@onekeyfe/hwk-adapter-core 1.2.4-alpha.2 → 1.2.5-alpha.0

package/dist/errors-BgJ4kzRx.d.ts

@@ -0,0 +1,276 @@
+/**
+ * HWK HardwareErrorCode — independent namespace from the legacy
+ * `@onekeyfe/shared` HardwareErrorCode (which occupies 0-902).
+ *
+ * All HWK codes are 5-digit (>= 10000) so the two tables never collide
+ * even if either side grows. Each sub-category gets a 100-slot block.
+ *
+ *   10000-10099  Generic / cross-cutting primitives
+ *   10100-10199  Device state
+ *   10200-10299  Firmware
+ *   10300-10399  Transport + OS-level permission
+ *   10400-10499  PIN / Passphrase
+ *   10500-10599  App lifecycle (wrong app, not open, too old)
+ *   10600-10699  Payload / framing limits (adapter-level)
+ *   10700-10999  RESERVED, future adapter-level categories
+ *
+ *   11000-11099  EVM APDU (reactive mapping)
+ *   11100-11199  Solana APDU
+ *   11200-11299  Tron APDU
+ *   11300-11399  BTC APDU
+ *   11400-11999  RESERVED — future chain APDU blocks (100 per chain)
+ *
+ *   12000-99999  RESERVED — future major categories
+ */
+declare enum HardwareErrorCode {
+    UnknownError = 10000,
+    UserRejected = 10001,
+    InvalidParams = 10002,
+    OperationTimeout = 10003,
+    MethodNotSupported = 10004,
+    /** User dismissed in-app cancel UI. Distinct from UserRejected (on-device). */
+    UserAborted = 10005,
+    DeviceNotFound = 10100,
+    DeviceDisconnected = 10101,
+    DeviceBusy = 10102,
+    DeviceLocked = 10103,
+    DeviceNotInitialized = 10104,
+    DeviceInBootloader = 10105,
+    DeviceMismatch = 10106,
+    /** Chain app wedged (e.g. Ledger BTC 0x6901). User must exit app on device. */
+    DeviceAppStuck = 10107,
+    /** Vendor (Ledger / Trezor) doesn't support the chain at all. */
+    ChainNotSupported = 10108,
+    /** Current operation supports only one connected device. */
+    DeviceOneDeviceOnly = 10109,
+    /**
+     * The device rejected the requested derivation path (Trezor Failure_DataError
+     * "Forbidden key path") — the path is non-standard or its index is outside the
+     * range the device's safety checks allow. Distinct from ChainNotSupported
+     * (whole chain) and MethodNotSupported (the operation/method itself).
+     */
+    DevicePathForbidden = 10110,
+    /** Busy with our own in-flight request (queue guard / firmware Failure_Busy), not another app — wait and retry, don't close other apps. */
+    DeviceBusyInternal = 10111,
+    /** The supplied runtime-only operation id is unknown to this adapter instance. */
+    OperationNotFound = 10112,
+    /** The supplied operation ended and can never be resumed. */
+    OperationEnded = 10113,
+    /**
+     * Discovery found devices but none is the expected wallet (wrong unit connected). DeviceMismatch
+     * is for reaching the expected device and finding a different identity on it.
+     */
+    DeviceSearchMismatch = 10114,
+    FirmwareTooOld = 10200,
+    FirmwareUpdateRequired = 10201,
+    TransportError = 10300,
+    BridgeNotFound = 10301,
+    TransportNotAvailable = 10302,
+    /**
+     * OS-level permission (Bluetooth / USB / etc.) — denied, blocked,
+     * unavailable, or dismissed. Consumers surface a single "please grant
+     * permission" toast and let the user retry manually.
+     */
+    DevicePermissionDenied = 10303,
+    /**
+     * BLE SMP pairing did not complete within the GATT bonding window.
+     * GATT connected but the device didn't acknowledge SMP — typically
+     * because the user didn't confirm the passkey on the device, or the
+     * device went out of range mid-pairing. Distinct from OperationTimeout
+     * (generic) and from DeviceLocked (Secure Element actually locked).
+     */
+    BlePairingTimeout = 10304,
+    /** Remote network failure reaching a vendor's servers (HTTP/WS). Distinct from TransportError (local USB/BLE link). */
+    NetworkError = 10305,
+    /**
+     * Host-managed pairing handshake failed (Trezor THP). The device rejected the
+     * pairing exchange — e.g. CodeEntry: the user mistyped the code shown on the
+     * device, so the CPace tag didn't match ("Unexpected Code Entry Tag").
