ef-cli

ef-cli [--ble <MAC>] [--device <id>] [--password <pw>] [--udp <host[:port]>] [--verbose] <command> [args]

ef-cli list [--scan-ble]      # discover devices
ef-cli info                   # identity snapshot: serial, fw, camera, IMU, WiFi
ef-cli state                  # current DEVICE_STATE
ef-cli config                 # enabled capture modes + current configuration
ef-cli config set 1920 1200 30 h265   # persist a capture config (idle only)

ef-cli calibration [--get]            # show camera + IMU calibration
ef-cli calibration --camera --set <fx> <fy> <cx> <cy> <xi> <alpha> <W> <H> [--rectify on|off] [--fov-scale <s>]
                                      # set camera intrinsics (idle only; always
                                      # published as recording metadata)
ef-cli calibration --camera [--rectify on|off] [--fov-scale <s>]
                                      # change rectification without retyping the
                                      # intrinsics: reads the stored calibration,
                                      # edits the named flags, resends it
ef-cli calibration --imu --mode <raw|calibrated|both>   # how recordings carry the IMU calibration
ef-cli calibration [--camera|--imu] --reset             # reset to factory default

ef-cli health [--deep]        # on-device sweep; --deep adds the stress tier

ef-cli record start [name] [--location LAT,LON[,ALT]]
                              # device-local recording (survives disconnect);
                              # --location applies to this recording only
ef-cli record stop
ef-cli record status [name]
ef-cli record list            # each entry marked [encrypted] or [unencrypted]
ef-cli record delete <name>
ef-cli download <name> [dest] # pull over USB/BLE (bytes as stored). dest may be a
                             # file or a directory; a directory receives <name>.mcap
ef-cli storage                # free/total on the recording store

ef-cli upload <name> <presigned-url>   # device uploads over WiFi
ef-cli stop-upload <name>

ef-cli check-update                    # what the update service offers, no download
ef-cli update                          # install whatever it offers
ef-cli update --url <url>              # install from an explicit URL, no service call
ef-cli update --file firmware.eff      # sideload a local image over USB
ef-cli abort-update

ef-cli wifi add <ssid> [psk [country]]
ef-cli wifi remove <ssid> | select <ssid> | status
ef-cli wifi list                       # saved networks (marks the connected one)
ef-cli wifi scan                       # top 10 access points in range, strongest
                                       # first (not while recording or streaming)
ef-cli sync-time                       # set the device clock from the host
ef-cli time                            # read the device wall clock
ef-cli location                        # read the device's current location
ef-cli location set <lat> <lon> [alt]  # persist the device location
ef-cli reboot

ef-cli set-password <new>              # rekey the control password (over unlocked USB)
ef-cli set-password <old> <new>        # rekey over BLE, or over locked USB
ef-cli lock on|off [--session]         # lock/unlock the USB control plane
                                       # --session: this power session only
ef-cli encryption on|off               # AES-256 encrypt new recordings (refused with no key)
ef-cli encryption create               # generate the device's key; SHOWN ONCE, save it
ef-cli encryption delete               # show the key and how to destroy it; destroys nothing
ef-cli encryption delete --confirm <key_id> [--yes]
ef-cli key show [--out <file>]         # print the key, or write it to a new 0600 file
ef-cli key set --in <file> | - | <64-hex>   # install a key you supply (32 bytes)
ef-cli factory-reset [--yes]           # restore defaults; DESTROYS the encryption key

ef-decrypt <in.enc> <key-file> <out.mcap>