Feat/ton sign data (#778)

* feat(ton): add tonSignData method for TON Connect v2 signData

- New `tonSignData` method dispatching firmware TonSignData/TonSignedData
  for text/binary/cell payload signing, mirroring the TonSignProof shape.
- Re-export TonSignDataType as a runtime value from @onekeyfe/hd-core so
  consumers can use the enum (previously only re-exported as a type, so
  `TonSignDataType.TEXT` threw at runtime).
- Map firmware Failure_PinMismatch to new HardwareErrorCode.PinMismatch
  (828); surfaced only in set/change-PIN flows, so not added to the
  session-release list.
- Regenerate hd-transport messages.ts and core messages.json from the
  updated firmware proto.

* refactor(hwk-ledger-adapter): unify UI events and legacy SDK lifecycle

App-side now subscribes hardware UI events from a single hw.on(...) bus
instead of mixing connector.on('ui-event') with hw.on(UI_REQUEST.X).
LedgerAdapter forwards the connector 'ui-event' channel onto its own
emitter so the four EConnectorInteraction values (ConfirmOnDevice /
ConfirmOpenApp / UnlockDevice / InteractionComplete) reach consumers
through the same surface as REQUEST_DEVICE_PERMISSION etc. The dead
'ui-request_confirmation' → REQUEST_BUTTON path and its 'ui-request'
listener are removed.

Legacy-SDK chains (TRON today, future XRP/ADA/DOT) now go through a
single withLegacyChainCall wrapper that owns the full lifecycle:
pre-flight ensureAppOpen, ConfirmOnDevice/InteractionComplete pairing,
wrong-app retry, and symmetric UI cleanup on failure paths. TRON
handlers shrink ~40% and stop reimplementing the open-app boilerplate.

AppManager.ensureAppOpen invokes the onConfirmOnDevice callback BEFORE
issuing the blocking OpenAppCommand APDU; previously the prompt event
fired after the user had already confirmed on-device, so UI consumers
showed and immediately closed the "open app" toast. The fallback path
also closes any lingering ConfirmOpenApp prompt when ensureAppOpen
itself throws (e.g. 0x6807 app-not-installed).

mapLedgerError accepts an optional defaultAppName so DMK signer errors
(which lack appName) get a chain-bound fallback. LedgerConnectorBase
.dispatcher injects this once per call via _ctxForMethod, keeping
chain handlers' wrapError calls a single line. Downstream the App
layer's ThirdPartyAppNotInstalled toast can interpolate {appName}
across all chains, not just TRON.

Adds focused debug logs at points where, when bugs occur, no upstream
log can localize the failure: AppManager (currentApp / closeApp /
openApp statusCode / waitForApp exhausted), legacyChainCall decision
points (pre-flight failure / non-wrong-app / wrong-app retry /
retry failure / retry success), and BTC wallet template selection.

* fix(hwk-ledger-adapter): stop duplicating the same device with mismatched labels

Two independent bugs combined to make a single physical Ledger appear as
two devices in the discovered list — one labelled with its real name and
one labelled "Ledger".

1. LedgerAdapter.searchDevices() accumulated entries instead of replacing
   them. DMK assigns ephemeral UUIDs as USB device paths (which we use as
   connectId), so each replug produced a fresh connectId while the prior
   connectId still sat in the cache pointing at a device DMK no longer
   recognized. Fix: clear the cache before writing this round's raw result
   so it always reflects current discovery state.

2. LedgerConnectorBase.connect() emitted 'device-connect' with a hardcoded
   `name: 'Ledger'` placeholder. The adapter's deviceConnectHandler then
   wrote that placeholder over the real label that searchDevices() had
   just stored. Fix: capture the searchDevices() return value at connect
   entry and emit the real name found by connectId; fall back to 'Ledger'
   only if the device isn't in this round's discovery.

Both fixes are required: clearing the cache without fixing the emit still
leaves the active device's label clobbered by the placeholder; fixing the
emit without clearing the cache still leaves stale connectId entries from
prior plug events.

* chore: release 1.1.26-alpha.9

* refactor(hwk-ledger-adapter): replace setDebugEnabled with setLogger sink

Hosts now inject a typed logger callback instead of toggling a boolean
to switch console output on/off. Makes SDK debug output flow into the
host's existing logging pipeline (e.g. defaultLogger.hardware.sdkLog).

  setLogger((level, ...args) => { ... })  // host-supplied
  debugLog('[X]', value)  // routed through the injected sink

Removes setDebugEnabled / isDebugEnabled. SDK no longer holds a
console-output flag; not injecting a logger means the SDK is silent.

