@exodus/hw-ledger 4.0.0 → 4.0.2

package/CHANGELOG.md

@@ -3,6 +3,35 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [4.0.2](https://github.com/ExodusMovement/exodus/compare/@exodus/hw-ledger@4.0.1...@exodus/hw-ledger@4.0.2) (2026-09-28)
+
+### Bug Fixes
+
+- fix(hw-ledger): surface blind-signing requirement for unknown Tron TRC-20 tokens (#42652)
+
+## [4.0.1](https://github.com/ExodusMovement/exodus-hydra/compare/@exodus/hw-ledger@4.0.0...@exodus/hw-ledger@4.0.1) (2026-06-29)
+
+### ⚠ BREAKING CHANGES
+
+- **eslint-config-exodus:** @exodus/eslint-config-exodus no longer enforces
+  no-floating-promises or no-unnecessary-condition and no longer sets
+  parserOptions.project. Consumers relying on these without oxlint
+  --type-aware lose the coverage; adopt oxlint type-aware.
+
+Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
+
+- chore: drop redundant local no-floating-promises disable
+
+@exodus/eslint-config-exodus no longer enables no-floating-promises, so
+
+### Features
+
+- **eslint-config-exodus:** retire type-aware eslint rules, drop parserOptions.project ([#17273](https://github.com/ExodusMovement/exodus-hydra/issues/17273)) ([622ec93](https://github.com/ExodusMovement/exodus-hydra/commit/622ec935f14f0b7d54ee6f2b034995606383397c)), closes [#7693](https://github.com/ExodusMovement/exodus-hydra/issues/7693) [#17253](https://github.com/ExodusMovement/exodus-hydra/issues/17253)
+
+### Bug Fixes
+
+- **hw-ledger:** bump ledgerhq deps + re-enable skipped test suites ([#17394](https://github.com/ExodusMovement/exodus-hydra/issues/17394)) ([2d9f631](https://github.com/ExodusMovement/exodus-hydra/commit/2d9f631af8451a2cac4a8aca9e843f86a5cda87d))
+
 ## [4.0.0](https://github.com/ExodusMovement/exodus-hydra/compare/@exodus/hw-ledger@3.9.2...@exodus/hw-ledger@4.0.0) (2026-06-09)
 
 ### ⚠ BREAKING CHANGES

package/README.md

@@ -5,7 +5,7 @@ This Exodus SDK feature handles all hardware wallet actions that are specific to
 ## Install
 
 ```sh
-yarn add @exodus/hw-ledger
+pnpm add @exodus/hw-ledger
 ```
 
 ## Usage

package/lib/module/assets/basemainnet.d.ts

@@ -4,6 +4,6 @@ declare const metadata: {
         supportedVersions: string;
         primaryAssetName: string;
     }[];
-    handler: (transport: import("../types.js").Transport) => Promise<import("@exodus/hw-common").HardwareWalletAssetHandler>;
+    handler: (transport: import("../types.js").Transport) => Promise<import("@exodus/hw-common").HardwareWalletAssetHandler<import("./ethereum.js").EthereumMessage>>;
 };
 export default metadata;

package/lib/module/assets/ethereum.d.ts

@@ -1,6 +1,11 @@
-import type { HardwareWalletAssetHandler } from '@exodus/hw-common';
+import type { Bytes, HardwareWalletAssetHandler } from '@exodus/hw-common';
+import type { EIP712Message } from '@exodus/ledgerhq-hw-app-eth/lib/modules/EIP712/EIP712.types.js';
 import type { Transport } from '../types.js';
-declare function createHandler(transport: Transport): Promise<HardwareWalletAssetHandler>;
+export interface EthereumMessage {
+    rawMessage?: Bytes;
+    EIP712Message?: EIP712Message;
+}
+declare function createHandler(transport: Transport): Promise<HardwareWalletAssetHandler<EthereumMessage>>;
 declare const metadata: {
     applications: {
         applicationName: string;

