firmwareloop 0.8.0__tar.gz → 0.9.1__tar.gz

{firmwareloop-0.8.0 → firmwareloop-0.9.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: firmwareloop
-Version: 0.8.0
+Version: 0.9.1
 Summary: AI Agent Firmware Development and Lab Automation Platform (Dual-Tier MCP Server)
 Author-email: WeilinZhang <19523330249@163.com>
 License: MIT
@@ -24,6 +24,8 @@ Requires-Dist: pytest>=8.0.0
 Requires-Dist: pyocd>=0.36.0
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: agentic-hil>=0.14.0
+Provides-Extra: dev
+Requires-Dist: pytest-xdist>=3.6.0; extra == "dev"
 Dynamic: license-file
 
 # FirmwareLoop (`fwloop`)
@@ -385,7 +387,7 @@ claude mcp remove --scope user agentic-hil
 ├── demo-firmware/    示例固件（CMake；宿主编译模拟 MCU，闭环验证载体）
 ├── demo-make/        示例固件（Make；构建测试载体）
 ├── docs/             DEPENDENCY_MATRIX / REUSE_PLAN / V0.0.2_GAP_VERIFICATION
-├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.8.0)
+├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.9.1)
 ├── .mcp.example.json 双层 MCP 配置模板（firmwareloop + agentic-hil）
 ├── AGENTS.md         通用智能体规范（Antigravity / Qoder / Cursor 等）
 ├── CLAUDE.md         Claude Code CLI 指南
@@ -395,7 +397,7 @@ claude mcp remove --scope user agentic-hil
 
 ---
 
-## 能力验证状态（v0.8.0）
+## 能力验证状态（v0.9.1）
 
 > 状态定义：`Implemented`（已实现）/ `Simulator Validated`（模拟验证）/
 > `Real Hardware Validated`（真机验证）/ `Experimental` / `Not Implemented`
@@ -419,7 +421,7 @@ claude mcp remove --scope user agentic-hil
 | 自动修复闭环（M6 载体） | Simulator Validated -> Real Hardware Validated 待 DUT |
 | NdtBox 数据采集/调试（fw_ndtdbg_status / fw_ndtdbg_measure, ChipSea Fxx IIC） | Implemented（无硬件 Fail-Closed 已验证）-> Real Hardware Validated 待 NdtBox |
 | NdtBox 目标断电复位（fw_ndtdbg_power_cycle, 仅 io10 断电复位, 无写闸门） | Implemented（单测覆盖时序/探针缺失指引）-> Real Hardware Validated 待 NdtBox |
-| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（84.87.1.1 / 84.87.1.2 真机整片擦写 verify pass; 2026-09-11 同批文件桥内单体 flash 6/6 pass；双闸门 Fail-Closed）。**v0.7.2 起默认引擎 = 桥内单体 flash**（逐笔 serve 路径现场实测"擦除生效但页写不落地"，保留 `flash_engine: serve` 供 A/B）；差分 boot 判据 + `boot_judge: off` 逃生开关见 0.7.1；**待验收声明：默认引擎路径（Python 组 plan → Popen 桥 → 解析信封）尚待真机验收** |
+| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（两批真实固件镜像真机整片擦写 verify pass; 2026-09-11 同批文件桥内单体 flash 6/6 pass；双闸门 Fail-Closed）。**v0.7.2 起默认引擎 = 桥内单体 flash**（逐笔 serve 路径现场实测"擦除生效但页写不落地"，保留 `flash_engine: serve` 供 A/B）；差分 boot 判据 + `boot_judge: off` 逃生开关见 0.7.1；**待验收声明：默认引擎路径（Python 组 plan → Popen 桥 → 解析信封）尚待真机验收** |
 | 烧后冷启动冒烟（fw_ndtdbg_flash 默认开, `cold_boot_check`） | Implemented（单测覆盖通过/全 FF/期望不符/关闭；`COLD_BOOT_VERIFY_FAILED` 错误类）-> Real Hardware Validated 待真机 |
 | 串口占用取证（`port_probe` 试开硬结论 + `holder_candidates` 候选名单） | Implemented（试开结论可复现；候选按 cmdline/name 标注置信度） |
 | 抓开机日志（fw_serial_capture + power_cycle_off_ms, 窗口内断电复位） | Implemented（simulator 验证窗口与复位串联）-> Real Hardware Validated 待 NdtBox + DUT |

{firmwareloop-0.8.0 → firmwareloop-0.9.1}/README.md

@@ -357,7 +357,7 @@ claude mcp remove --scope user agentic-hil
 ├── demo-firmware/    示例固件（CMake；宿主编译模拟 MCU，闭环验证载体）
 ├── demo-make/        示例固件（Make；构建测试载体）
 ├── docs/             DEPENDENCY_MATRIX / REUSE_PLAN / V0.0.2_GAP_VERIFICATION
-├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.8.0)
+├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.9.1)
 ├── .mcp.example.json 双层 MCP 配置模板（firmwareloop + agentic-hil）
 ├── AGENTS.md         通用智能体规范（Antigravity / Qoder / Cursor 等）
 ├── CLAUDE.md         Claude Code CLI 指南
@@ -367,7 +367,7 @@ claude mcp remove --scope user agentic-hil
 
