chore(release): develop -> main - #94
Open
github-actions[bot] wants to merge 154 commits into
Open
Conversation
* fix: settings scrollable — native header, bounces, extra padding * fix: settings scroll — remove ImageBackground/SafeAreaView wrapper, use native header, hide back title * fix: settings back button label, scroll fix, navigation path * fix: settings scroll — custom header, no native header, View+ScrollView structure * fix: settings scroll — disable gesture, SafeAreaView, nestedScrollEnabled * fix: disable fullScreenGesture on settings in layout to unblock scroll * fix: replace ScrollView with FlatList for settings scroll * fix: use gesture-handler ScrollView to bypass Stack gesture conflict * fix: wrap app in GestureHandlerRootView and use SafeAreaView for settings scroll Settings list could not scroll because the screen used the gesture-handler ScrollView import while the app root was missing a GestureHandlerRootView, and the screen used a manually-padded View instead of a safe-area-aware container. Switch settings to RN's ScrollView inside SafeAreaView and wrap the root tree with GestureHandlerRootView so any future gesture-based component (sheets, swipeables) also works.
* feat: rich tx rows with counterparty, fiat estimate, Send/Receive types
Transaction rows now lead with the WHO/WHERE so the user can scan a list
without reading every cell:
- Pay rows show the merchant as the primary label and a subtle purple dot
+ "Pay · DATE · ≈ FIAT" subtitle. Fiat is converted to the user's selected
display currency via pricingService so a Pay in BTC/USDC also surfaces the
CHF/EUR/USD value.
- Other types show their counterparty as the subtitle: Buy → funding source
("DFX SEPA-Überweisung"), Sell → payout target ("DFX → IBAN ****4218"),
Send → recipient address, Receive → sender, Swap → venue.
- Send/Receive added to the TransactionDto union so on-chain transfers stop
collapsing into Sell/Buy and the In/Out filter on the TX history maps
correctly (In = Buy + Receive, Out = Sell + Send + Swap).
- Type-specific icons restored: Buy down/green, Sell up/red, Swap blue,
Pay storefront purple, Send red, Receive green.
- Right column unified to neutral colors (amount black, state grey) so the
list reads cleanly; row direction is conveyed by the +/- prefix.
- Detail screen adds a labeled counterparty row (Händler / Quelle / Empfänger
/ Absender / Auszahlung an / Börse) above the existing date/from/to rows.
Mock transaction service expanded to cover every chain and every type with
counterparty labels so each TX list (global, per-asset, per-asset+network)
has data to render while the live API is unavailable in dev.
Portfolio overview shifted down (paddingTop: 80) so the dashboard mountain
background stays visible above the total card.
* chore: prettier format tx detail screen
* fix: settings back button falls back to dashboard when stack history empty
balanceHidden was rendering at fontSize 64 / lineHeight 84 while the visible state used fontSize 52 / lineHeight 56, so toggling shifted the entire balance section vertically (and the layout below it) by ~28px. Match the hidden style to the visible whole-balance dimensions so the row stays put.
* feat: Bitcoin Mainnet network + always-on BTC, force home on reload - Add Bitcoin Mainnet (Taproot) as a first-class chain alongside Lightning (Spark) so the BTC group in the portfolio lists every supported variant: Bitcoin Mainnet, Lightning, WBTC on Ethereum/Arbitrum/Polygon, cbBTC on Base. Detail page also lists all six regardless of chain selection. - Bitcoin (mainnet + Lightning) is implicitly always-enabled and never shown in the manage UI — moved into a new IMPLICIT_ENABLED_CHAINS list and unioned into the user's enabled chains by useEnabledChains so a user can never accidentally hide their BTC. - BTC-category assets bypass the enabledChains filter in getAssets and getAssetsForCanonicalSymbol, so the Bitcoin group always lists every variant even if a user disabled e.g. Polygon (WBTC/Polygon still shows). - WDK_SUPPORTED_CHAINS list filters non-WDK chains (currently Bitcoin mainnet, since the wdk-wallet-btc package isn't bundled in this build) out of useBalancesForWallet so we don't error with "no wallet manager for network: bitcoin". Mock raw balance fallback still drives the display amount. - TabsLayout collapses the stack back to dashboard on every fresh mount (cold start, Metro reload, deep-link entry) so the user never wakes up on a child screen like Settings after a reload. - ChainId union extended; CHAIN_ASSET maps in buy/sell screens cover the new chain. * fix: defer dashboard redirect so root layout finishes mounting first * fix: gate auth layout behind PIN verify on every app start and reload * fix: wrapped BTC variants follow chain enable state, only mainnet+Lightning are always-on
…100) Send / Receive - Send: selectedAsset starts as null so no asset card has the active border on first render — the lila border only appears around the one currency the user explicitly taps as a visual confirmation. - Receive: split into a 2-step flow mirroring Send. Step 1 picks the asset (BTC / CHF / EUR / USD) with the same border-on-click behavior, plus a bank-account pill underneath that routes to /(auth)/buy. Step 2 shows the QR code, address, and copy button for the chosen asset. - BTC offers three receive layers: Native (bitcoin), Lightning (spark), and EVM (ethereum / WBTC) as a chip selector on the QR step. Stablecoins skip the chain selector entirely — they all live on EVM L2s, and we default to Ethereum to keep the UX simple. - Bank pill subtitle reduced to "DFX SEPA transfer" / "DFX SEPA-Überweisung" (TWINT and card removed per request). Auth gate - Hydrate the auth store from app/_layout.tsx instead of app/index.tsx so every entry — cold start, Metro reload, or a deep route restoring on /(auth)/(tabs)/dashboard — still flips isHydrated. Without this fix a reloaded deep route bypassed PIN entirely because index.tsx never mounted. - (auth)/_layout.tsx hard-redirects to /(pin)/verify whenever isAuthenticated is false. isAuthenticated is in-memory only, so it resets on every cold start and JS reload — PIN/biometric is required again before unlocking. - Removed the redundant setTimeout/router.replace from (tabs)/_layout.tsx that was double-navigating after PIN verify and showing a brief flash of the previous screen.
…BTC (#101) The Bitcoin chain was wired into the UI as a label only — the WDK bundle didn't ship a wallet manager for it, so addresses came from a static mock and balance queries were filtered out via WDK_SUPPORTED_CHAINS. This commit lights up the real on-chain support: - Install @tetherto/wdk-wallet-btc@^1.0.0-beta.9 (BIP-84 Native SegWit, bc1q… addresses derived from the same seed phrase as every other chain). - wdk.config.js: register the bitcoin network so the worklet bundle includes the BTC wallet manager. `npm run bundle:wdk` regenerates the bundle — output now ships eight networks instead of seven. - src/config/chains.ts: add wdkConfigs.networks.bitcoin with an Electrum TCP client against electrum.blockstream.info:50001 (overridable via EXPO_PUBLIC_BTC_ELECTRUM_HOST / _PORT). - WDK_SUPPORTED_CHAINS now includes bitcoin so useBalancesForWallet queries it for real instead of being skipped. - Drop the MOCK_ADDRESSES fallback in WalletAddressBar — useAccount returns the real bc1q… address now. - CHAIN_LABELS bitcoin → "Bitcoin" (the (Taproot) suffix was misleading; the beta package issues BIP-84 SegWit, not BIP-86 Taproot). Real Taproot (bc1p…) is not in the beta package's default address type yet; when WDK exposes it we can switch the derivation in one place.
