@onekeyfe/hwk-ledger-adapter 1.2.2-alpha.8 → 1.2.3-alpha.1

package/dist/index.d.mts

@@ -1,10 +1,11 @@
 import * as _onekeyfe_hwk_adapter_core from '@onekeyfe/hwk-adapter-core';
-import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, Response, ChainCapability, NullableCallArg, IHardwareCallParams, EvmGetAddressParams, EvmAddress, EvmSignTxLedgerParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, IHardwareCommonCallParams, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, DeviceAuthenticityParams, DeviceAuthenticityResult, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorCallResult, ConnectorEventType, ConnectorEventMap, ConnectorConfig, Failure, HardwareErrorCode } from '@onekeyfe/hwk-adapter-core';
+import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, DeviceSearchTarget, ConnectionTarget, Response, IHardwareConnectionContext, ChainCapability, NullableCallArg, IHardwareCallParams, EvmGetAddressParams, EvmAddress, EvmSignTxLedgerParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, IHardwareCommonCallParams, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, ZcashGetFullViewingKeyParams, ZcashFullViewingKey, ZcashGetShieldedAddressParams, ZcashShieldedAddress, DeviceAuthenticityParams, DeviceAuthenticityResult, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorCallResult, ConnectorEventType, ConnectorEventMap, ConnectorConfig, Failure, HardwareErrorCode, HwkErrorOrigin, HwkRecoveryHint } from '@onekeyfe/hwk-adapter-core';
 import { DeviceActionState as DeviceActionState$1, DiscoveredDevice, ExecuteDeviceActionReturnType, DeviceManagementKit } from '@ledgerhq/device-management-kit';
 import { Address, Signature, SignerEth as SignerEth$1, TypedData } from '@ledgerhq/device-signer-kit-ethereum';
 import { ContextModule } from '@ledgerhq/context-module';
 import { SignerBtc as SignerBtc$1 } from '@ledgerhq/device-signer-kit-bitcoin';
 import { SignerSolana } from '@ledgerhq/device-signer-kit-solana';
+import { SignerZcash as SignerZcash$1, FullViewingKeyOptions, GetFullViewingKeyDAOutput, GetShieldedAddressDAOutput } from '@ledgerhq/device-signer-kit-zcash';
 import Transport from '@ledgerhq/hw-transport';
 
 /**
@@ -97,14 +98,27 @@ declare class LedgerAdapter implements IHardwareWallet {
     readonly vendor: "ledger";
     private readonly connector;
     private readonly emitter;
+    private readonly _interactions;
     private _discoveredDevices;
     private _sessions;
+    private readonly _pendingInteractionBindings;
+    private readonly _verifiedBleReconnectTargets;
     private readonly _uiRegistry;
     private _btcHighIndexConfirmedThisSession;
     private readonly _jobQueue;
     private _deviceAuthenticityQueueTail;
     private _doConnectAbortController;
     private readonly _defaultAutoInstallApp;
+    private readonly _unsettledConnectorOperations;
+    private readonly _connectorIdleWaiters;
+    private _resetPromise;
+    private _stateGeneration;
+    private _connectorTeardownTail;
+    private _pendingConnectorTeardowns;
+    private _activeConnectionType;
+    private _bindingSelectionRequestId;
+    private _finishBleBinding;
+    private _isBleConnection;
     constructor(connector: IConnector, options?: {
         autoInstallApp?: boolean;
     });
@@ -118,21 +132,32 @@ declare class LedgerAdapter implements IHardwareWallet {
      * The next operation will re-discover and re-connect automatically.
