refactor: SDK 包结构——transports/firmware 分包、bridge_server 入包+ppclock-bridge 入口、fw 工具入 SDK 域,151 测试全绿

This commit is contained in:
agent committed 2026-07-30 14:46:29 +00:00
1 parent c13958db10
commit a613c76114
14 files changed
+126 -69

No files matched your search

-332
View File
@@ -1,332 +0,0 @@
#!/usr/bin/env python3
"""ppclock BLE bridge 服务端 —— 在蓝牙物理所在机(host-win)原生运行。
依赖:pip install bleak(仅此一个,Windows 用 WinRT 后端)。
运行:python bridge_server.py [--host 0.0.0.0] [--port 8971]
协议:JSONL over TCP。每行一个请求 {"id":N,"op":...},
响应 {"id":N,"ok":bool,"data":...,"error":...};OTA 期间穿插
{"event":"ota_progress",...} 事件。单 BLE 设备会话按连接串行化。
RPC:
ping → {pong, version, platform}
scan {timeout} → {devices:[{name,address,rssi}]}
connect {address} → {}(连接+服务发现+订阅 RXTX notify)
write {char,data,response}→ {}(char: "epd"|"rxtx",data: hex)
read {char} → {data: hex}
request_device_id {timeout}→ {device_id}(EFEF + 收集 14B notify)
ota {image} → {blocks, bytes}(image: hex;完整 SUOTA)
close → {}
"""
from __future__ import annotations
import argparse
import asyncio
import json
import platform
import sys
PROTOCOL_VERSION = 1
SERVER_BUILD = 11 # 2026-07-29: ota 支持 gpio_map 参数与 max_blocks 探针模式(GPIO 引脚实证用)
EPD_SERVICE_UUID = "13187b10-eba9-a3ba-044e-83d3217d9a38"
EPD_CHAR_UUID = "4b646063-6264-f3a7-8941-e65356ea82fe"
RXTX_SERVICE_UUID = "00001f10-0000-1000-8000-00805f9b34fb"
RXTX_CHAR_UUID = "00001f1f-0000-1000-8000-00805f9b34fb"
# 固件分析(firmware-analysis §2/§3):0x221f 服务的 0x331f 特征(handle 0x0B)
# 与 0x1f1f(handle 7)同入命令分发器;部分固件 notify 能力挂在 331f 上
ALT_NOTIFY_UUID = "0000331f-0000-1000-8000-00805f9b34fb"
DEVICE_NAME_PREFIX = "NRF-"
SPOTA_SERVICE_UUID = "0000fef5-0000-1000-8000-00805f9b34fb"
SPOTA_SERV_STATUS_UUID = "5f78df94-798c-46f5-990a-b3eb6a065c88" # 实机 h=38 notify(64b4e8b5 仅 read)
SPOTA_MEM_DEV_UUID = "8082caa8-41a6-4021-91c6-56f9b954cc34"
SPOTA_GPIO_MAP_UUID = "724249f0-5ec3-4b5f-8804-42345af08651"
SPOTA_PATCH_DATA_UUID = "457871e8-d516-4ca1-9116-57d0b17b9cb2"
SPOTA_PATCH_LEN_UUID = "9d84b9a3-000c-49d8-9183-855b673fda31"
MEM_DEV_SPI_FLASH = bytes([0x00, 0x00, 0x00, 0x13])
GPIO_MAP_DEFAULT = bytes([0x05, 0x06, 0x00, 0x40])
# GPIO_MAP 实证(2026-07-29 gpio_probe):BE 序 = APK 整数 0x05060040,唯一电气有效
# ({00,00,06,05}/{40,00,06,05} 均致 0x38000 读失败=状态 22;C 读成功=状态 20 系产品头缺失,非引脚问题)
END_SIGNAL = bytes([0x00, 0x00, 0x00, 0xFE])
REBOOT_SIGNAL = bytes([0x00, 0x00, 0x00, 0xFD])
BLOCK_SIZE = 240
WRITE_CHUNK = 20
STATUS_OK = 2
CHARS = {"epd": EPD_CHAR_UUID, "rxtx": RXTX_CHAR_UUID, "alt": ALT_NOTIFY_UUID,
"dis_model": "00002a24-0000-1000-8000-00805f9b34fb",
"dis_fw": "00002a26-0000-1000-8000-00805f9b34fb",
"spota_mem_info": "6c53db25-47a1-45fe-a022-7c92fb334fd4",
"spota_status_ro": "64b4e8b5-0de5-401b-a21d-acc8db3b913a",
"spota_mem_dev": "8082caa8-41a6-4021-91c6-56f9b954cc34",
"spota_gpio": "724249f0-5ec3-4b5f-8804-42345af08651",
"spota_patch_len": "9d84b9a3-000c-49d8-9183-855b673fda31",
"spota_patch_data": "457871e8-d516-4ca1-9116-57d0b17b9cb2"}
# 实机 GATT(2026-07-28 bridge 诊断):1f1f(h=53)=仅write 无 notify;
# 331f(h=57)=notify+write+read,为真交互通道;EPD(h=48)=notify+write
def parse_device_id(data: bytes) -> str:
if all(0x20 <= b < 0x7F for b in data):
return data.decode("ascii")
return data.hex().upper()
class BleSession:
"""单设备 BLE 会话(bleak),与 ppclock.transport.BLETransport 同语义。"""
def __init__(self):
