@bytezhang/ledger-adapter 0.0.6 → 0.0.8

package/dist/index.js

@@ -36,6 +36,7 @@ __export(index_exports, {
   SignerBtc: () => SignerBtc,
   SignerEth: () => SignerEth,
   SignerManager: () => SignerManager,
+  SignerSol: () => SignerSol,
   clearRegistry: () => clearRegistry,
   deviceActionToPromise: () => deviceActionToPromise,
   getTransportProvider: () => getTransportProvider,
@@ -169,6 +170,8 @@ var _LedgerAdapter = class _LedgerAdapter {
     this._sessions = /* @__PURE__ */ new Map();
     // Pending device-connect resolve — set by _waitForDeviceConnect, resolved by uiResponse
     this._deviceConnectResolve = null;
+    // Mutex for ensureConnected — prevents concurrent calls from establishing duplicate connections
+    this._connectingPromise = null;
     // ---------------------------------------------------------------------------
     // Event translation
     // ---------------------------------------------------------------------------
@@ -222,6 +225,8 @@ var _LedgerAdapter = class _LedgerAdapter {
   async init(_config) {
   }
   async dispose() {
+    this._deviceConnectResolve?.(true);
+    this._deviceConnectResolve = null;
     this.unregisterEventListeners();
     this.connector.reset();
     this._uiHandler = null;
@@ -293,10 +298,74 @@ var _LedgerAdapter = class _LedgerAdapter {
     void this.connector.cancel(sessionId);
   }
   // ---------------------------------------------------------------------------
+  // Chain fingerprint
+  // ---------------------------------------------------------------------------
+  async getChainFingerprint(connectId, deviceId, chain) {
+    await this._ensureDevicePermission(connectId, deviceId);
+    try {
+      const address = await this._deriveAddressForFingerprint(connectId, chain);
+      return (0, import_hardware_wallet_core2.success)((0, import_hardware_wallet_core2.deriveDeviceFingerprint)(address));
+    } catch (err) {
+      return this.errorToFailure(err);
+    }
+  }
+  /**
+   * Verify that the connected device matches the expected fingerprint.
+   *
+   * - If deviceId is empty, verification is skipped (returns true).
+   * - deviceId is used here as the stored fingerprint to compare against.
+   */
+  async _verifyDeviceFingerprint(connectId, deviceId, chain) {
+    if (!deviceId) return true;
+    try {
+      const address = await this._deriveAddressForFingerprint(connectId, chain);
+      const fingerprint = (0, import_hardware_wallet_core2.deriveDeviceFingerprint)(address);
+      return fingerprint === deviceId;
+    } catch (err) {
+      const mapped = mapLedgerError(err);
+      if (mapped.code === import_hardware_wallet_core2.HardwareErrorCode.WrongApp || mapped.code === import_hardware_wallet_core2.HardwareErrorCode.DeviceLocked) {
+        return true;
+      }
+      throw err;
+    }
+  }
+  /**
+   * Derive an address at the fixed testnet path for fingerprint generation.
+   */
+  async _deriveAddressForFingerprint(connectId, chain) {
+    const path = import_hardware_wallet_core2.CHAIN_FINGERPRINT_PATHS[chain];
+    if (chain === "evm") {
+      const result = await this.connectorCall(connectId, "evmGetAddress", {
+        path,
+        showOnDevice: false
+      });
+      return result.address;
+    }
+    if (chain === "btc") {
+      const result = await this.connectorCall(connectId, "btcGetAddress", {
+        path,
+        showOnDevice: false,
+        coin: "Testnet"
+      });
+      return result.address;
+    }
+    if (chain === "sol") {
+      const result = await this.connectorCall(connectId, "solGetAddress", {
+        path,
+        showOnDevice: false
+      });
+      return result.address;
+    }
+    throw new Error(`Unsupported chain for fingerprint: ${chain}`);
+  }
+  // ---------------------------------------------------------------------------
   // EVM methods
   // ---------------------------------------------------------------------------
   async evmGetAddress(connectId, _deviceId, params) {
     await this._ensureDevicePermission(connectId, _deviceId);
+    if (!await this._verifyDeviceFingerprint(connectId, _deviceId, "evm")) {
+      return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.DeviceMismatch, "Wrong device connected");
+    }
     try {
       const result = await this.connectorCall(connectId, "evmGetAddress", {
         path: params.path,
@@ -320,6 +389,9 @@ var _LedgerAdapter = class _LedgerAdapter {
   }
   async evmGetPublicKey(connectId, _deviceId, params) {
     await this._ensureDevicePermission(connectId, _deviceId);
+    if (!await this._verifyDeviceFingerprint(connectId, _deviceId, "evm")) {
+      return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.DeviceMismatch, "Wrong device connected");
+    }
     try {
       const result = await this.connectorCall(connectId, "evmGetAddress", {
         path: params.path,
@@ -335,21 +407,19 @@ var _LedgerAdapter = class _LedgerAdapter {
   }
   async evmSignTransaction(connectId, _deviceId, params) {
     await this._ensureDevicePermission(connectId, _deviceId);
+    if (!await this._verifyDeviceFingerprint(connectId, _deviceId, "evm")) {
+      return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.DeviceMismatch, "Wrong device connected");
+    }
     try {
+      if (!params.serializedTx) {
+        return (0, import_hardware_wallet_core2.failure)(
+          import_hardware_wallet_core2.HardwareErrorCode.InvalidParams,
+          "Ledger requires a pre-serialized transaction (serializedTx). Provide an RLP-encoded hex string."
