@sidhujag/sysweb3-keyring 2.1.2 → 2.1.3

package/esm/ledger/dmk-session.js

@@ -1,15 +1,49 @@
 import { ledgerCancelledError, ledgerHostError, } from './host-types';
+function snapshotDiscoveredDevice(candidate) {
+    const invalid = () => ledgerHostError('LEDGER_INVALID_DEVICE', 'Invalid Ledger discovery handle');
+    if (!candidate ||
+        Object.getPrototypeOf(candidate) !== Object.prototype ||
+        'sessionId' in candidate)
+        throw invalid();
+    const ownValue = (key) => Object.getOwnPropertyDescriptor(candidate, key)?.value;
+    const id = ownValue('id');
+    const transport = ownValue('transport');
+    const name = ownValue('name');
+    const deviceModel = ownValue('deviceModel');
+    if (typeof id !== 'string' ||
+        !id.trim() ||
+        typeof transport !== 'string' ||
+        !transport.trim() ||
+        typeof name !== 'string' ||
+        !deviceModel ||
+        typeof deviceModel !== 'object' ||
+        Array.isArray(deviceModel))
+        throw invalid();
+    // The vendor uses transport and ID to connect. Keep a stable snapshot
+    // without copying extra fields, particularly the reconnect discriminator.
+    return Object.freeze({
+        id,
+        transport,
+        name,
+        deviceModel: deviceModel,
+    });
+}
 /** One owner and one semantic operation at a time, across EVM and UTXO apps. */
 export class LedgerDmkSession {
-    constructor(dmk) {
+    constructor(dmk, requireDeviceSelection = false) {
         this.dmk = dmk;
+        this.requireDeviceSelection = requireDeviceSelection;
         this.generation = 0;
         this.queue = Promise.resolve();
         this.closing = Promise.resolve();
         this.invalidationListeners = new Set();
     }
+    get readyConnection() {
+        // A provisional lease belongs to cleanup until its picker accepts handoff.
+        return this.connection?.pendingSelection ? undefined : this.connection;
+    }
     getStatus() {
-        return { connected: this.sessionId !== undefined };
+        return { connected: this.readyConnection !== undefined };
     }
     onInvalidated(listener) {
         this.invalidationListeners.add(listener);
@@ -17,35 +51,95 @@ export class LedgerDmkSession {
     }
     invalidate() {
         this.generation++;
+        this.deviceSelection = undefined;
         for (const listener of this.invalidationListeners)
             listener();
     }
+    /** The platform passes one candidate from its own current DMK picker. */
+    beginDeviceSelection(signal) {
+        if (signal?.aborted)
+            throw ledgerCancelledError();
+        if (this.connection || this.connectionAttempt)
+            throw this.connectionBusy();
+        this.requireDeviceSelection = true;
+        const selection = {};
+        this.deviceSelection = selection;
+        let used = false;
+        const assertCurrent = () => {
+            if (this.deviceSelection !== selection || signal?.aborted)
+                throw ledgerCancelledError();
+        };
+        return async (candidate) => {
+            assertCurrent();
+            if (used)
+                throw ledgerCancelledError();
+            used = true;
+            try {
+                const device = snapshotDiscoveredDevice(candidate);
+                assertCurrent();
+                await this.startConnection({}, { signal }, { device, owner: selection });
+                const connection = this.connection;
+                // The connection listener is gone by this handoff. A close in that
+                // interval must still retire this selection's newly acquired session.
+                if (connection?.pendingSelection === selection && signal?.aborted)
+                    await this.disconnect();
+                assertCurrent();
+                if (connection?.pendingSelection !== selection)
+                    throw ledgerCancelledError();
+                connection.pendingSelection = undefined;
+            }
+            finally {
+                if (this.deviceSelection === selection)
+                    this.deviceSelection = undefined;
+            }
+        };
+    }
     /** Device selection belongs to the visible host, never to a dapp request. */
     connect(request = {}, options = {}) {
         if (options.signal?.aborted)
             return Promise.reject(ledgerCancelledError());
-        if (this.sessionId)
+        if (this.readyConnection?.sessionId)
             return Promise.resolve();
+        if (this.requireDeviceSelection)
+            return Promise.reject(ledgerHostError('HARDWARE_SIGNER_UNAVAILABLE', 'Select a Ledger device first'));
+        return this.startConnection(request, options);
+    }
+    connectionBusy() {
+        return ledgerHostError('HARDWARE_SIGNER_BUSY', 'Ledger connection is already pending or active');
+    }
+    startConnection(request, options, selected) {
+        if (options.signal?.aborted)
+            return Promise.reject(ledgerCancelledError());
         if (this.connectionAttempt)
-            return Promise.reject(ledgerHostError('HARDWARE_SIGNER_BUSY', 'Ledger connection is already pending'));
+            return Promise.reject(this.connectionBusy());
         const controller = new AbortController();
         this.connectionAbort = controller;
         const abort = () => controller.abort();
         options.signal?.addEventListener('abort', abort, { once: true });
-        const attempt = this.connectDevice(request, controller.signal);
+        const attempt = this.connectDevice(request, controller.signal, selected);
         this.connectionAttempt = attempt;
-        return attempt.finally(() => {
+        return attempt.finally(async () => {
             options.signal?.removeEventListener('abort', abort);
-            if (this.connectionAttempt === attempt)
-                this.connectionAttempt = undefined;
-            if (this.connectionAbort === controller)
-                this.connectionAbort = undefined;
+            try {
+                if (controller.signal.aborted) {
+                    if (this.connection)
+                        await this.disconnect();
+                    else
+                        await this.closing;
+                    throw ledgerCancelledError();
+                }
+            }
+            finally {
+                if (this.connectionAttempt === attempt)
+                    this.connectionAttempt = undefined;
+                if (this.connectionAbort === controller)
+                    this.connectionAbort = undefined;
+            }
         });
     }
-    async connectDevice(request, signal) {
-        const generation = this.generation;
+    discoverDevice(request, signal) {
         let subscription;
-        const device = await new Promise((resolve, reject) => {
+        return new Promise((resolve, reject) => {
             let settled = false;
             const timer = request.useGrantedDevices
                 ? setTimeout(() => finish(ledgerHostError('HARDWARE_SIGNER_UNAVAILABLE', 'Select a Ledger device in the Ledger window')), 3000)
@@ -89,34 +183,56 @@ export class LedgerDmkSession {
             if (settled)
                 subscription?.unsubscribe();
         });
-        if (generation !== this.generation || signal.aborted)
+    }
+    async connectDevice(request, signal, selected) {
+        const generation = this.generation;
+        const isCurrent = () => generation === this.generation && !signal.aborted;
+        const device = selected?.device ?? (await this.discoverDevice(request, signal));
+        if (!isCurrent())
             throw ledgerCancelledError();
         await this.closing;
+        if (!isCurrent())
+            throw ledgerCancelledError();
         const sessionId = await this.dmk.connect({ device });
-        if (generation !== this.generation || signal.aborted) {
+        const connection = { sessionId, pendingSelection: selected?.owner };
+        let subscription;
+        let ended = false;
+        try {
+            if (!isCurrent())
+                throw ledgerCancelledError();
+            subscription = this.dmk.getDeviceSessionState({ sessionId }).subscribe({
+                error: () => {
+                    ended = true;
+                    if (isCurrent() && this.connection === connection)
+                        void this.disconnect();
+                },
+                complete: () => {
+                    ended = true;
+                    if (isCurrent() && this.connection === connection) {
+                        this.connection = undefined;
+                        this.invalidate();
+                        this.activeAbort?.abort();
+                        this.activeCancel?.();
+                    }
+                },
+            });
+            if (ended || !isCurrent())
+                throw ledgerCancelledError();
+        }
+        catch (error) {
+            subscription?.unsubscribe();
             await this.dmk.disconnect({ sessionId }).catch(() => undefined);
-            throw ledgerCancelledError();
+            throw error;
         }
-        this.sessionId = sessionId;
-        this.stateSubscription = this.dmk
-            .getDeviceSessionState({ sessionId })
-            .subscribe({
-            complete: () => {
-                if (this.sessionId === sessionId) {
-                    this.sessionId = undefined;
-                    this.invalidate();
-                    this.activeAbort?.abort();
-                    this.activeCancel?.();
-                }
-            },
-        });
+        this.connection = connection;
+        this.stateSubscription = subscription;
     }
     /** Cancel revokes the result and closes I/O; it cannot undo on-device approval. */
     disconnect() {
         this.invalidate();
         this.connectionAbort?.abort();
-        const sessionId = this.sessionId;
-        this.sessionId = undefined;
+        const sessionId = this.connection?.sessionId;
+        this.connection = undefined;
         this.activeAbort?.abort();
         this.activeAbort = undefined;
         this.activeCancel?.();
@@ -131,13 +247,16 @@ export class LedgerDmkSession {
     }
     runExclusive(operation, options = {}) {
         const generation = this.generation;
+        const admitted = this.readyConnection;
         const run = async () => {
             await this.closing;
-            const sessionId = this.sessionId;
+            const connection = this.readyConnection;
             const assertCurrent = () => {
                 if (generation !== this.generation || options.signal?.aborted)
                     throw ledgerCancelledError();
-                if (!sessionId || this.sessionId !== sessionId)
+                if (!connection?.sessionId ||
+                    this.readyConnection !== connection ||
+                    (this.requireDeviceSelection && admitted !== connection))
                     throw ledgerHostError('HARDWARE_SIGNER_UNAVAILABLE', 'Connect a Ledger device first');
             };
             assertCurrent();
@@ -157,7 +276,7 @@ export class LedgerDmkSession {
                 assertCurrent();
                 const context = {
                     dmk: this.dmk,
-                    sessionId: sessionId,
+                    sessionId: connection.sessionId,
                     generation,
                     signal: controller.signal,
                     assertCurrent,

