@onekeyfe/hwk-adapter-core 1.2.3-alpha.1 → 1.2.3-alpha.2

package/dist/{chunk-72KOSYTH.mjs → chunk-E3UPXUN5.mjs}

@@ -18,8 +18,9 @@ var HardwareErrorCode = /* @__PURE__ */ ((HardwareErrorCode2) => {
   HardwareErrorCode2[HardwareErrorCode2["DeviceOneDeviceOnly"] = 10109] = "DeviceOneDeviceOnly";
   HardwareErrorCode2[HardwareErrorCode2["DevicePathForbidden"] = 10110] = "DevicePathForbidden";
   HardwareErrorCode2[HardwareErrorCode2["DeviceBusyInternal"] = 10111] = "DeviceBusyInternal";
-  HardwareErrorCode2[HardwareErrorCode2["InteractionNotFound"] = 10112] = "InteractionNotFound";
-  HardwareErrorCode2[HardwareErrorCode2["InteractionEnded"] = 10113] = "InteractionEnded";
+  HardwareErrorCode2[HardwareErrorCode2["OperationNotFound"] = 10112] = "OperationNotFound";
+  HardwareErrorCode2[HardwareErrorCode2["OperationEnded"] = 10113] = "OperationEnded";
+  HardwareErrorCode2[HardwareErrorCode2["DeviceSearchMismatch"] = 10114] = "DeviceSearchMismatch";
   HardwareErrorCode2[HardwareErrorCode2["FirmwareTooOld"] = 10200] = "FirmwareTooOld";
   HardwareErrorCode2[HardwareErrorCode2["FirmwareUpdateRequired"] = 10201] = "FirmwareUpdateRequired";
   HardwareErrorCode2[HardwareErrorCode2["TransportError"] = 10300] = "TransportError";
@@ -61,9 +62,10 @@ var ORPHAN_ELIGIBLE_ERROR_CODES = [
   10001 /* UserRejected */,
   10100 /* DeviceNotFound */,
   10101 /* DeviceDisconnected */,
-  10112 /* InteractionNotFound */,
-  10113 /* InteractionEnded */,
+  10112 /* OperationNotFound */,
+  10113 /* OperationEnded */,
   10106 /* DeviceMismatch */,
+  10114 /* DeviceSearchMismatch */,
   10107 /* DeviceAppStuck */,
   10109 /* DeviceOneDeviceOnly */,
   10300 /* TransportError */,
@@ -77,8 +79,8 @@ var ORPHAN_ELIGIBLE_ERROR_CODES = [
   10405 /* PassphraseAlwaysOnDevice */
 ];
 var RECOVERY_SCOPES = /* @__PURE__ */ new Set([
+  "call",
   "operation",
-  "interaction",
   "search-target",
   "transport",
   "not-recoverable",
@@ -89,8 +91,8 @@ function isHwkRecoveryHint(value) {
   const { scope } = value;
   return typeof scope === "string" && RECOVERY_SCOPES.has(scope);
 }
+var RECOVERY_CALL = Object.freeze({ scope: "call" });
 var RECOVERY_OPERATION = Object.freeze({ scope: "operation" });
-var RECOVERY_INTERACTION = Object.freeze({ scope: "interaction" });
 var RECOVERY_SEARCH_TARGET = Object.freeze({ scope: "search-target" });
 var RECOVERY_TRANSPORT = Object.freeze({ scope: "transport" });
 var RECOVERY_NOT_RECOVERABLE = Object.freeze({
@@ -129,19 +131,20 @@ function defaultRecoveryForCode(code) {
     case 11202 /* TronSignByHashRequired */:
     case 11300 /* BtcWalletPolicyHmacMismatch */:
     case 11301 /* BtcUnexpectedState */:
-      return RECOVERY_OPERATION;
+      return RECOVERY_CALL;
     case 10100 /* DeviceNotFound */:
     case 10101 /* DeviceDisconnected */:
-    case 10112 /* InteractionNotFound */:
-    case 10113 /* InteractionEnded */:
+    case 10112 /* OperationNotFound */:
+    case 10113 /* OperationEnded */:
     case 10300 /* TransportError */:
     case 10304 /* BlePairingTimeout */:
     case 10306 /* ThpPairingFailed */:
     case 10308 /* ThpPairingRequired */:
     case 10309 /* BleConnectFailed */:
     case 10310 /* BlePairingCancelled */:
-      return RECOVERY_INTERACTION;
+      return RECOVERY_OPERATION;
     case 10106 /* DeviceMismatch */:
+    case 10114 /* DeviceSearchMismatch */:
     case 10109 /* DeviceOneDeviceOnly */:
     case 10307 /* BleBondInvalid */:
       return RECOVERY_SEARCH_TARGET;
@@ -169,6 +172,7 @@ function defaultOriginForCode(code) {
     case 10104 /* DeviceNotInitialized */:
     case 10105 /* DeviceInBootloader */:
     case 10106 /* DeviceMismatch */:
+    case 10114 /* DeviceSearchMismatch */:
     case 10107 /* DeviceAppStuck */:
     case 10110 /* DevicePathForbidden */:
     case 10111 /* DeviceBusyInternal */:
@@ -237,4 +241,4 @@ export {
   operationMayHaveCompletedParams,
   createHwkError
 };
-//# sourceMappingURL=chunk-72KOSYTH.mjs.map
+//# sourceMappingURL=chunk-E3UPXUN5.mjs.map

