@onekeyfe/hd-core 1.2.0-alpha.8 → 1.2.0-alpha.81

package/__tests__/pro2Nft.test.ts

@@ -0,0 +1,108 @@
+import { blake2s } from '@noble/hashes/blake2s';
+import { bytesToHex } from '@noble/hashes/utils';
+
+import {
+  PRO2_NFT_IMAGE_HEIGHT,
+  PRO2_NFT_IMAGE_WIDTH,
+  PRO2_NFT_THUMBNAIL_HEIGHT,
+  PRO2_NFT_THUMBNAIL_WIDTH,
+  buildPro2NftBundle,
+} from '../src/utils/pro2Nft';
+
+const rgba = (width: number, height: number, alpha = 0xff) => {
+  const data = new Uint8Array(width * height * 4);
+  for (let index = 3; index < data.length; index += 4) data[index] = alpha;
+  return data;
+};
+
+describe('buildPro2NftBundle', () => {
+  test('builds the exact Pro2 RGB565 triplet and basename', () => {
+    const bundle = buildPro2NftBundle({
+      image: {
+        width: PRO2_NFT_IMAGE_WIDTH,
+        height: PRO2_NFT_IMAGE_HEIGHT,
+        rgba: rgba(PRO2_NFT_IMAGE_WIDTH, PRO2_NFT_IMAGE_HEIGHT),
+      },
+      thumbnail: {
+        width: PRO2_NFT_THUMBNAIL_WIDTH,
+        height: PRO2_NFT_THUMBNAIL_HEIGHT,
+        rgba: rgba(PRO2_NFT_THUMBNAIL_WIDTH, PRO2_NFT_THUMBNAIL_HEIGHT),
+      },
+      title: 'CryptoPunk #3100',
+      subtitle: 'CryptoPunks',
+      timestampMs: 1_760_000_000_000,
+    });
+
+    expect(bundle.image.byteLength).toBe(583_212);
+    expect(bundle.thumbnail.byteLength).toBe(138_876);
+    expect(Array.from(bundle.image.slice(0, 12))).toEqual([
+      0x19, 0x12, 0, 0, 28, 2, 28, 2, 56, 4, 0, 0,
+    ]);
+    expect(Array.from(bundle.thumbnail.slice(0, 12))).toEqual([
+      0x19, 0x12, 0, 0, 7, 1, 7, 1, 16, 2, 0, 0,
+    ]);
+    expect(new TextDecoder().decode(bundle.metadata)).toBe(
+      '{"title":"CryptoPunk #3100","subtitle":"CryptoPunks"}'
+    );
+    expect(bytesToHex(blake2s(bundle.image))).toBe(
+      'af4b5f8fe216cfd0ef4a9162a42b5c66a73466f2491066f66f756c4e28cc869e'
+    );
+    expect(bytesToHex(blake2s(bundle.thumbnail))).toBe(
+      '44591afae1163cc14651d77644501c6a110f96506889b825cab0351ff4de857d'
+    );
+    expect(bytesToHex(blake2s(bundle.metadata))).toBe(
+      'e30d4dc2cddd441c9f1438c783e05a623ccf76f2f6219d4281769dda1b3635b5'
+    );
+    expect(bundle.basename).toBe('nft-af4b5f8f-1760000000000');
+  });
+
+  test('composites transparent pixels onto black without an alpha plane', () => {
+    const image = rgba(PRO2_NFT_IMAGE_WIDTH, PRO2_NFT_IMAGE_HEIGHT);
+    image.set([255, 255, 255, 0], 0);
+    const bundle = buildPro2NftBundle({
+      image: { width: PRO2_NFT_IMAGE_WIDTH, height: PRO2_NFT_IMAGE_HEIGHT, rgba: image },
+      thumbnail: {
+        width: PRO2_NFT_THUMBNAIL_WIDTH,
+        height: PRO2_NFT_THUMBNAIL_HEIGHT,
+        rgba: rgba(PRO2_NFT_THUMBNAIL_WIDTH, PRO2_NFT_THUMBNAIL_HEIGHT, 0),
+      },
+      title: 'NFT',
+      subtitle: '',
+      timestampMs: 1,
+    });
+
+    expect(bundle.image[1]).toBe(0x12);
+    expect(Array.from(bundle.image.slice(12, 14))).toEqual([0, 0]);
+    expect(bundle.thumbnail.byteLength).toBe(138_876);
+  });
+
+  test('rejects invalid dimensions and metadata byte lengths', () => {
+    const validThumbnail = {
+      width: PRO2_NFT_THUMBNAIL_WIDTH,
+      height: PRO2_NFT_THUMBNAIL_HEIGHT,
+      rgba: rgba(PRO2_NFT_THUMBNAIL_WIDTH, PRO2_NFT_THUMBNAIL_HEIGHT),
+    };
+    expect(() =>
+      buildPro2NftBundle({
+        image: { width: 1, height: 1, rgba: new Uint8Array(4) },
+        thumbnail: validThumbnail,
+        title: 'NFT',
+        subtitle: '',
+        timestampMs: 1,
+      })
+    ).toThrow('540x540');
+    expect(() =>
+      buildPro2NftBundle({
+        image: {
+          width: PRO2_NFT_IMAGE_WIDTH,
+          height: PRO2_NFT_IMAGE_HEIGHT,
+          rgba: rgba(PRO2_NFT_IMAGE_WIDTH, PRO2_NFT_IMAGE_HEIGHT),
+        },
+        thumbnail: validThumbnail,
+        title: 'a'.repeat(64),
+        subtitle: '',
+        timestampMs: 1,
+      })
+    ).toThrow('1 to 63');
+  });
+});

