@metamask/eth-ledger-bridge-keyring 12.1.0 → 12.2.0

package/CHANGELOG.md

@@ -7,6 +7,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [12.2.0]
+
+### Added
+
+- Add `LedgerDmkBridge` and `LedgerDmkTransportMiddleware` for Ledger Device Management Kit (DMK) support ([#473](https://github.com/MetaMask/accounts/pull/473))
+  - New `LedgerDmkBridge` class implementing the `LedgerBridge` interface via Ledger's DMK.
+  - New `LedgerDmkTransportMiddleware` managing sessions, device discovery, and Ethereum signer lifecycle.
+  - DMK error translation utilities (`translateDmkError`, `isDeviceExchangeError`) mapping to `TransportStatusError`.
+  - Custom `EthGetAppConfigurationCommand` for retrieving Ethereum app config via DMK.
+  - Session state monitoring with `onSessionStateChange` observable and `isDeviceConnected` getter.
+  - Add EIP-7702 authorization signing to the Ledger keyring ([#564](https://github.com/MetaMask/accounts/pull/564))
+  - Not yet functional: both iframe and mobile bridges throw until DMK support lands.
+  - Fixes hex `v` parsing (`'1b'`) for personal_sign and typed data.
+
+### Changed
+
+- Bump `@metamask/keyring-api` from `^23.1.0` to `^23.3.0` ([#562](https://github.com/MetaMask/accounts/pull/562), [#569](https://github.com/MetaMask/accounts/pull/569))
+- Bump `@metamask/keyring-sdk` from `^2.1.1` to `^2.2.0` ([#562](https://github.com/MetaMask/accounts/pull/562))
+
 ## [12.1.0]
 
 ### Added
@@ -75,10 +94,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
-- Add new dependency `@metamask/keyring-sdk@1.2.0` ([#478](https://github.com/MetaMask/accounts/pull/478)), ([#482](https://github.com/MetaMask/accounts/pull/482)), ([#496](https://github.com/MetaMask/accounts/pull/496)), ([#509](https://github.com/MetaMask/accounts/pull/509))
+- Add new dependency `@metamask/keyring-sdk@1.2.0` ([#478](https://github.com/MetaMask/accounts/pull/478), [#482](https://github.com/MetaMask/accounts/pull/482), [#496](https://github.com/MetaMask/accounts/pull/496), [#509](https://github.com/MetaMask/accounts/pull/509))
   - This package now contains the keyring v2 wrapper helpers (`EthKeyringWrapper`).
   - The account ID (generated by `KeyringAccountRegistry`) are now deterministic for EVM addresses.
-- Bump `@metamask/hw-wallet-sdk` from `^0.6.0` to `^0.8.0` ([#482](https://github.com/MetaMask/accounts/pull/482)), ([#497](https://github.com/MetaMask/accounts/pull/497))
+- Bump `@metamask/hw-wallet-sdk` from `^0.6.0` to `^0.8.0` ([#482](https://github.com/MetaMask/accounts/pull/482), [#497](https://github.com/MetaMask/accounts/pull/497))
 - Bump `@metamask/keyring-api` from `^21.6.0` to `^22.0.0` ([#482](https://github.com/MetaMask/accounts/pull/482))
 - Bump `@metamask/account-api` from `^1.0.0` to `^1.0.1` ([#487](https://github.com/MetaMask/accounts/pull/487))
 
@@ -97,7 +116,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added
 
-- Add `LedgerKeyringV2` class implementing `KeyringV2` interface ([#416](https://github.com/MetaMask/accounts/pull/416)), ([#451](https://github.com/MetaMask/accounts/pull/451)), ([#453](https://github.com/MetaMask/accounts/pull/453))
+- Add `LedgerKeyringV2` class implementing `KeyringV2` interface ([#416](https://github.com/MetaMask/accounts/pull/416), [#451](https://github.com/MetaMask/accounts/pull/451), [#453](https://github.com/MetaMask/accounts/pull/453))
   - Wraps legacy `LedgerKeyring` to expose accounts via the unified `KeyringV2` API and the `KeyringAccount` type.
   - Extends `EthKeyringWrapper` for common Ethereum logic.
 
@@ -197,8 +216,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
-- Bump `@metamask/eth-sig-util` dependency from `^8.0.0` to `8.2.0` ([#177](https://github.com/MetaMask/accounts/pull/177)), ([#134](https://github.com/MetaMask/accounts/pull/134))
-- Bump `@metamask/utils` dependency from `^9.3.1` to `11.1.0` ([#134](https://github.com/MetaMask/accounts/pull/134)), ([#167](https://github.com/MetaMask/accounts/pull/167))
+- Bump `@metamask/eth-sig-util` dependency from `^8.0.0` to `8.2.0` ([#177](https://github.com/MetaMask/accounts/pull/177), [#134](https://github.com/MetaMask/accounts/pull/134))
+- Bump `@metamask/utils` dependency from `^9.3.1` to `11.1.0` ([#134](https://github.com/MetaMask/accounts/pull/134), [#167](https://github.com/MetaMask/accounts/pull/167))
 
 ## [8.0.3]
 
@@ -431,8 +450,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
-- Remove unused `events` and `ethereumjs-tx` dependencies ([#101](https://github.com/MetaMask/eth-ledger-bridge-keyring/pull/101)), ([#102](https://github.com/MetaMask/eth-ledger-bridge-keyring/pull/102))
-- Update eth-ledger-bridge-keyring to support EIP-1559 transactions ([#98](https://github.com/MetaMask/eth-ledger-bridge-keyring/pull/98)), ([#97](https://github.com/MetaMask/eth-ledger-bridge-keyring/pull/97)), ([#96](https://github.com/MetaMask/eth-ledger-bridge-keyring/pull/96))
+- Remove unused `events` and `ethereumjs-tx` dependencies ([#101](https://github.com/MetaMask/eth-ledger-bridge-keyring/pull/101), [#102](https://github.com/MetaMask/eth-ledger-bridge-keyring/pull/102))
+- Update eth-ledger-bridge-keyring to support EIP-1559 transactions ([#98](https://github.com/MetaMask/eth-ledger-bridge-keyring/pull/98), [#97](https://github.com/MetaMask/eth-ledger-bridge-keyring/pull/97), [#96](https://github.com/MetaMask/eth-ledger-bridge-keyring/pull/96))
 
 ## [0.6.0]
 
@@ -440,7 +459,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Support new versions of ethereumjs/tx ([#68](https://github.com/MetaMask/eth-ledger-bridge-keyring/pull/68))
 
