@onekeyfe/hd-core 1.2.0-alpha.50 → 1.2.0-alpha.52

package/dist/utils/pro2Nft.d.ts

@@ -1,31 +0,0 @@
-export declare const PRO2_NFT_IMAGE_WIDTH = 540;
-export declare const PRO2_NFT_IMAGE_HEIGHT = 540;
-export declare const PRO2_NFT_THUMBNAIL_WIDTH = 263;
-export declare const PRO2_NFT_THUMBNAIL_HEIGHT = 263;
-export declare const PRO2_NFT_DIRECTORY = "vol1:/nft";
-export declare const PRO2_NFT_DEFAULT_CHUNK_SIZE = 2048;
-export declare const PRO2_NFT_DEFAULT_PACE_MS = 0;
-export declare const PRO2_NFT_DEFAULT_TIMEOUT_MS = 15000;
-export declare const PRO2_NFT_MIN_CHUNK_SIZE = 64;
-export declare const PRO2_NFT_MAX_CHUNK_SIZE = 2048;
-export declare const PRO2_NFT_MAX_ITEMS = 10;
-export type Pro2NftImage = {
-    width: number;
-    height: number;
-    rgba: Uint8Array | ArrayBuffer;
-};
-export type Pro2NftBundle = {
-    basename: string;
-    image: Uint8Array;
-    thumbnail: Uint8Array;
-    metadata: Uint8Array;
-};
-export declare function getCompletePro2NftBasenames(childFiles?: string): Set<string>;
-export declare function buildPro2NftBundle(options: {
-    image: Pro2NftImage;
-    thumbnail: Pro2NftImage;
-    title: string;
-    subtitle: string;
-    timestampMs: number;
-}): Pro2NftBundle;
-//# sourceMappingURL=pro2Nft.d.ts.map

package/dist/utils/pro2Nft.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"pro2Nft.d.ts","sourceRoot":"","sources":["../../src/utils/pro2Nft.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,oBAAoB,MAAM,CAAC;AACxC,eAAO,MAAM,qBAAqB,MAAM,CAAC;AACzC,eAAO,MAAM,wBAAwB,MAAM,CAAC;AAC5C,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,eAAO,MAAM,kBAAkB,cAAc,CAAC;AAC9C,eAAO,MAAM,2BAA2B,OAAO,CAAC;AAChD,eAAO,MAAM,wBAAwB,IAAI,CAAC;AAC1C,eAAO,MAAM,2BAA2B,QAAS,CAAC;AAClD,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAC1C,eAAO,MAAM,uBAAuB,OAAO,CAAC;AAC5C,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAErC,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,UAAU,GAAG,WAAW,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,CAAC;IAClB,SAAS,EAAE,UAAU,CAAC;IACtB,QAAQ,EAAE,UAAU,CAAC;CACtB,CAAC;AAiCF,wBAAgB,2BAA2B,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAiB5E;AAsBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE;IAC1C,KAAK,EAAE,YAAY,CAAC;IACpB,SAAS,EAAE,YAAY,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,aAAa,CAkChB"}

package/dist/utils/uiProgressThrottle.d.ts

@@ -1,3 +0,0 @@
-import type { CoreMessage } from '../events';
-export declare const createUiProgressMessageFilter: (intervalMs?: number, now?: () => number) => (message: CoreMessage) => boolean;
-//# sourceMappingURL=uiProgressThrottle.d.ts.map

package/dist/utils/uiProgressThrottle.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"uiProgressThrottle.d.ts","sourceRoot":"","sources":["../../src/utils/uiProgressThrottle.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAiB7C,eAAO,MAAM,6BAA6B,yDAMvB,WAAW,YAqC7B,CAAC"}

package/src/api/DetectDeviceConnectProtocol.ts

@@ -1,18 +0,0 @@
-import { BaseMethod } from './BaseMethod';
-
-export default class DetectDeviceConnectProtocol extends BaseMethod {
-  init() {
-    this.payload.forceProtocolDetection = true;
-    this.useDevicePassphraseState = false;
-    this.skipForceUpdateCheck = true;
-    this.unlockPolicy = 'none';
-  }
-
-  getSupportedProtocols() {
-    return ['V1', 'V2'] as const;
-  }
-
-  run() {
-    return Promise.resolve(this.device.getProtocol());
-  }
-}

