@onekeyfe/hwk-adapter-core 1.2.3-alpha.7 → 1.2.3-alpha.8

package/dist/index.mjs

@@ -1,9 +1,6 @@
 import {
-  HardwareErrorCode,
-  ORPHAN_ELIGIBLE_ERROR_CODES,
-  createHwkError,
   enrichErrorMessage
-} from "./chunk-YA4BWFTZ.mjs";
+} from "./chunk-DB4JOPZO.mjs";
 import {
   UI_EVENT,
   UI_REQUEST,
@@ -13,19 +10,40 @@ import {
   UI_REQUEST_TIMEOUT_TAG,
   UI_RESPONSE,
   UiRequestRegistry
-} from "./chunk-U63HTLGJ.mjs";
+} from "./chunk-EQYPRCWU.mjs";
+import {
+  HardwareErrorCode,
+  ORPHAN_ELIGIBLE_ERROR_CODES,
+  createHwkError,
+  defaultOriginForCode,
+  defaultRecoveryForCode,
+  isHwkRecoveryHint,
+  operationMayHaveCompletedParams
+} from "./chunk-IOFMG7YO.mjs";
 
 // src/types/response.ts
 function success(payload) {
   return { success: true, payload };
 }
-function failure(code, error, params) {
+function failure(code, error, params, origin, recovery) {
   return {
     success: false,
-    payload: { error, code, ...params ? { params } : {} }
+    payload: {
+      error,
+      code,
+      ...origin !== void 0 ? { origin } : {},
+      recovery: recovery ?? defaultRecoveryForCode(code),
+      ...params ? { params } : {}
+    }
   };
 }
 
+// src/types/device.ts
+function resolveSearchTargetReusePolicy(device) {
+  if (device.capabilities?.persistentDeviceIdentity) return "reconnectable";
+  return "current-discovery";
+}
+
 // src/types/fingerprint.ts
 import { sha256 } from "@noble/hashes/sha256";
 import { bytesToHex, utf8ToBytes } from "@noble/hashes/utils";
@@ -35,11 +53,21 @@ var CHAIN_FINGERPRINT_PATHS = {
   // Cointype 1 (testnet) is rejected by some Ledger BTC App configurations.
   btc: "m/44'/0'/0'",
   sol: "m/44'/501'/0'",
-  tron: "m/44'/195'/0'/0/0"
+  tron: "m/44'/195'/0'/0/0",
+  // Shielded UA (single Orchard receiver) derived from the transparent path.
+  zcash: "m/44'/133'/0'/0/0"
 };
+function parseBip32MasterFingerprint(value) {
+  if (typeof value !== "string") return void 0;
+  const normalized = value.trim().toLowerCase();
+  return /^[0-9a-f]{8}$/.test(normalized) ? normalized : void 0;
+}
 function deriveDeviceFingerprint(value) {
   return bytesToHex(sha256(utf8ToBytes(value))).slice(0, 16);
 }
+function deriveWalletId(canonicalPublicMaterial) {
+  return bytesToHex(sha256(utf8ToBytes(`onekey-hwk-wallet-id:v1:${canonicalPublicMaterial}`)));
+}
 
 // src/events/device.ts
 var DEVICE_EVENT = "DEVICE_EVENT";
@@ -66,7 +94,8 @@ var SDK = {
   DEVICE_STUCK: "device-stuck",
   DEVICE_UNRESPONSIVE: "device-unresponsive",
   DEVICE_RECOVERED: "device-recovered",
-  DEVICE_INTERACTION: "device-interaction"
+  DEVICE_INTERACTION: "device-interaction",
+  OPERATION_ENDED: "operation-ended"
 };
 
 // src/utils/DeviceJobQueue.ts
@@ -75,6 +104,7 @@ var DeviceJobQueue = class {
     this._tail = Promise.resolve();
     this._active = null;
     this._jobs = /* @__PURE__ */ new Map();
+    this._cancelScopes = /* @__PURE__ */ new Map();
     /** Incremented on clear() so queued-but-not-yet-running jobs detect invalidation. */
     this._generation = 0;
     this._generationCancelReasons = /* @__PURE__ */ new Map();
@@ -97,12 +127,13 @@ var DeviceJobQueue = class {
       abortController: ac,
       startedAt: Date.now()
     };
-    this._jobs.set(jobToken, { deviceId });
+    this._jobs.set(jobToken, activeJob);
     const next = prev.catch(() => {
     }).then(async () => {
       if (this._generation !== gen) {
         throw this._generationCancelReasons.get(gen) ?? new Error("Job cancelled: queue was cleared");
       }
+      if (ac.signal.aborted) throw ac.signal.reason;
       this._active = activeJob;
       try {
         return await job(ac.signal);
@@ -118,32 +149,69 @@ var DeviceJobQueue = class {
     });
     return next;
   }
-  /** Cancel the active job. If `deviceId` is given, only cancels when it matches. */
-  cancelActive(deviceId) {
-    if (!this._active) return false;
-    if (deviceId && this._active.deviceId !== deviceId) return false;
-    this._active.abortController.abort(new Error("Manually cancelled"));
-    return true;
+  /**
+   * Open a cancellation scope that outlives the individual jobs under it.
