silentmode/sirius
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
sirius/js/register-flow.js

1227 lines
62 KiB
JavaScript
Raw Normal View History

feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
// Reusable name-registration mint flow — the modal + wallet setup + on-chain
// mint sequence that used to live inside register.html. Any Sirius.X page can
// include this module and call `window.siriusRegisterName(fullName)` to open
// the flow for a specific `<label>.<tld>`. The landing's search cards call
// it directly; a legacy register.html redirect keeps old links working.
//
// Injects its own modal HTML into <body> and its own CSS into <head> on load
// so the host page needs nothing but a single script include.
feat(registrar): 90/10 revenue split — TLD owner earns from name mints Every second-level name registration under a TLD now routes 90% of the service fee to whoever holds that TLD's certificate on chain, with 10% going to the platform address. That's the economic incentive for minting a TLD: you earn from every name registered under it. The mechanism, end to end: 1. resolver-web.js fetchTldMap now also records mintScriptHex — the scriptPubKey of the TREG output that carries each TLD's NFT. Exported so registrar can decode it into a cashaddr with libauth. MVP: this is the ORIGINAL owner; NFT transfers after mint are not traced yet (a follow-up will walk the chain of transfers). 2. registrar.js gains findTldOwnerAddress(client, tld) and splitServiceFee(sats). The split constants live at the top of the file (TLD_OWNER_SHARE_NUM/DEN = 90/100) so the ratio moves in one place. Rounding: BigInt division favours the platform on odd sat counts so the two shares always sum EXACTLY to the input. 3. quoteRegistration wraps the existing flow: it derives the TLD from the name, looks up the TLD owner, and if the owner ≠ buyer it asks buildRegistrationTx to add a second fee output. If the owner couldn't be resolved (TLD not registered, decode failure) the full fee stays on the platform address — the buyer still pays the same amount either way. 4. register-tx.js buildRegistrationTx accepts tldFeeAddress/tldFeeSats and, when set, emits an extra P2PKH output for the TLD owner. Sits between the beacon dust and the platform-fee output; outputMap records .tldOwnerFee so callers can find it. costs also carries tldOwnerFeeSats and netCostSats includes it. 5. priceSummary in registrar-config splits the 'Service fee' row into 'Service fee — TLD owner (90%)' + 'Service fee — platform (10%)' whenever tldOwnerFeeSats > 0, with a per-line note explaining where the money goes. Bundle: re-exported findTldOwnerAddress + splitServiceFee from register-entry.js. Rebuilt bns-register.js (~34 kB) and deployed; cache-buster bumped to ?v=20260908split on portal / admin / register-flow.js. Verified live: findTldOwnerAddress('.bch') returns the operator cashaddr; quoteRegistration('tester42.bch') builds cleanly with a 9,000/1,000 split output pair on a 10,000-sat fee; priceSummary renders both lines. No regressions on the TLD-mint flow (buyer IS the TLD owner there — split short-circuits and it stays a single fee output as before).
2026-09-08 02:42:16 +02:00
import * as BNS from "https://silentmode.st/js/bns-register.js?v=20260908split";
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
const $ = (id) => document.getElementById(id);
const esc = (s) => String(s).replace(/[&<>"']/g, (c) => ({ "&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;" }[c]));
const sats = (v) => Number(v).toLocaleString("en-US");
// ---------- inject CSS + modal HTML ----------
// The style block is a straight copy of register.html's modal/sheet styling
// — kept scoped by prefixing every selector with #sirius-register-modal so it
// cannot collide with the host page's own .modal / .sheet classes.
(function injectAssets() {
if (document.getElementById("sirius-register-flow-css")) return;
const css = document.createElement("style");
css.id = "sirius-register-flow-css";
css.textContent = `
#sirius-register-modal{position:fixed;inset:0;background:rgba(6,9,14,.82);backdrop-filter:blur(3px);
display:none;align-items:flex-start;justify-content:center;padding:3vh 1rem;overflow-y:auto;z-index:100}
#sirius-register-modal.open{display:flex}
#sirius-register-modal .sheet{background:var(--panel,#141a24);border:1px solid var(--line,rgba(255,255,255,.09));
border-radius:16px;max-width:620px;width:100%;padding:26px 28px 28px;color:var(--ink,#e7eaf1)}
#sirius-register-modal .sheet h3{margin:0 0 .2rem;font-size:1.25rem}
#sirius-register-modal .sheet .sub{color:var(--mut,#8b98a9);font-size:14px;margin:0 0 1.2rem}
#sirius-register-modal .sheet label{display:block;font-size:13px;color:var(--mut,#8b98a9);margin:14px 0 5px}
#sirius-register-modal .sheet input[type=text],
#sirius-register-modal .sheet input[type=password],
#sirius-register-modal .sheet textarea,
#sirius-register-modal .sheet select{
width:100%;padding:11px 13px;border-radius:10px;border:1px solid #ffffff22;background:#0e131b;
color:var(--ink,#e7eaf1);font-size:14px;font-family:inherit;outline:none}
#sirius-register-modal .sheet textarea{min-height:76px;resize:vertical;font-family:ui-monospace,monospace;font-size:13px}
#sirius-register-modal .sheet input:focus,
#sirius-register-modal .sheet textarea:focus{border-color:#4b7bec}
#sirius-register-modal .row{display:flex;gap:10px;flex-wrap:wrap;margin-top:18px}
#sirius-register-modal .row.end{justify-content:flex-end}
#sirius-register-modal .x{position:absolute;top:14px;right:18px;background:none;border:none;color:var(--dim,#5e6678);font-size:22px;cursor:pointer}
#sirius-register-modal .sheetwrap{position:relative;width:100%;max-width:620px}
#sirius-register-modal .phrase{display:grid;grid-template-columns:repeat(3,1fr);gap:8px;margin-top:10px}
#sirius-register-modal .phrase span{background:#0e131b;border:1px solid var(--line,rgba(255,255,255,.09));
border-radius:8px;padding:8px 10px;font-family:ui-monospace,monospace;font-size:13px}
#sirius-register-modal .phrase span b{color:var(--dim,#5e6678);font-weight:400;margin-right:6px;font-size:11px}
#sirius-register-modal .addr{display:flex;gap:8px;align-items:center;margin-top:8px}
#sirius-register-modal .addr code{flex:1;word-break:break-all;background:#0e131b;
border:1px solid var(--line,rgba(255,255,255,.09));border-radius:8px;padding:9px 11px;
font-family:ui-monospace,monospace;font-size:12.5px}
#sirius-register-modal table.price{width:100%;border-collapse:collapse;margin-top:12px;font-size:14px}
#sirius-register-modal table.price td{padding:7px 0;border-bottom:1px solid var(--line,rgba(255,255,255,.09));color:var(--mut,#8b98a9)}
#sirius-register-modal table.price td:last-child{text-align:right;font-family:ui-monospace,monospace;color:var(--ink,#e7eaf1)}
#sirius-register-modal table.price tr.total td{border-bottom:none;color:var(--ink,#e7eaf1);font-weight:600;padding-top:12px}
#sirius-register-modal table.price tr.total td:last-child{color:var(--acid,#d6ff3d)}
#sirius-register-modal table.price td small{display:block;color:var(--dim,#5e6678);font-size:11.5px}
#sirius-register-modal .steps-log{margin-top:14px;font-family:ui-monospace,monospace;font-size:12.5px;
color:var(--mut,#8b98a9);background:#0e131b;border:1px solid var(--line,rgba(255,255,255,.09));
border-radius:10px;padding:12px 14px;max-height:180px;overflow-y:auto}
#sirius-register-modal .steps-log div::before{content:"› ";color:var(--acid,#d6ff3d)}
#sirius-register-modal .err{color:var(--taken,#f6768a);font-size:13.5px;margin-top:12px}
#sirius-register-modal .ok{color:var(--ok,#4fd1a5)}
#sirius-register-modal .pill{display:inline-block;font-size:11px;padding:2px 8px;border-radius:999px;
background:rgba(214,255,61,.13);color:var(--acid,#d6ff3d);margin-left:8px;vertical-align:middle}
#sirius-register-modal .pill.soon{background:rgba(255,255,255,.07);color:var(--dim,#5e6678)}
#sirius-register-modal .wopt{display:flex;gap:14px;align-items:flex-start;background:var(--panel2,#18202c);
border:1px solid var(--line,rgba(255,255,255,.09));border-radius:12px;padding:14px 16px;cursor:pointer;
text-align:left;width:100%;color:inherit;font:inherit;margin-top:10px}
#sirius-register-modal .wopt:hover{border-color:#4b7bec}
#sirius-register-modal .wopt:disabled{opacity:.45;cursor:not-allowed}
#sirius-register-modal .wopt .ic{font-size:22px;line-height:1}
#sirius-register-modal .wopt b{display:block;font-size:14.5px}
#sirius-register-modal .wopt span{color:var(--mut,#8b98a9);font-size:13px}
#sirius-register-modal .chk{display:flex;gap:9px;align-items:flex-start;margin-top:14px;font-size:13.5px;color:var(--mut,#8b98a9)}
#sirius-register-modal .chk input{margin-top:3px}
feat(sirius-x): admin TLD hide/unhide + tabbed sign-in modal (4 direct actions) Two features: 1. Operator can hide TLDs from the public /api/tlds listing so hidden TLDs stop appearing in name-search UIs. On-chain registrations under a hidden TLD keep resolving — this is a UX filter, not enforcement. Gateway (public-gateway.mjs): - Persistent HIDDEN_TLDS set backed by hidden-tlds.json next to the service script - GET /api/tld-visibility -> {hidden:[...]} (public) - POST /api/tld-visibility -> updates the list (operator-gated by Bearer BNS_OPERATOR_TOKEN env var; if unset, all writes refused so we default-deny) - /api/tlds filters out HIDDEN_TLDS; add ?include_hidden=1 to see everything (used by the admin panel to show all rows) - Operator token installed via systemd override on the VPS Admin panel: - New 'Operator token' card at the top of the TLD-registry section; token stored in sessionStorage (not localStorage) so a full browser close forgets it - Each TLD row got a 'Hidden from public' checkbox that POSTs on toggle and refreshes the table; failures roll back the checkbox and surface the error next to the token field 2. Wallet dropdown restored to 4 direct actions (Unlock / Create a wallet / Import a wallet / WizardConnect) and the shared mint/sign-in modal grew a tab strip so users can switch between the four wallet actions from any step without going back to a choice screen. register-flow.js: - renderTabs(active) prepended to stepCreate/stepImport/stepUnlock/ stepExternal when signInOnly is set. Unlock tab only appears when a saved wallet exists. - Delegated click handler on the sheet routes tab clicks to the matching step; switching away from a live WC session tears it down first so we don't leak WebSockets. profile-menu.js: - Restored 4-item onboarding menu (Create/Import/WC plus Unlock when saved). Each item is a direct entry point; the tabbed modal lets the user pivot to any other option without closing. Cache-buster bumped on all 8 sirius-x pages to ?v=20260908tabs.
2026-09-08 02:19:41 +02:00
#sirius-register-modal .signin-tabs{
display:flex;gap:2px;margin:-8px -12px 18px;padding:0 4px 0;
border-bottom:1px solid var(--line,rgba(255,255,255,.09));overflow-x:auto
}
#sirius-register-modal .signin-tabs button{
background:none;border:none;color:var(--mut,#8b98a9);font-family:inherit;font-size:12.5px;
padding:10px 12px;cursor:pointer;border-bottom:2px solid transparent;
white-space:nowrap;letter-spacing:.2px;transition:color .1s,border-color .1s
}
#sirius-register-modal .signin-tabs button:hover{color:var(--ink,#e7eaf1)}
#sirius-register-modal .signin-tabs button.active{
color:var(--acid,#d6ff3d);border-bottom-color:var(--acid,#d6ff3d)
}
fix(sirius-x/register-flow): inline render actually writes to the inline mount renderSignInInline() reassigned the module-level 'sheet' variable to the host page's container, but render() had been shadowing that with a separate 'mountTarget' constant captured at module init — so every step kept writing into the modal sheet instead of the inline container. Portal.html therefore showed an empty #signin-inline while the tabs + form rendered off-screen inside the (closed) modal. Drop mountTarget entirely and let render() write directly into 'sheet'. 'sheet' is already the reassignable target for both modal and inline paths, and renderSignInInline / close() already keep it in sync.
2026-09-08 13:06:16 +02:00
/* Inline-sheet variant: same step content styling as the modal, but
rendered as a normal page section (no fixed positioning, no backdrop,
no shadow). Portal.html uses this so the tabbed sign-in IS the page. */
.sirius-inline-sheet{
background:var(--panel,#141a24);border:1px solid var(--line,rgba(255,255,255,.09));
border-radius:16px;padding:22px 24px;color:var(--ink,#e7eaf1)
}
.sirius-inline-sheet h3{margin:0 0 .2rem;font-size:1.15rem}
.sirius-inline-sheet .sub{color:var(--mut,#8b98a9);font-size:14px;margin:0 0 1.2rem}
.sirius-inline-sheet label{display:block;font-size:13px;color:var(--mut,#8b98a9);margin:14px 0 5px}
.sirius-inline-sheet input[type=text],
.sirius-inline-sheet input[type=password],
.sirius-inline-sheet textarea,
.sirius-inline-sheet select{
width:100%;padding:11px 13px;border-radius:10px;border:1px solid #ffffff22;background:#0e131b;
color:var(--ink,#e7eaf1);font-size:14px;font-family:inherit;outline:none
}
.sirius-inline-sheet textarea{min-height:76px;resize:vertical;font-family:ui-monospace,monospace;font-size:13px}
.sirius-inline-sheet input:focus,.sirius-inline-sheet textarea:focus{border-color:#4b7bec}
.sirius-inline-sheet .row{display:flex;gap:10px;flex-wrap:wrap;margin-top:18px}
.sirius-inline-sheet .row.end{justify-content:flex-end}
.sirius-inline-sheet .phrase{display:grid;grid-template-columns:repeat(3,1fr);gap:8px;margin-top:10px}
.sirius-inline-sheet .phrase span{background:#0e131b;border:1px solid var(--line,rgba(255,255,255,.09));
border-radius:8px;padding:8px 10px;font-family:ui-monospace,monospace;font-size:13px}
.sirius-inline-sheet .phrase span b{color:var(--dim,#5e6678);font-weight:400;margin-right:6px;font-size:11px}
.sirius-inline-sheet .addr{display:flex;gap:8px;align-items:center;margin-top:8px}
.sirius-inline-sheet .addr code{flex:1;word-break:break-all;background:#0e131b;
border:1px solid var(--line,rgba(255,255,255,.09));border-radius:8px;padding:9px 11px;
font-family:ui-monospace,monospace;font-size:12.5px}
.sirius-inline-sheet .steps-log{margin-top:14px;font-family:ui-monospace,monospace;font-size:12.5px;
color:var(--mut,#8b98a9);background:#0e131b;border:1px solid var(--line,rgba(255,255,255,.09));
border-radius:10px;padding:12px 14px;max-height:180px;overflow-y:auto}
.sirius-inline-sheet .steps-log div::before{content:"› ";color:var(--acid,#d6ff3d)}
.sirius-inline-sheet .err{color:var(--taken,#f6768a);font-size:13.5px;margin-top:12px}
.sirius-inline-sheet .ok{color:var(--ok,#4fd1a5)}
.sirius-inline-sheet .note{background:var(--panel2,#18202c);border:1px solid var(--line,rgba(255,255,255,.09));
border-left:3px solid var(--acid,#d6ff3d);border-radius:10px;padding:14px 18px;
color:var(--mut,#8b98a9);font-size:14px;margin-top:1.4rem}
.sirius-inline-sheet .note.warn{border-left-color:var(--warn,#ffc75f)}
.sirius-inline-sheet .note b{color:var(--ink,#e7eaf1)}
.sirius-inline-sheet .mono{background:#0e131b;border:1px solid var(--line,rgba(255,255,255,.09));
border-radius:6px;padding:1px 6px;font-family:ui-monospace,monospace;font-size:13px}
.sirius-inline-sheet .chk{display:flex;gap:9px;align-items:flex-start;margin-top:14px;font-size:13.5px;color:var(--mut,#8b98a9)}
.sirius-inline-sheet .chk input{margin-top:3px}
.sirius-inline-sheet .signin-tabs{
display:flex;gap:2px;margin:-6px -8px 18px;padding:0 4px;
border-bottom:1px solid var(--line,rgba(255,255,255,.09));overflow-x:auto
}
.sirius-inline-sheet .signin-tabs button{
background:none;border:none;color:var(--mut,#8b98a9);font-family:inherit;font-size:13px;
padding:10px 14px;cursor:pointer;border-bottom:2px solid transparent;
white-space:nowrap;letter-spacing:.2px;transition:color .1s,border-color .1s
}
.sirius-inline-sheet .signin-tabs button:hover{color:var(--ink,#e7eaf1)}
.sirius-inline-sheet .signin-tabs button.active{
color:var(--acid,#d6ff3d);border-bottom-color:var(--acid,#d6ff3d)
}
.sirius-inline-sheet .btn{display:inline-block;text-decoration:none;padding:10px 18px;border-radius:10px;
background:#4b7bec;color:#fff;font-size:14px;border:none;cursor:pointer;font-family:inherit}
.sirius-inline-sheet .btn.ghost{background:transparent;border:1px solid var(--line,rgba(255,255,255,.09));color:var(--ink,#e7eaf1)}
.sirius-inline-sheet .btn.acid{background:var(--acid,#d6ff3d);color:#0b0e14;font-weight:600}
.sirius-inline-sheet .btn:hover{filter:brightness(1.12)}
.sirius-inline-sheet .btn:disabled{opacity:.45;cursor:not-allowed;filter:none}
.sirius-inline-sheet .wopt{display:flex;gap:14px;align-items:flex-start;background:var(--panel2,#18202c);
border:1px solid var(--line,rgba(255,255,255,.09));border-radius:12px;padding:14px 16px;cursor:pointer;
text-align:left;width:100%;color:inherit;font:inherit;margin-top:10px}
.sirius-inline-sheet .wopt:hover{border-color:#4b7bec}
.sirius-inline-sheet .wopt .ic{font-size:22px;line-height:1}
.sirius-inline-sheet .wopt b{display:block;font-size:14.5px}
.sirius-inline-sheet .wopt span{color:var(--mut,#8b98a9);font-size:13px}
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
#sirius-register-modal .btn{display:inline-block;text-decoration:none;padding:10px 18px;border-radius:10px;
background:#4b7bec;color:#fff;font-size:14px;border:none;cursor:pointer;font-family:inherit}
#sirius-register-modal .btn.ghost{background:transparent;border:1px solid var(--line,rgba(255,255,255,.09));color:var(--ink,#e7eaf1)}
#sirius-register-modal .btn.acid{background:var(--acid,#d6ff3d);color:#0b0e14;font-weight:600}
#sirius-register-modal .btn:hover{filter:brightness(1.12)}
#sirius-register-modal .btn:disabled{opacity:.45;cursor:not-allowed;filter:none}
#sirius-register-modal .mono{background:#0e131b;border:1px solid var(--line,rgba(255,255,255,.09));
border-radius:6px;padding:1px 6px;font-family:ui-monospace,monospace;font-size:13px}
#sirius-register-modal .muted{color:var(--dim,#5e6678);font-size:13px}
#sirius-register-modal .note{background:var(--panel,#141a24);border:1px solid var(--line,rgba(255,255,255,.09));
border-left:3px solid var(--acid,#d6ff3d);border-radius:10px;padding:14px 18px;
color:var(--mut,#8b98a9);font-size:14px;margin-top:1.4rem}
#sirius-register-modal .note b{color:var(--ink,#e7eaf1)}
#sirius-register-modal .note.warn{border-left-color:var(--warn,#ffc75f)}
`;
document.head.appendChild(css);
const modal = document.createElement("div");
modal.id = "sirius-register-modal";
modal.innerHTML = `
<div class="sheetwrap">
<button class="x" id="sirius-reg-close" title="close">×</button>
<div class="sheet" id="sirius-reg-sheet"></div>
</div>
`;
document.body.appendChild(modal);
})();
// ---------- flow state ----------
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
// signInOnly: when true, the flow is used for wallet onboarding from the nav
// dropdown — no name to mint, so instead of walking through Fund/Confirm/
// Register we stop at 'wallet is ready', write siriusProfile, and close.
fix(sirius-x/register-flow): inline render actually writes to the inline mount renderSignInInline() reassigned the module-level 'sheet' variable to the host page's container, but render() had been shadowing that with a separate 'mountTarget' constant captured at module init — so every step kept writing into the modal sheet instead of the inline container. Portal.html therefore showed an empty #signin-inline while the tabs + form rendered off-screen inside the (closed) modal. Drop mountTarget entirely and let render() write directly into 'sheet'. 'sheet' is already the reassignable target for both modal and inline paths, and renderSignInInline / close() already keep it in sync.
2026-09-08 13:06:16 +02:00
// inlineTarget: when set, the flow renders into that page element instead
// of the modal sheet (portal.html uses this to embed the tabbed sign-in as
// the page's main content). The modal is left closed in inline mode.
const state = { name: null, signInOnly: false, inlineTarget: null, wallet: null, session: null, client: null, quote: null, result: null };
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
const modal = $("sirius-register-modal");
fix(sirius-x/register-flow): inline render actually writes to the inline mount renderSignInInline() reassigned the module-level 'sheet' variable to the host page's container, but render() had been shadowing that with a separate 'mountTarget' constant captured at module init — so every step kept writing into the modal sheet instead of the inline container. Portal.html therefore showed an empty #signin-inline while the tabs + form rendered off-screen inside the (closed) modal. Drop mountTarget entirely and let render() write directly into 'sheet'. 'sheet' is already the reassignable target for both modal and inline paths, and renderSignInInline / close() already keep it in sync.
