node-red-contrib-knx-ultimate 5.0.1 → 5.0.2

package/CHANGELOG.md

@@ -6,6 +6,13 @@
 
 # CHANGELOG
 
+**Version 5.0.2** - July 2026<br/>
+
+- **IoT Bridge** node, **MQTT / Home Assistant (native)** mode:<br/>
+  - New **Read only** flag per group address in the *Group addresses to expose* list: a read-only GA is still published to Home Assistant (its state stays visible) but never accepts commands back to the KNX bus (switches are exposed as `binary_sensor`, numbers/text as `sensor`). Added *Set read only* / *Clear read only* buttons that apply it to all currently shown (filtered) addresses.<br/>
+  - New **KNX bus connection** selector: *Stand-alone* (default, talks to the KNX gateway directly) or *Flow messages*, which enables the node's input/output pins — wire a **KNXUltimate** node in Universal mode to the input (KNX bus → MQTT) and another to the output (MQTT → KNX bus). Pins are shown only when needed (none in stand-alone, one input + one output in flow mode).<br/>
+  - Editor help and online docs updated in EN/IT/DE/FR/ES/zh-CN.<br/>
+
 **Version 5.0.1** - June 2026<br/>
 
 - **IoT Bridge** node (renamed **MQTT - IoT** in the UI): new **MQTT / Home Assistant (native)** mode selectable via a *Mode* dropdown. In this mode the node connects directly to an MQTT broker and bridges KNX ↔ MQTT both ways, publishing **Home Assistant MQTT Discovery** so KNX appears automatically in Home Assistant (no `mqtt in`/`mqtt out` wiring needed). The classic IoT bridge mode is unchanged.<br/>

package/nodes/knxUltimateIoTBridge.html

@@ -13,12 +13,16 @@
             acceptFlowInput: { value: true },
             mappings: { value: [] },
             nodeMode: { value: 'iot' },
+            haBusMode: { value: 'standalone' },
+            inputs: { value: 1 },
+            outputs: { value: 2 },
             mqttUrl: { value: '' },
             mqttBaseTopic: { value: 'knx-ultimate' },
             mqttDiscovery: { value: true },
             mqttDiscoveryPrefix: { value: 'homeassistant' },
             mqttCustomEntities: { value: [] },
             mqttExposedGAs: { value: [] },
+            mqttReadOnlyGAs: { value: [] },
             mqttExposeConfigured: { value: false }
         },
         credentials: {
@@ -27,7 +31,19 @@
         },
         inputs: 1,
         outputs: 2,
+        inputLabels: function () {
+            // Flow-msg mode: the input pin carries KNX bus telegrams from a universal node.
+            if (this.nodeMode === 'homeassistant' && this.haBusMode === 'flow') {
+                return this._('knxUltimateIoTBridge.labels.inputKnxBus');
+            }
+            return undefined;
+        },
         outputLabels: function (index) {
+            if (this.nodeMode === 'homeassistant') {
+                // Stand-alone HA has no outputs; flow mode emits KNX writes on the single pin.
+                if (this.haBusMode === 'flow' && index === 0) return this._('knxUltimateIoTBridge.labels.outputKnxWrite');
+                return undefined;
+            }
             if (index === 0) return this._('knxUltimateIoTBridge.labels.outputKnxToIoT');
             if (index === 1) return this._('knxUltimateIoTBridge.labels.outputIoTToKnx');
         },
@@ -297,14 +313,18 @@
                     const ha = $('#node-input-nodeMode').val() === 'homeassistant';
                     $('.ha-mode-row').toggle(ha);
                     $('.iot-mode-row').toggle(!ha);
+                    // The flow-mode hint is only relevant while the "flow msg" bus mode is picked.
+                    $('.ha-flow-hint').toggle(ha && $('#node-input-haBusMode').val() === 'flow');
                 }
                 $('#node-input-nodeMode').on('change', refreshMode);
+                $('#node-input-haBusMode').on('change', refreshMode);
                 refreshMode();
             } catch (error) { }
 
             // Home Assistant: selectable list of group addresses to expose as simple entities.
             try {
                 const savedSet = new Set(Array.isArray(node.mqttExposedGAs) ? node.mqttExposedGAs : []);
+                const readOnlySet = new Set(Array.isArray(node.mqttReadOnlyGAs) ? node.mqttReadOnlyGAs : []);
                 const exposeConfigured = node.mqttExposeConfigured === true;
 
                 function updateGaCount() {
@@ -341,8 +361,14 @@
                             $('<span/>').css({ flex: '0 0 auto', fontFamily: 'monospace', minWidth: '64px' }).text(item.ga).appendTo(row);
                             $('<span/>').css({ flex: '1 1 auto', minWidth: '0', overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap', color: '#444' }).attr('title', item.devicename || '').text(item.devicename || '').appendTo(row);
                             $('<span/>').css({ flex: '0 0 auto', color: '#888', fontSize: '11px' }).text('DPT' + (item.dpt || '')).appendTo(row);
+                            // Read-only toggle: expose the GA to HA but never accept commands back to KNX.
+                            const roLabel = $('<label/>').css({ flex: '0 0 auto', display: 'flex', alignItems: 'center', gap: '3px', margin: '0', fontSize: '11px', color: '#888', cursor: 'pointer' }).appendTo(row);
+                            const ro = $('<input/>', { type: 'checkbox', class: 'mqtt-ga-ro', value: item.ga, style: 'width:auto; margin:0;' }).appendTo(roLabel);
+                            ro.prop('checked', readOnlySet.has(item.ga));
+                            $('<span/>').text(node._('knxUltimateIoTBridge.ha.read_only')).appendTo(roLabel);
+                            roLabel.on('click', function (ev) { ev.stopPropagation(); });
                             row.on('click', function (ev) {
-                                if (ev.target === cb[0]) return;
+                                if (ev.target === cb[0] || ev.target === ro[0]) return;
                                 cb.prop('checked', !cb.prop('checked'));
                                 updateGaCount();
                             });
@@ -357,6 +383,9 @@
 
