add the bitcoin wallet sidecar and ui

the owner's work, committed as one unit rather than split: the registration
files (App.tsx, Dock, AppRegistry, hono.ts, the schema and db barrels,
ecosystem.config.cjs) all reference modules under src/servers/{api,sidecar}/wallet
and src/workspaces/officerdev/src/apps/Wallet, so committing the shared plumbing
on its own would leave a commit that does not build.

officer-wallet is a new pm2 peer holding seed material sealed under an owner
passphrase on top of VAULT_STORE_KEY, with an unlock ttl after which the root key
is wiped from memory. five backends: on-chain via esplora, and lnd, clnrest,
lndhub and nwc for lightning. bolt11 encode/decode is implemented in-tree.

no secrets in the diff — the key-shaped literals under sidecar/wallet are the
bolt11 spec vectors and the bip39 "abandon … about" vector. .env.example gains
placeholders only. bun test src/servers/sidecar/wallet: 38 pass, 0 fail.

not reviewed line by line; assembled and verified to build, not audited.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

src/apps/officer-web/Screens/Dashboard/Layout/Dock.tsx

@@ -136,6 +136,7 @@ import {
   Radio,
   Network,
   ArrowDownUp,
+  Bitcoin,
   Receipt,
 } from 'lucide-react';
 
@@ -148,6 +149,7 @@ export const ALL_DOCK_ITEMS: DockItem[] = [
   { label: 'Soulseek', to: '/soulseek', image: '/slskd.png', color: '#ffffff' },
   { label: 'Headscale', to: '/headscale', icon: Network, color: '#818cf8' },
   { label: 'Transmission', to: '/transmission', icon: ArrowDownUp, color: '#e11d48' },
+  { label: 'Wallet', to: '/wallet', icon: Bitcoin, color: '#f7931a' },
   { label: 'Invoices', to: '/invoices', icon: Receipt, color: '#0891b2' },
   { label: 'Editor', to: '/code-editor', icon: Code, color: '#a78bfa' },
   { label: 'Plans', to: '/plans', icon: FileText, color: '#f472b6' },

src/apps/officer-web/Screens/Dashboard/Wallet/WalletScreen.tsx

@@ -0,0 +1,62 @@
+import { useEffect, useMemo } from 'react';
+import { Navigate, useLocation, useParams } from 'react-router';
+import type { LayoutNode } from 'officerdev';
+import { WorkspaceView, DEFAULT_WALLET_SECTION, walletSectionPath, isWalletSection } from 'officerdev';
+import { useDashboardState } from 'state/useDashboardState';
+import { defaultLayout } from './defaultLayout';
+
+// /wallet uses the Workspace/Panel system (like /transmission): the wallet list and section nav on the left,
+// the section itself on the right. Both talk to the officer-wallet sidecar through the /api/wallet auth
+// proxy, which holds no key material of its own — seeds live encrypted in the sidecar and are decrypted
+// there only for the length of an unlock window.
+//
+// The open section is :section in the URL, the open wallet is ?wallet= and any coin-control selection is
+// ?coins=, so both panels read the URL with useParams/useSearchParams rather than passing state between
+// themselves over a channel. This screen backs both /wallet and /wallet/:section and is the single place
+// that decides what an absent or bogus section means.
+
+const ALLOWED_APP_TYPES = new Set<string | null>(['wallet-nav', 'wallet-view', null]);
+
+function normalizeLayout(node: LayoutNode): LayoutNode {
+  if (node.type === 'panel') {
+    return ALLOWED_APP_TYPES.has(node.appType) ? node : { ...node, appType: 'wallet-view' };
+  }
+  const children = node.children.map((c) => {
+    const fixed = normalizeLayout(c.node);
+    return fixed === c.node ? c : { ...c, node: fixed };
+  });
+  const changed = children.some((c, i) => c !== node.children[i]);
+  return changed ? { ...node, children } : node;
+}
+
+export const WalletScreen = () => {
+  const { section } = useParams();
+  const { search } = useLocation();
+  const rawWorkspace = useDashboardState<LayoutNode>('screens/wallet', defaultLayout);
+
+  const workspace = useMemo(() => {
+    const fixed = normalizeLayout(rawWorkspace.value);
+    if (fixed === rawWorkspace.value) return rawWorkspace;
+    return { ...rawWorkspace, value: fixed };
+  }, [rawWorkspace]);
+
+  useEffect(() => {
+    if (rawWorkspace.isLoaded && workspace.value !== rawWorkspace.value) {
+      rawWorkspace.setValue(workspace.value);
+    }
+  }, [rawWorkspace.isLoaded, workspace.value, rawWorkspace.value]);
+
+  // Bare /wallet, or a section that doesn't exist, resolves to a canonical URL rather than rendering a
+  // default while the address bar says something else — the nav highlight is derived from the URL. The
+  // ?wallet= param is deliberately carried through rather than dropped: /wallet?wallet=3 is a legitimate
+  // deep link and canonicalising the section must not silently change which wallet is open.
+  if (!isWalletSection(section)) {
+    return <Navigate to={`${walletSectionPath(DEFAULT_WALLET_SECTION)}${search}`} replace />;
+  }
+
+  return (
+    <div className="h-full w-full pt-2">
+      <WorkspaceView workspace={workspace} locked />
+    </div>
+  );
+};

src/apps/officer-web/Screens/Dashboard/Wallet/defaultLayout.ts

@@ -0,0 +1,11 @@
+import type { LayoutNode } from 'officerdev';
+
+export const defaultLayout: LayoutNode = {
+  type: 'group',
+  id: 'wallet-root',
+  direction: 'horizontal',
+  children: [
+    { node: { type: 'panel', id: 'wallet-nav', appType: 'wallet-nav' }, size: 24 },
+    { node: { type: 'panel', id: 'wallet-view', appType: 'wallet-view' }, size: 76 },
+  ],
+};

src/apps/officer-web/Screens/Dashboard/Wallet/index.tsx

@@ -0,0 +1 @@
+export * from './WalletScreen';

src/apps/officer-web/Screens/Dashboard/index.tsx

@@ -15,6 +15,7 @@ export * from './Soulseek';
 export * from './Headscale';
 export * from './Transmission';
 export * from './Invoices';
+export * from './Wallet';
 export * from './SystemMonitor';
 export * from './Activity';
 export * from './CodeEditor';