-[Unreleased]: https://github.com/MetaMask/accounts/compare/@metamask/eth-ledger-bridge-keyring@12.1.0...HEAD
+[Unreleased]: https://github.com/MetaMask/accounts/compare/@metamask/eth-ledger-bridge-keyring@12.2.0...HEAD
+[12.2.0]: https://github.com/MetaMask/accounts/compare/@metamask/eth-ledger-bridge-keyring@12.1.0...@metamask/eth-ledger-bridge-keyring@12.2.0
 [12.1.0]: https://github.com/MetaMask/accounts/compare/@metamask/eth-ledger-bridge-keyring@12.0.3...@metamask/eth-ledger-bridge-keyring@12.1.0
 [12.0.3]: https://github.com/MetaMask/accounts/compare/@metamask/eth-ledger-bridge-keyring@12.0.2...@metamask/eth-ledger-bridge-keyring@12.0.3
 [12.0.2]: https://github.com/MetaMask/accounts/compare/@metamask/eth-ledger-bridge-keyring@12.0.1...@metamask/eth-ledger-bridge-keyring@12.0.2

package/dist/dmk/__testhelpers__/mock-error.cjs

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createMockDeviceExchangeError = void 0;
+const eth_get_app_configuration_command_1 = require("../eth-get-app-configuration-command.cjs");
+/**
+ * Construct a mock {@link DeviceExchangeError} for tests.
+ *
+ * The DMK `DeviceExchangeError` is normally raised inside the DMK runtime;
+ * tests need a structurally-equivalent value without going through DMK.
+ * This helper centralises the cast so test files don't each roll their own.
+ *
+ * @param errorCode - The hex error code to embed (e.g. `'6985'`).
+ * @returns A mock `DeviceExchangeError<TErrorCode>`.
+ */
+function createMockDeviceExchangeError(errorCode) {
+    return {
+        _tag: eth_get_app_configuration_command_1.ETH_APP_COMMAND_ERROR_TAG,
+        message: `DMK error: ${String(errorCode)}`,
+        errorCode,
+        originalError: undefined,
+    };
+}
+exports.createMockDeviceExchangeError = createMockDeviceExchangeError;
+//# sourceMappingURL=mock-error.cjs.map

package/dist/dmk/__testhelpers__/mock-error.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-error.cjs","sourceRoot":"","sources":["../../../src/dmk/__testhelpers__/mock-error.ts"],"names":[],"mappings":";;;AAEA,gGAAiF;AAEjF;;;;;;;;;GASG;AACH,SAAgB,6BAA6B,CAC3C,SAAqB;IAErB,OAAO;QACL,IAAI,EAAE,6DAAyB;QAC/B,OAAO,EAAE,cAAc,MAAM,CAAC,SAAS,CAAC,EAAE;QAC1C,SAAS;QACT,aAAa,EAAE,SAAS;KACqB,CAAC;AAClD,CAAC;AATD,sEASC","sourcesContent":["import type { DeviceExchangeError } from '@ledgerhq/device-management-kit';\n\nimport { ETH_APP_COMMAND_ERROR_TAG } from '../eth-get-app-configuration-command';\n\n/**\n * Construct a mock {@link DeviceExchangeError} for tests.\n *\n * The DMK `DeviceExchangeError` is normally raised inside the DMK runtime;\n * tests need a structurally-equivalent value without going through DMK.\n * This helper centralises the cast so test files don't each roll their own.\n *\n * @param errorCode - The hex error code to embed (e.g. `'6985'`).\n * @returns A mock `DeviceExchangeError<TErrorCode>`.\n */\nexport function createMockDeviceExchangeError<TErrorCode = string>(\n  errorCode: TErrorCode,\n): DeviceExchangeError<TErrorCode> {\n  return {\n    _tag: ETH_APP_COMMAND_ERROR_TAG,\n    message: `DMK error: ${String(errorCode)}`,\n    errorCode,\n    originalError: undefined,\n  } as unknown as DeviceExchangeError<TErrorCode>;\n}\n"]}

package/dist/dmk/__testhelpers__/mock-error.d.cts

@@ -0,0 +1,13 @@
+import type { DeviceExchangeError } from "@ledgerhq/device-management-kit";
+/**
+ * Construct a mock {@link DeviceExchangeError} for tests.
+ *
+ * The DMK `DeviceExchangeError` is normally raised inside the DMK runtime;
+ * tests need a structurally-equivalent value without going through DMK.
+ * This helper centralises the cast so test files don't each roll their own.
+ *
+ * @param errorCode - The hex error code to embed (e.g. `'6985'`).
+ * @returns A mock `DeviceExchangeError<TErrorCode>`.
+ */
+export declare function createMockDeviceExchangeError<TErrorCode = string>(errorCode: TErrorCode): DeviceExchangeError<TErrorCode>;
+//# sourceMappingURL=mock-error.d.cts.map

package/dist/dmk/__testhelpers__/mock-error.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-error.d.cts","sourceRoot":"","sources":["../../../src/dmk/__testhelpers__/mock-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,wCAAwC;AAI3E;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,UAAU,GAAG,MAAM,EAC/D,SAAS,EAAE,UAAU,GACpB,mBAAmB,CAAC,UAAU,CAAC,CAOjC"}

package/dist/dmk/__testhelpers__/mock-error.d.mts

@@ -0,0 +1,13 @@
+import type { DeviceExchangeError } from "@ledgerhq/device-management-kit";
+/**
+ * Construct a mock {@link DeviceExchangeError} for tests.
+ *
+ * The DMK `DeviceExchangeError` is normally raised inside the DMK runtime;
+ * tests need a structurally-equivalent value without going through DMK.
+ * This helper centralises the cast so test files don't each roll their own.
+ *
+ * @param errorCode - The hex error code to embed (e.g. `'6985'`).
+ * @returns A mock `DeviceExchangeError<TErrorCode>`.
+ */
+export declare function createMockDeviceExchangeError<TErrorCode = string>(errorCode: TErrorCode): DeviceExchangeError<TErrorCode>;
+//# sourceMappingURL=mock-error.d.mts.map

package/dist/dmk/__testhelpers__/mock-error.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-error.d.mts","sourceRoot":"","sources":["../../../src/dmk/__testhelpers__/mock-error.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,wCAAwC;AAI3E;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAAC,UAAU,GAAG,MAAM,EAC/D,SAAS,EAAE,UAAU,GACpB,mBAAmB,CAAC,UAAU,CAAC,CAOjC"}

package/dist/dmk/__testhelpers__/mock-error.mjs

@@ -0,0 +1,20 @@
+import { ETH_APP_COMMAND_ERROR_TAG } from "../eth-get-app-configuration-command.mjs";
+/**
+ * Construct a mock {@link DeviceExchangeError} for tests.
+ *
+ * The DMK `DeviceExchangeError` is normally raised inside the DMK runtime;
+ * tests need a structurally-equivalent value without going through DMK.
+ * This helper centralises the cast so test files don't each roll their own.
+ *
+ * @param errorCode - The hex error code to embed (e.g. `'6985'`).
+ * @returns A mock `DeviceExchangeError<TErrorCode>`.
+ */
+export function createMockDeviceExchangeError(errorCode) {
+    return {
+        _tag: ETH_APP_COMMAND_ERROR_TAG,
+        message: `DMK error: ${String(errorCode)}`,
+        errorCode,
+        originalError: undefined,
+    };
+}
+//# sourceMappingURL=mock-error.mjs.map

