python-mobius 0.1.0__py3-none-any.whl

mobius/__init__.py

@@ -0,0 +1,73 @@
+"""
+python-mobius: a reverse-engineered Python client for the BLE protocol used
+by EcoTech Marine (VorTech, Radion), AquaIllumination (Prime, Hydra),
+Neptune Systems, and NYOS "Mobius"-branded aquarium devices.
+
+Not affiliated with or endorsed by any of those companies. This is an
+independent reimplementation of the wire protocol for interoperability,
+derived from public community reverse-engineering work and analysis of the
+publicly-distributed Mobius Android app. See documentation/ for the full
+protocol writeup and confirmation evidence for every field.
+"""
+
+from .crc import crc16, CRC16_TABLE
+from .frame import (
+    build_frame, parse_frame, ParsedFrame,
+    encode_get_attribute, encode_set_attribute, decode_attribute_response, AttributeValue,
+    OPGROUP_C2CI_REQUEST, OPGROUP_C2CI_CONFIRM,
+    OPGROUP_FSCI_REQUEST, OPGROUP_FSCI_CONFIRM,
+    OPGROUP_QOTAP_REQUEST, OPGROUP_QOTAP_CONFIRM,
+    OPCODE_GET_ATTR, OPCODE_GET_ATTR_EXT, OPCODE_SET_ATTR, OPCODE_SET_ATTR_EXT,
+    OPCODE_GET_ATTR_ELEMENTS, OPCODE_GET_ATTR_ELEMENTS_EXT, OPCODE_GET_OPCODES,
+)
+from .constants import (
+    PrimitiveType, PRIMITIVE_SIZE, LIGHT_PRIMITIVES,
+    PUMP_PRIMITIVES_VERIFIED, PUMP_PRIMITIVES_EXPERIMENTAL,
+    Model, ErrorState, C2Attribute, PhysicalValueID, VisualID,
+    SceneID, OperationState, FsciStatus,
+    PumpMode, RampType, PumpParam, PUMP_PARAM_SIZE, PUMP_MODE_PARAMS,
+)
+from .schedule import (
+    LightPrimitive, SchedulePoint, interpolate_light_schedule,
+    PumpPrimitiveValue, PumpSchedulePoint, get_active_pump_block,
+)
+from .manufacturer import MOBIUS_COMPANY_ID, MobiusAdvertisement, parse_manufacturer_data
+from .device import (
+    MobiusDevice, MobiusPump,
+    SERVICE_GENERAL, CHAR_RX_DATA, CHAR_RX_FINAL, CHAR_TX_DATA, CHAR_TX_FINAL,
+)
+from .discovery import (
+    scan_for_mobius_devices, scan_for_mobius_devices_with_info, group_by_pan_id,
+)
+
+__version__ = "0.1.0"
+
+__all__ = [
+    "__version__",
+    # crc
+    "crc16", "CRC16_TABLE",
+    # frame
+    "build_frame", "parse_frame", "ParsedFrame",
+    "encode_get_attribute", "encode_set_attribute", "decode_attribute_response", "AttributeValue",
+    "OPGROUP_C2CI_REQUEST", "OPGROUP_C2CI_CONFIRM",
+    "OPGROUP_FSCI_REQUEST", "OPGROUP_FSCI_CONFIRM",
+    "OPGROUP_QOTAP_REQUEST", "OPGROUP_QOTAP_CONFIRM",
+    "OPCODE_GET_ATTR", "OPCODE_GET_ATTR_EXT", "OPCODE_SET_ATTR", "OPCODE_SET_ATTR_EXT",
+    "OPCODE_GET_ATTR_ELEMENTS", "OPCODE_GET_ATTR_ELEMENTS_EXT", "OPCODE_GET_OPCODES",
+    # constants
+    "PrimitiveType", "PRIMITIVE_SIZE", "LIGHT_PRIMITIVES",
+    "PUMP_PRIMITIVES_VERIFIED", "PUMP_PRIMITIVES_EXPERIMENTAL",
+    "Model", "ErrorState", "C2Attribute", "PhysicalValueID", "VisualID",
+    "SceneID", "OperationState", "FsciStatus",
+    "PumpMode", "RampType", "PumpParam", "PUMP_PARAM_SIZE", "PUMP_MODE_PARAMS",
+    # schedule
+    "LightPrimitive", "SchedulePoint", "interpolate_light_schedule",
+    "PumpPrimitiveValue", "PumpSchedulePoint", "get_active_pump_block",
+    # manufacturer
+    "MOBIUS_COMPANY_ID", "MobiusAdvertisement", "parse_manufacturer_data",
+    # device
+    "MobiusDevice", "MobiusPump",
