clawbot a68f30c480 fix: decode Uniswap V2 exact-out swaps, input amount shown as a maximum (closes #283) ...

decode() had no arm for Universal Router command 0x09, so the approval
screen showed no token or amount for it. It now takes the path's first
token and amountInMax as the input side, the last token and amountOut as
the output side. With such a step, the Amount figure reads "Up to
<amount>" whichever step set it, on the approval, wait, success and error
screens, unless it reads "Unlimited", as an unbounded PERMIT2_PERMIT does,
or "All available (V4 open delta)". In every swap, UNWRAP_WETH makes
Token Out ETH only when the output side is WETH, on mainnet or Sepolia, or
no step set it; otherwise the output keeps its own token and figure.
decodeV2SwapExactOut() loses its eslint-disable comment.

Model: opus-5-5

2026-10-04 15:09:09 +02:00

..

addressWarnings.js

feat: expand confirm-tx warnings — closes #114 (#118)

2026-03-01 19:34:54 +01:00

alarms.js

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

amountDisplay.js

fix: show balances and fees below 0.000001 as nonzero on the send screens (closes #343)

2026-10-04 11:07:37 +02:00

approvalAmount.js

fix: name a tracked or explorer-known token instead of "Unknown token" (closes #323)

2026-09-21 21:28:06 +02:00

approvalTx.js

harden: verify the signed transaction against what the popup displayed (closes #216)

2026-08-12 12:15:25 +02:00

approvalVerify.js

harden: bound the total network fee by gasLimit × fee, on both send paths (closes #399)

2026-09-21 21:45:34 +02:00

balances.js

fix: show balances and fees below 0.000001 as nonzero on the send screens (closes #343)

2026-10-04 11:07:37 +02:00

browserApi.js

fix: version stored state, validate its shape, and give a corrupt blob a way out (closes #311)

2026-08-23 20:04:00 +02:00

buildInfo.js

feat: add About well to settings with build info and debug easter egg (#145)

2026-07-26 18:39:09 +02:00

chainSwitch.js

harden: stop the background reading the shared state singleton, and enforce it at build time (closes #324)

2026-08-23 17:57:30 +02:00

chainSwitchFields.js

harden: stop the background reading the shared state singleton, and enforce it at build time (closes #324)

2026-08-23 17:57:30 +02:00

constants.js

harden: keep the test recovery phrase out of release bundles, match committed keys by content (closes #351)

2026-09-21 18:29:39 +02:00

domainHash.js

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

ens.js

harden: stop the background reading the shared state singleton, and enforce it at build time (closes #324)

2026-08-23 17:57:30 +02:00

etherscanLabels.js

feat: add Sepolia testnet support (#137)

2026-03-01 20:11:22 +01:00

holders.js

fix: distinguish an unknown holder count from zero so a legitimate token is not filtered (closes #230)

2026-08-12 10:34:45 +02:00

html.js

harden: escape every interpolation into popup innerHTML, and add default-src to both manifests (closes #307)

2026-08-20 13:47:28 +02:00

log.js

feat: add About well to settings with build info and debug easter egg (#145)

2026-07-26 18:39:09 +02:00

networks.js

fix: version stored state, validate its shape, and give a corrupt blob a way out (closes #311)

2026-08-23 20:04:00 +02:00

persistedState.js

fix: floor malformed allowedSites, fraudContracts and selectedToken entries (closes #362)

2026-08-23 23:06:17 +02:00

phishingBlocklist.json

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

phishingDomains.js

feat: vendor and censor the phishing blocklist at build time (closes #219)

2026-08-17 10:05:56 +02:00

prices.js

fix: show balances and fees below 0.000001 as nonzero on the send screens (closes #343)

2026-10-04 11:07:37 +02:00

restorableViews.js

fix: version stored state, validate its shape, and give a corrupt blob a way out (closes #311)

2026-08-23 20:04:00 +02:00

scamlist.js

feat: expand confirm-tx warnings — closes #114 (#118)

2026-03-01 19:34:54 +01:00

state.js

fix: floor malformed allowedSites, fraudContracts and selectedToken entries (closes #362)

2026-08-23 23:06:17 +02:00

stateSchema.js

fix: floor malformed allowedSites, fraudContracts and selectedToken entries (closes #362)

2026-08-23 23:06:17 +02:00

symbolDisplay.js

harden: escape every interpolation into popup innerHTML, and add default-src to both manifests (closes #307)

2026-08-20 13:47:28 +02:00

symbolSpoof.js

fix: a shared ticker no longer hides one of its two real tokens (closes #276)

2026-08-12 13:31:55 +02:00

tokenList.js

fix: a shared ticker no longer hides one of its two real tokens (closes #276)

2026-08-12 13:31:55 +02:00

transactions.js

fix: store an absent explorer decimals as unknown instead of fabricating 18 (closes #349)

2026-08-23 21:19:04 +02:00

transferAmount.js

fix: store an absent explorer decimals as unknown instead of fabricating 18 (closes #349)

2026-08-23 21:19:04 +02:00

txValidation.js

fix: show balances and fees below 0.000001 as nonzero on the send screens (closes #343)

2026-10-04 11:07:37 +02:00

uniswap.js

fix: decode Uniswap V2 exact-out swaps, input amount shown as a maximum (closes #283)

2026-10-04 15:09:09 +02:00

vault.js

build: add ESLint to script/lint and containerize linting (closes #152)

2026-08-17 09:10:03 +02:00

wallet.js

fix: explain a stored non-master xprv wallet instead of throwing at signing time (closes #234)

2026-08-12 10:41:49 +02:00

walletDefects.js

fix: keep the flash line to its one line at any message length (closes #252)

2026-10-04 10:22:51 +02:00

walletDelete.js

harden: end a site's unremembered connection when its address or wallet is removed (closes #245)

2026-10-04 04:58:38 +02:00