2)
+├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.7.4)
 ├── .mcp.example.json 双层 MCP 配置模板（firmwareloop + agentic-hil）
 ├── AGENTS.md         通用智能体规范（Antigravity / Qoder / Cursor 等）
 ├── CLAUDE.md         Claude Code CLI 指南
@@ -365,7 +365,7 @@ claude mcp remove --scope user agentic-hil
 
 ---
 
-## 能力验证状态（v0.7.2）
+## 能力验证状态（v0.7.4）
 
 > 状态定义：`Implemented`（已实现）/ `Simulator Validated`（模拟验证）/
 > `Real Hardware Validated`（真机验证）/ `Experimental` / `Not Implemented`
@@ -388,7 +388,9 @@ claude mcp remove --scope user agentic-hil
 | 自动修复闭环（M6 载体） | Simulator Validated -> Real Hardware Validated 待 DUT |
 | NdtBox 数据采集/调试（fw_ndtdbg_status / fw_ndtdbg_measure, ChipSea Fxx IIC） | Implemented（无硬件 Fail-Closed 已验证）-> Real Hardware Validated 待 NdtBox |
 | NdtBox 目标断电复位（fw_ndtdbg_power_cycle, 仅 io10 断电复位, 无写闸门） | Implemented（单测覆盖时序/探针缺失指引）-> Real Hardware Validated 待 NdtBox |
-| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（84.87.1.1 / 84.87.1.2 真机整片擦写 verify pass; 2026-09-11 同批文件桥内单体 flash 6/6 pass；双闸门 Fail-Closed）。**v0.7.2 起默认引擎 = 桥内单体 flash**（逐笔 serve 路径现场实测"擦除生效但页写不落地"，保留 `flash_engine: serve` 供 A/B）；差分 boot 判据 + `boot_judge: off` 逃生开关见 0.7.1 |
+| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（84.87.1.1 / 84.87.1.2 真机整片擦写 verify pass; 2026-09-11 同批文件桥内单体 flash 6/6 pass；双闸门 Fail-Closed）。**v0.7.2 起默认引擎 = 桥内单体 flash**（逐笔 serve 路径现场实测"擦除生效但页写不落地"，保留 `flash_engine: serve` 供 A/B）；差分 boot 判据 + `boot_judge: off` 逃生开关见 0.7.1；**待验收声明：默认引擎路径（Python 组 plan → Popen 桥 → 解析信封）尚待真机验收** |
+| 烧后冷启动冒烟（fw_ndtdbg_flash 默认开, `cold_boot_check`） | Implemented（单测覆盖通过/全 FF/期望不符/关闭；`COLD_BOOT_VERIFY_FAILED` 错误类）-> Real Hardware Validated 待真机 |
+| 串口占用取证（`port_probe` 试开硬结论 + `holder_candidates` 候选名单） | Implemented（试开结论可复现；候选按 cmdline/name 标注置信度） |
 | 抓开机日志（fw_serial_capture + power_cycle_off_ms, 窗口内断电复位） | Implemented（simulator 验证窗口与复位串联）-> Real Hardware Validated 待 NdtBox + DUT |
 
 ---
@@ -407,8 +409,11 @@ claude mcp remove --scope user agentic-hil
 | 串口 `SERIAL_PORT_ERROR: ... PermissionError(13)` | 端口被 GUI 上位机独占（NDT Debug Tool / STDataCollection.exe、串口助手）→ 关闭占用方后 `fw_serial_open`；残留会话用 `fw_serial_close`（已自动等待/强杀进程，端口释放可验证） |
 | `fw_serial_status` 的 `error_class` 为 `UART_BUSY` | 会话未打开或已被占用 → 先 `fw_serial_open`；残留会话 `fw_serial_close` 清理 |
 | `fw_serial_*` 报 `PermissionError(13)` / `rx_bytes: 0` | 串口被独占：**退出 NDT Debug Tool GUI（STDataCollection.exe）**——它打开时会同时占住 Box 串口与 USB-IIC 通道；失败信封/`fw_serial_status` 的 `suspected_holders` 会直接列出嫌疑进程（注意别杀 MCP server 的 python） |
-| 烧录"擦除生效（probe 从非 00 变 00）但校验读回全 FF"、`pages_written` 已发出 | v0.7.1 及更早的逐笔 serve 路径问题 → v0.7.2 起默认走 `flash_engine: bridge`（桥内单体，与 GUI 同进程模型）；要复现/排查旧行为用 `flash_engine: "serve"` |
+| 烧录"擦除生效（probe 从非 00 变 00）但校验读回全 FF"、`pages_written` 已发出 | v0.7.1 及更早的逐笔 serve 路径问题 → v0.7.4 起默认走 `flash_engine: bridge`（桥内单体，与 GUI 同进程模型）；要复现/排查旧行为用 `flash_engine: "serve"` |
 | 长调用（capture/measure）客户端超时 | MCP stdio 循环是**单线程**的：长调用会让同会话其它调用排队（含 3s 的小调用）→ 缩短窗口，或用 `fw_ndtdbg_stream_start` job 模式 |
+| 烧录报 `INCOMPLETE_FLASH` | 桥内 flash 连续 30s 无进度（疑似卡在写入中途）→ **芯片处于半擦写态，勿直接使用，必须重新完整烧录**；信封带 `chip_state: partially_erased` 与 `post_kill_power_cycle`（已尝试复位） |
+| 烧录报 `COLD_BOOT_VERIFY_FAILED` | **Flash 字节已通过逐窗校验，但断电重上电后目标没有有效应答/与期望不符**（现场失败形态：烧录工具报成功、当场可读，冷启动后却读不到版本）→ 按固件冷启动路径排查（看门狗/时钟/外设初始化）；或用 `cold_boot_expect` 指定期望值、`cold_boot_check: false` 关闭 |
+| `fw_serial_status` 的 `port_probe.openable = false` | 端口当前**无法独占打开**（硬结论）→ 看 `holder_candidates`（`source: cmdline` 比 `name` 准，候选≠持有者）确认占用方 |
 