package/__tests__/pro2Wallpaper.test.ts

@@ -0,0 +1,39 @@
+import { encodePro2Wallpaper } from '../src/utils/pro2Wallpaper';
+
+describe('encodePro2Wallpaper', () => {
+  test('encodes opaque pixels as aligned LVGL v9 RGB565 data', () => {
+    const result = encodePro2Wallpaper({
+      width: 2,
+      height: 1,
+      rgba: new Uint8Array([255, 0, 0, 255, 0, 255, 0, 255]),
+    });
+
+    expect(result.colorFormat).toBe('RGB565');
+    expect(Array.from(result.data.slice(0, 12))).toEqual([
+      0x19, 0x12, 0, 0, 2, 0, 1, 0, 4, 0, 0, 0,
+    ]);
+    expect(Array.from(result.data.slice(12))).toEqual([0x00, 0xf8, 0xe0, 0x07]);
+  });
+
+  test('encodes transparent pixels as RGB565A8 with alpha plane after RGB data', () => {
+    const result = encodePro2Wallpaper({
+      width: 2,
+      height: 1,
+      rgba: new Uint8Array([0, 0, 255, 128, 255, 255, 255, 255]),
+    });
+
+    expect(result.colorFormat).toBe('RGB565A8');
+    expect(result.data[1]).toBe(0x14);
+    expect(Array.from(result.data.slice(8, 10))).toEqual([4, 0]);
+    expect(Array.from(result.data.slice(12))).toEqual([0x1f, 0x00, 0xff, 0xff, 128, 255]);
+  });
+
+  test('rejects invalid dimensions and RGBA byte length', () => {
+    expect(() => encodePro2Wallpaper({ width: 0, height: 1, rgba: new Uint8Array() })).toThrow(
+      'width'
+    );
+    expect(() => encodePro2Wallpaper({ width: 2, height: 1, rgba: new Uint8Array(4) })).toThrow(
+      '8'
+    );
+  });
+});

