@onekeyfe/hwk-desktop-noble-ble 1.2.6-alpha.0 → 1.2.8-alpha.101

package/dist/{chunk-A5AENDC2.mjs → chunk-ILABAQJY.mjs}

@@ -27,6 +27,7 @@ var THIRD_PARTY_BLE_SCAN_DURATION_MS = 5e3;
 var THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS = 1e4;
 var THIRD_PARTY_BLE_DEVICE_TTL_MS = 5e3;
 var THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS = 1e4;
+var THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS = 3e3;
 
 export {
   __require,
@@ -34,6 +35,7 @@ export {
   THIRD_PARTY_BLE_SCAN_DURATION_MS,
   THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS,
   THIRD_PARTY_BLE_DEVICE_TTL_MS,
-  THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS
+  THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS,
+  THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS
 };
-//# sourceMappingURL=chunk-A5AENDC2.mjs.map
+//# sourceMappingURL=chunk-ILABAQJY.mjs.map

package/dist/{chunk-A5AENDC2.mjs.map → chunk-ILABAQJY.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/constants.ts"],"sourcesContent":["/**\n * Renderer/main IPC channels shared by every third-party BLE vendor; prefixed to\n * avoid clashing with the OneKey handler (`$onekey-noble-ble-*`) in one app.\n */\nexport const THIRD_PARTY_BLE_CHANNELS = {\n  scan: '$onekey-3p-ble-scan',\n  stopScan: '$onekey-3p-ble-stop-scan',\n  connect: '$onekey-3p-ble-connect',\n  disconnect: '$onekey-3p-ble-disconnect',\n  write: '$onekey-3p-ble-write',\n  subscribe: '$onekey-3p-ble-subscribe',\n  unsubscribe: '$onekey-3p-ble-unsubscribe',\n  availability: '$onekey-3p-ble-availability',\n  getDevice: '$onekey-3p-ble-get-device',\n  readRssi: '$onekey-3p-ble-read-rssi',\n  cancelPairing: '$onekey-3p-ble-cancel-pairing',\n  /** push event: main → renderer with assembled BLE notification payload */\n  notification: '$onekey-3p-ble-notification',\n  /** push event: main → renderer when device disconnects unexpectedly */\n  disconnected: '$onekey-3p-ble-disconnected',\n} as const;\n\nexport type ThirdPartyBleChannel =\n  (typeof THIRD_PARTY_BLE_CHANNELS)[keyof typeof THIRD_PARTY_BLE_CHANNELS];\n\n/** Reconnect scan window for `connect(id)`. */\nexport const THIRD_PARTY_BLE_SCAN_DURATION_MS = 5_000;\n\n/** Continuous scan auto-stops this long after the last poll (reset, not accumulated). */\nexport const THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS = 10_000;\n\n/** Drop a device from the snapshot if it hasn't re-advertised within this window. */\nexport const THIRD_PARTY_BLE_DEVICE_TTL_MS = 5_000;\n\n/** Time we'll wait for noble to reach `poweredOn` before failing init. */\nexport const THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS = 10_000;\n"],"mappings":";;;;;;;;AAIO,IAAM,2BAA2B;AAAA,EACtC,MAAM;AAAA,EACN,UAAU;AAAA,EACV,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,OAAO;AAAA,EACP,WAAW;AAAA,EACX,aAAa;AAAA,EACb,cAAc;AAAA,EACd,WAAW;AAAA,EACX,UAAU;AAAA,EACV,eAAe;AAAA;AAAA,EAEf,cAAc;AAAA;AAAA,EAEd,cAAc;AAChB;AAMO,IAAM,mCAAmC;AAGzC,IAAM,oCAAoC;AAG1C,IAAM,gCAAgC;AAGtC,IAAM,sCAAsC;","names":[]}
+{"version":3,"sources":["../src/constants.ts"],"sourcesContent":["/**\n * Renderer/main IPC channels shared by every third-party BLE vendor; prefixed to\n * avoid clashing with the OneKey handler (`$onekey-noble-ble-*`) in one app.\n */\nexport const THIRD_PARTY_BLE_CHANNELS = {\n  scan: '$onekey-3p-ble-scan',\n  stopScan: '$onekey-3p-ble-stop-scan',\n  connect: '$onekey-3p-ble-connect',\n  disconnect: '$onekey-3p-ble-disconnect',\n  write: '$onekey-3p-ble-write',\n  subscribe: '$onekey-3p-ble-subscribe',\n  unsubscribe: '$onekey-3p-ble-unsubscribe',\n  availability: '$onekey-3p-ble-availability',\n  getDevice: '$onekey-3p-ble-get-device',\n  readRssi: '$onekey-3p-ble-read-rssi',\n  cancelPairing: '$onekey-3p-ble-cancel-pairing',\n  /** push event: main → renderer with assembled BLE notification payload */\n  notification: '$onekey-3p-ble-notification',\n  /** push event: main → renderer when device disconnects unexpectedly */\n  disconnected: '$onekey-3p-ble-disconnected',\n} as const;\n\nexport type ThirdPartyBleChannel =\n  (typeof THIRD_PARTY_BLE_CHANNELS)[keyof typeof THIRD_PARTY_BLE_CHANNELS];\n\n/** Reconnect scan window for `connect(id)`. */\nexport const THIRD_PARTY_BLE_SCAN_DURATION_MS = 5_000;\n\n/** Continuous scan auto-stops this long after the last poll (reset, not accumulated). */\nexport const THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS = 10_000;\n\n/** Drop a device from the snapshot if it hasn't re-advertised within this window. */\nexport const THIRD_PARTY_BLE_DEVICE_TTL_MS = 5_000;\n\n/** Time we'll wait for noble to reach `poweredOn` before failing init. */\nexport const THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS = 10_000;\n\n/** Time an availability check waits for a fresh noble to report its first state. */\nexport const THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS = 3_000;\n"],"mappings":";;;;;;;;AAIO,IAAM,2BAA2B;AAAA,EACtC,MAAM;AAAA,EACN,UAAU;AAAA,EACV,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,OAAO;AAAA,EACP,WAAW;AAAA,EACX,aAAa;AAAA,EACb,cAAc;AAAA,EACd,WAAW;AAAA,EACX,UAAU;AAAA,EACV,eAAe;AAAA;AAAA,EAEf,cAAc;AAAA;AAAA,EAEd,cAAc;AAChB;AAMO,IAAM,mCAAmC;AAGzC,IAAM,oCAAoC;AAG1C,IAAM,gCAAgC;AAGtC,IAAM,sCAAsC;AAG5C,IAAM,0CAA0C;","names":[]}