+    "SERVICE_GENERAL", "CHAR_RX_DATA", "CHAR_RX_FINAL", "CHAR_TX_DATA", "CHAR_TX_FINAL",
+    # discovery
+    "scan_for_mobius_devices", "scan_for_mobius_devices_with_info", "group_by_pan_id",
+]

mobius/cli.py

@@ -0,0 +1,68 @@
+"""
+Command-line entrypoint: `mobius-scan`.
+
+Scans for Mobius devices, groups them by pan_id (no connection required),
+then connects to each and prints a full device summary.
+"""
+
+from __future__ import annotations
+
+import argparse
+import asyncio
+
+from .device import MobiusDevice
+from .discovery import scan_for_mobius_devices_with_info, group_by_pan_id
+
+
+async def _run(args) -> None:
+    found = await scan_for_mobius_devices_with_info(timeout=args.timeout, adapter=args.adapter)
+    if not found:
+        print("No Mobius devices found. Make sure BLE is on and devices are nearby.")
+        return
+
+    print("=== Pan ID groups (from advertisements, no connection needed) ===")
+    for pan_id, members in group_by_pan_id(found).items():
+        label = f"{pan_id:#06x}" if pan_id is not None else "unknown"
+        print(f"  pan_id {label}:")
+        for device, info in members:
+            if info:
+                print(f"    {device.address}  model={info.model.name if info.model else info.model_raw}"
+                      f"  serial={info.serial}")
+            else:
+                print(f"    {device.address}  (no parsed manufacturer data)")
+
+    if args.scan_only:
+        return
+
+    print("\n=== Full device summaries (connects to each) ===")
+    for device, _info in found:
+        print(f"--- {device.address} ({device.name}) ---")
+        try:
+            async with MobiusDevice(device, connect_timeout=args.connect_timeout) as mdevice:
+                summary = await mdevice.get_device_summary()
+                for k, v in summary.items():
+                    print(f"  {k}: {v}")
+        except Exception as e:
+            print("  failed to connect/read:", e)
+
+
+def main() -> None:
+    parser = argparse.ArgumentParser(
+        prog="mobius-scan",
+        description="Scan for and identify Mobius-protocol BLE devices (VorTech, Radion, etc).",
+    )
+    parser.add_argument("--adapter", default=None,
+                         help='BlueZ adapter to use, e.g. "hci0" or "hci1" (Linux only). '
+                              'Defaults to whatever bleak picks automatically.')
+    parser.add_argument("--timeout", type=float, default=15.0,
+                         help="Scan duration in seconds (default: 15.0)")
+    parser.add_argument("--connect-timeout", type=float, default=30.0,
+                         help="Per-device connect timeout in seconds (default: 30.0)")
+    parser.add_argument("--scan-only", action="store_true",
+                         help="Only scan/group by pan_id; don't connect to any device.")
+    args = parser.parse_args()
+    asyncio.run(_run(args))
+
+
+if __name__ == "__main__":
+    main()

mobius/constants.py

@@ -0,0 +1,393 @@
+"""
+Protocol enums and lookup tables shared across the library.
+
+Every value here is either:
+  - a directly-read literal from the decompiled Mobius Android app, or
+  - explicitly noted as inferred (with the evidence for the inference).
