@onekeyfe/hwk-adapter-core 1.2.0-alpha.8 → 1.2.0-alpha.80

package/dist/chunk-U63HTLGJ.mjs

@@ -0,0 +1,151 @@
+// src/events/ui-request.ts
+var UI_EVENT = "UI_EVENT";
+var UI_REQUEST = {
+  REQUEST_PIN: "ui-request-pin",
+  REQUEST_PASSPHRASE: "ui-request-passphrase",
+  // One-way UI notification: device is waiting for passphrase entry on-device.
+  // The prompt response path remains RECEIVE_PASSPHRASE with passphraseOnDevice=true.
+  REQUEST_PASSPHRASE_ON_DEVICE: "ui-request-passphrase-on-device",
+  REQUEST_BUTTON: "ui-request-button",
+  REQUEST_QR_DISPLAY: "ui-request-qr-display",
+  REQUEST_QR_SCAN: "ui-request-qr-scan",
+  REQUEST_DEVICE_PERMISSION: "ui-request-device-permission",
+  REQUEST_SELECT_DEVICE: "ui-request-select-device",
+  REQUEST_DEVICE_CONNECT: "ui-request-device-connect",
+  // Ledger BTC App: account index >= 100 requires display=true. Adapter asks
+  // the user once per session before promoting the call.
+  REQUEST_BTC_HIGH_INDEX_CONFIRM: "ui-request-btc-high-index-confirm",
+  // Required app is not installed; with autoInstallApp on, ask the user
+  // whether to install it before retrying the operation.
+  REQUEST_INSTALL_APP: "ui-request-install-app",
+  REQUEST_PREEMPTION: "ui-request-preemption",
+  REQUEST_TREZOR_THP_PAIRING: "ui-request-trezor-thp-pairing",
+  CLOSE_UI_WINDOW: "ui-close",
+  DEVICE_PROGRESS: "ui-device_progress",
+  FIRMWARE_PROGRESS: "ui-firmware-progress",
+  FIRMWARE_TIP: "ui-firmware-tip"
+};
+var UI_RESPONSE = {
+  RECEIVE_PIN: "receive-pin",
+  RECEIVE_PASSPHRASE: "receive-passphrase",
+  RECEIVE_QR_RESPONSE: "receive-qr-response",
+  RECEIVE_SELECT_DEVICE: "receive-select-device",
+  RECEIVE_DEVICE_CONNECT: "receive-device-connect",
+  RECEIVE_DEVICE_PERMISSION: "receive-device-permission",
+  RECEIVE_BTC_HIGH_INDEX_CONFIRM: "receive-btc-high-index-confirm",
+  RECEIVE_INSTALL_APP: "receive-install-app",
+  RECEIVE_PREEMPTION: "receive-preemption",
+  RECEIVE_TREZOR_THP_PAIRING: "receive-trezor-thp-pairing",
+  CANCEL: "cancel"
+};
+
+// src/utils/UiRequestRegistry.ts
+var UI_REQUEST_DEFAULT_TIMEOUT_MS = 6e5;
+var RESPONSE_TO_REQUEST = {
+  [UI_RESPONSE.RECEIVE_PIN]: UI_REQUEST.REQUEST_PIN,
+  [UI_RESPONSE.RECEIVE_PASSPHRASE]: UI_REQUEST.REQUEST_PASSPHRASE,
+  [UI_RESPONSE.RECEIVE_SELECT_DEVICE]: UI_REQUEST.REQUEST_SELECT_DEVICE,
+  [UI_RESPONSE.RECEIVE_DEVICE_CONNECT]: UI_REQUEST.REQUEST_DEVICE_CONNECT,
+  [UI_RESPONSE.RECEIVE_DEVICE_PERMISSION]: UI_REQUEST.REQUEST_DEVICE_PERMISSION,
+  [UI_RESPONSE.RECEIVE_BTC_HIGH_INDEX_CONFIRM]: UI_REQUEST.REQUEST_BTC_HIGH_INDEX_CONFIRM,
+  [UI_RESPONSE.RECEIVE_INSTALL_APP]: UI_REQUEST.REQUEST_INSTALL_APP,
+  [UI_RESPONSE.RECEIVE_PREEMPTION]: UI_REQUEST.REQUEST_PREEMPTION,
+  [UI_RESPONSE.RECEIVE_TREZOR_THP_PAIRING]: UI_REQUEST.REQUEST_TREZOR_THP_PAIRING
+  // RECEIVE_QR_RESPONSE maps to QR_DISPLAY or QR_SCAN — resolved dynamically below.