package/dist/constants.d.mts

@@ -28,5 +28,7 @@ declare const THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS = 10000;
 declare const THIRD_PARTY_BLE_DEVICE_TTL_MS = 5000;
 /** Time we'll wait for noble to reach `poweredOn` before failing init. */
 declare const THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS = 10000;
+/** Time an availability check waits for a fresh noble to report its first state. */
+declare const THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS = 3000;
 
-export { THIRD_PARTY_BLE_CHANNELS, THIRD_PARTY_BLE_DEVICE_TTL_MS, THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS, THIRD_PARTY_BLE_SCAN_DURATION_MS, THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS, type ThirdPartyBleChannel };
+export { THIRD_PARTY_BLE_CHANNELS, THIRD_PARTY_BLE_DEVICE_TTL_MS, THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS, THIRD_PARTY_BLE_SCAN_DURATION_MS, THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS, THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS, type ThirdPartyBleChannel };

package/dist/constants.d.ts

@@ -28,5 +28,7 @@ declare const THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS = 10000;
 declare const THIRD_PARTY_BLE_DEVICE_TTL_MS = 5000;
 /** Time we'll wait for noble to reach `poweredOn` before failing init. */
 declare const THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS = 10000;
+/** Time an availability check waits for a fresh noble to report its first state. */
+declare const THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS = 3000;
 
-export { THIRD_PARTY_BLE_CHANNELS, THIRD_PARTY_BLE_DEVICE_TTL_MS, THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS, THIRD_PARTY_BLE_SCAN_DURATION_MS, THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS, type ThirdPartyBleChannel };
+export { THIRD_PARTY_BLE_CHANNELS, THIRD_PARTY_BLE_DEVICE_TTL_MS, THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS, THIRD_PARTY_BLE_SCAN_DURATION_MS, THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS, THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS, type ThirdPartyBleChannel };