package/src/api/protocol-v2/DeviceUploadNft.ts

@@ -1,189 +0,0 @@
-import { ERRORS, HardwareErrorCode, createDeviceNotSupportMethodError } from '@onekeyfe/hd-shared';
-
-import { UI_REQUEST, createUiMessage } from '../../events/ui-request';
-import { supportsProtocolV2Message } from '../../protocols/protocol-v2/features';
-import {
-  PRO2_NFT_DEFAULT_CHUNK_SIZE,
-  PRO2_NFT_DEFAULT_PACE_MS,
-  PRO2_NFT_DEFAULT_TIMEOUT_MS,
-  PRO2_NFT_DIRECTORY,
-  PRO2_NFT_MAX_CHUNK_SIZE,
-  PRO2_NFT_MAX_ITEMS,
-  PRO2_NFT_MIN_CHUNK_SIZE,
-  type Pro2NftBundle,
-  type Pro2NftImage,
-  buildPro2NftBundle,
-  getCompletePro2NftBasenames,
-} from '../../utils/pro2Nft';
-import { BaseMethod } from '../BaseMethod';
-import { invalidParameter } from '../helpers/filesystemValidation';
-import { isProtocolV2ResponseTimeout, writeProtocolV2File } from '../helpers/protocolV2FileWrite';
-
-export type DeviceUploadNftParams = {
-  image: Pro2NftImage;
-  thumbnail: Pro2NftImage;
-  title: string;
-  subtitle: string;
-  timestampMs?: number;
-  chunkSize?: number;
-  paceMs?: number;
-  timeoutMs?: number;
-};
-
-export type DeviceUploadNftResponse = {
-  basename: string;
-  imagePath: string;
-  thumbnailPath: string;
-  metadataPath: string;
-  totalSize: number;
-  nftUpdated: true;
-  message?: string;
-};
-
-const FILESYSTEM_FILE_WRITE_MESSAGE_TYPE = 60805;
-const FILESYSTEM_DIR_LIST_MESSAGE_TYPE = 60808;
-const NFT_UPDATE_MESSAGE_TYPE = 61500;
-
-export default class DeviceUploadNft extends BaseMethod<DeviceUploadNftParams> {
-  private bundle?: Pro2NftBundle;
-
-  getSupportedProtocols() {
-    return ['V2'] as const;
-  }
-
-  init() {
-    const {
-      image,
-      thumbnail,
-      title,
-      subtitle,
-      timestampMs = Date.now(),
-      chunkSize = PRO2_NFT_DEFAULT_CHUNK_SIZE,
-      paceMs = PRO2_NFT_DEFAULT_PACE_MS,
-      timeoutMs = PRO2_NFT_DEFAULT_TIMEOUT_MS,
-    } = this.payload;
-    if (
-      !Number.isInteger(chunkSize) ||
-      chunkSize < PRO2_NFT_MIN_CHUNK_SIZE ||
-      chunkSize > PRO2_NFT_MAX_CHUNK_SIZE
-    ) {
-      throw invalidParameter(
-        `Parameter [chunkSize] must be an integer between ${PRO2_NFT_MIN_CHUNK_SIZE} and ${PRO2_NFT_MAX_CHUNK_SIZE}.`
-      );
-    }
-    if (!Number.isInteger(paceMs) || paceMs < 0) {
-      throw invalidParameter('Parameter [paceMs] must be a non-negative integer.');
-    }
-    if (!Number.isInteger(timeoutMs) || timeoutMs <= 0) {
-      throw invalidParameter('Parameter [timeoutMs] must be a positive integer.');
-    }
-
-    this.bundle = buildPro2NftBundle({ image, thumbnail, title, subtitle, timestampMs });
-    this.params = { image, thumbnail, title, subtitle, timestampMs, chunkSize, paceMs, timeoutMs };
-    this.unlockPolicy = 'none';
-    this.skipForceUpdateCheck = true;
-    this.useDevicePassphraseState = false;
-  }
-
-  private async assertCapabilities() {
-    const protocolInfo = await this.device.ensureProtocolV2RuntimeContext();
-    const hasFileWrite = supportsProtocolV2Message(
-      protocolInfo,
-      FILESYSTEM_FILE_WRITE_MESSAGE_TYPE
-    );
-    const hasDirList = supportsProtocolV2Message(protocolInfo, FILESYSTEM_DIR_LIST_MESSAGE_TYPE);
-    const hasNftUpdate = supportsProtocolV2Message(protocolInfo, NFT_UPDATE_MESSAGE_TYPE);
-    if (!hasFileWrite || !hasDirList || !hasNftUpdate) {
