pylumencache
Unofficial Python library for LumenCache ReNetA lighting, which is controlled over a hosted MQTT broker. It is the protocol layer behind the ha-lumencache Home Assistant integration and has no Home Assistant dependency.
Unofficial. This is an independent, community project. It is not made, endorsed or supported by LumenCache.
Status: pre-alpha. The protocol was worked out from captures, and the library covers it: typed messages and commands, an async client, a system model and a fake controller. The API may change before the first release, and the library is not on PyPI yet.
Contents
| Path | What it is |
|---|---|
docs/asyncapi.yaml |
The protocol, as an AsyncAPI 3.0 description. The single source of truth for message codes and payloads |
docs/protocol.md |
Prose notes and open questions. Its code tables are generated from the YAML |
src/pylumencache/api.py |
LumenCache: the public entry point. Owns a SystemModel, keeps it fed from a transport, and sends commands. Use LumenCache.mqtt(...) for the hosted broker |
src/pylumencache/domain/ |
What the library is about, with no wire format in it: model.py (SystemModel: devices, and the last known state of zones and fixtures; saves to and loads from JSON, because the system does not retain its inventory), events.py (DeviceAnnounced, DeviceSeen, FixtureChanged), targets.py (Zone, Fixture and its subclasses Light and TunableLight), classify.py (which fixture class a device model gives) and commands.py (SetFixture) |
src/pylumencache/transport.py |
The Transport interface: what a way of reaching a system must provide (start, stop, connection state, domain events in, domain commands out) |
src/pylumencache/transports/mqtt/ |
The MQTT transport. client.py (MqttTransport: TLS, reconnects, publishes to cmd), adapter.py (messages to domain events, domain commands to messages), fake.py (FakeController: a fake ReNetA system that replays a capture, for developing and testing without lights; pass controller.factory as client_factory) |
src/pylumencache/transports/mqtt/wire/ |
The MQTT wire format: codes.py (the Code enum), commands.py (one builder per documented command, such as zone_control(zone_id=250, brightness=50)) and models.py (a dataclass per received message), all generated from the YAML, and parser.py (parse(topic, payload) returns a typed message, or an UnknownMessage for anything unrecognised) |
src/pylumencache/obfuscate.py |
Obfuscator: replaces ids, serials, free text and MACs with stable fakes. Used by tools/console.py for the capture file and for the screen |
tools/gen_protocol.py |
Regenerates the tables in protocol.md and codes.py, commands.py and models.py; --check fails when either is stale |
tools/console.py |
Talks to a system over MQTT, in both directions: record writes a capture file, watch prints parsed messages, and -i lets you type commands to send. With --replay FILE it uses the fake system instead of a real one |
Setup
python3 -m venv .venv
source .venv/bin/activate # Windows: .venv\Scripts\activate
pip install -e ".[dev]"
python3 tools/gen_protocol.py --check
ruff check . && mypy && lint-imports && pytest # what CI runs
Layers
api.py LumenCache: what an integration uses
transports/ ways of reaching a system (MQTT today)
mqtt/ client, adapter, wire format
transport.py the Transport interface
domain/ model, events, commands: no wire format
A module imports only from the layers below it. A transport turns its wire format into domain events and domain commands into wire messages, so the model and the code above it never see a topic, an event code or a URL. lint-imports checks this in CI (see [tool.importlinter] in pyproject.toml), and only the MQTT transport may import aiomqtt. A new transport is a new folder under transports/ that implements Transport.
Several transports
A LumenCache has one transport, and that transport can be a FallbackTransport: an ordered list of transports in which a later one is connected only while the earlier ones are down.
from pylumencache import LumenCache
cache = LumenCache.with_fallback([first, second], fail_after=30) # the list is the priority order
- Only the first transport is started at first. If nothing is connected after
fail_afterseconds, the next one is started, and so on down the list. - The earlier transports keep trying in the background. As soon as one connects, every transport after it is stopped, so a later transport is connected only while all earlier ones are down.
