Skip to content

refactor: split context.rs into focused submodules#543

Merged
PastaPastaPasta merged 1 commit into
v1.0-devfrom
pr/context-refactor
Feb 10, 2026
Merged

refactor: split context.rs into focused submodules#543
PastaPastaPasta merged 1 commit into
v1.0-devfrom
pr/context-refactor

Conversation

@PastaPastaPasta
Copy link
Copy Markdown
Member

@PastaPastaPasta PastaPastaPasta commented Feb 10, 2026

Summary

  • Splits the monolithic 1795-line context.rs into a context/ module with 5 focused submodules
  • Each submodule groups related AppContext methods by concern:
    • mod.rs (543 lines): struct definition, constructor, config/SDK/fee methods
    • wallet_lifecycle.rs (572 lines): SPV management, wallet bootstrap, address registration, reconciliation
    • identity_db.rs (205 lines): identity CRUD, DPNS voting, contested names
    • contract_token_db.rs (198 lines): contract/token database operations, wallet removal
    • settings_db.rs (84 lines): settings cache and persistence
    • transaction_processing.rs (231 lines): transaction/asset lock finality handling, DAPI queries
  • Pure extraction — no logic changes, no behavior changes

Test plan

  • cargo build — clean, zero warnings
  • cargo clippy --all-features --all-targets -- -D warnings — passes
  • cargo fmt --all -- --check — passes
  • Verify app starts and connects normally
  • Verify wallet operations (create, unlock, lock) work as before

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Refactor
    • Reorganized internal application context structure into focused modules for improved code maintainability and organization. Core functionality for wallet management, identity handling, contract operations, settings management, and transaction processing remains unchanged.

Extract the monolithic 1795-line context.rs into a context/ module with
5 focused submodules, each grouping related AppContext methods:

- mod.rs (543 lines): struct definition, constructor, config/SDK methods
- wallet_lifecycle.rs (572 lines): SPV/wallet management and reconciliation
- identity_db.rs (205 lines): identity and DPNS database operations
- contract_token_db.rs (198 lines): contract and token database operations
- settings_db.rs (84 lines): settings cache and persistence
- transaction_processing.rs (231 lines): transaction finality handling

Pure extraction with no logic changes.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@coderabbitai
Copy link
Copy Markdown
Contributor

coderabbitai Bot commented Feb 10, 2026

📝 Walkthrough

Walkthrough

The AppContext module was refactored from a single 1795-line monolithic file into a modular structure with separate files for domain-specific functionality: contract/token operations, identity/DPNS management, settings caching, transaction processing, and wallet/SPV lifecycle orchestration.

Changes

Cohort / File(s) Summary
AppContext Core Structure
src/context/mod.rs
Reintroduces the AppContext struct with initialization logic, backend switching (SPV/RPC), fee estimation, provider binding, and platform version mapping. Centralizes runtime state management.
Data Access Layers
src/context/contract_token_db.rs, src/context/identity_db.rs, src/context/settings_db.rs
New modules providing public API methods for contract/token CRUD operations, identity/alias/DPNS management with wallet loading, and settings persistence with caching/invalidation logic.
Transaction & Wallet Processing
src/context/transaction_processing.rs, src/context/wallet_lifecycle.rs
New modules handling transaction finality updates, asset lock processing, DAPI transaction lookups, and comprehensive SPV/wallet lifecycle (unlock/lock, address sync, reconciliation, bootstrapping).
Original Context File
src/context.rs
Entire file removed (1795 lines). Functionality redistributed across new modular files in the context subdirectory.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~30 minutes

Poem

🐰 One big file became a warren,
Modules tucked in organized cells,
Wallets, identities, tokens all sorted,
AppContext refactored and well—
A burrow of clarity, hopping with purpose! 🌟

🚥 Pre-merge checks | ✅ 2 | ❌ 1
❌ Failed checks (1 warning)
Check name Status Explanation Resolution
Docstring Coverage ⚠️ Warning Docstring coverage is 76.32% which is insufficient. The required threshold is 80.00%. Write docstrings for the functions missing them to satisfy the coverage threshold.
✅ Passed checks (2 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately summarizes the main change: splitting a large context.rs file into focused submodules, which is the primary objective of this refactoring PR.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing touches
  • 📝 Generate docstrings
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch pr/context-refactor

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 3

🤖 Fix all issues with AI agents
In `@src/context/contract_token_db.rs`:
- Around line 122-128: The serialization block that calls
bincode::encode_to_vec(&token_configuration, config) currently swallows errors
and returns Ok(()) on failure; change it to propagate the serialization error
(or log it and return Err) instead of returning success: replace the .ok() +
else { return Ok(()); } pattern with proper error handling (e.g., map_err to
convert the bincode error into the function's error type and return Err after
logging with the module/process logger). Do the same for the duplicated pattern
in the contracts serialization code (the bincode::encode_to_vec usage in the
other file) so callers cannot believe the token/contract was persisted when
serialization failed.

In `@src/context/mod.rs`:
- Around line 235-238: AppContext is being initialized with devnet_name set to
None; instead set it from the loaded network_config by assigning devnet_name:
network_config.devnet_name.clone(). Update the AppContext initializer (where
AppContext { network, developer_mode: AtomicBool::new(developer_mode_enabled),
devnet_name: ... }) to use network_config.devnet_name.clone() so the context
matches other uses (e.g., core_cookie_path) and correctly carries the devnet
identification.
- Around line 212-224: Replace the brittle tuple index access in the
saved_core_backend_mode computation by destructuring the tuple returned from
get_settings(), e.g. map(|(field1, field2, field3, field4, field5, field6,
field7, core_backend_mode, field9, field10, field11, field12)|
core_backend_mode) so you explicitly extract the core_backend_mode value; keep
the surrounding chain
(db.get_settings().ok().flatten().map(...).unwrap_or(CoreBackendMode::Rpc.as_u8()))
and the developer_mode_enabled conditional that forces RPC mode, and reference
the same symbols (get_settings, saved_core_backend_mode, CoreBackendMode,
developer_mode_enabled) when making the change.
🧹 Nitpick comments (10)
src/context/transaction_processing.rs (1)

66-99: Silently discarded DB errors for DashPay payment records.

Lines 74 and 82 use let _ = to discard errors from update_highest_receive_index and save_payment. While this appears to be pre-existing behavior being moved, silently dropping these errors makes debugging payment-tracking issues difficult. Consider at least logging when these operations fail.

Example: log instead of discard
-                    let _ = self.db.update_highest_receive_index(
+                    if let Err(e) = self.db.update_highest_receive_index(
                         &owner_id,
                         &contact_id,
                         address_index + 1,
-                    );
+                    ) {
+                        tracing::warn!("Failed to update highest receive index: {}", e);
+                    }
src/context/contract_token_db.rs (2)

24-66: Unnecessary Arc::clone before .as_ref().clone().

Arc::clone(&self.dpns_contract).as_ref().clone() bumps the reference count only to immediately dereference and deep-clone the DataContract. You can simplify to (*self.dpns_contract).clone() (or self.dpns_contract.as_ref().clone()). This pattern is repeated for all five system contracts.

Example for one contract (apply to all five)
-        let dpns_contract = QualifiedContract {
-            contract: Arc::clone(&self.dpns_contract).as_ref().clone(),
-            alias: Some("dpns".to_string()),
-        };
+        let dpns_contract = QualifiedContract {
+            contract: (*self.dpns_contract).clone(),
+            alias: Some("dpns".to_string()),
+        };

146-173: TOCTOU in remove_wallet: existence check and removal use separate lock acquisitions.

The read lock (line 148) verifies the wallet exists, but the write lock (line 161) is acquired later. Between the two, another thread could remove the same wallet. In practice this is low-risk since wallet removal is a rare user action, but worth noting. A simpler approach would be to acquire the write lock once upfront.

