@onekeyfe/hwk-adapter-core 1.2.2-alpha.8 → 1.2.3-alpha.1

package/dist/index.mjs

@@ -1,9 +1,6 @@
 import {
-  HardwareErrorCode,
-  ORPHAN_ELIGIBLE_ERROR_CODES,
-  createHwkError,
   enrichErrorMessage
-} from "./chunk-67BP77GT.mjs";
+} from "./chunk-3M3GMF64.mjs";
 import {
   UI_EVENT,
   UI_REQUEST,
@@ -13,19 +10,40 @@ import {
   UI_REQUEST_TIMEOUT_TAG,
   UI_RESPONSE,
   UiRequestRegistry
-} from "./chunk-U63HTLGJ.mjs";
+} from "./chunk-KCIK56B5.mjs";
+import {
+  HardwareErrorCode,
+  ORPHAN_ELIGIBLE_ERROR_CODES,
+  createHwkError,
+  defaultOriginForCode,
+  defaultRecoveryForCode,
+  isHwkRecoveryHint,
+  operationMayHaveCompletedParams
+} from "./chunk-72KOSYTH.mjs";
 
 // src/types/response.ts
 function success(payload) {
   return { success: true, payload };
 }
-function failure(code, error, params) {
+function failure(code, error, params, origin, recovery) {
   return {
     success: false,
-    payload: { error, code, ...params ? { params } : {} }
+    payload: {
+      error,
+      code,
+      ...origin !== void 0 ? { origin } : {},
+      recovery: recovery ?? defaultRecoveryForCode(code),
+      ...params ? { params } : {}
+    }
   };
 }
 
+// src/types/device.ts
+function resolveSearchTargetReusePolicy(device) {
+  if (device.capabilities?.persistentDeviceIdentity) return "reconnectable";
+  return "current-discovery";
+}
+
 // src/types/fingerprint.ts
 import { sha256 } from "@noble/hashes/sha256";
 import { bytesToHex, utf8ToBytes } from "@noble/hashes/utils";
@@ -35,11 +53,21 @@ var CHAIN_FINGERPRINT_PATHS = {
   // Cointype 1 (testnet) is rejected by some Ledger BTC App configurations.
   btc: "m/44'/0'/0'",
   sol: "m/44'/501'/0'",
-  tron: "m/44'/195'/0'/0/0"
+  tron: "m/44'/195'/0'/0/0",
+  // Shielded UA (single Orchard receiver) derived from the transparent path.
+  zcash: "m/44'/133'/0'/0/0"
 };
+function parseBip32MasterFingerprint(value) {
+  if (typeof value !== "string") return void 0;
+  const normalized = value.trim().toLowerCase();
+  return /^[0-9a-f]{8}$/.test(normalized) ? normalized : void 0;
+}
 function deriveDeviceFingerprint(value) {
   return bytesToHex(sha256(utf8ToBytes(value))).slice(0, 16);
 }
+function deriveWalletId(canonicalPublicMaterial) {
+  return bytesToHex(sha256(utf8ToBytes(`onekey-hwk-wallet-id:v1:${canonicalPublicMaterial}`)));
+}
 
 // src/events/device.ts
 var DEVICE_EVENT = "DEVICE_EVENT";
@@ -48,6 +76,10 @@ var DEVICE = {
   DISCONNECT: "device-disconnect",
   CHANGED: "device-changed",
   FEATURES: "features",
+  /** Trezor transport binding, emitted only after matching the expected firmware device_id. */
+  TREZOR_CONNECTION_VERIFIED: "device-trezor-connection-verified",
+  /** Ledger BLE address repair, emitted only after matching the stored chain fingerprint. */
+  LEDGER_CONNECTION_VERIFIED: "device-ledger-connection-verified",
   /**
    * Trezor-only. Emitted after a successful THP handshake that minted or
    * refreshed pairing credentials. The host should persist `credentials`
@@ -66,7 +98,8 @@ var SDK = {
   DEVICE_STUCK: "device-stuck",
   DEVICE_UNRESPONSIVE: "device-unresponsive",
   DEVICE_RECOVERED: "device-recovered",
-  DEVICE_INTERACTION: "device-interaction"
+  DEVICE_INTERACTION: "device-interaction",
+  INTERACTION_ENDED: "interaction-ended"
 };
 
 // src/utils/DeviceJobQueue.ts
@@ -175,6 +208,236 @@ var DeviceJobQueue = class {
   }
 };
 
+// src/utils/hardwareRuntimeId.ts
+import { bytesToHex as bytesToHex2, randomBytes } from "@noble/hashes/utils";
+var HARDWARE_RUNTIME_ID_PREFIX = "hwk:runtime:v1";
+var RANDOM_ID_BYTES = 16;
+var RANDOM_ID_PATTERN = /^[0-9a-f]{32}$/;
+var VENDORS = /* @__PURE__ */ new Set(["trezor", "ledger", "keystone"]);
+var CONNECTION_TYPES = /* @__PURE__ */ new Set(["usb", "ble", "qr"]);
+function createNonce() {
+  return bytesToHex2(randomBytes(RANDOM_ID_BYTES));
+}
+function createHardwareInteractionId(vendor) {
+  return `${HARDWARE_RUNTIME_ID_PREFIX}:interaction:${vendor}:${createNonce()}`;
+}
+function createHardwareSearchTargetId(params) {
+  return `${HARDWARE_RUNTIME_ID_PREFIX}:search-target:${params.vendor}:${params.connectionType}:${createNonce()}`;
+}
+function createHardwareConnectorSessionId(params) {
+  return `${HARDWARE_RUNTIME_ID_PREFIX}:connector-session:${params.vendor}:${params.connectionType}:${createNonce()}`;
+}
+function hasHardwareRuntimeIdPrefix(value) {