+   *
+   * A bundle (all-network) does not enqueue itself — it enqueues one job per
+   * item. Between two items the queue is empty, so a cancel landing in that
+   * gap finds nothing to abort and the next item goes to the device anyway.
+   * The scope holds the cancel across those gaps; the bundle checks its
+   * signal before each item. Callers must `release()` when the bundle ends.
+   */
+  createCancelScope(deviceId) {
+    const scopeToken = {};
+    const abortController = new AbortController();
+    this._cancelScopes.set(scopeToken, { deviceId, abortController });
+    return {
+      signal: abortController.signal,
+      release: () => {
+        this._cancelScopes.delete(scopeToken);
+      }
+    };
   }
-  /** Force cancel the active job. `reason` becomes signal.reason. */
-  forceCancelActive(deviceId, reason) {
+  /**
+   * Cancel the running job. `reason` becomes signal.reason.
+   *
+   * No caller today: every adapter cancel wants the queued work invalidated
+   * too and uses `cancelActiveAndPending`. Kept for a connector layer that
+   * needs to stop only what is on the wire and leave the queue behind it.
+   */
+  cancelActive(deviceId, reason) {
     if (!this._active) return false;
     if (deviceId && this._active.deviceId !== deviceId) return false;
-    this._active.abortController.abort(reason ?? new Error("Force cancelled for recovery"));
+    this._active.abortController.abort(reason ?? new Error("Cancelled"));
     return true;
   }
-  /** Cancel the active job (alias for callers that previously needed multi-device cancel). */
-  cancelAllActive(reason) {
-    if (!this._active) return;
-    this._active.abortController.abort(reason ?? new Error("Cancelled by cancelAllActive"));
-  }
-  /** Cancel the active job and invalidate queued jobs that have not started. */
+  /**
+   * Cancel the active job and invalidate queued jobs that have not started.
+   *
+   * Only `undefined` means "everything". An empty string is a queue key that
+   * derived to nothing, so it matches nothing and reports `false` rather than
+   * silently tearing the whole queue down.
+   *
+   * Returns what the cancel actually reached, not whether it was accepted.
+   */
   cancelActiveAndPending(deviceId, reason) {
-    if (deviceId && this._active && this._active.deviceId !== deviceId) {
-      return false;
+    const cancelReason = reason ?? new Error("Cancelled by cancelActiveAndPending");
+    if (deviceId !== void 0) {
+      let cancelled = false;
+      for (const job of this._jobs.values()) {
+        if (job.deviceId === deviceId) {
+          job.abortController.abort(cancelReason);
+          cancelled = true;
+        }
+      }
+      for (const scope of this._cancelScopes.values()) {
+        if (scope.deviceId === deviceId) {
+          scope.abortController.abort(cancelReason);
+          cancelled = true;
+        }
+      }
+      return cancelled;
     }
-    this.clear(reason ?? new Error("Cancelled by cancelActiveAndPending"));
-    return true;
+    const reached = this._active !== null || this._jobs.size > 0 || this._cancelScopes.size > 0;
+    this.clear(cancelReason);
+    return reached;
   }
   /** Get info about the currently active job, or null if idle. */
   getActiveJob(deviceId) {
@@ -155,10 +223,6 @@ var DeviceJobQueue = class {
       startedAt: this._active.startedAt
     };
   }
-  /** True if any job is currently running. */
-  isBusy() {
-    return this._jobs.size > 0;
-  }
   clear(reason) {
     const cancelledGeneration = this._generation;
     this._generation++;
@@ -172,9 +236,232 @@ var DeviceJobQueue = class {
     if (this._active) {
       this._active.abortController.abort(cancelReason);
     }
+    for (const scope of this._cancelScopes.values()) {
+      scope.abortController.abort(cancelReason);
+    }
+  }
+};
+
+// src/utils/hardwareRuntimeId.ts
+import { bytesToHex as bytesToHex2, randomBytes } from "@noble/hashes/utils";
+var HARDWARE_RUNTIME_ID_PREFIX = "hwk:runtime";
+var RANDOM_ID_BYTES = 16;
+var RANDOM_ID_PATTERN = /^[0-9a-f]{32}$/;
+var KINDS = /* @__PURE__ */ new Set([
+  "operation",
+  "search-target",
+  "link"
+]);
+var VENDORS = /* @__PURE__ */ new Set(["trezor", "ledger", "keystone"]);
+function create(kind, vendor) {
+  return `${HARDWARE_RUNTIME_ID_PREFIX}:${kind}:${vendor}:${bytesToHex2(
+    randomBytes(RANDOM_ID_BYTES)
+  )}`;
+}
+function createHardwareOperationId(vendor) {
+  return create("operation", vendor);
+}
+function createHardwareSearchTargetId(vendor) {
+  return create("search-target", vendor);
+}
+function createHardwareLinkId(vendor) {
+  return create("link", vendor);
+}
+function hasHardwareRuntimeIdPrefix(value) {
+  return typeof value === "string" && value.startsWith(`${HARDWARE_RUNTIME_ID_PREFIX}:`);
+}