+
+See documentation/ for the full derivation of each table.
+"""
+
+from __future__ import annotations
+
+from enum import IntEnum
+
+
+# --------------------------------------------------------------------------
+# Device / primitive identity
+# --------------------------------------------------------------------------
+
+class PrimitiveType(IntEnum):
+    """What kind of device this is, at the protocol level. Confirmed literal
+    values from M.PrimitiveType."""
+    Undefined = 0
+    VisualV1 = 1       # Radion / light-class devices (e.g. XR15, XR30, Prime, Hydra)
+    PumpV1 = 2         # legacy Nero pumps
+    DoseV1 = 3         # dosing pumps (Versa VX-1, "Muffler")
+    VorTechV1 = 4      # VorTech pumps
+    VectraV1 = 5       # Vectra pumps
+    HotSauceV1 = 6     # environmental sensor devices
+    AlpacaV1 = 7       # newer-gen Nero-successor pumps ("Orbit")
+    TurtleV1 = 8       # newer-gen Nero-successor pumps ("Axis")
+    CoffeeV1 = 9       # NYOS Quantum skimmers/dosers
+
+
+# Confirmed from M.PrimitiveType.size() -- the fixed byte-length (or, for
+# VisualV1, the per-channel-triplet unit) of that primitive type's schedule
+# point payload.
+PRIMITIVE_SIZE: dict[PrimitiveType, int] = {
+    PrimitiveType.Undefined: 0,
+    PrimitiveType.VisualV1: 3,      # per-channel unit (repeating), not a fixed total
+    PrimitiveType.PumpV1: 13,
+    PrimitiveType.DoseV1: 9,        # DosePrimitive -- not implemented in this library
+    PrimitiveType.VorTechV1: 13,
+    PrimitiveType.VectraV1: 13,
+    PrimitiveType.HotSauceV1: 14,   # not implemented in this library
+    PrimitiveType.AlpacaV1: 13,
+    PrimitiveType.TurtleV1: 13,
+    PrimitiveType.CoffeeV1: 13,     # NYOS Quantum etc. -- same size as pump primitives,
+                                     # PumpPrimitive parser applies but is UNVERIFIED
+                                     # against real Coffee/Quantum hardware
+}
+
+# Support tiers used by MobiusDevice.get_device_summary().
+LIGHT_PRIMITIVES = {PrimitiveType.VisualV1}
+PUMP_PRIMITIVES_VERIFIED = {
+    PrimitiveType.VorTechV1, PrimitiveType.PumpV1, PrimitiveType.VectraV1,
+    PrimitiveType.AlpacaV1, PrimitiveType.TurtleV1,
+}
+PUMP_PRIMITIVES_EXPERIMENTAL = {PrimitiveType.CoffeeV1}
+
+
+class Model(IntEnum):
+    """Device model identifiers. Confirmed literal values from M.Model
+    (a curated subset -- the full enum covers ~100 models across EcoTech
+    Marine, AquaIllumination, Neptune Systems, NYOS, and Hera product lines;
+    add entries here as needed)."""
