From c8959e7d472036fc72374f367411a4e44ca96198 Mon Sep 17 00:00:00 2001
From: Neon <neon@saahild.com>
Date: Mon, 13 Jul 2026 21:38:28 -0400
Subject: [PATCH 01/12] update: admin inspector + admin block helper  + hammer
 + flippered

Signed-off-by: Neon <neon@saahild.com>
---
 app/assets/stylesheets/application.scss       |  2 ++
 .../stylesheets/components/_inspector.scss    | 18 +++++++++++++++
 .../components/_username_link.scss            | 10 +++++++++
 app/assets/stylesheets/utils.scss             | 10 +++++++--
 app/components/posts/card_component.html.erb  |  8 +++----
 app/helpers/application_helper.rb             | 13 +++++++----
 app/views/comments/_comment.html.erb          |  2 +-
 app/views/daily_rolls/leaderboard.html.erb    |  4 ++--
 app/views/leaderboard/_row.html.erb           |  3 +--
 app/views/notifications/inbox/_actor.html.erb |  2 +-
 app/views/projects/_ship_card.html.erb        |  6 ++---
 .../projects/_ship_decision_card.html.erb     |  6 ++---
 app/views/projects/show.html.erb              |  6 +++--
 app/views/shared/_inspector.html.erb          | 22 +++++++++----------
 app/views/shared/_username_link.html.erb      |  9 ++++++++
 app/views/votes/_project_card.html.erb        |  3 ++-
 config/initializers/flipper.rb                |  1 +
 17 files changed, 86 insertions(+), 39 deletions(-)
 create mode 100644 app/assets/stylesheets/components/_inspector.scss
 create mode 100644 app/assets/stylesheets/components/_username_link.scss
 create mode 100644 app/views/shared/_username_link.html.erb

diff --git a/app/assets/stylesheets/application.scss b/app/assets/stylesheets/application.scss
index d43ed8bec..3542f535d 100644
--- a/app/assets/stylesheets/application.scss
+++ b/app/assets/stylesheets/application.scss
@@ -29,6 +29,8 @@
 @use "components/tooltip";
 @use "components/like_button";
 @use "components/welcome_tour";
+@use "components/inspector";
+@use "components/username_link";
 @use "components/markdown_content";
 @use "components/guide_content";
 @use "components/guide_code";
diff --git a/app/assets/stylesheets/components/_inspector.scss b/app/assets/stylesheets/components/_inspector.scss
new file mode 100644
index 000000000..42ab4281e
--- /dev/null
+++ b/app/assets/stylesheets/components/_inspector.scss
@@ -0,0 +1,18 @@
+.inspector {
+  display: inline-block;
+  overflow-x: auto;
+  max-width: 1000px;
+
+  &__summary {
+    cursor: pointer;
+    font-family: var(--font-family-text);
+    font-weight: 600;
+  }
+
+  &__body {
+    margin: 0;
+    padding: 8px;
+    font-size: 0.75rem;
+    color: var(--color-space-text);
+  }
+}
diff --git a/app/assets/stylesheets/components/_username_link.scss b/app/assets/stylesheets/components/_username_link.scss
new file mode 100644
index 000000000..5c8e7ba82
--- /dev/null
+++ b/app/assets/stylesheets/components/_username_link.scss
@@ -0,0 +1,10 @@
+.username-link__admin {
+  margin-left: var(--space-xxxs);
+  font-size: 0.85em;
+  text-decoration: none;
+  opacity: 0.85;
+
+  &:hover {
+    opacity: 1;
+  }
+}
diff --git a/app/assets/stylesheets/utils.scss b/app/assets/stylesheets/utils.scss
index 0026723ff..b1e6ae146 100644
--- a/app/assets/stylesheets/utils.scss
+++ b/app/assets/stylesheets/utils.scss
@@ -1,5 +1,5 @@
 :root {
-  --color-admin: #ff9100;
+  --color-admin: var(--color-brand-orange);
   --color-dev: #52d831;
 }
 
@@ -24,7 +24,6 @@
 }
 
 .admin.tools-do {
-  background-color: color-mix(in srgb, var(--color-admin) 20%, transparent);
   border-color: var(--color-admin);
 }
 
@@ -32,3 +31,10 @@
   background-color: color-mix(in srgb, var(--color-dev) 20%, transparent);
   border-color: var(--color-dev);
 }
+
+.tools-do--inline {
+  display: inline-flex;
+  align-items: center;
+  padding: 1px 4px;
+  border-radius: 4px;
+}
diff --git a/app/components/posts/card_component.html.erb b/app/components/posts/card_component.html.erb
index 305427767..04d46f93b 100644
--- a/app/components/posts/card_component.html.erb
+++ b/app/components/posts/card_component.html.erb
@@ -17,9 +17,8 @@
     <div class="feed-post-card__reposted-by">
       <%= inline_svg_tag "icons/repost.svg", class: "feed-post-card__reposted-by-icon" %>
       <span>Reposted by</span>
-      <%= link_to "@#{post.user.display_name.presence || "stardancer"}",
-            profile_path(post.user.display_name),
-            class: "feed-post-card__reposted-by-link" %><%= render StreakBadgeComponent.new(user: post.user) %><%= " ⚡" if post.user.admin? %>
+      <%= render "shared/username_link", user: post.user, link_class: "feed-post-card__reposted-by-link",
+            text: "@#{post.user.display_name.presence || "stardancer"}" %>
     </div>
   <% end %>
 
@@ -49,8 +48,7 @@
     <div class="feed-post-card__meta">
       <p class="feed-post-card__byline">
         <% if author.present? %>
-          <%= link_to "@#{author_name}", profile_path(author.display_name), class: "feed-post-card__author" %>
-          <%= render StreakBadgeComponent.new(user: author) %><%= " ⚡" if author.admin? %>
+          <%= render "shared/username_link", user: author, link_class: "feed-post-card__author", text: "@#{author_name}" %>
         <% else %>
           <span class="feed-post-card__author">@stardancer</span>
         <% end %>
diff --git a/app/helpers/application_helper.rb b/app/helpers/application_helper.rb
index e8c75b7d7..8a0efcb97 100644
--- a/app/helpers/application_helper.rb
+++ b/app/helpers/application_helper.rb
@@ -43,10 +43,15 @@ def onboarding_count_up(n)
       data: { controller: "count-up", count_up_target_value: n })
   end
 
-  def admin_tool(&block)
-    if current_user&.admin?
-      content_tag(:div, class: "admin tools-do", &block)
-    end
+  # compact: true renders an inline <span> with no dashed box, for markers
+  # that sit inside a line of text (e.g. a username byline) rather than
+  # wrapping a standalone block of debug content.
+  def admin_tool(compact: false, &block)
+    return unless current_user&.admin? && Flipper.enabled?(:shigimi_eyes, current_user)
+
+    classes = [ "admin", "tools-do" ]
+    classes << "tools-do--inline" if compact
+    content_tag(compact ? :span : :div, class: classes.join(" "), &block)
   end
 
   def sign(num)
diff --git a/app/views/comments/_comment.html.erb b/app/views/comments/_comment.html.erb
index 64674c4c4..065b5b371 100644
--- a/app/views/comments/_comment.html.erb
+++ b/app/views/comments/_comment.html.erb
@@ -4,7 +4,7 @@
       <%= image_tag comment.user.avatar, alt: "", class: "devlog-comment__avatar" %>
     <% end %>
     <div class="devlog-comment__meta">
-      <%= link_to "@#{comment.user.display_name}", profile_path(comment.user.display_name), class: "devlog-comment__author" %><%= render StreakBadgeComponent.new(user: comment.user) %><%= " ⚡" if comment.user.admin? %>
+      <%= render "shared/username_link", user: comment.user, link_class: "devlog-comment__author" %>
       <time class="devlog-comment__time" datetime="<%= comment.created_at.iso8601 %>">
         · <%= time_ago_in_words(comment.created_at) %> ago
       </time>
diff --git a/app/views/daily_rolls/leaderboard.html.erb b/app/views/daily_rolls/leaderboard.html.erb
index 1171c8889..f9badab66 100644
--- a/app/views/daily_rolls/leaderboard.html.erb
+++ b/app/views/daily_rolls/leaderboard.html.erb
@@ -54,7 +54,7 @@
             <div class="rng-board__pedestal rng-board__pedestal--place-<%= index + 1 %> <%= "rng-board__pedestal--viewer" if current_user&.id == roll.user_id %>">
               <span class="rng-board__medal"><%= index.zero? ? "★" : "##{index + 1}" %></span>
               <%= image_tag roll.user.avatar, alt: "", class: "rng-board__pedestal-avatar" %>
-              <%= link_to roll.user.display_name, profile_path(roll.user.display_name), class: "rng-board__pedestal-name" %>
+              <%= render "shared/username_link", user: roll.user, link_class: "rng-board__pedestal-name", text: roll.user.display_name, badge: false %>
               <% if current_user&.id == roll.user_id %><span class="rng-board__you-tag">you</span><% end %>
               <span class="rng-board__pedestal-value"><%= formatted_roll_value(roll.total) %></span>
             </div>
@@ -99,7 +99,7 @@
       <% if @record %>
         <p class="rng-board__alltime">
           All-time best:
-          <%= link_to @record.user.display_name, profile_path(@record.user.display_name), class: "rng-board__alltime-name" %>
+          <%= render "shared/username_link", user: @record.user, link_class: "rng-board__alltime-name", text: @record.user.display_name, badge: false %>
           <span class="rng-board__alltime-value"><%= formatted_roll_value(@record.total) %></span>
           on <%= link_to rng_date_label(@record.rolled_on, today: @today), rng_date_path(@record.rolled_on, today: @today), class: "rng-board__alltime-date" %>
         </p>
diff --git a/app/views/leaderboard/_row.html.erb b/app/views/leaderboard/_row.html.erb
index cc888e93c..8af41b95c 100644
--- a/app/views/leaderboard/_row.html.erb
+++ b/app/views/leaderboard/_row.html.erb
@@ -10,8 +10,7 @@
 
