@onekeyfe/hd-core 1.2.0-alpha.41 → 1.2.0-alpha.42

package/src/protocols/protocol-v2/resources.ts

@@ -0,0 +1,233 @@
+import { sha256 } from '@noble/hashes/sha256';
+
+import type {
+  IProtocolV2Resource,
+  IProtocolV2ResourceType,
+  IProtocolV2Resources,
+} from '../../types';
+import type { DeviceCommands } from '../../device/DeviceCommands';
+import type { ResourceInventory } from '@onekeyfe/hd-transport';
+
+export const PROTOCOL_V2_RESOURCE_TYPES = [
+  'images',
+  'animation',
+  'wallpaper',
+  'translations',
+  'roobert',
+  'noto',
+] as const satisfies readonly IProtocolV2ResourceType[];
+
+export const PROTOCOL_V2_RESOURCE_DEVICE_PATHS: Readonly<Record<IProtocolV2ResourceType, string>> =
+  {
+    images: 'vol0:/bundles/images/images.okpkg',
+    animation: 'vol0:/bundles/images/animation.okpkg',
+    wallpaper: 'vol0:/bundles/images/wallpaper.okpkg',
+    translations: 'vol0:/bundles/translations/translations.okpkg',
+    roobert: 'vol0:/bundles/font/roobert.okpkg',
+    noto: 'vol0:/bundles/font/noto.okpkg',
+  };
+
+const RESOURCE_TYPE_SET = new Set<string>(PROTOCOL_V2_RESOURCE_TYPES);
+const SHA256_HEX_LENGTH = 64;
+const SHA3_512_HEX_LENGTH = 128;
+export const PROTOCOL_V2_RESOURCE_INVENTORY_TIMEOUT_MS = 5 * 1000;
+
+const RESOURCE_TYPE_BY_DEVICE_VALUE: Readonly<Record<string, IProtocolV2ResourceType>> = {
+  '0': 'images',
+  IMAGES: 'images',
+  '1': 'animation',
+  ANIMATION: 'animation',
+  '2': 'wallpaper',
+  WALLPAPER: 'wallpaper',
+  '3': 'translations',
+  TRANSLATIONS: 'translations',
+  '4': 'roobert',
+  ROOBERT: 'roobert',
+  '5': 'noto',
+  NOTO: 'noto',
+};
+
+export type ProtocolV2ResourceInventoryItem = {
+  type: IProtocolV2ResourceType;
+  size: number;
+  headerHash: string;
+};
+
+export type ProtocolV2ResourceUpdateMode = 'application' | 'bootloader-recovery';
+
+export type ProtocolV2ResourceUpdatePlan = {
+  status: 'valid' | 'outdated' | 'unknown';
+  resources: IProtocolV2Resource[];
+};
+
+/** Normalize the success-only device response into the SDK resource identity shape. */
+export function parseProtocolV2ResourceInventory(
+  value: ResourceInventory | unknown
+): ProtocolV2ResourceInventoryItem[] {
+  const items = (value as { items?: unknown })?.items;
+  if (!Array.isArray(items)) {
+    throw new Error('Invalid Pro2 resource inventory: items must be an array');
+  }
+
+  const inventory = items.map((item, index) => {
+    if (!item || typeof item !== 'object') {
+      throw new Error(`Invalid Pro2 resource inventory item at ${index}`);
+    }
+    const raw = item as { type?: unknown; size?: unknown; header_hash?: unknown };
+    const type = RESOURCE_TYPE_BY_DEVICE_VALUE[String(raw.type).toUpperCase()];
+    if (!type) {
+      throw new Error(`Invalid Pro2 resource inventory type at ${index}`);
+    }
+    if (!Number.isSafeInteger(raw.size) || Number(raw.size) <= 0) {
+      throw new Error(`Invalid Pro2 resource inventory size at ${index}`);
+    }
+    return {
+      type,
+      size: Number(raw.size),
+      headerHash: normalizeHex(raw.header_hash, SHA3_512_HEX_LENGTH, 'inventory headerHash'),
+    };
+  });
+
+  if (new Set(inventory.map(item => item.type)).size !== inventory.length) {
+    throw new Error('Invalid Pro2 resource inventory: duplicate resource type');
+  }
+  return PROTOCOL_V2_RESOURCE_TYPES.flatMap(type => {
+    const item = inventory.find(candidate => candidate.type === type);
+    return item ? [item] : [];
+  });
+}
+
+export async function requestProtocolV2ResourceInventory({
+  commands,
+  timeoutMs = PROTOCOL_V2_RESOURCE_INVENTORY_TIMEOUT_MS,
+}: {
+  commands: DeviceCommands;
+  timeoutMs?: number;
+}): Promise<ProtocolV2ResourceInventoryItem[]> {
+  const { message } = await commands.typedCall(
+    'ResourceInventoryGet',
+    'ResourceInventory',
+    {},
+    { timeoutMs }
+  );
+  return parseProtocolV2ResourceInventory(message);
+}
+
+function normalizeHex(value: unknown, expectedLength: number, field: string): string {
+  if (typeof value !== 'string') {
+    throw new Error(`Invalid Pro2 resource ${field}: expected a hexadecimal string`);
+  }
+  const normalized = value.replace(/^0x/i, '').toLowerCase();
