@metamask/eth-ledger-bridge-keyring 12.0.3 → 12.2.0

package/dist/dmk/ledger-dmk-transport-middleware.cjs

@@ -0,0 +1,170 @@
+"use strict";
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _LedgerDmkTransportMiddleware_instances, _LedgerDmkTransportMiddleware_sdk, _LedgerDmkTransportMiddleware_sessionId, _LedgerDmkTransportMiddleware_managedSessionId, _LedgerDmkTransportMiddleware_cachedSigner, _LedgerDmkTransportMiddleware_assignSession;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LedgerDmkTransportMiddleware = void 0;
+const device_signer_kit_ethereum_1 = require("@ledgerhq/device-signer-kit-ethereum");
+/**
+ * LedgerDmkTransportMiddleware is a middleware to communicate with the
+ * Ledger device via DMK.
+ * It adapts the new DMK Signer ETH to the existing bridging architectural patterns.
+ */
+class LedgerDmkTransportMiddleware {
+    constructor(sdk) {
+        _LedgerDmkTransportMiddleware_instances.add(this);
+        _LedgerDmkTransportMiddleware_sdk.set(this, void 0);
+        _LedgerDmkTransportMiddleware_sessionId.set(this, void 0);
+        /**
+         * Session created by this middleware's `connect()` call. Only managed
+         * sessions are disconnected automatically; IDs assigned via `setSessionId`
+         * are owned by the host.
+         */
+        _LedgerDmkTransportMiddleware_managedSessionId.set(this, void 0);
+        _LedgerDmkTransportMiddleware_cachedSigner.set(this, null);
+        __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_sdk, sdk, "f");
+    }
+    /**
+     * Starts device discovery using the configured DMK transport.
+     *
+     * @param args - Optional DMK discovery options.
+     * @returns An observable that emits discovered devices.
+     */
+    startDiscovering(...args) {
+        return __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sdk, "f").startDiscovering(...args);
+    }
+    /**
+     * Set the session ID used for subsequent DMK commands.
+     *
+     * Binds the middleware to an existing DMK session without disconnecting
+     * any prior session. If the current session was created by this middleware's
+     * `connect()`, that managed session is released when replaced.
+     *
+     * Invalidates any cached signer so the next `getEthSigner()` call builds a
+     * fresh signer bound to the new session.
+     *
+     * @param sessionId - The session ID for the connected Ledger device.
+     */
+    async setSessionId(sessionId) {
+        if (__classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sessionId, "f") === sessionId) {
+            return;
+        }
+        const managedToRelease = __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_managedSessionId, "f");
+        __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_instances, "m", _LedgerDmkTransportMiddleware_assignSession).call(this, sessionId);
+        if (managedToRelease && managedToRelease !== sessionId) {
+            await __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sdk, "f").disconnect({ sessionId: managedToRelease });
+            __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_managedSessionId, undefined, "f");
+        }
+    }
+    /**
+     * Method to retrieve the session ID.
+     *
+     * @returns The session ID.
+     * @throws {Error} If `setSessionId` or `connect` has not been called yet.
+     */
+    getSessionId() {
+        if (!__classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sessionId, "f")) {
+            throw new Error('Session ID not set. Call connect() or setSessionId() first.');
+        }
+        return __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sessionId, "f");
+    }
+    /**
+     * Connects to a discovered device and stores the resulting session ID.
+     *
+     * @param args - The DMK connection arguments.
+     * @returns The created session ID.
+     */
+    async connect(...args) {
+        const previousManagedSessionId = __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_managedSessionId, "f");
+        const sessionId = await __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sdk, "f").connect(...args);
+        __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_instances, "m", _LedgerDmkTransportMiddleware_assignSession).call(this, sessionId);
+        __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_managedSessionId, sessionId, "f");
+        if (previousManagedSessionId && previousManagedSessionId !== sessionId) {
+            await __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sdk, "f").disconnect({ sessionId: previousManagedSessionId });
+        }
+        return sessionId;
+    }
+    /**
+     * Build (or return the cached) Ethereum signer for the current session.
+     *
+     * The signer is memoized per session ID. `getEthSigner()` is called from
+     * five different operations on the bridge (`getPublicKey`,
+     * `deviceSignTransaction`, `deviceSignMessage`, `deviceSignTypedData`,
+     * `deviceSignDelegationAuthorization`); a single bridge session therefore
+     * needs at most one signer instance.
+     *
+     * Rebuilding is not free: `SignerEthBuilder.build()` allocates a fresh
+     * `DefaultContextModule` from `@ledgerhq/context-module`, which in its
+     * constructor builds a DI container and instantiates the default loaders
+     * (calldata, dynamic-network, external-plugin, gated-signing, nft, proxy,
+     * safe, token, trusted-name, typed-data, reporter, transaction-check, plus
+     * the field loaders, typed-data loader and blind-signing reporter). See
+     * `node_modules/@ledgerhq/context-module/lib/esm/src/DefaultContextModule.js`.
+     *
+     * Neither `DefaultSignerEth` nor `DefaultContextModule` expose a
+     * `dispose()` / `disconnect()` / `destroy()` method (verified against
+     * `node_modules/@ledgerhq/device-signer-kit-ethereum/lib/esm/internal/DefaultSignerEth.js`
+     * and the `DefaultContextModule` source above). If any of those loaders
+     * hold subscriptions to device-session state, re-creating the signer on
+     * every call would leak them. Caching is therefore defensive against
+     * subscription leaks, not just a micro-optimization.
+     *
+     * The cache is invalidated by `setSessionId()` when the session changes
+     * and by `dispose()` on shutdown.
+     *
+     * @returns An Ethereum signer instance bound to the current session.
+     */
+    getEthSigner() {
+        const sessionId = this.getSessionId();
+        if (__classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_cachedSigner, "f")?.sessionId === sessionId) {
+            return __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_cachedSigner, "f").signer;
+        }
+        const signer = new device_signer_kit_ethereum_1.SignerEthBuilder({
+            dmk: __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sdk, "f"),
+            sessionId,
+        }).build();
+        __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_cachedSigner, { sessionId, signer }, "f");
+        return signer;
+    }
+    /**
+     * Clears the stored session ID and signer cache without disconnecting from
+     * DMK.
+     *
+     * Use when the bridge does not own the DMK instance and the host manages
+     * session lifecycle externally.
+     */
+    clearSession() {
+        __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_sessionId, undefined, "f");
+        __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_managedSessionId, undefined, "f");
+        __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_cachedSigner, null, "f");
+    }
+    /**
+     * Disconnect the current session and clear cached state.
+     *
+     * Silently no-ops when no session has been established.
+     *
+     * @returns A promise that resolves when the session is closed.
+     */
+    async dispose() {
+        const sessionToDisconnect = __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_managedSessionId, "f") ?? __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sessionId, "f");
+        if (sessionToDisconnect) {
+            await __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sdk, "f").disconnect({ sessionId: sessionToDisconnect });
+            this.clearSession();
+        }
+    }
+}
+exports.LedgerDmkTransportMiddleware = LedgerDmkTransportMiddleware;
+_LedgerDmkTransportMiddleware_sdk = new WeakMap(), _LedgerDmkTransportMiddleware_sessionId = new WeakMap(), _LedgerDmkTransportMiddleware_managedSessionId = new WeakMap(), _LedgerDmkTransportMiddleware_cachedSigner = new WeakMap(), _LedgerDmkTransportMiddleware_instances = new WeakSet(), _LedgerDmkTransportMiddleware_assignSession = function _LedgerDmkTransportMiddleware_assignSession(sessionId) {
+    __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_cachedSigner, null, "f");
+    __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_sessionId, sessionId, "f");
+};
+//# sourceMappingURL=ledger-dmk-transport-middleware.cjs.map