package/esm/ledger/dmk-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"dmk-session.js","sourceRoot":"","sources":["../../../src/ledger/dmk-session.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,eAAe,GAEhB,MAAM,cAAc,CAAC;AA8BtB,gFAAgF;AAChF,MAAM,OAAO,gBAAgB;IAY3B,YAAqB,GAAwB;QAAxB,QAAG,GAAH,GAAG,CAAqB;QAXrC,eAAU,GAAG,CAAC,CAAC;QAEf,UAAK,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;QAG5C,YAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;QAIlC,0BAAqB,GAAG,IAAI,GAAG,EAAc,CAAC;IAEf,CAAC;IAEjD,SAAS;QACP,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;IACrD,CAAC;IAED,aAAa,CAAC,QAAoB;QAChC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,qBAAqB;YAAE,QAAQ,EAAE,CAAC;IAChE,CAAC;IAED,6EAA6E;IAC7E,OAAO,CACL,UAA2C,EAAE,EAC7C,UAAkC,EAAE;QAEpC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,iBAAiB;YACxB,OAAO,OAAO,CAAC,MAAM,CACnB,eAAe,CACb,sBAAsB,EACtB,sCAAsC,CACvC,CACF,CAAC;QACJ,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC;QAClC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC;QACjC,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE;YAC1B,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpD,IAAI,IAAI,CAAC,iBAAiB,KAAK,OAAO;gBACpC,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;YACrC,IAAI,IAAI,CAAC,eAAe,KAAK,UAAU;gBAAE,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;QAC5E,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,OAAwC,EACxC,MAAmB;QAEnB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,YAAsC,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrE,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,KAAK,GAAG,OAAO,CAAC,iBAAiB;gBACrC,CAAC,CAAC,UAAU,CACR,GAAG,EAAE,CACH,MAAM,CACJ,eAAe,CACb,6BAA6B,EAC7B,6CAA6C,CAC9C,CACF,EACH,IAAI,CACL;gBACH,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,MAAM,GAAG,CAAC,KAAe,EAAE,QAA2B,EAAE,EAAE;gBAC9D,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC/B,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7C,IAAI,KAAK;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;oBACpB,OAAO,CAAC,QAAS,CAAC,CAAC;YAC1B,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;YACrD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,2EAA2E;YAC3E,MAAM,SAAS,GACb,OAAO,CAAC,iBAAiB;gBACvB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBACvC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACpC,YAAY,GAAG,SAAS,CAAC,SAAS,CAAC;gBACjC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;oBACd,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBACvD,IAAI,CAAC,OAAO,CAAC,MAAM;wBAAE,OAAO;oBAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACzB,MAAM,CACJ,eAAe,CACb,2BAA2B,EAC3B,+CAA+C,CAChD,CACF,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChC,CAAC;gBACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC/B,QAAQ,EAAE,GAAG,EAAE;oBACb,IAAI,CAAC,OAAO;wBACV,MAAM,CACJ,eAAe,CACb,6BAA6B,EAC7B,2BAA2B,CAC5B,CACF,CAAC;gBACN,CAAC;aACF,CAAC,CAAC;YACH,IAAI,OAAO;gBAAE,YAAY,EAAE,WAAW,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;QACH,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO;YAClD,MAAM,oBAAoB,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,OAAO,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,oBAAoB,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,GAAG;aAC9B,qBAAqB,CAAC,EAAE,SAAS,EAAE,CAAC;aACpC,SAAS,CAAC;YACT,QAAQ,EAAE,GAAG,EAAE;gBACb,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBACjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;oBAC3B,IAAI,CAAC,UAAU,EAAE,CAAC;oBAClB,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;oBAC1B,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;gBACxB,CAAC;YACH,CAAC;SACF,CAAC,CAAC;IACP,CAAC;IAED,mFAAmF;IACnF,UAAU;QACR,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QACjC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAC9B,IAAI,CAAC,iBAAiB,EAAE,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC1C,IAAI,SAAS;gBACX,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,YAAY,CACV,SAA2D,EAC3D,UAAkC,EAAE;QAEpC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE;YACrB,MAAM,IAAI,CAAC,OAAO,CAAC;YACnB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YACjC,MAAM,aAAa,GAAG,GAAG,EAAE;gBACzB,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;oBAC3D,MAAM,oBAAoB,EAAE,CAAC;gBAC/B,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;oBAC5C,MAAM,eAAe,CACnB,6BAA6B,EAC7B,+BAA+B,CAChC,CAAC;YACN,CAAC,CAAC;YACF,aAAa,EAAE,CAAC;YAChB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;YAC9B,IAAI,kBAAkB,GAA2B,GAAG,EAAE,CAAC,SAAS,CAAC;YACjE,MAAM,SAAS,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBACjD,kBAAkB,GAAG,MAAM,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAChC,OAAO,EACP,GAAG,EAAE,CAAC,kBAAkB,CAAC,oBAAoB,EAAE,CAAC,EAChD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,kBAAkB,CAAC,oBAAoB,EAAE,CAAC,CAAC;gBAC3C,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YACzB,CAAC,CAAC;YACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC;gBACH,aAAa,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAuB;oBAClC,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,SAAS,EAAE,SAAU;oBACrB,UAAU;oBACV,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,aAAa;oBACb,SAAS,EAAE,CAAI,YAA6B,EAAE,EAAE;wBAC9C,aAAa,EAAE,CAAC;wBAChB,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;oBAClE,CAAC;iBACF,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;gBACnE,aAAa,EAAE,CAAC;gBAChB,OAAO,MAAM,CAAC;YAChB,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACtD,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU;oBAAE,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;YACpE,CAAC;QACH,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,CACP,YAA6D,EAC7D,OAAgC;QAEhC,OAAO,IAAI,CAAC,YAAY,CACtB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAC3D,OAAO,CACR,CAAC;IACJ,CAAC;IAEO,WAAW,CACjB,MAAsB,EACtB,aAAyB,EACzB,OAA+B;QAE/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,YAAY,GAA+B,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,CAAC,KAAe,EAAE,MAAe,EAAE,EAAE;gBAClD,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;gBACpC,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM;oBAAE,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;gBAChE,IAAI,KAAK;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;oBACpB,OAAO,CAAC,MAAgB,CAAC,CAAC;YACjC,CAAC,CAAC;YACF,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,sEAAsE;gBACtE,+DAA+D;gBAC/D,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM;oBAAE,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;gBAChE,IAAI,CAAC;oBACH,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,CAAC;gBAAC,MAAM,CAAC;oBACP,+DAA+D;gBACjE,CAAC;wBAAS,CAAC;oBACT,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC,CAAC;YACF,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC;YAC3B,YAAY,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;gBACjD,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;oBACd,IAAI,CAAC;wBACH,aAAa,EAAE,CAAC;wBAChB,OAAO,CAAC,UAAU,EAAE,CAAC;4BACnB,MAAM,EAAE,KAAK,CAAC,MAAM;4BACpB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;gCAC5B,CAAC,CAAC;oCACE,uBAAuB,EACrB,KAAK,CAAC,iBAAiB,CAAC,uBAAuB;oCACjD,GAAG,CAAC,OAAO,KAAK,CAAC,iBAAiB,CAAC,IAAI,KAAK,QAAQ;wCAClD,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE;wCACxC,CAAC,CAAC,EAAE,CAAC;iCACR;gCACH,CAAC,CAAC,EAAE,CAAC;yBACR,CAAC,CAAC;wBACH,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;4BACrB,KAAK,WAAW;gCACd,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gCAChC,MAAM;4BACR,KAAK,OAAO;gCACV,MAAM,CACJ,KAAK,CAAC,KAAK;oCACT,eAAe,CACb,sBAAsB,EACtB,sBAAsB,CACvB,CACJ,CAAC;gCACF,MAAM;4BACR,KAAK,SAAS;gCACZ,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;gCAC/B,MAAM;wBACV,CAAC;oBACH,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,kEAAkE;wBAClE,kDAAkD;wBAClD,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;wBACvB,MAAM,CAAC,KAAK,CAAC,CAAC;oBAChB,CAAC;gBACH,CAAC;gBACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC/B,QAAQ,EAAE,GAAG,EAAE;oBACb,IAAI,CAAC,OAAO;wBACV,MAAM,CACJ,eAAe,CACb,0BAA0B,EAC1B,sCAAsC,CACvC,CACF,CAAC;gBACN,CAAC;aACF,CAAC,CAAC;YACH,IAAI,OAAO;gBAAE,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"dmk-session.js","sourceRoot":"","sources":["../../../src/ledger/dmk-session.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oBAAoB,EACpB,eAAe,GAEhB,MAAM,cAAc,CAAC;AAiCtB,SAAS,wBAAwB,CAAC,SAAiB;IACjD,MAAM,OAAO,GAAG,GAAG,EAAE,CACnB,eAAe,CAAC,uBAAuB,EAAE,iCAAiC,CAAC,CAAC;IAC9E,IACE,CAAC,SAAS;QACV,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,MAAM,CAAC,SAAS;QACrD,WAAW,IAAI,SAAS;QAExB,MAAM,OAAO,EAAE,CAAC;IAClB,MAAM,QAAQ,GAAG,CAAC,GAA2B,EAAW,EAAE,CACxD,MAAM,CAAC,wBAAwB,CAAC,SAAS,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC;IACzD,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,SAAS,GAAG,QAAQ,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,WAAW,GAAG,QAAQ,CAAC,aAAa,CAAC,CAAC;IAC5C,IACE,OAAO,EAAE,KAAK,QAAQ;QACtB,CAAC,EAAE,CAAC,IAAI,EAAE;QACV,OAAO,SAAS,KAAK,QAAQ;QAC7B,CAAC,SAAS,CAAC,IAAI,EAAE;QACjB,OAAO,IAAI,KAAK,QAAQ;QACxB,CAAC,WAAW;QACZ,OAAO,WAAW,KAAK,QAAQ;QAC/B,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QAE1B,MAAM,OAAO,EAAE,CAAC;IAClB,sEAAsE;IACtE,0EAA0E;IAC1E,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,EAAE;QACF,SAAS;QACT,IAAI;QACJ,WAAW,EAAE,WAA8C;KAC5D,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,MAAM,OAAO,gBAAgB;IAa3B,YACW,GAAwB,EACzB,yBAAyB,KAAK;QAD7B,QAAG,GAAH,GAAG,CAAqB;QACzB,2BAAsB,GAAtB,sBAAsB,CAAQ;QAdhC,eAAU,GAAG,CAAC,CAAC;QAEf,UAAK,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;QAG5C,YAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;QAKlC,0BAAqB,GAAG,IAAI,GAAG,EAAc,CAAC;IAK5D,CAAC;IAEJ,IAAY,eAAe;QACzB,2EAA2E;QAC3E,OAAO,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;IACzE,CAAC;IAED,SAAS;QACP,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;IAC3D,CAAC;IAED,aAAa,CAAC,QAAoB;QAChC,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3D,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;QACjC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,qBAAqB;YAAE,QAAQ,EAAE,CAAC;IAChE,CAAC;IAED,yEAAyE;IACzE,oBAAoB,CAClB,MAAoB;QAEpB,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,oBAAoB,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,iBAAiB;YAAE,MAAM,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3E,IAAI,CAAC,sBAAsB,GAAG,IAAI,CAAC;QACnC,MAAM,SAAS,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;QACjC,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,aAAa,GAAG,GAAG,EAAE;YACzB,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,IAAI,MAAM,EAAE,OAAO;gBACvD,MAAM,oBAAoB,EAAE,CAAC;QACjC,CAAC,CAAC;QACF,OAAO,KAAK,EAAE,SAAS,EAAE,EAAE;YACzB,aAAa,EAAE,CAAC;YAChB,IAAI,IAAI;gBAAE,MAAM,oBAAoB,EAAE,CAAC;YACvC,IAAI,GAAG,IAAI,CAAC;YACZ,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,CAAC;gBACnD,aAAa,EAAE,CAAC;gBAChB,MAAM,IAAI,CAAC,eAAe,CACxB,EAAE,EACF,EAAE,MAAM,EAAE,EACV,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAC7B,CAAC;gBACF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;gBACnC,mEAAmE;gBACnE,sEAAsE;gBACtE,IAAI,UAAU,EAAE,gBAAgB,KAAK,SAAS,IAAI,MAAM,EAAE,OAAO;oBAC/D,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC1B,aAAa,EAAE,CAAC;gBAChB,IAAI,UAAU,EAAE,gBAAgB,KAAK,SAAS;oBAC5C,MAAM,oBAAoB,EAAE,CAAC;gBAC/B,UAAU,CAAC,gBAAgB,GAAG,SAAS,CAAC;YAC1C,CAAC;oBAAS,CAAC;gBACT,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS;oBACpC,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;YACrC,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,OAAO,CACL,UAA2C,EAAE,EAC7C,UAAkC,EAAE;QAEpC,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,eAAe,EAAE,SAAS;YAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC9D,IAAI,IAAI,CAAC,sBAAsB;YAC7B,OAAO,OAAO,CAAC,MAAM,CACnB,eAAe,CACb,6BAA6B,EAC7B,8BAA8B,CAC/B,CACF,CAAC;QACJ,OAAO,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAChD,CAAC;IAEO,cAAc;QACpB,OAAO,eAAe,CACpB,sBAAsB,EACtB,gDAAgD,CACjD,CAAC;IACJ,CAAC;IAEO,eAAe,CACrB,OAAwC,EACxC,OAA+B,EAC/B,QAAyB;QAEzB,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;QAC3E,IAAI,IAAI,CAAC,iBAAiB;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACzE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC;QAClC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QACvC,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACjE,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QACzE,IAAI,CAAC,iBAAiB,GAAG,OAAO,CAAC;QACjC,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAChC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC;gBACH,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC9B,IAAI,IAAI,CAAC,UAAU;wBAAE,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;;wBACxC,MAAM,IAAI,CAAC,OAAO,CAAC;oBACxB,MAAM,oBAAoB,EAAE,CAAC;gBAC/B,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,IAAI,IAAI,CAAC,iBAAiB,KAAK,OAAO;oBACpC,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;gBACrC,IAAI,IAAI,CAAC,eAAe,KAAK,UAAU;oBACrC,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;YACrC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,cAAc,CACpB,OAAwC,EACxC,MAAmB;QAEnB,IAAI,YAAsC,CAAC;QAC3C,OAAO,IAAI,OAAO,CAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACvD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,KAAK,GAAG,OAAO,CAAC,iBAAiB;gBACrC,CAAC,CAAC,UAAU,CACR,GAAG,EAAE,CACH,MAAM,CACJ,eAAe,CACb,6BAA6B,EAC7B,6CAA6C,CAC9C,CACF,EACH,IAAI,CACL;gBACH,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,MAAM,GAAG,CAAC,KAAe,EAAE,QAA2B,EAAE,EAAE;gBAC9D,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,KAAK;oBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC/B,YAAY,EAAE,WAAW,EAAE,CAAC;gBAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC7C,IAAI,KAAK;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;oBACpB,OAAO,CAAC,QAAS,CAAC,CAAC;YAC1B,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;YACrD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC1D,2EAA2E;YAC3E,MAAM,SAAS,GACb,OAAO,CAAC,iBAAiB;gBACvB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAE,CAAC;gBACvC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACpC,YAAY,GAAG,SAAS,CAAC,SAAS,CAAC;gBACjC,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;oBACd,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBACvD,IAAI,CAAC,OAAO,CAAC,MAAM;wBAAE,OAAO;oBAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACzB,MAAM,CACJ,eAAe,CACb,2BAA2B,EAC3B,+CAA+C,CAChD,CACF,CAAC;wBACF,OAAO;oBACT,CAAC;oBACD,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChC,CAAC;gBACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC/B,QAAQ,EAAE,GAAG,EAAE;oBACb,IAAI,CAAC,OAAO;wBACV,MAAM,CACJ,eAAe,CACb,6BAA6B,EAC7B,2BAA2B,CAC5B,CACF,CAAC;gBACN,CAAC;aACF,CAAC,CAAC;YACH,IAAI,OAAO;gBAAE,YAAY,EAAE,WAAW,EAAE,CAAC;QAC3C,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CACzB,OAAwC,EACxC,MAAmB,EACnB,QAAyB;QAEzB,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAC1E,MAAM,MAAM,GACV,QAAQ,EAAE,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,SAAS,EAAE;YAAE,MAAM,oBAAoB,EAAE,CAAC;QAC/C,MAAM,IAAI,CAAC,OAAO,CAAC;QACnB,IAAI,CAAC,SAAS,EAAE;YAAE,MAAM,oBAAoB,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,EAAE,SAAS,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACpE,IAAI,YAAsC,CAAC;QAC3C,IAAI,KAAK,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,CAAC,SAAS,EAAE;gBAAE,MAAM,oBAAoB,EAAE,CAAC;YAC/C,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC;gBACrE,KAAK,EAAE,GAAG,EAAE;oBACV,KAAK,GAAG,IAAI,CAAC;oBACb,IAAI,SAAS,EAAE,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU;wBAC/C,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;gBAC3B,CAAC;gBACD,QAAQ,EAAE,GAAG,EAAE;oBACb,KAAK,GAAG,IAAI,CAAC;oBACb,IAAI,SAAS,EAAE,IAAI,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;wBAClD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;wBAC5B,IAAI,CAAC,UAAU,EAAE,CAAC;wBAClB,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;wBAC1B,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;oBACxB,CAAC;gBACH,CAAC;aACF,CAAC,CAAC;YACH,IAAI,KAAK,IAAI,CAAC,SAAS,EAAE;gBAAE,MAAM,oBAAoB,EAAE,CAAC;QAC1D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,EAAE,WAAW,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,iBAAiB,GAAG,YAAY,CAAC;IACxC,CAAC;IAED,mFAAmF;IACnF,UAAU;QACR,IAAI,CAAC,UAAU,EAAE,CAAC;QAClB,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,CAAC;QAC7C,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;QAC9B,IAAI,CAAC,iBAAiB,EAAE,WAAW,EAAE,CAAC;QACtC,IAAI,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE;YAC1C,IAAI,SAAS;gBACX,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpE,CAAC,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,YAAY,CACV,SAA2D,EAC3D,UAAkC,EAAE;QAEpC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC;QACtC,MAAM,GAAG,GAAG,KAAK,IAAI,EAAE;YACrB,MAAM,IAAI,CAAC,OAAO,CAAC;YACnB,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC;YACxC,MAAM,aAAa,GAAG,GAAG,EAAE;gBACzB,IAAI,UAAU,KAAK,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;oBAC3D,MAAM,oBAAoB,EAAE,CAAC;gBAC/B,IACE,CAAC,UAAU,EAAE,SAAS;oBACtB,IAAI,CAAC,eAAe,KAAK,UAAU;oBACnC,CAAC,IAAI,CAAC,sBAAsB,IAAI,QAAQ,KAAK,UAAU,CAAC;oBAExD,MAAM,eAAe,CACnB,6BAA6B,EAC7B,+BAA+B,CAChC,CAAC;YACN,CAAC,CAAC;YACF,aAAa,EAAE,CAAC;YAChB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;YAC9B,IAAI,kBAAkB,GAA2B,GAAG,EAAE,CAAC,SAAS,CAAC;YACjE,MAAM,SAAS,GAAG,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBACjD,kBAAkB,GAAG,MAAM,CAAC;YAC9B,CAAC,CAAC,CAAC;YACH,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAChC,OAAO,EACP,GAAG,EAAE,CAAC,kBAAkB,CAAC,oBAAoB,EAAE,CAAC,EAChD,EAAE,IAAI,EAAE,IAAI,EAAE,CACf,CAAC;YACF,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,kBAAkB,CAAC,oBAAoB,EAAE,CAAC,CAAC;gBAC3C,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;YACzB,CAAC,CAAC;YACF,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC;gBACH,aAAa,EAAE,CAAC;gBAChB,MAAM,OAAO,GAAuB;oBAClC,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,SAAS,EAAE,UAAW,CAAC,SAAS;oBAChC,UAAU;oBACV,MAAM,EAAE,UAAU,CAAC,MAAM;oBACzB,aAAa;oBACb,SAAS,EAAE,CAAI,YAA6B,EAAE,EAAE;wBAC9C,aAAa,EAAE,CAAC;wBAChB,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;oBAClE,CAAC;iBACF,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;gBACnE,aAAa,EAAE,CAAC;gBAChB,OAAO,MAAM,CAAC;YAChB,CAAC;oBAAS,CAAC;gBACT,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACtD,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU;oBAAE,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;YACpE,CAAC;QACH,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC3C,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,SAAS,CACP,YAA6D,EAC7D,OAAgC;QAEhC,OAAO,IAAI,CAAC,YAAY,CACtB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,EAC3D,OAAO,CACR,CAAC;IACJ,CAAC;IAEO,WAAW,CACjB,MAAsB,EACtB,aAAyB,EACzB,OAA+B;QAE/B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,YAAY,GAA+B,EAAE,CAAC;YACpD,MAAM,MAAM,GAAG,CAAC,KAAe,EAAE,MAAe,EAAE,EAAE;gBAClD,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;gBACpC,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM;oBAAE,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;gBAChE,IAAI,KAAK;oBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;;oBACpB,OAAO,CAAC,MAAgB,CAAC,CAAC;YACjC,CAAC,CAAC;YACF,MAAM,MAAM,GAAG,GAAG,EAAE;gBAClB,sEAAsE;gBACtE,+DAA+D;gBAC/D,IAAI,IAAI,CAAC,YAAY,KAAK,MAAM;oBAAE,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC;gBAChE,IAAI,CAAC;oBACH,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClB,CAAC;gBAAC,MAAM,CAAC;oBACP,+DAA+D;gBACjE,CAAC;wBAAS,CAAC;oBACT,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC,CAAC;YACF,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC;YAC3B,YAAY,CAAC,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;gBACjD,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE;oBACd,IAAI,CAAC;wBACH,aAAa,EAAE,CAAC;wBAChB,OAAO,CAAC,UAAU,EAAE,CAAC;4BACnB,MAAM,EAAE,KAAK,CAAC,MAAM;4BACpB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS;gCAC5B,CAAC,CAAC;oCACE,uBAAuB,EACrB,KAAK,CAAC,iBAAiB,CAAC,uBAAuB;oCACjD,GAAG,CAAC,OAAO,KAAK,CAAC,iBAAiB,CAAC,IAAI,KAAK,QAAQ;wCAClD,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE;wCACxC,CAAC,CAAC,EAAE,CAAC;iCACR;gCACH,CAAC,CAAC,EAAE,CAAC;yBACR,CAAC,CAAC;wBACH,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;4BACrB,KAAK,WAAW;gCACd,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;gCAChC,MAAM;4BACR,KAAK,OAAO;gCACV,MAAM,CACJ,KAAK,CAAC,KAAK;oCACT,eAAe,CACb,sBAAsB,EACtB,sBAAsB,CACvB,CACJ,CAAC;gCACF,MAAM;4BACR,KAAK,SAAS;gCACZ,MAAM,CAAC,oBAAoB,EAAE,CAAC,CAAC;gCAC/B,MAAM;wBACV,CAAC;oBACH,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,kEAAkE;wBAClE,kDAAkD;wBAClD,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;wBACvB,MAAM,CAAC,KAAK,CAAC,CAAC;oBAChB,CAAC;gBACH,CAAC;gBACD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC/B,QAAQ,EAAE,GAAG,EAAE;oBACb,IAAI,CAAC,OAAO;wBACV,MAAM,CACJ,eAAe,CACb,0BAA0B,EAC1B,sCAAsC,CACvC,CACF,CAAC;gBACN,CAAC;aACF,CAAC,CAAC;YACH,IAAI,OAAO;gBAAE,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAClD,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/esm/ledger-host.js