   <div class="leaderboard-row__identity">
     <p class="leaderboard-row__name">
-      <%= link_to user.display_name, profile_path(user.display_name),
-                  class: "leaderboard-row__name-link" %><%= render StreakBadgeComponent.new(user: user) %><%= " ⚡" if user.admin? %>
+      <%= render "shared/username_link", user: user, link_class: "leaderboard-row__name-link", text: user.display_name %>
       <% if is_current_user %>
         <span class="leaderboard-row__you-badge">YOU</span>
       <% end %>
diff --git a/app/views/notifications/inbox/_actor.html.erb b/app/views/notifications/inbox/_actor.html.erb
index 9e3edb516..004cb24c3 100644
--- a/app/views/notifications/inbox/_actor.html.erb
+++ b/app/views/notifications/inbox/_actor.html.erb
@@ -1,7 +1,7 @@
 <%# The notification's actor as a profile link, or a fallback label when the
     actor is missing (e.g. a deleted account). Pass `fallback:` to override. %>
 <% if notification.actor %>
-  <%= link_to "@#{notification.actor.display_name}", user_path(notification.actor), class: "notifications-item__actor" %><%= render StreakBadgeComponent.new(user: notification.actor) %><%= " ⚡" if notification.actor.admin? %>
+  <%= render "shared/username_link", user: notification.actor, link_class: "notifications-item__actor" %>
 <% else %>
   <span class="notifications-item__actor"><%= local_assigns.fetch(:fallback, "Someone") %></span>
 <% end %>
diff --git a/app/views/projects/_ship_card.html.erb b/app/views/projects/_ship_card.html.erb
index a5a649da6..51405bfcd 100644
--- a/app/views/projects/_ship_card.html.erb
+++ b/app/views/projects/_ship_card.html.erb
@@ -89,10 +89,8 @@
     <div class="feed-post-card__meta">
       <p class="feed-post-card__byline">
         <% if author %>
-          <%= link_to "@#{author.display_name}",
-                      profile_path(author.display_name),
-                      class: "feed-post-card__author",
-                      data: { turbo_frame: "_top", turbo_prefetch: "true" } %><%= render StreakBadgeComponent.new(user: author) %><%= " ⚡" if author.admin? %>
+          <%= render "shared/username_link", user: author, link_class: "feed-post-card__author",
+                      data: { turbo_frame: "_top", turbo_prefetch: "true" } %>
         <% end %>
         <span class="feed-post-card__context">on</span>
         <%= link_to project.title, project_path(project), class: "feed-post-card__project", data: { turbo_frame: "_top" } %>
diff --git a/app/views/projects/_ship_decision_card.html.erb b/app/views/projects/_ship_decision_card.html.erb
index 6f2957212..81ead06b0 100644
--- a/app/views/projects/_ship_decision_card.html.erb
+++ b/app/views/projects/_ship_decision_card.html.erb
@@ -28,10 +28,8 @@
     <div class="feed-post-card__meta">
       <p class="feed-post-card__byline">
         <% if reviewer_name %>
-          <%= link_to "@#{reviewer_name}",
-                      profile_path(reviewer_name),
-                      class: "feed-post-card__author",
-                      data: { turbo_frame: "_top" } %>
+          <%= render "shared/username_link", user: reviewer, link_class: "feed-post-card__author",
+                      data: { turbo_frame: "_top" }, badge: false %>
         <% else %>
           <span class="feed-post-card__author">Shipwrights</span>
         <% end %>
diff --git a/app/views/projects/show.html.erb b/app/views/projects/show.html.erb
index cdc737262..d1b6c5a87 100644
--- a/app/views/projects/show.html.erb
+++ b/app/views/projects/show.html.erb
@@ -103,7 +103,8 @@
                   <p class="project-show__authors">
                     By
                     <% members.each_with_index do |m, i| %>
-                      <%= " and " if i > 0 && i == members.length - 1 %><%= link_to "@#{m.display_name}", profile_path(m.display_name), class: "project-show__author", data: { turbo_frame: "_top", turbo_prefetch: "true" } %><%= render StreakBadgeComponent.new(user: m) %><%= " ⚡" if m.admin? %><%= "," if i < members.length - 2 && members.length > 2 %>
+                      <%= " and " if i > 0 && i == members.length - 1 %><%= render "shared/username_link", user: m, link_class: "project-show__author",
+                          data: { turbo_frame: "_top", turbo_prefetch: "true" } %><%= "," if i < members.length - 2 && members.length > 2 %>
                     <% end %>
                   </p>
                 </div>
@@ -407,7 +408,8 @@
                   <p class="project-show__authors">
                     By
                     <% members.each_with_index do |m, i| %>
-                      <%= " and " if i > 0 && i == members.length - 1 %><%= link_to "@#{m.display_name}", profile_path(m.display_name), class: "project-show__author", data: { turbo_frame: "_top", turbo_prefetch: "true" } %><%= render StreakBadgeComponent.new(user: m) %><%= " ⚡" if m.admin? %><%= "," if i < members.length - 2 && members.length > 2 %>
+                      <%= " and " if i > 0 && i == members.length - 1 %><%= render "shared/username_link", user: m, link_class: "project-show__author",
+                          data: { turbo_frame: "_top", turbo_prefetch: "true" } %><%= "," if i < members.length - 2 && members.length > 2 %>
                     <% end %>
                   </p>
                 </div>
diff --git a/app/views/shared/_inspector.html.erb b/app/views/shared/_inspector.html.erb
index 82fcf6994..6f00a46e6 100644
--- a/app/views/shared/_inspector.html.erb
+++ b/app/views/shared/_inspector.html.erb
@@ -1,12 +1,12 @@
-<% if current_user&.admin? %>
-<details style="all: revert; border: 1px solid deeppink; display: inline-block; overflow-x: scroll; max-width: 1000px">
-  <summary style="all: revert; font-family: 'Comic Sans MS';">
-    <% if record.is_a?(ActiveRecord::Base) %>
-      <%= record.model_name.human %> record #<%= record.id %>
-    <% else %>
-      inspect <%= defined?(thing) ? thing : 'object' %>
-    <% end %>
-  </summary>
-  <pre style="all: revert; margin: 0; padding: 8px; font-size: 12px;"><%== awesome_inspect(record) %></pre>
-</details>
+<%= admin_tool do %>
+  <details class="inspector">
+    <summary class="inspector__summary">
+      <% if record.is_a?(ActiveRecord::Base) %>
+        <%= record.model_name.human %> record #<%= record.id %>
+      <% else %>
+        inspect <%= defined?(thing) ? thing : 'object' %>
+      <% end %>
+    </summary>
+    <pre class="inspector__body"><%== awesome_inspect(record) %></pre>
+  </details>
 <% end %>
diff --git a/app/views/shared/_username_link.html.erb b/app/views/shared/_username_link.html.erb
new file mode 100644
index 000000000..ffa404385
--- /dev/null
+++ b/app/views/shared/_username_link.html.erb
@@ -0,0 +1,9 @@
+<%# locals: user:, link_class:, text: nil, data: nil, badge: true
+    Shared "@handle" profile link + streak badge + admin lightning marker,
+    used everywhere a username shows up in a byline (comments, feed cards,
+    leaderboards, notifications). Pass badge: false to omit the streak
+    badge / admin marker (e.g. for reviewer/system bylines). %>
+<%= link_to local_assigns[:text] || "@#{user.display_name}",
+            profile_path(user.display_name),
+            class: link_class,
+            data: local_assigns[:data] %><% if local_assigns.fetch(:badge, true) %><%= render StreakBadgeComponent.new(user: user) %><%= " ⚡" if user.admin? %><% end %><%= admin_tool(compact: true) do %><%= link_to "🔨", admin_user_path(user), class: "username-link__admin", "aria-label": "View #{user.display_name} in admin" %><% end %>
diff --git a/app/views/votes/_project_card.html.erb b/app/views/votes/_project_card.html.erb
index 4d3af836e..47f2f5315 100644
--- a/app/views/votes/_project_card.html.erb
+++ b/app/views/votes/_project_card.html.erb
@@ -37,7 +37,8 @@
             <p class="project-show__authors">
               By
               <% members.each_with_index do |m, i| %>
-                <%= " and " if i > 0 && i == members.length - 1 %><%= link_to "@#{m.display_name}", profile_path(m.display_name), class: "project-show__author", data: { turbo_frame: "_top", turbo_prefetch: "true" } %><%= render StreakBadgeComponent.new(user: m) %><%= " ⚡" if m.admin? %><%= "," if i < members.length - 2 && members.length > 2 %>
+                <%= " and " if i > 0 && i == members.length - 1 %><%= render "shared/username_link", user: m, link_class: "project-show__author",
+                    data: { turbo_frame: "_top", turbo_prefetch: "true" } %><%= "," if i < members.length - 2 && members.length > 2 %>
               <% end %>
             </p>
           </div>
diff --git a/config/initializers/flipper.rb b/config/initializers/flipper.rb
index 52257754a..825baf52d 100644
--- a/config/initializers/flipper.rb
+++ b/config/initializers/flipper.rb
@@ -45,6 +45,7 @@
         hardware_to_outpost
         disable_internal_sw_dash_reviews
         sharable_purchase
+        shigimi_eyes
       ].each { |flag| Flipper.add(flag) }
     end
   rescue StandardError => e

From 3506af6da9080823ded7444330ae87cfcbd518fa Mon Sep 17 00:00:00 2001
From: Neon <neon@saahild.com>
Date: Tue, 14 Jul 2026 21:34:01 -0400
Subject: [PATCH 02/12] update: hammer on navbar for logged in user + pinned cu
 on /admin/users

Signed-off-by: Neon <neon@saahild.com>
---
 app/assets/stylesheets/components/_sidebar.scss     | 13 +++++++++++++
 app/assets/stylesheets/pages/shop/_suggestions.scss |  5 +++--
 app/components/sidebar_component.html.erb           |  9 ++++++---
 app/controllers/admin/users_controller.rb           |  5 ++++-
 app/helpers/application_helper.rb                   |  3 ++-
 app/views/admin/users/index.html.erb                |  5 ++++-
 app/views/shop/suggestions/_card.html.erb           |  7 +++----
 7 files changed, 35 insertions(+), 12 deletions(-)

diff --git a/app/assets/stylesheets/components/_sidebar.scss b/app/assets/stylesheets/components/_sidebar.scss
index 52ff0ad30..a03bdaeb8 100644
--- a/app/assets/stylesheets/components/_sidebar.scss
+++ b/app/assets/stylesheets/components/_sidebar.scss
@@ -325,10 +325,23 @@ button.sidebar__nav-link {
   overflow: hidden;
 }
 
