@onekeyfe/hwk-ledger-adapter 1.2.0-alpha.0 → 1.2.0-alpha.2

package/dist/index.mjs

@@ -4,15 +4,16 @@ import {
   DEVICE,
   DeviceJobQueue,
   EConnectorInteraction,
-  HardwareErrorCode as HardwareErrorCode2,
+  HardwareErrorCode as HardwareErrorCode3,
   TypedEventEmitter,
   UI_REQUEST,
   UI_REQUEST_PREEMPTED_TAG,
   UiRequestRegistry,
+  createHwkError,
   deriveDeviceFingerprint,
-  failure,
+  failure as failure2,
   rehydrateConnectorError,
-  success
+  success as success2
 } from "@onekeyfe/hwk-adapter-core";
 
 // src/errors.ts
@@ -35,30 +36,37 @@ var USER_REJECTED_CODES = /* @__PURE__ */ new Set(["6985", "27013"]);
 var WRONG_APP_CODES = /* @__PURE__ */ new Set(["6e00", "28160", "6d00", "27904", "6a83", "27267"]);
 var APP_NOT_INSTALLED_CODES = /* @__PURE__ */ new Set(["6807", "26631"]);
 var STEP_BLIND_SIGN_TRANSACTION_FALLBACK = "signer.eth.steps.blindSignTransactionFallback";
+var STEP_DETECT_BLIND_SIGNING = "signer.eth.steps.detectBlindSigning";
+var BLIND_SIGNING_STEPS = /* @__PURE__ */ new Set([
+  STEP_BLIND_SIGN_TRANSACTION_FALLBACK,
+  STEP_DETECT_BLIND_SIGNING
+]);
+function normalizeApduHex(value) {
+  if (typeof value === "number" && Number.isInteger(value) && value >= 0 && value <= 65535) {
+    return value.toString(16).padStart(4, "0");
+  }
+  if (typeof value !== "string") return null;
+  const raw = value.toLowerCase().replace(/^0x/, "");
+  return /^[0-9a-f]{1,4}$/i.test(raw) ? raw.padStart(4, "0") : null;
+}
 function getEthAppErrorCode(err) {
   if (!err || typeof err !== "object") return null;
   const e = err;
-  if (e._tag === ERROR_TAG.EthAppCommand && typeof e.errorCode === "string") {
-    return e.errorCode.toLowerCase();
+  if (e._tag === ERROR_TAG.EthAppCommand) {
+    const code = normalizeApduHex(e.errorCode) ?? normalizeApduHex(e.statusCode) ?? normalizeApduHex(e.code);
+    if (code) return code;
   }
   const orig = e.originalError;
-  if (orig?._tag === ERROR_TAG.EthAppCommand && typeof orig.errorCode === "string") {
-    return orig.errorCode.toLowerCase();
+  if (orig?._tag === ERROR_TAG.EthAppCommand) {
+    return normalizeApduHex(orig.errorCode) ?? normalizeApduHex(orig.statusCode) ?? normalizeApduHex(orig.code);
   }
   return null;
 }
 function extractApduHex(err) {
   if (!err || typeof err !== "object") return null;
   const e = err;
-  if (typeof e.errorCode === "string" && /^[0-9a-f]+$/i.test(e.errorCode)) {
-    return e.errorCode.toLowerCase();
-  }
-  if (typeof e.statusCode === "number" && Number.isFinite(e.statusCode)) {
-    return e.statusCode.toString(16).padStart(4, "0");
-  }
-  if (typeof e.statusCode === "string" && /^[0-9a-f]+$/i.test(e.statusCode)) {
-    return e.statusCode.toLowerCase();
-  }
+  const direct = normalizeApduHex(e.errorCode) ?? normalizeApduHex(e.statusCode);
+  if (direct) return direct;
   if (e.originalError != null) {
     const nested = extractApduHex(e.originalError);
     if (nested) return nested;
@@ -117,10 +125,15 @@ function classifyEthAppError(err) {
   const ethCode = getEthAppErrorCode(err);
   if (!ethCode) return null;
   if (ethCode === "6a80") {
-    return hasBlindSignFallbackStep(err) ? HardwareErrorCode.EvmBlindSigningRequired : null;
+    return hasBlindSigningStep(err) ? HardwareErrorCode.EvmBlindSigningRequired : null;
   }
   return mapEthAppErrorCode(ethCode);
 }
+function classifyBlindSigningDetectionError(err) {
+  if (!hasBlindSigningStep(err)) return null;
+  if (hasInvalidArgumentCode(err)) return HardwareErrorCode.EvmBlindSigningRequired;
+  return null;
+}
 var ERROR_TAG = {
   // SDK-mint
   DeviceNotAdvertising: "DeviceNotAdvertisingError",
@@ -136,6 +149,10 @@ var ERROR_TAG = {
   // chain app wedged (APDU 0x6901)
   DeviceTransportStuck: "DeviceTransportStuck",
   // DMK transport queue wedged
+  // installApp resolved success but the app is still missing on device —
+  // DMK quirk. Surfaced as a distinct tag so callers can tell it apart from
+  // the original DMK-thrown AppNotInstalled.
+  AppInstallVerifyFailed: "AppInstallVerifyFailedError",
   // DMK-reuse (DMK throws same string; we synthesize too)
   DeviceLocked: "DeviceLockedError",
   DeviceNotRecognized: "DeviceNotRecognizedError",
@@ -161,7 +178,11 @@ var ERROR_TAG = {
   // ble-plx surfaces this when GATT notification setup fails — typical
   // outcome when the user doesn't confirm pairing on the device, or the
   // existing bond is invalid. Observed in production after ~30s.
-  PairingRefused: "PairingRefusedError"
+  PairingRefused: "PairingRefusedError",
+  // DMK remote-network failures (manager-api HTTP / secure-channel WS).