2026-09-08 13:06:16 +02:00
const modalSheet = $("sirius-reg-sheet");
// `sheet` is the element the step functions render into — the modal's sheet
// by default, or an inline container when siriusRenderSignInInline() is
// active. `let` so it can be reassigned per call.
let sheet = modalSheet;
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
fix(sirius-x/register-flow): inline render actually writes to the inline mount renderSignInInline() reassigned the module-level 'sheet' variable to the host page's container, but render() had been shadowing that with a separate 'mountTarget' constant captured at module init — so every step kept writing into the modal sheet instead of the inline container. Portal.html therefore showed an empty #signin-inline while the tabs + form rendered off-screen inside the (closed) modal. Drop mountTarget entirely and let render() write directly into 'sheet'. 'sheet' is already the reassignable target for both modal and inline paths, and renderSignInInline / close() already keep it in sync.
2026-09-08 13:06:16 +02:00
function open() {
// Inline mode never opens the modal — the sign-in UI lives on the page.
if (state.inlineTarget) return;
modal.classList.add("open");
}
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
function close() {
fix(sirius-x/register-flow): inline render actually writes to the inline mount renderSignInInline() reassigned the module-level 'sheet' variable to the host page's container, but render() had been shadowing that with a separate 'mountTarget' constant captured at module init — so every step kept writing into the modal sheet instead of the inline container. Portal.html therefore showed an empty #signin-inline while the tabs + form rendered off-screen inside the (closed) modal. Drop mountTarget entirely and let render() write directly into 'sheet'. 'sheet' is already the reassignable target for both modal and inline paths, and renderSignInInline / close() already keep it in sync.
2026-09-08 13:06:16 +02:00
// In inline mode we can't "close" — leave the content in place. State is
// still reset so the next call starts fresh.
if (!state.inlineTarget) modal.classList.remove("open");
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
if (state.client) { try { state.client.close(); } catch {} state.client = null; }
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
// Keep the WC session alive when signing in — later record edits or TLD
// mints will need it; only tear it down for the mint flow.
if (state.session && !state.signInOnly) { try { state.session.disconnect(); } catch {} state.session = null; }
state.signInOnly = false;
fix(sirius-x/register-flow): inline render actually writes to the inline mount renderSignInInline() reassigned the module-level 'sheet' variable to the host page's container, but render() had been shadowing that with a separate 'mountTarget' constant captured at module init — so every step kept writing into the modal sheet instead of the inline container. Portal.html therefore showed an empty #signin-inline while the tabs + form rendered off-screen inside the (closed) modal. Drop mountTarget entirely and let render() write directly into 'sheet'. 'sheet' is already the reassignable target for both modal and inline paths, and renderSignInInline / close() already keep it in sync.
2026-09-08 13:06:16 +02:00
// Restore the modal sheet as the default render target so subsequent
// register/mint flows (which are modal-based) work.
if (state.inlineTarget) {
state.inlineTarget = null;
sheet = modalSheet;
}
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
}
// Persist wallet identity so profile-menu.js and any other tab see the
// signed-in state immediately (same as portal.html's writeProfile).
function writeProfile(w) {
try {
localStorage.setItem("siriusProfile", JSON.stringify({
address: w.address,
tokenAddress: w.tokenAddress,
source: w.source ?? "seed",
signedInAt: Date.now(),
}));
} catch {}
window.dispatchEvent(new Event("siriusProfileChanged"));
}
// A wallet was just loaded/created/connected. If we are in sign-in-only
// mode, mark siriusProfile and close the modal here; otherwise return
// false so the caller keeps going to Fund → Confirm → Register.
function finishSignIn(w) {
feat(sirius-x/signin): PIN escrow — encrypted-at-rest quick unlock, 3-strike password fallback Removes the sessionStorage plaintext-mnemonic cache (fixed under the same commit) and replaces it with a PIN-encrypted blob in localStorage. No plaintext secret ever touches disk or memory outside the live BuiltInWallet object. New js/pin-escrow.js — WebCrypto PBKDF2(50k) + AES-GCM(256). Public API on window.siriusPin: savePinBlob(mnemonic, pin), tryUnlock(pin), hasPin(), attemptsUsed(), attemptsRemaining(), clear(), MAX_ATTEMPTS. Iteration count is lighter than BuiltInWallet's 250k because a 4-6 digit PIN's key space is small anyway; the point is 'not plaintext at rest,' not brute-force resistance — the durable secret is the full password. register-flow.js: - After a fresh password unlock (Import / Create / Unlock), stepSetPin offers a 4-6 digit PIN with confirm — skippable with 'Not now'. Never overwrites an existing PIN blob. - stepUnlock now shows a numeric PIN pad when a PIN blob is present; the password field only appears when the user opts to 'Use password instead' or after the blob was wiped. - Wrong PIN → increment counter, surface 'N attempts left'. Third wrong PIN → wipe blob and route to a 'PIN reset' screen that hands off to the password form. - Correct PIN → decrypt the mnemonic in-browser, rebuild the BuiltInWallet, finishSignIn(). Attempt counter resets to 0. profile-menu.js: - Sign-out clears the PIN blob (via siriusPin.clear()) alongside the siriusProfile so the device isn't quick-unlockable with a stale PIN. All pages that host the sign-in flow now include pin-escrow.js. Same tabbed layout in stepUnlock — the PIN pad and the password field both live under 🔓 Unlock, transparent tab-switch works exactly as before. Verified live: - Fresh Import → 'Set a PIN' step → 4242 confirmed → blob written - Reload → PIN pad, 3 attempts remaining - Correct PIN 4242 → signed in, counter resets to 0 - 3 wrong PIN attempts → 'Wrong PIN — N attempts left' per attempt, then 'PIN locked — enter your full password to continue', blob wiped, next reload shows the password form - localStorage contains only ciphertext + salt + iv + counter; no plaintext mnemonic anywhere on disk or in sessionStorage.
2026-09-09 01:31:18 +02:00
// Expose the live wallet in memory only, BEFORE writeProfile so any
// listener of siriusProfileChanged (portal.html adoptWalletFromModal)
// sees it and can switch to the signed-in view synchronously. The
// mnemonic is NEVER written to sessionStorage / localStorage in
// plaintext — the only at-rest copies are the password-encrypted
// BuiltInWallet blob and, optionally, the PIN-encrypted escrow blob.
fix(sirius-x/portal): use shared modal instead of stale inline sign-in cards /sirius-x/portal.html?mode=import was landing users on the old three-card inline sign-in UI (New / Import / WizardConnect each as its own form). The new UX is: one tabbed modal, everywhere. Portal was the one page still shipping the legacy cards. Replaces the whole <section id='signin'> with a single launcher card ('🔑 Sign in or create wallet' → opens the shared modal). The old handlers (, , etc.) are comment-blocked out; new script uses window.siriusSignInWallet(). ?mode=new|import|wc|unlock auto-opens the modal at that tab (the same handler dropdown items use). If the user arrives with a siriusProfile but no in-memory wallet (e.g., they signed in on another page), portal opens the modal at Unlock (or Import when no saved wallet). Sign-out delegates to the shared signOutUi(). Cross-tab and same-tab profile changes both re-adopt. register-flow.js: finishSignIn now sets window.siriusWallet so portal (and any other page loaded in the same tab) can pick the wallet up without re-prompting for a password. In-memory only — reload/nav clears it, and the profile listener falls through to Unlock.
2026-09-08 02:35:56 +02:00
window.siriusWallet = w;
fix(sirius-x): sign-in Done unblocks portal; session survives reload Two issues reported after an Import sign-in: 1. Done button was stuck — user saw the ✓ Signed in screen but the portal never switched to the names view. Root cause: finishSignIn fired siriusProfileChanged BEFORE setting window.siriusWallet, so the portal's listener called adoptWalletFromModal() while window.siriusWallet was still null, saw no wallet, and did nothing. Fix: expose the live wallet BEFORE writeProfile so the sync listener sees it and can enterPortal() immediately. 2. Every reload asked for the password again. Cache the wallet's mnemonic in sessionStorage on sign-in — same tab (or a page reload) rebuilds the BuiltInWallet silently via BuiltInWallet.fromMnemonic; a full browser close clears sessionStorage and the user is back at the Unlock tab. sessionStorage is per-origin per-tab so an XSS on Sirius.X pages would still be able to read it — that's the tradeoff for the convenience. Chipnet only; mainnet gets the PIN escrow pattern (3 wrong PIN tries → escalate to password) that Digibyte.x/web already uses. PIN implementation is deferred to its own commit. portal.html adoptWalletFromModal now tries sessionStorage after the in-memory check; register-flow.js startFlow/startTldFlow do the same via a new async adoptSessionWalletAsync so name and TLD mints on any page reuse the session wallet with no re-prompt. profile-menu.js sign-out clears sessionStorage + window.siriusWallet so signing out really does drop the user.
2026-09-09 01:15:14 +02:00
writeProfile({ address: w.address, tokenAddress: w.tokenAddress, source: w.source ?? "seed" });
feat(sirius-x): dashboard with sidebar, persistent sign-in, full DNS panel The portal was a flat page with tabs that asked for the password or PIN on every visit and offered little beyond a records form. Owners need a control panel they can live in. Sign in once: the recovery phrase is kept encrypted under a non-extractable browser key (IndexedDB) so the next visit opens the dashboard silently; sign-out or the Settings toggle destroys it. Payments approve with one click unless "Ask for PIN before payments" is on. Dashboard: left menu (Overview, Domain names, My TLD list, Wallet, Register name/TLD, Settings). Per-name detail with a summary, a DNS record table (A, AAAA, CNAME, MX, TXT, NS, SRV, CAA) that signs the manifest, content & hosting (h, s3, p, ip, tls), a redirect tab (u), ownership transfer (UPD that re-issues the certificate to the recipient) and zone-file/JSON export. Per-TLD detail with policy, on/off, owner registration and the public list of names under it. Overview flags names that point nowhere or lack DNS.
2026-09-17 01:09:20 +02:00
// Persistent device session (js/session.js): remember the phrase under a
// non-extractable browser key so the next visit signs in silently. Only
// for the built-in wallet — external (WizardConnect) sessions cannot be
// resumed without the other wallet.
if (w?.mnemonic && window.siriusSession?.remember) {
window.siriusSession.remember(w.mnemonic, { accountPath: w.accountPath }).catch(() => {});
}
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
if (state.signInOnly) {
render(`<h3><span class="ok">✓</span> Signed in</h3>
<p class="sub">You are signed in as <span class="mono">${esc(w.address)}</span>. Names you own
will appear in the wallet dropdown; the same wallet signs record edits and new registrations.</p>
<div class="row end"><button class="btn acid" id="fin">Done</button></div>`);
$("fin").onclick = close;
return true;
}
return false;
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
}
$("sirius-reg-close").onclick = close;
modal.addEventListener("click", (e) => { if (e.target === modal) close(); });
fix(sirius-x/register-flow): inline render actually writes to the inline mount renderSignInInline() reassigned the module-level 'sheet' variable to the host page's container, but render() had been shadowing that with a separate 'mountTarget' constant captured at module init — so every step kept writing into the modal sheet instead of the inline container. Portal.html therefore showed an empty #signin-inline while the tabs + form rendered off-screen inside the (closed) modal. Drop mountTarget entirely and let render() write directly into 'sheet'. 'sheet' is already the reassignable target for both modal and inline paths, and renderSignInInline / close() already keep it in sync.
2026-09-08 13:06:16 +02:00
// Step functions render into `sheet`, which is reassigned per call by
// renderSignInInline() when the flow is mounted inline on a host page
// (portal.html). Modal by default. Direct write — no separate variable
// needed since `sheet` above is the single mutable target.
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
function render(html) { sheet.innerHTML = html; }
feat(sirius-x): admin TLD hide/unhide + tabbed sign-in modal (4 direct actions) Two features: 1. Operator can hide TLDs from the public /api/tlds listing so hidden TLDs stop appearing in name-search UIs. On-chain registrations under a hidden TLD keep resolving — this is a UX filter, not enforcement. Gateway (public-gateway.mjs): - Persistent HIDDEN_TLDS set backed by hidden-tlds.json next to the service script - GET /api/tld-visibility -> {hidden:[...]} (public) - POST /api/tld-visibility -> updates the list (operator-gated by Bearer BNS_OPERATOR_TOKEN env var; if unset, all writes refused so we default-deny) - /api/tlds filters out HIDDEN_TLDS; add ?include_hidden=1 to see everything (used by the admin panel to show all rows) - Operator token installed via systemd override on the VPS Admin panel: - New 'Operator token' card at the top of the TLD-registry section; token stored in sessionStorage (not localStorage) so a full browser close forgets it - Each TLD row got a 'Hidden from public' checkbox that POSTs on toggle and refreshes the table; failures roll back the checkbox and surface the error next to the token field 2. Wallet dropdown restored to 4 direct actions (Unlock / Create a wallet / Import a wallet / WizardConnect) and the shared mint/sign-in modal grew a tab strip so users can switch between the four wallet actions from any step without going back to a choice screen. register-flow.js: - renderTabs(active) prepended to stepCreate/stepImport/stepUnlock/ stepExternal when signInOnly is set. Unlock tab only appears when a saved wallet exists. - Delegated click handler on the sheet routes tab clicks to the matching step; switching away from a live WC session tears it down first so we don't leak WebSockets. profile-menu.js: - Restored 4-item onboarding menu (Create/Import/WC plus Unlock when saved). Each item is a direct entry point; the tabbed modal lets the user pivot to any other option without closing. Cache-buster bumped on all 8 sirius-x pages to ?v=20260908tabs.
2026-09-08 02:19:41 +02:00
// Tab bar for sign-in mode — lets the user jump between the four wallet
// actions without going back to a wallet-choice screen. Prepended to the
// sheet content by each sign-in step. Only shown in signInOnly mode.
function renderTabs(active) {
if (!state.signInOnly) return "";
const saved = BNS.BuiltInWallet.exists();
feat(sirius-x/signin): Unlock tab always visible; friendly copy when empty Unlock tab used to be hidden when no saved wallet existed on the device — so a fresh browser saw a 3-tab strip, and a returning browser saw a 4-tab strip. Inconsistent, and users kept asking where Unlock went. Now Unlock is always the first tab: - if a saved wallet exists, stepUnlock() renders the usual password form (nothing else changes) - if no saved wallet, stepUnlock() renders 'No wallet on this device' with a one-line explanation and two shortcut buttons — 📥 Import and 🆕 Create — that jump straight to those tabs Same tab bar renders in all cases so the layout is stable across sessions and between devices.
2026-09-09 00:47:32 +02:00
// The four tabs are always present so the layout is stable across sessions.
// When there is no saved wallet on this device, the Unlock tab still shows
// — clicking it lands on a stepUnlock screen that explains why unlock is
// not available and offers a shortcut to Create or Import instead.
const tabs = [
["unlock", "🔓 Unlock", saved ? "Wallet stored on this device" : "No saved wallet on this device"],
["new", "🆕 Create", "Sign up · fresh phrase"],
["import", "📥 Import", "Sign in · seed you have"],
["wc", "🔗 WizardConnect", "Cashonize / Paytaca"],
];
feat(sirius-x): admin TLD hide/unhide + tabbed sign-in modal (4 direct actions) Two features: 1. Operator can hide TLDs from the public /api/tlds listing so hidden TLDs stop appearing in name-search UIs. On-chain registrations under a hidden TLD keep resolving — this is a UX filter, not enforcement. Gateway (public-gateway.mjs): - Persistent HIDDEN_TLDS set backed by hidden-tlds.json next to the service script - GET /api/tld-visibility -> {hidden:[...]} (public) - POST /api/tld-visibility -> updates the list (operator-gated by Bearer BNS_OPERATOR_TOKEN env var; if unset, all writes refused so we default-deny) - /api/tlds filters out HIDDEN_TLDS; add ?include_hidden=1 to see everything (used by the admin panel to show all rows) - Operator token installed via systemd override on the VPS Admin panel: - New 'Operator token' card at the top of the TLD-registry section; token stored in sessionStorage (not localStorage) so a full browser close forgets it - Each TLD row got a 'Hidden from public' checkbox that POSTs on toggle and refreshes the table; failures roll back the checkbox and surface the error next to the token field 2. Wallet dropdown restored to 4 direct actions (Unlock / Create a wallet / Import a wallet / WizardConnect) and the shared mint/sign-in modal grew a tab strip so users can switch between the four wallet actions from any step without going back to a choice screen. register-flow.js: - renderTabs(active) prepended to stepCreate/stepImport/stepUnlock/ stepExternal when signInOnly is set. Unlock tab only appears when a saved wallet exists. - Delegated click handler on the sheet routes tab clicks to the matching step; switching away from a live WC session tears it down first so we don't leak WebSockets. profile-menu.js: - Restored 4-item onboarding menu (Create/Import/WC plus Unlock when saved). Each item is a direct entry point; the tabbed modal lets the user pivot to any other option without closing. Cache-buster bumped on all 8 sirius-x pages to ?v=20260908tabs.
2026-09-08 02:19:41 +02:00
return `
<div class="signin-tabs" role="tablist">
${tabs.map(([id, label, hint]) => `
<button role="tab" data-tab="${id}" class="${id === active ? "active" : ""}"
title="${esc(hint)}">${label}</button>
`).join("")}
</div>
`;
}
fix(sirius-x/register-flow): inline render actually writes to the inline mount renderSignInInline() reassigned the module-level 'sheet' variable to the host page's container, but render() had been shadowing that with a separate 'mountTarget' constant captured at module init — so every step kept writing into the modal sheet instead of the inline container. Portal.html therefore showed an empty #signin-inline while the tabs + form rendered off-screen inside the (closed) modal. Drop mountTarget entirely and let render() write directly into 'sheet'. 'sheet' is already the reassignable target for both modal and inline paths, and renderSignInInline / close() already keep it in sync.
2026-09-08 13:06:16 +02:00
// Wire tab clicks — document-level delegation so both the modal sheet and
// any inline container hosting the tabs work with one listener. Switching
// away from a live WC session tears it down first so we don't leak
// connections. Guarded to only match .signin-tabs buttons we render.
document.addEventListener("click", async (e) => {
const t = e.target.closest(".signin-tabs [data-tab]");
feat(sirius-x): admin TLD hide/unhide + tabbed sign-in modal (4 direct actions) Two features: 1. Operator can hide TLDs from the public /api/tlds listing so hidden TLDs stop appearing in name-search UIs. On-chain registrations under a hidden TLD keep resolving — this is a UX filter, not enforcement. Gateway (public-gateway.mjs): - Persistent HIDDEN_TLDS set backed by hidden-tlds.json next to the service script - GET /api/tld-visibility -> {hidden:[...]} (public) - POST /api/tld-visibility -> updates the list (operator-gated by Bearer BNS_OPERATOR_TOKEN env var; if unset, all writes refused so we default-deny) - /api/tlds filters out HIDDEN_TLDS; add ?include_hidden=1 to see everything (used by the admin panel to show all rows) - Operator token installed via systemd override on the VPS Admin panel: - New 'Operator token' card at the top of the TLD-registry section; token stored in sessionStorage (not localStorage) so a full browser close forgets it - Each TLD row got a 'Hidden from public' checkbox that POSTs on toggle and refreshes the table; failures roll back the checkbox and surface the error next to the token field 2. Wallet dropdown restored to 4 direct actions (Unlock / Create a wallet / Import a wallet / WizardConnect) and the shared mint/sign-in modal grew a tab strip so users can switch between the four wallet actions from any step without going back to a choice screen. register-flow.js: - renderTabs(active) prepended to stepCreate/stepImport/stepUnlock/ stepExternal when signInOnly is set. Unlock tab only appears when a saved wallet exists. - Delegated click handler on the sheet routes tab clicks to the matching step; switching away from a live WC session tears it down first so we don't leak WebSockets. profile-menu.js: - Restored 4-item onboarding menu (Create/Import/WC plus Unlock when saved). Each item is a direct entry point; the tabbed modal lets the user pivot to any other option without closing. Cache-buster bumped on all 8 sirius-x pages to ?v=20260908tabs.
2026-09-08 02:19:41 +02:00
if (!t) return;
const which = t.dataset.tab;
if (which !== "wc" && state.session) {
try { await state.session.disconnect(); } catch {}
state.session = null;
}
if (which === "unlock") stepUnlock();
else if (which === "new") stepCreate();
else if (which === "import") stepImport();
else if (which === "wc") stepExternal();
});
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
function err(e) {
sheet.querySelectorAll(".err").forEach((n) => n.remove());
const box = document.createElement("div");
box.className = "err";
box.textContent = e?.message ?? String(e);
sheet.appendChild(box);
}
async function client() {
if (!state.client) state.client = await BNS.connect();
return state.client;
}
feat(sirius-x): show mint prices; reuse unlocked wallet for TLD/name mint Two things: 1. Reuse the wallet the user already unlocked (adoptSignedInWallet). startFlow / startTldFlow were always calling stepWallet(), which showed the four-option wallet-choice and then prompted for the password again on 'Unlock'. Right after signing in, that meant entering the password twice to buy a TLD. Now both flows check window.siriusWallet at start and, if it's populated (built-in wallet in memory, or a WC-wrapper with a live session), skip straight to stepFund with state.wallet already set. Password is only asked when there is no in-memory wallet to reuse. 2. Prices are visible on the landing card + tld.html search: - name: '≈ 10,000 sat service fee · 1,300 sat chain dust · < 1 ¢' with a note that the 90/10 split applies (TLD owner gets 90 %) - TLD: '≈ 1,250,000 sat · ≈ ' with the incentive line ('you earn 90 % of the fee on every name registered under your TLD — forever, no renewals') Both labelled 'chipnet placeholder' — mainnet will price by label length via an on-chain oracle. PIN as a lighter approval than the full password is a bigger design change (encryption key derivation, cache lifetime, revocation) — not in this commit; adopting the already-unlocked in-memory wallet is the fix that removes the password-again symptom for now.