-      throw createDeviceNotSupportMethodError(this.name, this.device.getCurrentFirmwareType());
-    }
-  }
-
-  private async assertStorageCapacity(basename: string) {
-    const { message } = await this.device.commands.typedCall(
-      'FilesystemDirList',
-      'FilesystemDir',
-      { path: PRO2_NFT_DIRECTORY, depth: 1 },
-      { timeoutMs: this.params.timeoutMs }
-    );
-    const existingBasenames = getCompletePro2NftBasenames(message.child_files);
-    if (existingBasenames.size >= PRO2_NFT_MAX_ITEMS && !existingBasenames.has(basename)) {
-      throw ERRORS.TypedError(HardwareErrorCode.NftStorageLimitReached, undefined, {
-        count: existingBasenames.size,
-        limit: PRO2_NFT_MAX_ITEMS,
-      });
-    }
-  }
-
-  private async updateNft(basename: string) {
-    const params = { file_name_no_ext: basename };
-    const options = { timeoutMs: this.params.timeoutMs };
-    try {
-      return await this.device.commands.typedCall('NftUpdate', 'Success', params, options);
-    } catch (error) {
-      if (!isProtocolV2ResponseTimeout(error)) {
-        throw error;
-      }
-      this.throwIfAborted();
-      return this.device.commands.typedCall('NftUpdate', 'Success', params, options);
-    }
-  }
-
-  async run(): Promise<DeviceUploadNftResponse> {
-    const { bundle } = this;
-    if (!bundle) throw invalidParameter('NFT data has not been initialized.');
-
-    await this.assertCapabilities();
-    this.throwIfAborted();
-    await this.assertStorageCapacity(bundle.basename);
-    this.throwIfAborted();
-
-    const files = [
-      { path: `${PRO2_NFT_DIRECTORY}/${bundle.basename}.bin`, data: bundle.image },
-      { path: `${PRO2_NFT_DIRECTORY}/${bundle.basename}_m.bin`, data: bundle.thumbnail },
-      { path: `${PRO2_NFT_DIRECTORY}/${bundle.basename}.json`, data: bundle.metadata },
-    ];
-    const totalSize = files.reduce((sum, file) => sum + file.data.byteLength, 0);
-    let transferredBeforeFile = 0;
-
-    for (const file of files) {
-      const transferredAtFileStart = transferredBeforeFile;
-      await writeProtocolV2File({
-        commands: this.device.commands,
-        path: file.path,
-        data: file.data,
-        totalSize: file.data.byteLength,
-        chunkSize: this.params.chunkSize,
-        timeoutMs: this.params.timeoutMs,
-        paceMs: this.params.paceMs,
-        overwrite: true,
-        append: false,
-        throwIfAborted: () => this.throwIfAborted(),
-        onProgress: progress => {
-          if (typeof this.postMessage !== 'function') return;
-          const transferredBytes = transferredAtFileStart + progress.transferredBytes;
-          this.postMessage(
-            createUiMessage(UI_REQUEST.DEVICE_PROGRESS, {
-              ...progress,
-              progress: Math.floor((transferredBytes / totalSize) * 100),
-              transferredBytes,
-              totalBytes: totalSize,
-            })
-          );
-        },
-      });
-      transferredBeforeFile += file.data.byteLength;
-    }
-
-    this.throwIfAborted();
-    const response = await this.updateNft(bundle.basename);
-    return {
-      basename: bundle.basename,
-      imagePath: files[0].path,
-      thumbnailPath: files[1].path,
-      metadataPath: files[2].path,
-      totalSize,
-      nftUpdated: true,
-      message: response.message?.message,
-    };
-  }
-}

