permission_forge 0.14.1

data/app/views/permission_forge/resources/show.html.erb

@@ -0,0 +1,117 @@
+<% set = @permission_set %>
+<% resource = @resource %>
+<% pf_audit_preload_last_changes([resource, *(@tab == 'rules' ? @rules : [])]) %>
+<% muting = set.is_muting %>
+<% locked = pf_locked_record?(set) || pf_locked_record?(resource) %>
+<% label = pf_resource_label(resource) %>
+<% plural = pf_resource_plural(resource.name) %>
+<% base = "pf[resources][#{resource.id}]" %>
+<% content_for :pf_title, "#{label} · #{set.name}" %>
+<%= pf_breadcrumb([t('permission_forge.nav.permission_sets'), permission_forge.permission_sets_path],
+                  [set.name, permission_forge.permission_set_path(set)], label) %>
+
+<% if muting %>
+  <div class="pf-banner pf-banner--muting" role="note">
+    <span class="pf-banner__glyph" aria-hidden="true">⊘</span>
+    <div class="pf-banner__body"><span><b><%= t('permission_forge.ui.badges.muting') %>.</b> <%= t('.muting_note', set: set.name) %></span></div>
+  </div>
+<% end %>
+<%= render 'permission_forge/shared/mode_banners', record: (pf_locked_record?(resource) ? resource : set), muting: false,
+           duplicate_path: permission_forge.duplicate_permission_set_path(set) %>
+<%= pf_help_banner('resource', term: t('.help_term'), text: t('.help_text', model: resource.name)) %>
+
+<%= form_with url: permission_forge.review_permission_set_resource_path(set, resource.name), method: :post, id: 'pf-res-form',
+              data: { pf_track: 'pf-res-savebar', pf_review: true } do %>
+  <input type="hidden" name="return_to" value="<%= request.fullpath %>">
+  <%# The form's default button. Without it, Enter in a text input submits through the first
+      submit button on the page — a bulk "Set to" button, proposing that level for the ticked rows.
+      Out of sight but rendered, not `hidden`: Safari before 16.4 skips a display:none button
+      when it picks the default button (webkit.org/b/247545) and would press a bulk button. %>
+  <button type="submit" class="pf-sr-only" tabindex="-1" aria-hidden="true"><%= t('permission_forge.shared.savebar.review') %></button>
+<% end %>
+
+<div class="pf-page-header">
+  <div class="pf-page-header__text">
+    <div class="pf-row">
+      <h1 class="pf-h1"><%= label %></h1>
+      <code class="pf-mono-key"><%= resource.name %></code>
+    </div>
+    <label class="pf-sr-only" for="pf-res-desc"><%= t('.description') %></label>
+    <input id="pf-res-desc" class="pf-desc-input" type="text" name="<%= base %>[description]" value="<%= resource.description %>"
+           form="pf-res-form" placeholder="<%= t('.description_placeholder') %>" <%= 'readonly' if locked %>>
+    <span class="pf-impact"><span class="pf-dot" aria-hidden="true"></span><%= t('.impact', people: pf_people_text(@people_count)) %></span>
+  </div>
+  <label class="pf-switch">
+    <input type="hidden" name="<%= base %>[is_active]" value="0" form="pf-res-form">
+    <input type="checkbox" role="switch" name="<%= base %>[is_active]" value="1" form="pf-res-form" <%= 'checked' if resource.is_active %> <%= 'disabled' if locked %>>
+    <span class="pf-switch__track" aria-hidden="true"></span>
+    <span class="pf-switch__on"><%= t('permission_forge.shared.active') %></span>
+    <span class="pf-switch__off"><%= t('permission_forge.ui.badges.off') %></span>
+  </label>
+</div>
+
+<div class="pf-grid-2" data-pf-crud="r<%= resource.id %>">
+  <section class="pf-card" aria-labelledby="pf-res-crud">
+    <div class="pf-card__body pf-stack">
+      <h2 class="pf-h2" id="pf-res-crud"><%= t('.what_can_do') %></h2>
+      <div class="pf-crud-grid">
+        <% PermissionForge::Admin::EffectiveAccess::CRUD.each do |flag| %>
+          <div class="pf-crud-grid__col">
+            <span class="pf-fs-12 pf-text-3"><%= t("permission_forge.ui.flags_short.#{flag}") %></span>
+            <%= render 'permission_forge/shared/crud_cell', name: "#{base}[#{flag}]", flag: flag, checked: resource.public_send(flag),
+                       muting: muting, locked: locked, size: :lg, form: 'pf-res-form',
+                       requires: (%w[edit_access delete_access].include?(flag.to_s) ? 'read_access' : nil),
+                       aria: "#{t("permission_forge.ui.flags_short.#{flag}")} #{plural}" %>
+          </div>
+        <% end %>
+      </div>
+      <span class="pf-hint"><%= muting ? t('.muting_hint') : t('.needs_read_hint') %></span>
+    </div>
+  </section>
+
+  <% unless muting %>
+    <section class="pf-card" aria-labelledby="pf-res-scope">
+      <div class="pf-card__body pf-stack">
+        <h2 class="pf-h2" id="pf-res-scope"><%= t('.record_scope') %></h2>
+        <% { 'view_all' => 'read_access', 'modify_all' => 'view_all edit_access' }.each do |flag, requires| %>
+          <label class="pf-scope-option">
+            <input type="hidden" name="<%= base %>[<%= flag %>]" value="0" form="pf-res-form">
+            <input type="checkbox" name="<%= base %>[<%= flag %>]" value="1" form="pf-res-form" <%= 'checked' if resource.public_send(flag) %>
+                   <%= 'disabled' if locked %> data-pf-flag="<%= flag %>" data-pf-requires="<%= requires %>" <%= 'data-pf-locked' if locked %>>
+            <span class="pf-fs-13"><%= t(".#{flag}_html", resource: label) %>
+              <span class="pf-text-3"><%= t(".#{flag}_needs") %></span></span>
+          </label>
+        <% end %>
+        <% active_rules = @rules.count(&:is_active) %>
+        <% if resource.view_all && active_rules.positive? %>
+          <span class="pf-fs-13 pf-text-warn">⚠ <%= t('.rules_ignored', count: active_rules) %></span>
+        <% end %>
+      </div>
+    </section>
+  <% end %>
+</div>
+
+<% if @rows.sync_needed? && !locked %>
+  <%= render 'sync', set: set, resource: resource, muting: muting %>
+<% end %>
+
+<nav class="pf-tabs" role="tablist" aria-label="<%= t('.tabs_label') %>">
+  <%= pf_tab t('permission_forge.ui.fields'), permission_forge.permission_set_resource_path(set, resource.name), selected: @tab == 'fields', count: @rows.rows.size %>
+  <%= pf_tab t('permission_forge.ui.actions'), permission_forge.permission_set_resource_path(set, resource.name, tab: 'actions'), selected: @tab == 'actions', count: @action_rows.rows.size %>
+  <%= pf_tab t('permission_forge.ui.rules_tab'), permission_forge.permission_set_resource_path(set, resource.name, tab: 'rules'), selected: @tab == 'rules', count: @rules.size %>
+</nav>
+
+<div role="tabpanel">
+  <%= render "#{@tab}_tab", set: set, resource: resource, muting: muting, locked: locked, base: base %>
+</div>
+
+<% unless locked %>
+  <%= render 'permission_forge/shared/savebar', id: 'pf-res-savebar', form: 'pf-res-form', people: @people_count %>
+<% end %>
+
+<%= pf_tech_details(resource, extras: { model: resource.name }) do %>
+  <% unless locked %>
+    <div><%= pf_modal_link t('.remove', resource: label), permission_forge.delete_permission_set_resource_path(set, resource.name), class: 'pf-btn pf-btn--danger pf-btn--xs' %></div>
+  <% end %>
+<% end %>
+<%= pf_audit_footer(resource) %>