      */
     resetState(): void;
+    private _resetStateAndDisconnectSessions;
     dispose(): Promise<void>;
     uiResponse(response: UiResponseEvent): void;
     searchDevices(options?: SearchDevicesOptions): Promise<DeviceInfo[]>;
+    private _searchDevices;
+    searchDeviceTargets(options?: SearchDevicesOptions): Promise<DeviceSearchTarget[]>;
+    listConnectionTargets(options?: SearchDevicesOptions): Promise<ConnectionTarget[]>;
     private _evictAllSessions;
     private static readonly MAX_BUSINESS_RETRY_BUDGET;
     private static readonly STUCK_APP_RETRY_DELAY_MS;
     private static readonly MAX_DOCONNECT_CONFIRMS;
     private _lastCancelReason;
+    private readonly _activeInteractionJobs;
+    private readonly _pendingInteractionDisconnects;
     private static readonly APP_INSTALL_PROGRESS_MIN_DELTA;
     private _installProgressLastEmittedValue;
     private _installProgressLastKey;
     private static _createDeviceBusyError;
-    connectDevice(connectId: string): Promise<Response<string>>;
-    disconnectDevice(connectId: string): Promise<void>;
-    getDeviceInfo(connectId: string, deviceId: string): Promise<Response<DeviceInfo>>;
+    connectDevice(searchTargetId: string): Promise<Response<string>>;
+    acquireInteraction(connectId: string, context: IHardwareConnectionContext): Promise<Response<string>>;
+    private _createInteraction;
+    private _connectTarget;
+    releaseInteraction(interactionId: string): Promise<void>;
+    private _releaseInteractionConnection;
+    private _releaseLostInteractionConnection;
+    getDeviceInfo(connectIdOrInteractionId: string, deviceId: string): Promise<Response<DeviceInfo>>;
     getSupportedChains(): ChainCapability[];
     allNetworkGetAddress: (connectId: string, _deviceId: string, params: _onekeyfe_hwk_adapter_core.AllNetworkGetAddressParams) => Promise<Response<_onekeyfe_hwk_adapter_core.AllNetworkAddressResponse[]>>;
     private callChain;
@@ -157,6 +182,8 @@ declare class LedgerAdapter implements IHardwareWallet {
     tronGetAddress(connectId?: string | null, deviceId?: string | null, params?: LedgerCallParams<TronGetAddressParams>): Promise<Response<TronAddress>>;
     tronSignTransaction(connectId?: string | null, deviceId?: string | null, params?: LedgerCallParams<TronSignTxParams>): Promise<Response<TronSignedTx>>;
     tronSignMessage(connectId?: string | null, deviceId?: string | null, params?: LedgerCallParams<TronSignMsgParams>): Promise<Response<TronSignature>>;
+    zcashGetFullViewingKey(connectId?: string | null, deviceId?: string | null, params?: LedgerCallParams<ZcashGetFullViewingKeyParams>): Promise<Response<ZcashFullViewingKey>>;
+    zcashGetShieldedAddress(connectId?: string | null, deviceId?: string | null, params?: LedgerCallParams<ZcashGetShieldedAddressParams>): Promise<Response<ZcashShieldedAddress>>;
     installApp(connectId: string, appName: string): Promise<Response<void>>;
     listInstalledApps(connectId: string): Promise<Response<AppMetadata[]>>;
     listInstalledNames(connectId: string): Promise<Response<string[]>>;
@@ -181,11 +208,11 @@ declare class LedgerAdapter implements IHardwareWallet {
     off<K extends keyof HardwareEventMap>(event: K, listener: (event: HardwareEventMap[K]) => void): void;
     off(event: string, listener: DeviceEventListener): void;
     cancel(connectId?: string): void;
+    /** A non-empty deviceId is an expected chain fingerprint, not a transport identifier. */
     getChainFingerprint(connectId: string, deviceId: string, chain: ChainForFingerprint): Promise<Response<string>>;
-    /**
-     * Verify fingerprint using an existing sessionId directly.
-     * Safe to call inside connectorCall without causing queue deadlock.
-     */
+    /** Discovery may select a BLE target before a later call verifies its wallet. */
+    private _publishVerifiedBleBinding;
+    /** Verify on the acquired session without re-entering the job queue. */
     private _verifyDeviceFingerprintWithSession;
     /**
      * Compute the chain fingerprint via a caller-supplied call strategy.
@@ -207,7 +234,7 @@ declare class LedgerAdapter implements IHardwareWallet {
      *
      * - If a session already exists for the given connectId, reuse it.
      * - If ANY session exists (Ledger IDs are ephemeral), reuse it.
-     * - Otherwise: search → exactly 1 USB device auto-connects; multiple or none throws.