package/dist/dmk/__testhelpers__/mock-error.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-error.mjs","sourceRoot":"","sources":["../../../src/dmk/__testhelpers__/mock-error.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,iDAA6C;AAEjF;;;;;;;;;GASG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAAqB;IAErB,OAAO;QACL,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,cAAc,MAAM,CAAC,SAAS,CAAC,EAAE;QAC1C,SAAS;QACT,aAAa,EAAE,SAAS;KACqB,CAAC;AAClD,CAAC","sourcesContent":["import type { DeviceExchangeError } from '@ledgerhq/device-management-kit';\n\nimport { ETH_APP_COMMAND_ERROR_TAG } from '../eth-get-app-configuration-command';\n\n/**\n * Construct a mock {@link DeviceExchangeError} for tests.\n *\n * The DMK `DeviceExchangeError` is normally raised inside the DMK runtime;\n * tests need a structurally-equivalent value without going through DMK.\n * This helper centralises the cast so test files don't each roll their own.\n *\n * @param errorCode - The hex error code to embed (e.g. `'6985'`).\n * @returns A mock `DeviceExchangeError<TErrorCode>`.\n */\nexport function createMockDeviceExchangeError<TErrorCode = string>(\n  errorCode: TErrorCode,\n): DeviceExchangeError<TErrorCode> {\n  return {\n    _tag: ETH_APP_COMMAND_ERROR_TAG,\n    message: `DMK error: ${String(errorCode)}`,\n    errorCode,\n    originalError: undefined,\n  } as unknown as DeviceExchangeError<TErrorCode>;\n}\n"]}

package/dist/dmk/dmk-error-translator.cjs

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isDeviceExchangeError = exports.translateDmkError = void 0;
+const device_management_kit_1 = require("@ledgerhq/device-management-kit");
+const hw_transport_1 = require("@ledgerhq/hw-transport");
+const GENERIC_ERROR_STATUS_CODE = 0x6f00;
+/**
+ * Translates a DMK error (DeviceExchangeError with hex error codes) into a
+ * TransportStatusError that the Ledger keyring error handler can process.
+ *
+ * @param error - The error from a DMK device action or command.
+ * @returns A TransportStatusError with the corresponding APDU status code.
+ */
+function translateDmkError(error) {
+    if (isDeviceExchangeError(error)) {
+        const statusCode = parseHexErrorCode(error.errorCode);
+        return new hw_transport_1.TransportStatusError(statusCode);
+    }
+    return new hw_transport_1.TransportStatusError(GENERIC_ERROR_STATUS_CODE);
+}
+exports.translateDmkError = translateDmkError;
+function isDeviceExchangeError(error) {
+    return (typeof error === 'object' &&
+        error !== null &&
+        '_tag' in error &&
+        'errorCode' in error);
+}
+exports.isDeviceExchangeError = isDeviceExchangeError;
+function parseHexErrorCode(errorCode) {
+    if (typeof errorCode === 'string' && /^[0-9a-fA-F]{4}$/u.test(errorCode)) {
+        return parseInt(errorCode, 16);
+    }
+    return GENERIC_ERROR_STATUS_CODE;
+}
+//# sourceMappingURL=dmk-error-translator.cjs.map

package/dist/dmk/dmk-error-translator.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dmk-error-translator.cjs","sourceRoot":"","sources":["../../src/dmk/dmk-error-translator.ts"],"names":[],"mappings":";;;AAAA,2EAAsE;AACtE,yDAA8D;AAE9D,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEzC;;;;;;GAMG;AACH,SAAgB,iBAAiB,CAAC,KAAc;IAC9C,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtD,OAAO,IAAI,mCAAoB,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,IAAI,mCAAoB,CAAC,yBAAyB,CAAC,CAAC;AAC7D,CAAC;AAPD,8CAOC;AAED,SAAgB,qBAAqB,CACnC,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,WAAW,IAAI,KAAK,CACrB,CAAC;AACJ,CAAC;AATD,sDASC;AAED,SAAS,iBAAiB,CAAC,SAAkB;IAC3C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzE,OAAO,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,yBAAyB,CAAC;AACnC,CAAC","sourcesContent":["import { DeviceExchangeError } from '@ledgerhq/device-management-kit';\nimport { TransportStatusError } from '@ledgerhq/hw-transport';\n\nconst GENERIC_ERROR_STATUS_CODE = 0x6f00;\n\n/**\n * Translates a DMK error (DeviceExchangeError with hex error codes) into a\n * TransportStatusError that the Ledger keyring error handler can process.\n *\n * @param error - The error from a DMK device action or command.\n * @returns A TransportStatusError with the corresponding APDU status code.\n */\nexport function translateDmkError(error: unknown): TransportStatusError {\n  if (isDeviceExchangeError(error)) {\n    const statusCode = parseHexErrorCode(error.errorCode);\n    return new TransportStatusError(statusCode);\n  }\n\n  return new TransportStatusError(GENERIC_ERROR_STATUS_CODE);\n}\n\nexport function isDeviceExchangeError(\n  error: unknown,\n): error is DeviceExchangeError<string> {\n  return (\n    typeof error === 'object' &&\n    error !== null &&\n    '_tag' in error &&\n    'errorCode' in error\n  );\n}\n\nfunction parseHexErrorCode(errorCode: unknown): number {\n  if (typeof errorCode === 'string' && /^[0-9a-fA-F]{4}$/u.test(errorCode)) {\n    return parseInt(errorCode, 16);\n  }\n\n  return GENERIC_ERROR_STATUS_CODE;\n}\n"]}

package/dist/dmk/dmk-error-translator.d.cts

@@ -0,0 +1,12 @@
+import { DeviceExchangeError } from "@ledgerhq/device-management-kit";
+import { TransportStatusError } from "@ledgerhq/hw-transport";
+/**
+ * Translates a DMK error (DeviceExchangeError with hex error codes) into a
+ * TransportStatusError that the Ledger keyring error handler can process.
+ *
+ * @param error - The error from a DMK device action or command.
+ * @returns A TransportStatusError with the corresponding APDU status code.
+ */
+export declare function translateDmkError(error: unknown): TransportStatusError;
+export declare function isDeviceExchangeError(error: unknown): error is DeviceExchangeError<string>;
+//# sourceMappingURL=dmk-error-translator.d.cts.map

package/dist/dmk/dmk-error-translator.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dmk-error-translator.d.cts","sourceRoot":"","sources":["../../src/dmk/dmk-error-translator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,wCAAwC;AACtE,OAAO,EAAE,oBAAoB,EAAE,+BAA+B;AAI9D;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAOtE;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAOtC"}

