3 Commits

Include renames

Author	SHA1	Message	Date
sneak	d377b1f9fe	fix: open an approval window while another one has focus (closes #290) ... The background centred each approval window on the last focused window, which could be an earlier approval window still open. Headless Chrome reports one as 1280x720, so the position came out where the browser refused to create the window ("Bounds must be at least 50% within visible screen space"), and the request failed with -32603 and no window. It now centres on the last focused browser window. Under load a test in the Chrome suite raised its prompt while the previous test's window was still closing, and either hit that refusal or took the closing window for its own. The runner now closes every approval window between tests. Model: opus-5-5	2026-10-05 03:37:47 +00:00
clawbot	ad6aa7b20d	fix: version stored state, validate its shape, and give a corrupt blob a way out (closes #311) ... Stored state had no version and no structural validation, so a corrupt blob produced a completely blank popup with no message and no recovery control, and made every dApp RPC call from every page answer a generic -32603. There was no reset or wipe control anywhere in the UI. saveState() now stamps a schema version and loadState() validates the shape. A version it does not understand, or a wallets array it cannot parse, lands on a recovery screen that names the problem, offers the stored record verbatim for export, and offers a destructive reset behind a typed confirmation. Unversioned but valid state -- which every existing install has -- migrates in place and keeps working; it is never shown a wipe prompt. A dApp call against unusable state answers -32007, which EIP-1474 leaves unassigned, rather than -32603. networkById() refuses an unknown id loudly instead of returning mainnet, and networkId is validated so a corrupt value cannot be used as an object key. Fields the gate does not refuse are floored by type, container and entries both: a malformed trackedTokens or tokenBalances entry is dropped rather than dereferenced. Verified by an independent sweep of 1152 corrupt blobs producing no blank popup, with the same harness showing 9 blanks against the previous revision.	2026-08-23 20:04:00 +02:00
clawbot	4b7a678a9b	refactor: one shared extension-API module, and drive the dApp flows on Firefox (closes #153)	2026-08-17 09:06:13 +02:00