package/dist/chunk-E3UPXUN5.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/types/errors.ts"],"sourcesContent":["/**\n * HWK HardwareErrorCode — independent namespace from the legacy\n * `@onekeyfe/shared` HardwareErrorCode (which occupies 0-902).\n *\n * All HWK codes are 5-digit (>= 10000) so the two tables never collide\n * even if either side grows. Each sub-category gets a 100-slot block.\n *\n *   10000-10099  Generic / cross-cutting primitives\n *   10100-10199  Device state\n *   10200-10299  Firmware\n *   10300-10399  Transport + OS-level permission\n *   10400-10499  PIN / Passphrase\n *   10500-10599  App lifecycle (wrong app, not open, too old)\n *   10600-10699  Payload / framing limits (adapter-level)\n *   10700-10999  RESERVED — future adapter-level categories\n *\n *   11000-11099  EVM APDU (reactive mapping)\n *   11100-11199  Solana APDU\n *   11200-11299  Tron APDU\n *   11300-11399  BTC APDU\n *   11400-11999  RESERVED — future chain APDU blocks (100 per chain)\n *\n *   12000-99999  RESERVED — future major categories\n */\nexport enum HardwareErrorCode {\n  // --- 10000s Generic ---\n  UnknownError = 10000,\n  UserRejected = 10001,\n  InvalidParams = 10002,\n  OperationTimeout = 10003,\n  MethodNotSupported = 10004,\n  /** User dismissed in-app cancel UI. Distinct from UserRejected (on-device). */\n  UserAborted = 10005,\n\n  // --- 10100s Device state ---\n  DeviceNotFound = 10100,\n  DeviceDisconnected = 10101,\n  DeviceBusy = 10102,\n  DeviceLocked = 10103,\n  DeviceNotInitialized = 10104,\n  DeviceInBootloader = 10105,\n  DeviceMismatch = 10106,\n  /** Chain app wedged (e.g. Ledger BTC 0x6901). User must exit app on device. */\n  DeviceAppStuck = 10107,\n  /** Vendor (Ledger / Trezor) doesn't support the chain at all. */\n  ChainNotSupported = 10108,\n  /** Current operation supports only one connected device. */\n  DeviceOneDeviceOnly = 10109,\n  /**\n   * The device rejected the requested derivation path (Trezor Failure_DataError\n   * \"Forbidden key path\") — the path is non-standard or its index is outside the\n   * range the device's safety checks allow. Distinct from ChainNotSupported\n   * (whole chain) and MethodNotSupported (the operation/method itself).\n   */\n  DevicePathForbidden = 10110,\n  /** Busy with our own in-flight request (queue guard / firmware Failure_Busy), not another app — wait and retry, don't close other apps. */\n  DeviceBusyInternal = 10111,\n  /** The supplied runtime-only operation id is unknown to this adapter instance. */\n  OperationNotFound = 10112,\n  /** The supplied operation ended and can never be resumed. */\n  OperationEnded = 10113,\n  /**\n   * Discovery found devices but none of them is the wallet being looked for.\n   * Milder than DeviceMismatch: nothing about the known wallet has changed, the\n   * user simply has the wrong unit connected. DeviceMismatch stays reserved for\n   * reaching the expected device and finding a different identity on it, which\n   * can mean it was wiped, reseeded, or swapped.\n   */\n  DeviceSearchMismatch = 10114,\n\n  // --- 10200s Firmware ---\n  FirmwareTooOld = 10200,\n  FirmwareUpdateRequired = 10201,\n\n  // --- 10300s Transport + permission ---\n  TransportError = 10300,\n  BridgeNotFound = 10301,\n  TransportNotAvailable = 10302,\n  /**\n   * OS-level permission (Bluetooth / USB / etc.) — denied, blocked,\n   * unavailable, or dismissed. Consumers surface a single \"please grant\n   * permission\" toast and let the user retry manually.\n   */\n  DevicePermissionDenied = 10303,\n  /**\n   * BLE SMP pairing did not complete within the GATT bonding window.\n   * GATT connected but the device didn't acknowledge SMP — typically\n   * because the user didn't confirm the passkey on the device, or the\n   * device went out of range mid-pairing. Distinct from OperationTimeout\n   * (generic) and from DeviceLocked (Secure Element actually locked).\n   */\n  BlePairingTimeout = 10304,\n  /** Remote network failure reaching a vendor's servers (HTTP/WS). Distinct from TransportError (local USB/BLE link). */\n  NetworkError = 10305,\n  /**\n   * Host-managed pairing handshake failed (Trezor THP). The device rejected the\n   * pairing exchange — e.g. CodeEntry: the user mistyped the code shown on the\n   * device, so the CPace tag didn't match (\"Unexpected Code Entry Tag\").\n   * Recoverable: the user re-pairs and re-enters the code. Distinct from\n   * BlePairingTimeout (BLE SMP bonding window) and UserRejected (on-device\n   * reject button).\n   */\n  ThpPairingFailed = 10306,\n  /**\n   * The OS-level BLE bond is stale/invalid, so the device rejected link\n   * encryption: Android GATT_INSUF_AUTHENTICATION (status 5) or iOS \"Peer\n   * removed pairing information\". Happens after the device is wiped/re-flashed\n   * or unpaired elsewhere while the host still holds an old bond. The SDK cannot\n   * remove an OS bond — the user must forget the device in system Bluetooth\n   * settings and re-pair. Distinct from BlePairingTimeout (SMP window) and\n   * ThpPairingFailed (THP code mismatch).\n   */\n  BleBondInvalid = 10307,\n  /**\n   * A stored THP pairing credential was rejected by the device during the\n   * handshake (device returned completion `state=0`), so the autoconnect session\n   * could not be established. The SDK discards the stale credential; recovery is\n   * a fresh pairing. Distinct from ThpPairingFailed (user mistyped the code\n   * during an *active* pairing) and BleBondInvalid (OS-level BLE bond).\n   */\n  ThpPairingRequired = 10308,\n  /**\n   * Generic BLE connect failure where the OS dropped the specific reason. On\n   * macOS the noble native binding hardcodes \"connection failed\" (and a connect\n   * timeout) and discards the CoreBluetooth NSError, so the SDK cannot tell a\n   * stale bond from an out-of-range / unresponsive device. Surfaced as a\n   * generic \"couldn't connect — check the device, re-pair if paired before\".\n   * Distinct from BleBondInvalid (a *known* stale-bond signal, iOS/Android only)\n   * and BlePairingTimeout (the SMP bonding window).\n   */\n  BleConnectFailed = 10309,\n  /**\n   * The user cancelled BLE pairing from the app while the connect was still\n   * waiting on the OS pairing window. Not a failure to report — the flow ends\n   * because they asked it to. Distinct from UserAborted (generic in-app cancel)\n   * so the pairing UI can close quietly instead of surfacing a connect error,\n   * and from BlePairingTimeout (the SMP window elapsed on its own).\n   */\n  BlePairingCancelled = 10310,\n\n  // --- 10400s PIN / Passphrase ---\n  PinInvalid = 10400,\n  PinCancelled = 10401,\n  PassphraseRejected = 10402,\n  /**\n   * The passphrase entered produced a different wallet (`passphraseState`) than\n   * the one the caller asked to operate on. Trezor-only: the host pins a wallet\n   * by its derived state and the SDK refuses to sign with a mismatched\n   * passphrase session. Surfaced by TrezorAdapter.getPassphraseState.\n   */\n  PassphraseStateMismatch = 10403,\n  /**\n   * The two new-PIN entries did not match during set/change PIN. Only host-input\n   * models (Trezor Model One matrix) surface this; on-device-input models show\n   * the mismatch on the device and never return it.\n   */\n  PinMismatch = 10404,\n  /** Standard wallet is unavailable while Trezor enforces on-device passphrase entry. */\n  PassphraseAlwaysOnDevice = 10405,\n\n  // --- 10500s App lifecycle ---\n  /** Chain app NOT INSTALLED on device. User must install via Ledger Live. */\n  AppNotInstalled = 10500,\n  WrongApp = 10501,\n  /** 0x911c Command code not supported — app predates current SDK. */\n  AppTooOld = 10502,\n  /** Not enough free storage for install/update; user must uninstall apps first. */\n  DeviceOutOfMemory = 10503,\n\n  // --- 10600s Payload / framing limits ---\n  /**\n   * The call payload exceeds a transport's fixed framing capacity (e.g.\n   * Keystone USB's ~12.5KB per-request cap — 200 frames of 64 bytes). Distinct\n   * from a generic TransportError: the request never reached the device, and\n   * retrying with the same payload over the same transport will fail the same\n   * way. Callers should route the call over a different channel (e.g. Keystone\n   * QR) or reduce the payload (e.g. a smaller PSBT) instead of retrying as-is.\n   */\n  PayloadTooLarge = 10600,\n\n  // --- 11000s EVM (Ledger Ethereum App) APDU-specific ---\n  /** 0x6a80 Invalid data — observed on blindSignTransactionFallback when the\n   *  user has not enabled Blind signing on the device. */\n  EvmBlindSigningRequired = 11000,\n  /** 0x6984 Plugin not installed */\n  EvmClearSignPluginMissing = 11001,\n  /** 0x6a84 Insufficient memory (typical on Nano S with large calldata) */\n  EvmDataTooLarge = 11002,\n  /** 0x6501 TransactionType not supported (app too old for EIP-1559 / blob / 7702) */\n  EvmTxTypeNotSupported = 11003,\n\n  // --- 11100s Solana ---\n  /** 0x6808 Blind signing disabled for this instruction. */\n  SolanaBlindSigningRequired = 11100,\n\n  // --- 11200s Tron ---\n  /** 0x6a8d Custom Contracts setting disabled (blocks TRC-20 etc.). */\n  TronCustomContractRequired = 11200,\n  /** 0x6a8b Transactions Data setting disabled. */\n  TronDataSigningRequired = 11201,\n  /** 0x6a8c Sign by Hash setting disabled (hash-signing fallback). */\n  TronSignByHashRequired = 11202,\n\n  // --- 11300s BTC ---\n  /** 0xb008 Wallet policy HMAC mismatch or not registered. */\n  BtcWalletPolicyHmacMismatch = 11300,\n  /** 0xb007 Aborted due to unexpected state (malformed PSBT / missing UTXO). */\n  BtcUnexpectedState = 11301,\n}\n\n/**\n * Device-level failures the SDK cannot self-recover from — affect the entire\n * batch (vs per-chain failures like AppNotInstalled / WrongApp which soft-\n * skip in onboarding). Combined with `accounts.length === 0`, signals\n * genuine orphan. Also reused as the batch-abort whitelist for HWK.\n * Single source of truth.\n *\n * UserRejected (device-side reject) is included: pressing reject is an\n * explicit \"I don't consent\" — continuing the batch to ask again on the\n * next chain is harassment, not helpful.\n */\nexport const ORPHAN_ELIGIBLE_ERROR_CODES: number[] = [\n  HardwareErrorCode.UserAborted,\n  HardwareErrorCode.UserRejected,\n  HardwareErrorCode.DeviceNotFound,\n  HardwareErrorCode.DeviceDisconnected,\n  HardwareErrorCode.OperationNotFound,\n  HardwareErrorCode.OperationEnded,\n  HardwareErrorCode.DeviceMismatch,\n  HardwareErrorCode.DeviceSearchMismatch,\n  HardwareErrorCode.DeviceAppStuck,\n  HardwareErrorCode.DeviceOneDeviceOnly,\n  HardwareErrorCode.TransportError,\n  HardwareErrorCode.DevicePermissionDenied,\n  HardwareErrorCode.BlePairingTimeout,\n  HardwareErrorCode.ThpPairingFailed,\n  HardwareErrorCode.ThpPairingRequired,\n  HardwareErrorCode.BleBondInvalid,\n  HardwareErrorCode.BleConnectFailed,\n  HardwareErrorCode.BlePairingCancelled,\n  HardwareErrorCode.PassphraseAlwaysOnDevice,\n];\n\n// ---------------------------------------------------------------------------\n// Standard throwable for HWK adapters\n// ---------------------------------------------------------------------------\n\n/**\n * Where a failure came from. The distinction the numeric code ranges cannot\n * make reliably (UserRejected=10001 sits in the general range but is the\n * device speaking; DevicePermissionDenied=10303 sits in the transport range\n * but is the browser speaking), and the one recovery logic actually needs:\n *\n * - `device`    the firmware ANSWERED: rejection, locked screen, wrong\n *               wallet, bad PIN. It is a result, not a malfunction — surface\n *               it to the user verbatim; never auto-reconnect, never switch\n *               channels, never drop a healthy session over it.\n * - `transport` the pipe failed: cable pulled, bus reset, bridge gone.\n *               Reconnecting or falling back to another channel is fair game.\n * - `host`      the host environment refused: browser permission, picker\n *               dismissed, bad parameters. Fix the environment, not the link.\n *\n * Optional on purpose: a mapper that cannot tell MUST leave it unset rather\n * than guess — consumers fall back to their existing code-based tables, so an\n * unset origin degrades to today's behavior instead of mislabeling.\n */\nexport type HwkErrorOrigin = 'device' | 'transport' | 'host';\n\n/**\n * Smallest runtime resource a consumer must replace before retrying a failed\n * operation. This is connection-lifecycle metadata, not UI navigation and not\n * permission to replay a signing command automatically.\n *\n * - `call`: nothing needs replacing; re-issuing the same call is eligible,\n *   usually after the user fixes device state.\n * - `operation`: the operation binding is no longer usable; the selected target\n *   may be used to establish a new one when its identity is persistent.\n * - `search-target`: the selected discovery result is stale or untrusted;\n *   rediscover on the same transport and let the user select again.\n * - `transport`: the selected transport is unavailable or unsuitable; repair\n *   it or choose another transport.\n * - `not-recoverable`: retrying the same operation/context cannot succeed.\n * - `unknown`: the SDK cannot make a safe recovery claim.\n */\nexport type HwkRecoveryScope =\n  | 'call'\n  | 'operation'\n  | 'search-target'\n  | 'transport'\n  | 'not-recoverable'\n  | 'unknown';\n\nexport interface HwkRecoveryHint {\n  scope: HwkRecoveryScope;\n}\n\nconst RECOVERY_SCOPES = new Set<HwkRecoveryScope>([\n  'call',\n  'operation',\n  'search-target',\n  'transport',\n  'not-recoverable',\n  'unknown',\n]);\n\nexport function isHwkRecoveryHint(value: unknown): value is HwkRecoveryHint {\n  if (!value || typeof value !== 'object') return false;\n  const { scope } = value as { scope?: unknown };\n  return typeof scope === 'string' && RECOVERY_SCOPES.has(scope as HwkRecoveryScope);\n}\n\nconst RECOVERY_CALL: HwkRecoveryHint = Object.freeze({ scope: 'call' });\nconst RECOVERY_OPERATION: HwkRecoveryHint = Object.freeze({ scope: 'operation' });\nconst RECOVERY_SEARCH_TARGET: HwkRecoveryHint = Object.freeze({ scope: 'search-target' });\nconst RECOVERY_TRANSPORT: HwkRecoveryHint = Object.freeze({ scope: 'transport' });\nconst RECOVERY_NOT_RECOVERABLE: HwkRecoveryHint = Object.freeze({\n  scope: 'not-recoverable',\n});\nconst RECOVERY_UNKNOWN: HwkRecoveryHint = Object.freeze({ scope: 'unknown' });\n\n/**\n * Vendor-neutral fallback used when an adapter has no more precise runtime\n * knowledge. Adapters may stamp a narrower hint when transport/session state\n * makes the correct scope unambiguous.\n */\nexport function defaultRecoveryForCode(code: HardwareErrorCode): HwkRecoveryHint {\n  switch (code) {\n    case HardwareErrorCode.UserRejected:\n    case HardwareErrorCode.UserAborted:\n    case HardwareErrorCode.DeviceBusy:\n    case HardwareErrorCode.DeviceLocked:\n    case HardwareErrorCode.DeviceNotInitialized:\n    case HardwareErrorCode.DeviceInBootloader:\n    case HardwareErrorCode.DeviceAppStuck:\n    case HardwareErrorCode.DeviceBusyInternal:\n    case HardwareErrorCode.NetworkError:\n    case HardwareErrorCode.PinInvalid:\n    case HardwareErrorCode.PinCancelled:\n    case HardwareErrorCode.PassphraseRejected:\n    case HardwareErrorCode.PassphraseStateMismatch:\n    case HardwareErrorCode.PinMismatch:\n    case HardwareErrorCode.FirmwareTooOld:\n    case HardwareErrorCode.FirmwareUpdateRequired:\n    case HardwareErrorCode.AppNotInstalled:\n    case HardwareErrorCode.WrongApp:\n    case HardwareErrorCode.AppTooOld:\n    case HardwareErrorCode.DeviceOutOfMemory:\n    case HardwareErrorCode.EvmBlindSigningRequired:\n    case HardwareErrorCode.EvmClearSignPluginMissing:\n    case HardwareErrorCode.EvmDataTooLarge:\n    case HardwareErrorCode.EvmTxTypeNotSupported:\n    case HardwareErrorCode.SolanaBlindSigningRequired:\n    case HardwareErrorCode.TronCustomContractRequired:\n    case HardwareErrorCode.TronDataSigningRequired:\n    case HardwareErrorCode.TronSignByHashRequired:\n    case HardwareErrorCode.BtcWalletPolicyHmacMismatch:\n    case HardwareErrorCode.BtcUnexpectedState:\n      return RECOVERY_CALL;\n    case HardwareErrorCode.DeviceNotFound:\n    case HardwareErrorCode.DeviceDisconnected:\n    case HardwareErrorCode.OperationNotFound:\n    case HardwareErrorCode.OperationEnded:\n    case HardwareErrorCode.TransportError:\n    case HardwareErrorCode.BlePairingTimeout:\n    case HardwareErrorCode.ThpPairingFailed:\n    case HardwareErrorCode.ThpPairingRequired:\n    case HardwareErrorCode.BleConnectFailed:\n    case HardwareErrorCode.BlePairingCancelled:\n      return RECOVERY_OPERATION;\n    case HardwareErrorCode.DeviceMismatch:\n    case HardwareErrorCode.DeviceSearchMismatch:\n    case HardwareErrorCode.DeviceOneDeviceOnly:\n    case HardwareErrorCode.BleBondInvalid:\n      return RECOVERY_SEARCH_TARGET;\n    case HardwareErrorCode.BridgeNotFound:\n    case HardwareErrorCode.TransportNotAvailable:\n    case HardwareErrorCode.DevicePermissionDenied:\n    case HardwareErrorCode.PayloadTooLarge:\n      return RECOVERY_TRANSPORT;\n    case HardwareErrorCode.InvalidParams:\n    case HardwareErrorCode.MethodNotSupported:\n    case HardwareErrorCode.ChainNotSupported:\n    case HardwareErrorCode.DevicePathForbidden:\n      return RECOVERY_NOT_RECOVERABLE;\n    case HardwareErrorCode.UnknownError:\n    case HardwareErrorCode.OperationTimeout:\n    default:\n      return RECOVERY_UNKNOWN;\n  }\n}\n\n/**\n * The authoritative code→origin table. Most codes imply their origin by\n * definition (UserRejected IS the device speaking; BridgeNotFound IS the\n * pipe). Vendors use this as the default and override only where their\n * mapping context knows better. Codes whose origin genuinely depends on\n * context (UnknownError, OperationTimeout — the device may be waiting for a\n * human, or the pipe may be dead — and DeviceBusy) return undefined: an\n * honest \"can't tell\" beats a plausible mislabel, because consumers fall\n * back to their existing behavior instead of taking the wrong recovery.\n */\nexport function defaultOriginForCode(code: HardwareErrorCode): HwkErrorOrigin | undefined {\n  // Chain APDU blocks (11000+) are, without exception, the chain app on the\n  // device answering a request it understood and refused/qualified.\n  if (code >= 11_000) return 'device';\n  switch (code) {\n    case HardwareErrorCode.UserRejected:\n    case HardwareErrorCode.DeviceLocked:\n    case HardwareErrorCode.DeviceNotInitialized:\n    case HardwareErrorCode.DeviceInBootloader:\n    case HardwareErrorCode.DeviceMismatch:\n    case HardwareErrorCode.DeviceSearchMismatch:\n    case HardwareErrorCode.DeviceAppStuck:\n    case HardwareErrorCode.DevicePathForbidden:\n    case HardwareErrorCode.DeviceBusyInternal:\n    case HardwareErrorCode.ChainNotSupported:\n    case HardwareErrorCode.FirmwareTooOld:\n    case HardwareErrorCode.FirmwareUpdateRequired:\n    case HardwareErrorCode.PinInvalid:\n    case HardwareErrorCode.PinMismatch:\n    case HardwareErrorCode.PassphraseRejected:\n    case HardwareErrorCode.PassphraseStateMismatch:\n    case HardwareErrorCode.ThpPairingFailed:\n    case HardwareErrorCode.ThpPairingRequired:\n    case HardwareErrorCode.WrongApp:\n    case HardwareErrorCode.AppNotInstalled:\n    case HardwareErrorCode.AppTooOld:\n    case HardwareErrorCode.DeviceOutOfMemory:\n      return 'device';\n    case HardwareErrorCode.DeviceNotFound:\n    case HardwareErrorCode.DeviceDisconnected:\n    case HardwareErrorCode.TransportError:\n    case HardwareErrorCode.BridgeNotFound:\n    case HardwareErrorCode.TransportNotAvailable:\n    case HardwareErrorCode.BlePairingTimeout:\n    case HardwareErrorCode.NetworkError:\n    case HardwareErrorCode.BleBondInvalid:\n    case HardwareErrorCode.BleConnectFailed:\n      return 'transport';\n    case HardwareErrorCode.DevicePermissionDenied:\n    case HardwareErrorCode.UserAborted:\n    case HardwareErrorCode.InvalidParams:\n    case HardwareErrorCode.MethodNotSupported:\n    case HardwareErrorCode.PinCancelled:\n    case HardwareErrorCode.BlePairingCancelled:\n    case HardwareErrorCode.PayloadTooLarge:\n    case HardwareErrorCode.DeviceOneDeviceOnly:\n      return 'host';\n    default:\n      return undefined;\n  }\n}\n\nexport interface IHwkErrorPayload {\n  code: HardwareErrorCode;\n  message: string;\n  origin?: HwkErrorOrigin;\n  recovery?: HwkRecoveryHint;\n  appName?: string;\n  _tag?: string;\n  params?: Record<string, unknown>;\n}\n\nexport interface IOperationMayHaveCompletedParams extends Record<string, unknown> {\n  operationMayHaveCompleted: true;\n  method: string;\n}\n\n/**\n * Marks an unsafe hardware request whose response was lost after dispatch.\n * Callers must not interpret the resulting transport error as proof that the\n * device rejected or did not execute the operation.\n */\nexport function operationMayHaveCompletedParams(\n  method: string,\n  params?: Record<string, unknown>\n): IOperationMayHaveCompletedParams {\n  return {\n    ...params,\n    operationMayHaveCompleted: true,\n    method,\n  };\n}\n\nexport type HwkError = Error & {\n  code: HardwareErrorCode;\n  /** See {@link HwkErrorOrigin}. Survives serializeConnectorError/rehydrate\n   *  automatically (own fields outside the top-level whitelist travel via\n   *  `params` and are lifted back). */\n  origin?: HwkErrorOrigin;\n  recovery?: HwkRecoveryHint;\n  appName?: string;\n  _tag?: string;\n  params?: Record<string, unknown>;\n};\n\n/**\n * Canonical throwable for HWK adapters. Plain Error + canonical extra fields,\n * shape-compatible with `rehydrateConnectorError` so locally-thrown and\n * cross-boundary errors are indistinguishable to downstream classifiers\n * (`err.code` / `err._tag` / `err.appName`). Do NOT mutate caught errors\n * with `Object.assign` — construct a fresh one via this factory.\n */\nexport function createHwkError(payload: IHwkErrorPayload): HwkError {\n  const recovery = payload.recovery ?? defaultRecoveryForCode(payload.code);\n  return Object.assign(new Error(payload.message), {\n    code: payload.code,\n    ...(payload.origin !== undefined && { origin: payload.origin }),\n    recovery,\n    ...(payload._tag !== undefined && { _tag: payload._tag }),\n    ...(payload.appName !== undefined && { appName: payload.appName }),\n    ...(payload.params !== undefined && { params: payload.params }),\n  });\n}\n"],"mappings":";AAwBO,IAAK,oBAAL,kBAAKA,uBAAL;AAEL,EAAAA,sCAAA,kBAAe,OAAf;AACA,EAAAA,sCAAA,kBAAe,SAAf;AACA,EAAAA,sCAAA,mBAAgB,SAAhB;AACA,EAAAA,sCAAA,sBAAmB,SAAnB;AACA,EAAAA,sCAAA,wBAAqB,SAArB;AAEA,EAAAA,sCAAA,iBAAc,SAAd;AAGA,EAAAA,sCAAA,oBAAiB,SAAjB;AACA,EAAAA,sCAAA,wBAAqB,SAArB;AACA,EAAAA,sCAAA,gBAAa,SAAb;AACA,EAAAA,sCAAA,kBAAe,SAAf;AACA,EAAAA,sCAAA,0BAAuB,SAAvB;AACA,EAAAA,sCAAA,wBAAqB,SAArB;AACA,EAAAA,sCAAA,oBAAiB,SAAjB;AAEA,EAAAA,sCAAA,oBAAiB,SAAjB;AAEA,EAAAA,sCAAA,uBAAoB,SAApB;AAEA,EAAAA,sCAAA,yBAAsB,SAAtB;AAOA,EAAAA,sCAAA,yBAAsB,SAAtB;AAEA,EAAAA,sCAAA,wBAAqB,SAArB;AAEA,EAAAA,sCAAA,uBAAoB,SAApB;AAEA,EAAAA,sCAAA,oBAAiB,SAAjB;AAQA,EAAAA,sCAAA,0BAAuB,SAAvB;AAGA,EAAAA,sCAAA,oBAAiB,SAAjB;AACA,EAAAA,sCAAA,4BAAyB,SAAzB;AAGA,EAAAA,sCAAA,oBAAiB,SAAjB;AACA,EAAAA,sCAAA,oBAAiB,SAAjB;AACA,EAAAA,sCAAA,2BAAwB,SAAxB;AAMA,EAAAA,sCAAA,4BAAyB,SAAzB;AAQA,EAAAA,sCAAA,uBAAoB,SAApB;AAEA,EAAAA,sCAAA,kBAAe,SAAf;AASA,EAAAA,sCAAA,sBAAmB,SAAnB;AAUA,EAAAA,sCAAA,oBAAiB,SAAjB;AAQA,EAAAA,sCAAA,wBAAqB,SAArB;AAUA,EAAAA,sCAAA,sBAAmB,SAAnB;AAQA,EAAAA,sCAAA,yBAAsB,SAAtB;AAGA,EAAAA,sCAAA,gBAAa,SAAb;AACA,EAAAA,sCAAA,kBAAe,SAAf;AACA,EAAAA,sCAAA,wBAAqB,SAArB;AAOA,EAAAA,sCAAA,6BAA0B,SAA1B;AAMA,EAAAA,sCAAA,iBAAc,SAAd;AAEA,EAAAA,sCAAA,8BAA2B,SAA3B;AAIA,EAAAA,sCAAA,qBAAkB,SAAlB;AACA,EAAAA,sCAAA,cAAW,SAAX;AAEA,EAAAA,sCAAA,eAAY,SAAZ;AAEA,EAAAA,sCAAA,uBAAoB,SAApB;AAWA,EAAAA,sCAAA,qBAAkB,SAAlB;AAKA,EAAAA,sCAAA,6BAA0B,QAA1B;AAEA,EAAAA,sCAAA,+BAA4B,SAA5B;AAEA,EAAAA,sCAAA,qBAAkB,SAAlB;AAEA,EAAAA,sCAAA,2BAAwB,SAAxB;AAIA,EAAAA,sCAAA,gCAA6B,SAA7B;AAIA,EAAAA,sCAAA,gCAA6B,SAA7B;AAEA,EAAAA,sCAAA,6BAA0B,SAA1B;AAEA,EAAAA,sCAAA,4BAAyB,SAAzB;AAIA,EAAAA,sCAAA,iCAA8B,SAA9B;AAEA,EAAAA,sCAAA,wBAAqB,SAArB;AAvLU,SAAAA;AAAA,GAAA;AAqML,IAAM,8BAAwC;AAAA,EACnD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAuDA,IAAM,kBAAkB,oBAAI,IAAsB;AAAA,EAChD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,SAAS,kBAAkB,OAA0C;AAC1E,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;AAChD,QAAM,EAAE,MAAM,IAAI;AAClB,SAAO,OAAO,UAAU,YAAY,gBAAgB,IAAI,KAAyB;AACnF;AAEA,IAAM,gBAAiC,OAAO,OAAO,EAAE,OAAO,OAAO,CAAC;AACtE,IAAM,qBAAsC,OAAO,OAAO,EAAE,OAAO,YAAY,CAAC;AAChF,IAAM,yBAA0C,OAAO,OAAO,EAAE,OAAO,gBAAgB,CAAC;AACxF,IAAM,qBAAsC,OAAO,OAAO,EAAE,OAAO,YAAY,CAAC;AAChF,IAAM,2BAA4C,OAAO,OAAO;AAAA,EAC9D,OAAO;AACT,CAAC;AACD,IAAM,mBAAoC,OAAO,OAAO,EAAE,OAAO,UAAU,CAAC;AAOrE,SAAS,uBAAuB,MAA0C;AAC/E,UAAQ,MAAM;AAAA,IACZ,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AAAA,IACL;AACE,aAAO;AAAA,EACX;AACF;AAYO,SAAS,qBAAqB,MAAqD;AAGxF,MAAI,QAAQ,KAAQ,QAAO;AAC3B,UAAQ,MAAM;AAAA,IACZ,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAsBO,SAAS,gCACd,QACA,QACkC;AAClC,SAAO;AAAA,IACL,GAAG;AAAA,IACH,2BAA2B;AAAA,IAC3B;AAAA,EACF;AACF;AAqBO,SAAS,eAAe,SAAqC;AAClE,QAAM,WAAW,QAAQ,YAAY,uBAAuB,QAAQ,IAAI;AACxE,SAAO,OAAO,OAAO,IAAI,MAAM,QAAQ,OAAO,GAAG;AAAA,IAC/C,MAAM,QAAQ;AAAA,IACd,GAAI,QAAQ,WAAW,UAAa,EAAE,QAAQ,QAAQ,OAAO;AAAA,IAC7D;AAAA,IACA,GAAI,QAAQ,SAAS,UAAa,EAAE,MAAM,QAAQ,KAAK;AAAA,IACvD,GAAI,QAAQ,YAAY,UAAa,EAAE,SAAS,QAAQ,QAAQ;AAAA,IAChE,GAAI,QAAQ,WAAW,UAAa,EAAE,QAAQ,QAAQ,OAAO;AAAA,EAC/D,CAAC;AACH;","names":["HardwareErrorCode"]}