package/src/core/uiPromiseRegistry.ts

@@ -1,41 +0,0 @@
-import { UI_RESPONSE } from '../events/ui-response';
-
-import type { UiPromise, UiPromiseResponse } from '../events/ui-promise';
-import type { UiResponseEvent } from '../events/ui-response';
-
-const isSensitiveUiResponse = (
-  response: UiResponseEvent
-): response is Extract<
-  UiResponseEvent,
-  { type: typeof UI_RESPONSE.RECEIVE_PIN | typeof UI_RESPONSE.RECEIVE_PASSPHRASE }
-> => response.type === UI_RESPONSE.RECEIVE_PIN || response.type === UI_RESPONSE.RECEIVE_PASSPHRASE;
-
-export const findUiPromiseForResponse = (
-  uiPromises: UiPromise<UiPromiseResponse['type']>[],
-  response: UiResponseEvent
-) => {
-  const candidates = uiPromises.filter(promise => promise.id === response.type);
-  if (!isSensitiveUiResponse(response)) {
-    return candidates[0];
-  }
-
-  const hasInteractionId = typeof response.interactionId === 'string';
-  const hasDeviceId = typeof response.deviceId === 'string';
-  if (hasInteractionId !== hasDeviceId) {
-    return undefined;
-  }
-
-  if (hasInteractionId && hasDeviceId) {
-    return candidates.find(promise => {
-      const correlation = promise.responseCorrelation;
-      return (
-        correlation?.interactionId === response.interactionId &&
-        correlation?.deviceId === response.deviceId
-      );
-    });
-  }
-
-  // Legacy clients do not return correlation metadata. Preserve their single-request
-  // behavior, but never guess when multiple sensitive requests are pending.
-  return candidates.length === 1 ? candidates[0] : undefined;
-};

