Commit Graph
4019 Commits
Author SHA1 Message Date
Seth For PrivacyandGitHub 930397cbe6 a11y: receive flow semantics (copy control, pickers, selection state) (#3467)
* Add strings for receive-flow accessibility labels

New English keys: info, long_press_to_copy, standard, token. They replace
hard-coded English in the receive amount modal, the payjoin copy modal and
the addresses long-press menu, and name the copy hint.

* Collapse copy-to-clipboard controls to one accessible button

CopyWrapper gains an optional controlBuilder that hands the copy callback to
the control it builds instead of stacking its own gesture layer on top, and it
now announces the copy through SemanticsService so screen-reader users get the
same feedback the copied state gives sighted users. When there is nothing to
copy it no longer leaves a gesture detector behind that reads as actionable
but does nothing. Its own tap/long-press wrapper is exposed as one merged
button node with a copy hint and a Copy custom action, so tap-to-copy stays
reachable on rows that also navigate.

The receive copy button used an outer gesture detector for the real work while
the visible ModernButton had a no-op onPressed behind two IgnorePointers.
It is now a single ModernButton whose onPressed copies, or opens the payjoin
copy modal when there is no direct URI to copy; the AnimatedSwitcher copied
state is unchanged. The payjoin modal announces the copy and no longer
hard-codes "Standard".

* Add screen-reader semantics to receive flow and address pickers

Every control touched here becomes exactly one merged semantics node with a
localized name, the right role and, where it exists, its selection state:

- receive page: the label chip is a button hinted with set_label and is kept
  out of the semantics tree while it is collapsed to zero height.
- amount modal: token picker and currency picker are buttons named by
  select_token / select_fiat_currency_title, the amount field carries the
  amount label instead of relying on its placeholder, and the visible captions
  are excluded so they are not announced twice.
- amount display: amount, symbol and fiat equivalent are announced together.
- info box: Dismiss is a real button, the info icon and the illustrative
  currency stack are decorative (the message text carries their meaning).
- address type: the row and its chevron triggered the same picker; only the row
  is exposed now, named by address_type.
- address type selector: More Options exposes its expanded state, each option
  row reports selected + inMutuallyExclusiveGroup (its checkbox is excluded so
  the state is announced once), and the collapsed options are unreachable.
- label modal quick-label chips are buttons.
- addresses page: rows are buttons reporting selection, with the long-press
  actions (set label, hide/unhide, info) also exposed as custom semantics
  actions; the checkmark is decorative; the search field keeps a name once it
  has text; show-hidden-addresses is a button.
- currency picker: search field, clear button, currency rows, chain chips and
  network rows get names, roles and selection state; icons and chevrons are
  decorative.

No visual or pointer behaviour changes.

* Drop single-use locals to keep the diff minimal

* Address review: replace deprecated copy announcements with semantic state
2026-08-05 09:16:58 +02:00
SerhiiandGitHub 061f36a6b8 fix:quick actions cold start (#3476)
* fix:quick actions cold start

* route receive links to new receive page
2026-08-05 08:49:54 +02:00
claude[bot]andGitHub 0e42f162be Wrap long passphrase value on the wallet seed/keys screen (#3480) 2026-08-05 08:42:50 +02:00
malik1004xandGitHub 0b93bafe0b replace asserts for semantic labels with lints (#3483) 2026-08-04 14:09:04 +02:00
malik1004xandGitHub 0257f5cf76 cw-1584-ironwood-migration-modal (#3481)
* ironwood migration modal

* auto-show when migration begins

* remove restricted import

* new condition

* string fix

* only activate if ironwood is active

* reaction safeguards

* migration*
2026-08-04 14:08:48 +02:00
cyanandGitHub dc21341725 fix: hide dust balance from "confirming" (#3456) 2026-08-04 01:09:34 +02:00
Seth For PrivacyandGitHub a6bcf7c97a a11y: dashboard and navigation semantics (navbar, cards, sync, switchers) (#3468)
* Label new-UI dashboard navigation and sync status for screen readers

Each bottom-nav tab becomes one button node carrying its localized name, its
selected state and mutual exclusion; the pill text no longer duplicates the
selected tab. The assets/history tabs gain selected state, the Bitcoin/Lightning
switcher becomes a labeled toggle, and the sync bar becomes a single button whose
label is the localized status (plus Tor/MWEB/Silent Payments badges) with a hint
pointing at node management. Compact mode's pulsing dot and the chain icon's
progress ring now have text equivalents, and the invisible pointer-absorbing
strip behind the nav bar is excluded from traversal.