package/dist/dmk/ledger-dmk-transport-middleware.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-dmk-transport-middleware.cjs","sourceRoot":"","sources":["../../src/dmk/ledger-dmk-transport-middleware.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AACA,qFAAwE;AAkBxE;;;;GAIG;AACH,MAAa,4BAA4B;IAcvC,YAAY,GAAwB;;QAb3B,oDAA0B;QAEnC,0DAAoB;QAEpB;;;;WAIG;QACH,iEAA2B;QAE3B,qDAAqC,IAAI,EAAC;QAGxC,uBAAA,IAAI,qCAAQ,GAAG,MAAA,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CACd,GAAG,IAAgC;QAEnC,OAAO,uBAAA,IAAI,yCAAK,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,YAAY,CAAC,SAAiB;QAClC,IAAI,uBAAA,IAAI,+CAAW,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QAED,MAAM,gBAAgB,GAAG,uBAAA,IAAI,sDAAkB,CAAC;QAChD,uBAAA,IAAI,4FAAe,MAAnB,IAAI,EAAgB,SAAS,CAAC,CAAC;QAE/B,IAAI,gBAAgB,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACvD,MAAM,uBAAA,IAAI,yCAAK,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC5D,uBAAA,IAAI,kDAAqB,SAAS,MAAA,CAAC;QACrC,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,YAAY;QACV,IAAI,CAAC,uBAAA,IAAI,+CAAW,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QACD,OAAO,uBAAA,IAAI,+CAAW,CAAC;IACzB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,GAAG,IAAuB;QACtC,MAAM,wBAAwB,GAAG,uBAAA,IAAI,sDAAkB,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,uBAAA,IAAI,yCAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QACnD,uBAAA,IAAI,4FAAe,MAAnB,IAAI,EAAgB,SAAS,CAAC,CAAC;QAC/B,uBAAA,IAAI,kDAAqB,SAAS,MAAA,CAAC;QAEnC,IAAI,wBAAwB,IAAI,wBAAwB,KAAK,SAAS,EAAE,CAAC;YACvE,MAAM,uBAAA,IAAI,yCAAK,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,YAAY;QACV,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,uBAAA,IAAI,kDAAc,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;YAChD,OAAO,uBAAA,IAAI,kDAAc,CAAC,MAAM,CAAC;QACnC,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,6CAAgB,CAAC;YAClC,GAAG,EAAE,uBAAA,IAAI,yCAAK;YACd,SAAS;SACV,CAAC,CAAC,KAAK,EAAE,CAAC;QACX,uBAAA,IAAI,8CAAiB,EAAE,SAAS,EAAE,MAAM,EAAE,MAAA,CAAC;QAC3C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACH,YAAY;QACV,uBAAA,IAAI,2CAAc,SAAS,MAAA,CAAC;QAC5B,uBAAA,IAAI,kDAAqB,SAAS,MAAA,CAAC;QACnC,uBAAA,IAAI,8CAAiB,IAAI,MAAA,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,mBAAmB,GAAG,uBAAA,IAAI,sDAAkB,IAAI,uBAAA,IAAI,+CAAW,CAAC;QACtE,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,uBAAA,IAAI,yCAAK,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;CAMF;AArKD,oEAqKC;oYAJgB,SAAiB;IAC9B,uBAAA,IAAI,8CAAiB,IAAI,MAAA,CAAC;IAC1B,uBAAA,IAAI,2CAAc,SAAS,MAAA,CAAC;AAC9B,CAAC","sourcesContent":["import type { DeviceManagementKit } from '@ledgerhq/device-management-kit';\nimport { SignerEthBuilder } from '@ledgerhq/device-signer-kit-ethereum';\n\ntype StartDiscoveringParameters = Parameters<\n  DeviceManagementKit['startDiscovering']\n>;\n\ntype StartDiscoveringResult = ReturnType<\n  DeviceManagementKit['startDiscovering']\n>;\n\ntype ConnectParameters = Parameters<DeviceManagementKit['connect']>;\n\ntype ConnectResult = ReturnType<DeviceManagementKit['connect']>;\n\ntype EthSigner = ReturnType<SignerEthBuilder['build']>;\n\ntype CachedSigner = { sessionId: string; signer: EthSigner };\n\n/**\n * LedgerDmkTransportMiddleware is a middleware to communicate with the\n * Ledger device via DMK.\n * It adapts the new DMK Signer ETH to the existing bridging architectural patterns.\n */\nexport class LedgerDmkTransportMiddleware {\n  readonly #sdk: DeviceManagementKit;\n\n  #sessionId?: string;\n\n  /**\n   * Session created by this middleware's `connect()` call. Only managed\n   * sessions are disconnected automatically; IDs assigned via `setSessionId`\n   * are owned by the host.\n   */\n  #managedSessionId?: string;\n\n  #cachedSigner: CachedSigner | null = null;\n\n  constructor(sdk: DeviceManagementKit) {\n    this.#sdk = sdk;\n  }\n\n  /**\n   * Starts device discovery using the configured DMK transport.\n   *\n   * @param args - Optional DMK discovery options.\n   * @returns An observable that emits discovered devices.\n   */\n  startDiscovering(\n    ...args: StartDiscoveringParameters\n  ): StartDiscoveringResult {\n    return this.#sdk.startDiscovering(...args);\n  }\n\n  /**\n   * Set the session ID used for subsequent DMK commands.\n   *\n   * Binds the middleware to an existing DMK session without disconnecting\n   * any prior session. If the current session was created by this middleware's\n   * `connect()`, that managed session is released when replaced.\n   *\n   * Invalidates any cached signer so the next `getEthSigner()` call builds a\n   * fresh signer bound to the new session.\n   *\n   * @param sessionId - The session ID for the connected Ledger device.\n   */\n  async setSessionId(sessionId: string): Promise<void> {\n    if (this.#sessionId === sessionId) {\n      return;\n    }\n\n    const managedToRelease = this.#managedSessionId;\n    this.#assignSession(sessionId);\n\n    if (managedToRelease && managedToRelease !== sessionId) {\n      await this.#sdk.disconnect({ sessionId: managedToRelease });\n      this.#managedSessionId = undefined;\n    }\n  }\n\n  /**\n   * Method to retrieve the session ID.\n   *\n   * @returns The session ID.\n   * @throws {Error} If `setSessionId` or `connect` has not been called yet.\n   */\n  getSessionId(): string {\n    if (!this.#sessionId) {\n      throw new Error(\n        'Session ID not set. Call connect() or setSessionId() first.',\n      );\n    }\n    return this.#sessionId;\n  }\n\n  /**\n   * Connects to a discovered device and stores the resulting session ID.\n   *\n   * @param args - The DMK connection arguments.\n   * @returns The created session ID.\n   */\n  async connect(...args: ConnectParameters): ConnectResult {\n    const previousManagedSessionId = this.#managedSessionId;\n    const sessionId = await this.#sdk.connect(...args);\n    this.#assignSession(sessionId);\n    this.#managedSessionId = sessionId;\n\n    if (previousManagedSessionId && previousManagedSessionId !== sessionId) {\n      await this.#sdk.disconnect({ sessionId: previousManagedSessionId });\n    }\n\n    return sessionId;\n  }\n\n  /**\n   * Build (or return the cached) Ethereum signer for the current session.\n   *\n   * The signer is memoized per session ID. `getEthSigner()` is called from\n   * five different operations on the bridge (`getPublicKey`,\n   * `deviceSignTransaction`, `deviceSignMessage`, `deviceSignTypedData`,\n   * `deviceSignDelegationAuthorization`); a single bridge session therefore\n   * needs at most one signer instance.\n   *\n   * Rebuilding is not free: `SignerEthBuilder.build()` allocates a fresh\n   * `DefaultContextModule` from `@ledgerhq/context-module`, which in its\n   * constructor builds a DI container and instantiates the default loaders\n   * (calldata, dynamic-network, external-plugin, gated-signing, nft, proxy,\n   * safe, token, trusted-name, typed-data, reporter, transaction-check, plus\n   * the field loaders, typed-data loader and blind-signing reporter). See\n   * `node_modules/@ledgerhq/context-module/lib/esm/src/DefaultContextModule.js`.\n   *\n   * Neither `DefaultSignerEth` nor `DefaultContextModule` expose a\n   * `dispose()` / `disconnect()` / `destroy()` method (verified against\n   * `node_modules/@ledgerhq/device-signer-kit-ethereum/lib/esm/internal/DefaultSignerEth.js`\n   * and the `DefaultContextModule` source above). If any of those loaders\n   * hold subscriptions to device-session state, re-creating the signer on\n   * every call would leak them. Caching is therefore defensive against\n   * subscription leaks, not just a micro-optimization.\n   *\n   * The cache is invalidated by `setSessionId()` when the session changes\n   * and by `dispose()` on shutdown.\n   *\n   * @returns An Ethereum signer instance bound to the current session.\n   */\n  getEthSigner(): EthSigner {\n    const sessionId = this.getSessionId();\n    if (this.#cachedSigner?.sessionId === sessionId) {\n      return this.#cachedSigner.signer;\n    }\n    const signer = new SignerEthBuilder({\n      dmk: this.#sdk,\n      sessionId,\n    }).build();\n    this.#cachedSigner = { sessionId, signer };\n    return signer;\n  }\n\n  /**\n   * Clears the stored session ID and signer cache without disconnecting from\n   * DMK.\n   *\n   * Use when the bridge does not own the DMK instance and the host manages\n   * session lifecycle externally.\n   */\n  clearSession(): void {\n    this.#sessionId = undefined;\n    this.#managedSessionId = undefined;\n    this.#cachedSigner = null;\n  }\n\n  /**\n   * Disconnect the current session and clear cached state.\n   *\n   * Silently no-ops when no session has been established.\n   *\n   * @returns A promise that resolves when the session is closed.\n   */\n  async dispose(): Promise<void> {\n    const sessionToDisconnect = this.#managedSessionId ?? this.#sessionId;\n    if (sessionToDisconnect) {\n      await this.#sdk.disconnect({ sessionId: sessionToDisconnect });\n      this.clearSession();\n    }\n  }\n\n  #assignSession(sessionId: string): void {\n    this.#cachedSigner = null;\n    this.#sessionId = sessionId;\n  }\n}\n"]}

