@wenathlan/extension 1.1.61 → 1.1.62

package/extension/dist/sidepanel.js

@@ -5804,6 +5804,58 @@ function rendersecurity(context) {
     maskbox.append(line);
   }
   securityroot.append(maskbox);
+  const gatebox = document.createElement("details");
+  gatebox.className = "sessiongroup";
+  gatebox.open = (view.gates ?? []).some((gate) => gate.state === "open");
+  const gatesummary = document.createElement("summary");
+  gatesummary.textContent = "Confirm gates for payments, deletions and credentials";
+  gatebox.append(gatesummary);
+  const gates = view.gates ?? [];
+  if (gates.length === 0) {
+    const none = document.createElement("p");
+    none.textContent = "No confirm gate exists; payment, destructive delete and credential steps open one and pause the executor.";
+    gatebox.append(none);
+  }
+  for (const gate of gates) {
+    const line = document.createElement("p");
+    const payload = Object.entries(gate.payload).map(([key, value]) => `${key} ${value}`).join(", ");
+    line.textContent = `${gate.kind} \xB7 step ${gate.stepid} on ${gate.origin} \xB7 ${payload} \xB7 ${gate.state}${gate.resolvedat !== void 0 ? ` at ${new Date(gate.resolvedat).toLocaleTimeString()} by ${gate.actor ?? "the user"}` : " \xB7 waiting for one distinct human action; no timeout resolves a gate"}.`;
+    if (gate.state === "open") line.append(" ", button("Approve", async () => {
+      await request({ kind: "security", gate: { resolve: { gateid: gate.gateid, decision: "resolved" } } });
+      await refresh();
+    }), " ", button("Refuse", async () => {
+      await request({ kind: "security", gate: { resolve: { gateid: gate.gateid, decision: "refused" } } });
+      await refresh();
+    }));
+    gatebox.append(line);
+  }
+  securityroot.append(gatebox);
+  const deferbox = document.createElement("details");
+  deferbox.className = "sessiongroup";
+  const defersummary = document.createElement("summary");
+  defersummary.textContent = "Deferred steps and phishguard verdicts";
+  deferbox.append(defersummary);
+  const deferred = view.deferred ?? [];
+  if (deferred.length === 0) {
+    const none = document.createElement("p");
+    none.textContent = "No deferred step waits for a ratelimit bucket reset.";
+    deferbox.append(none);
+  }
+  for (const step of deferred) deferbox.append(Object.assign(document.createElement("p"), { textContent: `Deferred: the ${step.kind} step ${step.stepid} on ${step.origin} waits for the bucket reset at ${new Date(step.resetsat).toLocaleTimeString()}: ${step.reason}` }));
+  const phishverdicts = view.phishverdicts ?? [];
+  if (phishverdicts.length > 0) {
+    const phishnote = document.createElement("p");
+    phishnote.textContent = "Phishguard verdicts before login steps:";
+    deferbox.append(phishnote);
+    for (const verdict of phishverdicts) deferbox.append(Object.assign(document.createElement("p"), { textContent: `${verdict.origin}${verdict.matchedorigin !== void 0 ? ` sits ${verdict.distance} from the granted origin ${verdict.matchedorigin}` : ` sits ${verdict.distance} from the closest granted origin`} under the threshold ${verdict.threshold}${verdict.blocked ? " \u2014 the credential step blocks and the deny names the matched origin" : ""}.` }));
+  } else {
+    deferbox.append(Object.assign(document.createElement("p"), { textContent: "No phishguard verdict exists yet; a credential step on a new origin records the first one under the user threshold." }));
+  }
+  const vaultnote = document.createElement("p");
+  const vaultlabels = (view.vault ?? []).map((entry) => entry.label).join(", ");
+  vaultnote.textContent = `Secretvault: ${vaultlabels !== "" ? `${vaultlabels} (labels only; values stay behind the vault and the transparencypage manages them)` : "no entry yet; the transparencypage stores labels and values behind the vault seam"}.`;
+  deferbox.append(vaultnote);
+  securityroot.append(deferbox);
   const chainbox = document.createElement("details");
   chainbox.className = "sessiongroup";
   const chainsummary = document.createElement("summary");