2026-09-09 00:30:05 +02:00
// If the user already unlocked a wallet in this tab (via inline sign-in on
// portal.html or a prior mint), the register/TLD mint flow can skip the
// wallet-choice step entirely and go straight to Fund / Confirm. That's
// what stops the flow from asking for the password a second time on a
// TLD buy right after unlocking.
function adoptSignedInWallet() {
if (window.siriusWallet && !state.wallet) {
state.wallet = window.siriusWallet;
// WC-signed-in wallets carry a `session`; keep it plumbed for the mint.
if (window.siriusWallet.source === "wc" && window.siriusWallet.session) {
state.session = window.siriusWallet.session;
}
return true;
}
return false;
}
feat(sirius-x): dashboard with sidebar, persistent sign-in, full DNS panel The portal was a flat page with tabs that asked for the password or PIN on every visit and offered little beyond a records form. Owners need a control panel they can live in. Sign in once: the recovery phrase is kept encrypted under a non-extractable browser key (IndexedDB) so the next visit opens the dashboard silently; sign-out or the Settings toggle destroys it. Payments approve with one click unless "Ask for PIN before payments" is on. Dashboard: left menu (Overview, Domain names, My TLD list, Wallet, Register name/TLD, Settings). Per-name detail with a summary, a DNS record table (A, AAAA, CNAME, MX, TXT, NS, SRV, CAA) that signs the manifest, content & hosting (h, s3, p, ip, tls), a redirect tab (u), ownership transfer (UPD that re-issues the certificate to the recipient) and zone-file/JSON export. Per-TLD detail with policy, on/off, owner registration and the public list of names under it. Overview flags names that point nowhere or lack DNS.
2026-09-17 01:09:20 +02:00
// Return the live wallet if one is already in memory; otherwise try the
// persistent device session (js/session.js) — the phrase is decrypted with
// a browser-held key, never stored in plaintext. Falls back to false, which
// sends the flow to the wallet-choice / Unlock screen.
let restoring = null;
async function restoreSessionWallet() {
if (window.siriusWallet) return window.siriusWallet;
if (!window.siriusSession?.restore) return null;
if (!restoring) {
restoring = (async () => {
try {
const s = await window.siriusSession.restore();
if (!s?.mnemonic) return null;
const w = s.accountPath
? await BNS.BuiltInWallet.fromMnemonic(s.mnemonic, undefined, s.accountPath)
: await BNS.BuiltInWallet.fromMnemonic(s.mnemonic);
if (!window.siriusWallet) {
window.siriusWallet = w;
// Keep the profile breadcrumb in step (address may have been
// cleared by a sign-out in another tab that did not reach here).
writeProfile({ address: w.address, tokenAddress: w.tokenAddress, source: "seed" });
}
return window.siriusWallet;
} catch { return null; }
finally { restoring = null; }
})();
}
return restoring;
}
window.siriusRestoreSession = restoreSessionWallet;
fix(sirius-x): sign-in Done unblocks portal; session survives reload Two issues reported after an Import sign-in: 1. Done button was stuck — user saw the ✓ Signed in screen but the portal never switched to the names view. Root cause: finishSignIn fired siriusProfileChanged BEFORE setting window.siriusWallet, so the portal's listener called adoptWalletFromModal() while window.siriusWallet was still null, saw no wallet, and did nothing. Fix: expose the live wallet BEFORE writeProfile so the sync listener sees it and can enterPortal() immediately. 2. Every reload asked for the password again. Cache the wallet's mnemonic in sessionStorage on sign-in — same tab (or a page reload) rebuilds the BuiltInWallet silently via BuiltInWallet.fromMnemonic; a full browser close clears sessionStorage and the user is back at the Unlock tab. sessionStorage is per-origin per-tab so an XSS on Sirius.X pages would still be able to read it — that's the tradeoff for the convenience. Chipnet only; mainnet gets the PIN escrow pattern (3 wrong PIN tries → escalate to password) that Digibyte.x/web already uses. PIN implementation is deferred to its own commit. portal.html adoptWalletFromModal now tries sessionStorage after the in-memory check; register-flow.js startFlow/startTldFlow do the same via a new async adoptSessionWalletAsync so name and TLD mints on any page reuse the session wallet with no re-prompt. profile-menu.js sign-out clears sessionStorage + window.siriusWallet so signing out really does drop the user.
2026-09-09 01:15:14 +02:00
async function adoptSessionWalletAsync() {
feat(sirius-x): dashboard with sidebar, persistent sign-in, full DNS panel The portal was a flat page with tabs that asked for the password or PIN on every visit and offered little beyond a records form. Owners need a control panel they can live in. Sign in once: the recovery phrase is kept encrypted under a non-extractable browser key (IndexedDB) so the next visit opens the dashboard silently; sign-out or the Settings toggle destroys it. Payments approve with one click unless "Ask for PIN before payments" is on. Dashboard: left menu (Overview, Domain names, My TLD list, Wallet, Register name/TLD, Settings). Per-name detail with a summary, a DNS record table (A, AAAA, CNAME, MX, TXT, NS, SRV, CAA) that signs the manifest, content & hosting (h, s3, p, ip, tls), a redirect tab (u), ownership transfer (UPD that re-issues the certificate to the recipient) and zone-file/JSON export. Per-TLD detail with policy, on/off, owner registration and the public list of names under it. Overview flags names that point nowhere or lack DNS.
2026-09-17 01:09:20 +02:00
if (adoptSignedInWallet()) return true;
const w = await restoreSessionWallet();
if (w) return adoptSignedInWallet();
return false;
fix(sirius-x): sign-in Done unblocks portal; session survives reload Two issues reported after an Import sign-in: 1. Done button was stuck — user saw the ✓ Signed in screen but the portal never switched to the names view. Root cause: finishSignIn fired siriusProfileChanged BEFORE setting window.siriusWallet, so the portal's listener called adoptWalletFromModal() while window.siriusWallet was still null, saw no wallet, and did nothing. Fix: expose the live wallet BEFORE writeProfile so the sync listener sees it and can enterPortal() immediately. 2. Every reload asked for the password again. Cache the wallet's mnemonic in sessionStorage on sign-in — same tab (or a page reload) rebuilds the BuiltInWallet silently via BuiltInWallet.fromMnemonic; a full browser close clears sessionStorage and the user is back at the Unlock tab. sessionStorage is per-origin per-tab so an XSS on Sirius.X pages would still be able to read it — that's the tradeoff for the convenience. Chipnet only; mainnet gets the PIN escrow pattern (3 wrong PIN tries → escalate to password) that Digibyte.x/web already uses. PIN implementation is deferred to its own commit. portal.html adoptWalletFromModal now tries sessionStorage after the in-memory check; register-flow.js startFlow/startTldFlow do the same via a new async adoptSessionWalletAsync so name and TLD mints on any page reuse the session wallet with no re-prompt. profile-menu.js sign-out clears sessionStorage + window.siriusWallet so signing out really does drop the user.
2026-09-09 01:15:14 +02:00
}
async function startFlow(name, opts = {}) {
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
state.name = name;
feat(sirius-x): pencil Register icon + TLD mint via shared modal Two UX polishes: 1. Register-tab icon flipped from 🪪 (identification-card emoji, renders as a hollow box in system-ui fonts without extended emoji) to ✏️ (pencil), which reads as 'edit/create' and ships in every emoji font worth targeting. Changed across the nav on all 8 pages plus the footer injector's Product column. Kept the Register nav item — six items total in the nav, and from any subpage it's one click to the search on landing. 2. tld.html no longer duplicates the wallet-choice + mint flow inline. The Register button on a search result now hands the label off to the shared register-flow.js modal — same modal that name registration uses — via a new window.siriusRegisterTld(label, {serviceFeeSats}) entry point. register-flow.js grew: - startTldFlow / window.siriusRegisterTld: sets state.tld and walks the modal through wallet-choice → Fund → stepConfirmTld → stepRegisterTld → stepDoneTld - stepConfirmTld: shows label + fee + owner, no per-name quote - stepRegisterTld: dispatches to registerTldWithBuiltInWallet or registerTldWithExternalWallet based on state.wallet/state.session - stepDoneTld: 'X is yours' with txid + certificate id + operator address, no record editor (a TLD certificate has no records to set immediately) - stepWallet / stepExternalConfirm branch on state.tld so the modal heading and the WC-confirm path route correctly tld.html trimmed: removed the entire signin-section + mint-section plus their inline handlers (~250 lines gone). Now just search + registered-TLDs list + a delegator to the shared modal. If a user is already signed in via the wallet dropdown, the modal recognises the saved wallet ('Unlock my browser wallet' button appears) instead of asking them to sign in again on this page.
2026-09-08 00:10:11 +02:00
state.tld = null;
state.signInOnly = false;
feat(sirius-x): TLD owner panel — owner-set price, on/off switch, private TLDs A TLD owner needed to run their namespace without the operator: set what every name under the TLD sells for, take the TLD off the public registry for a while, and still register names under it themselves. Both settings live on chain in the TLD's TUPD records (`price`, `hidden`) because changes are rare and every client already walks the TLD beacon. The gateway's /api/tlds now carries records, owner, price_usd and hidden_by per TLD; pricing.js quotes the owner price ahead of the length tiers and only trusts a TLD_BEACON-sourced list; the register flow refuses hidden and frozen TLDs for the public but lets the owner through at the platform share only (the 90% owner cut would be paid to themselves). The portal's TLDs tab loads real holdings, shows price and on/off state, and gives each TLD a one-click switch, a price/policy editor and an inline "register a name under .tld" form. Docs and the design table describe the two new records.
2026-09-16 21:28:18 +02:00
// Service fee: the TLD owner's flat price when they set one, else the
// length tier (siriusPricing owns both so landing search badges, tld
// cards and this mint agree). Caller can override with
feat(sirius-x): tier-based label pricing; badges on search cards + TLD list Single source of truth (js/pricing.js) mirrored on landing, tld.html and the mint flow — same label always shows the same price everywhere. Name tiers (label part): 1 char $5.00 premium-1 2 chars $3.00 short-2 3 chars $2.00 short-3 4–5 chars $1.00 standard 6–7 chars $0.50 long 8–16 chars $0.25 extended 17+ chars $0.10 very-long all-digits ×0.5 (less brandable) contains hyphen ×0.7 TLD tiers (label part): 1 char $10.00 premium-1 2 chars $8.00 short-2 3 chars $6.00 short-3 4–8 chars $5.00 standard 9+ chars $4.00 long Rendering: - Landing #search-results: acid-tinted price badge on each available row; grid grew a fourth column so name + badge + price + button all sit on one line - tld.html search result-card: same price badge next to the Register button on available TLDs - tld.html registered-TLDs table: new 'Mint price' column showing the tier price for every registered TLD, so buyers see the pricing ladder next to concrete examples Mint pipe: - startFlow(name)/startTldFlow(label) resolve the label price via window.siriusPricing (default) but honour opts.serviceFeeSats when the caller passes one — leaves the door open for coupons / operator discounts / oracle overrides in a future revision without reshuffling call sites - The overridden service fee is threaded through quoteRegistration AND registerWithBuiltInWallet/registerWithExternalWallet so the confirm screen and the on-chain output agree Chipnet placeholder rate (250,000 sat/USD) stays in pricing.js; mainnet will swap in a live BCH/USD oracle. Operator-side discounts and coupon codes are the next iteration — deliberately not disclosed in this shipping copy.
2026-09-09 01:09:05 +02:00
// opts.serviceFeeSats when a coupon or manual price is in play.
feat(sirius-x): TLD owner panel — owner-set price, on/off switch, private TLDs A TLD owner needed to run their namespace without the operator: set what every name under the TLD sells for, take the TLD off the public registry for a while, and still register names under it themselves. Both settings live on chain in the TLD's TUPD records (`price`, `hidden`) because changes are rare and every client already walks the TLD beacon. The gateway's /api/tlds now carries records, owner, price_usd and hidden_by per TLD; pricing.js quotes the owner price ahead of the length tiers and only trusts a TLD_BEACON-sourced list; the register flow refuses hidden and frozen TLDs for the public but lets the owner through at the platform share only (the 90% owner cut would be paid to themselves). The portal's TLDs tab loads real holdings, shows price and on/off state, and gives each TLD a one-click switch, a price/policy editor and an inline "register a name under .tld" form. Docs and the design table describe the two new records.
2026-09-16 21:28:18 +02:00
const [label, tldRaw] = String(name).split(".");
const tld = tldRaw || "bch";
const sp = window.siriusPricing;
if (sp?.tldReady) await sp.tldReady();
// A TLD its owner switched off is private: the public cannot buy under
// it, but the owner still can (from the portal's TLDs tab). Frozen means
// nobody, owner included. Check against the signed-in wallet's addresses
// so the owner's own purchase goes through.
const mine = (window.siriusWallet?.watchedAddresses)
|| (window.siriusWallet?.address ? [window.siriusWallet.address] : [])
|| [];
const sell = sp?.tldSellable ? sp.tldSellable(tld, mine) : { ok: true, owner: false };
if (!sell.ok) {
open();
const why = sell.reason === "frozen"
? `The owner of <b>.${esc(tld)}</b> has frozen it — no new names are being registered under it right now.`
: `<b>.${esc(tld)}</b> is a private TLD — its owner has switched it off for the public. Only the owner can register names under it right now. Check back later or pick another TLD.`;
render(`<h3>${esc(name)} is not available</h3><p class="sub">${why}</p>
<div class="row end"><button class="btn ghost" id="back">Close</button></div>`);
$("back").onclick = close;
return;
}
const p = sp?.priceForName(label, tld);
state.ownerMint = !!sell.owner;
// Owner registering under their own TLD: they would receive 90% of the
// fee from themselves, so only the platform's share is charged. The
// registrar lib already routes the whole fee to the platform when the
// TLD owner is the buyer (no self-payment output).
const ownerRate = (sats) => (sats == null ? null : BigInt(sats) / 10n);
feat(sirius-x): tier-based label pricing; badges on search cards + TLD list Single source of truth (js/pricing.js) mirrored on landing, tld.html and the mint flow — same label always shows the same price everywhere. Name tiers (label part): 1 char $5.00 premium-1 2 chars $3.00 short-2 3 chars $2.00 short-3 4–5 chars $1.00 standard 6–7 chars $0.50 long 8–16 chars $0.25 extended 17+ chars $0.10 very-long all-digits ×0.5 (less brandable) contains hyphen ×0.7 TLD tiers (label part): 1 char $10.00 premium-1 2 chars $8.00 short-2 3 chars $6.00 short-3 4–8 chars $5.00 standard 9+ chars $4.00 long Rendering: - Landing #search-results: acid-tinted price badge on each available row; grid grew a fourth column so name + badge + price + button all sit on one line - tld.html search result-card: same price badge next to the Register button on available TLDs - tld.html registered-TLDs table: new 'Mint price' column showing the tier price for every registered TLD, so buyers see the pricing ladder next to concrete examples Mint pipe: - startFlow(name)/startTldFlow(label) resolve the label price via window.siriusPricing (default) but honour opts.serviceFeeSats when the caller passes one — leaves the door open for coupons / operator discounts / oracle overrides in a future revision without reshuffling call sites - The overridden service fee is threaded through quoteRegistration AND registerWithBuiltInWallet/registerWithExternalWallet so the confirm screen and the on-chain output agree Chipnet placeholder rate (250,000 sat/USD) stays in pricing.js; mainnet will swap in a live BCH/USD oracle. Operator-side discounts and coupon codes are the next iteration — deliberately not disclosed in this shipping copy.
2026-09-09 01:09:05 +02:00
state.nameFeeSats = opts.serviceFeeSats != null
? BigInt(opts.serviceFeeSats)
feat(sirius-x): TLD owner panel — owner-set price, on/off switch, private TLDs A TLD owner needed to run their namespace without the operator: set what every name under the TLD sells for, take the TLD off the public registry for a while, and still register names under it themselves. Both settings live on chain in the TLD's TUPD records (`price`, `hidden`) because changes are rare and every client already walks the TLD beacon. The gateway's /api/tlds now carries records, owner, price_usd and hidden_by per TLD; pricing.js quotes the owner price ahead of the length tiers and only trusts a TLD_BEACON-sourced list; the register flow refuses hidden and frozen TLDs for the public but lets the owner through at the platform share only (the 90% owner cut would be paid to themselves). The portal's TLDs tab loads real holdings, shows price and on/off state, and gives each TLD a one-click switch, a price/policy editor and an inline "register a name under .tld" form. Docs and the design table describe the two new records.
2026-09-16 21:28:18 +02:00
: (p ? (sell.owner ? ownerRate(p.sats) : p.sats) : null);
feat(sirius-x): pencil Register icon + TLD mint via shared modal Two UX polishes: 1. Register-tab icon flipped from 🪪 (identification-card emoji, renders as a hollow box in system-ui fonts without extended emoji) to ✏️ (pencil), which reads as 'edit/create' and ships in every emoji font worth targeting. Changed across the nav on all 8 pages plus the footer injector's Product column. Kept the Register nav item — six items total in the nav, and from any subpage it's one click to the search on landing. 2. tld.html no longer duplicates the wallet-choice + mint flow inline. The Register button on a search result now hands the label off to the shared register-flow.js modal — same modal that name registration uses — via a new window.siriusRegisterTld(label, {serviceFeeSats}) entry point. register-flow.js grew: - startTldFlow / window.siriusRegisterTld: sets state.tld and walks the modal through wallet-choice → Fund → stepConfirmTld → stepRegisterTld → stepDoneTld - stepConfirmTld: shows label + fee + owner, no per-name quote - stepRegisterTld: dispatches to registerTldWithBuiltInWallet or registerTldWithExternalWallet based on state.wallet/state.session - stepDoneTld: 'X is yours' with txid + certificate id + operator address, no record editor (a TLD certificate has no records to set immediately) - stepWallet / stepExternalConfirm branch on state.tld so the modal heading and the WC-confirm path route correctly tld.html trimmed: removed the entire signin-section + mint-section plus their inline handlers (~250 lines gone). Now just search + registered-TLDs list + a delegator to the shared modal. If a user is already signed in via the wallet dropdown, the modal recognises the saved wallet ('Unlock my browser wallet' button appears) instead of asking them to sign in again on this page.
2026-09-08 00:10:11 +02:00
open();
fix(sirius-x): sign-in Done unblocks portal; session survives reload Two issues reported after an Import sign-in: 1. Done button was stuck — user saw the ✓ Signed in screen but the portal never switched to the names view. Root cause: finishSignIn fired siriusProfileChanged BEFORE setting window.siriusWallet, so the portal's listener called adoptWalletFromModal() while window.siriusWallet was still null, saw no wallet, and did nothing. Fix: expose the live wallet BEFORE writeProfile so the sync listener sees it and can enterPortal() immediately. 2. Every reload asked for the password again. Cache the wallet's mnemonic in sessionStorage on sign-in — same tab (or a page reload) rebuilds the BuiltInWallet silently via BuiltInWallet.fromMnemonic; a full browser close clears sessionStorage and the user is back at the Unlock tab. sessionStorage is per-origin per-tab so an XSS on Sirius.X pages would still be able to read it — that's the tradeoff for the convenience. Chipnet only; mainnet gets the PIN escrow pattern (3 wrong PIN tries → escalate to password) that Digibyte.x/web already uses. PIN implementation is deferred to its own commit. portal.html adoptWalletFromModal now tries sessionStorage after the in-memory check; register-flow.js startFlow/startTldFlow do the same via a new async adoptSessionWalletAsync so name and TLD mints on any page reuse the session wallet with no re-prompt. profile-menu.js sign-out clears sessionStorage + window.siriusWallet so signing out really does drop the user.
2026-09-09 01:15:14 +02:00
if (await adoptSessionWalletAsync()) stepFund();
feat(sirius-x): show mint prices; reuse unlocked wallet for TLD/name mint Two things: 1. Reuse the wallet the user already unlocked (adoptSignedInWallet). startFlow / startTldFlow were always calling stepWallet(), which showed the four-option wallet-choice and then prompted for the password again on 'Unlock'. Right after signing in, that meant entering the password twice to buy a TLD. Now both flows check window.siriusWallet at start and, if it's populated (built-in wallet in memory, or a WC-wrapper with a live session), skip straight to stepFund with state.wallet already set. Password is only asked when there is no in-memory wallet to reuse. 2. Prices are visible on the landing card + tld.html search: - name: '≈ 10,000 sat service fee · 1,300 sat chain dust · < 1 ¢' with a note that the 90/10 split applies (TLD owner gets 90 %) - TLD: '≈ 1,250,000 sat · ≈ ' with the incentive line ('you earn 90 % of the fee on every name registered under your TLD — forever, no renewals') Both labelled 'chipnet placeholder' — mainnet will price by label length via an on-chain oracle. PIN as a lighter approval than the full password is a bigger design change (encryption key derivation, cache lifetime, revocation) — not in this commit; adopting the already-unlocked in-memory wallet is the fix that removes the password-again symptom for now.
