@onekeyfe/hwk-adapter-core 1.2.8-alpha.120 → 1.2.8-alpha.121

package/dist/index.d.mts

@@ -1,7 +1,7 @@
-import { H as HardwareErrorCode, a as HwkErrorOrigin, b as HwkRecoveryHint } from './errors-BgJ4kzRx.mjs';
-export { c as HwkError, d as HwkRecoveryScope, I as IHwkErrorPayload, e as IOperationMayHaveCompletedParams, O as ORPHAN_ELIGIBLE_ERROR_CODES, f as createHwkError, g as defaultOriginForCode, h as defaultRecoveryForCode, i as enrichErrorMessage, j as isHwkRecoveryHint, o as operationMayHaveCompletedParams } from './errors-BgJ4kzRx.mjs';
-import { U as UiResponseEvent, E as ExportedAccountKey, a as UiRequestOperationAttribution, b as UI_REQUEST, Q as QrDisplayData, c as UiRequestRegistry, S as SaveDeviceBindingDeclineReason } from './ui-events-C61GTilK.mjs';
-export { D as DevicePermissionDeniedReason, d as DevicePermissionResponse, e as QrResponseData, f as UI_EVENT, g as UI_REQUEST_CANCELLED_TAG, h as UI_REQUEST_DEFAULT_TIMEOUT_MS, i as UI_REQUEST_PREEMPTED_TAG, j as UI_REQUEST_TIMEOUT_TAG, k as UI_RESPONSE } from './ui-events-C61GTilK.mjs';
+import { H as HardwareErrorCode, a as HwkErrorOrigin, b as HwkRecoveryHint } from './errors-DednD9bG.mjs';
+export { c as HwkError, d as HwkRecoveryScope, I as IHwkErrorPayload, e as IOperationMayHaveCompletedParams, O as ORPHAN_ELIGIBLE_ERROR_CODES, f as createHwkError, g as defaultOriginForCode, h as defaultRecoveryForCode, i as enrichErrorMessage, j as isHwkRecoveryHint, o as operationMayHaveCompletedParams } from './errors-DednD9bG.mjs';
+import { U as UiResponseEvent, E as ExportedAccountKey, a as UiRequestOperationAttribution, b as UI_REQUEST, Q as QrDisplayData, c as UiRequestRegistry, S as SaveDeviceBindingDeclineReason } from './ui-events-D_lCGgCk.mjs';
+export { D as DevicePermissionDeniedReason, d as DevicePermissionResponse, e as QrResponseData, f as UI_EVENT, g as UI_REQUEST_CANCELLED_TAG, h as UI_REQUEST_DEFAULT_TIMEOUT_MS, i as UI_REQUEST_PREEMPTED_TAG, j as UI_REQUEST_TIMEOUT_TAG, k as UI_RESPONSE } from './ui-events-D_lCGgCk.mjs';
 
 interface Success<T> {
     success: true;
@@ -53,116 +53,6 @@ declare function parseWalletMasterFingerprint(value: unknown): string | undefine
  */
 declare function deriveDeviceFingerprint(value: string): string;
 
-type VendorType = 'trezor' | 'ledger' | 'keystone';
-/** 'qr' is a virtual channel: UR payloads travel via app-rendered/scanned QR codes. */
-type ConnectionType = 'usb' | 'ble' | 'qr';
-type TransportType = 'usb' | 'ble' | 'hid' | 'bridge' | 'qr';
-/**
- * Device capabilities — describes what a specific device/connection
- * combination can or cannot do. Varies by vendor, model, and connection type.
- *
- * This enables business logic to check capabilities instead of hard-coding
- * vendor-specific conditions (e.g., `if (vendor === 'ledger')`).
- */
-interface DeviceCapabilities {
-    /**
-     * Whether the discovery handle can be reused to reconnect; `false` requires rediscovery. Says
-     * nothing about identity (Trezor BLE is false yet its device_id is stable); verify it separately.