+    Unknown = 0
+    VorTechMP10wES = 10
+    VorTechMP10wQD = 11
+    RadionXR30w = 30
+    RadionXR30wG2 = 31
+    RadionXR30wPro = 32
+    RadionXR30wG3 = 33
+    RadionXR30wG3Pro = 34
+    RadionXR30wG4 = 35
+    RadionXR30wG4Pro = 36
+    RadionXR30wFWPro = 37
+    RadionXR30wPrototype = 39
+    VorTechMP40wES = 40
+    VorTechMP40wQD = 41
+    VorTechMP40wG3QD = 42
+    VorTechMP60wES = 60
+    VorTechMP60wQD = 61
+    VectraM1 = 144
+    VectraL1 = 145
+    VectraS1 = 146
+    VectraS2 = 147
+    VectraM2 = 148
+    VectraL2 = 149
+    RadionXR15wG3Pro = 160
+    RadionXR15wFW = 161
+    RadionXR15wG4Pro = 162
+    RadionXR15wFWPro = 163
+    RadionXR15wPrototype = 175
+    RadionXR15G5Pro = 176
+    RadionXR15wG5Blue = 177
+    RadionXR15wG5FW = 178       # "Radion XR15w G5 FW" (base64-decoded from getName())
+    RadionXR15wG6Pro = 179      # "Radion XR15w G6 Pro" (base64-decoded from getName())
+    RadionXR15wG6Blue = 180     # "Radion XR15w G6 Blue" (inferred sequential id, base64-decoded name)
+    RadionXR30wG5Pro = 192
+    RadionXR30wG5Blue = 193
+    Nero5 = 256
+    Nero3 = 257
+    DosingPump = 272
+    Muffler = 275           # "Dose QD" -- another doser model
+    Coffee1 = 396            # "Quantum 160" (NYOS) -- CoffeeV1 primitive
+    Coffee2 = 397            # "Quantum 220/300" (NYOS)
+
+
+class ErrorState(IntEnum):
+    """Confirmed literal values from M.ErrorState (subset covering common
+    pump/light fault codes -- the full enum also has dosing-pump-specific codes)."""
+    NoError = 0
+    Disconnect = 1
+    Temperature = 2
+    Stall = 3
+    Thermistor = 4
+    UnderVoltage = 5
+    PowerSupply = 6
+    SchedulePlayback = 7
+    OverVoltage = 8
+    OverCurrent = 9
+    LockDetectionCurrentLimit = 10
+    AbnormalSpeed = 11
+    AbnormalKt = 12
+    StuckInOpenLoop = 13
+    StuckInClosedLoop = 14
+    FanFault = 15
+    DriverTemp = 16
+    LEDChannelShortCircuit = 17
+    LEDChannelCurrentLeak = 18
+    LEDChannelOpenCircuit = 19
+    LEDClusterThermistor = 20
+    LEDClusterOverTemp = 21
+    DeviceBricked = 22
+    RTC = 23
+    MotorPowerDip = 64
+    MotorShort = 65
+    Wireless = 67
+    AppUpgrade = 68
+    ClogError = 69
+    DryRun = 79
+    PTCTrip = 128
+
+
+# --------------------------------------------------------------------------
+# Attribute IDs (Get/Set)
+# --------------------------------------------------------------------------
+
+class C2Attribute(IntEnum):
+    """Attribute IDs used with Get/Set requests. Every value here is a
+    directly-confirmed literal (either a plain literal in the decompile, or
+    resolved through a JADX symbolic-constant substitution back to the real
+    integer -- see documentation/03-attributes-and-opcodes.md), EXCEPT
+    Schedule1 which required tracing through Firebase's
+    ServiceStarter.ERROR_UNKNOWN=500 to resolve (also fully confirmed, just
+    via an extra hop)."""
+    AttributeTableVersion = 0
+    FirmwareVersion = 1
+    HardwareRevision = 2
+    SerialNumber = 3
+    Model = 4
+    Name = 5
+    PrimitiveType = 8
+    PhysicalValues = 101
+    MACAddress = 103
+    OperationState = 104
+    OperationMode = 105
+    GroupBitmap = 108
+    ErrorState = 107
+    ConfiguredScenes = 400
+    CurrentScene = 401
+    SceneTimeout = 402
+    SceneTimer = 403
+    Schedule1 = 500
+    Schedule1Checksum = 501
+    Schedule1StartTime = 502
+    Schedule2 = 503
+    Schedule2Checksum = 504
+    Schedule2StartTime = 505
+    Schedule2ActiveDays = 506
+    CurrentSchedule = 507
+    CurrentScheduleElement = 508
+    ActiveConfiguration = 509
+    SchedulePlayback = 510
+    Schedule1Intensity = 511
+    Schedule2Intensity = 512
+    MotorSpeed = 700
+    BatteryBackupMaxSpeed = 701
+    FeedModeMaxSpeed = 702
+    PumpOverrideMode = 705
+    BatteryBackupSpeed = 706
+    MinimumGallonsPerHour = 707
+    MaximumGallonsPerHour = 708
+    BoostedBatteryPower = 803
+    BoostedBatteryPowerOnTime = 804
+    BoostedBatteryPowerOffTime = 805
+    SupportedColorChannels = 901
+    MaxPower = 1504
+    Ramp = 1505
+    NormalPower = 1513
+
+
+class PhysicalValueID(IntEnum):
+    """Sub-index used with C2Attribute.PhysicalValues. Confirmed literal
+    values from M.PhysicalValues."""