package/dist/dmk/ledger-dmk-transport-middleware.d.cts

@@ -0,0 +1,99 @@
+import type { DeviceManagementKit } from "@ledgerhq/device-management-kit";
+import { SignerEthBuilder } from "@ledgerhq/device-signer-kit-ethereum";
+type StartDiscoveringParameters = Parameters<DeviceManagementKit['startDiscovering']>;
+type StartDiscoveringResult = ReturnType<DeviceManagementKit['startDiscovering']>;
+type ConnectParameters = Parameters<DeviceManagementKit['connect']>;
+type ConnectResult = ReturnType<DeviceManagementKit['connect']>;
+type EthSigner = ReturnType<SignerEthBuilder['build']>;
+/**
+ * LedgerDmkTransportMiddleware is a middleware to communicate with the
+ * Ledger device via DMK.
+ * It adapts the new DMK Signer ETH to the existing bridging architectural patterns.
+ */
+export declare class LedgerDmkTransportMiddleware {
+    #private;
+    constructor(sdk: DeviceManagementKit);
+    /**
+     * Starts device discovery using the configured DMK transport.
+     *
+     * @param args - Optional DMK discovery options.
+     * @returns An observable that emits discovered devices.
+     */
+    startDiscovering(...args: StartDiscoveringParameters): StartDiscoveringResult;
+    /**
+     * Set the session ID used for subsequent DMK commands.
+     *
+     * Binds the middleware to an existing DMK session without disconnecting
+     * any prior session. If the current session was created by this middleware's
+     * `connect()`, that managed session is released when replaced.
+     *
+     * Invalidates any cached signer so the next `getEthSigner()` call builds a
+     * fresh signer bound to the new session.
+     *
+     * @param sessionId - The session ID for the connected Ledger device.
+     */
+    setSessionId(sessionId: string): Promise<void>;
+    /**
+     * Method to retrieve the session ID.
+     *
+     * @returns The session ID.
+     * @throws {Error} If `setSessionId` or `connect` has not been called yet.
+     */
+    getSessionId(): string;
+    /**
+     * Connects to a discovered device and stores the resulting session ID.
+     *
+     * @param args - The DMK connection arguments.
+     * @returns The created session ID.
+     */
+    connect(...args: ConnectParameters): ConnectResult;
+    /**
+     * Build (or return the cached) Ethereum signer for the current session.
+     *
+     * The signer is memoized per session ID. `getEthSigner()` is called from
+     * five different operations on the bridge (`getPublicKey`,
+     * `deviceSignTransaction`, `deviceSignMessage`, `deviceSignTypedData`,
+     * `deviceSignDelegationAuthorization`); a single bridge session therefore
+     * needs at most one signer instance.
+     *
+     * Rebuilding is not free: `SignerEthBuilder.build()` allocates a fresh
+     * `DefaultContextModule` from `@ledgerhq/context-module`, which in its
+     * constructor builds a DI container and instantiates the default loaders
+     * (calldata, dynamic-network, external-plugin, gated-signing, nft, proxy,
+     * safe, token, trusted-name, typed-data, reporter, transaction-check, plus
+     * the field loaders, typed-data loader and blind-signing reporter). See
+     * `node_modules/@ledgerhq/context-module/lib/esm/src/DefaultContextModule.js`.
+     *
+     * Neither `DefaultSignerEth` nor `DefaultContextModule` expose a
+     * `dispose()` / `disconnect()` / `destroy()` method (verified against
+     * `node_modules/@ledgerhq/device-signer-kit-ethereum/lib/esm/internal/DefaultSignerEth.js`
+     * and the `DefaultContextModule` source above). If any of those loaders
+     * hold subscriptions to device-session state, re-creating the signer on
+     * every call would leak them. Caching is therefore defensive against
+     * subscription leaks, not just a micro-optimization.
+     *
+     * The cache is invalidated by `setSessionId()` when the session changes
+     * and by `dispose()` on shutdown.
+     *
+     * @returns An Ethereum signer instance bound to the current session.
+     */
+    getEthSigner(): EthSigner;
+    /**
+     * Clears the stored session ID and signer cache without disconnecting from
+     * DMK.
+     *
+     * Use when the bridge does not own the DMK instance and the host manages
+     * session lifecycle externally.
+     */
+    clearSession(): void;
+    /**
+     * Disconnect the current session and clear cached state.
+     *
+     * Silently no-ops when no session has been established.
+     *
+     * @returns A promise that resolves when the session is closed.
+     */
+    dispose(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=ledger-dmk-transport-middleware.d.cts.map

package/dist/dmk/ledger-dmk-transport-middleware.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-dmk-transport-middleware.d.cts","sourceRoot":"","sources":["../../src/dmk/ledger-dmk-transport-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,wCAAwC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,6CAA6C;AAExE,KAAK,0BAA0B,GAAG,UAAU,CAC1C,mBAAmB,CAAC,kBAAkB,CAAC,CACxC,CAAC;AAEF,KAAK,sBAAsB,GAAG,UAAU,CACtC,mBAAmB,CAAC,kBAAkB,CAAC,CACxC,CAAC;AAEF,KAAK,iBAAiB,GAAG,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;AAEpE,KAAK,aAAa,GAAG,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;AAEhE,KAAK,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;AAIvD;;;;GAIG;AACH,qBAAa,4BAA4B;;gBAc3B,GAAG,EAAE,mBAAmB;IAIpC;;;;;OAKG;IACH,gBAAgB,CACd,GAAG,IAAI,EAAE,0BAA0B,GAClC,sBAAsB;IAIzB;;;;;;;;;;;OAWG;IACG,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcpD;;;;;OAKG;IACH,YAAY,IAAI,MAAM;IAStB;;;;;OAKG;IACG,OAAO,CAAC,GAAG,IAAI,EAAE,iBAAiB,GAAG,aAAa;IAaxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,YAAY,IAAI,SAAS;IAazB;;;;;;OAMG;IACH,YAAY,IAAI,IAAI;IAMpB;;;;;;OAMG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAY/B"}