                 $('#mqtt-ga-all').on('click', function (e) { e.preventDefault(); $('#mqtt-ga-list .mqtt-ga-row:visible').find('input.mqtt-ga-cb').prop('checked', true); updateGaCount(); });
                 $('#mqtt-ga-none').on('click', function (e) { e.preventDefault(); $('#mqtt-ga-list .mqtt-ga-row:visible').find('input.mqtt-ga-cb').prop('checked', false); updateGaCount(); });
+                // Flag / unflag read-only for the currently visible GAs (respects the filter).
+                $('#mqtt-ga-ro-all').on('click', function (e) { e.preventDefault(); $('#mqtt-ga-list .mqtt-ga-row:visible').find('input.mqtt-ga-ro').prop('checked', true); });
+                $('#mqtt-ga-ro-none').on('click', function (e) { e.preventDefault(); $('#mqtt-ga-list .mqtt-ga-row:visible').find('input.mqtt-ga-ro').prop('checked', false); });
                 $('#mqtt-ga-filter').on('input', function () {
                     const term = ($(this).val() || '').toLowerCase();
                     $('#mqtt-ga-list .mqtt-ga-row').each(function () {
@@ -520,12 +549,29 @@
                     const cbs = $('#mqtt-ga-list input.mqtt-ga-cb');
                     if (cbs.length > 0) {
                         const exposed = [];
+                        const readOnly = [];
                         cbs.each(function () { if ($(this).is(':checked')) exposed.push($(this).val()); });
+                        $('#mqtt-ga-list input.mqtt-ga-ro').each(function () { if ($(this).is(':checked')) readOnly.push($(this).val()); });
                         node.mqttExposedGAs = exposed;
+                        node.mqttReadOnlyGAs = readOnly;
                         node.mqttExposeConfigured = true;
                     }
                 }
             } catch (error) { }
+            // Adjust the pins to the selected mode:
+            //  - IoT:            1 input,  2 outputs (stream + ack)
+            //  - HA flow-msg:    1 input,  1 output  (KNX bus in / KNX write out)
+            //  - HA stand-alone: 0 inputs, 0 outputs (talks to the gateway only)
+            try {
+                if ($('#node-input-nodeMode').val() === 'homeassistant') {
+                    const flow = $('#node-input-haBusMode').val() === 'flow';
+                    node.inputs = flow ? 1 : 0;
+                    node.outputs = flow ? 1 : 0;
+                } else {
+                    node.inputs = 1;
+                    node.outputs = 2;
+                }
+            } catch (error) { }
             try {
                 RED.sidebar.show('info');
             } catch (error) { }
@@ -584,6 +630,17 @@
     </div>
 
     <!-- Home Assistant (MQTT) mode fields -->
+    <div class="form-row ha-mode-row">
+        <label for="node-input-haBusMode" data-i18n="knxUltimateIoTBridge.ha.bus_mode"></label>
+        <select id="node-input-haBusMode" style="width:auto;">
+            <option value="standalone" data-i18n="knxUltimateIoTBridge.ha.bus_standalone"></option>
+            <option value="flow" data-i18n="knxUltimateIoTBridge.ha.bus_flow"></option>
+        </select>
+    </div>
+    <div class="form-row ha-mode-row ha-flow-hint" style="margin-top:-4px;">
+        <label style="width:auto;">&nbsp;</label>
+        <span style="font-size:11px; color:#888;" data-i18n="knxUltimateIoTBridge.ha.bus_flow_hint"></span>
+    </div>
     <div class="form-row ha-mode-row">
         <label for="node-input-mqttUrl" data-i18n="knxUltimateIoTBridge.ha.broker_url"></label>
         <input type="text" id="node-input-mqttUrl" placeholder="mqtt://localhost:1883" />
@@ -614,6 +671,9 @@
             <input type="text" id="mqtt-ga-filter" data-i18n="[placeholder]knxUltimateIoTBridge.ha.filter_placeholder" style="flex:1 1 auto;">
             <button type="button" id="mqtt-ga-all" class="ui-button ui-corner-all ui-widget" style="width:auto;" data-i18n="knxUltimateIoTBridge.ha.select_all"></button>
             <button type="button" id="mqtt-ga-none" class="ui-button ui-corner-all ui-widget" style="width:auto;" data-i18n="knxUltimateIoTBridge.ha.select_none"></button>
+            <span style="border-left:1px solid #ccc; align-self:stretch;"></span>
+            <button type="button" id="mqtt-ga-ro-all" class="ui-button ui-corner-all ui-widget" style="width:auto;" data-i18n="[title]knxUltimateIoTBridge.ha.read_only_bulk;knxUltimateIoTBridge.ha.read_only_all"></button>
+            <button type="button" id="mqtt-ga-ro-none" class="ui-button ui-corner-all ui-widget" style="width:auto;" data-i18n="[title]knxUltimateIoTBridge.ha.read_only_bulk;knxUltimateIoTBridge.ha.read_only_none"></button>
         </div>
         <div id="mqtt-ga-count" style="font-size:11px; color:#666; margin:2px 0;"></div>
         <div id="mqtt-ga-list" style="max-height:220px; overflow:auto; border:1px solid #ccc; padding:6px; border-radius:4px; background:#fff;"></div>
@@ -663,9 +723,17 @@ Native MQTT bridge with Home Assistant discovery. Every group address imported i
 
 Requires an MQTT broker reachable by both Node-RED and Home Assistant, with the MQTT integration enabled in HA. Entities appear under a device named after this node.
 
+### KNX bus connection
+Choose how the node exchanges telegrams with KNX:
+
+- **Stand-alone** (default): the node talks to the KNX gateway directly and shows no input/output pins.
+- **Flow messages**: the node exposes an input pin and an output pin. Wire the output of a KNXUltimate node in **Universal** mode to the input (KNX bus → MQTT) and the output pin to the input of another KNXUltimate node in **Universal** mode (MQTT → KNX bus).
+
 ### Group addresses to expose
 Tick the group addresses you want to publish to Home Assistant. By default every imported address is selected. Addresses used by a cover/thermostat (below) are handled there and don't need to be ticked here. Use the filter box and the Select all / Select none buttons to curate large lists.
 
