fix(wallet): blank send/receive on every open; sweep shows amount; camera option stays visible

Operator-reported (2026-08-05):

- Send/Receive modals reset to a blank slate on every open. Stale state —
  destination, amount, memo, and above all an armed "send all funds"
  toggle — silently carried into the next payment.
- Arming "send all funds" now shows the swept balance in the (disabled)
  amount field instead of a confusing 0; disarming or leaving the
  on-chain tab clears it.
- The scan modal no longer hides "Scan with camera" on plain-http desktop
  (browsers only allow getUserMedia on secure origins): the option stays
  visible with a one-line explanation, and choosing it surfaces the HTTPS
  requirement with photo/paste fallbacks. The companion app's native
  scanner path is untouched and still takes priority.
- What's New entry for v1.7.125-alpha.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

neode-ui/src/components/ReceiveBitcoinModal.vue

@@ -107,7 +107,21 @@ const props = defineProps<{
 const emit = defineEmits<{ close: []; received: []; scan: [] }>()
 
 watch(() => props.show, (open) => {
-  if (open && props.autoGenerate && receiveMethod.value === 'onchain' && !onchainAddress.value) {
+  if (!open) return
+  // Blank slate on every open: a leftover amount/memo/token or a previous
+  // invoice quietly carrying into a new receive flow is exactly the stale-
+  // state class the operator flagged on the send modal (2026-08-05).
+  receiveMethod.value = 'onchain'
+  invoiceAmount.value = 0
+  invoiceMemo.value = ''
+  invoiceResult.value = ''
+  onchainAddress.value = ''
+  arkAddress.value = ''
+  ecashToken.value = ''
+  ecashResult.value = ''
+  error.value = ''
+  processing.value = false
+  if (props.autoGenerate && receiveMethod.value === 'onchain') {
     void receive()
   }
 })

neode-ui/src/components/SendBitcoinModal.vue

@@ -327,15 +327,57 @@ const isSweep = computed(() => sendMethod.value === 'onchain' && sendAll.value)
 
 function toggleSendAll() {
   sendAll.value = !sendAll.value
-  if (sendAll.value && onchainBalance.value === null) {
-    rpcClient.call<{ balance_sats: number }>({ method: 'lnd.getinfo', timeout: 5000 })
-      .then((res) => { onchainBalance.value = res.balance_sats || 0 })
-      .catch(() => { /* balance hint is best-effort */ })
+  if (!sendAll.value) {
+    // Disarming clears the field — a swept-balance figure left behind reads
+    // as a typed amount.
+    amount.value = 0
+    return
   }
+  // Arming shows the swept balance IN the (disabled) amount field — a field
+  // stuck at 0 while "send all" is lit read as "sending nothing" (operator
+  // feedback 2026-08-05). Refresh the figure on every arm.
+  const applyBalance = () => {
+    if (sendAll.value && onchainBalance.value !== null) amount.value = onchainBalance.value
+  }
+  applyBalance()
+  rpcClient.call<{ balance_sats: number }>({ method: 'lnd.getinfo', timeout: 5000 })
+    .then((res) => { onchainBalance.value = res.balance_sats || 0; applyBalance() })
+    .catch(() => { /* balance hint is best-effort */ })
 }
 
 // Leaving the on-chain tab disarms the sweep so it can never apply elsewhere
-watch(sendMethod, (m) => { if (m !== 'onchain') sendAll.value = false })
+// (and drops the swept-balance figure it wrote into the amount field).
+watch(sendMethod, (m) => {
+  if (m !== 'onchain' && sendAll.value) {
+    sendAll.value = false
+    amount.value = 0
+  }
+})
+
+// Every open starts from a blank slate. Stale state from the previous send —
+// destination, amount, and above all an armed "send all funds" toggle — is
+// dangerous to inherit invisibly (operator feedback 2026-08-05).
+watch(() => props.show, (shown) => {
+  if (!shown) return
+  sendMethod.value = 'lightning'
+  amountUnit.value = 'sats'
+  amountEntry.value = 0
+  dest.value = ''
+  error.value = ''
+  successInfo.value = null
+  ecashToken.value = ''
+  sendAll.value = false
+  onchainBalance.value = null
+  feePreset.value = 'standard'
+  customConfTarget.value = null
+  customSatPerVbyte.value = null
+  resolvedFeeParams.value = {}
+  feeEstimate.value = null
+  confirming.value = false
+  confirmBalance.value = null
+  invoiceAmountSats.value = null
+  processing.value = false
+})
 
