feat(carpincho-wallet): amulet faucet, per-origin gating, activity & utils tabs, vault backup, and 3-step onboarding by gabitoesmiapodo · Pull Request #88 · BootNodeDev/cn-dappbooster

gabitoesmiapodo · 2026-06-18T21:22:27Z

Summary

No related issue. Brings the most feature-complete Carpincho wallet (from the darkpool line) onto the canton-barebones-splice base, then carries it through a full feature, UX, and security pass so splice gets the best wallet without the darkpool-specific dApp work. Adds the Amulet DevNet faucet to the wallet-service, hardens the injected-provider and vault security models, redesigns the home surface around Assets / Activity / Utils, adds whole-vault backup, and reworks first-run onboarding into a three-step flow. canton-barebones-splice will later merge into main.

Scope has grown well past the original import: 138 files, +7134 / -1568.

Changes

wallet-service

Add the amulet.tap JSON-RPC method (prepares the fixed 100 AMT DevNet faucet command for the receiver party; Carpincho signs locally), with the real SDK path via getTokenSdk, a mock handler, supportedMethods wiring, and unit coverage.
Pass the Amulet registryUrl as a URL so the SDK resolves relative registry endpoints (e.g. /registry/transfer-instruction/v1/transfer-factory); a raw string broke amulet.tap and cip56 transfers.

Injected-provider security (per-origin gating)

Gate injected-provider account access behind explicit per-origin approval: unapproved origins get an empty snapshot (no party ids / public keys), connect is queued for a popup approval, signing is refused, and wallet events broadcast only to connected dApp tabs.
Classify provider methods by access tier in provider/methods.ts (exhaustive over known methods via satisfies Record; unknown methods fail safe to RESTRICTED), consumed by the background gatekeeper instead of three hand-maintained lists.
Surface the requesting origin on every approval card; redesign the connection footer into a single dApp + network row that shows the dApp host and favicon (Radix Avatar with monogram fallback).
Default the wallet-service RPC endpoint to http://localhost:3010/rpc for the local stack (darkpool defaulted to the FiveNorth devnet validator).

Vault & password security

Add whole-vault JSON backup: exportVault() / importVault() on VaultContext (envelope { v: 1, accounts: [...] }), a secure-context downloadJson utility, and a backup export/import UI. Import validates each entry's Ed25519 derivation and partyId shape, skips duplicates, and hardens clipboard hygiene. This replaces per-account private-key import/export (SecurityPanel / PrivateKeyPanel removed).
Restructure the menu drawer around a Vault section (Password / Auto Lock / Export Vault / Import Vault); share a FileDropInput between DAR and vault import.
Fail closed on password strength when VITE_MIN_PASSWORD_SCORE is unset/invalid and enforce the score at the vault boundary (setup() / changePassword()), not only in the UI. Default stays 1 for the dev wallet.
Collapse password change into a single step, guard against double submit, separate current/new fields with a divider, and attach the password-recommendations tooltip to the Password label.
Extract a shared ConfirmPasswordForm used by the verify-password flows.

Home surface (Assets / Activity / Utils)

Replace the Transfers tab with an Activity tab that folds pending transfers into activity; split TransferCard into needs-action and awaiting variants and add a TransferDetailsSheet for transfer metadata.
Move the auto-accept toggle into a reusable AutoAcceptSetting on the Assets tab; auto-accept now applies to all incoming transfers, not just Amulet. Asset rows show token balance instead of a UTXO count.
Replace LedgerToolsPanel with a master/detail Utils tab (UtilsPanel / UtilsList) opened in a modal: Amulet faucet (Tap Amulet moved here from Assets), Create Contract, Exercise Choice, Active Contracts, and a DAR dropzone, backed by a validated JsonField for ledger command payloads and ledger/contracts.ts.
Make identifiers copyable throughout: Copyable / CopyableLabel primitives, a copyLabel on DetailRow, copyable detail-sheet and transaction rows, and copyable counterparty party ids on transfer cards. Replace raw <pre> JSON blocks with a themed JsonView tree (per-node copy, collapsible), falling back to plain text for non-object payloads.
Add UI primitives: Collapsible, JsonView, Copyable, CopyableLabel, DetailRow, FileDropInput.

