@onekeyfe/hwk-ledger-adapter 1.1.27-alpha.1 → 1.1.27-alpha.101

package/dist/index.d.mts

@@ -1,4 +1,5 @@
-import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, Response, ChainCapability, EvmGetAddressParams, EvmAddress, EvmSignTxParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorEventType, ConnectorEventMap, Failure, HardwareErrorCode } from '@onekeyfe/hwk-adapter-core';
+import * as _onekeyfe_hwk_adapter_core from '@onekeyfe/hwk-adapter-core';
+import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, Response, ChainCapability, EvmGetAddressParams, ICommonCallParams, EvmAddress, EvmSignTxParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorCallResult, ConnectorEventType, ConnectorEventMap, Failure, HardwareErrorCode } from '@onekeyfe/hwk-adapter-core';
 import { DeviceActionState as DeviceActionState$1, DiscoveredDevice, ExecuteDeviceActionReturnType, DeviceManagementKit } from '@ledgerhq/device-management-kit';
 import { Address, Signature, SignerEth as SignerEth$1, TypedData } from '@ledgerhq/device-signer-kit-ethereum';
 import { ContextModule } from '@ledgerhq/context-module';
@@ -6,26 +7,104 @@ import { SignerBtc as SignerBtc$1 } from '@ledgerhq/device-signer-kit-bitcoin';
 import { SignerSolana } from '@ledgerhq/device-signer-kit-solana';
 import Transport from '@ledgerhq/hw-transport';
 
-interface LedgerAdapterOptions {
-    /**
-     * `true` — emit `REQUEST_SELECT_DEVICE` on multi-device discovery and await
-     * `uiResponse({ type: RECEIVE_SELECT_DEVICE, payload: { sdkConnectId } })`.
-     * `false` (default) — silently pick the first device.
-     */
-    handleSelectDevice?: boolean;
+/**
+ * Re-export DMK types under local aliases for backward compatibility.
+ * These replace the previous duck-typed interfaces with the real SDK types.
+ */
+type DmkDiscoveredDevice = DiscoveredDevice;
+/**
+ * DMK DeviceAction — the Observable-based return type of all DMK signer methods.
+ *
+ * This is a permissive alias for `ExecuteDeviceActionReturnType` that accepts
+ * any Error and IntermediateValue generics. Signer wrapper code only cares about
+ * the Output type and the observable/cancel shape.
+ */
+type DeviceAction<T> = ExecuteDeviceActionReturnType<T, any, any>;
+/**
+ * DMK DeviceActionState — re-exported with permissive Error/IntermediateValue.
+ * The real type is a discriminated union on `status`.
+ */
+type DeviceActionState<T> = DeviceActionState$1<T, any, any>;
+/** ETH address result — re-exported from DMK for backward compatibility. */
+type SignerEvmAddress = Address;
+/** ETH signature result — re-exported from DMK for backward compatibility. */
+type SignerEvmSignature = Signature;
+/** BTC address result (WalletAddress not exported from DMK top-level). */
+interface SignerBtcAddress {
+    address: string;
+}
+
+/** Optional context attached to the rejection when a canceller fires. */
+interface CancelReason {
+    code?: number;
+    tag?: string;
+    message?: string;
+}
+/**
+ * Convert a DMK DeviceAction (Observable-based) into a Promise.
+ * Handles pending -> completed/error state transitions and interaction callbacks.
+ *
+ * Tracks the last DMK step observed (e.g. `signer.eth.steps.blindSignTransactionFallback`)
+ * and attaches it to the rejected error as a non-enumerable `_lastStep` property,
+ * so upstream error classifiers can distinguish failure contexts (e.g. Blind signing
+ * disabled vs. generic Invalid data).
+ *
+ * @param timeoutMs  Idle watchdog ms. Re-armed on each emission, paused
+ *                   during interactive pending. 0 disables. Default 65s
+ *                   (covers DMK's 60s + margin; we're a backstop only).
+ * @param onRegisterCanceller  Optional callback that receives a function which, when
+ *                             called, unsubscribes and cancels the underlying DeviceAction
+ *                             (releases DMK's IntentQueue slot). Caller is responsible
+ *                             for invoking the canceller on timeout/abort scenarios.
