superlocalmemory 3.8.14 → 4.0.1

package/src/superlocalmemory/ui/js/modal.js

@@ -261,9 +261,13 @@ function openMemoryDetail(mem, source) {
         forgetBtn.className = 'btn btn-outline-warning btn-sm';
         forgetBtn.innerHTML = '<i class="bi bi-archive"></i> Forget';
         forgetBtn.title = 'Archive this memory — hidden from recall but recoverable';
-        forgetBtn.onclick = function() {
-            if (!confirm('Forget this memory? It will be archived '
-                + '(hidden from recall but recoverable).')) return;
+        forgetBtn.onclick = async function() {
+            var confirmed = await confirmDestructive({
+                title: 'Forget memory',
+                target: mem.content ? mem.content.slice(0, 80) : 'Memory #' + mem.id,
+                consequence: 'Archived — hidden from recall but recoverable.',
+            });
+            if (!confirmed) return;
             forgetBtn.disabled = true;
             fetch('/api/memories/' + encodeURIComponent(mem.id) + '/forget',
                 {method: 'POST'})
@@ -323,13 +327,147 @@ function openMemoryDetail(mem, source) {
         };
         actionsDiv.appendChild(mergeBtn);
 
+        // Task F: Set Scope — PATCH /api/memories/{fact_id}/scope
+        // Lets the user change personal → shared → global visibility.
+        var scopeBtn = document.createElement('button');
+        scopeBtn.className = 'btn btn-outline-secondary btn-sm';
+        scopeBtn.innerHTML = '<i class="bi bi-globe"></i> Set Scope…';
+        scopeBtn.title = 'Change memory visibility: personal, shared, or global';
+        (function() {
+            var scopeFormEl = null;
+            scopeBtn.addEventListener('click', function() {
+                // Toggle the inline scope form
+                if (scopeFormEl) {
+                    scopeFormEl.remove();
+                    scopeFormEl = null;
+                    return;
+                }
+                scopeFormEl = document.createElement('div');
+                scopeFormEl.className = 'mt-2 p-2 border rounded';
+                scopeFormEl.style.cssText = 'display:flex;gap:8px;flex-wrap:wrap;align-items:center;width:100%';
+                var scopeSel = document.createElement('select');
+                scopeSel.className = 'form-select form-select-sm';
+                scopeSel.style.width = 'auto';
+                ['personal', 'shared', 'global'].forEach(function(s) {
+                    var opt = document.createElement('option');
+                    opt.value = s;
+                    opt.textContent = s;
+                    if (s === (mem.scope || 'personal')) opt.selected = true;
+                    scopeSel.appendChild(opt);
+                });
+                var sharedInput = document.createElement('input');
+                sharedInput.className = 'form-control form-control-sm';
+                sharedInput.placeholder = 'shared_with (profile1,profile2)';
+                sharedInput.style.flex = '1';
+                sharedInput.style.display = scopeSel.value === 'shared' ? '' : 'none';
+                if (mem.shared_with) {
+                    try {
+                        var sw = typeof mem.shared_with === 'string'
+                            ? JSON.parse(mem.shared_with) : mem.shared_with;
+                        sharedInput.value = Array.isArray(sw) ? sw.join(',') : String(sw);
+                    } catch(e) { sharedInput.value = String(mem.shared_with || ''); }
+                }
+                scopeSel.addEventListener('change', function() {
+                    sharedInput.style.display = scopeSel.value === 'shared' ? '' : 'none';
+                });
+                var saveBtn = document.createElement('button');
+                saveBtn.className = 'btn btn-sm btn-primary';
+                saveBtn.textContent = 'Save';
+                saveBtn.addEventListener('click', function() {
+                    var scope = scopeSel.value;
+                    var sharedWith = scope === 'shared' ? sharedInput.value : '';
+                    saveBtn.disabled = true;
+                    saveBtn.textContent = 'Saving…';
+                    fetch('/api/memories/' + encodeURIComponent(mem.fact_id || mem.id) + '/scope', {
+                        method: 'PATCH',
+                        headers: {'Content-Type': 'application/json'},
+                        body: JSON.stringify({scope: scope, shared_with: sharedWith}),
+                    }).then(function(r) { return r.json(); })
+                    .then(function(d) {
+                        if (d.success) {
+                            mem.scope = scope;
+                            if (typeof showToast === 'function') showToast('Scope set to ' + scope);
+                            scopeFormEl.remove(); scopeFormEl = null;
