feat: add admin list for approve flow UI access

Allow julianknutsen, steveyegge, and csells to accept, reject, and
close any wanted item as if they were the poster. Self-accept guard
still applies. Delete remains poster-only.

Also removes unused parseCSVLine to fix lint.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: julianknutsen

internal/commons/commons.go

@@ -460,35 +460,6 @@ func parseSimpleCSV(data string) []map[string]string {
 	return result
 }
 
-// parseCSVLine parses a single CSV line, handling quoted fields.
-func parseCSVLine(line string) []string {
-	var fields []string
-	var field strings.Builder
-	inQuote := false
-
-	for i := 0; i < len(line); i++ {
-		ch := line[i]
-		switch {
-		case ch == '"' && !inQuote:
-			inQuote = true
-		case ch == '"' && inQuote:
-			if i+1 < len(line) && line[i+1] == '"' {
-				field.WriteByte('"')
-				i++
-			} else {
-				inQuote = false
-			}
-		case ch == ',' && !inQuote:
-			fields = append(fields, field.String())
-			field.Reset()
-		default:
-			field.WriteByte(ch)
-		}
-	}
-	fields = append(fields, field.String())
-	return fields
-}
-
 // QueryCompletion fetches the completion record for a wanted item.
 func QueryCompletion(db DB, wantedID string) (*CompletionRecord, error) {
 	return queryCompletionRef(db, wantedID, "")

internal/commons/lifecycle.go

@@ -134,26 +134,36 @@ func PushOriginMain(dbDir string, stdout io.Writer) error {
 	return PushBranchToRemoteForce(dbDir, "origin", "main", true, stdout)
 }
 
+// Admins is the set of rig handles with elevated transition permissions.
+// Admins can accept, reject, and close any item as if they were the poster.
+var Admins = map[string]bool{
+	"julianknutsen": true,
+	"steveyegge":    true,
+	"csells":        true,
+}
+
 // CanPerformTransition checks whether actor can perform transition t on item.
 func CanPerformTransition(item *WantedItem, t Transition, actor string) bool {
 	if item == nil {
 		return false
 	}
+	isPoster := item.PostedBy == actor
+	isAdmin := Admins[actor]
 	switch t {
 	case TransitionClaim:
 		return true // any rig can claim
 	case TransitionUnclaim:
-		return item.ClaimedBy == actor || item.PostedBy == actor
+		return item.ClaimedBy == actor || isPoster
 	case TransitionDone:
 		return item.ClaimedBy == actor
 	case TransitionAccept:
-		return item.PostedBy == actor && item.ClaimedBy != actor
+		return (isPoster || isAdmin) && item.ClaimedBy != actor
 	case TransitionReject:
-		return item.PostedBy == actor
+		return isPoster || isAdmin
 	case TransitionClose:
-		return item.PostedBy == actor
+		return isPoster || isAdmin
 	case TransitionDelete:
-		return item.PostedBy == actor
+		return isPoster
 	default:
 		return false
 	}

internal/commons/lifecycle_test.go

@@ -126,6 +126,47 @@ func TestCanPerformTransition_Accept(t *testing.T) {
 	}
 }
 
+func TestCanPerformTransition_Admin(t *testing.T) {
+	item := &WantedItem{
+		ID:        "w-test",
+		Status:    "in_review",
+		PostedBy:  "poster",
+		ClaimedBy: "claimer",
+	}
+
+	// Admin (not claimer) can accept.
+	if !CanPerformTransition(item, TransitionAccept, "julianknutsen") {
+		t.Error("admin should be able to accept")
+	}
+	// Admin can reject.
+	if !CanPerformTransition(item, TransitionReject, "julianknutsen") {
+		t.Error("admin should be able to reject")
+	}
+	// Admin can close.
+	if !CanPerformTransition(item, TransitionClose, "steveyegge") {
+		t.Error("admin should be able to close")
+	}
+	// Admin who is also the claimer cannot accept own work.
+	selfItem := &WantedItem{
+		ID:        "w-test",
+		Status:    "in_review",
+		PostedBy:  "poster",
+		ClaimedBy: "csells",
+	}
+	if CanPerformTransition(selfItem, TransitionAccept, "csells") {
+		t.Error("admin who claimed should not be able to accept own work")
+	}
+	// Admin cannot delete (poster-only).
+	openItem := &WantedItem{
+		ID:       "w-test",
+		Status:   "open",
+		PostedBy: "poster",
+	}
+	if CanPerformTransition(openItem, TransitionDelete, "julianknutsen") {
+		t.Error("admin should not be able to delete (poster-only)")
+	}
+}
+
 func TestTransitionLabel(t *testing.T) {
 	tests := []struct {
 		t    Transition