+ */
+declare function deviceActionToPromise<T>(action: DeviceAction<T>, onInteraction?: (interaction: string) => void, timeoutMs?: number, onRegisterCanceller?: (cancel: (reason?: CancelReason) => void) => void, onIntermediate?: (intermediateValue: unknown) => void): Promise<T>;
+
+interface AppMetadata {
+    versionName: string;
+    versionId: number;
+    version: string;
+    versionDisplayName: string | null;
+    description: string | null;
+    icon: string | null;
+    bytes: number | null;
+    currencyId: string | null;
+    isDevTools: boolean;
 }
+interface FirmwareVersion {
+    /** BOLOS version on the secure element — the user-facing firmware version. */
+    seVersion: string;
+    /** MCU SEPH (SE–MCU link protocol) version. */
+    mcuSephVersion: string;
+    /** MCU bootloader version. */
+    mcuBootloaderVersion: string;
+    /** Hardware revision (e.g. "00" / "01" on Nano X). */
+    hwVersion: string;
+}
+/** Full GetOsVersionResponse projected to a plain serializable shape. */
+interface LedgerDeviceInfo extends FirmwareVersion {
+    isBootloader: boolean;
+    isOsu: boolean;
+    targetId: number;
+    seTargetId?: number;
+    mcuTargetId?: number;
+    /** Secure element flags as hex string (raw bytes turned readable). */
+    seFlagsHex: string;
+}
+
 declare class LedgerAdapter implements IHardwareWallet {
     readonly vendor: "ledger";
     private readonly connector;
     private readonly emitter;
-    private readonly _handleSelectDevice;
     private _discoveredDevices;
     private _sessions;
     private readonly _uiRegistry;
     private _btcHighIndexConfirmedThisSession;
     private readonly _jobQueue;
     private _doConnectAbortController;
-    constructor(connector: IConnector, options?: LedgerAdapterOptions);
+    private readonly _defaultAutoInstallApp;
+    constructor(connector: IConnector, options?: {
+        autoInstallApp?: boolean;
+    });
     get activeTransport(): TransportType | null;
     getAvailableTransports(): TransportType[];
     switchTransport(_type: TransportType): Promise<void>;
@@ -39,34 +118,45 @@ declare class LedgerAdapter implements IHardwareWallet {
     dispose(): Promise<void>;
     uiResponse(response: UiResponseEvent): void;
     searchDevices(options?: SearchDevicesOptions): Promise<DeviceInfo[]>;
+    private _evictAllSessions;
     private static readonly MAX_BUSINESS_RETRY_BUDGET;
     private static readonly STUCK_APP_RETRY_DELAY_MS;
     private static readonly MAX_DOCONNECT_CONFIRMS;
     private _lastCancelReason;
+    private static readonly APP_INSTALL_PROGRESS_MIN_DELTA;
+    private _installProgressLastEmittedValue;
+    private _installProgressLastKey;
     private static _createDeviceBusyError;
     connectDevice(connectId: string): Promise<Response<string>>;
     disconnectDevice(connectId: string): Promise<void>;
     getDeviceInfo(connectId: string, deviceId: string): Promise<Response<DeviceInfo>>;
     getSupportedChains(): ChainCapability[];
+    allNetworkGetAddress: (connectId: string, _deviceId: string, params: _onekeyfe_hwk_adapter_core.AllNetworkGetAddressParams) => Promise<Response<_onekeyfe_hwk_adapter_core.AllNetworkAddressResponse[]>>;
     private callChain;
-    evmGetAddress(connectId: string, deviceId: string, params: EvmGetAddressParams): Promise<Response<EvmAddress>>;
-    evmSignTransaction(connectId: string, deviceId: string, params: EvmSignTxParams): Promise<Response<EvmSignedTx>>;
-    evmSignMessage(connectId: string, deviceId: string, params: EvmSignMsgParams): Promise<Response<EvmSignature>>;
-    evmSignTypedData(connectId: string, deviceId: string, params: EvmSignTypedDataParams): Promise<Response<EvmSignature>>;
-    btcGetAddress(connectId: string, deviceId: string, params: BtcGetAddressParams): Promise<Response<BtcAddress>>;
-    btcGetPublicKey(connectId: string, deviceId: string, params: BtcGetPublicKeyParams): Promise<Response<BtcPublicKey>>;
-    btcSignTransaction(connectId: string, deviceId: string, params: BtcSignTxParams): Promise<Response<BtcSignedTx>>;
-    btcSignPsbt(connectId: string, deviceId: string, params: BtcSignPsbtParams): Promise<Response<BtcSignedPsbt>>;
-    btcSignMessage(connectId: string, deviceId: string, params: BtcSignMsgParams): Promise<Response<BtcSignature>>;
-    btcGetMasterFingerprint(connectId: string, deviceId: string): Promise<Response<{
+    evmGetAddress(connectId: string, deviceId: string, params: EvmGetAddressParams, commonParams?: ICommonCallParams): Promise<Response<EvmAddress>>;
+    evmSignTransaction(connectId: string, deviceId: string, params: EvmSignTxParams, commonParams?: ICommonCallParams): Promise<Response<EvmSignedTx>>;
+    evmSignMessage(connectId: string, deviceId: string, params: EvmSignMsgParams, commonParams?: ICommonCallParams): Promise<Response<EvmSignature>>;
+    evmSignTypedData(connectId: string, deviceId: string, params: EvmSignTypedDataParams, commonParams?: ICommonCallParams): Promise<Response<EvmSignature>>;
