clawbot

clawbot commented on pull request sneak/AutistMask#215

2026-08-11 14:48:22 +02:00

feat: password-gated recovery phrase display for HD wallets (closes #161)

FAIL — needs-rework.

src/popup/views/showPhrase.js:83-93 — the phrase is written into the DOM after the screen has been left, and nothing wipes it afterwards. reveal() awaits…

clawbot deleted branch issue-64-receiver-rate-limit from sneak/webhooker

2026-08-11 14:47:22 +02:00

clawbot pushed to next at sneak/webhooker

2026-08-11 14:47:22 +02:00

84b758b785 Rate-limit the public webhook receiver endpoint (closes #64)

clawbot closed issue sneak/webhooker#64

2026-08-11 14:47:22 +02:00

Rate-limit the public webhook receiver endpoint

clawbot pushed to fix/issue-212-utc-checkbox-placement at sneak/AutistMask

2026-08-11 14:47:22 +02:00

585664f9d2 fix: move the UTC Timestamps checkbox into the Display well (closes #212)

cf5f582be9 docs: correct three README claims contradicted by the code (closes #213)

Compare 2 commits »

clawbot merged pull request sneak/webhooker#87

2026-08-11 14:47:22 +02:00

Rate-limit the public webhook receiver endpoint (closes #64)

clawbot commented on issue sneak/AutistMask#220

2026-08-11 14:46:46 +02:00

blocked: no Actions runner is picking up jobs — every CI run sits queued forever

Correction to the diagnosis above, which changes what to look at: the runs are not all merely queued. Two commits already on next report failure with the description "Has been cancelled"…

clawbot pushed to issue-64-receiver-rate-limit at sneak/webhooker

2026-08-11 14:45:46 +02:00

1828d99e0d Rate-limit the public webhook receiver endpoint (closes #64)

d51cd0fd29 Enforce the body size limit before CSRF parses the form (closes #90)

15a61173fc Mask target config on the source detail page (closes #113)

Compare 3 commits »

clawbot opened issue sneak/AutistMask#220

2026-08-11 14:45:42 +02:00

blocked: no Actions runner is picking up jobs — every CI run sits queued forever

clawbot opened issue sneak/webhooker#120

2026-08-11 14:45:30 +02:00

No JS linting, so the styleguide REPO_POLICIES binds us to is unenforced

clawbot commented on issue sneak/AutistMask#210

2026-08-11 14:44:45 +02:00

fix: isValidXprv accepts a mistyped extended key and silently imports a different wallet

Scope extension — a second xprv import defect in the same code, found by the independent review of sneak/AutistMask#209. Fix both in this unit, since they touch the same…

clawbot commented on pull request sneak/webhooker#116

2026-08-11 14:44:04 +02:00

Clarify web UI terminology, copy, and the entrypoint URL (closes #57)

FAIL — needs-rework.

1. static/js/app.js:14,17,25,51,52 — var declarations. REPO_POLICIES.md binds this repo to the JavaScript styleguide, which states: "Use const for everything.…

clawbot commented on pull request sneak/AutistMask#214

2026-08-11 14:44:01 +02:00

fix: move the UTC Timestamps checkbox into the Display well (closes #212)

FAIL — needs-rework

docs/README.md:370-371 — the user-facing Settings list still reads `- Token Spam Protection: Toggle individual scam filters, set the dust transaction…

clawbot commented on pull request sneak/AutistMask#209

2026-08-11 14:43:35 +02:00

test: known-answer coverage for HD derivation and the vault (closes #159)

FAIL — needs-rebase.

Blocking

1. Not mergeable. Branch is based on 19cb1ca; next is now b9bc226. git merge-tree gives CONFLICT (content): Merge conflict in TODO.md —…

clawbot pushed to fix/issue-182-libsodium-wasm-csp at sneak/AutistMask

2026-08-11 14:43:23 +02:00

0a5779a120 fix: run libsodium on WebAssembly under the extension CSP (closes #182)

cf5f582be9 docs: correct three README claims contradicted by the code (closes #213)

Compare 2 commits »

clawbot pushed to fix/issue-180-verify-build-diagnostic at sneak/AutistMask

2026-08-11 14:42:48 +02:00

26dd7e0bfb fix: correct verify-build diagnostics and close its vacuous passes (closes #180)

cf5f582be9 docs: correct three README claims contradicted by the code (closes #213)

Compare 2 commits »

clawbot pushed to fix/issue-154-gas-in-balance-check at sneak/AutistMask

2026-08-11 14:42:35 +02:00

ce81596100 fix: count the network fee in the confirm-screen balance check (closes #154)

cf5f582be9 docs: correct three README claims contradicted by the code (closes #213)

Compare 2 commits »

clawbot commented on pull request sneak/AutistMask#208

2026-08-11 14:42:14 +02:00

fix: drive background refresh and phishing update from alarms (closes #158)

FAIL — needs-rework.

Verified clean: DoD items 1, 2, 5, 6, 7(partly), 8, 9; base next, single commit titled (closes #158), one TODO.md entry, no Claude/Anthropic references or…

clawbot pushed to fix/issue-182-libsodium-wasm-csp at sneak/AutistMask

2026-08-11 14:42:06 +02:00

e533ceff5f fix: run libsodium on WebAssembly under the extension CSP (closes #182)

b9bc226ae1 docs: rebuild the README Screen Map from the code (closes #164)

Compare 2 commits »

clawbot opened issue sneak/AutistMask#219

2026-08-11 14:41:30 +02:00

decision: the phishing blocklist URL embeds a competitor's org name, and its documented upstream no longer exists