Skylight Wallet

This commit changes how a wallet app connects to its backend server. It adds automatic detection of IP addresses, Tor onion addresses, and regular domain names, and adjusts security settings (Tor and SSL) based on what the user types. It also adds a 10-second timeout for Tor connection tests and prevents the 'Continue' button from appearing until a successful test has completed. The changes appear aimed at preventing users from accidentally using insecure combinations, such as SSL over Tor or clearnet HTTP without SSL.

This commit adds a dark theme option to the Skylight Wallet app. It lets users choose between light, dark, or system theme in settings, and adjusts QR code and status icon colors so they remain visible in dark mode. There is no security-relevant change here.

This commit adds an optional 'Verbose Logging' setting to the Skylight Wallet app. When enabled, the app writes detailed logs of wallet operations to a plain text file stored in the app's data folder. The logs include sensitive details such as wallet addresses, transaction destinations, amounts, daemon/proxy addresses, and some API responses. The setting is off by default and must be manually enabled by the user. The main risk is that a user who turns this on may later share the log file with a support person or expose it through a backup, accidentally leaking private wallet activity. The commit itself does not appear to be malicious; it is a debugging feature, but it increases the app's overall sensitivity to data exposure.

This commit updates the list of trusted root certificates used by the Skylight Wallet app and changes how the app verifies HTTPS certificates. The main risk is that before this fix, the app may have trusted too many old or wrong certificates, or may not have properly checked the certificate chain, which could let an attacker intercept or fake wallet server connections. The patch itself is large because it adds a fresh bundle of trusted certificates, but the actual code changes are small and the commit message only says 'Cert verification fix' without explaining what was broken.

This commit simply removes two unused legal/policy text files (privacy policy and terms of service) from the app's asset list. There is no code change, no security fix, and no vulnerability introduced. The files themselves are not deleted from the repository, only excluded from being bundled into the built app.

This commit is a routine rebranding and legal-disclosure update. It renames the app from 'monero_light_wallet' to 'skylight_wallet' across Android, iOS, macOS, Linux, Windows, and web; swaps the package name/namespace to 'org.magicgrants.skylight'; adds new launcher icons; and introduces in-app Terms of Service and Privacy Policy screens. There are no code changes that alter security behavior, cryptography, network handling, or data flow.

This commit is a routine user-interface polish change. It adds a top navigation bar (AppBar) to the 'Receive' and 'Send' screens and moves the screen title from the body into that bar. There is no security-relevant change in the code.

This commit adds an optional app-lock feature to the Skylight Wallet app. When enabled, the user must authenticate with their device's biometric or PIN before accessing the wallet. It is a security improvement, not a vulnerability fix or a new security flaw.

This commit fixes a security weakness where the Monero wallet was created and opened with a hardcoded password, 'pass'. Now the app generates a random 16-byte password for each wallet and stores it in the device's secure storage (like a keychain). It also disables Android's automatic cloud backup of app data. This makes it much harder for someone who gets access to the wallet file to unlock it, because the password is no longer a public, guessable word.

This commit is mostly a user-interface convenience update for a cryptocurrency wallet app. It adds a 'paste from clipboard' button on the send screen, lets the address box expand to multiple lines, removes a couple of unnecessary 'const' keywords, and waits for the Tor privacy network to finish connecting before continuing setup. The changes do not appear to fix a security vulnerability, but the Tor wait could prevent a rare race condition where the app tries to use Tor before it is ready.

A developer removed leftover debug code that artificially inflated the number of new transactions detected by one. With the extra '+1' in place, the wallet would think there was one more new transaction than actually existed, which could trigger a notification or UI update for a non-existent transaction. The fix simply deletes that '+1' so the count is accurate.

This commit is a general bug-fix and reliability update for a Monero wallet app. It tightens balance checks when sending money, improves how pending and confirmed transactions are tracked, replaces an old notification system with a background task, and fixes some UI status icons. There is no clear security vulnerability being patched, but the changes reduce the chance of users accidentally creating invalid transactions or seeing misleading balances.

This commit fixes a UI bug where a newly created wallet's 'restore height' was displayed as 0 instead of the current blockchain height. The restore height tells the wallet from which point in the blockchain to start scanning for transactions. Showing 0 was incorrect and could mislead users, but it did not expose funds or allow unauthorized access. The fix stores the correct height when a wallet is created and reads it back reliably.

This commit fixes a UI status bug in the Skylight Wallet app. The wallet home screen could incorrectly show a 'connected' status when it should still show 'connecting' because the logic didn't account for a wallet that reports itself synced but has a synced block height of zero. The patch also removes two leftover debug print statements. There is no direct security vulnerability visible in the diff.

This commit appears to be a routine bug-fix and polish update for a Monero light wallet app. It fixes a broken wallet-delete routine (the old code compared a variable to null instead of actually setting it to null), improves connection status display, adds a timeout to stats loading, and ensures Tor is ready before fetching blockchain height. There is no clear security vulnerability being patched, and no vendor disclosure or researcher attribution is present.

This commit is a routine development progress patch for a Monero light wallet app. It restructures how the wallet connects to the network, moves some work onto background threads, fixes a bug where a fiat-exchange-rate timer was not being stored/cancelled correctly, and adds a wait-until-Tor-is-ready helper. There is no clear security vulnerability in the diff, but the changes touch sensitive areas (network/Tor setup, wallet refresh, FFI pointer handling) and the patch is incomplete in places (debug print statements left in, a TODO comment, hardcoded wallet password still present).

This commit updates a precompiled Monero wallet library (monero_c) used by the Skylight Wallet Android app. The actual code inside the updated .so files is not shown in the diff, so we cannot determine from this commit alone whether the update fixes a security bug, adds a feature, or is a routine dependency refresh. No security relevance is stated by the project.

This commit is a routine development update titled 'Progress' for the Skylight Wallet app. It mainly refactors how the wallet object is handled (making it nullable to avoid crashes before a wallet is loaded), moves timer logic out of the home screen into a shared model, updates native Monero library files, and adjusts balance/transaction getters. There is no clear security fix or vulnerability being patched in the visible code changes.