Remove CoinJoin mixing; begin Kotlin SDK migration (Phases 1, 2, 0 prep + Phase 3 start) - #1507

Closed

bfoss765 wants to merge 135 commits into

claude/blissful-cannon-7d4ac4

Commits on Jul 7, 2026

docs: add Kotlin SDK migration plan (phased, with shielded-balance replacement for CoinJoin)

bfoss765
and
claude
committed
c194f6c
fix: repair pre-existing broken tests and two latent bugs they exposed

bfoss765
and
claude
committed
ba70db2
feat!: remove CoinJoin mixing; begin dashj seam neutralization

bfoss765
and
claude
committed
83ce13c
refactor: neutral money kit in common; migrate uphold off dashj

bfoss765
and
claude
committed
25e5baa
refactor: migrate exploredash off dashj

bfoss765
and
claude
committed
b38b2e1
refactor: migrate maya off dashj

bfoss765
and
claude
committed
04caa30
refactor: migrate coinbase off dashj

bfoss765
and
claude
committed
75d2181

Commits on Jul 8, 2026

refactor: migrate crowdnode UI/API surface off dashj

bfoss765
and
claude
committed
59ee9f6
docs: update migration plan status — Phase 1 substantially complete

bfoss765
and
claude
committed
24fe5b7
build: raise minSdk to 29 and ship 64-bit ABIs only

bfoss765
and
claude
committed
3840b17
refactor: vendor BIP70 payment protocol from dashj into common

bfoss765
and
claude
committed
d981946
docs: Phase 0 status — CoinJoin-restore verified SAFE (conditional), maven-publish added

bfoss765
and
claude
committed
25d2e07
feat: add Dash Platform Kotlin SDK dependency (Phase 3 start)

bfoss765
and
claude
committed
9e24bd5
feat: Kotlin SDK bootstrap scaffold (Phase 3a)

bfoss765
and
claude
committed
6400ba9
feat: bridge PIN-encrypted wallet seed to the Kotlin SDK (Phase 3b)

bfoss765
and
claude
committed
e60ea56
feat: first production flow on the Kotlin SDK — DPNS reads (Phase 3c)

bfoss765
and
claude
committed
ec6bbf3
docs: record Phase 4 shielded-UX Figma design references

bfoss765
and
claude
committed
b71aadd
feat: contested-name vote state and profile reads on the Kotlin SDK (Phase 3d)

bfoss765
and
claude
committed
8a5af1c
feat: DashPay writes on the Kotlin SDK behind a new flag (Phase 3e)

bfoss765
and
claude
committed
36cb571
feat: production SDK wallet binding + identity discovery (Phase 3f)

bfoss765
and
claude
committed
5f98e0f
feat: debug builds seed the Kotlin SDK flags ON for testnet verification

bfoss765
and
claude
committed
3b5d5c1
fix: don't crash at startup when built without google-services.json

bfoss765
and
claude
committed
979195d
fix: builds without google-services.json start cleanly

bfoss765
and
claude
committed
6d84436
fix: treat SDK 'ManagedIdentity not found' as not-managed in identity probe

bfoss765
and
claude
committed
3cb989b
fix: classify SDK signing failures as not-broadcast so dashj fallback engages

bfoss765
and
claude
committed
4e89be0
feat: heal discovered identity keys so SDK writes can sign (Phase 3f-b)

bfoss765
and
claude
committed
5a18ea9
docs: record live testnet validation results

bfoss765
and
claude
committed
1956e30
docs: draft the 8 Kotlin SDK issues to file on dashpay/platform

bfoss765
and
claude
committed
b8c3075
docs/test: verify accept-contact-request is covered by the SDK write routing (Phase 3g)

bfoss765
and
claude
committed
de94a0e
feat: shielded-balances service layer (Phase 4 plumbing)

bfoss765
and
claude
committed
67c5860

Commits on Jul 9, 2026

feat: shielded-balances UI from Figma designs (Phase 4)

bfoss765
and
claude
committed
e501b98
docs: Phase 4 UI + SDK-fix status

bfoss765
and
claude
committed
094cdbe
feat: L1 shadow-sync parity harness + checkpoint birth-height mapping (Phase 5a)