* Make new-UI dashboard cards, lists and menus operable by screen readers

Collapse the wallet-name row into one labeled button (hardware-wallet glyph
folded into the label, inner accounts button no longer a second stop) and give
balance cards a labeled, selectable node with a long-press action for show/hide
balance. Balances hidden behind AnimatedOpacity, card artwork and decorative
glyphs leave the semantics tree; the 3-dots customize target and the card action
buttons are now named buttons. Assets/history rows, the history header, the MWEB
promo, long-press menu items, the account cards and the add-account and
generate-name controls become single button nodes, the phantom action chip in the
assets header is built conditionally instead of drawn at opacity 0, and app cards
get a close tooltip plus an 'opens externally' hint.

* Use expression bodies for the new a11y helpers

* Restore untouched expressions in cards_view

* Address review: state-aware balance hint, tooltip-free close label

* Address review: keep header height without the chip, name the selected index
2026-08-03 19:58:51 +02:00
Seth For PrivacyandGitHub 8d38381693 Merge pull request #3478 from cake-tech/agent/security-reporting-requirements
security: require app-level vulnerability proofs
2026-08-03 11:34:26 -04:00
sethforprivacy 42019d8644 security: require app-level vulnerability proofs 2026-08-03 07:22:41 -04:00
Seth For PrivacyandGitHub 26a16a4eef a11y: expose ModernButton, CoinActionButton and ModalTopBar as single labeled button nodes (#3463)
* Give ModernButton and CoinActionButton one labeled a11y node

ModernButton, CoinActionButton and the ModalTopBar chrome buttons were
icon-only IconButtons with no tooltip and a detached caption sibling, so
screen readers announced an unnamed "button" plus unrelated static text.

- Add optional semanticLabel to ModernButton; wrap the control in
  MergeSemantics + Semantics(button: true, label: semanticLabel ?? label)
  and exclude both the icon and the visible caption so exactly one node
  is exposed. No visual or pointer change.
- Give CoinActionButton the same treatment, reusing the label callers
  already pass (dashboard Send / Receive / Swap / Scan).
- Add leadingSemanticLabel / trailingSemanticLabel to ModalTopBar,
  defaulting the leading button to "Close", and mark a non-empty title
  as a semantics header.
- Migrate every ModernButton / ModalTopBar call site to pass a localized
  label, and drop the now-redundant external Semantics wrapper in
  base_page.dart so the back button is not labeled twice.
- Localize the hard-coded "Settings" modal title in settings_page.dart.

New English keys: rotate_address, swap_reverse_direction, switch_camera,
switch_input_currency, test_node_speeds, turn_flash_off, turn_flash_on.

* Require explicit accessible names on ModalTopBar and ModernButton icons

ModalTopBar defaulted every leading icon's accessible name to "Close", so
the ~40 callers that pass a back arrow announced the wrong action, and
trailingSemanticLabel was optional, leaving the trailing icon controls
unnamed.

- Drop the "?? close" fallback in ModalTopBar: the leading ModernButton
  now gets exactly leadingSemanticLabel, and constructor asserts require a
  non-empty label whenever leadingIcon / trailingIcon is supplied. Callers
  that pass leadingWidget / trailingWidget instead are unaffected, and a
  null icon still builds no button at all.
- Assert in both ModernButton constructors that the control has a name:
  either semanticLabel or a non-empty visible label.
- Pass the matching localized label at every ModalTopBar call site: "Go
  back" for back arrows, "Close" for close icons, and the action name for
  trailing icons (History, Configure, Export CSV, Save, Scan, Close).
- Label the last unnamed ModernButton (wallet accounts, wallet_info.dart).