…ub-picker (#102) * feat: redesign Buy and Sell with asset tiles, full quote breakdown, USD tokens Buy - Single-page flow: asset tiles (BTC/CHF/EUR/USD) inline with the amount card; no separate asset-picker step. Active border highlights the tapped tile, no border on first render. - Chain chips appear after asset selection (only when multi-chain). USD exposes USDT/USDC as a token sub-picker on top of the chain chips. - Live quote card from DFX /buy/quote with the full fee breakdown: exchange rate, DFX fee (% + fixed amount), network fee, fixed fee, total fee, and the estimated received amount. Debounced 350ms. - Min/Max volume warnings, Continue disabled when out of range. - Bank step shows IBAN/BIC/recipient/reference as tap-to-copy rows with the reference highlighted in the brand color, plus a locked-in quote snapshot. - USD removed from the bank-transfer payment currency list — DFX onramp only supports CHF / EUR. Sell - Mirrors the Buy redesign: asset tiles, chain chips, USDT/USDC sub-picker for USD, live /sell/quote breakdown, IBAN step, deposit-address card on the confirm step (tap-to-copy, brand-color highlight). - USD removed from payout currency list — DFX off-ramp only supports CHF / EUR bank transfers. API integration - DFX /buy/quote, /buy/paymentInfos, /sell/quote, /sell/paymentInfos all reject bare-string asset/currency. Add a new dfxAssetService that fetches /asset (cached per session) and resolves the canonical { id, blockchain, evmChainId? } shape the API expects. payment-service builds the proper asset reference on every call. - Crash guard: only render the quote breakdown when paymentInfo.asset and paymentInfo.currency are both present (the API can return partial info on validation errors). i18n: full set of buy.* and sell.* keys for the breakdown labels in DE+EN. * feat: add Lightning + EVM (WBTC/cbBTC) chains to BTC asset on Buy and Sell
…-token rehydrate (#103) Bitcoin - New `bitcoin-taproot` chain alongside `bitcoin` (SegWit) so the BTC group surfaces every address-type variant DFX supports — Mainnet (SegWit), Taproot, Lightning, plus the wrapped EVM L2 variants. - Manage UI shows a single non-toggleable "Bitcoin" row in "Immer Aktiv"; Taproot + Lightning ride along implicitly to keep the list short. - ALWAYS_ON + IMPLICIT chains are unioned into the user's enabledChains so pre-existing stored selections can't accidentally hide BTC variants when a new chain id ships. - Receive offers SegWit / Taproot / Lightning / EVM as a 4-chip layer picker for BTC. Mock Taproot address fills in until wdk-wallet-btc exposes BIP-86. - Buy / Sell BTC asset offers all 7 chains (SegWit, Taproot, Lightning, Ethereum, Arbitrum, Polygon, Base) with the appropriate token symbol per chain (BTC, WBTC, cbBTC). Asset detail - Holding rows now lead with the canonical name (always "Bitcoin" for the BTC group) and use a short variant suffix below — "SegWit", "Taproot", "Lightning", or the chain name for wrapped variants. - Portfolio "X networks" badge counts distinct chains, so USDT + USDC on Ethereum collapse to "1 network" instead of being double-counted. Sell flow - Chain + token chips are filtered to only the chains where the user actually holds funds (mock balance fallback included). When nothing is available a friendly "Keine Bestände" hint replaces the picker. - Drop USD from the payout currency list — DFX off-ramps only support CHF / EUR. - Same single-page layout as Buy: asset tiles, chain chips, optional USDT/USDC token sub-picker, live quote breakdown, IBAN step. Misc UX - Pay screen header drops the redundant MenuModal sheet — the menu icon now links straight to /settings, mirroring the dashboard. - USD stablecoin holdings are rendered as just "USDT" / "USDC" instead of "Tether USD" / "USD Coin". KYC + auth - Local KycLevel union extended to include 51; user-service + kyc-service force the level to 51 with a 1M/Day trading limit so the buy/sell flows aren't gated by KYC during dev. Falls back to a synthesized response if the live API is unreachable. - Auth-store hydrate now re-arms `dfxApi.setAuthToken(...)` from the persisted JWT. Without this, every API call after a cold start was failing with `401 Unauthorized` even though `isDfxAuthenticated: true` was hydrated from secure storage.
- Remove unused imports / variables flagged by lint:
- (tabs)/_layout.tsx: drop unused useTranslation
- (tabs)/settings.tsx: switch from default i18n import to the i18n
instance from useTranslation, silencing the named-export caution
- portfolio/[symbol].tsx: drop unused getAssetMeta + unused
eslint-disable directive
- send/index.tsx: drop unused ChainSelector
- transaction-history/index.tsx: drop networkFilter from useMemo deps
(no longer referenced inside the memo body)
- Deduplicate fmtFiat / fmtCrypto helpers that lived in both buy and
sell screens. Moved into portfolio-presentation.ts as `formatFiat`
and `formatCryptoAmount`; both screens import them with their
short aliases.
Lint, typecheck, prettier, and 72 tests all pass clean now.
- tokens.ts: remove MOCK_BALANCES_DISPLAY + getMockRawBalance helper. All callers (portfolio overview, asset detail, useTotalPortfolioFiat, Sell hasHolding) now read raw balances directly from the WDK useBalancesForWallet result. - transaction-service.ts: drop MOCK_TRANSACTIONS — getTransactions just returns the live `/transaction/detail` payload. The TransactionDto union still carries the local-only `network` and `counterparty` fields so the UI keeps rendering rich rows once the backend supplies them. - user-service.ts: drop MOCK_USER + the forced kyc-level-51 override — return whatever the live `/v2/user` endpoint says. - kyc-service.ts: drop the kyc-level-51 + bumped trading-limit override — return the live `/v2/kyc` payload as is. - KycLevel union back to its original 0/10/20/30/40/50/-10/-20. - transaction-history WalletAddressBar: drop the bitcoin-taproot mock fallback. If WDK can't derive an address (e.g. taproot until wdk-wallet-btc exposes BIP-86) the bar simply doesn't render. Pay screen - Remove the bottom-center lightning button and replace with no additional UI — the cutout already communicates "scan a QR" visually. Drop the now-unused lightning + lightningComingSoon i18n keys; the scanToPay copy stays for future use.
CI macOS runners are significantly slower than local machines. Increase all waitFor timeouts to 30s and raise the snapshot comparison threshold from 0.05% to 1% to absorb GPU/font rendering differences between local and CI environments.
* feat: Multi-Sig setup wizard, manage hub, and settings entry - Dashboard shield button (top-left) opens new multi-sig hub - Hub shows configured vaults with quorum + co-signers, or empty state - 6-step wizard: intro → concept (with 2-of-3 diagram) → quorum → co-signers → backup → success - Custom quorum option with +/− steppers (up to 9 co-signers) - Vault config persisted via MMKV-backed Zustand store - New "Multi-Sig" row under Settings → Wallet & Sicherheit - DE/EN copy uses "Kryptowährungen" instead of generic "Geld" * chore: prettier format
The PIN unlock beforeAll hook runs the full onboarding flow which exceeds 120s on slow CI runners. Increase Jest testTimeout to 300s and workflow timeout to 90 minutes.
