3852e9ba62
Native confirm() blocks all further browser events on the page (found live, mid browser-automation testing, on directory.ejs's "Rotate Client Secret" -- it froze the tab). Every call site across the app was removed in favor of app.messages.action/confirm/toast and app.modal.open; this static check (scans views/ and public/js|lib/js for bare alert(/confirm(/ prompt() calls) keeps a regression from shipping unnoticed the way the oauth_client.js DELETE bug just did. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>