 ---
 
-## 能力验证状态（v0.8.0）
+## 能力验证状态（v0.9.1）
 
 > 状态定义：`Implemented`（已实现）/ `Simulator Validated`（模拟验证）/
 > `Real Hardware Validated`（真机验证）/ `Experimental` / `Not Implemented`
@@ -391,7 +391,7 @@ claude mcp remove --scope user agentic-hil
 | 自动修复闭环（M6 载体） | Simulator Validated -> Real Hardware Validated 待 DUT |
 | NdtBox 数据采集/调试（fw_ndtdbg_status / fw_ndtdbg_measure, ChipSea Fxx IIC） | Implemented（无硬件 Fail-Closed 已验证）-> Real Hardware Validated 待 NdtBox |
 | NdtBox 目标断电复位（fw_ndtdbg_power_cycle, 仅 io10 断电复位, 无写闸门） | Implemented（单测覆盖时序/探针缺失指引）-> Real Hardware Validated 待 NdtBox |
-| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（84.87.1.1 / 84.87.1.2 真机整片擦写 verify pass; 2026-09-11 同批文件桥内单体 flash 6/6 pass；双闸门 Fail-Closed）。**v0.7.2 起默认引擎 = 桥内单体 flash**（逐笔 serve 路径现场实测"擦除生效但页写不落地"，保留 `flash_engine: serve` 供 A/B）；差分 boot 判据 + `boot_judge: off` 逃生开关见 0.7.1；**待验收声明：默认引擎路径（Python 组 plan → Popen 桥 → 解析信封）尚待真机验收** |
+| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（两批真实固件镜像真机整片擦写 verify pass; 2026-09-11 同批文件桥内单体 flash 6/6 pass；双闸门 Fail-Closed）。**v0.7.2 起默认引擎 = 桥内单体 flash**（逐笔 serve 路径现场实测"擦除生效但页写不落地"，保留 `flash_engine: serve` 供 A/B）；差分 boot 判据 + `boot_judge: off` 逃生开关见 0.7.1；**待验收声明：默认引擎路径（Python 组 plan → Popen 桥 → 解析信封）尚待真机验收** |
 | 烧后冷启动冒烟（fw_ndtdbg_flash 默认开, `cold_boot_check`） | Implemented（单测覆盖通过/全 FF/期望不符/关闭；`COLD_BOOT_VERIFY_FAILED` 错误类）-> Real Hardware Validated 待真机 |
 | 串口占用取证（`port_probe` 试开硬结论 + `holder_candidates` 候选名单） | Implemented（试开结论可复现；候选按 cmdline/name 标注置信度） |
 | 抓开机日志（fw_serial_capture + power_cycle_off_ms, 窗口内断电复位） | Implemented（simulator 验证窗口与复位串联）-> Real Hardware Validated 待 NdtBox + DUT |

{firmwareloop-0.8.0 → firmwareloop-0.9.1}/firmwareloop.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: firmwareloop
-Version: 0.8.0
+Version: 0.9.1
 Summary: AI Agent Firmware Development and Lab Automation Platform (Dual-Tier MCP Server)
 Author-email: WeilinZhang <19523330249@163.com>
 License: MIT
@@ -24,6 +24,8 @@ Requires-Dist: pytest>=8.0.0
 Requires-Dist: pyocd>=0.36.0
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: agentic-hil>=0.14.0
+Provides-Extra: dev
+Requires-Dist: pytest-xdist>=3.6.0; extra == "dev"
 Dynamic: license-file
 
 # FirmwareLoop (`fwloop`)
@@ -385,7 +387,7 @@ claude mcp remove --scope user agentic-hil
 ├── demo-firmware/    示例固件（CMake；宿主编译模拟 MCU，闭环验证载体）
 ├── demo-make/        示例固件（Make；构建测试载体）
 ├── docs/             DEPENDENCY_MATRIX / REUSE_PLAN / V0.0.2_GAP_VERIFICATION
-├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.8.0)
+├── pyproject.toml    标准 Python 包配置与 CLI 入口声明 (v0.9.1)
 ├── .mcp.example.json 双层 MCP 配置模板（firmwareloop + agentic-hil）
 ├── AGENTS.md         通用智能体规范（Antigravity / Qoder / Cursor 等）
 ├── CLAUDE.md         Claude Code CLI 指南
@@ -395,7 +397,7 @@ claude mcp remove --scope user agentic-hil
 