+  WebSocketConnection: "WebSocketConnectionError",
+  HttpFetch: "FetchError",
+  InvalidFirmwareMetadataResponse: "InvalidGetFirmwareMetadataResponseError"
 };
 function isDeviceLockedError(err) {
   if (!err || typeof err !== "object") return false;
@@ -249,15 +270,30 @@ function hasStatusCode(err, codeSet) {
   if (e.error != null && e._tag && hasStatusCode(e.error, codeSet)) return true;
   return false;
 }
-function hasBlindSignFallbackStep(err) {
+function hasDeviceActionStep(err, step) {
   if (!err || typeof err !== "object") return false;
   const e = err;
-  if (e._lastStep === STEP_BLIND_SIGN_TRANSACTION_FALLBACK) return true;
-  if (Array.isArray(e._deviceActionSteps) && e._deviceActionSteps.includes(STEP_BLIND_SIGN_TRANSACTION_FALLBACK)) {
+  if (e._lastStep === step) return true;
+  if (Array.isArray(e._deviceActionSteps) && e._deviceActionSteps.includes(step)) {
     return true;
   }
-  if (e.originalError != null && hasBlindSignFallbackStep(e.originalError)) return true;
-  if (e.error != null && e._tag && hasBlindSignFallbackStep(e.error)) return true;
+  if (e.originalError != null && hasDeviceActionStep(e.originalError, step)) return true;
+  if (e.error != null && e._tag && hasDeviceActionStep(e.error, step)) return true;
+  return false;
+}
+function hasBlindSigningStep(err) {
+  for (const step of BLIND_SIGNING_STEPS) {
+    if (hasDeviceActionStep(err, step)) return true;
+  }
+  return false;
+}
+function hasInvalidArgumentCode(err) {
+  if (!err || typeof err !== "object") return false;
+  const e = err;
+  if (e.code === "INVALID_ARGUMENT") return true;
+  if (typeof e.message === "string" && e.message.includes("code=INVALID_ARGUMENT")) return true;
+  if (e.originalError != null && hasInvalidArgumentCode(e.originalError)) return true;
+  if (e.error != null && e._tag && hasInvalidArgumentCode(e.error)) return true;
   return false;
 }
 function isDeviceNotFoundError(err) {
@@ -286,6 +322,11 @@ function isUserRejectedError(err) {
   if (hasStatusCode(err, USER_REJECTED_CODES)) return true;
   return false;
 }
+function isUserAbortedError(err) {
+  if (!err || typeof err !== "object") return false;
+  const e = err;
+  return e._tag === ERROR_TAG.UserAborted;
+}
 function isWrongAppError(err) {
   if (!err || typeof err !== "object") return false;
   const e = err;
@@ -312,6 +353,20 @@ function isOutOfMemoryError(err) {
   const e = err;
   return e._tag === "OutOfMemoryDAError";
 }
+var NETWORK_ERROR_TAGS = /* @__PURE__ */ new Set([
+  ERROR_TAG.WebSocketConnection,
+  ERROR_TAG.HttpFetch,
+  ERROR_TAG.InvalidFirmwareMetadataResponse
+]);
+function isNetworkError(err) {
+  if (!err || typeof err !== "object") return false;
+  const e = err;
+  const tag = e._tag;
+  if (typeof tag === "string" && NETWORK_ERROR_TAGS.has(tag)) return true;
+  if (e.originalError != null && isNetworkError(e.originalError)) return true;
+  if (e.error != null && isNetworkError(e.error)) return true;
+  return false;
+}
 function isDeviceDisconnectedError(err) {
   if (!err || typeof err !== "object") return false;
   const e = err;
@@ -368,6 +423,8 @@ function mapLedgerError(err, opts) {
     code = HardwareErrorCode.DeviceBusy;
   } else if (isBlePairingFailureError(err)) {
     code = HardwareErrorCode.BlePairingTimeout;
+  } else if (isUserAbortedError(err)) {
+    code = HardwareErrorCode.UserAborted;
   } else if (isUserRejectedError(err)) {
     code = HardwareErrorCode.UserRejected;
   } else if (isWrongAppError(err)) {
@@ -376,12 +433,14 @@ function mapLedgerError(err, opts) {
     code = HardwareErrorCode.AppNotInstalled;
   } else if (isOutOfMemoryError(err)) {
     code = HardwareErrorCode.DeviceOutOfMemory;
+  } else if (isNetworkError(err)) {
+    code = HardwareErrorCode.NetworkError;
   } else if (isDeviceDisconnectedError(err)) {
     code = HardwareErrorCode.DeviceDisconnected;
   } else if (isTimeoutError(err)) {
     code = HardwareErrorCode.OperationTimeout;
   } else {
-    const ethMapped = classifyEthAppError(err);
+    const ethMapped = classifyEthAppError(err) ?? classifyBlindSigningDetectionError(err);
     const apduHex = ethMapped ? null : extractApduHex(err);
     const chainMapped = apduHex ? mapSolanaAppError(apduHex) ?? mapTronAppError(apduHex) ?? mapBtcAppError(apduHex) : null;
     code = ethMapped ?? chainMapped ?? HardwareErrorCode.UnknownError;
@@ -391,17 +450,8 @@ function mapLedgerError(err, opts) {
   return { code, message: enrichErrorMessage(code, originalMessage), appName };
 }
 
-// src/utils/ledgerDmkTransport.ts
-function isLedgerDmkBleTransport(transport) {
-  const normalized = transport?.toUpperCase();
-  return normalized === "BLE" || normalized?.endsWith("_BLE") === true;
-}
-function isLedgerBleConnectionType(connectionType) {
-  return connectionType === "ble";
-}
-function isLedgerBleDescriptor(connectionType, descriptor) {
-  return isLedgerBleConnectionType(connectionType) || isLedgerDmkBleTransport(descriptor.transport);
-}
+// src/adapter/methods/allNetworkGetAddress.ts
+import { HardwareErrorCode as HardwareErrorCode2, failure, success } from "@onekeyfe/hwk-adapter-core";
 
 // src/utils/sdkEventBus.ts
 var listeners = /* @__PURE__ */ new Set();
@@ -448,6 +498,252 @@ function debugError(...args) {
   emitLog("error", ...args);
 }
 
+// src/adapter/methods/allNetworkGetAddress.ts
+var LEDGER_BTC_NETWORK_COIN_MAP = {
+  tbtc: "Testnet",
+  bch: "Bcash",
+  doge: "Dogecoin",
+  ltc: "Litecoin",
+  neurai: "Neurai"
+};
+function createAllNetworkGetAddress({
+  callChain,
+  getChainFingerprint
+}) {
+  return async function allNetworkGetAddress(connectId, _deviceId, params) {
+    debugLog("[LedgerAdapter][REQ]", { method: "allNetworkGetAddress", connectId, params });
+    const installContext = {};
+    const commonParams = {
+      autoInstallApp: params.autoInstallApp
+    };
+    const responses = [];
+    const chainFingerprints = /* @__PURE__ */ new Map();
+    for (const item of params.bundle) {
+      const method = getAllNetworkMethod(item);
+      if (!method) {
+        responses.push(buildUnsupportedMethodResponse(item));
+      } else {
+        const chain = getFingerprintChain(method);
+        const itemDeviceId = getItemDeviceId(item) ?? chainFingerprints.get(chain) ?? "";
+        const normalizedItem = normalizeLedgerAllNetworkItem(method, item);
+        const response = await callAllNetworkItem(
+          callChain,