package/lib/module/assets/ethereum.js

@@ -1,5 +1,5 @@
 import * as secp256k1 from '@exodus/crypto/secp256k1';
-import * as ethers from '@exodus/ethersproject-transactions';
+import * as ethers from '@exodus/ethereumjs/ethers5-transactions';
 import AppEthImport, { ledgerService } from '@exodus/ledgerhq-hw-app-eth';
 import { TypedDataUtils, SignTypedDataVersion } from '@exodus/ethereumjs/eth-sig-util';
 import assert from 'minimalistic-assert';
@@ -94,7 +94,7 @@ async function createHandler(transport) {
                 });
             }
             catch (err) {
-                if (err.name === 'EthAppNftNotSupported') {
+                if (err instanceof Error && err.name === 'EthAppNftNotSupported') {
                     response = await signTransaction({
                         derivationPath: params.derivationPaths[0],
                         serializedTransactionHex,
@@ -102,7 +102,7 @@ async function createHandler(transport) {
                         nft: false,
                     });
                 }
-                else if (err.name === 'EthAppPleaseEnableContractData') {
+                else if (err instanceof Error && err.name === 'EthAppPleaseEnableContractData') {
                     throw new RequiresBlindSigningError();
                 }
                 else {
@@ -121,19 +121,20 @@ async function createHandler(transport) {
             ];
         },
         signMessage: async (params) => {
-            const message = params.message;
+            const { message } = params;
             let signingPromise;
             if (message.rawMessage) {
                 assert(Buffer.isBuffer(params.message.rawMessage), 'rawMessage must be a buffer');
                 signingPromise = app.signPersonalMessage(params.derivationPath, Buffer.from(message.rawMessage).toString('hex'));
             }
             else if (message.EIP712Message) {
-                assert(isEIP712Message(message.EIP712Message), 'EIP712Message must be EIP712 conformant message');
+                const eip712Message = message.EIP712Message;
+                assert(isEIP712Message(eip712Message), 'EIP712Message must be EIP712 conformant message');
                 signingPromise = app
-                    .signEIP712Message(params.derivationPath, message.EIP712Message)
+                    .signEIP712Message(params.derivationPath, eip712Message)
                     .catch((err) => {
                     if (err.message.includes('INS_NOT_SUPPORTED')) {
-                        const { domainSeparator, hashStructMessage } = hashEIP712Message(message.EIP712Message);
+                        const { domainSeparator, hashStructMessage } = hashEIP712Message(eip712Message);
                         return app.signEIP712HashedMessage(params.derivationPath, domainSeparator.toString('hex'), hashStructMessage.toString('hex'));
                     }
                     throw err;

package/lib/module/assets/index.js

@@ -24,7 +24,8 @@ export const applicationNameToBaseAssetNames = Object.entries(assetApplications)
         if (!Array.isArray(mapping[applicationName])) {
             mapping[applicationName] = [];
         }
-        const isPrimaryAssetForApplication = applications[applicationName]?.primaryAssetName === assetName;
+        const isPrimaryAssetForApplication = Object.values(applications).some((application) => application.applicationName === applicationName &&
+            application.primaryAssetName === assetName);
         if (isPrimaryAssetForApplication) {
             mapping[applicationName].unshift(assetName);
         }

package/lib/module/assets/matic.d.ts

@@ -4,6 +4,6 @@ declare const metadata: {
         supportedVersions: string;
         primaryAssetName: string;
     }[];
-    handler: (transport: import("../types.js").Transport) => Promise<import("@exodus/hw-common").HardwareWalletAssetHandler>;
+    handler: (transport: import("../types.js").Transport) => Promise<import("@exodus/hw-common").HardwareWalletAssetHandler<import("./ethereum.js").EthereumMessage>>;
 };
 export default metadata;

package/lib/module/assets/solana.js

@@ -28,7 +28,7 @@ async function createHandler(transport) {
         else if (params.signableTransaction instanceof Uint8Array) {
             serializedTransaction = Buffer.from(params.signableTransaction);
         }
-        else if (params.signableTransaction.serialize) {
+        else if ('serialize' in params.signableTransaction) {
             serializedTransaction = Buffer.from(params.signableTransaction.serialize());
         }
         if (!Buffer.isBuffer(serializedTransaction)) {