+.sidebar__user-handle-row {
+  align-items: center;
+  display: flex;
+  gap: var(--space-xxs);
+  min-width: 0;
+
+  .tools-do--inline {
+    flex-shrink: 0;
+  }
+}
+
 .sidebar__user-meta-handle {
+  flex-shrink: 1;
   font-weight: 700;
   font-size: var(--font-size-m);
   color: inherit;
+  min-width: 0;
   text-decoration: none;
   overflow: hidden;
   text-overflow: ellipsis;
diff --git a/app/assets/stylesheets/pages/shop/_suggestions.scss b/app/assets/stylesheets/pages/shop/_suggestions.scss
index 63556038d..eb2a05fe3 100644
--- a/app/assets/stylesheets/pages/shop/_suggestions.scss
+++ b/app/assets/stylesheets/pages/shop/_suggestions.scss
@@ -342,9 +342,10 @@
     }
   }
 
-  &__admin-strip {
+  // Border/color come from the shared .admin.tools-do box (admin_tool helper);
+  // this only adds the card-specific layout and corner radius.
+  &__admin-strip.admin.tools-do {
     background: rgba(255, 176, 122, 0.05);
-    border: 2px dashed rgba(255, 176, 122, 0.4);
     border-radius: 0 0 12px 12px;
     display: flex;
     flex-direction: column;
diff --git a/app/components/sidebar_component.html.erb b/app/components/sidebar_component.html.erb
index 059cd7aae..2cded50c1 100644
--- a/app/components/sidebar_component.html.erb
+++ b/app/components/sidebar_component.html.erb
@@ -68,9 +68,12 @@
             <%= helpers.stardust_icon(extra_class: "sidebar__user-balance-icon") %>
             <span class="sidebar__user-balance-amount"><%= number_with_delimiter(user.cached_balance) %></span>
           </div>
-          <%= link_to profile_path(user.display_name), class: "sidebar__user-meta-handle", data: { turbo: true } do %>
-            @<%= user.display_name %>
-          <% end %>
+          <div class="sidebar__user-handle-row">
+            <%= link_to profile_path(user.display_name), class: "sidebar__user-meta-handle", data: { turbo: true } do %>
+              @<%= user.display_name %>
+            <% end %>
+            <%= helpers.admin_tool(compact: true) do %><%= link_to "🔨", helpers.admin_user_path(user), class: "username-link__admin", "aria-label": "View #{user.display_name} in admin" %><% end %>
+          </div>
         </div>
 
         <div class="sidebar__user-actions">
diff --git a/app/controllers/admin/users_controller.rb b/app/controllers/admin/users_controller.rb
index 6d12f6f6e..3bc9ce5a0 100644
--- a/app/controllers/admin/users_controller.rb
+++ b/app/controllers/admin/users_controller.rb
@@ -9,7 +9,10 @@ def index
       users = users.where("email ILIKE ? OR display_name ILIKE ? OR slack_id ILIKE ?", q, q, q)
     end
 
-    @pagy, @users = pagy(:offset, users.order(:id))
+    # Pin the viewing admin's own row to the top of the (first page of the) list.
+    users = users.order(Arel.sql(User.sanitize_sql_array([ "(id = ?) DESC", current_user.id ]))).order(:id)
+
+    @pagy, @users = pagy(:offset, users)
   end
 
   def show
diff --git a/app/helpers/application_helper.rb b/app/helpers/application_helper.rb
index 8a0efcb97..d7bcbde89 100644
--- a/app/helpers/application_helper.rb
+++ b/app/helpers/application_helper.rb
@@ -46,11 +46,12 @@ def onboarding_count_up(n)
   # compact: true renders an inline <span> with no dashed box, for markers
   # that sit inside a line of text (e.g. a username byline) rather than
   # wrapping a standalone block of debug content.
-  def admin_tool(compact: false, &block)
+  def admin_tool(compact: false, extra_class: nil, &block)
     return unless current_user&.admin? && Flipper.enabled?(:shigimi_eyes, current_user)
 
     classes = [ "admin", "tools-do" ]
     classes << "tools-do--inline" if compact
+    classes << extra_class if extra_class.present?
     content_tag(compact ? :span : :div, class: classes.join(" "), &block)
   end
 
diff --git a/app/views/admin/users/index.html.erb b/app/views/admin/users/index.html.erb
index dfbe8e892..2826bf1e0 100644
--- a/app/views/admin/users/index.html.erb
+++ b/app/views/admin/users/index.html.erb
@@ -33,7 +33,10 @@
           <% @users.each do |user| %>
             <tr>
               <td class="space-table__muted"><%= user.id %></td>
-              <td><%= link_to user.display_name, admin_certification_reports_path(reporter_id: user.id) %></td>
+              <td>
+                <%= link_to user.display_name, admin_certification_reports_path(reporter_id: user.id) %>
+                <% if user == current_user %><span class="space-table__muted">(you)</span><% end %>
+              </td>
               <% if policy(user).view_email? %>
                 <td class="space-table__muted"><%= user.email %></td>
               <% end %>
diff --git a/app/views/shop/suggestions/_card.html.erb b/app/views/shop/suggestions/_card.html.erb
index 52915db3a..4a6145fba 100644
--- a/app/views/shop/suggestions/_card.html.erb
+++ b/app/views/shop/suggestions/_card.html.erb
@@ -1,4 +1,3 @@
-<% is_admin = current_user&.admin? %>
 <% decided_by ||= nil %>
 <% card_href = suggestion.accepted? && suggestion.shop_item_id ? shop_item_path(suggestion.shop_item_id) : nil %>
 <div class="suggestion-card<%= ' suggestion-card--linked' if card_href %>"
@@ -66,8 +65,8 @@
     <% end %>
   </div>
 
-  <% if is_admin && suggestion.pending? %>
-    <div class="suggestion-card__admin-strip">
+  <% if suggestion.pending? %>
+    <%= admin_tool(extra_class: "suggestion-card__admin-strip") do %>
       <div class="suggestion-card__admin-row">
         <%= button_to "Accept →",
                       accept_admin_shop_suggestion_path(suggestion),
@@ -92,6 +91,6 @@
                          class: "suggestion-card__reject-reason" %>
         <%= f.submit "Reject", class: "suggestion-card__reject-btn" %>
       <% end %>
-    </div>
+    <% end %>
   <% end %>
 </div>

From ab439d18eb9fb12291267d2a649afb0787b119ad Mon Sep 17 00:00:00 2001
From: Neon <neon@saahild.com>
Date: Wed, 15 Jul 2026 17:47:57 -0400
Subject: [PATCH 03/12] =?UTF-8?q?update(admin):=20=20=F0=9F=91=81=EF=B8=8F?=
 =?UTF-8?q?=20impersonation?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Neon <neon@saahild.com>
---
 app/assets/stylesheets/utils.scss         | 3 ++-
 app/components/sidebar_component.html.erb | 1 +
 app/helpers/application_helper.rb         | 7 ++++++-
 app/views/shared/_username_link.html.erb  | 2 +-
 4 files changed, 10 insertions(+), 3 deletions(-)

diff --git a/app/assets/stylesheets/utils.scss b/app/assets/stylesheets/utils.scss
index b1e6ae146..524e3285d 100644
--- a/app/assets/stylesheets/utils.scss
+++ b/app/assets/stylesheets/utils.scss
@@ -20,10 +20,11 @@
   border: 3px dashed;
   border-radius: 5px;
   display: inline-block;
-  padding: 4px;
+  padding: 6px;
 }
 
 .admin.tools-do {
+  background-color: color-mix(in srgb, var(--color-admin) 20%, transparent);
   border-color: var(--color-admin);
 }
 
diff --git a/app/components/sidebar_component.html.erb b/app/components/sidebar_component.html.erb
index 2cded50c1..33e163311 100644
--- a/app/components/sidebar_component.html.erb
+++ b/app/components/sidebar_component.html.erb
@@ -73,6 +73,7 @@
               @<%= user.display_name %>
             <% end %>
             <%= helpers.admin_tool(compact: true) do %><%= link_to "🔨", helpers.admin_user_path(user), class: "username-link__admin", "aria-label": "View #{user.display_name} in admin" %><% end %>
+            <%= helpers.admin_tool(compact: true) do %>#<%= user.id %><% end %>
           </div>
         </div>
 
diff --git a/app/helpers/application_helper.rb b/app/helpers/application_helper.rb
index d7bcbde89..24c4ee8db 100644
--- a/app/helpers/application_helper.rb
+++ b/app/helpers/application_helper.rb
@@ -46,8 +46,13 @@ def onboarding_count_up(n)
   # compact: true renders an inline <span> with no dashed box, for markers
   # that sit inside a line of text (e.g. a username byline) rather than
   # wrapping a standalone block of debug content.
+  #
+  # Uses real_user rather than current_user while impersonating, so the
+  # admin retains their own debug tooling instead of losing it to whatever
+  # role the impersonated account happens to have.
   def admin_tool(compact: false, extra_class: nil, &block)
-    return unless current_user&.admin? && Flipper.enabled?(:shigimi_eyes, current_user)
+    acting_user = impersonating? ? real_user : current_user
+    return unless acting_user&.admin? && Flipper.enabled?(:shigimi_eyes, acting_user)
 
     classes = [ "admin", "tools-do" ]
     classes << "tools-do--inline" if compact
diff --git a/app/views/shared/_username_link.html.erb b/app/views/shared/_username_link.html.erb
index ffa404385..0eabc95c0 100644
--- a/app/views/shared/_username_link.html.erb
+++ b/app/views/shared/_username_link.html.erb
@@ -6,4 +6,4 @@
 <%= link_to local_assigns[:text] || "@#{user.display_name}",
             profile_path(user.display_name),
             class: link_class,
-            data: local_assigns[:data] %><% if local_assigns.fetch(:badge, true) %><%= render StreakBadgeComponent.new(user: user) %><%= " ⚡" if user.admin? %><% end %><%= admin_tool(compact: true) do %><%= link_to "🔨", admin_user_path(user), class: "username-link__admin", "aria-label": "View #{user.display_name} in admin" %><% end %>
+            data: local_assigns[:data] %><% if local_assigns.fetch(:badge, true) %><%= render StreakBadgeComponent.new(user: user) %><%= " ⚡" if user.admin? %><% end %><%= admin_tool(compact: true) do %><%= link_to "🔨", admin_user_path(user), class: "username-link__admin", "aria-label": "View #{user.display_name} in admin" %><% end %><% if admin_policy(user).impersonate? %><%= admin_tool(compact: true) do %><%= link_to "👁️", admin_user_impersonation_path(user), class: "username-link__admin", data: { turbo_method: :post, turbo_confirm: "Are you sure you want to impersonate #{user.display_name}? You will see the site as they do." }, "aria-label": "Impersonate #{user.display_name}" %><% end %><% end %>

