The `settings-utc-timestamps` checkbox sat inside the Token Spam Protection
well, immediately after the dust-threshold input. It is a display preference
and has nothing to do with spam filtering, so it now renders in the Display
well next to the theme selector.
Markup move only. The checkbox is wired by id — `$("settings-utc-timestamps")`
in `src/popup/views/settings.js`, where `$` is `document.getElementById` — for
both the initial `checked` assignment and the `change` handler, so nothing in
the wiring depends on the element's parent or siblings. `state.utcTimestamps`,
`saveState`/`loadState` and the `helpers.js` formatting path are untouched.
`tests/settingsUtcTimestamps.test.js` pins both halves down: the checkbox
appears exactly once and inside the Display well rather than the spam well,
and the setting still round-trips through storage.
6.3 KiB
Workflow
git pullnextand cut a branch from it — one branch per issue, namedissue-<N>-<slug>. Never branch frommain.- Do the work as one commit whose title ends with
(closes #N), with theTODO.mdupdate in that same commit. - Move Next Step to the top of Completed Steps; move the top item of Future Steps into Next Step.
- Run
make fmt, thenmake check. A feature branch may be red;nextandmainmay not. - Rebase onto current
nextimmediately before pushing — other branches land onnextcontinuously — and re-runmake checkafter resolving, because a clean textual merge can still break the build. - Push the branch and open one PR per issue with base
next. Never basemain. - An independent reviewer who did not write the change gates the merge. On a
passed review the PR is squash-merged into
next. nextis the branch for the next milestone. It is kept green and mergeable tomainat any moment, without notice.mainreceives exactly one PR per milestone, fromnext. Releases are tagged frommain.
Status
pre-1.0, working towards the 1.0.0 milestone. Tagged v0.1.0 on 2026-02-27. The
milestone is in flight on next; its next -> main PR is
#190. make check verified
green on next at e9fa8be on 2026-08-10, and make build produces
dist/chrome/ and dist/firefox/ with every bundle verified to have DEBUG
compiled off.
The backlog lives on the
Gitea tracker, which is
authoritative; this file does not duplicate it. Full policy file set present. A
real-browser end-to-end suite (make test-e2e) now sits alongside make check,
which cannot see a runtime ReferenceError in a popup view.
Next Step
Land #152: add ESLint to
script/lint. make check is prettier --check only today and cannot catch
undefined identifiers, which is how
#150 and
#151 shipped.
Completed Steps
- 2026-08-11: UTC Timestamps checkbox moved from the Token Spam Protection well into Display, next to the theme selector (#212).
- 2026-08-11: README Screen Map rebuilt from the code — every screen, element
and transition re-verified against
src/popup/(#164). - 2026-08-11:
docs/README.mdrewritten against the code: no competitor names, all five network destinations documented, password/Settings/Add Wallet sections corrected (#163). - 2026-08-11: Wallet deletion repairs its own state —
hasWalletfollows the remaining wallets, the selection only moves when it was deleted, and the active-address change is broadcast to connected sites (#156). - 2026-08-11:
TODO.mdWorkflow rewritten to the branch-and-PR-per-issue model onnext, with Status and Next Step refreshed (#191). - 2026-08-09:
DEBUGbecame a build-time constant defaulting to off, injected as the__BUILD_DEBUG__esbuild define and turned on withAUTISTMASK_DEBUG=1, so a plainmake buildno longer hands every newly created wallet the publicly committed test recovery phrase (#149). - 2026-08-09: dApp approval signing moved into the popup — the password no longer crosses the extension messaging boundary; the background broadcasts and resolves approvals only, and verifies the signed artifact against the approval it holds (#157).
- 2026-08-09: Post-build assertion that every emitted bundle containing
constants.jshasDEBUGcompiled off, viascript/verify-buildon themake buildpath (#170). - 2026-08-09: Containerized Chrome end-to-end harness (
make test-e2e/script/test-e2e) driving the real popup with all network intercepted, plus the two used-but-not-imported crashes it caught: AddToken unreachable (#150) and TransactionDetail broken for every ERC-20 transfer (#151). Harness demonstrated failing before the fixes and passing after (#181). Interception covers the MV3 background service worker, not just the popup page, and a launch-time canary aborts the suite if worker traffic starts escaping. - 2026-08-09: Reviewed the repo end to end and filed the 1.0.0 backlog (#149-#168).
- 2026-08-09: Test coverage for the address-poisoning defense in
src/shared/transactions.js(#160) - 2026-07-26: About well in settings with build info, repo link and the version click easter egg (#145); proper view navigation stack (#146).
- 2026-07-07 Adopted scripts-to-rule-them-all:
script/entrypoints, Makefile shims, README Entrypoints section (#148) - 2026-03-01: USD display suppressed on testnets (#142); estimated USD for ETH in approve-tx view (#141).
- Sepolia testnet support (#137); etherscan links go to token-specific URLs (#136).
- Transaction detail improvements: Type field and on-chain details (#130), txid-first reordering (#133), swap display corrections (#128), expanded confirm-tx warnings (#118).
- Dark mode theme setting (Light/Dark/System) with contrast fixes (#126); timestamps include timezone offset (#120); layout shift audit, reserved space for error messages (#124).
- Copy-flash visual feedback with timing tune (#113, #121); cross-wallet-type duplicate detection (#115).
- 2026-02-27: v0.1.0 tagged.
- 2026-02-24: Initial scaffolding: popup UI, BIP-39 wallet creation via ethers.js, wallet persistence, real ETH balances over RPC, ENS forward and reverse resolution.
Future Steps
Only work that has no issue of its own belongs here; everything else is on the tracker.
- Pre-1.0 security review of the extension (key handling, DEBUG mode policy, RPC input validation) before any 1.0rc tag. Individual filed issues are parts of it, but the review is broader than any of them.
- Decide whether docker-in-docker makes
make test-e2erunnable in the Gitea workflow. Extending the suite itself is tracked as #183 and #184. - Cut 1.0.0 once the milestone is empty, then continue tagging as milestones land.