 完整速查表与手工部署细节见 [`Fwloop_setup_pack/README.md`](Fwloop_setup_pack/README.md)。
 

{firmwareloop-0.7.2 → firmwareloop-0.7.4}/firmwareloop.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: firmwareloop
-Version: 0.7.2
+Version: 0.7.4
 Summary: AI Agent Firmware Development and Lab Automation Platform (Dual-Tier MCP Server)
 Author-email: WeilinZhang <19523330249@163.com>
 License: MIT
@@ -18,7 +18,7 @@ Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
 Requires-Dist: pyvisa>=1.14.0
-Requires-Dist: pyvisa-py>=0.7.2
+Requires-Dist: pyvisa-py>=0.7.4
 Requires-Dist: pyserial>=3.5
 Requires-Dist: pytest>=8.0.0
 Requires-Dist: pyocd>=0.36.0
@@ -383,7 +383,7 @@ claude mcp remove --scope user agentic-hil
 ├── demo-firmware/    示例固件（CMake；宿主编译模拟 MCU，闭环验证载体）
 ├── demo-make/        示例固件（Make；构建测试载体）
 ├── docs/             DEPENDENCY_MATRIX / REUSE_PLAN / V0.0.2_GAP_VERIFICATION
-├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.7.2)
+├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.7.4)
 ├── .mcp.example.json 双层 MCP 配置模板（firmwareloop + agentic-hil）
 ├── AGENTS.md         通用智能体规范（Antigravity / Qoder / Cursor 等）
 ├── CLAUDE.md         Claude Code CLI 指南
@@ -393,7 +393,7 @@ claude mcp remove --scope user agentic-hil
 
 ---
 
-## 能力验证状态（v0.7.2）
+## 能力验证状态（v0.7.4）
 
 > 状态定义：`Implemented`（已实现）/ `Simulator Validated`（模拟验证）/
 > `Real Hardware Validated`（真机验证）/ `Experimental` / `Not Implemented`
@@ -416,7 +416,9 @@ claude mcp remove --scope user agentic-hil
 | 自动修复闭环（M6 载体） | Simulator Validated -> Real Hardware Validated 待 DUT |
 | NdtBox 数据采集/调试（fw_ndtdbg_status / fw_ndtdbg_measure, ChipSea Fxx IIC） | Implemented（无硬件 Fail-Closed 已验证）-> Real Hardware Validated 待 NdtBox |
 | NdtBox 目标断电复位（fw_ndtdbg_power_cycle, 仅 io10 断电复位, 无写闸门） | Implemented（单测覆盖时序/探针缺失指引）-> Real Hardware Validated 待 NdtBox |
-| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（84.87.1.1 / 84.87.1.2 真机整片擦写 verify pass; 2026-09-11 同批文件桥内单体 flash 6/6 pass；双闸门 Fail-Closed）。**v0.7.2 起默认引擎 = 桥内单体 flash**（逐笔 serve 路径现场实测"擦除生效但页写不落地"，保留 `flash_engine: serve` 供 A/B）；差分 boot 判据 + `boot_judge: off` 逃生开关见 0.7.1 |
+| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（84.87.1.1 / 84.87.1.2 真机整片擦写 verify pass; 2026-09-11 同批文件桥内单体 flash 6/6 pass；双闸门 Fail-Closed）。**v0.7.2 起默认引擎 = 桥内单体 flash**（逐笔 serve 路径现场实测"擦除生效但页写不落地"，保留 `flash_engine: serve` 供 A/B）；差分 boot 判据 + `boot_judge: off` 逃生开关见 0.7.1；**待验收声明：默认引擎路径（Python 组 plan → Popen 桥 → 解析信封）尚待真机验收** |
+| 烧后冷启动冒烟（fw_ndtdbg_flash 默认开, `cold_boot_check`） | Implemented（单测覆盖通过/全 FF/期望不符/关闭；`COLD_BOOT_VERIFY_FAILED` 错误类）-> Real Hardware Validated 待真机 |
+| 串口占用取证（`port_probe` 试开硬结论 + `holder_candidates` 候选名单） | Implemented（试开结论可复现；候选按 cmdline/name 标注置信度） |
 | 抓开机日志（fw_serial_capture + power_cycle_off_ms, 窗口内断电复位） | Implemented（simulator 验证窗口与复位串联）-> Real Hardware Validated 待 NdtBox + DUT |
 
 ---
@@ -435,8 +437,11 @@ claude mcp remove --scope user agentic-hil
 | 串口 `SERIAL_PORT_ERROR: ... PermissionError(13)` | 端口被 GUI 上位机独占（NDT Debug Tool / STDataCollection.exe、串口助手）→ 关闭占用方后 `fw_serial_open`；残留会话用 `fw_serial_close`（已自动等待/强杀进程，端口释放可验证） |
 | `fw_serial_status` 的 `error_class` 为 `UART_BUSY` | 会话未打开或已被占用 → 先 `fw_serial_open`；残留会话 `fw_serial_close` 清理 |
 | `fw_serial_*` 报 `PermissionError(13)` / `rx_bytes: 0` | 串口被独占：**退出 NDT Debug Tool GUI（STDataCollection.exe）**——它打开时会同时占住 Box 串口与 USB-IIC 通道；失败信封/`fw_serial_status` 的 `suspected_holders` 会直接列出嫌疑进程（注意别杀 MCP server 的 python） |
-| 烧录"擦除生效（probe 从非 00 变 00）但校验读回全 FF"、`pages_written` 已发出 | v0.7.1 及更早的逐笔 serve 路径问题 → v0.7.2 起默认走 `flash_engine: bridge`（桥内单体，与 GUI 同进程模型）；要复现/排查旧行为用 `flash_engine: "serve"` |
+| 烧录"擦除生效（probe 从非 00 变 00）但校验读回全 FF"、`pages_written` 已发出 | v0.7.1 及更早的逐笔 serve 路径问题 → v0.7.4 起默认走 `flash_engine: bridge`（桥内单体，与 GUI 同进程模型）；要复现/排查旧行为用 `flash_engine: "serve"` |
 | 长调用（capture/measure）客户端超时 | MCP stdio 循环是**单线程**的：长调用会让同会话其它调用排队（含 3s 的小调用）→ 缩短窗口，或用 `fw_ndtdbg_stream_start` job 模式 |
+| 烧录报 `INCOMPLETE_FLASH` | 桥内 flash 连续 30s 无进度（疑似卡在写入中途）→ **芯片处于半擦写态，勿直接使用，必须重新完整烧录**；信封带 `chip_state: partially_erased` 与 `post_kill_power_cycle`（已尝试复位） |
+| 烧录报 `COLD_BOOT_VERIFY_FAILED` | **Flash 字节已通过逐窗校验，但断电重上电后目标没有有效应答/与期望不符**（现场失败形态：烧录工具报成功、当场可读，冷启动后却读不到版本）→ 按固件冷启动路径排查（看门狗/时钟/外设初始化）；或用 `cold_boot_expect` 指定期望值、`cold_boot_check: false` 关闭 |
+| `fw_serial_status` 的 `port_probe.openable = false` | 端口当前**无法独占打开**（硬结论）→ 看 `holder_candidates`（`source: cmdline` 比 `name` 准，候选≠持有者）确认占用方 |
 