@@ -1,36 +1,12 @@
 /** Heavy browser host entry. Do not import from the wallet worker or software entry. */
-import { DeviceManagementKitBuilder, } from '@ledgerhq/device-management-kit';
+import { DeviceManagementKitBuilder } from '@ledgerhq/device-management-kit';
 import { webHidTransportFactory } from '@ledgerhq/device-transport-kit-web-hid';
-import { createLedgerEvmAdapter } from './ledger/dmk-evm';
-import { LedgerDmkSession } from './ledger/dmk-session';
-import { createLedgerUtxoAdapter } from './ledger/dmk-utxo';
-import { ledgerHostError } from './ledger/host-types';
+import { createLedgerHostForDmk } from './ledger/dmk-host';
 export function createLedgerDmkHost(config = {}) {
     const candidate = config.dmk ??
         new DeviceManagementKitBuilder()
             .addTransport(webHidTransportFactory)
             .build();
-    for (const method of [
-        'connect',
-        'disconnect',
-        'executeDeviceAction',
-        'startDiscovering',
-        'listenToAvailableDevices',
-        'getDeviceSessionState',
-    ]) {
-        if (typeof candidate[method] !== 'function')
-            throw ledgerHostError('LEDGER_INVALID_HOST', 'Invalid Ledger device manager');
-    }
-    // Keep upstream exports-only types out of this public declaration. A trusted
-    // platform supplies its concrete DMK here; dapps cannot select this object.
-    const dmk = candidate;
-    const session = new LedgerDmkSession(dmk);
-    return {
-        connect: (request, options) => session.connect(request, options),
-        disconnect: () => session.disconnect(),
-        getStatus: () => session.getStatus(),
-        evm: createLedgerEvmAdapter(session, config),
-        utxo: createLedgerUtxoAdapter(session),
-    };
+    return createLedgerHostForDmk(candidate, config, config.requireDeviceSelection);
 }
 //# sourceMappingURL=ledger-host.js.map