+function parseHardwareRuntimeId(value) {
+  if (!hasHardwareRuntimeIdPrefix(value)) return void 0;
+  const parts = value.split(":");
+  if (parts.length !== 5) return void 0;
+  const [, , kind, vendor, nonce] = parts;
+  if (!KINDS.has(kind) || !VENDORS.has(vendor) || !RANDOM_ID_PATTERN.test(nonce)) {
+    return void 0;
+  }
+  return { kind, vendor };
+}
+function isHardwareOperationId(value) {
+  return parseHardwareRuntimeId(value)?.kind === "operation";
+}
+
+// src/utils/OperationRegistry.ts
+var OPERATION_DEFAULT_TTL_MS = 6e5;
+var OperationRegistry = class {
+  constructor(options) {
+    this._active = /* @__PURE__ */ new Map();
+    this._ended = /* @__PURE__ */ new Map();
+    this._vendor = options.vendor;
+    this._ttlMs = options.ttlMs ?? OPERATION_DEFAULT_TTL_MS;
+    this._onEnded = options.onEnded;
+  }
+  create(params) {
+    const now = Date.now();
+    const operationId = createHardwareOperationId(this._vendor);
+    const operation = {
+      operationId,
+      connectId: params.connectId,
+      device: params.device,
+      connectionType: params.connectionType,
+      connectionKeys: Array.from(
+        new Set(
+          [params.searchTargetId, params.connectId, ...params.connectionKeys ?? []].filter(
+            Boolean
+          )
+        )
+      ),
+      createdAt: now,
+      lastActiveAt: now
+    };
+    const timer = this._createTimer(operationId);
+    this._active.set(operationId, { ...operation, timer, retainCount: 0 });
+    return operation;
+  }
+  resolve(operationId) {
+    const active = this._active.get(operationId);
+    if (!active) {
+      const ended = this._ended.get(operationId);
+      if (ended) {
+        throw createHwkError({
+          code: 10113 /* OperationEnded */,
+          message: `Hardware operation has ended (${ended.reason})`,
+          params: { operationId, reason: ended.reason }
+        });
+      }
+      throw createHwkError({
+        code: 10112 /* OperationNotFound */,
+        message: "Hardware operation was not found",
+        params: { operationId }
+      });
+    }
+    if (active.timer) clearTimeout(active.timer);
+    active.lastActiveAt = Date.now();
+    active.timer = active.retainCount === 0 ? this._createTimer(operationId) : void 0;
+    return active;
+  }
+  /** Keep an operation alive while one device job is actively using it. */
+  retain(operationId) {
+    const active = this.resolve(operationId);
+    if (active.timer) clearTimeout(active.timer);
+    active.timer = void 0;
+    active.retainCount += 1;
+    let released = false;
+    return () => {
+      if (released) return;
+      released = true;
+      const current = this._active.get(operationId);
+      if (!current) return;
+      current.retainCount = Math.max(0, current.retainCount - 1);
+      current.lastActiveAt = Date.now();
+      if (current.retainCount === 0) {
+        current.timer = this._createTimer(operationId);
+      }
+    };
+  }
+  /** Return active or tombstoned binding data without refreshing its TTL. */
+  find(operationId) {
+    return this._active.get(operationId) ?? this._ended.get(operationId)?.operation;
+  }
+  findActiveByConnectionKey(connectionKey) {
+    if (!connectionKey) return void 0;
+    return [...this._active.values()].find(
+      (operation) => operation.connectionKeys.includes(connectionKey)
+    );
+  }
+  /** Replace the live transport binding after the same target was reconnected. */
+  rebind(operationId, params) {
+    const active = this._active.get(operationId);
+    if (!active) {
+      this.resolve(operationId);
+      throw new Error("Unreachable operation rebind");
+    }
+    if (active.timer) clearTimeout(active.timer);
+    active.connectId = params.connectId;
+    active.device = params.device;
+    active.connectionType = params.connectionType;
+    active.connectionKeys = Array.from(
+      new Set([params.connectId, ...params.connectionKeys ?? []].filter(Boolean))
+    );
+    active.lastActiveAt = Date.now();
+    active.timer = active.retainCount === 0 ? this._createTimer(operationId) : void 0;
+    return active;
+  }
+  end(operationId, reason) {
+    const active = this._active.get(operationId);
+    if (!active) return void 0;
+    if (active.timer) clearTimeout(active.timer);
+    this._active.delete(operationId);
+    this._rememberEnded(active, reason);
+    this._onEnded?.(active, reason);
+    return active;
+  }
+  endByConnectionKey(connectionKey, reason, exceptOperationId) {
+    if (!connectionKey) return;
+    for (const operation of [...this._active.values()]) {
+      if (operation.operationId === exceptOperationId) continue;
+      if (operation.connectionKeys.includes(connectionKey)) {
+        this.end(operation.operationId, reason);
+      }
+    }
+  }