package/dist/dmk/ledger-dmk-transport-middleware.d.mts

@@ -0,0 +1,99 @@
+import type { DeviceManagementKit } from "@ledgerhq/device-management-kit";
+import { SignerEthBuilder } from "@ledgerhq/device-signer-kit-ethereum";
+type StartDiscoveringParameters = Parameters<DeviceManagementKit['startDiscovering']>;
+type StartDiscoveringResult = ReturnType<DeviceManagementKit['startDiscovering']>;
+type ConnectParameters = Parameters<DeviceManagementKit['connect']>;
+type ConnectResult = ReturnType<DeviceManagementKit['connect']>;
+type EthSigner = ReturnType<SignerEthBuilder['build']>;
+/**
+ * LedgerDmkTransportMiddleware is a middleware to communicate with the
+ * Ledger device via DMK.
+ * It adapts the new DMK Signer ETH to the existing bridging architectural patterns.
+ */
+export declare class LedgerDmkTransportMiddleware {
+    #private;
+    constructor(sdk: DeviceManagementKit);
+    /**
+     * Starts device discovery using the configured DMK transport.
+     *
+     * @param args - Optional DMK discovery options.
+     * @returns An observable that emits discovered devices.
+     */
+    startDiscovering(...args: StartDiscoveringParameters): StartDiscoveringResult;
+    /**
+     * Set the session ID used for subsequent DMK commands.
+     *
+     * Binds the middleware to an existing DMK session without disconnecting
+     * any prior session. If the current session was created by this middleware's
+     * `connect()`, that managed session is released when replaced.
+     *
+     * Invalidates any cached signer so the next `getEthSigner()` call builds a
+     * fresh signer bound to the new session.
+     *
+     * @param sessionId - The session ID for the connected Ledger device.
+     */
+    setSessionId(sessionId: string): Promise<void>;
+    /**
+     * Method to retrieve the session ID.
+     *
+     * @returns The session ID.
+     * @throws {Error} If `setSessionId` or `connect` has not been called yet.
+     */
+    getSessionId(): string;
+    /**
+     * Connects to a discovered device and stores the resulting session ID.
+     *
+     * @param args - The DMK connection arguments.
+     * @returns The created session ID.
+     */
+    connect(...args: ConnectParameters): ConnectResult;
+    /**
+     * Build (or return the cached) Ethereum signer for the current session.
+     *
+     * The signer is memoized per session ID. `getEthSigner()` is called from
+     * five different operations on the bridge (`getPublicKey`,
+     * `deviceSignTransaction`, `deviceSignMessage`, `deviceSignTypedData`,
+     * `deviceSignDelegationAuthorization`); a single bridge session therefore
+     * needs at most one signer instance.
+     *
+     * Rebuilding is not free: `SignerEthBuilder.build()` allocates a fresh
+     * `DefaultContextModule` from `@ledgerhq/context-module`, which in its
+     * constructor builds a DI container and instantiates the default loaders
+     * (calldata, dynamic-network, external-plugin, gated-signing, nft, proxy,
+     * safe, token, trusted-name, typed-data, reporter, transaction-check, plus
+     * the field loaders, typed-data loader and blind-signing reporter). See
+     * `node_modules/@ledgerhq/context-module/lib/esm/src/DefaultContextModule.js`.
+     *
+     * Neither `DefaultSignerEth` nor `DefaultContextModule` expose a
+     * `dispose()` / `disconnect()` / `destroy()` method (verified against
+     * `node_modules/@ledgerhq/device-signer-kit-ethereum/lib/esm/internal/DefaultSignerEth.js`
+     * and the `DefaultContextModule` source above). If any of those loaders
+     * hold subscriptions to device-session state, re-creating the signer on
+     * every call would leak them. Caching is therefore defensive against
+     * subscription leaks, not just a micro-optimization.
+     *
+     * The cache is invalidated by `setSessionId()` when the session changes
+     * and by `dispose()` on shutdown.
+     *
+     * @returns An Ethereum signer instance bound to the current session.
+     */
+    getEthSigner(): EthSigner;
+    /**
+     * Clears the stored session ID and signer cache without disconnecting from
+     * DMK.
+     *
+     * Use when the bridge does not own the DMK instance and the host manages
+     * session lifecycle externally.
+     */
+    clearSession(): void;
+    /**
+     * Disconnect the current session and clear cached state.
+     *
+     * Silently no-ops when no session has been established.
+     *
+     * @returns A promise that resolves when the session is closed.
+     */
+    dispose(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=ledger-dmk-transport-middleware.d.mts.map

package/dist/dmk/ledger-dmk-transport-middleware.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-dmk-transport-middleware.d.mts","sourceRoot":"","sources":["../../src/dmk/ledger-dmk-transport-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,wCAAwC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,6CAA6C;AAExE,KAAK,0BAA0B,GAAG,UAAU,CAC1C,mBAAmB,CAAC,kBAAkB,CAAC,CACxC,CAAC;AAEF,KAAK,sBAAsB,GAAG,UAAU,CACtC,mBAAmB,CAAC,kBAAkB,CAAC,CACxC,CAAC;AAEF,KAAK,iBAAiB,GAAG,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;AAEpE,KAAK,aAAa,GAAG,UAAU,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC;AAEhE,KAAK,SAAS,GAAG,UAAU,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC;AAIvD;;;;GAIG;AACH,qBAAa,4BAA4B;;gBAc3B,GAAG,EAAE,mBAAmB;IAIpC;;;;;OAKG;IACH,gBAAgB,CACd,GAAG,IAAI,EAAE,0BAA0B,GAClC,sBAAsB;IAIzB;;;;;;;;;;;OAWG;IACG,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcpD;;;;;OAKG;IACH,YAAY,IAAI,MAAM;IAStB;;;;;OAKG;IACG,OAAO,CAAC,GAAG,IAAI,EAAE,iBAAiB,GAAG,aAAa;IAaxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,YAAY,IAAI,SAAS;IAazB;;;;;;OAMG;IACH,YAAY,IAAI,IAAI;IAMpB;;;;;;OAMG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAY/B"}