 ---
 
-## 能力验证状态（v0.8.0）
+## 能力验证状态（v0.9.1）
 
 > 状态定义：`Implemented`（已实现）/ `Simulator Validated`（模拟验证）/
 > `Real Hardware Validated`（真机验证）/ `Experimental` / `Not Implemented`
@@ -419,7 +421,7 @@ claude mcp remove --scope user agentic-hil
 | 自动修复闭环（M6 载体） | Simulator Validated -> Real Hardware Validated 待 DUT |
 | NdtBox 数据采集/调试（fw_ndtdbg_status / fw_ndtdbg_measure, ChipSea Fxx IIC） | Implemented（无硬件 Fail-Closed 已验证）-> Real Hardware Validated 待 NdtBox |
 | NdtBox 目标断电复位（fw_ndtdbg_power_cycle, 仅 io10 断电复位, 无写闸门） | Implemented（单测覆盖时序/探针缺失指引）-> Real Hardware Validated 待 NdtBox |
-| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（84.87.1.1 / 84.87.1.2 真机整片擦写 verify pass; 2026-09-11 同批文件桥内单体 flash 6/6 pass；双闸门 Fail-Closed）。**v0.7.2 起默认引擎 = 桥内单体 flash**（逐笔 serve 路径现场实测"擦除生效但页写不落地"，保留 `flash_engine: serve` 供 A/B）；差分 boot 判据 + `boot_judge: off` 逃生开关见 0.7.1；**待验收声明：默认引擎路径（Python 组 plan → Popen 桥 → 解析信封）尚待真机验收** |
+| NdtBox IIC 固件烧录（fw_ndtdbg_flash, .bin/.nfw 整片擦写, 芯海 Fxx） | Real Hardware Validated（两批真实固件镜像真机整片擦写 verify pass; 2026-09-11 同批文件桥内单体 flash 6/6 pass；双闸门 Fail-Closed）。**v0.7.2 起默认引擎 = 桥内单体 flash**（逐笔 serve 路径现场实测"擦除生效但页写不落地"，保留 `flash_engine: serve` 供 A/B）；差分 boot 判据 + `boot_judge: off` 逃生开关见 0.7.1；**待验收声明：默认引擎路径（Python 组 plan → Popen 桥 → 解析信封）尚待真机验收** |
 | 烧后冷启动冒烟（fw_ndtdbg_flash 默认开, `cold_boot_check`） | Implemented（单测覆盖通过/全 FF/期望不符/关闭；`COLD_BOOT_VERIFY_FAILED` 错误类）-> Real Hardware Validated 待真机 |
 | 串口占用取证（`port_probe` 试开硬结论 + `holder_candidates` 候选名单） | Implemented（试开结论可复现；候选按 cmdline/name 标注置信度） |
 | 抓开机日志（fw_serial_capture + power_cycle_off_ms, 窗口内断电复位） | Implemented（simulator 验证窗口与复位串联）-> Real Hardware Validated 待 NdtBox + DUT |

{firmwareloop-0.8.0 → firmwareloop-0.9.1}/firmwareloop.egg-info/SOURCES.txt

@@ -32,4 +32,7 @@ tools/common/uart_probe.py
 tools/lib/__init__.py
 tools/lib/instruments.py
 tools/lib/ndtdbg.py
-tools/lib/serial_assistant.py
+tools/lib/serial_assistant.py
+tools/templates/lab.example.yaml
+tools/templates/skill-firmwareloop.md
+tools/templates/skill-fwloop-adapter.md

{firmwareloop-0.8.0 → firmwareloop-0.9.1}/firmwareloop.egg-info/requires.txt

@@ -5,3 +5,6 @@ pytest>=8.0.0
 pyocd>=0.36.0
 pyyaml>=6.0
 agentic-hil>=0.14.0
+
+[dev]
+pytest-xdist>=3.6.0

{firmwareloop-0.8.0 → firmwareloop-0.9.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "firmwareloop"
-version = "0.8.0"
+version = "0.9.1"
 description = "AI Agent Firmware Development and Lab Automation Platform (Dual-Tier MCP Server)"
 readme = "README.md"
 authors = [
@@ -42,9 +42,20 @@ fwloop = "tools.fw_mcp_server:main"
 fw-mcp = "tools.fw_mcp_server:main"
 fw = "tools.fw_mcp_server:main"
 
+# 开发/验收工具链 (不随 wheel 分发给使用者): 并行跑单测用
+#   uv pip install -e ".[dev]"
+#   python -m pytest tests/unit -n auto --dist=loadfile
+[project.optional-dependencies]
+dev = [
+    "pytest-xdist>=3.6.0",
+]
+
 [tool.setuptools.packages.find]
 where = ["."]
 include = ["tools*"]
 
 [tool.setuptools.package-data]
 "*" = ["*.ps1", "*.psm1", "*.yaml", "*.md", "*.json"]
+# 随包分发的模板/资源 (v0.9.1): tools/templates/ 下的 lab.yaml 模板与 skill 副本。
+# 仓库根的 lab/ 与 skills/ 不在 wheel 内, 安装态必须靠这些副本 (防漂移测试锁定一致)。
+"tools" = ["templates/*.yaml", "templates/*.md"]

{firmwareloop-0.8.0 → firmwareloop-0.9.1}/tools/__init__.py

@@ -2,4 +2,4 @@
 FirmwareLoop - AI Agent Firmware Development and Lab Automation Platform.
 """
 
-__version__ = "0.8.0"
+__version__ = "0.9.1"

{firmwareloop-0.8.0 → firmwareloop-0.9.1}/tools/fw_mcp_server.py

@@ -1,6 +1,6 @@
 #!/usr/bin/env python3
 """
-fw_mcp_server.py - FirmwareLoop High-Level Workflow & Device MCP Server (v0.8.0).
+fw_mcp_server.py - FirmwareLoop High-Level Workflow & Device MCP Server (v0.9.1).
 