…gement (#108) - Settings → Sprache/Währung now also pushes to /v2/user via dfxUserService.updateUser when DFX-authenticated - New email screen at /(auth)/email: shows current address, lets user request a 6-digit code via /v2/user/mail, verifies via /v2/user/mail/verify - New DFX wallets screen at /(auth)/wallets: lists user.addresses[] with active badge, supports linking additional addresses (Bitcoin first) by signing /auth with current Bearer JWT preserved - Settings → Konto gets new "E-Mail" and "DFX-Wallets" rows - Relaxed dfxUserService.updateUser signature to accept partial language/currency lookups - New dfxAuthService.linkAddress that re-uses signMessage flow without overwriting the original token
- Drop /v1 from base URL so /v2/* paths resolve correctly. All v1 endpoints
in auth/asset/payment/transaction/support services now carry the /v1 prefix.
- Mail verify body uses { token } (was { code }), matching DFX backend
expectations. Email screen accepts a free-form token from the confirmation
link instead of a 6-digit numeric code.
- linkAddress now requires an existing session, posts /v1/auth, and always
restores the original Bearer token in a finally block so the user keeps
their primary session even when the backend rotates tokens.
- KYC screen no longer shows the "complete" state when the levels list is
empty (steps.every() returns true on []).
- KYC service uses env.dfxApiUrl instead of a hardcoded host so staging
environments work correctly.
Routes each asset to a balance source based on its `balanceFetchStrategy` tag — `wdk` for BTC variants and Spark, `evm` for a new direct JSON-RPC fetcher (batched `eth_getBalance` + `eth_call balanceOf`). The EVM fetcher is a swappable adapter behind a hook, so a future migration back to WDK-EVM is a local change to one source rather than a rewrite of every consumer.
The setup-pin-screen waitFor in pin-unlock.test.ts still had 30s while the same wait in onboarding.test.ts was already at 120s. WDK chain initialization takes >30s on CI runners.
…, asset shortcuts (#113) Buy and Sell now recover gracefully from every state DFX returns instead of just dumping the raw error string. The recovery modal handles four kinds: - 401 / silent-retry exhausted → "DFX-Login nötig" → routes to email login - KYC_LEVEL_REQUIRED / KYC_DATA_REQUIRED → "KYC fortsetzen" → /kyc - REGISTRATION_REQUIRED → "DFX-Konto erstellen" → email login - "Asset blockchain mismatch" → "Wallet verknüpfen" → signs with the current chain's wallet and posts /v1/auth so DFX adds it to jwt.blockchains; auto-retries the original quote on focus - "EmailRequired" → "E-Mail hinterlegen" → /(auth)/email screen, retry on focus once verified DFX API integration cleanup: - /v1/asset and /v1/fiat use a new dfxApi.getPublic() that intentionally omits the bearer header — DFX otherwise returns a per-user filtered subset that didn't even contain BTC for our test account. - Currency is sent as { id } resolved via the new dfxFiatService instead of { name }, matching the backend's strict integer validation. - Asset is sent as { id } only — sending blockchain alongside trips DFX's "Asset blockchain mismatch" branch in shared/payment-info.service.ts. - Empty 200/201 responses no longer crash JSON.parse (e.g. /auth/mail). - Lightning maps to DFX blockchain "Spark" (Tether wdk-wallet-spark); Taproot maps to DFX blockchain "Lightning" via the new LDS integration. DFX Lightning (lightning.space / "Taro"): - src/services/lds/* signs the static ownership message with the WDK BTC SegWit wallet, exchanges for a JWT, fetches the user's Lightning Address + addressOwnershipProof. - useLdsWallet caches per session. - Receive screen renders the LN address as the Taproot tab. - Buy/Sell linkChain handler for bitcoin-taproot uses the LDS proof instead of a fresh wallet sign-in. Email confirmation screen at /(auth)/email plus the email-login screen at /(auth)/dfx-login (request mail → click link → "E-Mail bestätigt" button that re-auths and compares JWT account ids, mirroring the realunit-app pattern). Asset/wallet shortcuts: - New <AssetActions /> Kaufen/Verkaufen pill row reusing the existing primaryLight + primary visual language. - Placed on the wallet detail screen (under the address bar) and on the asset detail screen (inside the total card). - Buy/Sell read asset/chain route params and preselect on mount. Other: - BTC variants on Arbitrum / Polygon / Base default-enabled so the user sees them in portfolio + Buy/Sell pickers without manual chain toggle. - DFX KYC service uses env.dfxApiUrl instead of a hard-coded host. - KYC screen no longer shows "complete" when the steps list is empty. - /v1 auth retry is wired centrally in (auth)/_layout via setOnUnauthorized so token-expiry never bubbles up as a "DFX-Login nötig" popup.
…d WDK provider routing (#116) Three related fixes from end-to-end send testing on Polygon. Send was hardcoding `getNativeAsset(chain)` regardless of the symbol the user picked, and the typed amount was passed straight through, so "1 USD on Polygon" actually sent 1 wei of MATIC. The send hook now takes the resolved `IAsset` (mapped via a new `getSendAssetForCanonical(symbol, chain)`) and scales the display amount through a BigInt `parseUnits` helper before handing it to WDK. The dashboard wasn't updating after a successful send because only WDK's own balance cache was being invalidated; the new EVM fetcher's TanStack Query stayed stale. A `useRefreshBalances` hook now hits both sources at once and is wired into the send flow. WDK's send was also failing on Polygon because `getWdkConfigs` had its own hardcoded copy of `polygon-rpc.com` (now returns 401 / API key disabled). Routing every EVM `provider` field through `getEvmRpcUrl` keeps WDK and the balance fetcher on the same nodes, so both pick up the PublicNode defaults and any future env-var overrides without drift.
Surfaces the paymaster-charged fee on the confirm step so users see what they'll actually pay before signing. The estimate fires when transitioning to confirm and is rendered alongside the existing summary rows; loading and error states each have their own copy. The fee is denominated in the chain's paymaster token (USDT for ETH/ARB/POL, USDC for Base) — `getPaymasterTokenInfo(chain)` provides the symbol + decimals locally because the bundler returns only a raw amount without context. Note: this duplicates the `paymasterToken` declarations in `getWdkConfigs`, so future refactors should consolidate them into one table. `useSendFlow` exposes a new `estimate(params)` callback that wraps WDK's `useAccount().estimateFee` with the same display→base-units scaling we use for `send`, so the screen passes the user-typed string directly. A request-id ref guards against stale results from earlier estimate calls when the user goes back, edits, and returns to confirm.
* Merge PIN unlock tests into single test suite WDK's restoreWallet() fails on the second call within a CI run, likely due to stale WDK state that survives app reinstall. Moving PIN unlock tests into the same file as the onboarding flow avoids the second restoreWallet() call by reusing the already-onboarded state from the create wallet flow. * Remove unused device import
* feat: instant buy/sell quote, auto-link all chains, DFX-Wallets diagnostics
Quote breakdown now appears the moment the user types an amount instead of
waiting for the full /buy/paymentInfos round-trip. The Angebot card opens
straight away with a loading spinner, hangs the previous quote on screen
during refresh, and renders directly off the /buy/quote response (DFX'
BuyQuoteDto omits asset/currency objects — we use the local UI selection
for the labels).
Auto-link extended from {Bitcoin, Lightning} to also cover the EVM chains
(Arbitrum, Polygon, Base) using the same WDK Ethereum key — silent signing
in the Bare Worklet, no user prompt. Auto-link reads the active JWT's
user.blockchains claim before signing so it never re-prompts for a chain
DFX already knows about; the per-chain cache is populated from both auto-
link and modal recovery, so cold starts with a complete JWT do nothing.