package/src/protocols/protocol-v2/resources.ts

@@ -1,359 +0,0 @@
-import { sha256 } from '@noble/hashes/sha256';
-import { PROTOCOL_V2_BLE_FILE_READ_CHUNK_SIZE } from '@onekeyfe/hd-transport';
-
-import type {
-  IProtocolV2BootResources,
-  IProtocolV2Resource,
-  IProtocolV2ResourceType,
-  IProtocolV2Resources,
-} from '../../types';
-import type { DeviceCommands } from '../../device/DeviceCommands';
-
-export const PROTOCOL_V2_RESOURCE_TYPES = [
-  'images',
-  'animation',
-  'wallpaper',
-  'translations',
-  'roobert',
-  'noto',
-] as const satisfies readonly IProtocolV2ResourceType[];
-
-export const PROTOCOL_V2_RESOURCE_DEVICE_PATHS: Readonly<Record<IProtocolV2ResourceType, string>> =
-  {
-    images: 'vol0:/bundles/images/images.okpkg',
-    animation: 'vol0:/bundles/images/animation.okpkg',
-    wallpaper: 'vol0:/bundles/images/wallpaper.okpkg',
-    translations: 'vol0:/bundles/translations/translations.okpkg',
-    roobert: 'vol0:/bundles/font/roobert.okpkg',
-    noto: 'vol0:/bundles/font/noto.okpkg',
-  };
-
-const RESOURCE_TYPE_SET = new Set<string>(PROTOCOL_V2_RESOURCE_TYPES);
-const SHA256_HEX_LENGTH = 64;
-const SHA3_512_HEX_LENGTH = 128;
-const PROTOCOL_V2_OKPP_HEADER_SIZE = 0x52a0;
-const PROTOCOL_V2_OKPP_TYPE_OFFSET = 0x08;
-const PROTOCOL_V2_OKPP_HEADER_LENGTH_OFFSET = 0x0c;
-const PROTOCOL_V2_OKPP_HEADER_HASH_OFFSET = 0x240;
-const PROTOCOL_V2_OKPP_HASH_SIZE = 64;
-const PROTOCOL_V2_RESOURCE_IDENTITY_READ_SIZE =
-  PROTOCOL_V2_OKPP_HEADER_HASH_OFFSET + PROTOCOL_V2_OKPP_HASH_SIZE;
-const PROTOCOL_V2_MIN_FILE_READ_CHUNK_SIZE = 64;
-export const PROTOCOL_V2_RESOURCE_INVENTORY_TIMEOUT_MS = 5 * 1000;
-
-export type ProtocolV2ResourceInventoryItem = {
-  type: IProtocolV2ResourceType;
-  size: number;
-  headerHash: string;
-};
-
-export type ProtocolV2ResourceUpdateMode = 'application' | 'bootloader-recovery';
-
-export type ProtocolV2ResourceUpdatePlan = {
-  status: 'valid' | 'outdated' | 'unknown';
-  resources: IProtocolV2Resource[];
-};
-
-function toFiniteNumber(value: unknown): number | undefined {
-  if (typeof value === 'number' && Number.isFinite(value)) return value;
-  if (typeof value === 'string') {
-    const numeric = Number(value);
-    return Number.isFinite(numeric) ? numeric : undefined;
-  }
-  if (value && typeof value === 'object') {
-    const longLike = value as { toNumber?: () => number };
-    if (typeof longLike.toNumber === 'function') {
-      const numeric = longLike.toNumber();
-      return Number.isFinite(numeric) ? numeric : undefined;
-    }
-  }
-  return undefined;
-}
-
-function toUint8Array(value: unknown): Uint8Array {
-  if (value instanceof Uint8Array) return value;
-  if (value instanceof ArrayBuffer) return new Uint8Array(value);
-  if (ArrayBuffer.isView(value)) {
-    return new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
-  }
-  if (typeof value === 'string') {
-    const hex = value.replace(/^0x/i, '');
-    if (!hex || hex.length % 2 !== 0 || /[^0-9a-f]/i.test(hex)) {
-      return new Uint8Array(0);
-    }
-    const bytes = new Uint8Array(hex.length / 2);
-    for (let index = 0; index < bytes.length; index += 1) {
-      bytes[index] = Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16);
-    }
-    return bytes;
-  }
-  return new Uint8Array(0);
-}
-
-function readAscii(bytes: Uint8Array, offset: number, length: number): string {
-  return Array.from(bytes.slice(offset, offset + length), byte => String.fromCharCode(byte)).join(
-    ''
-  );
-}
-
-function parseProtocolV2ResourceHeaderHash(bytes: Uint8Array): string | undefined {
-  if (bytes.byteLength < PROTOCOL_V2_RESOURCE_IDENTITY_READ_SIZE) return undefined;
-  if (readAscii(bytes, 0, 4) !== 'OKPP') return undefined;
-  if (readAscii(bytes, PROTOCOL_V2_OKPP_TYPE_OFFSET, 4) !== 'RESC') return undefined;
-
-  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
-  if (
-    view.getUint32(PROTOCOL_V2_OKPP_HEADER_LENGTH_OFFSET, true) !== PROTOCOL_V2_OKPP_HEADER_SIZE
-  ) {
-    return undefined;
-  }
-  return bytesToHex(
-    bytes.slice(
-      PROTOCOL_V2_OKPP_HEADER_HASH_OFFSET,
-      PROTOCOL_V2_OKPP_HEADER_HASH_OFFSET + PROTOCOL_V2_OKPP_HASH_SIZE
-    )
-  );
-}
-
-async function readProtocolV2ResourceIdentity({
-  commands,
