@onekeyfe/hd-core 1.2.0-alpha.46 → 1.2.0-alpha.48

package/__tests__/check-all-firmware-release-protocol-v2.test.ts

@@ -5,6 +5,7 @@ import CheckAllFirmwareRelease, {
 } from '../src/api/CheckAllFirmwareRelease';
 import { DataManager } from '../src/data-manager';
 import { createCoreApi } from '../src/inject';
+import { PROTOCOL_V2_RESOURCE_DEVICE_PATHS } from '../src/protocols/protocol-v2/resources';
 
 import type { CoreApi } from '../src/types/api';
 import type { DeviceStateVersions, IFirmwareReleaseInfo } from '../src/types';
@@ -72,7 +73,74 @@ const release: IFirmwareReleaseInfo = {
   ],
 };
 
+const stableResources = ['images', 'animation', 'wallpaper', 'translations', 'roobert', 'noto'].map(
+  (type, index) => ({
+    type,
+    url: `https://example.com/${type}.okpkg`,
+    size: 0x52a0 + index + 1,
+    fileHash: 'a'.repeat(64),
+    headerHash: index.toString(16).padStart(128, '0'),
+  })
+);
+
+const createFilesystemTypedCall = (missingAll = false) => {
+  const resourceByPath = new Map(
+    stableResources.map(resource => [
+      PROTOCOL_V2_RESOURCE_DEVICE_PATHS[
+        resource.type as keyof typeof PROTOCOL_V2_RESOURCE_DEVICE_PATHS
+      ],
+      resource,
+    ])
+  );
+  return jest.fn((requestType: string, _responseType: string, payload: Record<string, any>) => {
+    if (requestType === 'ResourceInventoryGet') {
+      throw new Error('ResourceInventoryGet is unavailable on released firmware');
+    }
+    if (requestType === 'FilesystemPathInfoQuery') {
+      const resource = resourceByPath.get(payload.path);
+      return {
+        message: {
+          exist: Boolean(resource) && !missingAll,
+          directory: false,
+          size: missingAll ? 0 : resource?.size,
+        },
+      };
+    }
+    if (requestType === 'FilesystemFileRead') {
+      const resource = resourceByPath.get(payload.file.path);
+      if (!resource || missingAll) throw new Error('missing resource');
+      const header = new Uint8Array(0x52a0);
+      const view = new DataView(header.buffer);
+      'OKPP'.split('').forEach((char, index) => {
+        header[index] = char.charCodeAt(0);
+      });
+      'RESC'.split('').forEach((char, index) => {
+        header[0x08 + index] = char.charCodeAt(0);
+      });
+      view.setUint32(0x0c, header.byteLength, true);
+      for (let index = 0; index < resource.headerHash.length / 2; index++) {
+        header[0x240 + index] = Number.parseInt(
+          resource.headerHash.slice(index * 2, index * 2 + 2),
+          16
+        );
+      }
+      const offset = Number(payload.file.offset);
+      const chunkLength = Number(payload.chunk_len);
+      return {
+        message: {
+          data: header.slice(offset, offset + chunkLength),
+        },
+      };
+    }
+    throw new Error(`Unexpected request: ${requestType}`);
+  });
+};
+
 describe('checkAllFirmwareRelease Protocol V2 support', () => {
+  afterEach(() => {
+    jest.restoreAllMocks();
+  });
+
   test('builds ordered firmwareUpdateV4 targets from recommended component versions', () => {
     const result = buildProtocolV2FirmwareRelease({
       currentVersions,
@@ -240,6 +308,7 @@ describe('checkAllFirmwareRelease Protocol V2 support', () => {
       status: { mode: 'normal' },
       versions: currentVersions,
     });
+    const typedCall = createFilesystemTypedCall(true);
     method.device = {
       isProtocolV2: () => true,
       features: {
@@ -247,20 +316,10 @@ describe('checkAllFirmwareRelease Protocol V2 support', () => {
         firmwareVersion: '1.0.0',
       },
       getDeviceState,
-      getCommands: () => ({ typedCall: jest.fn().mockResolvedValue({ message: { items: [] } }) }),
+      getCommands: () => ({ typedCall }),
     } as unknown as CheckAllFirmwareRelease['device'];
     jest.spyOn(DataManager, 'getFirmwareLatestRelease').mockReturnValue(release);
-    jest.spyOn(DataManager, 'getProtocolV2Resources').mockReturnValue(
-      ['images', 'animation', 'wallpaper', 'translations', 'roobert', 'noto'].map(
-        (type, index) => ({
-          type,
-          url: `https://example.com/${type}.okpkg`,
-          size: index + 1,
-          fileHash: 'a'.repeat(64),
-          headerHash: index.toString(16).padStart(128, '0'),
-        })
-      ) as any
-    );
+    jest.spyOn(DataManager, 'getProtocolV2Resources').mockReturnValue(stableResources as any);
 