+     * - Otherwise: search → one USB device auto-connects; multiple asks the host to choose.
      */
     private _connectingPromise;
     private _waitForDeviceConnect;
@@ -250,6 +277,10 @@ declare class LedgerAdapter implements IHardwareWallet {
      * lives in one place.
      */
     private _callConnector;
+    private _assertConnectorReady;
+    private _runConnectorTeardown;
+    private _waitForConnectorOperationsToDrain;
+    private _retainConnectorOperation;
     private connectorCall;
     /**
      * Race a promise against an abort signal. On abort, rejects with
@@ -260,24 +291,7 @@ declare class LedgerAdapter implements IHardwareWallet {
     private static _throwIfAborted;
     /** Actual work done under the job queue — connection, fingerprint, call, and recovery. */
     private _runConnectorCall;
-    /**
-     * Stuck-app recovery: pause for the device's UI transition, then retry once.
-     *
-     * Caller has already cleared the session + reset connector. We wait so Stax
-     * finishes its post-CloseApp animation, then go through ensureConnected +
-     * fingerprint check + call exactly once. Caller decides what to do on a
-     * second stuck-app hit.
-     */
-    private _retryAfterStuckApp;
     private _sleepAbortable;
-    /**
-     * Clear stale session, reconnect, and retry the call.
-     *
-     * Timeout recovery starts with a full connector reset. After an APDU
-     * timeout, DMK/transport state may still emit malformed responses; retrying
-     * on the same DMK can poison the next chain switch.
-     */
-    private _retryWithFreshConnection;
     /**
      * Ensure OS-level device permission (Bluetooth / USB) before proceeding.
      *
@@ -654,6 +668,25 @@ declare class SignerSol {
     }>;
 }
 
+/**
+ * Wraps Ledger's Zcash SDK signer (Observable-based DeviceActions) into a
+ * simple async interface. Only the viewing-key and shielded-address reads are
+ * exposed; PCZT signing goes through a different host-side pipeline.
+ */
+declare class SignerZcash {
+    private readonly _sdk;
+    onInteraction?: (interaction: string) => void;
+    onRegisterCanceller?: (cancel: (reason?: CancelReason) => void) => void;
+    constructor(_sdk: SignerZcash$1);
+    /** GET_VK: UFVK string (default) or raw 96-byte Orchard FVK. */
+    getFullViewingKey(derivationPath: string, options?: FullViewingKeyOptions): Promise<GetFullViewingKeyDAOutput>;
+    /** GET_SHIELDED_ADDRESS: single-Orchard-receiver UA for a 5-level transparent path. */
+    getShieldedAddress(derivationPath: string, options?: {
+        checkOnDevice?: boolean;
+        skipOpenApp?: boolean;
+    }): Promise<GetShieldedAddressDAOutput>;
+}
+
 /**
  * Transport adapter that bridges Ledger's legacy hw-app-* SDKs to DMK's sendApdu.
  *
@@ -737,7 +770,7 @@ interface WrapErrorOptions {
     /** Fallback when err has no `appName` (DMK signer errors don't carry it). */
     defaultAppName?: string;
 }
-declare function ledgerFailure(code: HardwareErrorCode, error: string, appName?: string, tag?: string, params?: Record<string, unknown>): LedgerFailure;
+declare function ledgerFailure(code: HardwareErrorCode, error: string, appName?: string, tag?: string, params?: Record<string, unknown>, origin?: HwkErrorOrigin, recovery?: HwkRecoveryHint): LedgerFailure;
 declare function isDeviceLockedError(err: unknown): boolean;
 /**
  * Map a Ledger DMK error to a HardwareErrorCode and human-readable message.