+  if (normalized.length !== expectedLength || !/^[0-9a-f]+$/.test(normalized)) {
+    throw new Error(
+      `Invalid Pro2 resource ${field}: expected ${expectedLength} hexadecimal characters`
+    );
+  }
+  return normalized;
+}
+
+function validateResource(value: unknown, index: number): IProtocolV2Resource {
+  if (!value || typeof value !== 'object') {
+    throw new Error(`Invalid Pro2 resource at stable[${index}]`);
+  }
+  const resource = value as Partial<IProtocolV2Resource>;
+  if (typeof resource.type !== 'string' || !RESOURCE_TYPE_SET.has(resource.type)) {
+    throw new Error(`Invalid Pro2 resource type at stable[${index}]`);
+  }
+  if (typeof resource.url !== 'string' || !resource.url.startsWith('https://')) {
+    throw new Error(`Invalid Pro2 resource url at stable[${index}]`);
+  }
+  if (!Number.isSafeInteger(resource.size) || Number(resource.size) <= 0) {
+    throw new Error(`Invalid Pro2 resource size at stable[${index}]`);
+  }
+  return {
+    type: resource.type,
+    url: resource.url,
+    size: Number(resource.size),
+    fileHash: normalizeHex(resource.fileHash, SHA256_HEX_LENGTH, 'fileHash'),
+    headerHash: normalizeHex(resource.headerHash, SHA3_512_HEX_LENGTH, 'headerHash'),
+  };
+}
+
+/** Validate a complete Pro2 stable resource set from remote configuration. */
+export function parseProtocolV2Resources(value: unknown): IProtocolV2Resources | undefined {
+  if (value === undefined) return undefined;
+  if (
+    !value ||
+    typeof value !== 'object' ||
+    !Array.isArray((value as { stable?: unknown }).stable)
+  ) {
+    throw new Error('Invalid Pro2 resources config: stable must be an array');
+  }
+
+  const stable = (value as { stable: unknown[] }).stable.map(validateResource);
+  const types = new Set(stable.map(resource => resource.type));
+  if (stable.length !== PROTOCOL_V2_RESOURCE_TYPES.length || types.size !== stable.length) {
+    throw new Error('Invalid Pro2 resources config: stable must contain six unique resource types');
+  }
+  for (const type of PROTOCOL_V2_RESOURCE_TYPES) {
+    if (!types.has(type)) {
+      throw new Error(`Invalid Pro2 resources config: stable is missing ${type}`);
+    }
+  }
+  return {
+    stable: PROTOCOL_V2_RESOURCE_TYPES.map(type => {
+      const resource = stable.find(item => item.type === type);
+      if (!resource) {
+        throw new Error(`Invalid Pro2 resources config: stable is missing ${type}`);
+      }
+      return resource;
+    }),
+  };
+}
+
+/** Compare the application inventory or select the full set for bootloader recovery. */
+export function buildProtocolV2ResourceUpdatePlan({
+  resources,
+  inventory,
+  mode,
+  forced = false,
+}: {
+  resources: readonly IProtocolV2Resource[];
+  inventory?: readonly ProtocolV2ResourceInventoryItem[];
+  mode: ProtocolV2ResourceUpdateMode;
+  forced?: boolean;
+}): ProtocolV2ResourceUpdatePlan {
+  if (mode === 'bootloader-recovery' || forced) {
+    return {
+      status: resources.length > 0 ? 'outdated' : 'valid',
+      resources: [...resources],
+    };
+  }
+  if (!inventory) {
+    return { status: 'unknown', resources: [] };
+  }
+
+  const inventoryByType = new Map(inventory.map(item => [item.type, item]));
+  const changedResources = resources.filter(resource => {
+    const current = inventoryByType.get(resource.type);
+    return (
+      !current ||
+      current.size !== resource.size ||
+      current.headerHash.toLowerCase() !== resource.headerHash.toLowerCase()
+    );
+  });
+
+  return {
+    status: changedResources.length === 0 ? 'valid' : 'outdated',
+    resources: changedResources,
+  };
+}
+
+function bytesToHex(bytes: Uint8Array): string {
+  return Array.from(bytes, byte => byte.toString(16).padStart(2, '0')).join('');
+}
+
+/** Verify the complete downloaded file before any device mutation. */
+export function isProtocolV2ResourceFileValid(
+  binary: ArrayBuffer,
+  resource: Pick<IProtocolV2Resource, 'size' | 'fileHash'>
+): boolean {
+  if (binary.byteLength !== resource.size) return false;
+  return bytesToHex(sha256(new Uint8Array(binary))) === resource.fileHash.toLowerCase();
+}

