import pathlib,shutil
root=pathlib.Path('/home/lighthouse/esp32-dev/.cache/speech-playback-diagnostics-20261006')
p=root/'firmware/components/tcp_transport/transport_ssl.c'
s=p.read_text()
assert '[TLS_DIAG]' not in s
s=s.replace('#include "esp_tls.h"','#include "esp_tls.h"\n#include "mbedtls/ssl.h"',1)
needle='''    return 0;

exit_failure:'''
assert s.count(needle)==1
s=s.replace(needle,'''    mbedtls_ssl_context *context = (mbedtls_ssl_context *)esp_tls_get_ssl_context(ssl->tls);
    if (context) {
        ESP_LOGI(TAG, "[TLS_DIAG] version=%s cipher=%s", mbedtls_ssl_get_version(context), mbedtls_ssl_get_ciphersuite(context));
    }
    return 0;

exit_failure:''',1)
p.write_text(s)
shutil.copyfile(root/'.cache/lan_config.home-network.h',root/'.cache/lan_config.h')
(root/'.cache/lan_config.h').chmod(0o600)
print('TLS metadata added to isolated component; home profile restored without printing credentials')