self.client = None
self.notify_char = None
self._id_buf = bytearray()
self._id_event = asyncio.Event()
async def scan(self, timeout: float):
from bleak import BleakScanner
found = await BleakScanner.discover(timeout=timeout, return_adv=True)
out = []
for addr, (dev, adv) in found.items():
name = dev.name or adv.local_name or ""
if name.startswith(DEVICE_NAME_PREFIX):
out.append({"name": name, "address": dev.address, "rssi": adv.rssi})
return {"devices": out}
async def connect(self, address: str, timeout: float = 15.0, subscribe: bool = True):
from bleak import BleakClient, BleakScanner
await self.close()
# Windows/WinRT 按地址直连常解析失败——先扫描拿到 BLEDevice(含地址类型/广播数据)再连
deadline = asyncio.get_event_loop().time() + timeout
dev = None
while True:
remain = deadline - asyncio.get_event_loop().time()
if remain <= 0:
break
dev = await BleakScanner.find_device_by_address(
address, timeout=min(5.0, max(1.0, remain)))
if dev is not None:
break
if dev is None:
raise RuntimeError(f"设备解析失败(扫描未见 {address})")
self.client = BleakClient(dev, timeout=timeout)
await self.client.connect()
# notify 全订阅:331f(主)+ 1f1f(部分固件)+ EPD(设备 ID 也可能经此应答)
# subscribe=False 用于 OTA 净连接(避免订阅抖动影响烧录链路)
self.notify_char = []
if subscribe:
for uuid in (ALT_NOTIFY_UUID, RXTX_CHAR_UUID, EPD_CHAR_UUID):
try:
await asyncio.wait_for(
self.client.start_notify(uuid, self._on_notify), 10)
self.notify_char.append(uuid)
except Exception:
continue
table = self._gatt_table()
return {"address": address, "name": dev.name,
"notify_char": self.notify_char, "gatt": table}
def _gatt_table(self):
table = []
for s in self.client.services:
for c in s.characteristics:
table.append({"service": str(s.uuid), "char": str(c.uuid),
"handle": c.handle, "props": list(c.properties)})
return table
def _on_notify(self, _sender, data: bytearray):
self._id_buf.extend(data)
if len(self._id_buf) >= 14:
self._id_event.set()
async def write(self, char: str, data: bytes, response: bool):
await self.client.write_gatt_char(CHARS[char], data, response=response)
return {"sent": len(data)}
async def read(self, char: str):
return {"data": bytes(await self.client.read_gatt_char(CHARS[char])).hex()}
async def request_device_id(self, timeout: float = 8.0):
self._id_buf.clear()
self._id_event.clear()
# EFEF 走 331f(实机证据:1f1f 仅 ATT-ACK 不执行命令,331f 为活通道)
await self.client.write_gatt_char(ALT_NOTIFY_UUID, bytes([0xEF, 0xEF]), response=True)
await asyncio.wait_for(self._id_event.wait(), timeout)
return {"device_id": parse_device_id(bytes(self._id_buf[:14]))}
async def ota(self, image: bytes, status_timeout: float = 60.0,
gpio_map: bytes = GPIO_MAP_DEFAULT, max_blocks: int = 0):
"""max_blocks>0 时只烧前 N 块即停(GPIO 探针用,不写 END)。"""
if SPOTA_SERVICE_UUID not in [str(s.uuid) for s in self.client.services]:
raise RuntimeError("设备不存在 fef5 SUOTA 服务")
status_q: asyncio.Queue[int] = asyncio.Queue()
def _on_status(_s, data: bytearray):
status_q.put_nowait(int.from_bytes(bytes(data), "little"))
acc = 0
for b in image:
acc ^= b
payload = image + bytes([acc])
blocks = [payload[i:i + BLOCK_SIZE] for i in range(0, len(payload), BLOCK_SIZE)]
async def w(char, data, to=15.0):
await asyncio.wait_for(
self.client.write_gatt_char(char, data, response=True), to)
async def drain(label: str, settle: float = 0.5):
"""排干状态队列并如实上报(阶段状态码取证)。"""
