4 Commits

Include renames

Author	SHA1	Message	Date
clawbot	bb60b399ec	test: tighten two checks in the persisted-field harness (closes #379) ... The polarity check now counts only `hostile` and `falsy` values, not a `hostileRestore` value, which reaches only the views its entry names. The stale index 5 moves into `hostile` for `selectedWallet` and `selectedAddress`, as each field's one value still truthy after the floor. Each `hostileRestore` entry declares whether its boot lands on its view or falls back to Home, and the test checks the one view on screen. A value driven onto every restorable view lists only the views it falls back on, so a view added later is driven by default. The header and the README restate the remaining limits as built and say which boots are held to where the popup lands. Model: opus-5-5	2026-10-07 11:59:14 +02:00
clawbot	f86740ce69	test: the popup boot's stand-in for filterTransactions returns the real shape (closes #429) ... The stand-in in tests/support/popupBoot.js returned a bare list, while the real filterTransactions returns { transactions, newFraudContracts }. Home, AddressDetail and AddressToken read both fields, so every test boot onto one of them threw inside its transaction loading, logged loadHomeTxs failed or loadTransactions failed, and never ran the rest of that code. The stand-in now returns the real shape, and tests/persistedFieldContract.test.js boots onto each of the three views and asserts neither message is logged. Model: opus-5-5	2026-10-05 01:59:16 +02:00
clawbot	1144fdb71b	harden: key remembered site permissions by full origin (closes #402) ... allowedSites and deniedSites held the bare hostname, so a grant to https://dapp.example also authorised http://dapp.example and every port on that host, and the connection, transaction and signature prompts named only the hostname. Both lists now store and match the full origin (scheme://host[:port]), the key the connections approved without Remember already used. The prompts, the Settings site lists and AUTISTMASK_REMOVE_SITE use the origin too. Entries saved by hostname are not migrated (pre-1.0): they match no site. Model: opus-5-5	2026-10-04 18:09:04 +02:00
clawbot	a098bb0c32	fix: floor malformed allowedSites, fraudContracts and selectedToken entries (closes #362) ... A stored allowedSites whose value was not a list rendered a working popup and then made every subsequent save fail silently, so the user operated a wallet that persisted nothing -- worse than a blank popup, which is at least visibly broken. fraudContracts and selectedToken had the same shape: a container floored by truthiness or not at all, while its entries were dereferenced. Entries are now floored as well as containers, following the idiom #311 established, and a failed save raises a persistent banner instead of vanishing into a swallowed rejection. The per-field justifications that used to live in a hand-written header are replaced by a contract test that drives each field's hostile and falsy values through a real popup boot, so a claim about a field answers to the code rather than to prose. Its guarantee is stated narrowly and deliberately: no structural dereference on the code paths a wholly-corrupted profile takes, which is not every path a stored record takes. The paths it does not drive are named where the claim is made, and are tracked in #379.	2026-08-23 23:06:17 +02:00