6 Commits

Include renames

Author	SHA1	Message	Date
clawbot	8ac2c87c2c	harden: debug mode logs only a request's origin and JSON-RPC method (closes #410) ... With debug mode on, debugFetch logged every request's full URL and body, so an RPC endpoint with an API key in its path or query string printed that key to the console on every request. It now logs the HTTP method, the URL's origin and, for a JSON-RPC body, the method name. The balance refresh and token lookup log the RPC endpoint by its origin too. Failed RPC calls print ethers' short message, since its full message for an HTTP error carries the request URL. A failed endpoint check in settings prints the endpoint's origin, since fetch's error for a URL with a user name and password carries the whole URL. The README's DEBUG Mode Policy says what debug mode logs. Model: opus-5-5	2026-10-04 21:09:04 +02:00
clawbot	bd0a626e7b	harden: stop the background reading the shared state singleton, and enforce it at build time (closes #324) ... Five defects, one of which destroyed every wallet, came from src/background reading and writing the module-level state singleton the MV3 worker never populates, which silently served DEFAULT_STATE. Each point fix created the next defect. The background now has its own per-call getState() and a queued read-modify-write updateState(); the singleton is unreachable from it, and an unpopulated read throws instead of serving defaults. The prohibition is enforced by the build, not by review: build.js asserts over esbuild's own metafile that no forbidden module is an input of a background bundle, so every specifier syntax esbuild resolves is covered, and both halves of the table are checked for rot -- a stale key, a stale module, an empty list, or an unlisted entry point under src/background/ all fail the build. The ESLint rule remains as fast local feedback and reads the same shared table. Known bounds are documented where the table lives. Also closes #320: getProvider() now requires a validated network id, so a cold worker no longer prepares a non-mainnet dApp transaction for mainnet and gets refused by the wallet's own verifier. backgroundRefresh() no longer mutates address objects across a network round trip, the broadcast path takes its endpoint and chain id from one snapshot, and eight test storage stubs now structured-clone on get as the real chrome.storage.local does. closes #320	2026-08-23 17:57:30 +02:00
clawbot	ff3387d8cf	feat: vendor and censor the phishing blocklist at build time (closes #219)	2026-08-17 10:05:56 +02:00
clawbot	6f6bc2e7b5	fix: drive background refresh and phishing update from alarms (closes #158)	2026-08-11 15:38:28 +02:00
user	da428a3815	fix: preserve ENS names on lookup failure, add debug logging (closes #22) ... Two issues that could cause ENS names to disappear: 1. refreshBalances: on ENS lookup error, addr.ensName was set to null, wiping any previously resolved name. Now keeps the existing value on error — only overwrites on successful lookup. 2. ens.js cache: failed lookups were cached as null for 12 hours, preventing retries even after transient errors resolved. Now skips caching on failure so subsequent lookups retry immediately. Added debug logging to ENS reverse lookups in refreshBalances.	2026-02-27 14:24:32 -08:00
sneak	d28d5a5a51	Add address color dots and cached ENS reverse lookups ... Deterministic colored dots derived from address bytes (16-color palette) displayed before every address. ENS reverse resolution for transaction counterparties with 12-hour localStorage cache.	2026-02-26 03:26:52 +07:00