feat(audit): CSV export, absolute timestamps, payload modal

internal/server/ui/funcs.go

@@ -1,6 +1,8 @@
 package ui
 
 import (
+	"encoding/base64"
+	"encoding/json"
 	"fmt"
 	"html/template"
 	"strconv"
@@ -25,6 +27,22 @@ func funcMap() template.FuncMap {
 			}
 			return t.Format("2006-01-02 15:04:05")
 		},
+		// b64 encodes a json.RawMessage (or any []byte / string) as
+		// base64 — used by audit.html to stash arbitrary JSON in a
+		// data- attribute without fighting html/template's contextual
+		// escaping. JS atob() decodes on click.
+		"b64": func(v any) string {
+			switch x := v.(type) {
+			case json.RawMessage:
+				return base64.StdEncoding.EncodeToString(x)
+			case []byte:
+				return base64.StdEncoding.EncodeToString(x)
+			case string:
+				return base64.StdEncoding.EncodeToString([]byte(x))
+			default:
+				return base64.StdEncoding.EncodeToString([]byte(fmt.Sprintf("%v", x)))
+			}
+		},
 		"derefInt": func(p *int) int {
 			if p == nil {
 				return 0