+  return typeof value === "string" && value.startsWith(`${HARDWARE_RUNTIME_ID_PREFIX}:`);
+}
+function parseHardwareRuntimeId(value) {
+  if (!hasHardwareRuntimeIdPrefix(value)) return void 0;
+  const parts = value.split(":");
+  const kind = parts[3];
+  const vendor = parts[4];
+  if (!VENDORS.has(vendor)) return void 0;
+  if (kind === "interaction" && parts.length === 6 && RANDOM_ID_PATTERN.test(parts[5])) {
+    return {
+      kind,
+      vendor,
+      nonce: parts[5]
+    };
+  }
+  const connectionType = parts[5];
+  if ((kind === "search-target" || kind === "connector-session") && parts.length === 7 && CONNECTION_TYPES.has(connectionType) && RANDOM_ID_PATTERN.test(parts[6])) {
+    return {
+      kind,
+      vendor,
+      connectionType,
+      nonce: parts[6]
+    };
+  }
+  return void 0;
+}
+function isHardwareInteractionId(value) {
+  return parseHardwareRuntimeId(value)?.kind === "interaction";
+}
+function isHardwareSearchTargetId(value) {
+  return parseHardwareRuntimeId(value)?.kind === "search-target";
+}
+
+// src/utils/InteractionRegistry.ts
+var INTERACTION_DEFAULT_TTL_MS = 6e5;
+var InteractionRegistry = class {
+  constructor(options) {
+    this._active = /* @__PURE__ */ new Map();
+    this._ended = /* @__PURE__ */ new Map();
+    this._vendor = options.vendor;
+    this._ttlMs = options.ttlMs ?? INTERACTION_DEFAULT_TTL_MS;
+    this._onEnded = options.onEnded;
+  }
+  create(params) {
+    const now = Date.now();
+    const interactionId = createHardwareInteractionId(this._vendor);
+    const interaction = {
+      interactionId,
+      searchTargetId: params.searchTargetId,
+      connectId: params.connectId,
+      device: params.device,
+      connectionKeys: Array.from(
+        new Set(
+          [params.searchTargetId, params.connectId, ...params.connectionKeys ?? []].filter(
+            Boolean
+          )
+        )
+      ),
+      createdAt: now,
+      lastActiveAt: now
+    };
+    const timer = this._createTimer(interactionId);
+    this._active.set(interactionId, { ...interaction, timer, retainCount: 0 });
+    return interaction;
+  }
+  resolve(interactionId) {
+    const active = this._active.get(interactionId);
+    if (!active) {
+      const ended = this._ended.get(interactionId);
+      if (ended) {
+        throw createHwkError({
+          code: 10113 /* InteractionEnded */,
+          message: `Hardware interaction has ended (${ended.reason})`,
+          params: { interactionId, reason: ended.reason }
+        });
+      }
+      throw createHwkError({
+        code: 10112 /* InteractionNotFound */,
+        message: "Hardware interaction was not found",
+        params: { interactionId }
+      });
+    }
+    if (active.timer) clearTimeout(active.timer);
+    active.lastActiveAt = Date.now();
+    active.timer = active.retainCount === 0 ? this._createTimer(interactionId) : void 0;
+    return active;
+  }
+  /** Keep an interaction alive while one device job is actively using it. */
+  retain(interactionId) {
+    const active = this.resolve(interactionId);
+    if (active.timer) clearTimeout(active.timer);
+    active.timer = void 0;
+    active.retainCount += 1;
+    let released = false;
+    return () => {
+      if (released) return;
+      released = true;
+      const current = this._active.get(interactionId);
+      if (!current) return;
+      current.retainCount = Math.max(0, current.retainCount - 1);
+      current.lastActiveAt = Date.now();
+      if (current.retainCount === 0) {
+        current.timer = this._createTimer(interactionId);
+      }
+    };
+  }
+  /** Return active or tombstoned binding data without refreshing its TTL. */
+  find(interactionId) {
+    return this._active.get(interactionId) ?? this._ended.get(interactionId)?.interaction;
+  }
+  findActiveByConnectionKey(connectionKey) {
+    if (!connectionKey) return void 0;
+    return [...this._active.values()].find(
+      (interaction) => interaction.connectionKeys.includes(connectionKey)
+    );
+  }
+  /** Replace the live transport binding after the same target was reconnected. */
+  rebind(interactionId, params) {
+    const active = this._active.get(interactionId);
+    if (!active) {
+      this.resolve(interactionId);
+      throw new Error("Unreachable interaction rebind");
+    }