Address-conflict recovery: when /v1/auth returns 409 ("Address already
linked to another account") for either an EVM or LNURL link, we drop the
prior session and re-auth as the address owner instead of forcing a
merge DFX won't allow. The buy/sell flow then runs against the account
that already has the chain attached, dodging both the 409 and the next
"Asset blockchain mismatch".
DFX-Wallets settings screen now detects the "User is merged" 403 and
offers a one-tap "Erneut bei DFX anmelden" CTA that re-issues the JWT
against the merged target user.
Other fixes:
- Lightning short-circuit: linkLnurlAddress uppercases the LNURL because
DFX' validator only accepts (LNURL|LNDHUB)[A-Z0-9]+
- Spark/Lightning pill marked unsupported (DFX rejects WDK's DER-ECDSA
Spark signature) — pill stays visible for parity with receive but the
buy flow shows a clear "not yet supported" hint instead of running the
broken auth path
- Fee percentage was off by 100x (rate is a fraction, not a percent)
- Quote-error handling: surface DFX' soft validation errors (KycRequired,
EmailRequired, AssetUnsupported, etc.) inside the Angebot card with
translated messages instead of stalling on "Angebot wird berechnet"
- "Tippe auf Weiter" hint when /buy/quote returns isValid:false without
a specific error code (chain still needs linking on /paymentInfos)
- LogBox.ignoreLogs filters the WDK getBalance/getAddress timeout toasts
that aren't actionable for the user
- Portfolio detail row uses the token symbol (USDC/USDT) instead of the
generic canonicalName ("Dollar") when canonical groups have multiple
token variants
- Cold-start token sync via dfxAuthService.adoptStoredToken so the very
first post-boot link attempt doesn't throw "Not authenticated"
Validation: typecheck, lint, 100/100 tests green.
* chore: prettier formatting
* feat: bitcoin lightning pill via LDS LNURL
Add a separate "Lightning" pill alongside "Taproot" on the BTC buy/sell
screens. Both ride DFX' Lightning Network rails (lightning.space-managed
LDS user) — internally they share the LDS LNURL link path, but exposing
them as two pills keeps the user-facing Lightning label distinct from
the Taproot Asset terminology that Taproot still surfaces.
The previous "Lightning" pill mapped to Spark, which DFX' /v1/auth
verifier rejects with "Invalid signature" — that path is gone from BTC
buy/sell. Spark still exists for native send/receive.
ChainId gains `bitcoin-lightning`; both `bitcoin-taproot` and
`bitcoin-lightning` route through linkLnurlAddress with the LDS
ownership proof.
…ncellation (#119) * fix: harden URL handling, seed verify shuffle, screen capture, list virtualisation Security: - Server-supplied URLs from /v1/kyc redirects now flow through an https-only allow-list before reaching Linking.openURL — `javascript:`, `data:`, plain http, and malformed strings are dropped silently. - The generic in-app WebView refuses to load any URL whose host isn't on the explicit DFX/KYC-vendor allow-list and additionally rejects off-host navigations via onShouldStartLoadWithRequest. - Seed verification shuffles the answer options with a uniform Fisher-Yates instead of `arr.sort(() => Math.random() - 0.5)`. The old approach skewed the distribution and let positional bias leak the correct answer with enough samples. - Seed export screen blocks screenshots and the iOS app-switcher snapshot while words are visible (expo-screen-capture). Released on unmount. Performance: - Transaction history list moved from ScrollView+map to FlatList with windowing (initialNumToRender 20, removeClippedSubviews). Long histories no longer block the JS thread on mount. - Verify-seed setTimeout calls now register with a useEffect cleanup so unmounting mid-animation doesn't fire setState on a stale component. Adds expo-screen-capture (~8.0.9) and a small src/services/security/ module for the URL allow-list checks. * feat: settings overhaul to align with realunit backend patterns Settings sub-screens reworked to match the realunit-app's structure where they overlap (read-only data displays, native CSV download for tax reports, system-browser hand-off for legal docs, in-app contact hub) while preserving our existing design. Realunit-style backend additions: - Quote requests (`useBuyFlow` / `useSellFlow`) cancel any superseded predecessor via `AbortController` so a fast-typing user never sees stale fees flash in. Mirrors realunit's `CancelableOperation`. - Discriminated `status` tag (`idle | loading | success | invalid | authGate | error`) on the buy/sell hook return — type-safe state machine alongside the legacy flat shape for backwards compat. - 5-minute signature cache in `dfxAuthService` so 409→re-auth flows and background token refreshes don't re-prompt the wallet to sign the same challenge twice. Cleared on logout. - LNURL 409-fallback (`loginAsLnurlAddressOwner`) for the bitcoin- taproot link flow, mirroring the EVM `loginAsAddressOwner` pattern. - New `useDfxAuth.reauthenticateAsOwner` recovers the merged-target user when the JWT points to a merged-away account; used by the Wallets / KYC / Email screens' "Erneut bei DFX anmelden" CTAs (the previous `authenticate()` kept the stale Bearer attached and the server kept returning the same 403). Settings sub-screens: - KYC screen now shows a level card with localised tier descriptions (0–50, mapped to DFX' KYC scheme) plus a step-status table that maps the raw DFX status enum (`InProgress`, `InReview`, `Outdated`, …) to user-facing strings. At Level 50, `InProgress` and `Outdated` steps are labelled "Auffrischung läuft" rather than "läuft" so historically verified users aren't told their Ident is incomplete during a renewal cycle. The "Continue Verification" button is hidden at Level 50. - KYC + Wallets + Email all detect the "User is merged" 403 path and surface a one-tap re-auth CTA instead of a misleading Level 0 / empty data display. - Email screen rebuilt as a read-only contact-data view (email + phone rows with edit-via-KYC buttons) — mirrors realunit's `settings_user_data_page.dart`. Renamed to "Kontaktdaten". - New native Tax-Report screen (`/(auth)/tax-report`) — picks year + format, calls DFX' two-step `PUT/GET /v1/transaction/csv`, downloads via expo-file-system, hands off to expo-sharing. Replaces the FAQ webview stub. expo-sharing is soft-imported so the screen still loads on builds without a fresh prebuild. - New native Legal screen (`/(auth)/legal`) — lists three legal docs, hands them to the system browser via Linking.openURL with an https-only allow-list check. Replaces the in-app webview wrap. - New native Contact screen (`/(auth)/contact`) — four channels (in-app support tickets, mailto, website, docs) with the same allow-list guard. Other fixes that landed: - AppHeader's default back handler now checks `router.canGoBack()` and falls back to the dashboard tab if no parent — direct deep-link mounts (`simctl openurl`, push notifications) used to crash the navigator with `GO_BACK was not handled`. - Cleaned up explicit `onBack={() => router.back()}` overrides on AppHeader callers so the new safe fallback applies everywhere. - expo-screen-capture import in seed-export is now a soft require — the native module isn't always linked yet, and the static import was crashing the screen with "Cannot find native module". - Tax report and tx history flatlist virtualisation, security audit fixes (URL allow-list for KYC + WebView, Fisher-Yates shuffle in verify-seed, screen-capture protection on seed export, timer cleanup in verify-seed) — see prior commit messages. Validation: typecheck, lint, format, 100/100 tests green.
DFX' /v1/support/issue requires type, reason, and name as enum/string.