+        );
+      }
       const result = await this.connectorCall(connectId, "evmSignTransaction", {
         path: params.path,
-        transaction: {
-          to: params.to,
-          value: params.value,
-          chainId: params.chainId,
-          nonce: params.nonce,
-          gasLimit: params.gasLimit,
-          gasPrice: params.gasPrice,
-          maxFeePerGas: params.maxFeePerGas,
-          maxPriorityFeePerGas: params.maxPriorityFeePerGas,
-          accessList: params.accessList,
-          data: params.data
-        }
+        serializedTx: params.serializedTx
       });
       return (0, import_hardware_wallet_core2.success)({
         v: ensure0x(result.v),
@@ -362,6 +432,9 @@ var _LedgerAdapter = class _LedgerAdapter {
   }
   async evmSignMessage(connectId, _deviceId, params) {
     await this._ensureDevicePermission(connectId, _deviceId);
+    if (!await this._verifyDeviceFingerprint(connectId, _deviceId, "evm")) {
+      return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.DeviceMismatch, "Wrong device connected");
+    }
     try {
       const result = await this.connectorCall(connectId, "evmSignMessage", {
         path: params.path,
@@ -376,6 +449,9 @@ var _LedgerAdapter = class _LedgerAdapter {
   }
   async evmSignTypedData(connectId, _deviceId, params) {
     await this._ensureDevicePermission(connectId, _deviceId);
+    if (!await this._verifyDeviceFingerprint(connectId, _deviceId, "evm")) {
+      return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.DeviceMismatch, "Wrong device connected");
+    }
     if (params.mode === "hash") {
       return (0, import_hardware_wallet_core2.failure)(
         import_hardware_wallet_core2.HardwareErrorCode.MethodNotSupported,
@@ -399,6 +475,9 @@ var _LedgerAdapter = class _LedgerAdapter {
   // ---------------------------------------------------------------------------
   async btcGetAddress(connectId, _deviceId, params) {
     await this._ensureDevicePermission(connectId, _deviceId);
+    if (!await this._verifyDeviceFingerprint(connectId, _deviceId, "btc")) {
+      return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.DeviceMismatch, "Wrong device connected");
+    }
     try {
       const result = await this.connectorCall(connectId, "btcGetAddress", {
         path: params.path,
@@ -423,6 +502,9 @@ var _LedgerAdapter = class _LedgerAdapter {
   }
   async btcGetPublicKey(connectId, _deviceId, params) {
     await this._ensureDevicePermission(connectId, _deviceId);
+    if (!await this._verifyDeviceFingerprint(connectId, _deviceId, "btc")) {
+      return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.DeviceMismatch, "Wrong device connected");
+    }
     try {
       const result = await this.connectorCall(connectId, "btcGetPublicKey", {
         path: params.path,
@@ -443,6 +525,9 @@ var _LedgerAdapter = class _LedgerAdapter {
   }
   async btcSignTransaction(connectId, _deviceId, params) {
     await this._ensureDevicePermission(connectId, _deviceId);
+    if (!await this._verifyDeviceFingerprint(connectId, _deviceId, "btc")) {
+      return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.DeviceMismatch, "Wrong device connected");
+    }
     if (!params.psbt) {
       return (0, import_hardware_wallet_core2.failure)(
         import_hardware_wallet_core2.HardwareErrorCode.InvalidParams,
@@ -463,34 +548,75 @@ var _LedgerAdapter = class _LedgerAdapter {
   // ---------------------------------------------------------------------------
   // Device fingerprint
   // ---------------------------------------------------------------------------
-  async btcGetMasterFingerprint(connectId, _deviceId, params) {
+  async btcGetMasterFingerprint(connectId, _deviceId) {
     await this._ensureDevicePermission(connectId, _deviceId);
+    if (!await this._verifyDeviceFingerprint(connectId, _deviceId, "btc")) {
