@onekeyfe/hwk-ledger-adapter 1.2.2-alpha.100 → 1.2.2-alpha.3

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import * as _onekeyfe_hwk_adapter_core from '@onekeyfe/hwk-adapter-core';
-import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, Response, ChainCapability, NullableCallArg, IHardwareCallParams, EvmGetAddressParams, EvmAddress, EvmSignTxLedgerParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, IHardwareCommonCallParams, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorCallResult, ConnectorEventType, ConnectorEventMap, Failure, HardwareErrorCode } from '@onekeyfe/hwk-adapter-core';
+import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, Response, ChainCapability, NullableCallArg, IHardwareCallParams, EvmGetAddressParams, EvmAddress, EvmSignTxLedgerParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, IHardwareCommonCallParams, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, DeviceAuthenticityParams, DeviceAuthenticityResult, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorCallResult, ConnectorEventType, ConnectorEventMap, ConnectorConfig, Failure, HardwareErrorCode } from '@onekeyfe/hwk-adapter-core';
 import { DeviceActionState as DeviceActionState$1, DiscoveredDevice, ExecuteDeviceActionReturnType, DeviceManagementKit } from '@ledgerhq/device-management-kit';
 import { Address, Signature, SignerEth as SignerEth$1, TypedData } from '@ledgerhq/device-signer-kit-ethereum';
 import { ContextModule } from '@ledgerhq/context-module';
@@ -102,6 +102,7 @@ declare class LedgerAdapter implements IHardwareWallet {
     private readonly _uiRegistry;
     private _btcHighIndexConfirmedThisSession;
     private readonly _jobQueue;
+    private _deviceAuthenticityQueueTail;
     private _doConnectAbortController;
     private readonly _defaultAutoInstallApp;
     constructor(connector: IConnector, options?: {
@@ -162,6 +163,19 @@ declare class LedgerAdapter implements IHardwareWallet {
     listAvailableApps(connectId: string): Promise<Response<AppMetadata[]>>;
     getLedgerFirmwareVersion(connectId: string): Promise<Response<FirmwareVersion>>;
     getLedgerDeviceInfo(connectId: string): Promise<Response<LedgerDeviceInfo>>;
+    /**
+     * Runs Ledger's official genuine check (DMK GenuineCheckDeviceAction) over the
+     * SAME secure-channel backend as app install
+     * (wss://scriptrunner.api.live.ledger.com/update/genuine). It returns Ledger's
+     * HSM verdict (`verified`) and a stable per-device id = sha3-256 of the device
+     * attestation public key, which DMK reads inside that session. The id survives
+     * wipe/recovery and cannot be forged from a seed.
+     *
+     * Requires network access to Ledger's backend and an on-device
+     * "Allow secure connection" confirmation the first time.
+     */
+    verifyDeviceAuthenticity(connectId: string, params?: DeviceAuthenticityParams): Promise<Response<DeviceAuthenticityResult>>;
+    private _verifyDeviceAuthenticityExclusive;
     on<K extends keyof HardwareEventMap>(event: K, listener: (event: HardwareEventMap[K]) => void): void;
     on(event: string, listener: DeviceEventListener): void;
     off<K extends keyof HardwareEventMap>(event: K, listener: (event: HardwareEventMap[K]) => void): void;
@@ -410,6 +424,7 @@ declare class LedgerConnectorBase implements IConnector {
     private readonly _eventHandlers;
     private readonly _providedDmk;
     private readonly _createTransport;
+    private _ledgerGenuineCheckWebSocketUrl;
     readonly connectionType: ConnectionType;
     private readonly _cancellers;
     private readonly _sessionStateSubs;
@@ -471,6 +486,7 @@ declare class LedgerConnectorBase implements IConnector {
     on<K extends ConnectorEventType>(event: K, handler: (data: ConnectorEventMap[K]) => void): void;
     off<K extends ConnectorEventType>(event: K, handler: (data: ConnectorEventMap[K]) => void): void;
     reset(): void;
+    configure(config: ConnectorConfig): Promise<void>;
     /**
      * Lazily create or return the DMK instance.
      * If a DMK was provided via constructor, it is used directly.