 完整速查表与手工部署细节见 [`Fwloop_setup_pack/README.md`](Fwloop_setup_pack/README.md)。
 

{firmwareloop-0.7.2 → firmwareloop-0.7.4}/firmwareloop.egg-info/requires.txt

@@ -1,5 +1,5 @@
 pyvisa>=1.14.0
-pyvisa-py>=0.7.2
+pyvisa-py>=0.7.4
 pyserial>=3.5
 pytest>=8.0.0
 pyocd>=0.36.0

{firmwareloop-0.7.2 → firmwareloop-0.7.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "firmwareloop"
-version = "0.7.2"
+version = "0.7.4"
 description = "AI Agent Firmware Development and Lab Automation Platform (Dual-Tier MCP Server)"
 readme = "README.md"
 authors = [
@@ -14,7 +14,7 @@ license = { text = "MIT" }
 requires-python = ">=3.10"
 dependencies = [
     "pyvisa>=1.14.0",
-    "pyvisa-py>=0.7.2",
+    "pyvisa-py>=0.7.4",
     "pyserial>=3.5",
     "pytest>=8.0.0",
     "pyocd>=0.36.0",

{firmwareloop-0.7.2 → firmwareloop-0.7.4}/tools/__init__.py

@@ -2,4 +2,4 @@
 FirmwareLoop - AI Agent Firmware Development and Lab Automation Platform.
 """
 
-__version__ = "0.7.2"
+__version__ = "0.7.4"

{firmwareloop-0.7.2 → firmwareloop-0.7.4}/tools/fw_mcp_server.py

@@ -1,6 +1,6 @@
 #!/usr/bin/env python3
 """
-fw_mcp_server.py - FirmwareLoop High-Level Workflow & Device MCP Server (v0.7.2).
+fw_mcp_server.py - FirmwareLoop High-Level Workflow & Device MCP Server (v0.7.4).
 
 Exposes high-level firmware engineering and hardware management tools to AI Coding
 Agents (Antigravity CLI, Claude Code CLI, Qoder IDE, CodeBuddy IDE, Cursor) via the Model Context
@@ -332,7 +332,7 @@ def handle_fw_ndtdbg_write_reg(args: Dict[str, Any]) -> Dict[str, Any]:
 def handle_fw_ndtdbg_flash(args: Dict[str, Any]) -> Dict[str, Any]:
     """Erase + flash a .bin/.nfw image onto the NdtBox target chip (ChipSea Fxx) over IIC.
 
-    P1-3 (0.7.2): 去掉按签名重试 —— "TARGET_MISMATCH @0x0000" 正是"根本没进 boot"的
+    P1-3 (0.7.4): 去掉按签名重试 —— "TARGET_MISMATCH @0x0000" 正是"根本没进 boot"的
     特征签名 (旧 boot 判据假阳的同一条错误路径), 盲目重试只会重复同一失败路径。
     整片重写 (<= rewrite_times) 现由 flash_exec 内部完成, 结果带 rewrite_count;
     BOOT_NOT_ENTERED 直接返回指引 (需断电重启, 重试无意义)。
@@ -348,6 +348,13 @@ def handle_fw_ndtdbg_flash(args: Dict[str, Any]) -> Dict[str, Any]:
         cmd.extend(["--boot-judge", str(args["boot_judge"])])
     if args.get("flash_engine"):
         cmd.extend(["--flash-engine", str(args["flash_engine"])])
+    # 冷启动冒烟 (评审 §4): 默认开 -> CLI 默认即开, 仅显式 false 时加关闭旗标
+    if args.get("cold_boot_check") is False:
+        cmd.append("--no-cold-boot-check")
+    if args.get("cold_boot_reg") is not None:
+        cmd.extend(["--cold-boot-reg", str(int(args["cold_boot_reg"]))])
+    if args.get("cold_boot_expect"):
+        cmd.extend(["--cold-boot-expect", str(args["cold_boot_expect"])])
     if args.get("confirm"):
         cmd.append("--confirm")
     _ndtdbg_reg_args(args, cmd)
@@ -1815,6 +1822,20 @@ TOOLS_REGISTRY = {
                     "enum": ["bridge", "serve"],
                     "description": "Flash transport. 'bridge' (default): whole sequence inside one 32-bit process, frames passed once via stdin, both device handles held - real-hardware validated (6/6). 'serve': one raw I2C transaction per page driven from Python (kept for A/B; field evidence: same frames reported 'erase effective' yet wrote nothing). Use 'serve' only to reproduce/diagnose that case",
                 },
+                "cold_boot_check": {
+                    "type": "boolean",
+                    "description": "Post-flash cold-boot smoke test (default true, recommended): power-cycle the target, then read cold_boot_reg and decide whether the firmware actually runs. Byte-level read-back verification cannot catch 'image flashed OK but the device is dead after power-up' (field case: GUI said Success and read back fine, but Fw_ver = -1 after a real power cycle). Returns COLD_BOOT_VERIFY_FAILED with the raw bytes read vs expected - the flash itself is already verified, so decide whether the failure is expected (e.g. a bootloader-only image or a register that legitimately has no content). Set false to skip",
+                    "default": True,
+                },
+                "cold_boot_reg": {
+                    "type": "integer",
+                    "description": "Register read for the cold-boot check (default 0x10 = firmware version)",
+                    "default": 16,
+                },
+                "cold_boot_expect": {
+                    "type": "string",
+                    "description": "Optional expected hex for cold-boot verification (e.g. '51 17 64 11'); when omitted the check only requires a meaningful (non-all-00/FF) answer",
+                },
                 "dll_dir": {
                     "type": "string",
                     "description": "NdtDebugTool lib directory containing USBIOX.DLL and usb2io.dll; default from lab.yaml ndtdbg.dll_dir",
@@ -2314,7 +2335,7 @@ def process_request(req: Dict[str, Any]) -> Optional[Dict[str, Any]]:
                 },
                 "serverInfo": {
                     "name": "firmwareloop",
-                    "version": "0.7.2"
+                    "version": "0.7.4"
                 }
             }
         }
@@ -2449,7 +2470,7 @@ def _settle_stashed_entrypoints(stashed) -> None:
 def handle_cli_update() -> int:
     """Handle `firmwareloop update` command."""
     print("============================================================")
-    print("  FirmwareLoop Auto-Updater (v0.7.2)")
+    print("  FirmwareLoop Auto-Updater (v0.7.4)")
     print("============================================================")
 
