feat(7.15): integrate reviewed Python stack through block 08

.circleci/config.yml

@@ -12,7 +12,7 @@ jobs:
           name: Checkout current branch over HTTPS
           command: |
             git clone --depth 1 -b "$CIRCLE_BRANCH" \
-              https://github.com/keepkey/python-keepkey.git .
+              "https://github.com/${CIRCLE_PROJECT_USERNAME}/${CIRCLE_PROJECT_REPONAME}.git" .
             git submodule update --init --recursive
       - run:
           name: Validate canonical Python and EOS vector contracts

.github/workflows/ci.yml

@@ -125,11 +125,32 @@ jobs:
         with:
           repository: BitHighlander/keepkey-firmware
           # PINNED, not a moving branch, so a green result remains citeable.
-          # This is the code/workflow head beneath the handoff-only commit on
-          # firmware PR #843.
-          ref: 9b0583a41b758af7fb4c08280ab2a2bd8bb5d503
+          # Accepted consolidated 7b (#871): supplies the compiler/runtime
+          # contracts exercised by the canonical Python stack through 08.
+          ref: 2483977523d9b6beab52a69429ace9aeefd00f76
           path: keepkey-firmware
 
+      - name: Bind the staged 7.15 capability ledger to the pinned firmware
+        run: |
+          python - <<'PYCODE'
+          import os
+          import pathlib
+          import re
+          # The preceding checkout is the immutable accepted 7b commit. Its
+          # owner-reviewed omissions apply only to this staged 7.15 job;
+          # no Python test assertion or default release behavior is changed.
+          workflow = pathlib.Path('keepkey-firmware/.github/workflows/ci.yml').read_text()
+          values = re.findall(r'^  KK_RELEASE_MISSING_CAPABILITIES: ([a-z0-9,-]*)$',
+                              workflow, re.MULTILINE)
+          if len(values) != 1:
+              raise SystemExit('Expected one explicit ledger in pinned staged firmware')
+          with open(os.environ['GITHUB_ENV'], 'a') as env:
+              env.write('KK_RELEASE_MISSING_CAPABILITIES=' + values[0] + '\n')
+          with open(os.environ['GITHUB_STEP_SUMMARY'], 'a') as summary:
+              summary.write('Staged 7.15 firmware 2483977523d9b6beab52a69429ace9aeefd00f76; '
+                            'deferred capabilities: `' + values[0] + '`.\n')
+          PYCODE
+
       # NOT `submodules: recursive`. trezor-firmware carries a micropython
       # vendor tree whose lib/lwip lives on git.savannah.gnu.org, which serves
       # dumb HTTP and cannot do the shallow clone actions/checkout requests --
@@ -555,7 +576,7 @@ jobs:
             firmware_ref: 4125e1c7409b1cb7b08ba595bc408e3128fc24ca
             min_fw: "7.14.3"
           - release: "7.15"
-            firmware_ref: 9b0583a41b758af7fb4c08280ab2a2bd8bb5d503
+            firmware_ref: 2483977523d9b6beab52a69429ace9aeefd00f76
             min_fw: "7.15.0"
 
     # KK_BITCOIN_ONLY=ON is a second shipping product, not a build flavour:

keepkeylib/debuglink.py

@@ -91,6 +91,12 @@ def read_dice_digest(self):
         obj = self._call(proto.DebugLinkGetState())
         return obj.dice_digest
 
+    def read_confirm_text(self):
+        """(title, body) of the confirmation currently or last shown, exactly
+        as the firmware formatted them, before the body is paged."""
+        obj = self._call(proto.DebugLinkGetState())
+        return (obj.confirm_title, obj.confirm_body)
+
     def read_passphrase_protection(self):
         obj = self._call(proto.DebugLinkGetState())
         return obj.passphrase_protection

keepkeylib/erc7730.py

@@ -166,7 +166,17 @@ def resolve(self, request):
         return definition
 
     def chunk(self, request):
-        definition = self.resolve(request)
+        try:
+            definition = self.resolve(request)
+        except KeyError:
+            if (not request.HasField("recursion_depth") or
+                    request.recursion_depth == 0):
+                raise
+            # An embedded call's definition that the catalog does not hold:
+            # the empty chunk means "none". Firmware 7.15 then shows the
+            # inner call under a blind-sign warning; 7.16 rejects it.
+            return ethereum.EthereumClearSignDefinitionChunk(
+                definition_id=bytes(32), offset=0, total_length=0, data=b"")
         offset = request.offset
         length = request.length
         if length == 0 or length > MAX_CHUNK or offset >= len(definition.envelope):