-  resource,
-  chunkSize,
-  timeoutMs = PROTOCOL_V2_RESOURCE_INVENTORY_TIMEOUT_MS,
-}: {
-  commands: Pick<DeviceCommands, 'typedCall'>;
-  resource: IProtocolV2Resource;
-  chunkSize: number;
-  timeoutMs?: number;
-}): Promise<ProtocolV2ResourceInventoryItem | undefined> {
-  const path = PROTOCOL_V2_RESOURCE_DEVICE_PATHS[resource.type];
-  const pathInfo = await commands.typedCall(
-    'FilesystemPathInfoQuery',
-    'FilesystemPathInfo',
-    { path },
-    { timeoutMs }
-  );
-  const size = toFiniteNumber(pathInfo.message?.size);
-  if (
-    !pathInfo.message?.exist ||
-    pathInfo.message?.directory ||
-    !Number.isSafeInteger(size) ||
-    size !== resource.size ||
-    size < PROTOCOL_V2_OKPP_HEADER_SIZE
-  ) {
-    return undefined;
-  }
-
-  const header = new Uint8Array(PROTOCOL_V2_RESOURCE_IDENTITY_READ_SIZE);
-  let offset = 0;
-  while (offset < header.byteLength) {
-    const readLength = Math.min(chunkSize, header.byteLength - offset);
-    const response = await commands.typedCall(
-      'FilesystemFileRead',
-      'FilesystemFile',
-      {
-        file: { path, offset, total_size: 0 },
-        chunk_len: readLength,
-      },
-      { timeoutMs }
-    );
-    const data = toUint8Array(response.message?.data);
-    if (data.byteLength === 0) return undefined;
-    const copied = Math.min(data.byteLength, header.byteLength - offset);
-    header.set(data.subarray(0, copied), offset);
-    offset += copied;
-  }
-
-  const headerHash = parseProtocolV2ResourceHeaderHash(header);
-  return headerHash ? { type: resource.type, size, headerHash } : undefined;
-}
-
-/**
- * 使用已发布 Pro2 固件支持的文件系统消息构建资源清单。
- * 缺失、无法读取或格式错误的文件不会进入清单，因此会被选中重写。
- */
-export async function readProtocolV2ResourceInventory({
-  commands,
-  resources,
-  chunkSize = PROTOCOL_V2_BLE_FILE_READ_CHUNK_SIZE,
-  timeoutMs = PROTOCOL_V2_RESOURCE_INVENTORY_TIMEOUT_MS,
-}: {
-  commands: Pick<DeviceCommands, 'typedCall'>;
-  resources: readonly IProtocolV2Resource[];
-  chunkSize?: number;
-  timeoutMs?: number;
-}): Promise<ProtocolV2ResourceInventoryItem[]> {
-  const normalizedChunkSize = Number.isFinite(chunkSize)
-    ? Math.max(Math.floor(chunkSize), PROTOCOL_V2_MIN_FILE_READ_CHUNK_SIZE)
-    : PROTOCOL_V2_BLE_FILE_READ_CHUNK_SIZE;
-  const inventory: ProtocolV2ResourceInventoryItem[] = [];
-  for (const resource of resources) {
-    try {
-      const item = await readProtocolV2ResourceIdentity({
-        commands,
-        resource,
-        chunkSize: normalizedChunkSize,
-        timeoutMs,
-      });
-      if (item) inventory.push(item);
-    } catch {
-      // 单个资源无法读取时按缺失处理，不阻断其余资源的增量检查。
-    }
-  }
-  return inventory;
-}
-
-function normalizeHex(value: unknown, expectedLength: number, field: string): string {
-  if (typeof value !== 'string') {
-    throw new Error(`Invalid Pro2 resource ${field}: expected a hexadecimal string`);
-  }
-  const normalized = value.replace(/^0x/i, '').toLowerCase();
-  if (normalized.length !== expectedLength || !/^[0-9a-f]+$/.test(normalized)) {
-    throw new Error(
-      `Invalid Pro2 resource ${field}: expected ${expectedLength} hexadecimal characters`
-    );
-  }
-  return normalized;
-}
-
-function validateResource(value: unknown, index: number): IProtocolV2Resource {
-  if (!value || typeof value !== 'object') {
-    throw new Error(`Invalid Pro2 resource at stable[${index}]`);
-  }
-  const resource = value as Partial<IProtocolV2Resource>;
-  if (typeof resource.type !== 'string' || !RESOURCE_TYPE_SET.has(resource.type)) {
-    throw new Error(`Invalid Pro2 resource type at stable[${index}]`);
-  }
-  if (typeof resource.url !== 'string' || !resource.url.startsWith('https://')) {
-    throw new Error(`Invalid Pro2 resource url at stable[${index}]`);
-  }
-  if (!Number.isSafeInteger(resource.size) || Number(resource.size) <= 0) {
-    throw new Error(`Invalid Pro2 resource size at stable[${index}]`);
-  }
-  return {
-    type: resource.type,
-    url: resource.url,
-    size: Number(resource.size),
-    fileHash: normalizeHex(resource.fileHash, SHA256_HEX_LENGTH, 'fileHash'),
-    headerHash: normalizeHex(resource.headerHash, SHA3_512_HEX_LENGTH, 'headerHash'),
-  };
-}
-
-function validateBootResources(value: unknown): IProtocolV2BootResources {