+    btcGetAddress(connectId: string, deviceId: string, params: BtcGetAddressParams, commonParams?: ICommonCallParams): Promise<Response<BtcAddress>>;
+    btcGetPublicKey(connectId: string, deviceId: string, params: BtcGetPublicKeyParams, commonParams?: ICommonCallParams): Promise<Response<BtcPublicKey>>;
+    btcSignTransaction(connectId: string, deviceId: string, params: BtcSignTxParams, commonParams?: ICommonCallParams): Promise<Response<BtcSignedTx>>;
+    btcSignPsbt(connectId: string, deviceId: string, params: BtcSignPsbtParams, commonParams?: ICommonCallParams): Promise<Response<BtcSignedPsbt>>;
+    btcSignMessage(connectId: string, deviceId: string, params: BtcSignMsgParams, commonParams?: ICommonCallParams): Promise<Response<BtcSignature>>;
+    btcGetMasterFingerprint(connectId: string, deviceId: string, commonParams?: ICommonCallParams): Promise<Response<{
         masterFingerprint: string;
     }>>;
-    solGetAddress(connectId: string, deviceId: string, params: SolGetAddressParams): Promise<Response<SolAddress>>;
-    solSignTransaction(connectId: string, deviceId: string, params: SolSignTxParams): Promise<Response<SolSignedTx>>;
-    solSignMessage(connectId: string, deviceId: string, params: SolSignMsgParams): Promise<Response<SolSignature>>;
-    tronGetAddress(connectId: string, deviceId: string, params: TronGetAddressParams): Promise<Response<TronAddress>>;
-    tronSignTransaction(connectId: string, deviceId: string, params: TronSignTxParams): Promise<Response<TronSignedTx>>;
-    tronSignMessage(connectId: string, deviceId: string, params: TronSignMsgParams): Promise<Response<TronSignature>>;
+    solGetAddress(connectId: string, deviceId: string, params: SolGetAddressParams, commonParams?: ICommonCallParams): Promise<Response<SolAddress>>;
+    solSignTransaction(connectId: string, deviceId: string, params: SolSignTxParams, commonParams?: ICommonCallParams): Promise<Response<SolSignedTx>>;
+    solSignMessage(connectId: string, deviceId: string, params: SolSignMsgParams, commonParams?: ICommonCallParams): Promise<Response<SolSignature>>;
+    tronGetAddress(connectId: string, deviceId: string, params: TronGetAddressParams, commonParams?: ICommonCallParams): Promise<Response<TronAddress>>;
+    tronSignTransaction(connectId: string, deviceId: string, params: TronSignTxParams, commonParams?: ICommonCallParams): Promise<Response<TronSignedTx>>;
+    tronSignMessage(connectId: string, deviceId: string, params: TronSignMsgParams, commonParams?: ICommonCallParams): Promise<Response<TronSignature>>;
+    installApp(connectId: string, appName: string): Promise<Response<void>>;
+    listInstalledApps(connectId: string): Promise<Response<AppMetadata[]>>;
+    listInstalledNames(connectId: string): Promise<Response<string[]>>;
+    listAvailableApps(connectId: string): Promise<Response<AppMetadata[]>>;
+    getLedgerFirmwareVersion(connectId: string): Promise<Response<FirmwareVersion>>;
+    getLedgerDeviceInfo(connectId: string): Promise<Response<LedgerDeviceInfo>>;
     on<K extends keyof HardwareEventMap>(event: K, listener: (event: HardwareEventMap[K]) => void): void;
     on(event: string, listener: DeviceEventListener): void;
     off<K extends keyof HardwareEventMap>(event: K, listener: (event: HardwareEventMap[K]) => void): void;
@@ -98,7 +188,7 @@ declare class LedgerAdapter implements IHardwareWallet {
      *
      * - If a session already exists for the given connectId, reuse it.
      * - If ANY session exists (Ledger IDs are ephemeral), reuse it.
-     * - Otherwise: search → 1 device: auto-connect, multiple: ask user, 0: throw.
+     * - Otherwise: search → exactly 1 USB device auto-connects; multiple or none throws.
      */
     private _connectingPromise;
     private _waitForDeviceConnect;
@@ -111,11 +201,11 @@ declare class LedgerAdapter implements IHardwareWallet {
      */
     private _gateBtcHighIndex;
     private _waitForBtcHighIndexConfirm;
+    private _waitForInstallAppConfirm;
     private ensureConnected;
     private _doConnect;
     private _connectFirstOrSelect;
     private _connectDeviceOrThrow;
-    private _chooseDeviceFromList;
     /**
      * Call the connector with automatic session resolution and disconnect retry.
      *
@@ -124,6 +214,23 @@ declare class LedgerAdapter implements IHardwareWallet {
      * 3. Calls connector.call()
      * 4. On disconnect error: clears stale session, re-connects, retries once
      */
+    /**
+     * Unwrap a `ConnectorCallResult` back into the throw-based control flow this
+     * class relies on. On failure, rehydrate a FLAT Error (lifting `params.*`
+     * back to own-properties) so the downstream recovery predicates
+     * (`isStuckAppStateError`, `isDeviceLockedError`, …) and `mapLedgerError`
+     * (which read `err._tag` / `err.code` / `err.appName` / `err.originalError`)
+     * keep working exactly as before — the Result shape is confined to the
+     * connector boundary.