The previous { reason, message } body silently failed class-validator
on the backend so tickets never landed. Default type to 'GenericIssue'
and reason to 'Other' so the existing Subject+Message form works; the
user-typed subject becomes the ticket name.
Errors are now surfaced in the UI instead of silent catch.
… CoinGecko (#131) Linked-wallet hub - Settings → DFX Wallets gets a per-row checkbox + pencil rename (RenameWalletModal), persisted via secureStorage. Active address stays implicit; only additional linked wallets are toggleable. The previous redundant "Wallet-Adresse" settings row (route to /receive) is removed in favour of the DFX-Wallets entry. - New rail on Portfolio: every selected linked wallet renders as a card with the custom name, blockchain list, fiat sum, and truncated address. Tapping navigates to the new linked-wallet detail screen (address copy + Buy/Sell pills + transactions deep-link). Per-wallet fiat resolution - useLinkedWalletBalances polls mempool.space for BTC + reuses EvmBalanceFetcher for arbitrary EVM addresses (publicnode by default). useLinkedWalletFiat layers the existing useBalances cache on top so wallets backed by the local WDK seed resolve synchronously and external wallets fall through to RPC. - useTotalPortfolioFiat folds the selected wallets' fiat into the dashboard's headline total so ticking/unticking changes it live. Buy/Sell target-wallet override - LinkedWalletDetailScreen pushes targetAddress + targetBlockchain to the buy/sell screens. Both surfaces show a banner naming the wallet and gate the bank-step transition behind ConfirmTargetWalletModal. useLinkedWalletReauth switches the DFX session via loginAsAddressOwner (BTC + EVM + LNURL) before the actual DFX call, so the credit lands at the chosen address. Wallets we cannot sign for locally are flagged in the banner and the Continue button is disabled. Pricing on CoinGecko + EUR support - Replaced the Bitfinex-only pricing client with a CoinGecko fetch that retrieves BTC/ETH/USDT/USDC/WBTC/cbBTC/ZCHF/dEURO/POL/XAUT in USD/CHF/EUR in a single round-trip. AssetTicker grew accordingly; FiatCurrency gained EUR. SYMBOL_TO_TICKER now anchors fiat-pegged tokens on their stablecoin proxies (CHF→zchf, EUR→deuro). computeFiatValue simplified to a direct lookup with par-shortcuts for same-currency holdings. - Added resolveFiatCurrency helper so every screen routes EUR through the proper enum value instead of the previous "CHF ? CHF : USD" fallback. PIN unlock UX - Verify-PIN screen wears the dashboard mountain background. Face ID pill sits above the dot row as the primary affordance; auto-prompt still fires on mount when biometric is enabled. New i18n keys for the unlock title and attempt-count pluralisation. Buy flow correctness - BuyScreen now only advances to the success step when /v1/buy/paymentInfos/:id/ confirm actually succeeds. The previous code transitioned regardless of the call's outcome, leaving the DFX route in an unconfirmed state for users who got an auth gate or network error after pressing "Confirm" — their SEPA arrived but DFX's matcher refused to pair it. The button copy is now "I've sent the transfer" + a clearer post-confirm description so users do not dismiss before tapping it. KYC completion in-app - PersonalData step accepts an optional phone field (already supported by the service). - A dedicated 2FA panel handles the PhoneChange step's request+verify cycle without bouncing to a Browser session. - Browser-type KYC sessions (Ident etc.) open in the bundled WebView when the URL is on the DFX-vetted allow-list, falling back to the OS browser for anything outside it. - Submit advances automatically after a successful API submission so the next step (form or Ident) appears without a second Continue tap. Quality gates - typecheck, eslint, prettier, jest (100 tests), iOS bundle HTTP 200.
The WDK `useMultiAddressLoader` hook (consumed transitively by `useBalance`)
emits a `console.error('useMultiAddressLoader failed:', err)` when the Bare
Worklet replies UNAUTHENTICATED / UNAVAILABLE during the brief window
between app boot and worklet readiness. RN's LogBox surfaces those as a
red toast at the bottom of the dashboard.
The hook self-heals on the next render cycle once the worklet is ready,
so the toast is pure noise for the user — mirror the existing pattern
that already silences `[AccountService] callAccountMethod`, `[AddressService]
getAddress failed`, and the EVM-RPC timeout family.
…ymentMethod (#133) Three small fixes the user surfaced after the linked-wallet rollout: 1. Linked wallets disappeared after a keychain reset - `useLinkedWalletSelection` flipped from "explicit-include" to "explicit-exclude" semantics. An empty / missing storage value now means "every linked wallet visible" — matches what a returning user expects after a fresh install or Maestro `clearKeychain`. - Toggling a checkbox off in Settings → DFX-Wallets persists the wallet's address to a new `dfxHiddenLinkedWallets` key; toggling back on removes it. Using a fresh storage key sidesteps any accidental misinterpretation of the prior inclusion set. - Helper `getHiddenLinkedWallets` replaces `getSelectedLinkedWallets`. 2. EVM linked wallets showed `0.00` even when they held ETH/POL - `useLinkedWalletBalances` and `useLinkedWalletFiat` no longer restrict the per-wallet fiat sum to `category in (btc, stablecoin)`. Native gas tokens are included so the card shows the wallet's *total* worth. The dashboard's asset-card filter still hides natives separately because it's a per-asset rollup, not a per- wallet sum. 3. Buy/Sell route created without explicit `paymentMethod` / `exactPrice` - DFX' `GetBuyPaymentInfoDto` marks both as `@IsNotEmpty()` with class-member defaults. The validator passes when we omit them, but the downstream `toPaymentInfoDto` branches on these values and routes created from an omitted payload sometimes ended up in an indeterminate state that DFX' SEPA matcher refused to pair. - Send `paymentMethod: 'Bank'` and `exactPrice: false` explicitly on both /v1/buy/quote and /v1/buy/paymentInfos, mirroring the @dfx.swiss/react reference SDK; ditto `exactPrice` on the sell endpoints. Reverts the earlier UX guard that gated the success-screen on a successful `/confirm` — the user explicitly asked to keep the flow unchanged and address recognition on the API side instead. Quality gates: typecheck, eslint, prettier, jest (100 tests), iOS bundle HTTP 200.