     await expect(method.run()).resolves.toMatchObject({
       protocol: 'V2',
@@ -272,9 +331,45 @@ describe('checkAllFirmwareRelease Protocol V2 support', () => {
         status: 'required',
       },
     });
+    expect(typedCall.mock.calls.some(call => call[0] === 'ResourceInventoryGet')).toBe(false);
     expect(method.getSupportedProtocols()).toEqual(['V1', 'V2']);
   });
 
+  test.each(['bootloader', 'romloader'] as const)(
+    'uses filesystem inventory in %s mode instead of forcing all resources',
+    async mode => {
+      const method = new CheckAllFirmwareRelease({
+        id: 1,
+        payload: {
+          method: 'checkAllFirmwareRelease',
+          firmwareType: EFirmwareType.Universal,
+        },
+      });
+      method.init();
+      const typedCall = createFilesystemTypedCall();
+      method.device = {
+        isProtocolV2: () => true,
+        features: { deviceType: 'pro2', firmwareVersion: '1.0.0' },
+        getDeviceState: jest.fn().mockResolvedValue({
+          identity: { deviceType: 'pro2', firmwareType: EFirmwareType.Universal },
+          status: { mode },
+          versions: currentVersions,
+        }),
+        getCommands: () => ({ typedCall }),
+      } as unknown as CheckAllFirmwareRelease['device'];
+      jest.spyOn(DataManager, 'getFirmwareLatestRelease').mockReturnValue(release);
+      jest.spyOn(DataManager, 'getProtocolV2Resources').mockReturnValue(stableResources as any);
+
+      await expect(method.run()).resolves.toMatchObject({
+        protocol: 'V2',
+        resourceStatus: 'valid',
+        targetsToUpdate: ['boot', 'app_v1'],
+      });
+      expect(typedCall.mock.calls.some(call => call[0] === 'ResourceInventoryGet')).toBe(false);
+      expect(typedCall.mock.calls.some(call => call[0] === 'FilesystemFileRead')).toBe(true);
+    }
+  );
+
   test('continues forwarding the existing public method', async () => {
     const call = jest.fn().mockResolvedValue({ success: true, payload: {} });
     const api = createCoreApi(call as CoreApi['call']) as CoreApi;

package/__tests__/protocol-v2-resources.test.ts

@@ -7,12 +7,16 @@ import {
   PROTOCOL_V2_RESOURCE_TYPES,
   buildProtocolV2ResourceUpdatePlan,
   isProtocolV2ResourceFileValid,
-  parseProtocolV2ResourceInventory,
   parseProtocolV2Resources,
-  requestProtocolV2ResourceInventory,
+  readProtocolV2ResourceInventory,
 } from '../src/protocols/protocol-v2/resources';
 
-import type { ConnectSettings, IProtocolV2Resource, RemoteConfigResponse } from '../src/types';
+import type {
+  ConnectSettings,
+  IProtocolV2BootResources,
+  IProtocolV2Resource,
+  RemoteConfigResponse,
+} from '../src/types';
 
 jest.mock('axios');
 jest.mock('../src/data/config', () => ({
@@ -23,6 +27,24 @@ jest.mock('../src/data/config', () => ({
 const bytesToHex = (bytes: Uint8Array) =>
   Array.from(bytes, byte => byte.toString(16).padStart(2, '0')).join('');
 
