Connected sites
Sites allowed to see your address, allowances for silent BCH payments, and Tron dapps you've connected. Message signing always asks.
diff --git a/panel.js b/panel.js
index 5d22e4b..d014c78 100644
--- a/panel.js
+++ b/panel.js
@@ -113,6 +113,49 @@ function explorerHref(base, id) {
}
function bigUnitLabel() { return ticker(); }
+// ---- fiat helpers ----------------------------------------------------------
+// Prices live in state.prices.{enabled, prices, fetchedAt}. When disabled
+// or missing, fiat helpers return null and the caller renders nothing.
+function priceFor(chain) {
+ if (!state?.prices?.enabled) return null;
+ return state.prices.prices?.[chain] ?? null;
+}
+// Convert native units (sats/lamports/wei/…) to a USD number, BigInt-safe
+// for wide-decimals coins (SC=24, ETH=18) that overflow Number.
+function usdOf(chain, units, decimals) {
+ const price = priceFor(chain);
+ if (price == null || !units) return null;
+ const d = Number(decimals) || 0;
+ if (typeof units === "string" && /^-?\d+$/.test(units)) {
+ // BigInt-safe: divide the units by 10^d first via BigInt, then use
+ // the fractional remainder as a Number multiplier for the last dp.
+ const neg = units.startsWith("-");
+ const abs = neg ? units.slice(1) : units;
+ const base = 10n ** BigInt(d);
+ const bi = BigInt(abs);
+ const whole = Number(bi / base);
+ const frac = Number(bi % base) / Number(base);
+ return (neg ? -1 : 1) * (whole + frac) * price;
+ }
+ const n = Number(units) / Math.pow(10, d);
+ return n * price;
+}
+// Format a USD value for the UI. < $0.01 → "< $0.01", < $10 → 2dp, else
+// grouped whole dollars with ".xx" fine detail. Skeleton "≈ $—" when the
+// feed is enabled but hasn't returned yet.
+function fmtFiat(usd) {
+ if (usd == null) return null;
+ if (usd === 0) return "$0.00";
+ if (Math.abs(usd) < 0.01) return "< $0.01";
+ if (Math.abs(usd) < 10) return "$" + usd.toFixed(2);
+ const int = Math.floor(usd);
+ const frac = Math.abs(usd - int).toFixed(2).slice(1);
+ return "$" + int.toLocaleString("en-US") + frac;
+}
+function fiatSkeleton() {
+ return state?.prices?.enabled ? "≈ $—" : null;
+}
+
// ---- tabs ------------------------------------------------------------------
document.querySelectorAll("nav button").forEach((b) => b.addEventListener("click", () => showTab(b.dataset.tab)));
@@ -122,6 +165,14 @@ function showTab(name) {
document.querySelectorAll("main section").forEach((s) => { s.hidden = s.id !== "tab-" + name; });
if (name === "settings") { settingsFilled = false; fillSettings(); }
if (name === "send") applyUnitPicker();
+ // Settings tab is always usable (fiat prices are a global setting); every
+ // other tab is gated by the wallet-ready state. Re-run gate visibility so
+ // switching TO or AWAY FROM Settings while locked does the right thing.
+ const s = sel();
+ const ready = s && s.phase === "ready";
+ const onSettings = name === "settings";
+ $("tabs").hidden = !(ready || onSettings);
+ $("gate").hidden = ready || onSettings;
}
// ---- wallet picker (two-step add) ------------------------------------------
@@ -155,12 +206,20 @@ function fillPicker() {
const coins = state?.coins || [];
const rowsHtml = wallets.map((w) => {
const on = w.id === state.selectedWalletId ? "on" : "";
- const bal = w.balance ? fmtBig(w.balance.confirmed || 0, w.decimals) + " " + w.ticker : "—";
+ const totalUnits = w.balance ? (typeof w.balance.confirmed === "string"
+ ? (BigInt(w.balance.confirmed || "0") + BigInt(w.balance.unconfirmed || "0")).toString()
+ : (w.balance.confirmed || 0) + (w.balance.unconfirmed || 0)) : 0;
+ const bal = w.balance ? fmtBig(totalUnits, w.decimals) + " " + w.ticker : "—";
+ // Fiat sits on a second line under the native balance, right-aligned.