From 4b01f4ef64b51d0c299fa98e1b9cf28c5300856c Mon Sep 17 00:00:00 2001
From: Neon <neon@saahild.com>
Date: Wed, 15 Jul 2026 21:58:25 -0400
Subject: [PATCH 04/12] fix(comments): correct delete button authorization
 check

Signed-off-by: Neon <neon@saahild.com>
---
 app/views/comments/_comment.html.erb | 22 ++++++++++++++++------
 1 file changed, 16 insertions(+), 6 deletions(-)

diff --git a/app/views/comments/_comment.html.erb b/app/views/comments/_comment.html.erb
index 065b5b371..386c390bb 100644
--- a/app/views/comments/_comment.html.erb
+++ b/app/views/comments/_comment.html.erb
@@ -10,12 +10,22 @@
       </time>
     </div>
     <% if policy(comment).destroy? %>
-      <%= button_to devlog_comment_path(comment.commentable, comment),
-            method: :delete,
-            class: "devlog-comment__delete",
-            form: { onsubmit: "return confirm('Delete this comment?')" },
-            aria: { label: "Delete comment" } do %>
-        &times;
+      <% delete_button = capture do %>
+        <%= button_to devlog_comment_path(comment.commentable, comment),
+              method: :delete,
+              class: "devlog-comment__delete",
+              form: { onsubmit: "return confirm('Delete this comment?')" },
+              aria: { label: "Delete comment" } do %>
+          &times;
+        <% end %>
+      <% end %>
+
+      <% if comment.user == current_user %>
+        <%= delete_button %>
+      <% else %>
+        <%= admin_tool do %>
+          <%= delete_button %>
+        <% end %>
       <% end %>
     <% end %>
   </div>

From a689820261bf19031847e0c0e428271230d9d7cc Mon Sep 17 00:00:00 2001
From: Neon <neon@saahild.com>
Date: Wed, 15 Jul 2026 21:58:41 -0400
Subject: [PATCH 05/12] fix(username-link): break out of turbo frames on admin
 links

Signed-off-by: Neon <neon@saahild.com>
---
 app/views/shared/_username_link.html.erb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/views/shared/_username_link.html.erb b/app/views/shared/_username_link.html.erb
index 0eabc95c0..2937e928b 100644
--- a/app/views/shared/_username_link.html.erb
+++ b/app/views/shared/_username_link.html.erb
@@ -6,4 +6,4 @@
 <%= link_to local_assigns[:text] || "@#{user.display_name}",
             profile_path(user.display_name),
             class: link_class,
-            data: local_assigns[:data] %><% if local_assigns.fetch(:badge, true) %><%= render StreakBadgeComponent.new(user: user) %><%= " ⚡" if user.admin? %><% end %><%= admin_tool(compact: true) do %><%= link_to "🔨", admin_user_path(user), class: "username-link__admin", "aria-label": "View #{user.display_name} in admin" %><% end %><% if admin_policy(user).impersonate? %><%= admin_tool(compact: true) do %><%= link_to "👁️", admin_user_impersonation_path(user), class: "username-link__admin", data: { turbo_method: :post, turbo_confirm: "Are you sure you want to impersonate #{user.display_name}? You will see the site as they do." }, "aria-label": "Impersonate #{user.display_name}" %><% end %><% end %>
+            data: local_assigns[:data] %><% if local_assigns.fetch(:badge, true) %><%= render StreakBadgeComponent.new(user: user) %><%= " ⚡" if user.admin? %><% end %><%= admin_tool(compact: true) do %><%= link_to "🔨", admin_user_path(user), class: "username-link__admin", data: { turbo_frame: "_top" }, "aria-label": "View #{user.display_name} in admin" %><% end %><% if admin_policy(user).impersonate? %><%= admin_tool(compact: true) do %><%= link_to "👁️", admin_user_impersonation_path(user), class: "username-link__admin", data: { turbo_method: :post, turbo_frame: "_top", turbo_confirm: "Are you sure you want to impersonate #{user.display_name}? You will see the site as they do." }, "aria-label": "Impersonate #{user.display_name}" %><% end %><% end %>

From a2d5844a74ae6cdc0a70c314d539de9d5b746b1e Mon Sep 17 00:00:00 2001
From: Neon <neon@saahild.com>
Date: Wed, 15 Jul 2026 21:58:52 -0400
Subject: [PATCH 06/12] style(projects): mark admin-only super star controls
 with admin_tool

Signed-off-by: Neon <neon@saahild.com>
---
 app/views/projects/_fire_controls.html.erb | 34 +++++++++++++---------
 1 file changed, 20 insertions(+), 14 deletions(-)

diff --git a/app/views/projects/_fire_controls.html.erb b/app/views/projects/_fire_controls.html.erb
index f575a77f2..ed987a5f4 100644
--- a/app/views/projects/_fire_controls.html.erb
+++ b/app/views/projects/_fire_controls.html.erb
@@ -1,21 +1,25 @@
 <% if project.fire? %>
   <span class="project-show__badge project-show__badge--fire">⭐ Super Star Project</span>
   <% if current_user&.admin? %>
-    <%= button_to "Remove Super Star", project_magic_path(project),
-                  method: :delete,
-                  form_class: "project-show__pill-form",
-                  class: "project-show__pill project-show__pill--outline" %>
+    <%= admin_tool do %>
+      <%= button_to "Remove Super Star", project_magic_path(project),
+                    method: :delete,
+                    form_class: "project-show__pill-form",
+                    class: "project-show__pill project-show__pill--outline" %>
+    <% end %>
   <% end %>
 <% elsif project.fire_nomination_pending? && current_user&.can_nominate_super_star? %>
   <span class="project-show__badge project-show__badge--nominated">⭐ Nominated by <%= project.nominated_fire_by&.display_name %></span>
   <% if current_user.admin? %>
-    <%= button_to "Approve Super Star", project_magic_path(project),
-                  form_class: "project-show__pill-form",
-                  class: "project-show__pill project-show__pill--save" %>
-    <%= button_to "Reject", project_fire_nomination_path(project),
-                  method: :delete,
-                  form_class: "project-show__pill-form",
-                  class: "project-show__pill project-show__pill--outline" %>
+    <%= admin_tool do %>
+      <%= button_to "Approve Super Star", project_magic_path(project),
+                    form_class: "project-show__pill-form",
+                    class: "project-show__pill project-show__pill--save" %>
+      <%= button_to "Reject", project_fire_nomination_path(project),
+                    method: :delete,
+                    form_class: "project-show__pill-form",
+                    class: "project-show__pill project-show__pill--outline" %>
+    <% end %>
   <% else %>
     <%= button_to "Withdraw nomination", project_fire_nomination_path(project),
                   method: :delete,
@@ -23,9 +27,11 @@
                   class: "project-show__pill project-show__pill--outline" %>
   <% end %>
 <% elsif current_user&.admin? %>
-  <%= button_to "Mark as Super Star", project_magic_path(project),
-                form_class: "project-show__pill-form",
-                class: "project-show__pill project-show__pill--save" %>
+  <%= admin_tool do %>
+    <%= button_to "Mark as Super Star", project_magic_path(project),
+                  form_class: "project-show__pill-form",
+                  class: "project-show__pill project-show__pill--save" %>
+  <% end %>
 <% elsif current_user&.can_nominate_super_star? && !project.users.include?(current_user) %>
   <%= button_to "Nominate for Super Star", project_fire_nomination_path(project),
                 form_class: "project-show__pill-form",

From 39a5989616ed4afa48a8b6ffd31ec4074465a637 Mon Sep 17 00:00:00 2001
From: Neon <neon@saahild.com>
Date: Wed, 15 Jul 2026 21:59:11 -0400
Subject: [PATCH 07/12] feat(users): allow admins to edit other users' profiles

Signed-off-by: Neon <neon@saahild.com>
---
 app/assets/stylesheets/pages/user/_show.scss  | 22 +++++++++++
 app/controllers/users_controller.rb           | 38 ++++++++++---------
 app/policies/user_policy.rb                   |  2 +-
 app/views/users/show.html.erb                 | 24 +++++++++---
 .../users_controller_update_test.rb           | 15 ++++++++
 5 files changed, 77 insertions(+), 24 deletions(-)

diff --git a/app/assets/stylesheets/pages/user/_show.scss b/app/assets/stylesheets/pages/user/_show.scss
index f3552444e..8318619b4 100644
--- a/app/assets/stylesheets/pages/user/_show.scss
+++ b/app/assets/stylesheets/pages/user/_show.scss
@@ -599,6 +599,28 @@ turbo-frame#profile_tabs {
   align-items: center;
 }
 
