feat(user-role): persona/capability-gating — role model, callsite reclassification, and role-picker UI - #879

Merged

lklimek merged 50 commits into

docs/platform-wallet-migration-designfrom

feat/user-role-gating

Jul 13, 2026

Commits on Jul 10, 2026

fix(withdraw): pre-select only a locally-signable withdrawal key

lklimek
and
claude
committed
0521ef0
docs(claude): correct secret-storage note on identity-key encryption

lklimek
and
claude
committed
e795129
feat(masternodes): add page-nav model with two-scope selection (A1)

lklimek
and
claude
committed
ecaa46f
feat(masternodes): generalize breadcrumb into page-aware global switcher (A2)

lklimek
and
claude
committed
736c3bc
feat(masternodes): render global switcher on root screens + shared applier (A3)

lklimek
and
claude
committed
eeb65e3
feat(masternodes): load-time key encryption plumbing (B0)

lklimek
and
claude
committed
b336dd8
chore(masternodes): drop ephemeral review ID from A3 reconciliation comment

lklimek
and
claude
committed
d8e3c55
feat(masternodes): FR-6 resolution-layer boundary + masternode accessor (B1)

lklimek
and
claude
committed
5386d82
feat(masternodes): register Expert-gated Masternodes root tab (B2)

lklimek
and
claude
committed
d3e6b05
feat(masternodes): empty state + card grid + card body (B3)

lklimek
and
claude
committed
a47542d
feat(masternodes): dedicated load form + ProTxHash validator (B4)

lklimek
and
claude
committed
94309ff
feat(masternodes): detail view — header, actions, keys, remove (B5a)

lklimek
and
claude
committed
1b8d2bf
feat(masternodes): Testnet Fill-Random on the load form (B6)

lklimek
and
claude
committed
daa474c
feat(masternodes): inline DPNS voting + missing-voter prompt (B5b)

lklimek
and
claude
committed
3a9e583
feat(masternodes): page-scoped nav pill — FR-6 boundary in code (B7)

lklimek
and
claude
committed
18caa36
test(masternodes): cross-cutting integration coverage (B8)

lklimek
and
claude
committed
dc6747e
docs(user-stories): catalog the Masternodes tab, retire the legacy load story
lklimek
committed
1e27cd9
docs(masternodes): commit final design docs (DOC-002)
lklimek
committed
9a73dc2
docs(masternodes): trim oversized module docs, catalog global-nav switcher
lklimek
committed
dc6cd92
fix(masternodes): guard identity load against silent overwrite (QA-005/006)

lklimek
and
claude
committed
fe9b2be
fix(masternodes): key routing, network-switch reset, live refresh

lklimek
and
claude
committed
f0f0c84
fix(masternodes): SHOULD-FIX pass + QA-token cleanup + offline tests

lklimek
and
claude
committed
3271149
fix(dashpay): close FR-6 boundary bypass via DashPay identity selectors (SEC-005)

lklimek
and
claude
committed
5826b85
test(masternodes): Marvin punch-list — in-flight guard + execution tests

lklimek
and
claude
committed
61a6fc9
docs(changelog): add Masternodes tab and global nav switcher (DOC-005)
lklimek
committed
6bf8291
fix(masternodes): default GUI build broken — masternode_input feature-gated

lklimek
and
claude
committed
80fd1d2
docs(masternodes): correct global-nav coverage claim (F-003)
lklimek
committed
b2ac420
fix(masternodes): Fable final round — Tier-2 merge seal, load gate, ProTxHash error

lklimek
and
claude
committed
7a69b92
fix(masternodes): add load-form back link + remove object pill from breadcrumb

lklimek
and
claude
committed
3be88f0
fix(masternodes): reject load when selected node type mismatches on-chain

lklimek
and
claude
committed
14b07cf
fix(masternodes): surface a visible warning when node type is unverified

lklimek
and
claude
committed
908744f
revert(masternodes): drop Fix #3 node-type validation entirely

lklimek
and
claude
committed
7508da5
fix(masternodes): adapt retargeted tab to platform-wallet rewrite APIs

lklimek
and
claude
committed
ce7096d
merge(withdraw): pre-select only a locally-signable withdrawal key
lklimek
committed
8377889
test(withdraw): screen-level kittest coverage for default_withdrawal_key fix
lklimek
committed
279d383
fix(withdraw): skip wallet resolution when no signable key exists

lklimek
and
claude
committed
2edbc18
docs(masternodes): add user story for network-switch reset behavior

lklimek
and
claude
committed
a37c78d
test(withdraw): flip banner-leak test to a regression lock (2edbc18e)
lklimek
committed
e235f88
merge(withdraw): add screen-level kittest coverage + fix raw-error-banner leak

lklimek
and
claude
committed
c15173b
fix(mcp): stop det-cli double-prefixing the HTTP bearer token

lklimek
and
claude
committed
a7cf0a4
fix(masternodes): share Expert Mode flag app-wide; node-specific load error

lklimek
and
claude
committed
ad558d5
merge(mcp): fix det-cli headless double-Bearer auth bug

lklimek
and
claude
committed
9646771
merge(masternodes): fix Expert Mode nav sync + node-specific load error

lklimek
and
claude
committed
c81db44
feat(user-role): introduce UserRole + composable FeatureGate checks (Phase 1)

lklimek
and
claude
committed
7a2df9b
docs(ai-design): add persona/capability-gating design doc

lklimek
and
claude
committed
2965731
feat(user-role): reclassify dev-mode callsites onto role/capability gates (Phase 2/3) (#880)

authored
79914cf

Commits on Jul 13, 2026

fix(user-role): stop settings loss on k/v read failure; gate shielded ops on capability

lklimek
and
claude
committed
116cc9c
merge(user-role): sync PR #879 with base branch (docs/platform-wallet-migration-design)

lklimek
and
claude
committed
fc3317c
refactor(user-role): encapsulate the shared role atomic behind UserRoleCell

lklimek
and
claude
committed
f34d8d2
docs: drop the stale DEVELOPER_MODE interface-mode claims

lklimek
and
claude
committed
60fd091