package/dist/dmk/ledger-dmk-transport-middleware.mjs

@@ -0,0 +1,166 @@
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _LedgerDmkTransportMiddleware_instances, _LedgerDmkTransportMiddleware_sdk, _LedgerDmkTransportMiddleware_sessionId, _LedgerDmkTransportMiddleware_managedSessionId, _LedgerDmkTransportMiddleware_cachedSigner, _LedgerDmkTransportMiddleware_assignSession;
+import { SignerEthBuilder } from "@ledgerhq/device-signer-kit-ethereum";
+/**
+ * LedgerDmkTransportMiddleware is a middleware to communicate with the
+ * Ledger device via DMK.
+ * It adapts the new DMK Signer ETH to the existing bridging architectural patterns.
+ */
+export class LedgerDmkTransportMiddleware {
+    constructor(sdk) {
+        _LedgerDmkTransportMiddleware_instances.add(this);
+        _LedgerDmkTransportMiddleware_sdk.set(this, void 0);
+        _LedgerDmkTransportMiddleware_sessionId.set(this, void 0);
+        /**
+         * Session created by this middleware's `connect()` call. Only managed
+         * sessions are disconnected automatically; IDs assigned via `setSessionId`
+         * are owned by the host.
+         */
+        _LedgerDmkTransportMiddleware_managedSessionId.set(this, void 0);
+        _LedgerDmkTransportMiddleware_cachedSigner.set(this, null);
+        __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_sdk, sdk, "f");
+    }
+    /**
+     * Starts device discovery using the configured DMK transport.
+     *
+     * @param args - Optional DMK discovery options.
+     * @returns An observable that emits discovered devices.
+     */
+    startDiscovering(...args) {
+        return __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sdk, "f").startDiscovering(...args);
+    }
+    /**
+     * Set the session ID used for subsequent DMK commands.
+     *
+     * Binds the middleware to an existing DMK session without disconnecting
+     * any prior session. If the current session was created by this middleware's
+     * `connect()`, that managed session is released when replaced.
+     *
+     * Invalidates any cached signer so the next `getEthSigner()` call builds a
+     * fresh signer bound to the new session.
+     *
+     * @param sessionId - The session ID for the connected Ledger device.
+     */
+    async setSessionId(sessionId) {
+        if (__classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sessionId, "f") === sessionId) {
+            return;
+        }
+        const managedToRelease = __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_managedSessionId, "f");
+        __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_instances, "m", _LedgerDmkTransportMiddleware_assignSession).call(this, sessionId);
+        if (managedToRelease && managedToRelease !== sessionId) {
+            await __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sdk, "f").disconnect({ sessionId: managedToRelease });
+            __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_managedSessionId, undefined, "f");
+        }
+    }
+    /**
+     * Method to retrieve the session ID.
+     *
+     * @returns The session ID.
+     * @throws {Error} If `setSessionId` or `connect` has not been called yet.
+     */
+    getSessionId() {
+        if (!__classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sessionId, "f")) {
+            throw new Error('Session ID not set. Call connect() or setSessionId() first.');
+        }
+        return __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sessionId, "f");
+    }
+    /**
+     * Connects to a discovered device and stores the resulting session ID.
+     *
+     * @param args - The DMK connection arguments.
+     * @returns The created session ID.
+     */
+    async connect(...args) {
+        const previousManagedSessionId = __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_managedSessionId, "f");
+        const sessionId = await __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sdk, "f").connect(...args);
+        __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_instances, "m", _LedgerDmkTransportMiddleware_assignSession).call(this, sessionId);
+        __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_managedSessionId, sessionId, "f");
+        if (previousManagedSessionId && previousManagedSessionId !== sessionId) {
+            await __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sdk, "f").disconnect({ sessionId: previousManagedSessionId });
+        }
+        return sessionId;
+    }
+    /**
+     * Build (or return the cached) Ethereum signer for the current session.
+     *
+     * The signer is memoized per session ID. `getEthSigner()` is called from
+     * five different operations on the bridge (`getPublicKey`,
+     * `deviceSignTransaction`, `deviceSignMessage`, `deviceSignTypedData`,
+     * `deviceSignDelegationAuthorization`); a single bridge session therefore
+     * needs at most one signer instance.
+     *
+     * Rebuilding is not free: `SignerEthBuilder.build()` allocates a fresh
+     * `DefaultContextModule` from `@ledgerhq/context-module`, which in its
+     * constructor builds a DI container and instantiates the default loaders
+     * (calldata, dynamic-network, external-plugin, gated-signing, nft, proxy,
+     * safe, token, trusted-name, typed-data, reporter, transaction-check, plus
+     * the field loaders, typed-data loader and blind-signing reporter). See
+     * `node_modules/@ledgerhq/context-module/lib/esm/src/DefaultContextModule.js`.
+     *
+     * Neither `DefaultSignerEth` nor `DefaultContextModule` expose a
+     * `dispose()` / `disconnect()` / `destroy()` method (verified against
+     * `node_modules/@ledgerhq/device-signer-kit-ethereum/lib/esm/internal/DefaultSignerEth.js`
+     * and the `DefaultContextModule` source above). If any of those loaders
+     * hold subscriptions to device-session state, re-creating the signer on
+     * every call would leak them. Caching is therefore defensive against
+     * subscription leaks, not just a micro-optimization.
+     *
+     * The cache is invalidated by `setSessionId()` when the session changes
+     * and by `dispose()` on shutdown.
+     *
+     * @returns An Ethereum signer instance bound to the current session.
+     */
+    getEthSigner() {
+        const sessionId = this.getSessionId();
+        if (__classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_cachedSigner, "f")?.sessionId === sessionId) {
+            return __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_cachedSigner, "f").signer;
+        }
+        const signer = new SignerEthBuilder({
+            dmk: __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sdk, "f"),
+            sessionId,
+        }).build();
+        __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_cachedSigner, { sessionId, signer }, "f");
+        return signer;
+    }
+    /**
+     * Clears the stored session ID and signer cache without disconnecting from
+     * DMK.
+     *
+     * Use when the bridge does not own the DMK instance and the host manages
+     * session lifecycle externally.
+     */
+    clearSession() {
+        __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_sessionId, undefined, "f");
+        __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_managedSessionId, undefined, "f");
+        __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_cachedSigner, null, "f");
+    }
+    /**
+     * Disconnect the current session and clear cached state.
+     *
+     * Silently no-ops when no session has been established.
+     *
+     * @returns A promise that resolves when the session is closed.
+     */
+    async dispose() {
+        const sessionToDisconnect = __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_managedSessionId, "f") ?? __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sessionId, "f");
+        if (sessionToDisconnect) {
+            await __classPrivateFieldGet(this, _LedgerDmkTransportMiddleware_sdk, "f").disconnect({ sessionId: sessionToDisconnect });
+            this.clearSession();
+        }
+    }
+}
+_LedgerDmkTransportMiddleware_sdk = new WeakMap(), _LedgerDmkTransportMiddleware_sessionId = new WeakMap(), _LedgerDmkTransportMiddleware_managedSessionId = new WeakMap(), _LedgerDmkTransportMiddleware_cachedSigner = new WeakMap(), _LedgerDmkTransportMiddleware_instances = new WeakSet(), _LedgerDmkTransportMiddleware_assignSession = function _LedgerDmkTransportMiddleware_assignSession(sessionId) {
+    __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_cachedSigner, null, "f");
+    __classPrivateFieldSet(this, _LedgerDmkTransportMiddleware_sessionId, sessionId, "f");
+};
+//# sourceMappingURL=ledger-dmk-transport-middleware.mjs.map