+  endAll(reason, exceptOperationId) {
+    for (const operationId of [...this._active.keys()]) {
+      if (operationId === exceptOperationId) continue;
+      this.end(operationId, reason);
+    }
+  }
+  _createTimer(operationId) {
+    const timer = setTimeout(() => {
+      this.end(operationId, "timeout");
+    }, this._ttlMs);
+    timer.unref?.();
+    return timer;
+  }
+  _rememberEnded(operation, reason) {
+    this._ended.set(operation.operationId, { reason, operation });
+    if (this._ended.size <= 100) return;
+    const oldest = this._ended.keys().next().value;
+    if (oldest) this._ended.delete(oldest);
   }
 };
 
+// src/utils/hardwareOperationTarget.ts
+function resolveHardwareOperationTarget(positionalTargetId, commonOperationId, expectedVendor) {
+  const normalizedPositionalTargetId = positionalTargetId ?? void 0;
+  const normalizedCommonOperationId = commonOperationId || void 0;
+  const positionalOperationId = isHardwareOperationId(normalizedPositionalTargetId) ? normalizedPositionalTargetId : void 0;
+  const parsedPositionalTarget = parseHardwareRuntimeId(normalizedPositionalTargetId);
+  const parsedCommonOperation = parseHardwareRuntimeId(normalizedCommonOperationId);
+  if (normalizedPositionalTargetId && hasHardwareRuntimeIdPrefix(normalizedPositionalTargetId) && !parsedPositionalTarget) {
+    return failure(10002 /* InvalidParams */, "Invalid hardware operation target id");
+  }
+  if (parsedPositionalTarget?.kind === "link") {
+    return failure(
+      10002 /* InvalidParams */,
+      "Hardware transport link id cannot be used as an operation target"
+    );
+  }
+  if (normalizedCommonOperationId && parsedCommonOperation?.kind !== "operation") {
+    return failure(10002 /* InvalidParams */, "Invalid hardware operation id");
+  }
+  if (expectedVendor && (parsedPositionalTarget && parsedPositionalTarget.vendor !== expectedVendor || parsedCommonOperation && parsedCommonOperation.vendor !== expectedVendor)) {
+    return failure(
+      10002 /* InvalidParams */,
+      `Hardware operation does not belong to ${expectedVendor}`
+    );
+  }
+  if (positionalOperationId && normalizedCommonOperationId && positionalOperationId !== normalizedCommonOperationId) {
+    return failure(10002 /* InvalidParams */, "Conflicting hardware operation ids", {
+      positionalOperationId,
+      commonOperationId: normalizedCommonOperationId
+    });
+  }
+  const operationId = normalizedCommonOperationId ?? positionalOperationId;
+  return success({
+    operationId,
+    targetId: operationId ?? normalizedPositionalTargetId
+  });
+}
+
 // src/types/connector.ts
 var EConnectorInteraction = /* @__PURE__ */ ((EConnectorInteraction2) => {
   EConnectorInteraction2["Searching"] = "searching";
@@ -190,7 +477,7 @@ function createBridgedConnector(vendor, connectionType, bridge) {
   return {
     connectionType,
     searchDevices: (options) => bridge.searchDevices({ vendor, options }),
-    connect: (deviceId) => bridge.connect({ vendor, deviceId }),
+    connect: (deviceId, options) => bridge.connect({ vendor, deviceId, ...options ? { options } : {} }),
     disconnect: (sessionId) => bridge.disconnect({ vendor, sessionId }),
     call: (sessionId, method, callParams) => bridge.call({ vendor, sessionId, method, callParams }),
     cancel: (sessionId) => bridge.cancel({ vendor, sessionId }),
@@ -331,10 +618,14 @@ function createCombinedConnector(connectors) {
     });
   }
   const searchDevices = async (options = {}) => {
+    const selectedConnectors = connectors.map((child, index) => ({ child, index })).filter(
+      ({ child }) => !options.transportType || child.connectionType === options.transportType
+    );
+    if (!selectedConnectors.length) return [];
     const perConnector = [];
-    await new Promise((resolve) => {
+    await new Promise((resolve, reject) => {
       let finished = false;
-      let remaining = connectors.length;
+      let remaining = selectedConnectors.length;
       let settleTimer;
       const finish = () => {
         if (finished) return;
@@ -342,19 +633,20 @@ function createCombinedConnector(connectors) {
         if (settleTimer) clearTimeout(settleTimer);
         resolve();
       };
-      connectors.forEach((child, index) => {
-        void child.searchDevices().then(
+      selectedConnectors.forEach(({ child, index }) => {
+        void child.searchDevices(options.purpose ? { purpose: options.purpose } : void 0).then(
           (devices) => devices.map((device) => ({
             ...device,
             connectionType: device.connectionType ?? child.connectionType
           }))
-        ).catch(
-          () => (
-            // A transport that can't scan (powered off, unauthorized, absent)
-            // must not fail the whole fused search.