+                            if (typeof loadMemories === 'function') setTimeout(loadMemories, 300);
+                        } else {
+                            if (typeof showToast === 'function') showToast('Scope update failed: ' + (d.detail || d.error || 'unknown'));
+                            saveBtn.disabled = false; saveBtn.textContent = 'Save';
+                        }
+                    }).catch(function() {
+                        if (typeof showToast === 'function') showToast('Network error setting scope.');
+                        saveBtn.disabled = false; saveBtn.textContent = 'Save';
+                    });
+                });
+                scopeFormEl.appendChild(scopeSel);
+                scopeFormEl.appendChild(sharedInput);
+                scopeFormEl.appendChild(saveBtn);
+                actionsDiv.insertAdjacentElement('afterend', scopeFormEl);
+            });
+        }());
+        actionsDiv.appendChild(scopeBtn);
+
+        // Task G: Pin — POST /api/tiers/pin — keep this fact in the active tier forever
+        var factIdForTier = mem.fact_id || mem.id;
+        var pinBtn = document.createElement('button');
+        pinBtn.className = 'btn btn-outline-success btn-sm';
+        pinBtn.innerHTML = '<i class="bi bi-pin-fill"></i> Pin';
+        pinBtn.title = 'Pin to active tier — this fact will not be demoted by lifecycle';
+        pinBtn.addEventListener('click', function() {
+            pinBtn.disabled = true;
+            fetch('/api/tiers/pin', {
+                method: 'POST',
+                headers: {'Content-Type': 'application/json'},
+                body: JSON.stringify({fact_id: factIdForTier, reason: 'pinned from dashboard'}),
+            }).then(function(r) { return r.json(); })
+            .then(function(d) {
+                pinBtn.disabled = false;
+                if (typeof showToast === 'function') {
+                    showToast(d && d.success ? 'Fact pinned to active tier.' : 'Pin failed: ' + (d && (d.detail || d.error) || 'unknown'));
+                }
+            }).catch(function() {
+                pinBtn.disabled = false;
+                if (typeof showToast === 'function') showToast('Network error pinning fact.');
+            });
+        });
+        actionsDiv.appendChild(pinBtn);
+
+        // Task G: Unpin — POST /api/tiers/unpin — allows normal tier demotion again
+        var unpinBtn = document.createElement('button');
+        unpinBtn.className = 'btn btn-outline-warning btn-sm';
+        unpinBtn.innerHTML = '<i class="bi bi-pin-angle"></i> Unpin';
+        unpinBtn.title = 'Unpin — allow normal lifecycle tier demotion';
+        unpinBtn.addEventListener('click', function() {
+            unpinBtn.disabled = true;
+            fetch('/api/tiers/unpin', {
+                method: 'POST',
+                headers: {'Content-Type': 'application/json'},
+                body: JSON.stringify({fact_id: factIdForTier, reason: ''}),
+            }).then(function(r) { return r.json(); })
+            .then(function(d) {
+                unpinBtn.disabled = false;
+                if (typeof showToast === 'function') {
+                    showToast(d && d.success ? 'Fact unpinned — will age normally.' : 'Unpin failed: ' + (d && (d.detail || d.error) || 'unknown'));
+                }
+            }).catch(function() {
+                unpinBtn.disabled = false;
+                if (typeof showToast === 'function') showToast('Network error unpinning fact.');
+            });
+        });
+        actionsDiv.appendChild(unpinBtn);
+
         // Delete button — always available (hard delete, irreversible)
         var deleteBtn = document.createElement('button');
         deleteBtn.className = 'btn btn-outline-danger btn-sm';
         deleteBtn.innerHTML = '<i class="bi bi-trash"></i> Delete';
         deleteBtn.title = 'Permanently delete (cannot be undone) — prefer Forget';
-        deleteBtn.onclick = function() {
-            if (!confirm('Delete this memory? This cannot be undone.')) return;
+        deleteBtn.onclick = async function() {
+            var confirmed = await confirmDestructive({
+                title: 'Delete memory',
+                target: mem.content ? mem.content.slice(0, 80) : 'Memory #' + mem.id,
+                consequence: 'Permanently deleted — this cannot be undone.',
+                confirmLabel: 'Delete',
+            });
+            if (!confirmed) return;
             fetch('/api/memories/' + encodeURIComponent(mem.id), {method: 'DELETE'})
                 .then(function(r) { return r.json(); })
                 .then(function(d) {
@@ -432,6 +570,135 @@ function addDetailTagsRow(parent, label, tags) {
     parent.appendChild(dd);
 }
 
+/**
+ * Show a shared confirmation modal for destructive dashboard actions.