package/dist/{chunk-KCIK56B5.mjs → chunk-ELC6PLKH.mjs}

@@ -1,6 +1,6 @@
 import {
   createHwkError
-} from "./chunk-72KOSYTH.mjs";
+} from "./chunk-E3UPXUN5.mjs";
 
 // src/events/ui-request.ts
 var UI_EVENT = "UI_EVENT";
@@ -177,4 +177,4 @@ export {
   UI_REQUEST_TIMEOUT_TAG,
   UiRequestRegistry
 };
-//# sourceMappingURL=chunk-KCIK56B5.mjs.map
+//# sourceMappingURL=chunk-ELC6PLKH.mjs.map

package/dist/chunk-ELC6PLKH.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/events/ui-request.ts","../src/utils/UiRequestRegistry.ts"],"sourcesContent":["import type { QrResponseData } from '../types/qr';\n\nexport const UI_EVENT = 'UI_EVENT';\n\nexport const UI_REQUEST = {\n  REQUEST_PIN: 'ui-request-pin',\n  REQUEST_PASSPHRASE: 'ui-request-passphrase',\n  // One-way UI notification: device is waiting for passphrase entry on-device.\n  // The prompt response path remains RECEIVE_PASSPHRASE with passphraseOnDevice=true.\n  REQUEST_PASSPHRASE_ON_DEVICE: 'ui-request-passphrase-on-device',\n  REQUEST_BUTTON: 'ui-request-button',\n  REQUEST_QR_DISPLAY: 'ui-request-qr-display',\n  REQUEST_QR_SCAN: 'ui-request-qr-scan',\n  REQUEST_DEVICE_PERMISSION: 'ui-request-device-permission',\n  REQUEST_SELECT_DEVICE: 'ui-request-select-device',\n  REQUEST_SAVE_DEVICE_BINDING: 'ui-request-save-device-binding',\n  DEVICE_BINDING_STATUS: 'ui-device-binding-status',\n  REQUEST_DEVICE_CONNECT: 'ui-request-device-connect',\n  // Ledger BTC App: account index >= 100 requires display=true. Adapter asks\n  // the user once per session before promoting the call.\n  REQUEST_BTC_HIGH_INDEX_CONFIRM: 'ui-request-btc-high-index-confirm',\n  // Required app is not installed; with autoInstallApp on, ask the user\n  // whether to install it before retrying the operation.\n  REQUEST_INSTALL_APP: 'ui-request-install-app',\n  REQUEST_PREEMPTION: 'ui-request-preemption',\n  REQUEST_TREZOR_THP_PAIRING: 'ui-request-trezor-thp-pairing',\n  CLOSE_UI_WINDOW: 'ui-close',\n  DEVICE_PROGRESS: 'ui-device_progress',\n  FIRMWARE_PROGRESS: 'ui-firmware-progress',\n  FIRMWARE_TIP: 'ui-firmware-tip',\n} as const;\n\nexport const UI_RESPONSE = {\n  RECEIVE_PIN: 'receive-pin',\n  RECEIVE_PASSPHRASE: 'receive-passphrase',\n  RECEIVE_QR_RESPONSE: 'receive-qr-response',\n  RECEIVE_SELECT_DEVICE: 'receive-select-device',\n  RECEIVE_SAVE_DEVICE_BINDING: 'receive-save-device-binding',\n  RECEIVE_DEVICE_CONNECT: 'receive-device-connect',\n  RECEIVE_DEVICE_PERMISSION: 'receive-device-permission',\n  RECEIVE_BTC_HIGH_INDEX_CONFIRM: 'receive-btc-high-index-confirm',\n  RECEIVE_INSTALL_APP: 'receive-install-app',\n  RECEIVE_PREEMPTION: 'receive-preemption',\n  RECEIVE_TREZOR_THP_PAIRING: 'receive-trezor-thp-pairing',\n  CANCEL: 'cancel',\n} as const;\n\nexport type DevicePermissionDeniedReason =\n  | 'bluetoothTurnedOff'\n  | 'permissionDenied'\n  | (string & Record<never, never>);\n\nexport type DevicePermissionResponse = {\n  granted: boolean;\n  reason?: DevicePermissionDeniedReason;\n  message?: string;\n};\n\n/**\n * Why a host refused to persist a binding.\n * - `mismatch`: the selected device is not the one this operation belongs to —\n *   a user-facing outcome, surfaced as `DeviceMismatch`.\n * - `skipped`: the host had nothing to bind (no record for this call). A host\n *   contract problem, not something the user did.\n */\nexport type SaveDeviceBindingDeclineReason = 'mismatch' | 'skipped';\n\nexport type UiResponseEvent =\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_SAVE_DEVICE_BINDING;\n      payload: {\n        requestId: string;\n        saved: boolean;\n        reason?: SaveDeviceBindingDeclineReason;\n      };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_PIN;\n      payload: string;\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_PASSPHRASE;\n      payload: {\n        value: string;\n        passphraseOnDevice?: boolean;\n        save?: boolean;\n      };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_QR_RESPONSE;\n      payload: QrResponseData;\n    }\n  | {\n      // sdkConnectId echoes one of the DeviceInfo.connectId values emitted in\n      // the REQUEST_SELECT_DEVICE event's `devices` list. Scope is the current\n      // search session; may be ephemeral (e.g. Ledger USB DMK UUID).\n      type: typeof UI_RESPONSE.RECEIVE_SELECT_DEVICE;\n      payload: { requestId?: string } & (\n        | { sdkConnectId: string; cancelled?: false }\n        | { cancelled: true }\n      );\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_DEVICE_CONNECT;\n      payload: { confirmed: boolean };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_DEVICE_PERMISSION;\n      payload: DevicePermissionResponse;\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_BTC_HIGH_INDEX_CONFIRM;\n      payload: { confirmed: boolean };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_INSTALL_APP;\n      payload: { confirmed: boolean };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_PREEMPTION;\n      payload: { confirmed: boolean };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_TREZOR_THP_PAIRING;\n      payload: {\n        selectedMethod?: number | string;\n        tag?: string;\n      };\n    }\n  | {\n      type: typeof UI_RESPONSE.CANCEL;\n      payload?: undefined;\n    };\n","import { UI_REQUEST, UI_RESPONSE } from '../events/ui-request';\nimport { createHwkError, HardwareErrorCode } from '../types/errors';\n\n/** 10 min — every UI request is human-in-the-loop; bias toward \"wait long\". */\nexport const UI_REQUEST_DEFAULT_TIMEOUT_MS = 600_000;\n\nconst RESPONSE_TO_REQUEST: Record<string, string> = {\n  [UI_RESPONSE.RECEIVE_PIN]: UI_REQUEST.REQUEST_PIN,\n  [UI_RESPONSE.RECEIVE_PASSPHRASE]: UI_REQUEST.REQUEST_PASSPHRASE,\n  [UI_RESPONSE.RECEIVE_SELECT_DEVICE]: UI_REQUEST.REQUEST_SELECT_DEVICE,\n  [UI_RESPONSE.RECEIVE_SAVE_DEVICE_BINDING]: UI_REQUEST.REQUEST_SAVE_DEVICE_BINDING,\n  [UI_RESPONSE.RECEIVE_DEVICE_CONNECT]: UI_REQUEST.REQUEST_DEVICE_CONNECT,\n  [UI_RESPONSE.RECEIVE_DEVICE_PERMISSION]: UI_REQUEST.REQUEST_DEVICE_PERMISSION,\n  [UI_RESPONSE.RECEIVE_BTC_HIGH_INDEX_CONFIRM]: UI_REQUEST.REQUEST_BTC_HIGH_INDEX_CONFIRM,\n  [UI_RESPONSE.RECEIVE_INSTALL_APP]: UI_REQUEST.REQUEST_INSTALL_APP,\n  [UI_RESPONSE.RECEIVE_PREEMPTION]: UI_REQUEST.REQUEST_PREEMPTION,\n  [UI_RESPONSE.RECEIVE_TREZOR_THP_PAIRING]: UI_REQUEST.REQUEST_TREZOR_THP_PAIRING,\n  // RECEIVE_QR_RESPONSE maps to QR_DISPLAY or QR_SCAN — resolved dynamically below.\n};\n\nexport const UI_REQUEST_PREEMPTED_TAG = 'UiRequestPreempted';\nexport const UI_REQUEST_CANCELLED_TAG = 'UiRequestCancelled';\nexport const UI_REQUEST_TIMEOUT_TAG = 'UiRequestTimeout';\n\nlet requestSequence = 0;\n\ntype PendingEntry = {\n  requestId?: string;\n  resolve: (payload: unknown) => void;\n  reject: (error: Error) => void;\n  timer: ReturnType<typeof setTimeout>;\n};\n\n/**\n * Per-type single-slot registry for adapter-level UI requests. A new `wait`\n * of the same type supersedes (rejects) the prior pending entry. With the\n * job queue running globally serially, cross-type collisions don't occur in\n * normal flow — same-type preemption is a defensive measure for callers\n * that fire the same request twice without waiting on the first.\n *\n * Unknown response types are dropped silently so the public `uiResponse`\n * entry never throws.\n */\nexport class UiRequestRegistry {\n  private pending = new Map<string, PendingEntry>();\n\n  createRequestId(): string {\n    requestSequence += 1;\n    return `hwk-ui-${Date.now()}-${requestSequence}`;\n  }\n\n  wait<T = unknown>(\n    requestType: string,\n    options?: { timeoutMs?: number; requestId?: string }\n  ): Promise<T> {\n    const existing = this.pending.get(requestType);\n    if (existing) {\n      clearTimeout(existing.timer);\n      this.pending.delete(requestType);\n      existing.reject(\n        Object.assign(new Error(`UI request '${requestType}' was superseded by a new request`), {\n          _tag: UI_REQUEST_PREEMPTED_TAG,\n        })\n      );\n    }\n\n    const timeoutMs = options?.timeoutMs ?? UI_REQUEST_DEFAULT_TIMEOUT_MS;\n\n    return new Promise<T>((resolve, reject) => {\n      const timer = setTimeout(() => {\n        if (this.pending.get(requestType)?.timer === timer) {\n          this.pending.delete(requestType);\n          reject(\n            Object.assign(new Error(`UI request '${requestType}' timed out after ${timeoutMs}ms`), {\n              _tag: UI_REQUEST_TIMEOUT_TAG,\n            })\n          );\n        }\n      }, timeoutMs);\n\n      this.pending.set(requestType, {\n        requestId: options?.requestId,\n        resolve: resolve as (payload: unknown) => void,\n        reject,\n        timer,\n      });\n    });\n  }\n\n  resolve(responseType: string, payload: unknown): void {\n    let requestType = RESPONSE_TO_REQUEST[responseType];\n    if (responseType === UI_RESPONSE.RECEIVE_QR_RESPONSE) {\n      if (this.pending.has(UI_REQUEST.REQUEST_QR_DISPLAY)) {\n        requestType = UI_REQUEST.REQUEST_QR_DISPLAY;\n      } else if (this.pending.has(UI_REQUEST.REQUEST_QR_SCAN)) {\n        requestType = UI_REQUEST.REQUEST_QR_SCAN;\n      }\n    }\n    if (!requestType) return;\n\n    const entry = this.pending.get(requestType);\n    if (!entry) return;\n\n    const response =\n      payload && typeof payload === 'object'\n        ? (payload as { requestId?: unknown; cancelled?: unknown })\n        : undefined;\n    // A late response must not resolve (or cancel) a newer request of the same type.\n    if (entry.requestId !== undefined && response?.requestId !== entry.requestId) return;\n    if (requestType === UI_REQUEST.REQUEST_SELECT_DEVICE && response?.cancelled === true) {\n      clearTimeout(entry.timer);\n      this.pending.delete(requestType);\n      entry.reject(\n        createHwkError({\n          code: HardwareErrorCode.UserAborted,\n          message: 'Device selection was cancelled',\n          _tag: UI_REQUEST_CANCELLED_TAG,\n        })\n      );\n      return;\n    }\n\n    clearTimeout(entry.timer);\n    this.pending.delete(requestType);\n    entry.resolve(payload);\n  }\n\n  cancel(requestType?: string, requestId?: string): void {\n    if (requestType) {\n      const entry = this.pending.get(requestType);\n      if (!entry) return;\n      if (requestId !== undefined && entry.requestId !== requestId) return;\n      clearTimeout(entry.timer);\n      this.pending.delete(requestType);\n      entry.reject(\n        Object.assign(new Error(`UI request '${requestType}' was cancelled`), {\n          _tag: UI_REQUEST_CANCELLED_TAG,\n        })\n      );\n      return;\n    }\n\n    for (const [type, entry] of this.pending) {\n      clearTimeout(entry.timer);\n      entry.reject(\n        Object.assign(new Error(`UI request '${type}' was cancelled`), {\n          _tag: UI_REQUEST_CANCELLED_TAG,\n        })\n      );\n    }\n    this.pending.clear();\n  }\n\n  reset(): void {\n    this.cancel();\n  }\n\n  hasPending(requestType?: string): boolean {\n    if (requestType) return this.pending.has(requestType);\n    return this.pending.size > 0;\n  }\n}\n"],"mappings":";;;;;AAEO,IAAM,WAAW;AAEjB,IAAM,aAAa;AAAA,EACxB,aAAa;AAAA,EACb,oBAAoB;AAAA;AAAA;AAAA,EAGpB,8BAA8B;AAAA,EAC9B,gBAAgB;AAAA,EAChB,oBAAoB;AAAA,EACpB,iBAAiB;AAAA,EACjB,2BAA2B;AAAA,EAC3B,uBAAuB;AAAA,EACvB,6BAA6B;AAAA,EAC7B,uBAAuB;AAAA,EACvB,wBAAwB;AAAA;AAAA;AAAA,EAGxB,gCAAgC;AAAA;AAAA;AAAA,EAGhC,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,4BAA4B;AAAA,EAC5B,iBAAiB;AAAA,EACjB,iBAAiB;AAAA,EACjB,mBAAmB;AAAA,EACnB,cAAc;AAChB;AAEO,IAAM,cAAc;AAAA,EACzB,aAAa;AAAA,EACb,oBAAoB;AAAA,EACpB,qBAAqB;AAAA,EACrB,uBAAuB;AAAA,EACvB,6BAA6B;AAAA,EAC7B,wBAAwB;AAAA,EACxB,2BAA2B;AAAA,EAC3B,gCAAgC;AAAA,EAChC,qBAAqB;AAAA,EACrB,oBAAoB;AAAA,EACpB,4BAA4B;AAAA,EAC5B,QAAQ;AACV;;;ACzCO,IAAM,gCAAgC;AAE7C,IAAM,sBAA8C;AAAA,EAClD,CAAC,YAAY,WAAW,GAAG,WAAW;AAAA,EACtC,CAAC,YAAY,kBAAkB,GAAG,WAAW;AAAA,EAC7C,CAAC,YAAY,qBAAqB,GAAG,WAAW;AAAA,EAChD,CAAC,YAAY,2BAA2B,GAAG,WAAW;AAAA,EACtD,CAAC,YAAY,sBAAsB,GAAG,WAAW;AAAA,EACjD,CAAC,YAAY,yBAAyB,GAAG,WAAW;AAAA,EACpD,CAAC,YAAY,8BAA8B,GAAG,WAAW;AAAA,EACzD,CAAC,YAAY,mBAAmB,GAAG,WAAW;AAAA,EAC9C,CAAC,YAAY,kBAAkB,GAAG,WAAW;AAAA,EAC7C,CAAC,YAAY,0BAA0B,GAAG,WAAW;AAAA;AAEvD;AAEO,IAAM,2BAA2B;AACjC,IAAM,2BAA2B;AACjC,IAAM,yBAAyB;AAEtC,IAAI,kBAAkB;AAmBf,IAAM,oBAAN,MAAwB;AAAA,EAAxB;AACL,SAAQ,UAAU,oBAAI,IAA0B;AAAA;AAAA,EAEhD,kBAA0B;AACxB,uBAAmB;AACnB,WAAO,UAAU,KAAK,IAAI,CAAC,IAAI,eAAe;AAAA,EAChD;AAAA,EAEA,KACE,aACA,SACY;AACZ,UAAM,WAAW,KAAK,QAAQ,IAAI,WAAW;AAC7C,QAAI,UAAU;AACZ,mBAAa,SAAS,KAAK;AAC3B,WAAK,QAAQ,OAAO,WAAW;AAC/B,eAAS;AAAA,QACP,OAAO,OAAO,IAAI,MAAM,eAAe,WAAW,mCAAmC,GAAG;AAAA,UACtF,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAAA,IACF;AAEA,UAAM,YAAY,SAAS,aAAa;AAExC,WAAO,IAAI,QAAW,CAAC,SAAS,WAAW;AACzC,YAAM,QAAQ,WAAW,MAAM;AAC7B,YAAI,KAAK,QAAQ,IAAI,WAAW,GAAG,UAAU,OAAO;AAClD,eAAK,QAAQ,OAAO,WAAW;AAC/B;AAAA,YACE,OAAO,OAAO,IAAI,MAAM,eAAe,WAAW,qBAAqB,SAAS,IAAI,GAAG;AAAA,cACrF,MAAM;AAAA,YACR,CAAC;AAAA,UACH;AAAA,QACF;AAAA,MACF,GAAG,SAAS;AAEZ,WAAK,QAAQ,IAAI,aAAa;AAAA,QAC5B,WAAW,SAAS;AAAA,QACpB;AAAA,QACA;AAAA,QACA;AAAA,MACF,CAAC;AAAA,IACH,CAAC;AAAA,EACH;AAAA,EAEA,QAAQ,cAAsB,SAAwB;AACpD,QAAI,cAAc,oBAAoB,YAAY;AAClD,QAAI,iBAAiB,YAAY,qBAAqB;AACpD,UAAI,KAAK,QAAQ,IAAI,WAAW,kBAAkB,GAAG;AACnD,sBAAc,WAAW;AAAA,MAC3B,WAAW,KAAK,QAAQ,IAAI,WAAW,eAAe,GAAG;AACvD,sBAAc,WAAW;AAAA,MAC3B;AAAA,IACF;AACA,QAAI,CAAC,YAAa;AAElB,UAAM,QAAQ,KAAK,QAAQ,IAAI,WAAW;AAC1C,QAAI,CAAC,MAAO;AAEZ,UAAM,WACJ,WAAW,OAAO,YAAY,WACzB,UACD;AAEN,QAAI,MAAM,cAAc,UAAa,UAAU,cAAc,MAAM,UAAW;AAC9E,QAAI,gBAAgB,WAAW,yBAAyB,UAAU,cAAc,MAAM;AACpF,mBAAa,MAAM,KAAK;AACxB,WAAK,QAAQ,OAAO,WAAW;AAC/B,YAAM;AAAA,QACJ,eAAe;AAAA,UACb;AAAA,UACA,SAAS;AAAA,UACT,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AACA;AAAA,IACF;AAEA,iBAAa,MAAM,KAAK;AACxB,SAAK,QAAQ,OAAO,WAAW;AAC/B,UAAM,QAAQ,OAAO;AAAA,EACvB;AAAA,EAEA,OAAO,aAAsB,WAA0B;AACrD,QAAI,aAAa;AACf,YAAM,QAAQ,KAAK,QAAQ,IAAI,WAAW;AAC1C,UAAI,CAAC,MAAO;AACZ,UAAI,cAAc,UAAa,MAAM,cAAc,UAAW;AAC9D,mBAAa,MAAM,KAAK;AACxB,WAAK,QAAQ,OAAO,WAAW;AAC/B,YAAM;AAAA,QACJ,OAAO,OAAO,IAAI,MAAM,eAAe,WAAW,iBAAiB,GAAG;AAAA,UACpE,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AACA;AAAA,IACF;AAEA,eAAW,CAAC,MAAM,KAAK,KAAK,KAAK,SAAS;AACxC,mBAAa,MAAM,KAAK;AACxB,YAAM;AAAA,QACJ,OAAO,OAAO,IAAI,MAAM,eAAe,IAAI,iBAAiB,GAAG;AAAA,UAC7D,MAAM;AAAA,QACR,CAAC;AAAA,MACH;AAAA,IACF;AACA,SAAK,QAAQ,MAAM;AAAA,EACrB;AAAA,EAEA,QAAc;AACZ,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,WAAW,aAA+B;AACxC,QAAI,YAAa,QAAO,KAAK,QAAQ,IAAI,WAAW;AACpD,WAAO,KAAK,QAAQ,OAAO;AAAA,EAC7B;AACF;","names":[]}