-            []
-          )
-        ).then((devices) => {
+        ).catch((error) => {
+          if (options.transportType) {
+            finished = true;
+            if (settleTimer) clearTimeout(settleTimer);
+            reject(error);
+          }
+          return [];
+        }).then((devices) => {
           remaining -= 1;
           if (!finished) {
             perConnector.push({ index, devices });
@@ -371,7 +663,12 @@ function createCombinedConnector(connectors) {
       });
     });
     perConnector.sort((a, b) => a.index - b.index);
-    deviceOwner.clear();
+    if (!options.transportType) deviceOwner.clear();
+    else {
+      for (const [id, owner] of deviceOwner) {
+        if (owner.connectionType === options.transportType) deviceOwner.delete(id);
+      }
+    }
     const merged = [];
     perConnector.forEach(({ index, devices }) => {
       for (const device of devices) {
@@ -381,11 +678,11 @@ function createCombinedConnector(connectors) {
     });
     return merged.sort((a, b) => rank(a) - rank(b));
   };
-  const resolveOwner = async (deviceId) => {
-    if (deviceId && deviceOwner.has(deviceId)) {
+  const resolveOwner = async (deviceId, transportType) => {
+    if (deviceId && deviceOwner.has(deviceId) && (!transportType || deviceOwner.get(deviceId)?.connectionType === transportType)) {
       return { owner: deviceOwner.get(deviceId), deviceId };
     }
-    const devices = await searchDevices({ waitForAll: Boolean(deviceId) });
+    const devices = await searchDevices({ waitForAll: Boolean(deviceId), transportType });
     if (deviceId) {
       const owner = deviceOwner.get(deviceId);
       if (!owner)
@@ -396,13 +693,14 @@ function createCombinedConnector(connectors) {
     if (!first) throw combinedDeviceNotFoundError("Combined connector: no devices found");
     return { owner: deviceOwner.get(first.connectId), deviceId: first.connectId };
   };
-  const connectByExplicitId = async (deviceId) => {
+  const connectByExplicitId = async (deviceId, transportType) => {
     const cachedOwner = deviceOwner.get(deviceId);
-    if (cachedOwner) {
+    if (cachedOwner && (!transportType || cachedOwner.connectionType === transportType)) {
       return { session: await cachedOwner.connect(deviceId), owner: cachedOwner };
     }
     let lastError;
     for (const child of connectors) {
+      if (transportType && child.connectionType !== transportType) continue;
       try {
         const session = await child.connect(deviceId);
         deviceOwner.set(deviceId, child);
@@ -424,14 +722,15 @@ function createCombinedConnector(connectors) {
     // Nominal value only — the per-device `connectionType` is authoritative
     // for a fused connector.
     connectionType: connectors[0].connectionType,
-    searchDevices: (options) => searchDevices({ waitForAll: options?.waitForAll }),
-    connect: async (deviceId) => {
+    availableTransports: [...new Set(connectors.map((child) => child.connectionType))],
+    searchDevices: (options) => searchDevices(options),
+    connect: async (deviceId, options) => {
       let owner;
       let session;
       if (deviceId) {
-        ({ session, owner } = await connectByExplicitId(deviceId));
+        ({ session, owner } = await connectByExplicitId(deviceId, options?.transportType));
       } else {
-        const resolved = await resolveOwner();
+        const resolved = await resolveOwner(void 0, options?.transportType);
         owner = resolved.owner;
         session = await owner.connect(resolved.deviceId);
       }
@@ -537,6 +836,148 @@ var TypedEventEmitter = class {
   }
 };
 
+// src/utils/requestSaveDeviceBinding.ts
+async function requestSaveDeviceBinding(emitter, registry, binding, signal) {
+  const type = UI_REQUEST.REQUEST_SAVE_DEVICE_BINDING;
+  const declined = (reason) => {
+    emitter.emit(UI_REQUEST.DEVICE_BINDING_STATUS, {
+      type: UI_REQUEST.DEVICE_BINDING_STATUS,
+      payload: { selectionRequestId: binding.selectionRequestId, status: "failed" }
+    });
+    return { saved: false, reason };
+  };
+  if (!emitter.listenerCount(type)) {
+    return declined("skipped");
+  }
+  if (signal?.aborted) throw signal.reason;
+  const requestId = registry.createRequestId();
+  const pending = registry.wait(type, { requestId, operationId: binding.operationId });
+  void pending.catch(() => void 0);
+  const cancel = () => registry.cancel(type, requestId);
+  signal?.addEventListener("abort", cancel, { once: true });
+  try {
+    emitter.emit(type, { type, payload: { ...binding, requestId } });
+    const response = await pending;