package/__tests__/protocol-binding.test.ts

@@ -0,0 +1,89 @@
+import { createCoreApi, createProtocolAwareCall } from '../src/inject';
+
+import type { CoreApi } from '../src/types/api';
+
+describe('SDK protocol binding', () => {
+  test('exposes a minimal API that returns the actively detected protocol', async () => {
+    const response = { success: true as const, payload: 'V2' as const };
+    const rawCall = jest.fn().mockResolvedValue(response);
+    const api = createCoreApi(rawCall as CoreApi['call']);
+
+    await expect(api.detectDeviceConnectProtocol('USB_DEVICE_A')).resolves.toBe(response);
+    expect(rawCall).toHaveBeenCalledWith({
+      connectId: 'USB_DEVICE_A',
+      forceProtocolDetection: true,
+      method: 'detectDeviceConnectProtocol',
+    });
+  });
+
+  test('injects a strict protocol into every later call and isolates devices', async () => {
+    const rawCall = jest.fn(params => Promise.resolve({ success: true, payload: params }));
+    const protocolAwareCall = createProtocolAwareCall(rawCall as CoreApi['call']);
+    const api = createCoreApi(protocolAwareCall.call);
+
+    protocolAwareCall.setDeviceConnectProtocol('USB_DEVICE_A', 'V2');
+    protocolAwareCall.setDeviceConnectProtocol('ble-device-b', 'V1');
+
+    await api.deviceWipe('usb_device_a');
+    await api.deviceSupportFeatures('BLE-DEVICE-B');
+    await api.getFeatures('USB_DEVICE_A', { connectProtocol: 'V1' });
+    await api.getDeviceState('USB_DEVICE_A', { forceProtocolDetection: true });
+    await protocolAwareCall.call({
+      connectId: 'USB_DEVICE_A',
+      method: 'deviceUpdateReboot',
+    });
+
+    expect(rawCall).toHaveBeenNthCalledWith(1, {
+      connectId: 'usb_device_a',
+      method: 'deviceWipe',
+      connectProtocol: 'V2',
+    });
+    expect(rawCall).toHaveBeenNthCalledWith(2, {
+      connectId: 'BLE-DEVICE-B',
+      method: 'deviceSupportFeatures',
+      connectProtocol: 'V1',
+    });
+    expect(rawCall).toHaveBeenNthCalledWith(3, {
+      connectId: 'USB_DEVICE_A',
+      method: 'getFeatures',
+      connectProtocol: 'V1',
+    });
+    expect(rawCall).toHaveBeenNthCalledWith(4, {
+      connectId: 'USB_DEVICE_A',
+      method: 'getDeviceState',
+      forceProtocolDetection: true,
+    });
+    expect(rawCall).toHaveBeenNthCalledWith(5, {
+      connectId: 'USB_DEVICE_A',
+      method: 'deviceUpdateReboot',
+      connectProtocol: 'V2',
+    });
+  });
+
+  test('keeps bindings local to one SDK instance and supports clearing them', async () => {
+    const firstRawCall = jest.fn(() => Promise.resolve({ success: true, payload: {} }));
+    const secondRawCall = jest.fn(() => Promise.resolve({ success: true, payload: {} }));
+    const first = createProtocolAwareCall(firstRawCall as CoreApi['call']);
+    const second = createProtocolAwareCall(secondRawCall as CoreApi['call']);
+
+    first.setDeviceConnectProtocol('same-device', 'V2');
+    await first.call({ connectId: 'same-device', method: 'deviceWipe' });
+    await second.call({ connectId: 'same-device', method: 'deviceWipe' });
+    first.setDeviceConnectProtocol('same-device', undefined);
+    await first.call({ connectId: 'same-device', method: 'deviceWipe' });
+
+    expect(firstRawCall).toHaveBeenNthCalledWith(1, {
+      connectId: 'same-device',
+      method: 'deviceWipe',
+      connectProtocol: 'V2',
+    });
+    expect(secondRawCall).toHaveBeenCalledWith({
+      connectId: 'same-device',
+      method: 'deviceWipe',
+    });
+    expect(firstRawCall).toHaveBeenNthCalledWith(2, {
+      connectId: 'same-device',
+      method: 'deviceWipe',
+    });
+  });
+});

package/__tests__/protocol-v2-bootloader-mode.test.ts

@@ -0,0 +1,37 @@
+import { Device } from '../src/device/Device';
+import { UI_REQUEST } from '../src/events/ui-request';
+
+jest.mock('../src/data/config', () => ({
+  getSDKVersion: jest.fn(() => '1.0.0'),
+  DEFAULT_DOMAIN: 'https://jssdk.onekey.so/1.0.0/',
+}));
+
+const createBootloaderDevice = (protocolType: 'V1' | 'V2') => {
+  const device = Device.fromDescriptor({
+    id: `${protocolType.toLowerCase()}-bootloader`,
+    path: `${protocolType.toLowerCase()}-bootloader`,
+    protocolType,
+  } as any);
+
+  (device as any).features = {
+    bootloaderMode: true,
+    initialized: true,
+    noBackup: false,
+  };
+
+  return device;
+};
+
+describe('Pro2 bootloader mode', () => {
+  test('does not block Protocol V2 methods in bootloader mode', () => {
+    const device = createBootloaderDevice('V2');
+
+    expect(device.hasUnexpectedMode([], [])).toBeNull();
+  });
+
+  test('keeps the Protocol V1 bootloader restriction', () => {
+    const device = createBootloaderDevice('V1');
+
+    expect(device.hasUnexpectedMode([], [])).toBe(UI_REQUEST.BOOTLOADER);
+  });
+});