+     * Recoverable: the user re-pairs and re-enters the code. Distinct from
+     * BlePairingTimeout (BLE SMP bonding window) and UserRejected (on-device
+     * reject button).
+     */
+    ThpPairingFailed = 10306,
+    /**
+     * The OS-level BLE bond is stale/invalid, so the device rejected link
+     * encryption: Android GATT_INSUF_AUTHENTICATION (status 5) or iOS "Peer
+     * removed pairing information". Happens after the device is wiped/re-flashed
+     * or unpaired elsewhere while the host still holds an old bond. The SDK cannot
+     * remove an OS bond — the user must forget the device in system Bluetooth
+     * settings and re-pair. Distinct from BlePairingTimeout (SMP window) and
+     * ThpPairingFailed (THP code mismatch).
+     */
+    BleBondInvalid = 10307,
+    /**
+     * A stored THP pairing credential was rejected by the device during the
+     * handshake (device returned completion `state=0`), so the autoconnect session
+     * could not be established. The SDK discards the stale credential; recovery is
+     * a fresh pairing. Distinct from ThpPairingFailed (user mistyped the code
+     * during an *active* pairing) and BleBondInvalid (OS-level BLE bond).
+     */
+    ThpPairingRequired = 10308,
+    /**
+     * Generic BLE connect failure where the OS dropped the specific reason. On
+     * macOS the noble native binding hardcodes "connection failed" (and a connect
+     * timeout) and discards the CoreBluetooth NSError, so the SDK cannot tell a
+     * stale bond from an out-of-range / unresponsive device. Surfaced as a
+     * generic "couldn't connect — check the device, re-pair if paired before".
+     * Distinct from BleBondInvalid (a *known* stale-bond signal, iOS/Android only)
+     * and BlePairingTimeout (the SMP bonding window).
+     */
+    BleConnectFailed = 10309,
+    /**
+     * The user cancelled BLE pairing from the app while the connect was still
+     * waiting on the OS pairing window. Not a failure to report — the flow ends
+     * because they asked it to. Distinct from UserAborted (generic in-app cancel)
+     * so the pairing UI can close quietly instead of surfacing a connect error,
+     * and from BlePairingTimeout (the SMP window elapsed on its own).
+     */
+    BlePairingCancelled = 10310,
+    /**
+     * Ledger manager-api WebSocket (app install/uninstall, genuine check) broke while relaying APDUs.
+     * The device link is fine, so retry; NetworkError never carried device traffic.
+     */
+    LedgerSecureChannelError = 10311,
+    /**
+     * Vendor metadata service returned an unusable payload (Ledger firmware metadata, app catalog).
+     * The request succeeded, so callers must not treat it as a dropped link.
+     */
+    LedgerFirmwareMetadataError = 10312,
+    PinInvalid = 10400,
+    PinCancelled = 10401,
+    PassphraseRejected = 10402,
+    /**
+     * The passphrase entered produced a different wallet (`passphraseState`) than
+     * the one the caller asked to operate on. Trezor-only: the host pins a wallet
+     * by its derived state and the SDK refuses to sign with a mismatched
+     * passphrase session. Surfaced by TrezorAdapter.getPassphraseState.
+     */
+    PassphraseStateMismatch = 10403,
+    /**
+     * The two new-PIN entries did not match during set/change PIN. Only host-input
+     * models (Trezor Model One matrix) surface this; on-device-input models show
+     * the mismatch on the device and never return it.
+     */
+    PinMismatch = 10404,
+    /** Standard wallet is unavailable while Trezor enforces on-device passphrase entry. */
+    PassphraseAlwaysOnDevice = 10405,
+    /** Chain app NOT INSTALLED on device. User must install via Ledger Live. */
+    AppNotInstalled = 10500,
+    WrongApp = 10501,
+    /** 0x911c Command code not supported — app predates current SDK. */
+    AppTooOld = 10502,
+    /** Not enough free storage for install/update; user must uninstall apps first. */
+    DeviceOutOfMemory = 10503,
+    /** Install refused, the app is already on the device; benign when the caller only needs it. */
+    AppAlreadyInstalled = 10504,
+    /**
+     * Payload exceeds a transport's framing cap (Keystone USB: ~12.5KB, 200 frames of 64 bytes).