bfoss765
and
claude
committed
0adf2c2
fix: shielded UI per live testing feedback

bfoss765
and
claude
committed
44b5ade
feat: Dash Wallet → Shielded funds from the L1 balance (asset-lock pipeline)

bfoss765
and
claude
committed
c3fb2ae
feat: shielded-transfer acceptance criteria + live-test fixes

bfoss765
and
claude
committed
85bbbe3
fix: four shielded-transfer bugs from live testing

bfoss765
and
claude
committed
39388e5
fix: funding gate ignores tx-count delta; credits icon from design

bfoss765
and
claude
committed
3a6fa48
feat: shadow-state corruption detection, auto-reset, and More-card polish

bfoss765
and
claude
committed
c15de50
fix: hard shadow reset (filesystem-level), scan watchdog, debug trigger

bfoss765
and
claude
committed
67af91d
feat: definitive shadow recovery — full SDK-wallet re-creation

bfoss765
and
claude
committed
c124375
feat: debug builds auto-recreate on persistent empty deficit (remote-test robustness)

bfoss765
and
claude
committed
437a2fe
test: pin release vs debug decider semantics; service-level override seam

bfoss765
and
claude
committed
672887a

Commits on Jul 10, 2026

feat: live verification progress on the transfer screen

bfoss765
and
claude
committed
363ad04
feat: show git commit on the About screen in debug builds

bfoss765
and
claude
committed
2a94e52
fix: instant balance refresh after shielded ops; More card to 2-decimal design format

bfoss765
and
claude
committed
0fadeac
fix: More balance cards pixel-matched to Figma; shielded card shows Syncing

bfoss765
and
claude
committed
073fd2d
feat: L1 send through the SDK behind an opt-in flag (Phase 5b)

bfoss765
and
claude
committed
78b4431
fix: stable More-card pill heights; gate transfers on shielded-pool READY

bfoss765
and
claude
committed
f43b594
fix: classify SDK insufficient-funds/coin-selection errors as pre-broadcast (not Ambiguous)

bfoss765
and
claude
committed
b0c6554
fix: classify 'SPV client not started' broadcast failure as pre-broadcast

bfoss765
and
claude
committed
d0cbbd1
fix: ensure SDK SPV is running before shield broadcast; live transfer-screen gate

bfoss765
and
claude
committed
3114ce8
feat: dismissible proving dialog with completion notification/toast

bfoss765
and
claude
committed
3c81f61
feat: stall watchdog for shielded transfers stuck in the native layer

bfoss765
and
claude
committed
9e1fed2
fix: restart SDK shadow sync on every blockchain-service start

bfoss765
and
claude
committed
de7bbdd
fix: arm the parity self-spend grace before wallet-shield broadcasts

bfoss765
and
claude
committed
25b5ac0
fix: post the outcome notification whenever off the transfer screen

bfoss765
and
claude
committed
9c95af0
docs: record 2026-07-10 live-test findings and PR #4074 fix chain

bfoss765
and
claude
committed
bd5aaa1
docs: record the CoinJoin gap-limit root cause and cutover note

bfoss765
and
claude
committed
3162e0b
feat: debug toggle for SDK L1 sends; heal the missing-mnemonic bind wedge

bfoss765
and
claude
committed
0def78e
feat: one-tap SDK soak send in debug settings; arm grace on dashj sends

bfoss765
and
claude
committed
51400bf
fix: shielded withdrawals show as received, not internal

bfoss765
and
claude
committed
874ddb1
docs: Phase 3h addendum — retire the legacy org.dashj.platform stack

bfoss765
and
claude
committed
2d9458c
docs: Phase 5c design — bridge strategy, SDK gaps, ordered work plan

bfoss765
and
claude
committed
5bc9db6
feat: fee-parity and bridge-feasibility probes on the L1 send paths

bfoss765
and
claude
committed
ce41e09
feat: route identityVerify docs through the SDK's generic document APIs

bfoss765
and
claude
committed
8847703

Commits on Jul 11, 2026

feat: SdkBridgedTransactionFactory — SDK tx bytes to live dashj Transaction

bfoss765
and
claude
committed
0e4965f
feat: live SDK-engine gate indicator on the debug soak settings

