@onekeyfe/hwk-ledger-adapter 1.2.2-alpha.1 → 1.2.2-alpha.100

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import * as _onekeyfe_hwk_adapter_core from '@onekeyfe/hwk-adapter-core';
-import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, Response, ChainCapability, NullableCallArg, IHardwareCallParams, EvmGetAddressParams, EvmAddress, EvmSignTxLedgerParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, IHardwareCommonCallParams, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, DeviceAuthenticityParams, DeviceAuthenticityResult, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorCallResult, ConnectorEventType, ConnectorEventMap, ConnectorConfig, Failure, HardwareErrorCode } from '@onekeyfe/hwk-adapter-core';
+import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, Response, ChainCapability, NullableCallArg, IHardwareCallParams, EvmGetAddressParams, EvmAddress, EvmSignTxLedgerParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, IHardwareCommonCallParams, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorCallResult, ConnectorEventType, ConnectorEventMap, Failure, HardwareErrorCode } from '@onekeyfe/hwk-adapter-core';
 import { DeviceActionState as DeviceActionState$1, DiscoveredDevice, ExecuteDeviceActionReturnType, DeviceManagementKit } from '@ledgerhq/device-management-kit';
 import { Address, Signature, SignerEth as SignerEth$1, TypedData } from '@ledgerhq/device-signer-kit-ethereum';
 import { ContextModule } from '@ledgerhq/context-module';
@@ -102,7 +102,6 @@ declare class LedgerAdapter implements IHardwareWallet {
     private readonly _uiRegistry;
     private _btcHighIndexConfirmedThisSession;
     private readonly _jobQueue;
-    private _deviceAuthenticityQueueTail;
     private _doConnectAbortController;
     private readonly _defaultAutoInstallApp;
     constructor(connector: IConnector, options?: {
@@ -163,19 +162,6 @@ declare class LedgerAdapter implements IHardwareWallet {
     listAvailableApps(connectId: string): Promise<Response<AppMetadata[]>>;
     getLedgerFirmwareVersion(connectId: string): Promise<Response<FirmwareVersion>>;
     getLedgerDeviceInfo(connectId: string): Promise<Response<LedgerDeviceInfo>>;
-    /**
-     * Runs Ledger's official genuine check (DMK GenuineCheckDeviceAction) over the
-     * SAME secure-channel backend as app install
-     * (wss://scriptrunner.api.live.ledger.com/update/genuine). It returns Ledger's
-     * HSM verdict (`verified`) and a stable per-device id = sha3-256 of the device
-     * attestation public key, which DMK reads inside that session. The id survives
-     * wipe/recovery and cannot be forged from a seed.
-     *
-     * Requires network access to Ledger's backend and an on-device
-     * "Allow secure connection" confirmation the first time.
-     */
-    verifyDeviceAuthenticity(connectId: string, params?: DeviceAuthenticityParams): Promise<Response<DeviceAuthenticityResult>>;
-    private _verifyDeviceAuthenticityExclusive;
     on<K extends keyof HardwareEventMap>(event: K, listener: (event: HardwareEventMap[K]) => void): void;
     on(event: string, listener: DeviceEventListener): void;
     off<K extends keyof HardwareEventMap>(event: K, listener: (event: HardwareEventMap[K]) => void): void;
@@ -424,7 +410,6 @@ declare class LedgerConnectorBase implements IConnector {
     private readonly _eventHandlers;
     private readonly _providedDmk;
     private readonly _createTransport;
-    private _ledgerGenuineCheckWebSocketUrl;
     readonly connectionType: ConnectionType;
     private readonly _cancellers;
     private readonly _sessionStateSubs;
@@ -486,7 +471,6 @@ declare class LedgerConnectorBase implements IConnector {
     on<K extends ConnectorEventType>(event: K, handler: (data: ConnectorEventMap[K]) => void): void;
     off<K extends ConnectorEventType>(event: K, handler: (data: ConnectorEventMap[K]) => void): void;
     reset(): void;
-    configure(config: ConnectorConfig): Promise<void>;
     /**
      * Lazily create or return the DMK instance.
      * If a DMK was provided via constructor, it is used directly.