Onboarding

Make first-run onboarding a three-step flow: create vault, then Configure RPC (auto-tested connection gate via the new useWalletServiceTest hook), then create the first account. Previously two steps.

Docs & chore

Sync wallet-service docs (README/AGENTS) to amulet.tap, and carpincho README/architecture/AGENTS to the per-origin gate, access tiers, the Activity/Utils redesign, vault backup, the vault-centric drawer, and the new onboarding flow.
Add .env.fivenorth to .gitignore.

Acceptance criteria

amulet.tap prepares a valid DevNet tap command end-to-end against LocalNet and Carpincho signs it locally
An unapproved dApp origin cannot read accounts or trigger signing; connect requires explicit user approval
Whole-vault export then import round-trips accounts; import rejects malformed entries and duplicates
Configure RPC onboarding step blocks advancing until the wallet-service connection test passes
carpincho-wallet and wallet-service build, lint, and tests pass
Docs reflect the new method, permission model, and home/onboarding structure

Test plan

Automated tests

wallet-service: npm --prefix canton-barebones/wallet-service test — covers the new amulet.tap method (test/rpc.test.ts).
carpincho-wallet: npm --prefix carpincho-wallet test. Notable coverage:
- Origin gate / access tiers: test/extensionDirectProvider.test.ts, test/providerAccessTier.test.ts, test/extensionDappConnection.test.tsx.
- Vault backup: test/vault/exportVault.test.tsx, test/vault/importVault.test.tsx, test/components/VaultBackupPanel.test.tsx, test/components/VaultPanel.test.tsx, test/utils/download.test.ts.
- Password strength / change: test/vault/passwordStrength.test.ts, test/vault/passwordAcceptance.test.tsx, test/vault/verifyPassword.test.tsx.
- Activity / transfers / assets: test/components/ActivityPanel.test.tsx, test/components/TransferCard.test.tsx, test/components/TransferDetailsSheet.test.tsx, test/components/AutoAcceptSetting.test.tsx.
- Utils tab: test/components/UtilsPanel.test.tsx, test/components/utils/*.test.tsx, test/ledger/contracts.test.ts.
- Copy / JSON primitives: test/components/Copyable.test.tsx, test/components/JsonView.test.tsx, test/components/ui/DetailRow.test.tsx, test/utils/json.test.ts.
- Onboarding: test/views/OnboardingFlow.test.tsx, test/views/ConfigureRpcStep.test.tsx, test/views/CreateVault.test.tsx, test/views/CreateFirstAccount.test.tsx, test/useWalletServiceTest.test.tsx, test/views/homeHooks.test.tsx.

Manual verification

Bring up the stack (./scripts/dev-stack.sh up), load the unpacked extension (npm run carpincho:build:extension), walk first-run onboarding (vault → Configure RPC → first account), connect a dApp and approve the per-origin prompt, exercise the Amulet faucet tap from the Utils tab (requires an active DevNet mining round), and round-trip a whole-vault backup export/import.

Breaking changes

Injected-provider connection behavior changes: a dApp must be explicitly approved per origin before Carpincho exposes accounts or signs for it. dApps that relied on a silent connect now see an approval prompt; account/sign requests from unapproved origins are refused.
Per-account private-key import/export is removed in favour of whole-vault backup (SecurityPanel / PrivateKeyPanel gone). The Transfers tab is replaced by the Activity tab, and the default wallet-service RPC endpoint is now http://localhost:3010/rpc.

Checklist

Self-reviewed my own diff
Tests added or updated
Docs updated (if applicable)
No unrelated changes bundled in

Screenshots

None.

Private key import/export, shared runtime config for the extension worker, content-script injection on all URLs, configurable password strength, and the Amulet DevNet faucet UI. Imported as a subtree from the darkpool line on top of the canton-barebones-splice wallet-service.

The darkpool default targeted the FiveNorth devnet validator. On the canton-barebones-splice line the wallet-service runs locally, so default the RPC endpoint to http://localhost:3010/rpc (still overridable via runtime config).

Add the amulet.tap JSON-RPC method that prepares the fixed 100 AMT DevNet tap command for the receiver party, so Carpincho can sign it locally. Wires the real SDK path (via getTokenSdk), the mock handler, and the supportedMethods lists.