-  if (!value || typeof value !== 'object') {
-    throw new Error('Invalid Pro2 boot resources config');
-  }
-  const resource = value as Partial<IProtocolV2BootResources>;
-  if (resource.required !== false) {
-    throw new Error('Invalid Pro2 boot resources required flag: expected false');
-  }
-  if (resource.target !== 'CRATE') {
-    throw new Error('Invalid Pro2 boot resources target: expected CRATE');
-  }
-  if (typeof resource.url !== 'string' || !resource.url.startsWith('https://')) {
-    throw new Error('Invalid Pro2 boot resources url');
-  }
-  if (!Number.isSafeInteger(resource.size) || Number(resource.size) <= 0) {
-    throw new Error('Invalid Pro2 boot resources size');
-  }
-  return {
-    required: false,
-    target: 'CRATE',
-    url: resource.url,
-    size: Number(resource.size),
-    fileHash: normalizeHex(resource.fileHash, SHA256_HEX_LENGTH, 'boot fileHash'),
-    payloadHash: normalizeHex(resource.payloadHash, SHA3_512_HEX_LENGTH, 'boot payloadHash'),
-    headerHash: normalizeHex(resource.headerHash, SHA3_512_HEX_LENGTH, 'boot headerHash'),
-  };
-}
-
-/** Validate a complete Pro2 stable resource set from remote configuration. */
-export function parseProtocolV2Resources(value: unknown): IProtocolV2Resources | undefined {
-  if (value === undefined) return undefined;
-  if (
-    !value ||
-    typeof value !== 'object' ||
-    !Array.isArray((value as { stable?: unknown }).stable)
-  ) {
-    throw new Error('Invalid Pro2 resources config: stable must be an array');
-  }
-
-  const config = value as { stable: unknown[]; boot?: unknown };
-  const stable = config.stable.map(validateResource);
-  const types = new Set(stable.map(resource => resource.type));
-  if (stable.length !== PROTOCOL_V2_RESOURCE_TYPES.length || types.size !== stable.length) {
-    throw new Error('Invalid Pro2 resources config: stable must contain six unique resource types');
-  }
-  for (const type of PROTOCOL_V2_RESOURCE_TYPES) {
-    if (!types.has(type)) {
-      throw new Error(`Invalid Pro2 resources config: stable is missing ${type}`);
-    }
-  }
-  const boot = config.boot === undefined ? undefined : validateBootResources(config.boot);
-  return {
-    stable: PROTOCOL_V2_RESOURCE_TYPES.map(type => {
-      const resource = stable.find(item => item.type === type);
-      if (!resource) {
-        throw new Error(`Invalid Pro2 resources config: stable is missing ${type}`);
-      }
-      return resource;
-    }),
-    ...(boot ? { boot } : undefined),
-  };
-}
-
-/** 比较文件系统资源清单；恢复模式无法取得清单时回退到全量更新。 */
-export function buildProtocolV2ResourceUpdatePlan({
-  resources,
-  inventory,
-  mode,
-  forced = false,
-}: {
-  resources: readonly IProtocolV2Resource[];
-  inventory?: readonly ProtocolV2ResourceInventoryItem[];
-  mode: ProtocolV2ResourceUpdateMode;
-  forced?: boolean;
-}): ProtocolV2ResourceUpdatePlan {
-  if (forced) {
-    return {
-      status: resources.length > 0 ? 'outdated' : 'valid',
-      resources: [...resources],
-    };
-  }
-  if (!inventory) {
-    return mode === 'bootloader-recovery'
-      ? {
-          status: resources.length > 0 ? 'outdated' : 'valid',
-          resources: [...resources],
-        }
-      : { status: 'unknown', resources: [] };
-  }
-
-  const inventoryByType = new Map(inventory.map(item => [item.type, item]));
-  const changedResources = resources.filter(resource => {
-    const current = inventoryByType.get(resource.type);
-    return (
-      !current ||
-      current.size !== resource.size ||
-      current.headerHash.toLowerCase() !== resource.headerHash.toLowerCase()
-    );
-  });
-
-  return {
-    status: changedResources.length === 0 ? 'valid' : 'outdated',
-    resources: changedResources,
-  };
-}
-
-function bytesToHex(bytes: Uint8Array): string {
-  return Array.from(bytes, byte => byte.toString(16).padStart(2, '0')).join('');
-}
-
-/** Verify the complete downloaded file before any device mutation. */
-export function isProtocolV2ResourceFileValid(
-  binary: ArrayBuffer,
-  resource: Pick<IProtocolV2Resource, 'size' | 'fileHash'>
-): boolean {
-  if (binary.byteLength !== resource.size) return false;
-  return bytesToHex(sha256(new Uint8Array(binary))) === resource.fileHash.toLowerCase();
-}