Update stock firmware and subsystems

ssh -p 8822 root@POD_IP "
  if [ ! -e /opt/eight/bin/frankenfirmware.bak ]; then cp -a /opt/eight/bin/frankenfirmware /opt/eight/bin/frankenfirmware.bak; fi && \
  if [ ! -e /opt/eight/lib/subsystem_updates.bak ]; then cp -a /opt/eight/lib/subsystem_updates /opt/eight/lib/subsystem_updates.bak; fi && \
  if [ -f /opt/eight/config/machine.json ] && [ ! -e /opt/eight/config/machine.json.bak ]; then cp -a /opt/eight/config/machine.json /opt/eight/config/machine.json.bak; fi && \
  mkdir -p /opt/eight/backup_nats && \
  for f in /usr/bin/nats-server /usr/bin/nats /usr/lib64/libnats.so.3.11.0 /etc/nats.conf /etc/systemd/system/nats-server.service; do
    if [ -e \"\$f\" ] && [ ! -e \"/opt/eight/backup_nats/\$(basename \"\$f\")\" ]; then cp -a \"\$f\" /opt/eight/backup_nats/; fi
  done && \
  if [ ! -e /opt/eight/backup_nats/was-enabled ]; then systemctl is-enabled nats-server.service > /opt/eight/backup_nats/was-enabled 2>/dev/null || true; fi
"

curl -is "https://update-api.8slp.net/v1/updates/pod3/1?deviceId=<id>&currentRev=<rev>"

mkdir -p swu_extracted && cd swu_extracted
# The .swu file is a standard cpio archive
cpio -idmv < ../77af88bd8b941fed81786c09a9ac3cdb1e97b126.swu
# Extract the rootfs tarball
tar -xzf eightsleep-nxp-image-*.tar.gz

# Transfer the updated frankenfirmware daemon to staging in /tmp/
scp -P 8822 opt/eight/bin/frankenfirmware root@POD_IP:/tmp/frankenfirmware
 
# Transfer the microcontroller cover firmware image to subsystem updates
scp -P 8822 opt/eight/lib/subsystem_updates/firmware-sensor-g0.bbin \
  root@POD_IP:/opt/eight/lib/subsystem_updates/
 
# Optional: transfer the hub thermal controller firmware (reflashes hub MCU on restart)
scp -P 8822 opt/eight/lib/subsystem_updates/firmware-frozen.bbin \
  root@POD_IP:/opt/eight/lib/subsystem_updates/
 
# Transfer the C NATS shared library to /usr/lib64/
scp -P 8822 usr/lib64/libnats.so.3.11.0 root@POD_IP:/usr/lib64/
 
# Transfer the NATS server and management CLI to /usr/bin/
scp -P 8822 usr/bin/nats-server usr/bin/nats root@POD_IP:/usr/bin/
 
# Transfer NATS configuration and systemd service unit
scp -P 8822 etc/nats.conf root@POD_IP:/etc/nats.conf
scp -P 8822 lib/systemd/system/nats-server.service root@POD_IP:/etc/systemd/system/nats-server.service

# Link the shared library and update loader cache
ssh -p 8822 root@POD_IP "
  ln -sf /usr/lib64/libnats.so.3.11.0 /usr/lib64/libnats.so.3.11 && \
  ldconfig
"
 
# Set permissions and start nats-server
ssh -p 8822 root@POD_IP "
  chmod +x /usr/bin/nats-server /usr/bin/nats && \
  mkdir -p /persistent/jetstream && \
  systemctl daemon-reload && \
  systemctl enable --now nats-server.service
"
 
# Wait for the server, then provision the 'raw' stream frankenfirmware publishes to (skipped if it already exists)
ssh -p 8822 root@POD_IP "
  for i in 1 2 3 4 5 6 7 8 9 10; do nats account info >/dev/null 2>&1 && break; sleep 1; done
  nats stream info raw >/dev/null 2>&1 || \
    nats stream add raw --subjects 'raw.>' --storage file --retention limits --max-age 24h --max-bytes 512MB --discard old --defaults
"

ssh -p 8822 root@POD_IP "
  set -e
  mkdir -p /opt/eight/config
  cat > /opt/eight/config/machine.json << 'EOF'
{
    \"F04\": {
        \"sensorPort\": \"/dev/ttyS2\",
        \"frozenPort\": \"/dev/ttyS1\"
    }
}
EOF
 