+// Wraps the admin-editing-someone-else's-profile notice. The admin_tool box
+// itself (border + padding) must stay hidden until edit mode is entered —
+// hiding only the text inside it still leaves an empty dashed square visible
+// (mirrors .profile__banner-placeholder and friends, which reveal on the
+// .profile--editing class).
+.profile__admin-edit-tool {
+  display: none;
+
+  .profile--editing & {
+    display: inline-block;
+  }
+}
+
+.profile__admin-edit-notice {
+  font-size: 0.85rem;
+  color: var(--color-brand-orange);
+
+  strong {
+    font-weight: 700;
+  }
+}
+
 // Profile action buttons (Edit / Follow / Save / Cancel). Sits inside the
 // set-3 profile card, so this uses the light-bg small-action variant per
 // branding §4.0 / §4.1. Base is the secondary action (transparent +
diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
index 784412a41..cd4532465 100644
--- a/app/controllers/users_controller.rb
+++ b/app/controllers/users_controller.rb
@@ -21,24 +21,28 @@ def show
   end
 
   def update
-    if @user.update(user_params)
-      respond_to do |format|
-        format.turbo_stream do
-          flash.now[:notice] = "Profile updated."
-          render turbo_stream: turbo_stream.update("flash-region", partial: "shared/flash")
+    whodunnit = impersonating? ? real_user&.id : current_user&.id
+
+    PaperTrail.request(whodunnit: whodunnit) do
+      if @user.update(user_params)
+        respond_to do |format|
+          format.turbo_stream do
+            flash.now[:notice] = "Profile updated."
+            render turbo_stream: turbo_stream.update("flash-region", partial: "shared/flash")
+          end
+          format.html { redirect_to profile_path(@user.display_name), notice: "Profile updated." }
         end
-        format.html { redirect_to profile_path(@user.display_name), notice: "Profile updated." }
-      end
-    else
-      respond_to do |format|
-        format.turbo_stream do
-          flash.now[:alert] = @user.errors.full_messages.to_sentence
-          render turbo_stream: turbo_stream.update("flash-region", partial: "shared/flash"), status: :unprocessable_entity
-        end
-        format.html do
-          flash.now[:alert] = @user.errors.full_messages.to_sentence
-          load_profile("feed")
-          render :show, status: :unprocessable_entity
+      else
+        respond_to do |format|
+          format.turbo_stream do
+            flash.now[:alert] = @user.errors.full_messages.to_sentence
+            render turbo_stream: turbo_stream.update("flash-region", partial: "shared/flash"), status: :unprocessable_entity
+          end
+          format.html do
+            flash.now[:alert] = @user.errors.full_messages.to_sentence
+            load_profile("feed")
+            render :show, status: :unprocessable_entity
+          end
         end
       end
     end
diff --git a/app/policies/user_policy.rb b/app/policies/user_policy.rb
index e7ee6ec0f..63dcde7f7 100644
--- a/app/policies/user_policy.rb
+++ b/app/policies/user_policy.rb
@@ -4,7 +4,7 @@ def show?
   end
 
   def update?
-    user.present? && user.id == record.id
+    user.present? && (user.id == record.id || user.admin?)
   end
 
   def follow?
diff --git a/app/views/users/show.html.erb b/app/views/users/show.html.erb
index a90e91f06..cc460427f 100644
--- a/app/views/users/show.html.erb
+++ b/app/views/users/show.html.erb
@@ -11,6 +11,8 @@
 <% end %>
 
 <% own_profile = current_user&.id == @user.id %>
+<% admin_editing = !own_profile && current_user&.admin? %>
+<% can_edit_profile = own_profile || admin_editing %>
 <% banner_url = @user.banner.attached? ? url_for(@user.banner) : image_path("profile/default-banner.png") %>
 
 <div class="app-layout" data-controller="profile-modal">
@@ -28,7 +30,7 @@
     <div class="profile__banner<%= ' profile__banner--empty' unless @user.banner.attached? %>">
       <%= image_tag banner_url, alt: "", class: "profile__banner-image",
                     data: { "profile-edit-target": "banner" } %>
-      <% if own_profile && !@user.banner.attached? %>
+      <% if can_edit_profile && !@user.banner.attached? %>
         <label class="profile__banner-placeholder" data-profile-edit-target="placeholder">
           <span class="profile__banner-placeholder-text">Upload banner</span>
           <%= f.file_field :banner, accept: "image/*",
@@ -46,7 +48,7 @@
         </svg>
       <% end %>
 
-      <% if own_profile && @user.banner.attached? %>
+      <% if can_edit_profile && @user.banner.attached? %>
         <label class="profile__banner-upload" data-profile-edit-target="bannerLabel">
           <span class="profile__banner-upload-text">Change banner</span>
           <%= f.file_field :banner, accept: "image/*",
@@ -66,7 +68,7 @@
 
           <div class="profile__identity-text">
             <h1 class="profile__handle">@<%= @user.display_name %><%= render StreakBadgeComponent.new(user: @user, size: :large) %><%= " ⚡" if @user.admin? %><% if own_profile %><%= render IdvBadgeComponent.new(user: @user, context: :profile) %><% end %></h1>
-            <% if own_profile %>
+            <% if can_edit_profile %>
               <div class="profile__handle-edit"
                    data-controller="username-availability"
                    data-username-availability-url-value="<%= username_availability_path %>"
@@ -102,12 +104,12 @@
       <div class="profile__bio" data-profile-edit-target="bioView">
         <% if @user.bio.present? %>
           <%= render_bio(@user.bio) %>
-        <% elsif own_profile %>
+        <% elsif can_edit_profile %>
           <span class="profile__bio-empty">Add a bio to tell folks who you are.</span>
         <% end %>
       </div>
 
-      <% if own_profile %>
+      <% if can_edit_profile %>
         <div class="profile__bio-editor"
              data-profile-edit-target="bioEdit"
              data-controller="bio-editor"
@@ -163,8 +165,14 @@
           <% end %>
         </p>
 
+        <% if admin_editing %>
+          <%= admin_tool(extra_class: "profile__admin-edit-tool") do %>
+            <p class="profile__admin-edit-notice">You're editing <strong>@<%= @user.display_name %></strong>'s profile, not your own just remember that.</p>
+          <% end %>
+        <% end %>
+
         <div class="profile__actions">
-          <% if own_profile %>
+          <% edit_controls = capture do %>
             <button type="button"
                     class="profile__action-btn"
                     data-action="click->profile-edit#cancel"
@@ -178,6 +186,10 @@
                     class="profile__action-btn profile__action-btn--primary"
                     data-profile-edit-target="saveBtn"
                     hidden>Save</button>
+          <% end %>
+
+          <% if can_edit_profile %>
+            <%= edit_controls %>
           <% elsif current_user %>
             <% if @user.slack_id.present? %>
               <%= link_to "https://hackclub.slack.com/team/#{ERB::Util.url_encode(@user.slack_id)}",
diff --git a/test/controllers/users_controller_update_test.rb b/test/controllers/users_controller_update_test.rb
index 8ffa35277..45c0fa67c 100644
--- a/test/controllers/users_controller_update_test.rb
+++ b/test/controllers/users_controller_update_test.rb
@@ -26,6 +26,21 @@ class UsersControllerUpdateTest < ActionDispatch::IntegrationTest
     assert_not_equal "hacked", @alice.reload.bio
   end
 
+  test "admin can update someone else's profile" do
+    @bob.grant_role!(:admin)
+    sign_in @bob
+    patch user_path(@alice), params: { user: { bio: "updated by admin" } }
+    assert_redirected_to user_path(@alice)
+    assert_equal "updated by admin", @alice.reload.bio
+  end
+
+  test "admin editing someone else's profile is attributed in PaperTrail" do
+    @bob.grant_role!(:admin)
+    sign_in @bob
+    patch user_path(@alice), params: { user: { bio: "updated by admin" } }
+    assert_equal @bob.id, @alice.reload.versions.last.whodunnit.to_i
+  end
+
   test "logged-out users cannot update" do
     patch user_path(@alice), params: { user: { bio: "hi" } }
     assert_response :forbidden

From ebbfb1128f4a6ab18ccbaa81a72eac7c274c8576 Mon Sep 17 00:00:00 2001
From: Neon <neon@saahild.com>
Date: Wed, 15 Jul 2026 21:59:38 -0400
Subject: [PATCH 08/12] feat(projects): allow admins to edit other users'
 projects

Signed-off-by: Neon <neon@saahild.com>
---
 .../stylesheets/pages/projects/_show.scss     | 25 ++++++++++++++++++
 app/controllers/projects_controller.rb        | 16 ++++++++----
 app/views/projects/show.html.erb              | 26 ++++++++++++++++---
 3 files changed, 59 insertions(+), 8 deletions(-)

diff --git a/app/assets/stylesheets/pages/projects/_show.scss b/app/assets/stylesheets/pages/projects/_show.scss
index e5db5ade1..548b1b44b 100644
--- a/app/assets/stylesheets/pages/projects/_show.scss
+++ b/app/assets/stylesheets/pages/projects/_show.scss
@@ -208,6 +208,31 @@ turbo-frame#project_hero {
   }
 }
 
+.project-show__admin-link {
+  font-size: 0.85em;
+  text-decoration: none;
+  opacity: 0.85;
+
+  &:hover {
+    opacity: 1;
+  }
+}
+
+// Admin-editing-someone-else's-project notice. Sits inside an admin_tool
+// dashed box, so it only needs its own text color, not the full pill/border
+// treatment. Unlike the profile page's equivalent, this doesn't need a
+// .profile--editing-style CSS reveal — the whole edit form is only rendered
+// server-side when actually in edit mode, so there's no "empty box" case.
+.project-show__admin-edit-notice {
+  margin: 0 0 var(--space-xs);
+  font-size: 0.85rem;
+  color: var(--color-brand-orange);
+
+  strong {
+    font-weight: 700;
+  }
+}
+
 .project-show__title-input {
   padding: 0;
   border: 0;
diff --git a/app/controllers/projects_controller.rb b/app/controllers/projects_controller.rb
index 626bb1785..b48d53a18 100644
--- a/app/controllers/projects_controller.rb
+++ b/app/controllers/projects_controller.rb
@@ -39,7 +39,8 @@ def prepare_project_show_context
     @members = @project.users.where(banned: false).to_a
     @is_member = current_user && @members.include?(current_user)
     @active_nav_slug = @is_member ? "projects" : "home"
-    @can_edit_project = @is_member && policy(@project).update?
+    @can_edit_project = policy(@project).update?
+    @admin_editing_project = !@is_member && current_user&.admin?
     @follower_count = @project.project_follows.size
     @viewer_follow = current_user && @project.project_follows.find_by(user_id: current_user.id)
     @total_hours = (@project.duration_seconds / 3600.0).round
@@ -329,11 +330,16 @@ def edit
   def update
     authorize @project
 
-    @project.assign_attributes(project_params)
-    validate_urls
-    success = @project.errors.empty? && @project.save
+    whodunnit = impersonating? ? real_user&.id : current_user&.id
+    success = nil
+
+    PaperTrail.request(whodunnit: whodunnit) do
+      @project.assign_attributes(project_params)
+      validate_urls
+      success = @project.errors.empty? && @project.save
 