package/lib/module/assets/tronmainnet.js

@@ -3,8 +3,9 @@ import assert from 'minimalistic-assert';
 import { XPubUnsupportedError } from '@exodus/hw-common';
 import * as secp256k1 from '@exodus/crypto/secp256k1';
 import applications from './applications.js';
-const AppTron = (AppTronImport.default ??
-    AppTronImport);
+import { RequiresBlindSigningError } from '../errors.js';
+const E_MISSING_SETTING_CUSTOM_CONTRACT = 0x6a_8d;
+const AppTron = (AppTronImport.default ?? AppTronImport);
 async function createHandler(transport) {
     const app = new AppTron(transport);
     const getAddress = async (params) => {
@@ -27,7 +28,15 @@ async function createHandler(transport) {
         if (!Buffer.isBuffer(params.signableTransaction)) {
             throw new TypeError(`signableTransaction must be Buffer or serializable to a Buffer.`);
         }
-        const signature = await app.signTransaction(params.derivationPaths[0].replace('m/', ''), params.signableTransaction.toString('hex'), []);
+        const signature = await app
+            .signTransaction(params.derivationPaths[0].replace('m/', ''), params.signableTransaction.toString('hex'), [])
+            .catch((error) => {
+            if (error?.statusCode ===
+                E_MISSING_SETTING_CUSTOM_CONTRACT) {
+                throw new RequiresBlindSigningError();
+            }
+            throw error;
+        });
         return [
             {
                 signature: Buffer.from(signature, 'hex'),

package/lib/module/assets/utils/psbt.d.ts

@@ -1,9 +1,9 @@
-import type { PsbtV2 } from '@exodus/ledger-bitcoin';
+import type { AppClient, PsbtV2 } from '@exodus/ledger-bitcoin';
 import { WalletPolicy } from '@exodus/ledger-bitcoin';
 import type { MultisigData } from '@exodus/hw-common';
 export declare function assertPsbtOnlyHasAllowedDerivationPaths(psbt: PsbtV2, masterFingerprint: string, derivationPaths: string[]): void;
 export declare function tagPsbtWithDerivationPaths(psbt: PsbtV2, masterFingerprint: string, derivationPathToPublicKeyMap: Record<string, Buffer>, addressToDerivationPathMap?: Record<string, string>): string[];
-export declare const getWalletPolicy: (fpr: string, xpub: string, purpose: string, coin: string, account: string) => any;
+export declare const getWalletPolicy: (fpr: string, xpub: string, purpose: string, coin: string, account: string) => WalletPolicy;
 export declare const getMultisigWalletPolicy: (fpr: string, xpub: string, purpose: string, coin: string, account: string, multisigData: MultisigData) => WalletPolicy;
-export declare function derivationPathsToWalletPolicy(fpr: string, app: any, derivationPaths: string[], multisigData?: MultisigData): Promise<WalletPolicy[]>;
+export declare function derivationPathsToWalletPolicy(fpr: string, app: AppClient, derivationPaths: string[], multisigData?: MultisigData): Promise<WalletPolicy[]>;
 export declare function addDummyInputs(psbt: PsbtV2): void;

package/lib/module/types.d.ts

@@ -1,6 +1,7 @@
 import type LedgerTransport from '@ledgerhq/hw-transport';
 import type { TransportTypes } from '@exodus/hw-common';
 import type { Subscription } from '@ledgerhq/hw-transport';
+import type { BluetoothStatus } from '../atoms/index.js';
 export type TransportFactory = (typeof LedgerTransport)['default'];
 export type Transport = InstanceType<TransportFactory>;
 export type TransportFactories = Partial<Record<TransportTypes, TransportFactory>> & {
@@ -10,9 +11,7 @@ export type TransportFactories = Partial<Record<TransportTypes, TransportFactory
             error: (err: Error) => void;
         }) => Subscription;
         observeState?: (observer: {
-            next: (evt: {
-                available: boolean;
-            }) => void;
+            next: (evt: BluetoothStatus) => void;
             error: (err: Error) => void;
         }) => Subscription;
     };

package/lib/redux/index.js

@@ -1,5 +1,5 @@
 import id from './id.js';
-import initialState from './initial-state.js';
+import initialState, {} from './initial-state.js';
 import selectorDefinitions from './selectors/index.js';
 const exchangeReduxDefinition = {
     id,