package/dist/{chunk-RRCFH7X6.js → chunk-S7X2HM7P.js}

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunkIZEVYMJKjs = require('./chunk-IZEVYMJK.js');
+var _chunkZ3IH25KVjs = require('./chunk-Z3IH25KV.js');
 
 // src/events/ui-request.ts
 var UI_EVENT = "UI_EVENT";
@@ -122,7 +122,7 @@ var UiRequestRegistry = class {
       clearTimeout(entry.timer);
       this.pending.delete(requestType);
       entry.reject(
-        _chunkIZEVYMJKjs.createHwkError.call(void 0, {
+        _chunkZ3IH25KVjs.createHwkError.call(void 0, {
           code: 10005 /* UserAborted */,
           message: "Device selection was cancelled",
           _tag: UI_REQUEST_CANCELLED_TAG
@@ -177,4 +177,4 @@ var UiRequestRegistry = class {
 
 
 exports.UI_EVENT = UI_EVENT; exports.UI_REQUEST = UI_REQUEST; exports.UI_RESPONSE = UI_RESPONSE; exports.UI_REQUEST_DEFAULT_TIMEOUT_MS = UI_REQUEST_DEFAULT_TIMEOUT_MS; exports.UI_REQUEST_PREEMPTED_TAG = UI_REQUEST_PREEMPTED_TAG; exports.UI_REQUEST_CANCELLED_TAG = UI_REQUEST_CANCELLED_TAG; exports.UI_REQUEST_TIMEOUT_TAG = UI_REQUEST_TIMEOUT_TAG; exports.UiRequestRegistry = UiRequestRegistry;
-//# sourceMappingURL=chunk-RRCFH7X6.js.map
+//# sourceMappingURL=chunk-S7X2HM7P.js.map

