@onekeyfe/hwk-adapter-core 1.2.8-alpha.13 → 1.2.8-alpha.130

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { H as HardwareErrorCode, a as HwkErrorOrigin, b as HwkRecoveryHint } from './errors-BgJ4kzRx.js';
-export { c as HwkError, d as HwkRecoveryScope, I as IHwkErrorPayload, e as IOperationMayHaveCompletedParams, O as ORPHAN_ELIGIBLE_ERROR_CODES, f as createHwkError, g as defaultOriginForCode, h as defaultRecoveryForCode, i as enrichErrorMessage, j as isHwkRecoveryHint, o as operationMayHaveCompletedParams } from './errors-BgJ4kzRx.js';
-import { U as UiResponseEvent, E as ExportedAccountKey, a as UiRequestOperationAttribution, b as UI_REQUEST, Q as QrDisplayData, c as UiRequestRegistry, S as SaveDeviceBindingDeclineReason } from './ui-events-29Va0fPc.js';
-export { D as DevicePermissionDeniedReason, d as DevicePermissionResponse, e as QrResponseData, f as UI_EVENT, g as UI_REQUEST_CANCELLED_TAG, h as UI_REQUEST_DEFAULT_TIMEOUT_MS, i as UI_REQUEST_PREEMPTED_TAG, j as UI_REQUEST_TIMEOUT_TAG, k as UI_RESPONSE } from './ui-events-29Va0fPc.js';
+import { H as HardwareErrorCode, a as HwkErrorOrigin, b as HwkRecoveryHint } from './errors-DednD9bG.js';
+export { c as HwkError, d as HwkRecoveryScope, I as IHwkErrorPayload, e as IOperationMayHaveCompletedParams, O as ORPHAN_ELIGIBLE_ERROR_CODES, f as createHwkError, g as defaultOriginForCode, h as defaultRecoveryForCode, i as enrichErrorMessage, j as isHwkRecoveryHint, o as operationMayHaveCompletedParams } from './errors-DednD9bG.js';
+import { U as UiResponseEvent, E as ExportedAccountKey, a as UiRequestOperationAttribution, b as UI_REQUEST, Q as QrDisplayData, c as QrFallbackReason, d as UiRequestRegistry, S as SaveDeviceBindingDeclineReason } from './ui-events-Dvu2Gdu8.js';
+export { D as DevicePermissionDeniedReason, e as DevicePermissionResponse, f as QrResponseData, g as UI_EVENT, h as UI_REQUEST_CANCELLED_TAG, i as UI_REQUEST_DEFAULT_TIMEOUT_MS, j as UI_REQUEST_PREEMPTED_TAG, k as UI_REQUEST_TIMEOUT_TAG, l as UI_RESPONSE } from './ui-events-Dvu2Gdu8.js';
 
 interface Success<T> {
     success: true;
@@ -53,116 +53,6 @@ declare function parseWalletMasterFingerprint(value: unknown): string | undefine
  */
 declare function deriveDeviceFingerprint(value: string): string;
 
-type VendorType = 'trezor' | 'ledger' | 'keystone';
-/** 'qr' is a virtual channel: UR payloads travel via app-rendered/scanned QR codes. */
-type ConnectionType = 'usb' | 'ble' | 'qr';
-type TransportType = 'usb' | 'ble' | 'hid' | 'bridge' | 'qr';
-/**
- * Device capabilities — describes what a specific device/connection
- * combination can or cannot do. Varies by vendor, model, and connection type.
- *
- * This enables business logic to check capabilities instead of hard-coding
- * vendor-specific conditions (e.g., `if (vendor === 'ledger')`).
- */
-interface DeviceCapabilities {
-    /**
-     * Whether the discovery handle can be reused to reconnect; `false` requires rediscovery. Says
-     * nothing about identity (Trezor BLE is false yet its device_id is stable); verify it separately.
-     */
-    persistentDeviceIdentity: boolean;
-}
-interface DeviceInfo {
-    vendor: VendorType;
-    /** Machine model id (e.g. "nanoX"). */
-    model: string;
-    /** Human-readable model name (e.g. "Ledger Nano X"). */
-    modelName?: string;
-    firmwareVersion: string;
-    deviceId: string;
-    connectId: string;
-    label?: string;
-    connectionType: ConnectionType;
-    battery?: number;
-    /** BLE signal strength (BLE only). */
-    rssi?: number | null;
-    /** BLE connectable flag (BLE only). */
-    isConnectable?: boolean | null;
-    /** USB serial number (USB only). */
-    serialNumber?: string;
-    /** Device capabilities — varies by vendor, model, and connection type */
-    capabilities?: DeviceCapabilities;
-    /**
-     * Vendor-specific raw payload from the post-handshake `Features` (Trezor)
-     * or device-info call. Populated by the connector with `{ transport,
-     * descriptor, features }` so the app layer can read fields we haven't
-     * promoted to the typed surface yet. Treat as informational — promote
-     * any consumed field above.
-     */
-    raw?: Record<string, unknown>;
-}
-interface DeviceTarget {
-    connectId: string;
-    deviceId: string;
-}
-/**
- * How long a discovery handle remains safe to use for a new connection.
- * This is deliberately separate from post-connect device identity.
- */
-type SearchTargetReusePolicy = 'current-discovery' | 'reconnectable' | 'rediscover';
-declare function resolveSearchTargetReusePolicy(device: Pick<DeviceInfo, 'connectionType' | 'capabilities'>): SearchTargetReusePolicy;
-/** Search target for a physical device whose connectId is the discovery handle. */
-declare function toPhysicalDeviceSearchTarget(vendor: VendorType, device: DeviceInfo): DeviceSearchTarget;
-/**
- * A selectable result from hardware discovery. It may represent a physical
- * transport endpoint or an interactive entry such as Keystone QR; it is not a
- * physical-device or wallet identity.