+};
+var UI_REQUEST_PREEMPTED_TAG = "UiRequestPreempted";
+var UI_REQUEST_CANCELLED_TAG = "UiRequestCancelled";
+var UI_REQUEST_TIMEOUT_TAG = "UiRequestTimeout";
+var UiRequestRegistry = class {
+  constructor() {
+    this.pending = /* @__PURE__ */ new Map();
+  }
+  wait(requestType, options) {
+    const existing = this.pending.get(requestType);
+    if (existing) {
+      clearTimeout(existing.timer);
+      this.pending.delete(requestType);
+      existing.reject(
+        Object.assign(new Error(`UI request '${requestType}' was superseded by a new request`), {
+          _tag: UI_REQUEST_PREEMPTED_TAG
+        })
+      );
+    }
+    const timeoutMs = options?.timeoutMs ?? UI_REQUEST_DEFAULT_TIMEOUT_MS;
+    return new Promise((resolve, reject) => {
+      const timer = setTimeout(() => {
+        if (this.pending.get(requestType)?.timer === timer) {
+          this.pending.delete(requestType);
+          reject(
+            Object.assign(new Error(`UI request '${requestType}' timed out after ${timeoutMs}ms`), {
+              _tag: UI_REQUEST_TIMEOUT_TAG
+            })
+          );
+        }
+      }, timeoutMs);
+      this.pending.set(requestType, {
+        resolve,
+        reject,
+        timer
+      });
+    });
+  }
+  resolve(responseType, payload) {
+    let requestType = RESPONSE_TO_REQUEST[responseType];
+    if (responseType === UI_RESPONSE.RECEIVE_QR_RESPONSE) {
+      if (this.pending.has(UI_REQUEST.REQUEST_QR_DISPLAY)) {
+        requestType = UI_REQUEST.REQUEST_QR_DISPLAY;
+      } else if (this.pending.has(UI_REQUEST.REQUEST_QR_SCAN)) {
+        requestType = UI_REQUEST.REQUEST_QR_SCAN;
+      }
+    }
+    if (!requestType) return;
+    const entry = this.pending.get(requestType);
+    if (!entry) return;
+    clearTimeout(entry.timer);
+    this.pending.delete(requestType);
+    entry.resolve(payload);
+  }
+  cancel(requestType) {
+    if (requestType) {
+      const entry = this.pending.get(requestType);
+      if (!entry) return;
+      clearTimeout(entry.timer);
+      this.pending.delete(requestType);
+      entry.reject(
+        Object.assign(new Error(`UI request '${requestType}' was cancelled`), {
+          _tag: UI_REQUEST_CANCELLED_TAG
+        })
+      );
+      return;
+    }
+    for (const [type, entry] of this.pending) {
+      clearTimeout(entry.timer);
+      entry.reject(
+        Object.assign(new Error(`UI request '${type}' was cancelled`), {
+          _tag: UI_REQUEST_CANCELLED_TAG
+        })
+      );
+    }
+    this.pending.clear();
+  }
+  reset() {
+    this.cancel();
+  }
+  hasPending(requestType) {
+    if (requestType) return this.pending.has(requestType);
+    return this.pending.size > 0;
+  }
+};
+
+export {
+  UI_EVENT,
+  UI_REQUEST,
+  UI_RESPONSE,
+  UI_REQUEST_DEFAULT_TIMEOUT_MS,
+  UI_REQUEST_PREEMPTED_TAG,
+  UI_REQUEST_CANCELLED_TAG,
+  UI_REQUEST_TIMEOUT_TAG,
+  UiRequestRegistry
+};
+//# sourceMappingURL=chunk-U63HTLGJ.mjs.map

package/dist/chunk-U63HTLGJ.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/events/ui-request.ts","../src/utils/UiRequestRegistry.ts"],"sourcesContent":["import type { QrResponseData } from '../types/qr';\n\nexport const UI_EVENT = 'UI_EVENT';\n\nexport const UI_REQUEST = {\n  REQUEST_PIN: 'ui-request-pin',\n  REQUEST_PASSPHRASE: 'ui-request-passphrase',\n  // One-way UI notification: device is waiting for passphrase entry on-device.\n  // The prompt response path remains RECEIVE_PASSPHRASE with passphraseOnDevice=true.\n  REQUEST_PASSPHRASE_ON_DEVICE: 'ui-request-passphrase-on-device',\n  REQUEST_BUTTON: 'ui-request-button',\n  REQUEST_QR_DISPLAY: 'ui-request-qr-display',\n  REQUEST_QR_SCAN: 'ui-request-qr-scan',\n  REQUEST_DEVICE_PERMISSION: 'ui-request-device-permission',\n  REQUEST_SELECT_DEVICE: 'ui-request-select-device',\n  REQUEST_DEVICE_CONNECT: 'ui-request-device-connect',\n  // Ledger BTC App: account index >= 100 requires display=true. Adapter asks\n  // the user once per session before promoting the call.\n  REQUEST_BTC_HIGH_INDEX_CONFIRM: 'ui-request-btc-high-index-confirm',\n  // Required app is not installed; with autoInstallApp on, ask the user\n  // whether to install it before retrying the operation.