package/dist/chunk-S7X2HM7P.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/hardware-js-sdk/hardware-js-sdk/packages/hwk-adapter-core/dist/chunk-S7X2HM7P.js","../src/events/ui-request.ts","../src/utils/UiRequestRegistry.ts"],"names":[],"mappings":"AAAA;AACE;AACF,sDAA4B;AAC5B;AACA;ACFO,IAAM,SAAA,EAAW,UAAA;AAEjB,IAAM,WAAA,EAAa;AAAA,EACxB,WAAA,EAAa,gBAAA;AAAA,EACb,kBAAA,EAAoB,uBAAA;AAAA;AAAA;AAAA,EAGpB,4BAAA,EAA8B,iCAAA;AAAA,EAC9B,cAAA,EAAgB,mBAAA;AAAA,EAChB,kBAAA,EAAoB,uBAAA;AAAA,EACpB,eAAA,EAAiB,oBAAA;AAAA,EACjB,yBAAA,EAA2B,8BAAA;AAAA,EAC3B,qBAAA,EAAuB,0BAAA;AAAA,EACvB,2BAAA,EAA6B,gCAAA;AAAA,EAC7B,qBAAA,EAAuB,0BAAA;AAAA,EACvB,sBAAA,EAAwB,2BAAA;AAAA;AAAA;AAAA,EAGxB,8BAAA,EAAgC,mCAAA;AAAA;AAAA;AAAA,EAGhC,mBAAA,EAAqB,wBAAA;AAAA,EACrB,kBAAA,EAAoB,uBAAA;AAAA,EACpB,0BAAA,EAA4B,+BAAA;AAAA,EAC5B,eAAA,EAAiB,UAAA;AAAA,EACjB,eAAA,EAAiB,oBAAA;AAAA,EACjB,iBAAA,EAAmB,sBAAA;AAAA,EACnB,YAAA,EAAc;AAChB,CAAA;AAEO,IAAM,YAAA,EAAc;AAAA,EACzB,WAAA,EAAa,aAAA;AAAA,EACb,kBAAA,EAAoB,oBAAA;AAAA,EACpB,mBAAA,EAAqB,qBAAA;AAAA,EACrB,qBAAA,EAAuB,uBAAA;AAAA,EACvB,2BAAA,EAA6B,6BAAA;AAAA,EAC7B,sBAAA,EAAwB,wBAAA;AAAA,EACxB,yBAAA,EAA2B,2BAAA;AAAA,EAC3B,8BAAA,EAAgC,gCAAA;AAAA,EAChC,mBAAA,EAAqB,qBAAA;AAAA,EACrB,kBAAA,EAAoB,oBAAA;AAAA,EACpB,0BAAA,EAA4B,4BAAA;AAAA,EAC5B,MAAA,EAAQ;AACV,CAAA;ADEA;AACA;AE5CO,IAAM,8BAAA,EAAgC,GAAA;AAE7C,IAAM,oBAAA,EAA8C;AAAA,EAClD,CAAC,WAAA,CAAY,WAAW,CAAA,EAAG,UAAA,CAAW,WAAA;AAAA,EACtC,CAAC,WAAA,CAAY,kBAAkB,CAAA,EAAG,UAAA,CAAW,kBAAA;AAAA,EAC7C,CAAC,WAAA,CAAY,qBAAqB,CAAA,EAAG,UAAA,CAAW,qBAAA;AAAA,EAChD,CAAC,WAAA,CAAY,2BAA2B,CAAA,EAAG,UAAA,CAAW,2BAAA;AAAA,EACtD,CAAC,WAAA,CAAY,sBAAsB,CAAA,EAAG,UAAA,CAAW,sBAAA;AAAA,EACjD,CAAC,WAAA,CAAY,yBAAyB,CAAA,EAAG,UAAA,CAAW,yBAAA;AAAA,EACpD,CAAC,WAAA,CAAY,8BAA8B,CAAA,EAAG,UAAA,CAAW,8BAAA;AAAA,EACzD,CAAC,WAAA,CAAY,mBAAmB,CAAA,EAAG,UAAA,CAAW,mBAAA;AAAA,EAC9C,CAAC,WAAA,CAAY,kBAAkB,CAAA,EAAG,UAAA,CAAW,kBAAA;AAAA,EAC7C,CAAC,WAAA,CAAY,0BAA0B,CAAA,EAAG,UAAA,CAAW;AAAA;AAEvD,CAAA;AAEO,IAAM,yBAAA,EAA2B,oBAAA;AACjC,IAAM,yBAAA,EAA2B,oBAAA;AACjC,IAAM,uBAAA,EAAyB,kBAAA;AAEtC,IAAI,gBAAA,EAAkB,CAAA;AAmBf,IAAM,kBAAA,EAAN,MAAwB;AAAA,EAAxB,WAAA,CAAA,EAAA;AACL,IAAA,IAAA,CAAQ,QAAA,kBAAU,IAAI,GAAA,CAA0B,CAAA;AAAA,EAAA;AAAA,EAEhD,eAAA,CAAA,EAA0B;AACxB,IAAA,gBAAA,GAAmB,CAAA;AACnB,IAAA,OAAO,CAAA,OAAA,EAAU,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,CAAA,EAAI,eAAe,CAAA,CAAA;AAChD,EAAA;AAKc,EAAA;AACiC,IAAA;AAC/B,IAAA;AACe,MAAA;AACI,MAAA;AACtB,MAAA;AACgC,QAAA;AAC/B,UAAA;AACP,QAAA;AACH,MAAA;AACF,IAAA;AAEwC,IAAA;AAEG,IAAA;AACV,MAAA;AACM,QAAA;AACF,UAAA;AAC/B,UAAA;AACyC,YAAA;AAC/B,cAAA;AACP,YAAA;AACH,UAAA;AACF,QAAA;AACU,MAAA;AAEkB,MAAA;AACR,QAAA;AACpB,QAAA;AACA,QAAA;AACA,QAAA;AACD,MAAA;AACF,IAAA;AACH,EAAA;AAEsD,EAAA;AACd,IAAA;AACL,IAAA;AACC,MAAA;AACL,QAAA;AACY,MAAA;AACZ,QAAA;AAC3B,MAAA;AACF,IAAA;AACkB,IAAA;AAEwB,IAAA;AAC9B,IAAA;AAGoB,IAAA;AAIe,IAAA;AAChB,IAAA;AACL,MAAA;AACO,MAAA;AACzB,MAAA;AACW,QAAA;AACb,UAAA;AACS,UAAA;AACH,UAAA;AACP,QAAA;AACH,MAAA;AACA,MAAA;AACF,IAAA;AAEwB,IAAA;AACO,IAAA;AACV,IAAA;AACvB,EAAA;AAEuD,EAAA;AACpC,IAAA;AAC2B,MAAA;AAC9B,MAAA;AACyB,MAAA;AACb,MAAA;AACO,MAAA;AACzB,MAAA;AACmC,QAAA;AAC/B,UAAA;AACP,QAAA;AACH,MAAA;AACA,MAAA;AACF,IAAA;AAE0C,IAAA;AAChB,MAAA;AAClB,MAAA;AACuC,QAAA;AACnC,UAAA;AACP,QAAA;AACH,MAAA;AACF,IAAA;AACmB,IAAA;AACrB,EAAA;AAEc,EAAA;AACA,IAAA;AACd,EAAA;AAE0C,EAAA;AACC,IAAA;AACd,IAAA;AAC7B,EAAA;AACF;AFOmD;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/work/hardware-js-sdk/hardware-js-sdk/packages/hwk-adapter-core/dist/chunk-S7X2HM7P.js","sourcesContent":[null,"import type { QrResponseData } from '../types/qr';\n\nexport const UI_EVENT = 'UI_EVENT';\n\nexport const UI_REQUEST = {\n  REQUEST_PIN: 'ui-request-pin',\n  REQUEST_PASSPHRASE: 'ui-request-passphrase',\n  // One-way UI notification: device is waiting for passphrase entry on-device.\n  // The prompt response path remains RECEIVE_PASSPHRASE with passphraseOnDevice=true.\n  REQUEST_PASSPHRASE_ON_DEVICE: 'ui-request-passphrase-on-device',\n  REQUEST_BUTTON: 'ui-request-button',\n  REQUEST_QR_DISPLAY: 'ui-request-qr-display',\n  REQUEST_QR_SCAN: 'ui-request-qr-scan',\n  REQUEST_DEVICE_PERMISSION: 'ui-request-device-permission',\n  REQUEST_SELECT_DEVICE: 'ui-request-select-device',\n  REQUEST_SAVE_DEVICE_BINDING: 'ui-request-save-device-binding',\n  DEVICE_BINDING_STATUS: 'ui-device-binding-status',\n  REQUEST_DEVICE_CONNECT: 'ui-request-device-connect',\n  // Ledger BTC App: account index >= 100 requires display=true. Adapter asks\n  // the user once per session before promoting the call.\n  REQUEST_BTC_HIGH_INDEX_CONFIRM: 'ui-request-btc-high-index-confirm',\n  // Required app is not installed; with autoInstallApp on, ask the user\n  // whether to install it before retrying the operation.\n  REQUEST_INSTALL_APP: 'ui-request-install-app',\n  REQUEST_PREEMPTION: 'ui-request-preemption',\n  REQUEST_TREZOR_THP_PAIRING: 'ui-request-trezor-thp-pairing',\n  CLOSE_UI_WINDOW: 'ui-close',\n  DEVICE_PROGRESS: 'ui-device_progress',\n  FIRMWARE_PROGRESS: 'ui-firmware-progress',\n  FIRMWARE_TIP: 'ui-firmware-tip',\n} as const;\n\nexport const UI_RESPONSE = {\n  RECEIVE_PIN: 'receive-pin',\n  RECEIVE_PASSPHRASE: 'receive-passphrase',\n  RECEIVE_QR_RESPONSE: 'receive-qr-response',\n  RECEIVE_SELECT_DEVICE: 'receive-select-device',\n  RECEIVE_SAVE_DEVICE_BINDING: 'receive-save-device-binding',\n  RECEIVE_DEVICE_CONNECT: 'receive-device-connect',\n  RECEIVE_DEVICE_PERMISSION: 'receive-device-permission',\n  RECEIVE_BTC_HIGH_INDEX_CONFIRM: 'receive-btc-high-index-confirm',\n  RECEIVE_INSTALL_APP: 'receive-install-app',\n  RECEIVE_PREEMPTION: 'receive-preemption',\n  RECEIVE_TREZOR_THP_PAIRING: 'receive-trezor-thp-pairing',\n  CANCEL: 'cancel',\n} as const;\n\nexport type DevicePermissionDeniedReason =\n  | 'bluetoothTurnedOff'\n  | 'permissionDenied'\n  | (string & Record<never, never>);\n\nexport type DevicePermissionResponse = {\n  granted: boolean;\n  reason?: DevicePermissionDeniedReason;\n  message?: string;\n};\n\n/**\n * Why a host refused to persist a binding.\n * - `mismatch`: the selected device is not the one this operation belongs to —\n *   a user-facing outcome, surfaced as `DeviceMismatch`.\n * - `skipped`: the host had nothing to bind (no record for this call). A host\n *   contract problem, not something the user did.\n */\nexport type SaveDeviceBindingDeclineReason = 'mismatch' | 'skipped';\n\nexport type UiResponseEvent =\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_SAVE_DEVICE_BINDING;\n      payload: {\n        requestId: string;\n        saved: boolean;\n        reason?: SaveDeviceBindingDeclineReason;\n      };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_PIN;\n      payload: string;\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_PASSPHRASE;\n      payload: {\n        value: string;\n        passphraseOnDevice?: boolean;\n        save?: boolean;\n      };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_QR_RESPONSE;\n      payload: QrResponseData;\n    }\n  | {\n      // sdkConnectId echoes one of the DeviceInfo.connectId values emitted in\n      // the REQUEST_SELECT_DEVICE event's `devices` list. Scope is the current\n      // search session; may be ephemeral (e.g. Ledger USB DMK UUID).\n      type: typeof UI_RESPONSE.RECEIVE_SELECT_DEVICE;\n      payload: { requestId?: string } & (\n        | { sdkConnectId: string; cancelled?: false }\n        | { cancelled: true }\n      );\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_DEVICE_CONNECT;\n      payload: { confirmed: boolean };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_DEVICE_PERMISSION;\n      payload: DevicePermissionResponse;\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_BTC_HIGH_INDEX_CONFIRM;\n      payload: { confirmed: boolean };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_INSTALL_APP;\n      payload: { confirmed: boolean };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_PREEMPTION;\n      payload: { confirmed: boolean };\n    }\n  | {\n      type: typeof UI_RESPONSE.RECEIVE_TREZOR_THP_PAIRING;\n      payload: {\n        selectedMethod?: number | string;\n        tag?: string;\n      };\n    }\n  | {\n      type: typeof UI_RESPONSE.CANCEL;\n      payload?: undefined;\n    };\n","import { UI_REQUEST, UI_RESPONSE } from '../events/ui-request';\nimport { createHwkError, HardwareErrorCode } from '../types/errors';\n\n/** 10 min — every UI request is human-in-the-loop; bias toward \"wait long\". */\nexport const UI_REQUEST_DEFAULT_TIMEOUT_MS = 600_000;\n\nconst RESPONSE_TO_REQUEST: Record<string, string> = {\n  [UI_RESPONSE.RECEIVE_PIN]: UI_REQUEST.REQUEST_PIN,\n  [UI_RESPONSE.RECEIVE_PASSPHRASE]: UI_REQUEST.REQUEST_PASSPHRASE,\n  [UI_RESPONSE.RECEIVE_SELECT_DEVICE]: UI_REQUEST.REQUEST_SELECT_DEVICE,\n  [UI_RESPONSE.RECEIVE_SAVE_DEVICE_BINDING]: UI_REQUEST.REQUEST_SAVE_DEVICE_BINDING,\n  [UI_RESPONSE.RECEIVE_DEVICE_CONNECT]: UI_REQUEST.REQUEST_DEVICE_CONNECT,\n  [UI_RESPONSE.RECEIVE_DEVICE_PERMISSION]: UI_REQUEST.REQUEST_DEVICE_PERMISSION,\n  [UI_RESPONSE.RECEIVE_BTC_HIGH_INDEX_CONFIRM]: UI_REQUEST.REQUEST_BTC_HIGH_INDEX_CONFIRM,\n  [UI_RESPONSE.RECEIVE_INSTALL_APP]: UI_REQUEST.REQUEST_INSTALL_APP,\n  [UI_RESPONSE.RECEIVE_PREEMPTION]: UI_REQUEST.REQUEST_PREEMPTION,\n  [UI_RESPONSE.RECEIVE_TREZOR_THP_PAIRING]: UI_REQUEST.REQUEST_TREZOR_THP_PAIRING,\n  // RECEIVE_QR_RESPONSE maps to QR_DISPLAY or QR_SCAN — resolved dynamically below.\n};\n\nexport const UI_REQUEST_PREEMPTED_TAG = 'UiRequestPreempted';\nexport const UI_REQUEST_CANCELLED_TAG = 'UiRequestCancelled';\nexport const UI_REQUEST_TIMEOUT_TAG = 'UiRequestTimeout';\n\nlet requestSequence = 0;\n\ntype PendingEntry = {\n  requestId?: string;\n  resolve: (payload: unknown) => void;\n  reject: (error: Error) => void;\n  timer: ReturnType<typeof setTimeout>;\n};\n\n/**\n * Per-type single-slot registry for adapter-level UI requests. A new `wait`\n * of the same type supersedes (rejects) the prior pending entry. With the\n * job queue running globally serially, cross-type collisions don't occur in\n * normal flow — same-type preemption is a defensive measure for callers\n * that fire the same request twice without waiting on the first.\n *\n * Unknown response types are dropped silently so the public `uiResponse`\n * entry never throws.\n */\nexport class UiRequestRegistry {\n  private pending = new Map<string, PendingEntry>();\n\n  createRequestId(): string {\n    requestSequence += 1;\n    return `hwk-ui-${Date.now()}-${requestSequence}`;\n  }\n\n  wait<T = unknown>(\n    requestType: string,\n    options?: { timeoutMs?: number; requestId?: string }\n  ): Promise<T> {\n    const existing = this.pending.get(requestType);\n    if (existing) {\n      clearTimeout(existing.timer);\n      this.pending.delete(requestType);\n      existing.reject(\n        Object.assign(new Error(`UI request '${requestType}' was superseded by a new request`), {\n          _tag: UI_REQUEST_PREEMPTED_TAG,\n        })\n      );\n    }\n\n    const timeoutMs = options?.timeoutMs ?? UI_REQUEST_DEFAULT_TIMEOUT_MS;\n\n    return new Promise<T>((resolve, reject) => {\n      const timer = setTimeout(() => {\n        if (this.pending.get(requestType)?.timer === timer) {\n          this.pending.delete(requestType);\n          reject(\n            Object.assign(new Error(`UI request '${requestType}' timed out after ${timeoutMs}ms`), {\n              _tag: UI_REQUEST_TIMEOUT_TAG,\n            })\n          );\n        }\n      }, timeoutMs);\n\n      this.pending.set(requestType, {\n        requestId: options?.requestId,\n        resolve: resolve as (payload: unknown) => void,\n        reject,\n        timer,\n      });\n    });\n  }\n\n  resolve(responseType: string, payload: unknown): void {\n    let requestType = RESPONSE_TO_REQUEST[responseType];\n    if (responseType === UI_RESPONSE.RECEIVE_QR_RESPONSE) {\n      if (this.pending.has(UI_REQUEST.REQUEST_QR_DISPLAY)) {\n        requestType = UI_REQUEST.REQUEST_QR_DISPLAY;\n      } else if (this.pending.has(UI_REQUEST.REQUEST_QR_SCAN)) {\n        requestType = UI_REQUEST.REQUEST_QR_SCAN;\n      }\n    }\n    if (!requestType) return;\n\n    const entry = this.pending.get(requestType);\n    if (!entry) return;\n\n    const response =\n      payload && typeof payload === 'object'\n        ? (payload as { requestId?: unknown; cancelled?: unknown })\n        : undefined;\n    // A late response must not resolve (or cancel) a newer request of the same type.\n    if (entry.requestId !== undefined && response?.requestId !== entry.requestId) return;\n    if (requestType === UI_REQUEST.REQUEST_SELECT_DEVICE && response?.cancelled === true) {\n      clearTimeout(entry.timer);\n      this.pending.delete(requestType);\n      entry.reject(\n        createHwkError({\n          code: HardwareErrorCode.UserAborted,\n          message: 'Device selection was cancelled',\n          _tag: UI_REQUEST_CANCELLED_TAG,\n        })\n      );\n      return;\n    }\n\n    clearTimeout(entry.timer);\n    this.pending.delete(requestType);\n    entry.resolve(payload);\n  }\n\n  cancel(requestType?: string, requestId?: string): void {\n    if (requestType) {\n      const entry = this.pending.get(requestType);\n      if (!entry) return;\n      if (requestId !== undefined && entry.requestId !== requestId) return;\n      clearTimeout(entry.timer);\n      this.pending.delete(requestType);\n      entry.reject(\n        Object.assign(new Error(`UI request '${requestType}' was cancelled`), {\n          _tag: UI_REQUEST_CANCELLED_TAG,\n        })\n      );\n      return;\n    }\n\n    for (const [type, entry] of this.pending) {\n      clearTimeout(entry.timer);\n      entry.reject(\n        Object.assign(new Error(`UI request '${type}' was cancelled`), {\n          _tag: UI_REQUEST_CANCELLED_TAG,\n        })\n      );\n    }\n    this.pending.clear();\n  }\n\n  reset(): void {\n    this.cancel();\n  }\n\n  hasPending(requestType?: string): boolean {\n    if (requestType) return this.pending.has(requestType);\n    return this.pending.size > 0;\n  }\n}\n"]}

package/dist/{chunk-IZEVYMJK.js → chunk-Z3IH25KV.js}

@@ -18,8 +18,9 @@ var HardwareErrorCode = /* @__PURE__ */ ((HardwareErrorCode2) => {
   HardwareErrorCode2[HardwareErrorCode2["DeviceOneDeviceOnly"] = 10109] = "DeviceOneDeviceOnly";
   HardwareErrorCode2[HardwareErrorCode2["DevicePathForbidden"] = 10110] = "DevicePathForbidden";
   HardwareErrorCode2[HardwareErrorCode2["DeviceBusyInternal"] = 10111] = "DeviceBusyInternal";
-  HardwareErrorCode2[HardwareErrorCode2["InteractionNotFound"] = 10112] = "InteractionNotFound";
-  HardwareErrorCode2[HardwareErrorCode2["InteractionEnded"] = 10113] = "InteractionEnded";
+  HardwareErrorCode2[HardwareErrorCode2["OperationNotFound"] = 10112] = "OperationNotFound";
+  HardwareErrorCode2[HardwareErrorCode2["OperationEnded"] = 10113] = "OperationEnded";
+  HardwareErrorCode2[HardwareErrorCode2["DeviceSearchMismatch"] = 10114] = "DeviceSearchMismatch";
   HardwareErrorCode2[HardwareErrorCode2["FirmwareTooOld"] = 10200] = "FirmwareTooOld";
   HardwareErrorCode2[HardwareErrorCode2["FirmwareUpdateRequired"] = 10201] = "FirmwareUpdateRequired";
   HardwareErrorCode2[HardwareErrorCode2["TransportError"] = 10300] = "TransportError";
@@ -61,9 +62,10 @@ var ORPHAN_ELIGIBLE_ERROR_CODES = [
   10001 /* UserRejected */,
   10100 /* DeviceNotFound */,
   10101 /* DeviceDisconnected */,
-  10112 /* InteractionNotFound */,
-  10113 /* InteractionEnded */,
+  10112 /* OperationNotFound */,
+  10113 /* OperationEnded */,
   10106 /* DeviceMismatch */,
+  10114 /* DeviceSearchMismatch */,
   10107 /* DeviceAppStuck */,
   10109 /* DeviceOneDeviceOnly */,
   10300 /* TransportError */,
@@ -77,8 +79,8 @@ var ORPHAN_ELIGIBLE_ERROR_CODES = [
   10405 /* PassphraseAlwaysOnDevice */
 ];
 var RECOVERY_SCOPES = /* @__PURE__ */ new Set([
+  "call",
   "operation",
-  "interaction",
   "search-target",
   "transport",
   "not-recoverable",
@@ -89,8 +91,8 @@ function isHwkRecoveryHint(value) {
   const { scope } = value;
   return typeof scope === "string" && RECOVERY_SCOPES.has(scope);
 }
+var RECOVERY_CALL = Object.freeze({ scope: "call" });
 var RECOVERY_OPERATION = Object.freeze({ scope: "operation" });
-var RECOVERY_INTERACTION = Object.freeze({ scope: "interaction" });
 var RECOVERY_SEARCH_TARGET = Object.freeze({ scope: "search-target" });
 var RECOVERY_TRANSPORT = Object.freeze({ scope: "transport" });
 var RECOVERY_NOT_RECOVERABLE = Object.freeze({
@@ -129,19 +131,20 @@ function defaultRecoveryForCode(code) {
     case 11202 /* TronSignByHashRequired */:
     case 11300 /* BtcWalletPolicyHmacMismatch */:
     case 11301 /* BtcUnexpectedState */:
-      return RECOVERY_OPERATION;
+      return RECOVERY_CALL;
     case 10100 /* DeviceNotFound */:
     case 10101 /* DeviceDisconnected */:
-    case 10112 /* InteractionNotFound */:
-    case 10113 /* InteractionEnded */:
+    case 10112 /* OperationNotFound */:
+    case 10113 /* OperationEnded */:
     case 10300 /* TransportError */:
     case 10304 /* BlePairingTimeout */:
     case 10306 /* ThpPairingFailed */:
     case 10308 /* ThpPairingRequired */:
     case 10309 /* BleConnectFailed */:
     case 10310 /* BlePairingCancelled */:
-      return RECOVERY_INTERACTION;
+      return RECOVERY_OPERATION;
     case 10106 /* DeviceMismatch */:
+    case 10114 /* DeviceSearchMismatch */:
     case 10109 /* DeviceOneDeviceOnly */:
     case 10307 /* BleBondInvalid */:
       return RECOVERY_SEARCH_TARGET;
@@ -169,6 +172,7 @@ function defaultOriginForCode(code) {
     case 10104 /* DeviceNotInitialized */:
     case 10105 /* DeviceInBootloader */:
     case 10106 /* DeviceMismatch */:
+    case 10114 /* DeviceSearchMismatch */:
     case 10107 /* DeviceAppStuck */:
     case 10110 /* DevicePathForbidden */:
     case 10111 /* DeviceBusyInternal */:
@@ -237,4 +241,4 @@ function createHwkError(payload) {
 
