differentiate first unlock vs re-lock messaging on locked sheet

First unlock (cold start, no keys decrypted yet):
  "NostrKey Needs to Decrypt Your Keys"
  "Enter your master password to decrypt your key vault for this session."

Re-lock (auto-locked after timeout):
  "NostrKey is Locked"
  "This site needs your key to sign or encrypt."

Author: vveerrgg

distros/safari/background.build.js

@@ -1276,10 +1276,11 @@ async function ask(uuid, { kind, host, payload }) {
         if (isLocked) {
             if (!(nostrAccessWhileLocked && sessionKeys.has(pi))) {
                 // No keys available — show locked notification and reject
+                const isFirstUnlock = sessionKeys.size === 0;
                 try {
                     const [activeTab] = await api.tabs.query({ active: true, currentWindow: true });
                     if (activeTab?.id) {
-                        api.tabs.sendMessage(activeTab.id, { kind: 'showLockedSheet' }).catch(() => {});
+                        api.tabs.sendMessage(activeTab.id, { kind: 'showLockedSheet', firstUnlock: isFirstUnlock }).catch(() => {});
                     }
                 } catch (_) {}
                 const sendResponse = validations[uuid];

distros/safari/background.js

@@ -223,7 +223,7 @@ function showPermissionSheet(host, kind, queuePosition, queueTotal) {
 let lockedSheetEl = null;
 let lockedSheetTimer = null;
 
-function showLockedSheet() {
+function showLockedSheet(firstUnlock) {
     // If already visible, reset the auto-dismiss timer
     if (lockedSheetEl && lockedSheetEl.classList.contains('active')) {
         if (lockedSheetTimer) clearTimeout(lockedSheetTimer);
@@ -322,8 +322,10 @@ function showLockedSheet() {
         <div class="nk-sheet">
             <div class="nk-handle"></div>
             <div class="nk-icon">&#x1F512;</div>
-            <div class="nk-title">NostrKey is Locked</div>
-            <div class="nk-text">This site needs your key to sign or encrypt.</div>
+            <div class="nk-title">${firstUnlock ? 'NostrKey Needs to Decrypt Your Keys' : 'NostrKey is Locked'}</div>
+            <div class="nk-text">${firstUnlock
+                ? 'This site is requesting your Nostr identity. Enter your master password to decrypt your key vault for this session.'
+                : 'This site needs your key to sign or encrypt.'}</div>
             <div class="nk-muted">Click the NostrKey icon in your toolbar and enter your master password.</div>
             <button class="nk-btn">Got it</button>
         </div>
@@ -357,7 +359,7 @@ api.runtime.onMessage.addListener((message, sender, sendResponse) => {
         return true; // Keep channel open for async response
     }
     if (message.kind === 'showLockedSheet') {
-        showLockedSheet();
+        showLockedSheet(message.firstUnlock || false);
         sendResponse(true);
         return true;
     }

distros/safari/content.build.js

@@ -1276,10 +1276,11 @@ async function ask(uuid, { kind, host, payload }) {
         if (isLocked) {
             if (!(nostrAccessWhileLocked && sessionKeys.has(pi))) {
                 // No keys available — show locked notification and reject
+                const isFirstUnlock = sessionKeys.size === 0;
                 try {
                     const [activeTab] = await api.tabs.query({ active: true, currentWindow: true });
                     if (activeTab?.id) {
-                        api.tabs.sendMessage(activeTab.id, { kind: 'showLockedSheet' }).catch(() => {});
+                        api.tabs.sendMessage(activeTab.id, { kind: 'showLockedSheet', firstUnlock: isFirstUnlock }).catch(() => {});
                     }
                 } catch (_) {}
                 const sendResponse = validations[uuid];

distros/safari/content.js

@@ -223,7 +223,7 @@ function showPermissionSheet(host, kind, queuePosition, queueTotal) {
 let lockedSheetEl = null;
 let lockedSheetTimer = null;
 
-function showLockedSheet() {
+function showLockedSheet(firstUnlock) {
     // If already visible, reset the auto-dismiss timer
     if (lockedSheetEl && lockedSheetEl.classList.contains('active')) {
         if (lockedSheetTimer) clearTimeout(lockedSheetTimer);
@@ -322,8 +322,10 @@ function showLockedSheet() {
         <div class="nk-sheet">
             <div class="nk-handle"></div>
             <div class="nk-icon">&#x1F512;</div>
-            <div class="nk-title">NostrKey is Locked</div>
-            <div class="nk-text">This site needs your key to sign or encrypt.</div>
+            <div class="nk-title">${firstUnlock ? 'NostrKey Needs to Decrypt Your Keys' : 'NostrKey is Locked'}</div>
+            <div class="nk-text">${firstUnlock
+                ? 'This site is requesting your Nostr identity. Enter your master password to decrypt your key vault for this session.'
+                : 'This site needs your key to sign or encrypt.'}</div>
             <div class="nk-muted">Click the NostrKey icon in your toolbar and enter your master password.</div>
             <button class="nk-btn">Got it</button>
         </div>
@@ -357,7 +359,7 @@ api.runtime.onMessage.addListener((message, sender, sendResponse) => {
         return true; // Keep channel open for async response
     }
     if (message.kind === 'showLockedSheet') {
-        showLockedSheet();
+        showLockedSheet(message.firstUnlock || false);
         sendResponse(true);
         return true;
     }