fix(ui): fixed-size scrollable approval card + geometry gate observes card shell

[cyhhao]

Summary

• render approval context as structured detail rows inside a fixed card shell
• keep the header and action footer fixed while long details and commands scroll in the middle
• observe the fixed card shell in the visibility guard so content scrolling cannot create a false failure

Verification

• npm test (80 tests)
• npm run build
• git diff --check origin/main...HEAD
• long multi-line command regression confirms the command remains contained and the action footer stays outside the scroll region
• geometry regressions confirm the fixed shell passes at the supported minimum size while hidden and parent-occluded surfaces still fail closed

Scope

This changes the sandbox approval surface used by signed reveal, sign, and agent-deliver confirmations. Existing visibility thresholds and parent-frame security checks are unchanged; only the observed interactive target moves from the approve button to the fixed card shell.

Full parent plus sandbox browser regression remains with the orchestrator after merge and redeploy.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
vault-sandbox	Ready	Preview, Comment	Jul 10, 2026 6:13am

[cyhhao]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 3d9b067f70

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[cyhhao]

@codex review

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. Breezy!

Reviewed commit: a660529fd1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".