+const PROTOCOL_V2_OKPP_HEADER_SIZE = 0x52a0;
+
+const createResourceHeader = (headerHash: string) => {
+  const header = new Uint8Array(PROTOCOL_V2_OKPP_HEADER_SIZE);
+  const view = new DataView(header.buffer);
+  'OKPP'.split('').forEach((char, index) => {
+    header[index] = char.charCodeAt(0);
+  });
+  'RESC'.split('').forEach((char, index) => {
+    header[0x08 + index] = char.charCodeAt(0);
+  });
+  view.setUint32(0x0c, header.byteLength, true);
+  for (let index = 0; index < headerHash.length / 2; index++) {
+    header[0x240 + index] = Number.parseInt(headerHash.slice(index * 2, index * 2 + 2), 16);
+  }
+  return header;
+};
+
 const resources: IProtocolV2Resource[] = PROTOCOL_V2_RESOURCE_TYPES.map((type, index) => ({
   type,
   url: `https://example.com/${type}.okpkg`,
@@ -31,6 +53,16 @@ const resources: IProtocolV2Resource[] = PROTOCOL_V2_RESOURCE_TYPES.map((type, i
   headerHash: index.toString(16).padStart(128, '0'),
 }));
 
+const bootResources: IProtocolV2BootResources = {
+  required: false,
+  target: 'CRATE',
+  url: 'https://example.com/boot-resources.crate.okpkg',
+  size: 1234,
+  fileHash: 'ab'.repeat(32),
+  payloadHash: 'cd'.repeat(64),
+  headerHash: 'ef'.repeat(64),
+};
+
 const createSettings = (configFetcher: ConnectSettings['configFetcher']): ConnectSettings =>
   ({
     env: 'node',
@@ -47,7 +79,7 @@ const createRemoteConfig = (): RemoteConfigResponse =>
     mini: { firmware: [], ble: [] },
     touch: { firmware: [], ble: [] },
     pro: { firmware: [], ble: [] },
-    pro2: { firmware: [], ble: [], resources: { stable: resources } },
+    pro2: { firmware: [], ble: [], resources: { stable: resources, boot: bootResources } },
     bridge: {},
   } as unknown as RemoteConfigResponse);
 
@@ -58,9 +90,13 @@ describe('Pro2 resource configuration', () => {
   });
 
   test('accepts exactly six resources and normalizes their deterministic order', () => {
-    const parsed = parseProtocolV2Resources({ stable: [...resources].reverse() });
+    const parsed = parseProtocolV2Resources({
+      stable: [...resources].reverse(),
+      boot: bootResources,
+    });
 
     expect(parsed?.stable.map(item => item.type)).toEqual(PROTOCOL_V2_RESOURCE_TYPES);
+    expect(parsed?.boot).toEqual(bootResources);
     expect(PROTOCOL_V2_RESOURCE_DEVICE_PATHS.translations).toBe(
       'vol0:/bundles/translations/translations.okpkg'
     );
@@ -82,6 +118,21 @@ describe('Pro2 resource configuration', () => {
     ).toThrow('headerHash');
   });
 
+  test('requires boot resources to remain optional and use a CRATE package', () => {
+    expect(() =>
+      parseProtocolV2Resources({
+        stable: resources,
+        boot: { ...bootResources, required: true },
+      })
+    ).toThrow('required flag');
+    expect(() =>
+      parseProtocolV2Resources({
+        stable: resources,
+        boot: { ...bootResources, target: 'RESC' },
+      })
+    ).toThrow('expected CRATE');
+  });
+
   test('downloads nothing when all resource identities match', () => {
     const inventory = resources.map(({ type, size, headerHash }) => ({ type, size, headerHash }));
 
@@ -90,50 +141,62 @@ describe('Pro2 resource configuration', () => {
     ).toEqual({ status: 'valid', resources: [] });
   });
 