- Events and commands use the highest-priority transport that is connected, so the model never gets two sources at once. If a command is not supported by that transport, the next connected one is tried.
- "Down" means not connected. A transport that is connected but silent counts as up.
cache.transport.activeis the transport in use. Connection listeners hearTruewhen some transport is connected andFalsewhen none is, not each switch.
The fallback code (transports/fallback.py) knows nothing about any particular transport. It works with anything that implements Transport, and the import check enforces that.
Using the library
import asyncio
from pylumencache import LumenCache, SetFixture, Zone
async def main():
cache = LumenCache.mqtt("<host>", "<Prefix Topic>", username="<user>", password="<pass>")
cache.model.add_listener(print) # called with a Change when a device, zone or fixture changes
await cache.start() # connects in the background and reconnects if it drops
await cache.wait_connected(30)
await cache.send(SetFixture(Zone(250), brightness=50, fade=800))
await asyncio.sleep(60)
await cache.stop()
asyncio.run(main())
A command or a state change names its target: Zone(250) for a zone, Fixture(14) for one device. Fixture is the base class for everything that can be attached (lights now; fans, outlets and chargers when the system announces them). A subclass states what it can do, such as TunableLight.color_temperature, and fixture_for(device) picks the class from the announced model name. Add your own with register_model(pattern, YourFixture). Targets are equal by kind and key, so Light(14) == Fixture(14).
Listeners are plain functions or coroutines. One that raises does not affect the others. cache.model holds the devices and the last known state of each zone and fixture. cache.send_raw(...) sends any MQTT command as a fallback. For the raw typed messages, use cache.transport.add_message_listener(...) with wire.commands builders. tools/console.py does that from the command line.
Capturing the protocol
The protocol is documented from real traffic, in docs/protocol.md, with the message definitions in docs/asyncapi.yaml (an AsyncAPI description; the code tables in the markdown are generated from it by tools/gen_protocol.py). tools/console.py records everything the system publishes (read-only by default) and can also send commands by hand. After a firmware or backend update, re-capture and refresh the spec and fixtures.
# one-time setup: create a virtual environment and install the library
python3 -m venv .venv
source .venv/bin/activate # Windows: .venv\Scripts\activate
pip install -e .
export LC_HOST=<host> LC_USER=<user> LC_PASS=<pass> LC_TOPIC_PREFIX='<Prefix Topic>'
python3 tools/console.py record --hail # write a capture file, 2 minutes
python3 tools/console.py watch # print parsed messages, 1 minute
python3 tools/console.py watch -i # the same, and type commands to send
While it runs, press a wall switch and change a light from the PowerPlane display, so status and events messages appear in the capture.
Subcommands
| Subcommand | What it does |
|---|---|
record |
Writes every message to a new <name>.YYYY.MM.DD_HH_MM_SS.jsonl file and shows each one on screen as received. Default run time 120 seconds |
watch |
Prints each message as a typed object, such as ZoneEvent(...) or PdmHeartbeat(...). Default run time 60 seconds |
Both connect to the broker over TLS (MQTT 5, port 8883) through the library's MqttTransport and subscribe to everything under your Prefix Topic. By default they are read-only: the only thing either can send is one optional hail ({"e":9,"g":0}, which lists uncommissioned devices) with --hail, plus whatever you type with -i.