package/dist/dmk/dmk-error-translator.d.mts

@@ -0,0 +1,12 @@
+import { DeviceExchangeError } from "@ledgerhq/device-management-kit";
+import { TransportStatusError } from "@ledgerhq/hw-transport";
+/**
+ * Translates a DMK error (DeviceExchangeError with hex error codes) into a
+ * TransportStatusError that the Ledger keyring error handler can process.
+ *
+ * @param error - The error from a DMK device action or command.
+ * @returns A TransportStatusError with the corresponding APDU status code.
+ */
+export declare function translateDmkError(error: unknown): TransportStatusError;
+export declare function isDeviceExchangeError(error: unknown): error is DeviceExchangeError<string>;
+//# sourceMappingURL=dmk-error-translator.d.mts.map

package/dist/dmk/dmk-error-translator.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dmk-error-translator.d.mts","sourceRoot":"","sources":["../../src/dmk/dmk-error-translator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,wCAAwC;AACtE,OAAO,EAAE,oBAAoB,EAAE,+BAA+B;AAI9D;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAOtE;AAED,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAOtC"}

package/dist/dmk/dmk-error-translator.mjs

@@ -0,0 +1,30 @@
+import { DeviceExchangeError } from "@ledgerhq/device-management-kit";
+import { TransportStatusError } from "@ledgerhq/hw-transport";
+const GENERIC_ERROR_STATUS_CODE = 0x6f00;
+/**
+ * Translates a DMK error (DeviceExchangeError with hex error codes) into a
+ * TransportStatusError that the Ledger keyring error handler can process.
+ *
+ * @param error - The error from a DMK device action or command.
+ * @returns A TransportStatusError with the corresponding APDU status code.
+ */
+export function translateDmkError(error) {
+    if (isDeviceExchangeError(error)) {
+        const statusCode = parseHexErrorCode(error.errorCode);
+        return new TransportStatusError(statusCode);
+    }
+    return new TransportStatusError(GENERIC_ERROR_STATUS_CODE);
+}
+export function isDeviceExchangeError(error) {
+    return (typeof error === 'object' &&
+        error !== null &&
+        '_tag' in error &&
+        'errorCode' in error);
+}
+function parseHexErrorCode(errorCode) {
+    if (typeof errorCode === 'string' && /^[0-9a-fA-F]{4}$/u.test(errorCode)) {
+        return parseInt(errorCode, 16);
+    }
+    return GENERIC_ERROR_STATUS_CODE;
+}
+//# sourceMappingURL=dmk-error-translator.mjs.map

package/dist/dmk/dmk-error-translator.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"dmk-error-translator.mjs","sourceRoot":"","sources":["../../src/dmk/dmk-error-translator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,wCAAwC;AACtE,OAAO,EAAE,oBAAoB,EAAE,+BAA+B;AAE9D,MAAM,yBAAyB,GAAG,MAAM,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACtD,OAAO,IAAI,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,IAAI,oBAAoB,CAAC,yBAAyB,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAc;IAEd,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,IAAI,KAAK;QACf,WAAW,IAAI,KAAK,CACrB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAkB;IAC3C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzE,OAAO,QAAQ,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,yBAAyB,CAAC;AACnC,CAAC","sourcesContent":["import { DeviceExchangeError } from '@ledgerhq/device-management-kit';\nimport { TransportStatusError } from '@ledgerhq/hw-transport';\n\nconst GENERIC_ERROR_STATUS_CODE = 0x6f00;\n\n/**\n * Translates a DMK error (DeviceExchangeError with hex error codes) into a\n * TransportStatusError that the Ledger keyring error handler can process.\n *\n * @param error - The error from a DMK device action or command.\n * @returns A TransportStatusError with the corresponding APDU status code.\n */\nexport function translateDmkError(error: unknown): TransportStatusError {\n  if (isDeviceExchangeError(error)) {\n    const statusCode = parseHexErrorCode(error.errorCode);\n    return new TransportStatusError(statusCode);\n  }\n\n  return new TransportStatusError(GENERIC_ERROR_STATUS_CODE);\n}\n\nexport function isDeviceExchangeError(\n  error: unknown,\n): error is DeviceExchangeError<string> {\n  return (\n    typeof error === 'object' &&\n    error !== null &&\n    '_tag' in error &&\n    'errorCode' in error\n  );\n}\n\nfunction parseHexErrorCode(errorCode: unknown): number {\n  if (typeof errorCode === 'string' && /^[0-9a-fA-F]{4}$/u.test(errorCode)) {\n    return parseInt(errorCode, 16);\n  }\n\n  return GENERIC_ERROR_STATUS_CODE;\n}\n"]}