package/dist/dmk/ledger-dmk-transport-middleware.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-dmk-transport-middleware.mjs","sourceRoot":"","sources":["../../src/dmk/ledger-dmk-transport-middleware.ts"],"names":[],"mappings":";;;;;;;;;;;;AACA,OAAO,EAAE,gBAAgB,EAAE,6CAA6C;AAkBxE;;;;GAIG;AACH,MAAM,OAAO,4BAA4B;IAcvC,YAAY,GAAwB;;QAb3B,oDAA0B;QAEnC,0DAAoB;QAEpB;;;;WAIG;QACH,iEAA2B;QAE3B,qDAAqC,IAAI,EAAC;QAGxC,uBAAA,IAAI,qCAAQ,GAAG,MAAA,CAAC;IAClB,CAAC;IAED;;;;;OAKG;IACH,gBAAgB,CACd,GAAG,IAAgC;QAEnC,OAAO,uBAAA,IAAI,yCAAK,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,YAAY,CAAC,SAAiB;QAClC,IAAI,uBAAA,IAAI,+CAAW,KAAK,SAAS,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QAED,MAAM,gBAAgB,GAAG,uBAAA,IAAI,sDAAkB,CAAC;QAChD,uBAAA,IAAI,4FAAe,MAAnB,IAAI,EAAgB,SAAS,CAAC,CAAC;QAE/B,IAAI,gBAAgB,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACvD,MAAM,uBAAA,IAAI,yCAAK,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC5D,uBAAA,IAAI,kDAAqB,SAAS,MAAA,CAAC;QACrC,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,YAAY;QACV,IAAI,CAAC,uBAAA,IAAI,+CAAW,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;QACJ,CAAC;QACD,OAAO,uBAAA,IAAI,+CAAW,CAAC;IACzB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAO,CAAC,GAAG,IAAuB;QACtC,MAAM,wBAAwB,GAAG,uBAAA,IAAI,sDAAkB,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,uBAAA,IAAI,yCAAK,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;QACnD,uBAAA,IAAI,4FAAe,MAAnB,IAAI,EAAgB,SAAS,CAAC,CAAC;QAC/B,uBAAA,IAAI,kDAAqB,SAAS,MAAA,CAAC;QAEnC,IAAI,wBAAwB,IAAI,wBAAwB,KAAK,SAAS,EAAE,CAAC;YACvE,MAAM,uBAAA,IAAI,yCAAK,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACtE,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6BG;IACH,YAAY;QACV,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;QACtC,IAAI,uBAAA,IAAI,kDAAc,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;YAChD,OAAO,uBAAA,IAAI,kDAAc,CAAC,MAAM,CAAC;QACnC,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC;YAClC,GAAG,EAAE,uBAAA,IAAI,yCAAK;YACd,SAAS;SACV,CAAC,CAAC,KAAK,EAAE,CAAC;QACX,uBAAA,IAAI,8CAAiB,EAAE,SAAS,EAAE,MAAM,EAAE,MAAA,CAAC;QAC3C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;;OAMG;IACH,YAAY;QACV,uBAAA,IAAI,2CAAc,SAAS,MAAA,CAAC;QAC5B,uBAAA,IAAI,kDAAqB,SAAS,MAAA,CAAC;QACnC,uBAAA,IAAI,8CAAiB,IAAI,MAAA,CAAC;IAC5B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO;QACX,MAAM,mBAAmB,GAAG,uBAAA,IAAI,sDAAkB,IAAI,uBAAA,IAAI,+CAAW,CAAC;QACtE,IAAI,mBAAmB,EAAE,CAAC;YACxB,MAAM,uBAAA,IAAI,yCAAK,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;CAMF;oYAJgB,SAAiB;IAC9B,uBAAA,IAAI,8CAAiB,IAAI,MAAA,CAAC;IAC1B,uBAAA,IAAI,2CAAc,SAAS,MAAA,CAAC;AAC9B,CAAC","sourcesContent":["import type { DeviceManagementKit } from '@ledgerhq/device-management-kit';\nimport { SignerEthBuilder } from '@ledgerhq/device-signer-kit-ethereum';\n\ntype StartDiscoveringParameters = Parameters<\n  DeviceManagementKit['startDiscovering']\n>;\n\ntype StartDiscoveringResult = ReturnType<\n  DeviceManagementKit['startDiscovering']\n>;\n\ntype ConnectParameters = Parameters<DeviceManagementKit['connect']>;\n\ntype ConnectResult = ReturnType<DeviceManagementKit['connect']>;\n\ntype EthSigner = ReturnType<SignerEthBuilder['build']>;\n\ntype CachedSigner = { sessionId: string; signer: EthSigner };\n\n/**\n * LedgerDmkTransportMiddleware is a middleware to communicate with the\n * Ledger device via DMK.\n * It adapts the new DMK Signer ETH to the existing bridging architectural patterns.\n */\nexport class LedgerDmkTransportMiddleware {\n  readonly #sdk: DeviceManagementKit;\n\n  #sessionId?: string;\n\n  /**\n   * Session created by this middleware's `connect()` call. Only managed\n   * sessions are disconnected automatically; IDs assigned via `setSessionId`\n   * are owned by the host.\n   */\n  #managedSessionId?: string;\n\n  #cachedSigner: CachedSigner | null = null;\n\n  constructor(sdk: DeviceManagementKit) {\n    this.#sdk = sdk;\n  }\n\n  /**\n   * Starts device discovery using the configured DMK transport.\n   *\n   * @param args - Optional DMK discovery options.\n   * @returns An observable that emits discovered devices.\n   */\n  startDiscovering(\n    ...args: StartDiscoveringParameters\n  ): StartDiscoveringResult {\n    return this.#sdk.startDiscovering(...args);\n  }\n\n  /**\n   * Set the session ID used for subsequent DMK commands.\n   *\n   * Binds the middleware to an existing DMK session without disconnecting\n   * any prior session. If the current session was created by this middleware's\n   * `connect()`, that managed session is released when replaced.