No new localization keys; all labels reuse existing strings_en.arb keys.

* fix(a11y): put ModalTopBar header flag on the title Text node

On-device audit (CW-1574, defect D2) found zero [heading] nodes in the
Android accessibility tree on the Receive page: Semantics(header:) wrapped
the AnimatedSwitcher rather than the Text inside it, so the flag never
landed on the node that carries the title label.

Move the header semantics inside the AnimatedSwitcher, directly around the
Text. The ValueKey(title) moves with it onto the Semantics wrapper, since
AnimatedSwitcher switches on its direct child's key -- keying the Semantics
by title preserves the existing switch/animation behavior exactly.

No test or robot resolves the title ValueKey through a Text-typed finder,
so the key relocation is not observable from the test suites on this branch.

* Set headingLevel so Android surfaces modal titles as headings

The Flutter 3.41 engine drives AccessibilityNodeInfo.setHeading from
headingLevel, not the IS_HEADER flag (which 3.35 used). Proven by an
on-device probe: header:-only headings print on a 3.35-engine build and
vanish on the 3.41-engine CI build.
2026-08-02 09:50:26 +02:00
f6566e3baf Enforce passphrase confirmation match on the restore and create wallet flows (#3474)
* fix: enforce passphrase confirmation in restore passphrase bottom sheet

The confirm-passphrase field in AddPassphraseBottomSheet already had a
validator comparing it to the first field, but the fields were not inside
a Form and nothing ever called validate(), so the validator never ran.
Tapping "Restore" restored the wallet with the first field's value even
when the confirmation did not match, defeating the typo check.

Wrap both fields in a Form and validate it before completing the restore,
matching the existing pattern in advanced_privacy_settings_page.dart.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019DtLNfYw1H81p7zZrkNDXM

* Validate passphrase confirmation when the passphrase field is empty

---------

Co-authored-by: Claude <noreply@anthropic.com>
2026-08-02 09:43:46 +02:00
claude[bot]andGitHub b50ceb2462 Point changelog modal "View more info" at docs release notes (#3459) 2026-07-31 01:01:52 +02:00
Konstantin UllrichandGitHub 22015eb1e1 fix: add reconnection logic to hardware wallet flow to handle tap-backs (#3458) 2026-07-31 00:05:18 +02:00
Konstantin UllrichandGitHub cb194fbaab intoduce-moneytext (#3447)
* feat: Introduce `MoneyText` and `CurrencySymbolText` Widgets

* feat: add accessibility to `MoneyText`
2026-07-28 00:13:29 +02:00
Omar a612135046 update build numbers
fix cw_zcash import
2026-07-27 13:20:52 +02:00
cyanandGitHub fe3a702e52 fix: zkool2 (#3445) 2026-07-27 11:08:23 +02:00
cyanandGitHub 92c2c5e043 zec ironwood (#3425)
* initial

* wip

* ironwood detection, migration

* dev: zec address validation on rt

* fix: ironwood spend

* ironwood regressions

* fix: tx history

* bump: zkool2

* fix: tx amounts on pending
fix: ironwood pending balance
fix: orchard->ironwood migration
fix: orchard->any pre ironwood txs
fix: ironwood -> any txs
fix: WrongSpendAuthorizingKey
fix: tx history
fix: autoshield to ironwood
fix: zkool to latest version
break: my sleep schedule :sweating: :worksonmymachine:

* thx fable

* downgrade frb to 2.11.1

* fix: tx amounts in history

* Migating... / migration label for O->I txs
2026-07-27 10:20:40 +02:00
b73c46ac59 Shuffle change output on hardware wallet and Bitcoin Cash sends (#3432)
* Shuffle change output on hardware wallet sends

Hardware wallet BTC/LTC sends passed outputs to the PSBT/device in the
given order (change last), a position fingerprint. The outputOrdering
param was plumbed but ignored. Add orderOutputs() and apply it in both
buildHardwareWalletTransaction paths; set the send call site to shuffle.