+     */
+    private _unwrapConnectorResult;
+    /**
+     * `connector.call` + result unwrap, optionally raced against an abort
+     * signal. Returns the call payload or throws the rehydrated error. All
+     * `this.connector.call` usage goes through here so the Result→throw seam
+     * lives in one place.
+     */
+    private _callConnector;
     private connectorCall;
     /**
      * Race a promise against an abort signal. On abort, rejects with
@@ -178,33 +285,6 @@ declare class LedgerAdapter implements IHardwareWallet {
     private connectorDeviceToDeviceInfo;
 }
 
-/**
- * Re-export DMK types under local aliases for backward compatibility.
- * These replace the previous duck-typed interfaces with the real SDK types.
- */
-type DmkDiscoveredDevice = DiscoveredDevice;
-/**
- * DMK DeviceAction — the Observable-based return type of all DMK signer methods.
- *
- * This is a permissive alias for `ExecuteDeviceActionReturnType` that accepts
- * any Error and IntermediateValue generics. Signer wrapper code only cares about
- * the Output type and the observable/cancel shape.
- */
-type DeviceAction<T> = ExecuteDeviceActionReturnType<T, any, any>;
-/**
- * DMK DeviceActionState — re-exported with permissive Error/IntermediateValue.
- * The real type is a discriminated union on `status`.
- */
-type DeviceActionState<T> = DeviceActionState$1<T, any, any>;
-/** ETH address result — re-exported from DMK for backward compatibility. */
-type SignerEvmAddress = Address;
-/** ETH signature result — re-exported from DMK for backward compatibility. */
-type SignerEvmSignature = Signature;
-/** BTC address result (WalletAddress not exported from DMK top-level). */
-interface SignerBtcAddress {
-    address: string;
-}
-
 /**
  * Manages device discovery, connection, and session tracking.
  * Wraps DMK's Observable APIs into simpler imperative calls.
@@ -320,6 +400,7 @@ interface LedgerConnectorBaseOptions {
 declare class LedgerConnectorBase implements IConnector {
     private _deviceManager;
     private _signerManager;
+    private _deviceAppsManager;
     private _dmk;
     private readonly _eventHandlers;
     private readonly _providedDmk;
@@ -373,13 +454,12 @@ declare class LedgerConnectorBase implements IConnector {
      * `LedgerAdapter._sessions` map would hold a dead session entry until
      * the next call hit `DeviceSessionNotFound`.
      *
-     * Best-effort: any error subscribing is swallowed so a flaky DMK
-     * doesn't break the connect path.
+     * Subscribe failure is fatal — see the inline note at the subscribe call.
      */
     private _watchSessionState;
     private _unwatchSessionState;
     private _handleAutonomousDisconnect;
-    call(sessionId: string, method: string, params: unknown): Promise<unknown>;
+    call(sessionId: string, method: string, params: unknown): Promise<ConnectorCallResult>;
     private _dispatch;
     cancel(sessionId: string): Promise<void>;
     uiResponse(_response: UiResponseEvent): void;
@@ -395,6 +475,7 @@ declare class LedgerConnectorBase implements IConnector {
     private _initManagers;
     private _getDeviceManager;
     private _getSignerManager;
+    private _getDeviceAppsManager;
     private _invalidateSession;
     /**
      * Replace an old session with a new one after app switch.
@@ -421,31 +502,6 @@ declare class LedgerConnectorBase implements IConnector {
     private _wrapError;
 }
 
-/** Optional context attached to the rejection when a canceller fires. */
-interface CancelReason {
-    code?: number;
-    tag?: string;
-    message?: string;
-}
-/**
- * Convert a DMK DeviceAction (Observable-based) into a Promise.
- * Handles pending -> completed/error state transitions and interaction callbacks.
- *
- * Tracks the last DMK step observed (e.g. `signer.eth.steps.blindSignTransactionFallback`)
- * and attaches it to the rejected error as a non-enumerable `_lastStep` property,
- * so upstream error classifiers can distinguish failure contexts (e.g. Blind signing
- * disabled vs. generic Invalid data).
- *
- * @param timeoutMs  Idle watchdog ms. Re-armed on each emission, paused
- *                   during interactive pending. 0 disables. Default 65s
- *                   (covers DMK's 60s + margin; we're a backstop only).
- * @param onRegisterCanceller  Optional callback that receives a function which, when
- *                             called, unsubscribes and cancels the underlying DeviceAction
- *                             (releases DMK's IntentQueue slot). Caller is responsible
- *                             for invoking the canceller on timeout/abort scenarios.
- */
-declare function deviceActionToPromise<T>(action: DeviceAction<T>, onInteraction?: (interaction: string) => void, timeoutMs?: number, onRegisterCanceller?: (cancel: (reason?: CancelReason) => void) => void): Promise<T>;
-
 /**
  * Wraps Ledger's SDK signer (Observable-based DeviceActions) into
  * a simple async interface returning plain serializable data.

