mirror of
https://github.com/samvallad33/vestige.git
synced 2026-07-24 23:41:01 +02:00
b0b69a1edf
Audit BLOCK: (1) DUPLICATE MOBILE NAV — removed the legacy MobileNav (mounted in (app)/+layout); the registry-driven os-mobilebar is now the ONE mobile nav. (2) CAPTURE LEAK — showShell now also hides on ?frame=N (was capture only), and removing MobileNav kills its un-gated leak; ?frame=1 and ?capture=1 both show 0 chrome. (3) PALETTE A11Y — role=dialog + aria-modal + a paletteDialog action that traps Tab focus, marks [data-app-root] inert while open, and restores focus to the opener on close. (4) CINEMA KEYBOARD COLLISION (most serious) — the shell's ⌘K/Escape now no-op while a full-screen takeover owns the keyboard, detected via a READ-ONLY .cinema-overlay DOM probe (Cinema stays protected/untouched) plus a new shell.svelte store for non-DOM takeovers. Verified live: mobileBars=1, frame/capture chrome=0, dialog role+inert set/cleared, palette blocked during Cinema. check 0/0, 980 files. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| build | ||
| e2e | ||
| src | ||
| static | ||
| .env.example | ||
| OBSERVATORY-SPEC.md | ||
| package-lock.json | ||
| package.json | ||
| playwright.config.ts | ||
| svelte.config.js | ||
| tsconfig.json | ||
| vite.config.ts | ||