package/__tests__/protocol-v2-firmware-targets.test.ts

@@ -0,0 +1,85 @@
+import { EDeviceType, HardwareErrorCode } from '@onekeyfe/hd-shared';
+
+import { ProtocolV2FirmwareTargetType } from '../src/protocols/protocol-v2/firmware';
+import {
+  assertProtocolV2FirmwareTargetsSupported,
+  isProtocolV2FirmwareFingerprintValid,
+} from '../src/api/FirmwareUpdateV4';
+
+jest.mock('../src/data/config', () => ({
+  DEFAULT_DOMAIN: 'https://example.com/',
+  getSDKVersion: () => '0.0.0-test',
+}));
+
+describe('Protocol V2 firmware target contract', () => {
+  test('matches the current firmware-pro2 target ids', () => {
+    expect(ProtocolV2FirmwareTargetType).toEqual({
+      FW_MGMT_TARGET_INVALID: 0,
+      FW_MGMT_TARGET_CRATE: 1,
+      FW_MGMT_TARGET_ROMLOADER: 2,
+      FW_MGMT_TARGET_BOOTLOADER: 3,
+      FW_MGMT_TARGET_APPLICATION_P1: 4,
+      FW_MGMT_TARGET_APPLICATION_P2: 5,
+      FW_MGMT_TARGET_COPROCESSOR: 6,
+      FW_MGMT_TARGET_SE01: 7,
+      FW_MGMT_TARGET_SE02: 8,
+      FW_MGMT_TARGET_SE03: 9,
+      FW_MGMT_TARGET_SE04: 10,
+    });
+  });
+
+  test('validates the full package SHA-256 fingerprint from config', () => {
+    const binary = Uint8Array.from([1, 2, 3]);
+
+    expect(
+      isProtocolV2FirmwareFingerprintValid(
+        binary,
+        '039058c6f2c0cb492c533b0a4d14ef77cc0f78abccced5287d84a1a2011cfb81'
+      )
+    ).toBe(true);
+    expect(isProtocolV2FirmwareFingerprintValid(binary, '00'.repeat(32))).toBe(false);
+  });
+
+  test('allows only SE01 and SE02 firmware targets on Neo', () => {
+    expect(() =>
+      assertProtocolV2FirmwareTargetsSupported(EDeviceType.Neo, {
+        platform: 'web',
+        targetsToUpdate: ['se01', 'se02'],
+      })
+    ).not.toThrow();
+
+    expect(() =>
+      assertProtocolV2FirmwareTargetsSupported(EDeviceType.Neo, {
+        platform: 'web',
+        targetsToUpdate: ['se03'],
+        se04Binary: new ArrayBuffer(1),
+      })
+    ).toThrow('Neo only supports SE01 and SE02; unsupported firmware targets: se03, se04');
+  });
+
+  test('keeps all four SE firmware targets available on Pro2', () => {
+    expect(() =>
+      assertProtocolV2FirmwareTargetsSupported(EDeviceType.Pro2, {
+        platform: 'web',
+        targetsToUpdate: ['se03'],
+        se04Binary: new ArrayBuffer(1),
+      })
+    ).not.toThrow();
+  });
+
+  test('fails closed when SE03 or SE04 is requested without a confirmed device type', () => {
+    try {
+      assertProtocolV2FirmwareTargetsSupported(undefined, {
+        platform: 'web',
+        targetsToUpdate: ['se03'],
+      });
+      throw new Error('Expected unsupported target validation to fail');
+    } catch (error) {
+      expect(error).toMatchObject({ errorCode: HardwareErrorCode.DeviceNotSupportMethod });
+      expect(error).toHaveProperty(
+        'message',
+        'Cannot safely update se03 without a confirmed Pro2 device type'
+      );
+    }
+  });
+});

