@onekeyfe/hd-core 1.2.8 → 1.2.9

package/src/data/messages/messages-protocol-v2.json

@@ -11034,6 +11034,149 @@
         }
       }
     },
+    "ZcashAddressType": {
+      "values": {
+        "UNIFIED_ORCHARD_P2PKH": 0,
+        "TRANSPARENT_P2PKH": 1,
+        "UNIFIED_ORCHARD": 2
+      }
+    },
+    "ZcashAddressScope": {
+      "values": {
+        "EXTERNAL": 0,
+        "INTERNAL": 1
+      }
+    },
+    "ZcashGetAddress": {
+      "fields": {
+        "address_n": {
+          "rule": "repeated",
+          "type": "uint32",
+          "id": 1,
+          "options": {
+            "packed": false
+          }
+        },
+        "show_display": {
+          "type": "bool",
+          "id": 2
+        },
+        "include_seed_fingerprint": {
+          "type": "bool",
+          "id": 3
+        },
+        "diversifier_index": {
+          "type": "uint32",
+          "id": 5,
+          "options": {
+            "default": 0
+          }
+        },
+        "address_type": {
+          "type": "ZcashAddressType",
+          "id": 6,
+          "options": {
+            "default": "UNIFIED_ORCHARD_P2PKH"
+          }
+        },
+        "scope": {
+          "type": "ZcashAddressScope",
+          "id": 7,
+          "options": {
+            "default": "EXTERNAL"
+          }
+        }
+      }
+    },
+    "ZcashAddress": {
+      "fields": {
+        "address": {
+          "rule": "required",
+          "type": "string",
+          "id": 1
+        },
+        "seed_fingerprint": {
+          "type": "bytes",
+          "id": 3
+        }
+      }
+    },
+    "ZcashGetFullViewingKey": {
+      "fields": {
+        "address_n": {
+          "rule": "repeated",
+          "type": "uint32",
+          "id": 1,
+          "options": {
+            "packed": false
+          }
+        }
+      }
+    },
+    "ZcashFullViewingKey": {
+      "fields": {
+        "ufvk": {
+          "rule": "required",
+          "type": "string",
+          "id": 1
+        }
+      }
+    },
+    "ZcashSignPczt": {
+      "fields": {
+        "pczt_length": {
+          "rule": "required",
+          "type": "uint32",
+          "id": 1
+        },
+        "pczt_initial_chunk": {
+          "rule": "required",
+          "type": "bytes",
+          "id": 2
+        }
+      }
+    },
+    "ZcashPcztChunkRequest": {
+      "fields": {
+        "chunk_length": {
+          "rule": "required",
+          "type": "uint32",
+          "id": 1
+        }
+      }
+    },
+    "ZcashPcztChunkAck": {
+      "fields": {
+        "data_chunk": {
+          "rule": "required",
+          "type": "bytes",
+          "id": 1
+        }
+      }
+    },
+    "ZcashSignedPczt": {
+      "fields": {
+        "pczt_length": {
+          "rule": "required",
+          "type": "uint32",
+          "id": 1
+        },
+        "pczt_initial_chunk": {
+          "rule": "required",
+          "type": "bytes",
+          "id": 2
+        }
+      }
+    },
+    "ZcashSignedPcztChunkRequest": {
+      "fields": {
+        "chunk_length": {
+          "rule": "required",
+          "type": "uint32",
+          "id": 1
+        }
+      }
+    },
     "wire_in": {
       "type": "bool",
       "id": 50002,
@@ -11459,6 +11602,15 @@
         "MessageType_NeoAddress": 12302,
         "MessageType_NeoSignTx": 12303,
         "MessageType_NeoSignedTx": 12304,
+        "MessageType_ZcashGetAddress": 12400,
+        "MessageType_ZcashAddress": 12401,
+        "MessageType_ZcashSignPczt": 12402,
+        "MessageType_ZcashSignedPczt": 12403,
+        "MessageType_ZcashPcztChunkRequest": 12404,
+        "MessageType_ZcashPcztChunkAck": 12405,
+        "MessageType_ZcashSignedPcztChunkRequest": 12406,
+        "MessageType_ZcashGetFullViewingKey": 12407,
+        "MessageType_ZcashFullViewingKey": 12408,
         "MessageType_DeviceFactoryInfoSet": 60000,
         "MessageType_DeviceFactoryInfoGet": 60001,
         "MessageType_DeviceFactoryInfo": 60002,