 Exposes high-level firmware engineering and hardware management tools to AI Coding
 Agents (Antigravity CLI, Claude Code CLI, Qoder IDE, CodeBuddy IDE, DeepSeek Harness,
@@ -384,13 +384,16 @@ def handle_fw_ndtdbg_power_cycle(args: Dict[str, Any]) -> Dict[str, Any]:
 def _stream_cli_cmd(args: Dict[str, Any], out_path: str, duration_cap: float) -> Optional[list]:
     """构造 stream CLI 命令 (同步/job 共用); 返回 None 表示参数非法。"""
     cli_script = os.path.join(REPO_ROOT, "tools", "ndtdbg_cli.py")
-    regs = args.get("regs") or ["0xEE:8"]
     duration_s = min(max(float(args.get("duration_s", 10)), 0.0), duration_cap)
     max_frames = int(args.get("max_frames", 0))
     if duration_s <= 0 and max_frames <= 0:
         return None
-    cmd = [sys.executable, cli_script, "stream", "--regs", *[str(r) for r in regs],
-           "--out", out_path]
+    cmd = [sys.executable, cli_script, "stream", "--out", out_path]
+    regs = args.get("regs")
+    if regs:
+        if isinstance(regs, str):
+            regs = [regs]
+        cmd.extend(["--regs", *[str(r) for r in regs]])
     if args.get("interval_ms") is not None:
         cmd.extend(["--interval-ms", str(int(args["interval_ms"]))])
     if duration_s > 0:
@@ -567,10 +570,13 @@ def handle_fw_ndtdbg_capture_seq(args: Dict[str, Any]) -> Dict[str, Any]:
     cli_script = os.path.join(REPO_ROOT, "tools", "ndtdbg_cli.py")
     cap_script = os.path.join(REPO_ROOT, "tools", "logic_capture.ps1")
     duration_ms = int(args.get("duration_ms", 8000))
-    writes = args.get("writes", [{"reg": "0xBE", "data": "01"}, {"reg": "0x01", "data": "BE 42"}])
-    poll_reg = args.get("poll_reg", "0x01")
+    writes = args.get("writes")
+    if not writes:
+        return {"ok": False, "error_class": "CONFIG_ERROR",
+                "error": "fw_ndtdbg_capture_seq 必须传入非空 writes 序列 (如 [{'reg': '0xBE', 'data': '01'}]), 无默认序列; 参见目标固件协议文档"}
+    poll_reg = args.get("poll_reg")
     poll_attempts = int(args.get("poll_attempts", 5))
-    readback_reg = args.get("readback_reg", "0xBE")
+    readback_reg = args.get("readback_reg")
     poll_expect = " ".join(str(args.get("poll_expect", "00 00")).split()).upper()
     confirm = bool(args.get("confirm", True))
 
@@ -811,13 +817,47 @@ def _detect_hardware() -> Dict[str, Any]:
     return detected
 
 
+_PACKAGE_DIR = os.path.dirname(os.path.abspath(__file__))
+
+
+def _lab_example_template_path() -> str:
+    """lab.yaml 唯一模板定位 (v0.9.1 修复安装态 FileNotFoundError):
+    源码仓库态优先 lab/lab.example.yaml (开发真身); wheel 安装态
+    (REPO_ROOT=site-packages, 无 lab/ 目录) 回退随包分发的
+    tools/templates/lab.example.yaml——两份由防漂移测试逐行锁定一致。"""
+    repo = os.path.join(REPO_ROOT, "lab", "lab.example.yaml")
+    if os.path.isfile(repo):
+        return repo
+    return os.path.join(_PACKAGE_DIR, "templates", "lab.example.yaml")
+
+
+def _skill_template_path(name: str) -> Optional[str]:
+    """skill 源文件定位: 源码仓库 skills/<name>/SKILL.md 优先 (skills/ 不随 wheel
+    分发), 安装态回退包内 tools/templates/skill-<name>.md; 均缺失返回 None。"""
+    repo = os.path.join(REPO_ROOT, "skills", name, "SKILL.md")
+    if os.path.isfile(repo):
+        return repo
+    pkg = os.path.join(_PACKAGE_DIR, "templates", f"skill-{name}.md")
+    return pkg if os.path.isfile(pkg) else None
+
+
+def _project_lab_yaml_path() -> str:
+    """配置写入位置: 源码仓库态 (REPO_ROOT/lab 存在) 写仓库 lab/lab.yaml (工程习惯
+    与既有测试锚点不变); 安装态写调用方工程 CWD/lab/lab.yaml (IDE 以工程根为 CWD
+    启动 MCP), 避免把配置写进 site-packages 自身。"""
+    repo_lab = os.path.join(REPO_ROOT, "lab")
+    if os.path.isdir(repo_lab):
+        return os.path.join(repo_lab, "lab.yaml")
+    return os.path.join(os.getcwd(), "lab", "lab.yaml")
+
+
 def _build_lab_yaml_from_example(target_dir: str, target_chip: str, build_backend: str,
                                  detected_dll_dir: Optional[str]) -> str:
     """P1-5: lab/lab.example.yaml 为唯一模板 (example 加段 init 自动跟上);
     仅替换 project.name/target_chip/build_backend/source_dir 与 dut.uart.port
     (留空 + 注释 "用 fw_scan_hardware 探测", 去掉硬编码 COM3);
     ndtdbg.dll_dir 按探测结果预填, 探测不到保持注释态 + 人工指引。"""
-    example_path = os.path.join(REPO_ROOT, "lab", "lab.example.yaml")
+    example_path = _lab_example_template_path()
     with open(example_path, encoding="utf-8") as fh:
         lines = fh.read().splitlines()
     out: List[str] = []
@@ -865,7 +905,7 @@ def _upgrade_lab_yaml(existing_path: str) -> List[str]:
     import yaml as _yaml
     with open(existing_path, encoding="utf-8") as fh:
         existing = _yaml.safe_load(fh) or {}
-    example_path = os.path.join(REPO_ROOT, "lab", "lab.example.yaml")
+    example_path = _lab_example_template_path()
     with open(example_path, encoding="utf-8") as fh:
         example = _yaml.safe_load(fh) or {}
     added: List[str] = []
@@ -902,7 +942,7 @@ def handle_fw_init_project(args: Dict[str, Any]) -> Dict[str, Any]:
         return {
             "ok": False,
             "error_class": "CONFIG_ERROR",
-            "error": "target_chip 必填 (如 STM32F103C8 / CSA37F71)",
+            "error": "target_chip 必填 (如 STM32F103C8 / STM32F407ZG)",
             "detail": "fwloop init <target_chip> 或 MCP fw_init_project(target_chip=...)",
         }
 