-     */
-    persistentDeviceIdentity: boolean;
-}
-interface DeviceInfo {
-    vendor: VendorType;
-    /** Machine model id (e.g. "nanoX"). */
-    model: string;
-    /** Human-readable model name (e.g. "Ledger Nano X"). */
-    modelName?: string;
-    firmwareVersion: string;
-    deviceId: string;
-    connectId: string;
-    label?: string;
-    connectionType: ConnectionType;
-    battery?: number;
-    /** BLE signal strength (BLE only). */
-    rssi?: number | null;
-    /** BLE connectable flag (BLE only). */
-    isConnectable?: boolean | null;
-    /** USB serial number (USB only). */
-    serialNumber?: string;
-    /** Device capabilities — varies by vendor, model, and connection type */
-    capabilities?: DeviceCapabilities;
-    /**
-     * Vendor-specific raw payload from the post-handshake `Features` (Trezor)
-     * or device-info call. Populated by the connector with `{ transport,
-     * descriptor, features }` so the app layer can read fields we haven't
-     * promoted to the typed surface yet. Treat as informational — promote
-     * any consumed field above.
-     */
-    raw?: Record<string, unknown>;
-}
-interface DeviceTarget {
-    connectId: string;
-    deviceId: string;
-}
-/**
- * How long a discovery handle remains safe to use for a new connection.
- * This is deliberately separate from post-connect device identity.
- */
-type SearchTargetReusePolicy = 'current-discovery' | 'reconnectable' | 'rediscover';
-declare function resolveSearchTargetReusePolicy(device: Pick<DeviceInfo, 'connectionType' | 'capabilities'>): SearchTargetReusePolicy;
-/** Search target for a physical device whose connectId is the discovery handle. */
-declare function toPhysicalDeviceSearchTarget(vendor: VendorType, device: DeviceInfo): DeviceSearchTarget;
-/**
- * A selectable result from hardware discovery. It may represent a physical
- * transport endpoint or an interactive entry such as Keystone QR; it is not a
- * physical-device or wallet identity.
- */
-interface DeviceSearchTarget {
-    /** Opaque handle scoped to the adapter's current discovery state. */
-    searchTargetId: string;
-    /** Whether the handle itself may be retried; never inferred from a stored connectId. */
-    searchTargetReusePolicy?: SearchTargetReusePolicy;
-    vendor: VendorType;
-    connectionType: ConnectionType;
-    kind: 'physical' | 'interactive';
-    label?: string;
-    model?: string;
-    modelName?: string;
-    serialNumber?: string;
-}
-type WalletIdentity = {
-    vendor: 'ledger';
-    type: 'chainFingerprint';
-    chain: ChainForFingerprint;
-    value: string;
-} | {
-    vendor: 'trezor';
-    type: 'deviceId';
-    value: string;
-} | {
-    vendor: 'keystone';
-    type: 'walletId';
-    value: string;
-};
-
-/**
- * Mixin for chain-operation params that can be pinned to a specific passphrase
- * wallet.
- *
- * Trezor-only. `passphraseState` is the wallet identity returned by
- * `getPassphraseState`: today this is the compressed public key derived at
- * `m/44'/0'/0'`, not the 4-byte master fingerprint. When present, the adapter
- * creates a fresh wallet session (THP application session, or v1 device
- * session) and verifies the derived state before issuing the call, so the
- * address/signature comes from the intended passphrase wallet.
- *
- * Ledger has no equivalent and ignores the field — it never reaches the
- * protobuf layer (the adapter strips it before forwarding to the connector).
- */
-interface PassphraseStateAware {
-    passphraseState?: string;
-}
-
 /**
  * Minimal device info returned during discovery (searchDevices).
  * At scan time, full DeviceInfo fields like firmwareVersion are not yet available.