package/src/protocols/protocol-v2/uiInteraction.ts

@@ -1,6 +1,6 @@
 import { UI_REQUEST, createUiMessage } from '../../events';
 
-import type { CoreMessage, ProtocolV2UiCompletion } from '../../events';
+import type { CoreMessage, HardwareUiInteractionMeta, ProtocolV2UiCompletion } from '../../events';
 import type { Device } from '../../device/Device';
 import type { KnownDevice } from '../../types';
 
@@ -28,7 +28,15 @@ type ProtocolV2InteractionMethod = {
   protocolV2UiInteraction?: ProtocolV2InteractionDescriptor;
 };
 
-type InteractionDevice = Pick<Device, 'isProtocolV2' | 'toMessageObject'>;
+type InteractionDevice = Pick<Device, 'isProtocolV2' | 'toMessageObject'> &
+  Partial<
+    Pick<
+      Device,
+      | 'createProtocolV2UiPhaseMetadata'
+      | 'finishProtocolV2UiInteraction'
+      | 'hasOpenProtocolV2UiInteraction'
+    >
+  >;
 type PostMessage = (message: CoreMessage) => void;
 
 export const isProtocolV2UiEnabled = (method: { protocolV2UiMode?: 'auto' | 'none' }) =>
@@ -156,12 +164,17 @@ export class ProtocolV2UiInteractionCoordinator {
     this.methodInteraction = interaction;
     if (!interaction) return;
     const { request, ...metadata } = interaction;
+    const interactionMeta = this.device.createProtocolV2UiPhaseMetadata?.(
+      request === 'pin' ? 'pin' : 'button',
+      'start'
+    );
 
     this.emit(
       request === 'pin' ? UI_REQUEST.REQUEST_PIN : UI_REQUEST.REQUEST_BUTTON,
       {
         device: this.device.toMessageObject() as KnownDevice,
         ...metadata,
+        ...(interactionMeta ? { interaction: interactionMeta } : {}),
       },
       `method:${request}:${interaction.reason}:${interaction.page ?? ''}:${
         interaction.operation ?? ''
@@ -169,7 +182,8 @@ export class ProtocolV2UiInteractionCoordinator {
     );
   }
 
-  enterUnlockInteraction(method?: string) {
+  enterUnlockInteraction(method?: string): HardwareUiInteractionMeta | undefined {
+    const interaction = this.device.createProtocolV2UiPhaseMetadata?.('pin', 'start');
     this.emit(
       UI_REQUEST.REQUEST_PIN,
       {
@@ -178,9 +192,11 @@ export class ProtocolV2UiInteractionCoordinator {
         reason: 'device-locked',
         deviceOnly: true,
         method,
+        ...(interaction ? { interaction } : {}),
       },
       `unlock:${method ?? ''}`
     );
+    return interaction;
   }
 
   resumeMethodInteraction() {
@@ -188,9 +204,19 @@ export class ProtocolV2UiInteractionCoordinator {
   }
 
   close() {
-    if (!this.device.isProtocolV2() || !this.opened || this.closed) return;
+    if (
+      !this.device.isProtocolV2() ||
+      (!this.opened && !this.device.hasOpenProtocolV2UiInteraction?.()) ||
+      this.closed
+    )
+      return;
     this.closed = true;
-    this.postMessage(createUiMessage(UI_REQUEST.CLOSE_UI_WINDOW));
+    const interaction = this.device.finishProtocolV2UiInteraction?.();
+    this.postMessage(
+      interaction
+        ? createUiMessage(UI_REQUEST.CLOSE_UI_WINDOW, interaction)
+        : createUiMessage(UI_REQUEST.CLOSE_UI_WINDOW)
+    );
   }
 