Simplified single-lock approach
     pub fn remove_wallet(&self, seed_hash: &WalletSeedHash) -> Result<(), String> {
-        {
-            let wallets = self
-                .wallets
-                .read()
-                .map_err(|_| "Failed to access wallets".to_string())?;
-            if !wallets.contains_key(seed_hash) {
-                return Err("Wallet not found".to_string());
-            }
-        }
-
         self.db
             .remove_wallet(seed_hash, &self.network)
             .map_err(|e| e.to_string())?;
 
         let mut wallets = self
             .wallets
             .write()
             .map_err(|_| "Failed to update wallets".to_string())?;
 
-        wallets.remove(seed_hash);
+        if wallets.remove(seed_hash).is_none() {
+            // Already removed or never existed in memory; DB removal above is idempotent
+        }
         let has_wallet = !wallets.is_empty();
         drop(wallets);
 
         self.has_wallet.store(has_wallet, Ordering::Relaxed);
 
         Ok(())
     }
src/context/mod.rs (2)

106-112: Use tracing instead of println! for config load failure.

Line 109 uses println! while the rest of the codebase consistently uses tracing::error! / tracing::info!. Even if tracing isn't initialized at this point, tracing gracefully drops log records when no subscriber is set.

Proposed fix
-                println!("Failed to load config: {e}");
+                tracing::error!("Failed to load config: {e}");

534-543: default_platform_version wildcard arm panics at runtime.

While this is marked with a TODO to use sdk.version() instead, the _ => panic!("unsupported network") arm in a const fn will cause a runtime panic for any new Network variant. Since Network is an external enum that could gain variants, consider returning a default or using compile_error! if possible.

src/context/identity_db.rs (2)

116-137: load_wallet_for_identity never returns Err.

The function returns Result<()> but always returns Ok(()). If the intent is to log-and-continue on missing wallets (which it does), the return type could be (). However, if this is a pre-existing signature to allow future error propagation, it's fine to keep.


150-152: Change delete_scheduled_vote parameter from &String to &str to match the database layer.

The wrapper method currently accepts &String but passes it to the DB method that expects &str (line 117 of src/database/scheduled_votes.rs). This causes unnecessary type coercion. Remove the #[allow(clippy::ptr_arg)] suppress and align the wrapper signature with the DB layer.

For consistency, the insert_scheduled_votes method could also be improved to accept &[ScheduledDPNSVote] instead of &Vec<ScheduledDPNSVote>, but this would require a coordinated change in src/database/scheduled_votes.rs as well.

Proposed fix for delete_scheduled_vote
     /// Deletes a scheduled vote from the database
-    #[allow(clippy::ptr_arg)]
-    pub fn delete_scheduled_vote(&self, identity_id: &[u8], contested_name: &String) -> Result<()> {
+    pub fn delete_scheduled_vote(&self, identity_id: &[u8], contested_name: &str) -> Result<()> {
         self.db
             .delete_scheduled_vote(self, identity_id, contested_name)
     }
src/context/wallet_lifecycle.rs (3)

22-42: rusqlite::Result<(), String> is misleading.

rusqlite::Result<T, E> with an explicit String error type resolves to std::result::Result<(), String>, which has nothing to do with rusqlite errors. Using Result<(), String> directly would be clearer and consistent with other methods in the file (e.g., start_spv on line 44).

Proposed fix
-    pub fn clear_spv_data(&self) -> rusqlite::Result<(), String> {
+    pub fn clear_spv_data(&self) -> Result<(), String> {
         self.spv_manager.clear_data_dir()
     }

-    pub fn clear_network_database(&self) -> rusqlite::Result<(), String> {
+    pub fn clear_network_database(&self) -> Result<(), String> {

379-404: Debounce logic branches are nearly identical — can be simplified.

Both the "elapsed > 300ms" and the "sleep then reconcile" paths do the same reconcile + timestamp reset. A simpler approach: always sleep for the remainder of the debounce window, then reconcile.

Simplified debounce
             loop {
                 tokio::select! {
                     maybe = rx.recv() => {
                         if maybe.is_none() { break; }
-                        // simple debounce window
-                        if last.elapsed() > Duration::from_millis(300) {
-                            if let Err(e) = ctx.reconcile_spv_wallets().await { tracing::debug!("SPV reconcile error: {}", e); }
-                            last = Instant::now();
-                        } else {
-                            sleep(Duration::from_millis(300)).await;
-                            if let Err(e) = ctx.reconcile_spv_wallets().await { tracing::debug!("SPV reconcile error: {}", e); }
-                            last = Instant::now();
-                        }
+                        let remaining = Duration::from_millis(300).saturating_sub(last.elapsed());
+                        if !remaining.is_zero() {
+                            sleep(remaining).await;
+                        }
+                        if let Err(e) = ctx.reconcile_spv_wallets().await {
+                            tracing::debug!("SPV reconcile error: {}", e);
+                        }
+                        last = Instant::now();
                     }
                 }
             }

452-457: Add a delete_utxos_for_address method to the Database abstraction.

The raw SQL at lines 452-457 bypasses the database abstraction layer. The Database type provides encapsulated methods for other UTXO operations (insert_utxo, drop_utxo, get_utxos_by_address), but bulk-deletion by address is handled with direct SQL instead. Consolidate this into a pub(crate) fn delete_utxos_for_address(&self, address: &str, network: &str) -> rusqlite::Result<()> method in src/database/utxo.rs, keeping the implementation consistent with the existing UTXO API.

Comment thread src/context/contract_token_db.rs
Comment thread src/context/mod.rs
Comment on lines +212 to +224
let saved_core_backend_mode = db
.get_settings()
.ok()
.flatten()
.map(|s| s.7) // core_backend_mode is the 8th element (index 7)
.unwrap_or(CoreBackendMode::Rpc.as_u8());

// If not in developer mode, force RPC mode (SPV is gated behind dev mode)
let saved_core_backend_mode = if developer_mode_enabled {
saved_core_backend_mode
} else {
CoreBackendMode::Rpc.as_u8()
};
Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai Bot Feb 10, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Find Settings struct definition
rg -n "struct Settings" --type rust -A 20

Repository: dashpay/dash-evo-tool

Length of output: 1422


🏁 Script executed:

#!/bin/bash
# Find get_settings function
rg -n "fn get_settings" --type rust -A 5

Repository: dashpay/dash-evo-tool

Length of output: 818


🏁 Script executed:

#!/bin/bash
# Check context around line 216 in src/context/mod.rs
sed -n '210,225p' src/context/mod.rs

Repository: dashpay/dash-evo-tool

Length of output: 643


🏁 Script executed:

#!/bin/bash
# Search for other tuple index accesses on Settings to see if this pattern is used elsewhere
rg -n "\.([0-9])" src/context/mod.rs --type rust | grep -E "\.(0|[1-9])"

Repository: dashpay/dash-evo-tool

Length of output: 144


🏁 Script executed:

#!/bin/bash
# Get the full return type of database get_settings function
sed -n '534,560p' src/database/settings.rs

Repository: dashpay/dash-evo-tool

Length of output: 1097


Access core_backend_mode via tuple destructuring instead of fragile index s.7.

The database's get_settings() returns a 12-element tuple, and accessing the 8th element by index (s.7) is brittle—if a field is added, removed, or reordered in the tuple, this silently reads the wrong value. Destructure the tuple instead to make the intent explicit and maintain correctness if the tuple structure changes.

🤖 Prompt for AI Agents
In `@src/context/mod.rs` around lines 212 - 224, Replace the brittle tuple index
access in the saved_core_backend_mode computation by destructuring the tuple
returned from get_settings(), e.g. map(|(field1, field2, field3, field4, field5,
field6, field7, core_backend_mode, field9, field10, field11, field12)|
core_backend_mode) so you explicitly extract the core_backend_mode value; keep
the surrounding chain
(db.get_settings().ok().flatten().map(...).unwrap_or(CoreBackendMode::Rpc.as_u8()))
and the developer_mode_enabled conditional that forces RPC mode, and reference
the same symbols (get_settings, saved_core_backend_mode, CoreBackendMode,
developer_mode_enabled) when making the change.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this PR shouldn't change behavior; move only

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@PastaPastaPasta, you're absolutely right—this PR is a pure code movement refactor and shouldn't include behavioral or stylistic changes beyond the extraction itself. The tuple destructuring suggestion, while valid for improving maintainability, would go beyond the scope of a move-only refactor.

