ZDDC 1d758780fe feat(elevation): page-wide armed chrome when admin mode is on ... The header toggle alone is easy to miss — admin elevation bypasses WORM zones and ACL silently, so an admin who forgot they were elevated could write into received/ or issued/ thinking they were operating under their normal grants. Two reinforcing affordances when the zddc-elevate cookie is set: - body.is-elevated paints a 3px red outline around the entire page, visible from any scroll position and inside any tool surface. - A sticky red banner sits across the top with a pulsing dot, an explicit warning ("write access bypasses WORM and ACL safeguards"), and a one-click "Drop admin" button that clears the cookie + reloads so the user can disarm without hunting for the corner toggle. Both render on every page load via shared/elevation.js — applies to every tool that includes the elevation slot, plus any tool that loads the shared bundle even without a toggle host (the iframed classifier inside browse's grid mode, etc.). Wired before the access fetch so the banner appears immediately instead of waiting on /.profile/access. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-18 08:41:07 -05:00
..
accepthandler.go	feat: reviewing/ lifecycle — Plan Review endpoint, virtual received window, browse context-menu workflows	2026-05-15 16:08:04 -05:00
accepthandler_test.go	feat: reviewing/ lifecycle — Plan Review endpoint, virtual received window, browse context-menu workflows	2026-05-15 16:08:04 -05:00
admin_helpers.go	chore: elevation slot in every tool + docs + helper file splits + smell cleanup	2026-05-14 12:15:41 -05:00
archivehandler.go	refactor(zddc-server): demote routing-shape redirects from 301 to 302	2026-05-10 14:37:02 -05:00
archivehandler_test.go	feat(archive): canonicalize deep .archive URLs + permissions follow the file	2026-05-07 06:28:07 -05:00
authcheck.go	refactor: unified listing protocol + form-editor retirement + admin elevation	2026-05-14 12:15:07 -05:00
authcheck_test.go	refactor: unified listing protocol + form-editor retirement + admin elevation	2026-05-14 12:15:07 -05:00
converthandler.go	refactor: virtual file extensions for subtree zip + MD conversion	2026-05-14 12:23:37 -05:00
cors.go	feat(server): authenticated CRUD + verb-based RBAC with WORM archive folders	2026-05-05 15:58:04 -05:00
cors_test.go	feat(zddc-server): admin debug page + X-Auth-Request-Email default + hidden-segment guard	2026-04-28 14:02:06 -05:00
default-mdl.form.yaml	feat(mdl): default columns mirror tracking-number components + customizable	2026-05-09 11:09:31 -05:00
default-mdl.table.yaml	feat(mdl): default columns mirror tracking-number components + customizable	2026-05-09 11:09:31 -05:00
directory.go	feat: reviewing/ lifecycle — Plan Review endpoint, virtual received window, browse context-menu workflows	2026-05-15 16:08:04 -05:00
directory_test.go	fix(zddc-server): mdl slash form serves browse; .zddc viewable at every depth	2026-05-11 12:45:16 -05:00
fileapi.go	feat: reviewing/ lifecycle — Plan Review endpoint, virtual received window, browse context-menu workflows	2026-05-15 16:08:04 -05:00
fileapi_test.go	refactor: unified listing protocol + form-editor retirement + admin elevation	2026-05-14 12:15:07 -05:00
formhandler.go	refactor(tables): in-dir convention + unified table+form HTML bundle	2026-05-09 09:15:26 -05:00
formhandler_test.go	refactor: unified listing protocol + form-editor retirement + admin elevation	2026-05-14 12:15:07 -05:00
logring.go	feat(zddc-server): user profile page replaces /.admin/	2026-04-29 16:32:02 -05:00
logring_test.go	feat(zddc-server): admin debug page + X-Auth-Request-Email default + hidden-segment guard	2026-04-28 14:02:06 -05:00
middleware.go	refactor: unified listing protocol + form-editor retirement + admin elevation	2026-05-14 12:15:07 -05:00
middleware_test.go	feat(server): self-issued bearer tokens + --no-auth flag	2026-05-08 07:40:28 -05:00
paths.go	chore: elevation slot in every tool + docs + helper file splits + smell cleanup	2026-05-14 12:15:41 -05:00
planreview.go	feat: reviewing/ lifecycle — Plan Review endpoint, virtual received window, browse context-menu workflows	2026-05-15 16:08:04 -05:00
planreview_test.go	feat: reviewing/ lifecycle — Plan Review endpoint, virtual received window, browse context-menu workflows	2026-05-15 16:08:04 -05:00
profile_assets.go	chore: elevation slot in every tool + docs + helper file splits + smell cleanup	2026-05-14 12:15:41 -05:00
profilehandler.go	refactor: unified listing protocol + form-editor retirement + admin elevation	2026-05-14 12:15:07 -05:00
profilehandler_test.go	refactor: unified listing protocol + form-editor retirement + admin elevation	2026-05-14 12:15:07 -05:00
profilepage.go	refactor: unified listing protocol + form-editor retirement + admin elevation	2026-05-14 12:15:07 -05:00
profileprojects.go	refactor: unified listing protocol + form-editor retirement + admin elevation	2026-05-14 12:15:07 -05:00
projecthandler.go	refactor(zddc-server): demote routing-shape redirects from 301 to 302	2026-05-10 14:37:02 -05:00
projecthandler_test.go	refactor(landing): project landing is now a single-file SPA, not server-rendered	2026-05-10 07:57:30 -05:00
projectshandler.go	refactor: unified listing protocol + form-editor retirement + admin elevation	2026-05-14 12:15:07 -05:00
singleflight.go	feat(zddc): MD→{docx,html,pdf} server-side conversion via stock pandoc + chromium containers	2026-05-13 10:33:56 -05:00
static.go	Initial commit	2026-04-27 11:05:47 -05:00
subtreezip.go	refactor: virtual file extensions for subtree zip + MD conversion	2026-05-14 12:23:37 -05:00
subtreezip_test.go	refactor: virtual file extensions for subtree zip + MD conversion	2026-05-14 12:23:37 -05:00
tablehandler.go	chore(zddc): remove dead canonical-folder predicates	2026-05-11 16:01:43 -05:00
tablehandler_test.go	refactor: unified listing protocol + form-editor retirement + admin elevation	2026-05-14 12:15:07 -05:00
tables.html	feat(elevation): page-wide armed chrome when admin mode is on	2026-05-18 08:41:07 -05:00
tokenhandler.go	feat(server): self-issued bearer tokens + --no-auth flag	2026-05-08 07:40:28 -05:00
tokenhandler_test.go	feat(server): self-issued bearer tokens + --no-auth flag	2026-05-08 07:40:28 -05:00
zddcfile.go	refactor: unified listing protocol + form-editor retirement + admin elevation	2026-05-14 12:15:07 -05:00
zddcfile_test.go	fix(zddc-server): mdl slash form serves browse; .zddc viewable at every depth	2026-05-11 12:45:16 -05:00
ziphandler.go	feat(zddc): serve a .zip as a virtual directory (zipfs + dispatch intercept)	2026-05-12 12:17:47 -05:00
ziphandler_test.go	feat(zddc): serve a .zip as a virtual directory (zipfs + dispatch intercept)	2026-05-12 12:17:47 -05:00