-    link_hackatime_projects if success
+      link_hackatime_projects if success
+    end
     # 2nd check w/ @project.errors.empty? is not redudant. this is ensures that hackatime is linked!
     if success && @project.errors.empty?
       respond_to do |format|
diff --git a/app/views/projects/show.html.erb b/app/views/projects/show.html.erb
index 724d8cca8..4877db1d0 100644
--- a/app/views/projects/show.html.erb
+++ b/app/views/projects/show.html.erb
@@ -20,6 +20,7 @@
   viewer_follow = @viewer_follow
   total_hours = @total_hours || (@project.duration_seconds / 3600.0).round
   can_edit_project = @can_edit_project
+  admin_editing_project = @admin_editing_project
   # Only highlight the unfinished sections when the user arrived via the
   # "Complete project info" button (which adds ?complete=1).
   highlight_incomplete_fields = (can_edit_project && params[:complete].present?) ? @project.incomplete_info_fields : []
@@ -84,6 +85,12 @@
                                       "project-form-target": "title"
                                     } %>
 
+                <% if admin_editing_project %>
+                  <%= admin_tool do %>
+                    <p class="project-show__admin-edit-notice">You're editing <strong><%= @project.title %></strong> — this isn't your project just remember that.</p>
+                  <% end %>
+                <% end %>
+
                 <div class="project-show__byline">
                   <% if members.any? %>
                     <ul class="project-show__avatars" aria-hidden="true">
@@ -388,6 +395,9 @@
                   <% if @project.hardware? %>
                     <span class="project-show__tag project-show__tag--hardware">Hardware</span>
                   <% end %>
+                  <%= admin_tool(compact: true) do %>
+                    <%= link_to "🔨", admin_project_path(@project), class: "project-show__admin-link", data: { turbo_frame: "_top" }, "aria-label": "View #{@project.title} in admin" %>
+                  <% end %>
                 </div>
                 <div class="project-show__byline">
                   <% if members.any? %>
@@ -454,9 +464,19 @@
                 <% end %>
 
                 <% if can_edit_project %>
-                  <%= link_to "Edit project", project_path(@project, editing: true),
-                              class: "project-show__pill project-show__pill--outline",
-                              data: { turbo_frame: "project_hero" } %>
+                  <% edit_project_link = capture do %>
+                    <%= link_to "Edit project", project_path(@project, editing: true),
+                                class: "project-show__pill project-show__pill--outline",
+                                data: { turbo_frame: "project_hero" } %>
+                  <% end %>
+
+                  <% if admin_editing_project %>
+                    <%= admin_tool do %>
+                      <%= edit_project_link %>
+                    <% end %>
+                  <% else %>
+                    <%= edit_project_link %>
+                  <% end %>
                 <% end %>
 
                 <% if current_user && !is_member %>

From 65aaea8cd7cff343a65d180b80b3d08a7cd2bd4b Mon Sep 17 00:00:00 2001
From: Neon <neon@saahild.com>
Date: Wed, 15 Jul 2026 22:13:21 -0400
Subject: [PATCH 09/12] fix: alignment and margin of buttons

Signed-off-by: Neon <neon@saahild.com>
---
 app/assets/stylesheets/components/_username_link.scss | 1 -
 app/assets/stylesheets/utils.scss                     | 2 ++
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/app/assets/stylesheets/components/_username_link.scss b/app/assets/stylesheets/components/_username_link.scss
index 5c8e7ba82..2e0725cb5 100644
--- a/app/assets/stylesheets/components/_username_link.scss
+++ b/app/assets/stylesheets/components/_username_link.scss
@@ -1,5 +1,4 @@
 .username-link__admin {
-  margin-left: var(--space-xxxs);
   font-size: 0.85em;
   text-decoration: none;
   opacity: 0.85;
diff --git a/app/assets/stylesheets/utils.scss b/app/assets/stylesheets/utils.scss
index 524e3285d..75517f063 100644
--- a/app/assets/stylesheets/utils.scss
+++ b/app/assets/stylesheets/utils.scss
@@ -36,6 +36,8 @@
 .tools-do--inline {
   display: inline-flex;
   align-items: center;
+  vertical-align: middle;
+  margin-left: var(--space-xxxs);
   padding: 1px 4px;
   border-radius: 4px;
 }

From df652333e0ec4f8220244764d3163767f4030567 Mon Sep 17 00:00:00 2001
From: Neon <neon@saahild.com>
Date: Wed, 15 Jul 2026 23:58:30 -0400
Subject: [PATCH 10/12] update(admin/shigimi-eyes): fraud perms + show deleted
 devlogs + show hackatime distrabution on devlog

Signed-off-by: Neon <neon@saahild.com>
---
 app/assets/stylesheets/components/_feed.scss  | 49 +++++++++++++++++++
 app/components/posts/card_component.html.erb  | 28 +++++++++++
 app/components/posts/card_component.rb        | 13 +++++
 .../projects/devlogs_controller.rb            | 25 ++++++++++
 app/controllers/projects_controller.rb        | 16 ++++--
 app/controllers/users_controller.rb           | 18 +++++--
 app/helpers/application_helper.rb             | 10 +++-
 app/models/post/devlog.rb                     | 35 +++++++++++++
 app/policies/post/devlog_policy.rb            |  4 ++
 .../devlogs/hackatime_breakdown.html.erb      | 15 ++++++
 app/views/projects/show.html.erb              |  2 +-
 app/views/shared/_username_link.html.erb      |  2 +-
 config/routes.rb                              |  1 +
 13 files changed, 207 insertions(+), 11 deletions(-)
 create mode 100644 app/views/projects/devlogs/hackatime_breakdown.html.erb

diff --git a/app/assets/stylesheets/components/_feed.scss b/app/assets/stylesheets/components/_feed.scss
index 92ee803b0..ab6a61a61 100644
--- a/app/assets/stylesheets/components/_feed.scss
+++ b/app/assets/stylesheets/components/_feed.scss
@@ -856,6 +856,55 @@
     font-size: calc(var(--font-size-s) * 1.2);
   }
 
+  // Shown only inside the admin_tool box when a deleted devlog is surfaced
+  // to an admin/fraud_dept viewer (see Posts::CardComponent#deleted_devlog?).
+  &__deleted-notice {
+    margin: var(--space-xxs) 0 0;
+    padding-left: var(--feed-content-offset);
+    font-size: calc(var(--font-size-s) * 1.2);
+    color: var(--color-brand-orange);
+  }
+
+  // Admin-only, lazy-loaded Hackatime project breakdown (see
+  // Posts::CardComponent#hackatime_breakdown_url). Collapsed by default;
+  // the turbo-frame inside only fetches once the <details> is opened.
+  &__hackatime-summary {
+    cursor: pointer;
+    font-size: calc(var(--font-size-s) * 1.2);
+    color: var(--color-space-text-muted);
+
+    &:hover {
+      color: var(--color-space-text);
+    }
+  }
+
+  &__hackatime-list {
+    margin: var(--space-xxs) 0 0;
+    padding: 0;
+    list-style: none;
+  }
+
+  &__hackatime-item {
+    display: flex;
+    align-items: baseline;
+    gap: var(--space-xxs);
+    font-size: calc(var(--font-size-s) * 1.1);
+  }
+
+  &__hackatime-name {
+    font-weight: 600;
+  }
+
+  &__hackatime-percent {
+    color: var(--color-brand-orange);
+  }
+
+  &__hackatime-seconds,
+  &__hackatime-loading,
+  &__hackatime-empty {
+    color: var(--color-space-text-muted);
+  }
+
   &__body {
     padding-left: var(--feed-content-offset);
     font-size: calc(var(--font-size-s) * 1.2);
diff --git a/app/components/posts/card_component.html.erb b/app/components/posts/card_component.html.erb
index 04d46f93b..c30246981 100644
--- a/app/components/posts/card_component.html.erb
+++ b/app/components/posts/card_component.html.erb
@@ -1,3 +1,4 @@
+<% card_content = capture do %>
 <% on_card_link_target = card_link_url.present? && request.path == card_link_url %>
 <% if on_card_link_target %>
 <article id="<%= dom_id(post) %>" class="<%= card_classes %>">
@@ -83,6 +84,24 @@
     </div>
   </header>
 
+  <% if deleted_devlog? %>
+    <p class="feed-post-card__deleted-notice">This devlog was deleted<% if display_postable.deleted_at.present? %> on <%= l(display_postable.deleted_at.to_date, format: :long) %><% end %>.</p>
+  <% end %>
+
+  <% if devlog? && hackatime_breakdown_url.present? %>
+    <%= helpers.admin_tool do %>
+      <details class="feed-post-card__hackatime">
+        <summary class="feed-post-card__hackatime-summary">Hackatime breakdown</summary>
+        <%= helpers.turbo_frame_tag dom_id(postable, :hackatime_breakdown),
+              src: hackatime_breakdown_url,
+              loading: :lazy,
+              class: "feed-post-card__hackatime-frame" do %>
+          <p class="feed-post-card__hackatime-loading">Loading&hellip;</p>
+        <% end %>
+      </details>
+    <% end %>
+  <% end %>
+
   <% if fire_event? %>
     <div class="feed-post-card__super-star-body markdown-content">
       <!-- Hardcoded body since the old ship events had the header inside the body -->
@@ -276,3 +295,12 @@
   </footer>
   <% end %>
 </article>
+<% end %>
+
+<% if deleted_devlog? %>
+  <%= helpers.admin_tool(roles: [ :fraud_dept ]) do %>
+    <%= card_content %>
+  <% end %>
+<% else %>
+  <%= card_content %>
+<% end %>
diff --git a/app/components/posts/card_component.rb b/app/components/posts/card_component.rb
index 040151ed9..d74e869ab 100644
--- a/app/components/posts/card_component.rb
+++ b/app/components/posts/card_component.rb
@@ -34,6 +34,13 @@ def devlog?
       display_post&.postable_type == "Post::Devlog"
     end
 
+    # True when this card is only visible because the viewer has permission
+    # to see deleted devlogs (admin/fraud_dept, see ApplicationPolicy#view_deleted_devlogs?)
+    # — the devlog itself has been soft-deleted.
+    def deleted_devlog?
+      devlog? && display_postable.respond_to?(:deleted?) && display_postable.deleted?
+    end
+
     def repost?
       post.postable_type == "Post::Repost"
     end
@@ -246,6 +253,12 @@ def delete_url
       end
     end
 