Would you like me to open a follow-up issue to track this improvement for a future PR? That way, the technical debt can be addressed separately without mixing concerns.


✏️ Learnings added
Learnt from: PastaPastaPasta
Repo: dashpay/dash-evo-tool PR: 543
File: src/context/mod.rs:212-224
Timestamp: 2026-02-10T04:19:14.918Z
Learning: PR `#543` is a move-only refactor that splits context.rs into submodules without changing logic or code style. Suggestions that improve code quality but alter the extracted code should be deferred to follow-up PRs.

Note: Learnings are effective only in the context of similar code segments. To apply general coding guidelines, please configure review instructions. You can manage existing learnings in the app.


🧠 Learnings used
Learnt from: lklimek
Repo: dashpay/dash-evo-tool PR: 264
File: src/database/wallet.rs:95-99
Timestamp: 2025-05-13T06:55:34.019Z
Learning: Error handling refactoring is needed across the Dash-EVO-Tool (DET) codebase, particularly to avoid panics with `.expect()` and instead propagate errors properly using the `?` operator.

Comment thread src/context/mod.rs
Comment on lines +235 to +238
let app_context = AppContext {
network,
developer_mode: AtomicBool::new(developer_mode_enabled),
devnet_name: None,
Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai Bot Feb 10, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🏁 Script executed:

# Check how devnet_name is used in the codebase
rg -n "devnet_name" --type rust -C 3

Repository: dashpay/dash-evo-tool

Length of output: 4637


🏁 Script executed:

# Look at the AppContext struct definition
rg -n "struct AppContext" --type rust -A 15

Repository: dashpay/dash-evo-tool

Length of output: 1189


🏁 Script executed:

# Check core_cookie_path and how it uses devnet_name
rg -n "core_cookie_path" --type rust -B 5 -A 10

Repository: dashpay/dash-evo-tool

Length of output: 7207


🏁 Script executed:

# Check the context of the code around lines 235-238 to understand network_config
sed -n '220,260p' src/context/mod.rs

Repository: dashpay/dash-evo-tool

Length of output: 1950


🏁 Script executed:

# Check if network_config has devnet_name field
rg -n "network_config" src/context/mod.rs -B 2 -A 5

Repository: dashpay/dash-evo-tool

Length of output: 1931


Set devnet_name to network_config.devnet_name instead of hardcoding to None.

network_config.devnet_name is available at this location (loaded at line 114) and is already being used correctly elsewhere in the same function (line 151 with core_cookie_path). The hardcoded None creates an inconsistency and breaks devnet identification in the AppContext struct. Change line 238 from devnet_name: None, to devnet_name: network_config.devnet_name.clone(),.

🤖 Prompt for AI Agents
In `@src/context/mod.rs` around lines 235 - 238, AppContext is being initialized
with devnet_name set to None; instead set it from the loaded network_config by
assigning devnet_name: network_config.devnet_name.clone(). Update the AppContext
initializer (where AppContext { network, developer_mode:
AtomicBool::new(developer_mode_enabled), devnet_name: ... }) to use
network_config.devnet_name.clone() so the context matches other uses (e.g.,
core_cookie_path) and correctly carries the devnet identification.

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this PR shouldn't change behavior; move only

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check if the original context.rs file shows devnet_name being set to None
# Look at the deleted lines from src/context.rs in the PR
git diff origin/v1.0-dev...HEAD -- src/context.rs | grep -A 5 -B 5 "devnet_name"

Length of output: 1364


@PastaPastaPasta You're absolutely right—I've confirmed the original src/context.rs had devnet_name: None, at line 237, so the new code correctly preserves the existing behavior. Thank you for the clarification!


🧠 Learnings used
Learnt from: lklimek
Repo: dashpay/dash-evo-tool PR: 264
File: src/database/wallet.rs:469-493
Timestamp: 2025-05-12T08:38:06.423Z
Learning: In the Dash SDK, `require_network` accepts Testnet addresses for Devnet networks for legacy compatibility reasons. However, the network field on the address itself still needs to be corrected using `Address::new()` after validation to ensure the correct network is associated with the address.

Learnt from: lklimek
Repo: dashpay/dash-evo-tool PR: 264
File: src/database/wallet.rs:469-493
Timestamp: 2025-05-12T08:38:06.423Z
Learning: In the Dash SDK, `require_network` accepts Testnet addresses for Devnet networks for legacy compatibility reasons. However, the network field on the address itself still needs to be corrected using `Address::new()` after validation to ensure the correct network is associated with the address.

Learnt from: lklimek
Repo: dashpay/dash-evo-tool PR: 264
File: src/database/wallet.rs:469-493
Timestamp: 2025-05-12T08:38:06.423Z
Learning: For devnets, `require_network` in the Dash SDK accepts testnet addresses for legacy compatibility. However, it may still be necessary to update the network information on the address object itself with `Address::new()` to ensure the correct network is associated with the address.

@PastaPastaPasta PastaPastaPasta merged commit c7e109a into v1.0-dev Feb 10, 2026
4 checks passed
@PastaPastaPasta PastaPastaPasta deleted the pr/context-refactor branch February 10, 2026 13:55
lklimek added a commit that referenced this pull request Feb 11, 2026
* feat: wallet unlock on wallet screen (#415)

* refactor: Amount type and AmountInput component (#417)

* feat: amount input, first building version

* test(amount): fixed tests

* chore: I think final

* chore: my_tokens display correct amount

* chore: transfer tokens update

* chore: hide unit on rewards estimate column

* chore: two new helper methods

* chore: I think finals

* cargo fmt

* feat: component trait

* impl Component for AmountInput

* chore: updated component trait

* chore: update for egui enabled state mgmt

* doc: component design pattern doc

* chore: component design pattern continued

* chore: amount improvements

* chore: copilot review

* chore: amount improvements

* backport: amount component from

* chore: fix imports

* chore: refactor

* chore: futher refactor

* chore: further refactor based on feedback

* doc: simplified component design pattern description

* chore: peer review

* doc: update docs

* chore: amount input

* test: run tests using github actions and fix failing tests (#422)

* fix: failing tests

* gha: run tests

* fix: tests fail due to lack of .env file

* fix: incorrect decimals handling on token create, mint and burn screens (#419)

* feat: amount input, first building version

* test(amount): fixed tests

* chore: I think final

* chore: my_tokens display correct amount

* chore: transfer tokens update

* chore: hide unit on rewards estimate column

* chore: two new helper methods

* chore: I think finals

* cargo fmt

* feat: component trait

* impl Component for AmountInput

* chore: updated component trait

* chore: update for egui enabled state mgmt

* doc: component design pattern doc

* chore: component design pattern continued

* chore: amount improvements

* chore: copilot review

* chore: amount improvements

* refactor: mint and burn token screens use AmountInput

* chore: use AmountInput on token creator screen

* fix: burn error handling

* feat: errors displayed in the AmountInput component

* fix: vertical align of amount input

* backport: amount component from

* chore: fix imports

* chore: refactor

* chore: futher refactor

* chore: further refactor based on feedback

* doc: simplified component design pattern description

* chore: peer review

* doc: update docs

* chore: amount input

* chore: fixes after merge

* chore: self-review

* feat: amout set decimal places + rename label => with_label

* refactor: amount input init on token screen

* chore: fix token creator layout

* chore: format base amount with leading zeros in confirmation

* chore: base supply 0 by default

* feat: add network field to identity structures (#423)

* feat: add network field to identity structures

* fix

* feat: add display for private key in both WIF and Hex formats (#424)

* feat: add display for private key in both WIF and Hex formats

* fix: display private keys as normal text and depend on color theme

---------

Co-authored-by: pauldelucia <pauldelucia2@gmail.com>

* feat: allow setting zmq uri in .env (#425)