@@ -277,6 +167,8 @@ declare enum EConnectorInteraction {
     AppInstallProgress = "app-install-progress"
 }
 type ConnectorUiEvent = {
+    operationId?: string;
+} & ({
     type: EConnectorInteraction.Searching;
     payload: {
         sessionId: string;
@@ -285,6 +177,7 @@ type ConnectorUiEvent = {
     type: EConnectorInteraction.ConfirmOpenApp;
     payload: {
         sessionId: string;
+        appName?: string;
     };
 } | {
     type: EConnectorInteraction.UnlockDevice;
@@ -308,7 +201,7 @@ type ConnectorUiEvent = {
         appName: string;
         progress: number;
     };
-};
+});
 interface ConnectorEventMap {
     'device-connect': {
         device: ConnectorDevice;
@@ -493,6 +386,190 @@ declare const DEVICE: {
     readonly TREZOR_THP_CREDENTIALS_CHANGED: "device-trezor-thp-credentials-changed";
 };
 
+/**
+ * Mixin for chain-operation params that can be pinned to a specific passphrase
+ * wallet.
+ *
+ * Trezor-only. `passphraseState` is the wallet identity returned by
+ * `getPassphraseState`: today this is the compressed public key derived at
+ * `m/44'/0'/0'`, not the 4-byte master fingerprint. When present, the adapter
+ * creates a fresh wallet session (THP application session, or v1 device
+ * session) and verifies the derived state before issuing the call, so the
+ * address/signature comes from the intended passphrase wallet.
+ *
+ * Ledger has no equivalent and ignores the field — it never reaches the
+ * protobuf layer (the adapter strips it before forwarding to the connector).
+ */
+interface PassphraseStateAware {
+    passphraseState?: string;
+}
+
+interface EvmGetAddressParams extends PassphraseStateAware {
+    path: string;
+    showOnDevice?: boolean;
+    chainId?: number;
+    ethereumDefinitions?: EvmEthereumDefinitions;
+}
+interface EvmAddress {
+    address: string;
+    path: string;
+    /** Device-reported secp256k1 public key; populated when the transport exposes it. */
+    publicKey?: string;
+    /** Set by air-gapped wallets (Keystone): the exported key this address derives from. */
+    accountKey?: ExportedAccountKey;
+}
+interface EvmSignTxBaseParams extends PassphraseStateAware {
+    path: string;
+    chainId?: number;
+}
+/** Ledger shape: the whole RLP-serialized tx (0x-prefixed or plain hex); structured fields forbidden. */
+interface EvmSignTxLedgerParams extends EvmSignTxBaseParams {
+    serializedTx: string;
+    to?: never;
+    value?: never;
+    nonce?: never;
+    gasLimit?: never;
+    gasPrice?: never;
+    txType?: never;
+    maxFeePerGas?: never;
+    maxPriorityFeePerGas?: never;
+    accessList?: never;
+    data?: never;
+    paymentRequest?: never;
+    ethereumDefinitions?: never;
+}
+/** Trezor shape: structured EthereumSignTx protobuf fields; serializedTx forbidden. */
+interface EvmSignTxTrezorParams extends EvmSignTxBaseParams {
+    serializedTx?: never;
+    /** Contract address or recipient. Optional for contract deployment transactions. */
+    to?: string;
+    value?: string;
+    nonce?: string;
+    gasLimit?: string;
+    gasPrice?: string;
+    txType?: number;
+    maxFeePerGas?: string;
+    maxPriorityFeePerGas?: string;
+    accessList?: Array<{
+        address: string;
+        storageKeys: string[];
+    }>;
+    data?: string;
+    paymentRequest?: EvmPaymentRequest;
+    ethereumDefinitions?: EvmEthereumDefinitions;
+}
+/** Mutually exclusive vendor shapes; each adapter narrows to its own. */
+type EvmSignTxParams = EvmSignTxLedgerParams | EvmSignTxTrezorParams;
+interface EvmEthereumDefinitions {
+    /** Trezor Ethereum network definition bytes as a hex string. */
+    encodedNetwork?: string;