data/app/views/permission_forge/settings/_ladder.html.erb

@@ -0,0 +1,15 @@
+<% config = PermissionForge.configuration %>
+<% tiles = [['enforce', 'auto_query_scoping', config.auto_query_scoping.to_s != 'off', config.auto_query_scoping],
+            ['detect', 'unscoped_query_detection', config.unscoped_query_detection.to_s != 'off', config.unscoped_query_detection],
+            ['database', 'database_row_level_security', config.database_row_level_security == true, config.database_row_level_security]] %>
+<div class="pf-stack pf-stack--tight">
+  <p class="pf-fs-13 pf-text-2 pf-setting"><%= t('.intro') %></p>
+  <div class="pf-ladder">
+    <% tiles.each do |level, key, on, value| %>
+      <%= link_to permission_forge.settings_path(focus: key, anchor: "set-#{key}"), class: "pf-ladder__tile#{' pf-ladder__tile--on' if on}" do %>
+        <span class="pf-fw-600"><%= on ? '✓' : '–' %> <%= t(".#{level}") %> · <%= on ? t('.active') : t('.off') %></span>
+        <code class="pf-mono-key"><%= key %> = <%= value.inspect %></code>
+      <% end %>
+    <% end %>
+  </div>
+</div>

data/app/views/permission_forge/settings/_row.html.erb

@@ -0,0 +1,38 @@
+<% key = row.key %>
+<% name = t("permission_forge.settings.items.#{key}.name") %>
+<% desc = t("permission_forge.settings.items.#{key}.desc") %>
+<div class="pf-setting" id="set-<%= key %>" data-pf-setting-row="<%= "#{key} #{name} #{desc}".downcase %>" <%= pf_attrs_when(focused, data: { pf_focus: true }) %>>
+  <div class="pf-setting__about">
+    <div class="pf-row pf-row--tight">
+      <b><%= name %></b>
+      <%= pf_badge(t('.changed'), variant: :changed) if row.changed? %>
+      <%= pf_badge("⚠ #{t('.risk')}", variant: :warn) if row.warn? %>
+      <%= pf_badge("✓ #{t('.secure')}", variant: :secure) if row.ok? %>
+    </div>
+    <span class="pf-fs-13 pf-text-2"><%= desc %></span>
+    <code class="pf-mono-key"><%= key %></code>
+    <% if row.warn? %><span class="pf-fs-13 pf-text-warn"><%= t("permission_forge.settings.risks.#{key}") %></span><% end %>
+    <% if row.ok? %><span class="pf-fs-12 pf-text-grant"><%= t("permission_forge.settings.oks.#{key}") %></span><% end %>
+  </div>
+  <div class="pf-setting__value">
+    <%= pf_setting_value(row) %>
+    <span class="pf-fs-12 pf-text-3"><%= t('.default', value: pf_setting_default(row)) %></span>
+  </div>
+  <details class="pf-setting__how" <%= 'open' if focused %>>
+    <summary class="pf-btn pf-btn--sm"><%= t('.how_to_change') %></summary>
+    <div class="pf-setting__panel">
+      <% snippet = "# config/initializers/permission_forge.rb\nPermissionForge.configure do |config|\n  config.#{key} = #{@catalog.snippet_value(row)}\nend" %>
+      <div class="pf-row pf-row--between">
+        <span class="pf-fs-12 pf-text-3"><%= row.warn? && @catalog.recommended_value(key) ? t('.snippet_recommended') : t('.snippet_current') %></span>
+        <button type="button" class="pf-btn pf-btn--xs" data-pf-copy="<%= snippet %>" data-pf-copied="<%= t('permission_forge.shared.tech_details.copied') %>" hidden data-pf-js-show><%= t('permission_forge.shared.tech_details.copy') %></button>
+      </div>
+      <pre class="pf-code"><%= snippet %></pre>
+      <ol class="pf-stack pf-stack--tight pf-fs-13">
+        <li>1. <%= t('.step_edit') %></li>
+        <li>2. <%= t('.step_deploy') %></li>
+        <li>3. <%= t('.step_reload') %></li>
+      </ol>
+      <%= link_to t('.docs', key: key), "#{PermissionForge.configuration.admin_docs_url}##{key}", class: 'pf-fs-12', target: '_blank', rel: 'noopener noreferrer' %>
+    </div>
+  </details>
+</div>

data/app/views/permission_forge/settings/show.html.erb

@@ -0,0 +1,67 @@