package/dist/dmk/eth-get-app-configuration-command.cjs

@@ -0,0 +1,155 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EthGetAppConfigurationCommand = exports.ETH_APP_COMMAND_ERROR_TAG = void 0;
+const device_management_kit_1 = require("@ledgerhq/device-management-kit");
+const CLA = 0xe0;
+const INS = 0x06;
+// Feature flags defined by the Ethereum app `getAppConfiguration` APDU spec.
+// See: https://github.com/LedgerHQ/app-ethereum/blob/master/doc/ethapp.adoc#get-app-configuration
+//   0x01 - arbitrary data signature enabled by user (blind signing)
+//   0x02 - ERC 20 Token information needs to be provided externally
+//   0x10 - Transaction Check enabled (web3 checks)
+//   0x20 - Transaction Check Opt-In done (web3 checks opt-in)
+const BLIND_SIGNING_FLAG = 0x01;
+const WEB3_CHECKS_ENABLED_FLAG = 0x10;
+const WEB3_CHECKS_OPT_IN_FLAG = 0x20;
+const SUCCESS_STATUS_WORD_HI = 0x90;
+const SUCCESS_STATUS_WORD_LO = 0x00;
+/**
+ * Discriminator (`_tag`) used by `EthGetAppConfigurationCommand` when raising
+ * a {@link DeviceExchangeError}. Exported so tests and translators can
+ * reference the canonical string instead of repeating a magic literal.
+ */
+exports.ETH_APP_COMMAND_ERROR_TAG = 'EthAppCommandError';
+/**
+ * Reads the Ethereum app configuration via the Ethereum application's
+ * `getAppConfiguration` APDU (CLA `0xE0`, INS `0x06`).
+ *
+ * ## Wire format
+ *
+ * Defined by the Ethereum application APDU specification
+ * ([`doc/ethapp.adoc`](https://github.com/LedgerHQ/app-ethereum/blob/master/doc/ethapp.adoc#get-app-configuration),
+ * § *GET APP CONFIGURATION*).
+ *
+ * The 4-byte response payload is laid out as:
+ *
+ * ```
+ *  byte 0       flags bitmask
+ *  bytes 1..3   app version (major, minor, patch)
+ * ```
+ *
+ * The `flags` byte is defined by the spec as:
+ *
+ * ```
+ *  0x01  arbitrary data signature enabled by user     (blind signing)
+ *  0x02  ERC 20 Token information needs to be provided externally
+ *  0x10  Transaction Check enabled                    (web3 checks)
+ *  0x20  Transaction Check Opt-In done                (web3 checks opt-in)
+ * ```
+ *
+ * This command mirrors the implementation in
+ * [`@ledgerhq/device-signer-kit-ethereum`](https://github.com/LedgerHQ/device-sdk-ts/blob/main/packages/signer/signer-eth/src/internal/app-binder/command/GetAppConfigurationCommand.ts)
+ * (`internal/app-binder/command/GetAppConfigurationCommand`), which is not
+ * re-exported from that package's public entry point. Until the signer kit
+ * exposes `GetAppConfiguration` publicly, this module is the only way to
+ * invoke the Ethereum `getAppConfiguration` APDU through the DMK
+ * `sendCommand` API.
+ *
+ * ## Related APDU docs
+ *
+ * The other Ethereum APDUs the DMK signer kit sends on our behalf are also
+ * defined in the same `ethapp.adoc` document:
+ *
+ * - `GET ETH PUBLIC ADDRESS`        — INS `0x02`
+ * - `SIGN ETH TRANSACTION`          — INS `0x04`
+ * - `SIGN ETH PERSONAL MESSAGE`     — INS `0x08`
+ * - `SIGN ETH EIP 712`              — INS `0x0C`
+ * - `SIGN EIP 7702 AUTHORIZATION`   — INS `0x34`
+ *
+ * ## Distinguishing DMK commands
+ *
+ * Note: this command is distinct from the DMK OS-level
+ * [`GetAppAndVersionCommand`](https://github.com/LedgerHQ/device-sdk-ts/blob/main/packages/device-management-kit/src/api/command/os/GetAppAndVersionCommand.ts)
+ * (`@ledgerhq/device-management-kit`), which returns only the app's name and
+ * version and does not expose Ethereum-specific feature flags.
+ */
+class EthGetAppConfigurationCommand {
+    constructor() {
+        this.name = 'getAppConfiguration';
+    }
+    getApdu() {
+        return new device_management_kit_1.ApduBuilder({ cla: CLA, ins: INS, p1: 0, p2: 0 }).build();
+    }
+    parseResponse(response) {
+        if (!isSuccessStatusCode(response.statusCode)) {
+            return (0, device_management_kit_1.CommandResultFactory)({
+                error: createEthAppCommandError(response.statusCode),
+            });
+        }
+        const parser = new device_management_kit_1.ApduParser(response);
+        const flags = parser.extract8BitUInt();
+        if (flags === undefined) {
+            return (0, device_management_kit_1.CommandResultFactory)({
+                error: new device_management_kit_1.InvalidStatusWordError('Cannot extract config flags from response body'),
+            });
+        }
+        const major = parser.extract8BitUInt();
+        const minor = parser.extract8BitUInt();
+        const patch = parser.extract8BitUInt();
+        if (major === undefined || minor === undefined || patch === undefined) {
+            return (0, device_management_kit_1.CommandResultFactory)({
+                error: new device_management_kit_1.InvalidStatusWordError('Cannot extract version bytes from response body'),
+            });
+        }
+        return (0, device_management_kit_1.CommandResultFactory)({
+            data: {
+                blindSigningEnabled: isFlagSet(flags, BLIND_SIGNING_FLAG),
+                web3ChecksEnabled: isFlagSet(flags, WEB3_CHECKS_ENABLED_FLAG),
+                web3ChecksOptIn: isFlagSet(flags, WEB3_CHECKS_OPT_IN_FLAG),
+                version: `${major}.${minor}.${patch}`,
+            },
+        });
+    }
+}
+exports.EthGetAppConfigurationCommand = EthGetAppConfigurationCommand;
+/**
+ * Test whether a single-bit flag is set in a bitmask.
+ *
+ * Per the Ethereum `getAppConfiguration` APDU spec
+ * ([ethapp.adoc](https://github.com/LedgerHQ/app-ethereum/blob/master/doc/ethapp.adoc#get-app-configuration)),
+ * each supported feature occupies one bit of the `flags` byte. The spec
+ * defines *which* bits carry meaning (`0x01`, `0x10`, `0x20`); it does not
+ * prescribe an implementation technique for testing them. Bitwise AND is
+ * the idiomatic way to test a single bit in any language, and is the
+ * same formulation used by Ledger's own
+ * [`GetAppConfiguration`](https://github.com/LedgerHQ/device-sdk-ts/blob/main/packages/signer/signer-eth/src/internal/app-binder/command/GetAppConfigurationCommand.ts)
+ * implementation upstream.
+ *
+ * @param flags - The bitmask (the first response byte).
+ * @param flag - The single-bit value to test (e.g. `0x01`, `0x10`, `0x20`).
+ * @returns `true` if the bit is set, `false` otherwise.
+ */
+function isFlagSet(flags, flag) {
+    // Bitwise AND is the idiomatic way to test a single-bit flag in a
+    // bitmask and matches the upstream Ledger implementation; the
+    // `ethapp.adoc` spec defines the flag *values* (0x01, 0x10, 0x20) but
+    // leaves the testing technique to the implementer.
+    // eslint-disable-next-line no-bitwise
+    return (flags & flag) !== 0;
+}
+function isSuccessStatusCode(statusCode) {
+    return (statusCode[0] === SUCCESS_STATUS_WORD_HI &&
+        statusCode[1] === SUCCESS_STATUS_WORD_LO);
+}
+function createEthAppCommandError(statusCode) {
+    const errorCode = Array.from(statusCode)
+        .map((byte) => byte.toString(16).padStart(2, '0'))
+        .join('');
+    return {
+        _tag: exports.ETH_APP_COMMAND_ERROR_TAG,
+        errorCode,
+        message: `Ledger Ethereum app command failed with status 0x${errorCode}.`,
+        originalError: undefined,
+    };
+}
+//# sourceMappingURL=eth-get-app-configuration-command.cjs.map