@@ -747,6 +780,7 @@ declare function isDeviceLockedError(err: unknown): boolean;
 declare function mapLedgerError(err: unknown, opts?: WrapErrorOptions): {
     code: HardwareErrorCode;
     message: string;
+    origin?: HwkErrorOrigin;
     appName?: string;
 };
 
@@ -782,4 +816,4 @@ declare function isLedgerDmkBleTransport(transport?: string): boolean;
 declare function isLedgerBleConnectionType(connectionType?: ConnectionType): boolean;
 declare function isLedgerBleDescriptor(connectionType: ConnectionType, descriptor: DeviceDescriptor): boolean;
 
-export { AppManager, type DeviceActionState, type DmkDiscoveredDevice, DmkTransport, LedgerAdapter, LedgerConnectorBase, type LedgerConnectorBaseOptions, LedgerDeviceManager, type LedgerFailure, type SdkEvent, type SdkEventListener, type SdkLogEvent, SignerBtc, type SignerBtcAddress, SignerEth, type SignerEvmAddress, type SignerEvmSignature, SignerManager, SignerSol, type TransportFactory, debugLog, deviceActionToPromise, isDeviceLockedError, isLedgerBleConnectionType, isLedgerBleDescriptor, isLedgerDmkBleTransport, ledgerFailure, mapLedgerError, offSdkEvent, onSdkEvent };
+export { AppManager, type DeviceActionState, type DmkDiscoveredDevice, DmkTransport, LedgerAdapter, LedgerConnectorBase, type LedgerConnectorBaseOptions, LedgerDeviceManager, type LedgerFailure, type SdkEvent, type SdkEventListener, type SdkLogEvent, SignerBtc, type SignerBtcAddress, SignerEth, type SignerEvmAddress, type SignerEvmSignature, SignerManager, SignerSol, SignerZcash, type TransportFactory, debugLog, deviceActionToPromise, isDeviceLockedError, isLedgerBleConnectionType, isLedgerBleDescriptor, isLedgerDmkBleTransport, ledgerFailure, mapLedgerError, offSdkEvent, onSdkEvent };

package/dist/index.d.ts

@@ -1,10 +1,11 @@
 import * as _onekeyfe_hwk_adapter_core from '@onekeyfe/hwk-adapter-core';
-import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, Response, ChainCapability, NullableCallArg, IHardwareCallParams, EvmGetAddressParams, EvmAddress, EvmSignTxLedgerParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, IHardwareCommonCallParams, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, DeviceAuthenticityParams, DeviceAuthenticityResult, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorCallResult, ConnectorEventType, ConnectorEventMap, ConnectorConfig, Failure, HardwareErrorCode } from '@onekeyfe/hwk-adapter-core';
+import { IHardwareWallet, IConnector, TransportType, UiResponseEvent, SearchDevicesOptions, DeviceInfo, DeviceSearchTarget, ConnectionTarget, Response, IHardwareConnectionContext, ChainCapability, NullableCallArg, IHardwareCallParams, EvmGetAddressParams, EvmAddress, EvmSignTxLedgerParams, EvmSignedTx, EvmSignMsgParams, EvmSignature, EvmSignTypedDataParams, BtcGetAddressParams, BtcAddress, BtcGetPublicKeyParams, BtcPublicKey, BtcSignTxParams, BtcSignedTx, BtcSignPsbtParams, BtcSignedPsbt, BtcSignMsgParams, BtcSignature, IHardwareCommonCallParams, SolGetAddressParams, SolAddress, SolSignTxParams, SolSignedTx, SolSignMsgParams, SolSignature, TronGetAddressParams, TronAddress, TronSignTxParams, TronSignedTx, TronSignMsgParams, TronSignature, ZcashGetFullViewingKeyParams, ZcashFullViewingKey, ZcashGetShieldedAddressParams, ZcashShieldedAddress, DeviceAuthenticityParams, DeviceAuthenticityResult, HardwareEventMap, DeviceEventListener, ChainForFingerprint, DeviceDescriptor, DeviceChangeEvent, ConnectionType, ConnectorDevice, ConnectorSession, ConnectorCallResult, ConnectorEventType, ConnectorEventMap, ConnectorConfig, Failure, HardwareErrorCode, HwkErrorOrigin, HwkRecoveryHint } from '@onekeyfe/hwk-adapter-core';
 import { DeviceActionState as DeviceActionState$1, DiscoveredDevice, ExecuteDeviceActionReturnType, DeviceManagementKit } from '@ledgerhq/device-management-kit';
 import { Address, Signature, SignerEth as SignerEth$1, TypedData } from '@ledgerhq/device-signer-kit-ethereum';
