feat: end-to-end dust protection (classification, restrictions, donation, report)

flows/dustAnalysisReport.yaml

@@ -0,0 +1,156 @@
+appId: io.hexawallet.keeper
+---
+# Tests the complete Dust Report flow available from Wallet Settings.
+# Covers: settings entry point, start screen, scanning phase, result screens
+# (findings and empty state), error state cancel path, and the inline
+# Donate Dust confirmation sheet.
+
+# ── Navigate to Wallet Settings ───────────────────────────────────────────
+- tapOn:
+    id: 'view_wallet_0'
+    index: 0
+- waitForAnimationToEnd:
+    timeout: 3000
+- swipe:
+    from:
+      id: 'list_transactions'
+    direction: DOWN
+    duration: 2000
+- waitForAnimationToEnd:
+    timeout: 5000
+- repeat:
+    while:
+      visible:
+        id: 'icon_unconfirmed_0'
+    commands:
+      - runFlow: refreshwallet.yaml
+- tapOn:
+    id: 'btn_Settings'
+- waitForAnimationToEnd:
+    timeout: 1000
+
+# ── Wallet Settings: assert Dust Report row ───────────────────────────────
+- assertVisible: 'Dust Report'
+- assertVisible: 'View potential dust activity for this wallet'
+
+# ── Open Dust Report ──────────────────────────────────────────────────────
+- tapOn:
+    id: 'btn_setting_Dust Report'
+- waitForAnimationToEnd:
+    timeout: 2000
+
+# ── Start screen assertions ───────────────────────────────────────────────
+- assertTrue: ${output.text_header_title = "Dust Report"}
+- assertVisible: 'Keeper can scan this wallet for dust activity and show coins that may reduce privacy if spent.'
+- assertVisible:
+    id: 'btn_primaryText'
+- assertVisible:
+    id: 'btn_secondaryText'
+
+# ── Cancel from start screen ──────────────────────────────────────────────
+- tapOn:
+    id: 'btn_secondaryText'
+- waitForAnimationToEnd:
+    timeout: 1000
+# Back on Wallet Settings
+- assertVisible: 'Dust Report'
+
+# ── Re-open and Run Report ────────────────────────────────────────────────
+- tapOn:
+    id: 'btn_setting_Dust Report'
+- waitForAnimationToEnd:
+    timeout: 2000
+- tapOn:
+    id: 'btn_primaryText'
+- waitForAnimationToEnd:
+    timeout: 2000
+
+# ── Scanning phase assertions ─────────────────────────────────────────────
+- assertTrue: ${output.text_header_title = "Scanning Wallet"}
+- assertVisible: 'Keeper is checking this wallet for potential dust activity. This may take a few minutes.'
+
+# Wait up to 90 s for the scan to finish (Electrum round-trip + backfill)
+- extendedWaitUntil:
+    notVisible: 'Scanning Wallet'
+    timeout: 90000
+- waitForAnimationToEnd:
+    timeout: 2000
+
+# ── Result screen: findings or empty state ────────────────────────────────
+- runFlow:
+    when:
+      visible: 'Dust Report'
+    commands:
+      # ── Findings result ─────────────────────────────────────────────────
+      - runFlow:
+          when:
+            visible: 'Keeper found coins or transactions that may reduce wallet privacy.'
+          commands:
+            - assertVisible: 'Keeper found coins or transactions that may reduce wallet privacy.'
+            # Summary card
+            - assertVisible: 'Do Not Spend coins'
+            - assertVisible: 'Amount'
+            - assertVisible: 'Past dust spends'
+            - assertVisible: 'Last scanned'
+            # Section headers
+            - assertVisible: 'Active Dust'
+            - assertVisible: 'Linked Coins'
+            - assertVisible: 'Past Dust Spends'
+            # Inline Donate Dust CTA (only when eligible DNS UTXOs exist)
+            - runFlow:
+                when:
+                  id: 'btn_secondaryText'
+                commands:
+                  - tapOn:
+                      id: 'btn_secondaryText'
+                  - waitForAnimationToEnd:
+                      timeout: 1000
+                  # Donate Dust confirmation modal
+                  - assertVisible: 'Donate Dust'
+                  - assertVisible: 'Donating can help clear dust / Do Not Spend coins for better privacy.'
+                  # Dismiss via Cancel
+                  - tapOn:
+                      id: 'btn_secondaryText'
+                  - waitForAnimationToEnd:
+                      timeout: 1000
+            # Done CTA
+            - tapOn:
+                id: 'btn_primaryText'
+            - waitForAnimationToEnd:
+                timeout: 1000
+
+- runFlow:
+    when:
+      visible: 'No Dust Found'
+    commands:
+      # ── Empty state ─────────────────────────────────────────────────────
+      - assertTrue: ${output.text_header_title = "No Dust Found"}
+      - assertVisible: 'Keeper did not find potential dust activity in this wallet.'
+      # No "Donate Dust" secondary button in empty state
+      - assertNotVisible: 'Donate Dust'
+      - tapOn:
+          id: 'btn_primaryText'
+      - waitForAnimationToEnd:
+          timeout: 1000
+
+# ── Error state path (separate run) ──────────────────────────────────────
+# This block is skipped unless a network failure causes the scan to fail.
+- runFlow:
+    when:
+      visible: 'Report Not Completed'
+    commands:
+      - assertTrue: ${output.text_header_title = "Report Not Completed"}
+      - assertVisible: 'Keeper could not complete the dust report. Try again.'
+      - assertVisible: 'Try Again'
+      - assertVisible: 'Cancel'
+      # Cancel returns to Wallet Settings
+      - tapOn:
+          id: 'btn_secondaryText'
+      - waitForAnimationToEnd:
+          timeout: 1000
+
+# ── Navigate back to Home ─────────────────────────────────────────────────
+- tapOn:
+    id: 'btn_back'
+    repeat: 2
+    delay: 500