bfoss765
and
claude
committed
a413d81
fix: layered SDK fee resolution in the fee-parity probe

bfoss765
and
claude
committed
66385b8
feat: legacy TxMetadata decrypt-proof probe in debug settings

bfoss765
and
claude
committed
65023be
feat: create-username flow on the shielded designs

bfoss765
and
claude
committed
1d000e4
feat: shielded-funded username creation + persistent Join DashPay flow

bfoss765
and
claude
committed
35e8985
debug: forensic logging on the decrypt-probe fetch boundary

bfoss765
and
claude
committed
a2b2431
docs: spec username creation via authorized L2 fund-hop

bfoss765
and
claude
committed
3474a05
fix: More-screen credits card shows zero on never-configured wallets

bfoss765
and
claude
committed
d500fc1
fix: rewrite covariant java.nio buffer calls for Android <= 15

bfoss765
and
claude
committed
8375a18
fix: Keystore auth-window accept dead-ends — classify, fall back, surface

bfoss765
and
claude
committed
d6728fc
fix: blank contacts screen after back navigation

bfoss765
and
claude
committed
d8a304d
docs: to-do — contested usernames across shielded/invitations/dual paths

bfoss765
and
claude
committed
0aa9386
docs: baseline correction (shipped dpp 4.0.0) + cross-platform contact crash analysis

bfoss765
and
claude
committed
f712077
fix: tolerate legacy identity-cache CBOR failure on v4.x contact identities

bfoss765
and
claude
committed
51f3ec9
fix: don't stringify legacy identities — toString CBOR-encodes and throws

bfoss765
and
claude
committed
dff670f
feat: contested usernames via the shielded path (0.3 denomination)

bfoss765
and
claude
committed
2e49101
feat: dual usernames on the shielded path — register the secondary too

bfoss765
and
claude
committed
8e73d1b
fix: insufficiency row names the real requirement, not a hardcoded 0.25

bfoss765
and
claude
committed
1fd16c4
feat: fresh wallets bind for shielded + confirm dialog shows the withdrawal

bfoss765
and
claude
committed
bcb1114
fix: testnet faucet moved to faucet.thepasta.org (iOS-example parity)

bfoss765
and
claude
committed
665dbc0

Commits on Jul 12, 2026

fix: Reset Wallet must block until DashPay data is actually cleared

bfoss765
and
claude
committed
a5d0ec0
feat: More-screen shielded card shows DASH, not credits

bfoss765
and
claude
committed
9c0ca26
feat: make-username-private sheet polish + 0.3 max cost (S21 feedback)

bfoss765
and
claude
committed
4ce6ca1
test: UsernamePaymentViewModel fixtures gain the walletData collaborator

bfoss765
and
claude
committed
5d9d6dd
fix: prune orphan SDK wallets at bind + shielded card font parity

bfoss765
and
claude
committed
004bae4
fix: private-username sheet — visible ⓘ, single minimum mention

bfoss765
and
claude
committed
ae62504
feat: adopt DEVICE_BOUND identity keys + org.dashj SDK coordinates

bfoss765
and
claude
committed
7e7d534
chore: cost explainer titled "Shielded username costs"

bfoss765
and
claude
committed
141f41b
feat: shield-guidance amounts 0.15/0.35 on the funding surfaces

bfoss765
and
claude
committed
8b73f44
fix: immediate shielded sync on screen entry and after resumed shields

bfoss765
and
claude
committed
f863e0f
fix: Type-20 fallback address must use the storage tag, not 0xb0

bfoss765
and
claude
committed
a55ac66
fix: missing-encryption-key contact sends fall back to dashj

bfoss765
and
claude
committed
8e2e4c4
feat: dismissible processing dialog during shielded username creation

bfoss765
and
claude
committed
bd6861b
fix: username qualifier rows are literal, meet-one-of header for all

bfoss765
and
claude
committed
e072aae
fix: legacy signing for SDK-created identities — backfill identity chain keys

bfoss765
and
claude
committed
f905b28
docs: Phase 5d migration-without-data-loss design (inventory + state machine)

