[LWDM] 🚀 Release 2026-06-23

.agents/agents/code-reviewer.md

@@ -13,12 +13,13 @@ Pay special attention to:
 - `.agents/skills/ldls-web/SKILL.md` — Lumen UI for desktop (`src/mvvm/`)
 - `.agents/skills/ldls-native/SKILL.md` — Lumen UI for mobile (`src/mvvm/`)
 - `.agents/skills/testing/SKILL.md` — Jest mock patterns for test files (avoids flaky tests and mock conflicts)
-- `.agents/skills/coin-modules/SKILL.md` — Module layout, Alpaca path, and import rules for `libs/coin-modules/`
+- `.agents/skills/coin-modules/SKILL.md` — Module layout, Coin Module API path, and import rules for `libs/coin-modules/`
 - `.agents/skills/client-ids/SKILL.md` — Privacy rules for sensitive identifiers (DeviceId, UserId, DatadogId)
 - `.agents/skills/typescript/SKILL.md` — Canonical TypeScript review guidance; use for typing, error-handling, and general TS code quality rules
 - `.agents/skills/react-general/SKILL.md` — Canonical React review guidance; use for component patterns, hooks, rendering, and React architecture rules
 - `.agents/skills/coin-families-contract/SKILL.md` — Coin-families contract: no coin-specific branches (`if (family === "evm")` etc.) in generic UI; extend the families contract and implement in `families/<family>/` instead
 - `.agents/skills/codeownership/SKILL.md` — Team-split convention: multi-team files should be split into `[foo]/index.ts` and `[foo]/team-[team]/*.ts`; suggest this when a touched file clearly involves many teams
+- `.agents/skills/knip-migration/SKILL.md` — Dead-code detection is moving to `knip`, which needs explicit (non-`./*`) `package.json#exports`; new packages must use explicit exports + knip, not `.unimportedrc.json`
 
 ## Review Scope
 
@@ -45,6 +46,7 @@ By default, review unstaged changes from `git diff`. The user may specify differ
 - Lumen UI compliance: verify new UI in `src/mvvm/` uses design-system components
 - **Coin-families contract:** In generic code (outside `families/<family>/`), flag new `if (family === "…")` or coin-specific hooks; suggest extending the families contract and implementing in the family folder instead.
 - **Cross-team files:** When a PR touches a file owned by multiple teams, suggest the team-split convention: split into `[foo]/index.ts` and `[foo]/team-[team]/*.ts`; one file or small set per team; index re-exports all. CODEOWNERS defines the allowed `team-*` slugs.
+- **Dead-code tooling — explicit exports + knip (new packages):** For a **new** package, flag either (a) a `.unimportedrc.json` or a script running the bare `unimported` binary (`"unimported": "unimported"`), or (b) a `./*` wildcard in `package.json#exports`. New packages must enumerate explicit, minimal `exports` (no `./*`, so knip can detect unused files) and use `knip` via a root `knip.json` `workspaces` entry. The repo is migrating dead-code detection off `unimported` (see `.agents/skills/knip-migration/SKILL.md`).
 
 ## Confidence Scoring
 

.agents/skills/coin-modules/SKILL.md

@@ -13,30 +13,31 @@ No packages other than coin-modules are allowed in `libs/coin-modules/`.
 
 ## Directory Layout
 
-| Directory / file   | Purpose                                                                                                                                  |
-| ------------------ | ---------------------------------------------------------------------------------------------------------------------------------------- |
-| `api/`             | Alpaca API surface — implements `AlpacaApi` from `@ledgerhq/coin-framework/api/types`; types from `@ledgerhq/types-live` are not allowed |
-| `logic/`           | Core blockchain logic, agnostic of Bridge or API; only depends on `network/` and external libs                                           |
-| `network/`         | Communication with explorer / indexer / node                                                                                             |
-| `types/`           | Model definitions, not related to network                                                                                                |
-| `bridge/` (legacy) | `CurrencyBridge` + `AccountBridge` implementation                                                                                        |
-| `signer/` (legacy) | Hardware wallet signer interface and device address resolver                                                                             |
+| Directory / file   | Purpose                                                                                                                                     |
+| ------------------ | ------------------------------------------------------------------------------------------------------------------------------------------- |
+| `api/`             | Coin Module API surface — implements `CoinModuleApi` from `@ledgerhq/coin-module-framework/api/index`; restricted imports apply (see below) |
+| `logic/`           | Core blockchain logic, agnostic of Bridge or API; only depends on `network/` and external libs; restricted imports apply (see below)        |
+| `network/`         | Communication with explorer / indexer / node; restricted imports apply (see below)                                                          |
+| `types/`           | Model definitions, not related to network                                                                                                   |
+| `bridge/` (legacy) | `CurrencyBridge` + `AccountBridge` implementation                                                                                           |
+| `signer/` (legacy) | Hardware wallet signer interface and device address resolver                                                                                |
 