-  test('normalizes the success-only ResourceInventory RPC response', async () => {
-    const items = resources.slice(0, 2).map((resource, index) => ({
-      type: index === 0 ? 'IMAGES' : 1,
-      size: resource.size,
-      header_hash: resource.headerHash,
+  test('builds inventory from existing filesystem calls without ResourceInventoryGet', async () => {
+    const installedResources = resources.map((resource, index) => ({
+      ...resource,
+      size: PROTOCOL_V2_OKPP_HEADER_SIZE + index + 1,
     }));
-    const typedCall = jest.fn().mockResolvedValue({ message: { items } });
-
-    await expect(
-      requestProtocolV2ResourceInventory({ commands: { typedCall } as any })
-    ).resolves.toEqual([
-      {
-        type: 'images',
-        size: resources[0].size,
-        headerHash: resources[0].headerHash,
-      },
-      {
-        type: 'animation',
-        size: resources[1].size,
-        headerHash: resources[1].headerHash,
-      },
-    ]);
-    expect(typedCall).toHaveBeenCalledWith(
-      'ResourceInventoryGet',
-      'ResourceInventory',
-      {},
-      { timeoutMs: 5000 }
+    const resourceByPath = new Map(
+      installedResources.map(resource => [
+        PROTOCOL_V2_RESOURCE_DEVICE_PATHS[resource.type],
+        resource,
+      ])
+    );
+    const typedCall = jest.fn(
+      (requestType: string, _responseType: string, payload: Record<string, any>) => {
+        if (requestType === 'ResourceInventoryGet') {
+          throw new Error('ResourceInventoryGet is unavailable on released firmware');
+        }
+        if (requestType === 'FilesystemPathInfoQuery') {
+          const resource = resourceByPath.get(payload.path);
+          return {
+            message: {
+              exist: Boolean(resource),
+              directory: false,
+              size: resource?.size ?? 0,
+            },
+          };
+        }
+        if (requestType === 'FilesystemFileRead') {
+          const resource = resourceByPath.get(payload.file.path);
+          if (!resource) throw new Error('missing resource');
+          const header = createResourceHeader(resource.headerHash);
+          const offset = Number(payload.file.offset);
+          const chunkLength = Number(payload.chunk_len);
+          return {
+            message: {
+              data: header.slice(offset, offset + chunkLength),
+            },
+          };
+        }
+        throw new Error(`Unexpected request: ${requestType}`);
+      }
     );
-  });
 
-  test('rejects malformed or duplicate inventory identities', () => {
-    expect(() =>
-      parseProtocolV2ResourceInventory({
-        items: [
-          { type: 'IMAGES', size: 1, header_hash: 'a'.repeat(128) },
-          { type: 'IMAGES', size: 1, header_hash: 'b'.repeat(128) },
-        ],
-      })
-    ).toThrow('duplicate resource type');
-    expect(() =>
-      parseProtocolV2ResourceInventory({
-        items: [{ type: 'IMAGES', size: 1, header_hash: 'bad' }],
+    await expect(
+      readProtocolV2ResourceInventory({
+        commands: { typedCall },
+        resources: installedResources,
+        chunkSize: 4000,
       })
-    ).toThrow('inventory headerHash');
+    ).resolves.toEqual(
+      installedResources.map(({ type, size, headerHash }) => ({ type, size, headerHash }))
+    );
+    expect(typedCall.mock.calls.some(call => call[0] === 'ResourceInventoryGet')).toBe(false);
+    expect(typedCall.mock.calls.filter(call => call[0] === 'FilesystemPathInfoQuery')).toHaveLength(
+      6
+    );
+    expect(typedCall.mock.calls.some(call => call[0] === 'FilesystemFileRead')).toBe(true);
   });
 
   test('selects only the changed or missing resource in application mode', () => {
@@ -165,6 +228,22 @@ describe('Pro2 resource configuration', () => {
     ).toHaveLength(6);
   });
 
+  test('uses a filesystem inventory for incremental recovery mode updates', () => {
+    const inventory = resources.slice(1).map(({ type, size, headerHash }) => ({
+      type,
+      size,
+      headerHash,
+    }));
+
+    expect(
+      buildProtocolV2ResourceUpdatePlan({
+        resources,
+        inventory,
+        mode: 'bootloader-recovery',
+      }).resources.map(resource => resource.type)
+    ).toEqual(['images']);
+  });
+
   test('verifies both full file size and SHA-256 before transfer', () => {
     const bytes = new Uint8Array([1, 2, 3]);
     const binary = bytes.buffer;
@@ -186,6 +265,7 @@ describe('Pro2 resource configuration', () => {
       expect.stringMatching(/^https:\/\/data\.onekey\.so\/pre-config\.json\?noCache=/)
     );
     expect(DataManager.getProtocolV2Resources()).toEqual(resources);
+    expect(DataManager.getProtocolV2BootResources()).toEqual(bootResources);
   });
 