+          getChainFingerprint,
+          connectId,
+          itemDeviceId,
+          chain,
+          method,
+          normalizedItem,
+          commonParams,
+          installContext,
+          chainFingerprints
+        );
+        if (isTopLevelAllNetworkFailure(response)) {
+          const code = response.payload?.code ?? HardwareErrorCode2.DeviceMismatch;
+          const result2 = failure(
+            code,
+            response.payload?.error ?? "All-network get-address aborted",
+            response.payload?.params
+          );
+          debugLog("[LedgerAdapter][RES]", {
+            method: "allNetworkGetAddress",
+            success: false,
+            payload: result2
+          });
+          return result2;
+        }
+        responses.push(response);
+      }
+    }
+    const result = success(responses);
+    debugLog("[LedgerAdapter][RES]", {
+      method: "allNetworkGetAddress",
+      success: true,
+      payload: result
+    });
+    return result;
+  };
+}
+function isTopLevelAllNetworkFailure(response) {
+  if (response.success) {
+    return false;
+  }
+  const code = response.payload?.code;
+  return code === HardwareErrorCode2.DeviceMismatch || code === HardwareErrorCode2.UserAborted || code === HardwareErrorCode2.UserRejected;
+}
+function getItemDeviceId(item) {
+  const { deviceId } = item;
+  return typeof deviceId === "string" && deviceId.length > 0 ? deviceId : void 0;
+}
+function getAllNetworkMethod(item) {
+  switch (item.methodName) {
+    case "evmGetAddress":
+    case "btcGetAddress":
+    case "btcGetPublicKey":
+    case "solGetAddress":
+    case "tronGetAddress":
+      return item.methodName;
+    default:
+      return void 0;
+  }
+}
+function buildUnsupportedMethodResponse(item) {
+  return {
+    ...item,
+    success: false,
+    payload: {
+      code: HardwareErrorCode2.InvalidParams,
+      error: `Unsupported allNetwork method: ${String(item.methodName)}`
+    }
+  };
+}
+function normalizeLedgerAllNetworkItem(method, item) {
+  if (method !== "btcGetAddress" && method !== "btcGetPublicKey") {
+    return item;
+  }
+  const itemWithCoin = item;
+  if (itemWithCoin.coin) {
+    return item;
+  }
+  const coin = LEDGER_BTC_NETWORK_COIN_MAP[item.network];
+  return coin ? { ...item, coin } : item;
+}
+async function callAllNetworkItem(callChain, getChainFingerprint, connectId, deviceId, chain, method, item, commonParams, installContext, chainFingerprints) {
+  const response = await callAllNetworkMethod(
+    callChain,
+    connectId,
+    deviceId,
+    method,
+    item,
+    commonParams,
+    installContext
+  );
+  if (!response.success) {
+    return { ...item, success: false, payload: response.payload };
+  }
+  const payload = response.payload;
+  const fingerprint = deviceId || chainFingerprints.get(chain) || await bootstrapChainFingerprint(getChainFingerprint, connectId, chain);
+  if (!fingerprint) {
+    return buildFingerprintBootstrapFailure(item, chain);
+  }
+  chainFingerprints.set(chain, fingerprint);
+  return {
+    ...item,
+    success: true,
+    payload: {
+      ...payload,
+      chainFingerprint: fingerprint,
+      chainFingerprintChain: chain
+    }
+  };
+}
+async function bootstrapChainFingerprint(getChainFingerprint, connectId, chain) {
+  const response = await getChainFingerprint(connectId, chain);
+  return response.success ? response.payload : "";
+}
+function buildFingerprintBootstrapFailure(item, chain) {
+  return {
+    ...item,
+    success: false,
+    payload: {
+      code: HardwareErrorCode2.DeviceMismatch,
+      error: `Could not establish chain fingerprint for ${chain} after device call; refusing to return unverifiable result. Please retry.`
+    }
+  };
+}
+function getFingerprintChain(method) {
+  switch (method) {
+    case "evmGetAddress":
+      return "evm";
+    case "btcGetAddress":
+    case "btcGetPublicKey":
+      return "btc";
+    case "solGetAddress":
+      return "sol";
+    case "tronGetAddress":
+      return "tron";
+    default:
+      throw Object.assign(new Error(`Unsupported allNetwork method: ${method}`), {
+        code: HardwareErrorCode2.InvalidParams
+      });
+  }
+}
+async function callAllNetworkMethod(callChain, connectId, deviceId, method, item, commonParams, installContext) {
+  switch (method) {
+    case "evmGetAddress":
+      return callChain(
+        connectId,
+        deviceId,
+        "evm",
+        "evmGetAddress",
+        item,
+        commonParams,
+        false,
+        installContext
+      );
+    case "btcGetAddress":
+      return callChain(
+        connectId,
+        deviceId,
+        "btc",
+        "btcGetAddress",
+        item,
+        commonParams,
+        false,
+        installContext
+      );
+    case "btcGetPublicKey":
+      return callChain(
+        connectId,
+        deviceId,
+        "btc",
+        "btcGetPublicKey",
+        item,
+        commonParams,
+        false,
+        installContext
+      );
+    case "solGetAddress":
+      return callChain(
+        connectId,
+        deviceId,
+        "sol",
+        "solGetAddress",
+        item,
+        commonParams,
+        false,
+        installContext
+      );
+    case "tronGetAddress":
+      return callChain(
+        connectId,
+        deviceId,
+        "tron",
+        "tronGetAddress",
+        item,
+        commonParams,
+        false,
+        installContext
+      );
+    default:
+      throw Object.assign(new Error(`Unsupported allNetwork method: ${method}`), {
+        code: HardwareErrorCode2.InvalidParams
+      });
+  }
+}
+
+// src/utils/ledgerDmkTransport.ts
+function isLedgerDmkBleTransport(transport) {
+  const normalized = transport?.toUpperCase();
+  return normalized === "BLE" || normalized?.endsWith("_BLE") === true;
+}
+function isLedgerBleConnectionType(connectionType) {
+  return connectionType === "ble";
+}
+function isLedgerBleDescriptor(connectionType, descriptor) {
+  return isLedgerBleConnectionType(connectionType) || isLedgerDmkBleTransport(descriptor.transport);
+}
+
 // src/adapter/LedgerAdapter.ts
 function formatDeviceMismatchError(expected, actual) {
   return `Wrong device: expected ${expected}, got ${actual}`;
@@ -475,6 +771,11 @@ var _LedgerAdapter = class _LedgerAdapter {
     this._btcHighIndexConfirmedThisSession = false;
     // Shared across concurrent callers — only `cancel()` aborts.
