Clicking a history snapshot in the tree 404'd: the dispatcher's dot-prefix guard blocks every .-segment URL, and the preview fetch hit the raw .history/<stem>/<snap>.md path. But .history is ACL-modeled content (it inherits the shadowed file's .zddc chain), not infra like .devshell — so the guard was redundant with permissions there. Carve GET/HEAD of .history out of the dot-prefix guard: snapshots are now fetchable as ordinary ACL-gated files (read the live file → read its history). Writes into .history stay blocked, and the listing dot-filter still hides it from default views unless ?hidden is set. Export handler.HistoryDirName for the dispatcher. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| apps | ||
| archive | ||
| auth | ||
| cache | ||
| config | ||
| convert | ||
| fs | ||
| handler | ||
| jsonschema | ||
| listing | ||
| policy | ||
| tlsutil | ||
| zddc | ||
| zipfs | ||