 Tests: `*.unit.test.ts` (co-located), `*.test.ts` (integration, no network), `*.integ.test.ts` (real network, separate `jest.integ.config.js`).
 
 ## Dependencies
 
 Prefer native dependencies from the blockchain foundation and well-established open-source libraries.  
-**Avoid** proprietary third-party SDKs or closed-source vendor packages.  
-Internal `@ledgerhq/*` workspace deps are allowed.
+**Avoid** proprietary third-party SDKs or closed-source vendor packages.
+
+In `api/`, `logic/`, and `network/`, the only permitted `@ledgerhq/*` imports are `@ledgerhq/errors`, `@ledgerhq/logs`, `@ledgerhq/live-network`, and `@ledgerhq/coin-module-framework` (enforced by `eslint/no-restricted-imports` in `libs/coin-modules/.oxlintrc.json`). Other directories (`bridge/`, `signer/`, `types/`) have no such restriction.
 
 ## Integration Paths
 
-**1. Alpaca path (preferred)** — export `createApi(config, currencyId)` implementing `AlpacaApi`. Listed in the `alpacaized` map in `libs/ledger-live-common/src/bridge/impl.ts`. Methods that don't apply may raise "not supported".
+**1. Coin Module API path (preferred)** — export `createApi(config, currencyId)` returning `CoinModuleApi` (from `@ledgerhq/coin-module-framework/api/index`). Enable the family in `libs/ledger-live-common/src/bridge/generic-coin-framework/genericCoinFrameworkFamilies.json` (checked by `isGenericCoinFrameworkFamily`). For methods that don't apply, `throw new Error("<method> is not supported")`.
 
 **2. Classic JS Bridge (legacy, do not use)** — export `createBridges(signerContext, coinConfig)` returning `{ currencyBridge, accountBridge }`. Wired via `libs/ledger-live-common/src/families/<family>/setup.ts`.
 
-## Integ Test Requirements (Alpaca API)
+## Integ Test Requirements (Coin Module API)
 
 - `craftTransaction` / `estimateFees`: cover each transaction type (token transfer, native, memo, delegation, …)
 - `getBalance` / `listOperations`: cover each asset type in the module

.agents/skills/docs-update-or-create/SKILL.md

@@ -11,35 +11,36 @@ Create minimal docs, avoid duplication and make content discoverable.
 Treat docs for both human and AI agents together.
 Follow our principles of progressive disclosure, locality and canonicalization.
 
-## Process to follow
+## 📝 Process to follow
 
 1. Understand the topic of knowledge and its purpose
 1. Gather existing knowledge on that topic
 1. Agree on the best format and location for it to live
 1. Write/update the files, inline with what's agreed
 1. Validate the results and refine as necessary
 
-## Guidelines
+## 📜 Guidelines
 
 These guidelines define some boundaries within which to operate. They do not
 dictate everything. Follow them, but also use judgement and creativity to find
 the best way to document knowledge in each case.
 