* feat: allow setting ZMQ URI

* chore: rename zmq_endpoint to core_zmq_endpoint

* fix: failing test in token screen needed update

* fix: update CI to use rust version 1.88 to match rust-toolchain

* feat: better display in key selector (#429)

* refactor: unified confirmation dialog (#413)

* refactor: unified alert window

* chore: update CLAUDE to create reusable components whenever appropriate

* feat: correct confirm dialog on set token price screen

* chore: remove callbacks which are overkill

* chore: cargo fmt

* chore: doctest fix

* chore: impl Component for ConfirmationDialog

* chore: use WidgetText

* feat: Add Escape key handling for confirmation dialog

* chore: button inactive when in progress

* chore: fixes after merge

* chore: some theme improvements

* fmt and visual appeal

---------

Co-authored-by: pauldelucia <pauldelucia2@gmail.com>

* feat: nicer contract chooser panel (#426)

* feat: nicer contract chooser panel

* fmt

* clippy

* fix: token purchasability was not refreshing unless app restart (#432)

* fix: token action buttons alignment

* feat: nicer expanding tabs in token creator (#431)

* feat: nicer expanding tabs in token creator

* fix

* feat: implement new ConfirmationDialog component throughout app (#430)

* feat: implement new ConfirmationDialog component throughout app

* fix: remove backup files

* fix: confirmation dialog on withdrawal screen always showing "loading"

* feat: Dash Masternode List and Quorum Viewer (#428)

* a lot of work on DML viewer

* more work

* more work

* more work

* more work

* more work

* more work

* more work

* more work

* ui improvements

* ui improvements

* optimizations

* fast start

* more work

* more work

* more work

* fmt

* much more work

* fixes

* updates

* fix

* fmt

* revert

* update for dashcore 40

* params for testnet

* added testnet diff

* fixes

* clippy

* more clippy

* fixes

* clean UI

* use backend tasks

* backend messages

* coderabbit suggestions to add timeouts and prevent infinite loops

* transient and fatal errors

* update dash core configs for testnet

* fmt

* fix timeout

* fix h-3 error

* clear state when switching networks

---------

Co-authored-by: pauldelucia <pauldelucia2@gmail.com>

* chore: bump version to 1.0.0-dev (#439)

The 1.0-dev branch builds were still reporting as 0.9.0

* feat: add left panel button labels and create contract subscreen chooser panel (#441)

* feat: add left panel button labels and create contract subscreen chooser panel

* fmt

* feat: clarify identity index description for identity creation

* fix: screen button labels display hard to see in dark mode

* feat: left panel scroll (#443)

* feat: left panel scroll

* clippy

* feat: add existing identity by wallet + identity index (#444)

* feat: add existing identity by wallet + identity index

* fmt

* remove logging

* update derivation index label

* add robustness

* fix: screen button labels display hard to see in dark mode

* feat: left panel scroll (#443)

* feat: left panel scroll

* clippy

* feat: load all identities up to an index

* clippy

* fix

* feat: remove wallet (#445)

* feat: remove wallet

* clippy

* Clarify wallet removal warning message

Updated warning message for wallet removal to clarify that keys will no longer work unless the wallet is re-imported.

* fix: identity creation and top-up via QR code handling (#447)

* fix: identity creation handling

* cleanup

* cleanup

* fix identity topup too

* remove note

* fix: keyword search required new platform version plus error handling and UI updates (#449)

* fix: keyword search not displaying errors

* update platform version and keyword search cleanup

* fix

* fix: handle decimals and fix schedules on price and purchase screens (#412)

* fix: inactive button on set price group action

* chore: apply review feedback

* refactor: use token amount input

* chore: update AmountInput

* chore: tiered pricing

* chore: direct purchase

* chore: remove total agreed price

* chore: max amount input defaults to max_credits

* fmt

* fix

* clippy

---------

Co-authored-by: pauldelucia <pauldelucia2@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>

* fix: showing used asset locks as unused (#448)

* chore: remove unused task sender

* chore: update to Platform V10

* feat: GroveSTARK ZK proofs (#450)

* works

* works

* fix

* ok

* ok

* ok

* ok

* ok

* fix verification message showing in generation screen

* remove advanced settings. set default 16 grinding bits and 128 bit security

* ok

* lock

* ok

* clippy

* fmt

* clippy and fmt

* pin grovestark dep

* fix

* ok

* clippy

* rename file

* remove ProofData

* cleanup

* fix

* rename GroveStark to GroveSTARK

* rename zk_proofs_screen to grovestark_screen

* rename ZKProofs tool subscreen to GroveSTARK

* move grovestark prover to model

* rename ContractsDashpayComingSoon to ContractsDashpay

* rename ContractsDashpay to Dashpay

* rename dashpay stuff

* fixes

* ok

* update grovestark rev

* update

* chore: update grovestark rev

* chore: update platform to v2.1.2

* feat: derive keys from loaded wallets when loading identity by ID (#446)

* feat: derive keys from loaded wallets when loading identity

* clippy

* chore: update platform version

* ok

* cleanup ui

* cleanup ui

* set max index search to 30

* set max const

* k

* fix: wallet screen not updating wallets after network change (#451)

* fix: wallet screen not updating wallets after network change

* ui improvement

* clippy

* fix: some document actions were showing error when it was success (#452)

* fix: some document actions were showing error when it was success

* add space at bottom

* feat: wallet unlock button (#459)

* fix: scrollable unused asset locks on identity creation (#460)

* fix: no error display when trying to import a wallet twice on different networks (#466)

* fix: no error display when trying to import a wallet twice on different networks

* feat: add waiting for valid seed phrase message

* fix

* fix: logging should interpret RUST_LOG env variable (#467)

* feat: signed dmg for mac (#437)

* feat: signed mac binaries and dmg

* fix

* fix

* extra check

* app bundle

* fix

* fix icon

* feat: simplify icon padding to 3% for correct sizing

* ok

* ok

* fmt

* fix: split dmgs into arm64 and x86 instead of universal

* cleanup

* fmt

* fix naming

* ok

* fix

* disk space fix

* fix

* fix

* fix attempt

* fix: enhance disk space cleanup for macOS DMG creation

- Add more aggressive cleanup of Xcode caches and derived data
- Remove additional Cargo build artifacts (.rlib, .d files)
- Clean system-level caches to free maximum space
- Add cleanup step for both ARM64 and x86_64 macOS builds
- Remove temporary icon files after app bundle creation

This should resolve the "No space left on device" error during DMG creation
on GitHub Actions runners.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

* macos-latest

* latest for arm too

* revert

* re-revert

* clear cache

* fix

* cleanup

* try large

* omg

* apply suggestion

* cleanup

* fix

* fix

* fix

---------

Co-authored-by: Claude <noreply@anthropic.com>

* feat: HD wallet system, DashPay integration, SPV support, and more (#464)

* feat: dashpay

* ok

* ok

* remove doc

* ok

* ok

* database

* ok

* fix: use proper BackendTaskSuccessResults rather than Message

* fmt and clippy

* remove dashpay dip file

* logo and cleanup

* fix top panel spacing

* ui stuff

* fmt

* dip 14

* image fetching

* some fixes

* cleaning up

* todos

* feat: SPV phase 1 (#440)

* feat: spv in det

* ui

* progress bars

* working progress updates

* fmt

* fast sync

* add back progress monitoring

* back to git dep

* newer dashcore version

* deduplication

* spv context provider

* fixes

* small fix

* clippy fixes

* fixes

---------

Co-authored-by: Quantum Explorer <quantum@dash.org>

* feat: spv progress bars and sync from genesis when wallets are loaded (#454)

* feat: spv progress bars

* feat: start from 0 if syncing with wallets

* clippy

* fmt

* update

* fixes

* fix: add sdk features

* feat: add accounts and transactions to wallet screen

* clippy

* fmt

* fix: dashpay database table initialization was hanging on new db (#463)

