4 Commits

Include renames

Author	SHA1	Message	Date
clawbot	c40c7432a5	fix: sign and export with each address's own derivation index (closes #510) ... Sending, site transactions, site signatures and private key export derived the key at the address's position in the wallet's list. After an import whose scan passed over an unused index, or after removing an address that was not the last, that position named another address's key. Each HD and xprv address record now stores the index it was derived at (at wallet creation, by the import scan, by "+"). getSignerForAddress() derives at that index, refuses a record without one, and refuses any key whose address differs from the record's. The confirmation screen signs as the From address it shows, not the selected one. The export screen reports a refusal instead of calling the password wrong. Model: opus-5-5	2026-10-14 18:22:12 +02:00
clawbot	f1a13a50a6	fix: the defective xprv wallet notice names the keys that still reach its addresses (closes #255) ... The notice told the user that these addresses are reachable by software that repeats the same derivation, while the same wallet blocks Export Private Key, so there was no way to take that route from here. The second paragraph now names private key export among the disabled controls and says the addresses can be reached outside this wallet with the extended private key the user imported, if they kept a copy of it, or with the master extended private key or recovery phrase it came from. No behaviour changes. A test checks the new wording. Model: opus-5-5	2026-10-14 11:48:46 +02:00
clawbot	5d26283cd0	test: cover every control that refuses a defective wallet (closes #254) ... Each control that leads to a signature or to the private key now has a test that it refuses a defective wallet before decrypting anything: Send on the main, address and token screens, Export Private Key, and both approval screens, as drawn and as clicked. Send on the confirmation screen had no such check. The Send buttons stand in front of it, but the popup reopens onto it from a saved view, so it now refuses the same way. The comments that said the wallet's key cannot be derived now say that getSignerForAddress refuses it, and the walletDefects module comment names both earlier import paths. Model: opus-5-5	2026-10-05 12:59:15 +02:00
clawbot	bd4bdcafc7	fix: explain a stored non-master xprv wallet instead of throwing at signing time (closes #234)	2026-08-12 10:41:49 +02:00