\n  REQUEST_INSTALL_APP: 'ui-request-install-app',\n  REQUEST_PREEMPTION: 'ui-request-preemption',\n  REQUEST_TREZOR_THP_PAIRING: 'ui-request-trezor-thp-pairing',\n  CLOSE_UI_WINDOW: 'ui-close',\n  DEVICE_PROGRESS: 'ui-device_progress',\n  FIRMWARE_PROGRESS: 'ui-firmware-progress',\n  FIRMWARE_TIP: 'ui-firmware-tip',\n} as const;\n\nexport const UI_RESPONSE = {\n  RECEIVE_PIN: 'receive-pin',\n  RECEIVE_PASSPHRASE: 'receive-passphrase',\n  RECEIVE_QR_RESPONSE: 'receive-qr-response',\n  RECEIVE_SELECT_DEVICE: 'receive-select-device',\n  RECEIVE_DEVICE_CONNECT: 'receive-device-connect',\n  RECEIVE_DEVICE_PERMISSION: 'receive-device-permission',\n  RECEIVE_BTC_HIGH_INDEX_CONFIRM: 'receive-btc-high-index-confirm',\n  RECEIVE_INSTALL_APP: 'receive-install-app',\n  RECEIVE_PREEMPTION: 'receive-preemption',\n  RECEIVE_TREZOR_THP_PAIRING: 'receive-trezor-thp-pairing',\n  CANCEL: 'cancel',\n} as const;\n\nexport type DevicePermissionDeniedReason =\n  | 'bluetoothTurnedOff'\n  | 'permissionDenied'\n  | (string & Record<never, never>);\n\nexport type DevicePermissionResponse = {\n  granted: boolean;\n  reason?: DevicePermissionDeniedReason;\n  message?: string;\n};\n\nexport type UiResponseEvent =\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_PIN;\n      payload: string;\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_PASSPHRASE;\n      payload: {\n        value: string;\n        passphraseOnDevice?: boolean;\n        save?: boolean;\n      };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_QR_RESPONSE;\n      payload: QrResponseData;\n    }\n  | {\n      // sdkConnectId echoes one of the DeviceInfo.connectId values emitted in\n      // the REQUEST_SELECT_DEVICE event's `devices` list. Scope is the current\n      // search session; may be ephemeral (e.g. Ledger USB DMK UUID).\n      type: typeof UI_RESPONSE.RECEIVE_SELECT_DEVICE;\n      payload: { sdkConnectId: string };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_DEVICE_CONNECT;\n      payload: { confirmed: boolean };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_DEVICE_PERMISSION;\n      payload: DevicePermissionResponse;\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_BTC_HIGH_INDEX_CONFIRM;\n      payload: { confirmed: boolean };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_INSTALL_APP;\n      payload: { confirmed: boolean };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_PREEMPTION;\n      payload: { confirmed: boolean };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_TREZOR_THP_PAIRING;\n      payload: {\n        selectedMethod?: number | string;\n        tag?: string;\n      };\n    }\n  | {\n      type: typeof UI_RESPONSE.CANCEL;\n      payload?: undefined;\n    };\n","import { UI_REQUEST, UI_RESPONSE } from '../events/ui-request';\n\n/** 10 min — every UI request is human-in-the-loop; bias toward \"wait long\". */\nexport const UI_REQUEST_DEFAULT_TIMEOUT_MS = 600_000;\n\nconst RESPONSE_TO_REQUEST: Record<string, string> = {\n  [UI_RESPONSE.RECEIVE_PIN]: UI_REQUEST.REQUEST_PIN,\n  [UI_RESPONSE.RECEIVE_PASSPHRASE]: UI_REQUEST.REQUEST_PASSPHRASE,\n  [UI_RESPONSE.RECEIVE_SELECT_DEVICE]: UI_REQUEST.REQUEST_SELECT_DEVICE,\n  [UI_RESPONSE.RECEIVE_DEVICE_CONNECT]: UI_REQUEST.REQUEST_DEVICE_CONNECT,\n  [UI_RESPONSE.RECEIVE_DEVICE_PERMISSION]: UI_REQUEST.REQUEST_DEVICE_PERMISSION,\n  [UI_RESPONSE.RECEIVE_BTC_HIGH_INDEX_CONFIRM]: UI_REQUEST.REQUEST_BTC_HIGH_INDEX_CONFIRM,\n  [UI_RESPONSE.RECEIVE_INSTALL_APP]: UI_REQUEST.REQUEST_INSTALL_APP,\n  [UI_RESPONSE.RECEIVE_PREEMPTION]: UI_REQUEST.REQUEST_PREEMPTION,\n  [UI_RESPONSE.RECEIVE_TREZOR_THP_PAIRING]: UI_REQUEST.REQUEST_TREZOR_THP_PAIRING,\n  // RECEIVE_QR_RESPONSE maps to QR_DISPLAY or QR_SCAN — resolved dynamically below.\n};\n\nexport const UI_REQUEST_PREEMPTED_TAG = 'UiRequestPreempted';\nexport const UI_REQUEST_CANCELLED_TAG = 'UiRequestCancelled';\nexport const UI_REQUEST_TIMEOUT_TAG = 'UiRequestTimeout';\n\ntype PendingEntry = {\n  resolve: (payload: unknown) => void;\n  reject: (error: Error) => void;\n  timer: ReturnType<typeof setTimeout>;\n};\n\n/**\n * Per-type single-slot registry for adapter-level UI requests. A new `wait`\n * of the same type supersedes (rejects) the prior pending entry. With the\n * job queue running globally serially, cross-type collisions don't occur in\n * normal flow — same-type preemption is a defensive measure for callers\n * that fire the same request twice without waiting on the first.\n *\n * Unknown response types are dropped silently so the public `uiResponse`\n * entry never throws.\n */\nexport class UiRequestRegistry {\n  private pending = new Map<string, PendingEntry>();\n\n  wait<T = unknown>(requestType: string, options?: { timeoutMs?: number }): Promise<T> {\n    const existing = this.pending.get(requestType);\n    if (existing) {\n      clearTimeout(existing.timer);\n      this.pending.delete(requestType);\n      existing.reject(\n        Object.assign(new Error(`UI request '${requestType}' was superseded by a new request`), {\n          _tag: UI_REQUEST_PREEMPTED_TAG,\n        })\n      );\n    }\n\n    const timeoutMs = options?.timeoutMs ?? UI_REQUEST_DEFAULT_TIMEOUT_MS;\n\n    return new Promise<T>((resolve, reject) => {\n      const timer = setTimeout(() => {\n        if (this.pending.get(requestType)?.timer === timer) {\n          this.pending.delete(requestType);\n          reject(\n            Object.assign(new Error(`UI request '${requestType}' timed out after ${timeoutMs}ms`), {\n              _tag: UI_REQUEST_TIMEOUT_TAG,\n            })\n          );\n        }\n      }, timeoutMs);\n\n      this.pending.set(requestType, {\n        resolve: resolve as (payload: unknown) => void,\n        reject,\n        timer,\n      });\n    });\n  }\n\n  resolve(responseType: string, payload: unknown): void {\n    let requestType = RESPONSE_TO_REQUEST[responseType];\n    if (responseType === UI_RESPONSE.RECEIVE_QR_RESPONSE) {\n      if (this.pending.has(UI_REQUEST.REQUEST_QR_DISPLAY)) {\n        requestType = UI_REQUEST.REQUEST_QR_DISPLAY;\n      } else if (this.pending.has(UI_REQUEST.REQUEST_QR_SCAN)) {\n        requestType = UI_REQUEST.REQUEST_QR_SCAN;\n      }\n    }\n    if (!requestType) return;\n\n    const entry = this.pending.get(requestType);\n    if (!entry) return;\n\n    clearTimeout(entry.timer);\n    this.pending.delete(requestType);\n    entry.resolve(payload);\n  }\n\n  cancel(requestType?: string): void {\n    if (requestType) {\n      const entry = this.pending.get(requestType);\n      if (!entry) return;\n      clearTimeout(entry.timer);\n      this.pending.delete(requestType);\n      entry.reject(\n        Object.assign(new Error(`UI request '${requestType}' was cancelled`), {\n          _tag: UI_REQUEST_CANCELLED_TAG,\n        })\n      );\n      return;\n    }\n\n    for (const [type, entry] of this.pending) {\n      clearTimeout(entry.timer);\n      entry.reject(\n        Object.assign(new Error(`UI request '${type}' was cancelled`), {\n          _tag: UI_REQUEST_CANCELLED_TAG,\n        })\n      );\n    }\n    this.pending.clear();\n  }\n\n  reset(): void {\n    this.cancel();\n  }\n\n  hasPending(requestType?: string): boolean {\n    if (requestType) return this.pending.has(requestType);\n    return this.pending.size > 0;\n  }\n}\n"],"mappings":";AAEO,IAAM,WAAW;AAEjB,IAAM,aAAa;AAAA,EACxB,aAAa;AAAA,EACb,oBAAoB;AAAA;AAAA;AAAA,EAGpB,8BAA8B;AAAA,EAC9B,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,iBAAiB;AAAA,EACjB,2BAA2B;AAAA,EAC3B,uBAAuB;AAAA,EACvB,wBAAwB;AAAA;AAAA;AAAA,EAGxB,gCAAgC;AAAA;AAAA;AAAA,EAGhC,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,4BAA4B;AAAA,EAC5B,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,mBAAmB;AAAA,EACnB,cAAc;AAChB;AAEO,IAAM,cAAc;AAAA,EACzB,aAAa;AAAA,EACb,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,uBAAuB;AAAA,EACvB,wBAAwB;AAAA,EACxB,2BAA2B;AAAA,EAC3B,gCAAgC;AAAA,EAChC,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,4BAA4B;AAAA,EAC5B,QAAQ;AACV;;;ACvCO,IAAM,gCAAgC;AAE7C,IAAM,sBAA8C;AAAA,EAClD,CAAC,YAAY,WAAW,GAAG,WAAW;AAAA,EACtC,CAAC,YAAY,kBAAkB,GAAG,WAAW;AAAA,EAC7C,CAAC,YAAY,qBAAqB,GAAG,WAAW;AAAA,EAChD,CAAC,YAAY,sBAAsB,GAAG,WAAW;AAAA,EACjD,CAAC,YAAY,yBAAyB,GAAG,WAAW;AAAA,EACpD,CAAC,YAAY,8BAA8B,GAAG,WAAW;AAAA,EACzD,CAAC,YAAY,mBAAmB,GAAG,WAAW;AAAA,EAC9C,CAAC,YAAY,kBAAkB,GAAG,WAAW;AAAA,EAC7C,CAAC,YAAY,0BAA0B,GAAG,WAAW;AAAA;AAEvD;AAEO,IAAM,2BAA2B;AACjC,IAAM,2BAA2B;AACjC,IAAM,yBAAyB;AAkB/B,IAAM,oBAAN,MAAwB;AAAA,EAAxB;AACL,SAAQ,UAAU,oBAAI,IAA0B;AAAA;AAAA,EAEhD,KAAkB,aAAqB,SAA8C;AACnF,UAAM,WAAW,KAAK,QAAQ,IAAI,WAAW;AAC7C,QAAI,UAAU;AACZ,mBAAa,SAAS,KAAK;AAC3B,WAAK,QAAQ,OAAO,WAAW;AAC/B,eAAS;AAAA,QACP,OAAO,OAAO,IAAI,MAAM,eAAe,WAAW,mCAAmC,GAAG;AAAA,UACtF,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,YAAY,SAAS,aAAa;AAExC,WAAO,IAAI,QAAW,CAAC,SAAS,WAAW;AACzC,YAAM,QAAQ,WAAW,MAAM;AAC7B,YAAI,KAAK,QAAQ,IAAI,WAAW,GAAG,UAAU,OAAO;AAClD,eAAK,QAAQ,OAAO,WAAW;AAC/B;AAAA,YACE,OAAO,OAAO,IAAI,MAAM,eAAe,WAAW,qBAAqB,SAAS,IAAI,GAAG;AAAA,cACrF,MAAM;AAAA,YACR,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF,GAAG,SAAS;AAEZ,WAAK,QAAQ,IAAI,aAAa;AAAA,QAC5B;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,QAAQ,cAAsB,SAAwB;AACpD,QAAI,cAAc,oBAAoB,YAAY;AAClD,QAAI,iBAAiB,YAAY,qBAAqB;AACpD,UAAI,KAAK,QAAQ,IAAI,WAAW,kBAAkB,GAAG;AACnD,sBAAc,WAAW;AAAA,MAC3B,WAAW,KAAK,QAAQ,IAAI,WAAW,eAAe,GAAG;AACvD,sBAAc,WAAW;AAAA,MAC3B;AAAA,IACF;AACA,QAAI,CAAC,YAAa;AAElB,UAAM,QAAQ,KAAK,QAAQ,IAAI,WAAW;AAC1C,QAAI,CAAC,MAAO;AAEZ,iBAAa,MAAM,KAAK;AACxB,SAAK,QAAQ,OAAO,WAAW;AAC/B,UAAM,QAAQ,OAAO;AAAA,EACvB;AAAA,EAEA,OAAO,aAA4B;AACjC,QAAI,aAAa;AACf,YAAM,QAAQ,KAAK,QAAQ,IAAI,WAAW;AAC1C,UAAI,CAAC,MAAO;AACZ,mBAAa,MAAM,KAAK;AACxB,WAAK,QAAQ,OAAO,WAAW;AAC/B,YAAM;AAAA,QACJ,OAAO,OAAO,IAAI,MAAM,eAAe,WAAW,iBAAiB,GAAG;AAAA,UACpE,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AACA;AAAA,IACF;AAEA,eAAW,CAAC,MAAM,KAAK,KAAK,KAAK,SAAS;AACxC,mBAAa,MAAM,KAAK;AACxB,YAAM;AAAA,QACJ,OAAO,OAAO,IAAI,MAAM,eAAe,IAAI,iBAAiB,GAAG;AAAA,UAC7D,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAAA,IACF;AACA,SAAK,QAAQ,MAAM;AAAA,EACrB;AAAA,EAEA,QAAc;AACZ,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,WAAW,aAA+B;AACxC,QAAI,YAAa,QAAO,KAAK,QAAQ,IAAI,WAAW;AACpD,WAAO,KAAK,QAAQ,OAAO;AAAA,EAC7B;AACF;","names":[]}

package/dist/errors.d.mts

@@ -0,0 +1,205 @@
+/**
+ * HWK HardwareErrorCode — independent namespace from the legacy
+ * `@onekeyfe/shared` HardwareErrorCode (which occupies 0-902).