+      return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.DeviceMismatch, "Wrong device connected");
+    }
     try {
-      const result = await this.connectorCall(connectId, "btcGetMasterFingerprint", {
-        skipOpenApp: params?.skipOpenApp
-      });
+      const result = await this.connectorCall(connectId, "btcGetMasterFingerprint", {});
       return (0, import_hardware_wallet_core2.success)({ masterFingerprint: result.masterFingerprint });
     } catch (err) {
       return this.errorToFailure(err);
     }
   }
   // ---------------------------------------------------------------------------
-  // Solana methods (stubs -- not yet supported)
+  // Solana methods
   // ---------------------------------------------------------------------------
-  async solGetAddress(_connectId, _deviceId, _params) {
-    return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.MethodNotSupported, "Solana not supported on Ledger yet");
+  async solGetAddress(connectId, _deviceId, params) {
+    await this._ensureDevicePermission(connectId, _deviceId);
+    if (!await this._verifyDeviceFingerprint(connectId, _deviceId, "sol")) {
+      return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.DeviceMismatch, "Wrong device connected");
+    }
+    try {
+      const result = await this.connectorCall(connectId, "solGetAddress", {
+        path: params.path,
+        showOnDevice: params.showOnDevice
+      });
+      return (0, import_hardware_wallet_core2.success)({
+        address: result.address,
+        path: params.path
+      });
+    } catch (err) {
+      return this.errorToFailure(err);
+    }
   }
-  async solGetAddresses(_connectId, _deviceId, _params, _onProgress) {
-    return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.MethodNotSupported, "Solana not supported on Ledger yet");
+  async solGetAddresses(connectId, deviceId, params, onProgress) {
+    return this.batchCall(
+      params,
+      (p) => this.solGetAddress(connectId, deviceId, p),
+      onProgress
+    );
   }
-  async solGetPublicKey(_connectId, _deviceId, _params) {
-    return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.MethodNotSupported, "Solana not supported on Ledger yet");
+  async solGetPublicKey(connectId, _deviceId, params) {
+    await this._ensureDevicePermission(connectId, _deviceId);
+    if (!await this._verifyDeviceFingerprint(connectId, _deviceId, "sol")) {
+      return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.DeviceMismatch, "Wrong device connected");
+    }
+    try {
+      const result = await this.connectorCall(connectId, "solGetAddress", {
+        path: params.path,
+        showOnDevice: params.showOnDevice
+      });
+      return (0, import_hardware_wallet_core2.success)({
+        publicKey: result.address,
+        path: params.path
+      });
+    } catch (err) {
+      return this.errorToFailure(err);
+    }
   }
   async solSignTransaction(_connectId, _deviceId, _params) {
-    return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.MethodNotSupported, "Solana not supported on Ledger yet");
+    return (0, import_hardware_wallet_core2.failure)(
+      import_hardware_wallet_core2.HardwareErrorCode.MethodNotSupported,
+      "Solana transaction signing via Ledger is not yet implemented."
+    );
   }
   async solSignMessage(_connectId, _deviceId, _params) {
-    return (0, import_hardware_wallet_core2.failure)(import_hardware_wallet_core2.HardwareErrorCode.MethodNotSupported, "Solana signMessage is not supported on Ledger yet");
+    return (0, import_hardware_wallet_core2.failure)(
+      import_hardware_wallet_core2.HardwareErrorCode.MethodNotSupported,
+      "Solana message signing via Ledger is not yet implemented."
+    );
   }
   /**
    * Wait for user to connect and unlock device.