     this._doConnectAbortController = null;
+    this._installProgressLastEmittedValue = -Infinity;
+    this.allNetworkGetAddress = createAllNetworkGetAddress({
+      callChain: this.callChain.bind(this),
+      getChainFingerprint: (connectId, chain) => this.getChainFingerprint(connectId, "", chain)
+    });
     // ---------------------------------------------------------------------------
     // Private helpers
     // ---------------------------------------------------------------------------
@@ -528,12 +829,23 @@ var _LedgerAdapter = class _LedgerAdapter {
           );
           return;
         }
+        const { appName, progress } = event.payload;
+        const key = `${connectId}:${appName}`;
+        if (this._installProgressLastKey !== key || this._installProgressLastEmittedValue >= 1) {
+          this._installProgressLastEmittedValue = -Infinity;
+          this._installProgressLastKey = key;
+        }
+        const delta = progress - this._installProgressLastEmittedValue;
+        if (delta < _LedgerAdapter.APP_INSTALL_PROGRESS_MIN_DELTA && progress < 1) {
+          return;
+        }
+        this._installProgressLastEmittedValue = progress;
         this.emitter.emit("ui-event", {
           type: EConnectorInteraction.AppInstallProgress,
           payload: {
             connectId,
-            appName: event.payload.appName,
-            progress: event.payload.progress
+            appName,
+            progress
           }
         });
         return;
@@ -590,30 +902,42 @@ var _LedgerAdapter = class _LedgerAdapter {
   // Device management
   // ---------------------------------------------------------------------------
   async searchDevices(options) {
-    if (options?.resetSession) {
-      this._doConnectAbortController?.abort();
-      this._sessions.clear();
-      this._connectingPromise = null;
-      this._doConnectAbortController = null;
-      this._btcHighIndexConfirmedThisSession = false;
-    }
-    await this._ensureDevicePermission();
-    const devices = await this.connector.searchDevices();
-    this._discoveredDevices.clear();
-    for (const d of devices) {
-      if (d.connectId) {
-        this._discoveredDevices.set(d.connectId, this.connectorDeviceToDeviceInfo(d));
+    debugLog("[LedgerAdapter][REQ]", { method: "searchDevices", params: options });
+    try {
+      if (options?.resetSession) {
+        this._doConnectAbortController?.abort();
+        this._sessions.clear();
+        this._connectingPromise = null;
+        this._doConnectAbortController = null;
+        this._btcHighIndexConfirmedThisSession = false;
       }
-    }
-    if (this._discoveredDevices.size === 0) {
       await this._ensureDevicePermission();
+      const devices = await this.connector.searchDevices();
+      this._discoveredDevices.clear();
+      for (const d of devices) {
+        if (d.connectId) {
+          this._discoveredDevices.set(d.connectId, this.connectorDeviceToDeviceInfo(d));
+        }
+      }
+      if (this._discoveredDevices.size === 0) {
+        await this._ensureDevicePermission();
+      }
+      const result = Array.from(this._discoveredDevices.values());
+      debugLog("[LedgerAdapter][RES]", {
+        method: "searchDevices",
+        success: true,
+        payload: result
+      });
+      return result;
+    } catch (err) {
+      const e = err;
+      debugLog("[LedgerAdapter][RES]", {
+        method: "searchDevices",
+        success: false,
+        error: { message: e?.message, _tag: e?._tag, code: e?.code ?? e?.errorCode }
+      });
+      throw err;
     }
-    debugLog(
-      `[LedgerAdapter] searchDevices() return count=${this._discoveredDevices.size} ids=[${[
-        ...this._discoveredDevices.keys()
-      ].join(",")}]`
-    );
-    return Array.from(this._discoveredDevices.values());
   }
   // USB single-session invariant: evict all sessions, best-effort (see connectDevice).
   async _evictAllSessions() {
@@ -629,14 +953,15 @@ var _LedgerAdapter = class _LedgerAdapter {
   }
   static _createDeviceBusyError(method) {
     return Object.assign(new Error(`Ledger device is busy while calling ${method}`), {
-      code: HardwareErrorCode2.DeviceBusy
+      code: HardwareErrorCode3.DeviceBusy
     });
   }
   async connectDevice(connectId) {
+    debugLog("[LedgerAdapter][REQ]", { method: "connectDevice", connectId, params: { connectId } });
     try {
       if (isLedgerBleConnectionType(this.connector.connectionType) && !connectId) {
         throw Object.assign(new Error("Ledger BLE connectId is required."), {
-          code: HardwareErrorCode2.DeviceNotFound
+          code: HardwareErrorCode3.DeviceNotFound
         });
       }
       if (!isLedgerBleConnectionType(this.connector.connectionType)) {
@@ -648,28 +973,79 @@ var _LedgerAdapter = class _LedgerAdapter {
       if (session.deviceInfo) {
         this._discoveredDevices.set(connectId, session.deviceInfo);
       }
-      return success(connectId);
+      const result = success2(connectId);
+      debugLog("[LedgerAdapter][RES]", { method: "connectDevice", success: true, payload: result });
+      return result;
     } catch (err) {
-      return this.errorToFailure(err);
+      const failureResult = this.errorToFailure(err);
+      debugLog("[LedgerAdapter][RES]", {
+        method: "connectDevice",
+        success: false,
+        payload: failureResult
+      });
+      return failureResult;
     }
   }
   async disconnectDevice(connectId) {
-    const sessionId = this._sessions.get(connectId);
-    if (sessionId) {
-      await this.connector.disconnect(sessionId);
-      this._sessions.delete(connectId);
+    debugLog("[LedgerAdapter][REQ]", {
+      method: "disconnectDevice",
+      connectId,
+      params: { connectId }
+    });
+    try {
+      const sessionId = this._sessions.get(connectId);
+      if (sessionId) {
+        await this.connector.disconnect(sessionId);
+        this._sessions.delete(connectId);
+      }
+      debugLog("[LedgerAdapter][RES]", { method: "disconnectDevice", success: true });
+    } catch (err) {
+      const e = err;
+      debugLog("[LedgerAdapter][RES]", {
+        method: "disconnectDevice",
+        success: false,
+        error: { message: e?.message, _tag: e?._tag, code: e?.code ?? e?.errorCode }
+      });
+      throw err;
     }
   }
   async getDeviceInfo(connectId, deviceId) {
-    await this._ensureDevicePermission(connectId, deviceId);
-    const cached = this._discoveredDevices.get(connectId) ?? Array.from(this._discoveredDevices.values()).find((d) => d.deviceId === deviceId);
-    if (cached) {
-      return success(cached);
+    debugLog("[LedgerAdapter][REQ]", {
+      method: "getDeviceInfo",
+      connectId,
+      params: { connectId, deviceId }
+    });
+    try {
+      await this._ensureDevicePermission(connectId, deviceId);
+      const cached = this._discoveredDevices.get(connectId) ?? Array.from(this._discoveredDevices.values()).find((d) => d.deviceId === deviceId);
+      if (cached) {
+        const result = success2(cached);
+        debugLog("[LedgerAdapter][RES]", {
+          method: "getDeviceInfo",
+          success: true,
+          payload: result
+        });
+        return result;
+      }
+      const notFound = failure2(
+        HardwareErrorCode3.DeviceNotFound,
+        "Device not found in cache. Call searchDevices() or wait for a device-connected event first."
+      );
+      debugLog("[LedgerAdapter][RES]", {
+        method: "getDeviceInfo",
+        success: false,
+        payload: notFound
+      });
+      return notFound;
+    } catch (err) {
+      const e = err;
+      debugLog("[LedgerAdapter][RES]", {
+        method: "getDeviceInfo",
+        success: false,
+        error: { message: e?.message, _tag: e?._tag, code: e?.code ?? e?.errorCode }
+      });
+      throw err;
     }
-    return failure(
-      HardwareErrorCode2.DeviceNotFound,
-      "Device not found in cache. Call searchDevices() or wait for a device-connected event first."
-    );
   }
   getSupportedChains() {
     return ["evm", "btc", "sol", "tron"];
@@ -677,7 +1053,7 @@ var _LedgerAdapter = class _LedgerAdapter {
   // ---------------------------------------------------------------------------
   // Chain call helper
   // ---------------------------------------------------------------------------
-  async callChain(connectId, deviceId, chain, method, params, commonParams, skipFingerprint = false) {
+  async callChain(connectId, deviceId, chain, method, params, commonParams, skipFingerprint = false, installContext) {
     try {
       const result = await this.connectorCall(
         connectId,
@@ -689,9 +1065,10 @@ var _LedgerAdapter = class _LedgerAdapter {
           skipFingerprint
         },
         void 0,
-        commonParams
+        commonParams,
+        installContext
       );
-      return success(result);
+      return success2(result);
     } catch (err) {
       return this.errorToFailure(err);
     }
@@ -876,7 +1253,7 @@ var _LedgerAdapter = class _LedgerAdapter {
   async installApp(connectId, appName) {
     try {
       await this.connectorCall(connectId, "installApp", { appName });
-      return success(void 0);
+      return success2(void 0);
     } catch (err) {
       return this.errorToFailure(err);
     }
@@ -884,7 +1261,16 @@ var _LedgerAdapter = class _LedgerAdapter {
   async listInstalledApps(connectId) {
     try {
       const result = await this.connectorCall(connectId, "listInstalledApps", {});
-      return success(result);
+      return success2(result);
+    } catch (err) {
+      return this.errorToFailure(err);
+    }
+  }
+  // Offline app-presence + unlock probe. No manager-api catalog (unlike listInstalledApps).