+ *
+ * All HWK codes are 5-digit (>= 10000) so the two tables never collide
+ * even if either side grows. Each sub-category gets a 100-slot block.
+ *
+ *   10000-10099  Generic / cross-cutting primitives
+ *   10100-10199  Device state
+ *   10200-10299  Firmware
+ *   10300-10399  Transport + OS-level permission
+ *   10400-10499  PIN / Passphrase
+ *   10500-10599  App lifecycle (wrong app, not open, too old)
+ *   10600-10999  RESERVED — future adapter-level categories
+ *
+ *   11000-11099  EVM APDU (reactive mapping)
+ *   11100-11199  Solana APDU
+ *   11200-11299  Tron APDU
+ *   11300-11399  BTC APDU
+ *   11400-11999  RESERVED — future chain APDU blocks (100 per chain)
+ *
+ *   12000-99999  RESERVED — future major categories
+ */
+declare enum HardwareErrorCode {
+    UnknownError = 10000,
+    UserRejected = 10001,
+    InvalidParams = 10002,
+    OperationTimeout = 10003,
+    MethodNotSupported = 10004,
+    /** User dismissed in-app cancel UI. Distinct from UserRejected (on-device). */
+    UserAborted = 10005,
+    DeviceNotFound = 10100,
+    DeviceDisconnected = 10101,
+    DeviceBusy = 10102,
+    DeviceLocked = 10103,
+    DeviceNotInitialized = 10104,
+    DeviceInBootloader = 10105,
+    DeviceMismatch = 10106,
+    /** Chain app wedged (e.g. Ledger BTC 0x6901). User must exit app on device. */
+    DeviceAppStuck = 10107,
+    /** Vendor (Ledger / Trezor) doesn't support the chain at all. */
+    ChainNotSupported = 10108,
+    /** Current operation supports only one connected device. */
+    DeviceOneDeviceOnly = 10109,
+    /**
+     * The device rejected the requested derivation path (Trezor Failure_DataError
+     * "Forbidden key path") — the path is non-standard or its index is outside the
+     * range the device's safety checks allow. Distinct from ChainNotSupported
+     * (whole chain) and MethodNotSupported (the operation/method itself).
+     */
+    DevicePathForbidden = 10110,
+    /** Busy with our own in-flight request (queue guard / firmware Failure_Busy), not another app — wait and retry, don't close other apps. */
+    DeviceBusyInternal = 10111,
+    FirmwareTooOld = 10200,
+    FirmwareUpdateRequired = 10201,
+    TransportError = 10300,
+    BridgeNotFound = 10301,
+    TransportNotAvailable = 10302,
+    /**
+     * OS-level permission (Bluetooth / USB / etc.) — denied, blocked,
+     * unavailable, or dismissed. Consumers surface a single "please grant
+     * permission" toast and let the user retry manually.
+     */
+    DevicePermissionDenied = 10303,
+    /**
+     * BLE SMP pairing did not complete within the GATT bonding window.
+     * GATT connected but the device didn't acknowledge SMP — typically
+     * because the user didn't confirm the passkey on the device, or the
+     * device went out of range mid-pairing. Distinct from OperationTimeout
+     * (generic) and from DeviceLocked (Secure Element actually locked).
+     */
+    BlePairingTimeout = 10304,
+    /** Remote network failure reaching a vendor's servers (HTTP/WS). Distinct from TransportError (local USB/BLE link). */
+    NetworkError = 10305,
+    /**
+     * Host-managed pairing handshake failed (Trezor THP). The device rejected the
+     * pairing exchange — e.g. CodeEntry: the user mistyped the code shown on the
+     * device, so the CPace tag didn't match ("Unexpected Code Entry Tag").
+     * Recoverable: the user re-pairs and re-enters the code. Distinct from
+     * BlePairingTimeout (BLE SMP bonding window) and UserRejected (on-device
+     * reject button).
+     */
+    ThpPairingFailed = 10306,
+    /**
+     * The OS-level BLE bond is stale/invalid, so the device rejected link
+     * encryption: Android GATT_INSUF_AUTHENTICATION (status 5) or iOS "Peer
+     * removed pairing information". Happens after the device is wiped/re-flashed
+     * or unpaired elsewhere while the host still holds an old bond. The SDK cannot
+     * remove an OS bond — the user must forget the device in system Bluetooth
+     * settings and re-pair. Distinct from BlePairingTimeout (SMP window) and
+     * ThpPairingFailed (THP code mismatch).
+     */
+    BleBondInvalid = 10307,
+    /**
+     * A stored THP pairing credential was rejected by the device during the
+     * handshake (device returned completion `state=0`), so the autoconnect session
+     * could not be established. The SDK discards the stale credential; recovery is
+     * a fresh pairing. Distinct from ThpPairingFailed (user mistyped the code
+     * during an *active* pairing) and BleBondInvalid (OS-level BLE bond).