package/dist/constants.js

@@ -24,7 +24,8 @@ __export(constants_exports, {
   THIRD_PARTY_BLE_DEVICE_TTL_MS: () => THIRD_PARTY_BLE_DEVICE_TTL_MS,
   THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS: () => THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS,
   THIRD_PARTY_BLE_SCAN_DURATION_MS: () => THIRD_PARTY_BLE_SCAN_DURATION_MS,
-  THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS: () => THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS
+  THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS: () => THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS,
+  THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS: () => THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS
 });
 module.exports = __toCommonJS(constants_exports);
 var THIRD_PARTY_BLE_CHANNELS = {
@@ -48,12 +49,14 @@ var THIRD_PARTY_BLE_SCAN_DURATION_MS = 5e3;
 var THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS = 1e4;
 var THIRD_PARTY_BLE_DEVICE_TTL_MS = 5e3;
 var THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS = 1e4;
+var THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS = 3e3;
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   THIRD_PARTY_BLE_CHANNELS,
   THIRD_PARTY_BLE_DEVICE_TTL_MS,
   THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS,
   THIRD_PARTY_BLE_SCAN_DURATION_MS,
-  THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS
+  THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS,
+  THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS
 });
 //# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/constants.ts"],"sourcesContent":["/**\n * Renderer/main IPC channels shared by every third-party BLE vendor; prefixed to\n * avoid clashing with the OneKey handler (`$onekey-noble-ble-*`) in one app.\n */\nexport const THIRD_PARTY_BLE_CHANNELS = {\n  scan: '$onekey-3p-ble-scan',\n  stopScan: '$onekey-3p-ble-stop-scan',\n  connect: '$onekey-3p-ble-connect',\n  disconnect: '$onekey-3p-ble-disconnect',\n  write: '$onekey-3p-ble-write',\n  subscribe: '$onekey-3p-ble-subscribe',\n  unsubscribe: '$onekey-3p-ble-unsubscribe',\n  availability: '$onekey-3p-ble-availability',\n  getDevice: '$onekey-3p-ble-get-device',\n  readRssi: '$onekey-3p-ble-read-rssi',\n  cancelPairing: '$onekey-3p-ble-cancel-pairing',\n  /** push event: main → renderer with assembled BLE notification payload */\n  notification: '$onekey-3p-ble-notification',\n  /** push event: main → renderer when device disconnects unexpectedly */\n  disconnected: '$onekey-3p-ble-disconnected',\n} as const;\n\nexport type ThirdPartyBleChannel =\n  (typeof THIRD_PARTY_BLE_CHANNELS)[keyof typeof THIRD_PARTY_BLE_CHANNELS];\n\n/** Reconnect scan window for `connect(id)`. */\nexport const THIRD_PARTY_BLE_SCAN_DURATION_MS = 5_000;\n\n/** Continuous scan auto-stops this long after the last poll (reset, not accumulated). */\nexport const THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS = 10_000;\n\n/** Drop a device from the snapshot if it hasn't re-advertised within this window. */\nexport const THIRD_PARTY_BLE_DEVICE_TTL_MS = 5_000;\n\n/** Time we'll wait for noble to reach `poweredOn` before failing init. */\nexport const THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS = 10_000;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAIO,IAAM,2BAA2B;AAAA,EACtC,MAAM;AAAA,EACN,UAAU;AAAA,EACV,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,OAAO;AAAA,EACP,WAAW;AAAA,EACX,aAAa;AAAA,EACb,cAAc;AAAA,EACd,WAAW;AAAA,EACX,UAAU;AAAA,EACV,eAAe;AAAA;AAAA,EAEf,cAAc;AAAA;AAAA,EAEd,cAAc;AAChB;AAMO,IAAM,mCAAmC;AAGzC,IAAM,oCAAoC;AAG1C,IAAM,gCAAgC;AAGtC,IAAM,sCAAsC;","names":[]}
+{"version":3,"sources":["../src/constants.ts"],"sourcesContent":["/**\n * Renderer/main IPC channels shared by every third-party BLE vendor; prefixed to\n * avoid clashing with the OneKey handler (`$onekey-noble-ble-*`) in one app.\n */\nexport const THIRD_PARTY_BLE_CHANNELS = {\n  scan: '$onekey-3p-ble-scan',\n  stopScan: '$onekey-3p-ble-stop-scan',\n  connect: '$onekey-3p-ble-connect',\n  disconnect: '$onekey-3p-ble-disconnect',\n  write: '$onekey-3p-ble-write',\n  subscribe: '$onekey-3p-ble-subscribe',\n  unsubscribe: '$onekey-3p-ble-unsubscribe',\n  availability: '$onekey-3p-ble-availability',\n  getDevice: '$onekey-3p-ble-get-device',\n  readRssi: '$onekey-3p-ble-read-rssi',\n  cancelPairing: '$onekey-3p-ble-cancel-pairing',\n  /** push event: main → renderer with assembled BLE notification payload */\n  notification: '$onekey-3p-ble-notification',\n  /** push event: main → renderer when device disconnects unexpectedly */\n  disconnected: '$onekey-3p-ble-disconnected',\n} as const;\n\nexport type ThirdPartyBleChannel =\n  (typeof THIRD_PARTY_BLE_CHANNELS)[keyof typeof THIRD_PARTY_BLE_CHANNELS];\n\n/** Reconnect scan window for `connect(id)`. */\nexport const THIRD_PARTY_BLE_SCAN_DURATION_MS = 5_000;\n\n/** Continuous scan auto-stops this long after the last poll (reset, not accumulated). */\nexport const THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS = 10_000;\n\n/** Drop a device from the snapshot if it hasn't re-advertised within this window. */\nexport const THIRD_PARTY_BLE_DEVICE_TTL_MS = 5_000;\n\n/** Time we'll wait for noble to reach `poweredOn` before failing init. */\nexport const THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS = 10_000;\n\n/** Time an availability check waits for a fresh noble to report its first state. */\nexport const THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS = 3_000;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAIO,IAAM,2BAA2B;AAAA,EACtC,MAAM;AAAA,EACN,UAAU;AAAA,EACV,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,OAAO;AAAA,EACP,WAAW;AAAA,EACX,aAAa;AAAA,EACb,cAAc;AAAA,EACd,WAAW;AAAA,EACX,UAAU;AAAA,EACV,eAAe;AAAA;AAAA,EAEf,cAAc;AAAA;AAAA,EAEd,cAAc;AAChB;AAMO,IAAM,mCAAmC;AAGzC,IAAM,oCAAoC;AAG1C,IAAM,gCAAgC;AAGtC,IAAM,sCAAsC;AAG5C,IAAM,0CAA0C;","names":[]}

