Add handover for v13.7 TXT reinsert UI

handover/workpackages/20260608_0000_v13_7_txt_reinsert_upload_download_ui.md

@@ -0,0 +1,151 @@
+# Handover — WP13 — v13.7 TXT reinsert upload/download UI
+
+Repository: `solidprivacy-nl/scrub`  
+Status: implemented; awaiting GitHub Actions, Hugging Face sync and app verification
+
+## Summary
+
+WP13 adds controlled TXT upload/download support inside the existing `Originele waarden terugzetten` mode.
+
+The user can now:
+
+1. load or paste a Scrub Key;
+2. upload a `.txt` file containing placeholders;
+3. locally reinsert original values using the loaded Scrub Key;
+4. view restored TXT text;
+5. view an audit summary;
+6. download the restored TXT file.
+
+The existing pasted-text reinsert flow remains available as fallback.
+
+## Files added
+
+- `tests/test_txt_reinsert_ui_patch.py`
+- `handover/workpackages/20260608_0000_v13_7_txt_reinsert_upload_download_ui.md`
+
+## Files changed
+
+- `fix_streamlit_nested_expanders.py`
+- `tests/test_two_mode_ui_patch.py`
+- `WORKPACKAGES.md`
+- `CHANGELOG.md`
+
+## Tests
+
+Added:
+
+```text
+tests/test_txt_reinsert_ui_patch.py
+```
+
+Updated:
+
+```text
+tests/test_two_mode_ui_patch.py
+```
+
+The tests check:
+
+- `reinsert_txt_bytes` is imported and used;
+- `TXT-bestand terugzetten` appears;
+- `Upload een TXT-bestand met placeholders` appears;
+- `Zet TXT-bestand lokaal terug` appears;
+- `Herstelde TXT-tekst` appears;
+- `Download hersteld TXT-bestand (.txt)` appears;
+- TXT upload accepts `.txt` only;
+- TXT reinsert requires a loaded Scrub Key;
+- TXT reinsert is injected only in the `Originele waarden terugzetten` mode;
+- pasted-text reinsert remains available;
+- Scrub Key load/import remains available;
+- anonymization/export markers remain present;
+- Scrub Key export remains present;
+- no DOCX upload reinsert UI is added;
+- no PDF reinsert is added;
+- no AI/cloud behavior is added;
+- `apply_replacements_to_text` is not altered;
+- existing scrubbed download markers are not rewired.
+
+## Validation status
+
+Local clone/test run could not be performed in the container because outbound GitHub DNS was unavailable:
+
+```text
+Could not resolve host: github.com
+```
+
+No local passing test result is claimed.
+
+## GitHub Actions status
+
+Awaiting verification for WP13 commits.
+
+## Hugging Face sync status
+
+Awaiting verification for WP13 commits.
+
+## App verification status
+
+Required because UI behavior changed. Pending coordinator/user verification.
+
+App verification should confirm:
+
+### In `Anonimiseren`
+
+- anonymization workflow remains available;
+- source text/file input remains visible;
+- review table remains visible;
+- scrubbed TXT/CSV/DOCX/PDF downloads remain available;
+- Scrub Key JSON export remains available;
+- TXT reinsert upload UI is not presented as part of the anonymization workflow.
+
+### In `Originele waarden terugzetten`
+
+- `Scrub Key laden` remains visible;
+- Scrub Key upload/paste validation remains visible;
+- pasted-text reinsert remains visible;
+- `TXT-bestand terugzetten` is visible;
+- TXT upload accepts `.txt`;
+- `Zet TXT-bestand lokaal terug` works with a valid Scrub Key;
+- restored TXT text appears;
+- `Download hersteld TXT-bestand (.txt)` works;
+- audit summary appears;
+- warning about restored sensitive/confidential data is visible;
+- local-only / no-AI / no-cloud text is visible.
+
+Also confirm:
+
+- no DOCX upload reinsert UI appears yet;
+- no PDF reinsert appears;
+- no AI/cloud behavior appears;
+- existing Scrub Key export/import remains available.
+
+## Boundaries preserved
+
+- `presidio_streamlit.py` was not directly edited.
+- No DOCX upload reinsert UI added.
+- No PDF reinsert added.
+- No AI calls added.
+- No cloud processing added.
+- No automatic document rehydration beyond TXT local reinsert added.
+- No existing scrubbed TXT/CSV/DOCX/PDF export/download behavior intentionally changed.
+- No Scrub Key JSON export behavior intentionally changed.
+- No Scrub Key import/reload behavior intentionally changed except reusing the loaded key for TXT reinsert.
+- No Scrub Key storage, secrets, tokens or real personal data added.
+
+## Remaining risks
+
+- The UI is still generated by a startup patch, so Hugging Face app verification is essential.
+- TXT decode is UTF-8 based through the existing helper; invalid UTF-8 should produce validation issues.
+- Future DOCX upload reinsert UI must remain a separate WP14 workpackage.
+
+## Next recommended step
+
+```text
+WP13-CLOSEOUT — v13.7 TXT reinsert upload/download UI app verification closeout
+```
+
+Only after WP13 is app-verified should the project continue to:
+
+```text
+WP14 — v13.8 DOCX reinsert upload/download UI
+```