+ * Creates the modal element on first call; reuses it on subsequent calls.
+ *
+ * @param {object} opts
+ * @param {string} opts.title          Short header, e.g. "Delete profile"
+ * @param {string} opts.target         Exact item being acted on, e.g. "my-project"
+ * @param {string} opts.consequence    What happens, e.g. "Memories moved to default profile"
+ * @param {string} [opts.confirmLabel] Confirm button text (default: "Confirm")
+ * @param {string} [opts.confirmationText] Exact text required to unlock confirmation
+ * @returns {Promise<boolean>} Resolves true when confirmed, false when cancelled
+ */
+var activeDestructiveConfirmation = null;
+
+function confirmDestructive(opts) {
+    return new Promise(function(resolve) {
+        if (activeDestructiveConfirmation) {
+            activeDestructiveConfirmation.cancel();
+        }
+        var settled = false;
+        var MODAL_ID = 'slm-confirm-destructive-modal';
+        var modalEl = document.getElementById(MODAL_ID);
+
+        if (!modalEl) {
+            modalEl = document.createElement('div');
+            modalEl.id = MODAL_ID;
+            modalEl.className = 'modal fade';
+            modalEl.setAttribute('tabindex', '-1');
+            modalEl.setAttribute('aria-modal', 'true');
+            modalEl.setAttribute('role', 'dialog');
+            modalEl.innerHTML =
+                '<div class="modal-dialog modal-dialog-centered">' +
+                '<div class="modal-content">' +
+                '<div class="modal-header border-0 pb-1">' +
+                '<h5 class="modal-title slm-cd-title text-danger"></h5>' +
+                '<button type="button" class="btn-close"' +
+                ' data-slm-cd-action="cancel" aria-label="Close"></button>' +
+                '</div>' +
+                '<div class="modal-body pt-1">' +
+                '<p class="slm-cd-target fw-semibold mb-1"></p>' +
+                '<p class="slm-cd-consequence text-muted small mb-2"></p>' +
+                '<label class="form-label small mb-1" for="slm-cd-challenge">' +
+                'Type <code class="slm-cd-confirmation-text"></code> to continue</label>' +
+                '<input id="slm-cd-challenge" class="form-control form-control-sm slm-cd-challenge"' +
+                ' type="text" autocomplete="off" spellcheck="false">' +
+                '</div>' +
+                '<div class="modal-footer border-0 pt-0">' +
+                '<button type="button" class="btn btn-secondary btn-sm"' +
+                ' data-slm-cd-action="cancel">Cancel</button>' +
+                '<button type="button" class="btn btn-danger btn-sm"' +
+                ' data-slm-cd-action="confirm">Confirm</button>' +
+                '</div>' +
+                '</div>' +
+                '</div>';
+            document.body.appendChild(modalEl);
+        }
+
+        var titleEl = modalEl.querySelector('.slm-cd-title');
+        var targetEl = modalEl.querySelector('.slm-cd-target');
+        var consequenceEl = modalEl.querySelector('.slm-cd-consequence');
+        var confirmationTextEl = modalEl.querySelector('.slm-cd-confirmation-text');
+        var challengeInput = modalEl.querySelector('.slm-cd-challenge');
+        var confirmBtn = modalEl.querySelector('[data-slm-cd-action="confirm"]');
+        var confirmationText = opts.confirmationText || opts.target || 'CONFIRM';
+
+        if (titleEl) titleEl.textContent = opts.title || 'Confirm action';
+        if (targetEl) targetEl.textContent = opts.target || '';
+        if (consequenceEl) consequenceEl.textContent = opts.consequence || '';
+        if (confirmationTextEl) confirmationTextEl.textContent = confirmationText;
+        if (challengeInput) challengeInput.value = '';
+        if (confirmBtn) {
+            confirmBtn.textContent = opts.confirmLabel || 'Confirm';