package/dist/constants.mjs

@@ -3,13 +3,15 @@ import {
   THIRD_PARTY_BLE_DEVICE_TTL_MS,
   THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS,
   THIRD_PARTY_BLE_SCAN_DURATION_MS,
-  THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS
-} from "./chunk-A5AENDC2.mjs";
+  THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS,
+  THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS
+} from "./chunk-ILABAQJY.mjs";
 export {
   THIRD_PARTY_BLE_CHANNELS,
   THIRD_PARTY_BLE_DEVICE_TTL_MS,
   THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS,
   THIRD_PARTY_BLE_SCAN_DURATION_MS,
-  THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS
+  THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS,
+  THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS
 };
 //# sourceMappingURL=constants.mjs.map

package/dist/index.d.mts

@@ -1,4 +1,4 @@
-import { ElectronBleScanOptions, ElectronBleConnectOptions } from '@onekeyfe/hwk-adapter-core';
+import { ElectronBleConnectOptions, ElectronBleScanOptions } from '@onekeyfe/hwk-adapter-core';
 export { THIRD_PARTY_BLE_CHANNELS, THIRD_PARTY_BLE_DEVICE_TTL_MS, THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS, THIRD_PARTY_BLE_SCAN_DURATION_MS, THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS, ThirdPartyBleChannel } from './constants.mjs';
 
 type BleDebugLogLevel = 'debug' | 'info' | 'warn' | 'error';
@@ -12,6 +12,26 @@ type BleDebugLogger = (entry: BleDebugLogEntry) => void;
 /** Replace sensitive values at any depth; everything else is forwarded verbatim. */
 declare function redactBleDebugLogData(data?: Record<string, unknown>): Record<string, unknown> | undefined;
 
+/**
+ * Main-process allowlist entry for one vendor key. The renderer only names the vendor; which
+ * peripherals it may see and which GATT profile and framing it may use are decided here, so an
+ * IPC caller cannot turn the service into a generic BLE proxy. UUID arguments may arrive in any
+ * case, with or without dashes.
+ */
+interface ThirdPartyBleVendorProfile {
+    /** Whether an advertised service UUID belongs to this vendor. */
+    isServiceUuid(uuid: string): boolean;
+    /** Whether a local name belongs to this vendor; the handler passes a length-capped name. */
+    isName?(name: string): boolean;
+    /** Whether this GATT profile and write framing is one the vendor's firmware uses. */
+    acceptsConnect(options: ElectronBleConnectOptions): boolean;
+}
+/**
+ * Vendors the desktop BLE service serves by default, keyed by the vendor string the connectors
+ * send. A host passing `vendors` replaces this map, so spread it to add a vendor.
+ */
+declare const DEFAULT_THIRD_PARTY_BLE_VENDORS: Readonly<Record<string, ThirdPartyBleVendorProfile>>;
+
 /** Device info the main process returns to the renderer over IPC. */
 interface ThirdPartyBleDeviceInfo {
     /** Stable id (noble peripheral.id) used as connectId. */
@@ -77,7 +97,7 @@ interface ThirdPartyBleApi {
 
 /**
  * Subset of @stoprocent/noble we touch. We type as `any` to keep the package
- * installable without the native module — it's loaded lazily inside main().
+ * installable without the native module — the default factory loads it on first use.
  */
 interface NobleLike {
     state: string;
@@ -139,6 +159,11 @@ interface NobleBleHandlerOptions {
     /** Override the overall connect timeout (tests only; defaults to 31s). */
     connectTimeoutMs?: number;
     logger?: BleDebugLogger;
+    /**
+     * Vendors served over IPC, keyed by the `vendor` the renderer sends. Replaces the default map
+     * (spread `DEFAULT_THIRD_PARTY_BLE_VENDORS` to add one); unknown vendors are rejected.
+     */
+    vendors?: Record<string, ThirdPartyBleVendorProfile>;
 }
 /** Noble BLE logic decoupled from Electron IPC, so tests can use a fake noble. */
 declare class NobleBleHandler {
@@ -146,6 +171,7 @@ declare class NobleBleHandler {
     private readonly _factory;
     private readonly _connectTimeoutMs;
     private readonly _logger?;
+    private readonly _vendors;
     private readonly _discovered;
     private readonly _lastSeen;
     private readonly _connected;
@@ -167,6 +193,7 @@ declare class NobleBleHandler {
     private _nativeReleased;
     private _lastNobleRecoverAt?;
     constructor(options?: NobleBleHandlerOptions);
+    private _resolveVendor;
     setNotificationListener(handler: (id: string, hexData: string) => void): void;
     setDisconnectedListener(handler: (id: string) => void): void;
     init(): Promise<void>;
@@ -242,6 +269,8 @@ declare class NobleBleHandler {
     private _cleanupDevice;
     private _requireEntry;
     private _requireNoble;
+    /** A fresh noble reads `unknown` until its bindings report; wait for that first report. */
+    private _waitForKnownState;
     private _waitForPoweredOn;
     private _log;
 }
@@ -274,4 +303,4 @@ interface ThirdPartyBleSupportHandle {
  */
 declare function initThirdPartyBleSupport(webContents: WebContentsLike, options?: InitThirdPartyBleSupportOptions): ThirdPartyBleSupportHandle;
 