   test('does not advance the cache timestamp when refresh fails', async () => {

package/__tests__/protocol-v2.test.ts

@@ -5,6 +5,7 @@ import {
   DeviceSettingsPage,
   DeviceType,
 } from '@onekeyfe/hd-transport';
+import { sha256 } from '@noble/hashes/sha256';
 
 import * as firmwareBinaryApi from '../src/api/firmware/getBinary';
 import DnxGetAddress from '../src/api/dynex/DnxGetAddress';
@@ -75,6 +76,7 @@ import {
   requestProtocolV2ProtocolInfo,
   supportsProtocolV2Message,
 } from '../src/protocols/protocol-v2/features';
+import { PROTOCOL_V2_RESOURCE_DEVICE_PATHS } from '../src/protocols/protocol-v2/resources';
 import {
   getProtocolV2WalletSession,
   refreshProtocolV2DeviceStatus,
@@ -5788,6 +5790,64 @@ describe('Protocol V2 firmware update method', () => {
 });
 
 describe('Protocol V2 firmware reconnect identity', () => {
+  const createResourceFilesystemTypedCall = (
+    stable: Array<{ type: string; size: number; headerHash: string }>,
+    missingTypes: string[] = []
+  ) => {
+    const missing = new Set(missingTypes);
+    const resourceByPath = new Map(
+      stable.map(resource => [
+        PROTOCOL_V2_RESOURCE_DEVICE_PATHS[
+          resource.type as keyof typeof PROTOCOL_V2_RESOURCE_DEVICE_PATHS
+        ],
+        resource,
+      ])
+    );
+    return jest.fn((requestType: string, _responseType: string, payload: Record<string, any>) => {
+      if (requestType === 'ResourceInventoryGet') {
+        throw new Error('ResourceInventoryGet is unavailable on released firmware');
+      }
+      if (requestType === 'FilesystemPathInfoQuery') {
+        const resource = resourceByPath.get(payload.path);
+        const exists = Boolean(resource && !missing.has(resource.type));
+        return {
+          message: {
+            exist: exists,
+            directory: false,
+            size: exists ? resource?.size : 0,
+          },
+        };
+      }
+      if (requestType === 'FilesystemFileRead') {
+        const resource = resourceByPath.get(payload.file.path);
+        if (!resource || missing.has(resource.type)) throw new Error('missing resource');
+        const header = new Uint8Array(0x52a0);
+        const view = new DataView(header.buffer);
+        'OKPP'.split('').forEach((char, index) => {
+          header[index] = char.charCodeAt(0);
+        });
+        'RESC'.split('').forEach((char, index) => {
+          header[0x08 + index] = char.charCodeAt(0);
+        });
+        view.setUint32(0x0c, header.byteLength, true);
+        for (let index = 0; index < resource.headerHash.length / 2; index++) {
+          header[0x240 + index] = Number.parseInt(
+            resource.headerHash.slice(index * 2, index * 2 + 2),
+            16
+          );
+        }
+        const offset = Number(payload.file.offset);
+        const chunkLength = Number(payload.chunk_len);
+        return {
+          message: {
+            data: header.slice(offset, offset + chunkLength),
+          },
+        };
+      }
+      throw new Error(`Unexpected request: ${requestType}`);
+    });
+  };
+
   test('rejects a different physical serial before firmware transfer resumes', () => {
     expect(() => assertProtocolV2ReconnectIdentity('expected-serial', 'other-serial')).toThrow(
       'identity mismatch'
@@ -5850,7 +5910,7 @@ describe('Protocol V2 firmware reconnect identity', () => {
     expect((method as any).protocolV2ExpectedSerialNumber).toBeUndefined();
   });
 
-  test('uses ResourceInventory instead of host-side FileRead for resource comparison', async () => {
+  test('uses filesystem reads instead of ResourceInventoryGet for resource comparison', async () => {
     const method = new FirmwareUpdateV4({
       id: 1,
       payload: {
@@ -5864,20 +5924,12 @@ describe('Protocol V2 firmware reconnect identity', () => {
       (type, index) => ({
         type,
         url: `https://example.com/${type}.okpkg`,
-        size: index + 1,
+        size: 0x52a0 + index + 1,
         fileHash: 'a'.repeat(64),
         headerHash: index.toString(16).padStart(128, '0'),
       })
     );
-    const typedCall = jest.fn().mockResolvedValue({
-      message: {
-        items: stable.map(item => ({
-          type: item.type.toUpperCase(),
-          size: item.size,
-          header_hash: item.headerHash,
-        })),
-      },
-    });
+    const typedCall = createResourceFilesystemTypedCall(stable);
     (method as any).device = stubDevice({
       getCommands: () => ({ typedCall }),
     });
@@ -5887,13 +5939,8 @@ describe('Protocol V2 firmware reconnect identity', () => {
     (method as any).downloadProtocolV2Resource = jest.fn();
 
     await expect((method as any).prepareProtocolV2ResourceBundles(false)).resolves.toEqual([]);
-    expect(typedCall).toHaveBeenCalledWith(
-      'ResourceInventoryGet',
-      'ResourceInventory',
-      {},
-      { timeoutMs: 5000 }
-    );
-    expect(typedCall.mock.calls.some(call => call[0] === 'FilesystemFileRead')).toBe(false);
+    expect(typedCall.mock.calls.some(call => call[0] === 'ResourceInventoryGet')).toBe(false);
+    expect(typedCall.mock.calls.some(call => call[0] === 'FilesystemFileRead')).toBe(true);
     expect((method as any).downloadProtocolV2Resource).not.toHaveBeenCalled();
     resourcesSpy.mockRestore();
   });
@@ -5908,20 +5955,12 @@ describe('Protocol V2 firmware reconnect identity', () => {
       (type, index) => ({
         type,
         url: `https://example.com/${type}.okpkg`,
-        size: index + 1,
+        size: 0x52a0 + index + 1,
         fileHash: 'a'.repeat(64),
         headerHash: index.toString(16).padStart(128, '0'),
       })
     );
-    const typedCall = jest.fn().mockResolvedValue({
-      message: {
-        items: stable.slice(1).map(item => ({
-          type: item.type.toUpperCase(),
-          size: item.size,
-          header_hash: item.headerHash,
-        })),
-      },
-    });
+    const typedCall = createResourceFilesystemTypedCall(stable, ['images']);
     (method as any).device = stubDevice({ getCommands: () => ({ typedCall }) });
     const resourcesSpy = jest
       .spyOn(DataManager, 'getProtocolV2Resources')
@@ -5941,7 +5980,7 @@ describe('Protocol V2 firmware reconnect identity', () => {
     resourcesSpy.mockRestore();
   });
 
-  test('downloads all six resources in Bootloader recovery without inventory RPC', async () => {
+  test('uses filesystem inventory for incremental Bootloader recovery', async () => {
     const method = new FirmwareUpdateV4({
       id: 1,
       payload: { method: 'firmwareUpdateV4', platform: 'web', targetsToUpdate: ['resource'] },
@@ -5951,12 +5990,12 @@ describe('Protocol V2 firmware reconnect identity', () => {
       (type, index) => ({
         type,
         url: `https://example.com/${type}.okpkg`,
-        size: index + 1,
+        size: 0x52a0 + index + 1,
         fileHash: 'a'.repeat(64),
         headerHash: index.toString(16).padStart(128, '0'),
       })
     );
-    const typedCall = jest.fn();
+    const typedCall = createResourceFilesystemTypedCall(stable, ['images']);
     (method as any).device = stubDevice({ getCommands: () => ({ typedCall }) });
     const resourcesSpy = jest
       .spyOn(DataManager, 'getProtocolV2Resources')
@@ -5971,11 +6010,106 @@ describe('Protocol V2 firmware reconnect identity', () => {
 
     const bundles = await (method as any).prepareProtocolV2ResourceBundles(true);
 
