ZDDC 477c8826a7 feat(profile): path-scoped fields on /.profile/access?path=<url> ... Existing /.profile/access stays unchanged when called without ?path=; the path-scoped fields are populated only when the caller passes a URL path, so each tool can fetch its root capabilities in one round trip and gate top-of-page affordances (transmittal Publish, tables +Add row, browse +New folder) accordingly. Three new fields (all omitempty so the global shape doesn't change): - path_verbs: rwcda subset granted at the requested path under the caller's CURRENT elevation state. - path_is_admin: subtree-admin authority at the requested path, again under current elevation. Distinct from "verbs include 'a'": admin authority is WORM-bypass capability, not just .zddc edits. - path_can_elevate_grant: verb set the caller would hold AT THIS PATH if they elevated — empty when elevation wouldn't change anything (already elevated, or no admin grant on chain). Drives toast offers like "Elevate to delete this file". Path resolution mirrors serveProfileEffectivePolicy: must start with "/", must not escape ZDDC_ROOT. Validation failures leave the fields empty rather than 400ing — the global view is still useful, and the client can detect absence. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-21 08:14:38 -05:00
..
accepthandler.go	refactor(audit): pre-release cleanup pass	2026-05-18 16:28:07 -05:00
accepthandler_test.go	feat: reviewing/ lifecycle — Plan Review endpoint, virtual received window, browse context-menu workflows	2026-05-15 16:08:04 -05:00
admin_helpers.go	chore: elevation slot in every tool + docs + helper file splits + smell cleanup	2026-05-14 12:15:41 -05:00
archivehandler.go	fix(policy): read-path ACL honors admin bypass via AllowFromChainP	2026-05-18 09:54:46 -05:00
archivehandler_test.go	refactor(audit): pre-release cleanup pass	2026-05-18 16:28:07 -05:00
auth_invariants_test.go	refactor: nest lifecycle slots per-party + add virtual top-level aggregators	2026-05-21 07:57:45 -05:00
authcheck.go	refactor(audit): pre-release cleanup pass	2026-05-18 16:28:07 -05:00
authcheck_test.go	refactor: unified listing protocol + form-editor retirement + admin elevation	2026-05-14 12:15:07 -05:00
converthandler.go	refactor(convert): wrapper-in-image owns the sandbox; Go just exec's binaries	2026-05-19 07:47:58 -05:00
cors.go	feat(server): authenticated CRUD + verb-based RBAC with WORM archive folders	2026-05-05 15:58:04 -05:00
cors_test.go	feat(zddc-server): admin debug page + X-Auth-Request-Email default + hidden-segment guard	2026-04-28 14:02:06 -05:00
default-mdl.form.yaml	feat(forms): cascade-driven filename composition + audit on row create	2026-05-19 09:55:07 -05:00
default-mdl.table.yaml	feat(mdl): default columns mirror tracking-number components + customizable	2026-05-09 11:09:31 -05:00
default-project-mdl.form.yaml	test(handler): coverage for record audit + history flows	2026-05-19 10:08:52 -05:00
default-project-mdl.table.yaml	refactor: nest lifecycle slots per-party + add virtual top-level aggregators	2026-05-21 07:57:45 -05:00
default-project-rsk.form.yaml	test(handler): coverage for record audit + history flows	2026-05-19 10:08:52 -05:00
default-project-rsk.table.yaml	refactor: nest lifecycle slots per-party + add virtual top-level aggregators	2026-05-21 07:57:45 -05:00
default-rsk.form.yaml	test(handler): coverage for record audit + history flows	2026-05-19 10:08:52 -05:00
default-rsk.table.yaml	feat: per-party RSK + project-level SSR/MDL/RSK rollup tables	2026-05-18 21:47:56 -05:00
default-ssr.form.yaml	feat(forms): cascade-driven filename composition + audit on row create	2026-05-19 09:55:07 -05:00
default-ssr.table.yaml	feat: per-party RSK + project-level SSR/MDL/RSK rollup tables	2026-05-18 21:47:56 -05:00
directory.go	refactor: nest lifecycle slots per-party + add virtual top-level aggregators	2026-05-21 07:57:45 -05:00
directory_test.go	refactor(audit): pre-release cleanup pass	2026-05-18 16:28:07 -05:00
fileapi.go	refactor: nest lifecycle slots per-party + add virtual top-level aggregators	2026-05-21 07:57:45 -05:00