- */
-interface DeviceSearchTarget {
-    /** Opaque handle scoped to the adapter's current discovery state. */
-    searchTargetId: string;
-    /** Whether the handle itself may be retried; never inferred from a stored connectId. */
-    searchTargetReusePolicy?: SearchTargetReusePolicy;
-    vendor: VendorType;
-    connectionType: ConnectionType;
-    kind: 'physical' | 'interactive';
-    label?: string;
-    model?: string;
-    modelName?: string;
-    serialNumber?: string;
-}
-type WalletIdentity = {
-    vendor: 'ledger';
-    type: 'chainFingerprint';
-    chain: ChainForFingerprint;
-    value: string;
-} | {
-    vendor: 'trezor';
-    type: 'deviceId';
-    value: string;
-} | {
-    vendor: 'keystone';
-    type: 'walletId';
-    value: string;
-};
-
-/**
- * Mixin for chain-operation params that can be pinned to a specific passphrase
- * wallet.
- *
- * Trezor-only. `passphraseState` is the wallet identity returned by
- * `getPassphraseState`: today this is the compressed public key derived at
- * `m/44'/0'/0'`, not the 4-byte master fingerprint. When present, the adapter
- * creates a fresh wallet session (THP application session, or v1 device
- * session) and verifies the derived state before issuing the call, so the
- * address/signature comes from the intended passphrase wallet.
- *
- * Ledger has no equivalent and ignores the field — it never reaches the
- * protobuf layer (the adapter strips it before forwarding to the connector).
- */
-interface PassphraseStateAware {
-    passphraseState?: string;
-}
-
 /**
  * Minimal device info returned during discovery (searchDevices).
  * At scan time, full DeviceInfo fields like firmwareVersion are not yet available.
@@ -277,6 +167,8 @@ declare enum EConnectorInteraction {
     AppInstallProgress = "app-install-progress"
 }
 type ConnectorUiEvent = {
+    operationId?: string;
+} & ({
     type: EConnectorInteraction.Searching;
     payload: {
         sessionId: string;
@@ -285,6 +177,7 @@ type ConnectorUiEvent = {
     type: EConnectorInteraction.ConfirmOpenApp;
     payload: {
         sessionId: string;
+        appName?: string;
     };
 } | {
     type: EConnectorInteraction.UnlockDevice;
@@ -308,7 +201,7 @@ type ConnectorUiEvent = {
         appName: string;
         progress: number;
     };
-};
+});
 interface ConnectorEventMap {
     'device-connect': {
         device: ConnectorDevice;
@@ -493,10 +386,198 @@ declare const DEVICE: {
     readonly TREZOR_THP_CREDENTIALS_CHANGED: "device-trezor-thp-credentials-changed";
 };
 
+/**
+ * Mixin for chain-operation params that can be pinned to a specific passphrase
+ * wallet.
+ *
+ * Trezor-only. `passphraseState` is the wallet identity returned by
+ * `getPassphraseState`: today this is the compressed public key derived at
+ * `m/44'/0'/0'`, not the 4-byte master fingerprint. When present, the adapter
+ * creates a fresh wallet session (THP application session, or v1 device
+ * session) and verifies the derived state before issuing the call, so the
+ * address/signature comes from the intended passphrase wallet.
+ *
+ * Ledger has no equivalent and ignores the field — it never reaches the
+ * protobuf layer (the adapter strips it before forwarding to the connector).
+ */
+interface PassphraseStateAware {
+    passphraseState?: string;
+}
+
+interface EvmGetAddressParams extends PassphraseStateAware {
+    path: string;
+    showOnDevice?: boolean;
+    chainId?: number;
+    ethereumDefinitions?: EvmEthereumDefinitions;
+}
+interface EvmAddress {
+    address: string;
+    path: string;
+    /** Device-reported secp256k1 public key; populated when the transport exposes it. */
+    publicKey?: string;
+    /** Set by air-gapped wallets (Keystone): the exported key this address derives from. */
+    accountKey?: ExportedAccountKey;
+}
+interface EvmSignTxBaseParams extends PassphraseStateAware {
+    path: string;
+    chainId?: number;
+}
+/** Ledger shape: the whole RLP-serialized tx (0x-prefixed or plain hex); structured fields forbidden. */
+interface EvmSignTxLedgerParams extends EvmSignTxBaseParams {
+    serializedTx: string;
+    to?: never;
+    value?: never;
+    nonce?: never;
+    gasLimit?: never;
+    gasPrice?: never;
+    txType?: never;
+    maxFeePerGas?: never;
+    maxPriorityFeePerGas?: never;
+    accessList?: never;
+    data?: never;
+    paymentRequest?: never;
+    ethereumDefinitions?: never;
+}
+/** Trezor shape: structured EthereumSignTx protobuf fields; serializedTx forbidden. */
+interface EvmSignTxTrezorParams extends EvmSignTxBaseParams {
+    serializedTx?: never;