flows/dustDescendantClassification.yaml

@@ -0,0 +1,69 @@
+appId: io.hexawallet.keeper
+---
+# Precondition: Wallet at index 0 must have UTXOs with the full address-taint
+# model applied (dust-descendant-classification). This requires:
+#   - At least one UTXO with dustReason 'descendant' or 'adjacent' (classified
+#     via BFS forward propagation from an initially tainted address)
+#   - At least one transaction tagged 'potential-dust-spend' in the wallet's
+#     transaction history
+# Run a full dust scan (hardRefresh + dustScan: true) before this flow.
+
+# ── Navigate to Wallet Details ─────────────────────────────────────────────
+- tapOn:
+    id: 'view_wallet_0'
+    index: 0
+- waitForAnimationToEnd:
+    timeout: 3000
+
+# ── Open Manage Coins (UTXOManagement) ────────────────────────────────────
+- tapOn: 'View All Coins'
+- waitForAnimationToEnd:
+    timeout: 3000
+
+# ── Descendant / adjacent UTXOs show "Do Not Spend" chip ─────────────────
+- assertVisible: 'Do Not Spend'
+
+# ── Tap a Do Not Spend UTXO that carries a descendant or adjacent reason ──
+# We tap the second occurrence to increase the chance of hitting a non-initial
+# UTXO. Adjust the index if the wallet layout differs.
+- tapOn:
+    text: 'Do Not Spend'
+    index: 1
+- waitForAnimationToEnd:
+    timeout: 2000
+
+# ── UTXO Details: descendant reason string ───────────────────────────────
+# A descendant/adjacent UTXO shows "Linked to potential dust spend" as its
+# reason. If only initial UTXOs are present the assertion is skipped via runFlow.
+- runFlow:
+    when:
+      visible: 'Linked to potential dust spend'
+    commands:
+      - assertVisible: 'Linked to potential dust spend'
+      - assertVisible: 'Keeper marked this coin Do Not Spend to help protect wallet privacy.'
+      - assertVisible: 'Mark Spendable'
+
+# ── Navigate back to Wallet Details ──────────────────────────────────────
+- tapOn:
+    id: 'btn_back'
+- waitForAnimationToEnd:
+    timeout: 1000
+
+# ── Transaction history: assert Potential dust spend label ────────────────
+# Scroll the transaction list to surface labelled transactions.
+- swipe:
+    from:
+      id: 'list_transactions'
+    direction: UP
+    duration: 1000
+- waitForAnimationToEnd:
+    timeout: 2000
+- runFlow:
+    when:
+      visible: 'Potential dust spend'
+    commands:
+      - assertVisible: 'Potential dust spend'
+
+# ── Navigate back to Home ─────────────────────────────────────────────────
+- tapOn:
+    id: 'btn_back'