…r/change (#134) Linked-wallet discovery + transaction surface backed by the Etherscan V2 unified API + CoinGecko-driven pricing. Discovery (Portfolio + linked-wallet detail) - New `useLinkedWalletDiscovery` hook scans every linked DFX wallet's chains for on-chain holdings. - With `EXPO_PUBLIC_ETHERSCAN_API_KEY` set, the EVM path derives the unique contract list from `tokentx` history and cross-references it against the cached CoinGecko `/coins/list?include_platform=true` index. Only tokens listed on CoinGecko reach the UI — matches the user's "no random tokens" spec. - Without a key, the same hook falls back to a curated `DISCOVERABLE_TOKENS` list (+ONDO/ENS/ARB/GRT/RNDR/INJ/MNT/FET/IMX/ stETH/wstETH/WETH/PYUSD/PENDLE/RDNT/CRV/UNI/BRETT/DEGEN/cbETH/ USDT-Base) so users see the popular tokens regardless. - Native ETH/POL counts toward each wallet's fiat sum. Bitcoin still routed through mempool.space. Pricing - `pricingService` keys its cache by CoinGecko coin id (not the internal `AssetTicker` enum) so the discovery path can call `getPriceById` for any id returned by `/coins/list`. Single upstream call warms curated + discoverable id sets together. - New `pricing/coingecko-simple-price.ts` for ad-hoc batch fetches (100 ids per chunk, fail-soft per chunk). - New `pricing/coingecko-coins-list.ts` for the 24h-cached coins/list index that powers contract→id lookups. - New `pricingService.refresh()` so pull-to-refresh re-fetches prices alongside balances. Transaction feed - New `useWalletTransactions` hook merges `txlist` + `tokentx` across every chain on the wallet, normalizes to a single `WalletTransaction` shape (chain/hash/timestamp/symbol/amount/ direction/counterparty/contract), sorts DESC by timestamp. - Linked-wallet detail screen replaces the per-chain explorer-link rows with one chronological feed (send/receive icon, "symbol · Chain", truncated counterparty, "vor X min" relative timestamp). Empty / no-key states surface clear hints. Cross-device buy via /v2/user/change - New `dfxAuthService.changeActiveAddress(address)` mirrors app.dfx.swiss: a signed-in user can switch the JWT to any other wallet linked to the same DFX account without a fresh signature. - `useLinkedWalletReauth` now tries `changeActiveAddress` first; the per-blockchain sign-reauth (`loginAsAddressOwner` / LDS LNURL) only fires as a fallback when the server-side switch rejects (typically when the wallet is on a different DFX account). - Removed the "Diese Wallet wurde von einem anderen Gerät aus verknüpft" banner + the disabled-Continue gate — every linked wallet on the user's account can now buy/sell. UX polish - PIN unlock screen wears the DFX logo above the title. - Bestände + Transaktionen rows display chain names capitalised (`ethereum` → `Ethereum`, `bitcoin-taproot` → `Bitcoin Taproot`). - Portfolio pull-to-refresh invalidates pricing + balances + discovery + DFX user list so a swipe-down syncs everything. Quality gates - typecheck, eslint, prettier, jest (18 suites / 152 tests; +27 new tests covering btc-fetcher, discoverable-tokens invariants, pricing-service, etherscan, coingecko-coins-list, coingecko-simple-price), iOS Metro bundle HTTP 200.
…rs (#135) Three follow-ups after the on-chain discovery PR: 1. Face ID / Touch ID toggle in Settings → Wallet & Sicherheit. The `biometricEnabled` flag had no UI before, so the auto-Face-ID-prompt on the lock screen never ran. The new row renders a native Switch, probes `isBiometricAvailable()` once on mount to grey out devices without an enrolled biometric, and surfaces an Alert hint when the user tries to enable it on an unsupported device. 2. Curated Base-token coverage extended with the popular ones the user flagged as missing: VIRTUAL, MORPHO, TOSHI, MOG, HIGHER, KEYCAT, WELL, AIXBT, SEAM. Every entry's contract address was resolved against the CoinGecko `/coins/list` payload so the discovery pipeline accepts them out of the box. Users without `EXPO_PUBLIC_ETHERSCAN_API_KEY` will now see these on the linked-wallet card; users with the key get the full `tokentx`- driven discovery (which would have picked them up anyway). 3. `useLinkedWalletReauth` no longer swallows the path-1 (`/v2/user/ change`) error silently — it captures the message and annotates the path-2 (sign re-auth) error with it so the confirm-modal can surface why the server-side switch failed. The previous "Diese Wallet wurde von einem anderen Gerät aus verknüpft" message hid the actual backend response. Quality gates: typecheck, eslint, prettier, jest (18 suites / 152 tests), iOS Metro bundle HTTP 200.
Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…to 6.2.3 (#191) * chore(ci)(deps): bump mikepenz/release-changelog-builder-action Bumps [mikepenz/release-changelog-builder-action](https://github.com/mikepenz/release-changelog-builder-action) from 6.2.2 to 6.2.3. - [Release notes](https://github.com/mikepenz/release-changelog-builder-action/releases) - [Commits](mikepenz/release-changelog-builder-action@v6.2.2...v6.2.3) --- updated-dependencies: - dependency-name: mikepenz/release-changelog-builder-action dependency-version: 6.2.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * fix(e2e): shut the simulator down after detox so a passing run can exit The forceExit band-aid from #190 only kills the jest child. The detox CLI parent then closes its ws server, but the app still running in the simulator holds its connection open — the close callback never fires ('Detox server has been closed abruptly'), the leaked handle keeps the CLI's event loop alive, and the job burns to its 90-min ceiling with every test already green (both legs of run 29167857152: 10/10 tests, 7/7 snapshots, then 26-55 min of idle until cancellation). behavior.cleanup.shutdownDevice makes detox shut the simulator down on dealloc, which drops the app's ws connection so the CLI can exit. A 30-min step cap on the test step backstops any future wedge at the step instead of the job ceiling. --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Daniel Padrino <danswarrior1@gmail.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.5 to 4.36.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@9e0d7b8...8aad20d) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v4...v6) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
) Bumps [@eslint/compat](https://github.com/eslint/rewrite/tree/HEAD/packages/compat) from 2.0.5 to 2.1.0. - [Release notes](https://github.com/eslint/rewrite/releases) - [Changelog](https://github.com/eslint/rewrite/blob/main/packages/compat/CHANGELOG.md) - [Commits](https://github.com/eslint/rewrite/commits/compat-v2.1.0/packages/compat) --- updated-dependencies: - dependency-name: "@eslint/compat" dependency-version: 2.1.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [expo/expo-github-action](https://github.com/expo/expo-github-action) from 8 to 9. - [Release notes](https://github.com/expo/expo-github-action/releases) - [Changelog](https://github.com/expo/expo-github-action/blob/main/CHANGELOG.md) - [Commits](expo/expo-github-action@v8...v9) --- updated-dependencies: - dependency-name: expo/expo-github-action dependency-version: '9' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [bare-pipe](https://github.com/holepunchto/bare-pipe) from 4.1.2 to 4.2.2. - [Release notes](https://github.com/holepunchto/bare-pipe/releases) - [Commits](holepunchto/bare-pipe@v4.1.2...v4.2.2) --- updated-dependencies: - dependency-name: bare-pipe dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* feat: route Pay QR scans into the OpenCryptoPay flow
Replaces the Pay screen's generic Coming-Soon alert with a proper
hand-off to DFX' OpenCryptoPay standard. The whole feature stays
gated behind EXPO_PUBLIC_ENABLE_PAY — production builds keep the
deferred placeholder.
What it adds:
- LNURL bech32 decoder + QR sniffer in src/services/opencryptopay/lnurl.ts.
Zero-dep, mirrors the Flutter reference. Handles bare LNURL1…,
BIP-21 lightning= payloads, and LUD-17 lnurl{p,w,c}:// schemes.
- OpenCryptoPay service (fetchQuote / getPaymentTarget / commitTx /
cancelQuote / parsePaymentUri) wire-compatible with the DFX reference
implementation (frankencoin-wallet).
- (auth)/pay/opencryptopay screen: fetches the quote, shows merchant +
amount + transfer-method/asset picker + expiry countdown.
- DE + EN i18n keys.
Sign + broadcast (call getPaymentTarget, hand the ERC-681 URI to WDK,
then commitTx the hex) lands in a follow-up — first iteration is
"scan a DFX OpenCryptoPay QR and land on the right invoice screen
with the right amount", with the API surface already in place.