+    /** Contract address or recipient. Optional for contract deployment transactions. */
+    to?: string;
+    value?: string;
+    nonce?: string;
+    gasLimit?: string;
+    gasPrice?: string;
+    txType?: number;
+    maxFeePerGas?: string;
+    maxPriorityFeePerGas?: string;
+    accessList?: Array<{
+        address: string;
+        storageKeys: string[];
+    }>;
+    data?: string;
+    paymentRequest?: EvmPaymentRequest;
+    ethereumDefinitions?: EvmEthereumDefinitions;
+}
+/** Mutually exclusive vendor shapes; each adapter narrows to its own. */
+type EvmSignTxParams = EvmSignTxLedgerParams | EvmSignTxTrezorParams;
+interface EvmEthereumDefinitions {
+    /** Trezor Ethereum network definition bytes as a hex string. */
+    encodedNetwork?: string;
+    /** Trezor Ethereum token definition bytes as a hex string. */
+    encodedToken?: string;
+}
+interface EvmPaymentRequestMemo {
+    textMemo?: {
+        text: string;
+    };
+    textDetailsMemo?: {
+        title: string;
+        text: string;
+    };
+    refundMemo?: {
+        address: string;
+        addressN?: number[];
+        mac: string;
+    };
+    coinPurchaseMemo?: {
+        coinType: number;
+        amount: string;
+        address: string;
+        addressN?: number[];
+        mac: string;
+    };
+}
+interface EvmPaymentRequest {
+    nonce?: string;
+    recipientName: string;
+    memos?: EvmPaymentRequestMemo[];
+    /** Decimal string in subunits; SDK encodes it as SLIP-24 uint256 LE hex. */
+    amount?: string;
+    signature: string;
+}
+interface EvmSignedTx {
+    /** Recovery id as `0x`-prefixed hex string. */
+    v: string;
+    /** ECDSA `r` value as `0x`-prefixed, zero-padded 64-char hex string (32 bytes). */
+    r: string;
+    /** ECDSA `s` value as `0x`-prefixed, zero-padded 64-char hex string (32 bytes). */
+    s: string;
+    serializedTx?: string;
+}
+interface EvmSignMsgParams extends PassphraseStateAware {
+    path: string;
+    message: string;
+    chainId?: number;
+    hex?: boolean;
+    ethereumDefinitions?: EvmEthereumDefinitions;
+}
+type EvmSignTypedDataParams = EvmSignTypedDataFull | EvmSignTypedDataHash;
+interface EvmSignTypedDataFull extends PassphraseStateAware {
+    path: string;
+    chainId?: number;
+    /** Defaults to `'full'` when omitted. */
+    mode?: 'full';
+    ethereumDefinitions?: EvmEthereumDefinitions;
+    data: {
+        domain: EIP712Domain;
+        types: Record<string, Array<{
+            name: string;
+            type: string;
+        }>>;
+        primaryType: string;
+        message: Record<string, unknown>;
+    };
+    /**
+     * The dApp's original EIP-712 JSON, byte for byte. Serializing vendors (Keystone) must prefer it:
+     * re-stringifying `data` rewrites integers wider than 2^53 and exponent forms.
+     */
+    dataJson?: string;
+    metamaskV4Compat?: boolean;
+    showMessageHash?: boolean;
+    /**
+     * Optional host-computed hashes. Core Trezor models still use full typed-data
+     * signing for display, while Trezor One can fall back to typed-hash signing
+     * when firmware cannot compute the hashes itself.
+     */
+    domainSeparatorHash?: string;
+    messageHash?: string;
+}
+interface EvmSignTypedDataHash extends PassphraseStateAware {
+    path: string;
+    chainId?: number;
+    mode: 'hash';
+    domainSeparatorHash: string;
+    messageHash: string;
+    ethereumDefinitions?: EvmEthereumDefinitions;
+}
+interface EIP712Domain {
+    name?: string;
+    version?: string;
+    chainId?: number;
+    verifyingContract?: string;
+    salt?: string;
+    [key: string]: unknown;
+}
+interface EvmSignature {
+    /** `0x`-prefixed hex string (r + s + v). */
+    signature: string;
+    address?: string;
+}
+interface IEvmMethods {
+    evmGetAddress(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmGetAddressParams>>): Promise<Response<EvmAddress>>;
+    evmSignTransaction(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmSignTxParams>>): Promise<Response<EvmSignedTx>>;
+    evmSignMessage(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmSignMsgParams>>): Promise<Response<EvmSignature>>;
+    evmSignTypedData(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmSignTypedDataParams>>): Promise<Response<EvmSignature>>;
+}
+
 interface BtcGetAddressParams extends PassphraseStateAware {
     path: string;
     coin?: string;
     showOnDevice?: boolean;
+    /**
+     * Trezor only. Ledger and Keystone ignore it and derive the script of the path's purpose
+     * (44' P2PKH, 49' P2SH-P2WPKH, 84' P2WPKH, 86' P2TR; Keystone does not support 86' yet).