  # Copy the G0 firmware into the fallback locations for the Pod 4 cover
  cp /opt/eight/lib/subsystem_updates/firmware-sensor-g0.bbin /opt/eight/lib/subsystem_updates/firmware-sensor-legacy.bbin
  cp /opt/eight/lib/subsystem_updates/firmware-sensor-g0.bbin /opt/eight/lib/subsystem_updates/firmware-sensor.bbin
"

ssh -p 8822 root@POD_IP "
  if [ ! -f /tmp/frankenfirmware ]; then echo 'Error: /tmp/frankenfirmware missing; re-run the Step 4 scp' >&2; exit 1; fi && \
  systemctl stop frank.service && \
  cp /tmp/frankenfirmware /opt/eight/bin/frankenfirmware && \
  chmod +x /opt/eight/bin/frankenfirmware && \
  systemctl start frank.service
"

frozen.cpp: handleCommand|[frozen] -> FW: Firmware initialized v1.5.156
Sensor.cpp: handleCommand|[sensor] -> FW: Firmware initialized v5.5.9

ssh -p 8822 root@POD_IP "
  systemctl restart \
    sleepypod-piezo-processor.service \
    sleepypod-sleep-detector.service \
    sleepypod-environment-monitor.service \
    sleepypod-cover-buttons.service \
    sleepypod-calibrator.service \
    sleepypod.service
"

ssh -p 8822 root@POD_IP "
  set -e
 
  # Verify required backups exist before changing services
  if [ ! -f /opt/eight/bin/frankenfirmware.bak ] || [ ! -d /opt/eight/lib/subsystem_updates.bak ]; then
    echo 'Error: backups missing; aborting rollback' >&2
    exit 1
  fi
 
  # Stop the firmware daemon
  systemctl stop frank.service
 
  # Disable NATS service if installed
  if systemctl list-unit-files nats-server.service >/dev/null 2>&1 || [ -f /etc/systemd/system/nats-server.service ]; then
    systemctl disable --now nats-server.service
  fi
 
  # Restore frankenfirmware
  cp -a /opt/eight/bin/frankenfirmware.bak /opt/eight/bin/frankenfirmware
 
  # Safely stage and restore subsystem_updates
  rm -rf /opt/eight/lib/subsystem_updates.restoring
  cp -a /opt/eight/lib/subsystem_updates.bak /opt/eight/lib/subsystem_updates.restoring
  rm -rf /opt/eight/lib/subsystem_updates
  mv /opt/eight/lib/subsystem_updates.restoring /opt/eight/lib/subsystem_updates
 
  # Restore machine.json if backup exists
  if [ -f /opt/eight/config/machine.json.bak ]; then
    cp -a /opt/eight/config/machine.json.bak /opt/eight/config/machine.json
  else
    rm -f /opt/eight/config/machine.json
  fi
 
  # Clean up installed NATS files and restore pre-existing NATS files if any existed
  rm -f /usr/bin/nats-server /usr/bin/nats /usr/lib64/libnats.so.3.11.0 /usr/lib64/libnats.so.3.11 /etc/nats.conf /etc/systemd/system/nats-server.service
  if [ -d /opt/eight/backup_nats ]; then
    if [ -f /opt/eight/backup_nats/nats-server ]; then
      cp -a /opt/eight/backup_nats/nats-server /usr/bin/
    fi
    if [ -f /opt/eight/backup_nats/nats ]; then
      cp -a /opt/eight/backup_nats/nats /usr/bin/
    fi
    if [ -f /opt/eight/backup_nats/libnats.so.3.11.0 ]; then
      cp -a /opt/eight/backup_nats/libnats.so.3.11.0 /usr/lib64/
      ldconfig
    fi
    if [ -f /opt/eight/backup_nats/nats.conf ]; then
      cp -a /opt/eight/backup_nats/nats.conf /etc/nats.conf
    fi
    if [ -f /opt/eight/backup_nats/nats-server.service ]; then
      cp -a /opt/eight/backup_nats/nats-server.service /etc/systemd/system/
    fi
  fi
  ldconfig
  systemctl daemon-reload
 