+     * Retrying on the same transport fails the same way; switch channel or shrink the payload.
+     */
+    PayloadTooLarge = 10600,
+    /** 0x6a80 Invalid data — observed on blindSignTransactionFallback when the
+     *  user has not enabled Blind signing on the device. */
+    EvmBlindSigningRequired = 11000,
+    /** 0x6984 Plugin not installed */
+    EvmClearSignPluginMissing = 11001,
+    /** 0x6a84 Insufficient memory (typical on Nano S with large calldata) */
+    EvmDataTooLarge = 11002,
+    /** 0x6501 TransactionType not supported (app too old for EIP-1559 / blob / 7702) */
+    EvmTxTypeNotSupported = 11003,
+    /** 0x6808 Blind signing disabled for this instruction. */
+    SolanaBlindSigningRequired = 11100,
+    /** 0x6a8d Custom Contracts setting disabled (blocks TRC-20 etc.). */
+    TronCustomContractRequired = 11200,
+    /** 0x6a8b Transactions Data setting disabled. */
+    TronDataSigningRequired = 11201,
+    /** 0x6a8c Sign by Hash setting disabled (hash-signing fallback). */
+    TronSignByHashRequired = 11202,
+    /** 0xb008 Wallet policy HMAC mismatch or not registered. */
+    BtcWalletPolicyHmacMismatch = 11300,
+    /** 0xb007 Aborted due to unexpected state (malformed PSBT / missing UTXO). */
+    BtcUnexpectedState = 11301
+}
+/**
+ * Device-level failures the SDK cannot self-recover from — affect the entire
+ * batch (vs per-chain failures like AppNotInstalled / WrongApp which soft-
+ * skip in onboarding). Combined with `accounts.length === 0`, signals
+ * genuine orphan. Also reused as the batch-abort whitelist for HWK.
+ * Single source of truth.
+ *
+ * UserRejected (device-side reject) is included: pressing reject is an
+ * explicit "I don't consent" — continuing the batch to ask again on the
+ * next chain is harassment, not helpful.
+ */
+declare const ORPHAN_ELIGIBLE_ERROR_CODES: number[];
+/**
+ * Where a failure came from; code ranges can't tell (UserRejected=10001 is the device,
+ * DevicePermissionDenied=10303 is the host).
+ * `device`: the firmware answered (rejection, locked, wrong PIN); surface verbatim, never
+ * auto-reconnect, switch channels, or drop a healthy session.
+ * `transport`: the pipe failed (cable pulled, bus reset); reconnecting is fair game.
+ * `host`: the environment refused (permission, picker, bad params); fix it, not the link.
+ * A mapper that can't tell leaves it unset so consumers fall back to code-based tables.
+ */
+type HwkErrorOrigin = 'device' | 'transport' | 'host';
+/**
+ * Smallest resource to replace before retrying; never permission to auto-replay a signing command.
+ * `call`: nothing. `operation`: rebind from the target if its identity is persistent.
+ * `search-target`: rediscover and reselect. `transport`: repair or switch transport.
+ * `not-recoverable`: retrying cannot succeed. `unknown`: no safe claim.
+ */
+type HwkRecoveryScope = 'call' | 'operation' | 'search-target' | 'transport' | 'not-recoverable' | 'unknown';
+interface HwkRecoveryHint {
+    scope: HwkRecoveryScope;
+}
+declare function isHwkRecoveryHint(value: unknown): value is HwkRecoveryHint;
+/** Vendor-neutral fallback; adapters may stamp a narrower hint when session state is clear. */
+declare function defaultRecoveryForCode(code: HardwareErrorCode): HwkRecoveryHint;
+/**
+ * Default code-to-origin table; vendors override only where their mapping knows better.
+ * Context-dependent codes (UnknownError, OperationTimeout, DeviceBusy) return undefined.
+ */
+declare function defaultOriginForCode(code: HardwareErrorCode): HwkErrorOrigin | undefined;
+interface IHwkErrorPayload {
+    code: HardwareErrorCode;
+    message: string;
+    origin?: HwkErrorOrigin;
+    recovery?: HwkRecoveryHint;
+    appName?: string;
+    _tag?: string;
+    params?: Record<string, unknown>;
+}
+interface IOperationMayHaveCompletedParams extends Record<string, unknown> {
+    operationMayHaveCompleted: true;
+    method: string;
+}
+/**
+ * Marks an unsafe request whose response was lost after dispatch; the transport error is not proof
+ * that the device rejected or skipped it.