-export { type BleDebugLogEntry, type BleDebugLogLevel, type BleDebugLogger, type InitThirdPartyBleSupportOptions, type IpcMainLike, NobleBleHandler, type NobleBleHandlerOptions, type ThirdPartyBleApi, type ThirdPartyBleAvailability, type ThirdPartyBleDeviceInfo, type ThirdPartyBleSupportHandle, initThirdPartyBleSupport, redactBleDebugLogData };
+export { type BleDebugLogEntry, type BleDebugLogLevel, type BleDebugLogger, DEFAULT_THIRD_PARTY_BLE_VENDORS, type InitThirdPartyBleSupportOptions, type IpcMainLike, NobleBleHandler, type NobleBleHandlerOptions, type ThirdPartyBleApi, type ThirdPartyBleAvailability, type ThirdPartyBleDeviceInfo, type ThirdPartyBleSupportHandle, type ThirdPartyBleVendorProfile, initThirdPartyBleSupport, redactBleDebugLogData };

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-import { ElectronBleScanOptions, ElectronBleConnectOptions } from '@onekeyfe/hwk-adapter-core';
+import { ElectronBleConnectOptions, ElectronBleScanOptions } from '@onekeyfe/hwk-adapter-core';
 export { THIRD_PARTY_BLE_CHANNELS, THIRD_PARTY_BLE_DEVICE_TTL_MS, THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS, THIRD_PARTY_BLE_SCAN_DURATION_MS, THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS, ThirdPartyBleChannel } from './constants.js';
 
 type BleDebugLogLevel = 'debug' | 'info' | 'warn' | 'error';
@@ -12,6 +12,26 @@ type BleDebugLogger = (entry: BleDebugLogEntry) => void;
 /** Replace sensitive values at any depth; everything else is forwarded verbatim. */
 declare function redactBleDebugLogData(data?: Record<string, unknown>): Record<string, unknown> | undefined;
 
+/**
+ * Main-process allowlist entry for one vendor key. The renderer only names the vendor; which
+ * peripherals it may see and which GATT profile and framing it may use are decided here, so an
+ * IPC caller cannot turn the service into a generic BLE proxy. UUID arguments may arrive in any
+ * case, with or without dashes.
+ */
+interface ThirdPartyBleVendorProfile {
+    /** Whether an advertised service UUID belongs to this vendor. */
+    isServiceUuid(uuid: string): boolean;
+    /** Whether a local name belongs to this vendor; the handler passes a length-capped name. */
+    isName?(name: string): boolean;
+    /** Whether this GATT profile and write framing is one the vendor's firmware uses. */
+    acceptsConnect(options: ElectronBleConnectOptions): boolean;
+}
+/**
+ * Vendors the desktop BLE service serves by default, keyed by the vendor string the connectors
+ * send. A host passing `vendors` replaces this map, so spread it to add a vendor.
+ */
+declare const DEFAULT_THIRD_PARTY_BLE_VENDORS: Readonly<Record<string, ThirdPartyBleVendorProfile>>;
+
 /** Device info the main process returns to the renderer over IPC. */
 interface ThirdPartyBleDeviceInfo {
     /** Stable id (noble peripheral.id) used as connectId. */
@@ -77,7 +97,7 @@ interface ThirdPartyBleApi {
 
 /**
  * Subset of @stoprocent/noble we touch. We type as `any` to keep the package
- * installable without the native module — it's loaded lazily inside main().
+ * installable without the native module — the default factory loads it on first use.
  */
 interface NobleLike {
     state: string;
@@ -139,6 +159,11 @@ interface NobleBleHandlerOptions {
     /** Override the overall connect timeout (tests only; defaults to 31s). */
     connectTimeoutMs?: number;
     logger?: BleDebugLogger;
+    /**
+     * Vendors served over IPC, keyed by the `vendor` the renderer sends. Replaces the default map
+     * (spread `DEFAULT_THIRD_PARTY_BLE_VENDORS` to add one); unknown vendors are rejected.
+     */
+    vendors?: Record<string, ThirdPartyBleVendorProfile>;
 }
 /** Noble BLE logic decoupled from Electron IPC, so tests can use a fake noble. */
 declare class NobleBleHandler {
@@ -146,6 +171,7 @@ declare class NobleBleHandler {
     private readonly _factory;
     private readonly _connectTimeoutMs;
     private readonly _logger?;
+    private readonly _vendors;
     private readonly _discovered;
     private readonly _lastSeen;
     private readonly _connected;
@@ -167,6 +193,7 @@ declare class NobleBleHandler {
     private _nativeReleased;
     private _lastNobleRecoverAt?;
     constructor(options?: NobleBleHandlerOptions);
+    private _resolveVendor;
     setNotificationListener(handler: (id: string, hexData: string) => void): void;
     setDisconnectedListener(handler: (id: string) => void): void;
     init(): Promise<void>;
@@ -242,6 +269,8 @@ declare class NobleBleHandler {
     private _cleanupDevice;
     private _requireEntry;
     private _requireNoble;
+    /** A fresh noble reads `unknown` until its bindings report; wait for that first report. */
+    private _waitForKnownState;
     private _waitForPoweredOn;
     private _log;
 }
@@ -274,4 +303,4 @@ interface ThirdPartyBleSupportHandle {
  */
 declare function initThirdPartyBleSupport(webContents: WebContentsLike, options?: InitThirdPartyBleSupportOptions): ThirdPartyBleSupportHandle;
 