+ // Testnet coins mirror mainnet prices, so we don't dim them.
+ const usd = usdOf(w.chain, totalUnits, w.decimals);
+ const fiat = fmtFiat(usd);
+ const fiatLine = fiat ? `
${esc(fiat)}
` : "";
const sub = `${esc(w.coinLabel)} · ${esc(w.networkLabel)}${w.testnet ? " " + testnetTag() : ""}`;
return `
${logoSvg(w.logo, 22)}
-
${esc(bal)}
+
`;
}).join("");
// "Add wallet" is a two-step flyout: first show coins, then that coin's
@@ -183,7 +242,13 @@ function fillPicker() {
}).join("");
d.innerHTML =
rowsHtml +
- `
＋ Add wallet
${coinRows}`;
+ `
＋ Add wallet
${coinRows}` +
+ `
↓ Import existing (BCH)
+
+ ${logoSvg("bch", 22)}
+
Import a BCH wallet
Paste a BIP39 mnemonic + derivation path, or a WIF
+
›
+
`;
d.querySelectorAll("[data-select]").forEach((r) => r.addEventListener("click", async () => {
d.hidden = true;
@@ -204,6 +269,112 @@ function fillPicker() {
try { state = await S.invoke("addWallet", { chain: c, network: n }); settingsFilled = false; render(); }
catch (e) { showErr(cleanErr(e)); }
}));
+ const impBtn = $("picker-import-bch");
+ if (impBtn) impBtn.addEventListener("click", () => { d.hidden = true; openImportModal("bch"); });
+}
+
+// Import modal — M.1 UX. Paste mnemonic + path OR WIF, choose network + label
+// + category. Backend derives cashaddr and stores signer material in
+// wallet-imports.enc (design §3.2). Modal is a plain overlay div injected
+// into the panel body so it works over any tab.
+function openImportModal(chain) {
+ const overlay = document.createElement("div");
+ overlay.style.cssText = "position:fixed;inset:0;background:rgba(0,0,0,.55);display:flex;align-items:flex-start;justify-content:center;z-index:9999;padding-top:24px";
+ overlay.innerHTML = `
+
+
+ ${logoSvg("bch", 22)}
+
Import a BCH wallet
+
+
+
Key material stays in Theseus's vault (wallet-imports.enc). Aegis derives only the address and shows the balance — spending support ships next.
+
+
+
+
Mnemonic (12/24 words)
+
+
Derivation path
+
+
Default: m/44'/1'/0'/0/0 for chipnet, m/44'/145'/0'/0/0 for mainnet.
+
+
+
+
+
Category
+
+
+
+
+
+
+
+
`;
+ document.body.appendChild(overlay);
+ const close = () => { try { overlay.remove(); } catch {} };
+ overlay.addEventListener("click", (e) => { if (e.target === overlay) close(); });
+ overlay.querySelector("#imClose").addEventListener("click", close);
+ overlay.querySelector("#imCancel").addEventListener("click", close);
+ // Toggle mnemonic vs WIF fields.
+ overlay.querySelectorAll('input[name="imKind"]').forEach((r) => r.addEventListener("change", () => {
+ const kind = overlay.querySelector('input[name="imKind"]:checked').value;
+ overlay.querySelector("#imMnemonicField").hidden = kind !== "mnemonic";
+ overlay.querySelector("#imWifField").hidden = kind !== "wif";
+ }));
+ // Update default path on network switch.
