Home IO Control
ESPHome add-on for IO-Homecontrol devices
Loading...
Searching...
No Matches
oneway_transmitter.cpp
Go to the documentation of this file.
1/// @file oneway_transmitter.cpp
2/// @brief One-way (1W) transmit collaborator.
3/// @ingroup hioc_hub
4
6
7#include "proto_codecs.h"
8#include "proto_commands.h"
9#include "proto_timing.h"
10
11#include "esphome/core/application.h"
12#include "esphome/core/hal.h"
13#include "esphome/core/log.h"
14
15namespace esphome {
16namespace home_io_control {
17
18namespace {
19
20constexpr const char *const TAG = "home_io_control.oneway_tx";
21
22} // namespace
23
24uint16_t oneway_copy_preamble_bytes(OneWayCopyShape shape, uint16_t normal_start_preamble) {
25 return shape.preamble == OneWayPreamble::WAKE ? LONG_PREAMBLE : normal_start_preamble;
26}
27
28std::string format_oneway_preamble_list(OneWayPowerClass power_class, uint16_t normal_start_preamble) {
29 std::string out;
30 for (uint8_t copy = 0; copy < ONEWAY_BURST_REPEATS; copy++) {
31 const OneWayCopyShape shape = oneway_burst_copy_shape(power_class, copy);
32 if (copy > 0)
33 out += '/';
34 out += std::to_string(oneway_copy_preamble_bytes(shape, normal_start_preamble));
35 }
36 return out;
37}
38
40 for (const auto &identity : this->identities_.all())
41 this->sequences_.add_identity(identity.node_id, identity.initial_sequence);
42}
43
44bool OneWayTransmitter::send_(const std::string &controller_id,
45 const std::function<bool(IoFrame &, const OneWayControllerIdentity &, uint16_t)> &build,
46 const char *explicit_intent) {
47 const OneWayControllerIdentity *identity = this->identities_.get(controller_id);
48 if (identity == nullptr) {
49 ESP_LOGW(TAG, "1W tx: no controller identity '%s'", controller_id.c_str());
50 this->report_failure_(controller_id, 0, /*sequence_reserved=*/false);
51 return false;
52 }
53
54 // One sequence per logical command, reserved before anything is built or sent.
55 uint16_t sequence = 0;
56 if (!this->sequences_.next(identity->node_id, sequence)) {
57 // The store logs why; it refuses rather than risk reusing a sequence.
58 this->report_failure_(controller_id, 0, /*sequence_reserved=*/false);
59 return false;
60 }
61
62 IoFrame frame{};
63 if (!build(frame, *identity, sequence)) {
64 // The sequence is spent either way. Skipping one is free; reusing it is not, so it is not
65 // returned to the store.
66 ESP_LOGW(TAG, "1W tx: could not build a frame for '%s'", controller_id.c_str());
67 this->report_failure_(controller_id, sequence, /*sequence_reserved=*/true);
68 return false;
69 }
70
71 const bool transmitted = this->send_burst(frame, effective_power_class(*identity));
72
73 // 0x30/0x39 carry no intent decode_1w_frame() can read (it only understands
74 // CMD_EXECUTE/CMD_ACTIVATE_MODE payloads) -- send_enrollment() etc. pass the label directly
75 // rather than leave the "Last 1W Command" sensor blank on the one feature whose entire
76 // diagnostic story is that sensor.
77 std::string intent = explicit_intent;
78 if (intent.empty()) {
79 const OneWayFrameInfo info = decode_1w_frame(frame);
80 if (info.has_intent)
81 intent = info.intent;
82 }
83 // Always the identity's own class, never the frame's decoded destination: with
84 // `execute_broadcast: all` the wire dst is `00 00 3F` -> DeviceType::UNKNOWN, which would render
85 // "unknown" in the sensor (the sensor has no distinct "all" case the way the frame log does via
86 // oneway_target_label()). The literal destination is already in the frame log.