+  async listInstalledNames(connectId) {
+    try {
+      const result = await this.connectorCall(connectId, "listInstalledNames", {});
+      return success2(result);
     } catch (err) {
       return this.errorToFailure(err);
     }
@@ -892,7 +1278,7 @@ var _LedgerAdapter = class _LedgerAdapter {
   async listAvailableApps(connectId) {
     try {
       const result = await this.connectorCall(connectId, "listAvailableApps", {});
-      return success(result);
+      return success2(result);
     } catch (err) {
       return this.errorToFailure(err);
     }
@@ -900,7 +1286,7 @@ var _LedgerAdapter = class _LedgerAdapter {
   async getLedgerFirmwareVersion(connectId) {
     try {
       const result = await this.connectorCall(connectId, "getFirmwareVersion", {});
-      return success(result);
+      return success2(result);
     } catch (err) {
       return this.errorToFailure(err);
     }
@@ -908,7 +1294,7 @@ var _LedgerAdapter = class _LedgerAdapter {
   async getLedgerDeviceInfo(connectId) {
     try {
       const result = await this.connectorCall(connectId, "getDeviceInfo", {});
-      return success(result);
+      return success2(result);
     } catch (err) {
       return this.errorToFailure(err);
     }
@@ -921,7 +1307,7 @@ var _LedgerAdapter = class _LedgerAdapter {
   }
   cancel(connectId) {
     const userAbortReason = Object.assign(new Error("User aborted operation"), {
-      code: HardwareErrorCode2.UserAborted,
+      code: HardwareErrorCode3.UserAborted,
       _tag: ERROR_TAG.UserAborted
     });
     this._lastCancelReason = userAbortReason;
@@ -955,7 +1341,7 @@ var _LedgerAdapter = class _LedgerAdapter {
         chain,
         (method, params) => this.connectorCall(connectId, method, params, void 0, deviceId)
       );
-      return success(fingerprint);
+      return success2(fingerprint);
     } catch (err) {
       debugError("[LedgerAdapter] getChainFingerprint error:", chain, err);
       return this.errorToFailure(err);
@@ -978,7 +1364,7 @@ var _LedgerAdapter = class _LedgerAdapter {
       return { success: false, expected: deviceId, actual: fingerprint };
     } catch (err) {
       const mapped = mapLedgerError(err);
-      if (mapped.code === HardwareErrorCode2.WrongApp || mapped.code === HardwareErrorCode2.DeviceLocked) {
+      if (mapped.code === HardwareErrorCode3.WrongApp || mapped.code === HardwareErrorCode3.DeviceLocked) {
         return { success: true };
       }
       throw err;
@@ -1058,14 +1444,14 @@ var _LedgerAdapter = class _LedgerAdapter {
       });
       throw Object.assign(new Error("User cancelled Ledger connection"), {
         _tag: ERROR_TAG.UserAborted,
-        code: HardwareErrorCode2.UserAborted,
+        code: HardwareErrorCode3.UserAborted,
         cause: err
       });
     }
     if (!payload?.confirmed) {
       throw Object.assign(new Error("User cancelled Ledger connection"), {
         _tag: ERROR_TAG.UserAborted,
-        code: HardwareErrorCode2.UserAborted
+        code: HardwareErrorCode3.UserAborted
       });
     }
     await new Promise((resolve) => {
@@ -1144,7 +1530,7 @@ var _LedgerAdapter = class _LedgerAdapter {
     if (signal.aborted) _LedgerAdapter._throwIfAborted(signal);
     if (isLedgerBleConnectionType(this.connector.connectionType) && !connectId) {
       throw Object.assign(new Error("Ledger BLE connectId is required."), {
-        code: HardwareErrorCode2.DeviceNotFound
+        code: HardwareErrorCode3.DeviceNotFound
       });
     }
     if (connectId && this._sessions.has(connectId)) return connectId;
@@ -1154,7 +1540,7 @@ var _LedgerAdapter = class _LedgerAdapter {
           new Error(
             "Ledger USB session invariant violated: more than one session is active. Please reconnect the device."
           ),
-          { code: HardwareErrorCode2.DeviceOneDeviceOnly }
+          { code: HardwareErrorCode3.DeviceOneDeviceOnly }
         );
       }
       return this._sessions.keys().next().value;
@@ -1234,7 +1620,7 @@ var _LedgerAdapter = class _LedgerAdapter {
           new Error(
             "Device not connected after multiple attempts. Please ensure your Ledger is awake, unlocked, and in range, then try again."
           ),
-          { code: HardwareErrorCode2.DeviceNotFound }
+          { code: HardwareErrorCode3.DeviceNotFound }
         );
       }
       await this._waitForDeviceConnect(internalSignal);
@@ -1258,7 +1644,7 @@ var _LedgerAdapter = class _LedgerAdapter {
         return this._connectDeviceOrThrow(devices[0].connectId);
       }
       const err = Object.assign(new Error(`Target Ledger unavailable: ${targetConnectId}`), {
-        code: HardwareErrorCode2.DeviceNotFound
+        code: HardwareErrorCode3.DeviceNotFound
       });
       if (isLedgerBleConnectionType(this.connector.connectionType)) {
         err._tag = ERROR_TAG.DeviceNotAdvertising;
@@ -1267,7 +1653,7 @@ var _LedgerAdapter = class _LedgerAdapter {
     }
     if (isLedgerBleConnectionType(this.connector.connectionType)) {
       throw Object.assign(new Error("Ledger BLE connectId is required."), {
-        code: HardwareErrorCode2.DeviceNotFound
+        code: HardwareErrorCode3.DeviceNotFound
       });
     }
     if (devices.length > 1) {
@@ -1275,7 +1661,7 @@ var _LedgerAdapter = class _LedgerAdapter {
     }
     if (devices.length !== 1) {
       throw Object.assign(new Error("Ledger device not found."), {
-        code: HardwareErrorCode2.DeviceNotFound
+        code: HardwareErrorCode3.DeviceNotFound
       });
     }
     return this._connectDeviceOrThrow(devices[0].connectId);
@@ -1326,26 +1712,43 @@ var _LedgerAdapter = class _LedgerAdapter {
     const result = signal ? await this._abortable(signal, promise) : await promise;
     return this._unwrapConnectorResult(result);
   }
-  async connectorCall(connectId, method, params, fingerprint, permissionDeviceId, commonParams) {
-    debugLog("[LedgerAdapter] connectorCall:", method, "connectId:", connectId || "(empty)");
+  async connectorCall(connectId, method, params, fingerprint, permissionDeviceId, commonParams, installContext) {
+    debugLog("[LedgerAdapter][REQ]", { method, connectId: connectId || "(empty)", params });
     const queueKey = connectId || "__ledger_default__";
-    return this._jobQueue.enqueue(
-      queueKey,
-      async (signal) => this._runConnectorCall(
-        connectId,
+    try {
+      const result = await this._jobQueue.enqueue(
+        queueKey,
+        async (signal) => this._runConnectorCall(
+          connectId,
+          method,
+          params,
+          signal,
+          fingerprint,
+          permissionDeviceId,
+          commonParams,
+          installContext
+        ),
+        {
+          label: method,
+          rejectIfBusy: true,
+          busyError: _LedgerAdapter._createDeviceBusyError(method)
+        }
+      );
+      debugLog("[LedgerAdapter][RES]", { method, success: true, payload: result });
+      return result;
+    } catch (err) {
+      const e = err;
+      debugLog("[LedgerAdapter][RES]", {
         method,
-        params,
-        signal,
-        fingerprint,
-        permissionDeviceId,
-        commonParams
-      ),
-      {
-        label: method,
-        rejectIfBusy: true,
-        busyError: _LedgerAdapter._createDeviceBusyError(method)
-      }
-    );
+        success: false,
+        error: {
+          message: e?.message,
+          _tag: e?._tag,
+          code: e?.code ?? e?.errorCode
+        }
+      });
+      throw err;
+    }
   }
   /**
