Tiiny Update Tool - R19 Network Setup / CDN

Extract the entire ZIP. Keep Tiiny powered on and your computer awake.

Mac: open Upgrade Tiiny.command, or run bash upgrade-tiiny.sh DEVICE_IP.
Windows: open upgrade-tiiny.bat, or run upgrade-tiiny.bat -DeviceIp DEVICE_IP.
Linux computer: run bash upgrade-tiiny-linux.sh DEVICE_IP.
Linux requires Bash, OpenSSH client, Python 3, GNU coreutils and tar.

The tool connects to Tiiny over SSH and checks the production download server
from the device. If unreachable, it opens a device-side nmcli Wi-Fi menu.
Choose a network number and enter its Wi-Fi password when nmcli asks (hidden).
W enables Wi-Fi, R rescans, C rechecks the connection, Q stops. Enterprise,
WEP and hidden networks need a separately configured profile.
Changing Wi-Fi can disconnect SSH if it uses that same interface. Reconnect
to the same device SN using its current IP and rerun from this same folder.
USB-C can keep SSH available during Wi-Fi setup.
Incorrect time, TLS verification or CDN errors can also fail the check.

After connectivity succeeds, Tiiny downloads the pinned authd package from
the production CDN if storage is locked. The package is not included in this
ZIP. SHA-256, package metadata and running binary checks precede continuation.
If storage is already unlocked the existing preparation skip is preserved.
Enter the Tiiny login password only when the normal login prompt appears.

OS and authd package downloads retain partial files and retry transient
network failures with 2 to 30 second backoff. After 20 failures without
progress, the partial is kept for resumption. Authd has a 15-minute transfer
window per preparation. Servers ignoring Range may restart at zero.
Authentication failures require user attention. An uncertain installation
result is reconciled through its saved task instead of a blind replay.

Wait for Done. You can now use TiinyOS. Keep the support folder for diagnosis.
Send only support, not the tool's keys directory. Wi-Fi password input is
handled by nmcli and is not saved in PC support logs.
The support SSH certificate expires December 8, 2026. All comments and
interactive prompts are in English.

Release target recovery
If a saved Install is definitively rejected with target_mismatch before any
execution, the tool reads its terminal archive and checks that the device is
idle with no pending activation or recovery. It refreshes production metadata
and creates fresh Download and Install jobs for the newly published target.
The old receipt and request IDs are preserved as evidence. The completed OS
bootstrap is reused. A missing/newer target or inconsistent archive stops the
replan with an explicit message. Never delete device receipts or edit the
installed-version marker to force progress.
Use this complete extracted kit and close older update windows first.