fileapi_test.go	refactor: nest lifecycle slots per-party + add virtual top-level aggregators	2026-05-21 07:57:45 -05:00
formhandler.go	feat(forms): augment served schema with cascade field_codes + locks	2026-05-19 09:58:21 -05:00
formhandler_test.go	refactor(audit): pre-release cleanup pass	2026-05-18 16:28:07 -05:00
history.go	test(handler): coverage for record audit + history flows	2026-05-19 10:08:52 -05:00
history_test.go	test(handler): coverage for record audit + history flows	2026-05-19 10:08:52 -05:00
logring.go	feat(zddc-server): user profile page replaces /.admin/	2026-04-29 16:32:02 -05:00
logring_test.go	feat(zddc-server): admin debug page + X-Auth-Request-Email default + hidden-segment guard	2026-04-28 14:02:06 -05:00
middleware.go	refactor(audit): pre-release cleanup pass	2026-05-18 16:28:07 -05:00
middleware_test.go	test: lock down elevation gate, .zddc write matrix, audit-log attribution	2026-05-18 16:29:43 -05:00
paths.go	chore: elevation slot in every tool + docs + helper file splits + smell cleanup	2026-05-14 12:15:41 -05:00
planreview.go	refactor: nest lifecycle slots per-party + add virtual top-level aggregators	2026-05-21 07:57:45 -05:00
planreview_test.go	refactor: nest lifecycle slots per-party + add virtual top-level aggregators	2026-05-21 07:57:45 -05:00
profile_assets.go	refactor(audit): pre-release cleanup pass	2026-05-18 16:28:07 -05:00
profilehandler.go	feat(profile): path-scoped fields on /.profile/access?path=<url>	2026-05-21 08:14:38 -05:00
profilehandler_test.go	feat(profile): path-scoped fields on /.profile/access?path=<url>	2026-05-21 08:14:38 -05:00
profilepage.go	refactor(audit): pre-release cleanup pass	2026-05-18 16:28:07 -05:00
profileprojects.go	refactor(audit): pre-release cleanup pass	2026-05-18 16:28:07 -05:00
profileprojects_test.go	feat: project creation gated by cascade ActionCreate, not hardcoded admin	2026-05-18 10:25:19 -05:00
projecthandler.go	refactor(zddc-server): demote routing-shape redirects from 301 to 302	2026-05-10 14:37:02 -05:00
projecthandler_test.go	refactor(landing): project landing is now a single-file SPA, not server-rendered	2026-05-10 07:57:30 -05:00
projectshandler.go	fix(policy): read-path ACL honors admin bypass via AllowFromChainP	2026-05-18 09:54:46 -05:00
singleflight.go	feat(zddc): MD→{docx,html,pdf} server-side conversion via stock pandoc + chromium containers	2026-05-13 10:33:56 -05:00
ssrhandler.go	feat(forms): cascade-driven filename composition + audit on row create	2026-05-19 09:55:07 -05:00
ssrhandler_test.go	feat: per-party RSK + project-level SSR/MDL/RSK rollup tables	2026-05-18 21:47:56 -05:00
static.go	Initial commit	2026-04-27 11:05:47 -05:00
subtreezip.go	refactor(audit): pre-release cleanup pass	2026-05-18 16:28:07 -05:00
subtreezip_test.go	refactor: virtual file extensions for subtree zip + MD conversion	2026-05-14 12:23:37 -05:00
tablehandler.go	feat(tables): rollup Add Row routes via the party column	2026-05-19 08:14:37 -05:00
tablehandler_test.go	feat: per-party RSK + project-level SSR/MDL/RSK rollup tables	2026-05-18 21:47:56 -05:00
tables.html	refactor: nest lifecycle slots per-party + add virtual top-level aggregators	2026-05-21 07:57:45 -05:00
tokenhandler.go	feat(server): self-issued bearer tokens + --no-auth flag	2026-05-08 07:40:28 -05:00
tokenhandler_test.go	feat(server): self-issued bearer tokens + --no-auth flag	2026-05-08 07:40:28 -05:00
virtualviewhandler.go	refactor: nest lifecycle slots per-party + add virtual top-level aggregators	2026-05-21 07:57:45 -05:00
wormbypass_test.go	test(handler): lock-in invariants for admin/elevation/WORM behavior	2026-05-18 09:12:37 -05:00
zddcfile.go	refactor(audit): pre-release cleanup pass	2026-05-18 16:28:07 -05:00
zddcfile_test.go	refactor(audit): pre-release cleanup pass	2026-05-18 16:28:07 -05:00
ziphandler.go	feat(zddc): serve a .zip as a virtual directory (zipfs + dispatch intercept)	2026-05-12 12:17:47 -05:00
ziphandler_test.go	feat(zddc): serve a .zip as a virtual directory (zipfs + dispatch intercept)	2026-05-12 12:17:47 -05:00