     is_git_repo = os.path.exists(os.path.join(REPO_ROOT, ".git"))
@@ -2880,7 +2901,7 @@ def set_ndtdbg_dlldir(dll_path: str) -> str:
 def handle_cli_setup() -> int:
     """Handle `firmwareloop setup` command: simultaneously configure Antigravity CLI, Claude Code CLI, Qoder IDE, and CodeBuddy IDE."""
     print("============================================================")
-    print("  FirmwareLoop Multi-Agent Global Setup Helper (v0.7.2)")
+    print("  FirmwareLoop Multi-Agent Global Setup Helper (v0.7.4)")
     print("============================================================")
     print("")
 
@@ -3005,7 +3026,7 @@ def handle_cli_setup() -> int:
 def handle_cli_init(chip: Optional[str] = None, upgrade: bool = False) -> int:
     """Handle `firmwareloop init [target_chip]` command."""
     print("============================================================")
-    print("  FirmwareLoop Multi-Agent Project Initializer (v0.7.2)")
+    print("  FirmwareLoop Multi-Agent Project Initializer (v0.7.4)")
     print("============================================================")
     cwd = os.getcwd()
     print(f"[*] Initializing multi-agent guidelines & bench config in:\n    {cwd}\n")
@@ -3038,7 +3059,7 @@ def handle_cli_init(chip: Optional[str] = None, upgrade: bool = False) -> int:
 
 
 def print_cli_help() -> None:
-    print("""FirmwareLoop (fwloop) — AI Agent Firmware Engineering & Lab Automation Platform (v0.7.2)
+    print("""FirmwareLoop (fwloop) — AI Agent Firmware Engineering & Lab Automation Platform (v0.7.4)
 
 Usage:
   fwloop [command]   (or: firmwareloop [command])
@@ -3084,7 +3105,7 @@ def main() -> None:
                 sys.exit(2)
             sys.exit(handle_cli_ndtdebugtool(args[1]))
         elif cmd in ["version", "-v", "--version"]:
-            print("FirmwareLoop v0.7.2")
+            print("FirmwareLoop v0.7.4")
             sys.exit(0)
         elif cmd in ["help", "-h", "--help"]:
             print_cli_help()

{firmwareloop-0.7.2 → firmwareloop-0.7.4}/tools/lib/ndtdbg.py

@@ -678,6 +678,17 @@ class NdtBoxIo:
                 return None
             raise
 
+    def _post_kill_recover(self) -> dict:
+        """kill 之后的兜底恢复 (best-effort): 断电复位一次, 让目标离开半擦写/写中途态。
+
+        失败不上抛 (本身已在错误路径上), 结果并入错误信封的 post_kill_power_cycle 字段。
+        """
+        try:
+            self.vbrt_reset(DEFAULT_OFF_MS)
+            return {"post_kill_power_cycle": "ok"}
+        except Exception as exc:  # noqa: BLE001
+            return {"post_kill_power_cycle": f"failed: {type(exc).__name__}: {exc}"}
+
     def _bridge_plan_json(self, plan: dict) -> str:
         """桥 flash action 的 stdin plan (只含桥认识的键)。"""
         return json.dumps({
@@ -718,6 +729,7 @@ class NdtBoxIo:
                                 stderr=subprocess.PIPE, text=True, encoding="utf-8",
                                 errors="replace", bufsize=1)
         lines: list = []
+        state = {"last_progress": time.monotonic()}
 