 
 exports.HardwareErrorCode = HardwareErrorCode; exports.ORPHAN_ELIGIBLE_ERROR_CODES = ORPHAN_ELIGIBLE_ERROR_CODES; exports.isHwkRecoveryHint = isHwkRecoveryHint; exports.defaultRecoveryForCode = defaultRecoveryForCode; exports.defaultOriginForCode = defaultOriginForCode; exports.operationMayHaveCompletedParams = operationMayHaveCompletedParams; exports.createHwkError = createHwkError;
-//# sourceMappingURL=chunk-IZEVYMJK.js.map
+//# sourceMappingURL=chunk-Z3IH25KV.js.map

package/dist/chunk-Z3IH25KV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/hardware-js-sdk/hardware-js-sdk/packages/hwk-adapter-core/dist/chunk-Z3IH25KV.js","../src/types/errors.ts"],"names":["HardwareErrorCode"],"mappings":"AAAA;ACwBO,IAAK,kBAAA,kBAAL,CAAA,CAAKA,kBAAAA,EAAAA,GAAL;AAEL,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,cAAA,EAAA,EAAe,GAAA,EAAA,EAAf,cAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,cAAA,EAAA,EAAe,KAAA,EAAA,EAAf,cAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,eAAA,EAAA,EAAgB,KAAA,EAAA,EAAhB,eAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,kBAAA,EAAA,EAAmB,KAAA,EAAA,EAAnB,kBAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,oBAAA,EAAA,EAAqB,KAAA,EAAA,EAArB,oBAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,aAAA,EAAA,EAAc,KAAA,EAAA,EAAd,aAAA;AAGA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,gBAAA,EAAA,EAAiB,KAAA,EAAA,EAAjB,gBAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,oBAAA,EAAA,EAAqB,KAAA,EAAA,EAArB,oBAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,YAAA,EAAA,EAAa,KAAA,EAAA,EAAb,YAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,cAAA,EAAA,EAAe,KAAA,EAAA,EAAf,cAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,sBAAA,EAAA,EAAuB,KAAA,EAAA,EAAvB,sBAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,oBAAA,EAAA,EAAqB,KAAA,EAAA,EAArB,oBAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,gBAAA,EAAA,EAAiB,KAAA,EAAA,EAAjB,gBAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,gBAAA,EAAA,EAAiB,KAAA,EAAA,EAAjB,gBAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,mBAAA,EAAA,EAAoB,KAAA,EAAA,EAApB,mBAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,qBAAA,EAAA,EAAsB,KAAA,EAAA,EAAtB,qBAAA;AAOA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,qBAAA,EAAA,EAAsB,KAAA,EAAA,EAAtB,qBAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,oBAAA,EAAA,EAAqB,KAAA,EAAA,EAArB,oBAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,mBAAA,EAAA,EAAoB,KAAA,EAAA,EAApB,mBAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,gBAAA,EAAA,EAAiB,KAAA,EAAA,EAAjB,gBAAA;AAQA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,sBAAA,EAAA,EAAuB,KAAA,EAAA,EAAvB,sBAAA;AAGA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,gBAAA,EAAA,EAAiB,KAAA,EAAA,EAAjB,gBAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,wBAAA,EAAA,EAAyB,KAAA,EAAA,EAAzB,wBAAA;AAGA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,gBAAA,EAAA,EAAiB,KAAA,EAAA,EAAjB,gBAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,gBAAA,EAAA,EAAiB,KAAA,EAAA,EAAjB,gBAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,uBAAA,EAAA,EAAwB,KAAA,EAAA,EAAxB,uBAAA;AAMA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,wBAAA,EAAA,EAAyB,KAAA,EAAA,EAAzB,wBAAA;AAQA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,mBAAA,EAAA,EAAoB,KAAA,EAAA,EAApB,mBAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,cAAA,EAAA,EAAe,KAAA,EAAA,EAAf,cAAA;AASA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,kBAAA,EAAA,EAAmB,KAAA,EAAA,EAAnB,kBAAA;AAUA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,gBAAA,EAAA,EAAiB,KAAA,EAAA,EAAjB,gBAAA;AAQA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,oBAAA,EAAA,EAAqB,KAAA,EAAA,EAArB,oBAAA;AAUA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,kBAAA,EAAA,EAAmB,KAAA,EAAA,EAAnB,kBAAA;AAQA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,qBAAA,EAAA,EAAsB,KAAA,EAAA,EAAtB,qBAAA;AAGA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,YAAA,EAAA,EAAa,KAAA,EAAA,EAAb,YAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,cAAA,EAAA,EAAe,KAAA,EAAA,EAAf,cAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,oBAAA,EAAA,EAAqB,KAAA,EAAA,EAArB,oBAAA;AAOA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,yBAAA,EAAA,EAA0B,KAAA,EAAA,EAA1B,yBAAA;AAMA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,aAAA,EAAA,EAAc,KAAA,EAAA,EAAd,aAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,0BAAA,EAAA,EAA2B,KAAA,EAAA,EAA3B,0BAAA;AAIA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,iBAAA,EAAA,EAAkB,KAAA,EAAA,EAAlB,iBAAA;AACA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,UAAA,EAAA,EAAW,KAAA,EAAA,EAAX,UAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,WAAA,EAAA,EAAY,KAAA,EAAA,EAAZ,WAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,mBAAA,EAAA,EAAoB,KAAA,EAAA,EAApB,mBAAA;AAWA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,iBAAA,EAAA,EAAkB,KAAA,EAAA,EAAlB,iBAAA;AAKA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,yBAAA,EAAA,EAA0B,IAAA,EAAA,EAA1B,yBAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,2BAAA,EAAA,EAA4B,KAAA,EAAA,EAA5B,2BAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,iBAAA,EAAA,EAAkB,KAAA,EAAA,EAAlB,iBAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,uBAAA,EAAA,EAAwB,KAAA,EAAA,EAAxB,uBAAA;AAIA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,4BAAA,EAAA,EAA6B,KAAA,EAAA,EAA7B,4BAAA;AAIA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,4BAAA,EAAA,EAA6B,KAAA,EAAA,EAA7B,4BAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,yBAAA,EAAA,EAA0B,KAAA,EAAA,EAA1B,yBAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,wBAAA,EAAA,EAAyB,KAAA,EAAA,EAAzB,wBAAA;AAIA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,6BAAA,EAAA,EAA8B,KAAA,EAAA,EAA9B,6BAAA;AAEA,EAAAA,kBAAAA,CAAAA,kBAAAA,CAAA,oBAAA,EAAA,EAAqB,KAAA,EAAA,EAArB,oBAAA;AAvLU,EAAA,OAAAA,kBAAAA;AAAA,CAAA,CAAA,CAAA,kBAAA,GAAA,CAAA,CAAA,CAAA;AAqML,IAAM,4BAAA,EAAwC;AAAA,EACnD,uBAAA;AAAA,EACA,wBAAA;AAAA,EACA,0BAAA;AAAA,EACA,8BAAA;AAAA,EACA,6BAAA;AAAA,EACA,0BAAA;AAAA,EACA,0BAAA;AAAA,EACA,gCAAA;AAAA,EACA,0BAAA;AAAA,EACA,+BAAA;AAAA,EACA,0BAAA;AAAA,EACA,kCAAA;AAAA,EACA,6BAAA;AAAA,EACA,4BAAA;AAAA,EACA,8BAAA;AAAA,EACA,0BAAA;AAAA,EACA,4BAAA;AAAA,EACA,+BAAA;AAAA,EACA;AACF,CAAA;AAuDA,IAAM,gBAAA,kBAAkB,IAAI,GAAA,CAAsB;AAAA,EAChD,MAAA;AAAA,EACA,WAAA;AAAA,EACA,eAAA;AAAA,EACA,WAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACF,CAAC,CAAA;AAEM,SAAS,iBAAA,CAAkB,KAAA,EAA0C;AAC1E,EAAA,GAAA,CAAI,CAAC,MAAA,GAAS,OAAO,MAAA,IAAU,QAAA,EAAU,OAAO,KAAA;AAChD,EAAA,MAAM,EAAE,MAAM,EAAA,EAAI,KAAA;AAClB,EAAA,OAAO,OAAO,MAAA,IAAU,SAAA,GAAY,eAAA,CAAgB,GAAA,CAAI,KAAyB,CAAA;AACnF;AAEA,IAAM,cAAA,EAAiC,MAAA,CAAO,MAAA,CAAO,EAAE,KAAA,EAAO,OAAO,CAAC,CAAA;AACtE,IAAM,mBAAA,EAAsC,MAAA,CAAO,MAAA,CAAO,EAAE,KAAA,EAAO,YAAY,CAAC,CAAA;AAChF,IAAM,uBAAA,EAA0C,MAAA,CAAO,MAAA,CAAO,EAAE,KAAA,EAAO,gBAAgB,CAAC,CAAA;AACxF,IAAM,mBAAA,EAAsC,MAAA,CAAO,MAAA,CAAO,EAAE,KAAA,EAAO,YAAY,CAAC,CAAA;AAChF,IAAM,yBAAA,EAA4C,MAAA,CAAO,MAAA,CAAO;AAAA,EAC9D,KAAA,EAAO;AACT,CAAC,CAAA;AACD,IAAM,iBAAA,EAAoC,MAAA,CAAO,MAAA,CAAO,EAAE,KAAA,EAAO,UAAU,CAAC,CAAA;AAOrE,SAAS,sBAAA,CAAuB,IAAA,EAA0C;AAC/E,EAAA,OAAA,CAAQ,IAAA,EAAM;AAAA,IACZ,KAAK,wBAAA;AAAA,IACL,KAAK,uBAAA;AAAA,IACL,KAAK,sBAAA;AAAA,IACL,KAAK,wBAAA;AAAA,IACL,KAAK,gCAAA;AAAA,IACL,KAAK,8BAAA;AAAA,IACL,KAAK,0BAAA;AAAA,IACL,KAAK,8BAAA;AAAA,IACL,KAAK,wBAAA;AAAA,IACL,KAAK,sBAAA;AAAA,IACL,KAAK,wBAAA;AAAA,IACL,KAAK,8BAAA;AAAA,IACL,KAAK,mCAAA;AAAA,IACL,KAAK,uBAAA;AAAA,IACL,KAAK,0BAAA;AAAA,IACL,KAAK,kCAAA;AAAA,IACL,KAAK,2BAAA;AAAA,IACL,KAAK,oBAAA;AAAA,IACL,KAAK,qBAAA;AAAA,IACL,KAAK,6BAAA;AAAA,IACL,KAAK,kCAAA;AAAA,IACL,KAAK,qCAAA;AAAA,IACL,KAAK,2BAAA;AAAA,IACL,KAAK,iCAAA;AAAA,IACL,KAAK,sCAAA;AAAA,IACL,KAAK,sCAAA;AAAA,IACL,KAAK,mCAAA;AAAA,IACL,KAAK,kCAAA;AAAA,IACL,KAAK,uCAAA;AAAA,IACL,KAAK,8BAAA;AACH,MAAA,OAAO,aAAA;AAAA,IACT,KAAK,0BAAA;AAAA,IACL,KAAK,8BAAA;AAAA,IACL,KAAK,6BAAA;AAAA,IACL,KAAK,0BAAA;AAAA,IACL,KAAK,0BAAA;AAAA,IACL,KAAK,6BAAA;AAAA,IACL,KAAK,4BAAA;AAAA,IACL,KAAK,8BAAA;AAAA,IACL,KAAK,4BAAA;AAAA,IACL,KAAK,+BAAA;AACH,MAAA,OAAO,kBAAA;AAAA,IACT,KAAK,0BAAA;AAAA,IACL,KAAK,gCAAA;AAAA,IACL,KAAK,+BAAA;AAAA,IACL,KAAK,0BAAA;AACH,MAAA,OAAO,sBAAA;AAAA,IACT,KAAK,0BAAA;AAAA,IACL,KAAK,iCAAA;AAAA,IACL,KAAK,kCAAA;AAAA,IACL,KAAK,2BAAA;AACH,MAAA,OAAO,kBAAA;AAAA,IACT,KAAK,yBAAA;AAAA,IACL,KAAK,8BAAA;AAAA,IACL,KAAK,6BAAA;AAAA,IACL,KAAK,+BAAA;AACH,MAAA,OAAO,wBAAA;AAAA,IACT,KAAK,sBAAA;AAAA,IACL,KAAK,4BAAA;AAAA,IACL,OAAA;AACE,MAAA,OAAO,gBAAA;AAAA,EACX;AACF;AAYO,SAAS,oBAAA,CAAqB,IAAA,EAAqD;AAGxF,EAAA,GAAA,CAAI,KAAA,GAAQ,IAAA,EAAQ,OAAO,QAAA;AAC3B,EAAA,OAAA,CAAQ,IAAA,EAAM;AAAA,IACZ,KAAK,wBAAA;AAAA,IACL,KAAK,wBAAA;AAAA,IACL,KAAK,gCAAA;AAAA,IACL,KAAK,8BAAA;AAAA,IACL,KAAK,0BAAA;AAAA,IACL,KAAK,gCAAA;AAAA,IACL,KAAK,0BAAA;AAAA,IACL,KAAK,+BAAA;AAAA,IACL,KAAK,8BAAA;AAAA,IACL,KAAK,6BAAA;AAAA,IACL,KAAK,0BAAA;AAAA,IACL,KAAK,kCAAA;AAAA,IACL,KAAK,sBAAA;AAAA,IACL,KAAK,uBAAA;AAAA,IACL,KAAK,8BAAA;AAAA,IACL,KAAK,mCAAA;AAAA,IACL,KAAK,4BAAA;AAAA,IACL,KAAK,8BAAA;AAAA,IACL,KAAK,oBAAA;AAAA,IACL,KAAK,2BAAA;AAAA,IACL,KAAK,qBAAA;AAAA,IACL,KAAK,6BAAA;AACH,MAAA,OAAO,QAAA;AAAA,IACT,KAAK,0BAAA;AAAA,IACL,KAAK,8BAAA;AAAA,IACL,KAAK,0BAAA;AAAA,IACL,KAAK,0BAAA;AAAA,IACL,KAAK,iCAAA;AAAA,IACL,KAAK,6BAAA;AAAA,IACL,KAAK,wBAAA;AAAA,IACL,KAAK,0BAAA;AAAA,IACL,KAAK,4BAAA;AACH,MAAA,OAAO,WAAA;AAAA,IACT,KAAK,kCAAA;AAAA,IACL,KAAK,uBAAA;AAAA,IACL,KAAK,yBAAA;AAAA,IACL,KAAK,8BAAA;AAAA,IACL,KAAK,wBAAA;AAAA,IACL,KAAK,+BAAA;AAAA,IACL,KAAK,2BAAA;AAAA,IACL,KAAK,+BAAA;AACH,MAAA,OAAO,MAAA;AAAA,IACT,OAAA;AACE,MAAA,OAAO,KAAA,CAAA;AAAA,EACX;AACF;AAsBO,SAAS,+BAAA,CACd,MAAA,EACA,MAAA,EACkC;AAClC,EAAA,OAAO;AAAA,IACL,GAAG,MAAA;AAAA,IACH,yBAAA,EAA2B,IAAA;AAAA,IAC3B;AAAA,EACF,CAAA;AACF;AAqBO,SAAS,cAAA,CAAe,OAAA,EAAqC;AAClE,EAAA,MAAM,SAAA,mBAAW,OAAA,CAAQ,QAAA,UAAY,sBAAA,CAAuB,OAAA,CAAQ,IAAI,GAAA;AACxE,EAAA,OAAO,MAAA,CAAO,MAAA,CAAO,IAAI,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG;AAAA,IAC/C,IAAA,EAAM,OAAA,CAAQ,IAAA;AAAA,IACd,GAAI,OAAA,CAAQ,OAAA,IAAW,KAAA,EAAA,GAAa,EAAE,MAAA,EAAQ,OAAA,CAAQ,OAAO,CAAA;AAAA,IAC7D,QAAA;AAAA,IACA,GAAI,OAAA,CAAQ,KAAA,IAAS,KAAA,EAAA,GAAa,EAAE,IAAA,EAAM,OAAA,CAAQ,KAAK,CAAA;AAAA,IACvD,GAAI,OAAA,CAAQ,QAAA,IAAY,KAAA,EAAA,GAAa,EAAE,OAAA,EAAS,OAAA,CAAQ,QAAQ,CAAA;AAAA,IAChE,GAAI,OAAA,CAAQ,OAAA,IAAW,KAAA,EAAA,GAAa,EAAE,MAAA,EAAQ,OAAA,CAAQ,OAAO;AAAA,EAC/D,CAAC,CAAA;AACH;ADxRA;AACA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACF,kYAAC","file":"/home/runner/work/hardware-js-sdk/hardware-js-sdk/packages/hwk-adapter-core/dist/chunk-Z3IH25KV.js","sourcesContent":[null,"/**\n * HWK HardwareErrorCode — independent namespace from the legacy\n * `@onekeyfe/shared` HardwareErrorCode (which occupies 0-902).\n *\n * All HWK codes are 5-digit (>= 10000) so the two tables never collide\n * even if either side grows. Each sub-category gets a 100-slot block.\n *\n *   10000-10099  Generic / cross-cutting primitives\n *   10100-10199  Device state\n *   10200-10299  Firmware\n *   10300-10399  Transport + OS-level permission\n *   10400-10499  PIN / Passphrase\n *   10500-10599  App lifecycle (wrong app, not open, too old)\n *   10600-10699  Payload / framing limits (adapter-level)\n *   10700-10999  RESERVED — future adapter-level categories\n *\n *   11000-11099  EVM APDU (reactive mapping)\n *   11100-11199  Solana APDU\n *   11200-11299  Tron APDU\n *   11300-11399  BTC APDU\n *   11400-11999  RESERVED — future chain APDU blocks (100 per chain)\n *\n *   12000-99999  RESERVED — future major categories\n */\nexport enum HardwareErrorCode {\n  // --- 10000s Generic ---\n  UnknownError = 10000,\n  UserRejected = 10001,\n  InvalidParams = 10002,\n  OperationTimeout = 10003,\n  MethodNotSupported = 10004,\n  /** User dismissed in-app cancel UI. Distinct from UserRejected (on-device). */\n  UserAborted = 10005,\n\n  // --- 10100s Device state ---\n  DeviceNotFound = 10100,\n  DeviceDisconnected = 10101,\n  DeviceBusy = 10102,\n  DeviceLocked = 10103,\n  DeviceNotInitialized = 10104,\n  DeviceInBootloader = 10105,\n  DeviceMismatch = 10106,\n  /** Chain app wedged (e.g. Ledger BTC 0x6901). User must exit app on device. */\n  DeviceAppStuck = 10107,\n  /** Vendor (Ledger / Trezor) doesn't support the chain at all. */\n  ChainNotSupported = 10108,\n  /** Current operation supports only one connected device. */\n  DeviceOneDeviceOnly = 10109,\n  /**\n   * The device rejected the requested derivation path (Trezor Failure_DataError\n   * \"Forbidden key path\") — the path is non-standard or its index is outside the\n   * range the device's safety checks allow. Distinct from ChainNotSupported\n   * (whole chain) and MethodNotSupported (the operation/method itself).\n   */\n  DevicePathForbidden = 10110,\n  /** Busy with our own in-flight request (queue guard / firmware Failure_Busy), not another app — wait and retry, don't close other apps. */\n  DeviceBusyInternal = 10111,\n  /** The supplied runtime-only operation id is unknown to this adapter instance. */\n  OperationNotFound = 10112,\n  /** The supplied operation ended and can never be resumed. */\n  OperationEnded = 10113,\n  /**\n   * Discovery found devices but none of them is the wallet being looked for.\n   * Milder than DeviceMismatch: nothing about the known wallet has changed, the\n   * user simply has the wrong unit connected. DeviceMismatch stays reserved for\n   * reaching the expected device and finding a different identity on it, which\n   * can mean it was wiped, reseeded, or swapped.\n   */\n  DeviceSearchMismatch = 10114,\n\n  // --- 10200s Firmware ---\n  FirmwareTooOld = 10200,\n  FirmwareUpdateRequired = 10201,\n\n  // --- 10300s Transport + permission ---\n  TransportError = 10300,\n  BridgeNotFound = 10301,\n  TransportNotAvailable = 10302,\n  /**\n   * OS-level permission (Bluetooth / USB / etc.) — denied, blocked,\n   * unavailable, or dismissed. Consumers surface a single \"please grant\n   * permission\" toast and let the user retry manually.\n   */\n  DevicePermissionDenied = 10303,\n  /**\n   * BLE SMP pairing did not complete within the GATT bonding window.\n   * GATT connected but the device didn't acknowledge SMP — typically\n   * because the user didn't confirm the passkey on the device, or the\n   * device went out of range mid-pairing. Distinct from OperationTimeout\n   * (generic) and from DeviceLocked (Secure Element actually locked).\n   */\n  BlePairingTimeout = 10304,\n  /** Remote network failure reaching a vendor's servers (HTTP/WS). Distinct from TransportError (local USB/BLE link). */\n  NetworkError = 10305,\n  /**\n   * Host-managed pairing handshake failed (Trezor THP). The device rejected the\n   * pairing exchange — e.g. CodeEntry: the user mistyped the code shown on the\n   * device, so the CPace tag didn't match (\"Unexpected Code Entry Tag\").\n   * Recoverable: the user re-pairs and re-enters the code. Distinct from\n   * BlePairingTimeout (BLE SMP bonding window) and UserRejected (on-device\n   * reject button).\n   */\n  ThpPairingFailed = 10306,\n  /**\n   * The OS-level BLE bond is stale/invalid, so the device rejected link\n   * encryption: Android GATT_INSUF_AUTHENTICATION (status 5) or iOS \"Peer\n   * removed pairing information\". Happens after the device is wiped/re-flashed\n   * or unpaired elsewhere while the host still holds an old bond. The SDK cannot\n   * remove an OS bond — the user must forget the device in system Bluetooth\n   * settings and re-pair. Distinct from BlePairingTimeout (SMP window) and\n   * ThpPairingFailed (THP code mismatch).\n   */\n  BleBondInvalid = 10307,\n  /**\n   * A stored THP pairing credential was rejected by the device during the\n   * handshake (device returned completion `state=0`), so the autoconnect session\n   * could not be established. The SDK discards the stale credential; recovery is\n   * a fresh pairing. Distinct from ThpPairingFailed (user mistyped the code\n   * during an *active* pairing) and BleBondInvalid (OS-level BLE bond).\n   */\n  ThpPairingRequired = 10308,\n  /**\n   * Generic BLE connect failure where the OS dropped the specific reason. On\n   * macOS the noble native binding hardcodes \"connection failed\" (and a connect\n   * timeout) and discards the CoreBluetooth NSError, so the SDK cannot tell a\n   * stale bond from an out-of-range / unresponsive device. Surfaced as a\n   * generic \"couldn't connect — check the device, re-pair if paired before\".\n   * Distinct from BleBondInvalid (a *known* stale-bond signal, iOS/Android only)\n   * and BlePairingTimeout (the SMP bonding window).