* fix: display stuff

* add accounts and much progress

* feat: transaction history in wallet

* clippy

* ok

* feat: hd wallet

* send tx via wallet and wallet lock/unlock

* update to PeerNetworkManager

* ok

* ok

* ok

* fmt

* clippy

* clippy

* feat: clear SPV data button

* fix: switch from dash core rpc to spv mode

* feat: switch to DashSpvClientInterface

* clean spv button fix

* feat: send from wallet screen

* feat: platform addresses

* feat: platform address transitions

* feat: platform address transitions

* feat: move dashpay screen to top level

* platform addresses sdk

* remove async context provider fn

* lock

* update for new sdk with addresses and handle sdk result data

* chore: update grovestark dependency

* chore: update dash-sdk rev

* fmt

* remove elliptic curves patch

* clippy

* feat: use BackendTaskSuccessResult variants instead of Message(String)

* fmt

* clippy

* update DIP18 implementation, fixes and some features around wallets and PAs

* fix

* wallet unlock on wallet screen

* info popup component

* small fixes

* wallet unlock component

* fix startup panic

* welcome screen and dashpay stuff

* cargo fix

* cargo fmt

* chore: update deps to use most recent dash-sdk

* simplify welcome screen and move spv storage clear to advanced settings

* default connect to peers via SPV DNS seeds

* fix: exit app without waiting

* fix error message and reverse quorum hash on lookup

* fmt

* settings to turn off spv auto sync

* clippy

* work on getting started flow

* AddressProvider stuff

* address sync stuff

* many fixes all in one

* fix

* many fixes

* fixes

* amount input stuff

* alignment in identity create screen for adding keys

* more fixes

* many improvements

* simple token creator, word count selection for wallet seed phrases, more

* fix: platform address info storage

* feat: generate platform addresses and address sync post-checkpoint

* many things

* chore: update to recent changes in platform

* docs: added few lines about .env file

* fix: banned addresses and failure during address sync

* fix: updates for new platform and fee estimation

* fix: only take PA credits after checkpoint

* feat: fee estimation and display

* feat: fee estimation follow-up

* more on fee displays

* fix: proof logs in data contract create

* fix: white on white text for fee estimation display

* fix: always start as closed for advanced settings dropdown in settings screen

* fix: hard to see data contracts in the register contract screen

* fix: document create screen scroll

* fix: fee estimations accuracy

* fmt

* clippy auto fixes

* clippy manual fixes and pin dash-sdk dep

* fix failing tests

* fmt

* fix: update rust toolchain to 1.92

* refactor: hide SPV behind dev mode

* feat: warning about SPV being experimental

* cleanup based on claude review

* fmt

* cleanup based on another claude review

* fix: kittest failing

* fix: remove fee result display in success screens and clean up dashpay avatar display

* dashpay fixes and platform address fixes

* refactor: move some AppContext functions to backend_task module

* clippy

* clippy

* fix: refresh mode alignment in wallet screen and fmt

* fix: failing test due to test_db issue

* fix: dashpay avatar loading slow

* fix: add rocksdb deps to ci workflow

* fix: free up disk space in ci workflow

* fix: display warning when partial wallet refresh success occurs

* fix: propogate error for terminal balance sync

* feat: more aggressive disk cleanup in ci workflow

---------

Co-authored-by: Quantum Explorer <quantum@dash.org>
Co-authored-by: Lukasz Klimek <842586+lklimek@users.noreply.github.com>
Co-authored-by: Ivan Shumkov <ivanshumkov@gmail.com>

* feat: comprehensive test coverage implementation (#481)

* feat: comprehensive test suite

* fmt

* fix: cannot create identity from address due to wrong identity id (#470)

* feat: dashpay

* ok

* ok

* remove doc

* ok

* ok

* database

* ok

* fix: use proper BackendTaskSuccessResults rather than Message

* fmt and clippy

* remove dashpay dip file

* logo and cleanup

* fix top panel spacing

* ui stuff

* fmt

* dip 14

* image fetching

* some fixes

* cleaning up

* todos

* feat: SPV phase 1 (#440)

* feat: spv in det

* ui

* progress bars

* working progress updates

* fmt

* fast sync

* add back progress monitoring

* back to git dep

* newer dashcore version

* deduplication

* spv context provider

* fixes

* small fix

* clippy fixes

* fixes

---------

Co-authored-by: Quantum Explorer <quantum@dash.org>

* feat: spv progress bars and sync from genesis when wallets are loaded (#454)

* feat: spv progress bars

* feat: start from 0 if syncing with wallets

* clippy

* fmt

* update

* fixes

* fix: add sdk features

* feat: add accounts and transactions to wallet screen

* clippy

* fmt

* fix: dashpay database table initialization was hanging on new db (#463)

* fix: display stuff

* add accounts and much progress

* feat: transaction history in wallet

* clippy

* ok

* feat: hd wallet

* send tx via wallet and wallet lock/unlock

* update to PeerNetworkManager

* ok

* ok

* ok

* fmt

* clippy

* clippy

* feat: clear SPV data button

* fix: switch from dash core rpc to spv mode

* feat: switch to DashSpvClientInterface

* clean spv button fix

* feat: send from wallet screen

* feat: platform addresses

* feat: platform address transitions

* feat: platform address transitions

* feat: move dashpay screen to top level

* platform addresses sdk

* remove async context provider fn

* lock

* update for new sdk with addresses and handle sdk result data

* chore: update grovestark dependency

* chore: update dash-sdk rev

* fmt

* remove elliptic curves patch

* clippy

* feat: use BackendTaskSuccessResult variants instead of Message(String)

* fmt

* clippy

* update DIP18 implementation, fixes and some features around wallets and PAs

* fix

* wallet unlock on wallet screen

* info popup component

* small fixes

* wallet unlock component

* fix startup panic

* welcome screen and dashpay stuff

* cargo fix

* cargo fmt

* chore: update deps to use most recent dash-sdk

* simplify welcome screen and move spv storage clear to advanced settings

* default connect to peers via SPV DNS seeds

* fix: exit app without waiting

* fix error message and reverse quorum hash on lookup

* fmt

* settings to turn off spv auto sync

* clippy

* work on getting started flow

* AddressProvider stuff

* address sync stuff

* many fixes all in one

* fix

* many fixes

* fixes

* amount input stuff

* alignment in identity create screen for adding keys

* more fixes

* many improvements

* simple token creator, word count selection for wallet seed phrases, more

* fix: platform address info storage

* feat: generate platform addresses and address sync post-checkpoint

* many things

* fix: cannot create identity from address

* chore: update to recent changes in platform

* docs: added few lines about .env file

* fix: banned addresses and failure during address sync

* fix: updates for new platform and fee estimation

* fix: only take PA credits after checkpoint

* feat: fee estimation and display

* feat: fee estimation follow-up

* chore: fix build

* chore: correct platform revision

* refactor: don't query for nonce when creating identity

* more on fee displays

* fix: proof logs in data contract create

* fix: white on white text for fee estimation display

* fix: always start as closed for advanced settings dropdown in settings screen

* fix: hard to see data contracts in the register contract screen

* fix: document create screen scroll

* fix: fee estimations accuracy

* fmt

* clippy auto fixes

* clippy manual fixes and pin dash-sdk dep

* fix failing tests

* fmt

* fix: update rust toolchain to 1.92

* refactor: hide SPV behind dev mode

* feat: warning about SPV being experimental

* fix: platform nonces not updated in sync

* chore: cargo fmt

* deps: update platform repo

* chore: clippy and rabbit

* chore: rabbit review

* chore: enforce address networ with require_network()

* cleanup based on claude review

* fmt

* cleanup based on another claude review

* fix: kittest failing

* fix: remove fee result display in success screens and clean up dashpay avatar display

* dashpay fixes and platform address fixes

* deps: update platform repo

* chore: fixes after merge

* refactor: move some AppContext functions to backend_task module

* clippy

* clippy

* fix: refresh mode alignment in wallet screen and fmt

* chore: fmt

* fmt

---------

Co-authored-by: pauldelucia <pauldelucia2@gmail.com>
Co-authored-by: Paul DeLucia <69597248+pauldelucia@users.noreply.github.com>
Co-authored-by: Quantum Explorer <quantum@dash.org>
Co-authored-by: Ivan Shumkov <ivanshumkov@gmail.com>

* docs: add CLAUDE.md for Claude Code guidance (#484)

Adds documentation to help Claude Code (claude.ai/code) work effectively
with this codebase, including build commands, testing instructions,
architecture overview, and UI component patterns.

