Activity tracker, TON/Tron SDK support, address validation

Makefile

@@ -9,7 +9,7 @@ include .env
 export ELECTROBUN_DEVELOPER_ID ELECTROBUN_TEAMID ELECTROBUN_APPLEID ELECTROBUN_APPLEIDPASS
 endif
 
-.PHONY: install dev dev-hmr build build-stable build-canary build-signed prune-bundle dmg clean help vault sign-check verify publish release upload-dmg submodules modules-install modules-build modules-clean audit build-zcash-cli build-zcash-cli-debug
+.PHONY: install dev dev-hmr build build-stable build-canary build-signed prune-bundle dmg clean help vault sign-check verify publish release upload-dmg submodules modules-install modules-build modules-clean audit build-zcash-cli build-zcash-cli-debug test test-rest
 
 # --- Submodules (auto-init on fresh worktrees/clones) ---
 
@@ -33,6 +33,13 @@ modules-clean:
 
 build-zcash-cli:
 	cd $(PROJECT_DIR)/zcash-cli && cargo build --release
+ifdef ELECTROBUN_DEVELOPER_ID
+	@echo "Signing zcash-cli binary..."
+	codesign --force --verbose --timestamp \
+		--sign "Developer ID Application: $(ELECTROBUN_DEVELOPER_ID) ($(ELECTROBUN_TEAMID))" \
+		--options runtime \
+		$(PROJECT_DIR)/zcash-cli/target/release/zcash-cli
+endif
 
 build-zcash-cli-debug:
 	cd $(PROJECT_DIR)/zcash-cli && cargo build
@@ -55,7 +62,7 @@ dev-hmr: install
 build: install
 	cd $(PROJECT_DIR) && bun run build
 
-build-stable: install
+build-stable: install build-zcash-cli
 	cd $(PROJECT_DIR) && bun run build:stable
 
 build-canary: install
@@ -103,6 +110,13 @@ dmg:
 	xcrun stapler staple "$$DMG_OUT"; \
 	echo "DMG ready: $$DMG_OUT"
 
+# --- Testing ---
+
+test: test-rest
+
+test-rest:
+	cd $(PROJECT_DIR) && bun test __tests__/rest-api.test.ts
+
 clean: modules-clean
 	cd $(PROJECT_DIR) && rm -rf dist node_modules build _build artifacts
 
@@ -200,4 +214,6 @@ help:
 	@echo "  make publish        - Show distribution artifacts"
 	@echo "  make release        - Build, sign, and create new GitHub release"
 	@echo "  make upload-dmg     - Upload signed DMG to existing CI draft release"
+	@echo "  make test           - Run all tests"
+	@echo "  make test-rest      - Run REST API integration tests (requires running vault)"
 	@echo "  make clean          - Remove all build artifacts and node_modules"

firmware/manifest.json

@@ -41,15 +41,30 @@
   },
   "unsigned_firmware": {
     "solana": {
-      "version": "7.10.0-solana",
-      "filename": "firmware.keepkey.solana-8acfd898.bin",
-      "sha256_payload": "8ad2ecd35ad0d9714a3592edfaa6343c0c7c63dc33677907cd8eb9ffb4f8bea7",
-      "sha256_full": "0906d9343c1a971b069715d84b78b4fce4ff4ba095e2b63ca7de18e6dd60a686",
-      "note": "Unsigned firmware with Solana (Ed25519) support — requires bootloader policy override"
+      "version": "7.14.0-solana",
+      "filename": "firmware.keepkey.solana-7.11.0.bin",
+      "sha256_full": "75dc509a90f70a1f0025a9c5451532f407c4f78df5ef7d1d7b9b2ef9b9740e19",
+      "note": "Unsigned firmware with Solana (Ed25519) support"
+    },
+    "bip85": {
+      "version": "7.14.0-bip85",
+      "filename": "firmware.keepkey.bip85-7.11.0-d54797ee.bin",
+      "sha256_full": "02def01217709269ff39c2c4745179e45c9c6892b19299de6cdd2f2becfddc87",
+      "note": "Unsigned firmware with BIP-85, Solana, Tron, TON, Zcash support"
+    },
+    "zcash": {
+      "version": "7.14.0-zcash",
+      "filename": "firmware.keepkey.zcash-spendauth-d54797ee.bin",
+      "sha256_full": "8ed86d578019f127998215268b75165b92c52948647a8b31949e4f311d695d3d",
+      "note": "Unsigned firmware with Zcash Orchard shielded transaction support"
     }
   },
   "firmware_hashes": {
-    "8ad2ecd35ad0d9714a3592edfaa6343c0c7c63dc33677907cd8eb9ffb4f8bea7": "7.10.0-solana",
+    "75dc509a90f70a1f0025a9c5451532f407c4f78df5ef7d1d7b9b2ef9b9740e19": "7.14.0-solana",
+    "02def01217709269ff39c2c4745179e45c9c6892b19299de6cdd2f2becfddc87": "7.14.0-bip85",
+    "8ed86d578019f127998215268b75165b92c52948647a8b31949e4f311d695d3d": "7.14.0-zcash",
+    "84c94eb69193d8bdf6be48992b852f25c3b30f0ea133019491849825137aca2f": "7.14.0-zcash-askneg",
+    "cab8446a1d17dd847938476be282e6e45041cece750afcdb089f63fa4ba5a248": "7.14.0-zcash-widereduction",
     "958764cf3baa53eec0002eab9c54e02ce6f5fdab71e7efbbe723f958e26ff419": "7.10.0",
     "24cca93ef5e7907dc6d8405b8ab9800d4e072dd9259138cf7679107985b88137": "7.9.3",
     "9e691874bb6966aa0616d36b60489b82fab166d96e5166518eaa3e11468bf6a8": "7.9.1",