+    def hackatime_breakdown_url
+      if devlog? && project.present?
+        helpers.hackatime_breakdown_project_devlog_path(project, postable)
+      end
+    end
+
     def post_menu_data
       {
         controller: "post-menu",
diff --git a/app/controllers/projects/devlogs_controller.rb b/app/controllers/projects/devlogs_controller.rb
index 4a6de33ff..63bcf2641 100644
--- a/app/controllers/projects/devlogs_controller.rb
+++ b/app/controllers/projects/devlogs_controller.rb
@@ -3,6 +3,7 @@ class Projects::DevlogsController < ApplicationController
 
   before_action :set_project
   before_action :set_devlog, only: %i[show edit update destroy versions]
+  before_action :set_devlog_including_deleted, only: %i[hackatime_breakdown]
   before_action :require_hackatime_project, only: %i[create]
   before_action :sync_hackatime_projects, only: %i[create]
 
@@ -148,6 +149,12 @@ def versions
     @versions = @devlog.versions.order(version_number: :desc)
   end
 
+  def hackatime_breakdown
+    authorize @devlog
+    @breakdown = @devlog.hackatime_project_breakdown
+    render layout: false
+  end
+
   private
 
   def set_project
@@ -161,6 +168,24 @@ def set_devlog
                       .postable
   end
 
+  # Post::Devlog has its own default_scope (SoftDeletable) — .postable on a
+  # deleted devlog's Post would otherwise silently return nil (default_scope
+  # applies to the preloader/association fetch regardless of the Post row
+  # itself being found), which then blows up `authorize` with
+  # Pundit::NotDefinedError for nil. Only used by hackatime_breakdown, which
+  # is already admin-only (Post::DevlogPolicy#hackatime_breakdown?) — unlike
+  # set_devlog's other callers (show, edit, ...), whose policies don't check
+  # deleted status themselves and rely on set_devlog silently failing to find
+  # deleted records as their only protection.
+  def set_devlog_including_deleted
+    @devlog = Post::Devlog.unscoped do
+      @project.posts
+              .where(postable_type: "Post::Devlog")
+              .find_by!(postable_id: params[:id])
+              .postable
+    end
+  end
+
   def require_hackatime_project
     return if test_time_granted?
 
diff --git a/app/controllers/projects_controller.rb b/app/controllers/projects_controller.rb
index b48d53a18..789d72f53 100644
--- a/app/controllers/projects_controller.rb
+++ b/app/controllers/projects_controller.rb
@@ -91,9 +91,19 @@ def prepare_project_show_context
         scope = scope.joins("LEFT JOIN post_devlogs ON posts.postable_type = 'Post::Devlog' AND posts.postable_id = post_devlogs.id")
                      .where("posts.postable_type != 'Post::Devlog' OR post_devlogs.deleted_at IS NULL")
       end
-      posts = scope.select { |post| post.postable.present? }
-      preload_timeline_postables(posts, project_context: true)
-      posts
+
+      build_posts = -> {
+        posts = scope.select { |post| post.postable.present? }
+        preload_timeline_postables(posts, project_context: true)
+        posts
+      }
+
+      # Post::Devlog has its own default_scope (SoftDeletable), which the
+      # preloader above respects regardless of the SQL filter toggled just
+      # above — without unscoping, a deleted devlog's postable silently
+      # comes back nil and gets dropped, even when the viewer is authorized
+      # to see it.
+      include_deleted_devlogs ? Post::Devlog.unscoped(&build_posts) : build_posts.call
     }
 
     @posts = if policy(@project).view_deleted_devlogs?
diff --git a/app/controllers/users_controller.rb b/app/controllers/users_controller.rb
index cd4532465..466ec2159 100644
--- a/app/controllers/users_controller.rb
+++ b/app/controllers/users_controller.rb
@@ -95,6 +95,8 @@ def profile_projects
   end
 
   def profile_activity
+    can_view_deleted_devlogs = policy(@user).view_deleted_devlogs?
+
     scope = Post.left_outer_joins(:project)
                 .where("projects.deleted_at IS NULL OR posts.postable_type = ?", "Post::Repost")
                 .visible_to(current_user)
@@ -102,13 +104,21 @@ def profile_activity
                 .preload(:postable)
                 .order(created_at: :desc)
 
-    scope = hide_deleted_devlogs(scope) unless policy(@user).view_deleted_devlogs?
+    scope = hide_deleted_devlogs(scope) unless can_view_deleted_devlogs
     scope = hide_deleted_reposts(scope)
     scope = hide_rejected_ships(scope)
 
-    @pagy, posts = pagy(:offset, scope, limit: ACTIVITY_LIMIT)
-    preload_timeline_postables(posts)
-    posts.select { |post| !post.repost? || post.visible_repost_original_for?(current_user) }
+    build_posts = -> {
+      @pagy, posts = pagy(:offset, scope, limit: ACTIVITY_LIMIT)
+      preload_timeline_postables(posts)
+      posts.select { |post| !post.repost? || post.visible_repost_original_for?(current_user) }
+    }
+
+    # Post::Devlog has its own default_scope (SoftDeletable), which the
+    # preload above respects regardless of hide_deleted_devlogs — without
+    # unscoping, a deleted devlog's postable silently comes back nil and
+    # never renders, even when the viewer is authorized to see it.
+    can_view_deleted_devlogs ? Post::Devlog.unscoped(&build_posts) : build_posts.call
   end
 
   def hide_deleted_devlogs(scope)
diff --git a/app/helpers/application_helper.rb b/app/helpers/application_helper.rb
index 24c4ee8db..89ad44e5f 100644
--- a/app/helpers/application_helper.rb
+++ b/app/helpers/application_helper.rb
@@ -47,12 +47,18 @@ def onboarding_count_up(n)
   # that sit inside a line of text (e.g. a username byline) rather than
   # wrapping a standalone block of debug content.
   #
+  # roles: lets specific call sites (e.g. the "view in admin" hammer link)
+  # opt additional roles into an otherwise admin-only marker, without
+  # loosening every other admin_tool usage (comment delete, super star
+  # controls, profile/project edit) to those roles too.
+  #
   # Uses real_user rather than current_user while impersonating, so the
   # admin retains their own debug tooling instead of losing it to whatever
   # role the impersonated account happens to have.
-  def admin_tool(compact: false, extra_class: nil, &block)
+  def admin_tool(compact: false, extra_class: nil, roles: [], &block)
     acting_user = impersonating? ? real_user : current_user
-    return unless acting_user&.admin? && Flipper.enabled?(:shigimi_eyes, acting_user)
+    allowed = acting_user&.admin? || roles.any? { |role| acting_user&.has_role?(role) }
+    return unless allowed && Flipper.enabled?(:shigimi_eyes, acting_user)
 
     classes = [ "admin", "tools-do" ]
     classes << "tools-do--inline" if compact
diff --git a/app/models/post/devlog.rb b/app/models/post/devlog.rb
index 937d57d3b..5c623ca68 100644
--- a/app/models/post/devlog.rb
+++ b/app/models/post/devlog.rb
@@ -131,6 +131,41 @@ def body_at_version(version_number)
     result
   end
 
+  # Best-effort per-Hackatime-project time split for this devlog's logged
+  # window — admin-only debug info (see Posts::CardComponent). There's no
+  # persisted per-project breakdown (duration_seconds is one aggregate total),
+  # so this reconstructs it live: one Hackatime API call per project key that
+  # was linked at devlog-creation time, scoped to the same window duration_seconds
+  # was originally computed from. Cached indefinitely once computed, since a
+  # past devlog's time window never changes.
+  def hackatime_project_breakdown
+    keys = hackatime_projects_key_snapshot.to_s.split(",").map(&:strip).reject(&:blank?)
+    return [] if keys.empty? || hackatime_projects_key_snapshot == "test"
+
+    author = post&.user
+    hackatime_uid = author&.hackatime_identity&.uid
+    return [] if hackatime_uid.blank?
+
+    project = post.project
+    return [] unless project
+
+    Rails.cache.fetch([ "devlog_hackatime_breakdown", id ], expires_in: 30.days) do
+      access_token = author.hackatime_identity&.access_token
+      window_start = project.devlog_window_start(created_at)
+
+      breakdown = keys.map do |key|
+        seconds = HackatimeService.fetch_total_seconds_for_projects(
+          hackatime_uid, [ key ], start_date: window_start.iso8601, end_date: created_at.iso8601, access_token: access_token
+        ).to_i
+        { name: key, seconds: seconds }
+      end
+
+      total = breakdown.sum { |b| b[:seconds] }
+      breakdown.each { |b| b[:percent] = total.positive? ? (b[:seconds] * 100.0 / total).round(1) : 0.0 }
+      breakdown.sort_by { |b| -b[:seconds] }
+    end
+  end
+
   private
 
   def handle_post_creation
diff --git a/app/policies/post/devlog_policy.rb b/app/policies/post/devlog_policy.rb
index 2209c3692..4e1c7555b 100644
--- a/app/policies/post/devlog_policy.rb
+++ b/app/policies/post/devlog_policy.rb
@@ -31,6 +31,10 @@ def versions?
         owns?
     end
 