+    if (signal?.aborted) throw signal.reason;
+    if (response?.saved !== true) {
+      return declined(response?.reason ?? "skipped");
+    }
+    emitter.emit(UI_REQUEST.DEVICE_BINDING_STATUS, {
+      type: UI_REQUEST.DEVICE_BINDING_STATUS,
+      payload: { selectionRequestId: binding.selectionRequestId, status: "saved" }
+    });
+    return { saved: true };
+  } catch (error) {
+    emitter.emit(UI_REQUEST.DEVICE_BINDING_STATUS, {
+      type: UI_REQUEST.DEVICE_BINDING_STATUS,
+      payload: {
+        selectionRequestId: binding.selectionRequestId,
+        status: signal?.aborted ? "cancelled" : "failed"
+      }
+    });
+    if (signal?.aborted) throw error;
+    return { saved: false, reason: "skipped" };
+  } finally {
+    signal?.removeEventListener("abort", cancel);
+    registry.cancel(type, requestId);
+  }
+}
+
+// src/utils/requestBleDeviceSelection.ts
+async function requestBleDeviceSelection({
+  emitter,
+  registry,
+  request,
+  scan,
+  signal,
+  allowUsbFallback = false,
+  pollIntervalMs = 1500
+}) {
+  const type = UI_REQUEST.REQUEST_SELECT_DEVICE;
+  if (signal.aborted) throw signal.reason;
+  if (!emitter.listenerCount(type)) {
+    throw createHwkError({
+      code: 10100 /* DeviceNotFound */,
+      message: "Select a Bluetooth device before continuing"
+    });
+  }
+  const requestId = registry.createRequestId();
+  const { operationId } = request;
+  let devices = allowUsbFallback ? request.devices.filter((device) => device.connectionType === "ble") : request.devices;
+  const publishedDevices = /* @__PURE__ */ new Map();
+  let stopped = false;
+  let timer;
+  let wake;
+  const stop = () => {
+    stopped = true;
+    if (timer !== void 0) clearTimeout(timer);
+    wake?.();
+  };
+  const waitForNextScan = () => new Promise((resolve) => {
+    wake = resolve;
+    timer = setTimeout(resolve, pollIntervalMs);
+    if (stopped) resolve();
+  });
+  const cancel = () => registry.cancel(type, requestId);
+  const reply = registry.wait(type, { requestId, operationId }).finally(stop);
+  void reply.catch(() => void 0);
+  const publish = () => {
+    for (const device of devices) publishedDevices.set(device.connectId, device);
+    emitter.emit(type, {
+      type,
+      payload: { ...request, devices, requestId, scanning: true }
+    });
+  };
+  signal.addEventListener("abort", cancel, { once: true });
+  let polling;
+  try {
+    publish();
+    polling = (async () => {
+      await Promise.resolve();
+      while (!stopped) {
+        const snapshot = await scan();
+        if (stopped || signal.aborted) return;
+        const usbFallback = allowUsbFallback ? snapshot.find((device2) => device2.connectionType === "usb") : void 0;
+        if (usbFallback) return usbFallback;
+        devices = snapshot;
+        publish();
+        if (stopped) return;
+        await waitForNextScan();
+      }
+    })();
+    const userSelection = reply.then((selected) => publishedDevices.get(selected.sdkConnectId));
+    const device = await Promise.race([
+      userSelection,
+      polling.then((usbFallback) => usbFallback ?? userSelection)
+    ]);
+    stop();
+    await polling;
+    if (signal.aborted) throw signal.reason;
+    if (!device) {
+      throw createHwkError({
+        code: 10100 /* DeviceNotFound */,
+        message: "Selected Bluetooth device is no longer available"
+      });
+    }
+    emitter.emit(UI_REQUEST.DEVICE_BINDING_STATUS, {
+      type: UI_REQUEST.DEVICE_BINDING_STATUS,
+      payload: { selectionRequestId: requestId, status: "verifying" }
+    });
+    return { device, requestId };
+  } catch (error) {
+    emitter.emit(UI_REQUEST.DEVICE_BINDING_STATUS, {
+      type: UI_REQUEST.DEVICE_BINDING_STATUS,
+      payload: { selectionRequestId: requestId, status: signal.aborted ? "cancelled" : "failed" }
+    });
+    throw error;
+  } finally {
+    stop();
+    signal.removeEventListener("abort", cancel);
+    registry.cancel(type, requestId);
+    await polling?.catch(() => void 0);
+  }
+}
+
 // src/utils/semver.ts
 function compareSemver(a, b) {
   const pa = a.split(".").map(Number);
@@ -564,14 +1005,96 @@ function padHex64(hex) {
 function hexToBytes(hex) {
   return nobleHexToBytes(stripHex(hex));
 }
-function bytesToHex2(bytes) {
+function bytesToHex3(bytes) {
   return nobleBytesToHex(bytes);
 }
 
+// src/utils/solanaOffchainMessage.ts
+var SOLANA_OFFCHAIN_SIGNING_DOMAIN = Uint8Array.of(
+  255,
+  ...Array.from("solana offchain", (character) => character.charCodeAt(0))
+);
+var SOLANA_PUBLIC_KEY_LENGTH = 32;
+var MAX_SOLANA_OFFCHAIN_SIGNERS = 255;