package/src/data/messages/messages.json

@@ -12485,6 +12485,8 @@
         "(has_bitcoin_only_values)": true
       },
       "values": {
+        "MessageType_BabylonDeriveContextHash": 10054,
+        "MessageType_BabylonDerivedContextHash": 10055,
         "MessageType_Initialize": 0,
         "MessageType_Ping": 1,
         "MessageType_Success": 2,
@@ -12949,6 +12951,55 @@
         "MessageType_UpgradeFileHeader": 10050
       }
     },
+    "CanonicalBitcoinNetwork": {
+      "values": {
+        "BITCOIN_MAINNET": 0,
+        "BITCOIN_TESTNET": 1,
+        "BITCOIN_SIGNET": 2,
+        "BITCOIN_REGTEST": 3
+      }
+    },
+    "BabylonDeriveContextHash": {
+      "fields": {
+        "address_n": {
+          "rule": "repeated",
+          "type": "uint32",
+          "id": 1,
+          "options": {
+            "packed": false
+          }
+        },
+        "script_type": {
+          "rule": "required",
+          "type": "InputScriptType",
+          "id": 2
+        },
+        "app_name": {
+          "rule": "required",
+          "type": "bytes",
+          "id": 3
+        },
+        "context": {
+          "rule": "required",
+          "type": "bytes",
+          "id": 4
+        },
+        "network": {
+          "rule": "required",
+          "type": "CanonicalBitcoinNetwork",
+          "id": 5
+        }
+      }
+    },
+    "BabylonDerivedContextHash": {
+      "fields": {
+        "secret": {
+          "rule": "required",
+          "type": "bytes",
+          "id": 1
+        }
+      }
+    },
     "google": {
       "nested": {
         "protobuf": {

package/src/device/Device.ts

@@ -236,6 +236,9 @@ export class Device extends EventEmitter {
    */
   private deviceAcquired = false;
 
+  /** A completed BLE release left the physical link available for the next call. */
+  private releasedBleConnection = false;
+
   /**
    * Connection-attempt generation. interruptionFromUser() pins the current
    * attempt so a late acquire cannot finish, while the next public connect
@@ -248,6 +251,9 @@ export class Device extends EventEmitter {
   /** Canonical device-state cache; legacy Features is a compatibility projection. */
   private stateStore = new DeviceStateStore();
 
+  /** Retain the old public identity only for disconnect notifications after wipe. */
+  private deviceBeforeWipe: DeviceTyped | null = null;
+
   /** Force the next initialization to reload DeviceInfo after reconnect or reboot. */
   private protocolV2StateNeedsReload = false;
 
@@ -351,6 +357,8 @@ export class Device extends EventEmitter {
   toMessageObject(): DeviceTyped | null {
     if (this.isUnacquired() || !this.features) return null;
 
+    this.deviceBeforeWipe = null;
+
     const env = DataManager.getSettings('env');
     const deviceType = this.getCurrentDeviceType();
 
