fix: a popup already open when storage becomes unreadable keeps rendering the stale profile #373

New Issue

2026-08-23T21:06:25+02:00

clawbot commented

2026-08-23 21:06:25 +02:00

Found by a deployability verification of next at 75a5fa9, observed in a real browser.

If storage becomes unreadable while the popup is already open, the popup keeps rendering the stale profile — view-main with the old balance — instead of moving to the recovery screen added by #311. Reopening the popup recovers correctly.

Benign as it stands: nothing can be signed without a password, and the stale view is read-only. But it is the #311 family — the recovery screen exists precisely so the user is never left looking at something untrue about their wallet, and here they are, until they happen to reopen.

Not in milestone 1.0.0: it requires storage to fail underneath a live popup, and the failure is read-only and self-correcting on reopen.

Definition of done

A popup that discovers unreadable state while open moves to the recovery screen rather than continuing to render the last good profile.
It must not thrash: a transient read failure should not flap the user between views.
Test: corrupt storage under an open popup and assert the view changes. Fails against current head — state the mutation and observed result.
make check green.

Found by a deployability verification of `next` at `75a5fa9`, observed in a real browser. If storage becomes unreadable **while the popup is already open**, the popup keeps rendering the stale profile — `view-main` with the old balance — instead of moving to the recovery screen added by https://git.eeqj.de/sneak/AutistMask/issues/311. Reopening the popup recovers correctly. Benign as it stands: nothing can be signed without a password, and the stale view is read-only. But it is the https://git.eeqj.de/sneak/AutistMask/issues/311 family — the recovery screen exists precisely so the user is never left looking at something untrue about their wallet, and here they are, until they happen to reopen. Not in milestone 1.0.0: it requires storage to fail underneath a live popup, and the failure is read-only and self-correcting on reopen. ## Definition of done - [ ] A popup that discovers unreadable state while open moves to the recovery screen rather than continuing to render the last good profile. - [ ] It must not thrash: a transient read failure should not flap the user between views. - [ ] Test: corrupt storage under an open popup and assert the view changes. Fails against current head — state the mutation and observed result. - [ ] `make check` green.

~~clawbot referenced this issue 2026-10-03 14:21:22 +02:00~~

Review toward 1.0: identify and file all next steps #382

clawbot referenced this issue from a commit

2026-10-04 21:50:18 +02:00

fix: an open popup moves to the recovery screen when its profile becomes unreadable (closes #373)

clawbot commented

2026-10-04 21:52:07 +02:00

Built in #439.

An open popup now moves to the recovery screen when a save finds the stored record failing the same check the popup runs at open; every save reads the record first, so it is found at the next navigation or ten-second refresh. A storage read or write that merely errors keeps the "NOT SAVED" banner and does not change the screen, and nothing writes over a record that fails the check, so the switch is one-way and cannot flap.

Model: opus-5-5

Built in https://git.eeqj.de/sneak/AutistMask/pulls/439. An open popup now moves to the recovery screen when a save finds the stored record failing the same check the popup runs at open; every save reads the record first, so it is found at the next navigation or ten-second refresh. A storage read or write that merely errors keeps the "NOT SAVED" banner and does not change the screen, and nothing writes over a record that fails the check, so the switch is one-way and cannot flap. Model: opus-5-5

clawbot referenced this issue from a commit

2026-10-04 22:21:12 +02:00

fix: an open popup moves to the recovery screen when its profile becomes unreadable (closes #373)

clawbot referenced this issue from a commit

2026-10-04 23:06:28 +02:00

fix: an open popup moves to the recovery screen when its profile becomes unreadable (closes #373)

clawbot referenced this issue from a commit

2026-10-04 23:09:28 +02:00

fix: an open popup moves to the recovery screen when its profile becomes unreadable (closes #373)

clawbot referenced this issue from a commit

2026-10-04 23:45:40 +02:00

fix: an open popup moves to the recovery screen when its profile becomes unreadable (closes #373)