+    if (active.timer) clearTimeout(active.timer);
+    active.connectId = params.connectId;
+    active.device = params.device;
+    active.connectionKeys = Array.from(
+      new Set([params.connectId, ...params.connectionKeys ?? []].filter(Boolean))
+    );
+    active.lastActiveAt = Date.now();
+    active.timer = active.retainCount === 0 ? this._createTimer(interactionId) : void 0;
+    return active;
+  }
+  end(interactionId, reason) {
+    const active = this._active.get(interactionId);
+    if (!active) return void 0;
+    if (active.timer) clearTimeout(active.timer);
+    this._active.delete(interactionId);
+    this._rememberEnded(active, reason);
+    this._onEnded?.(active, reason);
+    return active;
+  }
+  endByConnectionKey(connectionKey, reason, exceptInteractionId) {
+    if (!connectionKey) return;
+    for (const interaction of [...this._active.values()]) {
+      if (interaction.interactionId === exceptInteractionId) continue;
+      if (interaction.connectionKeys.includes(connectionKey)) {
+        this.end(interaction.interactionId, reason);
+      }
+    }
+  }
+  endAll(reason, exceptInteractionId) {
+    for (const interactionId of [...this._active.keys()]) {
+      if (interactionId === exceptInteractionId) continue;
+      this.end(interactionId, reason);
+    }
+  }
+  _createTimer(interactionId) {
+    const timer = setTimeout(() => {
+      this.end(interactionId, "timeout");
+    }, this._ttlMs);
+    timer.unref?.();
+    return timer;
+  }
+  _rememberEnded(interaction, reason) {
+    this._ended.set(interaction.interactionId, { reason, interaction });
+    if (this._ended.size <= 100) return;
+    const oldest = this._ended.keys().next().value;
+    if (oldest) this._ended.delete(oldest);
+  }
+};
+
+// src/utils/hardwareOperationTarget.ts
+function resolveHardwareOperationTarget(positionalTargetId, commonInteractionId, expectedVendor) {
+  const normalizedPositionalTargetId = positionalTargetId ?? void 0;
+  const normalizedCommonInteractionId = commonInteractionId || void 0;
+  const positionalInteractionId = isHardwareInteractionId(normalizedPositionalTargetId) ? normalizedPositionalTargetId : void 0;
+  const parsedPositionalTarget = parseHardwareRuntimeId(normalizedPositionalTargetId);
+  const parsedCommonInteraction = parseHardwareRuntimeId(normalizedCommonInteractionId);
+  if (normalizedPositionalTargetId && hasHardwareRuntimeIdPrefix(normalizedPositionalTargetId) && !parsedPositionalTarget) {
+    return failure(10002 /* InvalidParams */, "Invalid hardware operation target id");
+  }
+  if (parsedPositionalTarget?.kind === "connector-session") {
+    return failure(
+      10002 /* InvalidParams */,
+      "Hardware connector session id cannot be used as an operation target"
+    );
+  }
+  if (normalizedCommonInteractionId && parsedCommonInteraction?.kind !== "interaction") {
+    return failure(10002 /* InvalidParams */, "Invalid hardware interaction id");
+  }
+  if (expectedVendor && (parsedPositionalTarget && parsedPositionalTarget.vendor !== expectedVendor || parsedCommonInteraction && parsedCommonInteraction.vendor !== expectedVendor)) {
+    return failure(
+      10002 /* InvalidParams */,
+      `Hardware interaction does not belong to ${expectedVendor}`
+    );
+  }
+  if (positionalInteractionId && normalizedCommonInteractionId && positionalInteractionId !== normalizedCommonInteractionId) {
+    return failure(10002 /* InvalidParams */, "Conflicting hardware interaction ids", {
+      positionalInteractionId,
+      commonInteractionId: normalizedCommonInteractionId
+    });
+  }
+  const interactionId = normalizedCommonInteractionId ?? positionalInteractionId;
+  return success({
+    interactionId,
+    targetId: interactionId ?? normalizedPositionalTargetId
+  });
+}
+
 // src/types/connector.ts
 var EConnectorInteraction = /* @__PURE__ */ ((EConnectorInteraction2) => {
   EConnectorInteraction2["Searching"] = "searching";
@@ -190,7 +453,7 @@ function createBridgedConnector(vendor, connectionType, bridge) {
   return {
     connectionType,
     searchDevices: (options) => bridge.searchDevices({ vendor, options }),
-    connect: (deviceId) => bridge.connect({ vendor, deviceId }),
+    connect: (deviceId, options) => bridge.connect({ vendor, deviceId, ...options ? { options } : {} }),
     disconnect: (sessionId) => bridge.disconnect({ vendor, sessionId }),
