ci: exercise the 7.14.3 bitcoin-only product

Author: BitHighlander

.github/workflows/ci.yml

@@ -1,7 +1,7 @@
 # KeepKey python-keepkey CI
 #
-# Pulls the published emulator image (kktech/kkemu) from DockerHub
-# and runs the full python integration test suite against it.
+# Builds the 7.14.3 Bitcoin-only emulator from the fork release branch and
+# runs the full Python integration suite against that exact product variant.
 #
 # Stage 1: GATE (seconds)
 #   └─ lint        Python syntax + deterministic protocol contract tests
@@ -66,10 +66,10 @@ jobs:
           echo "| Offline fixture integrity | ✅ PASS |" >> "$GITHUB_STEP_SUMMARY"
           FIXTURE_SHA=$(sha256sum tests/txcache/manifest.json | cut -d' ' -f1)
           echo "" >> "$GITHUB_STEP_SUMMARY"
-          echo "Fixture manifest SHA-256: `$FIXTURE_SHA`" >> "$GITHUB_STEP_SUMMARY"
+          printf 'Fixture manifest SHA-256: `%s`\n' "$FIXTURE_SHA" >> "$GITHUB_STEP_SUMMARY"
 
   # ═══════════════════════════════════════════════════════════
-  # STAGE 2: TEST — pull published emulator, run pytest
+  # STAGE 2: TEST — build Bitcoin-only emulator, run pytest
   # ═══════════════════════════════════════════════════════════
 
   integration:
@@ -129,7 +129,8 @@ jobs:
         timeout-minutes: 20
         working-directory: keepkey-firmware
         run: |
-          docker build -t kkemu-ci -f scripts/emulator/Dockerfile .
+          docker build --build-arg coinsupport=-DKK_BITCOIN_ONLY=ON \
+            -t kkemu-ci -f scripts/emulator/Dockerfile .
 
       - name: Start the emulator
         run: |
@@ -153,15 +154,22 @@ jobs:
       - name: Wait for emulator
         run: |
           echo "Waiting for emulator bridge on port 5000..."
+          ready=false
           for i in $(seq 1 30); do
             if curl -sf -X POST http://localhost:5000/exchange/main \
                  -H 'Content-Type: application/json' \
                  -d '{"data":""}' > /dev/null 2>&1; then
               echo "Emulator ready after ${i}s"
+              ready=true
               break
             fi
             sleep 1
           done
+          [ "$ready" = true ] || {
+            docker logs kkemu
+            echo "FATAL: emulator bridge did not become ready" >&2
+            exit 1
+          }
 
       # "The emulator answered a ping" is not "the emulator is the right
       # firmware". CI ran a 7.16-era suite against a 7.10.0 image for five
@@ -177,6 +185,7 @@ jobs:
           KK_TRANSPORT_DEBUG: "127.0.0.1:11045"
           KK_MIN_FW: "7.14.3"
           KK_UDP_TIMEOUT: "20"
+          KK_EXPECTED_VARIANT: "EmulatorBTC"
         working-directory: keepkey-firmware/deps/python-keepkey/tests
         run: |
           python - <<'PY'
@@ -198,6 +207,10 @@ jobs:
               sys.exit('FATAL: the emulator image predates the tests that run '
                        'against it. Republish kktech/kkemu from current '
                        'firmware and pin the new digest above.')
+          if f.firmware_variant != os.environ['KK_EXPECTED_VARIANT']:
+              sys.exit('FATAL: expected %s, got firmware variant %r' %
+                       (os.environ['KK_EXPECTED_VARIANT'],
+                        f.firmware_variant))
           PY
 
       # Step-level timeout, deliberately: a JOB-level timeout ends the job as
@@ -208,6 +221,7 @@ jobs:
           KK_TRANSPORT_MAIN: "127.0.0.1:11044"
           KK_TRANSPORT_DEBUG: "127.0.0.1:11045"
           PYTHONPATH: "${{ github.workspace }}/keepkey-firmware/deps/python-keepkey"
+          PYTHONUNBUFFERED: "1"
           # A crashed emulator now raises instead of blocking in recv() forever.
           KK_UDP_TIMEOUT: "45"
         run: |
@@ -235,7 +249,7 @@ jobs:
           echo "" >> "$GITHUB_STEP_SUMMARY"
           if [ -f "$MANIFEST" ]; then
             FIXTURE_SHA=$(sha256sum "$MANIFEST" | cut -d' ' -f1)
-            echo "Fixture manifest SHA-256: `$FIXTURE_SHA`" >> "$GITHUB_STEP_SUMMARY"
+            printf 'Fixture manifest SHA-256: `%s`\n' "$FIXTURE_SHA" >> "$GITHUB_STEP_SUMMARY"
             echo "" >> "$GITHUB_STEP_SUMMARY"
           fi
 

tests/test_msg_signtx_taproot.py

@@ -26,25 +26,26 @@
 
 
 