Options (both subcommands)
| Option | Meaning |
|---|---|
--host, --port, --user, --password |
Connection details. Defaults come from LC_HOST, LC_PORT (8883), LC_USER, LC_PASS; prefer the environment variables so the password stays out of shell history |
--topic-prefix P |
The Prefix Topic from your LumenCache connection details (env LC_TOPIC_PREFIX). Required. Quote it in the shell |
--topic T |
Subscribe to T (relative to the prefix) instead of #; repeat for several. + matches one level, # matches everything below |
--no-verify-tls |
Do not verify the broker's certificate |
-i, --interactive |
Type JSON commands to send to <prefix>/cmd; ends at --duration or when you quit |
--hail |
Send the one read-only hail described above |
--duration N |
Seconds to run, interactive mode included. 0 runs until you stop it (Ctrl-C, or quit in interactive mode) |
--no-obfuscate |
Keep real ids, serials and addresses (see Obfuscation) |
--replay FILE |
Use a fake system that replays a capture file instead of a real one. No LC_* variables needed |
-v, --verbose |
Also log every message received and sent, and the reason a connection fails |
record also takes --name NAME, the start of the output file name (default capture). The file is NAME.YYYY.MM.DD_HH_MM_SS.jsonl, using the local start time, so every run gets its own file and earlier captures are never overwritten.
Interactive mode. After it connects, type one JSON command per line and press Enter, for example {"e":8,"g":2}. Each line is published to <prefix>/cmd as compact JSON; lines that are not a JSON object are refused and nothing is sent. Messages from the system print as they arrive, and because the tool subscribes to the whole prefix, your own commands come back from the broker as cmd messages, which confirms they were published. Type quit or press Ctrl-C to exit. The only guard is on factory reset (e:15 with c:1): it asks you to type RESET first. Everything else, including commands that persist settings, is sent as typed. With --replay, commands go to the fake system, which is a safe way to practise.
Output (record). One JSON object per message with the timestamp, direction (recv for messages from the broker, sent for commands this tool published), topic, retained flag, and the payload (parsed as JSON when possible). Topics are written with the prefix removed, so the file does not contain your identifier and the protocol spec and fixtures do not depend on one system's prefix. Credentials are never written.
Obfuscation is on by default. For record it applies to the file and the screen shows real values; for watch it applies to the screen. System ids and device serials (sys, hsn) are replaced with stable fakes (SYS0001, HSN0001; the same real value always gets the same fake, and a socket's _S1 suffix is kept, so relationships between messages survive), the free-text fields in meta (name, address, zip, phone, note) are blanked, MAC-shaped strings are masked, and the Prefix Topic is replaced by <prefix> wherever it appears in text. Commands you send are obfuscated the same way, so a sent line for a command that uses a real hsn shows the fake. The mapping is kept in memory only, so fakes are consistent within one run and not between runs. Pass --no-obfuscate to keep the real values (for example to debug against your own system). Obfuscation is best effort: still review a capture for personal details before sharing it.
Troubleshooting
- Cannot connect: check host, port, username and password, and run with
-vto see the reason. - A subscription is refused: check that
--topic-prefixmatches your Prefix Topic exactly, or use--topicfor a topic you know you may read. - No messages arrive: trigger activity while it runs (press a switch), and check the prefix.
License
Apache License 2.0. See LICENSE.
Metadata
Release files for pylumencache 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| pylumencache-0.1.0.tar.gz | 67.0 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| pylumencache-0.1.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 103.5 kB
Release files / pylumencache-0.1.0.tar.gz
| Download URL | pylumencache-0.1.0.tar.gz |
|---|---|
| Size | 67.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
7a6e82d7b2e54e922a7c3b530cdcd6d3a5a8f36f5eeec2cb84697137580887a8
|
|
BLAKE2b-256 checksum How to use checksums |
b12b54ec6b823ab845edb83288601f156b93712acd8f06ab7d7536480ef3d493
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 12, 2026.
Transparency logRelease files / pylumencache-0.1.0-py3-none-any.whl
| Download URL | pylumencache-0.1.0-py3-none-any.whl |
|---|---|
| Size | 36.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
9d7f10f0fe5dd6e16f2e5b6f363f94c94797f4841fce48cb7af63a9ad66f192c
|
|
BLAKE2b-256 checksum How to use checksums |
4dc94ad17678bc5b203e63d5453533a471d42b9e0c9142cb5bd7d159b85f2141
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 12, 2026.
Transparency logSecurity for pylumencache 0.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for pylumencache-0.1.0.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 12, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.