-    expect(bundles).toHaveLength(6);
-    expect(typedCall).not.toHaveBeenCalled();
-    expect((method as any).downloadProtocolV2Resource).toHaveBeenCalledTimes(6);
+    expect(bundles).toHaveLength(1);
+    expect(typedCall.mock.calls.some(call => call[0] === 'ResourceInventoryGet')).toBe(false);
+    expect(typedCall.mock.calls.some(call => call[0] === 'FilesystemPathInfoQuery')).toBe(true);
+    expect((method as any).downloadProtocolV2Resource).toHaveBeenCalledWith(stable[0]);
     resourcesSpy.mockRestore();
   });
+
+  const buildBootResourcesHeader = ({
+    type = 'CRAT',
+    payloadHash = 'ab'.repeat(64),
+    headerHash = 'cd'.repeat(64),
+  }: {
+    type?: string;
+    payloadHash?: string;
+    headerHash?: string;
+  } = {}) => {
+    const header = new Uint8Array(0x52a0);
+    const view = new DataView(header.buffer);
+    'OKPP'.split('').forEach((char, index) => {
+      header[index] = char.charCodeAt(0);
+    });
+    type.split('').forEach((char, index) => {
+      header[0x08 + index] = char.charCodeAt(0);
+    });
+    view.setUint32(0x0c, header.byteLength, true);
+    const writeHex = (offset: number, hex: string) => {
+      for (let index = 0; index < hex.length / 2; index++) {
+        header[offset + index] = Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16);
+      }
+    };
+    writeHex(0x200, payloadHash);
+    writeHex(0x240, headerHash);
+    return header;
+  };
+
+  test('does not resolve boot resources unless the optional target is selected', async () => {
+    const method = new FirmwareUpdateV4({
+      id: 1,
+      payload: { method: 'firmwareUpdateV4', platform: 'web' },
+    });
+    method.init();
+    const configSpy = jest.spyOn(DataManager, 'getProtocolV2BootResources');
+    const downloadSpy = jest.spyOn(firmwareBinaryApi, 'getSysResourceBinary');
+
+    await expect((method as any).prepareProtocolV2BootResources()).resolves.toBeUndefined();
+
+    expect(configSpy).not.toHaveBeenCalled();
+    expect(downloadSpy).not.toHaveBeenCalled();
+  });
+
+  test('downloads and maps the selected boot resources CRATE target', async () => {
+    const payloadHash = 'ab'.repeat(64);
+    const headerHash = 'cd'.repeat(64);
+    const bytes = buildBootResourcesHeader({ payloadHash, headerHash });
+    const binary = bytes.buffer as ArrayBuffer;
+    const fileHash = Array.from(sha256(bytes), byte => byte.toString(16).padStart(2, '0')).join('');
+    const resource = {
+      required: false as const,
+      target: 'CRATE' as const,
+      url: 'https://example.com/boot-resources.crate.okpkg',
+      size: bytes.byteLength,
+      fileHash,
+      payloadHash,
+      headerHash,
+    };
+    const method = new FirmwareUpdateV4({
+      id: 1,
+      payload: {
+        method: 'firmwareUpdateV4',
+        platform: 'web',
+        targetsToUpdate: ['boot_resources'],
+      },
+    });
+    method.init();
+    jest.spyOn(DataManager, 'getProtocolV2BootResources').mockReturnValue(resource);
+    jest.spyOn(firmwareBinaryApi, 'getSysResourceBinary').mockResolvedValue({ binary });
+
+    await expect((method as any).prepareProtocolV2BootResources()).resolves.toEqual({
+      fileName: 'boot_resources.crate.okpkg',
+      binary,
+      targetId: 1,
+      kind: 'boot_resources',
+    });
+  });
+
+  test('rejects a non-CRATE manual boot resources package', async () => {
+    const method = new FirmwareUpdateV4({
+      id: 1,
+      payload: {
+        method: 'firmwareUpdateV4',
+        platform: 'web',
+        bootResourcesBinary: buildBootResourcesHeader({ type: 'RESC' }).buffer,
+      },
+    });
+    method.init();
+
+    await expect((method as any).prepareProtocolV2BootResources()).rejects.toThrow(
+      'Invalid Pro2 boot resources CRATE header'
+    );
+  });
 });
 
 describe('Protocol V2 explicit USB device selection', () => {