mirror of
https://github.com/stablyai/orca.git
synced 2026-10-30 16:47:34 +00:00
Jinwoo-H
754332b322
native.alert raised an OS-authority modal on demand, with only a 4-token bucket between a compromised page and a sustained stream of system-looking dialogs. It now requires a recent gesture. The gesture is witnessed, not spent: page-side callers open a confirm dialog and then run the gated action it confirms, and consuming here would deny that action. A denied alert degrades to the page's own modal through the existing fallback, so error surfacing after a slow async failure still reaches the user. Claude-Session: https://claude.ai/code/session_01JNnE9qzUZMMnqpZWCqM3nb