+Each row also has a **Read only** toggle: a read-only address is still published to Home Assistant (its state stays visible) but never accepts commands back to the KNX bus (switches become binary_sensors, numbers become sensors). The Set read only / Clear read only buttons apply it to all currently shown addresses.
+
 ### Covers & Thermostats
 Covers and thermostats group several group addresses into one Home Assistant entity, so they cannot be created automatically from the DPT - add them in the list:
 

package/nodes/knxUltimateIoTBridge.js

@@ -43,6 +43,10 @@ module.exports = function (RED) {
     // Operation mode: 'iot' (classic IoT mappings, default) or 'homeassistant' (native
     // MQTT bridge with Home Assistant discovery for every group address + cover/climate).
     node.nodeMode = config.nodeMode === 'homeassistant' ? 'homeassistant' : 'iot'
+    // Home Assistant bus wiring: 'standalone' (default) talks to the KNX gateway directly,
+    // 'flow' uses the node's input/output pins instead (wire a KNXUltimate universal node to
+    // both): the input pin feeds KNX bus telegrams in, the output pin emits telegrams to write.
+    node.haBusMode = config.haBusMode === 'flow' ? 'flow' : 'standalone'
     node.mqttUrl = typeof config.mqttUrl === 'string' ? config.mqttUrl.trim() : ''
     node.mqttBaseTopic = typeof config.mqttBaseTopic === 'string' && config.mqttBaseTopic.trim() !== '' ? config.mqttBaseTopic.trim() : 'knx-ultimate'
     node.mqttDiscovery = config.mqttDiscovery !== false && config.mqttDiscovery !== 'false'
@@ -52,6 +56,9 @@ module.exports = function (RED) {
     // (mqttExposeConfigured), only the listed GAs are exposed; otherwise all imported GAs are.
     node.mqttExposeConfigured = config.mqttExposeConfigured === true
     node.mqttExposedGAs = Array.isArray(config.mqttExposedGAs) ? config.mqttExposedGAs : []
+    // Group addresses the user marked as read-only: they are still exposed (state is
+    // published to HA) but never accept commands back to the KNX bus.
+    node.mqttReadOnlyGAs = Array.isArray(config.mqttReadOnlyGAs) ? config.mqttReadOnlyGAs : []
     node.mqttBridge = null
 
     const safeNumber = (value, fallback = 0) => {
@@ -179,9 +186,22 @@ module.exports = function (RED) {
           customEntities: node.mqttCustomEntities,
           // null => expose all imported GAs (until the user curates the list).
           exposedGAs: node.mqttExposeConfigured ? node.mqttExposedGAs : null,
+          // GAs exposed as read-only (state only, no command topic back to KNX).
+          readOnlyGAs: node.mqttReadOnlyGAs,
           onCommand: ({ ga, dpt, value }) => {
             // A Home Assistant command arrived: write it to the KNX bus.
             try {
+              if (node.haBusMode === 'flow') {
+                // Flow mode: emit a message on the (single) output pin for a downstream
+                // KNXUltimate universal node to write to the bus (destination + dpt + payload).
+                node.send({
+                  topic: ga,
+                  destination: ga,
+                  dpt: dpt || '',
+                  payload: value
+                })
+                return
+              }
               node.serverKNX.sendKNXTelegramToKNXEngine({
                 grpaddr: ga,
                 payload: value,
@@ -426,6 +446,18 @@ module.exports = function (RED) {
       }
     }
 
+    // Home Assistant mode: mirror a decoded KNX telegram to MQTT. Works with a telegram coming
+    // from the gateway (standalone) or from the input pin (flow mode); both share the shape
+    // produced by the KNXUltimate universal node ({ payload, knx: { destination, event } }).
+    const publishKnxToMqtt = (msg) => {
+      if (!msg || !node.mqttBridge) return
+      const destination = msg.knx && msg.knx.destination ? msg.knx.destination : sanitizeString(msg.topic)
+      if (!destination) return
+      const event = msg.knx ? msg.knx.event : undefined
+      if (event === 'GroupValue_Read') return // read requests carry no value
+      node.mqttBridge.publishState(destination, msg.payload)
+    }
+
     const handleKnxTelegram = (msg) => {
       try {
         if (!msg) return
@@ -434,10 +466,7 @@ module.exports = function (RED) {
 
         // Home Assistant mode: mirror the decoded value to MQTT and stop (no IoT mappings).
         if (node.nodeMode === 'homeassistant') {
-          const event = msg.knx ? msg.knx.event : undefined
-          if (node.mqttBridge && event !== 'GroupValue_Read') {
-            node.mqttBridge.publishState(destination, msg.payload)
-          }
+          publishKnxToMqtt(msg)
           return
         }
 
@@ -484,8 +513,11 @@ module.exports = function (RED) {
     node.handleSend = handleKnxTelegram
 
     node.on('input', (msg, send, done) => {
-      // In Home Assistant mode, commands flow in over MQTT, not via the flow input.
+      // In Home Assistant mode, commands flow in over MQTT, not via the flow input. The one
+      // exception is 'flow' bus mode, where the input pin carries KNX bus telegrams (from a
+      // KNXUltimate universal node) that must be mirrored to MQTT.
       if (node.nodeMode === 'homeassistant') {
+        if (node.haBusMode === 'flow') publishKnxToMqtt(msg)
         if (done) done()
         return
       }
@@ -614,7 +646,10 @@ module.exports = function (RED) {
       }
     }
 