package/esm/ledger-host.js.map

@@ -1 +1 @@
-{"version":3,"file":"ledger-host.js","sourceRoot":"","sources":["../../src/ledger-host.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EACL,0BAA0B,GAE3B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAEhF,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAStD,MAAM,UAAU,mBAAmB,CACjC,SAA8B,EAAE;IAEhC,MAAM,SAAS,GACb,MAAM,CAAC,GAAG;QACV,IAAI,0BAA0B,EAAE;aAC7B,YAAY,CAAC,sBAAsB,CAAC;aACpC,KAAK,EAAE,CAAC;IACb,KAAK,MAAM,MAAM,IAAI;QACnB,SAAS;QACT,YAAY;QACZ,qBAAqB;QACrB,kBAAkB;QAClB,0BAA0B;QAC1B,uBAAuB;KACxB,EAAE,CAAC;QACF,IAAI,OAAQ,SAAqC,CAAC,MAAM,CAAC,KAAK,UAAU;YACtE,MAAM,eAAe,CACnB,qBAAqB,EACrB,+BAA+B,CAChC,CAAC;IACN,CAAC;IACD,6EAA6E;IAC7E,4EAA4E;IAC5E,MAAM,GAAG,GAAG,SAAgC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO;QACL,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC;QAChE,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE;QACtC,SAAS,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE;QACpC,GAAG,EAAE,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC;QAC5C,IAAI,EAAE,uBAAuB,CAAC,OAAO,CAAC;KACvC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"ledger-host.js","sourceRoot":"","sources":["../../src/ledger-host.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,OAAO,EAAE,0BAA0B,EAAE,MAAM,iCAAiC,CAAC;AAC7E,OAAO,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAEhF,OAAO,EAAE,sBAAsB,EAAsB,MAAM,mBAAmB,CAAC;AAU/E,MAAM,UAAU,mBAAmB,CACjC,SAA8B,EAAE;IAEhC,MAAM,SAAS,GACb,MAAM,CAAC,GAAG;QACV,IAAI,0BAA0B,EAAE;aAC7B,YAAY,CAAC,sBAAsB,CAAC;aACpC,KAAK,EAAE,CAAC;IACb,OAAO,sBAAsB,CAC3B,SAAS,EACT,MAAM,EACN,MAAM,CAAC,sBAAsB,CAC9B,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sidhujag/sysweb3-keyring",
-  "version": "2.1.2",
+  "version": "2.1.3",
   "description": "Keyring Manager for UTXO and Web3 Wallets",
   "main": "cjs/index.js",
   "types": "types/index.d.ts",
@@ -24,6 +24,12 @@
       "cjs/transactions/evm-submission.js": [
         "types/transactions/evm-submission.d.ts"
       ],
+      "cjs/transactions/evm-cancellation": [
+        "types/transactions/evm-cancellation.d.ts"
+      ],
+      "cjs/transactions/evm-cancellation.js": [
+        "types/transactions/evm-cancellation.d.ts"
+      ],
       "cjs/transactions/ethereum": [
         "types/transactions/ethereum.d.ts"
       ],
@@ -48,6 +54,12 @@
       "esm/ledger-host.js": [
         "types/ledger-host.d.ts"
       ],
+      "esm/ledger/dmk-selected-host": [
+        "types/ledger/dmk-selected-host.d.ts"
+      ],
+      "esm/ledger/dmk-selected-host.js": [
+        "types/ledger/dmk-selected-host.d.ts"
+      ],
       "cjs/ledger/host-types": [
         "types/ledger/host-types.d.ts"
       ],

package/types/current-vault-refusal.d.ts

@@ -0,0 +1,2 @@
+/** Internal ciphertext comparison for a current-vault tag refusal. */
+export declare const currentVaultRefusals: WeakMap<Error, (vault: string) => boolean>;

package/types/evm-fees.d.ts

@@ -35,6 +35,31 @@ export declare function parseEvmFeeQuantity(value: unknown, label?: string): big
  * the configured minimum if larger. Callers retain chain/resource bounds.
  */
 export declare function bufferedEvmGasLimit(estimate: bigint, minimum?: bigint): bigint;
+export type EvmCancellationFeeInput = Readonly<{
+    type: 0;
+    currentGasPrice: bigint;
+    originalGasPrice?: bigint;
+} | {
+    type: 2;
+    currentMaxFeePerGas: bigint;
+    currentMaxPriorityFeePerGas: bigint;
+    originalMaxFeePerGas?: bigint;
+    originalMaxPriorityFeePerGas?: bigint;
+}>;
+export declare const EVM_CANCELLATION_GAS_LIMIT = 42000n;
+/** Plan only the cancellation fees. The host validates the rates and envelope. */
+export declare function planEvmCancellationFees(input: EvmCancellationFeeInput): Readonly<{
+    type: 0;
+    gasLimit: 42000n;
+    gasPrice: bigint;
+    maximumFee: bigint;
+}> | Readonly<{
+    type: 2;
+    gasLimit: 42000n;
+    maxFeePerGas: bigint;
+    maxPriorityFeePerGas: bigint;
+    maximumFee: bigint;
+}>;
 /**
  * No signer, transport, network registry or provider implementation is imported.
  * Reads are serialized and guarded; RPC failures never become fabricated fees.