+ const setDefaultPath = () => {
+ const net = overlay.querySelector('input[name="imNet"]:checked').value;
+ const path = overlay.querySelector("#imPath");
+ if (!path.value.trim()) path.value = net === "mainnet" ? "m/44'/145'/0'/0/0" : "m/44'/1'/0'/0/0";
+ };
+ overlay.querySelectorAll('input[name="imNet"]').forEach((r) => r.addEventListener("change", setDefaultPath));
+ setDefaultPath();
+ overlay.querySelector("#imGo").addEventListener("click", async () => {
+ const msg = overlay.querySelector("#imMsg"); msg.hidden = true;
+ const network = overlay.querySelector('input[name="imNet"]:checked').value;
+ const kind = overlay.querySelector('input[name="imKind"]:checked').value;
+ const label = overlay.querySelector("#imLabel").value.trim();
+ const category = overlay.querySelector("#imCategory").value;
+ if (!label) { msg.textContent = "Label required."; msg.hidden = false; return; }
+ const payload = { chain: "bch", network, label, category };
+ if (kind === "mnemonic") {
+ payload.mnemonic = overlay.querySelector("#imMnemonic").value.trim();
+ payload.path = overlay.querySelector("#imPath").value.trim();
+ if (!payload.mnemonic) { msg.textContent = "Mnemonic required."; msg.hidden = false; return; }
+ } else {
+ payload.wif = overlay.querySelector("#imWif").value.trim();
+ if (!payload.wif) { msg.textContent = "WIF required."; msg.hidden = false; return; }
+ }
+ try {
+ state = await S.invoke("importWallet", payload);
+ close();
+ render();
+ } catch (e) { msg.textContent = cleanErr(e); msg.hidden = false; }
+ });
}
function showErr(text) {
const box = $("gate");
@@ -217,9 +388,13 @@ function render() {
if (!state) return;
const s = sel();
const ready = s && s.phase === "ready";
- $("tabs").hidden = !ready;
+ // Settings is the only always-usable tab (fiat prices, connected sites
+ // — nothing needs a live wallet). Every other tab is gated.
+ const onSettings = tab === "settings";
+ $("tabs").hidden = !(ready || onSettings);
const gate = $("gate");
- gate.hidden = ready;
+ gate.hidden = ready || onSettings;
+ if (onSettings) fillSettings();
// Header: replace the badge slot with the coin's SVG and show
//
$("hBadge").innerHTML = s?.meta?.logo ? logoSvg(s.meta.logo, 22) : logoSvg(null, 22);
@@ -229,17 +404,39 @@ function render() {
: "";
if (!ready) {
const copy = {
- locked: ["🔒", "Unlock your password vault to open the wallet.", "Settings › Passwords. Aegis derives its keys from the vault seed, so there is nothing separate to unlock."],
- nosetup: ["🗝", "Set up a password vault to create your wallet.", "Settings › Passwords › Set up. Use a recovery phrase there and every wallet in Aegis can be recreated from it on any machine."],
+ locked: ["🔒", "Unlock your password vault to open the wallet.", "Aegis derives its keys from the vault seed, so there is nothing separate to unlock — the vault is your wallet."],
+ nosetup: ["🗝", "Set up a password vault to create your wallet.", "Pick a master password on the next screen. Every Aegis wallet is derived from it — the same master password on another machine recreates the same addresses."],
error: ["⚠", "This wallet could not start.", s?.error || ""],
empty: ["🛡", "No wallets yet.", "Aegis derives every wallet from your Theseus password vault — there's no separate seed to import. Pick a coin below to create your first one."],
}[s?.phase || "locked"] || ["…", "Starting…", ""];
- const showAddButton = s?.phase === "empty";
- gate.innerHTML = `${copy[0]}
${esc(copy[1])}
${esc(copy[2])}
`
- + (showAddButton ? `` : "");
- // Wire the empty-state button — opens the header picker with the Add
- // section pre-expanded so the user can pick a coin in one click.
