OpenPuck/OpenPuck/rf_diag.h

// rf_diag.h -- RF reverse-engineering & calibration scaffolding (NOT used in normal operation).
//
// The puck protocol is solved (see radio.cpp / rf_link.cpp), but the tooling that solved it is preserved here:
// promiscuous raw capture, CRC-validating config sweeps, bit-exact frame replay, address/CRC listen, the
// scan-then-respond dongle experiment, the dongle beacon, and the live-session sniffer. Each is driven by a
// flag toggled from the CDC console (serial_console.cpp) and serviced by rfDiagTask() from loop(). Isolating
// it keeps rf_link.cpp readable while keeping the hard-won RE history compilable and runnable.
#pragma once
#include <stdint.h>

// ---- mode flags (toggled by the CDC console; mutually managed there) ----
extern bool    g_rfListen;
extern bool    g_rfBeacon;
extern uint8_t g_plen, g_s1incl;   // dongle-beacon payload length / S1INCL toggle
extern bool    g_rfRaw;
extern bool    g_rfSweep;
extern bool    g_rfCap, g_rfCapOne, g_rfReplay;
extern uint8_t g_replayLen;
extern bool    g_rfAuto;
extern uint8_t g_capV, g_cfgIdx;
extern bool    g_rfRespond;
extern bool    g_sniff;
extern uint8_t g_sniffPh, g_sniffPark;

// ---- start hooks (called from the console on command) ----
void rfListenStart();          // RX + log on the discovery addr/channel
void rfRawStart(uint8_t ch);   // promiscuous preamble-match capture (no CRC)
void rfCapStart(uint8_t ch);   // CRC-validating framing sweep (cycles config combos)
void rfReplayOnce();           // bit-exact re-transmit of a captured real-puck frame
void rfBeaconOnce();           // dongle beacon experiment ([01][seq][..][E2@5])
void applyCfg(uint8_t i);      // apply autosweep candidate radio config i
void rfRespondStart();         // scan-then-respond (RX ch2 adv, reply host frame)
void rfSniffStart();           // session sniffer (learn session params, then capture the live exchange)

// Per-loop: service whichever diag mode is active.
void rfDiagTask();