Refs #3376 (the software send + RBF paths were covered by #3420).

* Shuffle change output on Bitcoin Cash sends

The BCH send path built via ForkedTransactionBuilder with
outputOrdering: none, leaving change deterministically last. The builder
shuffles natively and change is found by isChange, not position, so flip
it to shuffle (matches the BTC software path from #3420).

Refs #3376.

* Update cw_bitcoin/lib/electrum_wallet.dart

Co-authored-by: Omar Hatem <omarh.ismail1@gmail.com>

---------

Co-authored-by: Omar Hatem <omarh.ismail1@gmail.com>
2026-07-26 02:30:41 +02:00
Omar 6c54a4ee00 disable exolix [skip ci] 2026-07-26 02:20:03 +02:00
SerhiiandGitHub 037c21e638 Update changenow_exchange_provider.dart (#3416) 2026-07-26 00:52:59 +02:00
SerhiiandGitHub 24a884b390 fix btc address lookup (#3422) 2026-07-26 00:52:41 +02:00
Seth For PrivacyandGitHub 7f090c3a3a Fix domain lookup toggles for Yat and Zcash.me providers (#3439)
Both providers checked the wrong SettingsStore flag in isEnabled(), so
their toggles in Settings > Connection and sync > Domain lookups had no
effect:

- YatAddressProvider read lookupsWellKnown instead of lookupsYatService,
  so the 'Yat' toggle did nothing and '.wellknown' unexpectedly gated it.
- ZcashMeAddressProvider read lookupsZcashNames instead of
  lookupsZcashAddress, so the 'Zcash.me' toggle did nothing and it was
  gated by the 'Zcash Names' toggle.

Each provider now reads the flag its own toggle writes, matching the
mapping in ConnectionSyncViewModel.lookupValue/setLookupValue.
2026-07-25 02:43:06 +03:00
Seth For PrivacyandGitHub 1a0c3e0d6b Fix stale seed location path in seed_display_path (#3440)
The string still described the old UI navigation ("Menu → Security and
Backup → Show key/seeds"). With FeatureFlag.hasNewUi there is no Menu,
and the Show seed/keys row is commented out of the Security page. Seeds
and keys now live at Settings → Wallet settings → Seed & Keys.

Rendered in two places, both reachable:
- seed_verification_success_view.dart:54
- wallet_group_existing_seed_description_page.dart:57
2026-07-25 02:29:14 +03:00
Seth For PrivacyandGitHub 6641549d64 Fix mismatched support links for SwapTrade and Telegram (#3441)
Two entries in SupportViewModel's link list displayed one destination
but opened another.

SwapTrade pointed at mailto:support@exolix.com, so a user with a
SwapTrade trade problem emailed Exolix — who cannot help, and who
absorbed another provider's support traffic. The entry was added as
Quantex with Exolix's mailto already copy-pasted in from the entry
above it; the Quantex -> SwapTrade rename updated the title, icon and
linkTitle but carried the wrong link forward.

Point it at https://help.swaptrade.io/contact/, which matches what
docs.cakewallet.com/support/swap lists for SwapTrade. Live chat is the
only contact method that help center publishes — there is no SwapTrade
support email — so the mailto form is not an option. Using a path below
the displayed host follows the existing SideShift entry in this file.

Telegram had the inverse problem: linkTitle read t.me/cakewallet while
the link went to the announcements channel. Here the link was correct —
t.me/cakewallet is a group that self-describes as the inactive Cake
Wallet Community and directs visitors to the announcements channel — so
the stale label was updated to match the destination rather than the
reverse.