package/types/keyring-core.d.ts

@@ -15,7 +15,32 @@ export interface KeyringStoragePort extends VaultStoragePort {
     deleteItem(key: string): Promise<void>;
     /** Legacy adapter capability; fixed native hosts can omit it. */
     setClient?(client: any): void;
+    /** Atomically read this authority's current encrypted vault and salt. */
+    readDeviceUnlockVaultPair?(): Promise<DeviceUnlockVaultPair | null>;
 }
+export type DeviceUnlockVaultPair = Readonly<{
+    vault: string;
+    keys: unknown;
+    pairFingerprint: string;
+}>;
+export type DeviceUnlockCredential = Readonly<{
+    pairFingerprint: string;
+    key: Uint8Array;
+}>;
+/** Only a trusted software host may supply this protected credential I/O. */
+export type DeviceUnlockPort = Readonly<{
+    /** Transfer ownership of the returned key bytes to the SDK. */
+    readCredential(pairFingerprint: string): Promise<DeviceUnlockCredential | null>;
+    /**
+     * Consume the bytes and check the guard before saving. The SDK clears the
+     * bytes on settlement. Publish enrollment only after issue returns true.
+     */
+    writeCredential(credential: DeviceUnlockCredential, assertCurrent: () => void): Promise<void>;
+}>;
+export type DeviceUnlockControls = Readonly<{
+    issue(password: string, assertCurrent: () => void): Promise<boolean>;
+    resume(assertCurrent: () => void): Promise<boolean>;
+}>;
 /** Only the device capabilities consumed by the wallet authority. */
 export interface KeyringLedgerSigner {
     destroy: LedgerKeyring['destroy'];
@@ -24,6 +49,10 @@ export interface KeyringLedgerSigner {
     verifyUtxoAddress: LedgerKeyring['verifyUtxoAddress'];
 }
 export type KeyringTrezorSigner = Pick<TrezorKeyring, 'destroy' | 'getAccountInfo' | 'getPublicKey' | 'signTypedData' | 'signMessage' | 'signEthTransaction' | 'verifyUtxoAddress'>;
+type SessionOwner = {
+    current?: symbol;
+    epoch: number;
+};
 export interface KeyringCoreDependencies<TLedger extends KeyringLedgerSigner | undefined, TTrezor extends KeyringTrezorSigner | undefined> {
     /** Immutable identity shared only by keyrings in the same wallet authority. */
     authority: object;
@@ -36,6 +65,12 @@ export interface KeyringCoreDependencies<TLedger extends KeyringLedgerSigner | u
     syscoinHardwareSigners?: ISyscoinHardwareSigners;
     /** Trusted host lifecycle, captured before each locally signed EVM submission. */
     captureEvmSubmission?: CaptureEvmSubmission;
+    /** Shared only by software keyrings of the same opted-in host. */
+    sessionOwner?: SessionOwner;
+    deviceUnlock?: {
+        port: DeviceUnlockPort;
+        receive(controls: DeviceUnlockControls): void;
+    };
 }
 export interface ISysAccount {
     address: string;
@@ -57,6 +92,7 @@ declare class SecureBuffer {
     isCleared(): boolean;
 }
 export declare class KeyringCore<TLedger extends KeyringLedgerSigner | undefined = KeyringLedgerSigner | undefined, TTrezor extends KeyringTrezorSigner | undefined = KeyringTrezorSigner | undefined> {
+    #private;
     trezorSigner: TTrezor;
     ledgerSigner: TLedger;
     initialTrezorAccountState: IKeyringAccountState;
@@ -86,9 +122,7 @@ export declare class KeyringCore<TLedger extends KeyringLedgerSigner | undefined
     isUnlocked: () => boolean;
     lockWallet: () => Promise<void>;
     transferSessionTo: (targetKeyring: Pick<KeyringCore, "receiveSessionOwnership">) => void;
-    private acceptSessionFrom;
     receiveSessionOwnership: (sessionPassword: SecureBuffer, sessionMnemonic: SecureBuffer) => void;
-    private replaceSessionBuffers;
     addNewAccount: (label?: string) => Promise<IKeyringAccountState>;
     createSmartAccount: ({ address, deriveAccount, label, metadata, }: ICreateSmartAccountParams) => Promise<IKeyringAccountState>;
     /**
@@ -228,7 +262,6 @@ export declare class KeyringCore<TLedger extends KeyringLedgerSigner | undefined
     private setDerivedWeb3Accounts;
     private setSignerEVM;
     private clearTemporaryLocalKeys;
-    private recreateSessionFromVault;
     private _getPrivateKeyAccountInfos;
     /**
      * Common method to decrypt mnemonic from session

package/types/keyring-manager.d.ts

@@ -2,15 +2,27 @@ import { HardwareWalletManager } from './hardware-wallet-manager';
 import { KeyringCore } from './keyring-core';
 import { LedgerKeyring } from './ledger';
 import { TrezorKeyring } from './trezor';
+import type { DeviceUnlockControls, DeviceUnlockPort, KeyringStoragePort } from './keyring-core';
 import type { LedgerHost } from './ledger/host-types';
 import type { CaptureEvmSubmission } from './transactions/evm-submission';
 import type { IKeyringManager } from './types';
 export type { ISysAccount } from './keyring-core';
+export type { DeviceUnlockControls, DeviceUnlockPort, DeviceUnlockVaultPair, KeyringStoragePort, } from './keyring-core';
+declare const keyringManagerHostBrand: unique symbol;
+/** Opaque identity for one explicitly configured browser wallet authority. */
+export interface KeyringManagerHost {
+    readonly [keyringManagerHostBrand]: true;
+}
+/** Create once for a fixed wallet store and share across replacement managers. */
+export declare function createKeyringManagerHost(storage: KeyringStoragePort, deviceUnlock: DeviceUnlockPort): KeyringManagerHost;
+export type KeyringManagerOptions = {
+    captureEvmSubmission?: CaptureEvmSubmission;
+    host?: KeyringManagerHost;
+    receiveDeviceUnlock?(controls: DeviceUnlockControls): void;
+};
 /** Existing browser entry. Native/software hosts must use the software entry. */
 export declare class KeyringManager extends KeyringCore<LedgerKeyring, TrezorKeyring> implements IKeyringManager {
-    constructor(sharedHardwareWalletManager?: HardwareWalletManager, ledgerHost?: LedgerHost, options?: {
-        captureEvmSubmission?: CaptureEvmSubmission;
-    });
+    constructor(sharedHardwareWalletManager?: HardwareWalletManager, ledgerHost?: LedgerHost, options?: KeyringManagerOptions);
     static createInitialized(seed: string, password: string, vaultStateGetter: () => any, options?: {
         captureEvmSubmission?: CaptureEvmSubmission;
     }): Promise<KeyringManager>;