-    registerClient()
+    // In HA 'flow' mode the KNX telegrams arrive on the input pin, so we must NOT subscribe to
+    // the gateway's client feed (that would double-publish and bypass the intended wiring).
+    const useFlowBus = node.nodeMode === 'homeassistant' && node.haBusMode === 'flow'
+    if (!useFlowBus) registerClient()
     if (node.nodeMode === 'homeassistant') {
       node.startMqttBridge()
     } else {

package/nodes/lib/mqtt-bridge.js

@@ -78,6 +78,12 @@ function createMqttBridge (options) {
   const exposeFilter = Array.isArray(opts.exposedGAs)
     ? new Set(opts.exposedGAs.map((g) => normalizeGa(g)).filter((g) => g !== ''))
     : null
+  // GAs the user marked read-only: exposed as read-only HA entities (no command topic).
+  const readOnlyFilter = new Set(
+    (Array.isArray(opts.readOnlyGAs) ? opts.readOnlyGAs : [])
+      .map((g) => normalizeGa(g))
+      .filter((g) => g !== '')
+  )
 
   const gatewayName = (node && node.name) || 'KNX Gateway'
   const gatewaySlug = slugify(node && node.name, '') || slugify(node && node.id, 'knx')
@@ -311,6 +317,12 @@ function createMqttBridge (options) {
     if (baseSlug === '' || simpleSeen.has(ga)) return
     simpleSeen.add(ga)
     const map = ha.mapDptToHa(entry.dpt)
+    // Read-only GAs are downgraded to a state-only domain and never get a command topic,
+    // so Home Assistant can display them but can't write back to the KNX bus.
+    const isReadOnly = readOnlyFilter.has(ga)
+    const domain = isReadOnly
+      ? (map.domain === 'switch' ? 'binary_sensor' : (map.domain === 'number' || map.domain === 'text' ? 'sensor' : map.domain))
+      : map.domain
     const slug = uniqueSlug(baseSlug)
     const uniqueId = `${deviceId}_${slug}`
     const name = (typeof entry.devicename === 'string' && entry.devicename.trim()) ? entry.devicename.trim() : ga
@@ -327,7 +339,7 @@ function createMqttBridge (options) {
       payload_not_available: 'offline',
       device: deviceBlock
     }
-    switch (map.domain) {
+    switch (domain) {
       case 'switch':
         config.command_topic = commandTopic
         config.payload_on = 'true'
@@ -357,13 +369,13 @@ function createMqttBridge (options) {
         if (map.deviceClass) config.device_class = map.deviceClass
         break
     }
-    addDiscovery(map.domain, slug, config)
+    addDiscovery(domain, slug, config)
 
     // KNX -> MQTT: publish the decoded value to the state topic.
     addPublisher(ga, (value) => pub(stateTopic, ha.formatValueForMqtt(value), true))
 
-    // MQTT -> KNX: writable domains accept commands.
-    if (map.writable === true) {
+    // MQTT -> KNX: writable domains accept commands (unless the GA is read-only).
+    if (map.writable === true && !isReadOnly) {
       const dpt = entry.dpt
       commandHandlers.set(commandTopic, (text) => {
         const value = ha.parseCommandFromMqtt(text, dpt)

package/nodes/locales/de/knxUltimateIoTBridge.html

@@ -11,9 +11,12 @@ Erstellen Sie bidirektionale Brücken zwischen KNX-Gruppenadressen und IoT-Kanä
 
 Eine native MQTT-Bridge mit Home-Assistant-Discovery. Benötigt einen MQTT-Broker, der sowohl von Node-RED als auch von Home Assistant erreichbar ist, mit aktivierter MQTT-Integration in HA. Alle Entitäten erscheinen unter einem einzigen Gerät mit dem Namen dieses Nodes.
 
+- **KNX-Bus-Verbindung** — wie der Knoten Telegramme mit KNX austauscht:
+    - *Eigenständig* (Standard) — der Knoten kommuniziert direkt mit dem KNX-Gateway und hat keine Ein-/Ausgangs-Pins.
+    - *Flow-Nachrichten* — der Knoten zeigt einen Eingangs- und einen Ausgangs-Pin. Verbinden Sie den Ausgang eines KNXUltimate-Knotens im **Universal**-Modus mit dem Eingangs-Pin (KNX-Bus → MQTT) und den Ausgangs-Pin mit dem Eingang eines weiteren KNXUltimate-Knotens im **Universal**-Modus (MQTT → KNX-Bus).
 - **Broker-URL / Benutzername / Passwort** — Verbindung zu Ihrem MQTT-Broker.
 - **Basis-Topic / Discovery-Präfix** — Root-Topic für Status-/Befehls-Topics und das HA-Discovery-Präfix (Standard `homeassistant`).
-- **Bereitzustellende Gruppenadressen** — jede im KNX-Gateway importierte Adresse (ETS-Liste) wird mit einem Kontrollkästchen angezeigt. Angehakte Adressen werden als Home-Assistant-Entitäten veröffentlicht, automatisch nach dem DPT typisiert (switch, sensor, binary_sensor, number, text). Verwenden Sie das Filterfeld und die Schaltflächen *Alle auswählen* / *Keine auswählen*. Standardmäßig sind alle Adressen ausgewählt.
+- **Bereitzustellende Gruppenadressen** — jede im KNX-Gateway importierte Adresse (ETS-Liste) wird mit einem Kontrollkästchen angezeigt. Angehakte Adressen werden als Home-Assistant-Entitäten veröffentlicht, automatisch nach dem DPT typisiert (switch, sensor, binary_sensor, number, text). Verwenden Sie das Filterfeld und die Schaltflächen *Alle auswählen* / *Keine auswählen*. Standardmäßig sind alle Adressen ausgewählt. Jede Zeile hat zudem eine Option **Nur lesen**: eine schreibgeschützte Adresse wird weiterhin an Home Assistant veröffentlicht (ihr Status bleibt sichtbar), akzeptiert aber nie Befehle zurück auf den KNX-Bus (switch werden zu binary_sensor, number zu sensor). Die Schaltflächen *Nur lesen setzen* / *Nur lesen entfernen* wenden dies auf alle aktuell angezeigten Adressen an.
 - **Rollläden & Thermostate** — fassen mehrere Adressen zu einer Entität zusammen:
     - *Rollladen*: Auf/Ab-GA (1.008), optionale Stopp-GA (1.007), optionale Positions-GA Befehl/Status (5.001). *Position invertieren* bildet die KNX-Konvention (0% = offen) auf Home Assistant (100% = offen) ab.
     - *Thermostat*: GA Ist-Temperatur (9.001), GA Sollwert Befehl/Status (9.001), optionale Ein/Aus-GA (1.001 → off/heat), plus Min-/Max-Temperatur und Schrittweite.