+ */
+declare function operationMayHaveCompletedParams(method: string, params?: Record<string, unknown>): IOperationMayHaveCompletedParams;
+type HwkError = Error & {
+    code: HardwareErrorCode;
+    /** See {@link HwkErrorOrigin}. Survives serializeConnectorError/rehydrate via `params`. */
+    origin?: HwkErrorOrigin;
+    recovery?: HwkRecoveryHint;
+    appName?: string;
+    _tag?: string;
+    params?: Record<string, unknown>;
+};
+/**
+ * Canonical throwable for HWK adapters. Plain Error + canonical extra fields,
+ * shape-compatible with `rehydrateConnectorError` so locally-thrown and
+ * cross-boundary errors are indistinguishable to downstream classifiers
+ * (`err.code` / `err._tag` / `err.appName`). Do NOT mutate caught errors
+ * with `Object.assign` — construct a fresh one via this factory.
+ */
+declare function createHwkError(payload: IHwkErrorPayload): HwkError;
+
+/**
+ * Enrich a hardware error message with actionable recovery hints.
+ * Shared across adapters (Ledger, Trezor, etc.).
+ */
+declare function enrichErrorMessage(code: HardwareErrorCode, originalMessage: string): string;
+
+export { HardwareErrorCode as H, type IHwkErrorPayload as I, ORPHAN_ELIGIBLE_ERROR_CODES as O, type HwkErrorOrigin as a, type HwkRecoveryHint as b, type HwkError as c, type HwkRecoveryScope as d, type IOperationMayHaveCompletedParams as e, createHwkError as f, defaultOriginForCode as g, defaultRecoveryForCode as h, enrichErrorMessage as i, isHwkRecoveryHint as j, operationMayHaveCompletedParams as o };

package/dist/errors.d.mts

@@ -1,207 +1 @@
-/**
- * HWK HardwareErrorCode — independent namespace from the legacy
- * `@onekeyfe/shared` HardwareErrorCode (which occupies 0-902).
- *
- * All HWK codes are 5-digit (>= 10000) so the two tables never collide
- * even if either side grows. Each sub-category gets a 100-slot block.
- *
- *   10000-10099  Generic / cross-cutting primitives
- *   10100-10199  Device state
- *   10200-10299  Firmware
- *   10300-10399  Transport + OS-level permission
- *   10400-10499  PIN / Passphrase
- *   10500-10599  App lifecycle (wrong app, not open, too old)
- *   10600-10999  RESERVED — future adapter-level categories
- *
- *   11000-11099  EVM APDU (reactive mapping)
- *   11100-11199  Solana APDU
- *   11200-11299  Tron APDU
- *   11300-11399  BTC APDU
- *   11400-11999  RESERVED — future chain APDU blocks (100 per chain)
- *
- *   12000-99999  RESERVED — future major categories
- */
-declare enum HardwareErrorCode {
-    UnknownError = 10000,
-    UserRejected = 10001,
-    InvalidParams = 10002,
-    OperationTimeout = 10003,
-    MethodNotSupported = 10004,
-    /** User dismissed in-app cancel UI. Distinct from UserRejected (on-device). */
-    UserAborted = 10005,
-    DeviceNotFound = 10100,
-    DeviceDisconnected = 10101,
-    DeviceBusy = 10102,
-    DeviceLocked = 10103,
-    DeviceNotInitialized = 10104,
-    DeviceInBootloader = 10105,
-    DeviceMismatch = 10106,
-    /** Chain app wedged (e.g. Ledger BTC 0x6901). User must exit app on device. */
-    DeviceAppStuck = 10107,
-    /** Vendor (Ledger / Trezor) doesn't support the chain at all. */
-    ChainNotSupported = 10108,
-    /** Current operation supports only one connected device. */
-    DeviceOneDeviceOnly = 10109,
-    /**
-     * The device rejected the requested derivation path (Trezor Failure_DataError
-     * "Forbidden key path") — the path is non-standard or its index is outside the
-     * range the device's safety checks allow. Distinct from ChainNotSupported
-     * (whole chain) and MethodNotSupported (the operation/method itself).