+function compareBytes(a, b) {
+  for (let index = 0; index < a.length; index += 1) {
+    const difference = (a[index] ?? 0) - (b[index] ?? 0);
+    if (difference !== 0) return difference;
+  }
+  return a.length - b.length;
+}
+function bytesEqual(a, b) {
+  return a.length === b.length && a.every((value, index) => value === b[index]);
+}
+function decodeUtf8Strict(bytes) {
+  let encoded = "";
+  for (const value of bytes) {
+    encoded += `%${value.toString(16).padStart(2, "0")}`;
+  }
+  return decodeURIComponent(encoded);
+}
+function prepareSolanaOffchainMessageV1({
+  message,
+  requiredSigners
+}) {
+  if (message.length === 0) {
+    throw new Error("Solana off-chain message cannot be empty");
+  }
+  if (requiredSigners.length === 0 || requiredSigners.length > MAX_SOLANA_OFFCHAIN_SIGNERS) {
+    throw new Error("Solana off-chain message requires between 1 and 255 signers");
+  }
+  let messageText;
+  try {
+    messageText = decodeUtf8Strict(message);
+  } catch {
+    throw new Error("Solana off-chain message must contain valid UTF-8");
+  }
+  const signerBytes = requiredSigners.map((signer, index) => {
+    let bytes;
+    try {
+      bytes = hexToBytes(signer);
+    } catch {
+      throw new Error(`Solana off-chain signer ${index} must be a hex public key`);
+    }
+    if (bytes.length !== SOLANA_PUBLIC_KEY_LENGTH) {
+      throw new Error(`Solana off-chain signer ${index} must be 32 bytes`);
+    }
+    return bytes;
+  });
+  signerBytes.sort(compareBytes);
+  for (let index = 1; index < signerBytes.length; index += 1) {
+    if (bytesEqual(signerBytes[index - 1], signerBytes[index])) {
+      throw new Error("Solana off-chain signers must be unique");
+    }
+  }
+  const serializedMessage = new Uint8Array(
+    SOLANA_OFFCHAIN_SIGNING_DOMAIN.length + 2 + signerBytes.length * SOLANA_PUBLIC_KEY_LENGTH + message.length
+  );
+  let offset = 0;
+  serializedMessage.set(SOLANA_OFFCHAIN_SIGNING_DOMAIN, offset);
+  offset += SOLANA_OFFCHAIN_SIGNING_DOMAIN.length;
+  serializedMessage[offset] = 1;
+  offset += 1;
+  serializedMessage[offset] = signerBytes.length;
+  offset += 1;
+  for (const signer of signerBytes) {
+    serializedMessage.set(signer, offset);
+    offset += SOLANA_PUBLIC_KEY_LENGTH;
+  }
+  serializedMessage.set(message, offset);
+  return {
+    messageText,
+    requiredSigners: signerBytes.map(bytesToHex3),
+    serializedMessage
+  };
+}
+
 // src/utils/deviceIdentity.ts
 var ONEKEY_BLE_SERVICE_UUID = "00000001-0000-1000-8000-00805f9b34fb";
 var TREZOR_BLE_SERVICE_UUID = "8c000001-a59b-4d58-a9ad-073df69fa1b1";
 var LEDGER_USB_VENDOR_ID = 11415;
+var KEYSTONE_USB_VENDOR_ID = 4617;
+var KEYSTONE_USB_PRODUCT_ID = 12289;
 var lower = (value) => value?.trim().toLowerCase() ?? "";
 var hasServiceUuid = (input, uuid) => {
   const expected = uuid.toLowerCase();
@@ -594,6 +1117,11 @@ function detectHardwareVendorFromDescriptor(input) {
   if (typeof input.vendor === "number" && input.vendor === LEDGER_USB_VENDOR_ID || input.vendorId === LEDGER_USB_VENDOR_ID || manufacturerName.includes("ledger")) {
     return "ledger";
   }
+  const usbVendorId = typeof input.vendor === "number" ? input.vendor : input.vendorId;
+  const usbProductId = typeof input.product === "number" ? input.product : input.productId;
+  if (usbVendorId === KEYSTONE_USB_VENDOR_ID && usbProductId === KEYSTONE_USB_PRODUCT_ID || manufacturerName.includes("keystone")) {
+    return "keystone";
+  }
   return void 0;
 }
 function isKnownNonTargetHardwareVendor(input, targetVendor) {
@@ -617,28 +1145,62 @@ async function batchCall(params, callFn, onProgress) {
 
 // src/utils/methodCatalog.ts
 var HARDWARE_METHOD_CATALOG = {
-  evmGetAddress: { chain: "evm", allNetwork: true },
-  evmSignTransaction: { chain: "evm", allNetwork: false },
-  evmSignMessage: { chain: "evm", allNetwork: false },
-  evmSignTypedData: { chain: "evm", allNetwork: false },
-  btcGetAddress: { chain: "btc", allNetwork: true },
-  btcGetPublicKey: { chain: "btc", allNetwork: true },
-  btcSignTransaction: { chain: "btc", allNetwork: false },
-  btcSignPsbt: { chain: "btc", allNetwork: false },
-  btcSignMessage: { chain: "btc", allNetwork: false },
-  btcGetMasterFingerprint: { chain: "btc", allNetwork: false },
-  solGetAddress: { chain: "sol", allNetwork: true },
-  solSignTransaction: { chain: "sol", allNetwork: false },
-  solSignMessage: { chain: "sol", allNetwork: false },
-  tronGetAddress: { chain: "tron", allNetwork: true },
-  tronSignTransaction: { chain: "tron", allNetwork: false },
-  tronSignMessage: { chain: "tron", allNetwork: false }