 // --- On-chain network fee: presets map to LND confirmation targets; custom
 // --- takes a block target or an explicit sat/vB rate (rate wins).

neode-ui/src/components/WalletScanModal.vue

@@ -51,10 +51,16 @@
                 </svg>
                 <p class="text-sm text-white/60 text-center">How do you want to read the QR?</p>
                 <!-- hasNativeQr: on the companion (plain http, no getUserMedia)
-                     the native bridge still provides a live camera -->
-                <button v-if="!liveCameraUnavailable || hasNativeQr" @click="chooseCamera" class="glass-button w-full px-4 py-2.5 rounded-lg text-sm font-medium">
+                     the native bridge still provides a live camera. On plain-http
+                     desktop the button stays VISIBLE — hiding it read as "the
+                     scanner is gone" (operator, 2026-08-05); choosing it surfaces
+                     the browser's HTTPS requirement with the fallbacks instead. -->
+                <button @click="chooseCamera" class="glass-button w-full px-4 py-2.5 rounded-lg text-sm font-medium">
                   Scan with camera
                 </button>
+                <p v-if="liveCameraUnavailable && !hasNativeQr" class="text-[11px] text-white/40 text-center -mt-1">
+                  Your browser only allows live camera on HTTPS pages — the photo and paste options below always work.
+                </p>
                 <button @click="photoInput?.click()" class="glass-button w-full px-4 py-2.5 rounded-lg text-sm font-medium">
                   Upload / take a photo of the QR
                 </button>

neode-ui/src/views/settings/AccountInfoSection.vue

@@ -362,6 +362,20 @@ init()
               </button>
             </div>
             <div class="overflow-y-auto flex-1 min-h-0 space-y-6 pr-1">
+              <!-- v1.7.125-alpha -->
+              <div>
+                <div class="flex items-center gap-2 mb-3">
+                  <span class="text-xs font-mono px-2 py-0.5 rounded bg-orange-500/20 text-orange-300">v1.7.125-alpha</span>
+                  <span class="text-xs text-white/40">August 6, 2026</span>
+                </div>
+                <div class="space-y-3 text-sm text-white/80 pl-3 border-l border-white/10">
+                  <p><strong>The Lightning, Bitcoin, Electrum and mesh screens work again behind the login gate.</strong> Since the gate went up, those screens would load their frame and then show every number as unreachable. The gate was deliberately hiding your login from the apps it protects — right for third-party apps, wrong for the node's own screens, which need that login to fetch your data. The gate now removes only its own credential and the node's own screens explicitly receive yours. The same mistake was also quietly signing you out of apps with their own logins — Vaultwarden, Nextcloud, Gitea — on every single request; that stops too.</p>
+                  <p><strong>IndeeHub heals itself.</strong> Three separate faults: its database helper was recreated with permissions too tight to read its own files (it had crashed and restarted about ten thousand times on one node); on another node two of its seven parts could never be recreated at all because of how the node asked for their storage — the node would remove the old part and then fail to build its replacement, leaving the app half-missing forever; and a regenerated password could lock the app out of a database that keeps the original. All three are fixed, and the storage fault fixes the same trap for every future multi-part app.</p>
+                  <p><strong>Send and Receive open clean every time.</strong> Whatever you typed last — an address, an amount, and above all an armed "send all funds" toggle — no longer quietly carries over into the next payment. And choosing "send all funds" now shows the amount being swept instead of a confusing 0.</p>
+                  <p><strong>The camera scanner option no longer vanishes on desktop.</strong> Browsers only allow the live camera on secure (HTTPS) pages, and the scan window used to silently hide the camera choice on plain connections, which read as "the scanner is gone". The option now stays visible and explains itself, and the photo and paste routes always work. The companion app's built-in scanner is untouched.</p>
+                  <p>Also: the app login page uses the Archipelago mark and stays centred on phones with the keyboard open, app icons in the install window are no longer cropped, and when the node fails to build a container it now records the actual reason instead of a one-line stub that hid the cause of the IndeeHub fault for days.</p>
+                </div>
+              </div>
               <!-- v1.7.124-alpha -->
               <div>
                 <div class="flex items-center gap-2 mb-3">