+<% content_for :pf_title, t('permission_forge.nav.settings') %>
+<% risky = @catalog.risky_rows %>
+<div class="pf-page-header">
+  <div class="pf-page-header__text">
+    <div class="pf-row">
+      <h1 class="pf-h1"><%= t('permission_forge.nav.settings') %></h1>
+      <code class="pf-mono-key">PermissionForge <%= PermissionForge::VERSION %></code>
+      <span class="pf-pill"><%= t('.read_only') %></span>
+    </div>
+    <p class="pf-subtitle"><%= t('.intro_html', file: content_tag(:code, 'config/initializers/permission_forge.rb')) %></p>
+  </div>
+</div>
+
+<section class="pf-card" aria-labelledby="pf-health">
+  <div class="pf-card__header"><h2 class="pf-h2" id="pf-health"><%= t('.health') %></h2></div>
+  <% risky.each do |row| %>
+    <div class="pf-card__row pf-card__row--top">
+      <span class="pf-text-warn" aria-hidden="true">⚠</span>
+      <span class="pf-stack pf-stack--tight pf-grow">
+        <b><%= t("permission_forge.settings.items.#{row.key}.name") %></b>
+        <span class="pf-fs-13 pf-text-2"><%= t("permission_forge.settings.risks.#{row.key}") %></span>
+        <code class="pf-mono-key"><%= row.key %> = <%= pf_setting_inline_value(row) %></code>
+      </span>
+      <%= link_to t('.how_to_fix'), permission_forge.settings_path(focus: row.key, anchor: "set-#{row.key}"), class: 'pf-btn pf-btn--sm' %>
+    </div>
+  <% end %>
+  <div class="pf-card__row">
+    <span class="pf-text-grant">✓ <%= t('.secure_count', count: @catalog.secure_count) %></span>
+  </div>
+</section>
+
+<%= form_with url: permission_forge.settings_path, method: :get, class: 'pf-row', role: 'search' do %>
+  <label class="pf-sr-only" for="pf-settings-q"><%= t('.search') %></label>
+  <input id="pf-settings-q" class="pf-input pf-input--auto pf-grow" type="search" name="q" value="<%= params[:q] %>"
+         placeholder="<%= t('.search') %>" data-pf-settings-filter>
+  <label class="pf-checkbox">
+    <input type="checkbox" name="changed" value="1" <%= 'checked' if @changed_only %> data-pf-autosubmit>
+    <span><%= t('.changed_only') %></span>
+  </label>
+  <button type="submit" class="pf-btn pf-btn--sm" data-pf-js-hide><%= t('permission_forge.ui.apply') %></button>
+<% end %>
+
+<div class="pf-card pf-card--visible">
+  <% if @sections.empty? %><p class="pf-empty"><%= t('.no_match') %></p><% end %>
+  <% @sections.each do |section, rows| %>
+    <% section_risky = rows.any?(&:warn?) %>
+    <% open = @focus.present? ? rows.any? { |r| r.key == @focus } : (@query.present? || @changed_only || section_risky) %>
+    <details class="pf-setting-section" data-pf-setting-section <%= 'open' if open %>>
+      <summary>
+        <span class="pf-disclosure" aria-hidden="true">▸</span>
+        <span class="pf-h2"><%= t("permission_forge.settings.sections.#{section}") %></span>
+        <% if section_risky %><span class="pf-text-warn" aria-label="<%= t('.has_risk') %>">⚠</span><% end %>
+        <span class="pf-fs-12 pf-text-3 pf-ml-auto"><%= t('.section_meta', settings: t('.settings_count', count: rows.size), changed: t('.changed_count', count: rows.count(&:changed?))) %></span>
+      </summary>
+      <% if section == 'admin_api' && !PermissionForge.configuration.api_enabled && !@query.present? %>
+        <p class="pf-setting pf-text-2"><%= t('.api_disabled_html', key: content_tag(:code, 'api_enabled = false')) %></p>
+        <% rows = rows.select { |r| r.key == 'api_enabled' } %>
+      <% end %>
+      <% if section == 'record_rules' %>
+        <%= render 'ladder' %>
+      <% end %>
+      <% rows.each do |row| %>
+        <%= render 'row', row: row, focused: row.key == @focus %>
+      <% end %>
+    </details>
+  <% end %>
+</div>