   private emit(

package/src/protocols/protocol-v2/unlockPolicy.ts

@@ -1,105 +1 @@
-export type UnlockPolicy = 'none' | 'unlock-before-run' | 'retry-on-locked';
-
-/**
- * Protocol V2 methods that are safe to replay after a locked response.
- *
- * Keep this as an exact allowlist. Name-pattern matching can silently make a new
- * state-changing method replayable when it happens to share a suffix.
- */
-export const PROTOCOL_V2_RETRY_ON_LOCKED_METHODS = [
-  'cipherKeyValue',
-  'allNetworkGetAddress',
-  'allNetworkGetAddressByLoop',
-  'btcGetAddress',
-  'btcGetPublicKey',
-  'btcSignMessage',
-  'btcSignPsbt',
-  'btcSignTransaction',
-  'btcVerifyMessage',
-  'confluxGetAddress',
-  'confluxSignMessage',
-  'confluxSignTransaction',
-  'evmGetAddress',
-  'evmGetPublicKey',
-  'evmSignMessage',
-  'evmSignTransaction',
-  'evmSignTypedData',
-  'evmVerifyMessage',
-  'starcoinGetAddress',
-  'starcoinGetPublicKey',
-  'starcoinSignMessage',
-  'starcoinSignTransaction',
-  'starcoinVerifyMessage',
-  'nemGetAddress',
-  'nemSignTransaction',
-  'solGetAddress',
-  'solSignTransaction',
-  'solSignOffchainMessage',
-  'solSignMessage',
-  'stellarGetAddress',
-  'stellarSignTransaction',
-  'tronGetAddress',
-  'tronSignMessage',
-  'tronSignTransaction',
-  'nearGetAddress',
-  'nearSignTransaction',
-  'aptosGetAddress',
-  'aptosGetPublicKey',
-  'aptosSignTransaction',
-  'aptosSignMessage',
-  'aptosSignInMessage',
-  'algoGetAddress',
-  'algoSignTransaction',
-  'cosmosGetAddress',
-  'cosmosGetPublicKey',
-  'cosmosSignTransaction',
-  'xrpGetAddress',
-  'xrpSignTransaction',
-  'suiGetAddress',
-  'suiGetPublicKey',
-  'suiSignMessage',
-  'suiSignTransaction',
-  'cardanoGetAddress',
-  'cardanoGetPublicKey',
-  'cardanoSignTransaction',
-  'cardanoSignMessage',
-  'filecoinGetAddress',
-  'filecoinSignTransaction',
-  'polkadotGetAddress',
-  'polkadotSignTransaction',
-  'kaspaGetAddress',
-  'kaspaSignTransaction',
-  'nexaGetAddress',
-  'nexaSignTransaction',
-  'nostrGetPublicKey',
-  'nostrSignEvent',
-  'nostrEncryptMessage',
-  'nostrDecryptMessage',
-  'nostrSignSchnorr',
-  'lnurlAuth',
-  'nervosGetAddress',
-  'nervosSignTransaction',
-  'dnxGetAddress',
-  'dnxSignTransaction',
-  'tonGetAddress',
-  'tonSignMessage',
-  'tonSignProof',
-  'tonSignData',
-  'scdoGetAddress',
-  'scdoSignTransaction',
-  'scdoSignMessage',
-  'alephiumGetAddress',
-  'alephiumSignTransaction',
-  'alephiumSignMessage',
-  'benfenGetAddress',
-  'benfenGetPublicKey',
-  'benfenSignMessage',
-  'benfenSignTransaction',
-  'neoGetAddress',
-  'neoSignTransaction',
-] as const;
-
-const retryOnLockedMethods = new Set<string>(PROTOCOL_V2_RETRY_ON_LOCKED_METHODS);
-
-export const getProtocolV2UnlockPolicy = (methodName: string): UnlockPolicy =>
-  retryOnLockedMethods.has(methodName) ? 'retry-on-locked' : 'none';
+export type UnlockPolicy = 'none' | 'unlock-before-run';

