@trezor/connect 10.0.0-alpha.1 → 10.0.0-beta.2

package/CHANGELOG.md

@@ -1,63 +1,159 @@
-|             Package              | Stable |     Canary     |
-| :------------------------------: | :----: | :------------: |
-|       npm @trezor/connect        |   -    | 10.0.0-alpha.1 |
-|     npm @trezor/connect-web      |   -    | 10.0.0-alpha.1 |
-| npm @trezor/connect-webextension |   -    | 10.0.0-alpha.1 |
-|    npm @trezor/connect-mobile    |   -    | 10.0.0-alpha.1 |
-
-|     Deployment     | Stable |     Canary     |
-| :----------------: | :----: | :------------: |
-| connect.trezor.io/ |   -    | 10.0.0-alpha.1 |
-
-Use the persistent link [connect.trezor.io/10](https://connect.trezor.io/10/) to access the latest stable version of Connect Explorer.
-
-# 10.0.0-alpha.1
-
-First beta release of version 10.
-This version removes support for legacy iframe and popup integration methods and replaces them with new Suite-based integration.
-
-Features:
-
-- Tron support (`tronGetAddress`, `tronSignTransaction`)
-- `ethereumSignTypedData` now computes `domain_separator_hash` / `message_hash` internally for T1B1 firmware. Callers no longer need to pre-compute hashes via `@trezor/connect-plugin-ethereum`; passing only `data` works for all supported Trezor models. Caller-provided hashes still take precedence for backwards compatibility. Implementation is powered by `viem` and lives in the lazy-loaded ethereum chunk, so non-Ethereum consumers do not pay any bundle cost.
-
-Breaking changes:
-
-- `getAccountDescriptor` has been removed. The per-coin `*GetPublicKey` methods (`getPublicKey`, `ethereumGetPublicKey`, `cardanoGetPublicKey`, `solanaGetPublicKey`, `tezosGetPublicKey`) now return the same fields after the response-shape unification, so the dedicated descriptor entry point is no longer needed. Consumers that previously called `getAccountDescriptor` should call the appropriate `*GetPublicKey` for the target coin. TODO: exact field mapping (e.g. previous `payload.descriptor`) will be documented as part of the `*GetPublicKey` response-shape unification PR.
-- **`@trezor/connect` and every package in its dependency closure now ship ESM only.** Several transitive dependencies (`@noble/curves`, `@noble/hashes`, `@scure/base`, `@scure/bip39`, `@solana/kit`, `@solana-program/*`, `viem`, `node-fetch@3+`) are already ESM-only, so a CJS consumer of `@trezor/connect` cannot statically import them in any case. To keep the build pipeline consistent, the entire connect ecosystem follows suit: `@trezor/connect`, `@trezor/connect-web`, `@trezor/connect-webextension`, `@trezor/connect-mobile`, `@trezor/connect-common`, `@trezor/connect-data`, `@trezor/connect-plugin-ethereum`, `@trezor/connect-plugin-stellar`, `@trezor/blockchain-link`, `@trezor/blockchain-link-utils`, `@trezor/blockchain-link-types`, `@trezor/utxo-lib`, `@trezor/device-authenticity`, `@trezor/address-validator`, `@trezor/utils`, `@trezor/transport`, `@trezor/protobuf`, `@trezor/protocol`, `@trezor/schema-utils`, `@trezor/crypto-utils`, `@trezor/device-utils`, `@trezor/env-utils`, `@trezor/type-utils`, `@trezor/websocket-client`. Migration:
-    - ESM consumer: replace `const TrezorConnect = require('@trezor/connect').default` with `import TrezorConnect from '@trezor/connect'`. Set `"type": "module"` in your `package.json` or use the `.mjs` extension.
-    - CJS consumer that cannot migrate: use a dynamic import — `const TrezorConnect = (await import('@trezor/connect')).default;` — or stay on v9.
-
-Deprecations:
-
-- Remove connect-iframe and connect-popup integration
-- Remove EOS support
-- Remove NEM support
-- `@trezor/connect-plugin-ethereum` is deprecated. Its logic was inlined into `@trezor/connect`. When upgrading to Connect 10, drop your direct dependency on the plugin and remove manual `transformTypedData` calls. The 10.x release of the plugin is a stub that throws a deprecation error pointing at the migration.
-
-Commits:
-
-- chore: remove connect-iframe (372d11f819)
-- feat(connect): tronSignTransaction (57eec2f1a2)
-- feat(connect): tronGetAddress (f5a2bfb6cb)
-- chore(suite-native): remove deprecated node-libs-browser (5ff326e491)
-- test(connect): don't set up emu repeatedly if not necessary (55b93ac8e7)
-- chore: bump webpack-related deps (3f73273dba)
-- chore(connect): remove unsupported fixture (5acfbb81d5)
-- feat(connect): core-in-popup and iframe with popup modes are now removed (a902e2d3cb)
-- fix: use AccountDescriptor as branded type (47f2cc48d5)
-- feat(connect): remove EOS support (16da7214cc)
-- feat(connect): validation for sign message size for T1B1 (d1fb78727e)
-- feat(connect): remove NEM support (b9e7b55832)
-- refactor(connect): use CoreInModule directly (e9a5c47c7d)
-- refactor(connect): flatten TrezorConnectDynamic with CoreInModule (a8038c6a70)
-- chore(connect): move web module into main package (815158241a)
-- chore(connect): remove unsuppoted fixtures from txcache in tests (e5214e5706)
-- chore: bump prettier (3e33cbeee4)
-- ci(connect): expand npm install check to cover both ESM & CJS (c15485ed96)
-- chore(npm): start publishing source maps (36f6e9692d)
-- fix(connect): change THP phase after successful ThpEndResponse (66b6b03416)
-- chore(connect): move thp staticKey from ThpSettings to DeviceThpCredentials (6aa0bc6a06)
-- chore(device-authenticity): extract prepareDeviceAuthenticityData (2e061e4cc2)
-- chore(connect, blockchain-link): validate custom RPCs chainIds (8977871032)
-- feat(suite): implement evm-rpc worker into suite (cdf207e01f)
+> **Upgrading from Connect 9?**
+>