package/nodes/locales/de/knxUltimateIoTBridge.json

@@ -29,6 +29,14 @@
       "select_all": "Alle auswählen",
       "select_none": "Keine auswählen",
       "exposed_count": "ausgewählt",
+      "read_only": "Nur lesen",
+      "read_only_bulk": "Nur lesen für angezeigte Adressen:",
+      "read_only_all": "Nur lesen setzen",
+      "read_only_none": "Nur lesen entfernen",
+      "bus_mode": "KNX-Bus-Verbindung",
+      "bus_standalone": "Eigenständig (über das Gateway)",
+      "bus_flow": "Flow-Nachrichten (Ein-/Ausgangs-Pins)",
+      "bus_flow_hint": "Verbinde einen KNXUltimate-Knoten im Universal-Modus mit dem Eingangs-Pin (KNX → MQTT) und einen weiteren mit dem Ausgangs-Pin (MQTT → KNX).",
       "no_gateway": "Wähle zuerst ein KNX-Gateway aus.",
       "no_ga": "Keine Gruppenadressen gefunden. Importiere die ETS-Liste im KNX-Gateway.",
       "csv_error": "Die Gruppenadressliste konnte nicht vom Gateway geladen werden.",
@@ -113,7 +121,9 @@
     },
     "labels": {
       "outputKnxToIoT": "Strom KNX → IoT",
-      "outputIoTToKnx": "Bestätigungen IoT → KNX"
+      "outputIoTToKnx": "Bestätigungen IoT → KNX",
+      "inputKnxBus": "KNX-Bus-Eingang (von einem Universal-Knoten)",
+      "outputKnxWrite": "KNX-Schreibausgang (zu einem Universal-Knoten)"
     }
   }
 }

package/nodes/locales/en/knxUltimateIoTBridge.html

@@ -11,9 +11,12 @@ Create bidirectional bridges between KNX group addresses and IoT channels (MQTT
 
 A native MQTT bridge with Home Assistant discovery. It needs an MQTT broker reachable by both Node-RED and Home Assistant, with the MQTT integration enabled in HA. All entities appear under a single device named after this node.
 
+- **KNX bus connection** — how the node exchanges telegrams with KNX:
+    - *Stand-alone* (default) — the node talks to the KNX gateway directly and has no input/output pins.
+    - *Flow messages* — the node exposes an input pin and an output pin. Wire the output of a KNXUltimate node in **Universal** mode to the input (KNX bus → MQTT) and the output pin to the input of another KNXUltimate node in **Universal** mode (MQTT → KNX bus).
 - **Broker URL / Username / Password** — connection to your MQTT broker.
 - **Base topic / Discovery prefix** — root topic for state/command topics and the HA discovery prefix (default `homeassistant`).
-- **Group addresses to expose** — every address imported in the KNX gateway (ETS list) is shown with a checkbox. Ticked addresses are published as Home Assistant entities, typed automatically from the DPT (switch, sensor, binary_sensor, number, text). Use the filter box and the *Select all* / *Select none* buttons. By default all addresses are selected.
+- **Group addresses to expose** — every address imported in the KNX gateway (ETS list) is shown with a checkbox. Ticked addresses are published as Home Assistant entities, typed automatically from the DPT (switch, sensor, binary_sensor, number, text). Use the filter box and the *Select all* / *Select none* buttons. By default all addresses are selected. Each row also has a **Read only** toggle: a read-only address is still published to Home Assistant (its state stays visible) but never accepts commands back to the KNX bus (switches become binary_sensors, numbers become sensors). The *Set read only* / *Clear read only* buttons apply it to all currently shown addresses.
 - **Covers & Thermostats** — group several addresses into one entity:
     - *Cover*: Up/Down GA (1.008), optional Stop GA (1.007), optional Set/Status position GA (5.001). *Invert position* maps the KNX convention (0% = open) to Home Assistant (100% = open).
     - *Thermostat*: current temperature GA (9.001), setpoint set/status GA (9.001), optional On/Off GA (1.001 → off/heat), plus min/max temperature and step.

package/nodes/locales/en/knxUltimateIoTBridge.json

@@ -29,6 +29,14 @@
       "select_all": "Select all",
       "select_none": "Select none",
       "exposed_count": "selected",
+      "read_only": "Read only",
+      "read_only_bulk": "Read only for shown addresses:",
+      "read_only_all": "Set read only",
+      "read_only_none": "Clear read only",
+      "bus_mode": "KNX bus connection",
+      "bus_standalone": "Stand-alone (via the gateway)",
+      "bus_flow": "Flow messages (input/output pins)",
+      "bus_flow_hint": "Wire a KNXUltimate node in Universal mode to the input pin (KNX → MQTT) and another one to the output pin (MQTT → KNX).",
       "no_gateway": "Select a KNX gateway first.",
       "no_ga": "No group addresses found. Import the ETS list in the KNX gateway.",
       "csv_error": "Unable to load the group address list from the gateway.",
@@ -113,7 +121,9 @@
     },
     "labels": {
       "outputKnxToIoT": "KNX → IoT stream",
-      "outputIoTToKnx": "IoT → KNX acknowledgements"
+      "outputIoTToKnx": "IoT → KNX acknowledgements",
+      "inputKnxBus": "KNX bus in (from a Universal node)",
+      "outputKnxWrite": "KNX write out (to a Universal node)"
     }
   }
 }

package/nodes/locales/es/knxUltimateIoTBridge.html

@@ -11,9 +11,12 @@ Crea puentes bidireccionales entre direcciones de grupo KNX y canales IoT (topic
 
 Un puente MQTT nativo con descubrimiento de Home Assistant. Requiere un broker MQTT accesible tanto por Node-RED como por Home Assistant, con la integración MQTT activada en HA. Todas las entidades aparecen bajo un único dispositivo con el nombre de este nodo.
 