The Amulet SDK resolves relative registry endpoints (e.g. /registry/transfer-instruction/v1/transfer-factory) against the configured registryUrl. Passing it as a raw string made the SDK fail to parse those URLs, breaking amulet.tap and cip56 transfers; wrap it in new URL() like the sibling call sites.

…t at the vault boundary Default the minimum zxcvbn score to 3 when VITE_MIN_PASSWORD_SCORE is unset or invalid (was 1, fail-open), while still honoring an explicit lower override for local dev. Enforce isPasswordAcceptable in setup()/changePassword() so the score gate no longer lives only in the disablable submit button.

…clear clipboard Gate ExportPrivateKeyView behind a fresh password confirmation (verifyPassword) so an unattended unlocked popup cannot leak the raw key in two clicks. Copy now goes through copySecret, which best-effort wipes the clipboard after 60s if it still holds the key.

…er-origin approval The content script injects on all origins, but the background returned account identity (party ids, public keys) and queued signing for any site with no approval. Add an origin permission model: connect from an unapproved origin is queued for an explicit popup approval, account queries answer from an empty snapshot until approved, and signing is refused for unapproved origins. Surface the requesting origin on every approval card, and broadcast wallet events only to connected dApp tabs.

This is a developer wallet; a low default is intentional so devs are not forced into complex passwords. Restore the default zxcvbn score of 1 when the env var is unset; the boundary enforcement in setup()/changePassword() still applies the configured score.

…der request path copySecret now delegates to copyText via an onSuccess hook instead of duplicating the write/toast/catch chain; collapse the two identical allow branches in the direct-provider gatekeeper into one guard; and read the wallet snapshot and connection state concurrently in handleProviderRequest instead of sequentially.

…at the source Move the injected-provider gate's per-method policy out of three hand-maintained lists in directProvider.ts into a single access-tier mapping next to the method definitions in provider/methods.ts. The mapping is exhaustive over known methods (satisfies Record) and unknown methods fail safe to RESTRICTED, so a newly added RPC method cannot silently reach an unapproved origin.

The private-key export re-auth gate duplicated the verify-password form (input, a11y wiring, incorrect-password handling) already in SecurityPanel. Extract a ConfirmPasswordForm component and use it in both; it takes an initialError so SecurityPanel can still surface a changePassword failure on the verify step.

…igin permission model Document the new amulet.tap faucet method in the wallet-service README/AGENTS, and update carpincho's architecture/README for the per-origin injected-provider gate (account access gated until an origin is approved via connect), the per-method access tiers in methods.ts, the boundary-enforced password gate, and the connected-origins set now scoping account access and event broadcasts.

…atus

… network row

Drop the now-unused COG_ICON, render the monogram synchronously when a dApp has no favicon, and cover status independence and the favicon fallback.

These message constants/types are re-declared locally in contentScript.ts and were never imported from messages.ts; the Theme alias was superseded by ThemeMode.

…ter focus ring The disconnect control now builds on PLAIN_ICON_BUTTON_CLASS (overriding to a danger hover) and the network pill regains focus-visible:shadow-focus, matching the rest of the app's keyboard focus treatment.

…ter redesign Drop the removed COG_ICON, add GLOBE_ICON, and list @radix-ui/react-avatar (dApp favicon with monogram fallback in ConnectionFooter).

…in asset rows

…tSetting

…abel

…awaiting variants

…nto activity

…ity-stable

… in a fixed-height list

…modal jumps

…e with a status badge

… Accept

…ind shared Badge and SectionLabel primitives

…op spacing

Copilot

Pull request overview

Brings a feature-complete Carpincho wallet onto the canton-barebones-splice base by adding an Amulet DevNet faucet (amulet.tap) in wallet-service, introducing per-origin injected-provider gating, redesigning the home surface (Assets / Activity / Utils), adding whole-vault backup, and reworking first-run onboarding into a 3-step flow (Vault → RPC → Account).

Changes:

Add amulet.tap JSON-RPC method in wallet-service and integrate faucet UX in the wallet.
Enforce per-origin injected-provider access tiers and gate connect behind explicit approval.
Add whole-vault export/import, new Utils tooling surface, and 3-step onboarding with automatic RPC reachability probing.