     call: (sessionId, method, callParams) => bridge.call({ vendor, sessionId, method, callParams }),
     cancel: (sessionId) => bridge.cancel({ vendor, sessionId }),
@@ -331,10 +594,14 @@ function createCombinedConnector(connectors) {
     });
   }
   const searchDevices = async (options = {}) => {
+    const selectedConnectors = connectors.map((child, index) => ({ child, index })).filter(
+      ({ child }) => !options.transportType || child.connectionType === options.transportType
+    );
+    if (!selectedConnectors.length) return [];
     const perConnector = [];
-    await new Promise((resolve) => {
+    await new Promise((resolve, reject) => {
       let finished = false;
-      let remaining = connectors.length;
+      let remaining = selectedConnectors.length;
       let settleTimer;
       const finish = () => {
         if (finished) return;
@@ -342,19 +609,20 @@ function createCombinedConnector(connectors) {
         if (settleTimer) clearTimeout(settleTimer);
         resolve();
       };
-      connectors.forEach((child, index) => {
-        void child.searchDevices().then(
+      selectedConnectors.forEach(({ child, index }) => {
+        void child.searchDevices(options.purpose ? { purpose: options.purpose } : void 0).then(
           (devices) => devices.map((device) => ({
             ...device,
             connectionType: device.connectionType ?? child.connectionType
           }))
-        ).catch(
-          () => (
-            // A transport that can't scan (powered off, unauthorized, absent)
-            // must not fail the whole fused search.
-            []
-          )
-        ).then((devices) => {
+        ).catch((error) => {
+          if (options.transportType) {
+            finished = true;
+            if (settleTimer) clearTimeout(settleTimer);
+            reject(error);
+          }
+          return [];
+        }).then((devices) => {
           remaining -= 1;
           if (!finished) {
             perConnector.push({ index, devices });
@@ -371,7 +639,12 @@ function createCombinedConnector(connectors) {
       });
     });
     perConnector.sort((a, b) => a.index - b.index);
-    deviceOwner.clear();
+    if (!options.transportType) deviceOwner.clear();
+    else {
+      for (const [id, owner] of deviceOwner) {
+        if (owner.connectionType === options.transportType) deviceOwner.delete(id);
+      }
+    }
     const merged = [];
     perConnector.forEach(({ index, devices }) => {
       for (const device of devices) {
@@ -381,11 +654,11 @@ function createCombinedConnector(connectors) {
     });
     return merged.sort((a, b) => rank(a) - rank(b));
   };
-  const resolveOwner = async (deviceId) => {
-    if (deviceId && deviceOwner.has(deviceId)) {
+  const resolveOwner = async (deviceId, transportType) => {
+    if (deviceId && deviceOwner.has(deviceId) && (!transportType || deviceOwner.get(deviceId)?.connectionType === transportType)) {
       return { owner: deviceOwner.get(deviceId), deviceId };
     }
-    const devices = await searchDevices({ waitForAll: Boolean(deviceId) });
+    const devices = await searchDevices({ waitForAll: Boolean(deviceId), transportType });
     if (deviceId) {
       const owner = deviceOwner.get(deviceId);
       if (!owner)
@@ -396,13 +669,14 @@ function createCombinedConnector(connectors) {
     if (!first) throw combinedDeviceNotFoundError("Combined connector: no devices found");
     return { owner: deviceOwner.get(first.connectId), deviceId: first.connectId };
   };
-  const connectByExplicitId = async (deviceId) => {
+  const connectByExplicitId = async (deviceId, transportType) => {
     const cachedOwner = deviceOwner.get(deviceId);
-    if (cachedOwner) {
+    if (cachedOwner && (!transportType || cachedOwner.connectionType === transportType)) {
       return { session: await cachedOwner.connect(deviceId), owner: cachedOwner };
     }
     let lastError;
     for (const child of connectors) {
+      if (transportType && child.connectionType !== transportType) continue;
       try {
         const session = await child.connect(deviceId);
         deviceOwner.set(deviceId, child);
@@ -424,14 +698,15 @@ function createCombinedConnector(connectors) {
     // Nominal value only — the per-device `connectionType` is authoritative
     // for a fused connector.