         def _reader() -> None:
             try:
@@ -726,6 +738,7 @@ class NdtBoxIo:
                     if not line:
                         continue
                     if line.startswith("#progress"):
+                        state["last_progress"] = time.monotonic()   # 进度续期 (stall 守护)
                         print(f"[flash] {line[len('#progress'):].strip()}",
                               file=sys.stderr, flush=True)
                         continue
@@ -743,18 +756,37 @@ class NdtBoxIo:
             except Exception as exc:
                 proc.kill()
                 raise NdtBoxError("UNKNOWN_ERROR", f"向桥 flash 写入计划失败: {exc}") from exc
-            deadline = time.monotonic() + max(5.0, budget_ms / 1000.0)
-            while time.monotonic() < deadline:
+            # 守护 = "无进度"判定, 而非固定总时长: 桥逐页/逐窗吐 #progress, 每次续期;
+            # 健康但慢的全片擦除 (长 erase_ms / 大镜像) 不会被误杀 (评审 3.2-①)。
+            # stall_s / hard_timeout_s 可按 plan 覆盖 (默认 30s 无进度判卡; 硬上限 3x 预算且 >=180s)
+            stall_s = max(1.0, float(plan.get("stall_s") or 30.0))
+            hard_s = float(plan.get("hard_timeout_s") or max(180.0, 3.0 * budget_ms / 1000.0))
+            hard_deadline = t0 + hard_s
+            while True:
                 if proc.poll() is not None and not reader.is_alive():
                     break
+                now = time.monotonic()
+                if now > hard_deadline:
+                    proc.kill()
+                    raise NdtBoxError(
+                        "BUS_TIMEOUT",
+                        f"桥内 flash 超过硬上限 (预算 {budget_ms}ms, {pages} 页/{windows} 窗): "
+                        "已终止桥进程。检查目标是否卡在擦除/页写; 可先 fw_ndtdbg_power_cycle 复位",
+                        None)
+                if now - state["last_progress"] > stall_s:
+                    proc.kill()
+                    recover = self._post_kill_recover()
+                    raise NdtBoxError(
+                        "INCOMPLETE_FLASH",
+                        f"桥内 flash 连续 {int(stall_s)}s 无任何进度 ⇒ 目标疑似卡在写入中途。"
+                        "已终止桥进程并尝试复位, 但**芯片可能处于半擦写状态, 请勿直接使用, "
+                        "必须重新完整烧录**",
+                        f"最后一条桥输出: {(lines[-1] if lines else '无')[:120]}",
+                        {"engine": "bridge", "chip_state": "partially_erased",
+                         "pages_written": pages, "read_windows": windows, **recover,
+                         "hint": "重新调用 fw_ndtdbg_flash 完整烧录; 若反复卡住, 先 "
+                                 "fw_ndtdbg_power_cycle 复位再试"})
                 time.sleep(0.05)
-            else:
-                proc.kill()
-                raise NdtBoxError(
-                    "BUS_TIMEOUT",
-                    f"桥内 flash 超时 (预算 {budget_ms}ms, {pages} 页/{windows} 窗): 已终止桥进程。"
-                    "检查目标是否卡在擦除/页写 (可先 fw_ndtdbg_power_cycle 复位再试)",
-                    None);
             elapsed_ms = round((time.monotonic() - t0) * 1000)
             if not lines:
                 err = ""
@@ -796,7 +828,7 @@ class NdtBoxIo:
         """桥内单体 flash 引擎 (0.7.2 起为默认): 单进程内 USBIOX(0) 与 USB2IO(1) 句柄同持,
 
         帧经 stdin 一次性传入、全程连续无逐笔管道往返 —— 即原厂 GUI 的进程模型, 也是
-        现场 (2026-09-11 F72) 6/6 verify pass 的那条路径。校验失败 (桥报
+        现场 (2026-09-11) 6/6 verify pass 的那条路径。校验失败 (桥报
         TARGET_MISMATCH "烧录校验失败") 时按 rewrite_times 整片重跑, 其余错误直接上抛。
         """
         import time
@@ -827,6 +859,7 @@ class NdtBoxIo:
             total_ms = round((time.monotonic() - t_all) * 1000)
             return {
                 "verify": data.get("verify", "pass"),
+                "chip_state": "verified" if data.get("verify", "pass") == "pass" else "unknown",
                 "pages_written": data.get("pages_written"),
                 "read_windows": data.get("read_windows"),
                 "rewrite_count": attempt,
@@ -846,7 +879,7 @@ class NdtBoxIo:
     def flash_exec(self, plan: dict, timeout_ms: int | None = None) -> dict:
         """烧录引擎分派: "bridge" (默认, 桥内单体 flash) / "serve" (逐笔 Python 驱动)。
 
-        现场实证 (2026-09-11, F72, 同一批固件 + 同一台设备):
+        现场实证 (2026-09-11, 同一批固件 + 同一台设备):
           桥内单体 flash (帧经 stdin 一次传入)      -> 6/6 {"ok":true,"verify":"pass"}
           逐笔 serve 路径 (每页一笔 raw 事务)        -> 100% "擦除生效但页写不落地"
             (probe FFFFFFFF -> 00000000 说明 7 字节擦除帧到达; 99 页 write_ms 7594ms
@@ -1391,9 +1424,60 @@ class ChipSeaFxx:
 