  # Re-enable nats-server if it was enabled before Step 1
  if [ \"\$(cat /opt/eight/backup_nats/was-enabled 2>/dev/null)\" = enabled ]; then
    systemctl enable --now nats-server.service
  fi
 
  # Restart frank to restore stock behavior
  systemctl start frank.service
"

sp-status

pipeline:    NATS JetStream (new firmware, April 2026+)
nats-server: active (port 4222 open)
jetstream:   /persistent/jetstream present (<size>)
jetstream-uploader.service: <state>
raw stream:  present (subject raw.>)

nats stream subjects raw

ssh -p 8822 root@POD_IP "
  set -e
  trap 'umount /mnt/slot_b 2>/dev/null || true' EXIT
 
  # 1. Verify board variant and active boot slot (Slot A eMMC layout only)
  ACTIVE_ROOT=\"\$(findmnt -n -o SOURCE / 2>/dev/null || awk '\$2==\"/\" {print \$1}' /proc/mounts)\"
  CMDLINE=\"\$(cat /proc/cmdline 2>/dev/null || true)\"
  case \"\$CMDLINE \$ACTIVE_ROOT\" in
    *rootfs_a*|*mmcblk0p5*) ;;
    *)
      echo 'Error: Active system is not on the verified Slot A eMMC boot path (/dev/mmcblk0p5).' >&2
      exit 1
      ;;
  esac
 
  TARGET_DEV='/dev/mmcblk0p7'
  if [ ! -b \"\$TARGET_DEV\" ]; then
    echo \"Error: Inactive Slot B partition \$TARGET_DEV does not exist.\" >&2
    exit 1
  fi
  if [ \"\$ACTIVE_ROOT\" = \"\$TARGET_DEV\" ]; then
    echo \"Error: Target partition \$TARGET_DEV is currently active as root!\" >&2
    exit 1
  fi
 
  # 2. Mount Slot B and verify mount target
  mkdir -p /mnt/slot_b
  mount -o rw \"\$TARGET_DEV\" /mnt/slot_b
  MOUNTED_DEV=\"\$(findmnt -n -o SOURCE /mnt/slot_b 2>/dev/null || awk '\$2==\"/mnt/slot_b\" {print \$1}' /proc/mounts)\"
  if [ \"\$MOUNTED_DEV\" != \"\$TARGET_DEV\" ]; then
    echo \"Error: Mount mismatch: /mnt/slot_b is \$MOUNTED_DEV, expected \$TARGET_DEV.\" >&2
    exit 1
  fi
 
  # 3. Resolve effective authorized_keys path used by sshd for root on Slot A
  ROOT_HOME=\"\$(awk -F: '\$1==\"root\" {print \$6}' /etc/passwd 2>/dev/null || true)\"
  ROOT_HOME=\"\${ROOT_HOME:-/home/root}\"
 
  KEY_PATH=''
  ENTRIES=\"\$(sshd -T -C 'user=root,host=localhost,addr=127.0.0.1' 2>/dev/null | awk 'tolower(\$1)==\"authorizedkeysfile\" {\$1=\"\"; print \$0}')\"
  for entry in \$ENTRIES; do
    case \"\$entry\" in
      *%h*) cand=\"\${entry//%h/\$ROOT_HOME}\" ;;
      /*)   cand=\"\$entry\" ;;
      *)    cand=\"\$ROOT_HOME/\$entry\" ;;
    esac
    if [ -s \"\$cand\" ]; then
      KEY_PATH=\"\$cand\"
      break
    fi
  done
 
  if [ -z \"\$KEY_PATH\" ]; then
    for cand in \"\$ROOT_HOME/.ssh/authorized_keys\" \"\$ROOT_HOME/ssh/authorized_keys\" /etc/ssh/authorized_keys; do
      if [ -s \"\$cand\" ]; then KEY_PATH=\"\$cand\"; break; fi
    done
  fi
 
  if [ ! -s \"\$KEY_PATH\" ]; then
    echo 'Error: No valid root authorized_keys file found on Slot A.' >&2
    exit 1
  fi
 