     connectionType: connectors[0].connectionType,
-    searchDevices: (options) => searchDevices({ waitForAll: options?.waitForAll }),
-    connect: async (deviceId) => {
+    availableTransports: [...new Set(connectors.map((child) => child.connectionType))],
+    searchDevices: (options) => searchDevices(options),
+    connect: async (deviceId, options) => {
       let owner;
       let session;
       if (deviceId) {
-        ({ session, owner } = await connectByExplicitId(deviceId));
+        ({ session, owner } = await connectByExplicitId(deviceId, options?.transportType));
       } else {
-        const resolved = await resolveOwner();
+        const resolved = await resolveOwner(void 0, options?.transportType);
         owner = resolved.owner;
         session = await owner.connect(resolved.deviceId);
       }
@@ -537,6 +812,130 @@ var TypedEventEmitter = class {
   }
 };
 
+// src/utils/requestSaveDeviceBinding.ts
+async function requestSaveDeviceBinding(emitter, registry, binding, signal) {
+  const type = UI_REQUEST.REQUEST_SAVE_DEVICE_BINDING;
+  if (!emitter.listenerCount(type)) return false;
+  if (signal?.aborted) throw signal.reason;
+  const requestId = registry.createRequestId();
+  const pending = registry.wait(type, { requestId });
+  void pending.catch(() => void 0);
+  const cancel = () => registry.cancel(type, requestId);
+  signal?.addEventListener("abort", cancel, { once: true });
+  try {
+    emitter.emit(type, { type, payload: { ...binding, requestId } });
+    const response = await pending;
+    if (signal?.aborted) throw signal.reason;
+    if (response?.saved !== true) {
+      throw createHwkError({
+        code: 1e4 /* UnknownError */,
+        message: "Verified device binding could not be saved"
+      });
+    }
+    emitter.emit(UI_REQUEST.DEVICE_BINDING_STATUS, {
+      type: UI_REQUEST.DEVICE_BINDING_STATUS,
+      payload: { selectionRequestId: binding.selectionRequestId, status: "saved" }
+    });
+    return true;
+  } catch (error) {
+    emitter.emit(UI_REQUEST.DEVICE_BINDING_STATUS, {
+      type: UI_REQUEST.DEVICE_BINDING_STATUS,
+      payload: {
+        selectionRequestId: binding.selectionRequestId,
+        status: signal?.aborted ? "cancelled" : "failed"
+      }
+    });
+    throw error;
+  } finally {
+    signal?.removeEventListener("abort", cancel);
+    registry.cancel(type, requestId);
+  }
+}
+
+// src/utils/requestBleDeviceSelection.ts
+async function requestBleDeviceSelection({
+  emitter,
+  registry,
+  request,
+  scan,
+  signal,
+  pollIntervalMs = 1500
+}) {
+  const type = UI_REQUEST.REQUEST_SELECT_DEVICE;
+  if (signal.aborted) throw signal.reason;
+  if (!emitter.listenerCount(type)) {
+    throw createHwkError({
+      code: 10100 /* DeviceNotFound */,
+      message: "Select a Bluetooth device before continuing"
+    });
+  }
+  const requestId = registry.createRequestId();
+  let { devices } = request;
+  let stopped = false;
+  let timer;
+  let wake;
+  const stop = () => {
+    stopped = true;
+    if (timer !== void 0) clearTimeout(timer);
+    wake?.();
+  };
+  const waitForNextScan = () => new Promise((resolve) => {
+    wake = resolve;
+    timer = setTimeout(resolve, pollIntervalMs);
+    if (stopped) resolve();
+  });
+  const cancel = () => registry.cancel(type, requestId);
+  const reply = registry.wait(type, { requestId }).finally(stop);
+  void reply.catch(() => void 0);
+  const publish = () => emitter.emit(type, {
+    type,
+    payload: { ...request, devices, requestId, scanning: true }
+  });