+     */
     scriptType?: 'p2pkh' | 'p2sh' | 'p2wpkh' | 'p2wsh' | 'p2tr';
     addressIndex?: number;
     change?: boolean;
@@ -894,7 +975,7 @@ declare class OperationRegistry {
     /** Return active or tombstoned binding data without refreshing its TTL. */
     find(operationId: string): HardwareOperation | undefined;
     findActiveByConnectionKey(connectionKey: string): HardwareOperation | undefined;
-    /** Map a job queue key (an operation id or a connection key) to its live operation id. */
+    /** Only an explicitly supplied operation job key owns the call's UI requests. */
     findOperationIdByJobKey(jobKey: string | undefined): string | undefined;
     /**
      * End an operation on the caller's explicit release. Throws for an unknown id; returns undefined
@@ -1030,6 +1111,7 @@ type HardwareUiEvent = Exclude<ConnectorUiEvent, {
     type: EConnectorInteraction.AppInstallProgress;
 }> | {
     type: EConnectorInteraction.AppInstallProgress;
+    operationId?: string;
     payload: {
         connectId: string;
         appName: string;
@@ -1135,6 +1217,7 @@ type DeviceSelectionContext = {
 };
 interface DeviceSelectionRequest extends UiRequestOperationAttribution {
     devices: DeviceInfo[];
+    /** Echo this in the `RECEIVE_SELECT_DEVICE` answer; an answer without it is ignored. */
     requestId: string;
     context: DeviceSelectionContext;
     extra?: HardwareCallExtra;
@@ -1158,7 +1241,12 @@ interface SaveDeviceBindingRequest extends UiRequestOperationAttribution {
     }>;
     extra?: HardwareCallExtra;
 }
-type BindBleDeviceParams = Pick<SaveDeviceBindingRequest, 'identity' | 'extra'>;
+type BindBleDeviceParams = Pick<SaveDeviceBindingRequest, 'identity' | 'extra'> & {
+    /** Ledger: other recorded chains, tried in order only when the previous chain's app is missing. */
+    fallbackIdentities?: Extract<WalletIdentity, {
+        vendor: 'ledger';
+    }>[];
+};
 interface DeviceBindingStatus {
     selectionRequestId: string;
     status: 'verifying' | 'saved' | 'failed' | 'cancelled';
@@ -1206,6 +1294,8 @@ interface AllNetworkGetAddressParams extends IHardwareCommonCallParams {
 }
 type AllNetworkDeviceIdentity = WalletIdentity;
 type AllNetworkAddressResponsePayload = Record<string, unknown> & {
+    /** This account came from the user's explicit device-export scan. */
+    accountExport?: boolean;
     error?: string;
     code?: HardwareErrorCode | number;
     errorCode?: string | number;
@@ -1327,10 +1417,17 @@ type UiRequestEvent = {
         message: string;
     } & UiRequestOperationAttribution;
 } | {
-    type: typeof UI_REQUEST.REQUEST_INSTALL_APP;
+    type: typeof UI_REQUEST.REQUEST_INSTALL_APP;
+    payload: {
+        vendor: string;
+        appName: string;
+    } & UiRequestOperationAttribution;
+} | {
+    type: typeof UI_REQUEST.REQUEST_QR_FALLBACK_CONFIRM;
     payload: {
         vendor: string;
-        appName: string;
+        requestId: string;
+        reason: QrFallbackReason;
     } & UiRequestOperationAttribution;
 } | {
     type: typeof UI_REQUEST.REQUEST_TREZOR_THP_PAIRING;
@@ -1503,6 +1600,14 @@ interface HardwareEventMap {
             appName: string;
         } & UiRequestOperationAttribution;
     };
+    [UI_REQUEST.REQUEST_QR_FALLBACK_CONFIRM]: {
+        type: typeof UI_REQUEST.REQUEST_QR_FALLBACK_CONFIRM;
+        payload: {
+            vendor: string;
+            requestId: string;
+            reason: QrFallbackReason;
+        } & UiRequestOperationAttribution;
+    };
     [UI_REQUEST.REQUEST_TREZOR_THP_PAIRING]: {
         type: typeof UI_REQUEST.REQUEST_TREZOR_THP_PAIRING;
         payload: {
@@ -1656,171 +1761,99 @@ interface SearchDevicesOptions {
     transportType?: ConnectionType;
 }
 
-interface EvmGetAddressParams extends PassphraseStateAware {
-    path: string;
-    showOnDevice?: boolean;
-    chainId?: number;
-    ethereumDefinitions?: EvmEthereumDefinitions;
-}
-interface EvmAddress {
-    address: string;
-    path: string;
-    /** Device-reported secp256k1 public key; populated when the transport exposes it. */
-    publicKey?: string;
-    /** Set by air-gapped wallets (Keystone): the exported key this address derives from. */
-    accountKey?: ExportedAccountKey;
-}
-interface EvmSignTxBaseParams extends PassphraseStateAware {
-    path: string;
-    chainId?: number;
-}
-/** Ledger shape: the whole RLP-serialized tx (0x-prefixed or plain hex); structured fields forbidden. */
-interface EvmSignTxLedgerParams extends EvmSignTxBaseParams {
-    serializedTx: string;
-    to?: never;
-    value?: never;
-    nonce?: never;
-    gasLimit?: never;
-    gasPrice?: never;
-    txType?: never;
-    maxFeePerGas?: never;
-    maxPriorityFeePerGas?: never;
-    accessList?: never;
-    data?: never;
-    paymentRequest?: never;
-    ethereumDefinitions?: never;
-}
-/** Trezor shape: structured EthereumSignTx protobuf fields; serializedTx forbidden. */
-interface EvmSignTxTrezorParams extends EvmSignTxBaseParams {
-    serializedTx?: never;
-    /** Contract address or recipient. Optional for contract deployment transactions. */
-    to?: string;
-    value?: string;
-    nonce?: string;
-    gasLimit?: string;
-    gasPrice?: string;
-    txType?: number;
-    maxFeePerGas?: string;
-    maxPriorityFeePerGas?: string;
-    accessList?: Array<{
-        address: string;
-        storageKeys: string[];
-    }>;
-    data?: string;
-    paymentRequest?: EvmPaymentRequest;
-    ethereumDefinitions?: EvmEthereumDefinitions;
-}
-/** Mutually exclusive vendor shapes; each adapter narrows to its own. */
-type EvmSignTxParams = EvmSignTxLedgerParams | EvmSignTxTrezorParams;
-interface EvmEthereumDefinitions {
-    /** Trezor Ethereum network definition bytes as a hex string. */
-    encodedNetwork?: string;
-    /** Trezor Ethereum token definition bytes as a hex string. */
