+ Every element below reads from one shared runtime. Toggle governance state + and watch each surface reach its own conclusion from the same evidence. +
+ +<governance-veil>Widget — 1000 sats
+
+ One snapshot, four profiles. This is the state a single
+ hidden boolean cannot express.
+
<governance-status>+ Signed in as a listing moderator, who may restrict + listings but not sellers. Note that the refused control stays visible + and says what it needs. +
+
+Not signed in.
'); + return; + } + + const rows = Object.entries(CAPABILITY_LABELS) + .map(([capability, label]) => { + const has = held.has(/** @type {GovernanceCapability} */ (capability)); + return `Signed in as ${escapeHtml(shortenKey(viewer))}
+This account holds no governance capabilities.
' : ""} +No runtime attached.
'); + return; + } + + const state = this.runtime.admin.state; + const authority = this.runtime.admin.authority; + const viewer = this.runtime.viewerPubkey; + const canDenyUser = Boolean(viewer && this.runtime.can(viewer, "contribute-user-deny")); + + const denyRows = Array.from(state.userDeny) + .map((key) => { + const pubkey = key.slice("user:".length); + const sources = state.communitySources.get(key) ?? []; + const origin = sources.length + ? `community list (${escapeHtml(shortenKey(sources[0]))})` + : "moderator"; + return `${escapeHtml(shortenKey(pubkey))}Showing cached state — relays unreachable.
' + : "" + } + ++ Root: ${escapeHtml(authority.root ? shortenKey(authority.root) : "not configured")} · + ${escapeHtml(Object.keys(authority.actors).length)} actor(s) · + ${escapeHtml(authority.protectedActors.length)} protected +
+None.
' + } +Requires permission to restrict accounts.
' + } + ${escapeHtml(this._status)} ++ ${escapeHtml(state.eventDeny.size)} restricted post(s) · + ${escapeHtml(state.addressDeny.size)} restricted listing(s) · + ${escapeHtml(state.userAllow.size)} approved account(s) · + ${escapeHtml(state.trustSeeds.size)} trust seed(s) +
+${escapeHtml(reasons[0])}
` : ""; + + // A hidden decision the viewer may override renders a disclosure rather + // than nothing at all: silently vanishing content is indistinguishable + // from a bug, and leaves no way to appeal. + const hidden = effect === "hide" || effect === "deny"; + if (hidden && !this._revealed) { + const canReveal = decision.visibility.overridable && effect !== "deny"; + this.renderHtml(` +Content hidden
+ ${reasonLine} + ${canReveal ? '' : ""} + +${escapeHtml(reasons[0])}
` : ""} + `); + + this.$("#reveal")?.addEventListener("click", () => { + this._revealed = true; + this.emit("revealed", { target: this._target, decision }); + this.render(); + }); + } +} + +/** + * `No governance signals
' + } + ${ + evidence + ? `+ ${escapeHtml(evidence.trustedReportTotal)} trusted report(s), + ${escapeHtml(evidence.trustedMuteTotal)} trusted mute(s) +
` + : "" + } + ${ + reporters.length + ? `Reported by: ${reporters.map((key) => escapeHtml(shortenKey(key))).join(", ")}
` + : "" + } + ${ + muters.length + ? `Muted by: ${muters.map((key) => escapeHtml(shortenKey(key))).join(", ")}
` + : "" + } +content
" } = {}) { + const element = /** @type {any} */ (document.createElement(tag)); + if (profile) { + element.setAttribute("profile", profile); + } + element.innerHTML = inner; + document.body.append(element); + if (runtime) element.runtime = runtime; + if (target) element.target = target; + return element; +} + +beforeEach(() => { + document.body.innerHTML = ""; +}); + +describe("helpers", () => { + it("escapes markup", () => { + expect(escapeHtml('