-# Synthetic outpoint paying 100000 sat to the BIP-86 first receiving address
-# of the "abandon abandon ... about" mnemonic. Taproot signing receives the
-# amount and derives the prevout script from the path, so it does not request a
-# previous-transaction fixture. The outpoint and expected witness below were
-# produced together by an independent BIP-340/341 implementation keyed from
-# BIP-86's published xprv.
-PREV_TXID = "6e32033911982f7550ab1d26232adfd08711293e15085f77cd27628be0a6ee37"
+# Canonical fixture paying 100000 sat to the BIP-86 first receiving address of
+# the "abandon abandon ... about" mnemonic. The device requests the previous
+# transaction even though Taproot signing also receives the amount and derives
+# the prevout script from the path, so this must name a real, hash-consistent
+# transaction from txcache rather than a synthetic outpoint. The expected
+# witnesses below were independently checked against BIP-341 sighashes with a
+# BIP-340 verifier keyed from BIP-86's published xprv.
+PREV_TXID = "3e1fdf082678a8a2f378995ffc0e4f853942c55c4ddbc2771b348413eeeca9a4"
 IN_AMOUNT = 100000
 OUT_AMOUNT = 90000
 OUT_ADDRESS = "1BitcoinEaterAddressDontSendf59kuE"
 
 EXPECTED_WITNESS = (
-    "afe221b16d648a1ad7329f9765930732380cc67765bd73af7ce13b5991146851"
-    "2d9ee77e34af56fe1f59f98372011f7cb400ced614d808c690c5ba907fb62de9"
+    "e11beb22fd50225a4fa53a61738993cc742cc6a2361faea0313b0b456300669c"
+    "2d9ebd503e11855e5bc8018d7bfd5122d578470e1e4e65820705db595724f9eb"
 )
 
 EXPECTED_CHANGE_WITNESS = (
-    "e3c44408fe61256ad406733f100f1ee856eb31854335efa59e60a61ea5d41ab"
-    "341802f0cccb55f644042a1ab390f0a406b9d3efe3996d05442b4ee43d5355eab"
+    "ed37247c670b8b260f2c5a619c8f1443493ea6f1eb6230adce5fbafa4b3067e1"
+    "879a905d40db728c1771207843b2ec03a40484975653e29e583cfc0964d0c95c"
 )
 EXPECTED_CHANGE_SCRIPT = (
     "5120882d74e5d0572d5a816cef0041a96b6c1de832f6f9676d9605c44d5e9a97d3dc"
@@ -65,19 +66,19 @@
 # `signature` alone was populated correctly even while the witness and the
 # locktime footer were being dropped on the wire.
 EXPECTED_SERIALIZED_TX = (
-    "0100000000010137eea6e08b6227cd775f08153e291187d0df2a23261dab50752f98"
-    "113903326e0000000000ffffffff01905f0100000000001976a914759d6677091e97"
-    "3b9e9d99f19c68fbf43e3f05f988ac0140afe221b16d648a1ad7329f976593073238"
-    "0cc67765bd73af7ce13b59911468512d9ee77e34af56fe1f59f98372011f7cb400ce"
-    "d614d808c690c5ba907fb62de900000000"
+    "01000000000101a4a9ecee1384341b77c2db4d5cc54239854f0efc5f9978f3a2a878"
+    "2608df1f3e0000000000ffffffff01905f0100000000001976a914759d6677091e973b"
+    "9e9d99f19c68fbf43e3f05f988ac0140e11beb22fd50225a4fa53a61738993cc742c"
+    "c6a2361faea0313b0b456300669c2d9ebd503e11855e5bc8018d7bfd5122d578470e"
+    "1e4e65820705db595724f9eb00000000"
 )
 EXPECTED_SERIALIZED_TX_CHANGE = (
-    "0100000000010137eea6e08b6227cd775f08153e291187d0df2a23261dab50752f98"
-    "113903326e0000000000ffffffff0250c30000000000001976a914759d6677091e97"
-    "3b9e9d99f19c68fbf43e3f05f988ac409c000000000000225120882d74e5d0572d5a"
-    "816cef0041a96b6c1de832f6f9676d9605c44d5e9a97d3dc0140e3c44408fe61256a"
-    "d406733f100f1ee856eb31854335efa59e60a61ea5d41ab341802f0cccb55f644042"
-    "a1ab390f0a406b9d3efe3996d05442b4ee43d5355eab00000000"
+    "01000000000101a4a9ecee1384341b77c2db4d5cc54239854f0efc5f9978f3a2a878"
+    "2608df1f3e0000000000ffffffff0250c30000000000001976a914759d6677091e973b"
+    "9e9d99f19c68fbf43e3f05f988ac409c000000000000225120882d74e5d0572d5a81"
+    "6cef0041a96b6c1de832f6f9676d9605c44d5e9a97d3dc0140ed37247c670b8b260f"
+    "2c5a619c8f1443493ea6f1eb6230adce5fbafa4b3067e1879a905d40db728c177120"
+    "7843b2ec03a40484975653e29e583cfc0964d0c95c00000000"
 )
 EXPECTED_SERIALIZED_TX_MIXED = (
     "01000000000102a4a9ecee1384341b77c2db4d5cc54239854f0efc5f9978f3a2a878"

tests/test_msg_solana_display_disclosure.py

@@ -57,6 +57,7 @@ def build_memo_tx(signer, memo):
 class TestSolanaDisplayDisclosure(common.KeepKeyTest):
     def setUp(self):
         super(TestSolanaDisplayDisclosure, self).setUp()
+        self.requires_fullFeature()
         self.requires_firmware("7.14.2")
         self.setup_mnemonic_allallall()
 

tests/test_msg_solana_instruction_disclosure.py

@@ -62,6 +62,7 @@ def build_tx(account_keys, required_signatures, instructions,
 class TestSolanaInstructionDisclosure(common.KeepKeyTest):
     def setUp(self):
         super(TestSolanaInstructionDisclosure, self).setUp()
+        self.requires_fullFeature()
         self.requires_firmware("7.14.2")
         self.setup_mnemonic_allallall()
         response = self.client.call(solana.SolanaGetAddress(