firmware/releases.json

@@ -54,6 +54,11 @@
       "fe98454e7ebd4aef4a6db5bd4c60f52cf3f58b974283a7c1e1fcc5fea02cf3eb": "v2.1.4"
     },
     "firmware": {
+      "75dc509a90f70a1f0025a9c5451532f407c4f78df5ef7d1d7b9b2ef9b9740e19": "v7.14.0-solana",
+      "02def01217709269ff39c2c4745179e45c9c6892b19299de6cdd2f2becfddc87": "v7.14.0-bip85",
+      "8ed86d578019f127998215268b75165b92c52948647a8b31949e4f311d695d3d": "v7.14.0-zcash",
+      "84c94eb69193d8bdf6be48992b852f25c3b30f0ea133019491849825137aca2f": "v7.14.0-zcash-askneg",
+      "cab8446a1d17dd847938476be282e6e45041cece750afcdb089f63fa4ba5a248": "v7.14.0-zcash-widereduction",
       "958764cf3baa53eec0002eab9c54e02ce6f5fdab71e7efbbe723f958e26ff419": "v7.10.0",
       "24cca93ef5e7907dc6d8405b8ab9800d4e072dd9259138cf7679107985b88137": "v7.9.3",
       "9e691874bb6966aa0616d36b60489b82fab166d96e5166518eaa3e11468bf6a8": "v7.9.1",

projects/keepkey-sdk/lib/index.d.ts

@@ -1,5 +1,5 @@
 import { VaultClient } from './client';
-import type { SdkConfig, DeviceFeatures, DeviceInfo, SignedTx, AddressRequest, EthSignTxParams, EthSignTypedDataParams, EthSignMessageParams, EthVerifyMessageParams, BtcSignTxParams, CosmosAminoSignParams, XrpSignTxParams, BnbSignTxParams, SolanaSignTxParams, GetPublicKeyRequest, BatchPubkeysPath, ApplySettingsParams, HealthResponse, SupportedAsset } from './types';
+import type { SdkConfig, DeviceFeatures, DeviceInfo, SignedTx, AddressRequest, EthSignTxParams, EthSignTypedDataParams, EthSignMessageParams, EthVerifyMessageParams, BtcSignTxParams, CosmosAminoSignParams, XrpSignTxParams, BnbSignTxParams, SolanaSignTxParams, TronSignTxParams, TonSignTxParams, GetPublicKeyRequest, BatchPubkeysPath, ApplySettingsParams, HealthResponse, SupportedAsset } from './types';
 export { SdkError } from './client';
 export * from './types';
 export declare class KeepKeySdk {
@@ -124,6 +124,12 @@ export declare class KeepKeySdk {
         solanaGetAddress: (params: AddressRequest) => Promise<{
             address: string;
         }>;
+        tronGetAddress: (params: AddressRequest) => Promise<{
+            address: string;
+        }>;
+        tonGetAddress: (params: AddressRequest) => Promise<{
+            address: string;
+        }>;
     };
     eth: {
         ethSignTransaction: (params: EthSignTxParams) => Promise<SignedTx>;
@@ -180,6 +186,12 @@ export declare class KeepKeySdk {
     solana: {
         solanaSignTransaction: (params: SolanaSignTxParams) => Promise<SignedTx>;
     };
+    tron: {
+        tronSignTransaction: (params: TronSignTxParams) => Promise<SignedTx>;
+    };
+    ton: {
+        tonSignTransaction: (params: TonSignTxParams) => Promise<SignedTx>;
+    };
     xpub: {
         getPublicKey: (params: GetPublicKeyRequest) => Promise<{
             xpub: string;