     # -- 固件烧录 (对齐 ChipSea.cs UpdateFW: 仅芯海 Fxx, 整片擦写) --
 
+    def cold_boot_check(self, off_ms: int = DEFAULT_OFF_MS, reg: int = 0x10,
+                        expect: str | None = None) -> dict:
+        """烧后冷启动冒烟 (评审 §4): 断电重上电 -> 读已知寄存器 -> 判定固件是否真的跑起来。
+
+        只校验 Flash 字节的流程抓不到"镜像烧对了但跑不起来"——现场出现过: 烧录工具报成功
+        且当场可读, 断电重上电后版本寄存器却读不到。这里 fail-closed:
+        expect 给定时逐字节比对; 未给定时判"有无效应答"(读不到或全 00/FF 都算失败)。
+        """
+        import time
+        self._io.vbrt_reset(off_ms)    # 冷启动 (真 POR 上电)
+        time.sleep(0.3)                # 让固件跑到能响应从机的程度
+        want = bytes.fromhex(str(expect).replace(" ", "")) if expect else None
+        raw: bytes | None = None
+        err: str | None = None
+        for _ in range(3):
+            try:
+                raw = self._io.read_reg(reg, len(want) if want else 4)
+                break
+            except NdtBoxError as exc:
+                err = f"{exc.error_class}: {exc.message}"
+                time.sleep(0.2)
+        out: dict = {"checked": True, "reg": f"0x{reg:02X}",
+                     "raw_hex": raw.hex().upper() if raw else None,
+                     "expect_hex": want.hex().upper() if want else None,
+                     "read_error": err}
+        if raw is None:
+            out["ok"] = False
+            out["conclusion"] = ("冷启动后该寄存器无应答: 固件可能未起振/未使能 I2C 从机 "
+                                 "—— Flash 字节已验证, 但目标跑不起来 (冷启动失败的特征)")
+            return out
+        if want is not None:
+            if raw[:len(want)] != want:
+                out["ok"] = False
+                out["conclusion"] = (f"冷启动后 {out['reg']} 读回 {out['raw_hex']} "
+                                     f"!= 期望 {out['expect_hex']}")
+                return out
+            out["ok"] = True
+            out["conclusion"] = f"冷启动读回与期望一致 ({out['raw_hex']})"
+            return out
+        if all(b in (0x00, 0xFF) for b in raw):
+            out["ok"] = False
+            out["conclusion"] = (f"冷启动后 {out['reg']} 读回全 00/FF ({out['raw_hex']}): 无有效应答 "
+                                 "—— 疑似固件未起振; 若该寄存器本就不该有内容, 请用 cold_boot_expect "
+                                 "指定期望值或关闭 cold_boot_check")
+            return out
+        out["ok"] = True
+        out["conclusion"] = f"冷启动读回 {out['raw_hex']} (有有效应答)"
+        return out
+
     def flash_bin(self, file_path: str, erase_ms: int = 2000,
                   off_ms: int | None = None, rewrite_times: int | None = None,
                   boot_judge: str | None = None, engine: str | None = None,
+                  cold_boot_check: bool = True, cold_boot_reg: int = 0x10,
+                  cold_boot_expect: str | None = None,
                   progress=None) -> dict:
         """经 NdtBox IIC 烧录 .bin/.nfw 固件到芯海 Fxx (UpdateFW 语义)。
 
@@ -1432,6 +1516,22 @@ class ChipSeaFxx:
         res = self._io.flash_exec(plan)
         if progress:
             progress("verify", len(windows), len(windows))
+        # 冷启动冒烟 (评审 §4, 默认开): Flash 字节校验通过 ≠ 固件跑得起来
+        cold: dict | None = None
+        if cold_boot_check and res.get("verify", "pass") == "pass":
+            cold = self.cold_boot_check(off_ms=plan["off_ms"], reg=int(cold_boot_reg),
+                                        expect=cold_boot_expect)
+            if not cold.get("ok"):
+                raise NdtBoxError(
+                    "COLD_BOOT_VERIFY_FAILED",
+                    f"烧录逐窗校验通过, 但冷启动冒烟失败: {cold.get('conclusion')}",
+                    "Flash 字节已写入并通过回读校验; 失败发生在'断电重上电后能否工作'这一步",
+                    {"verify": "pass", "engine": res.get("engine", plan["engine"]),
+                     "pages_written": len(pages), "window_verified": True,
+                     "cold_boot": cold,
+                     "hint": "①确认目标固件在本寄存器上确有可读内容 (否则用 cold_boot_expect 指定)"
+                             "; ②按冷启动路径排查 (看门狗/时钟/外设初始化); "
+                             "③如确不需要该校验, 用 cold_boot_check=false / --no-cold-boot-check 关闭"})
         return {
             "file": file_path,
             "file_type": fw_type,
@@ -1440,6 +1540,8 @@ class ChipSeaFxx:
             "read_windows": len(windows),
             "erase_ms": int(erase_ms),
             "off_ms": plan["off_ms"],
+            "chip_state": res.get("chip_state"),
+            "cold_boot": cold,
             "rewrite_times": plan["rewrite_times"],
             "engine": res.get("engine", plan["engine"]),
             "boot_judge": res.get("boot_judge", plan["boot_judge"]),

{firmwareloop-0.7.2 → firmwareloop-0.7.4}/tools/lib/serial_assistant.py

@@ -1037,6 +1037,79 @@ def suspected_port_holders(session_pid: int | None = None) -> list[dict]:
     return out
 
 
+def port_exclusive_probe(port: str | None, baud: int = 115200) -> dict:
+    """直接试开端口 ⇒ 给出"当前能否独占打开"的**硬结论**（评审 3.2-②）。
+
+    `tasklist` 看不到 COM 端口持有者（进程加载了模块 ≠ 打开了端口），任何进程名单都只是
+    推断；试开才是判据。返回 {port, openable, error, conclusion}。
+    """
+    if not port:
+        return {"port": None, "openable": None, "error": "未指定端口",
+                "conclusion": "无端口可探测 (未配置 serial.port)"}
+    try:
+        import serial as pyserial
+    except ImportError as exc:  # noqa: BLE001
+        return {"port": port, "openable": None, "error": f"pyserial 未安装: {exc}",
+                "conclusion": "无法探测 (缺 pyserial)"}
+    ser = None
+    try:
+        ser = pyserial.Serial(port=port, baudrate=int(baud), timeout=0.2, write_timeout=0.5)
+        return {"port": port, "openable": True, "error": None,
+                "conclusion": f"{port} 当前可被本进程独占打开 ⇒ 若会话仍读不到数据, "
+                              "原因不在端口占用 (检查波特率/接线/目标是否在输出)"}
+    except Exception as exc:  # noqa: BLE001
+        return {"port": port, "openable": False,
+                "error": f"{type(exc).__name__}: {exc}",
+                "conclusion": f"{port} 当前无法独占打开 ⇒ 被其它程序占用或设备不在位"}
+    finally:
+        try:
+            if ser is not None:
+                ser.close()
+        except Exception:  # noqa: BLE001
+            pass
+
+
+def port_holder_candidates(port: str | None, session_pid: int | None = None) -> list[dict]:
+    """端口占用**候选名单**（需人工确认；候选 ≠ 持有者）。
+
+    两个来源, 按置信度标注:
+    - `source="cmdline"`（较准）: Win32_Process 命令行含端口名 ⇒ 该进程可能在用这个口;
+    - `source="name"`（较低）: 进程名像 GUI/上位机/残留 python serve。
+    **硬结论请看 port_exclusive_probe()。**
+    """
+    out: list[dict] = []
+    if os.name != "nt":
+        return out
+    self_pid = os.getpid()
+    if port:
+        try:
+            ps = ("Get-CimInstance Win32_Process | Where-Object { $_.CommandLine -like "
+                  f"'*{port}*' }} | Select-Object -First 12 ProcessId,Name,CommandLine | "
+                  "ConvertTo-Json -Compress")
+            res = subprocess.run(["powershell", "-NoProfile", "-NonInteractive", "-Command", ps],
+                                 capture_output=True, text=True, timeout=30, errors="replace")
+            raw = (res.stdout or "").strip()
+            if raw:
+                data = json.loads(raw)
+                if isinstance(data, dict):
+                    data = [data]
+                for item in data:
+                    pid = int(item.get("ProcessId") or 0)
+                    if pid in (self_pid, session_pid):
+                        continue
+                    out.append({"name": item.get("Name") or "?", "pid": pid,
+                                "why": f"命令行含 {port}", "source": "cmdline",
+                                "confidence": "medium", "cmdline": (item.get("CommandLine") or "")[:200]})
+        except Exception:  # noqa: BLE001
+            pass
+    known = {h["pid"] for h in out}
+    for h in suspected_port_holders(session_pid):
+        if h["pid"] in known or h["pid"] == self_pid:
+            continue
+        out.append({**h, "source": "name", "confidence": "low"})
+    return out
+
+
 def pid_alive(pid: int | None) -> bool:
     """进程存活探测。
 