- if (showAddButton) {
+ const phase = s?.phase;
+ let form = "";
+ if (phase === "nosetup") {
+ form = `
+ `;
+ } else if (phase === "locked") {
+ form = `
+ `;
+ } else if (phase === "empty") {
+ form = ``;
+ }
+ gate.innerHTML = `${copy[0]}
${esc(copy[1])}
${esc(copy[2])}
${form}`;
+ if (phase === "empty") {
const btn = $("gateAddWallet");
if (btn) btn.addEventListener("click", () => {
const d = $("drop");
@@ -248,6 +445,34 @@ function render() {
setTimeout(() => { const first = d.querySelector(".coinrow"); if (first) first.click(); }, 0);
});
}
+ if (phase === "locked") {
+ const doUnlock = async () => {
+ const pw = $("gateUnlockPw").value;
+ const msg = $("gateUnlockMsg"); msg.hidden = true;
+ if (!pw) return;
+ try { state = await S.invoke("vaultUnlock", { masterPassword: pw }); render(); }
+ catch (e) { msg.textContent = cleanErr(e); msg.hidden = false; }
+ };
+ $("gateUnlockBtn").addEventListener("click", doUnlock);
+ $("gateUnlockPw").addEventListener("keydown", (e) => { if (e.key === "Enter") doUnlock(); });
+ try { $("gateUnlockPw").focus(); } catch {}
+ }
+ if (phase === "nosetup") {
+ const doSetup = async () => {
+ const pw = $("gateSetupPw").value;
+ const pw2 = $("gateSetupPw2").value;
+ const mnemonic = $("gateSetupMnemonic").value.trim();
+ const msg = $("gateSetupMsg"); msg.hidden = true;
+ if (!pw || pw.length < 4) { msg.textContent = "Master password must be 4+ characters."; msg.hidden = false; return; }
+ if (pw !== pw2) { msg.textContent = "Master passwords don't match."; msg.hidden = false; return; }
+ const seedSource = mnemonic ? { kind: "mnemonic", mnemonic } : { kind: "random" };
+ try {
+ state = await S.invoke("vaultSetup", { masterPassword: pw, seedSource });
+ render();
+ } catch (e) { msg.textContent = cleanErr(e); msg.hidden = false; }
+ };
+ $("gateSetupBtn").addEventListener("click", doSetup);
+ }
}
const dot = $("dot");
dot.className = "dot " + (s?.server ? (s?.scanning ? "busy" : "on") : "");
@@ -268,9 +493,16 @@ function render() {
$("balTicker").textContent = s.meta.ticker;
const uc = s.balance?.unconfirmed;
if (uc && uc !== "0" && uc !== 0) $("netlbl").textContent += ` · ${fmtBig(uc)} unconfirmed`;
+ // Fiat under the native amount (opt-in, might be null while loading).
+ const usd = usdOf(chain(), total, decimals());
+ const fiat = fmtFiat(usd) || fiatSkeleton();
+ $("balFiat").textContent = fiat || "";
+ $("balFiat").hidden = !fiat;
} else {
$("balMain").textContent = "—"; $("balTicker").textContent = "";
+ $("balFiat").hidden = true;
}
+ renderPortfolio();
if (!ready) return;
const addr = s.address || "";
if ($("addr").textContent !== addr) {
@@ -288,6 +520,33 @@ function render() {
renderHistory();
}
+// Sum every wallet's confirmed+unconfirmed × price and show "≈ $X across N
+// wallets" under the header. Only rendered when prices are on AND there are
+// two or more wallets (a single wallet's fiat already sits in #balFiat).
+function renderPortfolio() {
+ const el = $("portfolio");
+ const wallets = state?.wallets || [];
+ if (!state?.prices?.enabled || wallets.length < 2) { el.hidden = true; return; }
+ let total = 0, priced = 0;
+ for (const w of wallets) {
+ const b = w.balance;
+ if (!b) continue;
+ const units = (typeof b.confirmed === "string")
+ ? (BigInt(b.confirmed || "0") + BigInt(b.unconfirmed || "0")).toString()
+ : (b.confirmed || 0) + (b.unconfirmed || 0);
+ const usd = usdOf(w.chain, units, w.decimals);
+ if (usd != null) { total += usd; priced++; }
+ }
+ if (!priced) {
+ el.hidden = false;
+ el.innerHTML = `Portfolio: ${esc(fiatSkeleton() || "—")}`;
+ return;
+ }
+ const noun = wallets.length === 1 ? "wallet" : "wallets";
+ el.hidden = false;
+ el.innerHTML = `Portfolio: ${esc(fmtFiat(total))} across ${wallets.length} ${noun}`;
+}
+
function renderTokens() {
const s = sel();
const tokens = (chain() === "sol" && s?.tokens) || [];
@@ -550,7 +809,23 @@ $("sendBtn").addEventListener("click", async () => {
// ---- settings --------------------------------------------------------------
function fillSettings() {
- const s = sel(); if (!s) return;
+ // Global settings (fiat prices, connected sites) render even when there
+ // is no active wallet / the vault is locked.