@@ -395,6 +403,10 @@ export class Device extends EventEmitter {
     };
   }
 
+  toDisconnectMessageObject(): DeviceTyped | null {
+    return this.toMessageObject() ?? this.deviceBeforeWipe;
+  }
+
   /**
    * Device connect
    * @returns {Promise<boolean>}
@@ -443,6 +455,7 @@ export class Device extends EventEmitter {
   ) {
     const attempt = this.connectionAttempt;
     this.throwIfInterruptedByUser();
+    this.releasedBleConnection = false;
     const env = DataManager.getSettings('env');
     const mainIdKey = DataManager.isBleConnect(env) ? 'id' : 'session';
     const previousProtocol = this.originalDescriptor.protocolType;
@@ -553,6 +566,7 @@ export class Device extends EventEmitter {
       (this.isUsedHere() && !this.keepSession && this.mainId) ||
       (this.mainId && DataManager.isBleConnect(env))
     ) {
+      this.releasedBleConnection = false;
       // wait for callback tasks to complete before releasing device
       if (this.pendingCallbackPromise) {
         try {
@@ -576,12 +590,24 @@ export class Device extends EventEmitter {
         }
       }
       try {
+        const deviceType = this.getCurrentDeviceType();
+        const keepBleConnection =
+          (env === 'react-native' || env === 'desktop-web-ble') &&
+          this.isProtocolV2() &&
+          (deviceType === EDeviceType.Pro2 || deviceType === EDeviceType.Neo);
         // BLE releases even when keepSession is set, so forward the intent.
-        await this.deviceConnector?.release(this.mainId, false, this.keepSession);
-        this.updateDescriptor({ session: null } as DeviceDescriptor);
+        await this.deviceConnector?.release(
+          this.mainId,
+          false,
+          this.keepSession || keepBleConnection
+        );
+        this.releasedBleConnection = keepBleConnection;
       } catch (err) {
         Log.error('[Device] release error: ', err);
       } finally {
+        // Core no longer owns a logical transport session after release starts,
+        // even if native cleanup must be retried by the transport.
+        this.updateDescriptor({ session: null } as DeviceDescriptor);
         this.needReloadDevice = true;
       }
     }
@@ -1360,10 +1386,12 @@ export class Device extends EventEmitter {
 
   markTransportDisconnected() {
     this.deviceAcquired = false;
+    this.releasedBleConnection = false;
     this.invalidateProtocolV2RuntimeState();
   }
 
   invalidateAfterWipe() {
+    this.deviceBeforeWipe = this.toMessageObject() ?? this.deviceBeforeWipe;
     const deviceId = this.getCurrentDeviceId();
     if (deviceId) {
       deviceWalletSessionStore.deleteDevice(deviceId);
@@ -1621,7 +1649,7 @@ export class Device extends EventEmitter {
           await commands?.cancelDevice?.().catch(cancelError => {
             Log.debug('Protocol V2 fallback cancel error', cancelError);
           });
-        } else if (!acquired) {
+        } else if (!acquired && !this.releasedBleConnection) {
           // Abort setup without acquiring a session just to send Cancel.
           if (mainId && deviceConnector?.disconnect) {
             // The connector drops the link silently, so without this line a
@@ -1801,7 +1829,7 @@ export class Device extends EventEmitter {
     // both allow and require cases might generate single unexpected mode
     if (!this.isUnacquired()) {
       // allow cases
-      if (this.isBootloader() && !this.isProtocolV2() && !allow.includes(UI_REQUEST.BOOTLOADER)) {
+      if ((this.isBootloader() || this.isRomloader()) && !allow.includes(UI_REQUEST.BOOTLOADER)) {
         return UI_REQUEST.BOOTLOADER;
       }
       if (!this.isInitialized() && !allow.includes(UI_REQUEST.NOT_INITIALIZE)) {

package/src/device/DeviceCommands.ts

@@ -66,6 +66,15 @@ const DEVICE_CONTROL_CALLS = new Set([
   'DeviceMiscUsbMscControl',
 ]);
 