+            confirmBtn.disabled = true;
+        }
+
+        var bsModal = null;
+        if (typeof bootstrap !== 'undefined' && bootstrap.Modal) {
+            bsModal = bootstrap.Modal.getOrCreateInstance(modalEl);
+        }
+
+        function settle(result, hideModal) {
+            if (settled) return;
+            settled = true;
+            if (activeDestructiveConfirmation === confirmationSession) {
+                activeDestructiveConfirmation = null;
+            }
+            modalEl.removeEventListener('click', onAction);
+            if (challengeInput) challengeInput.removeEventListener('input', onChallengeInput);
+            if (bsModal) {
+                modalEl.removeEventListener('hidden.bs.modal', onHide);
+                modalEl.removeEventListener('shown.bs.modal', onShown);
+                if (hideModal !== false) bsModal.hide();
+            }
+            resolve(result);
+        }
+
+        function onAction(e) {
+            var actionEl = e.target.closest('[data-slm-cd-action]');
+            if (!actionEl) return;
+            if (actionEl.getAttribute('data-slm-cd-action') === 'confirm' &&
+                    (!challengeInput || challengeInput.value !== confirmationText)) return;
+            settle(actionEl.getAttribute('data-slm-cd-action') === 'confirm');
+        }
+
+        function onChallengeInput() {
+            if (confirmBtn) confirmBtn.disabled = challengeInput.value !== confirmationText;
+        }
+
+        function onShown() {
+            if (challengeInput) challengeInput.focus();
+        }
+
+        function onHide() { settle(false); }
+
+        var confirmationSession = {
+            cancel: function() { settle(false, false); }
+        };
+        activeDestructiveConfirmation = confirmationSession;
+
+        modalEl.addEventListener('click', onAction);
+        if (challengeInput) challengeInput.addEventListener('input', onChallengeInput);
+        if (bsModal) {
+            modalEl.addEventListener('hidden.bs.modal', onHide, { once: true });
+            modalEl.addEventListener('shown.bs.modal', onShown, { once: true });
+            bsModal.show();
+        }
+    });
+}
+
 function copyMemoryToClipboard() {
     if (!currentMemoryDetail) return;
     var text = currentMemoryDetail.content || currentMemoryDetail.summary || '';

package/src/superlocalmemory/ui/js/od-backup.js

@@ -642,14 +642,21 @@
   }
 
   function doDisconnect(root, destId) {
-    if (!window.confirm('Disconnect this cloud destination? Existing backups are not deleted.')) return;
-    authMutation('/api/backup/disconnect/' + encodeURIComponent(destId), 'DELETE')
+    window.confirmDestructive({
+      title: 'Disconnect cloud destination',
+      target: destId,
+      consequence: 'Existing backups are not deleted.',
+      confirmLabel: 'Disconnect',
+    }).then(function(confirmed) {
+      if (!confirmed) return;
+      authMutation('/api/backup/disconnect/' + encodeURIComponent(destId), 'DELETE')
       .then(function (r) { return r.json(); })
       .then(function (d) {
         toast(d.success ? 'Disconnected' : 'Disconnect failed: ' + esc(d.error || ''), !d.success);
         loadDestinations(root);
       })
       .catch(function () { toast('Disconnect failed', true); });
+    });
   }
 
   function openOAuth(root, oauthPath, providerLabel) {

package/src/superlocalmemory/ui/js/od-compliance-ext.js

@@ -0,0 +1,301 @@
+// od-compliance-ext.js — Compliance tab extensions v1.0
+// Extends the OD Operations compliance pane with:
+//   Task A: Entity-level GDPR erasure (POST /api/compliance/gdpr/erase-entity)
+//   Task B: Erasure Receipts panel (GET /api/compliance/receipts + verify)
+//
+// This module hooks into odRenderOperations by patching window.odRenderOperations
+// to inject the new panels into the compliance tab after the base render.
