feat: add trezor send

[ben-kaufman]

Description

This PR:

1. Adds paired Trezor wallets as funding sources throughout the normal on-chain Send flow, including scanner, paste, manual entry, contacts, fee selection, confirmation, signing, broadcasting, and success handling.
2. Hardens Trezor session recovery and preserves hardware-wallet activity and contact metadata while wallet snapshots catch up.

The Send UI follows the Bitkit Wallet design.

Receive support will follow in a separate stacked PR.

Linked Issues/Tasks

N/A

Screenshot / Video

QA Notes

Manual Tests

• 1. Trezor wallet → Send → enter a Bitcoin address and amount → Continue: the button loads once, Confirm opens, and repeated taps do not duplicate preparation.
• 2. Send Confirm → choose Trezor → Sign With Device → approve on Trezor: the transaction broadcasts and Success shows the hardware-wallet activity.
• 3. Trezor passphrase wallet → Send → enter passphrase: the paired account reconnects and the operation resumes.
• 4. Trezor-funded Send → scan a Lightning or LNURL request: Bitkit explains that a Bitcoin address is required.
• 5. regression: Send → switch between Savings, Spending, and Trezor: available balance and fee-aware maximum update for each source.
• 6. regression: cancel or disconnect during signing → retry: Bitkit reconnects without creating or broadcasting a duplicate transaction.

Automated Checks

• Unit tests added or extended in HwFundingSignerTests.swift and TrezorSessionFailureTests.swift: cover source coordination, timeouts, stale-session retry, retained signed transactions, and failure classification.
• Unit tests extended in HwSnapshotMergeTests.swift: cover pending sent activity and contact preservation during watcher reconciliation.
• Unit tests extended in ShopPaymentRequestTests.swift: cover hardware-wallet on-chain-only scan handling.
• Focused iOS unit tests passed.
• All changed Swift files pass SwiftFormat; translation validation and diff checks pass.

[greptile-apps]

Greptile Summary

This PR integrates paired Trezor wallets into normal on-chain send and receive flows and hardens session recovery and hardware activity reconciliation.

• Adds hardware-wallet funding-source selection, fee preparation, device signing, broadcast retry, and wallet-scoped success lookup.
• Adds Trezor receive-address display, copying, QR presentation, passphrase reconnection, and on-device verification.
• Serializes connection operations and preserves pending hardware activity and contact metadata during watcher reconciliation.

Confidence Score: 3/5

The PR should not merge until pending hardware activity survives process recreation and timeout cleanup can no longer tear down a retry’s newly established Trezor session.

A restart can remove a just-broadcast hardware activity before Electrum observes it, while an immediate retry after a device timeout can race delayed stale-session cleanup and lose the replacement connection.

Files Needing Attention: Bitkit/Services/CoreService.swift, Bitkit/Services/HwSnapshotMerge.swift, Bitkit/ViewModels/HwFundingSigner.swift, Bitkit/Managers/TrezorManager.swift

Important Files Changed

Filename	Overview
Bitkit/ViewModels/HwFundingSigner.swift	Generalizes hardware signing for ordinary sends and adds non-structural timeouts, but asynchronous stale-session cleanup can race an immediate retry.
Bitkit/Managers/TrezorManager.swift	Serializes connection operations and retries stale sessions, while the separate reset path remains able to clear newer connection state.
Bitkit/Services/CoreService.swift	Protects newly broadcast hardware activity from watcher pruning, but stores the protection only in process memory.
Bitkit/Services/HwSnapshotMerge.swift	Preserves pending sends and contact metadata when supplied the pending-ID set, but intentionally prunes unprotected pending rows.
Bitkit/Managers/HwWalletManager.swift	Adds hardware receive-address derivation and verification plus funding-source balance support.
Bitkit/Views/Wallets/Send/SendSheet.swift	Integrates hardware source selection and signing routes throughout the existing send lifecycle.
Bitkit/Views/Wallets/Receive/ReceiveQr.swift	Adds Trezor receive QR, copy, device verification, and passphrase recovery states.

Sequence Diagram

sequenceDiagram
    participant User
    participant Send as Send Flow
    participant HW as Hardware Wallet Manager
    participant Trezor
    participant Electrum
    participant Activity
    User->>Send: Select Trezor funding source
    Send->>HW: Compose payment and estimate fee
    HW->>Electrum: Load account and UTXOs
    Electrum-->>HW: Account state
    Send->>HW: Sign and broadcast
    HW->>Trezor: Verify identity and sign PSBT
    Trezor-->>HW: Signed transaction
    HW->>Electrum: Broadcast transaction
    Electrum-->>HW: Transaction ID
    Send->>Activity: Persist wallet-scoped sent activity
    Send-->>User: Show success

Loading

_{Reviews (1): Last reviewed commit: "feat: add trezor send and receive" | Re-trigger Greptile}