Reviewed changes

Copilot reviewed 140 out of 143 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
carpincho-wallet/test/views/OnboardingFlow.test.tsx	Update onboarding tests for 3-step flow
carpincho-wallet/test/views/HomeView.test.ts	Update approval payload layout assertions
carpincho-wallet/test/views/homeHooks.test.tsx	Add connect/origin pending-action tests
carpincho-wallet/test/views/CreateVault.test.tsx	Update vault stub for vault backup APIs
carpincho-wallet/test/views/CreateFirstAccount.test.tsx	New test for first-account step UI
carpincho-wallet/test/views/ConfigureRpcStep.test.tsx	New tests for RPC gating step
carpincho-wallet/test/vault/passwordStrength.test.ts	New tests for score parsing/defaults
carpincho-wallet/test/vault/passwordAcceptance.test.tsx	New acceptance test for score-based gating
carpincho-wallet/test/vault/keypair.test.ts	New tests for public-key derivation
carpincho-wallet/test/vault/exportVault.test.tsx	New tests for whole-vault export
carpincho-wallet/test/utils/json.test.ts	New tests for loose JSON parsing/formatting
carpincho-wallet/test/utils/download.test.ts	New tests for secure-context JSON download
carpincho-wallet/test/useWalletServiceTest.test.tsx	New tests for RPC probe hook
carpincho-wallet/test/providerAccessTier.test.ts	New tests for method access tiers
carpincho-wallet/test/extensionManifest.test.ts	Assert `<all_urls>` + gating rationale
carpincho-wallet/test/extensionDirectProvider.test.ts	Test per-origin connect/list/sign gating
carpincho-wallet/test/extensionDappConnection.test.tsx	Add host/icon propagation assertions
carpincho-wallet/test/extensionBridge.test.ts	Update manifest content-script match expectations
carpincho-wallet/test/config/runtimeConfig.test.ts	New tests for chrome storage mirroring
carpincho-wallet/test/components/UtilsPanel.test.tsx	New tests for Utils modal flow
carpincho-wallet/test/components/utils/UtilsList.test.tsx	New tests for faucet + util selection
carpincho-wallet/test/components/utils/JsonField.test.tsx	New tests for JSON field validation/format
carpincho-wallet/test/components/utils/ExerciseChoiceUtil.test.tsx	New tests for exercise util submission
carpincho-wallet/test/components/utils/CreateContractUtil.test.tsx	New tests for create util submission
carpincho-wallet/test/components/utils/ActiveContractsUtil.test.tsx	New tests for ACS util loading/filtering
carpincho-wallet/test/components/ui/DetailRow.test.tsx	New tests for copyable detail rows
carpincho-wallet/test/components/TransferDetailsSheet.test.tsx	New tests for transfer metadata sheet
carpincho-wallet/test/components/TransferCard.test.tsx	New tests for incoming/outgoing cards
carpincho-wallet/test/components/TokenRow.test.tsx	Update tests for balance-first rows
carpincho-wallet/test/components/TokenReceive.test.tsx	Wrap receive view in TooltipProvider
carpincho-wallet/test/components/TokenHoldingDetail.test.tsx	Update detail view + copy affordance tests
carpincho-wallet/test/components/TokenDetailSheet.test.tsx	Update vault stub for vault backup APIs
carpincho-wallet/test/components/SendConfirm.test.tsx	Update assertions for JsonView rendering
carpincho-wallet/test/components/JsonView.test.tsx	New tests for JsonView primitives/objects
carpincho-wallet/test/components/HomeTabs.test.tsx	Update tabs (Assets/Activity/Utils) + badge logic
carpincho-wallet/test/components/Header.test.tsx	Update vault stub for vault backup APIs
carpincho-wallet/test/components/DarUploadPanel.test.tsx	New tests for DAR upload panel
carpincho-wallet/test/components/CreateAccountForm.test.tsx	Update vault stub for vault backup APIs