 import { ContextModule } from '@ledgerhq/context-module';
 import { SignerBtc as SignerBtc$1 } from '@ledgerhq/device-signer-kit-bitcoin';
 import { SignerSolana } from '@ledgerhq/device-signer-kit-solana';
+import { SignerZcash as SignerZcash$1, FullViewingKeyOptions, GetFullViewingKeyDAOutput, GetShieldedAddressDAOutput } from '@ledgerhq/device-signer-kit-zcash';
 import Transport from '@ledgerhq/hw-transport';
 
 /**
@@ -97,14 +98,27 @@ declare class LedgerAdapter implements IHardwareWallet {
     readonly vendor: "ledger";
     private readonly connector;
     private readonly emitter;
+    private readonly _interactions;
     private _discoveredDevices;
     private _sessions;
+    private readonly _pendingInteractionBindings;
+    private readonly _verifiedBleReconnectTargets;
     private readonly _uiRegistry;
     private _btcHighIndexConfirmedThisSession;
     private readonly _jobQueue;
     private _deviceAuthenticityQueueTail;
     private _doConnectAbortController;
     private readonly _defaultAutoInstallApp;
+    private readonly _unsettledConnectorOperations;
+    private readonly _connectorIdleWaiters;
+    private _resetPromise;
+    private _stateGeneration;
+    private _connectorTeardownTail;
+    private _pendingConnectorTeardowns;
+    private _activeConnectionType;
+    private _bindingSelectionRequestId;
+    private _finishBleBinding;
+    private _isBleConnection;
     constructor(connector: IConnector, options?: {
         autoInstallApp?: boolean;
     });
@@ -118,21 +132,32 @@ declare class LedgerAdapter implements IHardwareWallet {
      * The next operation will re-discover and re-connect automatically.
      */
     resetState(): void;
+    private _resetStateAndDisconnectSessions;
     dispose(): Promise<void>;
     uiResponse(response: UiResponseEvent): void;
     searchDevices(options?: SearchDevicesOptions): Promise<DeviceInfo[]>;
+    private _searchDevices;
+    searchDeviceTargets(options?: SearchDevicesOptions): Promise<DeviceSearchTarget[]>;
+    listConnectionTargets(options?: SearchDevicesOptions): Promise<ConnectionTarget[]>;
     private _evictAllSessions;
     private static readonly MAX_BUSINESS_RETRY_BUDGET;
     private static readonly STUCK_APP_RETRY_DELAY_MS;
     private static readonly MAX_DOCONNECT_CONFIRMS;
     private _lastCancelReason;
+    private readonly _activeInteractionJobs;
+    private readonly _pendingInteractionDisconnects;
     private static readonly APP_INSTALL_PROGRESS_MIN_DELTA;
     private _installProgressLastEmittedValue;
     private _installProgressLastKey;
     private static _createDeviceBusyError;
-    connectDevice(connectId: string): Promise<Response<string>>;
-    disconnectDevice(connectId: string): Promise<void>;
-    getDeviceInfo(connectId: string, deviceId: string): Promise<Response<DeviceInfo>>;
+    connectDevice(searchTargetId: string): Promise<Response<string>>;
+    acquireInteraction(connectId: string, context: IHardwareConnectionContext): Promise<Response<string>>;
+    private _createInteraction;
+    private _connectTarget;
+    releaseInteraction(interactionId: string): Promise<void>;
+    private _releaseInteractionConnection;
+    private _releaseLostInteractionConnection;
+    getDeviceInfo(connectIdOrInteractionId: string, deviceId: string): Promise<Response<DeviceInfo>>;
     getSupportedChains(): ChainCapability[];
     allNetworkGetAddress: (connectId: string, _deviceId: string, params: _onekeyfe_hwk_adapter_core.AllNetworkGetAddressParams) => Promise<Response<_onekeyfe_hwk_adapter_core.AllNetworkAddressResponse[]>>;
     private callChain;
@@ -157,6 +182,8 @@ declare class LedgerAdapter implements IHardwareWallet {
     tronGetAddress(connectId?: string | null, deviceId?: string | null, params?: LedgerCallParams<TronGetAddressParams>): Promise<Response<TronAddress>>;