+    /** Trezor Ethereum token definition bytes as a hex string. */
+    encodedToken?: string;
+}
+interface EvmPaymentRequestMemo {
+    textMemo?: {
+        text: string;
+    };
+    textDetailsMemo?: {
+        title: string;
+        text: string;
+    };
+    refundMemo?: {
+        address: string;
+        addressN?: number[];
+        mac: string;
+    };
+    coinPurchaseMemo?: {
+        coinType: number;
+        amount: string;
+        address: string;
+        addressN?: number[];
+        mac: string;
+    };
+}
+interface EvmPaymentRequest {
+    nonce?: string;
+    recipientName: string;
+    memos?: EvmPaymentRequestMemo[];
+    /** Decimal string in subunits; SDK encodes it as SLIP-24 uint256 LE hex. */
+    amount?: string;
+    signature: string;
+}
+interface EvmSignedTx {
+    /** Recovery id as `0x`-prefixed hex string. */
+    v: string;
+    /** ECDSA `r` value as `0x`-prefixed, zero-padded 64-char hex string (32 bytes). */
+    r: string;
+    /** ECDSA `s` value as `0x`-prefixed, zero-padded 64-char hex string (32 bytes). */
+    s: string;
+    serializedTx?: string;
+}
+interface EvmSignMsgParams extends PassphraseStateAware {
+    path: string;
+    message: string;
+    chainId?: number;
+    hex?: boolean;
+    ethereumDefinitions?: EvmEthereumDefinitions;
+}
+type EvmSignTypedDataParams = EvmSignTypedDataFull | EvmSignTypedDataHash;
+interface EvmSignTypedDataFull extends PassphraseStateAware {
+    path: string;
+    chainId?: number;
+    /** Defaults to `'full'` when omitted. */
+    mode?: 'full';
+    ethereumDefinitions?: EvmEthereumDefinitions;
+    data: {
+        domain: EIP712Domain;
+        types: Record<string, Array<{
+            name: string;
+            type: string;
+        }>>;
+        primaryType: string;
+        message: Record<string, unknown>;
+    };
+    /**
+     * The dApp's original EIP-712 JSON, byte for byte. Serializing vendors (Keystone) must prefer it:
+     * re-stringifying `data` rewrites integers wider than 2^53 and exponent forms.
+     */
+    dataJson?: string;
+    metamaskV4Compat?: boolean;
+    showMessageHash?: boolean;
+    /**
+     * Optional host-computed hashes. Core Trezor models still use full typed-data
+     * signing for display, while Trezor One can fall back to typed-hash signing
+     * when firmware cannot compute the hashes itself.
+     */
+    domainSeparatorHash?: string;
+    messageHash?: string;
+}
+interface EvmSignTypedDataHash extends PassphraseStateAware {
+    path: string;
+    chainId?: number;
+    mode: 'hash';
+    domainSeparatorHash: string;
+    messageHash: string;
+    ethereumDefinitions?: EvmEthereumDefinitions;
+}
+interface EIP712Domain {
+    name?: string;
+    version?: string;
+    chainId?: number;
+    verifyingContract?: string;
+    salt?: string;
+    [key: string]: unknown;
+}
+interface EvmSignature {
+    /** `0x`-prefixed hex string (r + s + v). */
+    signature: string;
+    address?: string;
+}
+interface IEvmMethods {
+    evmGetAddress(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmGetAddressParams>>): Promise<Response<EvmAddress>>;
+    evmSignTransaction(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmSignTxParams>>): Promise<Response<EvmSignedTx>>;
+    evmSignMessage(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmSignMsgParams>>): Promise<Response<EvmSignature>>;
+    evmSignTypedData(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmSignTypedDataParams>>): Promise<Response<EvmSignature>>;
+}
+
 interface BtcGetAddressParams extends PassphraseStateAware {
     path: string;
     coin?: string;
@@ -898,7 +975,7 @@ declare class OperationRegistry {