{firmwareloop-0.7.2 → firmwareloop-0.7.4}/tools/ndtdbg_cli.py

@@ -256,9 +256,10 @@ def cmd_status(io: NdtBoxIo) -> None:
             {"symptom": "只有写事务 NACK, 读事务正常",
              "likely": "不是从机死: 该寄存器不可写/写保护, 或目标固件未实现该写寄存器 "
                        "(此时应回读邻近寄存器确认链路仍活)"},
-            {"symptom": "原本可读, 新增静态寄存器地址后整机读不到",
-             "likely": "新增地址破坏了从机寄存器表约定 (必须按 addr 升序且不与擦除魔数 0x0000 "
-                       "冲突) ⇒ 建议优先复用已有寄存器的空闲字, 避免新增地址"},
+            {"symptom": "目标固件刚被改动过",
+             "likely": "按序排除: ①从机是否真的使能 (初始化是否提前 return); ②冷启动 vs 热复位"
+                       "行为差异 (热复位可读、断电重上电读不到属另一类问题); ③改动静态寄存器表/"
+                       "RAM 布局后整套读取是否仍正常 (表必须按 addr 升序, 且不与 0x0000 冲突)"},
             {"symptom": "BUS_TIMEOUT", "likely": "时钟拉伸、关中断死循环 (fault handler 自旋饿死 I2C 中断)"},
         ]
     ok("status", data, log="Open + ReadFwVersion(0x10) + ReadModuleConnect(0x29)")
@@ -518,7 +519,9 @@ def cmd_stream(io: NdtBoxIo, config: dict, specs: list, interval_ms, duration_s:
 
 def cmd_flash_bin(io: NdtBoxIo, config: dict, file_path: str, erase_ms: int, confirm: bool,
                   off_ms: int | None = None, rewrite_times: int | None = None,
-                  boot_judge: str | None = None, engine: str | None = None) -> None:
+                  boot_judge: str | None = None, engine: str | None = None,
+                  cold_boot_check: bool | None = None, cold_boot_reg: int | None = None,
+                  cold_boot_expect: str | None = None) -> None:
     # 烧录 = 整片擦除 + 页写, 破坏性高于 write-reg, 同款双闸门
     ndt_cfg = config.get("ndtdbg") or {}
     allowed = ndt_cfg.get("write_allowed", False)
@@ -540,13 +543,23 @@ def cmd_flash_bin(io: NdtBoxIo, config: dict, file_path: str, erase_ms: int, con
     # 0.7.2: 烧录引擎 (bridge 默认 = 桥内单体 flash; serve = 逐笔 Python 驱动, 供 A/B 复现)
     if engine is None:
         engine = flash_cfg.get("engine")
+    # 冷启动冒烟 (评审 §4): 默认开; lab.yaml ndtdbg.flash.cold_boot_check / reg / expect 可覆盖
+    if cold_boot_check is None:
+        cold_boot_check = flash_cfg.get("cold_boot_check", True)
+    if cold_boot_reg is None:
+        cold_boot_reg = flash_cfg.get("cold_boot_reg", 0x10)
+    if cold_boot_expect is None:
+        cold_boot_expect = flash_cfg.get("cold_boot_expect")
 
     def progress(phase: str, done: int, total: int) -> None:
         print(f"[flash-bin] {phase} {done}/{total}", file=sys.stderr, flush=True)
 
     result = ChipSeaFxx(io).flash_bin(file_path, erase_ms=erase_ms, off_ms=off_ms,
                                       rewrite_times=rewrite_times, boot_judge=boot_judge,
-                                      engine=engine, progress=progress)
+                                      engine=engine, cold_boot_check=bool(cold_boot_check),
+                                      cold_boot_reg=int(cold_boot_reg),
+                                      cold_boot_expect=cold_boot_expect,
+                                      progress=progress)
     result["authorization"] = {"write_allowed": True,
                                "granted_by": write_allowed_source() or "(default false)",
                                "chain": list(_CONFIG_FILES)}
@@ -611,6 +624,15 @@ def build_parser() -> argparse.ArgumentParser:
     f.add_argument("--flash-engine", choices=["bridge", "serve"], default=None,
                    help="烧录引擎 (默认 bridge = 桥内单体 flash: 单进程、帧经 stdin 一次传入、"
                         "现场 6/6 verify pass; serve = 逐笔 raw 事务的 Python 驱动, 供 A/B 复现)")
+    f.add_argument("--cold-boot-check", dest="cold_boot_check", action="store_true", default=None,
+                   help="烧后冷启动冒烟 (默认开): 断电重上电 -> 读 cold-boot-reg -> 判定固件是否"
+                        "真的跑起来; 失败报 COLD_BOOT_VERIFY_FAILED (Flash 字节已通过校验)")
+    f.add_argument("--no-cold-boot-check", dest="cold_boot_check", action="store_false",
+                   help="关闭冷启动冒烟")
+    f.add_argument("--cold-boot-reg", type=lambda x: int(x, 0), default=None,
+                   help="冷启动冒烟读的寄存器 (默认 0x10 版本寄存器)")
+    f.add_argument("--cold-boot-expect", default=None,
+                   help="冷启动冒烟期望值 (hex, 如 '51 17 64 11'); 不传则只判'有无效应答'")
 