Cross-runtime note: this module's `logger` is a per-process singleton.
Hosts that span multiple runtimes (e.g. MV3 extensions where the SW
holds the adapter and an offscreen document holds the connector) must
call setLogger from each runtime — they don't share state.

* refactor(hwk-ledger-adapter): unify SDK events behind onSdkEvent bus

Replaces the single-sink setLogger callback with a typed event bus,
matching the pattern OneKey's own hd-core uses (addHardwareGlobalEventListener).

  onSdkEvent((event) => {
    if (event.type === 'log') /* ... */
  })

`SdkEvent` is a discriminated union — currently `{ type: 'log', level,
message }`. Future variants (firmware progress, battery state, ...)
extend the union and host adapters dispatch via the same subscription.

Why this matters for cross-runtime integration: hosts that span SW ↔
offscreen (MV3 extensions) or main ↔ renderer (Electron) wire one IPC
channel that forwards the whole `SdkEvent` payload. Adding a new event
variant doesn't require a new IPC route, a new subscriber, or a new
host-side handler — the dispatch is data-driven on `event.type`.

debugLog/debugError now `emitSdkEvent({type: 'log', ...})` internally;
hosts that want logs subscribe and route to their logger pipeline.
With no subscribers the bus skips stringification, so the SDK has zero
overhead when nobody's listening.

Removes setLogger / Logger / LogLevel exports.

* chore(hwk-ledger-adapter): log DMK signer interactions; trim sdkEventBus comments

Adds a single debugLog at each chain's signer.onInteraction site so the
raw DMK interaction string (verify-address / sign-transaction /
confirm-open-app / interaction-complete / unlock-device / ...) is
visible in the host's SDK log scope. Without it, the entire device-side
state machine between IO start and IO end is a black box — useful for
diagnosing UI-event timing questions like "did verify-address actually
fire on the device" or "where did app-switch insert itself".

Trims redundant prose from sdkEventBus.ts and debugLog.ts that the file
header / function name already conveys.

* chore: release 1.1.26-alpha.10

* fix: address PR review feedback

- TonSignData: restore getVersionRange(). With strictCheckDeviceSupport=true
  the core consults this method's version matrix; an empty range causes
  every device to be classified as unsupported and the TonSignData typedCall
  is rejected before run() ever fires. Aligned with TonSignMessage's
  getFixInitStateErrorVersionRange — bump when the firmware ships TonSignData.

- LedgerConnectorBase.call: stop logging full call params via
  JSON.stringify(params). Now that debugLog flows through onSdkEvent into
  the host's defaultLogger pipeline, sensitive payloads (serializedTx,
  psbt, rawTxHex, messageHex, typed data) would propagate to telemetry /
  persistent stores. Replaced with summarizeCallParams() which surfaces
  only path, length-of-payload, and harmless flags.

* revert: roll back PR review fixes per maintainer call

- TonSignData: drop strictCheckDeviceSupport (set to false) and remove
  getVersionRange(). Firmware version that ships TonSignData isn't decided
  yet; gating now would lock out every connected device. Re-enable both
  once the touch/classic1s min versions are known.

- LedgerConnectorBase.call: restore JSON.stringify(params) in debugLog.
  Log bus only feeds the host's local defaultLogger pipeline (no third-party
  telemetry forwarding), so full params are acceptable for now and useful
  for in-the-wild debugging.

Author: ByteZhang1024

packages/connect-examples/electron-example/package.json

@@ -2,7 +2,7 @@
   "name": "hardware-example",
   "productName": "HardwareExample",
   "executableName": "onekey-hardware-example",
-  "version": "1.1.26-alpha.8",
+  "version": "1.1.26-alpha.11",
   "author": "OneKey",
   "description": "End-to-end encrypted workspaces for teams",
   "main": "dist/index.js",
@@ -22,7 +22,7 @@
     "ts:check": "yarn tsc --noEmit"
   },
   "dependencies": {
-    "@onekeyfe/hd-transport-electron": "1.1.26-alpha.8",
+    "@onekeyfe/hd-transport-electron": "1.1.26-alpha.11",
     "@stoprocent/noble": "2.3.16",
     "debug": "4.3.4",
     "electron-is-dev": "^3.0.1",