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 import * as _onekeyfe_hwk_adapter_core from '@onekeyfe/hwk-adapter-core';
-import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, Response, ChainCapability, NullableCallArg, IHardwareCallParams, EvmGetAddressParams, EvmAddress, EvmSignTxLedgerParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, IHardwareCommonCallParams, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorCallResult, ConnectorEventType, ConnectorEventMap, Failure, HardwareErrorCode } from '@onekeyfe/hwk-adapter-core';
+import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, Response, ChainCapability, NullableCallArg, IHardwareCallParams, EvmGetAddressParams, EvmAddress, EvmSignTxLedgerParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, IHardwareCommonCallParams, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, DeviceAuthenticityParams, DeviceAuthenticityResult, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorCallResult, ConnectorEventType, ConnectorEventMap, ConnectorConfig, Failure, HardwareErrorCode } from '@onekeyfe/hwk-adapter-core';
 import { DeviceActionState as DeviceActionState$1, DiscoveredDevice, ExecuteDeviceActionReturnType, DeviceManagementKit } from '@ledgerhq/device-management-kit';
 import { Address, Signature, SignerEth as SignerEth$1, TypedData } from '@ledgerhq/device-signer-kit-ethereum';
 import { ContextModule } from '@ledgerhq/context-module';
@@ -102,6 +102,7 @@ declare class LedgerAdapter implements IHardwareWallet {
     private readonly _uiRegistry;
     private _btcHighIndexConfirmedThisSession;
     private readonly _jobQueue;
+    private _deviceAuthenticityQueueTail;
     private _doConnectAbortController;
     private readonly _defaultAutoInstallApp;
     constructor(connector: IConnector, options?: {
@@ -162,6 +163,19 @@ declare class LedgerAdapter implements IHardwareWallet {
     listAvailableApps(connectId: string): Promise<Response<AppMetadata[]>>;
     getLedgerFirmwareVersion(connectId: string): Promise<Response<FirmwareVersion>>;
     getLedgerDeviceInfo(connectId: string): Promise<Response<LedgerDeviceInfo>>;
+    /**
+     * Runs Ledger's official genuine check (DMK GenuineCheckDeviceAction) over the
+     * SAME secure-channel backend as app install
+     * (wss://scriptrunner.api.live.ledger.com/update/genuine). It returns Ledger's
+     * HSM verdict (`verified`) and a stable per-device id = sha3-256 of the device
+     * attestation public key, which DMK reads inside that session. The id survives
+     * wipe/recovery and cannot be forged from a seed.
+     *
+     * Requires network access to Ledger's backend and an on-device
+     * "Allow secure connection" confirmation the first time.
+     */
+    verifyDeviceAuthenticity(connectId: string, params?: DeviceAuthenticityParams): Promise<Response<DeviceAuthenticityResult>>;
+    private _verifyDeviceAuthenticityExclusive;
     on<K extends keyof HardwareEventMap>(event: K, listener: (event: HardwareEventMap[K]) => void): void;
     on(event: string, listener: DeviceEventListener): void;
     off<K extends keyof HardwareEventMap>(event: K, listener: (event: HardwareEventMap[K]) => void): void;
@@ -410,6 +424,7 @@ declare class LedgerConnectorBase implements IConnector {
     private readonly _eventHandlers;
     private readonly _providedDmk;
     private readonly _createTransport;
+    private _ledgerGenuineCheckWebSocketUrl;
     readonly connectionType: ConnectionType;
     private readonly _cancellers;
     private readonly _sessionStateSubs;
@@ -471,6 +486,7 @@ declare class LedgerConnectorBase implements IConnector {
     on<K extends ConnectorEventType>(event: K, handler: (data: ConnectorEventMap[K]) => void): void;
     off<K extends ConnectorEventType>(event: K, handler: (data: ConnectorEventMap[K]) => void): void;
     reset(): void;
+    configure(config: ConnectorConfig): Promise<void>;
     /**
      * Lazily create or return the DMK instance.
      * If a DMK was provided via constructor, it is used directly.

package/dist/index.js

@@ -772,6 +772,10 @@ var _LedgerAdapter = class _LedgerAdapter {
     // The Ledger device itself still requires a per-call confirmation — that's
     // the Ledger app's safety boundary, not ours to bypass.
     this._btcHighIndexConfirmedThisSession = false;
+    // Runtime relay configuration mutates connector-wide DMK state. Serialize
+    // the complete configure → genuine check → clear lifecycle so concurrent
+    // callers cannot reset or overwrite each other's one-shot relay.