package/package.json

@@ -1,16 +1,16 @@
 {
   "name": "@exodus/hw-ledger",
-  "version": "4.0.0",
+  "version": "4.0.2",
   "description": "The ledger module",
   "author": "Exodus Movement, Inc.",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/ExodusMovement/exodus-hydra.git"
+    "url": "git+https://github.com/ExodusMovement/exodus.git"
   },
-  "homepage": "https://github.com/ExodusMovement/exodus-hydra/tree/master/features/hw-ledger",
+  "homepage": "https://github.com/ExodusMovement/exodus/tree/master/libs/features/hw-ledger",
   "license": "MIT",
   "bugs": {
-    "url": "https://github.com/ExodusMovement/exodus-hydra/issues?q=is%3Aissue+is%3Aopen+label%3Ahw-ledger"
+    "url": "https://github.com/ExodusMovement/exodus/issues?q=is%3Aissue+is%3Aopen+label%3Ahw-ledger"
   },
   "main": "lib/index.js",
   "type": "module",
@@ -32,32 +32,31 @@
     "./CHANGELOG.md"
   ],
   "scripts": {
-    "build": "run -T tsc -p tsconfig.build.json",
-    "build:watch": "run -T tsc -w -p tsconfig.build.json",
-    "clean": "run -T tsc --build --clean",
-    "test": "run -T exodus-test --jest --esbuild",
-    "typecheck": "run -T tsc -p tsconfig.json --noEmit",
+    "build": "pnpm exec tsc -p tsconfig.build.json",
+    "build:watch": "pnpm exec tsc -w -p tsconfig.build.json",
+    "clean": "pnpm exec tsc --build --clean",
+    "test": "pnpm exec exodus-test --jest --esbuild",
+    "typecheck": "pnpm exec tsc -p tsconfig.json --noEmit",
     "zemu:install": "docker pull zondax/builder-zemu:speculos-ef9610662dc90a1eeddba7c991e3ef7c53c4e258",
-    "test:integration": "yarn zemu:install && RUN_TESTS=integration run test",
-    "lint": "run -T eslint .",
-    "lint:fix": "yarn lint --fix",
-    "prepublishOnly": "yarn run -T build --scope @exodus/hw-ledger"
+    "test:integration": "pnpm run zemu:install && RUN_TESTS=integration pnpm run test",
+    "lint": "pnpm exec eslint .",
+    "lint:fix": "pnpm run lint --fix",
+    "prepublishOnly": "pnpm -w run build --scope @exodus/hw-ledger"
   },
   "dependencies": {
-    "@exodus/atoms": "^10.3.3",
-    "@exodus/bip322-js": "^3.1.0",
+    "@exodus/atoms": "^10.3.4",
+    "@exodus/bip322-js": "^3.2.2",
     "@exodus/bitcoinjs": "^2.0.0",
     "@exodus/bytes": "^1.0.0-rc.6",
     "@exodus/crypto": "^1.0.0-rc.29",
-    "@exodus/ethereumjs": "^1.5.0",
-    "@exodus/ethersproject-transactions": "^5.4.2-exodus.0",
-    "@exodus/hw-common": "^3.4.0",
+    "@exodus/ethereumjs": "^1.13.0",
+    "@exodus/hw-common": "^3.5.0",
     "@exodus/ledger-bitcoin": "^0.2.3-exodus.6",
-    "@exodus/ledgerhq-devices": "^8.1.0-exodus.3",
-    "@exodus/ledgerhq-hw-app-eth": "^6.33.7-exodus.8",
+    "@exodus/ledgerhq-devices": "^8.1.0-exodus.7",
+    "@exodus/ledgerhq-hw-app-eth": "^6.33.7-exodus.13",
     "@exodus/redux-dependency-injection": "^5.0.0",
     "@exodus/ripple-binary-codec": "^0.3.0",
-    "@exodus/storage-interface": "^1.0.0",
+    "@exodus/storage-interface": "^1.0.1",
     "@ledgerhq/hw-app-solana": "^7.0.10",
     "@ledgerhq/hw-app-trx": "^6.29.4",
     "@ledgerhq/hw-app-xrp": "^6.32.7",
@@ -66,7 +65,7 @@
     "semver": "^7.3.5"
   },
   "devDependencies": {
-    "@exodus/bip32": "^4.1.0",
+    "@exodus/bip32": "^4.3.1",
     "@exodus/dependency-types": "^2.1.1",
     "@solana/web3.js": "^1.78.0",
     "@types/minimalistic-assert": "^1.0.1",
@@ -80,5 +79,5 @@
     "access": "public",
     "provenance": false
   },
-  "gitHead": "f12f42d2a4062112458a94a2026fcf3cc1913fc6"
+  "gitHead": "2c794454cd4f006cc77b59f165900379929b4f93"
 }

package/redux.js

@@ -1,2 +1 @@
-// eslint-disable-next-line import/no-unresolved -- shim re-exports built artifact
 export { default } from './lib/redux/index.js'