-    encodedToken?: string;
-}
-interface EvmPaymentRequestMemo {
-    textMemo?: {
-        text: string;
-    };
-    textDetailsMemo?: {
-        title: string;
-        text: string;
-    };
-    refundMemo?: {
-        address: string;
-        addressN?: number[];
-        mac: string;
-    };
-    coinPurchaseMemo?: {
-        coinType: number;
-        amount: string;
-        address: string;
-        addressN?: number[];
-        mac: string;
-    };
-}
-interface EvmPaymentRequest {
-    nonce?: string;
-    recipientName: string;
-    memos?: EvmPaymentRequestMemo[];
-    /** Decimal string in subunits; SDK encodes it as SLIP-24 uint256 LE hex. */
-    amount?: string;
-    signature: string;
-}
-interface EvmSignedTx {
-    /** Recovery id as `0x`-prefixed hex string. */
-    v: string;
-    /** ECDSA `r` value as `0x`-prefixed, zero-padded 64-char hex string (32 bytes). */
-    r: string;
-    /** ECDSA `s` value as `0x`-prefixed, zero-padded 64-char hex string (32 bytes). */
-    s: string;
-    serializedTx?: string;
-}
-interface EvmSignMsgParams extends PassphraseStateAware {
-    path: string;
-    message: string;
-    chainId?: number;
-    hex?: boolean;
-    ethereumDefinitions?: EvmEthereumDefinitions;
-}
-type EvmSignTypedDataParams = EvmSignTypedDataFull | EvmSignTypedDataHash;
-interface EvmSignTypedDataFull extends PassphraseStateAware {
-    path: string;
-    chainId?: number;
-    /** Defaults to `'full'` when omitted. */
-    mode?: 'full';
-    ethereumDefinitions?: EvmEthereumDefinitions;
-    data: {
-        domain: EIP712Domain;
-        types: Record<string, Array<{
-            name: string;
-            type: string;
-        }>>;
-        primaryType: string;
-        message: Record<string, unknown>;
-    };
+type VendorType = 'trezor' | 'ledger' | 'keystone';
+/** 'qr' is a virtual channel: UR payloads travel via app-rendered/scanned QR codes. */
+type ConnectionType = 'usb' | 'ble' | 'qr';
+type TransportType = 'usb' | 'ble' | 'hid' | 'bridge' | 'qr';
+/**
+ * Device capabilities — describes what a specific device/connection
+ * combination can or cannot do. Varies by vendor, model, and connection type.
+ *
+ * This enables business logic to check capabilities instead of hard-coding
+ * vendor-specific conditions (e.g., `if (vendor === 'ledger')`).
+ */
+interface DeviceCapabilities {
+    /** Chains usable through this adapter on the connected firmware; absent means not advertised. */
+    supportedChains?: ChainCapability[];
     /**
-     * The dApp's original EIP-712 JSON, byte for byte. Serializing vendors (Keystone) must prefer it:
-     * re-stringifying `data` rewrites integers wider than 2^53 and exponent forms.
+     * Whether the discovery handle can be reused to reconnect; `false` requires rediscovery. Says
+     * nothing about identity (Trezor BLE is false yet its device_id is stable); verify it separately.
      */
-    dataJson?: string;
-    metamaskV4Compat?: boolean;
-    showMessageHash?: boolean;
+    persistentDeviceIdentity: boolean;
+}
+interface DeviceInfo {
+    vendor: VendorType;
+    /** Machine model id (e.g. "nanoX"). */
+    model: string;
+    /** Human-readable model name (e.g. "Ledger Nano X"). */
+    modelName?: string;
+    firmwareVersion: string;
+    deviceId: string;
+    connectId: string;
+    label?: string;
+    connectionType: ConnectionType;
+    battery?: number;
+    /** BLE signal strength (BLE only). */
+    rssi?: number | null;
+    /** BLE connectable flag (BLE only). */
+    isConnectable?: boolean | null;
+    /** USB serial number (USB only). */
+    serialNumber?: string;
+    /** Device capabilities — varies by vendor, model, and connection type */
+    capabilities?: DeviceCapabilities;
     /**
-     * Optional host-computed hashes. Core Trezor models still use full typed-data
-     * signing for display, while Trezor One can fall back to typed-hash signing
-     * when firmware cannot compute the hashes itself.
+     * Vendor-specific raw payload from the post-handshake `Features` (Trezor)
+     * or device-info call. Populated by the connector with `{ transport,
+     * descriptor, features }` so the app layer can read fields we haven't
+     * promoted to the typed surface yet. Treat as informational — promote
+     * any consumed field above.
      */
-    domainSeparatorHash?: string;
-    messageHash?: string;
-}
-interface EvmSignTypedDataHash extends PassphraseStateAware {
-    path: string;
-    chainId?: number;
-    mode: 'hash';
-    domainSeparatorHash: string;
-    messageHash: string;
-    ethereumDefinitions?: EvmEthereumDefinitions;
-}
-interface EIP712Domain {
-    name?: string;
-    version?: string;
-    chainId?: number;
-    verifyingContract?: string;
-    salt?: string;
-    [key: string]: unknown;
+    raw?: Record<string, unknown>;
 }
-interface EvmSignature {
-    /** `0x`-prefixed hex string (r + s + v). */
-    signature: string;
-    address?: string;
+interface DeviceTarget {
+    connectId: string;
+    deviceId: string;
 }
-interface IEvmMethods {
-    evmGetAddress(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmGetAddressParams>>): Promise<Response<EvmAddress>>;
-    evmSignTransaction(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmSignTxParams>>): Promise<Response<EvmSignedTx>>;
-    evmSignMessage(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmSignMsgParams>>): Promise<Response<EvmSignature>>;
-    evmSignTypedData(connectId?: NullableCallArg<string>, deviceId?: NullableCallArg<string>, params?: NullableCallArg<IHardwareCallParams<EvmSignTypedDataParams>>): Promise<Response<EvmSignature>>;
+/**
+ * How long a discovery handle remains safe to use for a new connection.
+ * This is deliberately separate from post-connect device identity.