data/app/views/permission_forge/shared/_across_sets.html.erb

@@ -0,0 +1,31 @@
+<%# "Who can see this field?" — one row per Permission Set containing the resource.
+    Locals: rows ([{ resource:, set:, field:, people:, in_effect: }] from Admin::FieldAcrossSets), key, current_set (opt) %>
+<% if rows.empty? %>
+  <p class="pf-fs-13 pf-text-3"><%= t('.none') %></p>
+<% else %>
+  <div class="pf-listbox">
+    <% rows.each do |row| %>
+      <% set = row[:set] %>
+      <% field = row[:field] %>
+      <% level = field && PermissionForge::Admin::FieldLevel.level_of(field, muting: set.is_muting) %>
+      <%= link_to permission_forge.permission_set_resource_field_path(set, row[:resource].name, key),
+                  class: 'pf-option', 'aria-current': (local_assigns[:current_set] == set ? 'true' : nil) do %>
+        <span class="pf-option__main">
+          <span class="pf-row pf-row--tight">
+            <% if set.is_muting %><span class="pf-text-restrict" aria-hidden="true">⊘</span><% end %>
+            <span class="pf-fw-600"><%= set.name %></span>
+            <%= pf_off_badge unless row[:in_effect] %>
+          </span>
+        </span>
+        <% if level.nil? %>
+          <%= pf_level_badge('none', label: t('permission_forge.ui.badges.not_configured')) %>
+        <% elsif set.is_muting %>
+          <%= pf_level_badge(level == 'hide' ? 'muted' : level, label: (t('.muted_hidden') if level == 'hide')) %>
+        <% else %>
+          <%= pf_level_badge(level, strategy: (field.mask_strategy if level == 'masked')) %>
+        <% end %>
+        <span class="pf-option__aside"><%= pf_people_text(row[:people]) %></span>
+      <% end %>
+    <% end %>
+  </div>
+<% end %>

data/app/views/permission_forge/shared/_audit_events.html.erb

@@ -0,0 +1,36 @@
+<%# A list of audit events, newest first: when, what (a sentence), who, how.
+    Locals: events, lookups; optional empty (text when there are none). %>
+<% if events.empty? %>
+  <p class="pf-empty"><%= local_assigns[:empty] || t('permission_forge.audit_log.empty') %></p>
+<% else %>
+  <ol class="pf-audit-list" aria-label="<%= t('permission_forge.audit_log.list_label') %>">
+    <% events.each do |event| %>
+      <li class="pf-audit-event">
+        <time class="pf-audit-event__when" datetime="<%= event.occurred_at.utc.iso8601 %>">
+          <span class="pf-fw-600"><%= pf_date(event.occurred_at) %></span>
+          <span class="pf-text-3"><%= event.occurred_at.in_time_zone.strftime('%H:%M:%S') %></span>
+        </time>
+        <div class="pf-audit-event__main">
+          <%= link_to pf_audit_sentence(event, lookups), pf_audit_event_path(event), class: 'pf-audit-event__sentence' %>
+          <div class="pf-audit-event__meta">
+            <%= pf_audit_category_badge(event.category) %>
+            <%= link_to event.event, pf_audit_log_path(event: event.event), class: 'pf-mono-key',
+                        title: t('permission_forge.audit_log.filter_event', event: event.event) %>
+            <span aria-hidden="true">·</span>
+            <%= link_to pf_audit_actor_name(event), pf_audit_log_path(actor_type: event.actor_type, actor_id: event.actor_id),
+                        title: t('permission_forge.audit_log.filter_actor') %>
+            <span aria-hidden="true">·</span>
+            <span><%= pf_audit_source_label(event.source) %></span>
+            <% if event.reason.present? %>
+              <span aria-hidden="true">·</span>
+              <span class="pf-audit-event__reason"><%= t('permission_forge.audit_log.reason_inline', reason: event.reason) %></span>
+            <% end %>
+          </div>
+        </div>
+        <%= link_to pf_audit_event_path(event), class: 'pf-btn pf-btn--xs pf-audit-event__open' do %>
+          <%= t('permission_forge.audit_log.details') %> <span aria-hidden="true">→</span>
+        <% end %>
+      </li>
+    <% end %>
+  </ol>
+<% end %>