-export { type BleDebugLogEntry, type BleDebugLogLevel, type BleDebugLogger, type InitThirdPartyBleSupportOptions, type IpcMainLike, NobleBleHandler, type NobleBleHandlerOptions, type ThirdPartyBleApi, type ThirdPartyBleAvailability, type ThirdPartyBleDeviceInfo, type ThirdPartyBleSupportHandle, initThirdPartyBleSupport, redactBleDebugLogData };
+export { type BleDebugLogEntry, type BleDebugLogLevel, type BleDebugLogger, DEFAULT_THIRD_PARTY_BLE_VENDORS, type InitThirdPartyBleSupportOptions, type IpcMainLike, NobleBleHandler, type NobleBleHandlerOptions, type ThirdPartyBleApi, type ThirdPartyBleAvailability, type ThirdPartyBleDeviceInfo, type ThirdPartyBleSupportHandle, type ThirdPartyBleVendorProfile, initThirdPartyBleSupport, redactBleDebugLogData };

package/dist/index.js

@@ -20,6 +20,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  DEFAULT_THIRD_PARTY_BLE_VENDORS: () => DEFAULT_THIRD_PARTY_BLE_VENDORS,
   NobleBleHandler: () => NobleBleHandler,
   THIRD_PARTY_BLE_CHANNELS: () => THIRD_PARTY_BLE_CHANNELS,
   THIRD_PARTY_BLE_DEVICE_TTL_MS: () => THIRD_PARTY_BLE_DEVICE_TTL_MS,
@@ -113,25 +114,76 @@ var THIRD_PARTY_BLE_SCAN_DURATION_MS = 5e3;
 var THIRD_PARTY_BLE_SCAN_IDLE_STOP_MS = 1e4;
 var THIRD_PARTY_BLE_DEVICE_TTL_MS = 5e3;
 var THIRD_PARTY_BLE_POWER_ON_TIMEOUT_MS = 1e4;
+var THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS = 3e3;
+
+// src/vendorProfiles.ts
+var normalizeBleUuid = (uuid) => uuid.replace(/-/g, "").toLowerCase();
+var isUuidString = (value) => typeof value === "string";
+var isIntegerInRange = (value, min, max) => typeof value === "number" && Number.isInteger(value) && value >= min && value <= max;
+var TREZOR_SERVICE_UUID = normalizeBleUuid("8c000001-a59b-4d58-a9ad-073df69fa1b1");
+var TREZOR_WRITE_UUID = normalizeBleUuid("8c000002-a59b-4d58-a9ad-073df69fa1b1");
+var TREZOR_NOTIFY_UUID = normalizeBleUuid("8c000003-a59b-4d58-a9ad-073df69fa1b1");
+var TREZOR_PACKET_SIZE = 244;
+var TREZOR_MAX_CHUNK_DELAY_MS = 50;
+var TREZOR_NAME_BRAND = /\bTrezor\b/i;
+var TREZOR_NAME_MODEL = /\bSafe\s*7\b|\bT3W1\b/i;
+var trezorProfile = {
+  isServiceUuid: (uuid) => isUuidString(uuid) && normalizeBleUuid(uuid) === TREZOR_SERVICE_UUID,
+  isName: (name) => TREZOR_NAME_BRAND.test(name) && TREZOR_NAME_MODEL.test(name),
+  acceptsConnect: (options) => {
+    const { write } = options;
+    return isUuidString(options.serviceUuid) && isUuidString(options.writeUuid) && isUuidString(options.notifyUuid) && normalizeBleUuid(options.serviceUuid) === TREZOR_SERVICE_UUID && normalizeBleUuid(options.writeUuid) === TREZOR_WRITE_UUID && normalizeBleUuid(options.notifyUuid) === TREZOR_NOTIFY_UUID && typeof write === "object" && write !== null && write.mode === "padded" && write.chunkSize === TREZOR_PACKET_SIZE && (write.chunkDelayMs === void 0 || isIntegerInRange(write.chunkDelayMs, 0, TREZOR_MAX_CHUNK_DELAY_MS)) && write.maxLength === void 0;
+  }
+};
+var LEDGER_UUID = /^13d634002c97([0-9a-f]{4})000([0-3])4c6564676572$/;
+var LEDGER_ROLE_SERVICE = "0";
+var LEDGER_ROLE_NOTIFY = "1";
+var LEDGER_ROLE_WRITE = "2";
+var LEDGER_ROLE_WRITE_CMD = "3";
+var LEDGER_MAX_FRAME_SIZE = 255;
+var parseLedgerUuid = (uuid) => {
+  if (!isUuidString(uuid)) return void 0;
+  const parsed = LEDGER_UUID.exec(normalizeBleUuid(uuid));
+  return parsed ? { model: parsed[1], role: parsed[2] } : void 0;
+};
+var ledgerProfile = {
+  isServiceUuid: (uuid) => parseLedgerUuid(uuid)?.role === LEDGER_ROLE_SERVICE,
+  acceptsConnect: (options) => {
+    const service = parseLedgerUuid(options.serviceUuid);
+    const notify = parseLedgerUuid(options.notifyUuid);
+    const write = parseLedgerUuid(options.writeUuid);
+    const framing = options.write;
+    return service?.role === LEDGER_ROLE_SERVICE && notify?.role === LEDGER_ROLE_NOTIFY && (write?.role === LEDGER_ROLE_WRITE || write?.role === LEDGER_ROLE_WRITE_CMD) && notify.model === service.model && write.model === service.model && typeof framing === "object" && framing !== null && framing.mode === "raw" && isIntegerInRange(framing.maxLength, 1, LEDGER_MAX_FRAME_SIZE) && framing.chunkSize === void 0 && framing.chunkDelayMs === void 0;
+  }
+};
+var DEFAULT_THIRD_PARTY_BLE_VENDORS = Object.freeze({
+  ledger: ledgerProfile,
+  trezor: trezorProfile
+});
 