+> - [Migration guide: Connect 9 → 10](https://connect.trezor.io/10.0.0-beta.2/guides/migrating-to-connect-10) — what you need to change in your code, as a checklist.
+> - [New Connect flow in Trezor Suite](https://connect.trezor.io/10.0.0-beta.2/guides/new-connect-flow-in-trezor-suite) — how the Suite-hosted flow works and why.
+
+|             Package              | Stable |    Canary     |
+| :------------------------------: | :----: | :-----------: |
+|       npm @trezor/connect        | 9.7.3  | 10.0.0-beta.2 |
+|     npm @trezor/connect-web      | 9.7.3  | 10.0.0-beta.2 |
+| npm @trezor/connect-webextension | 9.7.3  | 10.0.0-beta.2 |
+|    npm @trezor/connect-mobile    | 9.7.3  | 10.0.0-beta.2 |
+
+|     Deployment     | Stable |    Canary     |
+| :----------------: | :----: | :-----------: |
+| connect.trezor.io/ | 9.7.3  | 10.0.0-beta.2 |
+
+Connect 10 has no stable release yet — use [connect.trezor.io/10.0.0-beta.2](https://connect.trezor.io/10.0.0-beta.2/) to access the prerelease version of Connect Explorer. Once Connect 10 is released, the persistent link [connect.trezor.io/10](https://connect.trezor.io/10/) will point to the latest stable version.
+
+# 10.0.0-beta.2
+
+An incremental prerelease on top of beta.1. It adds a handful of new methods (`sendTransaction`, `composePsbt`, `solanaSignMessage`), EIP-7702 and Stellar Soroban signing, and a Node entry point for `@trezor/connect` built on `@trezor/connect-core`, plus a batch of coin/backend fixes. It also carries several breaking changes — mostly to the UI-event and fee-selection channels used by custom-UI / host integrations, and to a couple of public method/result shapes — so read **Breaking since beta.1** before upgrading.
+
+## New & improved
+
+- **`sendTransaction`** — new Bitcoin method that composes, signs and (optionally, `push`) broadcasts a transaction in one call. This is the replacement for `composeTransaction`'s old signing overload (see Breaking). (919967d6a43)
+- **`composePsbt`** — new device-less method that composes a Bitcoin transaction from PSBT data plus account addresses/UTXOs, returning a precomposed result with `version` and `locktime` (no permissions required). (019eada6052)
+- **`solanaSignMessage`** — new method to sign Solana off-chain messages (OCMS v1): plain text plus optional signer public keys, with the device serializing the envelope. (1611924b04b)
+- **EIP-7702 signing.** `ethereumSignTransaction` now signs EIP-7702 set-code (type-4) transactions — pass `authorizationList` on an EIP-1559 transaction, and the parsed `authorizationList` is returned on the result. (6aeeda9b667)
+- **Stellar Soroban.** `stellarSignTransaction` now supports the `InvokeHostFunction` operation (auth entries, `SorobanTransactionData` extension, full sint64 nonce precision), gated on firmware 2.12.4. (ea9b52e4402)
+- **Node entry point.** `@trezor/connect` now ships a Node build (on top of `@trezor/connect-core`) that injects Bridge and NodeUSB transports by default, so a Node consumer can install only `@trezor/connect` and talk to a device over bridge or USB. Browser (`[bridge, WebUSB]`) and react-native (`[bridge]`) defaults are unchanged. (ce5690f82a7)
+- **`FIRMWARE_TYPE_CHANGED`** — new UI event (payload `{ device }`) emitted during a firmware update when the installed firmware type changes. (c2e11a9572b)
+- `signMessage` accepts an optional `scriptType` param that overrides the script type inferred from the derivation path (e.g. for custom purpose-45 paths). (390fdd4c819)
+- `getAccountInfo` and `discoverAccounts` now accept index-less **root** derivation paths (min path length 2) for single-account coin types, e.g. the Solana root path. (31fe1d9f725)
+- `getAccountInfo` and `blockchainEstimateFee` accept a new optional `privatePending` param (in-flight nonces/txids) for EVM blockbook discovery. (754da40740d)
+- `@trezor/connect-common` now exports `GRANTABLE_PERMISSIONS`, the canonical allowlist of upfront-grantable permission scopes for building `requestedPermissions` UIs. (5a8804c06f9)
+- New `test-unsigned-nightly` value on the public `FirmwareChannel` type (a nightly/dev release channel). (fe1eb6ac0ed)
+
+## Behavior & fixes
+
+- **Named EVM inputs resolve to hex.** `getAccountInfo` now returns the backend-resolved hex address in `descriptor` for named EVM inputs (e.g. `.eth`), instead of echoing the name back. (de776b8cc76)
+- **Pending BTC tx size.** The optimistic pending Bitcoin transaction now reports `size` in bytes (`byteLength`) instead of weight units (~4×), matching blockbook's byte-valued `size`. (2ec843049c0)
+- **EVM slip44.** `getCoinInfo` now returns `slip44: 60` for every EVM network except ETC (61), rather than per-chain registry values — e.g. RHC and HYPE change from 4663/999 to 60. (8c4cbf2bf44)
+- **`selectAccount` unsupported coins.** A Connect-valid but Suite-unmodeled coin (dash, dgb, xtz, testnets, …) is now rejected up front with the distinct `Method_UnsupportedCoinForHost` error instead of a generic modal. (2877a16d71d)
+- **Manifest name sanitizing.** `manifest.appName` (and THP `hostName`) are sanitized — control chars stripped, whitespace runs collapsed, trimmed; a name that becomes empty is rejected. `appName` is also now strictly required at manifest parse (as beta.1 announced). (c6a11d3a93b, fe8e15c7fe7)
+- **Solana.** `solanaSignTransaction` no longer fails precompose for transactions using address lookup tables (467c4002c3f), and rejects unsupported v1 transactions upfront with `Method_InvalidParameter` (d24fa8a5d8c). `solanaComposeTransaction` now returns token metadata (`newAccountProgramName`, `tokenAccountInfo`) in `additionalInfo` for pre-serialized token transfers, fixing Solana token trades. (bb7502fedc8)
