feat: add M95M02-only GAS and EEPROM profiles

Expose the existing registers through Modbus and service CAN using one GAS provider only in M95M02 builds.
Include the EEPROM layout/driver, LOAD protection and calibration, firmware identity and shared CCS build workflow.
Add transport/profile and SCI8 validation tests, documentation and the checked M95M02 firmware image.
This commit is contained in:
2026-10-09 16:17:37 +03:00
parent c6c9128238
commit 5d9818291b
63 changed files with 2307 additions and 365 deletions
+103
View File
@@ -0,0 +1,103 @@
#include <stdio.h>
#include <string.h>
#include "../../Source/Internal/DAC.c"
int READY = 1, Desk = 6, Mode = 5;
int modbus[128];
unsigned int test_start, test_stop, test_permission, test_tick;
unsigned int test_starts, test_last_stop_tick, test_last_start_tick, test_init_dac;
int test_bad_order;
unsigned int ump_dac_ramp, ump_dac_duration, ump_dac_go10, ump_dac_stop10, ump_dac_position;
#define CHECK(x) do { if (!(x)) { printf("FAIL line %d: %s\n", __LINE__, #x); return 1; } } while (0)
static void setup(int mode) {
memset(modbus, 0, sizeof(modbus)); Mode = mode; READY = 1;
test_start = test_stop = test_permission = test_tick = test_starts = 0;
test_bad_order = test_init_dac = 0;
Load_control_init(); Setup_DAC_time(); WAKEpowse = 0;
DAC_go = 4; DAC_stop = 16; DAC_min() = 100; DAC_max() = 3000;
}
static void tick(unsigned int n, int exchange, unsigned int volts) {
while (n--) {
if (exchange) Load_voltage_can(0x8000U | (Mode == 5 ? 305U : 8U), volts, 0, 0);
test_tick++; Load_runner();
}
}
int main(void) {
unsigned int out[8], error, count, ramp, code, stopped_at;
setup(5);
/* Boot ISR before parameters: no divide-by-zero and no GPIO start. */
Load_control_init(); Commands = 0x80; tick(10, 1, 0); CHECK(!test_starts);
Setup_DAC_time(); WAKEpowse = 0;
tick(10, 0, 0); CHECK(test_starts == 1 && test_permission);
CHECK(LOAD_CAN_TIMEOUT == 600);
/* Wrong ZPT and masked slots never confirm freshness. */
setup(5); Commands = 0x80;
Load_voltage_can(0x8000U | 8U, 200, 0, 0);
Load_voltage_can(305U, 200, 0, 0); tick(10, 0, 0);
CHECK(!test_starts && (LOAD_STATUS & 2));
Load_voltage_can(0x2000U | 303U, 0, 0, 30);
tick(1, 0, 0); CHECK(test_starts == 1);
/* Freeze current and code at timeout; unrelated exchange cannot unfreeze. */
tick(1000, 1, 30); tick(600, 0, 0);
ramp = ump_dac_ramp; code = modbus[123];
tick(2000, 0, 0); CHECK(ump_dac_ramp == ramp && (unsigned int)modbus[123] == code);
CHECK(test_permission && !test_stop && (LOAD_STATUS & 2));
Load_voltage_can(0x8000U | 8U, 200, 0, 0); tick(10, 0, 0);
CHECK(ump_dac_ramp == ramp);
tick(10, 1, 30); CHECK(ump_dac_ramp > ramp);
/* Exactly 30 V permits growth; 29 V fails strictly above 6 mA. */
setup(6); Commands = 0x80; tick(10, 1, 30);
load_count_ramp = time_dac / 6; tick(5, 1, 30);
CHECK(load_state == LOAD_RUN && modbus[0x1C] >= 60);
tick(5, 1, 29); CHECK(load_state == LOAD_RELOAD && test_stop && !test_permission);
CHECK(!test_start && ump_dac_ramp == 0 && modbus[0x1C] == 40);