 // src/NobleBleHandler.ts
 var DEFAULT_NOBLE_FACTORY = () => {
   const noble = require("@stoprocent/noble");
   return noble;
 };
-var normalizeUuid = (uuid) => uuid.replace(/-/g, "").toLowerCase();
-var matchesPeripheral = (p, match) => {
-  if (!match) return false;
+var BLE_NAME_MATCH_MAX_LENGTH = 64;
+var matchesPeripheral = (p, profile, narrowTo) => {
   const adv = p.advertisement ?? {};
   const advertised = adv.serviceUuids ?? [];
-  if (match.serviceUuids?.length && advertised.some(
-    (uuid) => match.serviceUuids?.some((wanted) => normalizeUuid(wanted) === normalizeUuid(uuid))
+  if (advertised.some(
+    (uuid) => typeof uuid === "string" && profile.isServiceUuid(uuid) && (!narrowTo || narrowTo.has(normalizeBleUuid(uuid)))
   )) {
     return true;
   }
   const name = adv.localName;
-  if (!match.namePatterns?.length || !name) return false;
-  return match.namePatterns.every((pattern) => new RegExp(pattern, "i").test(name));
+  if (!profile.isName || typeof name !== "string" || !name) return false;
+  return profile.isName(name.slice(0, BLE_NAME_MATCH_MAX_LENGTH));
+};
+var requestedServiceUuids = (options) => {
+  const requested = options?.match ? options.match.serviceUuids : options?.serviceUuids;
+  if (!Array.isArray(requested)) return void 0;
+  const uuids = requested.filter((uuid) => typeof uuid === "string");
+  return uuids.length ? new Set(uuids.map(normalizeBleUuid)) : void 0;
 };
 var peripheralToInfo = (p) => {
   const adv = p.advertisement ?? {};
@@ -193,6 +245,12 @@ var NobleBleHandler = class {
     this._factory = options.nobleFactory ?? DEFAULT_NOBLE_FACTORY;
     this._connectTimeoutMs = options.connectTimeoutMs ?? BLE_CONNECT_TIMEOUT_MS;
     this._logger = options.logger;
+    this._vendors = new Map(Object.entries(options.vendors ?? DEFAULT_THIRD_PARTY_BLE_VENDORS));
+  }
+  _resolveVendor(vendor) {
+    const profile = typeof vendor === "string" ? this._vendors.get(vendor) : void 0;
+    if (typeof vendor !== "string" || !profile) throw new Error("Unsupported BLE vendor");
+    return { vendor, profile };
   }
   setNotificationListener(handler) {
     this._onNotification = handler;
@@ -233,6 +291,8 @@ var NobleBleHandler = class {
         return { available: false, state: "unsupported", initialized: false };
       }
     }
+    await this._waitForKnownState(THIRD_PARTY_BLE_STATE_SETTLE_TIMEOUT_MS);
+    this._assertActive();
     const state = this._noble?.state ?? "unknown";
     return {
       available: state === "poweredOn",
@@ -245,14 +305,15 @@ var NobleBleHandler = class {
    * packet, and a Safe 7 ADV carries only its name (UUID is in the scan response).
    */
   async scan(options) {
-    this._scanOwners.add(options?.vendor);
+    const { vendor, profile } = this._resolveVendor(options?.vendor);
+    this._scanOwners.add(vendor);
     try {
       await this.init();
     } catch (error) {
-      this._scanOwners.delete(options?.vendor);
+      this._scanOwners.delete(vendor);
       throw error;
     }
-    if (!this._scanOwners.has(options?.vendor)) return [];
+    if (!this._scanOwners.has(vendor)) return [];
     try {
       await this._setScanning(true);
     } catch (error) {
@@ -261,7 +322,7 @@ var NobleBleHandler = class {
     }
     this._assertActive();
     this._armIdleStop();
-    const devices = this._snapshot(options);
+    const devices = this._snapshot(vendor, profile, requestedServiceUuids(options));
     if (devices.length === 0) {
       this._log("warn", "scan.empty", {
         raw: this._discovered.size,
@@ -275,9 +336,8 @@ var NobleBleHandler = class {
    * In-range devices matching the caller, minus TTL-expired ones. `_discovered`
    * is only a cache; a missing device can still be reached by `_directConnect`.
    */
-  _snapshot(options) {
+  _snapshot(vendor, profile, narrowTo) {
     const now = Date.now();
-    const match = options?.match ?? { serviceUuids: options?.serviceUuids };
     const result = [];
     for (const [id, peripheral] of this._discovered) {
       if (now - (this._lastSeen.get(id) ?? 0) > THIRD_PARTY_BLE_DEVICE_TTL_MS) {
@@ -285,11 +345,11 @@ var NobleBleHandler = class {
         this._lastSeen.delete(id);