+// Paths the firmware can never derive, whatever the safety checks say. Lowercase: matched
+// case-insensitively, as firmware wording varies.
+const UNSUPPORTED_PATH_FAILURES = [
+  // Ed25519 derives hardened levels only (Touch, Pro), e.g. Monero's Cake path m/44'/128'/x'/0/0.
+  'non-hardened paths unsupported on ed25519',
+  // Classic 1S refuses paths off a chain's fixed pattern.
+  'invalid path',
+];
+
 // Older Protocol V2 firmware may omit the cancellation subcode, so retain a
 // narrow message fallback for compatibility.
 const isProtocolV2ActionCancelledMessage = (message: string) =>
@@ -534,6 +543,14 @@ export class DeviceCommands {
             count: detailMatch?.[1],
           });
         }
+        const lowerMessage = message?.toLowerCase() ?? '';
+        // Strict safety checks refuse a path outside the chain's standard ones.
+        if (lowerMessage.includes('forbidden key path')) {
+          error = ERRORS.TypedError(HardwareErrorCode.ForbiddenKeyPath, message);
+        }
+        if (UNSUPPORTED_PATH_FAILURES.some(text => lowerMessage.includes(text))) {
+          error = ERRORS.TypedError(HardwareErrorCode.DeviceNotSupportPath, message);
+        }
       }
 
       if (isProtocolV2LinkDisabledFailure(code, message)) {
@@ -549,6 +566,16 @@ export class DeviceCommands {
           this.device.isProtocolV2() &&
           DEVICE_CONTROL_CALLS.has(callType) &&
           subcode === DeviceErrorCode.DeviceError_Busy;
+        const isProtocolV2PinCancelledBusyFailure =
+          this.device.isProtocolV2() &&
+          !DEVICE_SESSION_CALLS.has(callType) &&
+          subcode === DeviceSessionErrorCode.DeviceSessionError_UserCancelled &&
+          /^pin cancelled$/i.test(normalizedMessage);
+        const isProtocolV2FirmwareUpdateBusyFailure =
+          this.device.isProtocolV2() &&
+          /^requested command not allowed while a firmware update is in progress$/i.test(
+            normalizedMessage
+          );
         const isLegacyProtocolV2LockedFailure =
           this.device.isProtocolV2() && /^device (?:is )?locked$/i.test(normalizedMessage);
         if (
@@ -606,7 +633,11 @@ export class DeviceCommands {
             subcode,
             firmwareMessage: message,
           });
-        } else if (isProtocolV2DeviceBusyFailure) {
+        } else if (
+          isProtocolV2DeviceBusyFailure ||
+          isProtocolV2PinCancelledBusyFailure ||
+          isProtocolV2FirmwareUpdateBusyFailure
+        ) {
           error = ERRORS.TypedError(HardwareErrorCode.DeviceBusy, message, {
             failureCode: code,
             subcode,

package/src/device/DeviceConnector.ts

@@ -133,10 +133,10 @@ export default class DeviceConnector {
             : undefined;
         const detectedProtocol = acquiredProtocol ?? transport.getProtocolType(path);
         if (detectedProtocol !== expectedProtocol) {
-          throw ERRORS.TypedError(
-            HardwareErrorCode.RuntimeError,
-            `Device protocol mismatch: expected ${expectedProtocol}, detected ${detectedProtocol}`
-          );
+          throw ERRORS.TypedError(HardwareErrorCode.TransportProtocolMismatch, undefined, {
+            expectedProtocol,
+            detectedProtocol,
+          });
         }
       }
       return res;

package/src/device/DevicePool.ts

@@ -114,7 +114,11 @@ export class DevicePool extends EventEmitter {
         const exist = canPathIdentifyDevice(cachedPath)
           ? descriptorList.find(d => d.path === cachedPath)
           : undefined;
-        if (exist && !initOptions?.forceProtocolDetection) {
+        if (
+          exist &&
+          !initOptions?.forceProtocolDetection &&
+          !(device.needReloadDevice && device.isUnacquired())
+        ) {
           // Log.debug('find existed Device: ', connectId);
           device.updateDescriptor(exist, true);
           await this._refreshRuntimeState(device, initOptions);
@@ -170,7 +174,13 @@ export class DevicePool extends EventEmitter {
     const forceProtocolDetection = initOptions?.forceProtocolDetection === true;
     const isNewDevice = !cachedDevice;
     const device = cachedDevice ?? Device.fromDescriptor(descriptor);
-    if (isNewDevice || forceProtocolDetection) {
+    if (
+      isNewDevice ||
+      forceProtocolDetection ||
+      (device.needReloadDevice && device.isUnacquired())
+    ) {
+      // Wipe invalidates state while the same USB path can remain discoverable.
+      if (cachedDevice) device.updateDescriptor(descriptor, true);
       device.deviceConnector = this.connector;
       // Search/discovery acquires outside Device.run(). Start a new attempt so
       // a previous user cancel does not hide this device from later searches.