\n   *\n   * Invalidates any cached signer so the next `getEthSigner()` call builds a\n   * fresh signer bound to the new session.\n   *\n   * @param sessionId - The session ID for the connected Ledger device.\n   */\n  async setSessionId(sessionId: string): Promise<void> {\n    if (this.#sessionId === sessionId) {\n      return;\n    }\n\n    const managedToRelease = this.#managedSessionId;\n    this.#assignSession(sessionId);\n\n    if (managedToRelease && managedToRelease !== sessionId) {\n      await this.#sdk.disconnect({ sessionId: managedToRelease });\n      this.#managedSessionId = undefined;\n    }\n  }\n\n  /**\n   * Method to retrieve the session ID.\n   *\n   * @returns The session ID.\n   * @throws {Error} If `setSessionId` or `connect` has not been called yet.\n   */\n  getSessionId(): string {\n    if (!this.#sessionId) {\n      throw new Error(\n        'Session ID not set. Call connect() or setSessionId() first.',\n      );\n    }\n    return this.#sessionId;\n  }\n\n  /**\n   * Connects to a discovered device and stores the resulting session ID.\n   *\n   * @param args - The DMK connection arguments.\n   * @returns The created session ID.\n   */\n  async connect(...args: ConnectParameters): ConnectResult {\n    const previousManagedSessionId = this.#managedSessionId;\n    const sessionId = await this.#sdk.connect(...args);\n    this.#assignSession(sessionId);\n    this.#managedSessionId = sessionId;\n\n    if (previousManagedSessionId && previousManagedSessionId !== sessionId) {\n      await this.#sdk.disconnect({ sessionId: previousManagedSessionId });\n    }\n\n    return sessionId;\n  }\n\n  /**\n   * Build (or return the cached) Ethereum signer for the current session.\n   *\n   * The signer is memoized per session ID. `getEthSigner()` is called from\n   * five different operations on the bridge (`getPublicKey`,\n   * `deviceSignTransaction`, `deviceSignMessage`, `deviceSignTypedData`,\n   * `deviceSignDelegationAuthorization`); a single bridge session therefore\n   * needs at most one signer instance.\n   *\n   * Rebuilding is not free: `SignerEthBuilder.build()` allocates a fresh\n   * `DefaultContextModule` from `@ledgerhq/context-module`, which in its\n   * constructor builds a DI container and instantiates the default loaders\n   * (calldata, dynamic-network, external-plugin, gated-signing, nft, proxy,\n   * safe, token, trusted-name, typed-data, reporter, transaction-check, plus\n   * the field loaders, typed-data loader and blind-signing reporter). See\n   * `node_modules/@ledgerhq/context-module/lib/esm/src/DefaultContextModule.js`.\n   *\n   * Neither `DefaultSignerEth` nor `DefaultContextModule` expose a\n   * `dispose()` / `disconnect()` / `destroy()` method (verified against\n   * `node_modules/@ledgerhq/device-signer-kit-ethereum/lib/esm/internal/DefaultSignerEth.js`\n   * and the `DefaultContextModule` source above). If any of those loaders\n   * hold subscriptions to device-session state, re-creating the signer on\n   * every call would leak them. Caching is therefore defensive against\n   * subscription leaks, not just a micro-optimization.\n   *\n   * The cache is invalidated by `setSessionId()` when the session changes\n   * and by `dispose()` on shutdown.\n   *\n   * @returns An Ethereum signer instance bound to the current session.\n   */\n  getEthSigner(): EthSigner {\n    const sessionId = this.getSessionId();\n    if (this.#cachedSigner?.sessionId === sessionId) {\n      return this.#cachedSigner.signer;\n    }\n    const signer = new SignerEthBuilder({\n      dmk: this.#sdk,\n      sessionId,\n    }).build();\n    this.#cachedSigner = { sessionId, signer };\n    return signer;\n  }\n\n  /**\n   * Clears the stored session ID and signer cache without disconnecting from\n   * DMK.\n   *\n   * Use when the bridge does not own the DMK instance and the host manages\n   * session lifecycle externally.\n   */\n  clearSession(): void {\n    this.#sessionId = undefined;\n    this.#managedSessionId = undefined;\n    this.#cachedSigner = null;\n  }\n\n  /**\n   * Disconnect the current session and clear cached state.\n   *\n   * Silently no-ops when no session has been established.\n   *\n   * @returns A promise that resolves when the session is closed.\n   */\n  async dispose(): Promise<void> {\n    const sessionToDisconnect = this.#managedSessionId ?? this.#sessionId;\n    if (sessionToDisconnect) {\n      await this.#sdk.disconnect({ sessionId: sessionToDisconnect });\n      this.clearSession();\n    }\n  }\n\n  #assignSession(sessionId: string): void {\n    this.#cachedSigner = null;\n    this.#sessionId = sessionId;\n  }\n}\n"]}