The other 15 entries were audited and are consistent.
2026-07-25 02:28:41 +03:00
sethforprivacyandcyan c50d0fc6dd ci: sanitize branch name when naming test APK in reusable-build
The 'Rename apk file'/'Find APK file' steps used the raw ${BRANCH_NAME}
as an APK filename, so any branch containing a '/' (e.g. claude/*) made
cp target a non-existent test-apk/<prefix>/ subdirectory and failed the
build. Derive the sanitized branch name from android/app.properties, the
same approach already used in automated_integration_test.yml.
2026-07-24 23:35:59 +02:00
Omar 33f5df5ad3 update app versions [skip ci] 2026-07-24 05:03:53 +03:00
Seth For PrivacyandGitHub ba75727e54 Fix typo in multichain receive infobox (addess -> address) (#3436) 2026-07-24 02:29:47 +03:00
Omar HatemandGitHub 8a6217fe46 Fix paste button in swap page (#3437)
* Fix paste button in swap page

* update app versions [skip ci]
2026-07-24 02:20:43 +03:00
Omar a04171bd81 update build numbers 2026-07-23 05:01:15 +03:00
Konstantin UllrichandGitHub 8056cfec86 fix: stop resetting coin control on swap (#3433) 2026-07-22 17:08:59 +03:00
cyanandGitHub fe397c2e47 fix: proper migration path (#3430) 2026-07-22 15:25:05 +03:00
Omar 7a05544c65 update build numbers 2026-07-22 03:50:10 +03:00
Konstantin UllrichandGitHub b32b0eaee7 Merge pull request #3427 from cake-tech/fix-cant-exit-hardwar-reconnect-screen
add a back button so you can always go back from the hardware wallet …
2026-07-21 19:43:48 +02:00
Omar d2521aa01c revert and just show the change wallet button if it's a reconnect 2026-07-21 20:42:47 +03:00
cyanandGitHub 7dd048d244 fix: address leaks (#3426) 2026-07-21 20:20:16 +03:00
Omar a43c32d626 add a back button so you can always go back from the hardware wallet connect screen 2026-07-21 19:18:15 +03:00
Omar e4f1660aad update app versions 2026-07-21 15:12:59 +03:00
Omar HatemandGitHub 544cbec0e0 v6.3.0 Release Candidate (#3414)
* v6.3.0 Release Candidate
- the new transaction history
- Radar in Apps screen
- Zcash update
- Flutter update
- Parts of the Refactor
  should improve how amounts are handled in the app and fix any issue with amounts
  improve handling sending to aliases

- Improvements for Cake Pay mobile
- Bug fixes

* don't use memo for note/message values

* save message in QR locally in the notes field

* Make stealth addresses generated from silent payment, not reliant on output index (#3420)

* - fix swaps showing only on primary account
- switch tron default node
- privacy fixes

* - enlarge destination tag and make it copiable
- migrate users on hashvault
- minor fix
2026-07-21 04:54:48 +03:00
Konstantin UllrichandGitHub b336da4a9a refactor: remove deprecated payment URI classes and unify URI handling with ERC681URI implementation (#3423)
* refactor: remove deprecated payment URI classes and unify URI handling with `ERC681URI` implementation

* refactor: apply lint [skip ci]
2026-07-21 00:23:20 +03:00
Seth For PrivacyandGitHub 41e2cba322 security: harden vulnerability disclosure policy (#3419)
* security: harden vulnerability disclosure policy + Slack routing

* security: add discretionary reward policy and marketing-site out-of-scope
2026-07-21 00:08:26 +03:00
Konstantin UllrichandGitHub 85bb70807c fix: copy button behavior on receive page (#3424) 2026-07-20 17:27:23 +03:00
Konstantin UllrichandGitHub 6209e36dfc fix-<-01-fiat-amounts (#3421)
* fix: handling of "< 0.1" Amounts in send flow

* refactor: clean up imports and restructure classes in `send_page.dart` apply lint
2026-07-20 14:19:09 +03:00
7dc84e6045 readme: remove wownero from supported cryptocurrency list (#3412)
Removed Wownero (WOW) from the list of cryptocurrencies.