package/src/events/core.ts

@@ -54,9 +54,9 @@ export const parseMessage = (messageData: any): CoreMessage => {
 };
 
 export const createErrorMessage = (error: Error & { code?: string | number }): Unsuccessful => {
-  let payload = { error: error.message, code: error.code };
+  let payload: Unsuccessful['payload'] = { error: error.message, code: error.code };
   if (error instanceof HardwareError) {
-    payload = { error: error.message, code: error.errorCode };
+    payload = { error: error.message, code: error.errorCode, params: error.params };
   }
   return {
     success: false,

package/src/events/logBlockEvent.ts

@@ -8,14 +8,23 @@ export const LogBlockEvent: Set<string> = new Set([
   UI_RESPONSE.RECEIVE_PASSPHRASE,
 ]);
 
-// These resource/file APIs did not exist in 1.1.32. Skip the payload so
-// the log layer does not copy huge Base64 or binary data.
+// Drop sensitive wallet payloads and large resource data before logger caches
+// or log events can retain them, regardless of whether debug output is enabled.
 const LogPayloadBlockMethod: Set<string> = new Set([
+  'btcDeriveContextHash',
+  'btcSignMessage',
   'deviceUploadNft',
   'deviceUploadWallpaper',
   'uploadPortfolio',
   'fileWrite',
   'fileRead',
+  'zcashGetAddress',
+  'zcashGetFullViewingKey',
+  'zcashSignPczt',
+  'moneroGetAddress',
+  'moneroGetWatchKey',
+  'moneroKeyImageSync',
+  'moneroSignTransaction',
 ]);
 
 export function getLogBlockLabel(message: unknown): string | undefined {
@@ -39,11 +48,57 @@ export function getLogBlockLabel(message: unknown): string | undefined {
   return undefined;
 }
 
+// All-network results of these networks carry what their own address methods
+// keep out of logs (viewing keys, private addresses).
+const LogPayloadBlockNetwork: Set<string> = new Set(['zcash', 'xmr']);
+
+type AllNetworkLogItem = { network?: string; success?: boolean; payload?: object | string } | null;
+
+// A call response lists the results in `payload`; a loop callback carries one
+// result, or all of them when finished, in `payload.data`.
+type AllNetworkLogMessage = {
+  payload?: AllNetworkLogItem[] | { data?: AllNetworkLogItem | AllNetworkLogItem[] };
+};
+
+function redactAllNetworkItem(item: AllNetworkLogItem): AllNetworkLogItem {
+  if (!item || item.success === false || item.payload === undefined) return item;
+  return item.network && LogPayloadBlockNetwork.has(item.network)
+    ? { ...item, payload: '[REDACTED]' }
+    : item;
+}
+
+function redactAllNetworkItems(items: AllNetworkLogItem[]) {
+  const redacted = items.map(redactAllNetworkItem);
+  return redacted.some((item, index) => item !== items[index]) ? redacted : items;
+}
+
+// Returns `message` itself when nothing needs redacting.
+function redactAllNetworkResults(message: AllNetworkLogMessage): AllNetworkLogMessage {
+  const { payload } = message;
+  if (Array.isArray(payload)) {
+    const items = redactAllNetworkItems(payload);
+    return items === payload ? message : { ...message, payload: items };
+  }
+  const data = payload?.data;
+  if (!data) return message;
+  const redacted = Array.isArray(data) ? redactAllNetworkItems(data) : redactAllNetworkItem(data);
+  return redacted === data ? message : { ...message, payload: { ...payload, data: redacted } };
+}
+
 export function getSafeLogPayload(value: unknown, blockLabel?: string): unknown {
   if (blockLabel) {
     return { method: blockLabel, payload: '[REDACTED]' };
   }
-  return value;
+  if (!value || typeof value !== 'object') return value;
+  return redactAllNetworkResults(value as AllNetworkLogMessage);
+}
+
+// A queued task holds its method's raw payload; redact it like the call.
+export function getSafeLogTask<T extends { id?: number; method?: { payload?: unknown } }>(
+  task: T | undefined
+): T | { id?: number; method: string; payload: string } | undefined {
+  const blockLabel = getLogBlockLabel(task?.method?.payload);
+  return blockLabel ? { id: task?.id, method: blockLabel, payload: '[REDACTED]' } : task;
 }
 