+    this._deviceAuthenticityQueueTail = Promise.resolve();
     // Shared across concurrent callers — only `cancel()` aborts.
     this._doConnectAbortController = null;
     this._installProgressLastEmittedValue = -Infinity;
@@ -1322,6 +1326,75 @@ var _LedgerAdapter = class _LedgerAdapter {
       return this.errorToFailure(err);
     }
   }
+  /**
+   * Runs Ledger's official genuine check (DMK GenuineCheckDeviceAction) over the
+   * SAME secure-channel backend as app install
+   * (wss://scriptrunner.api.live.ledger.com/update/genuine). It returns Ledger's
+   * HSM verdict (`verified`) and a stable per-device id = sha3-256 of the device
+   * attestation public key, which DMK reads inside that session. The id survives
+   * wipe/recovery and cannot be forged from a seed.
+   *
+   * Requires network access to Ledger's backend and an on-device
+   * "Allow secure connection" confirmation the first time.
+   */
+  async verifyDeviceAuthenticity(connectId, params = {}) {
+    const waitForPrevious = this._deviceAuthenticityQueueTail;
+    let releaseQueue = () => void 0;
+    this._deviceAuthenticityQueueTail = new Promise((resolve) => {
+      releaseQueue = resolve;
+    });
+    await waitForPrevious;
+    try {
+      return await this._verifyDeviceAuthenticityExclusive(connectId, params);
+    } finally {
+      releaseQueue();
+    }
+  }
+  async _verifyDeviceAuthenticityExclusive(connectId, params) {
+    const relayUrl = params.ledgerGenuineCheckWebSocketUrl;
+    try {
+      if (relayUrl) {
+        if (!this.connector.configure) {
+          return (0, import_hwk_adapter_core3.failure)(
+            import_hwk_adapter_core3.HardwareErrorCode.MethodNotSupported,
+            "This Ledger connector does not support genuine-check relay configuration"
+          );
+        }
+        await this.connector.configure({ ledgerGenuineCheckWebSocketUrl: relayUrl });
+        this.resetState();
+      }
+      const result = await this.connectorCall(connectId, "getDeviceGenuineCheck", {});
+      if (!result.isGenuine) {
+        return (0, import_hwk_adapter_core3.success)({
+          vendor: "ledger",
+          verified: false
+        });
+      }
+      if (!result.deviceId) {
+        return (0, import_hwk_adapter_core3.failure)(
+          import_hwk_adapter_core3.HardwareErrorCode.UnknownError,
+          `Genuine check completed (isGenuine=${result.isGenuine}) but no deviceId was captured`
+        );
+      }
+      return (0, import_hwk_adapter_core3.success)({
+        vendor: "ledger",
+        verified: result.isGenuine,
+        deviceId: result.deviceId
+      });
+    } catch (err) {
+      return this.errorToFailure(err);
+    } finally {
+      if (relayUrl) {
+        try {
+          await this.connector.configure?.({ ledgerGenuineCheckWebSocketUrl: void 0 });
+          this.resetState();
+        } catch {
+          this.connector.reset();
+          this.resetState();
+        }
+      }
+    }
+  }
   on(event, listener) {
     this.emitter.on(event, listener);
   }
@@ -4063,6 +4136,30 @@ var HARDWARE_ERROR_CODE_VALUES = new Set(
   Object.values(import_hwk_adapter_core13.HardwareErrorCode).filter((value) => typeof value === "number")
 );
 var BLE_CONNECT_SCAN_TIMEOUT_MS = 1500;
+var LEDGER_RELAY_ALLOWED_ROOT_DOMAINS = ["onekeytest.com", "onekey.com"];
+function isAllowedLedgerRelayHost(hostname) {
+  return LEDGER_RELAY_ALLOWED_ROOT_DOMAINS.some(
+    (root) => hostname === root || hostname.endsWith(`.${root}`)
+  );
+}
+var LEDGER_RELAY_PATH_PREFIX = "/v1/ledger/session/";
+var LEDGER_RELAY_TOKEN_PATTERN = /^[A-Za-z0-9_-]{32,256}$/;
+var MAX_LEDGER_RELAY_URL_LENGTH = 2048;
+function assertAllowedLedgerRelayUrl(rawUrl) {
+  if (!rawUrl || rawUrl.length > MAX_LEDGER_RELAY_URL_LENGTH) {
+    throw new Error("Ledger genuine-check relay URL is invalid");
+  }
+  let parsed;
+  try {
+    parsed = new URL(rawUrl);