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import * as _onekeyfe_hwk_adapter_core from '@onekeyfe/hwk-adapter-core';
-import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, Response, ChainCapability, NullableCallArg, IHardwareCallParams, EvmGetAddressParams, EvmAddress, EvmSignTxLedgerParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, IHardwareCommonCallParams, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, DeviceAuthenticityParams, DeviceAuthenticityResult, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorCallResult, ConnectorEventType, ConnectorEventMap, ConnectorConfig, Failure, HardwareErrorCode } from '@onekeyfe/hwk-adapter-core';
+import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, Response, ChainCapability, NullableCallArg, IHardwareCallParams, EvmGetAddressParams, EvmAddress, EvmSignTxLedgerParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, IHardwareCommonCallParams, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorCallResult, ConnectorEventType, ConnectorEventMap, Failure, HardwareErrorCode } from '@onekeyfe/hwk-adapter-core';
 import { DeviceActionState as DeviceActionState$1, DiscoveredDevice, ExecuteDeviceActionReturnType, DeviceManagementKit } from '@ledgerhq/device-management-kit';
 import { Address, Signature, SignerEth as SignerEth$1, TypedData } from '@ledgerhq/device-signer-kit-ethereum';
 import { ContextModule } from '@ledgerhq/context-module';
@@ -102,7 +102,6 @@ declare class LedgerAdapter implements IHardwareWallet {
     private readonly _uiRegistry;
     private _btcHighIndexConfirmedThisSession;
     private readonly _jobQueue;
-    private _deviceAuthenticityQueueTail;
     private _doConnectAbortController;
     private readonly _defaultAutoInstallApp;
     constructor(connector: IConnector, options?: {
@@ -163,19 +162,6 @@ declare class LedgerAdapter implements IHardwareWallet {
     listAvailableApps(connectId: string): Promise<Response<AppMetadata[]>>;
     getLedgerFirmwareVersion(connectId: string): Promise<Response<FirmwareVersion>>;
     getLedgerDeviceInfo(connectId: string): Promise<Response<LedgerDeviceInfo>>;
-    /**
-     * Runs Ledger's official genuine check (DMK GenuineCheckDeviceAction) over the
-     * SAME secure-channel backend as app install
-     * (wss://scriptrunner.api.live.ledger.com/update/genuine). It returns Ledger's
-     * HSM verdict (`verified`) and a stable per-device id = sha3-256 of the device
-     * attestation public key, which DMK reads inside that session. The id survives
-     * wipe/recovery and cannot be forged from a seed.
-     *
-     * Requires network access to Ledger's backend and an on-device
-     * "Allow secure connection" confirmation the first time.
-     */
-    verifyDeviceAuthenticity(connectId: string, params?: DeviceAuthenticityParams): Promise<Response<DeviceAuthenticityResult>>;
-    private _verifyDeviceAuthenticityExclusive;
     on<K extends keyof HardwareEventMap>(event: K, listener: (event: HardwareEventMap[K]) => void): void;
     on(event: string, listener: DeviceEventListener): void;
     off<K extends keyof HardwareEventMap>(event: K, listener: (event: HardwareEventMap[K]) => void): void;
@@ -424,7 +410,6 @@ declare class LedgerConnectorBase implements IConnector {
     private readonly _eventHandlers;
     private readonly _providedDmk;
     private readonly _createTransport;
-    private _ledgerGenuineCheckWebSocketUrl;
     readonly connectionType: ConnectionType;
     private readonly _cancellers;
     private readonly _sessionStateSubs;
@@ -486,7 +471,6 @@ declare class LedgerConnectorBase implements IConnector {
     on<K extends ConnectorEventType>(event: K, handler: (data: ConnectorEventMap[K]) => void): void;
     off<K extends ConnectorEventType>(event: K, handler: (data: ConnectorEventMap[K]) => void): void;
     reset(): void;
-    configure(config: ConnectorConfig): Promise<void>;
     /**
      * Lazily create or return the DMK instance.
      * If a DMK was provided via constructor, it is used directly.

package/dist/index.js

@@ -772,10 +772,6 @@ var _LedgerAdapter = class _LedgerAdapter {
     // The Ledger device itself still requires a per-call confirmation — that's
     // the Ledger app's safety boundary, not ours to bypass.
     this._btcHighIndexConfirmedThisSession = false;
-    // Runtime relay configuration mutates connector-wide DMK state. Serialize
-    // the complete configure → genuine check → clear lifecycle so concurrent
-    // callers cannot reset or overwrite each other's one-shot relay.