flows/dustDonation.yaml

@@ -0,0 +1,80 @@
+appId: io.hexawallet.keeper
+---
+# Precondition: Wallet at index 0 must have at least one UTXO classified as
+# doNotSpend so that the Donate Dust footer CTA and the confirmation sheet are
+# available. This flow exercises the donation confirmation UI and the cancel
+# path. The actual broadcast is not triggered so no test funds are spent.
+
+# ── Navigate to Wallet Details ─────────────────────────────────────────────
+- tapOn:
+    id: 'view_wallet_0'
+    index: 0
+- waitForAnimationToEnd:
+    timeout: 3000
+
+# ── Open Manage Coins ─────────────────────────────────────────────────────
+- tapOn: 'View All Coins'
+- waitForAnimationToEnd:
+    timeout: 3000
+
+# ── Assert Donate Dust footer CTA is visible ─────────────────────────────
+- assertVisible:
+    id: 'btn_Donate Dust'
+
+# ── Tap Donate Dust to open confirmation sheet ────────────────────────────
+- tapOn:
+    id: 'btn_Donate Dust'
+- waitForAnimationToEnd:
+    timeout: 2000
+
+# ── Assert confirmation modal content ────────────────────────────────────
+- assertVisible: 'Donate Dust?'
+- assertVisible: 'Donating can help clear dust / Do Not Spend coins for better privacy.'
+
+# ── Cancel path: sheet closes without navigating ─────────────────────────
+- tapOn:
+    id: 'btn_secondaryText'
+- waitForAnimationToEnd:
+    timeout: 1000
+# Modal dismissed; Manage Coins screen is still visible
+- assertVisible:
+    id: 'btn_Donate Dust'
+
+# ── Confirm path: tap Donate Dust primary button ──────────────────────────
+- tapOn:
+    id: 'btn_Donate Dust'
+- waitForAnimationToEnd:
+    timeout: 2000
+- assertVisible: 'Donate Dust?'
+- tapOn:
+    id: 'btn_primaryText'
+- waitForAnimationToEnd:
+    timeout: 5000
+
+# After confirming, one of two outcomes occurs:
+# 1. Navigation to SendConfirmation (donation amount > fee)
+# 2. Toast "These coins are too small to donate" (amount <= fee)
+- runFlow:
+    when:
+      visible: 'Sending to address'
+    commands:
+      # Donation mode: fee priority switcher must NOT be visible (locked to Low)
+      - assertNotVisible: 'Transaction Priority'
+      # Navigate back without broadcasting
+      - tapOn:
+          id: 'btn_back'
+      - waitForAnimationToEnd:
+          timeout: 1000
+- runFlow:
+    when:
+      visible: 'These coins are too small to donate on their own.'
+    commands:
+      - assertVisible: 'These coins are too small to donate on their own.'
+
+# ── Navigate back to Home ─────────────────────────────────────────────────
+- tapOn:
+    id: 'btn_back'
+- waitForAnimationToEnd:
+    timeout: 500
+- tapOn:
+    id: 'btn_back'

flows/dustSanity.yaml

@@ -0,0 +1,31 @@
+appId: io.hexawallet.keeper
+---
+# Sanity flow that exercises the full dust protection feature suite in order.
+# Requires: wallet at index 0 has at least one dust UTXO (< 5,000 sats on a
+# reused or out-of-order address) that has been classified as doNotSpend by a
+# prior refresh. Run refreshwallet.yaml first if needed.
+#
+# Flows exercised (in dependency order):
+#   1. dustUTXOClassification  — detection, UI indicators, manual overrides
+#   2. dustDescendantClassification — BFS taint propagation + tx labels
+#   3. dustSpendRestrictions   — balance filter + selection warning modal
+#   4. dustDonation            — Donate Dust CTA + confirmation sheet
+#   5. dustAnalysisReport      — Wallet Settings entry → full report flow
+
+- runFlow: dustUTXOClassification.yaml
+- waitForAnimationToEnd:
+    timeout: 2000
+
+- runFlow: dustDescendantClassification.yaml
+- waitForAnimationToEnd:
+    timeout: 2000
+
+- runFlow: dustSpendRestrictions.yaml
+- waitForAnimationToEnd:
+    timeout: 2000
+
+- runFlow: dustDonation.yaml
+- waitForAnimationToEnd:
+    timeout: 2000
+
+- runFlow: dustAnalysisReport.yaml