feat: unified cross-platform Minotari Ledger installer with auto-detection

[Sp1kyss]

Closes #7795

What this does

Replaces the per-model/per-OS scripts with a single installer that works on macOS, Windows, and Linux and auto-detects which Ledger is connected — no user input needed.

How to run

macOS / Linux:

chmod +x applications/minotari_ledger_wallet/wallet/install_scripts/install_minotari_ledger.sh
./applications/minotari_ledger_wallet/wallet/install_scripts/install_minotari_ledger.sh

Windows (PowerShell):

.\applications\minotari_ledger_wallet\wallet\install_scripts\install_minotari_ledger.ps1

How detection works

1. Enumerates USB HID devices filtered by Ledger's vendor ID (0x2C97)
2. Maps the product ID to a model slug (flex, stax, nanosplus, nanox, nanos)
3. Falls back to ledgerctl info output parsing if the hid library isn't available

All known PID variants per model are covered (including alternate transport PIDs like 0x5000 for Nano X).

Error handling

• No device detected → clear message with checklist (USB connected, PIN entered, Developer Mode on)
• Release asset not found → lists available assets so the user can report it
• Reports clear success/failure status for each step

Files changed

File	Description
install_scripts/install_minotari_ledger.py	Core installer (Python 3.8+, stdlib only + pip deps)
install_scripts/install_minotari_ledger.sh	macOS/Linux launcher (creates isolated venv, handles libusb)
install_scripts/install_minotari_ledger.ps1	Windows launcher (creates isolated venv)
install_scripts/README.md	Usage docs + troubleshooting

The existing per-model scripts are untouched — this adds the unified option alongside them.

[github-actions]

⚠️ This PR contains unsigned commits. To get your PR merged, please sign those commits (git rebase --exec 'git commit -S --amend --no-edit -n' @{upstream}) and force push them to this branch (git push --force-with-lease).

If you're new to commit signing, there are different ways to set it up:

Sign commits with gpg

Follow the steps below to set up commit signing with gpg:

1. Generate a GPG key
2. Add the GPG key to your GitHub account
3. Configure git to use your GPG key for commit signing

Sign commits with ssh-agent

Follow the steps below to set up commit signing with ssh-agent:

1. Generate an SSH key and add it to ssh-agent
2. Add the SSH key to your GitHub account
3. Configure git to use your SSH key for commit signing

Sign commits with 1Password

You can also sign commits using 1Password, which lets you sign commits with biometrics without the signing key leaving the local 1Password process.

Learn how to use 1Password to sign your commits.

[gemini-code-assist]

Code Review

This pull request introduces a unified installer for the Minotari Ledger wallet, including a core Python script and platform-specific launchers for Windows, macOS, and Linux. The review feedback identifies several critical issues, such as a naming mismatch for the Nano S Plus model that would prevent asset downloads and logic errors in the device detection fallback. Additionally, the reviewer suggests refining the Python dependency list, improving subprocess reliability, and adopting more idiomatic practices for temporary directory management and system-level dependency installation.

[gemini-code-assist]

Invoking ledgerctl directly relies on the system PATH being correctly updated after venv activation, which can be unreliable in subprocesses. It is safer to use sys.executable -m ledgerwallet to ensure the command is executed using the specific version installed in the virtual environment.

Suggested change

	run(["ledgerctl", "install", app_json])
	run([sys.executable, "-m", "ledgerwallet", "install", app_json])

[gemini-code-assist]

Using tempfile.TemporaryDirectory as a context manager is more idiomatic and robust than mkdtemp with manual cleanup, as it ensures the directory is removed even if an exception occurs or the script is interrupted.

    with tempfile.TemporaryDirectory(prefix="minotari_ledger_") as tmp_dir:
        try:
            download_and_extract(url, filename, tmp_dir)
            app_json = find_app_json(model, tmp_dir)
            install_app(app_json)
        except RuntimeError as exc:
            error(str(exc))
            sys.exit(1)

[gemini-code-assist]

Using sudo inside a script can be disruptive and may fail in non-interactive environments. It is better to check if the required libraries are already present before attempting installation. Additionally, using || true masks potential failures that could lead to cryptic errors during the Python execution phase.

[SWvheerden]

please check the review commands, and we dont support the nano, only the nanosplus

[SWvheerden]

/gemini review

[gemini-code-assist]

Code Review

This pull request introduces a unified cross-platform installer for the Minotari Ledger wallet, supporting Nano S Plus, Nano X, Stax, and Flex models. The implementation consists of a core Python script for automated device detection and firmware installation, complemented by Bash and PowerShell launchers that handle virtual environment setup and system dependency checks. Review feedback recommends replacing the legacy urllib.request.urlretrieve function with urllib.request.urlopen to improve the robustness of the download logic.

[gemini-code-assist]

The urllib.request.urlretrieve function is considered a legacy interface and is generally discouraged in favor of urllib.request.urlopen(). Using urlopen provides better control over the request and is more robust for modern Python applications.

Suggested change

	urllib.request.urlretrieve(url, zip_path, reporthook=progress)
	with urllib.request.urlopen(url) as response, open(zip_path, "wb") as out_file:
	total_size = int(response.getheader("Content-Length", 0))
	block_size = 8192
	count = 0
	while True:
	buffer = response.read(block_size)
	if not buffer:
	break
	count += 1
	out_file.write(buffer)
	progress(count, block_size, total_size)

[SWvheerden]

this looks fine, I just want to test this on a clean install machine