carpincho-wallet/test/components/Copyable.test.tsx	New tests for generic copy control
carpincho-wallet/test/components/Collapsible.test.tsx	New tests for collapsible primitive
carpincho-wallet/test/components/AssetsPanel.test.tsx	Update assets tests + auto-accept setting
carpincho-wallet/test/components/ActivityList.test.tsx	Update activity tests for JsonView + copy rows
carpincho-wallet/test/components/AccountsDialog.test.tsx	Update vault stub for vault backup APIs
carpincho-wallet/test/components/AccountCard.test.tsx	Update vault stub for vault backup APIs
carpincho-wallet/test/cip56/amuletPreapproval.test.ts	Add test for `tapAmulet` flow
carpincho-wallet/test/api/walletService.test.ts	New tests for admin upload + MV3 storage
carpincho-wallet/src/wc/client.ts	Carry dApp icon into connected session model
carpincho-wallet/src/vite-env.d.ts	Add `VITE_MIN_PASSWORD_SCORE` typing
carpincho-wallet/src/views/onboarding/OnboardingFlow.tsx	Implement 3-step onboarding flow
carpincho-wallet/src/views/onboarding/CreateFirstAccount.tsx	Split account step from connection concerns
carpincho-wallet/src/views/onboarding/ConfigureRpcStep.tsx	New RPC reachability gating step
carpincho-wallet/src/views/HomeView.tsx	Add pending-connect state and wire into UI
carpincho-wallet/src/views/home/useProviderRequestHandler.ts	Bridge connect/sign/execute into pending states
carpincho-wallet/src/views/home/usePendingActions.ts	Add approve/reject connect handling
carpincho-wallet/src/views/home/useExtensionRequests.ts	Pass origin through to request handler
carpincho-wallet/src/views/home/types.ts	Add origin to pending action types
carpincho-wallet/src/views/home/PendingActionsSection.tsx	Show requesting origin on approval cards
carpincho-wallet/src/vault/VaultContext.tsx	Add export/import vault + enforce strength boundary
carpincho-wallet/src/vault/types.ts	Add vault envelope + import result types
carpincho-wallet/src/vault/passwordStrength.ts	Add env-driven min score + async readiness
carpincho-wallet/src/vault/keypair.ts	Add public-key derivation + stricter hex parsing
carpincho-wallet/src/utils/network.ts	Add networkId display helper
carpincho-wallet/src/utils/download.ts	Add secure-context JSON download utility
carpincho-wallet/src/utils/clipboard.ts	Add secret clipboard clearing + onSuccess callback
carpincho-wallet/src/theme/ThemeContext.ts	Remove unused Theme type alias
carpincho-wallet/src/provider/methods.ts	Add per-method access tier classification
carpincho-wallet/src/hooks/useWalletServiceTest.ts	New hook for probing wallet-service RPC
carpincho-wallet/src/extension/messages.ts	Remove unused legacy event/message types
carpincho-wallet/src/extension/directProvider.ts	Enforce access tiers + per-origin gating behavior
carpincho-wallet/src/extension/dappConnection.ts	Add host/icon support for footer connection info
carpincho-wallet/src/extension/background.ts	Gate events to connected origins + origin checks
carpincho-wallet/src/config/runtimeConfig.ts	Move to v2 + mirror into chrome.storage.local
carpincho-wallet/src/components/VaultPanel.tsx	New vault settings panel (password/auto-lock)
carpincho-wallet/src/components/UtilsPanel.tsx	New Utils tab with modal tool surfaces
carpincho-wallet/src/components/utils/UtilsList.tsx	New faucet row + ledger tools list
carpincho-wallet/src/components/utils/UpdateIdResult.tsx	New update-id success banner with copy
carpincho-wallet/src/components/utils/JsonField.tsx	New validated JSON textarea for ledger tools
carpincho-wallet/src/components/utils/ExerciseChoiceUtil.tsx	New generic exercise util
carpincho-wallet/src/components/utils/CreateContractUtil.tsx	New generic create util