+ renderPricesSetting();
+ renderSites();
+ const s = sel();
+ const chainSetup = !!s && s.phase === "ready";
+ $("walletManage").hidden = !chainSetup;
+ if (!chainSetup) {
+ $("bchSettings").hidden = true;
+ $("trxSettings").hidden = true;
+ $("scSettings").hidden = true;
+ $("dgbSettings").hidden = true;
+ $("btcSettings").hidden = true;
+ $("ethSettings").hidden = true;
+ $("solSettings").hidden = true;
+ return;
+ }
$("bchSettings").hidden = chain() !== "bch";
$("trxSettings").hidden = chain() !== "trx";
$("scSettings").hidden = chain() !== "sc";
@@ -574,6 +849,7 @@ function fillSettings() {
? "Chipnet uses bundled defaults in this build."
: (state.bchServers?.custom ? "Custom list." : "Bundled defaults.") + (s.server ? " Connected to " + hostOf(s.server) + "." : " Not connected.");
$("purpose").textContent = "silentmode/addons/" + (s.purpose || "");
+ renderWcSites();
} else if (chain() === "trx") {
$("trxPurpose").textContent = "silentmode/addons/" + (s.purpose || "");
} else if (chain() === "sc") {
@@ -612,7 +888,27 @@ function fillSettings() {
$("solPurpose").textContent = "silentmode/addons/" + (s.purpose || "");
$("solRecovery").innerHTML = "";
}
- renderSites();
+}
+
+// Reflect the current price feed state into the Settings toggle + status
+// line. Called from fillSettings() and whenever fresh state arrives.
+function renderPricesSetting() {
+ const p = state?.prices;
+ const toggle = $("pricesToggle");
+ if (!toggle) return;
+ toggle.checked = !!p?.enabled;
+ $("refreshPrices").hidden = !p?.enabled;
+ const st = $("pricesStatus");
+ if (!p?.enabled) { st.textContent = "Disabled — no requests made."; return; }
+ if (p.loading) { st.textContent = "Fetching…"; return; }
+ if (p.error) { st.textContent = "Error: " + p.error; return; }
+ if (p.fetchedAt) {
+ const secs = Math.round((Date.now() - p.fetchedAt) / 1000);
+ const when = secs < 60 ? `${secs}s ago` : `${Math.round(secs / 60)}m ago`;
+ st.textContent = `Updated ${when} · ${Object.keys(p.prices || {}).length} coins.`;
+ return;
+ }
+ st.textContent = "Enabled — first fetch pending.";
}
async function renderSites() {
let perms = {};
@@ -799,6 +1095,61 @@ $("showDgbXprv").addEventListener("click", async () => {
catch (e) { $("dgbRecovery").textContent = cleanErr(e); }
});
+// ---- WizardConnect (BCH only) ---------------------------------------------
+function renderWcSites() {
+ const el = $("wcSites"); if (!el) return;
+ const walletId = state?.selectedWalletId;
+ const conns = (state?.wc && state.wc[walletId]) || [];
+ if (!conns.length) { el.innerHTML = `No dapps paired yet.
`; return; }
+ el.innerHTML = conns.map((c) => {
+ const label = c.dappName || "(pairing…)";
+ const iconHtml = c.dappIcon ? `})
` : "";
+ return `
+
${iconHtml}
+
${esc(label)}
${esc((c.uri || "").slice(0, 46))}…
+
+