87 this->report_attempt_(controller_id, intent, identity->io_device_type, sequence, /*sequence_reserved=*/true,
88 transmitted);
89 return transmitted;
90}
91
92void OneWayTransmitter::report_attempt_(const std::string &controller_id, const std::string &intent,
93 DeviceType target_type, uint16_t sequence, bool sequence_reserved,
94 bool transmitted) {
95 if (!this->report_)
96 return;
97 OneWayCommandReport report{};
98 report.controller_id = controller_id;
99 report.intent = intent;
100 report.target_type = target_type;
101 report.sequence = sequence;
102 report.sequence_reserved = sequence_reserved;
103 report.transmitted = transmitted;
104 this->report_(report);
105}
106
107void OneWayTransmitter::report_failure_(const std::string &controller_id, uint16_t sequence, bool sequence_reserved) {
108 this->report_attempt_(controller_id, "", DeviceType::UNKNOWN, sequence, sequence_reserved, /*transmitted=*/false);
109}
110
111bool OneWayTransmitter::send_command(const std::string &controller_id, CoverCommand cmd) {
112 return this->send_(controller_id, [cmd](IoFrame &frame, const OneWayControllerIdentity &identity, uint16_t sequence) {
113 return create_1w_execute_command(frame, identity.node_id, identity.io_device_type, cmd, sequence,
114 identity.system_key, effective_execute_acei(identity),
115 identity.execute_broadcast_all);
116 });
117}
118
119bool OneWayTransmitter::send_position(const std::string &controller_id, uint8_t position) {
120 return this->send_(
121 controller_id, [position](IoFrame &frame, const OneWayControllerIdentity &identity, uint16_t sequence) {
122 return create_1w_execute_position(frame, identity.node_id, identity.io_device_type, position, sequence,
123 identity.system_key, effective_execute_acei(identity),
124 identity.execute_broadcast_all);
125 });
126}
127
128bool OneWayTransmitter::send_enrollment(const std::string &controller_id) {
129 const OneWayControllerIdentity *identity = this->identities_.get(controller_id);
130 if (identity == nullptr) {
131 ESP_LOGW(TAG, "1W tx: no controller identity '%s'", controller_id.c_str());
132 this->report_failure_(controller_id, 0, /*sequence_reserved=*/false);
133 return false;
134 }
136 return this->send_velux_kli_enrollment_(*identity);
137 return this->send_somfy_enrollment_(*identity);
138}
139
140bool OneWayTransmitter::send_somfy_enrollment_(const OneWayControllerIdentity &identity) {
141 // The documented 1W pairing handshake (the iown-homecontrol link-layer notes, "1W Discovery") is
142 // `0x39` immediately followed by `0x30`, both from the same controller, back to back within one
143 // gesture -- a real Smoove capture landed them 128 ms apart, same burst (see
144 // tests/corpus/captures/enrollment/somfy_smoove_enrollment_add_and_remove_controller_sx1276.yaml).
145 // `0x39` here carries only this
146 // identity's own `src` address, so on the wire it can only mean "clear my own prior entry
147 // before I re-register" -- it cannot name or displace a different controller. Sending it right
148 // before `0x30` clears a stale slot from an earlier enrollment attempt under this identity,
149 // which a bare `0x30` re-add is not guaranteed to overwrite.
150 const bool removed = this->send_(
151 identity.id,
152 [](IoFrame &frame, const OneWayControllerIdentity &id, uint16_t sequence) {
153 return create_1w_remove_controller(frame, id.node_id, id.io_device_type, sequence, id.system_key);
154 },
155 "UNENROLL");
156 if (!removed) {
157 ESP_LOGW(TAG, "1W tx: enrollment's 0x39 prelude did not reach the radio for '%s' -- trying 0x30 anyway",
158 identity.id.c_str());
159 }
160
161 return this->send_(
162 identity.id,
163 [](IoFrame &frame, const OneWayControllerIdentity &id, uint16_t sequence) {
164 return create_1w_add_controller(frame, id.node_id, id.io_device_type, id.manufacturer, sequence, id.system_key,
165 id.enrollment_with_mac);
166 },
167 "ENROLL");
168}
169
170bool OneWayTransmitter::send_velux_kli_enrollment_(const OneWayControllerIdentity &identity) {
171 // The gesture a real KLI 310/313 PROG press produces (issue #74 capture + samr037/iohc-flipper
172 // tx_runner.c + the KLI manual):
173 // 0x39 -> 00 00 3F (clear self; VELUX broadcasts it, unlike Somfy's typed 0x39)
174 // 0x30 -> each of {roller_shutter, awning, dual_shutter} under one sequence (the class sweep)
175 // EXECUTE STOP, then EXECUTE DOWN, both -> 00 00 3F at the VELUX ACEI (registration completion)
176 const bool removed = this->send_(
177 identity.id,
178 [](IoFrame &frame, const OneWayControllerIdentity &id, uint16_t sequence) {
179 return create_1w_remove_controller(frame, id.node_id, DeviceType::UNKNOWN, sequence, id.system_key);
180 },
181 "UNENROLL");
182 if (!removed) {
183 ESP_LOGW(TAG, "1W tx: VELUX enrollment's 0x39 prelude did not reach the radio for '%s' -- continuing",
184 identity.id.c_str());
185 }
186
187 const bool enrolled = this->send_enroll_sweep_(identity, effective_enrollment_classes(identity));
188 if (!enrolled) {
189 // Nothing registered us, so the STOP+DOWN would be an unprovoked close broadcast to every 1W
190 // device on the network holding the key. Skip it.