     /** Return active or tombstoned binding data without refreshing its TTL. */
     find(operationId: string): HardwareOperation | undefined;
     findActiveByConnectionKey(connectionKey: string): HardwareOperation | undefined;
-    /** Map a job queue key (an operation id or a connection key) to its live operation id. */
+    /** Only an explicitly supplied operation job key owns the call's UI requests. */
     findOperationIdByJobKey(jobKey: string | undefined): string | undefined;
     /**
      * End an operation on the caller's explicit release. Throws for an unknown id; returns undefined
@@ -1034,6 +1111,7 @@ type HardwareUiEvent = Exclude<ConnectorUiEvent, {
     type: EConnectorInteraction.AppInstallProgress;
 }> | {
     type: EConnectorInteraction.AppInstallProgress;
+    operationId?: string;
     payload: {
         connectId: string;
         appName: string;
@@ -1216,6 +1294,8 @@ interface AllNetworkGetAddressParams extends IHardwareCommonCallParams {
 }
 type AllNetworkDeviceIdentity = WalletIdentity;
 type AllNetworkAddressResponsePayload = Record<string, unknown> & {
+    /** This account came from the user's explicit device-export scan. */
+    accountExport?: boolean;
     error?: string;
     code?: HardwareErrorCode | number;
     errorCode?: string | number;
@@ -1342,6 +1422,12 @@ type UiRequestEvent = {
         vendor: string;
         appName: string;
     } & UiRequestOperationAttribution;
+} | {
+    type: typeof UI_REQUEST.REQUEST_QR_FALLBACK_CONFIRM;
+    payload: {
+        vendor: string;
+        requestId: string;
+    } & UiRequestOperationAttribution;
 } | {
     type: typeof UI_REQUEST.REQUEST_TREZOR_THP_PAIRING;
     payload: {
@@ -1513,6 +1599,13 @@ interface HardwareEventMap {
             appName: string;
         } & UiRequestOperationAttribution;
     };
+    [UI_REQUEST.REQUEST_QR_FALLBACK_CONFIRM]: {
+        type: typeof UI_REQUEST.REQUEST_QR_FALLBACK_CONFIRM;
+        payload: {
+            vendor: string;
+            requestId: string;
+        } & UiRequestOperationAttribution;
+    };
     [UI_REQUEST.REQUEST_TREZOR_THP_PAIRING]: {
         type: typeof UI_REQUEST.REQUEST_TREZOR_THP_PAIRING;
         payload: {
@@ -1666,171 +1759,99 @@ interface SearchDevicesOptions {
     transportType?: ConnectionType;
 }
 
-interface EvmGetAddressParams extends PassphraseStateAware {
-    path: string;
-    showOnDevice?: boolean;
-    chainId?: number;
-    ethereumDefinitions?: EvmEthereumDefinitions;
-}
-interface EvmAddress {
-    address: string;
-    path: string;
-    /** Device-reported secp256k1 public key; populated when the transport exposes it. */
-    publicKey?: string;
-    /** Set by air-gapped wallets (Keystone): the exported key this address derives from. */
-    accountKey?: ExportedAccountKey;
-}
-interface EvmSignTxBaseParams extends PassphraseStateAware {
-    path: string;
-    chainId?: number;
-}
-/** Ledger shape: the whole RLP-serialized tx (0x-prefixed or plain hex); structured fields forbidden. */
-interface EvmSignTxLedgerParams extends EvmSignTxBaseParams {
-    serializedTx: string;
-    to?: never;
-    value?: never;
-    nonce?: never;
-    gasLimit?: never;
-    gasPrice?: never;
-    txType?: never;
-    maxFeePerGas?: never;
-    maxPriorityFeePerGas?: never;
-    accessList?: never;
-    data?: never;
-    paymentRequest?: never;
-    ethereumDefinitions?: never;
-}
-/** Trezor shape: structured EthereumSignTx protobuf fields; serializedTx forbidden. */
-interface EvmSignTxTrezorParams extends EvmSignTxBaseParams {
-    serializedTx?: never;
-    /** Contract address or recipient. Optional for contract deployment transactions. */