+ */
+type SearchTargetReusePolicy = 'current-discovery' | 'reconnectable' | 'rediscover';
+declare function resolveSearchTargetReusePolicy(device: Pick<DeviceInfo, 'connectionType' | 'capabilities'>): SearchTargetReusePolicy;
+/** Search target for a physical device whose connectId is the discovery handle. */
+declare function toPhysicalDeviceSearchTarget(vendor: VendorType, device: DeviceInfo): DeviceSearchTarget;
+/**
+ * A selectable result from hardware discovery. It may represent a physical
+ * transport endpoint or an interactive entry such as Keystone QR; it is not a
+ * physical-device or wallet identity.
+ */
+interface DeviceSearchTarget {
+    /** Opaque handle scoped to the adapter's current discovery state. */
+    searchTargetId: string;
+    /** Whether the handle itself may be retried; never inferred from a stored connectId. */
+    searchTargetReusePolicy?: SearchTargetReusePolicy;
+    vendor: VendorType;
+    connectionType: ConnectionType;
+    kind: 'physical' | 'interactive';
+    label?: string;
+    model?: string;
+    modelName?: string;
+    serialNumber?: string;
 }
+type WalletIdentity = {
+    vendor: 'ledger';
+    type: 'chainFingerprint';
+    chain: ChainForFingerprint;
+    value: string;
+} | {
+    vendor: 'trezor';
+    type: 'deviceId';
+    value: string;
+} | {
+    vendor: 'keystone';
+    type: 'walletId';
+    value: string;
+};
 
 /** Which `GET_VK` encoding the Ledger Zcash app should return. */
 type ZcashFullViewingKeyMode = 'ufvk' | 'orchardFvk';
@@ -2022,7 +2055,9 @@ interface ElectronBleDeviceInfo {
 }
 /**
  * IPC-safe peripheral match: advertises one of `serviceUuids`, or its local name matches every
- * `namePatterns` entry (case-insensitive regex sources).
+ * `namePatterns` entry (case-insensitive regex sources). The desktop noble-ble host treats this
+ * as a hint only: its vendor allowlist decides, `serviceUuids` can only narrow it, and
+ * `namePatterns` are never compiled.
  */
 interface ElectronBleMatch {
     serviceUuids?: string[];
@@ -2150,6 +2185,35 @@ interface PreparedSolanaOffchainMessageV1 {
 }
 declare function prepareSolanaOffchainMessageV1({ message, requiredSigners, }: PrepareSolanaOffchainMessageV1Params): PreparedSolanaOffchainMessageV1;
 
+type LogSummaryContext = {
+    /** Method name from the options, or '' when none was given. */
+    method: string;
+    role: 'params' | 'result';
+};
+/**
+ * Returns extra space-separated hints for a payload field (e.g. PSBT input/output counts), or
+ * undefined to add nothing. `key` is normalized: lower-case with `_` and `-` removed. Hints are
+ * appended verbatim, so they must not contain payload contents. A throwing describer is ignored.
+ */
+type LogPayloadDescriber = (key: string, value: string | Uint8Array, context: LogSummaryContext) => string | undefined;
+type LogSummaryOptions = {
+    /** Public or connector method name; enables chain-specific hints (EVM tx type). */
+    method?: string;
+    /** In results, transaction fields hold signed transactions rather than requests. */
+    role?: 'params' | 'result';
+    /** Chain-specific payload hints that need a decoder adapter-core does not ship. */
+    describePayload?: LogPayloadDescriber;
+};
+/**
+ * JSON-safe, log-safe summary of `value`. Never throws.
+ *
+ * Paths, chain ids, flags and error fields stay readable; payloads become
+ * `<hex|str|json len=N sha256=16hex [hints]>`, addresses `first6…last4`, xpubs `xpub… len=N`,
+ * public keys and chain codes `… len=N`, signatures `<signature len=N>` and secrets
+ * `<redacted len=N>`.
+ */
+declare function summarizeForLog(value: unknown, options?: LogSummaryOptions): unknown;
+
 type DetectableHardwareVendor = 'onekey' | 'trezor' | 'ledger' | 'keystone';
 type HardwareDeviceIdentityInput = {
     name?: string | null;
@@ -2228,4 +2292,4 @@ declare function buildUnsupportedMethodResponse(item: AllNetworkAddressParams):
 
 declare const DEVICE_CONNECT_RETRY_DELAY_MS = 1000;
 
-export { ALL_NETWORK_METHOD_NAMES, type ActiveJobInfo, type AllNetworkAddressParams, type AllNetworkAddressResponse, type AllNetworkAddressResponsePayload, type AllNetworkAttachIdentityContext, type AllNetworkCallItemContext, type AllNetworkDeviceIdentity, type AllNetworkGetAddressParams, type AllNetworkMethodName, type AllNetworkResponseContext, type BindBleDeviceParams, type BtcAddress, type BtcGetAddressParams, type BtcGetPublicKeyParams, type BtcPaymentRequest, type BtcPaymentRequestMemo, type BtcPublicKey, type BtcRefTransaction, type BtcSignMsgParams, type BtcSignPsbtParams, type BtcSignTxParams, type BtcSignature, type BtcSignedPsbt, type BtcSignedTx, type BtcTxInput, type BtcTxOutput, CHAIN_FINGERPRINT_PATHS, type CancelCapability, type CancelScopeHandle, type ChainCapability, type ChainForFingerprint, type ConnectionType, type ConnectorCallResult, type ConnectorConfig, type ConnectorConnectTarget, type ConnectorDevice, type ConnectorErrorParams, type ConnectorEventMap, type ConnectorEventType, type ConnectorSearchDevicesOptions, type