    * Race a promise against an abort signal. On abort, rejects with
@@ -1380,7 +1783,7 @@ var _LedgerAdapter = class _LedgerAdapter {
     }
   }
   /** Actual work done under the job queue — connection, fingerprint, call, and recovery. */
-  async _runConnectorCall(connectId, method, params, signal, fingerprint, permissionDeviceId, commonParams) {
+  async _runConnectorCall(connectId, method, params, signal, fingerprint, permissionDeviceId, commonParams, installContext) {
     _LedgerAdapter._throwIfAborted(signal);
     await this._ensureDevicePermission(
       connectId,
@@ -1394,7 +1797,7 @@ var _LedgerAdapter = class _LedgerAdapter {
       if (gatedParams === null) {
         throw Object.assign(new Error("User cancelled BTC high-index confirmation"), {
           _tag: ERROR_TAG.UserAborted,
-          code: HardwareErrorCode2.UserAborted
+          code: HardwareErrorCode3.UserAborted
         });
       }
       effectiveParams = gatedParams;
@@ -1423,7 +1826,7 @@ var _LedgerAdapter = class _LedgerAdapter {
         );
         if (!fp.success) {
           throw Object.assign(new Error(formatDeviceMismatchError(fp.expected, fp.actual)), {
-            code: HardwareErrorCode2.DeviceMismatch
+            code: HardwareErrorCode3.DeviceMismatch
           });
         }
       }
@@ -1442,22 +1845,62 @@ var _LedgerAdapter = class _LedgerAdapter {
         isStuckApp: isStuckAppStateError(err)
       });
       const autoInstallApp = commonParams?.autoInstallApp ?? this._defaultAutoInstallApp;
-      const isAppMissing = isAppNotInstalledError(err) || err?.code === HardwareErrorCode2.AppNotInstalled;
+      const isAppMissing = isAppNotInstalledError(err) || err?.code === HardwareErrorCode3.AppNotInstalled;
       if (autoInstallApp && isAppMissing) {
+        if (installContext?.deviceOutOfMemoryError) {
+          throw installContext.deviceOutOfMemoryError;
+        }
         const appName = err?.appName ?? mapLedgerError(err).appName;
         if (appName) {
+          if (installContext?.installAttemptedAppNames?.has(appName)) {
+            throw createHwkError({
+              code: HardwareErrorCode3.AppNotInstalled,
+              message: `${appName} install reported success but the app is still missing on device`,
+              _tag: ERROR_TAG.AppInstallVerifyFailed,
+              appName
+            });
+          }
           const confirmed = await this._waitForInstallAppConfirm(appName);
-          if (!confirmed) throw err;
+          if (!confirmed) {
+            throw createHwkError({
+              code: HardwareErrorCode3.UserAborted,
+              message: `User declined to install ${appName}`,
+              _tag: ERROR_TAG.UserAborted,
+              appName
+            });
+          }
           this.emitter.emit("ui-event", {
             type: EConnectorInteraction.AppInstallProgress,
             payload: { connectId: resolvedConnectId, appName, progress: 0 }
           });
-          await this._callConnector(sessionId, "installApp", { appName }, signal);
+          try {
+            await this._callConnector(sessionId, "installApp", { appName }, signal);
+          } catch (installErr) {
+            if (mapLedgerError(installErr).code === HardwareErrorCode3.DeviceOutOfMemory) {
+              if (installContext) {
+                installContext.deviceOutOfMemoryError = installErr;
+              }
+            }
+            throw installErr;
+          }
+          if (installContext) {
+            installContext.installAttemptedAppNames = installContext.installAttemptedAppNames ?? /* @__PURE__ */ new Set();
+            installContext.installAttemptedAppNames.add(appName);
+          }
           this.emitter.emit(UI_REQUEST.CLOSE_UI_WINDOW, {
             type: UI_REQUEST.CLOSE_UI_WINDOW,
             payload: {}
           });
-          return await this._callConnector(sessionId, method, effectiveParams, signal);
+          return await this._runConnectorCall(
+            resolvedConnectId,
+            method,
+            effectiveParams,
+            signal,
+            fingerprint,
+            permissionDeviceId,
+            commonParams,
+            installContext
+          );
         }
       }
       if (isStuckAppStateError(err)) {
@@ -1532,7 +1975,7 @@ var _LedgerAdapter = class _LedgerAdapter {
               );
               if (!fp.success) {
                 throw Object.assign(new Error(formatDeviceMismatchError(fp.expected, fp.actual)), {
-                  code: HardwareErrorCode2.DeviceMismatch
+                  code: HardwareErrorCode3.DeviceMismatch
                 });
               }
             }
@@ -1567,7 +2010,7 @@ var _LedgerAdapter = class _LedgerAdapter {
         this.connector.reset();
         const codeNum = err?.code;
         throw Object.assign(err, {
-          code: codeNum ?? HardwareErrorCode2.DeviceDisconnected
+          code: codeNum ?? HardwareErrorCode3.DeviceDisconnected
         });
       }
       throw err;
@@ -1601,7 +2044,7 @@ var _LedgerAdapter = class _LedgerAdapter {
       );
       if (!fp.success) {
         throw Object.assign(new Error(formatDeviceMismatchError(fp.expected, fp.actual)), {
-          code: HardwareErrorCode2.DeviceMismatch
+          code: HardwareErrorCode3.DeviceMismatch
         });
       }
     }
@@ -1658,7 +2101,7 @@ var _LedgerAdapter = class _LedgerAdapter {
         );
         if (!fp.success) {
           throw Object.assign(new Error(formatDeviceMismatchError(fp.expected, fp.actual)), {
-            code: HardwareErrorCode2.DeviceMismatch
+            code: HardwareErrorCode3.DeviceMismatch
           });
         }
       }
@@ -1699,7 +2142,7 @@ var _LedgerAdapter = class _LedgerAdapter {
         );
         if (!fp.success) {
           throw Object.assign(new Error(formatDeviceMismatchError(fp.expected, fp.actual)), {
-            code: HardwareErrorCode2.DeviceMismatch
+            code: HardwareErrorCode3.DeviceMismatch
           });
         }
       }
@@ -1749,7 +2192,7 @@ var _LedgerAdapter = class _LedgerAdapter {
         });
         throw Object.assign(new Error("Device permission request superseded"), {
           _tag: ERROR_TAG.UserAborted,
-          code: HardwareErrorCode2.UserAborted,
+          code: HardwareErrorCode3.UserAborted,
           cause: err
         });
       }
@@ -1760,7 +2203,7 @@ var _LedgerAdapter = class _LedgerAdapter {
     const { granted, reason, message } = response;
     if (!granted) {
       throw Object.assign(new Error(message ?? "Device permission denied"), {
-        code: HardwareErrorCode2.DevicePermissionDenied,
+        code: HardwareErrorCode3.DevicePermissionDenied,
         reason
       });
     }
@@ -1774,7 +2217,7 @@ var _LedgerAdapter = class _LedgerAdapter {
     const tag = err && typeof err === "object" ? err._tag : void 0;
     if (err && typeof err === "object" && "code" in err && typeof err.code === "number") {
       const e = err;
-      const params = e.code === HardwareErrorCode2.DevicePermissionDenied && e.reason ? { permissionDeniedReason: e.reason } : e.params;
+      const params = e.code === HardwareErrorCode3.DevicePermissionDenied && e.reason ? { permissionDeniedReason: e.reason } : e.params;
       return ledgerFailure(e.code, e.message ?? "Unknown error", e.appName, tag, params);
     }
     const mapped = mapLedgerError(err);
@@ -1821,12 +2264,15 @@ _LedgerAdapter.STUCK_APP_RETRY_DELAY_MS = 500;
 // Confirm but device never shows up / never unlocks), throw DeviceNotFound
 // instead of looping forever.