-**BAD:**
+**❌ BAD:**
 
 - Avoid long files containing multiple levels of details
 - Avoid overloading context with rarely used knowledge
 - Avoid duplicating knowledge in multiple files
 - Avoid documenting community-obvious knowledge
 - Avoid preserving old structure for its own sake
 
-**GOOD:**
+**✅ GOOD:**
 
 - Add docs that measurably improve agent performance
 - Do document repeatable workflows, commands and behaviours
 - Capture what is peculiar to this repo, domain, or team
 - Only add docs that solve real problems
 - Delete files that have no unique value after changes
+- Use emojis, checkboxes and formatting sparingly to make docs more appealing
 
 ### Keep it short
 
@@ -67,13 +68,13 @@ description: Read when editing swap flows in Ledger Live Desktop.
 ---
 ```
 
-## Principles
+## 💡 Principles
 
 - Apply principle of [progressive disclosure](../../../docs/about-docs/progressive-disclosure.md)
 - Follow our rules on [docs locality](../../../docs/about-docs/docs-locations.md)
 - Avoid duplication by applying rules on [canonicalization](../../../docs/about-docs/canonicalization.md)
 
-## Validation
+## 🔎 Validation
 
 - Make sure links point to the canonical source
 - Ensure it is discoverable by agents and humans

.agents/skills/errors/SKILL.md

@@ -0,0 +1,106 @@
+---
+name: errors
+description: |
+  How to define and check error classes in Ledger Live. Read when adding a new
+  error, creating an errors.ts file, or checking an error's type. Replaces the
+  deprecated @ledgerhq/errors lib (createCustomErrorClass + serialize/deserialize).
+globs: ["**/errors.ts", "**/errors/**/*.ts"]
+---
+
+# Errors
+
+Each package owns its errors in its own `src/errors.ts`, as plain native classes.
+Do **not** add new errors to `@ledgerhq/errors` (`libs/ledgerjs/packages/errors`) —
+that lib is deprecated and frozen (see its `DEPRECATED.md`).
+
+## Define errors
+
+A package groups its errors in `src/errors.ts`. Extend `Error` directly and set a
+stable `name`. The `name` string is the contract — keep it stable, it is what
+survives across process/serialization boundaries.
+
+```ts
+// message-only
+export class FooNotFound extends Error {
+  override name = "FooNotFound";
+}
+
+// with a default message
+export class InvalidChallenge extends Error {
+  override name = "InvalidChallenge";
+  constructor() {
+    super("backend returned an invalid challenge");
+  }
+}
+
+// with extra fields
+export class HttpError extends Error {
+  override name = "HttpError";
+  readonly status: number | undefined;
+  constructor(message: string, status?: number) {
+    super(message);
+    this.status = status;
+  }
+}
+```
+
+Group a family under a per-package base class so callers can catch the whole set:
+
+```ts
+export class WalletAuthError extends Error {
+  override name = "WalletAuthError";
+}
+export class WalletAuthSignatureError extends WalletAuthError {
+  override name = "WalletAuthSignatureError";
+  constructor(cause: unknown) {
+    super("failed to sign challenge", { cause });
+  }
+}
+```
+
+See `libs/ledger-auth/src/errors.ts` for a full reference.
+
+### `cause`
+
+Use the native second argument: `super(message, { cause })`. Error `cause` was
+standardized in ES2022 and is supported by modern runtimes; its TypeScript typing
+(`ErrorOptions`) requires `lib: es2022.error` (i.e. `es2022`). Coin modules and
+some older packages still target `es2020` — there, declare and assign manually:
+
+```ts
+export class BroadcastError extends Error {
+  override name = "BroadcastError";
+  cause?: unknown;
+  constructor(message: string, cause?: unknown) {
+    super(message);
+    this.cause = cause;
+  }
+}
+```
+
+## Check error type: prefer `error.name`
+
+Prefer `error.name === "FooNotFound"` over `instanceof FooNotFound`.
+
+`instanceof` breaks once an error crosses a boundary — desktop/mobile IPC, worker
+messaging, or the external `@ledgerhq/coin-module-framework` — because the object
+is rebuilt and loses its prototype. The `name` string always survives.
+
+```ts
+// ✅ survives serialization
+if (error instanceof Error && error.name === "FooNotFound") { … }
+
+// ⚠️ only works in-process, before any serialization
+if (error instanceof FooNotFound) { … }
+```
+
+Use `instanceof` only when you are certain the error has not crossed a boundary
+(e.g. caught in the same module that threw it) and you need the typed fields.
+
+## Where errors live
+
+- Logic in one package → that package's `src/errors.ts`.
+- Used only by an app → the app's `src/errors.ts` (`apps/ledger-live-desktop`,
+  `apps/ledger-live-mobile`).
+- Shared by several coin modules → for now stay in `@ledgerhq/errors` (no editable
+  shared package sits below the coin layer); do not add new ones there.

.agents/skills/git-workflow/SKILL.md

@@ -85,3 +85,4 @@ test(coin): add bitcoin integration tests
 - Never mix refactor + fix + feature
 - Rebase before PR to keep history clean
 - Squash only for trivial branches (`support/cleanup`)
+- **Never use `--no-verify` when committing or pushing** — pre-commit/pre-push hooks (lint, typecheck, tests) must run. If a hook fails, fix the underlying issue rather than skip it; if a hook is genuinely broken, surface it to the user instead of bypassing it.

.agents/skills/knip-migration/SKILL.md

@@ -0,0 +1,83 @@
+---
+name: knip-migration
+description: |
+  Dead-code / unused-dependency detection is migrating from the legacy `unimported` tool to
+  `knip`, which requires each package to expose an explicit, minimal `package.json#exports`