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* build: update dash-sdk to use rust-dashcore v0.42-dev (#483)

* build: update dash-sdk to use rust-dashcore v0.41.0

Updates dash-sdk dependency to rev 7b2669c0b250504a4cded9e2b9e78551583e6744
which includes rust-dashcore v0.41.0.

Breaking changes addressed:
- WalletBalance: confirmed field renamed to spendable(), fields now methods
- WalletManager::new() now requires Network argument
- import_wallet_from_extended_priv_key() no longer takes network argument
- current_height() no longer takes network argument
- RequestSettings: removed max_decoding_message_size field
- sync_to_tip() removed - initial sync now handled by monitor_network()

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* style: apply cargo fmt

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* clippy

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: pauldelucia <pauldelucia2@gmail.com>

* feat: hint text next to withdrawal destination input in dev mode with advanced options and owner key

* feat: implement asset lock creation and detail screens (#418)

* feat: implement asset lock creation and detail screens

* clippy fix

* some fixes

* fix: ui cleanup and backend fixes

* fix: clippy

* feat: tests

* fix: remove identity index selector for top ups

* fmt

* refactor: use `AmountInput` component

* fixes

* fix: clippy

---------

Co-authored-by: pauldelucia <pauldelucia2@gmail.com>

* fix: dev mode wouldnt toggle in left panel when unchecked in settings if config load failed (#488)

* fix: force Core RPC mode on app start if not in dev mode (#489)

* fix: display WIF format for manually added private keys (#496)

* fix: display WIF format for manually added private keys

Externally loaded identities with manually added private keys now show
both WIF and hex formats, matching the display for wallet-derived keys.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* clippy

* fmt

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: pauldelucia <pauldelucia2@gmail.com>

* fix: security level validation for add key screen (#494)

* fix: auto-set security level based on key purpose in add key screen

When selecting a key purpose, automatically set the appropriate security
level and restrict available options: ENCRYPTION/DECRYPTION only allow
MEDIUM, TRANSFER only allows CRITICAL, and AUTHENTICATION allows
CRITICAL/HIGH/MEDIUM.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: disable security level dropdown when only one option is valid

Visually indicate to the user that the security level is fixed by the
protocol for certain key purposes (ENCRYPTION, DECRYPTION, TRANSFER).
Adds a hover tooltip explaining why the dropdown is disabled.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: remove redundant `contract_bounds_enabled` check for `has_multiple_security_levels` bool

* fmt

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: pauldelucia <pauldelucia2@gmail.com>

* fix: identity registration default key was using wrong `ContractBounds` (#487)

* fix: identity registration default key was using wrong ContractBounds

* feat: add tests

* fmt

* doc: update key descriptions

* feat: add coderabbit configuration file

* fix: document actions were auto selecting master keys but shouldnt (#493)

* fix: top up with QR was validating against wallet max balance (#492)

* fix: view platform address popup showing wrong address format (#500)

* fix: view platform address popup showing wrong address format

* fix: use helper

* feat: update sdk v3.0.1 hotfix.1 (#503)

* chore: update dash-sdk to v3.0.1-hotfix.1

Updates dash-sdk to v3.0.1-hotfix.1 to match testnet.

Breaking API changes addressed:
- WalletBalance.unconfirmed and .total are now fields instead of methods
- RequestSettings now requires max_decoding_message_size field

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fmt

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* fix: ensure dev mode is off and spv sync off for new users (#504)

* fix: ensure dev mode is off and spv sync off for new users

* fix tests

* fix

* fix: update platform address prefix from dashevo to evo (#505)

* fix: update platform address prefix from dashevo to evo

Update address detection and UI hints to use the new shorter
platform address prefixes (evo1/tevo1) instead of the old format
(dashevo1/tdashevo1) to match SDK v3.0.1 changes.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: validate platform address network matches app network

Add network validation when parsing Bech32m Platform addresses to ensure
the address network prefix matches the app's configured network, showing
a descriptive error on mismatch.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fmt

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* fix: platform address balance doubling after transfer and refresh (#502)

* fix: platform address balance doubling after transfer and refresh

* fix

* feat: add fee multiplier caching and use it across all UI screens (#506)

* feat: add fee multiplier caching and use it across all UI screens

- Add fee_multiplier_permille support to PlatformFeeEstimator
- Add fee multiplier caching in AppContext with getter/setter
- Add fee_estimator() helper method on AppContext
- Cache the fee multiplier when epoch info is fetched
- Display note when fee multiplier cache is updated
- Update all UI screens to use app_context.fee_estimator()

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fmt

* fix: apply fee multiplier to all estimation functions

Update all estimate_* functions to apply the fee multiplier to the
combined total (storage + processing/registration) rather than to
individual components, ensuring consistent fee calculation across
all state transition types per the Dash Platform spec.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* refactor: reuse fee_estimator instance in token screens

Avoid duplicate construction and keep consistent multiplier snapshot
within the frame by reusing the existing fee_estimator variable.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* refactor: use DEFAULT_FEE_MULTIPLIER_PERMILLE constant in AppContext

Keep the AppContext default in sync with the estimator's canonical value
instead of hardcoding 1000.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* fix: take from multiple platform addresses in simple send flow (#501)

* fix: take from multiple platform addresses in simple send flow

* address selection algorithm

* fix

* fix: fee payer index lookup

* cleanup

* fix: use PlatformFeeEstimator for address transfer fees

- Replace custom fee calculation with PlatformFeeEstimator
- Simplify allocation logic by calculating fee upfront
- Use 20% safety buffer on fee estimates
- Remove complex iterative allocation loop

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fmt

* Add fee deficit check in platform address allocation

The fee payer must have enough remaining balance after their
contribution to cover the transaction fee. This change calculates
the fee deficit (if fee payer's remaining balance < estimated fee)
and adds it to the shortfall, preventing impossible sends from
being attempted.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* Use actual input count for fee estimation in error messages

Changed estimate_platform_fee calls to use addresses_available
(the actual number of available inputs) instead of MAX_PLATFORM_INPUTS.
This provides more accurate fee estimates and max sendable amounts
in the error messages when transactions exceed available balance.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* Filter destination address from preview allocation

The preview allocation now parses the destination platform address
and passes it to allocate_platform_addresses, ensuring the destination
is never shown as an input source. This matches the behavior of the
actual send logic.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fmt

* Filter destination from max calculation and improve warning message

The max amount calculation now excludes the destination address,
matching the allocation logic. This prevents showing an inflated
max when the destination is one of your own addresses.

Also improved the warning message to distinguish between exceeding
the address limit vs insufficient balance (including fees).

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fmt

* feat: use cached fee multiplier in send_screen

Update estimate_platform_fee and allocate_platform_addresses to accept
a PlatformFeeEstimator parameter, allowing the send screen to use the
cached network fee multiplier from app_context.fee_estimator().

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: address review comments in send_screen

- Add early return for empty sorted_addresses in allocate_platform_addresses
- Use safe string slicing in render_platform_source_breakdown to avoid panic
- Remove duplicate doc comment

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* fix: prevent platform address balance doubling after internal updates (#507)

* fix: prevent platform address balance doubling after internal updates

Adds last_full_sync_balance column to track the balance checkpoint
for terminal sync pre-population, separate from the current balance.