package/dist/index.d.ts

@@ -1,4 +1,5 @@
-import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, Response, ChainCapability, EvmGetAddressParams, EvmAddress, EvmSignTxParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorEventType, ConnectorEventMap, Failure, HardwareErrorCode } from '@onekeyfe/hwk-adapter-core';
+import * as _onekeyfe_hwk_adapter_core from '@onekeyfe/hwk-adapter-core';
+import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, Response, ChainCapability, EvmGetAddressParams, ICommonCallParams, EvmAddress, EvmSignTxParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorCallResult, ConnectorEventType, ConnectorEventMap, Failure, HardwareErrorCode } from '@onekeyfe/hwk-adapter-core';
 import { DeviceActionState as DeviceActionState$1, DiscoveredDevice, ExecuteDeviceActionReturnType, DeviceManagementKit } from '@ledgerhq/device-management-kit';
 import { Address, Signature, SignerEth as SignerEth$1, TypedData } from '@ledgerhq/device-signer-kit-ethereum';
 import { ContextModule } from '@ledgerhq/context-module';
@@ -6,26 +7,104 @@ import { SignerBtc as SignerBtc$1 } from '@ledgerhq/device-signer-kit-bitcoin';
 import { SignerSolana } from '@ledgerhq/device-signer-kit-solana';
 import Transport from '@ledgerhq/hw-transport';
 
-interface LedgerAdapterOptions {
-    /**
-     * `true` — emit `REQUEST_SELECT_DEVICE` on multi-device discovery and await
-     * `uiResponse({ type: RECEIVE_SELECT_DEVICE, payload: { sdkConnectId } })`.
-     * `false` (default) — silently pick the first device.
-     */
-    handleSelectDevice?: boolean;
+/**
+ * Re-export DMK types under local aliases for backward compatibility.
+ * These replace the previous duck-typed interfaces with the real SDK types.
+ */
+type DmkDiscoveredDevice = DiscoveredDevice;
+/**
+ * DMK DeviceAction — the Observable-based return type of all DMK signer methods.
+ *
+ * This is a permissive alias for `ExecuteDeviceActionReturnType` that accepts
+ * any Error and IntermediateValue generics. Signer wrapper code only cares about
+ * the Output type and the observable/cancel shape.
+ */
+type DeviceAction<T> = ExecuteDeviceActionReturnType<T, any, any>;
+/**
+ * DMK DeviceActionState — re-exported with permissive Error/IntermediateValue.
+ * The real type is a discriminated union on `status`.
+ */
+type DeviceActionState<T> = DeviceActionState$1<T, any, any>;
+/** ETH address result — re-exported from DMK for backward compatibility. */
+type SignerEvmAddress = Address;
+/** ETH signature result — re-exported from DMK for backward compatibility. */
+type SignerEvmSignature = Signature;
+/** BTC address result (WalletAddress not exported from DMK top-level). */
+interface SignerBtcAddress {
+    address: string;
+}
+
+/** Optional context attached to the rejection when a canceller fires. */
+interface CancelReason {
+    code?: number;
+    tag?: string;
+    message?: string;
+}
+/**
+ * Convert a DMK DeviceAction (Observable-based) into a Promise.
+ * Handles pending -> completed/error state transitions and interaction callbacks.
+ *
+ * Tracks the last DMK step observed (e.g. `signer.eth.steps.blindSignTransactionFallback`)
+ * and attaches it to the rejected error as a non-enumerable `_lastStep` property,
+ * so upstream error classifiers can distinguish failure contexts (e.g. Blind signing
+ * disabled vs. generic Invalid data).
+ *
+ * @param timeoutMs  Idle watchdog ms. Re-armed on each emission, paused
+ *                   during interactive pending. 0 disables. Default 65s
+ *                   (covers DMK's 60s + margin; we're a backstop only).
+ * @param onRegisterCanceller  Optional callback that receives a function which, when
+ *                             called, unsubscribes and cancels the underlying DeviceAction
+ *                             (releases DMK's IntentQueue slot). Caller is responsible
+ *                             for invoking the canceller on timeout/abort scenarios.