+- **Backend reconnect back-off.** A dropped blockchain backend no longer triggers a tight reconnect loop / Solana reconnect storm — reconnect delay is clamped to 1–20s, the attempt counter resets only after a connection holds for 30s, and back-off attempts reject with `Backend_Disconnected` rather than forcing an immediate re-sync (explicit reconnects still bypass the wait). (f02219132e6, d1fc98016c3)
+- **TRON.** Default fee info now exposes real `minFee=1` / `maxFee=15,000,000,000` SUN instead of the `-1`/unknown placeholders (f124fe96ceb), and TRX/tTRX block notifications are throttled together with EVM at ~12s per block event (2524bc4d2ca).
+- `ethereumSignTypedData` no longer requires the `eip712-domain-only` firmware capability for `EIP712Domain`-only payloads. (d4ead6f1780)
+- **BTC custom-fee fallback** now composes a single transaction at the coin's `minFee` instead of scanning fees down from the top level, changing which custom fee is offered when no standard level is affordable. (7988531569c)
+- **Firmware rollout bucketing** no longer permanently excludes the ~1% of devices that hash into the top bucket, even at 100% rollout. (3debf109035)
+- On THP devices, the PIN matrix is now requested **before** the passphrase entry. (b2c3d73ce4c)
+
+## Breaking since beta.1
+
+These mostly affect **custom-UI and host (Suite-style) integrations**; a couple touch public method/result shapes.
+
+- **`UI_EVENT` split.** The public `UI_REQUEST` constant map is split into `UI_EVENTS` (fire-and-forget notifications) and `UI_REQUESTS` (messages needing a `UI_RESPONSE`), a new `UI_REQUEST`/`UI_REQUESTS` event channel is added, and several members are renamed (e.g. `TRANSPORT`→`TRANSPORT_MISSING`, `INVALID_PIN`→`PIN_INVALID`). The event payloads were also reshaped: `requestId` was removed from `UI_EVENT` payloads (`callId` remains) and is now emitted on standalone `UI_REQUEST` payloads. Migrate `UI_REQUEST.*` references to `UI_EVENTS.*` / `UI_REQUESTS.*`. (8d5768be292, b372b090361, f26a6147e01)
+- **`composeTransaction` is precompose-only.** Its signing/broadcast overload (`ComposeParams` → `SignedTransaction`, including `push`) is removed — migrate signing+push flows to the new `sendTransaction`. (919967d6a43)
+- **`ethereumGetPublicKey.displayablePublicKey`** is now the hex-encoded compressed public key (byte-identical to `publicKey`, matching what firmware shows on screen) instead of the xpub. (a508e4ab6e4)
+- **`blockchainEvmRpcGetChainId`** (formerly `blockchainValidateEvmRpcUrl` in beta.1) now takes only `{ url }` and returns `{ chainId }`, instead of validating a supplied chainId and returning `{ valid, actualChainId }`. (39fa982888d)
+- **`SELECT_FEE` event** payload now carries `feeLevels` as `FeeLevel[]` (only composable/valid levels), and the `SelectFeeLevel` type is removed from `@trezor/connect-common`. (a300e1be087)
+- **`RECEIVE_FEE` response** payload is restructured: use `{ type: 'select-fee', value }` and `{ type: 'select-fee-custom', value }` (replacing `'compose-custom'` / `'send'`). (eedb2fdde5f)
+- **`UPDATE_CUSTOM_FEE` UI event removed.** The `ui-update_custom_fee` member of the `UI_REQUEST` map and its `UpdateCustomFee` type are removed from `@trezor/connect-common`; custom-UI code that listened for it should drop the handler. (4f5b240fcb0)
+- **`KnownDevice.availableTranslations`** now maps language codes to `TranslationMetadata` objects instead of plain strings. (26f0cd334c5)
+
+# 10.0.0-beta.1
+
+Connect 10 moves the Connect core out of the self-hosted iframe + popup and into **Trezor Suite**, which now hosts the core and renders every approval, PIN, passphrase and confirmation screen. Your app stays a thin client calling the same `TrezorConnect` methods — nothing to install, and it works whether or not Suite desktop is running. Alongside the move, the SDK gains a privacy-friendly account picker (`selectAccount`), granular per-coin permissions, and much smaller ESM-only client packages.
+
+## Highlights
+
+### 1. New Connect flow, powered by Trezor Suite
+
+The legacy web popup/iframe integration has been **removed** and replaced by a flow that runs inside Trezor Suite. Connect is now a thin client that routes each call to Suite; Suite owns the core and the entire user-facing experience. It works on both desktop and web:
+
+- **Desktop** — when Trezor Suite (desktop) is running, Connect talks to it automatically over a local (loopback) WebSocket connection — no popup window, no iframe. Suite identifies the calling application (name, origin, icon) in a single permission-approval prompt, then handles the request against the currently active, already-unlocked device.
+- **Web** — when Suite desktop is not running, Connect opens Suite Web as the approval surface (production: `https://suite.trezor.io/web/connect-popup`), giving the same flow with nothing to install. This is a first-class path, not a degraded mode; in the default `'auto'` mode Connect prefers desktop and switches back to it automatically as soon as it becomes available.
+- **Mobile** — `@trezor/connect-mobile` routes calls to the Trezor Suite mobile app via a deep link.
+
+We strongly recommend keeping the default **`coreMode: 'auto'`**: users who have Trezor Suite desktop installed get the fastest, most convenient experience (a direct local connection), while everyone else falls back to Suite Web seamlessly. You can pin `coreMode` to `'suite-desktop'` or `'suite-web'` if you have a specific reason to.
+