ConnectorSerializedError, type ConnectorSession, type ConnectorUiEvent, DEVICE, DEVICE_CONNECT_RETRY_DELAY_MS, DEVICE_EVENT, type DetectableHardwareVendor, type DeviceAuthenticityParams, type DeviceAuthenticityResult, type DeviceBindingStatus, type DeviceCapabilities, type DeviceChangeEvent, type DeviceConnectEvent, type DeviceDescriptor, type DeviceDisconnectEvent, type DeviceEvent, type DeviceEventListener, type DeviceInfo, DeviceJobQueue, type DeviceSearchTarget, type DeviceSelectionContext, type DeviceSelectionRequest, type DeviceTarget, EConnectorInteraction, type EIP712Domain, type ElectronBleApi, type ElectronBleConnectOptions, type ElectronBleDeviceInfo, type ElectronBleMatch, type ElectronBleScanOptions, type EvmAddress, type EvmEthereumDefinitions, type EvmGetAddressParams, type EvmPaymentRequest, type EvmPaymentRequestMemo, type EvmSignMsgParams, type EvmSignTxLedgerParams, type EvmSignTxParams, type EvmSignTxTrezorParams, type EvmSignTypedDataFull, type EvmSignTypedDataHash, type EvmSignTypedDataParams, type EvmSignature, type EvmSignedTx, ExportedAccountKey, type Failure, HARDWARE_METHOD_CATALOG, HARDWARE_RUNTIME_ID_PREFIX, type HardwareCallExtra, type HardwareDeviceIdentityInput, HardwareErrorCode, type HardwareEvent, type HardwareEventMap, type HardwareMethodMetadata, type HardwareMethodName, type HardwareOperation, type HardwareOperationTarget, type HardwareRuntimeId, type HardwareRuntimeIdKind, type HardwareUiEvent, HwkErrorOrigin, HwkRecoveryHint, type IBtcMethods, type ICommonCallParams, type IConnector, type IDeviceManagerMethods, type IDeviceManagerOperationContext, type IEvmMethods, type IHardwareBridge, type IHardwareCallParams, type IHardwareCommonCallParams, type IHardwareConnectionContext, type IHardwareWallet, type IPassphraseCallParams, type ISolMethods, type ITronMethods, type IWalletStateMethods, type JobOptions, type KnownDeviceConnection, MISSING_BIP32_MASTER_FINGERPRINT, type NullableCallArg, OPERATION_DEFAULT_TTL_MS, type OperationEndReason, OperationRegistry, type PassphraseResponse, type PassphraseStateAware, type PrepareSolanaOffchainMessageV1Params, type PreparedSolanaOffchainMessageV1, QrDisplayData, type Response, type RunAllNetworkGetAddressOptions, SDK, SaveDeviceBindingDeclineReason, type SaveDeviceBindingRequest, type SdkEvent, type SearchDevicesOptions, type SearchTargetReusePolicy, type SolAddress, type SolGetAddressParams, type SolOffchainMessageV1Params, type SolSignMsgParams, type SolSignTxParams, type SolSignature, type SolSignedTx, type Success, type TransportType, type TrezorBrightnessParams, type TrezorChangePinParams, type TrezorDeviceSettingsParams, type TrezorDisplayRotation, type TrezorSafetyCheckLevel, type TronAddress, type TronContract, type TronFreezeBalanceV2Contract, type TronGetAddressParams, type TronResource, type TronSignMsgParams, type TronSignTxParams, type TronSignature, type TronSignedTx, type TronTransferContract, type TronTriggerSmartContract, type TronUnfreezeBalanceV2Contract, type TronVote, type TronVoteWitnessContract, type TronWithdrawExpireUnfreezeContract, TypedEventEmitter, UI_REQUEST, type UiRequestEvent, UiRequestOperationAttribution, UiRequestRegistry, UiResponseEvent, type VendorType, type WalletIdentity, type ZcashFullViewingKey, type ZcashFullViewingKeyMode, type ZcashGetFullViewingKeyParams, type ZcashGetShieldedAddressParams, type ZcashShieldedAddress, assertBoundedCbor, batchCall, boundedCborFromHex, buildAllNetworkCancelledFailure, buildUnsupportedMethodResponse, bytesToHex, canReplayHardwareMethodAfterTransportFailure, compareSemver, createBridgedConnector, createCombinedConnector, createHardwareLinkId, createHardwareOperationId, createHardwareSearchTargetId, deriveDeviceFingerprint, detectHardwareVendorFromDescriptor, emitDeviceBindingStatus, ensure0x, failure, getAllNetworkMethodChain, getHardwareMethodMetadata, hasHardwareRuntimeIdPrefix, hexToBytes, isAllNetworkMethodName, isConnectionLost, isHardwareOperationId, isKnownNonTargetHardwareVendor, isUserRefusal, isWalletSafetyFailure, padHex64, parseBip32MasterFingerprint, parseHardwareRuntimeId, parseWalletMasterFingerprint, pickConnectionContext, prepareSolanaOffchainMessageV1, rehydrateConnectorError, requestBleDeviceSelection, requestSaveDeviceBinding, resolveHardwareOperationTarget, resolveSearchTargetReusePolicy, runAllNetworkGetAddress, serializeConnectorError, stripHex, success, toPhysicalDeviceSearchTarget };