package/src/protocols/protocol-v2/unlockPolicyRunner.ts

@@ -0,0 +1,117 @@
+import { ERRORS, HardwareErrorCode } from '@onekeyfe/hd-shared';
+
+import { LoggerNames, getLogger } from '../../utils';
+import { isProtocolV2UiEnabled, resolveProtocolV2UiInteraction } from './uiInteraction';
+import { refreshProtocolV2DeviceStatus } from './walletSession';
+
+import type { BaseMethod } from '../../api/BaseMethod';
+import type { Device } from '../../device/Device';
+import type { HardwareUiInteractionMeta } from '../../events';
+import type { ProtocolV2UiInteractionCoordinator } from './uiInteraction';
+
+const Log = getLogger(LoggerNames.Core);
+
+export type ProtocolV2UnlockContext = {
+  preflightCompleted: boolean;
+};
+
+export const createProtocolV2UnlockContext = (): ProtocolV2UnlockContext => ({
+  preflightCompleted: false,
+});
+
+type RunnableMethod = Pick<
+  BaseMethod,
+  | 'run'
+  | 'unlockPolicy'
+  | 'useDevicePassphraseState'
+  | 'protocolV2UiInteraction'
+  | 'protocolV2UiMode'
+  | 'params'
+  | 'payload'
+> & {
+  name?: string;
+  protocolV2UnlockContext?: ProtocolV2UnlockContext;
+};
+
+type UiInteractionCoordinator = Pick<
+  ProtocolV2UiInteractionCoordinator,
+  'enterMethodInteraction' | 'enterUnlockInteraction'
+>;
+
+type RunMethodWithUnlockPolicyOptions<T> = {
+  context?: ProtocolV2UnlockContext;
+  uiCoordinator?: UiInteractionCoordinator;
+  afterStatusBeforeUnlock?: () => void | Promise<void>;
+  prepare?: () => Promise<void>;
+  run?: () => Promise<T>;
+};
+
+export async function runMethodWithUnlockPolicy<T = unknown>(
+  method: RunnableMethod,
+  device: Device,
+  options: RunMethodWithUnlockPolicyOptions<T> = {}
+): Promise<T> {
+  const {
+    context = createProtocolV2UnlockContext(),
+    uiCoordinator,
+    afterStatusBeforeUnlock,
+    prepare,
+    run: configuredRun,
+  } = options;
+  const run = configuredRun ?? (() => method.run() as Promise<T>);
+  method.protocolV2UnlockContext = context;
+
+  const shouldEmitUi = isProtocolV2UiEnabled(method);
+  const shouldCoordinateUi = shouldEmitUi && uiCoordinator !== undefined;
+  const requiresPreUnlock =
+    device.isProtocolV2() &&
+    (method.useDevicePassphraseState || method.unlockPolicy === 'unlock-before-run') &&
+    !device.isBootloader?.() &&
+    !device.isRomloader?.();
+
+  if (requiresPreUnlock && !context.preflightCompleted) {
+    const status = await refreshProtocolV2DeviceStatus(device);
+    if (typeof status?.unlocked !== 'boolean') {
+      throw ERRORS.TypedError(
+        HardwareErrorCode.RuntimeError,
+        'Protocol V2 DeviceStatus did not report an explicit unlock state.'
+      );
+    }
+
+    await afterStatusBeforeUnlock?.();
+
+    if (!status.unlocked) {
+      const unlockInteraction: HardwareUiInteractionMeta | undefined = shouldCoordinateUi
+        ? uiCoordinator.enterUnlockInteraction(method.name)
+        : undefined;
+      const unlockedStatus = await device.unlockDevice(
+        undefined,
+        shouldCoordinateUi
+          ? { emitUiEvent: false, interaction: unlockInteraction }
+          : {
+              source: 'unlock-coordinator',
+              reason: 'device-locked',
+              deviceOnly: true,
+              method: method.name,
+            }
+      );
+      if (unlockedStatus?.unlocked !== true) {
+        throw ERRORS.TypedError(
+          HardwareErrorCode.RuntimeError,
+          'Protocol V2 device remained locked after the unlock flow.'
+        );
+      }
+      Log.debug('Protocol V2 pre-unlock completed', { method: method.name });
+    }
+
+    context.preflightCompleted = true;
+  }
+
+  await prepare?.();
+
+  if (shouldCoordinateUi) {
+    uiCoordinator.enterMethodInteraction(resolveProtocolV2UiInteraction(method));
+  }
+
+  return run();
+}