packages/connect-examples/expo-example/package.json

@@ -1,6 +1,6 @@
 {
   "name": "expo-example",
-  "version": "1.1.26-alpha.8",
+  "version": "1.1.26-alpha.11",
   "scripts": {
     "start": "cross-env CONNECT_SRC=https://localhost:8087/ yarn expo start --dev-client",
     "android": "yarn expo run:android",
@@ -19,10 +19,10 @@
     "@noble/ed25519": "^2.1.0",
     "@noble/hashes": "^1.3.3",
     "@noble/secp256k1": "^1.7.1",
-    "@onekeyfe/hd-ble-sdk": "1.1.26-alpha.8",
-    "@onekeyfe/hd-common-connect-sdk": "1.1.26-alpha.8",
-    "@onekeyfe/hd-core": "1.1.26-alpha.8",
-    "@onekeyfe/hd-web-sdk": "1.1.26-alpha.8",
+    "@onekeyfe/hd-ble-sdk": "1.1.26-alpha.11",
+    "@onekeyfe/hd-common-connect-sdk": "1.1.26-alpha.11",
+    "@onekeyfe/hd-core": "1.1.26-alpha.11",
+    "@onekeyfe/hd-web-sdk": "1.1.26-alpha.11",
     "@onekeyfe/react-native-ble-utils": "^0.1.3",
     "@polkadot/util-crypto": "13.1.1",
     "@react-native-async-storage/async-storage": "1.21.0",

packages/connect-examples/expo-example/src/data/ton.ts

@@ -164,6 +164,62 @@ const api: PlaygroundProps[] = [
       },
     ],
   },
+  {
+    method: 'tonSignData',
+    description: 'Sign Data (TON Connect signData)',
+    presupposes: [
+      {
+        title: 'Text',
+        value: {
+          path: "m/44'/607'/0'",
+          // TonSignDataType.TEXT = 0
+          type: 0,
+          // hex of "Hello OneKey"
+          payload: '48656c6c6f204f6e654b6579',
+          appdomain: 'onekey.so',
+          timestamp: Math.floor(Date.now() / 1000),
+          fromAddress: 'UQBYkuShkZzRYAWX_HrK3kFpeAixiRKd-K7QBXYxl9OBXM0_',
+          walletVersion: 3,
+          isBounceable: false,
+          isTestnetOnly: false,
+        },
+      },
+      {
+        title: 'Binary',
+        value: {
+          path: "m/44'/607'/0'",
+          // TonSignDataType.BINARY = 1
+          type: 1,
+          // arbitrary binary bytes as hex
+          payload: '00112233445566778899aabbccddeeff',
+          appdomain: 'onekey.so',
+          timestamp: Math.floor(Date.now() / 1000),
+          fromAddress: 'UQBYkuShkZzRYAWX_HrK3kFpeAixiRKd-K7QBXYxl9OBXM0_',
+          walletVersion: 3,
+          isBounceable: false,
+          isTestnetOnly: false,
+        },
+      },
+      {
+        title: 'Cell',
+        value: {
+          path: "m/44'/607'/0'",
+          // TonSignDataType.CELL = 2
+          type: 2,
+          // BoC hex of the cell payload
+          payload: 'b5ee9c7241010101000e000018000000004f6e654b65792043656c6c3cc87b8a',
+          // TL-B schema of the cell payload (required by TON Connect for cell type)
+          schema: 'text_comment#00000000 text:string = InternalMsgBody;',
+          appdomain: 'onekey.so',
+          timestamp: Math.floor(Date.now() / 1000),
+          fromAddress: 'UQBYkuShkZzRYAWX_HrK3kFpeAixiRKd-K7QBXYxl9OBXM0_',
+          walletVersion: 3,
+          isBounceable: false,
+          isTestnetOnly: false,
+        },
+      },
+    ],
+  },
 ];
 
 export default api;