+     */
+    ThpPairingRequired = 10308,
+    /**
+     * Generic BLE connect failure where the OS dropped the specific reason. On
+     * macOS the noble native binding hardcodes "connection failed" (and a connect
+     * timeout) and discards the CoreBluetooth NSError, so the SDK cannot tell a
+     * stale bond from an out-of-range / unresponsive device. Surfaced as a
+     * generic "couldn't connect — check the device, re-pair if paired before".
+     * Distinct from BleBondInvalid (a *known* stale-bond signal, iOS/Android only)
+     * and BlePairingTimeout (the SMP bonding window).
+     */
+    BleConnectFailed = 10309,
+    /**
+     * The user cancelled BLE pairing from the app while the connect was still
+     * waiting on the OS pairing window. Not a failure to report — the flow ends
+     * because they asked it to. Distinct from UserAborted (generic in-app cancel)
+     * so the pairing UI can close quietly instead of surfacing a connect error,
+     * and from BlePairingTimeout (the SMP window elapsed on its own).
+     */
+    BlePairingCancelled = 10310,
+    PinInvalid = 10400,
+    PinCancelled = 10401,
+    PassphraseRejected = 10402,
+    /**
+     * The passphrase entered produced a different wallet (`passphraseState`) than
+     * the one the caller asked to operate on. Trezor-only: the host pins a wallet
+     * by its derived state and the SDK refuses to sign with a mismatched
+     * passphrase session. Surfaced by TrezorAdapter.getPassphraseState.
+     */
+    PassphraseStateMismatch = 10403,
+    /**
+     * The two new-PIN entries did not match during set/change PIN. Only host-input
+     * models (Trezor Model One matrix) surface this; on-device-input models show
+     * the mismatch on the device and never return it.
+     */
+    PinMismatch = 10404,
+    /** Chain app NOT INSTALLED on device. User must install via Ledger Live. */
+    AppNotInstalled = 10500,
+    WrongApp = 10501,
+    /** 0x911c Command code not supported — app predates current SDK. */
+    AppTooOld = 10502,
+    /** Not enough free storage for install/update; user must uninstall apps first. */
+    DeviceOutOfMemory = 10503,
+    /** 0x6a80 Invalid data — observed on blindSignTransactionFallback when the
+     *  user has not enabled Blind signing on the device. */
+    EvmBlindSigningRequired = 11000,
+    /** 0x6984 Plugin not installed */
+    EvmClearSignPluginMissing = 11001,
+    /** 0x6a84 Insufficient memory (typical on Nano S with large calldata) */
+    EvmDataTooLarge = 11002,
+    /** 0x6501 TransactionType not supported (app too old for EIP-1559 / blob / 7702) */
+    EvmTxTypeNotSupported = 11003,
+    /** 0x6808 Blind signing disabled for this instruction. */
+    SolanaBlindSigningRequired = 11100,
+    /** 0x6a8d Custom Contracts setting disabled (blocks TRC-20 etc.). */
+    TronCustomContractRequired = 11200,
+    /** 0x6a8b Transactions Data setting disabled. */
+    TronDataSigningRequired = 11201,
+    /** 0x6a8c Sign by Hash setting disabled (hash-signing fallback). */
+    TronSignByHashRequired = 11202,
+    /** 0xb008 Wallet policy HMAC mismatch or not registered. */
+    BtcWalletPolicyHmacMismatch = 11300,
+    /** 0xb007 Aborted due to unexpected state (malformed PSBT / missing UTXO). */
+    BtcUnexpectedState = 11301
+}
+/**
+ * Device-level failures the SDK cannot self-recover from — affect the entire
+ * batch (vs per-chain failures like AppNotInstalled / WrongApp which soft-
+ * skip in onboarding). Combined with `accounts.length === 0`, signals
+ * genuine orphan. Also reused as the batch-abort whitelist for HWK.
+ * Single source of truth.
+ *
+ * UserRejected (device-side reject) is included: pressing reject is an
+ * explicit "I don't consent" — continuing the batch to ask again on the
+ * next chain is harassment, not helpful.
+ */
+declare const ORPHAN_ELIGIBLE_ERROR_CODES: number[];
+interface IHwkErrorPayload {
+    code: HardwareErrorCode;
+    message: string;
+    appName?: string;
+    _tag?: string;
+    params?: Record<string, unknown>;
+}
+type HwkError = Error & {
+    code: HardwareErrorCode;
+    appName?: string;
+    _tag?: string;
+    params?: Record<string, unknown>;
+};
+/**
+ * Canonical throwable for HWK adapters. Plain Error + canonical extra fields,
+ * shape-compatible with `rehydrateConnectorError` so locally-thrown and
+ * cross-boundary errors are indistinguishable to downstream classifiers
+ * (`err.code` / `err._tag` / `err.appName`). Do NOT mutate caught errors
+ * with `Object.assign` — construct a fresh one via this factory.
+ */
+declare function createHwkError(payload: IHwkErrorPayload): HwkError;
+
+/**
+ * Enrich a hardware error message with actionable recovery hints.
+ * Shared across adapters (Ledger, Trezor, etc.).
+ */
+declare function enrichErrorMessage(code: HardwareErrorCode, originalMessage: string): string;
+
+export { HardwareErrorCode, type HwkError, type IHwkErrorPayload, ORPHAN_ELIGIBLE_ERROR_CODES, createHwkError, enrichErrorMessage };

package/dist/errors.d.ts

@@ -0,0 +1,205 @@
+/**
+ * HWK HardwareErrorCode — independent namespace from the legacy
+ * `@onekeyfe/shared` HardwareErrorCode (which occupies 0-902).
+ *
+ * All HWK codes are 5-digit (>= 10000) so the two tables never collide
+ * even if either side grows. Each sub-category gets a 100-slot block.