@@ -1225,8 +1265,8 @@ fw_serial_capture(power_cycle_off_ms=500)   # 抓开机日志（窗口内自动
 
 
 def handle_fw_configure_lab(args: Dict[str, Any]) -> Dict[str, Any]:
-    lab_yaml_path = os.path.join(REPO_ROOT, "lab", "lab.yaml")
-    example_yaml_path = os.path.join(REPO_ROOT, "lab", "lab.example.yaml")
+    lab_yaml_path = _project_lab_yaml_path()
+    example_yaml_path = _lab_example_template_path()
 
     config: Dict[str, Any] = {}
     if os.path.exists(lab_yaml_path):
@@ -1936,8 +1976,7 @@ TOOLS_REGISTRY = {
                 "regs": {
                     "type": "array",
                     "items": {"type": "string"},
-                    "description": "Register specs 'addr:len[:name]', e.g. ['0xEE:8:ch', '0x20:138:event']. Default ['0xEE:8'].",
-                    "default": ["0xEE:8"],
+                    "description": "Register specs 'addr:len[:name]', e.g. ['0xEE:8:ch'] (EXAMPLE). Required unless configured in lab.yaml ndtdbg.stream.regs or ndtdbg.target_profile.stream_regs.",
                 },
                 "interval_ms": {
                     "type": "integer",
@@ -1961,7 +2000,7 @@ TOOLS_REGISTRY = {
                 "decode": {
                     "type": "string",
                     "enum": ["hex", "int16le", "uint16le", "int8", "uint8"],
-                    "description": "Optional decoded columns besides raw hex (int16le for PT488 0xEE channels).",
+                    "description": "Optional decoded columns besides raw hex (e.g. int16le for 4-channel little-endian sensor frames).",
                     "default": "hex",
                 },
                 "retry": {
@@ -1987,7 +2026,7 @@ TOOLS_REGISTRY = {
                 "interleave_writes": {
                     "type": "array",
                     "items": {"type": "string"},
-                    "description": "Interleave-write stress profile (P1-1): 'addr:cycle:v1,v2,...:every=N' (rotate values every N frames) or 'addr:once:v:frame=M' (single write at frame M). Written in-frame gaps over the SAME USB session (no dual-open). Requires write_allowed: true AND confirm: true. e.g. ['0x56:cycle:00,01,02,03:every=8'] reproduces the PT488 schedule-race stress profile.",
+                    "description": "Interleave-write stress profile (P1-1): 'addr:cycle:v1,v2,...:every=N' (rotate values every N frames) or 'addr:once:v:frame=M' (single write at frame M). Written in-frame gaps over the SAME USB session (no dual-open). Requires write_allowed: true AND confirm: true. e.g. ['0x56:cycle:00,01,02,03:every=8'] reproduces schedule-race style concurrent-write stress profiles (example from a real product debugging session).",
                 },
                 "confirm": {
                     "type": "boolean",
@@ -1997,7 +2036,6 @@ TOOLS_REGISTRY = {
                 "dll_dir": {"type": "string", "description": "NdtDebugTool lib dir; default from lab.yaml ndtdbg.dll_dir"},
                 "slave_addr": {"type": "string", "description": "IIC slave address, e.g. 0xA0; default from lab.yaml"},
             },
-            "required": ["regs"],
             "additionalProperties": False,
         },
         "handler": handle_fw_ndtdbg_stream,
@@ -2010,8 +2048,7 @@ TOOLS_REGISTRY = {
                 "regs": {
                     "type": "array",
                     "items": {"type": "string"},
-                    "description": "Register specs 'addr:len[:name]'. Default ['0xEE:8'].",
-                    "default": ["0xEE:8"],
+                    "description": "Register specs 'addr:len[:name]', e.g. ['0xEE:8:ch'] (EXAMPLE). Required unless configured in lab.yaml ndtdbg.stream.regs or ndtdbg.target_profile.stream_regs.",
                 },
                 "interval_ms": {"type": "integer", "description": "Target sampling interval in ms.", "default": 100},
                 "duration_s": {"type": "number", "description": "Total capture duration in seconds (cap 3600).", "default": 10},
@@ -2056,7 +2093,7 @@ TOOLS_REGISTRY = {
         "handler": handle_fw_ndtdbg_stream_stop,
     },
     "fw_ndtdbg_capture_seq": {
-        "description": "One-call protocol evidence: concurrently runs a NdtBox register write sequence and a sigrok I2C capture, returning the capture path for fw_logic_decode. NOTE: the default sequence (0xBE=01, 0x01=BE 42, poll 0x01, readback 0xBE) is an EXAMPLE only - always pass your target firmware's real register protocol via writes/poll_reg/poll_expect. Writes are double-gated (confirm: true + lab.yaml ndtdbg.write_allowed); degrades to sequence-only execution (capture_skipped) when sigrok-cli is missing.",
+        "description": "One-call protocol evidence: concurrently runs a target-specific register write sequence and a sigrok I2C capture, returning the capture path for fw_logic_decode. REQUIRED: pass your target firmware's real register protocol via writes (e.g. [{'reg': '0xBE', 'data': '01'}]). Optional poll_reg/poll_expect/readback_reg for handshake & verification. Writes are double-gated (confirm: true + lab.yaml ndtdbg.write_allowed); degrades to sequence-only execution (capture_skipped) when sigrok-cli is missing.",
         "inputSchema": {
             "type": "object",
             "properties": {
@@ -2074,20 +2111,21 @@ TOOLS_REGISTRY = {
                             "data": {"type": "string"},
                         },
                     },
-                    "description": "Register write sequence per your firmware protocol (default 0xBE=01, 0x01=BE 42 is an EXAMPLE, may not match real firmware)",
+                    "description": "Target-specific register write sequence (e.g. [{'reg': '0xBE', 'data': '01'}]). Required, no hardcoded default.",
                 },
                 "confirm": {
                     "type": "boolean",
                     "description": "Acknowledge the register write intent; handler auto-passes --confirm to the CLI (double-gated with lab.yaml ndtdbg.write_allowed)",
                     "default": True,
                 },
-                "poll_reg": {"type": "string", "description": "Poll register until it matches poll_expect (default 0x01)"},
+                "poll_reg": {"type": "string", "description": "Optional poll register until it matches poll_expect (no default; skipped if omitted)"},
                 "poll_expect": {"type": "string", "description": "Expected poll register value (hex) that ends the poll loop; default '00 00' - set to match your firmware protocol", "default": "00 00"},
                 "poll_attempts": {"type": "integer", "description": "Max poll attempts", "default": 5},
-                "readback_reg": {"type": "string", "description": "Read-back verification register (default 0xBE)"},
+                "readback_reg": {"type": "string", "description": "Optional read-back verification register (no default; skipped if omitted)"},
                 "dll_dir": {"type": "string", "description": "NdtDebugTool lib directory; default from lab.yaml"},
                 "slave_addr": {"type": "string", "description": "IIC slave address (e.g. 0xA0)"},
             },
+            "required": ["writes"],
             "additionalProperties": False,
         },
         "handler": handle_fw_ndtdbg_capture_seq,
@@ -2174,7 +2212,7 @@ TOOLS_REGISTRY = {
                 },
                 "target_chip": {
                     "type": "string",
-                    "description": "Target MCU chip model (e.g. STM32F103C8, CSA37F71) - REQUIRED, no hardcoded default",
+                    "description": "Target MCU chip model (e.g. STM32F103C8, STM32F407ZG) - REQUIRED, no hardcoded default",
                 },
                 "build_backend": {
                     "type": "string",
@@ -2387,7 +2425,7 @@ def process_request(req: Dict[str, Any]) -> Optional[Dict[str, Any]]:
                 },
                 "serverInfo": {
                     "name": "firmwareloop",
-                    "version": "0.8.0"
+                    "version": "0.9.1"
                 }
             }
         }
@@ -2522,7 +2560,7 @@ def _settle_stashed_entrypoints(stashed) -> None:
 def handle_cli_update() -> int:
     """Handle `firmwareloop update` command."""
     print("============================================================")
-    print("  FirmwareLoop Auto-Updater (v0.8.0)")
+    print("  FirmwareLoop Auto-Updater (v0.9.1)")
     print("============================================================")
 