carpincho-wallet/src/components/ui/Tooltip.tsx	Tooltip width handling + optional side prop
carpincho-wallet/src/components/ui/SectionLabel.tsx	New shared section label primitive
carpincho-wallet/src/components/ui/PendingActionCard.tsx	Use JsonView for payload rendering
carpincho-wallet/src/components/ui/JsonView.tsx	New themed read-only JSON tree
carpincho-wallet/src/components/ui/FileDropInput.tsx	New shared file chooser “dropzone” UI
carpincho-wallet/src/components/ui/DetailRow.tsx	New copyable detail row component
carpincho-wallet/src/components/ui/CopyableLabel.tsx	New label + copy affordance component
carpincho-wallet/src/components/ui/Copyable.tsx	New generic copy icon button
carpincho-wallet/src/components/ui/Collapsible.tsx	New collapsible wrapper components
carpincho-wallet/src/components/ui/Badge.tsx	New compact status pill component
carpincho-wallet/src/components/TransferDetailsSheet.tsx	New transfer metadata sheet
carpincho-wallet/src/components/TransferCard.tsx	New transfer card variants + copyable parties
carpincho-wallet/src/components/TokenRow.tsx	Redesign token row to be balance-first
carpincho-wallet/src/components/TokenReceive.tsx	Switch party-id display to DetailRow
carpincho-wallet/src/components/TokenHoldingDetail.tsx	Use DetailRow + add copy affordance
carpincho-wallet/src/components/TokenDetailSheet.tsx	Update holdings section layout + badges
carpincho-wallet/src/components/SendConfirm.tsx	Replace raw JSON with JsonView
carpincho-wallet/src/components/SecurityPanel.tsx	Remove legacy security panel
carpincho-wallet/src/components/PasswordStrengthIndicator.tsx	Remove embedded recommendations tooltip
carpincho-wallet/src/components/NewPasswordFields.tsx	Move recommendations tooltip to label area
carpincho-wallet/src/components/menu/screens.ts	Restructure menu around Vault section
carpincho-wallet/src/components/menu/MenuSheet.tsx	Wire vault backup + vault panel screens
carpincho-wallet/src/components/HomeTabs.tsx	Replace Transfers with Activity + add Utils tab
carpincho-wallet/src/components/DarUploadPanel.tsx	New dev-only DAR upload utility
carpincho-wallet/src/components/CopyPartyIdButton.tsx	Delegate to Copyable component
carpincho-wallet/src/components/ConfirmPasswordForm.tsx	New shared verify-password gate form
carpincho-wallet/src/components/AutoAcceptSetting.tsx	Move auto-accept toggle to Assets settings row
carpincho-wallet/src/components/AssetsPanel.tsx	Add auto-accept setting + section label
carpincho-wallet/src/components/AccountsDialog.tsx	Tweak list spacing for new row styling
carpincho-wallet/src/components/AccountListRow.tsx	Restyle row and focus/primary states
carpincho-wallet/src/cip56/amuletPreapproval.ts	Add `tapAmulet` faucet helper + API type
carpincho-wallet/src/App.tsx	Update onboarding routing comment for new steps
carpincho-wallet/src/api/walletService.ts	Add MV3 runtime config loading + DAR upload API
carpincho-wallet/README.md	Document per-origin approval requirement
carpincho-wallet/public/manifest.json	Widen matches/host_permissions to `<all_urls>`
carpincho-wallet/package.json	Add Avatar/Collapsible/JsonView deps
carpincho-wallet/.env.example	Document `VITE_MIN_PASSWORD_SCORE`
canton-barebones/wallet-service/test/rpc.test.ts	Add tests for URL registry + `amulet.tap`
canton-barebones/wallet-service/src/rpc.ts	Implement `amulet.tap` + URL registry handling
canton-barebones/wallet-service/src/mock.ts	Add `amulet.tap` mock handler
canton-barebones/wallet-service/README.md	Document `amulet.tap` method
canton-barebones/wallet-service/AGENTS.md	Update scope to include faucet tap
.gitignore	Ignore `.env.fivenorth`