+  signal.addEventListener("abort", cancel, { once: true });
+  let polling;
+  try {
+    publish();
+    polling = (async () => {
+      await Promise.resolve();
+      while (!stopped) {
+        const snapshot = await scan();
+        if (stopped || signal.aborted) return;
+        devices = snapshot;
+        publish();
+        if (stopped) return;
+        await waitForNextScan();
+      }
+    })();
+    const selected = await Promise.race([reply, polling.then(() => reply)]);
+    stop();
+    await polling;
+    if (signal.aborted) throw signal.reason;
+    const device = devices.find((candidate) => candidate.connectId === selected.sdkConnectId);
+    if (!device) {
+      throw createHwkError({
+        code: 10100 /* DeviceNotFound */,
+        message: "Selected Bluetooth device is no longer available"
+      });
+    }
+    emitter.emit(UI_REQUEST.DEVICE_BINDING_STATUS, {
+      type: UI_REQUEST.DEVICE_BINDING_STATUS,
+      payload: { selectionRequestId: requestId, status: "verifying" }
+    });
+    return { device, requestId };
+  } catch (error) {
+    emitter.emit(UI_REQUEST.DEVICE_BINDING_STATUS, {
+      type: UI_REQUEST.DEVICE_BINDING_STATUS,
+      payload: { selectionRequestId: requestId, status: signal.aborted ? "cancelled" : "failed" }
+    });
+    throw error;
+  } finally {
+    stop();
+    signal.removeEventListener("abort", cancel);
+    registry.cancel(type, requestId);
+    await polling?.catch(() => void 0);
+  }
+}
+
 // src/utils/semver.ts
 function compareSemver(a, b) {
   const pa = a.split(".").map(Number);
@@ -564,14 +963,96 @@ function padHex64(hex) {
 function hexToBytes(hex) {
   return nobleHexToBytes(stripHex(hex));
 }
-function bytesToHex2(bytes) {
+function bytesToHex3(bytes) {
   return nobleBytesToHex(bytes);
 }
 
+// src/utils/solanaOffchainMessage.ts
+var SOLANA_OFFCHAIN_SIGNING_DOMAIN = Uint8Array.of(
+  255,
+  ...Array.from("solana offchain", (character) => character.charCodeAt(0))
+);
+var SOLANA_PUBLIC_KEY_LENGTH = 32;
+var MAX_SOLANA_OFFCHAIN_SIGNERS = 255;
+function compareBytes(a, b) {
+  for (let index = 0; index < a.length; index += 1) {
+    const difference = (a[index] ?? 0) - (b[index] ?? 0);
+    if (difference !== 0) return difference;
+  }
+  return a.length - b.length;
+}
+function bytesEqual(a, b) {
+  return a.length === b.length && a.every((value, index) => value === b[index]);
+}
+function decodeUtf8Strict(bytes) {
+  let encoded = "";
+  for (const value of bytes) {
+    encoded += `%${value.toString(16).padStart(2, "0")}`;
+  }
+  return decodeURIComponent(encoded);
+}
+function prepareSolanaOffchainMessageV1({
+  message,
+  requiredSigners
+}) {
+  if (message.length === 0) {
+    throw new Error("Solana off-chain message cannot be empty");
+  }
+  if (requiredSigners.length === 0 || requiredSigners.length > MAX_SOLANA_OFFCHAIN_SIGNERS) {
+    throw new Error("Solana off-chain message requires between 1 and 255 signers");
+  }
+  let messageText;
+  try {
+    messageText = decodeUtf8Strict(message);
+  } catch {
+    throw new Error("Solana off-chain message must contain valid UTF-8");
+  }
+  const signerBytes = requiredSigners.map((signer, index) => {
+    let bytes;
+    try {
+      bytes = hexToBytes(signer);
+    } catch {
+      throw new Error(`Solana off-chain signer ${index} must be a hex public key`);
+    }
+    if (bytes.length !== SOLANA_PUBLIC_KEY_LENGTH) {
+      throw new Error(`Solana off-chain signer ${index} must be 32 bytes`);
+    }
+    return bytes;
+  });
+  signerBytes.sort(compareBytes);