+The web flow relies on a bootstrap iframe + popup to exchange messages with Suite Web, so integrator pages must ship the right headers for that channel to work: a Content-Security-Policy that permits embedding the Suite Web origin (`frame-src`/`child-src` for `https://suite.trezor.io`), and a `Cross-Origin-Opener-Policy` that does not sever the popup's `window.opener` (avoid `same-origin` on the hosting page — use `same-origin-allow-popups` or `unsafe-none`). Missing or over-strict headers surface as a handshake timeout when the popup opens.
+
+Because the active device is chosen and unlocked **in Suite**, users no longer pick a device or re-enter a passphrase per request as they did in the old popup — passphrase handling is centralized in Suite's device management (see the [passphrases & hidden wallets guide](https://trezor.io/guides/backups-recovery/advanced-wallets/passphrases-and-hidden-wallets) and the [New Connect flow in Trezor Suite guide](https://connect.trezor.io/10.0.0-beta.1/guides/new-connect-flow-in-trezor-suite)).
+
+**Required manifest change:** `manifest.appName` is now **required**, and an optional `manifest.appIcon` (URL, sized for a 64px circle) is shown in Suite's permission prompt.
+
+```javascript
+TrezorConnect.init({
+    manifest: {
+        email: 'developer@xyz.com',
+        appName: 'Your Application',
+        appUrl: 'https://your.application.com',
+        appIcon: 'https://your.application.com/icon-64.png',
+    },
+});
+```
+
+### 2. `selectAccount` — private, friendlier account selection
+
+New method for asking the user to choose one or more accounts, replacing the old "call `getAccountInfo` with no path to trigger on-device discovery" pattern. The picker, derivation and on-device verification run entirely inside Suite.
+
+- **More private:** for UTXO coins you can request only what you need. `addressSelection: 'firstFresh' | 'manual'` exports a single **address** (with an optional SLIP-0019 `mac` to later re-prove device ownership) and never reveals the account xpub — requiring only the narrow `read_address` permission. The full-account/watch-only flow (`addressSelection: 'fullAccount'`, the default) shares the xpub and requires `read_xpub`. Account-based networks (EVM, Solana, …) always return an individual address.
+- **Better UX:** `selectionType` supports `'single'` (default), `'multi'`, or bounded multi-select (`{ minCount, maxCount }`); `accountType` filters/tabs the allowed derivation types (including custom `bip43Path` templates); `requireOnDeviceVerification` (default `true`) controls device confirmation.
+- Always returns an array of `{ symbol, path, address? | xpub?, accountType?, mac? }`, even for a single selection.
+
+### 3. Granular, per-coin permissions
+
+Permissions are no longer coarse read/write grants. Each method requires narrow scopes (such as `read_address`, `read_xpub`, `sign`, `sign_message`), scoped to a specific coin where relevant, and Suite groups them by coin in the approval prompt. Scopes are intentionally non-overlapping — e.g. granting `read_address` does **not** also grant `read_xpub` — so an app only ever gets access to what it actually uses.
+
+### 4. Much lighter client packages
+
+Because the Connect core now lives in Trezor Suite, the packages that third-party apps install (`@trezor/connect-web`, `-webextension`, `-mobile`) are thin clients that just route calls to Suite. They no longer bundle the core's heavy dependencies (transports, crypto, coin logic), so installs and bundles are dramatically smaller. As part of this, coin-family code has been reorganized into per-network packages (the former `@trezor/coins-*` are renamed to `@trezor/network-*`) that load their heavier dependencies on demand.
+
+### New coins & method improvements
+
+- **Tron** support (`tronGetAddress`, `tronSignTransaction`), backed by the new `@trezor/network-tron` package.
+- `solanaSignTransaction` accepts a `chunkify` flag that renders addresses on the device in 4-character chunks, matching `solanaGetAddress` and other coins' sign flows (requires firmware with chunked-address support in the Solana `SignTx` flow).
+- `ethereumSignTypedData` now computes the required hashes internally for T1B1 firmware, so callers no longer need `@trezor/connect-plugin-ethereum` to pre-compute them — passing only `data` works on all models (caller-provided hashes still take precedence).
+- The `*GetPublicKey` methods (`getPublicKey`, `ethereumGetPublicKey`, `cardanoGetPublicKey`, …) now share a **unified response shape** across coins, including a canonical `displayablePublicKey` string that any consumer can render without per-coin branching. This unification is also why the dedicated `getAccountDescriptor` method could be removed (see Breaking changes).
+
+## Breaking changes
+
+The [migration guide](https://connect.trezor.io/10.0.0-beta.1/guides/migrating-to-connect-10) turns the changes below into a step-by-step checklist with before/after code.
+
+### Integration & packaging
+
+- **Legacy iframe + popup integration removed.** `core-in-popup` and iframe-with-popup modes no longer exist; use the Suite-based flow above. `connect-iframe` has been removed.
+- **`manifest.appName` is now required** (see Highlights).
+- **ESM-only.** `@trezor/connect` and its dependency closure now ship ESM only. ESM consumers just `import TrezorConnect from '@trezor/connect'`; a CJS consumer that cannot migrate can use a dynamic `import()` or stay on v9.