+  } catch {
+    throw new Error("Ledger genuine-check relay URL is invalid");
+  }
+  const token = parsed.pathname.startsWith(LEDGER_RELAY_PATH_PREFIX) ? parsed.pathname.slice(LEDGER_RELAY_PATH_PREFIX.length) : "";
+  if (parsed.protocol !== "wss:" || !isAllowedLedgerRelayHost(parsed.hostname) || parsed.port !== "" || parsed.username !== "" || parsed.password !== "" || parsed.search !== "" || parsed.hash !== "" || !LEDGER_RELAY_TOKEN_PATTERN.test(token)) {
+    throw new Error("Ledger genuine-check relay URL is not allowed");
+  }
+}
 async function defaultLedgerKitImporter(pkg) {
   switch (pkg) {
     case "@ledgerhq/device-management-kit":
@@ -4584,6 +4681,41 @@ var LedgerConnectorBase = class {
           ctx.clearCanceller(sessionId);
         }
       }
+      case "getDeviceGenuineCheck": {
+        try {
+          const dmk = await ctx.getOrCreateDmk();
+          const kit = await ctx.importLedgerKit("@ledgerhq/device-management-kit");
+          const action = dmk.executeDeviceAction({
+            sessionId,
+            deviceAction: new kit.GenuineCheckDeviceAction({ input: {} })
+          });
+          let deviceId;
+          const output = await deviceActionToPromise(
+            action,
+            (interaction) => ctx.emit("ui-event", {
+              type: collapseSignerInteraction(interaction),
+              payload: { sessionId }
+            }),
+            // Generous timeout: covers websocket round-trips + the on-device
+            // "Allow secure connection" tap (the idle watchdog does not pause
+            // for it, only for unlock-device).
+            5 * 6e4,
+            (cancel) => ctx.registerCanceller(sessionId, cancel),
+            (intermediateValue) => {
+              const iv = intermediateValue;
+              if (iv?.deviceId instanceof Uint8Array && iv.deviceId.length === 32 && !deviceId) {
+                deviceId = Buffer.from(iv.deviceId).toString("hex");
+              }
+            }
+          );
+          return { isGenuine: output.isGenuine, deviceId };
+        } catch (err) {
+          ctx.invalidateSession(sessionId);
+          throw ctx.wrapError(err);
+        } finally {
+          ctx.clearCanceller(sessionId);
+        }
+      }
       default:
         throw new Error(`LedgerConnector: unknown method "${method}"`);
     }
@@ -4616,8 +4748,23 @@ var LedgerConnectorBase = class {
   // IConnector -- Reset
   // ---------------------------------------------------------------------------
   reset() {
+    this._ledgerGenuineCheckWebSocketUrl = void 0;
     this._resetAll();
   }
+  async configure(config) {
+    const nextUrl = config.ledgerGenuineCheckWebSocketUrl;
+    if (nextUrl) {
+      assertAllowedLedgerRelayUrl(nextUrl);
+      if (this._providedDmk) {
+        throw new Error("Cannot change Ledger genuine-check relay on a pre-built DMK");
+      }
+    }
+    if (nextUrl === this._ledgerGenuineCheckWebSocketUrl) {
+      return;
+    }
+    this._resetAll();
+    this._ledgerGenuineCheckWebSocketUrl = nextUrl;
+  }
   // ---------------------------------------------------------------------------
   // Private -- DMK / Manager lifecycle
   // ---------------------------------------------------------------------------
@@ -4643,7 +4790,11 @@ var LedgerConnectorBase = class {
     );
     const transportFactory = await this._createTransport();
     debugLog("[DMK] _getOrCreateDmk: transportFactory type:", typeof transportFactory);
-    const dmk = new DeviceManagementKitBuilder().addTransport(transportFactory).build();
+    const builder = new DeviceManagementKitBuilder().addTransport(transportFactory);
+    if (this._ledgerGenuineCheckWebSocketUrl) {
+      builder.addConfig({ webSocketUrl: this._ledgerGenuineCheckWebSocketUrl });
+    }
+    const dmk = builder.build();
     this._dmk = dmk;
     debugLog("[DMK] _getOrCreateDmk: DMK created");
     return dmk;