data/app/views/permission_forge/shared/_audit_footer.html.erb

@@ -0,0 +1,16 @@
+<footer class="pf-audit-footer">
+  <% if PermissionForge.configuration.audit_trail_enabled %>
+    <% last_event = pf_audit_last_change(record) %>
+    <%= prefix %>
+    <%= t('.created', created_by: pf_person_name(record.try(:created_by)), created_at: pf_date(record.created_at)) %>
+    ·
+    <% if last_event %>
+      <%= t('.edited', updated_by: pf_audit_actor_name(last_event), updated_at: pf_relative(last_event.occurred_at)) %>
+      · <%= link_to t('.history'), pf_audit_log_path(record_type: last_event.record_type, record_id: last_event.record_id) %>
+    <% else %>
+      <%= t('.edited', updated_by: pf_person_name(record.try(:updated_by)), updated_at: pf_relative(record.updated_at)) %>
+    <% end %>
+  <% else %>
+    <%= t('.disabled') %> <%= pf_setting_link('audit_trail_enabled') %>
+  <% end %>
+</footer>

data/app/views/permission_forge/shared/_audit_off_note.html.erb

@@ -0,0 +1,15 @@
+<%# Locals: problem (Admin::AuditLog.recording_problem: :off, :failing or :missing_table). %>
+<div class="pf-banner pf-banner--warn" role="note">
+  <span class="pf-banner__glyph" aria-hidden="true">⚠</span>
+  <div class="pf-banner__body">
+    <span class="pf-banner__title"><%= t('permission_forge.audit_log.off.title') %></span>
+    <% if problem == :off %>
+      <span><%= t('permission_forge.audit_log.off.disabled') %></span>
+    <% elsif problem == :failing %>
+      <span><%= t('permission_forge.audit_log.off.failing') %></span>
+    <% else %>
+      <span><%= t('permission_forge.audit_log.off.missing_table') %></span>
+    <% end %>
+  </div>
+  <%= link_to t('permission_forge.ui.open_setting'), pf_setting_path('audit_events'), class: 'pf-btn pf-btn--xs' %>
+</div>

data/app/views/permission_forge/shared/_audit_pagination.html.erb

@@ -0,0 +1,19 @@
+<%# Page links for an AuditLog::Page. Locals: page, path (lambda: page number -> path). %>
+<% if page.total.positive? %>
+  <nav class="pf-card__footer pf-card__footer--muted pf-pagination" aria-label="<%= t('permission_forge.audit_log.pages_label') %>">
+    <span><%= t('permission_forge.audit_log.showing', from: page.first_index, to: page.last_index, count: page.total) %></span>
+    <% if page.pages > 1 %>
+      <span class="pf-actions">
+        <% if page.previous? %>
+          <%= link_to t('permission_forge.audit_log.first_page'), path.call(1), class: 'pf-btn pf-btn--xs' %>
+          <%= link_to t('permission_forge.ui.previous'), path.call(page.number - 1), class: 'pf-btn pf-btn--xs', rel: 'prev' %>
+        <% end %>
+        <span class="pf-fs-13"><%= t('permission_forge.audit_log.page_of', page: page.number, pages: page.pages) %></span>
+        <% if page.next? %>
+          <%= link_to t('permission_forge.ui.next'), path.call(page.number + 1), class: 'pf-btn pf-btn--xs', rel: 'next' %>
+          <%= link_to t('permission_forge.audit_log.last_page'), path.call(page.pages), class: 'pf-btn pf-btn--xs' %>
+        <% end %>
+      </span>
+    <% end %>
+  </nav>
+<% end %>

data/app/views/permission_forge/shared/_audit_refused_note.html.erb

@@ -0,0 +1,7 @@
+<div class="pf-banner pf-banner--block" role="alert">
+  <span class="pf-banner__glyph" aria-hidden="true">⊘</span>
+  <div class="pf-banner__body">
+    <span class="pf-banner__title"><%= t('permission_forge.audit_log.refused.title') %></span>
+    <span><%= t('permission_forge.audit_log.refused.body') %></span>
+  </div>
+</div>