+  evmGetAddress: { chain: "evm", allNetwork: true, replayAfterTransportFailure: "safe" },
+  evmSignTransaction: {
+    chain: "evm",
+    allNetwork: false,
+    replayAfterTransportFailure: "unsafe"
+  },
+  evmSignMessage: { chain: "evm", allNetwork: false, replayAfterTransportFailure: "unsafe" },
+  evmSignTypedData: { chain: "evm", allNetwork: false, replayAfterTransportFailure: "unsafe" },
+  btcGetAddress: { chain: "btc", allNetwork: true, replayAfterTransportFailure: "safe" },
+  btcGetPublicKey: { chain: "btc", allNetwork: true, replayAfterTransportFailure: "safe" },
+  btcSignTransaction: {
+    chain: "btc",
+    allNetwork: false,
+    replayAfterTransportFailure: "unsafe"
+  },
+  btcSignPsbt: { chain: "btc", allNetwork: false, replayAfterTransportFailure: "unsafe" },
+  btcSignMessage: { chain: "btc", allNetwork: false, replayAfterTransportFailure: "unsafe" },
+  btcGetMasterFingerprint: {
+    chain: "btc",
+    allNetwork: false,
+    replayAfterTransportFailure: "safe"
+  },
+  solGetAddress: { chain: "sol", allNetwork: true, replayAfterTransportFailure: "safe" },
+  solSignTransaction: {
+    chain: "sol",
+    allNetwork: false,
+    replayAfterTransportFailure: "unsafe"
+  },
+  solSignMessage: { chain: "sol", allNetwork: false, replayAfterTransportFailure: "unsafe" },
+  tronGetAddress: { chain: "tron", allNetwork: true, replayAfterTransportFailure: "safe" },
+  tronSignTransaction: {
+    chain: "tron",
+    allNetwork: false,
+    replayAfterTransportFailure: "unsafe"
+  },
+  tronSignMessage: { chain: "tron", allNetwork: false, replayAfterTransportFailure: "unsafe" },
+  zcashGetFullViewingKey: {
+    chain: "zcash",
+    allNetwork: false,
+    replayAfterTransportFailure: "safe"
+  },
+  zcashGetShieldedAddress: {
+    chain: "zcash",
+    allNetwork: false,
+    replayAfterTransportFailure: "safe"
+  }
 };
 var ALL_NETWORK_METHOD_NAMES = Object.entries(HARDWARE_METHOD_CATALOG).filter(([, metadata]) => metadata.allNetwork).map(([method]) => method);
 var ALL_NETWORK_METHOD_SET = new Set(ALL_NETWORK_METHOD_NAMES);
 function getHardwareMethodMetadata(method) {
   return HARDWARE_METHOD_CATALOG[method];
 }
+var SAFE_NON_CHAIN_METHODS = /* @__PURE__ */ new Set(["getFeatures", "authenticateDevice"]);
+function canReplayHardwareMethodAfterTransportFailure(method) {
+  return getHardwareMethodMetadata(method)?.replayAfterTransportFailure === "safe" || SAFE_NON_CHAIN_METHODS.has(method);
+}
 function isAllNetworkMethodName(method) {
   return ALL_NETWORK_METHOD_SET.has(method);
 }
@@ -698,6 +1260,19 @@ async function runAllNetworkGetAddress({
   }
   return success(responses);
 }
+function isUserRefusal(code) {
+  return code === 10005 /* UserAborted */ || code === 10001 /* UserRejected */;
+}
+function isConnectionLost(code) {
+  const codes = [
+    10101 /* DeviceDisconnected */,
+    10003 /* OperationTimeout */,
+    10300 /* TransportError */,
+    10113 /* OperationEnded */,
+    10112 /* OperationNotFound */
+  ];
+  return code !== void 0 && codes.includes(code);
+}
 function buildUnsupportedMethodResponse(item) {
   return {
     ...item,
@@ -731,8 +1306,11 @@ export {
   DeviceJobQueue,
   EConnectorInteraction,
   HARDWARE_METHOD_CATALOG,
+  HARDWARE_RUNTIME_ID_PREFIX,
   HardwareErrorCode,
+  OPERATION_DEFAULT_TTL_MS,
   ORPHAN_ELIGIBLE_ERROR_CODES,
+  OperationRegistry,
   SDK,
   TypedEventEmitter,
   UI_EVENT,
@@ -745,23 +1323,43 @@ export {
   UiRequestRegistry,
   batchCall,
   buildUnsupportedMethodResponse,
-  bytesToHex2 as bytesToHex,
+  bytesToHex3 as bytesToHex,
+  canReplayHardwareMethodAfterTransportFailure,
   compareSemver,
   createBridgedConnector,
   createCombinedConnector,
+  createHardwareLinkId,
+  createHardwareOperationId,
+  createHardwareSearchTargetId,
   createHwkError,
+  defaultOriginForCode,
+  defaultRecoveryForCode,
   deriveDeviceFingerprint,
+  deriveWalletId,
   detectHardwareVendorFromDescriptor,
   enrichErrorMessage,
   ensure0x,
   failure,
   getAllNetworkMethodChain,
   getHardwareMethodMetadata,
+  hasHardwareRuntimeIdPrefix,
   hexToBytes,
   isAllNetworkMethodName,
+  isConnectionLost,
+  isHardwareOperationId,
+  isHwkRecoveryHint,
   isKnownNonTargetHardwareVendor,
+  isUserRefusal,
+  operationMayHaveCompletedParams,
   padHex64,
+  parseBip32MasterFingerprint,
+  parseHardwareRuntimeId,
+  prepareSolanaOffchainMessageV1,
   rehydrateConnectorError,
+  requestBleDeviceSelection,
+  requestSaveDeviceBinding,
+  resolveHardwareOperationTarget,
+  resolveSearchTargetReusePolicy,
   runAllNetworkGetAddress,
   serializeConnectorError,
   stripHex,