-    this._deviceAuthenticityQueueTail = Promise.resolve();
     // Shared across concurrent callers — only `cancel()` aborts.
     this._doConnectAbortController = null;
     this._installProgressLastEmittedValue = -Infinity;
@@ -1326,75 +1322,6 @@ var _LedgerAdapter = class _LedgerAdapter {
       return this.errorToFailure(err);
     }
   }
-  /**
-   * Runs Ledger's official genuine check (DMK GenuineCheckDeviceAction) over the
-   * SAME secure-channel backend as app install
-   * (wss://scriptrunner.api.live.ledger.com/update/genuine). It returns Ledger's
-   * HSM verdict (`verified`) and a stable per-device id = sha3-256 of the device
-   * attestation public key, which DMK reads inside that session. The id survives
-   * wipe/recovery and cannot be forged from a seed.
-   *
-   * Requires network access to Ledger's backend and an on-device
-   * "Allow secure connection" confirmation the first time.
-   */
-  async verifyDeviceAuthenticity(connectId, params = {}) {
-    const waitForPrevious = this._deviceAuthenticityQueueTail;
-    let releaseQueue = () => void 0;
-    this._deviceAuthenticityQueueTail = new Promise((resolve) => {
-      releaseQueue = resolve;
-    });
-    await waitForPrevious;
-    try {
-      return await this._verifyDeviceAuthenticityExclusive(connectId, params);
-    } finally {
-      releaseQueue();
-    }
-  }
-  async _verifyDeviceAuthenticityExclusive(connectId, params) {
-    const relayUrl = params.ledgerGenuineCheckWebSocketUrl;
-    try {
-      if (relayUrl) {
-        if (!this.connector.configure) {
-          return (0, import_hwk_adapter_core3.failure)(
-            import_hwk_adapter_core3.HardwareErrorCode.MethodNotSupported,
-            "This Ledger connector does not support genuine-check relay configuration"
-          );
-        }
-        await this.connector.configure({ ledgerGenuineCheckWebSocketUrl: relayUrl });
-        this.resetState();
-      }
-      const result = await this.connectorCall(connectId, "getDeviceGenuineCheck", {});
-      if (!result.isGenuine) {
-        return (0, import_hwk_adapter_core3.success)({
-          vendor: "ledger",
-          verified: false
-        });
-      }
-      if (!result.deviceId) {
-        return (0, import_hwk_adapter_core3.failure)(
-          import_hwk_adapter_core3.HardwareErrorCode.UnknownError,
-          `Genuine check completed (isGenuine=${result.isGenuine}) but no deviceId was captured`
-        );
-      }
-      return (0, import_hwk_adapter_core3.success)({
-        vendor: "ledger",
-        verified: result.isGenuine,
-        deviceId: result.deviceId
-      });
-    } catch (err) {
-      return this.errorToFailure(err);
-    } finally {
-      if (relayUrl) {
-        try {
-          await this.connector.configure?.({ ledgerGenuineCheckWebSocketUrl: void 0 });
-          this.resetState();
-        } catch {
-          this.connector.reset();
-          this.resetState();
-        }
-      }
-    }
-  }
   on(event, listener) {
     this.emitter.on(event, listener);
   }
@@ -4136,30 +4063,6 @@ var HARDWARE_ERROR_CODE_VALUES = new Set(
   Object.values(import_hwk_adapter_core13.HardwareErrorCode).filter((value) => typeof value === "number")
 );
 var BLE_CONNECT_SCAN_TIMEOUT_MS = 1500;
-var LEDGER_RELAY_ALLOWED_ROOT_DOMAINS = ["onekeytest.com", "onekey.com"];
-function isAllowedLedgerRelayHost(hostname) {
-  return LEDGER_RELAY_ALLOWED_ROOT_DOMAINS.some(
-    (root) => hostname === root || hostname.endsWith(`.${root}`)
-  );
-}
-var LEDGER_RELAY_PATH_PREFIX = "/v1/ledger/session/";
-var LEDGER_RELAY_TOKEN_PATTERN = /^[A-Za-z0-9_-]{32,256}$/;
-var MAX_LEDGER_RELAY_URL_LENGTH = 2048;
-function assertAllowedLedgerRelayUrl(rawUrl) {
-  if (!rawUrl || rawUrl.length > MAX_LEDGER_RELAY_URL_LENGTH) {
-    throw new Error("Ledger genuine-check relay URL is invalid");
-  }
-  let parsed;
-  try {
-    parsed = new URL(rawUrl);