package/types/ledger/dmk-host.d.ts

@@ -0,0 +1,7 @@
+import { type LedgerEvmConfig, type LedgerHost } from './host-types';
+export interface LedgerDmkHost extends LedgerHost {
+    /** Start before enumerating. The returned capability is single use. */
+    beginDeviceSelection(signal?: AbortSignal): (candidate: object) => Promise<void>;
+}
+/** Shared implementation; the default browser host supplies its own transport. */
+export declare function createLedgerHostForDmk(candidate: object, config: LedgerEvmConfig, requireDeviceSelection?: boolean): LedgerDmkHost;

package/types/ledger/dmk-selected-host.d.ts

@@ -0,0 +1,7 @@
+import { type LedgerDmkHost } from './dmk-host';
+import type { LedgerEvmConfig } from './host-types';
+/** A platform-owned transport and explicit user selection are required. */
+export declare function createSelectedLedgerDmkHost(config: LedgerEvmConfig & {
+    dmk: object;
+}): LedgerDmkHost;
+export type { LedgerDmkHost } from './dmk-host';

package/types/ledger/dmk-session.d.ts

@@ -30,8 +30,9 @@ export interface LedgerDmkOperation {
 /** One owner and one semantic operation at a time, across EVM and UTXO apps. */
 export declare class LedgerDmkSession {
     readonly dmk: DeviceManagementKit;
+    private requireDeviceSelection;
     private generation;
-    private sessionId;
+    private connection;
     private queue;
     private activeCancel;
     private activeAbort;
@@ -39,17 +40,24 @@ export declare class LedgerDmkSession {
     private stateSubscription;
     private connectionAttempt;
     private connectionAbort;
+    private deviceSelection;
     private readonly invalidationListeners;
-    constructor(dmk: DeviceManagementKit);
+    constructor(dmk: DeviceManagementKit, requireDeviceSelection?: boolean);
+    private get readyConnection();
     getStatus(): {
         connected: boolean;
     };
     onInvalidated(listener: () => void): () => void;
     private invalidate;
+    /** The platform passes one candidate from its own current DMK picker. */
+    beginDeviceSelection(signal?: AbortSignal): (candidate: object) => Promise<void>;
     /** Device selection belongs to the visible host, never to a dapp request. */
     connect(request?: {
         useGrantedDevices?: boolean;
     }, options?: LedgerOperationOptions): Promise<void>;
+    private connectionBusy;
+    private startConnection;
+    private discoverDevice;
     private connectDevice;
     /** Cancel revokes the result and closes I/O; it cannot undo on-device approval. */
     disconnect(): Promise<void>;

package/types/ledger-host.d.ts

@@ -1,7 +1,11 @@
-import type { LedgerHost, LedgerEvmConfig } from './ledger/host-types';
+import { type LedgerDmkHost } from './ledger/dmk-host';
+import type { LedgerEvmConfig } from './ledger/host-types';
 export interface LedgerDmkHostConfig extends LedgerEvmConfig {
     /** Platform-owned DMK, allowing a future host to register its own transports. */
     dmk?: object;
+    /** Disable automatic discovery until the platform selects a device. */
+    requireDeviceSelection?: boolean;
 }
-export declare function createLedgerDmkHost(config?: LedgerDmkHostConfig): LedgerHost;
+export declare function createLedgerDmkHost(config?: LedgerDmkHostConfig): LedgerDmkHost;
+export type { LedgerDmkHost } from './ledger/dmk-host';
 export type { LedgerEvmConfig, LedgerBlindSigningIntent, LedgerHost, LedgerEvmHost, LedgerUtxoHost, LedgerUtxoAccount, LedgerPartialSignature, LedgerTypedData, LedgerOperationOptions, LedgerProgress, } from './ledger/host-types';

package/types/software.d.ts

@@ -1,6 +1,6 @@
 /** Software-only entry: explicit host storage, no browser/device initialization. */
 import { KeyringCore } from './keyring-core';
-import type { KeyringStoragePort } from './keyring-core';
+import type { DeviceUnlockControls, DeviceUnlockPort, KeyringStoragePort } from './keyring-core';
 import type { EncryptedEvmHdRuntimeAccount, EvmHdRuntimeAccountOptions, EvmHdRuntimeAccountRequest } from './software-hd-account';
 import type { CaptureEvmSubmission } from './transactions/evm-submission';
 import type { PreparedEvmSigningOptions, PreparedSoftwareEvmSigningRequest, SignedPreparedEvmTransaction } from './transactions/prepared-evm';
@@ -12,9 +12,10 @@ export interface SoftwareKeyringHost {
 /** Create once per wallet authority, then share with its per-network keyrings. */
 export declare const createSoftwareKeyringHost: (storage: KeyringStoragePort, options?: {
     captureEvmSubmission?: CaptureEvmSubmission;
+    deviceUnlock?: DeviceUnlockPort;
 }) => SoftwareKeyringHost;
 export declare class SoftwareKeyring extends KeyringCore<undefined, undefined> {
-    constructor(host: SoftwareKeyringHost);
+    constructor(host: SoftwareKeyringHost, receiveDeviceUnlock?: (controls: DeviceUnlockControls) => void);
     /**
      * Derive a fixed-path Ethereum HD runtime account without network or storage
      * writes. The returned password-encrypted xprv is internal runtime state,
@@ -36,7 +37,7 @@ export declare class SoftwareKeyring extends KeyringCore<undefined, undefined> {
 export { KeyringAccountType } from './types';
 export { INetworkType } from '@sidhujag/sysweb3-network';
 export type { INetwork } from '@sidhujag/sysweb3-network';
-export type { KeyringStoragePort } from './keyring-core';
+export type { DeviceUnlockControls, DeviceUnlockCredential, DeviceUnlockPort, DeviceUnlockVaultPair, KeyringStoragePort, } from './keyring-core';
 export type { IKeyringAccountState } from './types';
 export type { PreparedEvmTransaction, PreparedEvmSigningOptions, PreparedSoftwareEvmSigningRequest, SignedPreparedEvmTransaction, } from './transactions/prepared-evm';
 export type { EncryptedEvmHdRuntimeAccount, EvmHdRuntimeAccountOptions, EvmHdRuntimeAccountRequest, } from './software-hd-account';