191 ESP_LOGW(TAG, "1W tx: VELUX 0x30 sweep transmitted nothing for '%s' -- skipping the STOP+DOWN follow-up",
192 identity.id.c_str());
193 return false;
194 }
195
196 // STOP then DOWN, per the KLI manual's "press PAIR, then STOP then DOWN" registration-completion
197 // step (the manual's own timing window is not established as a hard requirement here -- see ADR
198 // 0032). Broadcast, the identity's effective ACEI, one sequence each. A partial miss
199 // here only warns -- the sweep above is what registers us.
200 const uint8_t acei = effective_execute_acei(identity);
201 const bool stopped = this->send_(
202 identity.id,
203 [acei](IoFrame &frame, const OneWayControllerIdentity &id, uint16_t sequence) {
204 return create_1w_execute_command(frame, id.node_id, id.io_device_type, CoverCommand::STOP, sequence,
205 id.system_key, acei, /*broadcast_all=*/true);
206 },
207 "ENROLL STOP");
208 const bool lowered = this->send_(
209 identity.id,
210 [acei](IoFrame &frame, const OneWayControllerIdentity &id, uint16_t sequence) {
211 return create_1w_execute_position(frame, id.node_id, id.io_device_type, ONEWAY_POSITION_FULLY_CLOSED, sequence,
212 id.system_key, acei, /*broadcast_all=*/true);
213 },
214 "ENROLL DOWN");
215 if (!stopped || !lowered) {
216 ESP_LOGW(TAG, "1W tx: VELUX enrollment's STOP+DOWN follow-up did not fully reach the radio for '%s'",
217 identity.id.c_str());
218 }
219 return true; // the sweep registered us; STOP+DOWN are completion, not the credential
220}
221
222bool OneWayTransmitter::send_enroll_sweep_(const OneWayControllerIdentity &identity,
223 const std::array<DeviceType, 3> &classes) {
224 // One sequence for the whole sweep -- every 0x30 in it carries the same value, matching a real
225 // KLI remote and how send_() treats a burst's copies as one logical command.
226 uint16_t sequence = 0;
227 if (!this->sequences_.next(identity.node_id, sequence)) {
228 this->report_failure_(identity.id, 0, /*sequence_reserved=*/false);
229 return false;
230 }
231
232 bool any_transmitted = false;
233 for (const DeviceType target_type : classes) {
234 if (target_type == DeviceType::UNKNOWN)
235 continue;
236 IoFrame frame{};
237 if (!create_1w_add_controller(frame, identity.node_id, target_type, identity.manufacturer, sequence,
238 identity.system_key, identity.enrollment_with_mac)) {
239 ESP_LOGW(TAG, "1W tx: could not build a 0x30 for class 0x%02X on '%s'", static_cast<unsigned>(target_type),
240 identity.id.c_str());
241 continue;
242 }
243 if (this->send_burst(frame, effective_power_class(identity)))
244 any_transmitted = true;
245 }
246
247 this->report_attempt_(identity.id, "ENROLL", identity.io_device_type, sequence, /*sequence_reserved=*/true,
248 any_transmitted);
249 return any_transmitted;
250}
251
252bool OneWayTransmitter::send_unenrollment(const std::string &controller_id) {
253 return this->send_(
254 controller_id,
255 [](IoFrame &frame, const OneWayControllerIdentity &identity, uint16_t sequence) {
256 return create_1w_remove_controller(frame, identity.node_id, identity.io_device_type, sequence,
257 identity.system_key);
258 },
259 "UNENROLL");
260}
261
263 // Logged once for the whole burst rather than once per copy: four log lines per button press
264 // would suggest four commands, which is exactly the misreading the shared sequence exists to
265 // prevent. Only frame-header facts are logged — never payload bytes — so this stays safe even
266 // for the commands redaction.h flags as carrying key material.
