ZDDC 050902fa9e chore: elevation slot in every tool + docs + helper file splits + smell cleanup ... Polish pass after the big refactor in 2d114fc. == Header elevation slot propagated == shared/elevation.{js,css} surface a header checkbox for admins. 30-minute sudo-style cookie window (Max-Age=1800, SameSite=Lax). Only renders when /.profile/access reports can_elevate=true; quiet for non-admins. Slot added to all 7 tool templates and concat'd into all 7 build.sh files; admin in any tool now sees the toggle. Three text-rename ride-alongs in archive/classifier/transmittal templates: "Add Local Directory" → "Use Local Directory" (the same rename that landed in browse earlier in this branch). == Docs == - CLAUDE.md gets an "Admin elevation is sudo-style" paragraph in the "Things that bite if you forget" section. - AGENTS.md gets a dedicated "Admin elevation (sudo-style)" section alongside "Bearer tokens" — same depth as the existing auth docs. == Helper file splits == The retired form editor's shared helpers got bundled into a single zddc_admin.go in the cleanup; that name is now misleading. Split by concern: - admin_helpers.go: hasAnyAdminScope (the only admin-specific helper) - paths.go: resolvePath, urlPathOf, chainDirs (URL ↔ filesystem path math — used by several profile / zddc-file handlers) - profile_assets.go (renamed from zddc_admin_assets.go): custom CSS pipeline. URL renamed from /.profile/zddc/assets/ → /.profile/assets/ since /.profile/zddc/ no longer hosts an editor. - treeEntry moves to profilehandler.go (alongside AccessView, its only consumer). - writeError moves to profileprojects.go (its only consumer). == Smell cleanup == - zddc.HasAnyAdminGrant(fsRoot, email) — new elevation-independent primitive that walks the cascade and reports whether email is named in any admin: list anywhere. Replaces the synthetic-elevated probe hack in enumerateAccess (`Principal{Email, Elevated: true}` was "lying" to the elevation gate to ask what it would say). The handler's hasAnyAdminScope collapses to a 4-line wrapper that gates on p.Elevated and delegates. - Access-log middleware records `elevated` per request, so forensics can distinguish "admin acting as user" from "admin exercising power." - browse/js/app.js's ?file= deep link walks multi-segment paths. Each intermediate segment is matched + expanded; the leaf gets selected/previewed. Auto-shows hidden when any segment starts with . or _. Silently no-ops on unresolved segments. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-14 12:15:41 -05:00
..
app.js	chore: elevation slot in every tool + docs + helper file splits + smell cleanup	2026-05-14 12:15:41 -05:00
directory.js	feat(tools,build): in-flight HTML-tool reworks and build-infra updates	2026-04-29 12:52:27 -05:00
drag-drop.js	fix(archive): point getElementById at the real root id	2026-05-04 07:49:17 -05:00
events.js	refactor(archive): remove unused debounce helper	2026-05-09 18:48:57 -05:00
export.js	perf(tools): vendor jszip + docx-preview for archive/transmittal/classifier	2026-05-04 07:49:17 -05:00
filtering.js	feat(tools,build): in-flight HTML-tool reworks and build-infra updates	2026-04-29 12:52:27 -05:00
hash.js	Initial commit	2026-04-27 11:05:47 -05:00
init.js	feat(tools,build): in-flight HTML-tool reworks and build-infra updates	2026-04-29 12:52:27 -05:00
parser.js	feat(archive,browse): treat .zip transmittal folders as folders + shared zip adapter	2026-05-12 12:29:14 -05:00
presets.js	feat(zddc): canonical lowercase + .zddc display map + archive project titles	2026-05-11 13:03:53 -05:00
source.js	feat(archive,browse): treat .zip transmittal folders as folders + shared zip adapter	2026-05-12 12:29:14 -05:00
table.js	feat(shared): bake xlsx + utif + jszip + docx-preview into every tool	2026-05-10 15:09:38 -05:00
url-state.js	feat(tools,build): in-flight HTML-tool reworks and build-infra updates	2026-04-29 12:52:27 -05:00