+export { ALL_NETWORK_METHOD_NAMES, type ActiveJobInfo, type AllNetworkAddressParams, type AllNetworkAddressResponse, type AllNetworkAddressResponsePayload, type AllNetworkAttachIdentityContext, type AllNetworkCallItemContext, type AllNetworkDeviceIdentity, type AllNetworkGetAddressParams, type AllNetworkMethodName, type AllNetworkResponseContext, type BindBleDeviceParams, type BtcAddress, type BtcGetAddressParams, type BtcGetPublicKeyParams, type BtcPaymentRequest, type BtcPaymentRequestMemo, type BtcPublicKey, type BtcRefTransaction, type BtcSignMsgParams, type BtcSignPsbtParams, type BtcSignTxParams, type BtcSignature, type BtcSignedPsbt, type BtcSignedTx, type BtcTxInput, type BtcTxOutput, CHAIN_FINGERPRINT_PATHS, type CancelCapability, type CancelScopeHandle, type ChainCapability, type ChainForFingerprint, type ConnectionType, type ConnectorCallResult, type ConnectorConfig, type ConnectorConnectTarget, type ConnectorDevice, type ConnectorErrorParams, type ConnectorEventMap, type ConnectorEventType, type ConnectorSearchDevicesOptions, type ConnectorSerializedError, type ConnectorSession, type ConnectorUiEvent, DEVICE, DEVICE_CONNECT_RETRY_DELAY_MS, DEVICE_EVENT, type DetectableHardwareVendor, type DeviceAuthenticityParams, type DeviceAuthenticityResult, type DeviceBindingStatus, type DeviceCapabilities, type DeviceChangeEvent, type DeviceConnectEvent, type DeviceDescriptor, type DeviceDisconnectEvent, type DeviceEvent, type DeviceEventListener, type DeviceInfo, DeviceJobQueue, type DeviceSearchTarget, type DeviceSelectionContext, type DeviceSelectionRequest, type DeviceTarget, EConnectorInteraction, type EIP712Domain, type ElectronBleApi, type ElectronBleConnectOptions, type ElectronBleDeviceInfo, type ElectronBleMatch, type ElectronBleScanOptions, type EvmAddress, type EvmEthereumDefinitions, type EvmGetAddressParams, type EvmPaymentRequest, type EvmPaymentRequestMemo, type EvmSignMsgParams, type EvmSignTxLedgerParams, type EvmSignTxParams, type EvmSignTxTrezorParams, type EvmSignTypedDataFull, type EvmSignTypedDataHash, type EvmSignTypedDataParams, type EvmSignature, type EvmSignedTx, ExportedAccountKey, type Failure, HARDWARE_METHOD_CATALOG, HARDWARE_RUNTIME_ID_PREFIX, type HardwareCallExtra, type HardwareDeviceIdentityInput, HardwareErrorCode, type HardwareEvent, type HardwareEventMap, type HardwareMethodMetadata, type HardwareMethodName, type HardwareOperation, type HardwareOperationTarget, type HardwareRuntimeId, type HardwareRuntimeIdKind, type HardwareUiEvent, HwkErrorOrigin, HwkRecoveryHint, type IBtcMethods, type ICommonCallParams, type IConnector, type IDeviceManagerMethods, type IDeviceManagerOperationContext, type IEvmMethods, type IHardwareBridge, type IHardwareCallParams, type IHardwareCommonCallParams, type IHardwareConnectionContext, type IHardwareWallet, type IPassphraseCallParams, type ISolMethods, type ITronMethods, type IWalletStateMethods, type JobOptions, type KnownDeviceConnection, type LogPayloadDescriber, type LogSummaryContext, type LogSummaryOptions, MISSING_BIP32_MASTER_FINGERPRINT, type NullableCallArg, OPERATION_DEFAULT_TTL_MS, type OperationEndReason, OperationRegistry, type PassphraseResponse, type PassphraseStateAware, type PrepareSolanaOffchainMessageV1Params, type PreparedSolanaOffchainMessageV1, QrDisplayData, QrFallbackReason, type Response, type RunAllNetworkGetAddressOptions, SDK, SaveDeviceBindingDeclineReason, type SaveDeviceBindingRequest, type SdkEvent, type SearchDevicesOptions, type SearchTargetReusePolicy, type SolAddress, type SolGetAddressParams, type SolOffchainMessageV1Params, type SolSignMsgParams, type SolSignTxParams, type SolSignature, type SolSignedTx, type Success, type TransportType, type TrezorBrightnessParams, type TrezorChangePinParams, type TrezorDeviceSettingsParams, type TrezorDisplayRotation, type TrezorSafetyCheckLevel, type TronAddress, type TronContract, type TronFreezeBalanceV2Contract, type TronGetAddressParams, type TronResource, type TronSignMsgParams, type TronSignTxParams, type TronSignature, type TronSignedTx, type TronTransferContract, type TronTriggerSmartContract, type TronUnfreezeBalanceV2Contract, type TronVote, type TronVoteWitnessContract, type TronWithdrawExpireUnfreezeContract, TypedEventEmitter, UI_REQUEST, type UiRequestEvent, UiRequestOperationAttribution, UiRequestRegistry, UiResponseEvent, type VendorType, type WalletIdentity, type ZcashFullViewingKey, type ZcashFullViewingKeyMode, type ZcashGetFullViewingKeyParams, type ZcashGetShieldedAddressParams, type ZcashShieldedAddress, assertBoundedCbor, batchCall, boundedCborFromHex, buildAllNetworkCancelledFailure, buildUnsupportedMethodResponse, bytesToHex, canReplayHardwareMethodAfterTransportFailure, compareSemver, createBridgedConnector, createCombinedConnector, createHardwareLinkId, createHardwareOperationId, createHardwareSearchTargetId, deriveDeviceFingerprint, detectHardwareVendorFromDescriptor, emitDeviceBindingStatus, ensure0x, failure, getAllNetworkMethodChain, getHardwareMethodMetadata, hasHardwareRuntimeIdPrefix, hexToBytes, isAllNetworkMethodName, isConnectionLost, isHardwareOperationId, isKnownNonTargetHardwareVendor, isUserRefusal, isWalletSafetyFailure, padHex64, parseBip32MasterFingerprint, parseHardwareRuntimeId, parseWalletMasterFingerprint, pickConnectionContext, prepareSolanaOffchainMessageV1, rehydrateConnectorError, requestBleDeviceSelection, requestSaveDeviceBinding, resolveHardwareOperationTarget, resolveSearchTargetReusePolicy, runAllNetworkGetAddress, serializeConnectorError, stripHex, success, summarizeForLog, toPhysicalDeviceSearchTarget };