+- **Public vs privileged API split.** The client packages now expose a public API (`TrezorConnectPublicAPI`) while `@trezor/connect` exposes the full privileged one (`TrezorConnectPrivilegedAPI`) used by Suite. The public tier drops everything that is Suite's responsibility — device-management methods (`applyFlags`, `applySettings`, `authenticateDevice`, `backupDevice`, `bleUnpair`, `changeLanguage`, `changePin`, `changeWipeCode`, `getFirmwareHash`, `getNonce`, `getSettings`, `loadDevice`, `pingDevice`, `recoveryDevice`, `resetDevice`, `setBrightness`, `setBusy`, `telemetryGet`, `thpGetCredentials`, `thpRemoveCredentials`, `wipeDevice`) are no longer callable from third-party integrations. Public `TrezorConnect` objects are now class instances, so `Object.keys(...)` enumeration and monkeypatching no longer work.
+- **Thin packages lost their event/settings API.** `on`/`off`/`removeAllListeners`, `uiResponse` and `updateConnectSettings` are removed from the public tier (they were already non-functional in v10, since the host Core does not forward them); calling them now throws `TypeError`.
+- **Type/factory renames.** The exported `TrezorConnect` type is replaced by `TrezorConnectPublicAPI` / `TrezorConnectPrivilegedAPI`, and the `factory` function by `factoryPublic` / `factoryPrivileged`. The API-schema values (`TrezorConnectCallable`, `TrezorConnectBitcoin`, …) are no longer exported as runtime values — the names remain as types only.
+
+### Methods & parameters
+
+- **`coin` accepts the coin shortcut only** (the `CoinSymbol` set — e.g. `btc`, `bch`, `ada`), narrowed from `string`. Network **names** and **labels** (e.g. `'Bitcoin'`, `'Bitcoin Cash'`) are no longer accepted and now fail both at compile time and at runtime. The shortcut itself is still matched case-insensitively at runtime, so `coin: 'BTC'` works — but the `CoinSymbol` type lists the canonical lowercase forms, so TypeScript users should pass lowercase to type-check. Resolution is uniform across all coin families. Migrate names/labels to the shortcut: `'Bitcoin' → 'btc'`, `'Bitcoin Cash' → 'bch'`, `'cardano' → 'ada'`, etc. Path-taking methods (`getAddress`, `getPublicKey`, …) derive the network from `path` when given a former name/label; methods without a path fallback (`getAccountInfo`, `selectAccount`, `verifyMessage`, `composeTransaction`, `signTransaction`, `signMessage`, `getOwnershipId`, `getOwnershipProof`, the `blockchain*` family) throw `Method_UnknownCoin`. Full list: [supported coins](https://connect.trezor.io/10.0.0-beta.1/details/coins).
+- **`getPublicKey` is restricted to bitcoin-like coins.** In v9, a non-bitcoin `coin` (e.g. `'eth'`) silently fell back to Bitcoin and returned a btc xpub. Now the network must resolve to a bitcoin-like coin — from `coin`, or failing that from the derivation `path` — otherwise the call throws `Method_UnknownCoin`. Use the per-coin methods (`ethereumGetPublicKey`, `cardanoGetPublicKey`, …) for other networks.
+- **`getAccountDescriptor` removed.** The per-coin `*GetPublicKey` methods now return the same fields. Field mapping: `payload.descriptor` → Bitcoin `result.descriptor` (non-Bitcoin coins: use `result.displayablePublicKey`); `payload.path` → `result.serializedPath` on every `*GetPublicKey`; generic consumers should read `result.displayablePublicKey`.
+- **`getAccountInfo` no longer performs on-device discovery.** Calling it without `path` or `descriptor` now throws `Method_InvalidParameter` (`path or descriptor is required`) instead of opening a device-driven selection popup. Provide `path` (derive on device, then query backend) or `descriptor` (backend-only). For the old discovery behavior, use `discoverAccounts` — or `selectAccount` for user-facing selection.
+- **`cardanoGetPublicKey`:** `publicKey` is now the raw 32-byte key in hex (consistent with other coins); the Cardano extended public key moved to the new explicit `xpub` field (also available via `displayablePublicKey`).
+- **`useCardanoDerivation` removed.** Cardano session derivation is now driven by an app-level `enabledNetworks` declaration passed to `TrezorConnect.init({ enabledNetworks: [{ coin: 'ada' }] })` (or `updateConnectSettings` for in-process Core hosts). Note: `enabledNetworks` is honored only by the in-process `@trezor/connect`; on the thin packages, Cardano availability follows the host Suite wallet's enabled coins.
+
+### Transports
+
+These mostly affect apps that run their own Connect core (`@trezor/connect`); most integrations use the client packages and can skip this.
+
+- **Transports must be passed as instances.** `transports` no longer accepts string identifiers (`'BridgeTransport'`, …) or classes — pass fully constructed `Transport` instances, e.g. `import { BridgeTransport } from '@trezor/transport-common'; init({ transports: [new BridgeTransport({ id: 'my-app' })] })`. For WebUSB use `@trezor/transport-web`; avoid the Node-only `@trezor/transport` barrel in web/React Native bundles.
+- **`disableWebUSB()` removed** — use `updateConnectSettings({ transports })` with a filtered list instead.
+- **Legacy `trezord-go` Bridge (port `21325`) is no longer supported** and `TransportInfo.outdated` is removed; detecting an outdated Bridge is now the consumer app's job.
+
+## Removed & deprecated
+
+- **Removed coin support.** Coins that no current device supports have been dropped from the coin definitions. [Supported coins](https://connect.trezor.io/10.0.0-beta.1/details/coins) is the current list — if your integration names a coin that is not on it, remove that support.
+- **`@trezor/connect-plugin-ethereum` deprecated.** Its logic is inlined into `@trezor/connect`. Drop the direct dependency and remove manual `transformTypedData` calls. The 10.x plugin is a stub that throws a deprecation error pointing at the migration.
+
+## Previous versions
+
+Changelogs for Connect 9 and earlier are available at [connect.trezor.io/9](https://connect.trezor.io/9/).