-  } catch {
-    throw new Error("Ledger genuine-check relay URL is invalid");
-  }
-  const token = parsed.pathname.startsWith(LEDGER_RELAY_PATH_PREFIX) ? parsed.pathname.slice(LEDGER_RELAY_PATH_PREFIX.length) : "";
-  if (parsed.protocol !== "wss:" || !isAllowedLedgerRelayHost(parsed.hostname) || parsed.port !== "" || parsed.username !== "" || parsed.password !== "" || parsed.search !== "" || parsed.hash !== "" || !LEDGER_RELAY_TOKEN_PATTERN.test(token)) {
-    throw new Error("Ledger genuine-check relay URL is not allowed");
-  }
-}
 async function defaultLedgerKitImporter(pkg) {
   switch (pkg) {
     case "@ledgerhq/device-management-kit":
@@ -4681,41 +4584,6 @@ var LedgerConnectorBase = class {
           ctx.clearCanceller(sessionId);
         }
       }
-      case "getDeviceGenuineCheck": {
-        try {
-          const dmk = await ctx.getOrCreateDmk();
-          const kit = await ctx.importLedgerKit("@ledgerhq/device-management-kit");
-          const action = dmk.executeDeviceAction({
-            sessionId,
-            deviceAction: new kit.GenuineCheckDeviceAction({ input: {} })
-          });
-          let deviceId;
-          const output = await deviceActionToPromise(
-            action,
-            (interaction) => ctx.emit("ui-event", {
-              type: collapseSignerInteraction(interaction),
-              payload: { sessionId }
-            }),
-            // Generous timeout: covers websocket round-trips + the on-device
-            // "Allow secure connection" tap (the idle watchdog does not pause
-            // for it, only for unlock-device).
-            5 * 6e4,
-            (cancel) => ctx.registerCanceller(sessionId, cancel),
-            (intermediateValue) => {
-              const iv = intermediateValue;
-              if (iv?.deviceId instanceof Uint8Array && iv.deviceId.length === 32 && !deviceId) {
-                deviceId = Buffer.from(iv.deviceId).toString("hex");
-              }
-            }
-          );
-          return { isGenuine: output.isGenuine, deviceId };
-        } catch (err) {
-          ctx.invalidateSession(sessionId);
-          throw ctx.wrapError(err);
-        } finally {
-          ctx.clearCanceller(sessionId);
-        }
-      }
       default:
         throw new Error(`LedgerConnector: unknown method "${method}"`);
     }
@@ -4748,23 +4616,8 @@ var LedgerConnectorBase = class {
   // IConnector -- Reset
   // ---------------------------------------------------------------------------
   reset() {
-    this._ledgerGenuineCheckWebSocketUrl = void 0;
     this._resetAll();
   }
-  async configure(config) {
-    const nextUrl = config.ledgerGenuineCheckWebSocketUrl;
-    if (nextUrl) {
-      assertAllowedLedgerRelayUrl(nextUrl);
-      if (this._providedDmk) {
-        throw new Error("Cannot change Ledger genuine-check relay on a pre-built DMK");
-      }
-    }
-    if (nextUrl === this._ledgerGenuineCheckWebSocketUrl) {
-      return;
-    }
-    this._resetAll();
-    this._ledgerGenuineCheckWebSocketUrl = nextUrl;
-  }
   // ---------------------------------------------------------------------------
   // Private -- DMK / Manager lifecycle
   // ---------------------------------------------------------------------------
@@ -4790,11 +4643,7 @@ var LedgerConnectorBase = class {
     );
     const transportFactory = await this._createTransport();
     debugLog("[DMK] _getOrCreateDmk: transportFactory type:", typeof transportFactory);
-    const builder = new DeviceManagementKitBuilder().addTransport(transportFactory);
-    if (this._ledgerGenuineCheckWebSocketUrl) {
-      builder.addConfig({ webSocketUrl: this._ledgerGenuineCheckWebSocketUrl });
-    }
-    const dmk = builder.build();
+    const dmk = new DeviceManagementKitBuilder().addTransport(transportFactory).build();
     this._dmk = dmk;
     debugLog("[DMK] _getOrCreateDmk: DMK created");
     return dmk;