+ */
+declare function deviceActionToPromise<T>(action: DeviceAction<T>, onInteraction?: (interaction: string) => void, timeoutMs?: number, onRegisterCanceller?: (cancel: (reason?: CancelReason) => void) => void, onIntermediate?: (intermediateValue: unknown) => void): Promise<T>;
+
+interface AppMetadata {
+    versionName: string;
+    versionId: number;
+    version: string;
+    versionDisplayName: string | null;
+    description: string | null;
+    icon: string | null;
+    bytes: number | null;
+    currencyId: string | null;
+    isDevTools: boolean;
 }
+interface FirmwareVersion {
+    /** BOLOS version on the secure element — the user-facing firmware version. */
+    seVersion: string;
+    /** MCU SEPH (SE–MCU link protocol) version. */
+    mcuSephVersion: string;
+    /** MCU bootloader version. */
+    mcuBootloaderVersion: string;
+    /** Hardware revision (e.g. "00" / "01" on Nano X). */
+    hwVersion: string;
+}
+/** Full GetOsVersionResponse projected to a plain serializable shape. */
+interface LedgerDeviceInfo extends FirmwareVersion {
+    isBootloader: boolean;
+    isOsu: boolean;
+    targetId: number;
+    seTargetId?: number;
+    mcuTargetId?: number;
+    /** Secure element flags as hex string (raw bytes turned readable). */
+    seFlagsHex: string;
+}
+
 declare class LedgerAdapter implements IHardwareWallet {
     readonly vendor: "ledger";
     private readonly connector;
     private readonly emitter;
-    private readonly _handleSelectDevice;
     private _discoveredDevices;
     private _sessions;
     private readonly _uiRegistry;
     private _btcHighIndexConfirmedThisSession;
     private readonly _jobQueue;
     private _doConnectAbortController;
-    constructor(connector: IConnector, options?: LedgerAdapterOptions);
+    private readonly _defaultAutoInstallApp;
+    constructor(connector: IConnector, options?: {
+        autoInstallApp?: boolean;
+    });
     get activeTransport(): TransportType | null;
     getAvailableTransports(): TransportType[];
     switchTransport(_type: TransportType): Promise<void>;
@@ -39,34 +118,45 @@ declare class LedgerAdapter implements IHardwareWallet {
     dispose(): Promise<void>;
     uiResponse(response: UiResponseEvent): void;
     searchDevices(options?: SearchDevicesOptions): Promise<DeviceInfo[]>;
+    private _evictAllSessions;
     private static readonly MAX_BUSINESS_RETRY_BUDGET;
     private static readonly STUCK_APP_RETRY_DELAY_MS;
     private static readonly MAX_DOCONNECT_CONFIRMS;
     private _lastCancelReason;
+    private static readonly APP_INSTALL_PROGRESS_MIN_DELTA;
+    private _installProgressLastEmittedValue;
+    private _installProgressLastKey;
     private static _createDeviceBusyError;
     connectDevice(connectId: string): Promise<Response<string>>;
     disconnectDevice(connectId: string): Promise<void>;
     getDeviceInfo(connectId: string, deviceId: string): Promise<Response<DeviceInfo>>;
     getSupportedChains(): ChainCapability[];
+    allNetworkGetAddress: (connectId: string, _deviceId: string, params: _onekeyfe_hwk_adapter_core.AllNetworkGetAddressParams) => Promise<Response<_onekeyfe_hwk_adapter_core.AllNetworkAddressResponse[]>>;
     private callChain;
-    evmGetAddress(connectId: string, deviceId: string, params: EvmGetAddressParams): Promise<Response<EvmAddress>>;
-    evmSignTransaction(connectId: string, deviceId: string, params: EvmSignTxParams): Promise<Response<EvmSignedTx>>;
-    evmSignMessage(connectId: string, deviceId: string, params: EvmSignMsgParams): Promise<Response<EvmSignature>>;
-    evmSignTypedData(connectId: string, deviceId: string, params: EvmSignTypedDataParams): Promise<Response<EvmSignature>>;
-    btcGetAddress(connectId: string, deviceId: string, params: BtcGetAddressParams): Promise<Response<BtcAddress>>;
-    btcGetPublicKey(connectId: string, deviceId: string, params: BtcGetPublicKeyParams): Promise<Response<BtcPublicKey>>;
-    btcSignTransaction(connectId: string, deviceId: string, params: BtcSignTxParams): Promise<Response<BtcSignedTx>>;
-    btcSignPsbt(connectId: string, deviceId: string, params: BtcSignPsbtParams): Promise<Response<BtcSignedPsbt>>;
-    btcSignMessage(connectId: string, deviceId: string, params: BtcSignMsgParams): Promise<Response<BtcSignature>>;
-    btcGetMasterFingerprint(connectId: string, deviceId: string): Promise<Response<{
+    evmGetAddress(connectId: string, deviceId: string, params: EvmGetAddressParams, commonParams?: ICommonCallParams): Promise<Response<EvmAddress>>;
+    evmSignTransaction(connectId: string, deviceId: string, params: EvmSignTxParams, commonParams?: ICommonCallParams): Promise<Response<EvmSignedTx>>;
+    evmSignMessage(connectId: string, deviceId: string, params: EvmSignMsgParams, commonParams?: ICommonCallParams): Promise<Response<EvmSignature>>;
+    evmSignTypedData(connectId: string, deviceId: string, params: EvmSignTypedDataParams, commonParams?: ICommonCallParams): Promise<Response<EvmSignature>>;