CHECK(modbus[123] == DAC_min()); stopped_at = test_last_stop_tick;
tick(999, 1, 0); CHECK(test_starts == 1 && test_stop);
tick(1, 1, 0); CHECK(test_starts == 2 && test_last_start_tick-stopped_at == 1000);
CHECK(!test_stop && test_permission && !test_bad_order);
/* Five total attempts, then a persistent fault; no sixth start. */
while (load_state != LOAD_FAULT) {
load_count_ramp = time_dac / 6; tick(5, 1, 0);
if (load_state == LOAD_RELOAD) tick(1000, 1, 0);
}
CHECK(test_starts == 5 && LOAD_ATTEMPTS == 5 && (LOAD_STATUS & 1));
tick(3000, 1, 200); CHECK(test_starts == 5 && test_stop && !test_permission);
Commands = 0xC0; tick(10, 1, 200); CHECK(load_state == LOAD_FAULT);
Commands = 0; tick(1000, 1, 200); CHECK(!(LOAD_STATUS & 1));
Commands = 0x80; test_starts = 0; tick(10, 1, 200); CHECK(LOAD_ATTEMPTS == 1);
/* Manual reset dominates START; releasing it alone cannot start again. */
Commands = 0xC0; tick(1, 1, 200); CHECK(test_stop && !test_permission);
Commands = 0x80; tick(1500, 1, 200); CHECK(test_starts == 1);
/* Versioned simulation writes are bounded, read-only fields reject writes. */
count = Load_protection_prepare(3, 0x1300, 8, out, &error);
CHECK(count == 8 && !error && out[0] == 0x5550 && out[1] == 1);
Load_protection_prepare(6, 0x1303, 0, out, &error); CHECK(error == 3);
Load_protection_prepare(6, 0x1304, 0, out, &error); CHECK(error == 2);
Load_protection_prepare(6, 0x1302, 4, out, &error); CHECK(error == 3);
setup(5); Commands = 0x80; tick(10, 1, 200);
Load_protection_prepare(6, 0x1303, 20, out, &error); CHECK(!error);
Load_protection_prepare(6, 0x1302, 1, out, &error); CHECK(!error);
tick(30, 1, 200); CHECK(LOAD_STATUS & 2);
ramp = ump_dac_ramp; tick(100, 1, 200); CHECK(ump_dac_ramp == ramp);
Load_protection_prepare(6, 0x1302, 0, out, &error);
tick(10, 1, 200); CHECK(!(LOAD_STATUS & 2) && ump_dac_ramp > ramp);
Load_protection_prepare(6, 0x1302, 2, out, &error);
load_count_ramp = time_dac / 6; tick(5, 1, 200); CHECK(load_state == LOAD_RELOAD);
/* Calibration must not replace the forced 4 mA output during reload. */
Commands |= 0x200; DAC_cal() = 4095; tick(5, 1, 200);
CHECK(modbus[123] == DAC_min() && modbus[0x1C] == 40);
/* A calibration code preceding START must be replaced by 4 mA first. */
setup(5); Commands = 0x200; DAC_cal() = 4095;
tick(10, 1, 200); CHECK(modbus[123] == 4095 && !load_zero_sent);
Commands = 0x280; tick(1, 1, 200); CHECK(!test_starts);
tick(4, 1, 200); CHECK(!test_starts && modbus[123] == DAC_min());
tick(1, 1, 200); CHECK(test_starts == 1);
/* Timeout while STOP is held cannot initiate the pending retry. */
setup(5); Commands = 0x80; tick(10, 1, 0);
load_count_ramp = time_dac / 6; tick(5, 1, 0);
CHECK(load_state == LOAD_RELOAD);
tick(1500, 0, 0); CHECK(test_starts == 1 && test_stop);
tick(1, 1, 0); CHECK(test_starts == 2 && !test_stop);
Load_control_init(); CHECK(!load_simulation);
puts("PASS: production DAC control, timeout, CAN slots, STOP ordering, five attempts, simulation");
return 0;
}