package/README.md

@@ -1,6 +1,6 @@
 # @trezor/connect
 
-API version 10.0.0-alpha.1
+API version 10.0.0-beta.2
 
 [![NPM](https://img.shields.io/npm/v/@trezor/connect.svg)](https://www.npmjs.org/package/@trezor/connect)
 
@@ -8,6 +8,8 @@ Trezor Connect is a platform for easy integration of Trezor into 3rd party servi
 
 This package is intended to be used in node.js environment. If you wan't to build a web application please refer to [@trezor/connect-web package](https://github.com/trezor/trezor-suite/blob/develop/packages/connect-web/README.md).
 
+It runs Connect in-process: it composes the execution engine from [@trezor/connect-core](https://github.com/trezor/trezor-suite/blob/develop/packages/connect-core/README.md) and supplies the node transports, Trezor Bridge first and direct USB (from [@trezor/transport](https://www.npmjs.com/package/@trezor/transport)) as the fallback. No extra package or transport wiring is needed; `init({ manifest })` is enough. Passing a non-empty `transports` list replaces the defaults.
+
 > **Building a web app?** Use [@trezor/connect-web](https://www.npmjs.com/package/@trezor/connect-web) instead — it adds browser transport handling and popup-based UI.
 >
 > **Building a browser extension?** Use [@trezor/connect-webextension](https://www.npmjs.com/package/@trezor/connect-webextension) instead — it handles Manifest V3 and service worker constraints.
@@ -40,7 +42,7 @@ For more instructions [refer to this document](https://github.com/trezor/trezor-
 
 ## Versioning
 
-Version 10 is the current major version and is currently in alpha. New major versions are released when there are breaking API changes. Information about legacy versions can be found in [README_LEGACY.md](./README_LEGACY.md).
+Version 10 is the current major version and is currently in beta. New major versions are released when there are breaking API changes.
 
 ## Docs
 
@@ -52,4 +54,4 @@ A collection of examples on how to implement @trezor/connect in various environm
 
 ## Tests
 
-For integration testing against trezord and emulator refer to [this document](https://github.com/trezor/trezor-suite/blob/develop/packages/connect/e2e/README.md).
+For integration testing against trezord and emulator refer to [this document](https://github.com/trezor/trezor-suite/blob/develop/packages/connect-core/e2e/README.md).

package/lib/exports.d.ts

@@ -0,0 +1 @@
+export * from '@trezor/connect-core/lib/exports';

package/lib/exports.js

@@ -0,0 +1 @@
+export * from "@trezor/connect-core/lib/exports.js";

package/lib/impl/core-in-module-native.d.ts

@@ -0,0 +1,7 @@
+import { type UpdateConnectSettings } from '@trezor/connect-common';
+import { CoreInModule } from '@trezor/connect-core/lib/impl/core-in-module';
+import { type AbstractTransportParams, BridgeTransport } from '@trezor/transport-common';
+export declare class CoreInModuleNative extends CoreInModule {
+  protected defaultTransports(params: AbstractTransportParams): BridgeTransport[];
+  protected updateProxy(proxy: UpdateConnectSettings['proxy']): Promise<void>;
+}

package/lib/impl/core-in-module-native.js

@@ -0,0 +1,11 @@
+import { updateProxy } from "@trezor/connect-core/lib/backend/BlockchainLink.js";
+import { CoreInModule } from "@trezor/connect-core/lib/impl/core-in-module.js";
+import { BridgeTransport } from "@trezor/transport-common";
+export class CoreInModuleNative extends CoreInModule {
+  defaultTransports(params) {
+    return [new BridgeTransport(params)];
+  }
+  async updateProxy(proxy) {
+    await updateProxy(proxy);
+  }
+}

package/lib/impl/core-in-module-node.d.ts

@@ -0,0 +1,8 @@
+import { type UpdateConnectSettings } from '@trezor/connect-common';
+import { CoreInModule } from '@trezor/connect-core/lib/impl/core-in-module';
+import { NodeUsbTransport } from '@trezor/transport';
+import { type AbstractTransportParams, BridgeTransport } from '@trezor/transport-common';
+export declare class CoreInModuleNode extends CoreInModule {
+  protected defaultTransports(params: AbstractTransportParams): (BridgeTransport | NodeUsbTransport)[];
+  protected updateProxy(proxy: UpdateConnectSettings['proxy']): Promise<void>;
+}

package/lib/impl/core-in-module-node.js

@@ -0,0 +1,12 @@
+import { updateProxy } from "@trezor/connect-core/lib/backend/BlockchainLink.js";
+import { CoreInModule } from "@trezor/connect-core/lib/impl/core-in-module.js";
+import { NodeUsbTransport } from "@trezor/transport";
+import { BridgeTransport } from "@trezor/transport-common";
+export class CoreInModuleNode extends CoreInModule {
+  defaultTransports(params) {
+    return [new BridgeTransport(params), new NodeUsbTransport(params)];
+  }
+  async updateProxy(proxy) {
+    await updateProxy(proxy);
+  }
+}

package/lib/impl/core-in-module-web.d.ts

@@ -0,0 +1,9 @@
+import { type UpdateConnectSettings } from '@trezor/connect-common';
+import { CoreInModule } from '@trezor/connect-core/lib/impl/core-in-module';
+import { type AbstractTransportParams, BridgeTransport } from '@trezor/transport-common';
+import { WebUsbTransport } from '@trezor/transport-web';
+export declare class CoreInModuleWeb extends CoreInModule {
+  protected defaultTransports(params: AbstractTransportParams): (BridgeTransport | WebUsbTransport)[];
+  protected updateProxy(proxy: UpdateConnectSettings['proxy']): Promise<void>;
+  requestWebUSBDevice(): Promise<void>;
+}