packages/connect-examples/expo-playground/package.json

@@ -1,6 +1,6 @@
 {
   "name": "onekey-hardware-playground",
-  "version": "1.1.26-alpha.8",
+  "version": "1.1.26-alpha.11",
   "private": true,
   "sideEffects": [
     "app/utils/shim.js",
@@ -17,9 +17,9 @@
   },
   "dependencies": {
     "@noble/hashes": "^1.8.0",
-    "@onekeyfe/hd-common-connect-sdk": "1.1.26-alpha.8",
-    "@onekeyfe/hd-core": "1.1.26-alpha.8",
-    "@onekeyfe/hd-shared": "1.1.26-alpha.8",
+    "@onekeyfe/hd-common-connect-sdk": "1.1.26-alpha.11",
+    "@onekeyfe/hd-core": "1.1.26-alpha.11",
+    "@onekeyfe/hd-shared": "1.1.26-alpha.11",
     "@radix-ui/react-checkbox": "^1.3.2",
     "@radix-ui/react-dialog": "^1.1.14",
     "@radix-ui/react-dropdown-menu": "^2.1.15",

packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onekeyfe/hd-core",
-  "version": "1.1.26-alpha.8",
+  "version": "1.1.26-alpha.11",
   "description": "Core processes and APIs for communicating with OneKey hardware devices.",
   "author": "OneKey",
   "homepage": "https://github.com/OneKeyHQ/hardware-js-sdk#readme",
@@ -25,8 +25,8 @@
     "url": "https://github.com/OneKeyHQ/hardware-js-sdk/issues"
   },
   "dependencies": {
-    "@onekeyfe/hd-shared": "1.1.26-alpha.8",
-    "@onekeyfe/hd-transport": "1.1.26-alpha.8",
+    "@onekeyfe/hd-shared": "1.1.26-alpha.11",
+    "@onekeyfe/hd-transport": "1.1.26-alpha.11",
     "axios": "1.15.2",
     "bignumber.js": "^9.0.2",
     "bytebuffer": "^5.0.1",

packages/core/src/api/alephium/AlephiumSignTransaction.ts

@@ -1,15 +1,16 @@
-import {
-  type AlephiumSignedTx,
-  type AlephiumSignTx as HardwareAlephiumSignTx,
-  TypedCall,
-} from '@onekeyfe/hd-transport';
 import { bytesToHex } from '@noble/hashes/utils';
 import { ERRORS, HardwareErrorCode } from '@onekeyfe/hd-shared';
 
 import { UI_REQUEST } from '../../constants/ui-request';
 import { validatePath } from '../helpers/pathUtils';
 import { BaseMethod } from '../BaseMethod';
 import { validateParams } from '../helpers/paramsValidator';
+
+import type {
+  AlephiumSignedTx,
+  AlephiumSignTx as HardwareAlephiumSignTx,
+  TypedCall,
+} from '@onekeyfe/hd-transport';
 import type { AlephiumSignTransactionParams } from '../../types';
 import type { TypedResponseMessage } from '../../device/DeviceCommands';
 

packages/core/src/api/index.ts

@@ -143,6 +143,7 @@ export { default as dnxSignTransaction } from './dynex/DnxSignTransaction';
 export { default as tonGetAddress } from './ton/TonGetAddress';
 export { default as tonSignMessage } from './ton/TonSignMessage';
 export { default as tonSignProof } from './ton/TonSignProof';
+export { default as tonSignData } from './ton/TonSignData';
 
 export { default as scdoGetAddress } from './scdo/ScdoGetAddress';
 export { default as scdoSignTransaction } from './scdo/ScdoSignTransaction';

