Oh wow, when I first found this conversation I failed to realize just how recent this development was. I just ordered one of these light bars, and ended up finding this thread while researching my purchase. I have a bunch of random ESP32s laying around, but the only BM5602 I can find is from AliExpress so that will arrive… someday.
Anyway, will be interested to give this all a try once I have the module. Are the only ways of discovering the device address still either the Python script from GitHub - kuzmin-no/BenQ_ScreenBar_HALO_2_HA_integration: BenQ ScreenBar HALO 2 - integration with Home Assistant · GitHub or HackRF? I don’t have a HackRF, nor do I have a Pi Pico to run the Python script on.
I can get a Pi Pico if that’s the easiest option, or try to port the discovery script to run on an ESP32 since that would be my micro controller of choice.
I do also have one of these: GitHub - cifertech/ESP32-DIV: ESP32DIV is a multi-purpose wireless offensive and defensive toolkit powered by an ESP32 · GitHub, not sure if it can do what the HackRF can do (I honestly don’t really know how to use it yet 
).
I see there was some discussion of sniffing the SPI communication on the OEM controller. Is the existing working integration based on doing that, or sniffing the wireless communication? Has someone done a teardown of the control puck? I’m happy to void my warranty for science 
.