2026-09-09 00:30:05 +02:00
else stepWallet();
feat(sirius-x): pencil Register icon + TLD mint via shared modal Two UX polishes: 1. Register-tab icon flipped from 🪪 (identification-card emoji, renders as a hollow box in system-ui fonts without extended emoji) to ✏️ (pencil), which reads as 'edit/create' and ships in every emoji font worth targeting. Changed across the nav on all 8 pages plus the footer injector's Product column. Kept the Register nav item — six items total in the nav, and from any subpage it's one click to the search on landing. 2. tld.html no longer duplicates the wallet-choice + mint flow inline. The Register button on a search result now hands the label off to the shared register-flow.js modal — same modal that name registration uses — via a new window.siriusRegisterTld(label, {serviceFeeSats}) entry point. register-flow.js grew: - startTldFlow / window.siriusRegisterTld: sets state.tld and walks the modal through wallet-choice → Fund → stepConfirmTld → stepRegisterTld → stepDoneTld - stepConfirmTld: shows label + fee + owner, no per-name quote - stepRegisterTld: dispatches to registerTldWithBuiltInWallet or registerTldWithExternalWallet based on state.wallet/state.session - stepDoneTld: 'X is yours' with txid + certificate id + operator address, no record editor (a TLD certificate has no records to set immediately) - stepWallet / stepExternalConfirm branch on state.tld so the modal heading and the WC-confirm path route correctly tld.html trimmed: removed the entire signin-section + mint-section plus their inline handlers (~250 lines gone). Now just search + registered-TLDs list + a delegator to the shared modal. If a user is already signed in via the wallet dropdown, the modal recognises the saved wallet ('Unlock my browser wallet' button appears) instead of asking them to sign in again on this page.
2026-09-08 00:10:11 +02:00
}
// Start a TLD mint. Same wallet-choice + fund flow as a name register, but
// the mint step calls registerTldWith(Built|External)Wallet instead of the
// name variant, and the "done" screen skips the record editor since a TLD
// certificate goes to the operator's token address as-is.
fix(sirius-x): sign-in Done unblocks portal; session survives reload Two issues reported after an Import sign-in: 1. Done button was stuck — user saw the ✓ Signed in screen but the portal never switched to the names view. Root cause: finishSignIn fired siriusProfileChanged BEFORE setting window.siriusWallet, so the portal's listener called adoptWalletFromModal() while window.siriusWallet was still null, saw no wallet, and did nothing. Fix: expose the live wallet BEFORE writeProfile so the sync listener sees it and can enterPortal() immediately. 2. Every reload asked for the password again. Cache the wallet's mnemonic in sessionStorage on sign-in — same tab (or a page reload) rebuilds the BuiltInWallet silently via BuiltInWallet.fromMnemonic; a full browser close clears sessionStorage and the user is back at the Unlock tab. sessionStorage is per-origin per-tab so an XSS on Sirius.X pages would still be able to read it — that's the tradeoff for the convenience. Chipnet only; mainnet gets the PIN escrow pattern (3 wrong PIN tries → escalate to password) that Digibyte.x/web already uses. PIN implementation is deferred to its own commit. portal.html adoptWalletFromModal now tries sessionStorage after the in-memory check; register-flow.js startFlow/startTldFlow do the same via a new async adoptSessionWalletAsync so name and TLD mints on any page reuse the session wallet with no re-prompt. profile-menu.js sign-out clears sessionStorage + window.siriusWallet so signing out really does drop the user.
2026-09-09 01:15:14 +02:00
async function startTldFlow(label, opts = {}) {
feat(sirius-x): pencil Register icon + TLD mint via shared modal Two UX polishes: 1. Register-tab icon flipped from 🪪 (identification-card emoji, renders as a hollow box in system-ui fonts without extended emoji) to ✏️ (pencil), which reads as 'edit/create' and ships in every emoji font worth targeting. Changed across the nav on all 8 pages plus the footer injector's Product column. Kept the Register nav item — six items total in the nav, and from any subpage it's one click to the search on landing. 2. tld.html no longer duplicates the wallet-choice + mint flow inline. The Register button on a search result now hands the label off to the shared register-flow.js modal — same modal that name registration uses — via a new window.siriusRegisterTld(label, {serviceFeeSats}) entry point. register-flow.js grew: - startTldFlow / window.siriusRegisterTld: sets state.tld and walks the modal through wallet-choice → Fund → stepConfirmTld → stepRegisterTld → stepDoneTld - stepConfirmTld: shows label + fee + owner, no per-name quote - stepRegisterTld: dispatches to registerTldWithBuiltInWallet or registerTldWithExternalWallet based on state.wallet/state.session - stepDoneTld: 'X is yours' with txid + certificate id + operator address, no record editor (a TLD certificate has no records to set immediately) - stepWallet / stepExternalConfirm branch on state.tld so the modal heading and the WC-confirm path route correctly tld.html trimmed: removed the entire signin-section + mint-section plus their inline handlers (~250 lines gone). Now just search + registered-TLDs list + a delegator to the shared modal. If a user is already signed in via the wallet dropdown, the modal recognises the saved wallet ('Unlock my browser wallet' button appears) instead of asking them to sign in again on this page.
2026-09-08 00:10:11 +02:00
state.name = `.${label}`; // used for headings only
state.tld = { label, serviceFeeSats: BigInt(opts.serviceFeeSats ?? 0n) };
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
state.signInOnly = false;
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
open();
fix(sirius-x): sign-in Done unblocks portal; session survives reload Two issues reported after an Import sign-in: 1. Done button was stuck — user saw the ✓ Signed in screen but the portal never switched to the names view. Root cause: finishSignIn fired siriusProfileChanged BEFORE setting window.siriusWallet, so the portal's listener called adoptWalletFromModal() while window.siriusWallet was still null, saw no wallet, and did nothing. Fix: expose the live wallet BEFORE writeProfile so the sync listener sees it and can enterPortal() immediately. 2. Every reload asked for the password again. Cache the wallet's mnemonic in sessionStorage on sign-in — same tab (or a page reload) rebuilds the BuiltInWallet silently via BuiltInWallet.fromMnemonic; a full browser close clears sessionStorage and the user is back at the Unlock tab. sessionStorage is per-origin per-tab so an XSS on Sirius.X pages would still be able to read it — that's the tradeoff for the convenience. Chipnet only; mainnet gets the PIN escrow pattern (3 wrong PIN tries → escalate to password) that Digibyte.x/web already uses. PIN implementation is deferred to its own commit. portal.html adoptWalletFromModal now tries sessionStorage after the in-memory check; register-flow.js startFlow/startTldFlow do the same via a new async adoptSessionWalletAsync so name and TLD mints on any page reuse the session wallet with no re-prompt. profile-menu.js sign-out clears sessionStorage + window.siriusWallet so signing out really does drop the user.
2026-09-09 01:15:14 +02:00
if (await adoptSessionWalletAsync()) stepFund();
feat(sirius-x): show mint prices; reuse unlocked wallet for TLD/name mint Two things: 1. Reuse the wallet the user already unlocked (adoptSignedInWallet). startFlow / startTldFlow were always calling stepWallet(), which showed the four-option wallet-choice and then prompted for the password again on 'Unlock'. Right after signing in, that meant entering the password twice to buy a TLD. Now both flows check window.siriusWallet at start and, if it's populated (built-in wallet in memory, or a WC-wrapper with a live session), skip straight to stepFund with state.wallet already set. Password is only asked when there is no in-memory wallet to reuse. 2. Prices are visible on the landing card + tld.html search: - name: '≈ 10,000 sat service fee · 1,300 sat chain dust · < 1 ¢' with a note that the 90/10 split applies (TLD owner gets 90 %) - TLD: '≈ 1,250,000 sat · ≈ ' with the incentive line ('you earn 90 % of the fee on every name registered under your TLD — forever, no renewals') Both labelled 'chipnet placeholder' — mainnet will price by label length via an on-chain oracle. PIN as a lighter approval than the full password is a bigger design change (encryption key derivation, cache lifetime, revocation) — not in this commit; adopting the already-unlocked in-memory wallet is the fix that removes the password-again symptom for now.
2026-09-09 00:30:05 +02:00
else stepWallet();
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
}
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
// Sign-in-only entry point for the nav wallet dropdown. mode = 'new' opens
// the "create wallet" step directly, 'import' opens "import phrase", 'wc'
// starts a WizardConnect session. On success the flow writes siriusProfile
// and closes — no name context, no Fund/Confirm.
function startSignIn(mode) {
feat(sirius-x): choice-first wallet UX, Bitcoin Cash Domain Names in Theseus copy Two changes: 1. Wallet dropdown simplified from three direct-action items into one 'Sign in or create wallet' launcher (plus 🔓 Unlock when a saved wallet is present). The single item opens the shared modal at stepWallet — the choice screen showing all four options (Unlock / Create / Import / WizardConnect) as clear cards. Clicking a card reveals its form. Users see the options first, then commit to a path, instead of landing on a form for one path without seeing the others. register-flow.js's stepWallet grew a signInOnly-aware header ('Sign in or create a wallet' / 'Pick one. Your keys stay in this browser') so the choice screen reads as sign-in context, not a name mint. startSignIn still accepts direct-mode entry points (new/import/wc/ unlock) for deep-links like portal.html?mode=X, but the nav dropdown funnels to 'choose' for the choice-first experience. 2. Theseus subpage copy updated per request: 'native .bch / BCNR name resolution built in' -> 'native Bitcoin Cash Domain Names resolution built in'. Meta description mirrored.
2026-09-08 01:43:35 +02:00
state.name = "your wallet"; // header text — used by stepWallet
feat(sirius-x): 🔓 Unlock my wallet in nav dropdown when a saved wallet exists Previously, the only way to unlock a wallet that had been saved in this browser was to click Register (name or TLD), open the modal, and pick 'Unlock my browser wallet' from the wallet-choice step. From the nav dropdown you could only start onboarding fresh (New / Import / WC). profile-menu.js now checks localStorage for the BuiltInWallet's storage key (bns.wallet.v1) at every render, and when a saved wallet is present inserts a '🔓 Unlock my wallet' item at the top of the not-signed-in dropdown — with a divider below it, so it reads as the primary action and the Onboarding options stay available for adding a different wallet. The dropdown click handler already lazy-loads register-flow.js and calls window.siriusSignInWallet(action); register-flow.js's startSignIn grew an 'unlock' mode that opens the modal directly at stepUnlock (the password prompt). Same success path as every other sign-in: on unlock success, siriusProfile is written and the modal closes with '✓ Signed in' — the nav pill flips to the address without a reload. Verified end-to-end on landing: saved wallet detected -> dropdown shows Unlock as first item -> click -> password -> '✓ Signed in' -> pill becomes 'qqyx49…zx8x seed ▾' with no reload. TLD mint from tld.html also verified end-to-end: search 'e2etldtest' -> Register -> modal -> Unlock -> password -> Fund -> Confirm (fee 1,250,000 sat + beacon dust ~1,300 sat) -> Register -> checking-availability -> loading-coins -> 'wallet is empty' (expected without chipnet funds; downstream code is the same registerTldWithBuiltInWallet path the CLI uses).
2026-09-08 00:24:54 +02:00
state.tld = null;
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
state.signInOnly = true;
open();
feat(sirius-x): choice-first wallet UX, Bitcoin Cash Domain Names in Theseus copy Two changes: 1. Wallet dropdown simplified from three direct-action items into one 'Sign in or create wallet' launcher (plus 🔓 Unlock when a saved wallet is present). The single item opens the shared modal at stepWallet — the choice screen showing all four options (Unlock / Create / Import / WizardConnect) as clear cards. Clicking a card reveals its form. Users see the options first, then commit to a path, instead of landing on a form for one path without seeing the others. register-flow.js's stepWallet grew a signInOnly-aware header ('Sign in or create a wallet' / 'Pick one. Your keys stay in this browser') so the choice screen reads as sign-in context, not a name mint. startSignIn still accepts direct-mode entry points (new/import/wc/ unlock) for deep-links like portal.html?mode=X, but the nav dropdown funnels to 'choose' for the choice-first experience. 2. Theseus subpage copy updated per request: 'native .bch / BCNR name resolution built in' -> 'native Bitcoin Cash Domain Names resolution built in'. Meta description mirrored.
2026-09-08 01:43:35 +02:00
// "choose" (default) shows the wallet-choice screen with all four options;
// the other modes are still supported as direct-action entry points from
// deep-links like portal.html?mode=new — but the nav dropdown funnels to
// "choose" so the user always sees the options first.
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
if (mode === "new") stepCreate();
else if (mode === "import") stepImport();
else if (mode === "wc") stepExternal();
feat(sirius-x): 🔓 Unlock my wallet in nav dropdown when a saved wallet exists Previously, the only way to unlock a wallet that had been saved in this browser was to click Register (name or TLD), open the modal, and pick 'Unlock my browser wallet' from the wallet-choice step. From the nav dropdown you could only start onboarding fresh (New / Import / WC). profile-menu.js now checks localStorage for the BuiltInWallet's storage key (bns.wallet.v1) at every render, and when a saved wallet is present inserts a '🔓 Unlock my wallet' item at the top of the not-signed-in dropdown — with a divider below it, so it reads as the primary action and the Onboarding options stay available for adding a different wallet. The dropdown click handler already lazy-loads register-flow.js and calls window.siriusSignInWallet(action); register-flow.js's startSignIn grew an 'unlock' mode that opens the modal directly at stepUnlock (the password prompt). Same success path as every other sign-in: on unlock success, siriusProfile is written and the modal closes with '✓ Signed in' — the nav pill flips to the address without a reload. Verified end-to-end on landing: saved wallet detected -> dropdown shows Unlock as first item -> click -> password -> '✓ Signed in' -> pill becomes 'qqyx49…zx8x seed ▾' with no reload. TLD mint from tld.html also verified end-to-end: search 'e2etldtest' -> Register -> modal -> Unlock -> password -> Fund -> Confirm (fee 1,250,000 sat + beacon dust ~1,300 sat) -> Register -> checking-availability -> loading-coins -> 'wallet is empty' (expected without chipnet funds; downstream code is the same registerTldWithBuiltInWallet path the CLI uses).
2026-09-08 00:24:54 +02:00
else if (mode === "unlock") stepUnlock();
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
else stepWallet();
}
fix(sirius-x/register-flow): inline render actually writes to the inline mount renderSignInInline() reassigned the module-level 'sheet' variable to the host page's container, but render() had been shadowing that with a separate 'mountTarget' constant captured at module init — so every step kept writing into the modal sheet instead of the inline container. Portal.html therefore showed an empty #signin-inline while the tabs + form rendered off-screen inside the (closed) modal. Drop mountTarget entirely and let render() write directly into 'sheet'. 'sheet' is already the reassignable target for both modal and inline paths, and renderSignInInline / close() already keep it in sync.
2026-09-08 13:06:16 +02:00
// Sign-in rendered inline on the host page (not in a modal). Pass a target
// element and portal-style tabs + form get painted into it. Used by
// portal.html so the "sign up / sign in" experience IS the page rather than
// an overlay on top of a launcher card.
function renderSignInInline(container, mode = "import") {
if (!container) return;
state.name = "your wallet";
state.tld = null;
state.signInOnly = true;
state.inlineTarget = container;
sheet = container;
// Give inline container the same visual bones as the modal sheet so the
// step content styling ports 1:1. Kept as a class so host CSS can override.
container.classList.add("sirius-inline-sheet");
if (mode === "new") stepCreate();
else if (mode === "import") stepImport();
else if (mode === "wc") stepExternal();
else if (mode === "unlock") stepUnlock();
else stepWallet();
}
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
// Public API
window.siriusRegisterName = startFlow;
feat(sirius-x): pencil Register icon + TLD mint via shared modal Two UX polishes: 1. Register-tab icon flipped from 🪪 (identification-card emoji, renders as a hollow box in system-ui fonts without extended emoji) to ✏️ (pencil), which reads as 'edit/create' and ships in every emoji font worth targeting. Changed across the nav on all 8 pages plus the footer injector's Product column. Kept the Register nav item — six items total in the nav, and from any subpage it's one click to the search on landing. 2. tld.html no longer duplicates the wallet-choice + mint flow inline. The Register button on a search result now hands the label off to the shared register-flow.js modal — same modal that name registration uses — via a new window.siriusRegisterTld(label, {serviceFeeSats}) entry point. register-flow.js grew: - startTldFlow / window.siriusRegisterTld: sets state.tld and walks the modal through wallet-choice → Fund → stepConfirmTld → stepRegisterTld → stepDoneTld - stepConfirmTld: shows label + fee + owner, no per-name quote - stepRegisterTld: dispatches to registerTldWithBuiltInWallet or registerTldWithExternalWallet based on state.wallet/state.session - stepDoneTld: 'X is yours' with txid + certificate id + operator address, no record editor (a TLD certificate has no records to set immediately) - stepWallet / stepExternalConfirm branch on state.tld so the modal heading and the WC-confirm path route correctly tld.html trimmed: removed the entire signin-section + mint-section plus their inline handlers (~250 lines gone). Now just search + registered-TLDs list + a delegator to the shared modal. If a user is already signed in via the wallet dropdown, the modal recognises the saved wallet ('Unlock my browser wallet' button appears) instead of asking them to sign in again on this page.
2026-09-08 00:10:11 +02:00
window.siriusRegisterTld = startTldFlow;
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
window.siriusSignInWallet = startSignIn;
fix(sirius-x/register-flow): inline render actually writes to the inline mount renderSignInInline() reassigned the module-level 'sheet' variable to the host page's container, but render() had been shadowing that with a separate 'mountTarget' constant captured at module init — so every step kept writing into the modal sheet instead of the inline container. Portal.html therefore showed an empty #signin-inline while the tabs + form rendered off-screen inside the (closed) modal. Drop mountTarget entirely and let render() write directly into 'sheet'. 'sheet' is already the reassignable target for both modal and inline paths, and renderSignInInline / close() already keep it in sync.
2026-09-08 13:06:16 +02:00
window.siriusRenderSignInInline = renderSignInInline;
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
// ---------- step 1: wallet choice ----------
function stepWallet() {
const saved = BNS.BuiltInWallet.exists();
feat(sirius-x): pencil Register icon + TLD mint via shared modal Two UX polishes: 1. Register-tab icon flipped from 🪪 (identification-card emoji, renders as a hollow box in system-ui fonts without extended emoji) to ✏️ (pencil), which reads as 'edit/create' and ships in every emoji font worth targeting. Changed across the nav on all 8 pages plus the footer injector's Product column. Kept the Register nav item — six items total in the nav, and from any subpage it's one click to the search on landing. 2. tld.html no longer duplicates the wallet-choice + mint flow inline. The Register button on a search result now hands the label off to the shared register-flow.js modal — same modal that name registration uses — via a new window.siriusRegisterTld(label, {serviceFeeSats}) entry point. register-flow.js grew: - startTldFlow / window.siriusRegisterTld: sets state.tld and walks the modal through wallet-choice → Fund → stepConfirmTld → stepRegisterTld → stepDoneTld - stepConfirmTld: shows label + fee + owner, no per-name quote - stepRegisterTld: dispatches to registerTldWithBuiltInWallet or registerTldWithExternalWallet based on state.wallet/state.session - stepDoneTld: 'X is yours' with txid + certificate id + operator address, no record editor (a TLD certificate has no records to set immediately) - stepWallet / stepExternalConfirm branch on state.tld so the modal heading and the WC-confirm path route correctly tld.html trimmed: removed the entire signin-section + mint-section plus their inline handlers (~250 lines gone). Now just search + registered-TLDs list + a delegator to the shared modal. If a user is already signed in via the wallet dropdown, the modal recognises the saved wallet ('Unlock my browser wallet' button appears) instead of asking them to sign in again on this page.
2026-09-08 00:10:11 +02:00
const kind = state.tld ? "TLD" : "name";
feat(sirius-x): choice-first wallet UX, Bitcoin Cash Domain Names in Theseus copy Two changes: 1. Wallet dropdown simplified from three direct-action items into one 'Sign in or create wallet' launcher (plus 🔓 Unlock when a saved wallet is present). The single item opens the shared modal at stepWallet — the choice screen showing all four options (Unlock / Create / Import / WizardConnect) as clear cards. Clicking a card reveals its form. Users see the options first, then commit to a path, instead of landing on a form for one path without seeing the others. register-flow.js's stepWallet grew a signInOnly-aware header ('Sign in or create a wallet' / 'Pick one. Your keys stay in this browser') so the choice screen reads as sign-in context, not a name mint. startSignIn still accepts direct-mode entry points (new/import/wc/ unlock) for deep-links like portal.html?mode=X, but the nav dropdown funnels to 'choose' for the choice-first experience. 2. Theseus subpage copy updated per request: 'native .bch / BCNR name resolution built in' -> 'native Bitcoin Cash Domain Names resolution built in'. Meta description mirrored.
2026-09-08 01:43:35 +02:00
const heading = state.signInOnly
? `Sign in <span style="color:var(--acid,#d6ff3d)">or</span> create a wallet`
: `Register ${esc(state.name)}`;
const intro = state.signInOnly
? `Pick one. Your keys stay in this browser — nothing is transmitted for sign-in.`
: `First, the wallet that will <b>own</b> the ${esc(kind)}. The certificate is minted straight to it — we never hold it.`;
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
render(`
feat(sirius-x): choice-first wallet UX, Bitcoin Cash Domain Names in Theseus copy Two changes: 1. Wallet dropdown simplified from three direct-action items into one 'Sign in or create wallet' launcher (plus 🔓 Unlock when a saved wallet is present). The single item opens the shared modal at stepWallet — the choice screen showing all four options (Unlock / Create / Import / WizardConnect) as clear cards. Clicking a card reveals its form. Users see the options first, then commit to a path, instead of landing on a form for one path without seeing the others. register-flow.js's stepWallet grew a signInOnly-aware header ('Sign in or create a wallet' / 'Pick one. Your keys stay in this browser') so the choice screen reads as sign-in context, not a name mint. startSignIn still accepts direct-mode entry points (new/import/wc/ unlock) for deep-links like portal.html?mode=X, but the nav dropdown funnels to 'choose' for the choice-first experience. 2. Theseus subpage copy updated per request: 'native .bch / BCNR name resolution built in' -> 'native Bitcoin Cash Domain Names resolution built in'. Meta description mirrored.