packages/core/src/api/ton/TonSignData.ts

@@ -0,0 +1,60 @@
+import { UI_REQUEST } from '../../constants/ui-request';
+import { validatePath } from '../helpers/pathUtils';
+import { BaseMethod } from '../BaseMethod';
+import { validateParams } from '../helpers/paramsValidator';
+import { formatAnyHex } from '../helpers/hexUtils';
+
+import type { TonSignData as HardwareTonSignData } from '@onekeyfe/hd-transport';
+import type { TonSignDataParams } from '../../types/api/tonSignData';
+
+export default class TonSignData extends BaseMethod<HardwareTonSignData> {
+  init() {
+    // Keep strict-check off until the firmware release that ships TonSignData
+    // is decided — we don't yet know the min versions for touch/classic1s.
+    // Flip back to true and add getVersionRange() once those numbers land.
+    this.strictCheckDeviceSupport = false;
+    this.checkDeviceId = true;
+    this.allowDeviceMode = [...this.allowDeviceMode, UI_REQUEST.NOT_INITIALIZE];
+
+    validateParams(this.payload, [
+      { name: 'path', required: true },
+      { name: 'type', type: 'number', required: true },
+      { name: 'payload', type: 'hexString', required: true },
+      { name: 'schema', type: 'string' },
+      { name: 'appdomain', type: 'string', required: true },
+      { name: 'timestamp', required: true },
+      { name: 'fromAddress', type: 'string' },
+      { name: 'walletVersion' },
+      { name: 'walletId', type: 'number' },
+      { name: 'workchain' },
+      { name: 'isBounceable', type: 'boolean' },
+      { name: 'isTestnetOnly', type: 'boolean' },
+    ]);
+
+    const { path } = this.payload as TonSignDataParams;
+    const addressN = validatePath(path, 3);
+
+    this.params = {
+      address_n: addressN,
+      type: this.payload.type,
+      payload: formatAnyHex(this.payload.payload),
+      schema: this.payload.schema,
+      appdomain: this.payload.appdomain,
+      timestamp: this.payload.timestamp,
+      from_address: this.payload.fromAddress,
+      wallet_version: this.payload.walletVersion,
+      wallet_id: this.payload.walletId,
+      workchain: this.payload.workchain,
+      is_bounceable: this.payload.isBounceable,
+      is_testnet_only: this.payload.isTestnetOnly,
+    };
+  }
+
+  async run() {
+    const res = await this.device.commands.typedCall('TonSignData', 'TonSignedData', {
+      ...this.params,
+    });
+
+    return Promise.resolve(res.message);
+  }
+}

packages/core/src/constants/index.ts

@@ -1,2 +1,2 @@
 export { safeThrowError } from './errors';
-export { Messages as PROTO } from '@onekeyfe/hd-transport';
+export { Messages as PROTO, TonSignDataType } from '@onekeyfe/hd-transport';

packages/core/src/data/messages/messages.json

@@ -11569,6 +11569,102 @@
         }
       }
     },
+    "TonSignData": {
+      "fields": {
+        "address_n": {
+          "rule": "repeated",
+          "type": "uint32",
+          "id": 1,
+          "options": {
+            "packed": false
+          }
+        },
+        "type": {
+          "rule": "required",
+          "type": "TonSignDataType",
+          "id": 2
+        },
+        "payload": {
+          "rule": "required",
+          "type": "bytes",
+          "id": 3
+        },
+        "schema": {
+          "type": "string",
+          "id": 4
+        },
+        "appdomain": {
+          "rule": "required",
+          "type": "string",
+          "id": 5
+        },
+        "timestamp": {
+          "rule": "required",
+          "type": "uint64",
+          "id": 6
+        },
+        "from_address": {
+          "type": "string",
+          "id": 7
+        },
+        "wallet_version": {
+          "type": "TonWalletVersion",
+          "id": 8,
+          "options": {
+            "default": "V4R2"
+          }
+        },
+        "wallet_id": {
+          "type": "uint32",
+          "id": 9,
+          "options": {
+            "default": 698983191
+          }
+        },
+        "workchain": {
+          "type": "TonWorkChain",
+          "id": 10,
+          "options": {
+            "default": "BASECHAIN"
+          }
+        },
+        "is_bounceable": {
+          "type": "bool",
+          "id": 11,
+          "options": {
+            "default": false
+          }
+        },
+        "is_testnet_only": {
+          "type": "bool",
+          "id": 12,
+          "options": {
+            "default": false
+          }
+        }
+      },
+      "nested": {
+        "TonSignDataType": {
+          "values": {
+            "TEXT": 0,
+            "BINARY": 1,
+            "CELL": 2
+          }
+        }
+      }
+    },
+    "TonSignedData": {
+      "fields": {
+        "signature": {
+          "type": "bytes",
+          "id": 1
+        },
+        "digest": {
+          "type": "bytes",
+          "id": 2
+        }
+      }
+    },
     "TronGetAddress": {
       "fields": {
         "address_n": {
@@ -12501,6 +12597,8 @@
         "MessageType_TonSignProof": 11905,
         "MessageType_TonSignedProof": 11906,
         "MessageType_TonTxAck": 11907,
+        "MessageType_TonSignData": 11908,
+        "MessageType_TonSignedData": 11909,
         "MessageType_ScdoGetAddress": 12001,
         "MessageType_ScdoAddress": 12002,
         "MessageType_ScdoSignTx": 12003,