+    btcGetAddress(connectId: string, deviceId: string, params: BtcGetAddressParams, commonParams?: ICommonCallParams): Promise<Response<BtcAddress>>;
+    btcGetPublicKey(connectId: string, deviceId: string, params: BtcGetPublicKeyParams, commonParams?: ICommonCallParams): Promise<Response<BtcPublicKey>>;
+    btcSignTransaction(connectId: string, deviceId: string, params: BtcSignTxParams, commonParams?: ICommonCallParams): Promise<Response<BtcSignedTx>>;
+    btcSignPsbt(connectId: string, deviceId: string, params: BtcSignPsbtParams, commonParams?: ICommonCallParams): Promise<Response<BtcSignedPsbt>>;
+    btcSignMessage(connectId: string, deviceId: string, params: BtcSignMsgParams, commonParams?: ICommonCallParams): Promise<Response<BtcSignature>>;
+    btcGetMasterFingerprint(connectId: string, deviceId: string, commonParams?: ICommonCallParams): Promise<Response<{
         masterFingerprint: string;
     }>>;
-    solGetAddress(connectId: string, deviceId: string, params: SolGetAddressParams): Promise<Response<SolAddress>>;
-    solSignTransaction(connectId: string, deviceId: string, params: SolSignTxParams): Promise<Response<SolSignedTx>>;
-    solSignMessage(connectId: string, deviceId: string, params: SolSignMsgParams): Promise<Response<SolSignature>>;
-    tronGetAddress(connectId: string, deviceId: string, params: TronGetAddressParams): Promise<Response<TronAddress>>;
-    tronSignTransaction(connectId: string, deviceId: string, params: TronSignTxParams): Promise<Response<TronSignedTx>>;
-    tronSignMessage(connectId: string, deviceId: string, params: TronSignMsgParams): Promise<Response<TronSignature>>;
+    solGetAddress(connectId: string, deviceId: string, params: SolGetAddressParams, commonParams?: ICommonCallParams): Promise<Response<SolAddress>>;
+    solSignTransaction(connectId: string, deviceId: string, params: SolSignTxParams, commonParams?: ICommonCallParams): Promise<Response<SolSignedTx>>;
+    solSignMessage(connectId: string, deviceId: string, params: SolSignMsgParams, commonParams?: ICommonCallParams): Promise<Response<SolSignature>>;
+    tronGetAddress(connectId: string, deviceId: string, params: TronGetAddressParams, commonParams?: ICommonCallParams): Promise<Response<TronAddress>>;
+    tronSignTransaction(connectId: string, deviceId: string, params: TronSignTxParams, commonParams?: ICommonCallParams): Promise<Response<TronSignedTx>>;
+    tronSignMessage(connectId: string, deviceId: string, params: TronSignMsgParams, commonParams?: ICommonCallParams): Promise<Response<TronSignature>>;
+    installApp(connectId: string, appName: string): Promise<Response<void>>;
+    listInstalledApps(connectId: string): Promise<Response<AppMetadata[]>>;
+    listInstalledNames(connectId: string): Promise<Response<string[]>>;
+    listAvailableApps(connectId: string): Promise<Response<AppMetadata[]>>;
+    getLedgerFirmwareVersion(connectId: string): Promise<Response<FirmwareVersion>>;
+    getLedgerDeviceInfo(connectId: string): Promise<Response<LedgerDeviceInfo>>;
     on<K extends keyof HardwareEventMap>(event: K, listener: (event: HardwareEventMap[K]) => void): void;
     on(event: string, listener: DeviceEventListener): void;
     off<K extends keyof HardwareEventMap>(event: K, listener: (event: HardwareEventMap[K]) => void): void;
@@ -98,7 +188,7 @@ declare class LedgerAdapter implements IHardwareWallet {
      *
      * - If a session already exists for the given connectId, reuse it.
      * - If ANY session exists (Ledger IDs are ephemeral), reuse it.
-     * - Otherwise: search → 1 device: auto-connect, multiple: ask user, 0: throw.
+     * - Otherwise: search → exactly 1 USB device auto-connects; multiple or none throws.
      */
     private _connectingPromise;
     private _waitForDeviceConnect;
@@ -111,11 +201,11 @@ declare class LedgerAdapter implements IHardwareWallet {
      */
     private _gateBtcHighIndex;
     private _waitForBtcHighIndexConfirm;
+    private _waitForInstallAppConfirm;
     private ensureConnected;
     private _doConnect;
     private _connectFirstOrSelect;
     private _connectDeviceOrThrow;
-    private _chooseDeviceFromList;
     /**
      * Call the connector with automatic session resolution and disconnect retry.
      *
@@ -124,6 +214,23 @@ declare class LedgerAdapter implements IHardwareWallet {
      * 3. Calls connector.call()
      * 4. On disconnect error: clears stale session, re-connects, retries once
      */
+    /**
+     * Unwrap a `ConnectorCallResult` back into the throw-based control flow this
+     * class relies on. On failure, rehydrate a FLAT Error (lifting `params.*`
+     * back to own-properties) so the downstream recovery predicates
+     * (`isStuckAppStateError`, `isDeviceLockedError`, …) and `mapLedgerError`
+     * (which read `err._tag` / `err.code` / `err.appName` / `err.originalError`)
+     * keep working exactly as before — the Result shape is confined to the
+     * connector boundary.
