[EdgeClaws]

Summary

• absorb Daniel Malara's static BTC running-balance viewer at /balance/
• add it to the public EdgeTools catalog with pinned source provenance
• preserve the xpub privacy boundary: no Intercom, analytics, backend, or persistence on the balance page
• carry over the original 26 behavior tests and add EdgeTools build, route, privacy, and cache-versioning coverage

Privacy and architecture

The submitted xpub goes directly from the browser to the selected allowlisted Blockbook WebSocket server. Only transaction timestamps go to Edge's rates service. The page-level CSP restricts scripts to self and connections to the listed Blockbook and rates endpoints.

Source: dan2all/xpub-cumulative-balance@a55cea98ad8f0b90d76e3f04fa06db0cfbbd6167, incorporated with the author's authorization.

Verification

• npm run check
  • build passed
  • 71/71 tests passed
  • 16 pages and 6 external destinations passed link checks
  • all three Worker dry-runs passed
  • gitleaks found no leaks
• npm audit --omit=dev: 0 vulnerabilities
• desktop and 390px mobile browser review: no horizontal overflow
• live public BIP84 test vector: 275 transactions loaded; computed balance matched Blockbook exactly; historical USD rates completed
• balance-page network proof: local assets + wss://btc-wusa1.edge.app + https://rates3.edge.app; zero Intercom requests and zero page errors

Deployment

No infrastructure or Worker route change. Merging to the production fork's main uses the existing DigitalOcean static-site deployment and rollback path.