+- **Conexión al bus KNX** — cómo el nodo intercambia telegramas con KNX:
+    - *Autónomo* (predeterminado) — el nodo habla directamente con la pasarela KNX y no tiene pines de entrada/salida.
+    - *Mensajes de flujo* — el nodo muestra un pin de entrada y uno de salida. Conecta la salida de un nodo KNXUltimate en modo **Universal** al pin de entrada (bus KNX → MQTT) y el pin de salida a la entrada de otro nodo KNXUltimate en modo **Universal** (MQTT → bus KNX).
 - **URL del broker / Usuario / Contraseña** — conexión a tu broker MQTT.
 - **Topic base / Prefijo de descubrimiento** — topic raíz para los topics de estado/comando y el prefijo de descubrimiento de HA (predeterminado `homeassistant`).
-- **Direcciones de grupo a exponer** — cada dirección importada en la pasarela KNX (lista ETS) se muestra con una casilla. Las direcciones marcadas se publican como entidades de Home Assistant, tipadas automáticamente a partir del DPT (switch, sensor, binary_sensor, number, text). Usa el filtro y los botones *Seleccionar todo* / *Deseleccionar todo*. Por defecto están todas seleccionadas.
+- **Direcciones de grupo a exponer** — cada dirección importada en la pasarela KNX (lista ETS) se muestra con una casilla. Las direcciones marcadas se publican como entidades de Home Assistant, tipadas automáticamente a partir del DPT (switch, sensor, binary_sensor, number, text). Usa el filtro y los botones *Seleccionar todo* / *Deseleccionar todo*. Por defecto están todas seleccionadas. Cada fila tiene además una opción **Solo lectura**: una dirección de solo lectura se sigue publicando en Home Assistant (su estado permanece visible) pero nunca acepta comandos de vuelta al bus KNX (los switch pasan a binary_sensor y los number a sensor). Los botones *Marcar solo lectura* / *Quitar solo lectura* la aplican a todas las direcciones mostradas actualmente.
 - **Persianas y termostatos** — agrupan varias direcciones en una sola entidad:
     - *Persiana*: GA subir/bajar (1.008), GA stop opcional (1.007), GA posición comando/estado opcional (5.001). *Invertir posición* asigna la convención KNX (0% = abierto) a Home Assistant (100% = abierto).
     - *Termostato*: GA temperatura actual (9.001), GA consigna comando/estado (9.001), GA on/off opcional (1.001 → off/heat), además de temperatura mín/máx y paso.

package/nodes/locales/es/knxUltimateIoTBridge.json

@@ -29,6 +29,14 @@
       "select_all": "Seleccionar todo",
       "select_none": "Deseleccionar todo",
       "exposed_count": "seleccionadas",
+      "read_only": "Solo lectura",
+      "read_only_bulk": "Solo lectura para las direcciones mostradas:",
+      "read_only_all": "Marcar solo lectura",
+      "read_only_none": "Quitar solo lectura",
+      "bus_mode": "Conexión al bus KNX",
+      "bus_standalone": "Autónomo (a través del gateway)",
+      "bus_flow": "Mensajes de flujo (pines entrada/salida)",
+      "bus_flow_hint": "Conecta un nodo KNXUltimate en modo Universal al pin de entrada (KNX → MQTT) y otro al pin de salida (MQTT → KNX).",
       "no_gateway": "Selecciona primero una pasarela KNX.",
       "no_ga": "No se encontraron direcciones de grupo. Importa la lista ETS en la pasarela KNX.",
       "csv_error": "No se pudo cargar la lista de direcciones de grupo desde la pasarela.",
@@ -113,7 +121,9 @@
     },
     "labels": {
       "outputKnxToIoT": "Flujo KNX → IoT",
-      "outputIoTToKnx": "Confirmaciones IoT → KNX"
+      "outputIoTToKnx": "Confirmaciones IoT → KNX",
+      "inputKnxBus": "Entrada bus KNX (desde un nodo Universal)",
+      "outputKnxWrite": "Salida escritura KNX (hacia un nodo Universal)"
     }
   }
 }

package/nodes/locales/fr/knxUltimateIoTBridge.html

@@ -11,9 +11,12 @@ Créez des ponts bidirectionnels entre des adresses de groupe KNX et des canaux
 
 Une passerelle MQTT native avec découverte Home Assistant. Nécessite un broker MQTT accessible à la fois par Node-RED et Home Assistant, avec l'intégration MQTT activée dans HA. Toutes les entités apparaissent sous un seul appareil portant le nom de ce nœud.
 