-     */
-    DevicePathForbidden = 10110,
-    /** Busy with our own in-flight request (queue guard / firmware Failure_Busy), not another app — wait and retry, don't close other apps. */
-    DeviceBusyInternal = 10111,
-    FirmwareTooOld = 10200,
-    FirmwareUpdateRequired = 10201,
-    TransportError = 10300,
-    BridgeNotFound = 10301,
-    TransportNotAvailable = 10302,
-    /**
-     * OS-level permission (Bluetooth / USB / etc.) — denied, blocked,
-     * unavailable, or dismissed. Consumers surface a single "please grant
-     * permission" toast and let the user retry manually.
-     */
-    DevicePermissionDenied = 10303,
-    /**
-     * BLE SMP pairing did not complete within the GATT bonding window.
-     * GATT connected but the device didn't acknowledge SMP — typically
-     * because the user didn't confirm the passkey on the device, or the
-     * device went out of range mid-pairing. Distinct from OperationTimeout
-     * (generic) and from DeviceLocked (Secure Element actually locked).
-     */
-    BlePairingTimeout = 10304,
-    /** Remote network failure reaching a vendor's servers (HTTP/WS). Distinct from TransportError (local USB/BLE link). */
-    NetworkError = 10305,
-    /**
-     * Host-managed pairing handshake failed (Trezor THP). The device rejected the
-     * pairing exchange — e.g. CodeEntry: the user mistyped the code shown on the
-     * device, so the CPace tag didn't match ("Unexpected Code Entry Tag").
-     * Recoverable: the user re-pairs and re-enters the code. Distinct from
-     * BlePairingTimeout (BLE SMP bonding window) and UserRejected (on-device
-     * reject button).
-     */
-    ThpPairingFailed = 10306,
-    /**
-     * The OS-level BLE bond is stale/invalid, so the device rejected link
-     * encryption: Android GATT_INSUF_AUTHENTICATION (status 5) or iOS "Peer
-     * removed pairing information". Happens after the device is wiped/re-flashed
-     * or unpaired elsewhere while the host still holds an old bond. The SDK cannot
-     * remove an OS bond — the user must forget the device in system Bluetooth
-     * settings and re-pair. Distinct from BlePairingTimeout (SMP window) and
-     * ThpPairingFailed (THP code mismatch).
-     */
-    BleBondInvalid = 10307,
-    /**
-     * A stored THP pairing credential was rejected by the device during the
-     * handshake (device returned completion `state=0`), so the autoconnect session
-     * could not be established. The SDK discards the stale credential; recovery is
-     * a fresh pairing. Distinct from ThpPairingFailed (user mistyped the code
-     * during an *active* pairing) and BleBondInvalid (OS-level BLE bond).
-     */
-    ThpPairingRequired = 10308,
-    /**
-     * Generic BLE connect failure where the OS dropped the specific reason. On
-     * macOS the noble native binding hardcodes "connection failed" (and a connect
-     * timeout) and discards the CoreBluetooth NSError, so the SDK cannot tell a
-     * stale bond from an out-of-range / unresponsive device. Surfaced as a
-     * generic "couldn't connect — check the device, re-pair if paired before".
-     * Distinct from BleBondInvalid (a *known* stale-bond signal, iOS/Android only)
-     * and BlePairingTimeout (the SMP bonding window).
-     */
-    BleConnectFailed = 10309,
-    /**
-     * The user cancelled BLE pairing from the app while the connect was still
-     * waiting on the OS pairing window. Not a failure to report — the flow ends
-     * because they asked it to. Distinct from UserAborted (generic in-app cancel)
-     * so the pairing UI can close quietly instead of surfacing a connect error,
-     * and from BlePairingTimeout (the SMP window elapsed on its own).
-     */
-    BlePairingCancelled = 10310,
-    PinInvalid = 10400,
-    PinCancelled = 10401,
-    PassphraseRejected = 10402,
-    /**
-     * The passphrase entered produced a different wallet (`passphraseState`) than
-     * the one the caller asked to operate on. Trezor-only: the host pins a wallet
-     * by its derived state and the SDK refuses to sign with a mismatched
-     * passphrase session. Surfaced by TrezorAdapter.getPassphraseState.