package/__tests__/protocol-v2-ping.test.ts

@@ -0,0 +1,28 @@
+import { validateProtocolV2PingMessage } from '../src/api/protocol-v2/Ping';
+
+jest.mock('../src/data/config', () => ({
+  DEFAULT_DOMAIN: 'https://example.com/',
+  getSDKVersion: () => '0.0.0-test',
+}));
+
+describe('Protocol V2 diagnostic Ping validation', () => {
+  test('accepts messages up to the firmware UTF-8 byte limit', () => {
+    expect(validateProtocolV2PingMessage('x'.repeat(63))).toBe('x'.repeat(63));
+    expect(validateProtocolV2PingMessage('测'.repeat(21))).toBe('测'.repeat(21));
+  });
+
+  test('rejects messages larger than the firmware UTF-8 byte limit', () => {
+    expect(() => validateProtocolV2PingMessage('x'.repeat(64))).toThrow(
+      'Protocol V2 Ping message must not exceed 63 UTF-8 bytes.'
+    );
+    expect(() => validateProtocolV2PingMessage('测'.repeat(22))).toThrow(
+      'Protocol V2 Ping message must not exceed 63 UTF-8 bytes.'
+    );
+  });
+
+  test('rejects non-string messages at the runtime API boundary', () => {
+    expect(() => validateProtocolV2PingMessage(64)).toThrow(
+      'Protocol V2 Ping message must be a string.'
+    );
+  });
+});