+- **Connexion au bus KNX** — comment le nœud échange les télégrammes avec KNX :
+    - *Autonome* (par défaut) — le nœud communique directement avec la passerelle KNX et n'a pas de broches d'entrée/sortie.
+    - *Messages de flux* — le nœud affiche une broche d'entrée et une de sortie. Reliez la sortie d'un nœud KNXUltimate en mode **Universel** à la broche d'entrée (bus KNX → MQTT) et la broche de sortie à l'entrée d'un autre nœud KNXUltimate en mode **Universel** (MQTT → bus KNX).
 - **URL du broker / Nom d'utilisateur / Mot de passe** — connexion à votre broker MQTT.
 - **Topic de base / Préfixe de découverte** — topic racine pour les topics d'état/commande et le préfixe de découverte HA (par défaut `homeassistant`).
-- **Adresses de groupe à exposer** — chaque adresse importée dans la passerelle KNX (liste ETS) est affichée avec une case à cocher. Les adresses cochées sont publiées comme entités Home Assistant, typées automatiquement d'après le DPT (switch, sensor, binary_sensor, number, text). Utilisez le champ de filtre et les boutons *Tout sélectionner* / *Tout désélectionner*. Par défaut, toutes les adresses sont sélectionnées.
+- **Adresses de groupe à exposer** — chaque adresse importée dans la passerelle KNX (liste ETS) est affichée avec une case à cocher. Les adresses cochées sont publiées comme entités Home Assistant, typées automatiquement d'après le DPT (switch, sensor, binary_sensor, number, text). Utilisez le champ de filtre et les boutons *Tout sélectionner* / *Tout désélectionner*. Par défaut, toutes les adresses sont sélectionnées. Chaque ligne dispose aussi d'une option **Lecture seule** : une adresse en lecture seule est toujours publiée vers Home Assistant (son état reste visible) mais n'accepte jamais de commandes vers le bus KNX (les switch deviennent des binary_sensor et les number des sensor). Les boutons *Activer lecture seule* / *Retirer lecture seule* l'appliquent à toutes les adresses actuellement affichées.
 - **Volets et thermostats** — regroupent plusieurs adresses en une seule entité :
     - *Volet* : GA montée/descente (1.008), GA stop optionnelle (1.007), GA position commande/état optionnelle (5.001). *Inverser la position* fait correspondre la convention KNX (0% = ouvert) à Home Assistant (100% = ouvert).
     - *Thermostat* : GA température actuelle (9.001), GA consigne commande/état (9.001), GA marche/arrêt optionnelle (1.001 → off/heat), plus températures min/max et pas.

package/nodes/locales/fr/knxUltimateIoTBridge.json

@@ -29,6 +29,14 @@
       "select_all": "Tout sélectionner",
       "select_none": "Tout désélectionner",
       "exposed_count": "sélectionnées",
+      "read_only": "Lecture seule",
+      "read_only_bulk": "Lecture seule pour les adresses affichées :",
+      "read_only_all": "Activer lecture seule",
+      "read_only_none": "Retirer lecture seule",
+      "bus_mode": "Connexion au bus KNX",
+      "bus_standalone": "Autonome (via la passerelle)",
+      "bus_flow": "Messages de flux (broches entrée/sortie)",
+      "bus_flow_hint": "Reliez un nœud KNXUltimate en mode Universel à la broche d'entrée (KNX → MQTT) et un autre à la broche de sortie (MQTT → KNX).",
       "no_gateway": "Sélectionnez d'abord une passerelle KNX.",
       "no_ga": "Aucune adresse de groupe trouvée. Importez la liste ETS dans la passerelle KNX.",
       "csv_error": "Impossible de charger la liste des adresses de groupe depuis la passerelle.",
@@ -113,7 +121,9 @@
     },
     "labels": {
       "outputKnxToIoT": "Flux KNX → IoT",
-      "outputIoTToKnx": "Accusés IoT → KNX"
+      "outputIoTToKnx": "Accusés IoT → KNX",
+      "inputKnxBus": "Entrée bus KNX (depuis un nœud Universel)",
+      "outputKnxWrite": "Sortie écriture KNX (vers un nœud Universel)"
     }
   }
 }

package/nodes/locales/it/knxUltimateIoTBridge.html

@@ -11,9 +11,12 @@ Crea collegamenti bidirezionali tra indirizzi di gruppo KNX e canali IoT (topic
 
 Un bridge MQTT nativo con discovery di Home Assistant. Richiede un broker MQTT raggiungibile sia da Node-RED che da Home Assistant, con l'integrazione MQTT attiva in HA. Tutte le entità compaiono sotto un unico dispositivo con il nome di questo nodo.
 
+- **Connessione al bus KNX** — come il nodo scambia telegrammi con KNX:
+    - *Stand-alone* (predefinito) — il nodo parla direttamente col gateway KNX e non ha PIN di ingresso/uscita.
+    - *Messaggi di flow* — il nodo mostra un PIN di ingresso e uno di uscita. Collega l'uscita di un nodo KNXUltimate in modalità **Universale** al PIN di ingresso (bus KNX → MQTT) e il PIN di uscita all'ingresso di un altro nodo KNXUltimate in modalità **Universale** (MQTT → bus KNX).
 - **URL broker / Nome utente / Password** — connessione al tuo broker MQTT.
 - **Topic di base / Prefisso discovery** — topic radice per i topic di stato/comando e il prefisso discovery di HA (predefinito `homeassistant`).
-- **Indirizzi di gruppo da esporre** — ogni indirizzo importato nel gateway KNX (lista ETS) è elencato con una checkbox. Gli indirizzi spuntati vengono pubblicati come entità Home Assistant, tipizzate automaticamente dal DPT (switch, sensor, binary_sensor, number, text). Usa il filtro e i pulsanti *Seleziona tutti* / *Deseleziona tutti*. Per impostazione predefinita sono tutti selezionati.
+- **Indirizzi di gruppo da esporre** — ogni indirizzo importato nel gateway KNX (lista ETS) è elencato con una checkbox. Gli indirizzi spuntati vengono pubblicati come entità Home Assistant, tipizzate automaticamente dal DPT (switch, sensor, binary_sensor, number, text). Usa il filtro e i pulsanti *Seleziona tutti* / *Deseleziona tutti*. Per impostazione predefinita sono tutti selezionati. Ogni riga ha inoltre un'opzione **Sola lettura**: un indirizzo in sola lettura viene comunque pubblicato su Home Assistant (lo stato resta visibile) ma non accetta mai comandi verso il bus KNX (gli switch diventano binary_sensor, i number diventano sensor). I pulsanti *Imposta sola lettura* / *Togli sola lettura* la applicano a tutti gli indirizzi attualmente mostrati.
 - **Tapparelle e Termostati** — raggruppano più indirizzi in un'unica entità:
     - *Tapparella*: GA su/giù (1.008), GA stop opzionale (1.007), GA posizione comando/stato opzionale (5.001). *Inverti posizione* mappa la convenzione KNX (0% = aperto) su Home Assistant (100% = aperto).
     - *Termostato*: GA temperatura attuale (9.001), GA setpoint comando/stato (9.001), GA on/off opzionale (1.001 → off/heat), più temperatura min/max e step.