     tronSignTransaction(connectId?: string | null, deviceId?: string | null, params?: LedgerCallParams<TronSignTxParams>): Promise<Response<TronSignedTx>>;
     tronSignMessage(connectId?: string | null, deviceId?: string | null, params?: LedgerCallParams<TronSignMsgParams>): Promise<Response<TronSignature>>;
+    zcashGetFullViewingKey(connectId?: string | null, deviceId?: string | null, params?: LedgerCallParams<ZcashGetFullViewingKeyParams>): Promise<Response<ZcashFullViewingKey>>;
+    zcashGetShieldedAddress(connectId?: string | null, deviceId?: string | null, params?: LedgerCallParams<ZcashGetShieldedAddressParams>): Promise<Response<ZcashShieldedAddress>>;
     installApp(connectId: string, appName: string): Promise<Response<void>>;
     listInstalledApps(connectId: string): Promise<Response<AppMetadata[]>>;
     listInstalledNames(connectId: string): Promise<Response<string[]>>;
@@ -181,11 +208,11 @@ declare class LedgerAdapter implements IHardwareWallet {
     off<K extends keyof HardwareEventMap>(event: K, listener: (event: HardwareEventMap[K]) => void): void;
     off(event: string, listener: DeviceEventListener): void;
     cancel(connectId?: string): void;
+    /** A non-empty deviceId is an expected chain fingerprint, not a transport identifier. */
     getChainFingerprint(connectId: string, deviceId: string, chain: ChainForFingerprint): Promise<Response<string>>;
-    /**
-     * Verify fingerprint using an existing sessionId directly.
-     * Safe to call inside connectorCall without causing queue deadlock.
-     */
+    /** Discovery may select a BLE target before a later call verifies its wallet. */
+    private _publishVerifiedBleBinding;
+    /** Verify on the acquired session without re-entering the job queue. */
     private _verifyDeviceFingerprintWithSession;
     /**
      * Compute the chain fingerprint via a caller-supplied call strategy.
@@ -207,7 +234,7 @@ declare class LedgerAdapter implements IHardwareWallet {
      *
      * - If a session already exists for the given connectId, reuse it.
      * - If ANY session exists (Ledger IDs are ephemeral), reuse it.
-     * - Otherwise: search → exactly 1 USB device auto-connects; multiple or none throws.
+     * - Otherwise: search → one USB device auto-connects; multiple asks the host to choose.
      */
     private _connectingPromise;
     private _waitForDeviceConnect;
@@ -250,6 +277,10 @@ declare class LedgerAdapter implements IHardwareWallet {
      * lives in one place.
      */
     private _callConnector;
+    private _assertConnectorReady;
+    private _runConnectorTeardown;
+    private _waitForConnectorOperationsToDrain;
+    private _retainConnectorOperation;
     private connectorCall;
     /**
      * Race a promise against an abort signal. On abort, rejects with
@@ -260,24 +291,7 @@ declare class LedgerAdapter implements IHardwareWallet {
     private static _throwIfAborted;
     /** Actual work done under the job queue — connection, fingerprint, call, and recovery. */
     private _runConnectorCall;
-    /**
-     * Stuck-app recovery: pause for the device's UI transition, then retry once.
-     *
-     * Caller has already cleared the session + reset connector. We wait so Stax
-     * finishes its post-CloseApp animation, then go through ensureConnected +
-     * fingerprint check + call exactly once. Caller decides what to do on a
-     * second stuck-app hit.
-     */
-    private _retryAfterStuckApp;
     private _sleepAbortable;
-    /**
-     * Clear stale session, reconnect, and retry the call.
-     *
-     * Timeout recovery starts with a full connector reset. After an APDU
-     * timeout, DMK/transport state may still emit malformed responses; retrying
-     * on the same DMK can poison the next chain switch.
-     */
-    private _retryWithFreshConnection;
     /**
      * Ensure OS-level device permission (Bluetooth / USB) before proceeding.