267 const OneWayFrameInfo info = decode_1w_frame(frame);
268 // Same vocabulary as the RX line (hub_internal.h's log_1w_remote_frame()): "all" for the
269 // all-devices broadcast, else the target class's bare name -- one decision, made once, by
270 // oneway_target_label() (proto_codecs.h), so the two paths cannot render the same address
271 // differently. "to <class>" is a fair claim here and only here: we choose the class we transmit
272 // to (enrollment_classes). The RX line says dst-class= instead, because a received class says
273 // nothing about what the sending remote drives.
274 const char *target = oneway_target_label(info);
275 // Built from the same oneway_burst_copy_shape() the transmit loop below calls, so this can never
276 // claim a preamble shape the burst does not actually send.
277 const std::string preambles = format_oneway_preamble_list(power_class, this->tuning_->normal_start_preamble);
278 if (info.has_intent) {
279 ESP_LOGI(TAG, "1W tx: from %s to %s intent %s (%ux, preamble %s)", node_id_to_string(frame.src).c_str(), target,
280 info.intent, ONEWAY_BURST_REPEATS, preambles.c_str());
281 } else {
282 ESP_LOGI(TAG, "1W tx: from %s to %s cmd 0x%02X (%ux, preamble %s)", node_id_to_string(frame.src).c_str(), target,
283 frame.cmd, ONEWAY_BURST_REPEATS, preambles.c_str());
284 }
285
286 uint8_t sent = 0;
287 for (uint8_t copy = 0; copy < ONEWAY_BURST_REPEATS; copy++) {
288 if (copy > 0) {
289 // The gap is part of the protocol, so it is taken before the copy rather than after the
290 // last one — a trailing delay would hold the loop for nothing.
291 App.feed_wdt();
292 delay(ONEWAY_BURST_INTERVAL_MS);
293 }
294 // The transmitter owns CTRL1's low-power bit and the preamble, per copy -- the frame builders
295 // always hand back ctrl1=0 (proto_commands.cpp), and this clears the bit unconditionally on a
296 // NORMAL-shaped copy too, whatever the builder produced. Everything else about the copy
297 // (cmd/data/sequence/MAC) stays exactly what the caller built, per send_burst()'s own contract.
298 const OneWayCopyShape shape = oneway_burst_copy_shape(power_class, copy);
299 IoFrame copy_frame = frame;
300 if (shape.low_power_flag) {
301 copy_frame.ctrl1 |= CTRL1_LOW_POWER;
302 } else {
303 copy_frame.ctrl1 &= static_cast<uint8_t>(~CTRL1_LOW_POWER);
304 }
305 const uint16_t preamble = oneway_copy_preamble_bytes(shape, this->tuning_->normal_start_preamble);
306 if (this->transmit_(copy_frame, FREQ_CH2, preamble)) {
307 sent++;
308 }
309 }
310
311 if (sent != ONEWAY_BURST_REPEATS) {
312 // Worth a warning even when some copies made it: the burst is the reliability mechanism, so a
313 // partial one is a degraded command, and nothing downstream will ever notice on its own.
314 ESP_LOGW(TAG, "1W tx: only %u of %u copies transmitted", sent, ONEWAY_BURST_REPEATS);
315 }
316 return sent > 0;
317}
318
319} // namespace home_io_control
320} // namespace esphome
const OneWayControllerIdentity * get(const std::string &id) const
Look up an identity by its YAML handle.
bool next(const uint8_t node_id[NODE_ID_SIZE], uint16_t &out)
Reserve and return the next sequence for an identity.
bool send_position(const std::string &controller_id, uint8_t position)
Send a numeric position as the identity's controller.
void setup()
Open each registered identity's persistent sequence counter.
bool send_unenrollment(const std::string &controller_id)
Un-register this identity from every device of its class currently in association mode (CMD 0x39) alo...
bool send_enrollment(const std::string &controller_id)
Register this identity as a controller on every device currently in association mode (the receiver's ...
bool send_command(const std::string &controller_id, CoverCommand cmd)
Send a named command as the identity's controller.
bool send_burst(const IoFrame &frame, OneWayPowerClass power_class)
Transmit one already-built, already-signed 1W frame as a burst.
uint16_t oneway_copy_preamble_bytes(OneWayCopyShape shape, uint16_t normal_start_preamble)
Resolve one copy's shape (oneway_burst_copy_shape()) to the actual preamble byte count.
std::string format_oneway_preamble_list(OneWayPowerClass power_class, uint16_t normal_start_preamble)
Render the preamble bytes each copy of a burst will use, e.g.
@ WAKE
The long wake-up preamble (LONG_PREAMBLE), paired with CTRL1_LOW_POWER set.