package/__tests__/protocol-v2-resources.test.ts

@@ -0,0 +1,250 @@
+import axios from 'axios';
+import { sha256 } from '@noble/hashes/sha256';
+import { HardwareErrorCode } from '@onekeyfe/hd-shared';
+
+import { DataManager } from '../src/data-manager';
+import {
+  isProtocolV2ResourceFileValid,
+  parseProtocolV2ResourceManifest,
+  parseProtocolV2Resources,
+  prepareProtocolV2ResourceFiles,
+} from '../src/protocols/protocol-v2/resources';
+
+import type { ConnectSettings, RemoteConfigResponse } from '../src/types';
+
+jest.mock('axios');
+jest.mock('../src/data/config', () => ({
+  getSDKVersion: jest.fn(() => '1.0.0-test'),
+  DEFAULT_DOMAIN: 'https://jssdk.onekey.so/1.0.0-test/',
+}));
+
+const bytesToHex = (bytes: Uint8Array) =>
+  Array.from(bytes, byte => byte.toString(16).padStart(2, '0')).join('');
+
+const resourceSource = {
+  archiveUrl: 'https://example.com/resource/pro2-resource.zip',
+  archiveSha256: 'a'.repeat(64),
+  archiveSize: 16_815_479,
+};
+
+const manifestFiles = [
+  ['bundles/firmware_logo-build.okpkg', 'firmware_logo.okpkg', 'vol0:/bundles/firmware_logo.okpkg'],
+  ['bundles/font/noto-build.okpkg', 'noto.okpkg', 'vol0:/bundles/font/noto.okpkg'],
+  ['bundles/font/roobert-build.okpkg', 'roobert.okpkg', 'vol0:/bundles/font/roobert.okpkg'],
+  [
+    'bundles/images/animation-build.okpkg',
+    'animation.okpkg',
+    'vol0:/bundles/images/animation.okpkg',
+  ],
+  ['bundles/images/images-build.okpkg', 'images.okpkg', 'vol0:/bundles/images/images.okpkg'],
+  [
+    'bundles/images/wallpaper-build.okpkg',
+    'wallpaper.okpkg',
+    'vol0:/bundles/images/wallpaper.okpkg',
+  ],
+  [
+    'bundles/translations/translations-build.okpkg',
+    'translations.okpkg',
+    'vol0:/bundles/translations/translations.okpkg',
+  ],
+  [
+    'loaders/bootloader/boot_resource-build.okpkg',
+    'boot_resource.okpkg',
+    'vol0:/loaders/bootloader/boot_resource.okpkg',
+  ],
+  ['loaders/rom/params-build.okpkg', 'params.okpkg', 'vol0:/loaders/rom/params.okpkg'],
+].map(([archive_path, original_name, device_path], index) => {
+  const binary = new Uint8Array([index + 1]).buffer;
+  return {
+    archive_path,
+    original_name,
+    device_path,
+    size: 1,
+    sha256: bytesToHex(sha256(new Uint8Array(binary))),
+    signed: true,
+    sig_algo: device_path.startsWith('vol0:/bundles/') ? 'ed25519' : 'mldsa65',
+    payload_version: '1.0.0',
+    binary,
+  };
+});
+
+const resourceManifest = {
+  schema: 1,
+  artifact_name: 'pro2-resource-build',
+  release_name: 'resource-build',
+  variant: 'resource',
+  commit: 'a'.repeat(40),
+  short_sha: 'aaaaaaa',
+  timestamp_utc: '20260807_091424',
+  core_version: '1.0.0',
+  key_set: 'dev',
+  device_root: 'vol0:',
+  restore_mode: 'bootloader_update',
+  trees: [
+    { path: 'bundles', device: 'vol0:/bundles' },
+    { path: 'loaders/bootloader', device: 'vol0:/loaders/bootloader' },
+    { path: 'loaders/rom', device: 'vol0:/loaders/rom' },
+  ],
+  files: manifestFiles.map(({ binary: _binary, ...file }) => file),
+};
+
+const createSettings = (configFetcher: ConnectSettings['configFetcher']): ConnectSettings =>
+  ({
+    env: 'node',
+    fetchConfig: true,
+    preRelease: true,
+    configFetcher,
+  } as ConnectSettings);
+
+const createRemoteConfig = (): RemoteConfigResponse =>
+  ({
+    classic: { firmware: [], ble: [] },
+    classic1s: { firmware: [], ble: [] },
+    classicpure: { firmware: [], ble: [] },
+    mini: { firmware: [], ble: [] },
+    touch: { firmware: [], ble: [] },
+    pro: { firmware: [], ble: [] },
+    pro2: { firmware: [], ble: [], resources: { source: resourceSource } },
+    bridge: {},
+  } as unknown as RemoteConfigResponse);
+
+describe('Pro2 resource configuration', () => {
+  beforeEach(() => {
+    jest.clearAllMocks();
+    DataManager.lastCheckTimestamp = 0;
+  });
+
+  test('accepts the manifest source and the CI schema 1 file set', () => {
+    expect(parseProtocolV2Resources({ source: resourceSource })).toEqual({
+      source: resourceSource,
+    });
+    expect(parseProtocolV2ResourceManifest(resourceManifest).files).toHaveLength(9);
+  });
+
+  test('rejects missing source and malformed manifest paths', () => {
+    expect(() => parseProtocolV2Resources({})).toThrow('source is required');
+    expect(() =>
+      parseProtocolV2Resources({
+        source: {
+          ...resourceSource,
+          archiveUrl: 'http://example.com/pro2-resource.zip',
+        },
+      })
+    ).toThrow('must use HTTPS');
+    expect(() =>
+      parseProtocolV2Resources({
+        source: { ...resourceSource, archiveSha256: 'invalid' },
+      })
+    ).toThrow('SHA-256');
+    expect(() =>