await asyncio.sleep(settle)
got = []
while not status_q.empty():
got.append(status_q.get_nowait())
if got:
yield {"event": "ota_stage", "stage": f"{label}_status", "codes": got}
await asyncio.wait_for(
self.client.start_notify(SPOTA_SERV_STATUS_UUID, _on_status), 10)
try:
await w(SPOTA_MEM_DEV_UUID, MEM_DEV_SPI_FLASH)
yield {"event": "ota_stage", "stage": "mem_dev_ok"}
async for ev in drain("mem_dev", 1.0):
yield ev
await w(SPOTA_GPIO_MAP_UUID, gpio_map)
yield {"event": "ota_stage", "stage": "gpio_map_ok"}
async for ev in drain("gpio_map", 1.0):
yield ev
for idx, block in enumerate(blocks, 1):
if max_blocks and idx > max_blocks:
yield {"event": "ota_stage", "stage": f"probe_stop_at_{max_blocks}"}
return
await w(SPOTA_PATCH_LEN_UUID, len(block).to_bytes(2, "little"))
for i in range(0, len(block), WRITE_CHUNK):
await self.client.write_gatt_char(SPOTA_PATCH_DATA_UUID,
block[i:i + WRITE_CHUNK], response=False)
yield {"event": "ota_block_sent", "block": idx, "total": len(blocks)}
# 块确认:只认 2;8/16 为会话信息码(固件 0x07FCB770/0x07FCB780 证据),记录并跳过
while True:
status = await asyncio.wait_for(status_q.get(), status_timeout)
if status == STATUS_OK:
break
if status in (8, 16):
yield {"event": "ota_stage", "stage": f"block{idx}_info_status", "codes": [status]}
continue
raise RuntimeError(f"块 {idx}/{len(blocks)} 失败: 状态码 {status}")
yield {"event": "ota_progress", "block": idx, "total": len(blocks)}
await w(SPOTA_MEM_DEV_UUID, END_SIGNAL)
yield {"event": "ota_stage", "stage": "end_signal_ok"}
while True:
status = await asyncio.wait_for(status_q.get(), status_timeout)
if status == STATUS_OK:
break
if status in (8, 16):
yield {"event": "ota_stage", "stage": "end_info_status", "codes": [status]}
continue
raise RuntimeError(f"镜像校验 失败: 状态码 {status}")
await w(SPOTA_MEM_DEV_UUID, REBOOT_SIGNAL)
yield {"event": "ota_stage", "stage": "reboot_sent"}
finally:
try:
await asyncio.wait_for(
self.client.stop_notify(SPOTA_SERV_STATUS_UUID), 5)
except Exception:
pass
async def close(self):
if self.client is not None:
try:
if self.client.is_connected:
await self.client.disconnect()
finally:
self.client = None
class BridgeServer:
def __init__(self):
self.ble = BleSession()
self._ble_lock = asyncio.Lock()
async def handle(self, reader: asyncio.StreamReader, writer: asyncio.StreamWriter):
peer = writer.get_extra_info("peername")
print(f"[bridge] client {peer} connected", flush=True)
async def send(obj):
writer.write((json.dumps(obj, ensure_ascii=False) + "\n").encode())
await writer.drain()
try:
async for line in reader:
line = line.strip()
if not line:
continue
try:
req = json.loads(line)
rid = req.get("id")
op = req["op"]
except (KeyError, ValueError) as e:
await send({"id": None, "ok": False, "error": f"bad request: {e}"})
continue
try:
async with self._ble_lock:
if op == "ota":
gen = self.ble.ota(
bytes.fromhex(req["image"]),
gpio_map=bytes.fromhex(req["gpio_map"]) if req.get("gpio_map") else GPIO_MAP_DEFAULT,
max_blocks=int(req.get("max_blocks", 0)))
async for ev in gen:
await send(ev)
data = {"done": True}
else:
data = await self._dispatch(op, req)
await send({"id": rid, "ok": True, "data": data})
except Exception as e:
await send({"id": rid, "ok": False,
"error": f"{type(e).__name__}: {e}"})
finally:
await self.ble.close()
writer.close()
print(f"[bridge] client {peer} disconnected", flush=True)