+  (no `./*` wildcard). Read this when adding a new package or migrating an existing one.
+---
+
+# Dead-code detection: explicit exports + knip (not unimported)
+
+The repo is migrating dead-code / unused-dependency detection from the legacy **`unimported`**
+tool to **`knip`**, one package at a time. knip is configured centrally in the root
+[`knip.json`](../../../knip.json) (one `workspaces` entry per package).
+
+## Why this isn't just "swap the tool"
+
+knip treats everything listed in a package's `package.json#exports` as an **entry point**.
+Today every package exports a `./*` wildcard mapped to `./src/*.ts` (via the `@ledgerhq/source`
+custom condition declared in `tsconfig.base.json`):
+
+```jsonc
+"./*": {
+  "@ledgerhq/source": "./src/*.ts",
+  "import": "./lib-es/*.js",
+  "require": "./lib/*.js",
+  "default": "./lib/*.js"
+}
+```
+
+Because of this wildcard, knip considers **every top-level `src/*.ts` file "used"** and cannot
+detect unused ("zombie") top-level source files — the exact thing `unimported` caught (it
+ignored `exports` and diffed against a curated entry list). So real knip parity for a package
+requires **replacing the `./*` wildcard with explicit, minimal subpath exports** that enumerate
+the package's true public API.
+
+> The few libs already pointed at knip (e.g. `libs/env`, `libs/promise`) still keep the `./*`
+> wildcard, so they are only *partially* migrated — **do not** copy them as the template.
+
+## New package = born migrated
+
+A new package has no consumers, so it should start in the target state — no `.unimportedrc.json`:
+
+1. **Explicit `exports` only.** Enumerate the real public API; do **not** add a `./*` wildcard.
+   Mirror the `.` root entry per subpath, keeping the conditions:
+   ```jsonc
+   "exports": {
+     ".":        { "@ledgerhq/source": "./src/index.ts",  "import": "./lib-es/index.js",  "require": "./lib/index.js",  "default": "./lib/index.js" },
+     "./logic":  { "@ledgerhq/source": "./src/logic.ts",  "import": "./lib-es/logic.js",  "require": "./lib/logic.js",  "default": "./lib/logic.js" },
+     "./lib-es/*": "./lib-es/*.js",
+     "./lib/*": "./lib/*.js",
+     "./package.json": "./package.json"
+   }
+   ```
+2. **Register in `knip.json`** — add a `workspaces` entry (`entry`, `ignore`, `ignoreDependencies`).
+3. **Use knip, not unimported** — add a script that runs knip scoped to the workspace:
+   `pnpm knip --directory <relative-hop-to-root> -W <workspace-path>`
+   (`--directory` is the hop back to the repo root — `../..` for `libs/<x>`,
+   `../../..` for `libs/coin-modules/<x>`; `-W` is the workspace path from root).
+
+## Migrating an existing package off `unimported`
+
+1. **Audit** the real consumers of the package's deep imports.
+2. **Replace** the `./*` wildcard export with explicit subpath exports (the legit public API).
+3. **Refactor** consumers that relied on now-removed arbitrary entry points.
+4. **Switch** the dead-code script `unimported` → knip, delete `.unimportedrc.json`, and verify
+   a deliberately-unused top-level `src` file is now reported.
+
+Start with leaf / low-dependency packages; `ledger-live-common` (largest surface) comes last.
+
+### Notes
+
+- `unimported` stays until a package reaches knip parity — don't bulk-delete it.
+- Unifying the script / nx-target name (`unimported` → `knip-check`) is tracked separately, so
+  matching the surrounding package's existing script name is fine.
+
+## Reviewing
+
+For a **new** package, flag either of these and point here:
+
+- a `.unimportedrc.json` or a script running the **bare `unimported` binary**
+  (`"unimported": "unimported"`) — it must use knip via a root `knip.json` `workspaces` entry; or
+- a **`./*` wildcard** in `package.json#exports` — new packages must enumerate explicit exports
+  so knip can detect zombie files.

.agents/skills/ledger-wallet-cli/SKILL.md

@@ -148,22 +148,20 @@ Ticker is **mandatory** in `--amount`. No `--token` flag — ticker drives asset
 
 ### swap quote
 
-Fetches quotes in parallel from the built-in provider list (no device when addresses are supplied via flags below).
+Fetches quotes in parallel from the built-in provider list (no device required; addresses are resolved from session accounts).
 
-**Currencies:** `--from` / `-f` and `--to` / `-t` are Ledger **currency IDs** — native assets (e.g. `ethereum`, `bitcoin`, `solana`) **or token IDs** when the token’s parent chain is a supported native swap currency (same IDs the CLI allows for swap). They are **not** session account labels — use `--from-account` / `--to-account` (or fresh addresses) for accounts.
+**Currencies:** `--from` / `-f` and `--to` / `-t` are Ledger **currency IDs** — native assets (e.g. `ethereum`, `bitcoin`, `solana`) **or token IDs** when the token’s parent chain is a supported native swap currency (same IDs the CLI allows for swap). They are **not** session account labels — use `--from-account` / `--to-account` for accounts.
 
 **Default providers queried by `swap quote` and usable by `swap execute`:** `changelly`, `cic`, `exodus`, `nearintents`, `swapsxyz`.
 
-**Addresses (pick one per side):** `--from-fresh-address` or `--from-account`; `--to-fresh-address` or `--to-account`. Account flags accept a session label only; the CLI resolves a fresh receive address like `receive`.
+**Accounts:** `--from-account` and `--to-account` accept a session label only; the CLI resolves a fresh receive address from the account like `receive`.
 