+    def hackatime_breakdown?
+        user&.admin?
+    end
+
     private
 
     def owns?
diff --git a/app/views/projects/devlogs/hackatime_breakdown.html.erb b/app/views/projects/devlogs/hackatime_breakdown.html.erb
new file mode 100644
index 000000000..23ff1f403
--- /dev/null
+++ b/app/views/projects/devlogs/hackatime_breakdown.html.erb
@@ -0,0 +1,15 @@
+<%= turbo_frame_tag dom_id(@devlog, :hackatime_breakdown) do %>
+  <% if @breakdown.blank? %>
+    <p class="feed-post-card__hackatime-empty">No Hackatime project data available for this devlog.</p>
+  <% else %>
+    <ul class="feed-post-card__hackatime-list">
+      <% @breakdown.each do |entry| %>
+        <li class="feed-post-card__hackatime-item">
+          <span class="feed-post-card__hackatime-name"><%= entry[:name] %></span>
+          <span class="feed-post-card__hackatime-percent"><%= entry[:percent] %>%</span>
+          <span class="feed-post-card__hackatime-seconds">(<%= format_seconds(entry[:seconds]) %>)</span>
+        </li>
+      <% end %>
+    </ul>
+  <% end %>
+<% end %>
diff --git a/app/views/projects/show.html.erb b/app/views/projects/show.html.erb
index 4877db1d0..55eb99e83 100644
--- a/app/views/projects/show.html.erb
+++ b/app/views/projects/show.html.erb
@@ -395,7 +395,7 @@
                   <% if @project.hardware? %>
                     <span class="project-show__tag project-show__tag--hardware">Hardware</span>
                   <% end %>
-                  <%= admin_tool(compact: true) do %>
+                  <%= admin_tool(compact: true, roles: [ :fraud_dept ]) do %>
                     <%= link_to "🔨", admin_project_path(@project), class: "project-show__admin-link", data: { turbo_frame: "_top" }, "aria-label": "View #{@project.title} in admin" %>
                   <% end %>
                 </div>
diff --git a/app/views/shared/_username_link.html.erb b/app/views/shared/_username_link.html.erb
index 2937e928b..99b63ab58 100644
--- a/app/views/shared/_username_link.html.erb
+++ b/app/views/shared/_username_link.html.erb
@@ -6,4 +6,4 @@
 <%= link_to local_assigns[:text] || "@#{user.display_name}",
             profile_path(user.display_name),
             class: link_class,
-            data: local_assigns[:data] %><% if local_assigns.fetch(:badge, true) %><%= render StreakBadgeComponent.new(user: user) %><%= " ⚡" if user.admin? %><% end %><%= admin_tool(compact: true) do %><%= link_to "🔨", admin_user_path(user), class: "username-link__admin", data: { turbo_frame: "_top" }, "aria-label": "View #{user.display_name} in admin" %><% end %><% if admin_policy(user).impersonate? %><%= admin_tool(compact: true) do %><%= link_to "👁️", admin_user_impersonation_path(user), class: "username-link__admin", data: { turbo_method: :post, turbo_frame: "_top", turbo_confirm: "Are you sure you want to impersonate #{user.display_name}? You will see the site as they do." }, "aria-label": "Impersonate #{user.display_name}" %><% end %><% end %>
+            data: local_assigns[:data] %><% if local_assigns.fetch(:badge, true) %><%= render StreakBadgeComponent.new(user: user) %><%= " ⚡" if user.admin? %><% end %><%= admin_tool(compact: true, roles: [ :fraud_dept ]) do %><%= link_to "🔨", admin_user_path(user), class: "username-link__admin", data: { turbo_frame: "_top" }, "aria-label": "View #{user.display_name} in admin" %><% end %><% if admin_policy(user).impersonate? %><%= admin_tool(compact: true) do %><%= link_to "👁️", admin_user_impersonation_path(user), class: "username-link__admin", data: { turbo_method: :post, turbo_frame: "_top", turbo_confirm: "Are you sure you want to impersonate #{user.display_name}? You will see the site as they do." }, "aria-label": "Impersonate #{user.display_name}" %><% end %><% end %>
diff --git a/config/routes.rb b/config/routes.rb
index ce51a4966..46f1e8256 100644
--- a/config/routes.rb
+++ b/config/routes.rb
@@ -897,6 +897,7 @@
     resources :devlogs, only: %i[show create edit update destroy], module: :projects, shallow: false do
       member do
         get :versions
+        get :hackatime_breakdown
       end
       collection do
         get :preview_time

From 0db3dd7292ec042370826c7c32be606bd18e97b8 Mon Sep 17 00:00:00 2001
From: Neon <neon@saahild.com>
Date: Thu, 16 Jul 2026 00:10:31 -0400
Subject: [PATCH 11/12] update(admin/shigimi-eyes): inspectors!!

Signed-off-by: Neon <neon@saahild.com>
---
 app/views/projects/devlogs/show.html.erb | 1 +
 app/views/projects/show.html.erb         | 1 +
 app/views/users/show.html.erb            | 1 +
 3 files changed, 3 insertions(+)

diff --git a/app/views/projects/devlogs/show.html.erb b/app/views/projects/devlogs/show.html.erb
index 4bd2ab6a4..c2a9a6e7f 100644
--- a/app/views/projects/devlogs/show.html.erb
+++ b/app/views/projects/devlogs/show.html.erb
@@ -11,6 +11,7 @@
 
 <div class="app-layout">
   <main class="app-layout__main devlog-detail" aria-label="Devlog">
+    <%= render "shared/inspector", record: @devlog %>
     <nav class="devlog-detail__back" aria-label="Back">
       <%= link_to project_path(@project), class: "devlog-detail__back-link" do %>
         <%= inline_svg_tag "icons/chevron-down.svg", class: "devlog-detail__back-arrow", aria: { hidden: true } %>
diff --git a/app/views/projects/show.html.erb b/app/views/projects/show.html.erb
index 55eb99e83..2c338d408 100644
--- a/app/views/projects/show.html.erb
+++ b/app/views/projects/show.html.erb
@@ -28,6 +28,7 @@
 
 <div class="app-layout" data-controller="profile-modal">
   <div class="app-layout__main">
+    <%= render "shared/inspector", record: @project %>
     <%= turbo_frame_tag "project_hero" do %>
     <% if can_edit_project && (params[:editing].present? || @project.errors.any?) %>
       <%= form_with(model: @project,
diff --git a/app/views/users/show.html.erb b/app/views/users/show.html.erb
index cc460427f..eb88c0648 100644
--- a/app/views/users/show.html.erb
+++ b/app/views/users/show.html.erb
@@ -17,6 +17,7 @@
 
 <div class="app-layout" data-controller="profile-modal">
   <div class="app-layout__main">
+    <%= render "shared/inspector", record: @user %>
     <%= turbo_frame_tag "profile_card" do %>
     <%= form_with model: @user, url: user_path(@user), method: :patch, multipart: true,
                   class: "profile",

From fdc3d2b3522c0901b2a79b248cee980e94a7c9d9 Mon Sep 17 00:00:00 2001
From: Neon <neon@saahild.com>
Date: Thu, 16 Jul 2026 00:21:51 -0400
Subject: [PATCH 12/12] chore: rm admin helper block from these components

im pretty sure other admins would like to use this without the flipper :pf:

Signed-off-by: Neon <neon@saahild.com>
---
 app/views/projects/_fire_controls.html.erb | 34 +++++++++-------------
 app/views/shop/suggestions/_card.html.erb  |  6 ++--
 2 files changed, 17 insertions(+), 23 deletions(-)

diff --git a/app/views/projects/_fire_controls.html.erb b/app/views/projects/_fire_controls.html.erb
index ed987a5f4..f575a77f2 100644
--- a/app/views/projects/_fire_controls.html.erb
+++ b/app/views/projects/_fire_controls.html.erb
@@ -1,25 +1,21 @@
 <% if project.fire? %>
   <span class="project-show__badge project-show__badge--fire">⭐ Super Star Project</span>
   <% if current_user&.admin? %>
-    <%= admin_tool do %>
-      <%= button_to "Remove Super Star", project_magic_path(project),
-                    method: :delete,
-                    form_class: "project-show__pill-form",
-                    class: "project-show__pill project-show__pill--outline" %>
-    <% end %>
+    <%= button_to "Remove Super Star", project_magic_path(project),
+                  method: :delete,
+                  form_class: "project-show__pill-form",
+                  class: "project-show__pill project-show__pill--outline" %>
   <% end %>
 <% elsif project.fire_nomination_pending? && current_user&.can_nominate_super_star? %>
   <span class="project-show__badge project-show__badge--nominated">⭐ Nominated by <%= project.nominated_fire_by&.display_name %></span>
   <% if current_user.admin? %>
-    <%= admin_tool do %>
-      <%= button_to "Approve Super Star", project_magic_path(project),
-                    form_class: "project-show__pill-form",
-                    class: "project-show__pill project-show__pill--save" %>
-      <%= button_to "Reject", project_fire_nomination_path(project),
-                    method: :delete,
-                    form_class: "project-show__pill-form",
-                    class: "project-show__pill project-show__pill--outline" %>
-    <% end %>
+    <%= button_to "Approve Super Star", project_magic_path(project),
+                  form_class: "project-show__pill-form",
+                  class: "project-show__pill project-show__pill--save" %>
+    <%= button_to "Reject", project_fire_nomination_path(project),
+                  method: :delete,
+                  form_class: "project-show__pill-form",
+                  class: "project-show__pill project-show__pill--outline" %>
   <% else %>
     <%= button_to "Withdraw nomination", project_fire_nomination_path(project),
                   method: :delete,
@@ -27,11 +23,9 @@
                   class: "project-show__pill project-show__pill--outline" %>
   <% end %>
 <% elsif current_user&.admin? %>
-  <%= admin_tool do %>
-    <%= button_to "Mark as Super Star", project_magic_path(project),
-                  form_class: "project-show__pill-form",
-                  class: "project-show__pill project-show__pill--save" %>
-  <% end %>
+  <%= button_to "Mark as Super Star", project_magic_path(project),
+                form_class: "project-show__pill-form",
+                class: "project-show__pill project-show__pill--save" %>
 <% elsif current_user&.can_nominate_super_star? && !project.users.include?(current_user) %>
   <%= button_to "Nominate for Super Star", project_fire_nomination_path(project),
                 form_class: "project-show__pill-form",
diff --git a/app/views/shop/suggestions/_card.html.erb b/app/views/shop/suggestions/_card.html.erb
index 4a6145fba..75c92551b 100644
--- a/app/views/shop/suggestions/_card.html.erb
+++ b/app/views/shop/suggestions/_card.html.erb
@@ -65,8 +65,8 @@
     <% end %>
   </div>
 
-  <% if suggestion.pending? %>
-    <%= admin_tool(extra_class: "suggestion-card__admin-strip") do %>
+  <% if suggestion.pending? && current_user&.admin? %>
+    <div class="admin tools-do suggestion-card__admin-strip">
       <div class="suggestion-card__admin-row">
         <%= button_to "Accept →",
                       accept_admin_shop_suggestion_path(suggestion),
@@ -91,6 +91,6 @@
                          class: "suggestion-card__reject-reason" %>
         <%= f.submit "Reject", class: "suggestion-card__reject-btn" %>
       <% end %>
-    <% end %>
+    </div>
   <% end %>
 </div>