async def _dispatch(self, op: str, req: dict):
if op == "ping":
return {"pong": True, "version": PROTOCOL_VERSION,
"build": SERVER_BUILD,
"platform": platform.system()}
if op == "scan":
return await self.ble.scan(float(req.get("timeout", 5.0)))
if op == "connect":
return await self.ble.connect(req["address"], float(req.get("timeout", 15.0)),
bool(req.get("subscribe", True)))
if op == "write":
return await self.ble.write(req["char"], bytes.fromhex(req["data"]),
bool(req.get("response", True)))
if op == "read":
return await self.ble.read(req["char"])
if op == "request_device_id":
return await self.ble.request_device_id(float(req.get("timeout", 8.0)))
if op == "close":
return await self.ble.close() or {}
if op == "services":
return {"gatt": self.ble._gatt_table(), "notify_char": self.ble.notify_char}
raise ValueError(f"unknown op {op!r}")
async def main():
ap = argparse.ArgumentParser(description="ppclock BLE bridge server")
ap.add_argument("--host", default="0.0.0.0")
ap.add_argument("--port", type=int, default=8971)
args = ap.parse_args()
server = BridgeServer()
# limit: OTA 镜像请求 ~145KB(hex),远超默认 64KiB —— 必须显式放大(2026-07-29 根因)
srv = await asyncio.start_server(server.handle, args.host, args.port,
limit=4 * 1024 * 1024)
print(f"[bridge] listening on {args.host}:{args.port} "
f"(protocol v{PROTOCOL_VERSION}, platform {platform.system()})", flush=True)
async with srv:
await srv.serve_forever()
if __name__ == "__main__":
try:
asyncio.run(main())
except KeyboardInterrupt:
sys.exit(0)
+4 -53
View File
@@ -1,54 +1,5 @@
"""DA14585 SUOTA 镜像解析/重打包(tools 交付物)。
格式(证据:app/ 样本 + CRC 反推验证):
[0:2] magic 'pQ' = 0x7051(LE)
[2:4] flags = 0x01AA
[4:8] body 长度(= 文件长 - 64)
[8:12] CRC32(body)(zlib 多项式,LE)
[12:64] 0xFF 填充
[64:] 镜像体,起始为 Cortex-M 向量表(SP, Reset, ...),加载基址 0x07FC0000
"""兼容垫片:fw 工具已迁入 ppclock.firmware.image(SDK 域)。
保留本模块以兼容 tools/field_test.py 的 `from tools.fw import ...`。
"""
from __future__ import annotations
import struct
import zlib
MAGIC_BYTES = b"pQ" # 文件头两字节 70 51
MAGIC = 0x7051
FLAGS_DEFAULT = 0x01AA
HEADER_SIZE = 64
LOAD_BASE = 0x07FC0000
def parse_image(data: bytes) -> dict:
if len(data) < HEADER_SIZE:
raise ValueError("文件小于 64 字节头")
if data[0:2] != MAGIC_BYTES:
raise ValueError(f"magic 错误: {data[0:2].hex()}(期望 {MAGIC_BYTES.hex()}='pQ')")
flags, body_size, crc = struct.unpack_from("<HII", data, 2)
body = data[HEADER_SIZE:HEADER_SIZE + body_size]
sp, reset = struct.unpack_from("<II", body, 0)
return {
"magic": MAGIC,
"flags": flags,
"body_size": body_size,
"crc_stored": crc,
"crc_valid": (zlib.crc32(body) & 0xFFFFFFFF) == crc,
"initial_sp": sp,
"reset_handler": reset,
"load_base": LOAD_BASE,
"file_size": len(data),
}
def unpack_body(data: bytes) -> bytes:
info = parse_image(data)
return data[HEADER_SIZE:HEADER_SIZE + info["body_size"]]
def pack_image(body: bytes, flags: int = FLAGS_DEFAULT) -> bytes:
header = MAGIC_BYTES + struct.pack("<HII", flags, len(body),
zlib.crc32(body) & 0xFFFFFFFF)
# 填充:黄金样本 0x20 处为 0x00(含义未知,保留以字节级一致),其余 0xFF
pad = bytearray(b"\xFF" * (HEADER_SIZE - len(header)))
pad[0x20 - len(header)] = 0x00
return header + bytes(pad) + body
from ppclock.firmware.image import * # noqa: F401,F403
from ppclock.firmware.image import MAGIC, MAGIC_BYTES, FLAGS_DEFAULT, HEADER_SIZE, LOAD_BASE # noqa: F401