+//
+// Security: all user-supplied strings go through esc() before innerHTML insertion.
+//           Confirm guard on entity erase (typed confirmation + confirmDestructive).
+//
+// Copyright (c) 2026 Varun Pratap Bhardwaj / Qualixar — AGPL-3.0
+
+/* global window, document, fetch, Promise */
+(function () {
+  'use strict';
+
+  // ─── Helpers ──────────────────────────────────────────────────────────────
+
+  function esc(s) {
+    return String(s == null ? '' : s)
+      .replace(/&/g, '&')
+      .replace(/</g, '&lt;')
+      .replace(/>/g, '&gt;')
+      .replace(/"/g, '&quot;')
+      .replace(/'/g, '&#39;');
+  }
+
+  function fmtTime(ts) {
+    if (!ts) return '—';
+    try {
+      var d = typeof ts === 'number' ? new Date(ts * 1000) : new Date(ts);
+      return d.toLocaleString();
+    } catch (e) { return String(ts); }
+  }
+
+  // ─── Task A: Entity Erase Card ────────────────────────────────────────────
+
+  var ENTITY_ERASE_ID = 'od-entity-erase-card';
+
+  function buildEntityEraseCard() {
+    var card = document.createElement('div');
+    card.id = ENTITY_ERASE_ID;
+    card.className = 'card';
+    card.style.marginTop = '16px';
+    // Using textContent / controlled HTML (only static strings + esc'd values below)
+    card.innerHTML =
+      '<div class="card-head">' +
+        '<h3>Entity-level GDPR erasure</h3>' +
+      '</div>' +
+      '<div class="card-pad">' +
+        '<p class="muted" style="font-size:13px" id="od-entity-erase-summary">' +
+          'Erase all facts mentioning a specific named entity (GDPR Art. 17). ' +
+          'Enter the entity name exactly; you will need to confirm it. This is IRREVERSIBLE.' +
+        '</p>' +
+        '<div style="display:flex;gap:8px;align-items:center;flex-wrap:wrap;margin-top:10px">' +
+          '<input id="od-entity-erase-input" type="text" maxlength="200" ' +
+            'placeholder="Entity name…" ' +
+            'style="flex:1;min-width:180px;padding:7px 10px;border-radius:8px;' +
+              'border:1px solid var(--border);background:var(--card);color:var(--fg);font-size:13px">' +
+          '<button id="od-entity-erase-btn" class="btn sm" ' +
+            'style="border-color:#ff6b6b;color:#ff6b6b">Erase entity…</button>' +
+        '</div>' +
+      '</div>';
+    return card;
+  }
+
+  function wireEntityEraseCard() {
+    var btn     = document.getElementById('od-entity-erase-btn');
+    var input   = document.getElementById('od-entity-erase-input');
+    var summary = document.getElementById('od-entity-erase-summary');
+    if (!btn || !input) return;
+
+    btn.addEventListener('click', function () {
+      var entityName = (input.value || '').trim();
+      if (!entityName) {
+        if (summary) summary.textContent = 'Enter an entity name first.';
+        return;
+      }
+      // Step 1: typed-confirmation prompt (same guard as profile erase)
+      var typed = window.prompt(
+        'This PERMANENTLY erases all facts mentioning entity "' + entityName + '".\n' +
+        'This cannot be undone.\n\nType the entity name to confirm:'
+      );
+      if (typed === null) return; // cancelled
+      if (typed !== entityName) {
+        if (summary) summary.textContent = 'Erase cancelled — name did not match.';
+        return;
+      }
+      // Step 2: confirmDestructive modal
+      window.confirmDestructive({
+        title: 'Erase entity',
+        target: entityName,
+        consequence: 'All facts mentioning this entity will be permanently erased.',
+        confirmLabel: 'Erase entity',
+      }).then(function (confirmed) {
+        if (!confirmed) return;
+        btn.disabled = true;
+        btn.textContent = 'Erasing…';
+        if (summary) summary.textContent = 'Erasing entity "' + esc(entityName) + '"…';
+        fetch('/api/compliance/gdpr/erase-entity', {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+          body: JSON.stringify({ entity_name: entityName, confirm: entityName }),
+        })
+          .then(function (r) { return r.json(); })
+          .then(function (d) {