package/dist/dmk/eth-get-app-configuration-command.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"eth-get-app-configuration-command.cjs","sourceRoot":"","sources":["../../src/dmk/eth-get-app-configuration-command.ts"],"names":[],"mappings":";;;AAOA,2EAKyC;AASzC,MAAM,GAAG,GAAG,IAAI,CAAC;AACjB,MAAM,GAAG,GAAG,IAAI,CAAC;AACjB,6EAA6E;AAC7E,kGAAkG;AAClG,oEAAoE;AACpE,oEAAoE;AACpE,mDAAmD;AACnD,8DAA8D;AAC9D,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,wBAAwB,GAAG,IAAI,CAAC;AACtC,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AACpC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AAEpC;;;;GAIG;AACU,QAAA,yBAAyB,GAAG,oBAAoB,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,MAAa,6BAA6B;IAA1C;QAKW,SAAI,GAAG,qBAAqB,CAAC;IA8CxC,CAAC;IA5CC,OAAO;QACL,OAAO,IAAI,mCAAW,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACvE,CAAC;IAED,aAAa,CACX,QAAsB;QAEtB,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9C,OAAO,IAAA,4CAAoB,EAAC;gBAC1B,KAAK,EAAE,wBAAwB,CAAC,QAAQ,CAAC,UAAU,CAAC;aACrD,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,kCAAU,CAAC,QAAQ,CAAC,CAAC;QAExC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QACvC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAA,4CAAoB,EAAC;gBAC1B,KAAK,EAAE,IAAI,8CAAsB,CAC/B,gDAAgD,CACjD;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;QACvC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACtE,OAAO,IAAA,4CAAoB,EAAC;gBAC1B,KAAK,EAAE,IAAI,8CAAsB,CAC/B,iDAAiD,CAClD;aACF,CAAC,CAAC;QACL,CAAC;QAED,OAAO,IAAA,4CAAoB,EAAC;YAC1B,IAAI,EAAE;gBACJ,mBAAmB,EAAE,SAAS,CAAC,KAAK,EAAE,kBAAkB,CAAC;gBACzD,iBAAiB,EAAE,SAAS,CAAC,KAAK,EAAE,wBAAwB,CAAC;gBAC7D,eAAe,EAAE,SAAS,CAAC,KAAK,EAAE,uBAAuB,CAAC;gBAC1D,OAAO,EAAE,GAAG,KAAK,IAAI,KAAK,IAAI,KAAK,EAAE;aACtC;SACF,CAAC,CAAC;IACL,CAAC;CACF;AAnDD,sEAmDC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,SAAS,SAAS,CAAC,KAAa,EAAE,IAAY;IAC5C,kEAAkE;IAClE,8DAA8D;IAC9D,sEAAsE;IACtE,mDAAmD;IACnD,sCAAsC;IACtC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAsB;IACjD,OAAO,CACL,UAAU,CAAC,CAAC,CAAC,KAAK,sBAAsB;QACxC,UAAU,CAAC,CAAC,CAAC,KAAK,sBAAsB,CACzC,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,UAAsB;IAEtB,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;SACrC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,OAAO;QACL,IAAI,EAAE,iCAAyB;QAC/B,SAAS;QACT,OAAO,EAAE,oDAAoD,SAAS,GAAG;QACzE,aAAa,EAAE,SAAS;KACzB,CAAC;AACJ,CAAC","sourcesContent":["import type {\n  Apdu,\n  ApduResponse,\n  Command,\n  CommandResult,\n  DeviceExchangeError,\n} from '@ledgerhq/device-management-kit';\nimport {\n  ApduBuilder,\n  ApduParser,\n  CommandResultFactory,\n  InvalidStatusWordError,\n} from '@ledgerhq/device-management-kit';\n\nexport type EthGetAppConfigurationResponse = {\n  readonly blindSigningEnabled: boolean;\n  readonly web3ChecksEnabled: boolean;\n  readonly web3ChecksOptIn: boolean;\n  readonly version: string;\n};\n\nconst CLA = 0xe0;\nconst INS = 0x06;\n// Feature flags defined by the Ethereum app `getAppConfiguration` APDU spec.\n// See: https://github.com/LedgerHQ/app-ethereum/blob/master/doc/ethapp.adoc#get-app-configuration\n//   0x01 - arbitrary data signature enabled by user (blind signing)\n//   0x02 - ERC 20 Token information needs to be provided externally\n//   0x10 - Transaction Check enabled (web3 checks)\n//   0x20 - Transaction Check Opt-In done (web3 checks opt-in)\nconst BLIND_SIGNING_FLAG = 0x01;\nconst WEB3_CHECKS_ENABLED_FLAG = 0x10;\nconst WEB3_CHECKS_OPT_IN_FLAG = 0x20;\nconst SUCCESS_STATUS_WORD_HI = 0x90;\nconst SUCCESS_STATUS_WORD_LO = 0x00;\n\n/**\n * Discriminator (`_tag`) used by `EthGetAppConfigurationCommand` when raising\n * a {@link DeviceExchangeError}. Exported so tests and translators can\n * reference the canonical string instead of repeating a magic literal.\n */\nexport const ETH_APP_COMMAND_ERROR_TAG = 'EthAppCommandError';\n\n/**\n * Reads the Ethereum app configuration via the Ethereum application's\n * `getAppConfiguration` APDU (CLA `0xE0`, INS `0x06`).\n *\n * ## Wire format\n *\n * Defined by the Ethereum application APDU specification\n * ([`doc/ethapp.adoc`](https://github.com/LedgerHQ/app-ethereum/blob/master/doc/ethapp.adoc#get-app-configuration),\n * § *GET APP CONFIGURATION*).\n *\n * The 4-byte response payload is laid out as:\n *\n * ```\n *  byte 0       flags bitmask\n *  bytes 1..3   app version (major, minor, patch)\n * ```\n *\n * The `flags` byte is defined by the spec as:\n *\n * ```\n *  0x01  arbitrary data signature enabled by user     (blind signing)\n *  0x02  ERC 20 Token information needs to be provided externally\n *  0x10  Transaction Check enabled                    (web3 checks)\n *  0x20  Transaction Check Opt-In done                (web3 checks opt-in)\n * ```\n *\n * This command mirrors the implementation in\n * [`@ledgerhq/device-signer-kit-ethereum`](https://github.com/LedgerHQ/device-sdk-ts/blob/main/packages/signer/signer-eth/src/internal/app-binder/command/GetAppConfigurationCommand.ts)\n * (`internal/app-binder/command/GetAppConfigurationCommand`), which is not\n * re-exported from that package's public entry point. Until the signer kit\n * exposes `GetAppConfiguration` publicly, this module is the only way to\n * invoke the Ethereum `getAppConfiguration` APDU through the DMK\n * `sendCommand` API.\n *\n * ## Related APDU docs\n *\n * The other Ethereum APDUs the DMK signer kit sends on our behalf are also\n * defined in the same `ethapp.adoc` document:\n *\n * - `GET ETH PUBLIC ADDRESS`        — INS `0x02`\n * - `SIGN ETH TRANSACTION`          — INS `0x04`\n * - `SIGN ETH PERSONAL MESSAGE`     — INS `0x08`\n * - `SIGN ETH EIP 712`              — INS `0x0C`\n * - `SIGN EIP 7702 AUTHORIZATION`   — INS `0x34`\n *\n * ## Distinguishing DMK commands\n *\n * Note: this command is distinct from the DMK OS-level\n * [`GetAppAndVersionCommand`](https://github.com/LedgerHQ/device-sdk-ts/blob/main/packages/device-management-kit/src/api/command/os/GetAppAndVersionCommand.ts)\n * (`@ledgerhq/device-management-kit`), which returns only the app's name and\n * version and does not expose Ethereum-specific feature flags.\n */\nexport class EthGetAppConfigurationCommand implements Command<\n  EthGetAppConfigurationResponse,\n  void,\n  string\n> {\n  readonly name = 'getAppConfiguration';\n\n  getApdu(): Apdu {\n    return new ApduBuilder({ cla: CLA, ins: INS, p1: 0, p2: 0 }).build();\n  }\n\n  parseResponse(\n    response: ApduResponse,\n  ): CommandResult<EthGetAppConfigurationResponse, string> {\n    if (!isSuccessStatusCode(response.statusCode)) {\n      return CommandResultFactory({\n        error: createEthAppCommandError(response.statusCode),\n      });\n    }\n\n    const parser = new ApduParser(response);\n\n    const flags = parser.extract8BitUInt();\n    if (flags === undefined) {\n      return CommandResultFactory({\n        error: new InvalidStatusWordError(\n          'Cannot extract config flags from response body',\n        ),\n      });\n    }\n\n    const major = parser.extract8BitUInt();\n    const minor = parser.extract8BitUInt();\n    const patch = parser.extract8BitUInt();\n    if (major === undefined || minor === undefined || patch === undefined) {\n      return CommandResultFactory({\n        error: new InvalidStatusWordError(\n          'Cannot extract version bytes from response body',\n        ),\n      });\n    }\n\n    return CommandResultFactory({\n      data: {\n        blindSigningEnabled: isFlagSet(flags, BLIND_SIGNING_FLAG),\n        web3ChecksEnabled: isFlagSet(flags, WEB3_CHECKS_ENABLED_FLAG),\n        web3ChecksOptIn: isFlagSet(flags, WEB3_CHECKS_OPT_IN_FLAG),\n        version: `${major}.${minor}.${patch}`,\n      },\n    });\n  }\n}\n\n/**\n * Test whether a single-bit flag is set in a bitmask.\n *\n * Per the Ethereum `getAppConfiguration` APDU spec\n * ([ethapp.adoc](https://github.com/LedgerHQ/app-ethereum/blob/master/doc/ethapp.adoc#get-app-configuration)),\n * each supported feature occupies one bit of the `flags` byte. The spec\n * defines *which* bits carry meaning (`0x01`, `0x10`, `0x20`); it does not\n * prescribe an implementation technique for testing them. Bitwise AND is\n * the idiomatic way to test a single bit in any language, and is the\n * same formulation used by Ledger's own\n * [`GetAppConfiguration`](https://github.com/LedgerHQ/device-sdk-ts/blob/main/packages/signer/signer-eth/src/internal/app-binder/command/GetAppConfigurationCommand.ts)\n * implementation upstream.\n *\n * @param flags - The bitmask (the first response byte).\n * @param flag - The single-bit value to test (e.g. `0x01`, `0x10`, `0x20`).\n * @returns `true` if the bit is set, `false` otherwise.\n */\nfunction isFlagSet(flags: number, flag: number): boolean {\n  // Bitwise AND is the idiomatic way to test a single-bit flag in a\n  // bitmask and matches the upstream Ledger implementation; the\n  // `ethapp.adoc` spec defines the flag *values* (0x01, 0x10, 0x20) but\n  // leaves the testing technique to the implementer.\n  // eslint-disable-next-line no-bitwise\n  return (flags & flag) !== 0;\n}\n\nfunction isSuccessStatusCode(statusCode: Uint8Array): boolean {\n  return (\n    statusCode[0] === SUCCESS_STATUS_WORD_HI &&\n    statusCode[1] === SUCCESS_STATUS_WORD_LO\n  );\n}\n\nfunction createEthAppCommandError(\n  statusCode: Uint8Array,\n): DeviceExchangeError<string> {\n  const errorCode = Array.from(statusCode)\n    .map((byte) => byte.toString(16).padStart(2, '0'))\n    .join('');\n\n  return {\n    _tag: ETH_APP_COMMAND_ERROR_TAG,\n    errorCode,\n    message: `Ledger Ethereum app command failed with status 0x${errorCode}.`,\n    originalError: undefined,\n  };\n}\n"]}