 _LedgerAdapter.MAX_DOCONNECT_CONFIRMS = 3;
+// Throttle AppInstallProgress by progress delta — DMK streams much faster
+// than UIs need. Final frame (progress >= 1) always passes.
+_LedgerAdapter.APP_INSTALL_PROGRESS_MIN_DELTA = 0.05;
 var LedgerAdapter = _LedgerAdapter;
 
 // src/connector/LedgerConnectorBase.ts
 import {
   EConnectorInteraction as EConnectorInteraction4,
-  HardwareErrorCode as HardwareErrorCode7,
+  HardwareErrorCode as HardwareErrorCode8,
   serializeConnectorError
 } from "@onekeyfe/hwk-adapter-core";
 
@@ -2383,7 +2829,7 @@ var SignerManager = class _SignerManager {
 };
 
 // src/connector/chains/evm.ts
-import { HardwareErrorCode as HardwareErrorCode3, padHex64, stripHex } from "@onekeyfe/hwk-adapter-core";
+import { HardwareErrorCode as HardwareErrorCode4, padHex64, stripHex } from "@onekeyfe/hwk-adapter-core";
 
 // src/connector/chains/utils.ts
 import { EConnectorInteraction as EConnectorInteraction2 } from "@onekeyfe/hwk-adapter-core";
@@ -2425,7 +2871,7 @@ async function evmSignTransaction(ctx, sessionId, params) {
       new Error(
         "Ledger requires a pre-serialized transaction (serializedTx). Provide an RLP-encoded hex string."
       ),
-      { code: HardwareErrorCode3.InvalidParams }
+      { code: HardwareErrorCode4.InvalidParams }
     );
   }
   const signer = await _getEthSigner(ctx, sessionId);
@@ -2466,7 +2912,7 @@ async function evmSignTypedData(ctx, sessionId, params) {
       new Error(
         'Ledger does not support hash-only EIP-712 signing. Use mode "full" with the complete typed data structure.'
       ),
-      { code: HardwareErrorCode3.MethodNotSupported }
+      { code: HardwareErrorCode4.MethodNotSupported }
     );
   }
   const signer = await _getEthSigner(ctx, sessionId);
@@ -2501,7 +2947,7 @@ async function _getEthSigner(ctx, sessionId) {
 }
 
 // src/connector/chains/btc.ts
-import { HardwareErrorCode as HardwareErrorCode4, stripHex as stripHex2 } from "@onekeyfe/hwk-adapter-core";
+import { HardwareErrorCode as HardwareErrorCode5, stripHex as stripHex2 } from "@onekeyfe/hwk-adapter-core";
 import { Psbt } from "bitcoinjs-lib";
 
 // src/signer/SignerBtc.ts
@@ -2622,7 +3068,7 @@ function _purposeToTemplate(purpose, DDT) {
       return DDT.TAPROOT;
     default:
       throw Object.assign(new Error(`Unsupported BTC purpose: m/${purpose ?? "<undefined>"}'`), {
-        code: HardwareErrorCode4.InvalidParams
+        code: HardwareErrorCode5.InvalidParams
       });
   }
 }
@@ -2678,7 +3124,7 @@ async function btcSignTransaction(ctx, sessionId, params) {
   if (!params.psbt) {
     throw Object.assign(
       new Error("Ledger requires PSBT format for BTC transaction signing. Provide params.psbt."),
-      { code: HardwareErrorCode4.InvalidParams }
+      { code: HardwareErrorCode5.InvalidParams }
     );
   }
   const btcSigner = await _createBtcSigner(ctx, sessionId);
@@ -2703,7 +3149,7 @@ async function btcSignTransaction(ctx, sessionId, params) {
 async function btcSignPsbt(ctx, sessionId, params) {
   if (!params.psbt) {
     throw Object.assign(new Error("btcSignPsbt requires params.psbt"), {
-      code: HardwareErrorCode4.InvalidParams
+      code: HardwareErrorCode5.InvalidParams
     });
   }
   const btcSigner = await _createBtcSigner(ctx, sessionId);
@@ -2948,7 +3394,7 @@ async function _createSolSigner(ctx, sessionId) {
 }
 
 // src/connector/chains/tron.ts
-import { HardwareErrorCode as HardwareErrorCode6 } from "@onekeyfe/hwk-adapter-core";
+import { HardwareErrorCode as HardwareErrorCode7 } from "@onekeyfe/hwk-adapter-core";
 import Trx from "@ledgerhq/hw-app-trx";
 
 // src/connector/chains/legacyChainCall.ts
@@ -2961,7 +3407,7 @@ import {
   OpenAppCommand,
   isSuccessCommandResult
 } from "@ledgerhq/device-management-kit";
-import { HardwareErrorCode as HardwareErrorCode5 } from "@onekeyfe/hwk-adapter-core";
+import { HardwareErrorCode as HardwareErrorCode6 } from "@onekeyfe/hwk-adapter-core";
 var APP_NAME_MAP = {
   ETH: "Ethereum",
   BTC: "Bitcoin",
@@ -3065,15 +3511,30 @@ var AppManager = class {
       command: new OpenAppCommand({ appName })
     });
     if (!isSuccessCommandResult(result)) {
-      const { statusCode } = result;
-      const hasStatusCode2 = statusCode != null && statusCode !== "";
-      debugLog("[AppManager] openApp failed:", appName, "statusCode:", statusCode);
+      const dmkErr = result.error;
+      const errorCode = "errorCode" in dmkErr && dmkErr.errorCode != null ? String(dmkErr.errorCode) : "";
+      const message = "message" in dmkErr && typeof dmkErr.message === "string" ? dmkErr.message : "";
+      debugLog(
+        "[AppManager] openApp failed:",
+        appName,
+        "errorCode:",
+        errorCode,
+        "tag:",
+        dmkErr._tag
+      );
+      let code;
+      if (errorCode === "6807" || /unknown application/i.test(message)) {
+        code = HardwareErrorCode6.AppNotInstalled;
+      } else if (errorCode === "5501" || dmkErr._tag === "ActionRefusedError") {
+        code = HardwareErrorCode6.UserRejected;
+      }
       throw Object.assign(new Error(`Failed to open "${appName}"`), {
         _tag: ERROR_TAG.OpenAppCommand,
-        code: hasStatusCode2 ? void 0 : HardwareErrorCode5.AppNotInstalled,
-        errorCode: String(statusCode ?? ""),
-        statusCode,
-        appName
+        code,
+        errorCode,
+        statusCode: errorCode,
+        appName,
+        originalError: dmkErr
       });
     }
   }
@@ -3252,7 +3713,7 @@ async function tronSignTransaction(ctx, sessionId, params) {