data/app/views/permission_forge/shared/_audit_timeline.html.erb

@@ -0,0 +1,29 @@
+<%# A record's or a person's timeline on its audit tab.
+    Locals: title, description, page, lookups, path (page number -> path), links ([[label, path], ...]),
+    views_path (the same timeline with the views of the log; nil when they are shown). %>
+<section class="pf-card" aria-labelledby="pf-timeline-title">
+  <div class="pf-card__header">
+    <div class="pf-stack pf-stack--tight pf-grow">
+      <h2 class="pf-h2" id="pf-timeline-title"><%= title %></h2>
+      <span class="pf-card__desc"><%= description %></span>
+    </div>
+    <div class="pf-actions">
+      <% links.each do |label, href| %>
+        <%= link_to label, href, class: 'pf-btn pf-btn--sm' %>
+      <% end %>
+    </div>
+  </div>
+  <% if (problem = PermissionForge::Admin::AuditLog.recording_problem) %>
+    <div class="pf-card__body">
+      <%= render 'permission_forge/shared/audit_off_note', problem: problem %>
+    </div>
+  <% end %>
+  <% if local_assigns[:views_path] %>
+    <p class="pf-card__row pf-fs-13 pf-text-2 pf-audit-views-note">
+      <%= t('permission_forge.audit_events.index.views_hidden') %>
+      <%= link_to t('permission_forge.audit_events.index.views_show'), views_path %>
+    </p>
+  <% end %>
+  <%= render 'permission_forge/shared/audit_events', events: page.events, lookups: lookups %>
+  <%= render 'permission_forge/shared/audit_pagination', page: page, path: path %>
+</section>

data/app/views/permission_forge/shared/_crud_cell.html.erb

@@ -0,0 +1,18 @@
+<%# CRUD toggle cell: a checkbox styled as a cell (hidden "0" so unchecking is submitted).
+    Locals: name, flag, checked, muting, locked, aria, requires (opt), size (opt), form (opt) %>
+<% form_attr = local_assigns[:form] ? { form: form } : {} %>
+<% requires = local_assigns[:requires] %>
+<label class="pf-cell<%= ' pf-cell--muting' if muting %><%= ' pf-cell--lg' if local_assigns[:size] == :lg %>"
+       title="<%= t('.needs_read') if requires && !muting %>">
+  <%= tag.input(type: 'hidden', name: name, value: '0', **form_attr) %>
+  <%= tag.input(type: 'checkbox', name: name, value: '1', checked: checked, disabled: locked,
+                'aria-label': aria, data: { pf_flag: flag, pf_requires: (muting ? nil : requires), pf_locked: (locked || nil) }, **form_attr) %>
+  <% if muting %>
+    <span class="pf-cell__on"><span class="pf-cell__glyph" aria-hidden="true">⊘</span><%= t('.muted') %></span>
+    <span class="pf-cell__off"><span class="pf-cell__glyph" aria-hidden="true">–</span><%= t('.unchanged') %></span>
+  <% else %>
+    <span class="pf-cell__on"><span class="pf-cell__glyph" aria-hidden="true">✓</span><%= t('.allowed') %></span>
+    <span class="pf-cell__off"><span class="pf-cell__glyph" aria-hidden="true">–</span><%= t('.no') %></span>
+    <span class="pf-cell__needs"><span class="pf-cell__glyph" aria-hidden="true">–</span><%= t('.needs_read_short') %></span>
+  <% end %>
+</label>

data/app/views/permission_forge/shared/_dialog_frame.html.erb

@@ -0,0 +1,11 @@
+<%# Confirmation dialog: a standalone page without JS, a <dialog> with JS. %>
+<% danger = local_assigns.fetch(:danger, false) %>
+<% unless pf_fragment? %>
+  <% if local_assigns[:breadcrumb] %><%= breadcrumb %><% end %>
+<% end %>
+<div class="pf-confirm<%= ' pf-confirm--danger' if danger %><%= ' pf-card pf-modal-page' unless pf_fragment? %>"
+     data-pf-role="<%= local_assigns.fetch(:role, 'alertdialog') %>" <%= pf_attrs_when(local_assigns[:wide], data: { pf_size: 'wide' }) %>>
+  <% if local_assigns[:eyebrow] %><span class="pf-badge pf-badge--block pf-badge--square"><%= eyebrow %></span><% end %>
+  <%= content_tag(pf_fragment? ? :h2 : :h1, title, class: 'pf-confirm__title', data: { pf_title: true }) %>
+  <%= body %>
+</div>

data/app/views/permission_forge/shared/_expiry_picker.html.erb

@@ -0,0 +1,27 @@
+<%# Expiry presets as radio cards. Locals: selected, custom_date, error, name (default 'expiry'). %>
+<% name = local_assigns.fetch(:name, 'expiry') %>
+<% tomorrow = (Time.zone.today + 1).iso8601 %>
+<div class="pf-expiry pf-stack">
+  <div class="pf-choices pf-choices--expiry" role="radiogroup" aria-label="<%= t('.label') %>">
+    <% PermissionForge::Admin::ExpiryPresets::KEYS.each do |key| %>
+      <label class="pf-choice">
+        <input type="radio" name="<%= name %>" value="<%= key %>" <%= 'checked' if selected == key %>>
+        <span class="pf-choice__box">
+          <span class="pf-choice__title"><%= t(".presets.#{key}") %></span>
+          <span class="pf-choice__sub">
+            <% if key == 'custom' %><%= t('.pick_date') %>
+            <% elsif key == 'never' %><%= t('.default') %>
+            <% else %><%= pf_expiry_preset_date(key) %>
+            <% end %>
+          </span>
+        </span>
+      </label>
+    <% end %>
+  </div>
+  <div class="pf-custom-date pf-field">
+    <label class="pf-label" for="pf-custom-date"><%= t('.custom_label') %></label>
+    <input id="pf-custom-date" class="pf-input pf-input--auto" type="date" name="custom_date" min="<%= tomorrow %>" value="<%= custom_date %>"
+           <%= pf_attrs_when(error, aria: { invalid: true }) %>>
+  </div>
+  <% if error %><p class="pf-error" role="alert"><%= error %></p><% end %>
+</div>