+    Unknown = 0
+    DriverTemperature = 1
+    MotorTemperature = 2
+    ClusterTemperature = 3
+    MotorPower = 4
+    MotorRPM = 5             # defined in the protocol; NEVER queried anywhere in
+                              # the app -- unconfirmed whether firmware populates it
+    BatteryVoltage = 6
+    InputVoltage = 7
+    InternalTemperature = 8
+    FanSpeed = 9
+    MotorTemperatureFromStaterResistor = 10
+    GallonsPerHour = 11      # confirmed live-queried by the app for pump flow display
+    SupplyCurrent = 12
+    FanVoltage = 13
+    ModuleTemperature = 14
+    MotorSpinning = 15
+    Cluster2Temperature = 16
+
+
+class VisualID(IntEnum):
+    """Light channel identifiers. Confirmed literal values from M.VisualID."""
+    Unknown = 0
+    Brightness = 1
+    CoolWhite = 16
+    Blue = 17
+    RoyalBlue = 18
+    Green = 19
+    Red = 20
+    UV = 21
+    WarmWhite = 22
+    Violet = 23
+    DeepBlue = 24
+    DeepRed = 25
+    NeutralWhite = 26
+    Yellow = 27
+    Amber = 28
+    FarRed = 29
+    Moonlight = 30
+    MoonlightWhite = 31
+    MoonlightBlue = 32
+    Cyan = 33
+    Lime = 34
+    BlueAndWhite = 35
+    RedAndWhite = 36
+    UV_PLUS = 37
+    White = 38
+    Status1 = 50
+    Status1Red = 51
+    Status1Green = 52
+    Status1Blue = 53
+    Status2 = 54
+    Status2Red = 55
+    Status2Green = 56
+    Status2Blue = 57
+    Status3 = 58
+    Status3Red = 59
+    Status3Green = 60
+    Status3Blue = 61
+    Status4 = 62
+    Status4Red = 63
+    Status4Green = 64
+    Status4Blue = 65
+    StormProbability = 100
+    CloudProbability = 101
+
+
+class SceneID(IntEnum):
+    """Confirmed literal values from M.SceneID."""
+    EmptyScene = 0
+    FeedMode = 1
+    BatteryBackup = 2
+    AllOff = 3
+    ColorCycle = 4
+    Disco = 5
+    Thunderstorm = 6
+    CloudCover = 7
+    AllOn = 8
+    All50 = 9
+
+
+class OperationState(IntEnum):
+    """Confirmed literal values from M.OperationState."""
+    OOB = 0
+    LiveDemo = 1
+    Scene = 2
+    Schedule = 3
+
+
+class FsciStatus(IntEnum):
+    """Confirmed status/error codes returned in the first byte of a
+    Get/Set-attribute confirm response."""
+    Success = 0
+    Failed = 1
+    InvalidInstance = 2
+    InvalidElement = 3
+    NotPermitted = 4
+    InvalidMode = 5
+    NoMem = 6
+    UnsupportedAttribute = 7
+    EmptyEntry = 8
+    InvalidValue = 9
+    InvalidRange = 20
+    InvalidSize = 21
+    EntryNotFound = 255
+
+
+# --------------------------------------------------------------------------
+# Pump schedule / mode constants
+# --------------------------------------------------------------------------
+
+class PumpMode(IntEnum):
+    """Confirmed literal values from M.PumpMode."""
