feat: RAM-install import probe for LOAD rejections (v3.6.42)

Cards that cannot satisfy the CAP's import list reject the LOAD as soon
as the Import component is complete (live 2026-09-29: 6438/6985 in the
block containing its last byte, on several cards incl. an eUICC profile
whose ISD is not the default AID and which does not answer GET DATA 0066 -
no direct platform-version readout exists).

_probe_import_versions (pure) rewrites the Import component's two version
bytes per entry in the assembled load file: same length, component sizes,
Directory and offsets untouched; unknown AIDs and bad versions are
rejected.  /api/ram-install takes probe_imports ({'all': '0.0'} or
per-AID), echoes the applied changes in the response and logs them.  The
PWA's RAM install form gains a collapsed Import probe fieldset (checkbox,
AID=version lines prefilled from the CAP analysis, 'Set all 0.0') and the
result line reports the applied changes.  Diagnostic only - never used for
a real install.

Also verified _cap_parse's component order against the reference TCA load
trace (Header, Directory, Import, Applet, Class, Method, StaticField,
ConstantPool, RefLocation, Descriptor - Import before Applet, not
ascending tag order), so the order is correct and the import list remains
the prime suspect.

sw cache simple-v315; tests: 530 Python / 676 Node.

frontend/tests/capmem.test.js

@@ -42,9 +42,11 @@ eval(extractFunc(html, 'capMemBytes'));
 eval(extractFunc(html, 'capQuotaText'));
 eval(extractFunc(html, 'capMemHtml'));
 eval(extractFunc(html, 'capAnalyzeFile', true));
-// The RAM CAP analysis also applies the detected toolkit mode (DOM-bound; its
-// own logic is covered in ram.test.js) - stub it for these state tests.
+// The RAM CAP analysis also applies the detected toolkit mode and prefills
+// the import-probe field (DOM-bound; their own logic is covered in
+// ram.test.js) - stub them for these state tests.
 globalThis.ramApplyCapToolkitMode = () => {};
+globalThis.ramProbeFill = () => {};
 
 globalThis.esc = s => s;
 globalThis.t = s => s;

frontend/tests/ram.test.js

@@ -22,7 +22,7 @@ function extractFunc(src, name) {
 }
 
 // Extract chain builder functions and dependencies
-const FNS = ['berLenStr', 'buildApdu', 'escHtml', 'esc', 'chainInit', 'chainRamBuildRowHex', 'ramFmtLifecycle', 'ramFmtPrivileges', 'ramRenderExploreHtml', 'ramStepLine', 'ramStepComponents', 'ramInstallFailHint', 'ramGetStatusApdu', 'ramDeleteApdu',
+const FNS = ['berLenStr', 'buildApdu', 'escHtml', 'esc', 'chainInit', 'chainRamBuildRowHex', 'ramFmtLifecycle', 'ramFmtPrivileges', 'ramRenderExploreHtml', 'ramStepLine', 'ramStepComponents', 'ramInstallFailHint', 'ramProbeParse', 'ramGetStatusApdu', 'ramDeleteApdu',
 	'stkParamsBuild', 'ramRemoteSwOk', 'spPorAccepted', 'ramIncrementCntr', 'ramDeleteFromExplorer', 'ramListingSpi2', 'ramRemoveFromExplorer', 'ramHasInstance', 'ramExpandedQueryApdu',
 	'_parseRawElfEntry', '_parseRawAppEntry', 'ramParseElfStatus', 'ramParseAppStatus', 'parseTLV', '_parseE3Entry',
 	'ramCardIdxAfterRemove', 'ramClearResults', 'ramHideProgress', 'ramOpChanged', 'ramRender', 'ramApplyCard', 'ramExecute', 'decodePrivileges', 'ramActionBtn', 'ramCapToolkitMode', 'ramOpProgressText',
@@ -772,3 +772,19 @@ test('ramDeleteFromExplorer advances but does not re-explore on a failed remote
 	assert.strictEqual(calls.explored, null, 'a failed DELETE must not re-explore');
 	unstubDeleteEnv();
 });
+
+test('ramProbeParse reads AID=version lines', () => {
+	globalThis.t = s => s;
+	let r = ramProbeParse('A0000000620101=0.0\n\n# comment\n0102030405 = 1.2');
+	assert.deepStrictEqual(r.map, { 'A0000000620101': '0.0', '0102030405': '1.2' });
+	// 'all' and lower-case AIDs are accepted, normalized to upper case
+	r = ramProbeParse('all=0.0');
+	assert.deepStrictEqual(r.map, { all: '0.0' });
+	r = ramProbeParse('a0000000620101=1.3');
+	assert.deepStrictEqual(r.map, { 'A0000000620101': '1.3' });
+	// malformed lines and an empty field are errors
+	assert.ok(ramProbeParse('A0000000620101').error);
+	assert.ok(ramProbeParse('A0000000620101=x.y').error);
+	assert.ok(ramProbeParse('').error);
+	assert.ok(ramProbeParse('  \n# only comments\n').error);
+});