+  for (let index = 1; index < signerBytes.length; index += 1) {
+    if (bytesEqual(signerBytes[index - 1], signerBytes[index])) {
+      throw new Error("Solana off-chain signers must be unique");
+    }
+  }
+  const serializedMessage = new Uint8Array(
+    SOLANA_OFFCHAIN_SIGNING_DOMAIN.length + 2 + signerBytes.length * SOLANA_PUBLIC_KEY_LENGTH + message.length
+  );
+  let offset = 0;
+  serializedMessage.set(SOLANA_OFFCHAIN_SIGNING_DOMAIN, offset);
+  offset += SOLANA_OFFCHAIN_SIGNING_DOMAIN.length;
+  serializedMessage[offset] = 1;
+  offset += 1;
+  serializedMessage[offset] = signerBytes.length;
+  offset += 1;
+  for (const signer of signerBytes) {
+    serializedMessage.set(signer, offset);
+    offset += SOLANA_PUBLIC_KEY_LENGTH;
+  }
+  serializedMessage.set(message, offset);
+  return {
+    messageText,
+    requiredSigners: signerBytes.map(bytesToHex3),
+    serializedMessage
+  };
+}
+
 // src/utils/deviceIdentity.ts
 var ONEKEY_BLE_SERVICE_UUID = "00000001-0000-1000-8000-00805f9b34fb";
 var TREZOR_BLE_SERVICE_UUID = "8c000001-a59b-4d58-a9ad-073df69fa1b1";
 var LEDGER_USB_VENDOR_ID = 11415;
+var KEYSTONE_USB_VENDOR_ID = 4617;
+var KEYSTONE_USB_PRODUCT_ID = 12289;
 var lower = (value) => value?.trim().toLowerCase() ?? "";
 var hasServiceUuid = (input, uuid) => {
   const expected = uuid.toLowerCase();
@@ -594,6 +1075,11 @@ function detectHardwareVendorFromDescriptor(input) {
   if (typeof input.vendor === "number" && input.vendor === LEDGER_USB_VENDOR_ID || input.vendorId === LEDGER_USB_VENDOR_ID || manufacturerName.includes("ledger")) {
     return "ledger";
   }
+  const usbVendorId = typeof input.vendor === "number" ? input.vendor : input.vendorId;
+  const usbProductId = typeof input.product === "number" ? input.product : input.productId;
+  if (usbVendorId === KEYSTONE_USB_VENDOR_ID && usbProductId === KEYSTONE_USB_PRODUCT_ID || manufacturerName.includes("keystone")) {
+    return "keystone";
+  }
   return void 0;
 }
 function isKnownNonTargetHardwareVendor(input, targetVendor) {
@@ -617,28 +1103,62 @@ async function batchCall(params, callFn, onProgress) {
 
 // src/utils/methodCatalog.ts
 var HARDWARE_METHOD_CATALOG = {
-  evmGetAddress: { chain: "evm", allNetwork: true },
-  evmSignTransaction: { chain: "evm", allNetwork: false },
-  evmSignMessage: { chain: "evm", allNetwork: false },
-  evmSignTypedData: { chain: "evm", allNetwork: false },
-  btcGetAddress: { chain: "btc", allNetwork: true },
-  btcGetPublicKey: { chain: "btc", allNetwork: true },
-  btcSignTransaction: { chain: "btc", allNetwork: false },
-  btcSignPsbt: { chain: "btc", allNetwork: false },
-  btcSignMessage: { chain: "btc", allNetwork: false },
-  btcGetMasterFingerprint: { chain: "btc", allNetwork: false },
-  solGetAddress: { chain: "sol", allNetwork: true },
-  solSignTransaction: { chain: "sol", allNetwork: false },
-  solSignMessage: { chain: "sol", allNetwork: false },
-  tronGetAddress: { chain: "tron", allNetwork: true },
-  tronSignTransaction: { chain: "tron", allNetwork: false },
-  tronSignMessage: { chain: "tron", allNetwork: false }
+  evmGetAddress: { chain: "evm", allNetwork: true, replayAfterTransportFailure: "safe" },
+  evmSignTransaction: {
+    chain: "evm",
+    allNetwork: false,
+    replayAfterTransportFailure: "unsafe"
+  },
+  evmSignMessage: { chain: "evm", allNetwork: false, replayAfterTransportFailure: "unsafe" },
+  evmSignTypedData: { chain: "evm", allNetwork: false, replayAfterTransportFailure: "unsafe" },
+  btcGetAddress: { chain: "btc", allNetwork: true, replayAfterTransportFailure: "safe" },
