In the case of the Desky project, it uses both uart on one wire (for one way comms from controller to control panel) and shorts other wires (for control from panel to controller)!
This project might give you some structure for how to get started.
Doing a teardown of both controller and handset and posting photos, measuring voltages on wires on the handset side (probably accessible), pulling out the logic analyser, and setting up a ESPHome uart debug to try to read uart messages on wires are all good places to start.