package/dist/dmk/eth-get-app-configuration-command.d.cts

@@ -0,0 +1,71 @@
+import type { Apdu, ApduResponse, Command, CommandResult } from "@ledgerhq/device-management-kit";
+export type EthGetAppConfigurationResponse = {
+    readonly blindSigningEnabled: boolean;
+    readonly web3ChecksEnabled: boolean;
+    readonly web3ChecksOptIn: boolean;
+    readonly version: string;
+};
+/**
+ * Discriminator (`_tag`) used by `EthGetAppConfigurationCommand` when raising
+ * a {@link DeviceExchangeError}. Exported so tests and translators can
+ * reference the canonical string instead of repeating a magic literal.
+ */
+export declare const ETH_APP_COMMAND_ERROR_TAG = "EthAppCommandError";
+/**
+ * Reads the Ethereum app configuration via the Ethereum application's
+ * `getAppConfiguration` APDU (CLA `0xE0`, INS `0x06`).
+ *
+ * ## Wire format
+ *
+ * Defined by the Ethereum application APDU specification
+ * ([`doc/ethapp.adoc`](https://github.com/LedgerHQ/app-ethereum/blob/master/doc/ethapp.adoc#get-app-configuration),
+ * § *GET APP CONFIGURATION*).
+ *
+ * The 4-byte response payload is laid out as:
+ *
+ * ```
+ *  byte 0       flags bitmask
+ *  bytes 1..3   app version (major, minor, patch)
+ * ```
+ *
+ * The `flags` byte is defined by the spec as:
+ *
+ * ```
+ *  0x01  arbitrary data signature enabled by user     (blind signing)
+ *  0x02  ERC 20 Token information needs to be provided externally
+ *  0x10  Transaction Check enabled                    (web3 checks)
+ *  0x20  Transaction Check Opt-In done                (web3 checks opt-in)
+ * ```
+ *
+ * This command mirrors the implementation in
+ * [`@ledgerhq/device-signer-kit-ethereum`](https://github.com/LedgerHQ/device-sdk-ts/blob/main/packages/signer/signer-eth/src/internal/app-binder/command/GetAppConfigurationCommand.ts)
+ * (`internal/app-binder/command/GetAppConfigurationCommand`), which is not
+ * re-exported from that package's public entry point. Until the signer kit
+ * exposes `GetAppConfiguration` publicly, this module is the only way to
+ * invoke the Ethereum `getAppConfiguration` APDU through the DMK
+ * `sendCommand` API.
+ *
+ * ## Related APDU docs
+ *
+ * The other Ethereum APDUs the DMK signer kit sends on our behalf are also
+ * defined in the same `ethapp.adoc` document:
+ *
+ * - `GET ETH PUBLIC ADDRESS`        — INS `0x02`
+ * - `SIGN ETH TRANSACTION`          — INS `0x04`
+ * - `SIGN ETH PERSONAL MESSAGE`     — INS `0x08`
+ * - `SIGN ETH EIP 712`              — INS `0x0C`
+ * - `SIGN EIP 7702 AUTHORIZATION`   — INS `0x34`
+ *
+ * ## Distinguishing DMK commands
+ *
+ * Note: this command is distinct from the DMK OS-level
+ * [`GetAppAndVersionCommand`](https://github.com/LedgerHQ/device-sdk-ts/blob/main/packages/device-management-kit/src/api/command/os/GetAppAndVersionCommand.ts)
+ * (`@ledgerhq/device-management-kit`), which returns only the app's name and
+ * version and does not expose Ethereum-specific feature flags.
+ */
+export declare class EthGetAppConfigurationCommand implements Command<EthGetAppConfigurationResponse, void, string> {
+    readonly name = "getAppConfiguration";
+    getApdu(): Apdu;
+    parseResponse(response: ApduResponse): CommandResult<EthGetAppConfigurationResponse, string>;
+}
+//# sourceMappingURL=eth-get-app-configuration-command.d.cts.map