 ```bash
-pnpm --silent wallet-cli start swap quote --from ethereum --to bitcoin --amount 0.1 --from-fresh-address 0xABC... --to-fresh-address bc1q...
-pnpm --silent wallet-cli start swap quote -f ethereum -t bitcoin --amount 0.1 --from-fresh-address 0xABC... --to-fresh-address bc1q... --output json
 pnpm --silent wallet-cli start swap quote --from ethereum --to bitcoin --amount 0.1 --from-account ethereum-1 --to-account bitcoin-native-1
-pnpm --silent wallet-cli start swap quote --from ethereum --to bitcoin --amount 0.1 --from-account ethereum-1 --to-account bitcoin-native-1 --output json
+pnpm --silent wallet-cli start swap quote -f ethereum -t bitcoin --amount 0.1 --from-account ethereum-1 --to-account bitcoin-native-1 --output json
 ```
 
-Required: `--from`, `--to`, `--amount`, and both sides covered by the address flags above.
+Required: `--from`, `--to`, `--from-account`, `--to-account`, `--amount`.
 
 ### swap execute
 

.changeset/afraid-trainers-lick.md

@@ -0,0 +1,5 @@
+---
+"@ledgerhq/live-common": minor
+---
+
+chore(llc): force `msg.value: 0` when swapping from Arc on Dex