-    to?: string;
-    value?: string;
-    nonce?: string;
-    gasLimit?: string;
-    gasPrice?: string;
-    txType?: number;
-    maxFeePerGas?: string;
-    maxPriorityFeePerGas?: string;
-    accessList?: Array<{
-        address: string;
-        storageKeys: string[];
-    }>;
-    data?: string;
-    paymentRequest?: EvmPaymentRequest;
-    ethereumDefinitions?: EvmEthereumDefinitions;
-}
-/** Mutually exclusive vendor shapes; each adapter narrows to its own. */
-type EvmSignTxParams = EvmSignTxLedgerParams | EvmSignTxTrezorParams;
-interface EvmEthereumDefinitions {
-    /** Trezor Ethereum network definition bytes as a hex string. */
-    encodedNetwork?: string;
-    /** Trezor Ethereum token definition bytes as a hex string. */
-    encodedToken?: string;
-}
-interface EvmPaymentRequestMemo {
-    textMemo?: {
-        text: string;
-    };
-    textDetailsMemo?: {
-        title: string;
-        text: string;
-    };
-    refundMemo?: {
-        address: string;
-        addressN?: number[];
-        mac: string;
-    };
-    coinPurchaseMemo?: {
-        coinType: number;
-        amount: string;
-        address: string;
-        addressN?: number[];
-        mac: string;
-    };
-}
-interface EvmPaymentRequest {
-    nonce?: string;
-    recipientName: string;
-    memos?: EvmPaymentRequestMemo[];
-    /** Decimal string in subunits; SDK encodes it as SLIP-24 uint256 LE hex. */
-    amount?: string;
-    signature: string;
-}
-interface EvmSignedTx {
-    /** Recovery id as `0x`-prefixed hex string. */
-    v: string;
-    /** ECDSA `r` value as `0x`-prefixed, zero-padded 64-char hex string (32 bytes). */
-    r: string;
-    /** ECDSA `s` value as `0x`-prefixed, zero-padded 64-char hex string (32 bytes). */
-    s: string;
-    serializedTx?: string;
-}
-interface EvmSignMsgParams extends PassphraseStateAware {
-    path: string;
-    message: string;
-    chainId?: number;
-    hex?: boolean;
-    ethereumDefinitions?: EvmEthereumDefinitions;
-}
-type EvmSignTypedDataParams = EvmSignTypedDataFull | EvmSignTypedDataHash;
-interface EvmSignTypedDataFull extends PassphraseStateAware {
-    path: string;
-    chainId?: number;
-    /** Defaults to `'full'` when omitted. */
-    mode?: 'full';
-    ethereumDefinitions?: EvmEthereumDefinitions;
-    data: {
-        domain: EIP712Domain;
-        types: Record<string, Array<{
-            name: string;
-            type: string;
-        }>>;
-        primaryType: string;
-        message: Record<string, unknown>;
-    };
+type VendorType = 'trezor' | 'ledger' | 'keystone';
+/** 'qr' is a virtual channel: UR payloads travel via app-rendered/scanned QR codes. */
+type ConnectionType = 'usb' | 'ble' | 'qr';
+type TransportType = 'usb' | 'ble' | 'hid' | 'bridge' | 'qr';
+/**
+ * Device capabilities — describes what a specific device/connection
+ * combination can or cannot do. Varies by vendor, model, and connection type.
+ *
+ * This enables business logic to check capabilities instead of hard-coding
+ * vendor-specific conditions (e.g., `if (vendor === 'ledger')`).
+ */
+interface DeviceCapabilities {
+    /** Chains usable through this adapter on the connected firmware; absent means not advertised. */
+    supportedChains?: ChainCapability[];
     /**
-     * The dApp's original EIP-712 JSON, byte for byte. Serializing vendors (Keystone) must prefer it:
-     * re-stringifying `data` rewrites integers wider than 2^53 and exponent forms.
+     * Whether the discovery handle can be reused to reconnect; `false` requires rediscovery. Says
+     * nothing about identity (Trezor BLE is false yet its device_id is stable); verify it separately.