2026-09-08 01:43:35 +02:00
<h3>${heading}</h3>
<p class="sub">${intro}</p>
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
${saved ? `<button class="wopt" id="w-unlock"><span class="ic">🔓</span><span>
<b>Unlock my browser wallet</b>
<span>You already created one on this device.</span></span></button>` : ``}
<button class="wopt" id="w-new"><span class="ic">✨</span><span>
<b>Create a new wallet<span class="pill">easiest</span></b>
<span>Made here in your browser. You get a recovery phrase to write down — it is the only key.</span></span></button>
<button class="wopt" id="w-import"><span class="ic">🔑</span><span>
<b>Import a recovery phrase</b>
<span>Restore a wallet you already have, from its 12-word phrase.</span></span></button>
<button class="wopt" id="w-wiz"><span class="ic">🪄</span><span>
<b>Connect a wallet — WizardConnect<span class="pill">most private</span></b>
<span>Cashonize 0.9+ or Paytaca. Encrypted end-to-end over Nostr; the relay sees only
ciphertext. Your keys never leave your wallet.</span></span></button>
<div class="note" style="margin-top:18px">Everything below runs on <b>chipnet</b>, Bitcoin Cash's
test network. The coins are free and worth nothing — this is an alpha, and it is the honest
place to try it before real money is involved.</div>
`);
if (saved) $("w-unlock").onclick = stepUnlock;
$("w-new").onclick = stepCreate;
$("w-import").onclick = stepImport;
$("w-wiz").onclick = () => stepExternal("wizard");
}
// ---------- WizardConnect (external wallet) ----------
async function stepExternal() {
const label = "WizardConnect";
feat(sirius-x): admin TLD hide/unhide + tabbed sign-in modal (4 direct actions) Two features: 1. Operator can hide TLDs from the public /api/tlds listing so hidden TLDs stop appearing in name-search UIs. On-chain registrations under a hidden TLD keep resolving — this is a UX filter, not enforcement. Gateway (public-gateway.mjs): - Persistent HIDDEN_TLDS set backed by hidden-tlds.json next to the service script - GET /api/tld-visibility -> {hidden:[...]} (public) - POST /api/tld-visibility -> updates the list (operator-gated by Bearer BNS_OPERATOR_TOKEN env var; if unset, all writes refused so we default-deny) - /api/tlds filters out HIDDEN_TLDS; add ?include_hidden=1 to see everything (used by the admin panel to show all rows) - Operator token installed via systemd override on the VPS Admin panel: - New 'Operator token' card at the top of the TLD-registry section; token stored in sessionStorage (not localStorage) so a full browser close forgets it - Each TLD row got a 'Hidden from public' checkbox that POSTs on toggle and refreshes the table; failures roll back the checkbox and surface the error next to the token field 2. Wallet dropdown restored to 4 direct actions (Unlock / Create a wallet / Import a wallet / WizardConnect) and the shared mint/sign-in modal grew a tab strip so users can switch between the four wallet actions from any step without going back to a choice screen. register-flow.js: - renderTabs(active) prepended to stepCreate/stepImport/stepUnlock/ stepExternal when signInOnly is set. Unlock tab only appears when a saved wallet exists. - Delegated click handler on the sheet routes tab clicks to the matching step; switching away from a live WC session tears it down first so we don't leak WebSockets. profile-menu.js: - Restored 4-item onboarding menu (Create/Import/WC plus Unlock when saved). Each item is a direct entry point; the tabbed modal lets the user pivot to any other option without closing. Cache-buster bumped on all 8 sirius-x pages to ?v=20260908tabs.
2026-09-08 02:19:41 +02:00
render(`${renderTabs("wc")}<h3>Connect with ${esc(label)}</h3><p class="sub">Starting the connection…</p>`);
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
let session;
try {
const mod = await import("https://silentmode.st/js/wizardconnect.js");
session = await mod.openWizardSession({
dappName: BNS.REGISTRAR.wizardConnect.dappName,
dappIcon: BNS.REGISTRAR.wizardConnect.dappIcon,
prefix: BNS.REGISTRAR.addressPrefix,
crypto: {
pubkeyToAddress: BNS.pubkeyToAddress,
pubkeyToLockingBytecode: BNS.pubkeyToLockingBytecode,
binToHex: BNS.binToHex,
txidOfHex: BNS.txidOfHex,
},
});
} catch (e) {
render(`<h3>Could not start ${esc(label)}</h3><p class="sub">${esc(e.message)}</p>
<div class="row end"><button class="btn ghost" id="back">Back</button></div>`);
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
$("back").onclick = state.signInOnly ? close : stepWallet;
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
return;
}
const uri = session.qrUri ?? session.uri;
render(`
feat(sirius-x): admin TLD hide/unhide + tabbed sign-in modal (4 direct actions) Two features: 1. Operator can hide TLDs from the public /api/tlds listing so hidden TLDs stop appearing in name-search UIs. On-chain registrations under a hidden TLD keep resolving — this is a UX filter, not enforcement. Gateway (public-gateway.mjs): - Persistent HIDDEN_TLDS set backed by hidden-tlds.json next to the service script - GET /api/tld-visibility -> {hidden:[...]} (public) - POST /api/tld-visibility -> updates the list (operator-gated by Bearer BNS_OPERATOR_TOKEN env var; if unset, all writes refused so we default-deny) - /api/tlds filters out HIDDEN_TLDS; add ?include_hidden=1 to see everything (used by the admin panel to show all rows) - Operator token installed via systemd override on the VPS Admin panel: - New 'Operator token' card at the top of the TLD-registry section; token stored in sessionStorage (not localStorage) so a full browser close forgets it - Each TLD row got a 'Hidden from public' checkbox that POSTs on toggle and refreshes the table; failures roll back the checkbox and surface the error next to the token field 2. Wallet dropdown restored to 4 direct actions (Unlock / Create a wallet / Import a wallet / WizardConnect) and the shared mint/sign-in modal grew a tab strip so users can switch between the four wallet actions from any step without going back to a choice screen. register-flow.js: - renderTabs(active) prepended to stepCreate/stepImport/stepUnlock/ stepExternal when signInOnly is set. Unlock tab only appears when a saved wallet exists. - Delegated click handler on the sheet routes tab clicks to the matching step; switching away from a live WC session tears it down first so we don't leak WebSockets. profile-menu.js: - Restored 4-item onboarding menu (Create/Import/WC plus Unlock when saved). Each item is a direct entry point; the tabbed modal lets the user pivot to any other option without closing. Cache-buster bumped on all 8 sirius-x pages to ?v=20260908tabs.
2026-09-08 02:19:41 +02:00
${renderTabs("wc")}
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
<h3>Open your wallet</h3>
<p class="sub">Scan or paste this into ${esc(label)}-capable wallet, then approve the connection.</p>
<div class="addr"><code id="uri">${esc(uri)}</code><button class="btn ghost" id="copy">Copy</button></div>
<div class="note warn" style="margin-top:16px">Waiting for your wallet…
The link stays valid until you close this page.</div>
<div class="row end"><button class="btn ghost" id="cancel">Cancel</button></div>
`);
$("copy").onclick = () => navigator.clipboard?.writeText(uri);
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
$("cancel").onclick = async () => { try { await session.disconnect(); } catch {} (state.signInOnly ? close : stepWallet)(); };
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
try { await session.ready; } catch (e) { err(e); return; }
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
// Sign-in-only path: get the address and persist siriusProfile immediately,
// skip the whole "quote registration" branch since there is no name.
if (state.signInOnly) {
try {
const addresses = await session.getAddresses();
if (!addresses?.length) throw new Error("wallet returned no addresses");
state.session = session; // keep alive for record edits etc.
finishSignIn({
source: "wc",
address: addresses[0],
tokenAddress: BNS.toTokenAddress(addresses[0]),
watchedAddresses: addresses,
});
} catch (e) { err(e); }
return;
}
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
stepExternalConfirm(session, label);
}
async function stepExternalConfirm(session, label) {
render(`<h3>Connected</h3><p class="sub">Reading your wallet and building the registration…</p>`);
try {
const c = await client();
const addresses = await session.getAddresses();
const owner = addresses[0];
const balance = await BNS.getBalance(c, addresses);
const genesis = BNS.describeGenesisRequirement(balance.hasGenesisInput);
if (balance.sats === 0n) {
render(`<h3>That wallet is empty</h3>
<p class="sub">Fund <span class="mono">${esc(owner)}</span> with chipnet coins and reconnect.</p>
<div class="row end"><button class="btn ghost" id="back">Back</button></div>`);
$("back").onclick = async () => { try { await session.disconnect(); } catch {} stepWallet(); };
return;
}
feat(sirius-x): pencil Register icon + TLD mint via shared modal Two UX polishes: 1. Register-tab icon flipped from 🪪 (identification-card emoji, renders as a hollow box in system-ui fonts without extended emoji) to ✏️ (pencil), which reads as 'edit/create' and ships in every emoji font worth targeting. Changed across the nav on all 8 pages plus the footer injector's Product column. Kept the Register nav item — six items total in the nav, and from any subpage it's one click to the search on landing. 2. tld.html no longer duplicates the wallet-choice + mint flow inline. The Register button on a search result now hands the label off to the shared register-flow.js modal — same modal that name registration uses — via a new window.siriusRegisterTld(label, {serviceFeeSats}) entry point. register-flow.js grew: - startTldFlow / window.siriusRegisterTld: sets state.tld and walks the modal through wallet-choice → Fund → stepConfirmTld → stepRegisterTld → stepDoneTld - stepConfirmTld: shows label + fee + owner, no per-name quote - stepRegisterTld: dispatches to registerTldWithBuiltInWallet or registerTldWithExternalWallet based on state.wallet/state.session - stepDoneTld: 'X is yours' with txid + certificate id + operator address, no record editor (a TLD certificate has no records to set immediately) - stepWallet / stepExternalConfirm branch on state.tld so the modal heading and the WC-confirm path route correctly tld.html trimmed: removed the entire signin-section + mint-section plus their inline handlers (~250 lines gone). Now just search + registered-TLDs list + a delegator to the shared modal. If a user is already signed in via the wallet dropdown, the modal recognises the saved wallet ('Unlock my browser wallet' button appears) instead of asking them to sign in again on this page.
2026-09-08 00:10:11 +02:00
// TLD external path: keep the session, hand off to the TLD confirm/mint
// steps which know to call registerTldWithExternalWallet.
if (state.tld) { state.session = session; return stepConfirmTld(); }
feat(sirius-x): tier-based label pricing; badges on search cards + TLD list Single source of truth (js/pricing.js) mirrored on landing, tld.html and the mint flow — same label always shows the same price everywhere. Name tiers (label part): 1 char $5.00 premium-1 2 chars $3.00 short-2 3 chars $2.00 short-3 4–5 chars $1.00 standard 6–7 chars $0.50 long 8–16 chars $0.25 extended 17+ chars $0.10 very-long all-digits ×0.5 (less brandable) contains hyphen ×0.7 TLD tiers (label part): 1 char $10.00 premium-1 2 chars $8.00 short-2 3 chars $6.00 short-3 4–8 chars $5.00 standard 9+ chars $4.00 long Rendering: - Landing #search-results: acid-tinted price badge on each available row; grid grew a fourth column so name + badge + price + button all sit on one line - tld.html search result-card: same price badge next to the Register button on available TLDs - tld.html registered-TLDs table: new 'Mint price' column showing the tier price for every registered TLD, so buyers see the pricing ladder next to concrete examples Mint pipe: - startFlow(name)/startTldFlow(label) resolve the label price via window.siriusPricing (default) but honour opts.serviceFeeSats when the caller passes one — leaves the door open for coupons / operator discounts / oracle overrides in a future revision without reshuffling call sites - The overridden service fee is threaded through quoteRegistration AND registerWithBuiltInWallet/registerWithExternalWallet so the confirm screen and the on-chain output agree Chipnet placeholder rate (250,000 sat/USD) stays in pricing.js; mainnet will swap in a live BCH/USD oracle. Operator-side discounts and coupon codes are the next iteration — deliberately not disclosed in this shipping copy.
2026-09-09 01:09:05 +02:00
const feeOverride = state.nameFeeSats != null
? { serviceFee: { ...(BNS.REGISTRAR?.serviceFee ?? {}), sats: state.nameFeeSats } }
: {};
const quote = await BNS.quoteRegistration(c, { name: state.name, ownerAddress: owner, records: {}, ...feeOverride });
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
const rows = BNS.priceSummary(quote.costs).map((l) => `
<tr class="${l.total ? "total" : ""}"><td>${esc(l.label)}${l.note ? `<small>${esc(l.note)}</small>` : ""}</td>
<td>${sats(l.sats)} sat</td></tr>`).join("");
render(`
<h3>Confirm ${esc(quote.displayName)}</h3>
<p class="sub">Connected to ${esc(label)}. The certificate is minted to
<span class="mono">${esc(owner)}</span> — your wallet, your key.</p>
<table class="price">${rows}</table>
${genesis.ready ? "" : `<div class="note warn" style="margin-top:16px">
<b>Two approvals needed.</b> ${esc(genesis.explanation)}</div>`}
<div class="row end"><button class="btn ghost" id="back">Back</button>
<button class="btn acid" id="go">Register — approve in your wallet</button></div>
`);
$("back").onclick = async () => { try { await session.disconnect(); } catch {} stepWallet(); };
$("go").onclick = async () => {
render(`<h3>Approve in your wallet</h3>
<p class="sub">${esc(label)} has sent the transaction to your device. Check the details there
and approve. Do not close this tab.</p><div class="steps-log" id="log"></div>`);
const log = $("log");
const say = (s) => { const d = document.createElement("div"); d.textContent = s; log.appendChild(d); };
try {
const res = await BNS.registerWithExternalWallet(await client(), {
feat(sirius-x): tier-based label pricing; badges on search cards + TLD list Single source of truth (js/pricing.js) mirrored on landing, tld.html and the mint flow — same label always shows the same price everywhere. Name tiers (label part): 1 char $5.00 premium-1 2 chars $3.00 short-2 3 chars $2.00 short-3 4–5 chars $1.00 standard 6–7 chars $0.50 long 8–16 chars $0.25 extended 17+ chars $0.10 very-long all-digits ×0.5 (less brandable) contains hyphen ×0.7 TLD tiers (label part): 1 char $10.00 premium-1 2 chars $8.00 short-2 3 chars $6.00 short-3 4–8 chars $5.00 standard 9+ chars $4.00 long Rendering: - Landing #search-results: acid-tinted price badge on each available row; grid grew a fourth column so name + badge + price + button all sit on one line - tld.html search result-card: same price badge next to the Register button on available TLDs - tld.html registered-TLDs table: new 'Mint price' column showing the tier price for every registered TLD, so buyers see the pricing ladder next to concrete examples Mint pipe: - startFlow(name)/startTldFlow(label) resolve the label price via window.siriusPricing (default) but honour opts.serviceFeeSats when the caller passes one — leaves the door open for coupons / operator discounts / oracle overrides in a future revision without reshuffling call sites - The overridden service fee is threaded through quoteRegistration AND registerWithBuiltInWallet/registerWithExternalWallet so the confirm screen and the on-chain output agree Chipnet placeholder rate (250,000 sat/USD) stays in pricing.js; mainnet will swap in a live BCH/USD oracle. Operator-side discounts and coupon codes are the next iteration — deliberately not disclosed in this shipping copy.
2026-09-09 01:09:05 +02:00
session, name: state.name, ownerAddress: owner, records: {}, onProgress: say, ...feeOverride,
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
});
state.result = res;
state.session = session;
stepDone();
} catch (e) {
err(e);
const row = document.createElement("div"); row.className = "row end";
row.innerHTML = `<button class="btn ghost" id="back">Back</button>`;
sheet.appendChild(row);
$("back").onclick = () => stepExternalConfirm(session, label);
}
};
} catch (e) { err(e); }
}
// ---------- built-in: create ----------
function stepCreate() {
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
// The Register button flow lands here via stepWallet, so "Back" returns to
// the wallet-choice step. The sign-in dropdown calls stepCreate directly
// with no chosen name, so "Back" should just close the modal in that case.
const goBack = state.signInOnly ? close : stepWallet;
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
render(`
feat(sirius-x): admin TLD hide/unhide + tabbed sign-in modal (4 direct actions) Two features: 1. Operator can hide TLDs from the public /api/tlds listing so hidden TLDs stop appearing in name-search UIs. On-chain registrations under a hidden TLD keep resolving — this is a UX filter, not enforcement. Gateway (public-gateway.mjs): - Persistent HIDDEN_TLDS set backed by hidden-tlds.json next to the service script - GET /api/tld-visibility -> {hidden:[...]} (public) - POST /api/tld-visibility -> updates the list (operator-gated by Bearer BNS_OPERATOR_TOKEN env var; if unset, all writes refused so we default-deny) - /api/tlds filters out HIDDEN_TLDS; add ?include_hidden=1 to see everything (used by the admin panel to show all rows) - Operator token installed via systemd override on the VPS Admin panel: - New 'Operator token' card at the top of the TLD-registry section; token stored in sessionStorage (not localStorage) so a full browser close forgets it - Each TLD row got a 'Hidden from public' checkbox that POSTs on toggle and refreshes the table; failures roll back the checkbox and surface the error next to the token field 2. Wallet dropdown restored to 4 direct actions (Unlock / Create a wallet / Import a wallet / WizardConnect) and the shared mint/sign-in modal grew a tab strip so users can switch between the four wallet actions from any step without going back to a choice screen. register-flow.js: - renderTabs(active) prepended to stepCreate/stepImport/stepUnlock/ stepExternal when signInOnly is set. Unlock tab only appears when a saved wallet exists. - Delegated click handler on the sheet routes tab clicks to the matching step; switching away from a live WC session tears it down first so we don't leak WebSockets. profile-menu.js: - Restored 4-item onboarding menu (Create/Import/WC plus Unlock when saved). Each item is a direct entry point; the tabbed modal lets the user pivot to any other option without closing. Cache-buster bumped on all 8 sirius-x pages to ?v=20260908tabs.
2026-09-08 02:19:41 +02:00
${renderTabs("new")}
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
<h3>Create your wallet</h3>
<p class="sub">Generated in this browser. The phrase is never sent anywhere — not to us, not to anyone.</p>
<label for="pw">Password (encrypts the wallet on this device)</label>
<input type="password" id="pw" autocomplete="new-password" placeholder="at least 8 characters">
<label for="pw2">Repeat password</label>
<input type="password" id="pw2" autocomplete="new-password">
<div class="note warn" style="margin-top:16px"><b>There is no reset.</b> The password protects this
device; the recovery phrase you will see next <i>is</i> the wallet. Lose both and the name is gone
forever — that is what self-custody means.</div>
<div class="row end"><button class="btn ghost" id="back">Back</button>
<button class="btn acid" id="next">Generate phrase →</button></div>
`);
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
$("back").onclick = goBack;
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
$("next").onclick = async () => {
const pw = $("pw").value, pw2 = $("pw2").value;
if (pw.length < 8) return err(new Error("password must be at least 8 characters"));
if (pw !== pw2) return err(new Error("passwords do not match"));
try {
const wallet = await BNS.BuiltInWallet.create();
await wallet.save(pw);
state.wallet = wallet;
stepPhrase();
} catch (e) { err(e); }
};
}
function stepPhrase() {
const words = state.wallet.mnemonic.split(" ");
render(`
<h3>Write this down. Now.</h3>
<p class="sub">These 12 words are your wallet. Anyone who has them owns your names; if you lose them,
nobody — including us — can recover anything.</p>
<div class="phrase">${words.map((w,i)=>`<span><b>${i+1}</b>${esc(w)}</span>`).join("")}</div>
<div class="row"><button class="btn ghost" id="copy">Copy phrase</button></div>
<label class="chk"><input type="checkbox" id="ack">
<span>I have written the phrase down somewhere safe and offline. I understand it cannot be reset.</span></label>
<div class="row end"><button class="btn acid" id="next" disabled>Continue →</button></div>
`);
$("copy").onclick = () => navigator.clipboard?.writeText(state.wallet.mnemonic);
$("ack").onchange = (e) => { $("next").disabled = !e.target.checked; };
feat(sirius-x/signin): PIN escrow — encrypted-at-rest quick unlock, 3-strike password fallback Removes the sessionStorage plaintext-mnemonic cache (fixed under the same commit) and replaces it with a PIN-encrypted blob in localStorage. No plaintext secret ever touches disk or memory outside the live BuiltInWallet object. New js/pin-escrow.js — WebCrypto PBKDF2(50k) + AES-GCM(256). Public API on window.siriusPin: savePinBlob(mnemonic, pin), tryUnlock(pin), hasPin(), attemptsUsed(), attemptsRemaining(), clear(), MAX_ATTEMPTS. Iteration count is lighter than BuiltInWallet's 250k because a 4-6 digit PIN's key space is small anyway; the point is 'not plaintext at rest,' not brute-force resistance — the durable secret is the full password. register-flow.js: - After a fresh password unlock (Import / Create / Unlock), stepSetPin offers a 4-6 digit PIN with confirm — skippable with 'Not now'. Never overwrites an existing PIN blob. - stepUnlock now shows a numeric PIN pad when a PIN blob is present; the password field only appears when the user opts to 'Use password instead' or after the blob was wiped. - Wrong PIN → increment counter, surface 'N attempts left'. Third wrong PIN → wipe blob and route to a 'PIN reset' screen that hands off to the password form. - Correct PIN → decrypt the mnemonic in-browser, rebuild the BuiltInWallet, finishSignIn(). Attempt counter resets to 0. profile-menu.js: - Sign-out clears the PIN blob (via siriusPin.clear()) alongside the siriusProfile so the device isn't quick-unlockable with a stale PIN. All pages that host the sign-in flow now include pin-escrow.js. Same tabbed layout in stepUnlock — the PIN pad and the password field both live under 🔓 Unlock, transparent tab-switch works exactly as before. Verified live: - Fresh Import → 'Set a PIN' step → 4242 confirmed → blob written - Reload → PIN pad, 3 attempts remaining - Correct PIN 4242 → signed in, counter resets to 0 - 3 wrong PIN attempts → 'Wrong PIN — N attempts left' per attempt, then 'PIN locked — enter your full password to continue', blob wiped, next reload shows the password form - localStorage contains only ciphertext + salt + iv + counter; no plaintext mnemonic anywhere on disk or in sessionStorage.