package/lib/impl/core-in-module-web.js

@@ -0,0 +1,26 @@
+import { ERRORS } from "@trezor/connect-common";
+import { config } from "@trezor/connect-core/lib/data/config.js";
+import { CoreInModule } from "@trezor/connect-core/lib/impl/core-in-module.js";
+import { BridgeTransport, TRANSPORT } from "@trezor/transport-common";
+import { WebUsbTransport } from "@trezor/transport-web";
+export class CoreInModuleWeb extends CoreInModule {
+  defaultTransports(params) {
+    return [new BridgeTransport(params), new WebUsbTransport(params)];
+  }
+  updateProxy(proxy) {
+    if (proxy !== undefined) {
+      throw ERRORS.TypedError('Method_InvalidPackage', 'proxy setting is not supported in web environment');
+    }
+    return Promise.resolve();
+  }
+  async requestWebUSBDevice() {
+    try {
+      await window.navigator.usb.requestDevice({
+        filters: config.webusb
+      });
+      this.handleCoreMessage({
+        type: TRANSPORT.REQUEST_DEVICE
+      });
+    } catch {}
+  }
+}

package/lib/index.browser.d.ts

@@ -0,0 +1,7 @@
+import { type TrezorConnectPrivilegedAPI } from '@trezor/connect-common';
+type TrezorConnectBrowserAPI = TrezorConnectPrivilegedAPI & {
+  requestWebUSBDevice: () => Promise<void>;
+};
+declare const TrezorConnect: TrezorConnectBrowserAPI;
+export default TrezorConnect;
+export * from "./exports.js";

package/lib/index.browser.js

@@ -0,0 +1,10 @@
+import { factoryPrivileged } from "@trezor/connect-common";
+import { CoreInModuleWeb } from "./impl/core-in-module-web.js";
+const TrezorConnect = factoryPrivileged(new CoreInModuleWeb());
+export default TrezorConnect;
+export * from "./exports.js";
+if (typeof window !== 'undefined') {
+  window.addEventListener('beforeunload', () => {
+    TrezorConnect.dispose();
+  });
+}

package/lib/index.d.ts

@@ -0,0 +1,4 @@
+import { type TrezorConnectPrivilegedAPI } from '@trezor/connect-common';
+declare const TrezorConnect: TrezorConnectPrivilegedAPI;
+export default TrezorConnect;
+export * from "./exports.js";

package/lib/index.js

@@ -0,0 +1,5 @@
+import { factoryPrivileged } from "@trezor/connect-common";
+import { CoreInModuleNode } from "./impl/core-in-module-node.js";
+const TrezorConnect = factoryPrivileged(new CoreInModuleNode());
+export default TrezorConnect;
+export * from "./exports.js";

package/lib/index.native.d.ts

@@ -0,0 +1,4 @@
+import { type TrezorConnectPrivilegedAPI } from '@trezor/connect-common';
+declare const TrezorConnect: TrezorConnectPrivilegedAPI;
+export default TrezorConnect;
+export * from "./exports.js";