     is_git_repo = os.path.exists(os.path.join(REPO_ROOT, ".git"))
@@ -2659,6 +2697,18 @@ def handle_cli_selftest(target: str = "ndtdbg") -> int:
     def report(name, status, detail=""):
         results.append((name, status, detail))
 
+    # P2-2: 从生效配置加载产品协议 profile (避免硬编码 0xEE 与 0xBE)
+    try:
+        from tools import ndtdbg_cli
+        _cfg = ndtdbg_cli.load_config(None)
+    except Exception:
+        _cfg = {}
+    ndt_cfg = (_cfg.get("ndtdbg") or {}) if isinstance(_cfg, dict) else {}
+    target_profile = ndt_cfg.get("target_profile") or {}
+    stream_cfg = ndt_cfg.get("stream") or {}
+    stream_regs = target_profile.get("stream_regs") or stream_cfg.get("regs")
+    loop_cfg = target_profile.get("write_loop") or target_profile.get("selftest_sequence")
+
     # 1. status 分层探测
     print("\n[1/4] status 探测 (Box / IIC bus / target chip) ...")
     rc, body = run_cli("status", timeout=30)
@@ -2675,40 +2725,58 @@ def handle_cli_selftest(target: str = "ndtdbg") -> int:
     report("protocol.desync", _st, _detail)
 