      */
-    dataJson?: string;
-    metamaskV4Compat?: boolean;
-    showMessageHash?: boolean;
+    persistentDeviceIdentity: boolean;
+}
+interface DeviceInfo {
+    vendor: VendorType;
+    /** Machine model id (e.g. "nanoX"). */
+    model: string;
+    /** Human-readable model name (e.g. "Ledger Nano X"). */
+    modelName?: string;
+    firmwareVersion: string;
+    deviceId: string;
+    connectId: string;
+    label?: string;
+    connectionType: ConnectionType;
+    battery?: number;
+    /** BLE signal strength (BLE only). */
+    rssi?: number | null;
+    /** BLE connectable flag (BLE only). */
+    isConnectable?: boolean | null;
+    /** USB serial number (USB only). */
+    serialNumber?: string;
+    /** Device capabilities — varies by vendor, model, and connection type */
+    capabilities?: DeviceCapabilities;
     /**
-     * Optional host-computed hashes. Core Trezor models still use full typed-data
-     * signing for display, while Trezor One can fall back to typed-hash signing
-     * when firmware cannot compute the hashes itself.
+     * Vendor-specific raw payload from the post-handshake `Features` (Trezor)
+     * or device-info call. Populated by the connector with `{ transport,
+     * descriptor, features }` so the app layer can read fields we haven't
+     * promoted to the typed surface yet. Treat as informational — promote
+     * any consumed field above.
      */
-    domainSeparatorHash?: string;
-    messageHash?: string;
-}
-interface EvmSignTypedDataHash extends PassphraseStateAware {
-    path: string;
-    chainId?: number;
-    mode: 'hash';
-    domainSeparatorHash: string;
-    messageHash: string;
-    ethereumDefinitions?: EvmEthereumDefinitions;
-}
-interface EIP712Domain {
-    name?: string;
-    version?: string;
-    chainId?: number;
-    verifyingContract?: string;
-    salt?: string;
-    [key: string]: unknown;
+    raw?: Record<string, unknown>;
 }
-interface EvmSignature {
-    /** `0x`-prefixed hex string (r + s + v). */
-    signature: string;
-    address?: string;
+interface DeviceTarget {
+    connectId: string;
+    deviceId: string;
 }
-interface IEvmMethods {
-    evmGetAddress(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmGetAddressParams>>): Promise<Response<EvmAddress>>;
-    evmSignTransaction(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmSignTxParams>>): Promise<Response<EvmSignedTx>>;
-    evmSignMessage(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmSignMsgParams>>): Promise<Response<EvmSignature>>;
-    evmSignTypedData(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmSignTypedDataParams>>): Promise<Response<EvmSignature>>;
+/**
+ * How long a discovery handle remains safe to use for a new connection.
+ * This is deliberately separate from post-connect device identity.
+ */
+type SearchTargetReusePolicy = 'current-discovery' | 'reconnectable' | 'rediscover';
+declare function resolveSearchTargetReusePolicy(device: Pick<DeviceInfo, 'connectionType' | 'capabilities'>): SearchTargetReusePolicy;
+/** Search target for a physical device whose connectId is the discovery handle. */
+declare function toPhysicalDeviceSearchTarget(vendor: VendorType, device: DeviceInfo): DeviceSearchTarget;
+/**
+ * A selectable result from hardware discovery. It may represent a physical
+ * transport endpoint or an interactive entry such as Keystone QR; it is not a
+ * physical-device or wallet identity.
+ */
+interface DeviceSearchTarget {
+    /** Opaque handle scoped to the adapter's current discovery state. */
+    searchTargetId: string;
+    /** Whether the handle itself may be retried; never inferred from a stored connectId. */
+    searchTargetReusePolicy?: SearchTargetReusePolicy;
+    vendor: VendorType;
+    connectionType: ConnectionType;
+    kind: 'physical' | 'interactive';
+    label?: string;
+    model?: string;
+    modelName?: string;
+    serialNumber?: string;
 }
+type WalletIdentity = {
+    vendor: 'ledger';
+    type: 'chainFingerprint';
+    chain: ChainForFingerprint;
+    value: string;
+} | {
+    vendor: 'trezor';
+    type: 'deviceId';
+    value: string;
+} | {
+    vendor: 'keystone';
+    type: 'walletId';
+    value: string;
+};
 
 /** Which `GET_VK` encoding the Ledger Zcash app should return. */
 type ZcashFullViewingKeyMode = 'ufvk' | 'orchardFvk';