 export function formatLogMethodLabel(label: string, methodName?: string): string {

package/src/events/ui-request.ts

@@ -211,6 +211,7 @@ export interface DeviceProgress {
     totalBytes?: number;
     rateBytesPerSecond?: number;
     elapsedMs?: number;
+    retryCount?: number;
   };
 }
 
@@ -218,6 +219,7 @@ export interface PreviousAddressResult {
   type: typeof UI_REQUEST.PREVIOUS_ADDRESS_RESULT;
   payload: {
     device: Device;
+    method: string;
     data: {
       address?: string;
       path?: string;

package/src/index.ts

@@ -21,6 +21,7 @@ export { executeCallback, cleanupCallback };
 export { preloadSessionCache } from './device/Device';
 export { projectFeatures as projectDeviceStateFeatures } from './device/DeviceStateProjector';
 export { getMethodSupportedProtocols } from './api/utils';
+export { probeUsbDeviceIdentitiesWithTransport } from './api/SearchDevices';
 export {
   getFirmwareUpdateHostBindingGeneration,
   registerFirmwareUpdateHostBinding,

package/src/inject.ts

@@ -309,6 +309,8 @@ export const createCoreApi = (
     call({ ...params, connectId, deviceId, method: 'btcGetAddress' }),
   btcGetPublicKey: (connectId, deviceId, params) =>
     call({ ...params, connectId, deviceId, method: 'btcGetPublicKey' }),
+  btcDeriveContextHash: (connectId, deviceId, params) =>
+    call({ ...params, connectId, deviceId, method: 'btcDeriveContextHash' }),
   btcSignMessage: (connectId, deviceId, params) =>
     call({ ...params, connectId, deviceId, method: 'btcSignMessage' }),
   btcSignPsbt: (connectId, deviceId, params) =>
@@ -502,4 +504,19 @@ export const createCoreApi = (
     call({ ...params, connectId, deviceId, method: 'neoGetAddress' }),
   neoSignTransaction: (connectId, deviceId, params) =>
     call({ ...params, connectId, deviceId, method: 'neoSignTransaction' }),
+  zcashGetAddress: (connectId, deviceId, params) =>
+    call({ ...params, connectId, deviceId, method: 'zcashGetAddress' }),
+  zcashGetFullViewingKey: (connectId, deviceId, params) =>
+    call({ ...params, connectId, deviceId, method: 'zcashGetFullViewingKey' }),
+  zcashSignPczt: (connectId, deviceId, params) =>
+    call({ ...params, connectId, deviceId, method: 'zcashSignPczt' }),
+
+  moneroGetAddress: (connectId, deviceId, params) =>
+    call({ ...params, connectId, deviceId, method: 'moneroGetAddress' }),
+  moneroGetWatchKey: (connectId, deviceId, params) =>
+    call({ ...params, connectId, deviceId, method: 'moneroGetWatchKey' }),
+  moneroKeyImageSync: (connectId, deviceId, params) =>
+    call({ ...params, connectId, deviceId, method: 'moneroKeyImageSync' }),
+  moneroSignTransaction: (connectId, deviceId, params) =>
+    call({ ...params, connectId, deviceId, method: 'moneroSignTransaction' }),
 });