2026-09-09 01:31:18 +02:00
$("next").onclick = () => stepSetPin(state.wallet, () => { if (!finishSignIn(state.wallet)) stepFund(); });
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
}
// ---------- built-in: import / unlock ----------
function stepImport() {
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
const goBack = state.signInOnly ? close : stepWallet;
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
render(`
feat(sirius-x): admin TLD hide/unhide + tabbed sign-in modal (4 direct actions) Two features: 1. Operator can hide TLDs from the public /api/tlds listing so hidden TLDs stop appearing in name-search UIs. On-chain registrations under a hidden TLD keep resolving — this is a UX filter, not enforcement. Gateway (public-gateway.mjs): - Persistent HIDDEN_TLDS set backed by hidden-tlds.json next to the service script - GET /api/tld-visibility -> {hidden:[...]} (public) - POST /api/tld-visibility -> updates the list (operator-gated by Bearer BNS_OPERATOR_TOKEN env var; if unset, all writes refused so we default-deny) - /api/tlds filters out HIDDEN_TLDS; add ?include_hidden=1 to see everything (used by the admin panel to show all rows) - Operator token installed via systemd override on the VPS Admin panel: - New 'Operator token' card at the top of the TLD-registry section; token stored in sessionStorage (not localStorage) so a full browser close forgets it - Each TLD row got a 'Hidden from public' checkbox that POSTs on toggle and refreshes the table; failures roll back the checkbox and surface the error next to the token field 2. Wallet dropdown restored to 4 direct actions (Unlock / Create a wallet / Import a wallet / WizardConnect) and the shared mint/sign-in modal grew a tab strip so users can switch between the four wallet actions from any step without going back to a choice screen. register-flow.js: - renderTabs(active) prepended to stepCreate/stepImport/stepUnlock/ stepExternal when signInOnly is set. Unlock tab only appears when a saved wallet exists. - Delegated click handler on the sheet routes tab clicks to the matching step; switching away from a live WC session tears it down first so we don't leak WebSockets. profile-menu.js: - Restored 4-item onboarding menu (Create/Import/WC plus Unlock when saved). Each item is a direct entry point; the tabbed modal lets the user pivot to any other option without closing. Cache-buster bumped on all 8 sirius-x pages to ?v=20260908tabs.
2026-09-08 02:19:41 +02:00
${renderTabs("import")}
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
<h3>Import a recovery phrase</h3>
<p class="sub">12 words, separated by spaces. It stays in this browser.</p>
<label for="mn">Recovery phrase</label>
<textarea id="mn" spellcheck="false" placeholder="word word word …"></textarea>
<label for="pw">Password to encrypt it on this device</label>
<input type="password" id="pw" autocomplete="new-password">
<div class="row end"><button class="btn ghost" id="back">Back</button>
<button class="btn acid" id="next">Import →</button></div>
`);
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
$("back").onclick = goBack;
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
$("next").onclick = async () => {
try {
if ($("pw").value.length < 8) throw new Error("password must be at least 8 characters");
const wallet = await BNS.BuiltInWallet.fromMnemonic($("mn").value);
await wallet.save($("pw").value);
state.wallet = wallet;
feat(sirius-x/signin): PIN escrow — encrypted-at-rest quick unlock, 3-strike password fallback Removes the sessionStorage plaintext-mnemonic cache (fixed under the same commit) and replaces it with a PIN-encrypted blob in localStorage. No plaintext secret ever touches disk or memory outside the live BuiltInWallet object. New js/pin-escrow.js — WebCrypto PBKDF2(50k) + AES-GCM(256). Public API on window.siriusPin: savePinBlob(mnemonic, pin), tryUnlock(pin), hasPin(), attemptsUsed(), attemptsRemaining(), clear(), MAX_ATTEMPTS. Iteration count is lighter than BuiltInWallet's 250k because a 4-6 digit PIN's key space is small anyway; the point is 'not plaintext at rest,' not brute-force resistance — the durable secret is the full password. register-flow.js: - After a fresh password unlock (Import / Create / Unlock), stepSetPin offers a 4-6 digit PIN with confirm — skippable with 'Not now'. Never overwrites an existing PIN blob. - stepUnlock now shows a numeric PIN pad when a PIN blob is present; the password field only appears when the user opts to 'Use password instead' or after the blob was wiped. - Wrong PIN → increment counter, surface 'N attempts left'. Third wrong PIN → wipe blob and route to a 'PIN reset' screen that hands off to the password form. - Correct PIN → decrypt the mnemonic in-browser, rebuild the BuiltInWallet, finishSignIn(). Attempt counter resets to 0. profile-menu.js: - Sign-out clears the PIN blob (via siriusPin.clear()) alongside the siriusProfile so the device isn't quick-unlockable with a stale PIN. All pages that host the sign-in flow now include pin-escrow.js. Same tabbed layout in stepUnlock — the PIN pad and the password field both live under 🔓 Unlock, transparent tab-switch works exactly as before. Verified live: - Fresh Import → 'Set a PIN' step → 4242 confirmed → blob written - Reload → PIN pad, 3 attempts remaining - Correct PIN 4242 → signed in, counter resets to 0 - 3 wrong PIN attempts → 'Wrong PIN — N attempts left' per attempt, then 'PIN locked — enter your full password to continue', blob wiped, next reload shows the password form - localStorage contains only ciphertext + salt + iv + counter; no plaintext mnemonic anywhere on disk or in sessionStorage.
2026-09-09 01:31:18 +02:00
stepSetPin(wallet, () => { if (!finishSignIn(wallet)) stepFund(); });
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
} catch (e) { err(e); }
};
}
function stepUnlock() {
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
const goBack = state.signInOnly ? close : stepWallet;
feat(sirius-x/signin): Unlock tab always visible; friendly copy when empty Unlock tab used to be hidden when no saved wallet existed on the device — so a fresh browser saw a 3-tab strip, and a returning browser saw a 4-tab strip. Inconsistent, and users kept asking where Unlock went. Now Unlock is always the first tab: - if a saved wallet exists, stepUnlock() renders the usual password form (nothing else changes) - if no saved wallet, stepUnlock() renders 'No wallet on this device' with a one-line explanation and two shortcut buttons — 📥 Import and 🆕 Create — that jump straight to those tabs Same tab bar renders in all cases so the layout is stable across sessions and between devices.
2026-09-09 00:47:32 +02:00
const saved = BNS.BuiltInWallet.exists();
feat(sirius-x): dashboard with sidebar, persistent sign-in, full DNS panel The portal was a flat page with tabs that asked for the password or PIN on every visit and offered little beyond a records form. Owners need a control panel they can live in. Sign in once: the recovery phrase is kept encrypted under a non-extractable browser key (IndexedDB) so the next visit opens the dashboard silently; sign-out or the Settings toggle destroys it. Payments approve with one click unless "Ask for PIN before payments" is on. Dashboard: left menu (Overview, Domain names, My TLD list, Wallet, Register name/TLD, Settings). Per-name detail with a summary, a DNS record table (A, AAAA, CNAME, MX, TXT, NS, SRV, CAA) that signs the manifest, content & hosting (h, s3, p, ip, tls), a redirect tab (u), ownership transfer (UPD that re-issues the certificate to the recipient) and zone-file/JSON export. Per-TLD detail with policy, on/off, owner registration and the public list of names under it. Overview flags names that point nowhere or lack DNS.
2026-09-17 01:09:20 +02:00
// A persistent device session signs in without any prompt.
if (!state.wallet && window.siriusSession?.hasSession?.()) {
render(`${renderTabs("unlock")}<h3>Signing you in…</h3><p class="sub">Restoring your session on this device.</p>`);
restoreSessionWallet().then((w) => {
if (w) { state.wallet = w; if (!finishSignIn(w)) stepFund(); }
else stepUnlock();
});
return;
}
feat(sirius-x/signin): Unlock tab always visible; friendly copy when empty Unlock tab used to be hidden when no saved wallet existed on the device — so a fresh browser saw a 3-tab strip, and a returning browser saw a 4-tab strip. Inconsistent, and users kept asking where Unlock went. Now Unlock is always the first tab: - if a saved wallet exists, stepUnlock() renders the usual password form (nothing else changes) - if no saved wallet, stepUnlock() renders 'No wallet on this device' with a one-line explanation and two shortcut buttons — 📥 Import and 🆕 Create — that jump straight to those tabs Same tab bar renders in all cases so the layout is stable across sessions and between devices.
2026-09-09 00:47:32 +02:00
// No saved wallet on this device — show why unlock isn't possible and
// route the user to Create/Import via the tab bar (which stays visible).
if (!saved) {
render(`
${renderTabs("unlock")}
<h3>No wallet on this device</h3>
<p class="sub">Unlock only works after you have created or imported a wallet on this browser.
Either <b>Create</b> a fresh one (writes an encrypted copy here you can unlock next time)
or <b>Import</b> a recovery phrase you already have.</p>
<div class="row end">
<button class="btn ghost" id="go-import" type="button">📥 Import a wallet →</button>
<button class="btn acid" id="go-new" type="button">🆕 Create a wallet →</button>
</div>
`);
$("go-import").onclick = stepImport;
$("go-new").onclick = stepCreate;
return;
}
feat(sirius-x/signin): PIN escrow — encrypted-at-rest quick unlock, 3-strike password fallback Removes the sessionStorage plaintext-mnemonic cache (fixed under the same commit) and replaces it with a PIN-encrypted blob in localStorage. No plaintext secret ever touches disk or memory outside the live BuiltInWallet object. New js/pin-escrow.js — WebCrypto PBKDF2(50k) + AES-GCM(256). Public API on window.siriusPin: savePinBlob(mnemonic, pin), tryUnlock(pin), hasPin(), attemptsUsed(), attemptsRemaining(), clear(), MAX_ATTEMPTS. Iteration count is lighter than BuiltInWallet's 250k because a 4-6 digit PIN's key space is small anyway; the point is 'not plaintext at rest,' not brute-force resistance — the durable secret is the full password. register-flow.js: - After a fresh password unlock (Import / Create / Unlock), stepSetPin offers a 4-6 digit PIN with confirm — skippable with 'Not now'. Never overwrites an existing PIN blob. - stepUnlock now shows a numeric PIN pad when a PIN blob is present; the password field only appears when the user opts to 'Use password instead' or after the blob was wiped. - Wrong PIN → increment counter, surface 'N attempts left'. Third wrong PIN → wipe blob and route to a 'PIN reset' screen that hands off to the password form. - Correct PIN → decrypt the mnemonic in-browser, rebuild the BuiltInWallet, finishSignIn(). Attempt counter resets to 0. profile-menu.js: - Sign-out clears the PIN blob (via siriusPin.clear()) alongside the siriusProfile so the device isn't quick-unlockable with a stale PIN. All pages that host the sign-in flow now include pin-escrow.js. Same tabbed layout in stepUnlock — the PIN pad and the password field both live under 🔓 Unlock, transparent tab-switch works exactly as before. Verified live: - Fresh Import → 'Set a PIN' step → 4242 confirmed → blob written - Reload → PIN pad, 3 attempts remaining - Correct PIN 4242 → signed in, counter resets to 0 - 3 wrong PIN attempts → 'Wrong PIN — N attempts left' per attempt, then 'PIN locked — enter your full password to continue', blob wiped, next reload shows the password form - localStorage contains only ciphertext + salt + iv + counter; no plaintext mnemonic anywhere on disk or in sessionStorage.
2026-09-09 01:31:18 +02:00
// PIN escrow — if the user set a PIN on a previous session, prefer that.
// 3 wrong PINs wipe the blob and this branch falls back to the password
// form on next render.
if (window.siriusPin?.hasPin?.()) {
const remaining = window.siriusPin.attemptsRemaining();
render(`
${renderTabs("unlock")}
<h3>Enter your PIN</h3>
<p class="sub">4–6 digits. Set on this device to skip typing your full password.
${remaining < 3 ? `<b class="err" style="color:var(--taken,#f6768a)">${esc(String(remaining))} attempt${remaining === 1 ? "" : "s"} left</b> before the PIN resets and you must use your password.` : ""}</p>
<label for="pin">PIN</label>
<input type="password" id="pin" inputmode="numeric" pattern="[0-9]*" maxlength="6" autocomplete="off">
<div class="row end">
<button class="btn ghost" id="use-password" type="button">Use password instead</button>
<button class="btn acid" id="next" type="button">Unlock →</button>
</div>
`);
$("use-password").onclick = () => { window.siriusPin.clear(); stepUnlock(); };
$("pin").focus();
$("pin").onkeydown = (e) => { if (e.key === "Enter") $("next").click(); };
$("next").onclick = async () => {
try {
const mnemonic = await window.siriusPin.tryUnlock($("pin").value);
state.wallet = await BNS.BuiltInWallet.fromMnemonic(mnemonic);
if (!finishSignIn(state.wallet)) stepFund();
} catch (e) {
if (e.locked) { render(`
${renderTabs("unlock")}
<h3>PIN reset</h3>
<p class="sub">3 wrong attempts — the PIN has been cleared. Enter your password to unlock and set a new PIN if you like.</p>
<div class="row end"><button class="btn acid" id="go-pw">Continue with password →</button></div>
`); $("go-pw").onclick = stepUnlock; return; }
err(e);
}
};
return;
}
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
render(`
feat(sirius-x): admin TLD hide/unhide + tabbed sign-in modal (4 direct actions) Two features: 1. Operator can hide TLDs from the public /api/tlds listing so hidden TLDs stop appearing in name-search UIs. On-chain registrations under a hidden TLD keep resolving — this is a UX filter, not enforcement. Gateway (public-gateway.mjs): - Persistent HIDDEN_TLDS set backed by hidden-tlds.json next to the service script - GET /api/tld-visibility -> {hidden:[...]} (public) - POST /api/tld-visibility -> updates the list (operator-gated by Bearer BNS_OPERATOR_TOKEN env var; if unset, all writes refused so we default-deny) - /api/tlds filters out HIDDEN_TLDS; add ?include_hidden=1 to see everything (used by the admin panel to show all rows) - Operator token installed via systemd override on the VPS Admin panel: - New 'Operator token' card at the top of the TLD-registry section; token stored in sessionStorage (not localStorage) so a full browser close forgets it - Each TLD row got a 'Hidden from public' checkbox that POSTs on toggle and refreshes the table; failures roll back the checkbox and surface the error next to the token field 2. Wallet dropdown restored to 4 direct actions (Unlock / Create a wallet / Import a wallet / WizardConnect) and the shared mint/sign-in modal grew a tab strip so users can switch between the four wallet actions from any step without going back to a choice screen. register-flow.js: - renderTabs(active) prepended to stepCreate/stepImport/stepUnlock/ stepExternal when signInOnly is set. Unlock tab only appears when a saved wallet exists. - Delegated click handler on the sheet routes tab clicks to the matching step; switching away from a live WC session tears it down first so we don't leak WebSockets. profile-menu.js: - Restored 4-item onboarding menu (Create/Import/WC plus Unlock when saved). Each item is a direct entry point; the tabbed modal lets the user pivot to any other option without closing. Cache-buster bumped on all 8 sirius-x pages to ?v=20260908tabs.
2026-09-08 02:19:41 +02:00
${renderTabs("unlock")}
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
<h3>Unlock your wallet</h3>
feat(sirius-x/signin): PIN escrow — encrypted-at-rest quick unlock, 3-strike password fallback Removes the sessionStorage plaintext-mnemonic cache (fixed under the same commit) and replaces it with a PIN-encrypted blob in localStorage. No plaintext secret ever touches disk or memory outside the live BuiltInWallet object. New js/pin-escrow.js — WebCrypto PBKDF2(50k) + AES-GCM(256). Public API on window.siriusPin: savePinBlob(mnemonic, pin), tryUnlock(pin), hasPin(), attemptsUsed(), attemptsRemaining(), clear(), MAX_ATTEMPTS. Iteration count is lighter than BuiltInWallet's 250k because a 4-6 digit PIN's key space is small anyway; the point is 'not plaintext at rest,' not brute-force resistance — the durable secret is the full password. register-flow.js: - After a fresh password unlock (Import / Create / Unlock), stepSetPin offers a 4-6 digit PIN with confirm — skippable with 'Not now'. Never overwrites an existing PIN blob. - stepUnlock now shows a numeric PIN pad when a PIN blob is present; the password field only appears when the user opts to 'Use password instead' or after the blob was wiped. - Wrong PIN → increment counter, surface 'N attempts left'. Third wrong PIN → wipe blob and route to a 'PIN reset' screen that hands off to the password form. - Correct PIN → decrypt the mnemonic in-browser, rebuild the BuiltInWallet, finishSignIn(). Attempt counter resets to 0. profile-menu.js: - Sign-out clears the PIN blob (via siriusPin.clear()) alongside the siriusProfile so the device isn't quick-unlockable with a stale PIN. All pages that host the sign-in flow now include pin-escrow.js. Same tabbed layout in stepUnlock — the PIN pad and the password field both live under 🔓 Unlock, transparent tab-switch works exactly as before. Verified live: - Fresh Import → 'Set a PIN' step → 4242 confirmed → blob written - Reload → PIN pad, 3 attempts remaining - Correct PIN 4242 → signed in, counter resets to 0 - 3 wrong PIN attempts → 'Wrong PIN — N attempts left' per attempt, then 'PIN locked — enter your full password to continue', blob wiped, next reload shows the password form - localStorage contains only ciphertext + salt + iv + counter; no plaintext mnemonic anywhere on disk or in sessionStorage.
2026-09-09 01:31:18 +02:00
<p class="sub">Decrypts the wallet stored in this browser. After unlocking you can set a
PIN so future sessions ask for 4–6 digits instead of the full password.</p>
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
<label for="pw">Password</label>
<input type="password" id="pw" autocomplete="current-password">
<div class="row end"><button class="btn ghost" id="back">Back</button>
<button class="btn acid" id="next">Unlock →</button></div>
`);
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
$("back").onclick = goBack;
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
$("pw").onkeydown = (e) => { if (e.key === "Enter") $("next").click(); };
$("next").onclick = async () => {
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
try {
state.wallet = await BNS.BuiltInWallet.load($("pw").value);
feat(sirius-x/signin): PIN escrow — encrypted-at-rest quick unlock, 3-strike password fallback Removes the sessionStorage plaintext-mnemonic cache (fixed under the same commit) and replaces it with a PIN-encrypted blob in localStorage. No plaintext secret ever touches disk or memory outside the live BuiltInWallet object. New js/pin-escrow.js — WebCrypto PBKDF2(50k) + AES-GCM(256). Public API on window.siriusPin: savePinBlob(mnemonic, pin), tryUnlock(pin), hasPin(), attemptsUsed(), attemptsRemaining(), clear(), MAX_ATTEMPTS. Iteration count is lighter than BuiltInWallet's 250k because a 4-6 digit PIN's key space is small anyway; the point is 'not plaintext at rest,' not brute-force resistance — the durable secret is the full password. register-flow.js: - After a fresh password unlock (Import / Create / Unlock), stepSetPin offers a 4-6 digit PIN with confirm — skippable with 'Not now'. Never overwrites an existing PIN blob. - stepUnlock now shows a numeric PIN pad when a PIN blob is present; the password field only appears when the user opts to 'Use password instead' or after the blob was wiped. - Wrong PIN → increment counter, surface 'N attempts left'. Third wrong PIN → wipe blob and route to a 'PIN reset' screen that hands off to the password form. - Correct PIN → decrypt the mnemonic in-browser, rebuild the BuiltInWallet, finishSignIn(). Attempt counter resets to 0. profile-menu.js: - Sign-out clears the PIN blob (via siriusPin.clear()) alongside the siriusProfile so the device isn't quick-unlockable with a stale PIN. All pages that host the sign-in flow now include pin-escrow.js. Same tabbed layout in stepUnlock — the PIN pad and the password field both live under 🔓 Unlock, transparent tab-switch works exactly as before. Verified live: - Fresh Import → 'Set a PIN' step → 4242 confirmed → blob written - Reload → PIN pad, 3 attempts remaining - Correct PIN 4242 → signed in, counter resets to 0 - 3 wrong PIN attempts → 'Wrong PIN — N attempts left' per attempt, then 'PIN locked — enter your full password to continue', blob wiped, next reload shows the password form - localStorage contains only ciphertext + salt + iv + counter; no plaintext mnemonic anywhere on disk or in sessionStorage.
