feat(ppclock): 离线激活 keygen（ror2 公式+EFEF 反解 MAC）+ activate --auto；docs 终稿（firmware-analysis/protocol/PROGRESS），132 测试全绿

tests/test_cli.py

@@ -206,3 +206,28 @@ class TestOta:
         code, out = run_cli(capsys, ["--json", "ota", str(bad)])
         assert code == 1
         assert out["ok"] is False
+
+
+class TestActivateAuto:
+    def test_activate_auto_via_device_id(self, capsys):
+        """EFEF 应答 ID '89794900980101' → MAC 9A:01:99:50:10:20 → keygen → EF 下发"""
+        class IdTransport(FakeTransport):
+            async def request_device_id(self, timeout=8.0):
+                self.rxtx_writes.append(bytes([0xEF, 0xEF]))
+                return "89794900980101"
+        FakeTransport.instances.clear()
+        import ppclock.cli as c
+        orig = c._make_transport
+        c._make_transport = lambda args: IdTransport(args.mac, args.timeout)
+        try:
+            code, out = run_cli(capsys, ["--json", "activate", "--auto"])
+        finally:
+            c._make_transport = orig
+        assert code == 0
+        t = IdTransport.instances[0]
+        assert t.rxtx_writes[0] == bytes([0xEF, 0xEF])
+        # keygen(9A,01,99,50,10,20)：逐字节 rol2(((m<<1)&FF)^EF)%101
+        from ppclock.protocol import keygen_code
+        expected = keygen_code(bytes([0x9A, 0x01, 0x99, 0x50, 0x10, 0x20]))
+        assert t.rxtx_writes[1] == bytes([0xEF]) + expected
+        assert out["data"]["code"] == expected.hex()