package/dist/dmk/eth-get-app-configuration-command.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eth-get-app-configuration-command.d.cts","sourceRoot":"","sources":["../../src/dmk/eth-get-app-configuration-command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,IAAI,EACJ,YAAY,EACZ,OAAO,EACP,aAAa,EAEd,wCAAwC;AAQzC,MAAM,MAAM,8BAA8B,GAAG;IAC3C,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAgBF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,uBAAuB,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,qBAAa,6BAA8B,YAAW,OAAO,CAC3D,8BAA8B,EAC9B,IAAI,EACJ,MAAM,CACP;IACC,QAAQ,CAAC,IAAI,yBAAyB;IAEtC,OAAO,IAAI,IAAI;IAIf,aAAa,CACX,QAAQ,EAAE,YAAY,GACrB,aAAa,CAAC,8BAA8B,EAAE,MAAM,CAAC;CAsCzD"}

package/dist/dmk/eth-get-app-configuration-command.d.mts

@@ -0,0 +1,71 @@
+import type { Apdu, ApduResponse, Command, CommandResult } from "@ledgerhq/device-management-kit";
+export type EthGetAppConfigurationResponse = {
+    readonly blindSigningEnabled: boolean;
+    readonly web3ChecksEnabled: boolean;
+    readonly web3ChecksOptIn: boolean;
+    readonly version: string;
+};
+/**
+ * Discriminator (`_tag`) used by `EthGetAppConfigurationCommand` when raising
+ * a {@link DeviceExchangeError}. Exported so tests and translators can
+ * reference the canonical string instead of repeating a magic literal.
+ */
+export declare const ETH_APP_COMMAND_ERROR_TAG = "EthAppCommandError";
+/**
+ * Reads the Ethereum app configuration via the Ethereum application's
+ * `getAppConfiguration` APDU (CLA `0xE0`, INS `0x06`).
+ *
+ * ## Wire format
+ *
+ * Defined by the Ethereum application APDU specification
+ * ([`doc/ethapp.adoc`](https://github.com/LedgerHQ/app-ethereum/blob/master/doc/ethapp.adoc#get-app-configuration),
+ * § *GET APP CONFIGURATION*).
+ *
+ * The 4-byte response payload is laid out as:
+ *
+ * ```
+ *  byte 0       flags bitmask
+ *  bytes 1..3   app version (major, minor, patch)
+ * ```
+ *
+ * The `flags` byte is defined by the spec as:
+ *
+ * ```
+ *  0x01  arbitrary data signature enabled by user     (blind signing)
+ *  0x02  ERC 20 Token information needs to be provided externally
+ *  0x10  Transaction Check enabled                    (web3 checks)
+ *  0x20  Transaction Check Opt-In done                (web3 checks opt-in)
+ * ```
+ *
+ * This command mirrors the implementation in
+ * [`@ledgerhq/device-signer-kit-ethereum`](https://github.com/LedgerHQ/device-sdk-ts/blob/main/packages/signer/signer-eth/src/internal/app-binder/command/GetAppConfigurationCommand.ts)
+ * (`internal/app-binder/command/GetAppConfigurationCommand`), which is not
+ * re-exported from that package's public entry point. Until the signer kit
+ * exposes `GetAppConfiguration` publicly, this module is the only way to
+ * invoke the Ethereum `getAppConfiguration` APDU through the DMK
+ * `sendCommand` API.
+ *
+ * ## Related APDU docs
+ *
+ * The other Ethereum APDUs the DMK signer kit sends on our behalf are also
+ * defined in the same `ethapp.adoc` document:
+ *
+ * - `GET ETH PUBLIC ADDRESS`        — INS `0x02`
+ * - `SIGN ETH TRANSACTION`          — INS `0x04`
+ * - `SIGN ETH PERSONAL MESSAGE`     — INS `0x08`
+ * - `SIGN ETH EIP 712`              — INS `0x0C`
+ * - `SIGN EIP 7702 AUTHORIZATION`   — INS `0x34`
+ *
+ * ## Distinguishing DMK commands
+ *
+ * Note: this command is distinct from the DMK OS-level
+ * [`GetAppAndVersionCommand`](https://github.com/LedgerHQ/device-sdk-ts/blob/main/packages/device-management-kit/src/api/command/os/GetAppAndVersionCommand.ts)
+ * (`@ledgerhq/device-management-kit`), which returns only the app's name and
+ * version and does not expose Ethereum-specific feature flags.
+ */
+export declare class EthGetAppConfigurationCommand implements Command<EthGetAppConfigurationResponse, void, string> {
+    readonly name = "getAppConfiguration";
+    getApdu(): Apdu;
+    parseResponse(response: ApduResponse): CommandResult<EthGetAppConfigurationResponse, string>;
+}
+//# sourceMappingURL=eth-get-app-configuration-command.d.mts.map

package/dist/dmk/eth-get-app-configuration-command.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eth-get-app-configuration-command.d.mts","sourceRoot":"","sources":["../../src/dmk/eth-get-app-configuration-command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,IAAI,EACJ,YAAY,EACZ,OAAO,EACP,aAAa,EAEd,wCAAwC;AAQzC,MAAM,MAAM,8BAA8B,GAAG;IAC3C,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAgBF;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,uBAAuB,CAAC;AAE9D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmDG;AACH,qBAAa,6BAA8B,YAAW,OAAO,CAC3D,8BAA8B,EAC9B,IAAI,EACJ,MAAM,CACP;IACC,QAAQ,CAAC,IAAI,yBAAyB;IAEtC,OAAO,IAAI,IAAI;IAIf,aAAa,CACX,QAAQ,EAAE,YAAY,GACrB,aAAa,CAAC,8BAA8B,EAAE,MAAM,CAAC;CAsCzD"}