DeviceType
Device type identifiers reported by IO‑Homecontrol products.
@ UNKNOWN
Unknown/unspecified device.
static constexpr const char * TAG
CoverCommand
Named device commands for cover-type actuators.
bool create_1w_remove_controller(IoFrame &f, const uint8_t src[NODE_ID_SIZE], DeviceType target_type, uint16_t sequence, const uint8_t controller_key[AES_KEY_SIZE])
Build a 1W remove-controller frame (CMD 0x39).
OneWayPowerClass effective_power_class(const OneWayControllerIdentity &identity)
The burst shape this identity actually transmits with.
const char * oneway_target_label(const OneWayFrameInfo &info)
The destination label a decoded 1W frame renders as in a log line.
bool create_1w_execute_command(IoFrame &f, const uint8_t src[NODE_ID_SIZE], DeviceType target_type, CoverCommand cmd, uint16_t sequence, const uint8_t controller_key[AES_KEY_SIZE], uint8_t acei, bool broadcast_all)
Build a 1W named-command execute frame (CMD 0x00) targeting a device class.
OneWayFrameInfo decode_1w_frame(const IoFrame &frame)
Decode a parsed 1W frame into a structured OneWayFrameInfo.
std::array< DeviceType, 3 > effective_enrollment_classes(const OneWayControllerIdentity &identity)
The device classes this identity's 0x30 enrollment sweep will actually target.
uint8_t effective_execute_acei(const OneWayControllerIdentity &identity)
The ACEI byte a given identity will put on air for a 1W EXECUTE frame.
OneWayPowerClass
Which preamble/CTRL1 shape a 1W identity's bursts actually go out with.
std::string node_id_to_string(const uint8_t id[NODE_ID_SIZE])
Format a 3‑byte node ID as a 6‑character uppercase hex string.
OneWayWireProfile resolve_oneway_wire_profile(uint8_t manufacturer)
Resolve an identity's 1W wire profile from its manufacturer byte.
bool create_1w_execute_position(IoFrame &f, const uint8_t src[NODE_ID_SIZE], DeviceType target_type, uint8_t position, uint16_t sequence, const uint8_t controller_key[AES_KEY_SIZE], uint8_t acei, bool broadcast_all)
Build a 1W position execute frame (CMD 0x00) targeting a device class.
OneWayCopyShape oneway_burst_copy_shape(OneWayPowerClass power_class, uint8_t copy_index)
Resolve which preamble/CTRL1 shape one copy of a burst gets, from the identity's power class and the ...
bool create_1w_add_controller(IoFrame &f, const uint8_t src[NODE_ID_SIZE], DeviceType target_type, uint8_t manufacturer, uint16_t sequence, const uint8_t controller_key[AES_KEY_SIZE], bool with_mac)
Build a 1W add-controller frame (CMD 0x30).
static const char *const TAG
One-way (1W) transmit collaborator.
Device-name, address-classification and 1W-frame codecs.
Command builders for the IO‑Homecontrol protocol.
Physical-layer radio and timing parameters for the IO-Homecontrol protocol.
Parsed IO‑Homecontrol frame (CTRL0/1 + addresses + command + data).
Definition proto_frame.h:93
uint8_t src[NODE_ID_SIZE]
Source node ID (3 bytes).
Definition proto_frame.h:97
uint8_t ctrl1
Control byte 1: low power, beacon, etc.
Definition proto_frame.h:95
One configured 1W controller identity.
uint8_t node_id[NODE_ID_SIZE]
Source address we transmit as (configured or derived).
std::string id
YAML handle entities reference.
bool execute_broadcast_all
When true (execute_broadcast: all), 1W EXECUTE frames go to the all-devices address 00 00 3F regardle...
uint8_t system_key[AES_KEY_SIZE]
Network key for this identity; may differ per identity.
DeviceType io_device_type
Device class this identity commands.
uint8_t manufacturer
Manufacturer ID; unused until the enrollment phase.
The preamble and CTRL1 shape one copy of a 1W burst gets.
OneWayPreamble preamble
Which preamble this copy transmits with.
bool low_power_flag
Whether this copy sets CTRL1_LOW_POWER.
Decoded representation of a 1W remote frame.
bool has_intent
True if originator/ACEI/intent fields were decoded.
char intent[ONEWAY_INTENT_BUFFER_SIZE]
Human-readable command intent (e.g., "CLOSE").
EnrollGesture enroll_gesture
Which enrollment gesture this manufacturer's actuators expect.