-     */
-    PassphraseStateMismatch = 10403,
-    /**
-     * The two new-PIN entries did not match during set/change PIN. Only host-input
-     * models (Trezor Model One matrix) surface this; on-device-input models show
-     * the mismatch on the device and never return it.
-     */
-    PinMismatch = 10404,
-    /** Standard wallet is unavailable while Trezor enforces on-device passphrase entry. */
-    PassphraseAlwaysOnDevice = 10405,
-    /** Chain app NOT INSTALLED on device. User must install via Ledger Live. */
-    AppNotInstalled = 10500,
-    WrongApp = 10501,
-    /** 0x911c Command code not supported — app predates current SDK. */
-    AppTooOld = 10502,
-    /** Not enough free storage for install/update; user must uninstall apps first. */
-    DeviceOutOfMemory = 10503,
-    /** 0x6a80 Invalid data — observed on blindSignTransactionFallback when the
-     *  user has not enabled Blind signing on the device. */
-    EvmBlindSigningRequired = 11000,
-    /** 0x6984 Plugin not installed */
-    EvmClearSignPluginMissing = 11001,
-    /** 0x6a84 Insufficient memory (typical on Nano S with large calldata) */
-    EvmDataTooLarge = 11002,
-    /** 0x6501 TransactionType not supported (app too old for EIP-1559 / blob / 7702) */
-    EvmTxTypeNotSupported = 11003,
-    /** 0x6808 Blind signing disabled for this instruction. */
-    SolanaBlindSigningRequired = 11100,
-    /** 0x6a8d Custom Contracts setting disabled (blocks TRC-20 etc.). */
-    TronCustomContractRequired = 11200,
-    /** 0x6a8b Transactions Data setting disabled. */
-    TronDataSigningRequired = 11201,
-    /** 0x6a8c Sign by Hash setting disabled (hash-signing fallback). */
-    TronSignByHashRequired = 11202,
-    /** 0xb008 Wallet policy HMAC mismatch or not registered. */
-    BtcWalletPolicyHmacMismatch = 11300,
-    /** 0xb007 Aborted due to unexpected state (malformed PSBT / missing UTXO). */
-    BtcUnexpectedState = 11301
-}
-/**
- * Device-level failures the SDK cannot self-recover from — affect the entire
- * batch (vs per-chain failures like AppNotInstalled / WrongApp which soft-
- * skip in onboarding). Combined with `accounts.length === 0`, signals
- * genuine orphan. Also reused as the batch-abort whitelist for HWK.
- * Single source of truth.
- *
- * UserRejected (device-side reject) is included: pressing reject is an
- * explicit "I don't consent" — continuing the batch to ask again on the
- * next chain is harassment, not helpful.
- */
-declare const ORPHAN_ELIGIBLE_ERROR_CODES: number[];
-interface IHwkErrorPayload {
-    code: HardwareErrorCode;
-    message: string;
-    appName?: string;
-    _tag?: string;
-    params?: Record<string, unknown>;
-}
-type HwkError = Error & {
-    code: HardwareErrorCode;
-    appName?: string;
-    _tag?: string;
-    params?: Record<string, unknown>;
-};
-/**
- * Canonical throwable for HWK adapters. Plain Error + canonical extra fields,
- * shape-compatible with `rehydrateConnectorError` so locally-thrown and
- * cross-boundary errors are indistinguishable to downstream classifiers
- * (`err.code` / `err._tag` / `err.appName`). Do NOT mutate caught errors
- * with `Object.assign` — construct a fresh one via this factory.
- */
-declare function createHwkError(payload: IHwkErrorPayload): HwkError;
-
-/**
- * Enrich a hardware error message with actionable recovery hints.
- * Shared across adapters (Ledger, Trezor, etc.).
- */
-declare function enrichErrorMessage(code: HardwareErrorCode, originalMessage: string): string;
-
-export { HardwareErrorCode, type HwkError, type IHwkErrorPayload, ORPHAN_ELIGIBLE_ERROR_CODES, createHwkError, enrichErrorMessage };
+export { H as HardwareErrorCode, c as HwkError, b as HwkRecoveryHint, d as HwkRecoveryScope, I as IHwkErrorPayload, O as ORPHAN_ELIGIBLE_ERROR_CODES, f as createHwkError, h as defaultRecoveryForCode, i as enrichErrorMessage, j as isHwkRecoveryHint } from './errors-BgJ4kzRx.mjs';