* test: register OpenCryptoPayError in the exception-surface enumeration
test/services/exception-surface.test.ts was added on develop (#186) after
this branch forked; its enumeration gate now requires every extends-Error
class under src/ to be registered with an identity test.
* test+docs(opencryptopay): close coverage gap, document the screen, classify visual coverage
- OpenCryptoPayScreen.test.tsx: component test for the new screen
(loading/success, all typed-error codes, method/asset switching,
expiry disabling Confirm, cancel/close navigation).
- opencryptopay-service.test.ts + opencryptopay-lnurl.test.ts: cover the
remaining error branches (network failures, non-JSON/invalid
responses, bech32 bad-separator/bad-character/bad-padding, the
TextDecoder-less fallback) so the scoped coverage-floor gate
(services/stores only) clears 99% again.
- README: extend the Pay row to reference opencryptopay.tsx.
- e2e/visual-coverage.json: classify the new screen as pending,
tracked to #186, matching every other DFX-backend screen.
* ci: retrigger checks after adding size:override label
* fix(pay): gate the opencryptopay route on FEATURES.PAY + drop unreachable keyauth scheme
- pay/index.tsx swaps in PayDisabled when the flag is off, but
opencryptopay.tsx is its own Expo Router route — a deep link reached
the quote screen (and its LNURL fetch) with the Pay feature disabled.
Route now redirects to the dashboard when FEATURES.PAY is off,
mirroring PayDisabled; regression test in OpenCryptoPayRoute.test.tsx.
- keyauth: is LNURL-auth (login), not a payment request, and the
isOpenCryptoPayQR gate never matched it — decodeLNURL supporting it
was unreachable dead code that contradicted the docs. Removed from
LUD17_SCHEMES; negative tests pin both halves.
* fix(opencryptopay): drop transfer methods flagged available:false
Spec (openCryptoPay README, step-2 response): payment methods may carry
'available: false' and wallets should not present them. The parser
ignored the flag, so unavailable methods rendered as selectable chips.
Absent flag still means available (older providers).
---------
Co-authored-by: Daniel Padrino <danswarrior1@gmail.com>
…ggle (#199) * Add brand-navy dark theme with cinematic backdrop and toggle - Re-skin darkColors to the DFX design pod navy palette (bg #0a3055, navy elevation ramp, white-alpha hairlines, pod text ramp); keep blue primary and brand red accent - Complete the DfxColors -> useColors migration across all remaining screens, components, layouts and the tab bar so no surface stays light in dark mode - Cinematic deep-navy alpine backdrop mirroring the light mountain hero, with top/bottom scrims and a brand-navy wash for legibility - Make DfxBackgroundScreen, Icon, TransactionRow chips and the receive/send selected states theme-aware; replace hardcoded light fills - Legal disclaimer: navy card, sticky footer so "Weiter" is always reachable, forward-only consent gate without a back button - Dashboard balance gets a soft navy text-shadow in dark for legibility over the backdrop imagery * test(theme): cover useReduceMotion hook to hold the coverage floor * test(theme): type the AccessibilityInfo mock to satisfy tsc * fix(theme): address dark-theme review findings - TxHistoryDetail: branch to DarkBackdrop in dark mode like sibling screens (blocker) - en.json: add missing wallets.loadErrorHint/loadErrorCta keys (blocker) - Skeleton: use opaque surfaceLight fill so placeholders read on navy - _layout: gate initial render on theme hydration to kill dark-mode FOUC - replace 7 hardcoded #0B1426 shadows with colors.shadow - dashboard: drop dead primaryAction style block + stale comment - TransactionRow: drive pay dot from the dark-adapted payFg accent - VerifyPin: theme-token numpad ripple (visible on navy) * fix(theme): migrate the OpenCryptoPay quote screen to the reactive palette #138 merged after this branch's migration sweep, landing the one screen still on static DfxColors — in dark mode it rendered light. Same mechanical useColors()/makeStyles(colors) conversion as every other screen; no layout or logic changes. ErrorBoundary remains the only static-palette holdout (deliberate: it renders the documented lightColors fallback outside the provider). * fix(theme): sync the native scheme with the in-app toggle + drop the system-mode vestige app.json pinned userInterfaceStyle to 'dark' (pre-dates this PR), so OS-drawn surfaces — system alerts, share sheets, the iOS keyboard — rendered dark even on the light default theme, and the new toggle never reached them. Now 'automatic' + Appearance.setColorScheme(scheme) from ThemeProvider, so native surfaces follow the toggle. The dropped 'system' appearance option had left live machinery behind: a dead branch and a useColorScheme subscription re-rendering the provider on OS appearance flips that could never matter, plus a stale label entry in Settings. ThemeMode is now the honest 'light' | 'dark'; hydrate() still migrates a previously-persisted 'system' value. * fix(theme): stable screen wrapper so a theme flip doesn't remount the screen The photo-backed screens swapped their root element between <View> (dark, with DarkBackdrop) and <ImageBackground> (light). Changing the element type makes React unmount the whole subtree, so toggling Appearance reset scroll positions and re-ran mount effects, making the switch feel like a hard flash. All 17 screens now keep one stable <View> wrapper and swap only an absolutely-positioned background sibling underneath the body — the same shape ScreenContainer already used. --------- Co-authored-by: Daniel Padrino <danswarrior1@gmail.com>
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.2.0 to 5.5.0. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@be666c2...0f481fc) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: 5.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [reactivecircus/android-emulator-runner](https://github.com/reactivecircus/android-emulator-runner) from 2.37.0 to 2.38.0. - [Release notes](https://github.com/reactivecircus/android-emulator-runner/releases) - [Changelog](https://github.com/ReactiveCircus/android-emulator-runner/blob/main/CHANGELOG.md) - [Commits](ReactiveCircus/android-emulator-runner@e89f39f...a421e43) --- updated-dependencies: - dependency-name: reactivecircus/android-emulator-runner dependency-version: 2.38.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [react-native-quick-crypto](https://github.com/margelo/react-native-quick-crypto) from 1.1.4 to 1.1.6. - [Release notes](https://github.com/margelo/react-native-quick-crypto/releases) - [Commits](margelo/react-native-quick-crypto@v1.1.4...v1.1.6) --- updated-dependencies: - dependency-name: react-native-quick-crypto dependency-version: 1.1.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [bare-net](https://github.com/holepunchto/bare-net) from 2.2.0 to 2.3.2. - [Release notes](https://github.com/holepunchto/bare-net/releases) - [Commits](holepunchto/bare-net@v2.2.0...v2.3.2) --- updated-dependencies: - dependency-name: bare-net dependency-version: 2.3.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…211) Bumps [react-native-safe-area-context](https://github.com/AppAndFlow/react-native-safe-area-context) from 5.6.2 to 5.8.0. - [Release notes](https://github.com/AppAndFlow/react-native-safe-area-context/releases) - [Commits](appandflow/react-native-safe-area-context@v5.6.2...v5.8.0) --- updated-dependencies: - dependency-name: react-native-safe-area-context dependency-version: 5.8.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…#216) Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 8.59.3 to 8.64.0. - [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases) - [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/parser/CHANGELOG.md) - [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v8.64.0/packages/parser) --- updated-dependencies: - dependency-name: "@typescript-eslint/parser" dependency-version: 8.64.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [axios](https://github.com/axios/axios) from 1.16.0 to 1.18.1. - [Release notes](https://github.com/axios/axios/releases) - [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md) - [Commits](axios/axios@v1.16.0...v1.18.1) --- updated-dependencies: - dependency-name: axios dependency-version: 1.18.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Clears the required `audit` gate (npm audit --audit-level=high), red on four high+ advisories and deadlocked against dependabot per-dep PRs: - tar 7.5.16 -> 7.5.20 (critical) - shell-quote 1.8.4 -> 1.10.0 - js-yaml -> 4.3.0 (no 3.14.x patch exists) - brace-expansion scoped per major: 1.1.16 / 2.1.2 / 5.0.7 Unblocks the develop->main release PR #94.
Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) from 7.6.3 to 7.6.5. - [Release notes](https://github.com/protobufjs/protobuf.js/releases) - [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.6.5/CHANGELOG.md) - [Commits](protobufjs/protobuf.js@protobufjs-v7.6.3...protobufjs-v7.6.5) --- updated-dependencies: - dependency-name: protobufjs dependency-version: 7.6.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6 to 7. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v6...v7) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-java](https://github.com/actions/setup-java) from 5.5.0 to 5.6.0. - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@0f481fc...03ad4de) --- updated-dependencies: - dependency-name: actions/setup-java dependency-version: 5.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…253) * ci: stop uploading Detox/Maestro dumps to Actions storage Those diagnostics filled the org's included Actions storage. Keep the coverage JSON hop with 1-day retention, attach tagged binaries to GitHub Releases, and delete leftover artifacts. * ci: only delete Actions artifacts older than 24 hours Protects the in-flight coverage-summary hop. Visual-regression docs no longer tell reviewers to download Detox dumps that CI does not upload. * ci: bump npm overrides so high-severity audit can pass Pin patched tar/postcss/nanoid. The previous tar 7.5.20 pin is itself advisory-vulnerable; no Expo major bump. * ci: paginate reclaim and keep tagged releases as drafts until assets exist Expired artifacts no longer spin the cleanup job. Tag builds fail closed if EAS returns no binary; docs no longer mention Actions dumps. * ci: refresh package-lock.json so npm overrides actually apply Lockfile still listed tar 7.5.20 after the override bump; npm ci on CI installs from the lockfile. * ci: override remaining high-severity deps; allowlist unpatched image-size Brace-expansion, babel and fast-uri get installable patches. image-size has no published 2.0.3 (repo archived); the audit job fails on any other high or critical GHSA. * ci: pin js-yaml 4.3.1 for GHSA-5p4m-2wfm-xmqj * ci: serialize tag release create and drop artifact download docs * ci: fail closed on audit errors and idempotent release create * docs: keep visual-regression edits under the size cap * ci: reject empty APK/IPA downloads before publishing * ci: compact reclaim delete loop * ci: skip quarantined visual-full on pull requests * ci: drop visual-full from the pull-request matrix --------- Co-authored-by: TaprootFreakAI <315477232+TaprootFreakAI@users.noreply.github.com>
Co-authored-by: TaprootFreakAI <315477232+TaprootFreakAI@users.noreply.github.com>
* Pin react to 19.1.0 to match react-native's peer requirement react-native 0.81.5 requires react@^19.1.0 and bundles its own react-native-renderer at that exact version. The root react-dom bump to 19.2.7 had dragged react along with it via npm's resolver, causing an 'Incompatible React versions' crash on every screen at runtime. * ci: retrigger checks with size:override label applied * fix(ci): restore audit and visual regression checks * test(e2e): allow hosted runner PIN hashing latency * fix(e2e): unblock PIN confirmation in visual builds * fix(e2e): bypass Argon2 in visual test builds * fix(e2e): bypass PIN consent in visual screen suite * test(onboarding): use typed timeout spy signature
* Fix seed phrase word grid to wrap in a consistent 3-column layout
minWidth caused rows to break unevenly depending on word length;
a fixed width guarantees 3 words per row.
* Pin react to 19.1.0 to match react-native's peer requirement
react-native 0.81.5 requires react@^19.1.0 and bundles its own
react-native-renderer at that exact version. The root react-dom bump to
19.2.7 had dragged react along with it via npm's resolver, causing an
'Incompatible React versions' crash on every screen at runtime.
* Add missing common.back i18n key
Referenced via t('common.back') in the Pay and Portfolio screens but
absent from both locale files, so it rendered as the raw key string.
* Remove unused imports
HardwareWalletStatus and ActivityIndicator were imported but never
referenced.
* Replace raw hex colors with DfxColors tokens
Support ticket status badges, the multi-sig approval indicator, and the
menu shadow used raw hex values that mapped exactly onto existing
theme tokens (warning/info/success/textTertiary/shadow). Also drops an
unused ActivityIndicator import in SupportScreenImpl.
* Route markChainLinkedInAutoLinkCache through the flag-gated wrapper
Buy/SellScreenImpl imported it directly from the DFX_BACKEND Impl
module, bypassing the useDfxAutoLink wrapper that gates it behind
FEATURES.DFX_BACKEND. With BUY_SELL on and DFX_BACKEND off, Metro's
dead-code elimination for the DFX_BACKEND flag was silently defeated.
* Sort i18n locale keys alphabetically within every namespace
Includes the top-level namespace order itself, not just the keys
inside each namespace. Values are unchanged.
* Add regression test for the support-ticket status color mapping
No test rendered SupportScreenImpl before, so the STATE_COLORS -> DfxColors
token refactor had no coverage. Adds a testID to each status badge and a
component test asserting all four token mappings plus the fallback.
* ci: retrigger checks with size:override label applied
* fix(ci): restore audit and visual regression checks
* test(e2e): allow hosted runner PIN hashing latency
* fix(e2e): unblock PIN confirmation in visual builds
* fix(e2e): bypass Argon2 in visual test builds
* fix(e2e): bypass PIN consent in visual screen suite
* test(onboarding): use typed timeout spy signature
* Add full test coverage for Portfolio, fix getRawBalance crash Portfolio was gated off by default with only partial test coverage. Adds hook tests (useTotalPortfolioFiatFull, useEnabledChains) at 100% line + branch coverage, and component tests for all 3 Portfolio screens. Extends jest.config.js collectCoverageFrom accordingly. Also fixes a real bug found while writing these tests: getRawBalance crashed (TypeError, map.get on undefined) on the Portfolio screen's very first render, before the balance query resolves - the normal cold-start path, not an edge case. Regression test confirmed red before the fix, green after. * ci: retrigger checks with size:override label applied * fix(ci): restore audit and visual regression checks * test(e2e): allow hosted runner PIN hashing latency * fix(e2e): unblock PIN confirmation in visual builds * fix(e2e): bypass PIN consent in visual screen suite * test(onboarding): use typed timeout spy signature * fix(pin): remove stale E2E hash parameters
) * Add full test coverage for Settings Settings was gated off by default with no test coverage. Adds component tests for SettingsScreenImpl and SeedExportScreenImpl, including a dedicated test for the expo-screen-capture require fallback. Extends jest.config.js collectCoverageFrom accordingly. * ci: retrigger checks with size override
* Add full test coverage for Multi-Sig Multi-Sig was gated off by default with no test coverage. Adds a store test (100% line + branch coverage) and component tests for the Setup and Manage screens. Extends jest.config.js collectCoverageFrom accordingly. * ci: retrigger checks with size override
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
5 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Automatic Release PR
This PR was automatically created after changes were pushed to develop.
Commits: 1 new commit(s)
Checklist