+    Undefined = 0
+    ConstantSpeed = 1
+    Lagoon = 2
+    ReefCrest = 3
+    NutrientTransport = 4
+    TidalSwell = 5
+    ShortPulse = 6
+    Gyre = 7
+    Transition = 8
+    ExpandingPulse = 9
+    Sync = 10
+    EcoSmartBack = 12   # 11 is genuinely unused in the source enum
+    Feed = 13
+    BatteryBackup = 14
+    Random = 15
+    Pulse = 16
+
+
+class RampType(IntEnum):
+    """Confirmed literal values from M.RampType."""
+    Sinusoidal = 1
+    Logarithmic = 2
+    Linear = 3
+
+
+class PumpParam(IntEnum):
+    """Named fields that can appear in a PumpPrimitive, per pump mode.
+    Not a wire-format enum itself -- just internal bookkeeping for
+    PUMP_MODE_PARAMS / PUMP_PARAM_SIZE below."""
+    MaxSpeed = 0
+    MinSpeed = 1
+    Time = 2
+    RampType = 3
+    StartTime = 4
+    EndTime = 5
+    Master = 6
+    BigTime = 7
+    Variance = 8
+    PhaseShift = 9
+    OnTime = 10
+    OffTime = 11
+
+
+PUMP_PARAM_SIZE: dict[PumpParam, int] = {
+    PumpParam.MaxSpeed: 2, PumpParam.MinSpeed: 2, PumpParam.Time: 4,
+    PumpParam.RampType: 1, PumpParam.StartTime: 2, PumpParam.EndTime: 2,
+    PumpParam.Master: 8, PumpParam.BigTime: 4, PumpParam.Variance: 2,
+    PumpParam.PhaseShift: 2, PumpParam.OnTime: 4, PumpParam.OffTime: 4,
+}
+
+# Ported directly from M.PumpMode.parameters() -- which params are present
+# for each mode, and in what order (byte offset is cumulative from data[1:]).
+PUMP_MODE_PARAMS: dict[PumpMode, list[PumpParam]] = {
+    PumpMode.Undefined: [],
+    PumpMode.ConstantSpeed: [PumpParam.MaxSpeed],
+    PumpMode.Lagoon: [PumpParam.MaxSpeed],
+    PumpMode.ReefCrest: [PumpParam.MaxSpeed],
+    PumpMode.NutrientTransport: [PumpParam.MaxSpeed],
+    PumpMode.TidalSwell: [PumpParam.MaxSpeed],
+    PumpMode.Feed: [PumpParam.MaxSpeed],
+    PumpMode.ShortPulse: [PumpParam.MaxSpeed, PumpParam.Time],
+    PumpMode.Gyre: [PumpParam.MaxSpeed, PumpParam.BigTime],
+    PumpMode.Transition: [PumpParam.RampType],
+    PumpMode.ExpandingPulse: [PumpParam.MaxSpeed, PumpParam.StartTime, PumpParam.EndTime],
+    PumpMode.Sync: [PumpParam.MaxSpeed, PumpParam.PhaseShift, PumpParam.Master],
+    PumpMode.EcoSmartBack: [PumpParam.MaxSpeed, PumpParam.PhaseShift, PumpParam.Master],
+    PumpMode.BatteryBackup: [PumpParam.MaxSpeed],
+    PumpMode.Random: [PumpParam.MinSpeed, PumpParam.MaxSpeed, PumpParam.Variance],
+    PumpMode.Pulse: [PumpParam.MaxSpeed, PumpParam.OnTime, PumpParam.OffTime],
+}
+
+PUMP_TIME_OFFSET_PARAMS = {PumpParam.Time, PumpParam.StartTime, PumpParam.EndTime}
+# Confirmed: androidx.recyclerview.widget.ItemTouchHelper.Callback.DEFAULT_SWIPE_ANIMATION_DURATION
+PUMP_TIME_OFFSET = 250

mobius/crc.py

@@ -0,0 +1,49 @@
+"""
+CRC16 (table-driven, seed 0xFFFF) used on every Mobius wire frame.
