Cherry-picking commits from cherry-pick-13-43-0-3cad329 to release/13.43.0 for PR #45158

[runway-github]

• feat: reuse ledger transport for multiple operations cp-13.43.0 (feat: reuse ledger transport for multiple operations cp-13.43.0 #45158)

Description

The Ledger integration is presenting an odd UX where the operation
"Account Import" never settles, the possible root cause for this issue
is a failure during a device roundtrip operation using WebHID, since
this operation runs under a keyring mutex with no timeout we never see
the promise resolve/reject and therefore the operation never finishes.

Three changes are introduced to mitigate this issue:

• Revert of fix(hardware-wallets): bound stuck account-creation spinner with device-read timeout cp-13.42.0 #45048. A
  previous temporal fix.
• Add timeouts to LedgerOffscreenBridge as a safety net
  • getPublicKey now has a 30s timeout — no user confirmation needed
• deviceSignTransaction, deviceSignMessage, deviceSignTypedData
  now has a 5 min timeout - needs on device confirmation
• Timeout rejection message updated to: Ledger device did not respond to "<action>" within <n>ms
  • The timeout are arbitrary
• Reuse transport across actions in LedgerLegacyHandler
• handleAction no longer calls await this.closeTransport() in its
  finally. Instead it cancels any pending idle close at entry and
  schedules a new one after the action — so consecutive actions reuse the
  open WebHID transport instead of open/close churning (the churn that
  probably desyncs WebHID).
  • Added scheduleIdleClose()/clearIdleClose() helpers.
• closeTransport() now calls clearIdleClose() (a manual
  disconnect/close supersedes a pending idle close).
• destroy() clears the idle timer before tearing down
  listeners/transport.
• The HID disconnect listener still calls closeTransport() immediately
  on unplug.

Changelog

CHANGELOG entry: reuse ledger transport for multiple operations

Related issues

Fixes: #45027
Fixes: https://consensyssoftware.atlassian.net/browse/MUL-2108

Manual testing steps

Connect and import multiple accounts

1. Connect a Ledger device and import multiple accounts (at least 7).
2. Forget device and disconnect
3. Connect the device again and try to import multiple accounts (more
   accounts than imported in step 1).

Signature

1. Using the imported Ledger accounts try to execute different
   operations like message sign, swap, bridge, and send

Screenshots/Recordings

Screen.Recording.2026-08-03.at.2.28.17.PM.mov

Pre-merge author checklist

• I've followed MetaMask Contributor
  Docs and MetaMask
  Extension Coding
  Standards.
• I've completed the PR template to the best of my ability
• I’ve included tests if applicable
• I’ve documented my code using JSDoc format
  if applicable
• I’ve applied the right labels on the PR (see labeling
  guidelines).
  Not required for external contributors.

Pre-merge reviewer checklist

• I've manually tested the PR (e.g. pull and build branch, run the
  app, test code being changed).
• I confirm that this PR addresses all acceptance criteria described
  in the ticket it closes and includes the necessary testing evidence such
  as recordings and or screenshots.

---

Note

Medium Risk
Changes core Ledger offscreen transport lifecycle,
mutex/serialization, and hardware account unlock paths; mistakes could
cause device lock errors, premature timeouts on signing, or stuck
transports.

Overview
Addresses stuck Ledger flows (e.g. account import) by keeping the
WebHID transport open across bursts of offscreen actions (5s idle
close) instead of closing after every call, with forceReset to
drop a hung transport when recovery is needed.

LedgerOffscreenBridge adds action-specific timeouts (30s for
getPublicKey, 5min for signing) and clearer timeout errors;
unlockHardwareWalletAccount drops its separate account-creation
timeout in favor of that stack.

ledger-router serializes concurrent offscreen messages on one
promise chain, races each action against 60s / 330s backstops (sign vs
read), calls forceReset on timeout, and swallows late rejections
so the chain can continue. DMK stub forwards forceReset to legacy.
Tests cover concurrency, timeout recovery, bootstrap error swallowing,
and init/switch races.

^{Reviewed by Cursor Bugbot for commit
70e07e5. Bugbot is set up for automated
code reviews on this repo. Configure
here.}

---

Co-authored-by: Cursor cursoragent@cursor.com 3cad329

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
93.5% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[metamask-ci]

Builds ready [8cc8db8] [reused from f216617]

• ⚠️ Make sure the build is safe before downloading and running this build.
  • Please do not use these builds with accounts that contain significant real money.
  • Beware the security risks of cache poisoning.
• Webpack builds: chrome, firefox
• Webpack builds (beta): chrome, firefox
• Webpack builds (flask): chrome, firefox
• Webpack builds (test): chrome, firefox
• Webpack builds (test-flask): chrome, firefox
• bundle size: Bundle Size Stats
• bundle analyzer: Bundle Analyzer
• interaction-benchmark: Interaction Stats
• storybook: Storybook
• typescript migration: Dashboard
• all artifacts

⚡ Performance Benchmarks (Total: 🟢 0 pass · 🟡 0 warn · 🔴 0 fail)

Baseline (latest main): 171ed20 | Date: 7/28/2026 | Pipeline: 31023109091 | Baseline logs

Interaction Benchmarks · Samples: 5

⚠️ Missing data: chrome/webpack/interactionUserActions, firefox/webpack/interactionUserActions

✅ No regressions detected

Startup Benchmarks · Samples: 100

⚠️ Missing data: chrome/webpack/startupStandardHome, chrome/webpack/startupPowerUserHome, firefox/webpack/startupStandardHome, firefox/webpack/startupPowerUserHome

✅ No regressions detected

User Journey Benchmarks · Samples: 5 · mock API

⚠️ Missing data: chrome/webpack/userJourneyOnboardingImport, chrome/webpack/userJourneyOnboardingNew, chrome/webpack/userJourneyAssets, chrome/webpack/userJourneyAccountManagement, chrome/webpack/userJourneyTransactions, firefox/webpack/userJourneyOnboardingImport, firefox/webpack/userJourneyOnboardingNew, firefox/webpack/userJourneyAssets, firefox/webpack/userJourneyAccountManagement, firefox/webpack/userJourneyTransactions

✅ No regressions detected

Dapp Page Load Benchmarks · Samples: 100

⚠️ Missing data: chrome/webpack/pageLoadBenchmark

✅ No regressions detected

Bundle size diffs [🚨 Warning! Bundle size has increased!]

• background: 4.15 KiB (0.03%)
• ui: 33.98 KiB (0.19%)
• common: 0 Bytes (0%)
• other: 0 Bytes (0%)
• contentScripts: 476 Bytes (0.02%)
• zip: 11.59 KiB (0.05%)

[owencraston]

Tested in depth by connecting a Ledger Flex.

• connected 6 accounts including clicking next on the account selector page
• tested removing and forgetting an account
• tested erc20 sends
• tested monad sends
• tested swaps
• tested gasless swap on BNB
• tested gasless send on Linea and BNB
• tested personal sign and sign type data 4 on the e2e test dapp
• tested adding a new account

[gauthierpetetin]

No release label on PR. Adding release label release-13.43.0 on PR, as PR was cherry-picked in branch 13.43.0.