data/app/views/permission_forge/shared/_head_extra.html.erb

@@ -0,0 +1,3 @@
+<%# Intentionally empty. Host apps can override this partial (same path in
+    their app/views) to add <link rel="stylesheet"> tags that re-theme the
+    admin by overriding the --pf-* custom properties on .pf-root. %>

data/app/views/permission_forge/shared/_help_banner.html.erb

@@ -0,0 +1,10 @@
+<div class="pf-banner pf-banner--help" role="note">
+  <div class="pf-banner__body">
+    <span><strong><%= term %>:</strong> <%= text %></span>
+  </div>
+  <%= form_with url: permission_forge.preferences_path, method: :patch, class: 'pf-inline-form' do %>
+    <input type="hidden" name="dismiss_help" value="<%= key %>">
+    <input type="hidden" name="return_to" value="<%= request.fullpath %>">
+    <button type="submit" class="pf-btn pf-btn--xs"><%= t('.got_it') %></button>
+  <% end %>
+</div>

data/app/views/permission_forge/shared/_level_control.html.erb

@@ -0,0 +1,18 @@
+<%# 4-level field control (radio group styled as a segmented control).
+    Locals: name, checked (level or nil), muting, aria, locked, edit_disabled, form (opt), large (opt), id_prefix %>
+<% form_attr = local_assigns[:form] ? { form: form } : {} %>
+<% levels = PermissionForge::Admin::FieldLevel.levels_for(muting: muting) %>
+<div class="pf-levels<%= ' pf-levels--lg' if local_assigns[:large] %>" role="radiogroup" aria-label="<%= aria %>">
+  <% levels.each do |level| %>
+    <% id = "#{id_prefix}-#{level}" %>
+    <% disabled = locked || (level == 'edit' && edit_disabled) %>
+    <% title = if locked then t('permission_forge.ui.locked.title')
+               elsif level == 'edit' && edit_disabled then t('.needs_edit', resource: local_assigns[:resource_label])
+               end %>
+    <span class="pf-level pf-level--<%= level %>">
+      <%= tag.input(type: 'radio', id: id, name: name, value: level, checked: checked == level, disabled: disabled,
+                    data: { pf_locked: (locked || nil) }, **form_attr) %>
+      <label class="pf-level__label" for="<%= id %>" title="<%= title %>"><%= pf_level_label(level) %></label>
+    </span>
+  <% end %>
+</div>

data/app/views/permission_forge/shared/_mode_banners.html.erb

@@ -0,0 +1,22 @@
+<%# Muting / Locked notices for set, resource and field pages. %>
+<% if muting %>
+  <div class="pf-banner pf-banner--muting" role="note">
+    <span class="pf-banner__glyph" aria-hidden="true">⊘</span>
+    <div class="pf-banner__body">
+      <span class="pf-banner__title"><%= t('.muting_title') %></span>
+      <span><%= t('.muting_body') %></span>
+    </div>
+  </div>
+<% end %>
+<% if pf_locked_record?(record) %>
+  <div class="pf-banner" role="note">
+    <span class="pf-banner__glyph" aria-hidden="true"><%= pf_lock_icon %></span>
+    <div class="pf-banner__body">
+      <span class="pf-banner__title"><%= t('permission_forge.ui.locked.title') %></span>
+      <span><%= t('.locked_body_html', flag: content_tag(:code, 'is_editable: false')) %></span>
+    </div>
+    <% if local_assigns[:duplicate_path] %>
+      <%= button_to t('.duplicate_to_edit'), duplicate_path, method: :post, class: 'pf-btn pf-btn--sm', form_class: 'pf-inline-form' %>
+    <% end %>
+  </div>
+<% end %>

data/app/views/permission_forge/shared/_nav.html.erb

@@ -0,0 +1,12 @@
+<% attention = pf_attention.total %>
+<% risks = pf_settings_catalog.risky_rows.size %>
+<div class="pf-nav">
+  <%= pf_nav_link t('permission_forge.nav.home'), permission_forge.root_path, exact: true,
+                  badge: attention, badge_label: t('permission_forge.nav.badge_aria', count: attention) %>
+  <%= pf_nav_link t('permission_forge.nav.people'), permission_forge.people_path %>
+  <%= pf_nav_link t('permission_forge.nav.permission_sets'), permission_forge.permission_sets_path %>
+  <%= pf_nav_link t('permission_forge.nav.groups'), permission_forge.groups_path %>
+  <%= pf_nav_link t('permission_forge.nav.audit_log'), permission_forge.audit_events_path %>
+  <%= pf_nav_link t('permission_forge.nav.settings'), permission_forge.settings_path,
+                  badge: risks, badge_label: t('permission_forge.nav.badge_aria', count: risks) %>
+</div>