Comments suppressed due to low confidence (1)

carpincho-wallet/src/vault/passwordStrength.ts:67

isPasswordAcceptable no longer enforces the (still-present) 8-character minimum that VaultContext.setup() / changePassword() require. This can let the UI treat short passwords as valid and enable submission, only to have the vault boundary reject them. Keeping the length check here keeps UI gating consistent with the vault boundary.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

gabitoesmiapodo · 2026-06-22T13:08:13Z

+    <label
+      htmlFor={id}
+      className="cursor-pointer rounded-md border border-dashed border-border bg-surface px-4 py-6 text-center hover:border-primary/60"
+    >


Fixed in 990b5a6. Changed the prompt copy at both call sites to click-only wording ("Click to choose a .dar file." / "Click to choose a .json backup."). Drop handlers were not added: this UI runs in an MV3 extension action popup, where dragging a file from the OS file manager defocuses and closes the popup before any drop can land.

…icon Drop the full-width Refresh button: the template field now narrows the already-fetched ACS client-side as you type, and a small animated refresh icon above the list re-fetches the snapshot. Relabel the field to "Template id" with an example placeholder. In the expanded card, render the contract id as a DetailRow so it matches the other fields, and keep the chevron pinned to the top-right.

…ct id Broaden the active-contracts filter so a query matches either the template id (exact/suffix) or a case-insensitive substring of the contract id. Relabel the field to "Filter" with a "Template or contract id" placeholder.

…earch field Rotate the refresh icon a full turn on each click (and keep spinning while a fetch is in flight) so the action reads even when the local re-filter is instant. Drop the "Filter" label in favour of a leading magnifier and a clear button, matching the accounts search field; the input keeps an aria-label.

Add a dedicated spin-fast keyframe (500ms/turn) and use it for the refresh icon so a click reads as a quick, deliberate rotation instead of a languid one-second turn.

…filter input

…stActiveContracts

…text

…unt step

…nal to the vault

…ked-vault import

…y, Export/Import button labels

…ount Extract an in-memory insertAccount helper shared by addAccount and the import merge so a multi-account restore runs a single PBKDF2 derive + AES-GCM re-encryption and one accountsChanged broadcast instead of one per imported account.

…ackup markers Replace the hand-rolled null/object narrowing in backup.ts with the shared isRecord guard, type BACKUP_KIND/BACKUP_VERSION by the CarpinchoBackup interface so the on-disk format markers have one source of truth, and drop the export-only IIFE in the export panel for a named handler.

…in architecture VaultContext now exposes exportEncryptedVault/importEncryptedVault over an encrypted CarpinchoBackup container (plaintext envelope build/merge is internal), add the backup.ts module, and note the create-first-account restore-from-backup tab.

Add data-testid hooks to every interactive control, list row, modal/sheet container, and copy affordance across onboarding, accounts, assets/send/receive, activity & transfers, utils/ledger tools, DAR upload, connection settings & footer, and the drawer menu, so end-to-end tooling never relies on text, role, or DOM-position selectors. Extend the prop-fixed shared primitives that hide their DOM node (Sheet, Select, TabTrigger, MenuRow, FileDropInput, Collapsible, DetailRow, AmountField, ConfirmPasswordForm) with a forwarded testId prop, matching the existing Copyable/DangerConfirm convention. Document data-testid coverage as a hard requirement for new UI in AGENTS.md.

…s callback

…ompts The popup action surface only supports click-to-choose; OS file drag-and-drop closes the popup before any drop lands.

gabitoesmiapodo added 13 commits June 18, 2026 16:36

feat(wallet-service): add amulet faucet tap

f4b7768

Add the amulet.tap JSON-RPC method that prepares the fixed 100 AMT DevNet tap command for the receiver party, so Carpincho can sign it locally. Wires the real SDK path (via getTokenSdk), the mock handler, and the supportedMethods lists.

chore: gitignore .env.fivenorth

d6b6d74

gabitoesmiapodo self-assigned this Jun 18, 2026

gabitoesmiapodo added 16 commits June 18, 2026 18:54

feat(carpincho-wallet): expose dApp host and favicon in connection st…

1b7667a

…atus

feat(carpincho-wallet): redesign connection footer as a single dApp +…

ccf0f0d

… network row

refactor(carpincho-wallet): render the dApp favicon with Radix Avatar

510199a

refactor(carpincho-wallet): tidy connection footer after review

4abb762

Drop the now-unused COG_ICON, render the monogram synchronously when a dApp has no favicon, and cover status independence and the favicon fallback.

chore(carpincho-wallet): remove dead extension and theme exports

0e5c7c3

These message constants/types are re-declared locally in contentScript.ts and were never imported from messages.ts; the Theme alias was superseded by ThemeMode.

docs(carpincho-wallet): sync icon catalogue and Radix list to the foo…

73060e8

…ter redesign Drop the removed COG_ICON, add GLOBE_ICON, and list @radix-ui/react-avatar (dApp favicon with monogram fallback in ConnectionFooter).