      *
@@ -654,6 +668,25 @@ declare class SignerSol {
     }>;
 }
 
+/**
+ * Wraps Ledger's Zcash SDK signer (Observable-based DeviceActions) into a
+ * simple async interface. Only the viewing-key and shielded-address reads are
+ * exposed; PCZT signing goes through a different host-side pipeline.
+ */
+declare class SignerZcash {
+    private readonly _sdk;
+    onInteraction?: (interaction: string) => void;
+    onRegisterCanceller?: (cancel: (reason?: CancelReason) => void) => void;
+    constructor(_sdk: SignerZcash$1);
+    /** GET_VK: UFVK string (default) or raw 96-byte Orchard FVK. */
+    getFullViewingKey(derivationPath: string, options?: FullViewingKeyOptions): Promise<GetFullViewingKeyDAOutput>;
+    /** GET_SHIELDED_ADDRESS: single-Orchard-receiver UA for a 5-level transparent path. */
+    getShieldedAddress(derivationPath: string, options?: {
+        checkOnDevice?: boolean;
+        skipOpenApp?: boolean;
+    }): Promise<GetShieldedAddressDAOutput>;
+}
+
 /**
  * Transport adapter that bridges Ledger's legacy hw-app-* SDKs to DMK's sendApdu.
  *
@@ -737,7 +770,7 @@ interface WrapErrorOptions {
     /** Fallback when err has no `appName` (DMK signer errors don't carry it). */
     defaultAppName?: string;
 }
-declare function ledgerFailure(code: HardwareErrorCode, error: string, appName?: string, tag?: string, params?: Record<string, unknown>): LedgerFailure;
+declare function ledgerFailure(code: HardwareErrorCode, error: string, appName?: string, tag?: string, params?: Record<string, unknown>, origin?: HwkErrorOrigin, recovery?: HwkRecoveryHint): LedgerFailure;
 declare function isDeviceLockedError(err: unknown): boolean;
 /**
  * Map a Ledger DMK error to a HardwareErrorCode and human-readable message.
@@ -747,6 +780,7 @@ declare function isDeviceLockedError(err: unknown): boolean;
 declare function mapLedgerError(err: unknown, opts?: WrapErrorOptions): {
     code: HardwareErrorCode;
     message: string;
+    origin?: HwkErrorOrigin;
     appName?: string;
 };
 
@@ -782,4 +816,4 @@ declare function isLedgerDmkBleTransport(transport?: string): boolean;
 declare function isLedgerBleConnectionType(connectionType?: ConnectionType): boolean;
 declare function isLedgerBleDescriptor(connectionType: ConnectionType, descriptor: DeviceDescriptor): boolean;
 
-export { AppManager, type DeviceActionState, type DmkDiscoveredDevice, DmkTransport, LedgerAdapter, LedgerConnectorBase, type LedgerConnectorBaseOptions, LedgerDeviceManager, type LedgerFailure, type SdkEvent, type SdkEventListener, type SdkLogEvent, SignerBtc, type SignerBtcAddress, SignerEth, type SignerEvmAddress, type SignerEvmSignature, SignerManager, SignerSol, type TransportFactory, debugLog, deviceActionToPromise, isDeviceLockedError, isLedgerBleConnectionType, isLedgerBleDescriptor, isLedgerDmkBleTransport, ledgerFailure, mapLedgerError, offSdkEvent, onSdkEvent };
+export { AppManager, type DeviceActionState, type DmkDiscoveredDevice, DmkTransport, LedgerAdapter, LedgerConnectorBase, type LedgerConnectorBaseOptions, LedgerDeviceManager, type LedgerFailure, type SdkEvent, type SdkEventListener, type SdkLogEvent, SignerBtc, type SignerBtcAddress, SignerEth, type SignerEvmAddress, type SignerEvmSignature, SignerManager, SignerSol, SignerZcash, type TransportFactory, debugLog, deviceActionToPromise, isDeviceLockedError, isLedgerBleConnectionType, isLedgerBleDescriptor, isLedgerDmkBleTransport, ledgerFailure, mapLedgerError, offSdkEvent, onSdkEvent };