data/app/views/permission_forge/shared/_preferences.html.erb

@@ -0,0 +1,24 @@
+<% locales = pf_available_locales %>
+<% if locales.size > 1 %>
+  <div class="pf-stack pf-stack--tight">
+    <span class="pf-sidebar__label" aria-hidden="true"><%= t('.language') %></span>
+    <div class="pf-segmented" role="group" aria-label="<%= t('.language') %>">
+      <% locales.each do |locale| %>
+        <%= link_to locale.to_s.upcase, pf_locale_switch_path(locale), class: 'pf-segmented__item',
+                    lang: locale, title: pf_locale_label(locale), 'aria-current': (I18n.locale.to_s == locale.to_s).to_s %>
+      <% end %>
+    </div>
+  </div>
+<% end %>
+<%= form_with url: permission_forge.preferences_path, method: :patch, class: 'pf-stack pf-stack--tight' do %>
+  <span class="pf-sidebar__label" aria-hidden="true"><%= t('.theme') %></span>
+  <input type="hidden" name="return_to" value="<%= request.fullpath %>">
+  <div class="pf-segmented" role="group" aria-label="<%= t('.theme') %>">
+    <% %w[auto light dark].each do |theme| %>
+      <button type="submit" name="theme" value="<%= theme %>" class="pf-segmented__item" aria-current="<%= (pf_theme == theme).to_s %>"><%= t(".themes.#{theme}") %></button>
+    <% end %>
+  </div>
+<% end %>
+<% if pf_current_admin %>
+  <span class="pf-sidebar__label"><%= t('.signed_in_as', name: pf_person_name(pf_current_admin)) %></span>
+<% end %>

data/app/views/permission_forge/shared/_reason_field.html.erb

@@ -0,0 +1,20 @@
+<%# Optional reason for a change, kept on its audit events (and on an
+    assignment). Collapsed; works without JS. Locals (all optional):
+    id — unique input id on the page; compact — a small toggle for a row's
+    inline form; form — the id of the form the input belongs to when it sits
+    outside it; value — the reason typed before a re-render (opens the toggle). %>
+<% input_id = local_assigns[:id] || 'pf-reason' %>
+<% compact = local_assigns[:compact] %>
+<% value = local_assigns[:value].is_a?(String) ? local_assigns[:value] : nil %>
+<details class="pf-reason<%= ' pf-reason--compact' if compact %>"<%= ' open' if value.present? %>>
+  <summary class="pf-reason__summary">
+    <span class="pf-disclosure" aria-hidden="true">›</span>
+    <%= compact ? t('permission_forge.shared.reason_field.summary_short') : t('permission_forge.shared.reason_field.summary') %>
+  </summary>
+  <div class="pf-reason__body">
+    <label class="<%= compact ? 'pf-sr-only' : 'pf-label' %>" for="<%= input_id %>"><%= t('permission_forge.shared.reason_field.label') %></label>
+    <input id="<%= input_id %>" class="pf-input pf-input--sm" type="text" name="reason" maxlength="255" autocomplete="off" value="<%= value %>"
+           placeholder="<%= t('permission_forge.shared.reason_field.placeholder') %>"<%= tag.attributes(form: local_assigns[:form]) if local_assigns[:form] %>>
+    <% unless compact %><span class="pf-hint"><%= t('permission_forge.shared.reason_field.hint') %></span><% end %>
+  </div>
+</details>

data/app/views/permission_forge/shared/_savebar.html.erb

@@ -0,0 +1,13 @@
+<%# Unsaved-changes bar: the submit area of a batched-edit form (form="id"). %>
+<div id="<%= id %>" class="pf-savebar" role="region" aria-label="<%= t('.label') %>" data-pf-dirty="false">
+  <div class="pf-savebar__text">
+    <span class="pf-savebar__count pf-savebar__count--dirty" data-pf-dirty-count
+          data-pf-one="<%= t('.count.one', count: '%{count}') %>" data-pf-other="<%= t('.count.other', count: '%{count}') %>"></span>
+    <span class="pf-savebar__count pf-savebar__count--clean"><%= t('.clean') %></span>
+    <span class="pf-savebar__note"><%= people.to_i.positive? ? t('.note', people: pf_people_text(people)) : t('.note_nobody') %></span>
+  </div>
+  <div class="pf-actions">
+    <button type="reset" form="<%= form %>" class="pf-btn pf-btn--sm pf-btn--on-dark" hidden data-pf-js-show><%= t('.discard') %></button>
+    <button type="submit" form="<%= form %>" class="pf-btn pf-btn--sm pf-btn--inverse"><%= t('.review') %></button>
+  </div>
+</div>