package/nodes/locales/it/knxUltimateIoTBridge.json

@@ -29,6 +29,14 @@
       "select_all": "Seleziona tutti",
       "select_none": "Deseleziona tutti",
       "exposed_count": "selezionati",
+      "read_only": "Sola lettura",
+      "read_only_bulk": "Sola lettura per gli indirizzi mostrati:",
+      "read_only_all": "Imposta sola lettura",
+      "read_only_none": "Togli sola lettura",
+      "bus_mode": "Connessione al bus KNX",
+      "bus_standalone": "Stand-alone (tramite il gateway)",
+      "bus_flow": "Messaggi di flow (PIN ingresso/uscita)",
+      "bus_flow_hint": "Collega un nodo KNXUltimate in modalità Universale al PIN di ingresso (KNX → MQTT) e un altro al PIN di uscita (MQTT → KNX).",
       "no_gateway": "Seleziona prima un gateway KNX.",
       "no_ga": "Nessun indirizzo di gruppo trovato. Importa la lista ETS nel gateway KNX.",
       "csv_error": "Impossibile caricare la lista degli indirizzi di gruppo dal gateway.",
@@ -113,7 +121,9 @@
     },
     "labels": {
       "outputKnxToIoT": "Flusso KNX → IoT",
-      "outputIoTToKnx": "Ack IoT → KNX"
+      "outputIoTToKnx": "Ack IoT → KNX",
+      "inputKnxBus": "Ingresso bus KNX (da un nodo Universale)",
+      "outputKnxWrite": "Uscita scrittura KNX (verso un nodo Universale)"
     }
   }
 }

package/nodes/locales/zh-CN/knxUltimateIoTBridge.html

@@ -11,9 +11,12 @@
 
 带 Home Assistant 自动发现的原生 MQTT 桥接。需要一个 Node-RED 和 Home Assistant 都能访问的 MQTT broker，并在 HA 中启用 MQTT 集成。所有实体都出现在以该节点命名的同一个设备下。
 
+- **KNX 总线连接** — 节点如何与 KNX 交换报文：
+    - *独立*（默认）— 节点直接与 KNX 网关通信，没有输入/输出端口。
+    - *流消息* — 节点显示一个输入端口和一个输出端口。将一个**通用**模式的 KNXUltimate 节点的输出连接到输入端口（KNX 总线 → MQTT），并将输出端口连接到另一个**通用**模式 KNXUltimate 节点的输入（MQTT → KNX 总线）。
 - **Broker URL / 用户名 / 密码** — 连接到你的 MQTT broker。
 - **基础主题 / 自动发现前缀** — 状态/命令主题的根主题以及 HA 自动发现前缀（默认 `homeassistant`）。
-- **要暴露的组地址** — KNX 网关中导入的每个地址（ETS 列表）都带有一个复选框。勾选的地址会作为 Home Assistant 实体发布，并根据 DPT 自动分类（switch、sensor、binary_sensor、number、text）。可使用筛选框和*全选* / *全不选*按钮。默认全部选中。
+- **要暴露的组地址** — KNX 网关中导入的每个地址（ETS 列表）都带有一个复选框。勾选的地址会作为 Home Assistant 实体发布，并根据 DPT 自动分类（switch、sensor、binary_sensor、number、text）。可使用筛选框和*全选* / *全不选*按钮。默认全部选中。每一行还有一个**只读**开关：只读地址仍会发布到 Home Assistant（状态保持可见），但绝不接受回写到 KNX 总线的命令（switch 变为 binary_sensor，number 变为 sensor）。*设为只读* / *取消只读*按钮会将其应用到当前显示的所有地址。
 - **卷帘与温控器** — 将多个地址组合成一个实体：
     - *卷帘*：上/下 GA (1.008)、可选停止 GA (1.007)、可选位置 设置/状态 GA (5.001)。*反转位置* 将 KNX 约定（0% = 打开）映射到 Home Assistant（100% = 打开）。
     - *温控器*：当前温度 GA (9.001)、设定值 设置/状态 GA (9.001)、可选开/关 GA (1.001 → off/heat)，以及最低/最高温度和步长。

package/nodes/locales/zh-CN/knxUltimateIoTBridge.json

@@ -29,6 +29,14 @@
       "select_all": "全选",
       "select_none": "全不选",
       "exposed_count": "已选择",
+      "read_only": "只读",
+      "read_only_bulk": "对显示的地址设为只读：",
+      "read_only_all": "设为只读",
+      "read_only_none": "取消只读",
+      "bus_mode": "KNX 总线连接",
+      "bus_standalone": "独立（通过网关）",
+      "bus_flow": "流消息（输入/输出端口）",
+      "bus_flow_hint": "将一个通用模式的 KNXUltimate 节点接到输入端口（KNX → MQTT），另一个接到输出端口（MQTT → KNX）。",
       "no_gateway": "请先选择一个 KNX 网关。",
       "no_ga": "未找到组地址。请在 KNX 网关中导入 ETS 列表。",
       "csv_error": "无法从网关加载组地址列表。",
@@ -113,7 +121,9 @@
     },
     "labels": {
       "outputKnxToIoT": "KNX → IoT 流",
-      "outputIoTToKnx": "IoT → KNX 确认"
+      "outputIoTToKnx": "IoT → KNX 确认",
+      "inputKnxBus": "KNX 总线输入（来自通用节点）",
+      "outputKnxWrite": "KNX 写入输出（发送到通用节点）"
     }
   }
 }

package/package.json

@@ -3,7 +3,7 @@
   "engines": {
     "node": ">=20.18.1"
   },
-  "version": "5.0.1",
+  "version": "5.0.2",
   "description": "Control your KNX and KNX Secure intallation via Node-Red! A bunch of KNX nodes, with integrated Philips HUE control, ETS group address importer, KNX AI for diagnosticsand KNX routing between interfaces. Easy to use and highly configurable.",
   "files": [
     "nodes/",