Co-authored-by: malik1004x <malikowskirobert@gmail.com>
2026-07-18 18:52:07 +03:00
malik1004xandGitHub 5dfae0e13a fix height of details modal when adding note from send confirmation (#3413) 2026-07-18 18:31:06 +03:00
9d685d4645 trezor-monero-passphrase-modal (#3337)
* trezor monero passphrase modal

* feat: add Trezor passphrase support for wallet restoration process

* revert: send page changes

* chore: format code

* chore: format code

* chore: reorganize imports and improve code formatting in send_page.dart [skip ci]

* auto-reformat

* fix: trezor usb device refresh race condition

* fix: ui bugs in relation to trezor

* fix: only show passphrase option for trezor devices

---------

Co-authored-by: Robert Malikowski <malikowskirobert@gmail.com>
Co-authored-by: Omar Hatem <omarh.ismail1@gmail.com>
2026-07-17 17:52:52 +03:00
03edd658a5 Cw 1539 lightning enhancements (#3400)
* feat: add Lightning transaction URL support in transaction details view model

* fix: update currency selection logic in WalletAddressListViewModel and ReceivePage

* feat: integrate computed transaction amount and fee getters in TransactionDetailsViewModel, refactor CopyWrapper logic in TransactionDetailsModal

* refactor: apply lint rules

* refactor: apply lint rules and improve LNURL handling with new methods for withdrawal requests and error checks

* auto-reformat

* fix: receive_page regression

* fix: Withdraw lightning to other btc wallet gives LN address

* chore: update .lock files [skip ci]

---------

Co-authored-by: Robert Malikowski <malikowskirobert@gmail.com>
Co-authored-by: Omar Hatem <omarh.ismail1@gmail.com>
2026-07-17 17:49:17 +03:00
cyanandGitHub 28c2cc152e feat: zkool2 (#3165)
* feat: zkool2

* feat: rescan on zkool
fix: sending to extracted addresses
fix: labeling shielding txs
fix: autoshield endless loop
fix: autoshield t addr not firing
fix: autoshield destinations
chore: remove old routes for rescan with zkool
other minor fixes/cleanups

* fix: zcash hardfork

* fix: update sync progress more reliably

* fix: pending transaction loading
fix: autoshield txs
fix: taddress
fix: fee estimation
fix: tx send errors

* chore: bump zkool2 to latest version
fix: reduce amount of taddrs generated
fix: derivation path for internal wallets
fix: display address in correct hidden/usable spots
fix: get wallet db height before it syncs for the first time
fix: taddr rotation with passphrase
fix: sync progress ui refresh
fix: taddress generation not getting capped
fix: hidden addresses not being hidden
fix: pending transactions not being shown
fix: t address cache misses
fix: t address rotation not getting refreshed
fix: t address high index not being used

* fix: refresh t addresses

* fix: patch rust side to make t addr rotation work

* fix: ui issue in recipient address
fix: zcash multiaddress send to show in the ui
fix: potential race condition

* minor fixes

* format

* fix: flashing on receive screen

* remove unused 'autoShield'

* review
2026-07-17 16:01:31 +03:00
David AdegokeandGitHub 3070612f15 fix: Wrong fiat for sent tx from swaps (#3409)
* fix android CI

* fix: wrong fiat amount showing for sent tx from swaps

* fix: use token address to fetch fiat amount for pending send entry
2026-07-17 06:40:30 +03:00
Omar c10ce20c4f delete solana sync keys when removing the wallet 2026-07-17 01:24:28 +03:00
ed540bae04 CW-1291-ledger-fixes (#3390)
* feat: add connecting indicator in hardware wallet connect screen

* chore: bump ledger related dependencies

* chore: bump ledger related dependencies

* feat: add additional guard against gLedger being null

* auto-reformat

* feat: improve ledger connection and state management

* fix: connect_device_page padding on iOS

* chore: update universal_ble dependency reference

---------

Co-authored-by: Robert Malikowski <malikowskirobert@gmail.com>
Co-authored-by: Omar Hatem <omarh.ismail1@gmail.com>
2026-07-16 21:39:49 +03:00