+      parseProtocolV2Resources({
+        source: { ...resourceSource, archiveSize: 0 },
+      })
+    ).toThrow('positive integer');
+    expect(() =>
+      parseProtocolV2ResourceManifest({
+        ...resourceManifest,
+        files: resourceManifest.files.map((file, index) =>
+          index === 0 ? { ...file, archive_path: '../outside.okpkg' } : file
+        ),
+      })
+    ).toThrow('archive_path');
+  });
+
+  test('verifies selected manifest files and preserves manifest device paths', () => {
+    const prepared = prepareProtocolV2ResourceFiles({
+      manifest: resourceManifest,
+      files: manifestFiles.map(file => ({
+        archivePath: file.archive_path,
+        binary: file.binary,
+      })),
+      targetsToUpdate: ['resource'],
+    });
+    expect(prepared.map(file => file.devicePath)).toEqual(
+      manifestFiles.map(file => file.device_path)
+    );
+    expect(() =>
+      prepareProtocolV2ResourceFiles({
+        manifest: resourceManifest,
+        files: manifestFiles.map((file, index) => ({
+          archivePath: file.archive_path,
+          binary: index === 0 ? new Uint8Array([0]).buffer : file.binary,
+        })),
+        targetsToUpdate: ['resource'],
+      })
+    ).toThrow('verification failed');
+  });
+
+  test('verifies both full file size and SHA-256 before transfer', () => {
+    const bytes = new Uint8Array([1, 2, 3]);
+    const binary = bytes.buffer;
+    const identity = { size: bytes.byteLength, fileHash: bytesToHex(sha256(bytes)) };
+
+    expect(isProtocolV2ResourceFileValid(binary, identity)).toBe(true);
+    expect(isProtocolV2ResourceFileValid(binary, { ...identity, size: 4 })).toBe(false);
+    expect(isProtocolV2ResourceFileValid(binary, { ...identity, fileHash: '0'.repeat(64) })).toBe(
+      false
+    );
+  });
+
+  test('applies a validated pre-release config and exposes its archive source', async () => {
+    const configFetcher = jest.fn().mockResolvedValue(createRemoteConfig());
+
+    await expect(DataManager.load(createSettings(configFetcher))).resolves.toBe(true);
+
+    expect(configFetcher).toHaveBeenCalledWith(
+      expect.stringMatching(/^https:\/\/data\.onekey\.so\/pre-config\.json\?noCache=/)
+    );
+    expect(DataManager.getProtocolV2ResourceSource()).toEqual(resourceSource);
+    expect(DataManager.lastCheckTimestamp).toBeGreaterThan(0);
+  });
+
+  test('reuses the configuration fetched during SDK initialization for an immediate update', async () => {
+    const configFetcher = jest.fn().mockResolvedValue(createRemoteConfig());
+    const settings = createSettings(configFetcher);
+
+    await expect(DataManager.load(settings)).resolves.toBe(true);
+    await expect(DataManager.forceReloadData({ requireResources: true })).resolves.toBeUndefined();
+
+    expect(configFetcher).toHaveBeenCalledTimes(1);
+  });
+
+  test('keeps base SDK initialization available when remote Pro2 resources are invalid', async () => {
+    const remoteConfig = createRemoteConfig();
+    (remoteConfig.pro2 as { resources?: unknown }).resources = { source: {} };
+    const configFetcher = jest.fn().mockResolvedValue(remoteConfig);
+
+    await expect(DataManager.load(createSettings(configFetcher))).resolves.toBe(true);
+
+    expect(DataManager.getProtocolV2ResourceSource()).toBeUndefined();
+  });
+
+  test('only blocks resource mutation when the refreshed Pro2 resources are invalid', async () => {
+    const remoteConfig = createRemoteConfig();
+    (remoteConfig.pro2 as { resources?: unknown }).resources = { source: {} };
+    const settings = createSettings(jest.fn().mockResolvedValue(remoteConfig));
+    DataManager.settings = settings;
+
+    await expect(DataManager.forceReloadData()).resolves.toBeUndefined();
+    await expect(DataManager.forceReloadData({ requireResources: true })).rejects.toMatchObject({
+      errorCode: HardwareErrorCode.FirmwareUpdateDownloadFailed,
+      message: expect.stringContaining('Invalid Pro2 resources config'),
+    });
+    expect(DataManager.lastCheckTimestamp).toBeGreaterThan(0);
+  });
+
+  test('does not advance the cache timestamp when refresh fails', async () => {
+    jest.spyOn(axios, 'get').mockRejectedValue(new Error('offline'));
+    const settings = createSettings(jest.fn().mockResolvedValue(null));
+    DataManager.settings = settings;
+
+    await DataManager.checkAndReloadData();
+
+    expect(DataManager.lastCheckTimestamp).toBe(0);
+    await expect(DataManager.forceReloadData()).rejects.toMatchObject({
+      errorCode: HardwareErrorCode.NetworkError,
+      message: 'Unable to refresh the latest remote config',
+    });
+    expect(DataManager.lastCheckTimestamp).toBe(0);
+  });
+});