@@ -515,7 +641,10 @@ var _LedgerAdapter = class _LedgerAdapter {
         clearTimeout(timer);
         this._deviceConnectResolve = null;
         if (cancelled) {
-          reject(new Error("User cancelled Ledger connection"));
+          reject(Object.assign(
+            new Error("User cancelled Ledger connection"),
+            { _tag: "DeviceNotRecognizedError" }
+          ));
         } else {
           resolve();
         }
@@ -546,6 +675,17 @@ var _LedgerAdapter = class _LedgerAdapter {
     if (this._sessions.size > 0) {
       return this._sessions.keys().next().value;
     }
+    if (this._connectingPromise) {
+      return this._connectingPromise;
+    }
+    this._connectingPromise = this._doConnect();
+    try {
+      return await this._connectingPromise;
+    } finally {
+      this._connectingPromise = null;
+    }
+  }
+  async _doConnect() {
     for (let attempt = 0; attempt < _LedgerAdapter.MAX_DEVICE_RETRY; attempt++) {
       const devices = await this.searchDevices();
       if (devices.length > 0) {
@@ -779,7 +919,8 @@ var LedgerDeviceManager = class {
     return new Promise((resolve) => {
       let resolved = false;
       let syncResult = null;
-      const sub = this._dmk.listenToAvailableDevices().subscribe({
+      let sub = null;
+      sub = this._dmk.listenToAvailableDevices().subscribe({
         next: (devices) => {
           if (resolved) return;
           resolved = true;
@@ -787,7 +928,17 @@ var LedgerDeviceManager = class {
           for (const d of devices) {
             this._discovered.set(d.id, d);
           }
-          syncResult = devices;
+          if (sub) {
+            sub.unsubscribe();
+            resolve(devices.map((d) => ({
+              path: d.id,
+              type: d.deviceModel.id,
+              name: d.name,
+              transport: d.transport
+            })));
+          } else {
+            syncResult = devices;
+          }
         },
         error: () => {
           if (!resolved) {
@@ -799,7 +950,12 @@ var LedgerDeviceManager = class {
       if (syncResult !== null) {
         sub.unsubscribe();
         const devices = syncResult;
-        resolve(devices.map((d) => ({ path: d.id, type: d.deviceModel.name })));
+        resolve(devices.map((d) => ({
+          path: d.id,
+          type: d.deviceModel.id,
+          name: d.name,
+          transport: d.transport
+        })));
       }
     });
   }
@@ -820,7 +976,12 @@ var LedgerDeviceManager = class {
             name: d.name
           }));
           if (!previousIds.has(d.id)) {
-            onChange({ type: "device-connected", descriptor: { path: d.id, type: d.deviceModel.name } });
+            onChange({ type: "device-connected", descriptor: {
+              path: d.id,
+              type: d.deviceModel.id,
+              name: d.name,
+              transport: d.transport
+            } });
           }
         }
         for (const id of previousIds) {
@@ -1030,6 +1191,36 @@ var SignerBtc = class {
   }
 };
 
+// src/signer/SignerSol.ts
+var SignerSol = class {
+  constructor(_sdk) {
+    this._sdk = _sdk;
+  }
+  /**
+   * Get the Solana address (base58-encoded Ed25519 public key) at the given derivation path.
+   */
+  async getAddress(derivationPath, options) {
+    const action = this._sdk.getAddress(derivationPath, {
+      checkOnDevice: options?.checkOnDevice ?? false
+    });
+    return deviceActionToPromise(action, this.onInteraction);
+  }
+  /**
+   * Sign a Solana transaction.
+   */
+  async signTransaction(derivationPath, transaction, options) {
+    const action = this._sdk.signTransaction(derivationPath, transaction, options);
+    return deviceActionToPromise(action, this.onInteraction);
+  }
+  /**
+   * Sign a message with the Solana app.
+   */
+  async signMessage(derivationPath, message, options) {
+    const action = this._sdk.signMessage(derivationPath, message, options);
+    return deviceActionToPromise(action, this.onInteraction);
+  }
+};
+
 // src/transport/registry.ts
 var registry = /* @__PURE__ */ new Map();
 function normalizeType(type) {
@@ -1153,6 +1344,7 @@ var AppManager = class {
   SignerBtc,
   SignerEth,
   SignerManager,
+  SignerSol,
   clearRegistry,
   deviceActionToPromise,
   getTransportProvider,