Add guided one-shot device provisioning

[awatchar]

What changed

• added a repository-root double-click launcher and guided one-shot provisioning workflow for supported T99/T56 radios
• auto-detects ADB ports 5037/5041, guides USB authorization, and offers menus for multiple devices and custom setup choices
• installs the APK, performs guarded model preparation, provisions the Portal bearer credential without exposing it on the command line, verifies managed config/Ready, reboots, and verifies Ready again
• added protected, non-secret provisioning status reporting and queued forced refresh handling
• documented the operator workflow and the production-only Vercel policy

Why

Field operators need to prepare a known radio without entering PowerShell parameters or understanding ADB port details. The prior preparation scripts also did not connect APK installation, Portal credential provisioning, managed-config activation, and reboot acceptance into one bounded workflow.

Safety and impact

• unknown hardware is rejected before APK installation or provisioning changes
• credential values are never printed or passed as ADB command arguments; transient files are removed
• PASS requires the expected Device ID, a successful managed refresh, an active matching config, no pending candidate, Ready before reboot, and Ready after reboot
• DEV_ENVIRONMENT_REQUIREMENTS.md is intentionally excluded

Validation

• :app:testFossDebugUnitTest :app:assembleFossDebug --no-daemon
• PowerShell parser validation
• guided default/custom-choice tests
• ADB auto-port and multiple-device menu tests
• automatic NDK build from a path containing spaces, including temporary-junction cleanup

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
minimum	Ignored		Aug 9, 2026 5:13pm