Jk bms ble full protocol details

[aquaforum]

Hello
I used these files as a basis and created a program in C++/Qt to communicate with the bms board.
Everything works, but there are only two commands in those files - COMMAND_CELL_INFO and COMMAND_DEVICE_INFO
commands are formed into a stream of bytes by the function bool JkBmsBle::write_register(uint8_t address, uint32_t value, uint8_t length) (line 1224)
I get the answers to them in function void JkBmsBle::decode_(const std::vector<uint8_t> &data) (line 409)
for me, the switch works on frame_type = 0x01 (followed by a call to this->decode_jk02_settings_(data); (line 418) or frame_type = 0x03 followed by a call to this->decode_device_info_(data); (line 429)
For some reason frame_type = 0x02 does not come....
Is there a complete description of this protocol?
This repository is the only thing I found that somehow works.
PS my board is bms B2A8S20P
Thanks.

[syssi]

You could try to use this project and enable the log level VERY_VERBOSE. This will print the raw BLE communication to the log. There is no official protocol description. The BLE communication was reversed engineered using btsnoop captures.

If you call the COMMAND_CELL_INFO the BMS starts to publish one cell info frame (BLE notification) per second.

[aquaforum]

Hello.
My modified program seems to work.
I am attaching screenshots and code. The code is very fresh, I'm working on it.
I decoded the first 200 bytes, the last hundred bytes - no, maybe you can help with this.
The decoding code itself is in void MainWidget::decode_jk02_cell_info_(const QByteArray &data) (line 286)
JkBmsBle.zip