+     */
+    private _unwrapConnectorResult;
+    /**
+     * `connector.call` + result unwrap, optionally raced against an abort
+     * signal. Returns the call payload or throws the rehydrated error. All
+     * `this.connector.call` usage goes through here so the Result→throw seam
+     * lives in one place.
+     */
+    private _callConnector;
     private connectorCall;
     /**
      * Race a promise against an abort signal. On abort, rejects with
@@ -178,33 +285,6 @@ declare class LedgerAdapter implements IHardwareWallet {
     private connectorDeviceToDeviceInfo;
 }
 
-/**
- * Re-export DMK types under local aliases for backward compatibility.
- * These replace the previous duck-typed interfaces with the real SDK types.
- */
-type DmkDiscoveredDevice = DiscoveredDevice;
-/**
- * DMK DeviceAction — the Observable-based return type of all DMK signer methods.
- *
- * This is a permissive alias for `ExecuteDeviceActionReturnType` that accepts
- * any Error and IntermediateValue generics. Signer wrapper code only cares about
- * the Output type and the observable/cancel shape.
- */
-type DeviceAction<T> = ExecuteDeviceActionReturnType<T, any, any>;
-/**
- * DMK DeviceActionState — re-exported with permissive Error/IntermediateValue.
- * The real type is a discriminated union on `status`.
- */
-type DeviceActionState<T> = DeviceActionState$1<T, any, any>;
-/** ETH address result — re-exported from DMK for backward compatibility. */
-type SignerEvmAddress = Address;
-/** ETH signature result — re-exported from DMK for backward compatibility. */
-type SignerEvmSignature = Signature;
-/** BTC address result (WalletAddress not exported from DMK top-level). */
-interface SignerBtcAddress {
-    address: string;
-}
-
 /**
  * Manages device discovery, connection, and session tracking.
  * Wraps DMK's Observable APIs into simpler imperative calls.
@@ -320,6 +400,7 @@ interface LedgerConnectorBaseOptions {
 declare class LedgerConnectorBase implements IConnector {
     private _deviceManager;
     private _signerManager;
+    private _deviceAppsManager;
     private _dmk;
     private readonly _eventHandlers;
     private readonly _providedDmk;
@@ -373,13 +454,12 @@ declare class LedgerConnectorBase implements IConnector {
      * `LedgerAdapter._sessions` map would hold a dead session entry until
      * the next call hit `DeviceSessionNotFound`.
      *
-     * Best-effort: any error subscribing is swallowed so a flaky DMK
-     * doesn't break the connect path.
+     * Subscribe failure is fatal — see the inline note at the subscribe call.
      */
     private _watchSessionState;
     private _unwatchSessionState;
     private _handleAutonomousDisconnect;
-    call(sessionId: string, method: string, params: unknown): Promise<unknown>;
+    call(sessionId: string, method: string, params: unknown): Promise<ConnectorCallResult>;
     private _dispatch;
     cancel(sessionId: string): Promise<void>;
     uiResponse(_response: UiResponseEvent): void;
@@ -395,6 +475,7 @@ declare class LedgerConnectorBase implements IConnector {
     private _initManagers;
     private _getDeviceManager;
     private _getSignerManager;
+    private _getDeviceAppsManager;
     private _invalidateSession;
     /**
      * Replace an old session with a new one after app switch.
@@ -421,31 +502,6 @@ declare class LedgerConnectorBase implements IConnector {
     private _wrapError;
 }
 
-/** Optional context attached to the rejection when a canceller fires. */
-interface CancelReason {
-    code?: number;
-    tag?: string;
-    message?: string;
-}
-/**
- * Convert a DMK DeviceAction (Observable-based) into a Promise.
- * Handles pending -> completed/error state transitions and interaction callbacks.
- *
- * Tracks the last DMK step observed (e.g. `signer.eth.steps.blindSignTransactionFallback`)
- * and attaches it to the rejected error as a non-enumerable `_lastStep` property,
- * so upstream error classifiers can distinguish failure contexts (e.g. Blind signing
- * disabled vs. generic Invalid data).
- *
- * @param timeoutMs  Idle watchdog ms. Re-armed on each emission, paused
- *                   during interactive pending. 0 disables. Default 65s
- *                   (covers DMK's 60s + margin; we're a backstop only).
- * @param onRegisterCanceller  Optional callback that receives a function which, when
- *                             called, unsubscribes and cancels the underlying DeviceAction
- *                             (releases DMK's IntentQueue slot). Caller is responsible
- *                             for invoking the canceller on timeout/abort scenarios.
- */
-declare function deviceActionToPromise<T>(action: DeviceAction<T>, onInteraction?: (interaction: string) => void, timeoutMs?: number, onRegisterCanceller?: (cancel: (reason?: CancelReason) => void) => void): Promise<T>;
-
 /**
  * Wraps Ledger's SDK signer (Observable-based DeviceActions) into
  * a simple async interface returning plain serializable data.