+            if (!summary) return;
+            if (d && d.success) {
+              var parts = [];
+              if (d.facts != null)   parts.push('facts erased: ' + d.facts);
+              if (d.entity != null)  parts.push('entity: ' + esc(String(d.entity)));
+              summary.textContent = 'Entity erased — ' + (parts.join(', ') || 'done') + '.';
+              input.value = '';
+              // Reload receipts panel to reflect new receipt
+              loadReceiptsPanel();
+            } else {
+              summary.textContent = 'Erase failed: ' + esc(String((d && d.error) || 'unknown'));
+            }
+          })
+          .catch(function () {
+            if (summary) summary.textContent = 'Erase request failed. Check console.';
+          })
+          .finally(function () {
+            btn.disabled = false;
+            btn.textContent = 'Erase entity…';
+          });
+      });
+    });
+  }
+
+  // ─── Task B: Erasure Receipts Panel ───────────────────────────────────────
+
+  var RECEIPTS_ID = 'od-receipts-card';
+
+  function buildReceiptsCard() {
+    var card = document.createElement('div');
+    card.id = RECEIPTS_ID;
+    card.className = 'card';
+    card.style.marginTop = '16px';
+    card.innerHTML =
+      '<div class="card-head">' +
+        '<h3>Erasure receipts</h3>' +
+        '<div class="spacer"></div>' +
+        '<button class="btn sm" id="od-receipts-refresh-btn">Refresh</button>' +
+      '</div>' +
+      '<div class="card-pad">' +
+        '<table class="tbl" id="od-receipts-tbl">' +
+          '<thead><tr>' +
+            '<th>ID</th>' +
+            '<th>Type</th>' +
+            '<th>Subject</th>' +
+            '<th>State</th>' +
+            '<th>Facts</th>' +
+            '<th>Requested</th>' +
+            '<th></th>' +
+          '</tr></thead>' +
+          '<tbody id="od-receipts-body">' +
+            '<tr><td colspan="7" class="dim" style="text-align:center;padding:20px">Loading…</td></tr>' +
+          '</tbody>' +
+        '</table>' +
+      '</div>';
+    return card;
+  }
+
+  function loadReceiptsPanel() {
+    var tbody = document.getElementById('od-receipts-body');
+    if (!tbody) return;
+    tbody.innerHTML = '<tr><td colspan="7" class="dim" style="text-align:center;padding:16px">Loading…</td></tr>';
+    fetch('/api/compliance/receipts?limit=50')
+      .then(function (r) { return r.ok ? r.json() : null; })
+      .then(function (d) {
+        if (!d || !d.available) {
+          tbody.innerHTML = '<tr><td colspan="7" class="dim" style="text-align:center;padding:16px">Receipts unavailable.</td></tr>';
+          return;
+        }
+        var receipts = d.receipts || [];
+        if (receipts.length === 0) {
+          tbody.innerHTML = '<tr><td colspan="7" class="dim" style="text-align:center;padding:16px">No erasure receipts yet.</td></tr>';
+          return;
+        }
+        tbody.innerHTML = receipts.map(function (r) {
+          var shortId = esc(String(r.erasure_id || '').slice(0, 8)) + '…';
+          var stateClass = r.state === 'COMPLETE' ? 'ok' : 'danger';
+          var allOk = r.all_erased ? '<span class="badge ok">all erased</span>' : '<span class="badge warn">partial</span>';
+          return (
+            '<tr>' +
+              '<td class="mono dim" style="font-size:11px" title="' + esc(r.erasure_id || '') + '">' + shortId + '</td>' +
+              '<td><span class="badge neutral">' + esc(r.subject_type || '') + '</span></td>' +
+              '<td class="dim" style="font-size:12px;max-width:140px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">' +
+                esc(r.subject_id || '') +
+              '</td>' +
+              '<td><span class="badge ' + stateClass + '">' + esc(r.state || '') + '</span></td>' +
+              '<td class="num dim">' + esc(String(r.fact_count || 0)) + '</td>' +
+              '<td class="dim" style="font-size:11px">' + esc(fmtTime(r.requested_at)) + '</td>' +
+              '<td><button class="btn sm ghost" data-verify-id="' + esc(r.erasure_id || '') + '">Verify</button></td>' +
+            '</tr>'
+          );
+        }).join('');
+        // Wire verify buttons
+        tbody.querySelectorAll('[data-verify-id]').forEach(function (btn) {
+          btn.addEventListener('click', function () {
+            var eid = btn.getAttribute('data-verify-id');
+            btn.disabled = true;
+            btn.textContent = '…';
+            fetch('/api/compliance/receipts/' + encodeURIComponent(eid) + '/verify')
+              .then(function (r) { return r.ok ? r.json() : null; })
+              .then(function (d) {
+                if (d && d.verified === true) {
+                  btn.textContent = 'Verified ✓';
+                  btn.style.color = 'var(--ok)';
+                } else if (d && d.verified === false) {
+                  btn.textContent = 'Tampered!';
+                  btn.style.color = 'var(--danger)';
+                } else {
+                  btn.textContent = 'Error';
+                }
+                btn.disabled = false;
+              })
+              .catch(function () { btn.textContent = 'Error'; btn.disabled = false; });
+          });
+        });
+      })
+      .catch(function () {
+        var tb = document.getElementById('od-receipts-body');
+        if (tb) tb.innerHTML = '<tr><td colspan="7" class="dim" style="text-align:center;padding:16px">Failed to load receipts.</td></tr>';
+      });
+  }
+
+  function wireReceiptsPanel() {
+    var refreshBtn = document.getElementById('od-receipts-refresh-btn');
+    if (refreshBtn) {
+      refreshBtn.addEventListener('click', loadReceiptsPanel);
+    }
+    loadReceiptsPanel();
+  }
+
+  // ─── Injection Hook ───────────────────────────────────────────────────────
+
+  /**
+   * Inject the two new panels into the compliance tab section.
+   * Called after odRenderOperations() has built and populated the DOM.
+   */
+  function injectCompliancePanels(container) {
+    // Find the compliance tabpane
+    var pane = container && container.querySelector('[data-od-pane="compliance"]');
+    if (!pane) return;
+
+    // Remove any stale injected panels from a previous render
+    var oldErase = pane.querySelector('#' + ENTITY_ERASE_ID);
+    if (oldErase) oldErase.remove();
+    var oldReceipts = pane.querySelector('#' + RECEIPTS_ID);
+    if (oldReceipts) oldReceipts.remove();
+
+    // Append the two new cards at the bottom of the compliance tab
+    pane.appendChild(buildEntityEraseCard());
+    pane.appendChild(buildReceiptsCard());
+
+    // Wire interactions
+    wireEntityEraseCard();
+    wireReceiptsPanel();
+  }
+
+  // ─── Patch odRenderOperations ─────────────────────────────────────────────
+
+  /**
+   * Wait for od-operations.js to define window.odRenderOperations, then wrap it
+   * so our panels are injected after every render. Uses polling with a cap —
+   * no unbounded loops.
+   */
+  function patchOdRenderOperations() {
+    var base = window.odRenderOperations;
+    if (typeof base !== 'function') return false;
+    window.odRenderOperations = function (container) {
+      base(container);
+      // od-operations.js renders asynchronously (Promise.all inside).
+      // Give it time to populate the DOM before injecting our panels.
+      setTimeout(function () { injectCompliancePanels(container); }, 600);
+    };
+    return true;
+  }
+
+  // Retry for up to 3s in case od-operations.js hasn't defined the function yet.
+  var _attempts = 0;
+  function tryPatch() {
+    if (patchOdRenderOperations()) return;
+    _attempts += 1;
+    if (_attempts < 30) setTimeout(tryPatch, 100);
+  }
+
+  // Also inject into the currently active operations pane on DOMContentLoaded
+  document.addEventListener('DOMContentLoaded', function () {
+    tryPatch();
+    // If the operations pane is already in the DOM and populated, inject now
+    var pane = document.getElementById('operations-pane');
+    if (pane && pane.querySelector('[data-od-pane="compliance"]')) {
+      injectCompliancePanels(pane);
+    }
+  });
+
+}());