bfoss765
and
claude
committed
132a3e8
feat: Phase 5d cutover-readiness evaluator (pure decision table + tests)

bfoss765
and
claude
committed
23793b1
feat: Phase 5d evidence collectors — parity streak, drained-ops, orphan audit

bfoss765
and
claude
committed
097e7e3
fix: re-seed debug SDK flags after Reset Wallet wipes the DataStore

bfoss765
and
claude
committed
a4e5e09
feat: Phase 5d step 3 — cutover coordinator + state machine (inert, flagged)

bfoss765
and
claude
committed
a661ae8
feat: Phase 5d debug readiness readout + fix ViewModel worker-scope leaks

bfoss765
and
claude
committed
b46db60

Commits on Jul 13, 2026

fix: fingerprint permanently bricked after lock-screen removal (cipher is empty)

bfoss765
and
claude
committed
2e8d396
fix: stop platform sync across Reset Wallet + refuse identity resurrection

bfoss765
and
claude
committed
08c18ff
fix: wallet wipe clears live DataStore configs via API, not file deletion

bfoss765
and
claude
committed
5a7b837
fix: binder latch revalidates against the live wallet on every trigger

bfoss765
and
claude
committed
62b526c
fix: gate the inflated-mismatch auto-reset on dashj being genuinely synced

bfoss765
and
claude
committed
372f32a
fix: derive DIP-15 friend chains in the SDK so contact payments are captured

bfoss765
and
claude
committed
a2527ae

Commits on Jul 14, 2026

fix: contested-username submits are never silent + shared processing dialog

bfoss765
and
claude
committed
02dcaf8
fix: reconcile NOT_PRESENT username status from platform truth

bfoss765
and
claude
committed
5010c33
feat: shielded transfer screen shows all amounts in Dash, never credits

bfoss765
and
claude
committed
48eba90
fix: shielded Max withdraw — classify note-selection failures, fee-adjusted retry

bfoss765
and
claude
committed
549db0f
fix: Max shield — classify asset-lock selection shortfall, reserve the L1 fee

bfoss765
and
claude
committed
36a7453
fix: shielded timing info sheet — wallet→shielded takes ~30 seconds, not instant

bfoss765
and
claude
committed
97f9fa0
feat: mainnet-safe SDK validation — shadow flag binds, network-aware debug seeding

bfoss765
and
claude
committed
9a48c89
feat: debug-only Kotlin sync indicator in the home-screen sync header

bfoss765
and
claude
committed
c5ebfee
fix: two-engine sync header — 'DashJ 63% · Kotlin 19%', combined Kotlin percent

bfoss765
and
claude
committed
1bec8d0

Commits on Jul 15, 2026

fix: three live-QA bugs — fail-closed username check, gate-reopen probe, dialog finish-gating

bfoss765
and
claude
committed
e31d0d3
feat: show the username under the avatar on the edit-profile screen

bfoss765
and
claude
committed
5d2742f
feat: platform-health warning + honest status during identity registration

bfoss765
and
claude
committed
6419365
fix: require authentication before every username-request spend; stall banner at 90s

bfoss765
and
claude
committed
2f83b23
feat: keep SDK engines warm across idle teardowns (debug); stall banner 35s

bfoss765
and
claude
committed
e440f32
feat: username tile/cost fixes, creation status in dialog, invite shielded flow + auth order

bfoss765
and
claude
committed
cd2a1b8
fix: instant/secondary username confirm is always free (revert cost regression)

bfoss765
and
claude
committed
91578b7
fix: invite shielded sheet shows the amount to shield (0.15/0.35), not the exit denomination

bfoss765
and
claude
committed
4d83184
fix: four live-QA bugs — shield-first exit, dual-name render, tile flicker, entry auth

bfoss765
and
claude
committed
0b4a6b3

Commits on Jul 16, 2026

fix: under-avatar dual name shows the DISPLAY form, not the normalized variant

bfoss765
and
claude
committed
395ea27
fix: shielded username submit — calm 'still syncing' surface + live pool gate

bfoss765
and
claude
committed
7e5235e
fix: L1 username creation processing dialog now dismisses on completion

bfoss765
and
claude
committed
6766aaf