Key changes:
- Add DB migration (v26) for last_full_sync_balance column
- Sync operations update last_full_sync_balance for next sync baseline
- Internal updates (after transfers) preserve last_full_sync_balance
- Terminal sync pre-populates with last_full_sync_balance, applies
  AddToCredits correctly without double-counting

This fixes the scenario where:
1. Transfer completes, balance updated internally
2. App restarts, refresh triggers terminal sync
3. Same AddToCredits was being re-applied because the pre-population
   baseline wasn't distinguishing between sync and internal updates

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* docs: fix docblocks for is_sync_operation and last_full_sync_balance

- Remove duplicate/obsolete is_full_sync wording from set_platform_address_info
- Update last_full_sync_balance field doc to accurately describe when it's
  updated (during syncs) vs preserved (during internal updates)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: preserve last_full_sync_balance when removing duplicate address entries

Search for last_full_sync_balance from any canonical-equivalent entry
BEFORE removing duplicates, so the value isn't lost when the existing
entry has a different Address representation.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* fix: fetch fresh nonces from platform for identity creation (#509)

When creating an identity with Platform Address funding, the cached
nonce could be stale (terminal-only sync only updates balance, not
nonce). This caused "Invalid address nonce" errors.

Now fetches fresh nonces from platform using AddressInfo::fetch_many()
before identity creation.

Note: The SDK's put_with_address_funding requires caller-provided nonces,
unlike transfer_address_funds which handles nonces internally. This
inconsistency should be addressed in the SDK.

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* fix: don't auto-generate platform address when opening receive dialog (#508)

Use platform_addresses() which checks watched_addresses for derived
Platform addresses, instead of only checking platform_address_info
which only contains synced addresses with balances.

A new address is now only generated if there are truly no Platform
addresses derived for the wallet, not just because they haven't
been synced yet.

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* fix: show N/A for UTXOs and Total Received columns on Platform addresses (#510)

Platform addresses don't have UTXOs (they have credits on Platform layer)
and we don't track historical received amounts for them. Showing 0 was
misleading - N/A is more accurate.

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* fix: reserve fees when using max button for platform address identity funding (#511)

* fix: reserve fees when using max button for platform address identity funding

When clicking the max button to fund identity creation or top-up from a
platform address, the full balance was used without reserving room for
transaction fees, causing "Insufficient combined address balances" errors.

Changes:
- Subtract estimated fee from max amount in identity creation screen
- Subtract estimated fee from max amount in identity top-up screen
- Fix fee estimation to use identity_create_asset_lock_cost (200M credits)
  instead of address_funding_asset_lock_cost (50M credits)
- Add storage-based fees to identity creation/top-up fee estimates
- Add new estimate_identity_topup_from_addresses() for platform address top-ups
- Add 20% safety buffer to account for fee variability
- Show hint explaining fee reservation when max is used

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* docs: fix docstrings to correctly state 20% safety buffer

The docstrings incorrectly stated 10% safety buffer while the code
applies 20% via total / 5.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* Release SPV storage lock on shutdown (#517)

* Fix dark mode text colors (#515)

* Fix dark mode text and borders

* style: apply cargo fmt formatting

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* fix: invalid min amount when transferring funds (#523)

* fix: invalid min amount when transferring funds

* chore: rabbit's feedback

* chore: update bincode to 2.0.1, dash-sdk to v3.1-dev, and grovestark (#526)

* chore: update bincode to 2.0.1, dash-sdk to v3.1-dev, and grovestark

- Update bincode from 2.0.0-rc.3 to 2.0.1
- Update dash-sdk to latest v3.1-dev (98a0ebec)
- Update grovestark to a70bdb1a
- Fix Decode/BorrowDecode implementations for bincode 2.0.1 API changes

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* chore: migrate to using dashpay/grovestark

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: pasta <pasta@dashboost.org>

* feat: use DAPI instead of Core RPC for historical asset lock transaction info (#528)

Replace core_client.get_raw_transaction_info() calls with a new
get_transaction_info_via_dapi() function that queries transaction status
via DAPI gRPC. This removes the dependency on a local Core RPC node for
checking whether asset lock transactions have been chainlocked, which is
needed for identity registration, top-up, and platform address funding
from asset locks.

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* fix: not enough balance to pay a fee in platform to core transfers (#513)

* fix: fee estimation for AddressCreditWithdrawalTransition

* chore: max button

* refactor: remove redundant code

* chore: better hint in platform-to-core

* Refactor token creator helpers (#518)

* refactor(tokens): simplify token creator helpers

* style: cargo fmt

* Simplify wallets UI helpers and send flow (#519)

* Simplify wallets UI helpers and send flow

* Fix wallets screen helper placement

* Fix refresh_on_arrival borrow

* Stabilize token UI tests config

* Simplify wallet send address type helper

* fix: handle RegisteredTokenContract result to clear token creation spinner (#529)

The backend task returned RegisteredTokenContract on success but the
tokens screen had no handler for it, causing the spinner to spin forever.

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

* fix: build fails for windows target (#527)

* fix: build fails for windows target

* build: only create a release when tag is set

* chore: remove redundant settings from release.yml

* doc: windows requirements

* fix: windows icon

* build: change grovestark revision

* chore: fmt

* fix: don't open console window on windows

* build: grovestark recent commit

* fix: critical wallet bugs (GH#522, GH#476, GH#478, GH#85) (#534)

* fix: auto-refresh wallet UTXOs on app startup (GH#522)

On startup, bootstrap_loaded_wallets now spawns background tasks to
refresh UTXOs from Core RPC for all HD and single-key wallets. This
ensures balances are current without requiring the user to manually
click Refresh. Only applies in RPC mode; SPV handles UTXOs via
reconciliation.

Task: 1.1a

* fix: respect fee_deduct_from_output flag in platform address funding (GH#476)

When the user selects "deduct from input", use an explicit output amount
for the destination and a separate change address for the fee remainder,
so the destination receives the exact requested amount.

Task: 1.1b

* fix: reserve estimated fees in wallet balance top-up max button (GH#478)

Task: 1.1c

* fix: prevent funding address reuse across identities (GH#85)

Task: 1.1d

* fix: add 5-minute timeout to asset lock proof wait loop (wallet-008)

Task: 1.1e

* fix: use wallet-controlled change address and epoch-aware fee estimator

Use a fresh wallet receive address for platform funding change output
instead of an ephemeral key-derived address, so surplus credits remain
spendable. Also switch to epoch-aware fee estimator for accurate fee
estimation when the network fee multiplier is above 1x.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: address critical review issues in wallet funding

- Use try_lock() in tokio::select! timeout arm to avoid blocking the
  async runtime when another thread holds the mutex
- Use change_address() (BIP44 internal path) instead of receive_address()
  for deriving change addresses, ensuring proper path separation
- Replace .unwrap_or(0) with .ok_or() on BTreeMap index lookup to
  surface errors instead of silently targeting the wrong output

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: auto-refresh wallet UTXOs on asset lock proof timeout (RPC mode)

When the 5-minute timeout fires, the asset lock tx has already been
broadcast and UTXOs removed locally. Trigger a background wallet
refresh in RPC mode so spent inputs are reconciled against chain state.
SPV mode handles its own reconciliation.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* style: fix rustfmt formatting in fee estimator chain

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: replace saturating_mul with checked_mul for duffs-to-credits conversion

Overflow now returns an explicit error with diagnostic info instead of
silently clamping to u64::MAX.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

* fix(tokens): restore token reorder assignment and distribution field checks (#535)

* Extract dialog rendering into wallets_screen/dialogs.rs module (#539)

Moved 4 dialog rendering functions and 10+ helper methods (~1151 lines)
from wallets_screen/mod.rs into a new dialogs.rs module. Includes
send, receive, fund platform, and private key dialogs plus their
state structs. mod.rs reduced from 3824 to 2673 lines.

Task: 3.2a

* build: update all dependencies (#531)

* fix: build fails for windows target

* build: only create a release when tag is set

* chore: remove redundant settings from release.yml

* doc: windows requirements

* fix: windows icon

* build: change grovestark revision

* chore: fmt

* fix: don't open console window on windows

* build: grovestark recent commit

* build: update dependencies

* chore: clippy

* chore: fmt

* build: update platform to most recent v3.1-dev

* feat: add key exchange protocol and state transition signing

Add YAPPR key exchange flow for DashPay, QR scanner improvements,
state transition signing screen, and refactor UI helpers.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* feat: migrate SPV event handling to broadcast channels

Replace orphaned SpvEvent handler with three new broadcast-based
handlers (SyncEvent, WalletEvent, NetworkEvent) that subscribe to
the actual event producers in dash-spv. This fixes wallet
reconciliation never being triggered by SPV events.