+  btcGetPublicKey: { chain: "btc", allNetwork: true, replayAfterTransportFailure: "safe" },
+  btcSignTransaction: {
+    chain: "btc",
+    allNetwork: false,
+    replayAfterTransportFailure: "unsafe"
+  },
+  btcSignPsbt: { chain: "btc", allNetwork: false, replayAfterTransportFailure: "unsafe" },
+  btcSignMessage: { chain: "btc", allNetwork: false, replayAfterTransportFailure: "unsafe" },
+  btcGetMasterFingerprint: {
+    chain: "btc",
+    allNetwork: false,
+    replayAfterTransportFailure: "safe"
+  },
+  solGetAddress: { chain: "sol", allNetwork: true, replayAfterTransportFailure: "safe" },
+  solSignTransaction: {
+    chain: "sol",
+    allNetwork: false,
+    replayAfterTransportFailure: "unsafe"
+  },
+  solSignMessage: { chain: "sol", allNetwork: false, replayAfterTransportFailure: "unsafe" },
+  tronGetAddress: { chain: "tron", allNetwork: true, replayAfterTransportFailure: "safe" },
+  tronSignTransaction: {
+    chain: "tron",
+    allNetwork: false,
+    replayAfterTransportFailure: "unsafe"
+  },
+  tronSignMessage: { chain: "tron", allNetwork: false, replayAfterTransportFailure: "unsafe" },
+  zcashGetFullViewingKey: {
+    chain: "zcash",
+    allNetwork: false,
+    replayAfterTransportFailure: "safe"
+  },
+  zcashGetShieldedAddress: {
+    chain: "zcash",
+    allNetwork: false,
+    replayAfterTransportFailure: "safe"
+  }
 };
 var ALL_NETWORK_METHOD_NAMES = Object.entries(HARDWARE_METHOD_CATALOG).filter(([, metadata]) => metadata.allNetwork).map(([method]) => method);
 var ALL_NETWORK_METHOD_SET = new Set(ALL_NETWORK_METHOD_NAMES);
 function getHardwareMethodMetadata(method) {
   return HARDWARE_METHOD_CATALOG[method];
 }
+var SAFE_NON_CHAIN_METHODS = /* @__PURE__ */ new Set(["getFeatures", "authenticateDevice"]);
+function canReplayHardwareMethodAfterTransportFailure(method) {
+  return getHardwareMethodMetadata(method)?.replayAfterTransportFailure === "safe" || SAFE_NON_CHAIN_METHODS.has(method);
+}
 function isAllNetworkMethodName(method) {
   return ALL_NETWORK_METHOD_SET.has(method);
 }
@@ -731,7 +1251,10 @@ export {
   DeviceJobQueue,
   EConnectorInteraction,
   HARDWARE_METHOD_CATALOG,
+  HARDWARE_RUNTIME_ID_PREFIX,
   HardwareErrorCode,
+  INTERACTION_DEFAULT_TTL_MS,
+  InteractionRegistry,
   ORPHAN_ELIGIBLE_ERROR_CODES,
   SDK,
   TypedEventEmitter,
@@ -745,23 +1268,42 @@ export {
   UiRequestRegistry,
   batchCall,
   buildUnsupportedMethodResponse,
-  bytesToHex2 as bytesToHex,
+  bytesToHex3 as bytesToHex,
+  canReplayHardwareMethodAfterTransportFailure,
   compareSemver,
   createBridgedConnector,
   createCombinedConnector,
+  createHardwareConnectorSessionId,
+  createHardwareInteractionId,
+  createHardwareSearchTargetId,
   createHwkError,
+  defaultOriginForCode,
+  defaultRecoveryForCode,
   deriveDeviceFingerprint,
+  deriveWalletId,
   detectHardwareVendorFromDescriptor,
   enrichErrorMessage,
   ensure0x,
   failure,
   getAllNetworkMethodChain,
   getHardwareMethodMetadata,
+  hasHardwareRuntimeIdPrefix,
   hexToBytes,
   isAllNetworkMethodName,
+  isHardwareInteractionId,
+  isHardwareSearchTargetId,
+  isHwkRecoveryHint,
   isKnownNonTargetHardwareVendor,
+  operationMayHaveCompletedParams,
   padHex64,
+  parseBip32MasterFingerprint,
+  parseHardwareRuntimeId,
+  prepareSolanaOffchainMessageV1,
   rehydrateConnectorError,
+  requestBleDeviceSelection,
+  requestSaveDeviceBinding,
+  resolveHardwareOperationTarget,
+  resolveSearchTargetReusePolicy,
   runAllNetworkGetAddress,
   serializeConnectorError,
   stripHex,