  # 4. Copy authorized_keys to effective Slot B path and verify write
  DEST_KEY=\"/mnt/slot_b\$KEY_PATH\"
  mkdir -p \"\$(dirname \"\$DEST_KEY\")\"
  cp -a \"\$KEY_PATH\" \"\$DEST_KEY\"
  chmod 600 \"\$DEST_KEY\"
 
  # Verify destination copy succeeded and content matches before proceeding
  if [ ! -s \"\$DEST_KEY\" ] || ! cmp -s \"\$KEY_PATH\" \"\$DEST_KEY\"; then
    echo \"Error: Failed to verify authorized_keys write at \$DEST_KEY.\" >&2
    exit 1
  fi
 
  # Also populate root's home key locations on Slot B for recovery resilience
  for dir in \"/mnt/slot_b\$ROOT_HOME/.ssh\" \"/mnt/slot_b\$ROOT_HOME/ssh\"; do
    mkdir -p \"\$dir\"
    cp -a \"\$KEY_PATH\" \"\$dir/authorized_keys\"
    chmod 700 \"\$dir\"
    chmod 600 \"\$dir/authorized_keys\"
  done
 
  # Stock sshd_config_readonly reads /etc/ssh/authorized_keys as the login user (rewt),
  # so append root's keys there instead of overwriting, and leave /etc/ssh at its stock mode.
  mkdir -p /mnt/slot_b/etc/ssh
  touch /mnt/slot_b/etc/ssh/authorized_keys
  while IFS= read -r key || [ -n \"\$key\" ]; do
    [ -n \"\$key\" ] || continue
    grep -qxF -- \"\$key\" /mnt/slot_b/etc/ssh/authorized_keys || echo \"\$key\" >> /mnt/slot_b/etc/ssh/authorized_keys
  done < \"\$KEY_PATH\"
 
  # Stock Slot B ships 'AllowUsers rewt', which refuses root even with a valid key.
  # Allow key-only root login and add root to AllowUsers in both sshd configs.
  for cfg in /mnt/slot_b/etc/ssh/sshd_config /mnt/slot_b/etc/ssh/sshd_config_readonly; do
    [ -f \"\$cfg\" ] || continue
    sed -i -E 's/^#?[[:space:]]*PermitRootLogin[[:space:]]+.*/PermitRootLogin prohibit-password/' \"\$cfg\"
    if grep -qE '^[[:space:]]*AllowUsers[[:space:]]' \"\$cfg\" && ! grep -qE '^[[:space:]]*AllowUsers([[:space:]].*)?[[:space:]]root([[:space:]]|\$)' \"\$cfg\"; then
      sed -i -E 's/^([[:space:]]*AllowUsers[[:space:]].*)\$/\1 root/' \"\$cfg\"
    fi
  done
 
  # 5. Sync updated binaries, configurations, and NATS service
  cp -a /opt/eight/bin/frankenfirmware /mnt/slot_b/opt/eight/bin/frankenfirmware
  cp -a /opt/eight/lib/subsystem_updates/* /mnt/slot_b/opt/eight/lib/subsystem_updates/
  mkdir -p /mnt/slot_b/opt/eight/config /mnt/slot_b/etc/systemd/system/multi-user.target.wants
  if [ -f /opt/eight/config/machine.json ]; then
    cp -a /opt/eight/config/machine.json /mnt/slot_b/opt/eight/config/machine.json
  else
    rm -f /mnt/slot_b/opt/eight/config/machine.json
  fi
  cp -a /usr/lib64/libnats.so.3.11* /mnt/slot_b/usr/lib64/
  cp -a /usr/bin/nats* /mnt/slot_b/usr/bin/
  cp -a /etc/nats.conf /mnt/slot_b/etc/nats.conf
  cp -a /etc/systemd/system/nats-server.service /mnt/slot_b/etc/systemd/system/nats-server.service
  ln -sf /etc/systemd/system/nats-server.service /mnt/slot_b/etc/systemd/system/multi-user.target.wants/nats-server.service
 
  # 6. Flush changes and safely unmount
  sync
  trap - EXIT
  umount /mnt/slot_b
"