         continue;
       }
-      if (!matchesPeripheral(peripheral, match)) continue;
+      if (!matchesPeripheral(peripheral, profile, narrowTo)) continue;
       result.push(peripheralToInfo(peripheral));
     }
     for (const [id, entry] of this._connected) {
-      if (entry.vendor !== options?.vendor) continue;
+      if (entry.vendor !== vendor) continue;
       if (result.some((info) => info.id === id)) continue;
       result.push(peripheralToInfo(entry.peripheral));
     }
@@ -406,7 +466,9 @@ var NobleBleHandler = class {
    */
   getDevice(id) {
     const p = this._discovered.get(id);
-    if (!p) return null;
+    if (!p || ![...this._vendors.values()].some((profile) => matchesPeripheral(p, profile))) {
+      return null;
+    }
     return peripheralToInfo(p);
   }
   /** Live RSSI (dBm) of a connected peripheral, else the cached scan-time value. */
@@ -523,10 +585,13 @@ var NobleBleHandler = class {
   // `timed out` (unreachable) and `connection failed` (stale bond) differently.
   async connect(id, options) {
     if (!options || !options.vendor || ![options.serviceUuid, options.writeUuid, options.notifyUuid].every(
-      (uuid) => typeof uuid === "string" && /^[0-9a-f]{32}$/i.test(normalizeUuid(uuid))
+      (uuid) => typeof uuid === "string" && /^[0-9a-f]{32}$/i.test(normalizeBleUuid(uuid))
     )) {
       throw new Error("Invalid BLE GATT profile");
     }
+    if (!this._resolveVendor(options.vendor).profile.acceptsConnect(options)) {
+      throw new Error(`BLE GATT profile not allowed for ${options.vendor}`);
+    }
     this._assertActive();
     const claim = { abandoned: false };
     let abandon;
@@ -563,9 +628,9 @@ var NobleBleHandler = class {
     })();
     attempt.settled = Promise.allSettled([nativeOperation, caller]).finally(() => {
       this._connectAttempts.delete(attempt);
+      if (this._scanOwners.size > 0) this._armIdleStop();
       const connectScanWaiting = [...this._scanOwners].some((owner) => typeof owner === "symbol");
       if (connectScanWaiting) {
-        this._armIdleStop();
         void this._setScanning(true).catch(() => void 0);
       }
     });
@@ -634,10 +699,10 @@ var NobleBleHandler = class {
         [options.serviceUuid],
         [options.writeUuid, options.notifyUuid]
       );
-      const writeUuid = normalizeUuid(options.writeUuid);
-      const notifyUuid = normalizeUuid(options.notifyUuid);
-      const writeChar = characteristics.find((c) => normalizeUuid(c.uuid) === writeUuid);
-      const notifyChar = characteristics.find((c) => normalizeUuid(c.uuid) === notifyUuid);
+      const writeUuid = normalizeBleUuid(options.writeUuid);
+      const notifyUuid = normalizeBleUuid(options.notifyUuid);
+      const writeChar = characteristics.find((c) => normalizeBleUuid(c.uuid) === writeUuid);
+      const notifyChar = characteristics.find((c) => normalizeBleUuid(c.uuid) === notifyUuid);
       if (!writeChar || !notifyChar) {
         throw new Error(`BLE characteristics not found on device ${id}`);
       }
@@ -839,6 +904,22 @@ var NobleBleHandler = class {
     if (!this._noble) throw new Error("Desktop BLE: noble was not initialized");
     return this._noble;
   }
+  /** A fresh noble reads `unknown` until its bindings report; wait for that first report. */
+  async _waitForKnownState(timeoutMs) {
+    const noble = this._requireNoble();
+    if (noble.state !== "unknown") return;
+    await new Promise((resolve) => {
+      const settle = () => {
+        clearTimeout(timer);
+        noble.removeListener("stateChange", settle);
+        this._pendingCancellations.delete(settle);
+        resolve();
+      };
+      const timer = setTimeout(settle, timeoutMs);
+      this._pendingCancellations.add(settle);
+      noble.on("stateChange", settle);
+    });
+  }
   async _waitForPoweredOn(timeoutMs) {
     const noble = this._requireNoble();
     if (noble.state === "poweredOn") return;
@@ -948,6 +1029,7 @@ function initThirdPartyBleSupport(webContents, options = {}) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  DEFAULT_THIRD_PARTY_BLE_VENDORS,
   NobleBleHandler,
   THIRD_PARTY_BLE_CHANNELS,
   THIRD_PARTY_BLE_DEVICE_TTL_MS,