2026-09-09 01:31:18 +02:00
// Fresh password unlock — offer the PIN shortcut before finishing.
stepSetPin(state.wallet, () => { if (!finishSignIn(state.wallet)) stepFund(); });
feat(sirius-x): inline wallet dropdown — no navigation, no portal detour Wallet dropdown items (New / Import / WizardConnect) were navigating to portal.html?mode=X and asking the user to click again on arrival. That is 'the sign in landing page which is not functioning' from the user's perspective — a whole redirect for one form. Now every dropdown item opens the mint modal (register-flow.js) inline at the matching step, on whatever page the user is on: New -> stepCreate ('Create your wallet' — password + generate) Import -> stepImport ('Import a recovery phrase' — textarea) WizardConnect -> stepExternal ('Open your wallet' — QR/URI) register-flow.js grew a signInOnly mode: state.name is null, the step Back buttons close instead of going to a wallet-choice step there is no context for, and on wallet-loaded the flow writes siriusProfile and shows a 'Signed in' confirmation instead of Fund -> Confirm -> Mint. WC signInOnly keeps the session alive (state.session) so a later record edit can reuse it without a fresh QR handshake. profile-menu.js: menu items became <a data-action='new|import|wc'> and the click handler lazy-loads register-flow.js on demand — the docs/brand/theseus pages don't ship it in their initial payload, so their nav pill loads it the first time a wallet button is clicked and caches it for subsequent opens. Falls back to portal.html?mode=X if the module can't load. Cache-buster bumped so cached copies pick up the new behavior. Importmap for @bitauth/libauth added to docs/, brand/, theseus/ so the bundle's bare specifier resolves when register-flow.js is lazy-loaded from those pages. Verified end-to-end on the live docs page: all three dropdown items open the modal inline at the correct step, no console errors, no navigation.
2026-09-07 23:52:12 +02:00
} catch (e) { err(e); }
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
};
}
feat(sirius-x/signin): PIN escrow — encrypted-at-rest quick unlock, 3-strike password fallback Removes the sessionStorage plaintext-mnemonic cache (fixed under the same commit) and replaces it with a PIN-encrypted blob in localStorage. No plaintext secret ever touches disk or memory outside the live BuiltInWallet object. New js/pin-escrow.js — WebCrypto PBKDF2(50k) + AES-GCM(256). Public API on window.siriusPin: savePinBlob(mnemonic, pin), tryUnlock(pin), hasPin(), attemptsUsed(), attemptsRemaining(), clear(), MAX_ATTEMPTS. Iteration count is lighter than BuiltInWallet's 250k because a 4-6 digit PIN's key space is small anyway; the point is 'not plaintext at rest,' not brute-force resistance — the durable secret is the full password. register-flow.js: - After a fresh password unlock (Import / Create / Unlock), stepSetPin offers a 4-6 digit PIN with confirm — skippable with 'Not now'. Never overwrites an existing PIN blob. - stepUnlock now shows a numeric PIN pad when a PIN blob is present; the password field only appears when the user opts to 'Use password instead' or after the blob was wiped. - Wrong PIN → increment counter, surface 'N attempts left'. Third wrong PIN → wipe blob and route to a 'PIN reset' screen that hands off to the password form. - Correct PIN → decrypt the mnemonic in-browser, rebuild the BuiltInWallet, finishSignIn(). Attempt counter resets to 0. profile-menu.js: - Sign-out clears the PIN blob (via siriusPin.clear()) alongside the siriusProfile so the device isn't quick-unlockable with a stale PIN. All pages that host the sign-in flow now include pin-escrow.js. Same tabbed layout in stepUnlock — the PIN pad and the password field both live under 🔓 Unlock, transparent tab-switch works exactly as before. Verified live: - Fresh Import → 'Set a PIN' step → 4242 confirmed → blob written - Reload → PIN pad, 3 attempts remaining - Correct PIN 4242 → signed in, counter resets to 0 - 3 wrong PIN attempts → 'Wrong PIN — N attempts left' per attempt, then 'PIN locked — enter your full password to continue', blob wiped, next reload shows the password form - localStorage contains only ciphertext + salt + iv + counter; no plaintext mnemonic anywhere on disk or in sessionStorage.
2026-09-09 01:31:18 +02:00
// After a successful password sign-in (Import / Create / Unlock), offer to
// stash the mnemonic under a PIN so next session opens with a numeric pad.
// User can decline ("Not now"); either way we call `next` afterwards.
function stepSetPin(w, next) {
if (!window.siriusPin || !w?.mnemonic) return next();
// Already have a PIN blob? Don't overwrite silently — skip.
if (window.siriusPin.hasPin()) return next();
feat(sirius-x): dashboard with sidebar, persistent sign-in, full DNS panel The portal was a flat page with tabs that asked for the password or PIN on every visit and offered little beyond a records form. Owners need a control panel they can live in. Sign in once: the recovery phrase is kept encrypted under a non-extractable browser key (IndexedDB) so the next visit opens the dashboard silently; sign-out or the Settings toggle destroys it. Payments approve with one click unless "Ask for PIN before payments" is on. Dashboard: left menu (Overview, Domain names, My TLD list, Wallet, Register name/TLD, Settings). Per-name detail with a summary, a DNS record table (A, AAAA, CNAME, MX, TXT, NS, SRV, CAA) that signs the manifest, content & hosting (h, s3, p, ip, tls), a redirect tab (u), ownership transfer (UPD that re-issues the certificate to the recipient) and zone-file/JSON export. Per-TLD detail with policy, on/off, owner registration and the public list of names under it. Overview flags names that point nowhere or lack DNS.
2026-09-17 01:09:20 +02:00
// With "stay signed in" on (the default) the device session already
// makes the next visit prompt-free; a PIN would just be one more thing
// to type. It stays available in the dashboard Settings for people who
// want a gate before payments.
if (window.siriusSession?.isEnabled?.()) return next();
feat(sirius-x/signin): PIN escrow — encrypted-at-rest quick unlock, 3-strike password fallback Removes the sessionStorage plaintext-mnemonic cache (fixed under the same commit) and replaces it with a PIN-encrypted blob in localStorage. No plaintext secret ever touches disk or memory outside the live BuiltInWallet object. New js/pin-escrow.js — WebCrypto PBKDF2(50k) + AES-GCM(256). Public API on window.siriusPin: savePinBlob(mnemonic, pin), tryUnlock(pin), hasPin(), attemptsUsed(), attemptsRemaining(), clear(), MAX_ATTEMPTS. Iteration count is lighter than BuiltInWallet's 250k because a 4-6 digit PIN's key space is small anyway; the point is 'not plaintext at rest,' not brute-force resistance — the durable secret is the full password. register-flow.js: - After a fresh password unlock (Import / Create / Unlock), stepSetPin offers a 4-6 digit PIN with confirm — skippable with 'Not now'. Never overwrites an existing PIN blob. - stepUnlock now shows a numeric PIN pad when a PIN blob is present; the password field only appears when the user opts to 'Use password instead' or after the blob was wiped. - Wrong PIN → increment counter, surface 'N attempts left'. Third wrong PIN → wipe blob and route to a 'PIN reset' screen that hands off to the password form. - Correct PIN → decrypt the mnemonic in-browser, rebuild the BuiltInWallet, finishSignIn(). Attempt counter resets to 0. profile-menu.js: - Sign-out clears the PIN blob (via siriusPin.clear()) alongside the siriusProfile so the device isn't quick-unlockable with a stale PIN. All pages that host the sign-in flow now include pin-escrow.js. Same tabbed layout in stepUnlock — the PIN pad and the password field both live under 🔓 Unlock, transparent tab-switch works exactly as before. Verified live: - Fresh Import → 'Set a PIN' step → 4242 confirmed → blob written - Reload → PIN pad, 3 attempts remaining - Correct PIN 4242 → signed in, counter resets to 0 - 3 wrong PIN attempts → 'Wrong PIN — N attempts left' per attempt, then 'PIN locked — enter your full password to continue', blob wiped, next reload shows the password form - localStorage contains only ciphertext + salt + iv + counter; no plaintext mnemonic anywhere on disk or in sessionStorage.
2026-09-09 01:31:18 +02:00
render(`
${renderTabs("unlock")}
<h3>Set a PIN <span class="pill">optional</span></h3>
<p class="sub">4–6 digits. Encrypts your recovery phrase under this PIN so future sessions on
this device unlock with just the PIN. Three wrong PINs and the PIN is cleared — you'd fall
back to your full password.</p>
<label for="pin1">PIN</label>
<input type="password" id="pin1" inputmode="numeric" pattern="[0-9]*" maxlength="6" autocomplete="off">
<label for="pin2" style="margin-top:12px">Repeat PIN</label>
<input type="password" id="pin2" inputmode="numeric" pattern="[0-9]*" maxlength="6" autocomplete="off">
<div class="row end">
<button class="btn ghost" id="skip" type="button">Not now</button>
<button class="btn acid" id="save-pin" type="button">Save PIN →</button>
</div>
`);
$("skip").onclick = next;
$("pin2").onkeydown = (e) => { if (e.key === "Enter") $("save-pin").click(); };
$("save-pin").onclick = async () => {
const a = $("pin1").value, b = $("pin2").value;
if (!/^\d{4,6}$/.test(a)) return err(new Error("PIN must be 4–6 digits"));
if (a !== b) return err(new Error("PINs do not match"));
try { await window.siriusPin.savePinBlob(w.mnemonic, a); next(); }
catch (e) { err(e); }
};
}
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
// ---------- fund ----------
let fundTimer = null;
async function stepFund() {
const w = state.wallet;
const faucets = BNS.REGISTRAR.faucets
.map((f) => `<a href="${esc(f.url)}" target="_blank" rel="noopener" style="color:var(--acid,#d6ff3d)">${esc(f.name)}</a>`).join(" · ");
render(`
<h3>Fund your wallet</h3>
<p class="sub">Send test coins to this address. It is yours — derived from your phrase.</p>
<div class="addr"><code id="a">${esc(w.address)}</code>
<button class="btn ghost" id="copy">Copy</button></div>
<div class="muted" style="margin-top:10px">Free chipnet coins: ${faucets}</div>
<div class="note" id="bal" style="margin-top:16px">checking balance…</div>
<div class="row end"><button class="btn ghost" id="back">Back</button>
<button class="btn acid" id="next" disabled>Continue →</button></div>
`);
$("copy").onclick = () => navigator.clipboard?.writeText(w.address);
$("back").onclick = () => { clearInterval(fundTimer); stepWallet(); };
$("next").onclick = () => { clearInterval(fundTimer); stepConfirm(); };
const poll = async () => {
try {
const b = await BNS.getBalance(await client(), w.watchedAddresses);
const enough = b.sats >= 20000n;
$("bal").innerHTML = b.sats > 0n
? `<b class="ok">${sats(b.sats)} sat</b> available (${b.coins} coin${b.coins===1?"":"s"})`
+ (enough ? "" : ` — a little more is needed to cover the registration.`)
: `Waiting for coins… this page is watching the chain live.`;
$("next").disabled = !enough;
} catch (e) { $("bal").textContent = "could not reach the chain: " + e.message; }
};
await poll();
clearInterval(fundTimer);
fundTimer = setInterval(poll, 6000);
}
// ---------- confirm ----------
async function stepConfirm() {
render(`<h3>Preparing…</h3><p class="sub">Building your registration transaction.</p>`);
try {
const c = await client();
feat(sirius-x): pencil Register icon + TLD mint via shared modal Two UX polishes: 1. Register-tab icon flipped from 🪪 (identification-card emoji, renders as a hollow box in system-ui fonts without extended emoji) to ✏️ (pencil), which reads as 'edit/create' and ships in every emoji font worth targeting. Changed across the nav on all 8 pages plus the footer injector's Product column. Kept the Register nav item — six items total in the nav, and from any subpage it's one click to the search on landing. 2. tld.html no longer duplicates the wallet-choice + mint flow inline. The Register button on a search result now hands the label off to the shared register-flow.js modal — same modal that name registration uses — via a new window.siriusRegisterTld(label, {serviceFeeSats}) entry point. register-flow.js grew: - startTldFlow / window.siriusRegisterTld: sets state.tld and walks the modal through wallet-choice → Fund → stepConfirmTld → stepRegisterTld → stepDoneTld - stepConfirmTld: shows label + fee + owner, no per-name quote - stepRegisterTld: dispatches to registerTldWithBuiltInWallet or registerTldWithExternalWallet based on state.wallet/state.session - stepDoneTld: 'X is yours' with txid + certificate id + operator address, no record editor (a TLD certificate has no records to set immediately) - stepWallet / stepExternalConfirm branch on state.tld so the modal heading and the WC-confirm path route correctly tld.html trimmed: removed the entire signin-section + mint-section plus their inline handlers (~250 lines gone). Now just search + registered-TLDs list + a delegator to the shared modal. If a user is already signed in via the wallet dropdown, the modal recognises the saved wallet ('Unlock my browser wallet' button appears) instead of asking them to sign in again on this page.
2026-09-08 00:10:11 +02:00
// TLD flow skips the name-availability check and the per-name quote —
// registerTldWith*Wallet builds the tx internally and checks the on-chain
// TLD registry itself. Just show a simple confirm screen with the fee.
if (state.tld) return stepConfirmTld();
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
const avail = await BNS.checkAvailability(c, state.name);
if (!avail.available) throw new Error(`"${avail.name}" was just registered by someone else`);
feat(sirius-x): tier-based label pricing; badges on search cards + TLD list Single source of truth (js/pricing.js) mirrored on landing, tld.html and the mint flow — same label always shows the same price everywhere. Name tiers (label part): 1 char $5.00 premium-1 2 chars $3.00 short-2 3 chars $2.00 short-3 4–5 chars $1.00 standard 6–7 chars $0.50 long 8–16 chars $0.25 extended 17+ chars $0.10 very-long all-digits ×0.5 (less brandable) contains hyphen ×0.7 TLD tiers (label part): 1 char $10.00 premium-1 2 chars $8.00 short-2 3 chars $6.00 short-3 4–8 chars $5.00 standard 9+ chars $4.00 long Rendering: - Landing #search-results: acid-tinted price badge on each available row; grid grew a fourth column so name + badge + price + button all sit on one line - tld.html search result-card: same price badge next to the Register button on available TLDs - tld.html registered-TLDs table: new 'Mint price' column showing the tier price for every registered TLD, so buyers see the pricing ladder next to concrete examples Mint pipe: - startFlow(name)/startTldFlow(label) resolve the label price via window.siriusPricing (default) but honour opts.serviceFeeSats when the caller passes one — leaves the door open for coupons / operator discounts / oracle overrides in a future revision without reshuffling call sites - The overridden service fee is threaded through quoteRegistration AND registerWithBuiltInWallet/registerWithExternalWallet so the confirm screen and the on-chain output agree Chipnet placeholder rate (250,000 sat/USD) stays in pricing.js; mainnet will swap in a live BCH/USD oracle. Operator-side discounts and coupon codes are the next iteration — deliberately not disclosed in this shipping copy.
2026-09-09 01:09:05 +02:00
const feeOverride = state.nameFeeSats != null
? { serviceFee: { ...(BNS.REGISTRAR?.serviceFee ?? {}), sats: state.nameFeeSats } }
: {};
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
const quote = await BNS.quoteRegistration(c, {
feat(sirius-x): tier-based label pricing; badges on search cards + TLD list Single source of truth (js/pricing.js) mirrored on landing, tld.html and the mint flow — same label always shows the same price everywhere. Name tiers (label part): 1 char $5.00 premium-1 2 chars $3.00 short-2 3 chars $2.00 short-3 4–5 chars $1.00 standard 6–7 chars $0.50 long 8–16 chars $0.25 extended 17+ chars $0.10 very-long all-digits ×0.5 (less brandable) contains hyphen ×0.7 TLD tiers (label part): 1 char $10.00 premium-1 2 chars $8.00 short-2 3 chars $6.00 short-3 4–8 chars $5.00 standard 9+ chars $4.00 long Rendering: - Landing #search-results: acid-tinted price badge on each available row; grid grew a fourth column so name + badge + price + button all sit on one line - tld.html search result-card: same price badge next to the Register button on available TLDs - tld.html registered-TLDs table: new 'Mint price' column showing the tier price for every registered TLD, so buyers see the pricing ladder next to concrete examples Mint pipe: - startFlow(name)/startTldFlow(label) resolve the label price via window.siriusPricing (default) but honour opts.serviceFeeSats when the caller passes one — leaves the door open for coupons / operator discounts / oracle overrides in a future revision without reshuffling call sites - The overridden service fee is threaded through quoteRegistration AND registerWithBuiltInWallet/registerWithExternalWallet so the confirm screen and the on-chain output agree Chipnet placeholder rate (250,000 sat/USD) stays in pricing.js; mainnet will swap in a live BCH/USD oracle. Operator-side discounts and coupon codes are the next iteration — deliberately not disclosed in this shipping copy.
2026-09-09 01:09:05 +02:00
name: state.name, ownerAddress: state.wallet.address, records: {}, ...feeOverride,
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
});
state.quote = quote;
feat(sirius-x): tier-based label pricing; badges on search cards + TLD list Single source of truth (js/pricing.js) mirrored on landing, tld.html and the mint flow — same label always shows the same price everywhere. Name tiers (label part): 1 char $5.00 premium-1 2 chars $3.00 short-2 3 chars $2.00 short-3 4–5 chars $1.00 standard 6–7 chars $0.50 long 8–16 chars $0.25 extended 17+ chars $0.10 very-long all-digits ×0.5 (less brandable) contains hyphen ×0.7 TLD tiers (label part): 1 char $10.00 premium-1 2 chars $8.00 short-2 3 chars $6.00 short-3 4–8 chars $5.00 standard 9+ chars $4.00 long Rendering: - Landing #search-results: acid-tinted price badge on each available row; grid grew a fourth column so name + badge + price + button all sit on one line - tld.html search result-card: same price badge next to the Register button on available TLDs - tld.html registered-TLDs table: new 'Mint price' column showing the tier price for every registered TLD, so buyers see the pricing ladder next to concrete examples Mint pipe: - startFlow(name)/startTldFlow(label) resolve the label price via window.siriusPricing (default) but honour opts.serviceFeeSats when the caller passes one — leaves the door open for coupons / operator discounts / oracle overrides in a future revision without reshuffling call sites - The overridden service fee is threaded through quoteRegistration AND registerWithBuiltInWallet/registerWithExternalWallet so the confirm screen and the on-chain output agree Chipnet placeholder rate (250,000 sat/USD) stays in pricing.js; mainnet will swap in a live BCH/USD oracle. Operator-side discounts and coupon codes are the next iteration — deliberately not disclosed in this shipping copy.
2026-09-09 01:09:05 +02:00
state._feeOverride = feeOverride;
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
const rows = BNS.priceSummary(quote.costs).map((l) => `
<tr class="${l.total ? "total" : ""}"><td>${esc(l.label)}${l.note ? `<small>${esc(l.note)}</small>` : ""}</td>
<td>${sats(l.sats)} sat</td></tr>`).join("");
render(`
<h3>Confirm ${esc(quote.displayName)}</h3>
<p class="sub">One transaction. It mints the certificate to <b>your</b> address and pays the fees.</p>
feat(sirius-x): TLD owner panel — owner-set price, on/off switch, private TLDs A TLD owner needed to run their namespace without the operator: set what every name under the TLD sells for, take the TLD off the public registry for a while, and still register names under it themselves. Both settings live on chain in the TLD's TUPD records (`price`, `hidden`) because changes are rare and every client already walks the TLD beacon. The gateway's /api/tlds now carries records, owner, price_usd and hidden_by per TLD; pricing.js quotes the owner price ahead of the length tiers and only trusts a TLD_BEACON-sourced list; the register flow refuses hidden and frozen TLDs for the public but lets the owner through at the platform share only (the 90% owner cut would be paid to themselves). The portal's TLDs tab loads real holdings, shows price and on/off state, and gives each TLD a one-click switch, a price/policy editor and an inline "register a name under .tld" form. Docs and the design table describe the two new records.
2026-09-16 21:28:18 +02:00
${state.ownerMint ? `<div class="note">You own this TLD, so this is an <b>owner registration</b>: only the platform's 10% share of the name price is charged — the 90% owner share would just be paid to yourself.</div>` : ""}
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
<table class="price">${rows}</table>
<div class="note" style="margin-top:16px">The certificate will be minted to
<span class="mono">${esc(state.wallet.address)}</span> — your key, your name.
You can set where it points immediately afterwards.</div>
<div class="row end"><button class="btn ghost" id="back">Back</button>
<button class="btn acid" id="go">Register — sign &amp; broadcast</button></div>
`);
$("back").onclick = stepFund;
feat(sirius-x): raise TLD pricing to $25–$500; PIN gate on payment approval TLD price tiers (pricing.js): 1 char $500 (was $10) 2 char $250 (was $8) 3 char $150 (was $6) 4-6ch $100 (was $5) 7-10ch $50 (was $5) 11+ch $25 (was $4) Payment approval (register-flow.js): New stepApprove(...) gates the actual sign+broadcast on an explicit user gesture — PIN pad when a PIN blob exists on this device, wallet password otherwise. Same "3 wrong PINs → wipe, fall back to password" behavior as the sign-in unlock step. Wired between stepConfirm(Tld)? and stepRegister(Tld)? so both name mints and TLD mints require approval even when the wallet is already in memory. tld.html fee card: reflects the new $25–$500 range instead of the "≈ 1,250,000 sat · ≈ $5" placeholder.