     # 2. stream 冒烟 (100ms x 10s)
-    print("[2/4] stream 冒烟 (100ms x 10s, int16 解码) ...")
-    rc, body = run_cli("stream", "--regs", "0xEE:8:ch", "--interval-ms", "100",
-                       "--duration-s", "10", "--decode", "int16le", timeout=60)
-    stream_data = (body or {}).get("data") if isinstance(body, dict) else None
-    if rc == 0 and stream_data:
-        total = stream_data.get("frames_total", 0)
-        conserved = (stream_data.get("frames_ok", 0) + stream_data.get("frames_ff_gap", 0)
-                     + stream_data.get("frames_io_fail", 0)) == total
-        avg = stream_data.get("interval_actual_avg_ms")
-        report("stream.frames_conserved", "PASS" if conserved else "FAIL",
-               f"total={total} (ok={stream_data.get('frames_ok')}, "
-               f"ff_gap={stream_data.get('frames_ff_gap')}, io_fail={stream_data.get('frames_io_fail')})")
-        report("stream.interval_perf", "PASS" if (avg is not None and avg <= 110) else "FAIL",
-               f"avg={avg}ms (target 100ms, 验收线 <=110ms)")
-        report("stream.io_overhead", "PASS" if stream_data.get("io_overhead_avg_ms") is not None else "FAIL",
-               f"io_overhead_avg_ms={stream_data.get('io_overhead_avg_ms')}")
-        report("stream.gaps", "PASS", f"gaps_n={stream_data.get('gaps_n', 0)} (仅 >2x target 计数)")
-    else:
-        report("stream", "FAIL", (body or {}).get("error_class", f"exit {rc}"))
-
-    # 3. 写读回环 (write_allowed 双门内; 未授权 SKIP, 不算 FAIL)
-    print("[3/4] 写读回环 (0xBE debug_mode, 需 lab.yaml write_allowed) ...")
-    rc, body = run_cli("write-reg", "--addr", "0xBE", "--data", "01", "--confirm")
-    if rc == 0 and body and body.get("ok"):
-        auth = (body.get("data") or {}).get("authorization") or {}
-        report("write.readback", "PASS", f"0xBE=01 写入成功 (授权来源: {auth.get('granted_by', '?')})")
-        run_cli("write-reg", "--addr", "0xBE", "--data", "00", "--confirm")
-        report("write.restore", "PASS", "0xBE=00 已恢复")
+    if stream_regs:
+        if isinstance(stream_regs, str):
+            stream_regs = [stream_regs]
+        stream_cmd = ["stream", "--interval-ms", "100", "--duration-s", "10",
+                      "--regs", *[str(r) for r in stream_regs]]
+        frame_cfg = target_profile.get("measure_frame") or {}
+        dec = frame_cfg.get("decode")
+        if dec and dec != "raw":
+            stream_cmd.extend(["--decode", dec])
+        print(f"[2/4] stream 冒烟 (100ms x 10s, regs={stream_regs}) ...")
+        rc, body = run_cli(*stream_cmd, timeout=60)
+        stream_data = (body or {}).get("data") if isinstance(body, dict) else None
+        if rc == 0 and stream_data:
+            total = stream_data.get("frames_total", 0)
+            conserved = (stream_data.get("frames_ok", 0) + stream_data.get("frames_ff_gap", 0)
+                         + stream_data.get("frames_io_fail", 0)) == total
+            avg = stream_data.get("interval_actual_avg_ms")
+            report("stream.frames_conserved", "PASS" if conserved else "FAIL",
+                   f"total={total} (ok={stream_data.get('frames_ok')}, "
+                   f"ff_gap={stream_data.get('frames_ff_gap')}, io_fail={stream_data.get('frames_io_fail')})")
+            report("stream.interval_perf", "PASS" if (avg is not None and avg <= 110) else "FAIL",
+                   f"avg={avg}ms (target 100ms, 验收线 <=110ms)")
+            report("stream.io_overhead", "PASS" if stream_data.get("io_overhead_avg_ms") is not None else "FAIL",
+                   f"io_overhead_avg_ms={stream_data.get('io_overhead_avg_ms')}")
+            report("stream.gaps", "PASS", f"gaps_n={stream_data.get('gaps_n', 0)} (仅 >2x target 计数)")
+        else:
+            report("stream", "FAIL", (body or {}).get("error_class", f"exit {rc}"))
     else:
-        err_class = (body or {}).get("error_class", f"exit {rc}")
-        if err_class == "PERMISSION_DENIED":
-            report("write.readback", "SKIP", "write_allowed 未开启 (双门保护), 跳过写回环")
+        print("[2/4] stream 冒烟 (未配置 target_profile.stream_regs, 跳过) ...")
+        report("stream", "SKIP", "未配置产品协议 profile (target_profile.stream_regs)，寄存器级自验跳过")
+
+    # 3. 写读回环 (write_allowed 双门内; 未授权或未配 profile 时 SKIP, 不算 FAIL)
+    if loop_cfg:
+        loop_addr = str(loop_cfg.get("addr", "0xBE"))
+        w_data = str(loop_cfg.get("write_data", "01"))
+        r_data = str(loop_cfg.get("restore_data", "00"))
+        print(f"[3/4] 写读回环 ({loop_addr}={w_data}->{r_data}, 需 lab.yaml write_allowed) ...")
+        rc, body = run_cli("write-reg", "--addr", loop_addr, "--data", w_data, "--confirm")
+        if rc == 0 and body and body.get("ok"):
+            auth = (body.get("data") or {}).get("authorization") or {}
+            report("write.readback", "PASS", f"{loop_addr}={w_data} 写入成功 (授权来源: {auth.get('granted_by', '?')})")
+            run_cli("write-reg", "--addr", loop_addr, "--data", r_data, "--confirm")
+            report("write.restore", "PASS", f"{loop_addr}={r_data} 已恢复")
         else:
-            report("write.readback", "FAIL", err_class)
+            err_class = (body or {}).get("error_class", f"exit {rc}")
+            if err_class == "PERMISSION_DENIED":
+                report("write.readback", "SKIP", "write_allowed 未开启 (双门保护), 跳过写回环")
+            else:
+                report("write.readback", "FAIL", err_class)
+    else:
+        print("[3/4] 写读回环 (未配置 target_profile.write_loop, 跳过) ...")
+        report("write.readback", "SKIP", "未配置产品协议 profile (target_profile.write_loop)，写回环自验跳过")
 