package/src/protocols/protocol-v2/resources.ts

@@ -7,6 +7,8 @@ export const PROTOCOL_V2_BOOT_RESOURCE_PACKAGE_PATH =
 export const PROTOCOL_V2_BOOT_RESOURCE_PACKAGE_STAGING_PATH = `${PROTOCOL_V2_BOOT_RESOURCE_PACKAGE_PATH}.staging`;
 export const PROTOCOL_V2_ROM_PARAMS_PACKAGE_PATH = 'vol0:/loaders/rom/params.okpkg';
 export const PROTOCOL_V2_RESOURCE_PACKAGE_HEADER_SIZE = 0x5f90;
+// Installed-package comparison only needs the prefix through the header hash.
+export const PROTOCOL_V2_RESOURCE_PACKAGE_COMPARE_SIZE = 0x280;
 
 const PROTOCOL_V2_RESOURCE_PACKAGE_HEADER_VERSION = 1;
 const PROTOCOL_V2_RESOURCE_PACKAGE_FLEXIBLE_OFFSET = 0x6c;
@@ -123,7 +125,7 @@ export function parseProtocolV2ResourcePackageHeader(
   bytes: Uint8Array,
   packageSize: number
 ): ProtocolV2ResourcePackageHeader {
-  if (bytes.byteLength < PROTOCOL_V2_RESOURCE_PACKAGE_HEADER_SIZE) {
+  if (bytes.byteLength < PROTOCOL_V2_RESOURCE_PACKAGE_COMPARE_SIZE) {
     throw new Error('Pro2 RESOURCE package is shorter than its header');
   }
   const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
@@ -169,5 +171,8 @@ export function parseProtocolV2ResourcePackage(
   binary: ArrayBuffer | Uint8Array
 ): ProtocolV2ResourcePackageHeader {
   const bytes = binary instanceof Uint8Array ? binary : new Uint8Array(binary);
+  if (bytes.byteLength < PROTOCOL_V2_RESOURCE_PACKAGE_HEADER_SIZE) {
+    throw new Error('Pro2 RESOURCE package is shorter than its header');
+  }
   return parseProtocolV2ResourcePackageHeader(bytes, bytes.byteLength);
 }

package/src/protocols/protocol-v2/uiInteraction.ts

@@ -71,7 +71,7 @@ const getDisplayState = (value: unknown) => {
   return { seen, enabled };
 };
 
-const createMethodInteraction = (
+export const createMethodInteraction = (
   reason: 'address-confirmation' | 'public-key-confirmation' | 'signing-confirmation',
   operation: string
 ): ProtocolV2InteractionDescriptor => ({

package/src/types/api/allNetworkGetAddress.ts

@@ -34,7 +34,9 @@ export type INetwork =
   | 'nostr'
   | 'benfen'
   | 'neo'
-  | 'stellar';
+  | 'stellar'
+  | 'xmr'
+  | 'zcash';
 
 export type CommonResponseParams = {
   path: string;
@@ -66,6 +68,11 @@ type AllNetworkAddressPayload =
       // Nostr public key (bech32)
       npub?: string;
     }
+  | {
+      // Zcash
+      address: string;
+      seedFingerprint?: string;
+    }
   | {
       // Cardano
       addressParameters: CardanoAddressParameters;

package/src/types/api/btcDeriveContextHash.ts

@@ -0,0 +1,15 @@
+import type { BabylonDerivedContextHash } from '@onekeyfe/hd-transport';
+import type { CommonParams, Response } from '../params';
+
+export type BTCDeriveContextHashParams = {
+  path: string | number[];
+  appName: string;
+  context: string;
+  network: 'bitcoin-mainnet' | 'bitcoin-testnet' | 'bitcoin-signet' | 'bitcoin-regtest';
+};
+
+export declare function btcDeriveContextHash(
+  connectId: string,
+  deviceId: string,
+  params: CommonParams & BTCDeriveContextHashParams
+): Response<BabylonDerivedContextHash>;