+
+Ported from the decompiled com.c2.comm.utilities.Crc class. The table below
+is Java's original signed-short constants converted to unsigned 16-bit for
+Python arithmetic. Verified byte-for-byte against real captured packets --
+see documentation/02-framing-and-crc.md.
+"""
+
+from __future__ import annotations
+
+_CRC16_TABLE_SIGNED = [
+    0, 4129, 8258, 12387, 16516, 20645, 24774, 28903, -32504, -28375, -24246,
+    -20117, -15988, -11859, -7730, -3601, 4657, 528, 12915, 8786, 21173, 17044,
+    29431, 25302, -27847, -31976, -19589, -23718, -11331, -15460, -3073, -7202,
+    9314, 13379, 1056, 5121, 25830, 29895, 17572, 21637, -23190, -19125, -31448,
+    -27383, -6674, -2609, -14932, -10867, 13907, 9842, 5649, 1584, 30423, 26358,
+    22165, 18100, -18597, -22662, -26855, -30920, -2081, -6146, -10339, -14404,
+    18628, 22757, 26758, 30887, 2112, 6241, 10242, 14371, -13876, -9747, -5746,
+    -1617, -30392, -26263, -22262, -18133, 23285, 19156, 31415, 27286, 6769,
+    2640, 14899, 10770, -9219, -13348, -1089, -5218, -25735, -29864, -17605,
+    -21734, 27814, 31879, 19684, 23749, 11298, 15363, 3168, 7233, -4690, -625,
+    -12820, -8755, -21206, -17141, -29336, -25271, 32407, 28342, 24277, 20212,
+    15891, 11826, 7761, 3696, -97, -4162, -8227, -12292, -16613, -20678, -24743,
+    -28808, -28280, -32343, -20022, -24085, -12020, -16083, -3762, -7825, 4224,
+    161, 12482, 8419, 20484, 16421, 28742, 24679, -31815, -27752, -23557,
+    -19494, -15555, -11492, -7297, -3234, 689, 4752, 8947, 13010, 16949, 21012,
+    25207, 29270, -18966, -23093, -27224, -31351, -2706, -6833, -10964, -15091,
+    13538, 9411, 5280, 1153, 29798, 25671, 21540, 17413, -22565, -18438, -30823,
+    -26696, -6305, -2178, -14563, -10436, 9939, 14066, 1681, 5808, 26199, 30326,
+    17941, 22068, -9908, -13971, -1778, -5841, -26168, -30231, -18038, -22101,
+    22596, 18533, 30726, 26663, 6336, 2273, 14466, 10403, -13443, -9380, -5313,
+    -1250, -29703, -25640, -21573, -17510, 19061, 23124, 27191, 31254, 2801,
+    6864, 10931, 14994, -722, -4849, -8852, -12979, -16982, -21109, -25112,
+    -29239, 31782, 27655, 23652, 19525, 15522, 11395, 7392, 3265, -4321, -194,
+    -12451, -8324, -20581, -16454, -28711, -24584, 28183, 32310, 20053, 24180,
+    11923, 16050, 3793, 7920,
+]
+
+CRC16_TABLE = [v & 0xFFFF for v in _CRC16_TABLE_SIGNED]
+
+
+def crc16(data: bytes, seed: int = 0xFFFF) -> int:
+    """CRC16 over `data`, matching com.c2.comm.utilities.Crc.crc16()."""
+    crc = seed & 0xFFFF
+    for b in data:
+        idx = (b ^ (crc >> 8)) & 0xFF
+        crc = ((crc << 8) ^ CRC16_TABLE[idx]) & 0xFFFF
+    return crc