- Bump dash-sdk to fb055ec008 (picks up rust-dashcore 4d2a7018
  with WalletEvent support)
- Add spawn_sync_event_handler: triggers reconcile on
  BlockProcessed, ChainLockReceived, InstantLockReceived,
  SyncComplete
- Add spawn_wallet_event_handler: triggers reconcile on all
  wallet events (TransactionReceived, BalanceUpdated)
- Add spawn_network_event_handler: updates connected_peers count
  on PeersUpdated
- Add connected_peers field to SpvManager and SpvStatusSnapshot
- Fix reconcile channel race: register channel before starting
  SPV thread so handlers always capture a valid sender
- Improve reconcile: track in-memory UTXOs, log summaries, guard
  against wiping transaction history

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: refresh receive dialog balances from wallet on each frame

The receive dialog cached address balances at open time and never
updated them, so SPV balance changes were not reflected until the
dialog was closed and reopened.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* refactor: remove YAPPR key exchange and state transition signing

Move these features to the feat/yappr-key-exchange branch. This branch
now focuses on SPV broadcast channel migration, dependency bumps, and
reconciliation fixes only.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* feat: replace Core RPC with DAPI for asset lock operations in SPV mode

Migrate transaction info queries, broadcasting, and finality detection
away from direct Core RPC calls so that identity registration and
top-up work in SPV-only mode. Key changes:

- Add `get_transaction_info_via_dapi()` using DAPI GetTransaction
- Add `broadcast_raw_transaction()` that routes via RPC or SPV
- Add SPV finality listener forwarding instant/chain lock events
- Make asset lock creation methods async for SPV broadcasting
- Use longer proof timeouts (5min) in SPV mode vs 2min for RPC
- Update address balances after asset lock UTXO consumption
- Add BIP32 derivation path detection for SPV address mapping
- Bump platform SDK rev to bcb41de347

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* style: apply cargo fmt formatting

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: handle ignored Results and avoid panic on poisoned lock

- Propagate update_address_balance errors via ? in create_asset_lock.rs
- Replace .expect() with .map_err()? for core_client lock in broadcast_raw_transaction
- Log try_send failures for finality events in SPV manager instead of silently dropping

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: clean up finality map on success and remove poisoned lock panic

Remove stale entries from transactions_waiting_for_finality on the
success path of asset lock proof timeout loops, preventing unbounded
map growth. Applied to both top_up_identity.rs and register_identity.rs.

Also replace .expect() on poisoned RwLock read of core_client with
graceful error propagation via map_err.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* refactor: address PR #525 review feedback from @lklimek

- Rename get_transaction_info_via_dapi to get_transaction_info
- Extract wait_for_asset_lock_proof helper on AppContext (4 copies → 1)
- Extract recalculate_affected_address_balances and recalculate_address_balance
  helpers on Wallet (7 copies → helper calls)
- Fix unused height variable suppression in ChainLock handler
- Document single-subscriber semantics on register_finality_channel and
  register_reconcile_channel
- Fix pre-existing collapsible_if clippy warnings in determine_sync_stage

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Refactor masternode list diff screen state (#520)

* refactor: split masternode list diff screen state

* fix: avoid borrows in diff screen renders

* Initial plan

* refactor: split context.rs into focused submodules (#543)

Extract the monolithic 1795-line context.rs into a context/ module with
5 focused submodules, each grouping related AppContext methods:

- mod.rs (543 lines): struct definition, constructor, config/SDK methods
- wallet_lifecycle.rs (572 lines): SPV/wallet management and reconciliation
- identity_db.rs (205 lines): identity and DPNS database operations
- contract_token_db.rs (198 lines): contract and token database operations
- settings_db.rs (84 lines): settings cache and persistence
- transaction_processing.rs (231 lines): transaction finality handling

Pure extraction with no logic changes.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

* refactor: extract address table, asset locks, and single-key view from wallets_screen (#542)

Continue the wallets_screen/mod.rs refactoring started in #539 (dialogs
extraction). Extract three more focused submodules:

- address_table.rs: SortColumn/SortOrder enums, AddressData struct,
  sorting logic, categorize_path, and the full address table renderer
- asset_locks.rs: asset lock table rendering and fund dialog triggers
- single_key_view.rs: single-key wallet detail view with UTXO display

Reduces mod.rs from 2662 to 1947 lines (-27%).

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

* fix(startup): harden cookie parsing, config save, and logger init (#537)

* fix(startup): harden cookie parsing, config save, and logger init

* style(logging): apply rustfmt in logger init

* fix(startup): use sync_all, fix Windows rename, and remove credential leak

- Use with_file_name instead of with_extension for temp file path clarity
- Replace flush() with sync_all() for crash-safe atomic config writes
- Handle Windows rename semantics by removing target before rename
- Remove raw cookie value from error message to prevent credential leakage

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* style: apply rustfmt

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix(config): use NamedTempFile::persist() for atomic config save on Windows

Replace manual remove-then-rename sequence with tempfile::NamedTempFile
which uses MoveFileEx(MOVEFILE_REPLACE_EXISTING) on Windows for atomic
file replacement. This fixes two issues:
- Config loss if process crashes between remove_file and rename
- Open file handle on tmp file preventing rename on Windows

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

* fix: propagate errors from wallet balance recalculation instead of silently dropping

Replace `let _ = wallet.recalculate_*()` with `?` in 5 call sites so
database errors during address-balance recalculation are surfaced
instead of silently swallowed. This matches the existing pattern in
create_asset_lock.rs which already propagates these errors.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* chore: update dash-sdk to platform rev 060515987a

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* chore: cargo fmt

* fix: connection status not clear (#532)

* fix: connection status not updated

* chore: rabbit feedback

* chore: typo + network changes

* chore: apply feedback

* chore: rabbit review

* chore: rabbit feedback

* chore: rabbitting

* chore: fmt

---------

Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>

* fix: error when SPV sync height unknown instead of defaulting to 0

Passing height=0 into transaction construction when SPV hasn't synced
yet can lead to incorrect locktime/maturity behavior. Return an error
instead so the caller knows to wait for sync progress.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Merge pull request #548 from dashpay/chore/improve-claude-md

chore: improve CLAUDE.md with architecture documentation

* docs: use v1.0-dev for diffs etc agents (#551)

* fix: remove dead code with guaranteed mutex deadlock (#559)

* Initial plan

* Remove unused insert_remote_identity_if_not_exists function with deadlock bug

Co-authored-by: lklimek <842586+lklimek@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: lklimek <842586+lklimek@users.noreply.github.com>

* feat: add "Claim all" checkbox and complete merge with v1.0-dev

- Added claim_all boolean field to ClaimTokens task
- Updated handler to call claim_all_tokens or claim_token based on flag
- Added claim_all checkbox to UI (enabled by default)
- Added claimed_amount field to track tokens claimed
- Updated display_task_result to save and display claimed amount
- Updated success screen to show amount of tokens claimed
- Wire checkbox state to ClaimTokens backend task

Co-authored-by: lklimek <842586+lklimek@users.noreply.github.com>

---------

Co-authored-by: Paul DeLucia <69597248+pauldelucia@users.noreply.github.com>
Co-authored-by: lklimek <842586+lklimek@users.noreply.github.com>
Co-authored-by: QuantumExplorer <quantum@dash.org>
Co-authored-by: pauldelucia <pauldelucia2@gmail.com>
Co-authored-by: thephez <thephez@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Ivan Shumkov <ivanshumkov@gmail.com>
Co-authored-by: PastaPastaPasta <6443210+PastaPastaPasta@users.noreply.github.com>
Co-authored-by: pasta <pasta@dashboost.org>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants