feat!: drop the backend-side elevation windows; password and passkey sessions share capabilities, passkeys guard what nodes verify; the trust page lists added and removed passkeys [CI]

backend/src/MoShiro.Backend.Application/Auth/TrustService.cs

@@ -8,7 +8,10 @@ using MoShiro.Protocol;
 namespace MoShiro.Backend.Application;
 
 /// <summary>要操作员用 passkey 签的下一版操作员集合：<c>Challenge</c> 是语句的 SHA-256（base64url），也就是 WebAuthn 的挑战。</summary>
-public sealed record TrustProposal(string Statement, int Version, string Challenge);
+public sealed record TrustProposal(string Statement, int Version, string Challenge, IReadOnlyList<ProposedCredential> Added, IReadOnlyList<string> Removed, bool ServerKeyChanged);
+
+/// <summary>下一版里新增的 passkey：签名的人要看清楚是不是自己加的，攻击者往账号里塞一把 passkey 再等人签名，是这个流程唯一的风险。</summary>
+public sealed record ProposedCredential(string Id, string Name, long CreatedAtMs);
 
 /// <summary><c>InSync</c>：当前生效的集合和现有的 passkey、域名是否一致；不一致就需要签一个新版本。</summary>
 /// <param name="ServerKey">这个面板的服务器身份密钥的指纹；<c>ServerKeyListed</c>：当前生效的操作员集合里已经登记了它（节点据此认证服务器、加密链路）。</param>
@@ -72,7 +75,12 @@ public sealed class TrustService : IOperatorTrustSource, IDisposable
             [.. passkeys.Select(p => new OperatorKey(p.Id, p.PublicKeySpki))],
             [_server.PublicKeySpki]);
         string statement = OperatorTrust.Encode(next);
-        return new TrustProposal(statement, next.Version, Base64Url.Encode(SHA256.HashData(Encoding.UTF8.GetBytes(statement))));
+        HashSet<string> before = [.. current?.Keys.Select(k => k.CredentialId) ?? []];
+        HashSet<string> after = [.. next.Keys.Select(k => k.CredentialId)];
+        ProposedCredential[] added = [.. passkeys.Where(p => !before.Contains(p.Id)).Select(p => new ProposedCredential(p.Id, p.Name, p.CreatedAtMs))];
+        string[] removed = [.. before.Where(id => !after.Contains(id)).Order(StringComparer.Ordinal)];
+        bool serverChanged = current is not null && !(current.Servers ?? []).Select(Convert.ToBase64String).Order(StringComparer.Ordinal).SequenceEqual((next.Servers ?? []).Select(Convert.ToBase64String).Order(StringComparer.Ordinal));
+        return new TrustProposal(statement, next.Version, Base64Url.Encode(SHA256.HashData(Encoding.UTF8.GetBytes(statement))), added, removed, serverChanged);
     }
 
     private static bool Same(OperatorSet a, OperatorSet b) =>
@@ -82,7 +90,7 @@ public sealed class TrustService : IOperatorTrustSource, IDisposable
 
     /// <summary>
     /// 收下操作员签回来的一版（创世，或上一版里的凭证签的更新）：语句里的每把凭证都要是已注册的 passkey、域名对得上、链验得过。
-    /// 谁能调用由端点的能力和提权窗口把关；这里不看调用者。
+    /// 谁能调用由端点的能力把关；这里不看调用者，信任来自节点自己验证的 passkey 签名。
     /// </summary>
     public async ValueTask<Result<TrustState>> CommitAsync(SignedStatementDto signed, PasskeyContext context, CancellationToken ct)
     {