     # 3.5 write_allowed 卫生检查 (P1-2): 任何层级为 true 即 WARNING (会话级临时态)
     print("[3.5/4] write_allowed 卫生检查 ...")
@@ -3139,7 +3207,7 @@ def set_ndtdbg_dlldir(dll_path: str) -> str:
 def handle_cli_setup() -> int:
     """Handle `firmwareloop setup` command: simultaneously configure Antigravity CLI, Claude Code CLI, Qoder IDE, CodeBuddy IDE, DeepSeek Harness (DSH), and ZCode IDE."""
     print("============================================================")
-    print("  FirmwareLoop Multi-Agent Global Setup Helper (v0.8.0)")
+    print("  FirmwareLoop Multi-Agent Global Setup Helper (v0.9.1)")
     print("============================================================")
     print("")
 
@@ -3254,27 +3322,28 @@ def handle_cli_setup() -> int:
         print(f"    - User MCP: [Warning] Could not write {zc_result['path']}: {zc_result.get('reason')}")
 
     # 7. Global Skills Sync for Antigravity and Claude Code
+    # 源解析 (v0.9.1): 源码仓库 skills/<name>/SKILL.md 优先, 安装态回退包内
+    # tools/templates/skill-<name>.md (skills/ 不随 wheel 分发, 此前安装态静默 0 同步)。
+    print(f"\n[7] Global Skills:")
     ag_skills_dir = os.path.join(user_home, ".gemini", "antigravity-cli", "skills")
     claude_skills_dir = os.path.join(user_home, ".claude", "skills")
-    source_skills_dir = os.path.join(REPO_ROOT, "skills")
     skills_synced = 0
-    if os.path.exists(source_skills_dir):
-        for sk in ["firmwareloop", "fwloop-adapter"]:
-            sk_src = os.path.join(source_skills_dir, sk, "SKILL.md")
-            if os.path.exists(sk_src):
-                try:
-                    ag_target = os.path.join(ag_skills_dir, sk)
-                    os.makedirs(ag_target, exist_ok=True)
-                    shutil.copyfile(sk_src, os.path.join(ag_target, "SKILL.md"))
-
-                    cl_target = os.path.join(claude_skills_dir, sk)
-                    os.makedirs(cl_target, exist_ok=True)
-                    shutil.copyfile(sk_src, os.path.join(cl_target, "SKILL.md"))
-                    skills_synced += 1
-                except Exception:
-                    pass
-
-    print(f"\n[7] Global Skills:")
+    for sk in ["firmwareloop", "fwloop-adapter"]:
+        sk_src = _skill_template_path(sk)
+        if not sk_src:
+            print(f"    - {sk}: [Warning] skill 源缺失 (仓库 skills/ 与包内 templates/ 均未找到)")
+            continue
+        try:
+            ag_target = os.path.join(ag_skills_dir, sk)
+            os.makedirs(ag_target, exist_ok=True)
+            shutil.copyfile(sk_src, os.path.join(ag_target, "SKILL.md"))
+
+            cl_target = os.path.join(claude_skills_dir, sk)
+            os.makedirs(cl_target, exist_ok=True)
+            shutil.copyfile(sk_src, os.path.join(cl_target, "SKILL.md"))
+            skills_synced += 1
+        except Exception as exc:  # noqa: BLE001
+            print(f"    - {sk}: [Warning] {exc}")
     print(f"    - Synchronized: [OK] {skills_synced} skills (firmwareloop, fwloop-adapter) to Antigravity & Claude Code")
 
     # 8. Machine-level global lab.yaml (ndtdbg config for the globally installed tool)
@@ -3294,7 +3363,7 @@ def handle_cli_setup() -> int:
 def handle_cli_init(chip: Optional[str] = None, upgrade: bool = False) -> int:
     """Handle `firmwareloop init [target_chip]` command."""
     print("============================================================")
-    print("  FirmwareLoop Multi-Agent Project Initializer (v0.8.0)")
+    print("  FirmwareLoop Multi-Agent Project Initializer (v0.9.1)")
     print("============================================================")
     cwd = os.getcwd()
     print(f"[*] Initializing multi-agent guidelines & bench config in:\n    {cwd}\n")
@@ -3327,7 +3396,7 @@ def handle_cli_init(chip: Optional[str] = None, upgrade: bool = False) -> int:
 
 
 def print_cli_help() -> None:
-    print("""FirmwareLoop (fwloop) — AI Agent Firmware Engineering & Lab Automation Platform (v0.8.0)
+    print("""FirmwareLoop (fwloop) — AI Agent Firmware Engineering & Lab Automation Platform (v0.9.1)
 
 Usage:
   fwloop [command]   (or: firmwareloop [command])
@@ -3373,7 +3442,7 @@ def main() -> None:
                 sys.exit(2)
             sys.exit(handle_cli_ndtdebugtool(args[1]))
         elif cmd in ["version", "-v", "--version"]:
-            print("FirmwareLoop v0.8.0")
+            print("FirmwareLoop v0.9.1")
             sys.exit(0)
         elif cmd in ["help", "-h", "--help"]:
             print_cli_help()