\n   */\n  BleConnectFailed = 10309,\n  /**\n   * The user cancelled BLE pairing from the app while the connect was still\n   * waiting on the OS pairing window. Not a failure to report — the flow ends\n   * because they asked it to. Distinct from UserAborted (generic in-app cancel)\n   * so the pairing UI can close quietly instead of surfacing a connect error,\n   * and from BlePairingTimeout (the SMP window elapsed on its own).\n   */\n  BlePairingCancelled = 10310,\n\n  // --- 10400s PIN / Passphrase ---\n  PinInvalid = 10400,\n  PinCancelled = 10401,\n  PassphraseRejected = 10402,\n  /**\n   * The passphrase entered produced a different wallet (`passphraseState`) than\n   * the one the caller asked to operate on. Trezor-only: the host pins a wallet\n   * by its derived state and the SDK refuses to sign with a mismatched\n   * passphrase session. Surfaced by TrezorAdapter.getPassphraseState.\n   */\n  PassphraseStateMismatch = 10403,\n  /**\n   * The two new-PIN entries did not match during set/change PIN. Only host-input\n   * models (Trezor Model One matrix) surface this; on-device-input models show\n   * the mismatch on the device and never return it.\n   */\n  PinMismatch = 10404,\n  /** Standard wallet is unavailable while Trezor enforces on-device passphrase entry. */\n  PassphraseAlwaysOnDevice = 10405,\n\n  // --- 10500s App lifecycle ---\n  /** Chain app NOT INSTALLED on device. User must install via Ledger Live. */\n  AppNotInstalled = 10500,\n  WrongApp = 10501,\n  /** 0x911c Command code not supported — app predates current SDK. */\n  AppTooOld = 10502,\n  /** Not enough free storage for install/update; user must uninstall apps first. */\n  DeviceOutOfMemory = 10503,\n\n  // --- 10600s Payload / framing limits ---\n  /**\n   * The call payload exceeds a transport's fixed framing capacity (e.g.\n   * Keystone USB's ~12.5KB per-request cap — 200 frames of 64 bytes). Distinct\n   * from a generic TransportError: the request never reached the device, and\n   * retrying with the same payload over the same transport will fail the same\n   * way. Callers should route the call over a different channel (e.g. Keystone\n   * QR) or reduce the payload (e.g. a smaller PSBT) instead of retrying as-is.\n   */\n  PayloadTooLarge = 10600,\n\n  // --- 11000s EVM (Ledger Ethereum App) APDU-specific ---\n  /** 0x6a80 Invalid data — observed on blindSignTransactionFallback when the\n   *  user has not enabled Blind signing on the device. */\n  EvmBlindSigningRequired = 11000,\n  /** 0x6984 Plugin not installed */\n  EvmClearSignPluginMissing = 11001,\n  /** 0x6a84 Insufficient memory (typical on Nano S with large calldata) */\n  EvmDataTooLarge = 11002,\n  /** 0x6501 TransactionType not supported (app too old for EIP-1559 / blob / 7702) */\n  EvmTxTypeNotSupported = 11003,\n\n  // --- 11100s Solana ---\n  /** 0x6808 Blind signing disabled for this instruction. */\n  SolanaBlindSigningRequired = 11100,\n\n  // --- 11200s Tron ---\n  /** 0x6a8d Custom Contracts setting disabled (blocks TRC-20 etc.). */\n  TronCustomContractRequired = 11200,\n  /** 0x6a8b Transactions Data setting disabled. */\n  TronDataSigningRequired = 11201,\n  /** 0x6a8c Sign by Hash setting disabled (hash-signing fallback). */\n  TronSignByHashRequired = 11202,\n\n  // --- 11300s BTC ---\n  /** 0xb008 Wallet policy HMAC mismatch or not registered. */\n  BtcWalletPolicyHmacMismatch = 11300,\n  /** 0xb007 Aborted due to unexpected state (malformed PSBT / missing UTXO). */\n  BtcUnexpectedState = 11301,\n}\n\n/**\n * Device-level failures the SDK cannot self-recover from — affect the entire\n * batch (vs per-chain failures like AppNotInstalled / WrongApp which soft-\n * skip in onboarding). Combined with `accounts.length === 0`, signals\n * genuine orphan. Also reused as the batch-abort whitelist for HWK.\n * Single source of truth.\n *\n * UserRejected (device-side reject) is included: pressing reject is an\n * explicit \"I don't consent\" — continuing the batch to ask again on the\n * next chain is harassment, not helpful.\n */\nexport const ORPHAN_ELIGIBLE_ERROR_CODES: number[] = [\n  HardwareErrorCode.UserAborted,\n  HardwareErrorCode.UserRejected,\n  HardwareErrorCode.DeviceNotFound,\n  HardwareErrorCode.DeviceDisconnected,\n  HardwareErrorCode.OperationNotFound,\n  HardwareErrorCode.OperationEnded,\n  HardwareErrorCode.DeviceMismatch,\n  HardwareErrorCode.DeviceSearchMismatch,\n  HardwareErrorCode.DeviceAppStuck,\n  HardwareErrorCode.DeviceOneDeviceOnly,\n  HardwareErrorCode.TransportError,\n  HardwareErrorCode.DevicePermissionDenied,\n  HardwareErrorCode.BlePairingTimeout,\n  HardwareErrorCode.ThpPairingFailed,\n  HardwareErrorCode.ThpPairingRequired,\n  HardwareErrorCode.BleBondInvalid,\n  HardwareErrorCode.BleConnectFailed,\n  HardwareErrorCode.BlePairingCancelled,\n  HardwareErrorCode.PassphraseAlwaysOnDevice,\n];\n\n// ---------------------------------------------------------------------------\n// Standard throwable for HWK adapters\n// ---------------------------------------------------------------------------\n\n/**\n * Where a failure came from. The distinction the numeric code ranges cannot\n * make reliably (UserRejected=10001 sits in the general range but is the\n * device speaking; DevicePermissionDenied=10303 sits in the transport range\n * but is the browser speaking), and the one recovery logic actually needs:\n *\n * - `device`    the firmware ANSWERED: rejection, locked screen, wrong\n *               wallet, bad PIN. It is a result, not a malfunction — surface\n *               it to the user verbatim; never auto-reconnect, never switch\n *               channels, never drop a healthy session over it.\n * - `transport` the pipe failed: cable pulled, bus reset, bridge gone.\n *               Reconnecting or falling back to another channel is fair game.\n * - `host`      the host environment refused: browser permission, picker\n *               dismissed, bad parameters. Fix the environment, not the link.\n *\n * Optional on purpose: a mapper that cannot tell MUST leave it unset rather\n * than guess — consumers fall back to their existing code-based tables, so an\n * unset origin degrades to today's behavior instead of mislabeling.\n */\nexport type HwkErrorOrigin = 'device' | 'transport' | 'host';\n\n/**\n * Smallest runtime resource a consumer must replace before retrying a failed\n * operation. This is connection-lifecycle metadata, not UI navigation and not\n * permission to replay a signing command automatically.\n *\n * - `call`: nothing needs replacing; re-issuing the same call is eligible,\n *   usually after the user fixes device state.\n * - `operation`: the operation binding is no longer usable; the selected target\n *   may be used to establish a new one when its identity is persistent.\n * - `search-target`: the selected discovery result is stale or untrusted;\n *   rediscover on the same transport and let the user select again.\n * - `transport`: the selected transport is unavailable or unsuitable; repair\n *   it or choose another transport.\n * - `not-recoverable`: retrying the same operation/context cannot succeed.\n * - `unknown`: the SDK cannot make a safe recovery claim.\n */\nexport type HwkRecoveryScope =\n  | 'call'\n  | 'operation'\n  | 'search-target'\n  | 'transport'\n  | 'not-recoverable'\n  | 'unknown';\n\nexport interface HwkRecoveryHint {\n  scope: HwkRecoveryScope;\n}\n\nconst RECOVERY_SCOPES = new Set<HwkRecoveryScope>([\n  'call',\n  'operation',\n  'search-target',\n  'transport',\n  'not-recoverable',\n  'unknown',\n]);\n\nexport function isHwkRecoveryHint(value: unknown): value is HwkRecoveryHint {\n  if (!value || typeof value !== 'object') return false;\n  const { scope } = value as { scope?: unknown };\n  return typeof scope === 'string' && RECOVERY_SCOPES.has(scope as HwkRecoveryScope);\n}\n\nconst RECOVERY_CALL: HwkRecoveryHint = Object.freeze({ scope: 'call' });\nconst RECOVERY_OPERATION: HwkRecoveryHint = Object.freeze({ scope: 'operation' });\nconst RECOVERY_SEARCH_TARGET: HwkRecoveryHint = Object.freeze({ scope: 'search-target' });\nconst RECOVERY_TRANSPORT: HwkRecoveryHint = Object.freeze({ scope: 'transport' });\nconst RECOVERY_NOT_RECOVERABLE: HwkRecoveryHint = Object.freeze({\n  scope: 'not-recoverable',\n});\nconst RECOVERY_UNKNOWN: HwkRecoveryHint = Object.freeze({ scope: 'unknown' });\n\n/**\n * Vendor-neutral fallback used when an adapter has no more precise runtime\n * knowledge. Adapters may stamp a narrower hint when transport/session state\n * makes the correct scope unambiguous.\n */\nexport function defaultRecoveryForCode(code: HardwareErrorCode): HwkRecoveryHint {\n  switch (code) {\n    case HardwareErrorCode.UserRejected:\n    case HardwareErrorCode.UserAborted:\n    case HardwareErrorCode.DeviceBusy:\n    case HardwareErrorCode.DeviceLocked:\n    case HardwareErrorCode.DeviceNotInitialized:\n    case HardwareErrorCode.DeviceInBootloader:\n    case HardwareErrorCode.DeviceAppStuck:\n    case HardwareErrorCode.DeviceBusyInternal:\n    case HardwareErrorCode.NetworkError:\n    case HardwareErrorCode.PinInvalid:\n    case HardwareErrorCode.PinCancelled:\n    case HardwareErrorCode.PassphraseRejected:\n    case HardwareErrorCode.PassphraseStateMismatch:\n    case HardwareErrorCode.PinMismatch:\n    case HardwareErrorCode.FirmwareTooOld:\n    case HardwareErrorCode.FirmwareUpdateRequired:\n    case HardwareErrorCode.AppNotInstalled:\n    case HardwareErrorCode.WrongApp:\n    case HardwareErrorCode.AppTooOld:\n    case HardwareErrorCode.DeviceOutOfMemory:\n    case HardwareErrorCode.EvmBlindSigningRequired:\n    case HardwareErrorCode.EvmClearSignPluginMissing:\n    case HardwareErrorCode.EvmDataTooLarge:\n    case HardwareErrorCode.EvmTxTypeNotSupported:\n    case HardwareErrorCode.SolanaBlindSigningRequired:\n    case HardwareErrorCode.TronCustomContractRequired:\n    case HardwareErrorCode.TronDataSigningRequired:\n    case HardwareErrorCode.TronSignByHashRequired:\n    case HardwareErrorCode.BtcWalletPolicyHmacMismatch:\n    case HardwareErrorCode.BtcUnexpectedState:\n      return RECOVERY_CALL;\n    case HardwareErrorCode.DeviceNotFound:\n    case HardwareErrorCode.DeviceDisconnected:\n    case HardwareErrorCode.OperationNotFound:\n    case HardwareErrorCode.OperationEnded:\n    case HardwareErrorCode.TransportError:\n    case HardwareErrorCode.BlePairingTimeout:\n    case HardwareErrorCode.ThpPairingFailed:\n    case HardwareErrorCode.ThpPairingRequired:\n    case HardwareErrorCode.BleConnectFailed:\n    case HardwareErrorCode.BlePairingCancelled:\n      return RECOVERY_OPERATION;\n    case HardwareErrorCode.DeviceMismatch:\n    case HardwareErrorCode.DeviceSearchMismatch:\n    case HardwareErrorCode.DeviceOneDeviceOnly:\n    case HardwareErrorCode.BleBondInvalid:\n      return RECOVERY_SEARCH_TARGET;\n    case HardwareErrorCode.BridgeNotFound:\n    case HardwareErrorCode.TransportNotAvailable:\n    case HardwareErrorCode.DevicePermissionDenied:\n    case HardwareErrorCode.PayloadTooLarge:\n      return RECOVERY_TRANSPORT;\n    case HardwareErrorCode.InvalidParams:\n    case HardwareErrorCode.MethodNotSupported:\n    case HardwareErrorCode.ChainNotSupported:\n    case HardwareErrorCode.DevicePathForbidden:\n      return RECOVERY_NOT_RECOVERABLE;\n    case HardwareErrorCode.UnknownError:\n    case HardwareErrorCode.OperationTimeout:\n    default:\n      return RECOVERY_UNKNOWN;\n  }\n}\n\n/**\n * The authoritative code→origin table. Most codes imply their origin by\n * definition (UserRejected IS the device speaking; BridgeNotFound IS the\n * pipe). Vendors use this as the default and override only where their\n * mapping context knows better. Codes whose origin genuinely depends on\n * context (UnknownError, OperationTimeout — the device may be waiting for a\n * human, or the pipe may be dead — and DeviceBusy) return undefined: an\n * honest \"can't tell\" beats a plausible mislabel, because consumers fall\n * back to their existing behavior instead of taking the wrong recovery.\n */\nexport function defaultOriginForCode(code: HardwareErrorCode): HwkErrorOrigin | undefined {\n  // Chain APDU blocks (11000+) are, without exception, the chain app on the\n  // device answering a request it understood and refused/qualified.\n  if (code >= 11_000) return 'device';\n  switch (code) {\n    case HardwareErrorCode.UserRejected:\n    case HardwareErrorCode.DeviceLocked:\n    case HardwareErrorCode.DeviceNotInitialized:\n    case HardwareErrorCode.DeviceInBootloader:\n    case HardwareErrorCode.DeviceMismatch:\n    case HardwareErrorCode.DeviceSearchMismatch:\n    case HardwareErrorCode.DeviceAppStuck:\n    case HardwareErrorCode.DevicePathForbidden:\n    case HardwareErrorCode.DeviceBusyInternal:\n    case HardwareErrorCode.ChainNotSupported:\n    case HardwareErrorCode.FirmwareTooOld:\n    case HardwareErrorCode.FirmwareUpdateRequired:\n    case HardwareErrorCode.PinInvalid:\n    case HardwareErrorCode.PinMismatch:\n    case HardwareErrorCode.PassphraseRejected:\n    case HardwareErrorCode.PassphraseStateMismatch:\n    case HardwareErrorCode.ThpPairingFailed:\n    case HardwareErrorCode.ThpPairingRequired:\n    case HardwareErrorCode.WrongApp:\n    case HardwareErrorCode.AppNotInstalled:\n    case HardwareErrorCode.AppTooOld:\n    case HardwareErrorCode.DeviceOutOfMemory:\n      return 'device';\n    case HardwareErrorCode.DeviceNotFound:\n    case HardwareErrorCode.DeviceDisconnected:\n    case HardwareErrorCode.TransportError:\n    case HardwareErrorCode.BridgeNotFound:\n    case HardwareErrorCode.TransportNotAvailable:\n    case HardwareErrorCode.BlePairingTimeout:\n    case HardwareErrorCode.NetworkError:\n    case HardwareErrorCode.BleBondInvalid:\n    case HardwareErrorCode.BleConnectFailed:\n      return 'transport';\n    case HardwareErrorCode.DevicePermissionDenied:\n    case HardwareErrorCode.UserAborted:\n    case HardwareErrorCode.InvalidParams:\n    case HardwareErrorCode.MethodNotSupported:\n    case HardwareErrorCode.PinCancelled:\n    case HardwareErrorCode.BlePairingCancelled:\n    case HardwareErrorCode.PayloadTooLarge:\n    case HardwareErrorCode.DeviceOneDeviceOnly:\n      return 'host';\n    default:\n      return undefined;\n  }\n}\n\nexport interface IHwkErrorPayload {\n  code: HardwareErrorCode;\n  message: string;\n  origin?: HwkErrorOrigin;\n  recovery?: HwkRecoveryHint;\n  appName?: string;\n  _tag?: string;\n  params?: Record<string, unknown>;\n}\n\nexport interface IOperationMayHaveCompletedParams extends Record<string, unknown> {\n  operationMayHaveCompleted: true;\n  method: string;\n}\n\n/**\n * Marks an unsafe hardware request whose response was lost after dispatch.\n * Callers must not interpret the resulting transport error as proof that the\n * device rejected or did not execute the operation.\n */\nexport function operationMayHaveCompletedParams(\n  method: string,\n  params?: Record<string, unknown>\n): IOperationMayHaveCompletedParams {\n  return {\n    ...params,\n    operationMayHaveCompleted: true,\n    method,\n  };\n}\n\nexport type HwkError = Error & {\n  code: HardwareErrorCode;\n  /** See {@link HwkErrorOrigin}. Survives serializeConnectorError/rehydrate\n   *  automatically (own fields outside the top-level whitelist travel via\n   *  `params` and are lifted back). */\n  origin?: HwkErrorOrigin;\n  recovery?: HwkRecoveryHint;\n  appName?: string;\n  _tag?: string;\n  params?: Record<string, unknown>;\n};\n\n/**\n * Canonical throwable for HWK adapters. Plain Error + canonical extra fields,\n * shape-compatible with `rehydrateConnectorError` so locally-thrown and\n * cross-boundary errors are indistinguishable to downstream classifiers\n * (`err.code` / `err._tag` / `err.appName`). Do NOT mutate caught errors\n * with `Object.assign` — construct a fresh one via this factory.\n */\nexport function createHwkError(payload: IHwkErrorPayload): HwkError {\n  const recovery = payload.recovery ?? defaultRecoveryForCode(payload.code);\n  return Object.assign(new Error(payload.message), {\n    code: payload.code,\n    ...(payload.origin !== undefined && { origin: payload.origin }),\n    recovery,\n    ...(payload._tag !== undefined && { _tag: payload._tag }),\n    ...(payload.appName !== undefined && { appName: payload.appName }),\n    ...(payload.params !== undefined && { params: payload.params }),\n  });\n}\n"]}