package/dist/index.cjs

@@ -17,10 +17,13 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./ledger-keyring.cjs"), exports);
 __exportStar(require("./ledger-iframe-bridge.cjs"), exports);
 __exportStar(require("./ledger-mobile-bridge.cjs"), exports);
+__exportStar(require("./dmk/ledger-dmk-bridge.cjs"), exports);
+__exportStar(require("./dmk/ledger-dmk-transport-middleware.cjs"), exports);
 __exportStar(require("./ledger-transport-middleware.cjs"), exports);
 __exportStar(require("./ledger-hw-app.cjs"), exports);
 __exportStar(require("./errors.cjs"), exports);
 __exportStar(require("./ledger-error-handler.cjs"), exports);
 __exportStar(require("./constants.cjs"), exports);
 __exportStar(require("./utils.cjs"), exports);
+__exportStar(require("./dmk/dmk-error-translator.cjs"), exports);
 //# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAiC;AACjC,6DAAuC;AACvC,6DAAuC;AAEvC,oEAA8C;AAE9C,sDAAgC;AAChC,+CAAyB;AACzB,6DAAuC;AACvC,kDAA4B;AAC5B,8CAAwB","sourcesContent":["export * from './ledger-keyring';\nexport * from './ledger-iframe-bridge';\nexport * from './ledger-mobile-bridge';\nexport type * from './ledger-bridge';\nexport * from './ledger-transport-middleware';\nexport type * from './type';\nexport * from './ledger-hw-app';\nexport * from './errors';\nexport * from './ledger-error-handler';\nexport * from './constants';\nexport * from './utils';\n"]}
+{"version":3,"file":"index.cjs","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAiC;AACjC,6DAAuC;AACvC,6DAAuC;AACvC,8DAAwC;AACxC,4EAAsD;AAEtD,oEAA8C;AAE9C,sDAAgC;AAChC,+CAAyB;AACzB,6DAAuC;AACvC,kDAA4B;AAC5B,8CAAwB;AACxB,iEAA2C","sourcesContent":["export * from './ledger-keyring';\nexport * from './ledger-iframe-bridge';\nexport * from './ledger-mobile-bridge';\nexport * from './dmk/ledger-dmk-bridge';\nexport * from './dmk/ledger-dmk-transport-middleware';\nexport type * from './ledger-bridge';\nexport * from './ledger-transport-middleware';\nexport type * from './type';\nexport * from './ledger-hw-app';\nexport * from './errors';\nexport * from './ledger-error-handler';\nexport * from './constants';\nexport * from './utils';\nexport * from './dmk/dmk-error-translator';\n"]}

package/dist/index.d.cts

@@ -1,6 +1,8 @@
 export * from "./ledger-keyring.cjs";
 export * from "./ledger-iframe-bridge.cjs";
 export * from "./ledger-mobile-bridge.cjs";
+export * from "./dmk/ledger-dmk-bridge.cjs";
+export * from "./dmk/ledger-dmk-transport-middleware.cjs";
 export type * from "./ledger-bridge.cjs";
 export * from "./ledger-transport-middleware.cjs";
 export type * from "./type.cjs";
@@ -9,4 +11,5 @@ export * from "./errors.cjs";
 export * from "./ledger-error-handler.cjs";
 export * from "./constants.cjs";
 export * from "./utils.cjs";
+export * from "./dmk/dmk-error-translator.cjs";
 //# sourceMappingURL=index.d.cts.map

package/dist/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,qCAAiC;AACjC,2CAAuC;AACvC,2CAAuC;AACvC,yCAAqC;AACrC,kDAA8C;AAC9C,gCAA4B;AAC5B,oCAAgC;AAChC,6BAAyB;AACzB,2CAAuC;AACvC,gCAA4B;AAC5B,4BAAwB"}
+{"version":3,"file":"index.d.cts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,qCAAiC;AACjC,2CAAuC;AACvC,2CAAuC;AACvC,4CAAwC;AACxC,0DAAsD;AACtD,yCAAqC;AACrC,kDAA8C;AAC9C,gCAA4B;AAC5B,oCAAgC;AAChC,6BAAyB;AACzB,2CAAuC;AACvC,gCAA4B;AAC5B,4BAAwB;AACxB,+CAA2C"}