nx_iot_sc_broadcast.nx

nx_iot_sc_broadcast.nx -- SOVEREIGN ESP-Touch v1 BROADCASTER (R1b-live). Sends the U8 length sequence from nx_iot_smartconfig as real UDP packets so a Tuya/ESP device in pairing mode sniffs the Wi-Fi creds off the 2.4GHz air. NO app, NO Windows tooling on the program path. Mechanism (verified from sovereignly-fetched Espressif source, knowledge/fetched/sc_java_*.raw): - each U8 length L -> one UDP packet whose PAYLOAD is L bytes of '1' (ByteUtil.genSpecBytes: `byte[] data=new byte[len]; for(i) data[i]='1';` -- only the LENGTH carries data) - device sniffs in promiscuous mode (sc_idf_device.raw) so the dest addr only has to put the frame on the air: multicast 234.x:7001 or broadcast 255.255.255.255 both work - send the 4 guide lengths repeatedly until the device locks, then loop the datum block Sockets via nx_syscalls.nx (the @ifdef TARGET_X86_64 path: SYS_SOCKET=41/SYS_SENDTO=44 -- the WORKING path; nx_syscalls_x86_64.nx's socket() dies with ENOSYS in WSL). Runs on any x86_64 Linux host that can transmit on the 2.4GHz (NishiOS box on the IoT SSID, or a Wi-Fi-client rung). The ARM router has no Nishi backend yet -> that deployment seam is documented, not faked. NEVER-BRICK #26: emits reversible Wi-Fi creds only; no firmware write. license_tier: ORIGINAL