     st = sub.add_parser("stream", parents=[common],
                         help="高速连续采集寄存器组到 CSV (单会话长驻, 只读)")
@@ -671,7 +693,10 @@ def main(argv=None) -> None:
         elif args.cmd == "flash-bin":
             cmd_flash_bin(io, config, args.file, args.erase_ms, args.confirm,
                           off_ms=args.off_ms, rewrite_times=args.rewrite_times,
-                          boot_judge=args.boot_judge, engine=args.flash_engine)
+                          boot_judge=args.boot_judge, engine=args.flash_engine,
+                          cold_boot_check=args.cold_boot_check,
+                          cold_boot_reg=args.cold_boot_reg,
+                          cold_boot_expect=args.cold_boot_expect)
         elif args.cmd == "stream":
             specs = [parse_reg_spec(s) for s in args.regs]
             cmd_stream(io, config, specs, args.interval_ms, args.duration_s,

{firmwareloop-0.7.2 → firmwareloop-0.7.4}/tools/serial_cli.py

@@ -36,6 +36,8 @@ from lib.serial_assistant import (  # noqa: E402
     parse_hex,
     probe_session,
     to_hex,
+    port_exclusive_probe,
+    port_holder_candidates,
     suspected_port_holders,
     wait_pid_exit,
 )
@@ -123,8 +125,10 @@ def cmd_status(_args: argparse.Namespace) -> None:
                     "started_at": stats.get("started_at")},
         "conclusion": f"会话存活 (port={sess.get('port') or stats.get('port')}, "
                       f"opened={alive})" if alive else "serve 进程存活但串口未打开",
-        # P1-4: 串口被谁占着 —— 直接给嫌疑名单 (GUI/上位机 + 残留 python serve)
-        "suspected_holders": suspected_port_holders(sess.get("pid")),
+        # P1-4 / 评审 3.2-②: 先给硬结论 (端口能否独占打开), 再给需人工确认的候选名单
+        "port_probe": port_exclusive_probe(sess.get("port") or stats.get("port")),
+        "holder_candidates": port_holder_candidates(sess.get("port") or stats.get("port"),
+                                                   sess.get("pid")),
     })
 
 
@@ -152,7 +156,8 @@ def cmd_open(args: argparse.Namespace) -> None:
                 "holder_hint",
                 "端口可能被 GUI 上位机占用: NDT Debug Tool (STDataCollection.exe) 打开时会同时占用 "
                 "Box 串口与 USB-IIC 通道; 请关闭占用方后重试, 残留会话可用 fw_serial_close 清理")
-            extra.setdefault("suspected_holders", suspected_port_holders())
+            extra.setdefault("port_probe", port_exclusive_probe(cfg.get("port")))
+            extra.setdefault("holder_candidates", port_holder_candidates(cfg.get("port")))
         fail(exc.error_class, exc.detail, extra=extra)
     data = {k: info.get(k) for k in
             ("port", "baud", "simulated", "log_path", "reused", "pid", "started_at")}
@@ -334,10 +339,17 @@ def cmd_parse(args: argparse.Namespace) -> None:
 
 
 def _port_error_extra(exc: SerialAssistantError) -> dict:
-    """串口类错误的统一附加信息: 嫌疑占用进程名单 (P1-4)。"""
+    """串口类错误的统一附加信息 (P1-4 / 评审 3.2-②)。
+
+    顺序说明设计: **硬结论在前** (port_probe = 直接试开端口能否独占), 候选名单在后
+    (cmdline 匹配较准 → 进程名匹配较低, 都只是"需人工确认"的候选)。
+    """
     extra = dict(exc.extra)
     if exc.error_class in ("SERIAL_PORT_ERROR", "UART_BUSY"):
-        extra.setdefault("suspected_holders", suspected_port_holders())
+        port = extra.get("port") or (_load_session_file() or {}).get("port")
+        extra.setdefault("port", port)
+        extra.setdefault("port_probe", port_exclusive_probe(port))
+        extra.setdefault("holder_candidates", port_holder_candidates(port))
     return extra
 
 

{firmwareloop-0.7.2 → firmwareloop-0.7.4}/tools/setup-agent-mcp.ps1

@@ -1,6 +1,6 @@
 <#
 .SYNOPSIS
-    Dual-Tier MCP setup and registration helper (v0.7.2).
+    Dual-Tier MCP setup and registration helper (v0.7.4).
     Inspects installed AI coding agents (Qoder, Claude Code, Antigravity, Cursor)
     and configures global MCP / skills or prints exact registration commands.
 
@@ -242,7 +242,7 @@ if ($Json) {
     Write-FwJson ([pscustomobject]$report)
 } else {
     Write-Host "============================================================" -ForegroundColor Cyan
-    Write-Host "  FirmwareLoop Dual-Tier MCP & Agent Setup Helper (v0.7.2)" -ForegroundColor Green
+    Write-Host "  FirmwareLoop Dual-Tier MCP & Agent Setup Helper (v0.7.4)" -ForegroundColor Green
     Write-Host "============================================================" -ForegroundColor Cyan
     Write-Host ""
     Write-Host "[1] Google Antigravity / Gemini CLI:" -ForegroundColor Yellow