refactor(carpincho-wallet): show token balance instead of UTXO count …

50f8c43

…in asset rows

refactor(carpincho-wallet): extract auto-accept toggle into AutoAccep…

de60552

…tSetting

fix(carpincho-wallet): use a span not a heading for the auto-accept l…

4eeaa2d

…abel

feat(carpincho-wallet): add TransferDetailsSheet for transfer metadata

a8abdab

refactor(carpincho-wallet): split TransferCard into needs-action and …

ad3315a

…awaiting variants

test(carpincho-wallet): assert Accept button is disabled while accepting

533eeef

feat(carpincho-wallet): add ActivityPanel folding pending transfers i…

cb3e2f6

…nto activity

fix(carpincho-wallet): make ActivityPanel pending-count effects ident…

34dbf22

…ity-stable

feat(carpincho-wallet): surface auto-accept on the assets tab

f06440c

gabitoesmiapodo added 6 commits June 19, 2026 11:34

feat(carpincho-wallet): collapse active-contract rows to the short id…

2d21605

… in a fixed-height list

fix(carpincho-wallet): give the holdings list a fixed height to stop …

e0c58df

…modal jumps

refactor(carpincho-wallet): move the activity row time below the titl…

41f4436

…e with a status badge

refactor(carpincho-wallet): rename the vault export confirm button to…

e932fdb

… Accept

refactor(carpincho-wallet): unify status pills and section titles beh…

e9b63ad

…ind shared Badge and SectionLabel primitives

refactor(carpincho-wallet): unify list-item padding and tab content t…

55a6262

…op spacing

fernandomg requested a review from Copilot June 19, 2026 14:58

Copilot started reviewing on behalf of fernandomg June 19, 2026 14:59 View session

Copilot AI reviewed Jun 19, 2026

View reviewed changes

gabitoesmiapodo added 21 commits June 19, 2026 12:25

feat(carpincho-wallet): speed up the refresh icon spin to a 500ms turn

4089a6c

Add a dedicated spin-fast keyframe (500ms/turn) and use it for the refresh icon so a click reads as a quick, deliberate rotation instead of a languid one-second turn.

test(carpincho-wallet): cover the refresh spinner stop transition

09bc0ed

refactor(carpincho-wallet): drop redundant type=text on the contract …

3e6d64f

…filter input

docs(carpincho-wallet): list REFRESH_ICON and the spin-fast keyframe

69dad28

refactor(carpincho-wallet): drop the unused templateId filter from li…

0c506b7

…stActiveContracts

feat(carpincho-wallet): add encrypted backup container type and guard

1872897

feat(carpincho-wallet): add encrypted vault export/import to VaultCon…

074bb57

…text

feat(carpincho-wallet): encrypted, file-only vault backup UI

9a29c5f

feat(carpincho-wallet): restore-from-backup option in onboarding acco…

89d1072

…unt step

refactor(carpincho-wallet): make plaintext envelope build/merge inter…

bc996b5

…nal to the vault

test(carpincho-wallet): cover dedupe-skip, malformed-partyId, and loc…

c4a8eac

…ked-vault import

refactor(carpincho-wallet): one-step vault export, plainer backup cop…

224697c

…y, Export/Import button labels

fix: gate copied checkmark on successful clipboard write via onSucces…

61208fc

…s callback

fix(carpincho-wallet): drop drag-and-drop wording from file-picker pr…

990b5a6

…ompts The popup action surface only supports click-to-choose; OS file drag-and-drop closes the popup before any drop lands.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat(carpincho-wallet): amulet faucet, per-origin gating, activity & utils tabs, vault backup, and 3-step onboarding#88

feat(carpincho-wallet): amulet faucet, per-origin gating, activity & utils tabs, vault backup, and 3-step onboarding#88
gabitoesmiapodo wants to merge 121 commits into
canton-barebones-splicefrom
carpincho-feature-ready

gabitoesmiapodo commented Jun 18, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

gabitoesmiapodo Jun 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

gabitoesmiapodo commented Jun 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Changes

wallet-service

Injected-provider security (per-origin gating)

Vault & password security

Home surface (Assets / Activity / Utils)

Onboarding

Docs & chore

Acceptance criteria

Test plan

Automated tests

Manual verification

Breaking changes

Checklist

Screenshots

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

gabitoesmiapodo Jun 22, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

gabitoesmiapodo commented Jun 18, 2026 •

edited

Loading