package/lib/index.native.js

@@ -0,0 +1,5 @@
+import { factoryPrivileged } from "@trezor/connect-common";
+import { CoreInModuleNative } from "./impl/core-in-module-native.js";
+const TrezorConnect = factoryPrivileged(new CoreInModuleNative());
+export default TrezorConnect;
+export * from "./exports.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@trezor/connect",
-  "version": "10.0.0-alpha.1",
+  "version": "10.0.0-beta.2",
   "type": "module",
   "author": "Trezor <info@trezor.io>",
   "homepage": "https://github.com/trezor/trezor-suite/tree/develop/packages/connect",
@@ -19,128 +19,75 @@
     "javascript"
   ],
   "sideEffects": false,
-  "main": "./libESM/index.mjs",
+  "main": "./lib/index.js",
   "browser": {
-    "./libESM/index.mjs": "./libESM/index.browser.mjs",
-    "./libESM/utils/assets.mjs": "./libESM/utils/assets.browser.mjs",
-    "./libESM/workers/workers.mjs": "./libESM/workers/workers.browser.mjs",
-    "./libESM/data/*": "./libESM/data/*",
-    "./libESM/exports.mjs": "./libESM/exports.mjs",
-    "./libESM/impl/*": "./libESM/impl/*",
-    "./libESM/utils/*": "./libESM/utils/*"
+    "./lib/index.js": "./lib/index.browser.js",
+    "./lib/exports.js": "./lib/exports.js"
   },
   "react-native": {
-    "./src/index": "./src/index.ts",
-    "./src/index.ts": "./src/index.ts",
-    "./src/utils/assets": "./src/utils/assets.native.ts",
-    "./src/workers/workers": "./src/workers/workers.native.ts"
+    "./src/index": "./src/index.native.ts",
+    "./src/index.ts": "./src/index.native.ts"
   },
   "publishConfig": {
-    "main": "./libESM/index.mjs",
-    "types": "./libESM/index.d.mts",
+    "main": "./lib/index.js",
+    "types": "./lib/index.d.ts",
     "exports": {
       ".": {
-        "types": "./libESM/index.d.mts",
-        "default": "./libESM/index.mjs"
+        "types": "./lib/index.d.ts",
+        "default": "./lib/index.js"
       },
-      "./libESM/*": "./libESM/*"
+      "./lib/*": "./lib/*"
     },
     "browser": {
-      "./libESM/index.mjs": "./libESM/index.browser.mjs",
-      "./libESM/utils/assets.mjs": "./libESM/utils/assets.browser.mjs",
-      "./libESM/workers/workers.mjs": "./libESM/workers/workers.browser.mjs",
-      "./libESM/data/*": "./libESM/data/*",
-      "./libESM/exports.mjs": "./libESM/exports.mjs",
-      "./libESM/impl/*": "./libESM/impl/*",
-      "./libESM/utils/*": "./libESM/utils/*"
+      "./lib/index.js": "./lib/index.browser.js",
+      "./lib/exports.js": "./lib/exports.js"
     },
     "react-native": {
-      "./libESM/index.mjs": "./libESM/index.mjs",
-      "./libESM/utils/assets.mjs": "./libESM/utils/assets.native.mjs",
-      "./libESM/workers/workers.mjs": "./libESM/workers/workers.native.mjs",
-      "./libESM/data/*": "./libESM/data/*",
-      "./libESM/exports.mjs": "./libESM/exports.mjs",
-      "./libESM/impl/*": "./libESM/impl/*",
-      "./libESM/utils/*": "./libESM/utils/*"
+      "./lib/index.js": "./lib/index.native.js",
+      "./lib/exports.js": "./lib/exports.js"
     }
   },
   "files": [
-    "libESM/",
+    "lib/",
     "CHANGELOG.md"
   ],
   "scripts": {
-    "test:unit": "jest --version && jest",
+    "test:unit": "yarn g:jest",
     "depcheck": "yarn g:depcheck",
     "type-check": "yarn g:tsc --build",
-    "build:lib": "yarn g:rimraf ./libESM && yarn g:tsc --build tsconfig.libESM.json && ../../scripts/publish/replace-imports.sh ./libESM esm",
+    "build:lib": "yarn g:rimraf ./lib && yarn g:tsc --build tsconfig.lib.json && ../../scripts/publish/replace-imports.sh ./lib",
     "version:prerelease": "yarn g:tsx scripts/bump-version.ts prerelease",
     "version:patch": "yarn g:tsx scripts/bump-version.ts patch",
     "version:prepatch": "yarn g:tsx scripts/bump-version.ts prepatch",
     "version:minor": "yarn g:tsx scripts/bump-version.ts minor",
     "version:preminor": "yarn g:tsx scripts/bump-version.ts preminor",
     "version:major": "yarn g:tsx scripts/bump-version.ts major",
-    "test:e2e:web": "yarn g:tsx ./e2e/run.ts web",
-    "test:e2e:node": "yarn g:tsx ./e2e/run.ts node",
     "lint:js": "yarn g:eslint '**/*.{ts,tsx,js}'"
   },
   "dependencies": {
-    "@bufbuild/protobuf": "^2.11.0",
-    "@ethereumjs/common": "^10.1.1",
-    "@ethereumjs/tx": "^10.1.1",
-    "@fivebinaries/coin-selection": "3.0.0",
-    "@noble/hashes": "^2.0.1",
-    "@scure/base": "^2.0.0",
-    "@scure/bip39": "^1.5.1",
-    "@trezor/blockchain-link": "10.0.0-alpha.1",
-    "@trezor/blockchain-link-types": "10.0.0-alpha.1",
-    "@trezor/coins-solana": "10.0.0-alpha.1",
-    "@trezor/connect-common": "10.0.0-alpha.1",
-    "@trezor/connect-data": "10.0.0-alpha.1",
-    "@trezor/crypto-utils": "10.0.0-alpha.1",
-    "@trezor/device-authenticity": "10.0.0-alpha.1",
-    "@trezor/device-utils": "10.0.0-alpha.1",
-    "@trezor/protobuf": "10.0.0-alpha.1",
-    "@trezor/protocol": "10.0.0-alpha.1",
-    "@trezor/schema-utils": "10.0.0-alpha.1",
-    "@trezor/transport": "10.0.0-alpha.1",
-    "@trezor/type-utils": "10.0.0-alpha.1",
-    "@trezor/utils": "10.0.0-alpha.1",
-    "@trezor/utxo-lib": "10.0.0-alpha.1",
-    "cbor": "^10.0.12",
-    "cross-fetch": "^4.1.0",
-    "jws": "^4.0.1",
-    "viem": "^2.48.1"
+    "@trezor/connect-common": "10.0.0-beta.2",
+    "@trezor/connect-core": "10.0.0-beta.2",
+    "@trezor/transport": "10.0.0-beta.2",
+    "@trezor/transport-common": "10.0.0-beta.2",
+    "@trezor/transport-web": "10.0.0-beta.2"
   },
   "devDependencies": {
-    "@babel/preset-typescript": "^7.28.5",
     "@trezor/eslint": "1.0.0",
-    "@trezor/trezor-user-env-link": "1.0.2",
-    "@types/jws": "^3.2.11",
+    "@trezor/requirements": "1.0.0",
+    "@types/jest": "30.0.0",
     "@types/node": "22.13.10",
     "@types/w3c-web-usb": "^1.0.14",
-    "@vitest/browser-playwright": "^4.1.4",
-    "crypto-browserify": "3.12.1",
-    "jest": "29.7.0",
-    "node-fetch": "^3.3.2",
-    "process": "^0.11.10",
-    "stream-browserify": "^3.0.0",
-    "tsx": "^4.21.0",
-    "vite-plugin-node-polyfills": "^0.26.0",
-    "vite-plugin-wasm": "^3.6.0",
-    "vitest": "^4.1.4",
-    "vm-browserify": "^1.1.2",
-    "web3-utils": "^4.3.3",
-    "ws": "^8.20.0"
+    "tsx": "^4.21.0"
   },
   "peerDependencies": {
     "tslib": "^2.6.2"
   },
   "exports": {
     ".": {
-      "types": "./libESM/index.d.mts",
-      "default": "./libESM/index.mjs"
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
     },
-    "./libESM/*": "./libESM/*"
+    "./lib/*": "./lib/*"
   },
-  "types": "./libESM/index.d.mts"
+  "types": "./lib/index.d.ts"
 }