   if (!params.rawTxHex) {
     throw Object.assign(
       new Error("TRON signing requires a protobuf-encoded raw transaction hex (rawTxHex)."),
-      { code: HardwareErrorCode6.InvalidParams }
+      { code: HardwareErrorCode7.InvalidParams }
     );
   }
   const path = normalizePath(params.path);
@@ -3413,6 +3874,22 @@ var DeviceApps = class {
     );
     return result.filter((a) => a !== null).map(applicationToMetadata);
   }
+  /** Installed app names via ListApps APDU. Offline (no manager-api), but still requires unlock + dashboard. */
+  async listInstalledNames(options) {
+    const action = this._dmk.executeDeviceAction({
+      sessionId: this._sessionId,
+      deviceAction: new this._ledgerKit.ListAppsDeviceAction({
+        input: { unlockTimeout: options?.unlockTimeout }
+      })
+    });
+    const result = await deviceActionToPromise(
+      action,
+      this.onInteraction,
+      void 0,
+      this.onRegisterCanceller
+    );
+    return result.map((entry) => entry?.appName).filter((name) => typeof name === "string" && name.length > 0);
+  }
   // Catalog lookup via custom device action — DMK has no typed wrapper for this.
   async listAvailable() {
     const customAction = new ListAvailableAppsDeviceAction({
@@ -3476,6 +3953,22 @@ var DeviceApps = class {
   async install(appName, onProgress, options) {
     if (!appName) throw new Error("DeviceApps.install: appName is required");
     debugLog("[DeviceApps] install:", appName);
+    const refreshAction = this._dmk.executeDeviceAction({
+      sessionId: this._sessionId,
+      deviceAction: new this._ledgerKit.GetDeviceMetadataDeviceAction({
+        input: {
+          useSecureChannel: true,
+          forceUpdate: true,
+          unlockTimeout: options?.unlockTimeout
+        }
+      })
+    });
+    await deviceActionToPromise(
+      refreshAction,
+      this.onInteraction,
+      INSTALL_TIMEOUT_MS,
+      this.onRegisterCanceller
+    );
     const action = this._dmk.executeDeviceAction({
       sessionId: this._sessionId,
       deviceAction: new this._ledgerKit.InstallOrUpdateAppsDeviceAction({
@@ -3553,7 +4046,7 @@ var METHOD_PREFIX_TO_APP_NAME = {
   tron: "Tron"
 };
 var HARDWARE_ERROR_CODE_VALUES = new Set(
-  Object.values(HardwareErrorCode7).filter((value) => typeof value === "number")
+  Object.values(HardwareErrorCode8).filter((value) => typeof value === "number")
 );
 var BLE_CONNECT_SCAN_TIMEOUT_MS = 1500;
 async function defaultLedgerKitImporter(pkg) {
@@ -3724,7 +4217,7 @@ var LedgerConnectorBase = class {
             `Ledger BLE connect did not return within ${HANG_CEILING_MS / 6e4}min \u2014 DMK hang fallback.`
           );
           err._tag = ERROR_TAG.BlePairingTimeout;
-          err.code = HardwareErrorCode7.BlePairingTimeout;
+          err.code = HardwareErrorCode8.BlePairingTimeout;
           reject(err);
         }, HANG_CEILING_MS);
       });
@@ -3757,7 +4250,7 @@ var LedgerConnectorBase = class {
         "Ledger device is not currently advertising. Wake up and unlock the device, keep it nearby, then try again."
       );
       err._tag = ERROR_TAG.DeviceNotAdvertising;
-      err.code = HardwareErrorCode7.DeviceNotFound;
+      err.code = HardwareErrorCode8.DeviceNotFound;
       throw err;
     };
     const doConnect = async (path) => {
@@ -3821,7 +4314,7 @@ var LedgerConnectorBase = class {
           "Ledger Bluetooth pairing failed. Make sure the device is unlocked and nearby, then try again."
         );
         wrapped._tag = ERROR_TAG.BleGattBondingFailed;
-        wrapped.code = HardwareErrorCode7.BlePairingTimeout;
+        wrapped.code = HardwareErrorCode8.BlePairingTimeout;
         wrapped.originalError = err;
         throw wrapped;
       }
@@ -3899,7 +4392,7 @@ var LedgerConnectorBase = class {
     this._unwatchSessionState(sessionId);
     this._signerManager?.invalidate(sessionId);
     this._cancellers.get(sessionId)?.({
-      code: HardwareErrorCode7.DeviceDisconnected,
+      code: HardwareErrorCode8.DeviceDisconnected,
       tag: "DeviceDisconnected",
       message: "Device disconnected"
     });
@@ -3925,7 +4418,7 @@ var LedgerConnectorBase = class {
           success: false,
           error: serializeConnectorError(
             Object.assign(new Error("Ledger app is unresponsive"), {
-              code: HardwareErrorCode7.DeviceAppStuck,
+              code: HardwareErrorCode8.DeviceAppStuck,
               _tag: ERROR_TAG.DeviceAppStuck,
               originalError: err
             })
@@ -3937,7 +4430,7 @@ var LedgerConnectorBase = class {
           success: false,
           error: serializeConnectorError(
             Object.assign(new Error("Device communication interrupted, please retry"), {
-              code: HardwareErrorCode7.TransportError,
+              code: HardwareErrorCode8.TransportError,
               _tag: ERROR_TAG.DeviceTransportStuck,
               originalError: err
             })
@@ -4033,6 +4526,17 @@ var LedgerConnectorBase = class {
           ctx.clearCanceller(sessionId);
         }
       }
+      case "listInstalledNames": {
+        const apps = await _getDeviceApps(ctx, sessionId);
+        try {
+          return await apps.listInstalledNames(params);
+        } catch (err) {
+          ctx.invalidateSession(sessionId);
+          throw ctx.wrapError(err);
+        } finally {
+          ctx.clearCanceller(sessionId);
+        }
+      }
       case "listAvailableApps": {
         const apps = await _getDeviceApps(ctx, sessionId);
         try {