+ *
+ *   10000-10099  Generic / cross-cutting primitives
+ *   10100-10199  Device state
+ *   10200-10299  Firmware
+ *   10300-10399  Transport + OS-level permission
+ *   10400-10499  PIN / Passphrase
+ *   10500-10599  App lifecycle (wrong app, not open, too old)
+ *   10600-10999  RESERVED — future adapter-level categories
+ *
+ *   11000-11099  EVM APDU (reactive mapping)
+ *   11100-11199  Solana APDU
+ *   11200-11299  Tron APDU
+ *   11300-11399  BTC APDU
+ *   11400-11999  RESERVED — future chain APDU blocks (100 per chain)
+ *
+ *   12000-99999  RESERVED — future major categories
+ */
+declare enum HardwareErrorCode {
+    UnknownError = 10000,
+    UserRejected = 10001,
+    InvalidParams = 10002,
+    OperationTimeout = 10003,
+    MethodNotSupported = 10004,
+    /** User dismissed in-app cancel UI. Distinct from UserRejected (on-device). */
+    UserAborted = 10005,
+    DeviceNotFound = 10100,
+    DeviceDisconnected = 10101,
+    DeviceBusy = 10102,
+    DeviceLocked = 10103,
+    DeviceNotInitialized = 10104,
+    DeviceInBootloader = 10105,
+    DeviceMismatch = 10106,
+    /** Chain app wedged (e.g. Ledger BTC 0x6901). User must exit app on device. */
+    DeviceAppStuck = 10107,
+    /** Vendor (Ledger / Trezor) doesn't support the chain at all. */
+    ChainNotSupported = 10108,
+    /** Current operation supports only one connected device. */
+    DeviceOneDeviceOnly = 10109,
+    /**
+     * The device rejected the requested derivation path (Trezor Failure_DataError
+     * "Forbidden key path") — the path is non-standard or its index is outside the
+     * range the device's safety checks allow. Distinct from ChainNotSupported
+     * (whole chain) and MethodNotSupported (the operation/method itself).
+     */
+    DevicePathForbidden = 10110,
+    /** Busy with our own in-flight request (queue guard / firmware Failure_Busy), not another app — wait and retry, don't close other apps. */
+    DeviceBusyInternal = 10111,
+    FirmwareTooOld = 10200,
+    FirmwareUpdateRequired = 10201,
+    TransportError = 10300,
+    BridgeNotFound = 10301,
+    TransportNotAvailable = 10302,
+    /**
+     * OS-level permission (Bluetooth / USB / etc.) — denied, blocked,
+     * unavailable, or dismissed. Consumers surface a single "please grant
+     * permission" toast and let the user retry manually.
+     */
+    DevicePermissionDenied = 10303,
+    /**
+     * BLE SMP pairing did not complete within the GATT bonding window.
+     * GATT connected but the device didn't acknowledge SMP — typically
+     * because the user didn't confirm the passkey on the device, or the
+     * device went out of range mid-pairing. Distinct from OperationTimeout
+     * (generic) and from DeviceLocked (Secure Element actually locked).
+     */
+    BlePairingTimeout = 10304,
+    /** Remote network failure reaching a vendor's servers (HTTP/WS). Distinct from TransportError (local USB/BLE link). */
+    NetworkError = 10305,
+    /**
+     * Host-managed pairing handshake failed (Trezor THP). The device rejected the
+     * pairing exchange — e.g. CodeEntry: the user mistyped the code shown on the
+     * device, so the CPace tag didn't match ("Unexpected Code Entry Tag").
+     * Recoverable: the user re-pairs and re-enters the code. Distinct from
+     * BlePairingTimeout (BLE SMP bonding window) and UserRejected (on-device
+     * reject button).
+     */
+    ThpPairingFailed = 10306,
+    /**
+     * The OS-level BLE bond is stale/invalid, so the device rejected link
+     * encryption: Android GATT_INSUF_AUTHENTICATION (status 5) or iOS "Peer
+     * removed pairing information". Happens after the device is wiped/re-flashed
+     * or unpaired elsewhere while the host still holds an old bond. The SDK cannot
+     * remove an OS bond — the user must forget the device in system Bluetooth
+     * settings and re-pair. Distinct from BlePairingTimeout (SMP window) and
+     * ThpPairingFailed (THP code mismatch).
+     */
+    BleBondInvalid = 10307,
+    /**
+     * A stored THP pairing credential was rejected by the device during the
+     * handshake (device returned completion `state=0`), so the autoconnect session
+     * could not be established. The SDK discards the stale credential; recovery is
+     * a fresh pairing. Distinct from ThpPairingFailed (user mistyped the code
+     * during an *active* pairing) and BleBondInvalid (OS-level BLE bond).
+     */
+    ThpPairingRequired = 10308,
+    /**
+     * Generic BLE connect failure where the OS dropped the specific reason. On
+     * macOS the noble native binding hardcodes "connection failed" (and a connect
+     * timeout) and discards the CoreBluetooth NSError, so the SDK cannot tell a
+     * stale bond from an out-of-range / unresponsive device. Surfaced as a
+     * generic "couldn't connect — check the device, re-pair if paired before".
+     * Distinct from BleBondInvalid (a *known* stale-bond signal, iOS/Android only)
+     * and BlePairingTimeout (the SMP bonding window).
+     */
+    BleConnectFailed = 10309,
+    /**
+     * The user cancelled BLE pairing from the app while the connect was still
+     * waiting on the OS pairing window. Not a failure to report — the flow ends
+     * because they asked it to. Distinct from UserAborted (generic in-app cancel)
+     * so the pairing UI can close quietly instead of surfacing a connect error,
+     * and from BlePairingTimeout (the SMP window elapsed on its own).