package/dist/{errors-ChA_YEZY.d.ts → errors-C5GWtyVN.d.mts}

@@ -52,10 +52,18 @@ declare enum HardwareErrorCode {
     DevicePathForbidden = 10110,
     /** Busy with our own in-flight request (queue guard / firmware Failure_Busy), not another app — wait and retry, don't close other apps. */
     DeviceBusyInternal = 10111,
-    /** The supplied runtime-only interaction id is unknown to this adapter instance. */
-    InteractionNotFound = 10112,
-    /** The supplied interaction ended and can never be resumed. */
-    InteractionEnded = 10113,
+    /** The supplied runtime-only operation id is unknown to this adapter instance. */
+    OperationNotFound = 10112,
+    /** The supplied operation ended and can never be resumed. */
+    OperationEnded = 10113,
+    /**
+     * Discovery found devices but none of them is the wallet being looked for.
+     * Milder than DeviceMismatch: nothing about the known wallet has changed, the
+     * user simply has the wrong unit connected. DeviceMismatch stays reserved for
+     * reaching the expected device and finding a different identity on it, which
+     * can mean it was wiped, reseeded, or swapped.
+     */
+    DeviceSearchMismatch = 10114,
     FirmwareTooOld = 10200,
     FirmwareUpdateRequired = 10201,
     TransportError = 10300,
@@ -215,10 +223,10 @@ type HwkErrorOrigin = 'device' | 'transport' | 'host';
  * operation. This is connection-lifecycle metadata, not UI navigation and not
  * permission to replay a signing command automatically.
  *
- * - `operation`: the interaction and selected target are still eligible for an
- *   explicit retry, usually after the user fixes device state.
- * - `interaction`: the interaction is no longer usable; the selected target may
- *   be used to establish a new one when its identity is persistent.
+ * - `call`: nothing needs replacing; re-issuing the same call is eligible,
+ *   usually after the user fixes device state.
+ * - `operation`: the operation binding is no longer usable; the selected target
+ *   may be used to establish a new one when its identity is persistent.
  * - `search-target`: the selected discovery result is stale or untrusted;
  *   rediscover on the same transport and let the user select again.
  * - `transport`: the selected transport is unavailable or unsuitable; repair
@@ -226,7 +234,7 @@ type HwkErrorOrigin = 'device' | 'transport' | 'host';
  * - `not-recoverable`: retrying the same operation/context cannot succeed.
  * - `unknown`: the SDK cannot make a safe recovery claim.
  */
-type HwkRecoveryScope = 'operation' | 'interaction' | 'search-target' | 'transport' | 'not-recoverable' | 'unknown';
+type HwkRecoveryScope = 'call' | 'operation' | 'search-target' | 'transport' | 'not-recoverable' | 'unknown';
 interface HwkRecoveryHint {
     scope: HwkRecoveryScope;
 }

package/dist/{errors-ChA_YEZY.d.mts → errors-C5GWtyVN.d.ts}

@@ -52,10 +52,18 @@ declare enum HardwareErrorCode {
     DevicePathForbidden = 10110,
     /** Busy with our own in-flight request (queue guard / firmware Failure_Busy), not another app — wait and retry, don't close other apps. */
     DeviceBusyInternal = 10111,
-    /** The supplied runtime-only interaction id is unknown to this adapter instance. */
-    InteractionNotFound = 10112,
-    /** The supplied interaction ended and can never be resumed. */
-    InteractionEnded = 10113,
+    /** The supplied runtime-only operation id is unknown to this adapter instance. */
+    OperationNotFound = 10112,
+    /** The supplied operation ended and can never be resumed. */
+    OperationEnded = 10113,
+    /**
+     * Discovery found devices but none of them is the wallet being looked for.
+     * Milder than DeviceMismatch: nothing about the known wallet has changed, the
+     * user simply has the wrong unit connected. DeviceMismatch stays reserved for
+     * reaching the expected device and finding a different identity on it, which
+     * can mean it was wiped, reseeded, or swapped.
+     */
+    DeviceSearchMismatch = 10114,
     FirmwareTooOld = 10200,
     FirmwareUpdateRequired = 10201,
     TransportError = 10300,
@@ -215,10 +223,10 @@ type HwkErrorOrigin = 'device' | 'transport' | 'host';
  * operation. This is connection-lifecycle metadata, not UI navigation and not
  * permission to replay a signing command automatically.
  *
- * - `operation`: the interaction and selected target are still eligible for an
- *   explicit retry, usually after the user fixes device state.
- * - `interaction`: the interaction is no longer usable; the selected target may
- *   be used to establish a new one when its identity is persistent.
+ * - `call`: nothing needs replacing; re-issuing the same call is eligible,
+ *   usually after the user fixes device state.
+ * - `operation`: the operation binding is no longer usable; the selected target
+ *   may be used to establish a new one when its identity is persistent.
  * - `search-target`: the selected discovery result is stale or untrusted;
  *   rediscover on the same transport and let the user select again.
  * - `transport`: the selected transport is unavailable or unsuitable; repair
@@ -226,7 +234,7 @@ type HwkErrorOrigin = 'device' | 'transport' | 'host';
  * - `not-recoverable`: retrying the same operation/context cannot succeed.
  * - `unknown`: the SDK cannot make a safe recovery claim.
  */
-type HwkRecoveryScope = 'operation' | 'interaction' | 'search-target' | 'transport' | 'not-recoverable' | 'unknown';
+type HwkRecoveryScope = 'call' | 'operation' | 'search-target' | 'transport' | 'not-recoverable' | 'unknown';
 interface HwkRecoveryHint {
     scope: HwkRecoveryScope;
 }

package/dist/errors.d.mts

@@ -1 +1 @@
-export { H as HardwareErrorCode, c as HwkError, b as HwkRecoveryHint, d as HwkRecoveryScope, I as IHwkErrorPayload, O as ORPHAN_ELIGIBLE_ERROR_CODES, f as createHwkError, h as defaultRecoveryForCode, i as enrichErrorMessage, j as isHwkRecoveryHint } from './errors-ChA_YEZY.mjs';
+export { H as HardwareErrorCode, c as HwkError, b as HwkRecoveryHint, d as HwkRecoveryScope, I as IHwkErrorPayload, O as ORPHAN_ELIGIBLE_ERROR_CODES, f as createHwkError, h as defaultRecoveryForCode, i as enrichErrorMessage, j as isHwkRecoveryHint } from './errors-C5GWtyVN.mjs';

package/dist/errors.d.ts

@@ -1 +1 @@
-export { H as HardwareErrorCode, c as HwkError, b as HwkRecoveryHint, d as HwkRecoveryScope, I as IHwkErrorPayload, O as ORPHAN_ELIGIBLE_ERROR_CODES, f as createHwkError, h as defaultRecoveryForCode, i as enrichErrorMessage, j as isHwkRecoveryHint } from './errors-ChA_YEZY.js';
+export { H as HardwareErrorCode, c as HwkError, b as HwkRecoveryHint, d as HwkRecoveryScope, I as IHwkErrorPayload, O as ORPHAN_ELIGIBLE_ERROR_CODES, f as createHwkError, h as defaultRecoveryForCode, i as enrichErrorMessage, j as isHwkRecoveryHint } from './errors-C5GWtyVN.js';

package/dist/errors.js

@@ -7,7 +7,7 @@ var _chunk7SFFS2NLjs = require('./chunk-7SFFS2NL.js');
 
 
 
-var _chunkIZEVYMJKjs = require('./chunk-IZEVYMJK.js');
+var _chunkZ3IH25KVjs = require('./chunk-Z3IH25KV.js');
 
 
 
@@ -15,5 +15,5 @@ var _chunkIZEVYMJKjs = require('./chunk-IZEVYMJK.js');
 
 
 
-exports.HardwareErrorCode = _chunkIZEVYMJKjs.HardwareErrorCode; exports.ORPHAN_ELIGIBLE_ERROR_CODES = _chunkIZEVYMJKjs.ORPHAN_ELIGIBLE_ERROR_CODES; exports.createHwkError = _chunkIZEVYMJKjs.createHwkError; exports.defaultRecoveryForCode = _chunkIZEVYMJKjs.defaultRecoveryForCode; exports.enrichErrorMessage = _chunk7SFFS2NLjs.enrichErrorMessage; exports.isHwkRecoveryHint = _chunkIZEVYMJKjs.isHwkRecoveryHint;
+exports.HardwareErrorCode = _chunkZ3IH25KVjs.HardwareErrorCode; exports.ORPHAN_ELIGIBLE_ERROR_CODES = _chunkZ3IH25KVjs.ORPHAN_ELIGIBLE_ERROR_CODES; exports.createHwkError = _chunkZ3IH25KVjs.createHwkError; exports.defaultRecoveryForCode = _chunkZ3IH25KVjs.defaultRecoveryForCode; exports.enrichErrorMessage = _chunk7SFFS2NLjs.enrichErrorMessage; exports.isHwkRecoveryHint = _chunkZ3IH25KVjs.isHwkRecoveryHint;
 //# sourceMappingURL=errors.js.map

package/dist/errors.mjs

@@ -7,7 +7,7 @@ import {
   createHwkError,
   defaultRecoveryForCode,
   isHwkRecoveryHint
-} from "./chunk-72KOSYTH.mjs";
+} from "./chunk-E3UPXUN5.mjs";
 export {
   HardwareErrorCode,
   ORPHAN_ELIGIBLE_ERROR_CODES,