2026-09-09 03:45:41 +02:00
$("go").onclick = () => stepApprove({ feeSats: state.nameFeeSats ?? 0n, kind: "name", back: stepConfirm, next: stepRegister });
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
} catch (e) {
render(`<h3>Could not prepare</h3><p class="sub">${esc(e.message)}</p>
<div class="row end"><button class="btn ghost" id="back">Back</button></div>`);
$("back").onclick = stepFund;
}
}
feat(sirius-x): pencil Register icon + TLD mint via shared modal Two UX polishes: 1. Register-tab icon flipped from 🪪 (identification-card emoji, renders as a hollow box in system-ui fonts without extended emoji) to ✏️ (pencil), which reads as 'edit/create' and ships in every emoji font worth targeting. Changed across the nav on all 8 pages plus the footer injector's Product column. Kept the Register nav item — six items total in the nav, and from any subpage it's one click to the search on landing. 2. tld.html no longer duplicates the wallet-choice + mint flow inline. The Register button on a search result now hands the label off to the shared register-flow.js modal — same modal that name registration uses — via a new window.siriusRegisterTld(label, {serviceFeeSats}) entry point. register-flow.js grew: - startTldFlow / window.siriusRegisterTld: sets state.tld and walks the modal through wallet-choice → Fund → stepConfirmTld → stepRegisterTld → stepDoneTld - stepConfirmTld: shows label + fee + owner, no per-name quote - stepRegisterTld: dispatches to registerTldWithBuiltInWallet or registerTldWithExternalWallet based on state.wallet/state.session - stepDoneTld: 'X is yours' with txid + certificate id + operator address, no record editor (a TLD certificate has no records to set immediately) - stepWallet / stepExternalConfirm branch on state.tld so the modal heading and the WC-confirm path route correctly tld.html trimmed: removed the entire signin-section + mint-section plus their inline handlers (~250 lines gone). Now just search + registered-TLDs list + a delegator to the shared modal. If a user is already signed in via the wallet dropdown, the modal recognises the saved wallet ('Unlock my browser wallet' button appears) instead of asking them to sign in again on this page.
2026-09-08 00:10:11 +02:00
// ---------- TLD confirm ----------
async function stepConfirmTld() {
const feeSats = state.tld.serviceFeeSats;
const owner = state.wallet ? state.wallet.address : (state.session ? (await state.session.getAddresses())[0] : "your address");
render(`
<h3>Confirm <b>${esc(state.name)}</b></h3>
<p class="sub">One transaction. It mints the TLD certificate to <b>your</b> token address; you become
the registry operator for every second-level name under it.</p>
<table class="price">
<tr><td>Service fee${feeSats === 0n ? " <small>(none on chipnet)</small>" : ""}</td>
<td>${sats(feeSats)} sat</td></tr>
<tr><td>Beacon dust + chain fee <small>(covered by wallet)</small></td>
<td>~1,300 sat</td></tr>
</table>
<div class="note" style="margin-top:16px">Minted to <span class="mono">${esc(owner)}</span>.
That wallet becomes the operator for this TLD.</div>
<div class="row end"><button class="btn ghost" id="back">Back</button>
<button class="btn acid" id="go">Register — sign &amp; broadcast</button></div>
`);
$("back").onclick = stepFund;
feat(sirius-x): raise TLD pricing to $25–$500; PIN gate on payment approval TLD price tiers (pricing.js): 1 char $500 (was $10) 2 char $250 (was $8) 3 char $150 (was $6) 4-6ch $100 (was $5) 7-10ch $50 (was $5) 11+ch $25 (was $4) Payment approval (register-flow.js): New stepApprove(...) gates the actual sign+broadcast on an explicit user gesture — PIN pad when a PIN blob exists on this device, wallet password otherwise. Same "3 wrong PINs → wipe, fall back to password" behavior as the sign-in unlock step. Wired between stepConfirm(Tld)? and stepRegister(Tld)? so both name mints and TLD mints require approval even when the wallet is already in memory. tld.html fee card: reflects the new $25–$500 range instead of the "≈ 1,250,000 sat · ≈ $5" placeholder.
2026-09-09 03:45:41 +02:00
$("go").onclick = () => stepApprove({ feeSats, kind: "tld", back: stepConfirmTld, next: stepRegisterTld });
}
// ---------- approve payment (PIN gate) ----------
// After the user has confirmed the fee and clicked "Register — sign & broadcast",
// gate the actual sign+broadcast on a fresh PIN entry (or password when no PIN
// is set on this device). The gate exists so a wallet already unlocked in
// memory still can't be spent without an explicit user gesture — same idea as
// a hardware wallet asking for its PIN on every transaction.
//
// opts: { feeSats, kind: "name"|"tld", back, next }
function stepApprove(opts) {
const { feeSats, kind, back, next } = opts;
const feeLine = feeSats && feeSats > 0n ? `<b class="ok">${sats(feeSats)} sat</b>` : `<b class="ok">Service fee waived on chipnet</b>`;
const target = kind === "tld" ? `.<b>${esc(state.name)}</b>` : `<b>${esc(state.name)}</b>`;
feat(sirius-x): dashboard with sidebar, persistent sign-in, full DNS panel The portal was a flat page with tabs that asked for the password or PIN on every visit and offered little beyond a records form. Owners need a control panel they can live in. Sign in once: the recovery phrase is kept encrypted under a non-extractable browser key (IndexedDB) so the next visit opens the dashboard silently; sign-out or the Settings toggle destroys it. Payments approve with one click unless "Ask for PIN before payments" is on. Dashboard: left menu (Overview, Domain names, My TLD list, Wallet, Register name/TLD, Settings). Per-name detail with a summary, a DNS record table (A, AAAA, CNAME, MX, TXT, NS, SRV, CAA) that signs the manifest, content & hosting (h, s3, p, ip, tls), a redirect tab (u), ownership transfer (UPD that re-issues the certificate to the recipient) and zone-file/JSON export. Per-TLD detail with policy, on/off, owner registration and the public list of names under it. Overview flags names that point nowhere or lack DNS.
2026-09-17 01:09:20 +02:00
// Signed in with a live wallet and no "ask for PIN before payments"
// preference: approving is one click. The signature itself is the proof;
// re-typing a secret the browser already holds adds nothing but friction.
const gateOff = !(window.siriusSession?.requirePinForPayments?.());
if (state.wallet && gateOff) {
render(`
<h3>Approve payment</h3>
<p class="sub">Sign and broadcast the registration for ${target}. Fee: ${feeLine}.
You can require a PIN for every payment under Settings in the dashboard.</p>
<div class="row end">
<button class="btn ghost" id="back">Back</button>
<button class="btn acid" id="approve">Approve →</button>
</div>
`);
$("back").onclick = back;
$("approve").onclick = next;
$("approve").focus();
return;
}
feat(sirius-x): raise TLD pricing to $25–$500; PIN gate on payment approval TLD price tiers (pricing.js): 1 char $500 (was $10) 2 char $250 (was $8) 3 char $150 (was $6) 4-6ch $100 (was $5) 7-10ch $50 (was $5) 11+ch $25 (was $4) Payment approval (register-flow.js): New stepApprove(...) gates the actual sign+broadcast on an explicit user gesture — PIN pad when a PIN blob exists on this device, wallet password otherwise. Same "3 wrong PINs → wipe, fall back to password" behavior as the sign-in unlock step. Wired between stepConfirm(Tld)? and stepRegister(Tld)? so both name mints and TLD mints require approval even when the wallet is already in memory. tld.html fee card: reflects the new $25–$500 range instead of the "≈ 1,250,000 sat · ≈ $5" placeholder.
2026-09-09 03:45:41 +02:00
// No PIN configured — prompt for the wallet password as the approval
// gesture. (When no wallet-at-rest exists either, `state.wallet` was set
// from a fresh Create/Import, so we ask the user to set a PIN afterwards.)
const usePinPad = !!window.siriusPin?.hasPin?.();
if (usePinPad) {
const remaining = window.siriusPin.attemptsRemaining();
render(`
<h3>Approve payment</h3>
<p class="sub">Enter your PIN to sign and broadcast the registration for ${target}. Fee: ${feeLine}.
${remaining < 3 ? `<b class="err" style="color:var(--taken,#f6768a)">${esc(String(remaining))} attempt${remaining === 1 ? "" : "s"} left</b> before the PIN resets and you must use your password.` : ""}</p>
<label for="approve-pin">PIN</label>
<input type="password" id="approve-pin" inputmode="numeric" pattern="[0-9]*" maxlength="6" autocomplete="off">
<div class="row end">
<button class="btn ghost" id="back">Back</button>
<button class="btn acid" id="approve">Approve →</button>
</div>
`);
$("back").onclick = back;
$("approve-pin").focus();
$("approve-pin").onkeydown = (e) => { if (e.key === "Enter") $("approve").click(); };
$("approve").onclick = async () => {
try {
const mnemonic = await window.siriusPin.tryUnlock($("approve-pin").value);
// PIN verified — ensure `state.wallet` is loaded from the mnemonic
// (unlock counter has been reset by tryUnlock).
if (!state.wallet) state.wallet = await BNS.BuiltInWallet.fromMnemonic(mnemonic);
next();
} catch (e) {
if (e.locked) {
render(`
<h3>PIN reset</h3>
<p class="sub">3 wrong attempts — the PIN has been cleared. Enter your password to
approve the payment and set a new PIN if you like.</p>
<div class="row end">
<button class="btn ghost" id="back">Back</button>
<button class="btn acid" id="go-pw">Continue with password →</button>
</div>
`);
$("back").onclick = back;
$("go-pw").onclick = () => stepApprove(opts);
return;
}
err(e);
}
};
return;
}
// Fallback — no PIN blob. If we have a wallet-at-rest we ask for the
// password. If not (fresh Create/Import in this session), the wallet is
// already in memory and there is nothing to gate on locally, so proceed
// straight to sign + offer to set a PIN afterwards.
const hasWalletAtRest = !!(window.localStorage && localStorage.getItem("bns.wallet.v1"));
if (!hasWalletAtRest && state.wallet) { next(); return; }
render(`
<h3>Approve payment</h3>
<p class="sub">Enter your wallet password to sign and broadcast the registration for
${target}. Fee: ${feeLine}. Set a PIN afterwards so future payments approve with 4–6 digits.</p>
<label for="approve-pw">Password</label>
<input type="password" id="approve-pw" autocomplete="current-password">
<div class="row end">
<button class="btn ghost" id="back">Back</button>
<button class="btn acid" id="approve">Approve →</button>
</div>
`);
$("back").onclick = back;
$("approve-pw").focus();
$("approve-pw").onkeydown = (e) => { if (e.key === "Enter") $("approve").click(); };
$("approve").onclick = async () => {
try {
state.wallet = await BNS.BuiltInWallet.load($("approve-pw").value);
// Offer to set a PIN so the next payment prompts for digits.
stepSetPin(state.wallet, next);
} catch (e) { err(e); }
};
feat(sirius-x): pencil Register icon + TLD mint via shared modal Two UX polishes: 1. Register-tab icon flipped from 🪪 (identification-card emoji, renders as a hollow box in system-ui fonts without extended emoji) to ✏️ (pencil), which reads as 'edit/create' and ships in every emoji font worth targeting. Changed across the nav on all 8 pages plus the footer injector's Product column. Kept the Register nav item — six items total in the nav, and from any subpage it's one click to the search on landing. 2. tld.html no longer duplicates the wallet-choice + mint flow inline. The Register button on a search result now hands the label off to the shared register-flow.js modal — same modal that name registration uses — via a new window.siriusRegisterTld(label, {serviceFeeSats}) entry point. register-flow.js grew: - startTldFlow / window.siriusRegisterTld: sets state.tld and walks the modal through wallet-choice → Fund → stepConfirmTld → stepRegisterTld → stepDoneTld - stepConfirmTld: shows label + fee + owner, no per-name quote - stepRegisterTld: dispatches to registerTldWithBuiltInWallet or registerTldWithExternalWallet based on state.wallet/state.session - stepDoneTld: 'X is yours' with txid + certificate id + operator address, no record editor (a TLD certificate has no records to set immediately) - stepWallet / stepExternalConfirm branch on state.tld so the modal heading and the WC-confirm path route correctly tld.html trimmed: removed the entire signin-section + mint-section plus their inline handlers (~250 lines gone). Now just search + registered-TLDs list + a delegator to the shared modal. If a user is already signed in via the wallet dropdown, the modal recognises the saved wallet ('Unlock my browser wallet' button appears) instead of asking them to sign in again on this page.
2026-09-08 00:10:11 +02:00
}
async function stepRegisterTld() {
render(`<h3>Registering ${esc(state.name)}</h3>
<p class="sub">Signing in your browser and broadcasting to the chain. Do not close this tab.</p>
<div class="steps-log" id="log"></div>`);
const log = $("log");
const say = (s) => { const d = document.createElement("div"); d.textContent = s; log.appendChild(d); log.scrollTop = log.scrollHeight; };
const serviceFee = { address: BNS.REGISTRAR?.serviceFee?.address ?? null, sats: state.tld.serviceFeeSats };
try {
const res = state.session
? await BNS.registerTldWithExternalWallet(await client(), {
session: state.session, tld: state.tld.label, records: {},
serviceFee, tldListUrl: "https://navigate.st/api/tlds", onProgress: say,
})
: await BNS.registerTldWithBuiltInWallet(await client(), {
wallet: state.wallet, tld: state.tld.label, records: {},
serviceFee, tldListUrl: "https://navigate.st/api/tlds", onProgress: say,
});
state.result = res;
stepDoneTld();
} catch (e) {
err(e);
const row = document.createElement("div"); row.className = "row end";
row.innerHTML = `<button class="btn ghost" id="back">Back</button>`;
sheet.appendChild(row);
$("back").onclick = stepConfirmTld;
}
}
function stepDoneTld() {
const r = state.result;
render(`
<h3><span class="ok">✓</span> <b>.${esc(r.tld)}</b> is yours</h3>
<p class="sub">The TLD certificate is on the chain, held by your key. Second-level names under
<b>.${esc(r.tld)}</b> now live in your registry.</p>
<table class="price">
<tr><td>Transaction</td><td>${esc(r.txid.slice(0,20))}…</td></tr>
<tr><td>Certificate ID</td><td>${esc(r.category.slice(0,20))}…</td></tr>
<tr><td>Operator</td><td>${esc(r.ownerAddress.slice(0,22))}…</td></tr>
</table>
<div class="row end"><button class="btn acid" id="fin">Done</button></div>
`);
$("fin").onclick = close;
}
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
// ---------- register ----------
async function stepRegister() {
render(`<h3>Registering ${esc(state.name)}</h3>
<p class="sub">Signing in your browser and broadcasting to the chain. Do not close this tab.</p>
<div class="steps-log" id="log"></div>`);
const log = $("log");
const say = (s) => { const d = document.createElement("div"); d.textContent = s; log.appendChild(d); log.scrollTop = log.scrollHeight; };
const words = {
"checking-availability": "checking the name is still free",
"loading-coins": "loading your coins",
"preparing-wallet": "preparing your wallet (one-off setup transaction)",
"prepared": "wallet prepared",
"building": "building the registration transaction",
"signing": "signing with your key — in this browser",
"broadcasting": "broadcasting to the Bitcoin Cash network",
"registered": "registered",
};
try {
const res = await BNS.registerWithBuiltInWallet(await client(), {
wallet: state.wallet, name: state.name, records: {},
onProgress: (s) => say(words[s] ?? s),
feat(sirius-x): tier-based label pricing; badges on search cards + TLD list Single source of truth (js/pricing.js) mirrored on landing, tld.html and the mint flow — same label always shows the same price everywhere. Name tiers (label part): 1 char $5.00 premium-1 2 chars $3.00 short-2 3 chars $2.00 short-3 4–5 chars $1.00 standard 6–7 chars $0.50 long 8–16 chars $0.25 extended 17+ chars $0.10 very-long all-digits ×0.5 (less brandable) contains hyphen ×0.7 TLD tiers (label part): 1 char $10.00 premium-1 2 chars $8.00 short-2 3 chars $6.00 short-3 4–8 chars $5.00 standard 9+ chars $4.00 long Rendering: - Landing #search-results: acid-tinted price badge on each available row; grid grew a fourth column so name + badge + price + button all sit on one line - tld.html search result-card: same price badge next to the Register button on available TLDs - tld.html registered-TLDs table: new 'Mint price' column showing the tier price for every registered TLD, so buyers see the pricing ladder next to concrete examples Mint pipe: - startFlow(name)/startTldFlow(label) resolve the label price via window.siriusPricing (default) but honour opts.serviceFeeSats when the caller passes one — leaves the door open for coupons / operator discounts / oracle overrides in a future revision without reshuffling call sites - The overridden service fee is threaded through quoteRegistration AND registerWithBuiltInWallet/registerWithExternalWallet so the confirm screen and the on-chain output agree Chipnet placeholder rate (250,000 sat/USD) stays in pricing.js; mainnet will swap in a live BCH/USD oracle. Operator-side discounts and coupon codes are the next iteration — deliberately not disclosed in this shipping copy.
2026-09-09 01:09:05 +02:00
...(state._feeOverride ?? {}),
feat(sirius-x): merge register.html into landing via shared mint flow Register.html and the landing were running duplicate name-search UIs. The register one was reported broken; the landing one already works inline. Merged both into the landing: - New js/register-flow.js — the full mint modal + wallet setup (Create / Import / Unlock / WizardConnect / Fund / Confirm / Register / Point it somewhere) extracted from register.html's <script type='module'> and turned into a shared module. Injects its own scoped modal HTML + CSS into the host page on load and exposes window.siriusRegisterName(fullName) as its public entry point. - Landing search results now have Register buttons that call the shared flow directly. The whole 'search -> pick name -> mint' journey stays on one page, no redirects, no duplicate search UI to maintain. - register.html reduced to a redirect stub: preserves ?q= if present, refreshes/JS-forwards to './' (landing), and shows a one-line 'Name search moved to the home page' fallback for JS-off users. Old links keep working; no /register.html deep links are broken. - All nav 'Register' entries now point at './#search-input' (or '../#search-input' on subpages), scrolling straight to the landing search box. Footer injector and every internal href updated the same way. Zero live href='.../register.html' left in the tree. Verified: register.html?q=hello redirects to /?q=hello; landing search 'fresh42abc' -> Register button -> modal opens with 'Register fresh42abc.bch' at the wallet-choice step.
2026-09-07 22:36:02 +02:00
});
state.result = res;
stepDone();
} catch (e) {
err(e);
const row = document.createElement("div"); row.className = "row end";
row.innerHTML = `<button class="btn ghost" id="back">Back</button>`;
sheet.appendChild(row);
$("back").onclick = stepConfirm;
}
}
// ---------- done + point somewhere ----------
function stepDone() {
const r = state.result;
render(`
<h3><span class="ok">✓</span> ${esc(r.displayName)} is yours</h3>
<p class="sub">The certificate is on the chain, held by your key. Nobody can take it back.</p>
<table class="price">
<tr><td>Transaction</td><td>${esc(r.txid.slice(0,20))}…</td></tr>
<tr><td>Certificate ID</td><td>${esc(r.category.slice(0,20))}…</td></tr>
<tr><td>Owner</td><td>${esc(r.ownerAddress.slice(0,22))}…</td></tr>
</table>
<h3 style="margin-top:24px;font-size:1.05rem">Point it somewhere</h3>
<p class="sub">Optional, and changeable any time — only your key can.</p>
<label for="kind">Record type</label>
<select id="kind">
<option value="h">A tiny site stored on the chain itself (h)</option>
<option value="u">Redirect to a web address (u)</option>
<option value="ip">Your own server's IPv4 address (ip)</option>
<option value="tls">TLS certificate fingerprint (tls)</option>
</select>
<label for="val" id="vl">HTML — kept small; it lives inside the transaction</label>
<textarea id="val" spellcheck="false" placeholder="&lt;h1&gt;hello&lt;/h1&gt;"></textarea>
<div class="muted" id="budget"></div>
<div class="row end"><button class="btn ghost" id="skip">Done for now</button>
<button class="btn acid" id="set">Publish record</button></div>
`);
const labels = {
h: ["HTML — kept small; it lives inside the transaction", "<h1>hello</h1>"],
u: ["The https:// address the name should open", "https://example.org"],
ip: ["IPv4 address of your server", "203.0.113.9"],
tls: ["SHA-256 fingerprint of your TLS certificate (hex)", "a1b2c3…"],
};
const budget = () => {
const used = new TextEncoder().encode($("val").value).length;
const max = 200 - 30 - r.name.length;
$("budget").textContent = `${used} / ~${max} bytes used`;
$("budget").style.color = used > max ? "var(--taken,#f6768a)" : "";
};
$("kind").onchange = () => { const [l, p] = labels[$("kind").value]; $("vl").textContent = l; $("val").placeholder = p; budget(); };
$("val").oninput = budget;
budget();
$("skip").onclick = close;
$("set").onclick = async () => {
const records = { [$("kind").value]: $("val").value };
const external = !state.wallet && state.session;
render(`<h3>Publishing record</h3><p class="sub">This moves the certificate — which is how the chain
proves you are the owner.${external ? " Approve it in your wallet." : ""}</p>
<div class="steps-log" id="log"></div>`);
const log = $("log");
const say = (s) => { const d = document.createElement("div"); d.textContent = s; log.appendChild(d); };
try {
const upd = external
? await BNS.setRecordsWithExternalWallet(await client(), {
session: state.session, name: r.displayName, records, onProgress: say,
})
: await BNS.setRecordsWithBuiltInWallet(await client(), {
wallet: state.wallet, name: r.displayName, records, onProgress: say,
});
render(`<h3><span class="ok">✓</span> ${esc(r.displayName)} now points somewhere</h3>
<p class="sub">Update transaction <span class="mono">${esc(upd.txid.slice(0,20))}…</span> is on the chain.
Resolvers pick it up within a block.</p>
<div class="note">Open it with the Silent Mode resolver, or preview it at
<a href="https://navigate.st/bns/${encodeURIComponent(r.displayName)}" target="_blank" rel="noopener" style="color:var(--acid,#d6ff3d)">navigate.st</a>.</div>
<div class="row end"><button class="btn acid" id="fin">Finish</button></div>`);
$("fin").onclick = close;
} catch (e) {
err(e);
const row = document.createElement("div"); row.className = "row end";
row.innerHTML = `<button class="btn ghost" id="back">Back</button>`;
sheet.appendChild(row); $("back").onclick = stepDone;
}
};
}
Reference in a new issue Copy permalink