+     */
+    BlePairingCancelled = 10310,
+    PinInvalid = 10400,
+    PinCancelled = 10401,
+    PassphraseRejected = 10402,
+    /**
+     * The passphrase entered produced a different wallet (`passphraseState`) than
+     * the one the caller asked to operate on. Trezor-only: the host pins a wallet
+     * by its derived state and the SDK refuses to sign with a mismatched
+     * passphrase session. Surfaced by TrezorAdapter.getPassphraseState.
+     */
+    PassphraseStateMismatch = 10403,
+    /**
+     * The two new-PIN entries did not match during set/change PIN. Only host-input
+     * models (Trezor Model One matrix) surface this; on-device-input models show
+     * the mismatch on the device and never return it.
+     */
+    PinMismatch = 10404,
+    /** Chain app NOT INSTALLED on device. User must install via Ledger Live. */
+    AppNotInstalled = 10500,
+    WrongApp = 10501,
+    /** 0x911c Command code not supported — app predates current SDK. */
+    AppTooOld = 10502,
+    /** Not enough free storage for install/update; user must uninstall apps first. */
+    DeviceOutOfMemory = 10503,
+    /** 0x6a80 Invalid data — observed on blindSignTransactionFallback when the
+     *  user has not enabled Blind signing on the device. */
+    EvmBlindSigningRequired = 11000,
+    /** 0x6984 Plugin not installed */
+    EvmClearSignPluginMissing = 11001,
+    /** 0x6a84 Insufficient memory (typical on Nano S with large calldata) */
+    EvmDataTooLarge = 11002,
+    /** 0x6501 TransactionType not supported (app too old for EIP-1559 / blob / 7702) */
+    EvmTxTypeNotSupported = 11003,
+    /** 0x6808 Blind signing disabled for this instruction. */
+    SolanaBlindSigningRequired = 11100,
+    /** 0x6a8d Custom Contracts setting disabled (blocks TRC-20 etc.). */
+    TronCustomContractRequired = 11200,
+    /** 0x6a8b Transactions Data setting disabled. */
+    TronDataSigningRequired = 11201,
+    /** 0x6a8c Sign by Hash setting disabled (hash-signing fallback). */
+    TronSignByHashRequired = 11202,
+    /** 0xb008 Wallet policy HMAC mismatch or not registered. */
+    BtcWalletPolicyHmacMismatch = 11300,
+    /** 0xb007 Aborted due to unexpected state (malformed PSBT / missing UTXO). */
+    BtcUnexpectedState = 11301
+}
+/**
+ * Device-level failures the SDK cannot self-recover from — affect the entire
+ * batch (vs per-chain failures like AppNotInstalled / WrongApp which soft-
+ * skip in onboarding). Combined with `accounts.length === 0`, signals
+ * genuine orphan. Also reused as the batch-abort whitelist for HWK.
+ * Single source of truth.
+ *
+ * UserRejected (device-side reject) is included: pressing reject is an
+ * explicit "I don't consent" — continuing the batch to ask again on the
+ * next chain is harassment, not helpful.
+ */
+declare const ORPHAN_ELIGIBLE_ERROR_CODES: number[];
+interface IHwkErrorPayload {
+    code: HardwareErrorCode;
+    message: string;
+    appName?: string;
+    _tag?: string;
+    params?: Record<string, unknown>;
+}
+type HwkError = Error & {
+    code: HardwareErrorCode;
+    appName?: string;
+    _tag?: string;
+    params?: Record<string, unknown>;
+};
+/**
+ * Canonical throwable for HWK adapters. Plain Error + canonical extra fields,
+ * shape-compatible with `rehydrateConnectorError` so locally-thrown and
+ * cross-boundary errors are indistinguishable to downstream classifiers
+ * (`err.code` / `err._tag` / `err.appName`). Do NOT mutate caught errors
+ * with `Object.assign` — construct a fresh one via this factory.
+ */
+declare function createHwkError(payload: IHwkErrorPayload): HwkError;
+
+/**
+ * Enrich a hardware error message with actionable recovery hints.
+ * Shared across adapters (Ledger, Trezor, etc.).
+ */
+declare function enrichErrorMessage(code: HardwareErrorCode, originalMessage: string): string;
+
+export { HardwareErrorCode, type HwkError, type IHwkErrorPayload, ORPHAN_ELIGIBLE_ERROR_CODES, createHwkError, enrichErrorMessage };

package/dist/errors.js

@@ -0,0 +1,13 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+var _chunkSK7ZF33Jjs = require('./chunk-SK7ZF33J.js');
+
+
+
+
+
+exports.HardwareErrorCode = _chunkSK7ZF33Jjs.HardwareErrorCode; exports.ORPHAN_ELIGIBLE_ERROR_CODES = _chunkSK7ZF33Jjs.ORPHAN_ELIGIBLE_ERROR_CODES; exports.createHwkError = _chunkSK7ZF33Jjs.createHwkError; exports.enrichErrorMessage = _chunkSK7ZF33Jjs.enrichErrorMessage;
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/hardware-js-sdk/hardware-js-sdk/packages/hwk-adapter-core/dist/errors.js"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACA;AACF,sDAA4B;AAC5B;AACE;AACA;AACA;AACA;AACF,+QAAC","file":"/home/runner/work/hardware-js-sdk/hardware-js-sdk/packages/hwk-adapter-core/dist/errors.js"}

package/dist/errors.mjs

@@ -0,0 +1,13 @@
+import {
+  HardwareErrorCode,
+  ORPHAN_ELIGIBLE_ERROR_CODES,
+  createHwkError,
+  enrichErrorMessage
+} from "./chunk-67BP77GT.mjs";
+export {
+  HardwareErrorCode,
+  ORPHAN_ELIGIBLE_ERROR_CODES,
+  createHwkError,
+  enrichErrorMessage
+};
+//# sourceMappingURL=errors.mjs.map

package/dist/errors.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}