feat: permissions, a console for everyone who manages something, and catalog management

Phase 1 of docs/console.md: permissions as resource:action strings in role
bundles at a scope; the console for anyone controlling a catalog, product
or room, with a tagged audit log scoped by permission and filters;
catalog settings (rating ceiling, upload policy), key rotation, operators,
membership (approval, invitations, bans) enforced when getting and
wearing products, delisting, suspension, and the catalogs' changes feed.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/console/catalogs/page.tsx

@@ -1,23 +1,24 @@
 import type { Metadata } from "next";
+import Link from "next/link";
 import { CatalogStatus, membership } from "@/components/catalogs";
 import { ActionForm, SubmitButton } from "@/components/forms";
-import { PageHeader } from "@/components/status";
+import { PageHeader, Tag } from "@/components/status";
 import { DateTime } from "@/components/time";
 import { Card, CardContent } from "@/components/ui/card";
 import { Table, TableBody, TableCell, TableHead, TableHeader, TableRow } from "@/components/ui/table";
 import { api, unwrap } from "@/lib/api";
 import { decideCatalog } from "../actions";
-import { ConsoleNav, requireModerator } from "../console-nav";
+import { ConsoleNav, requireConsole } from "../console-nav";
 
 export const metadata: Metadata = { title: "Catalogs" };
 
 export default async function ConsoleCatalogs() {
-  await requireModerator("/console/catalogs");
-  const { catalogs } = unwrap(await api.console.catalogs.get());
+  await requireConsole("/console/catalogs");
+  const { catalogs, moderator } = unwrap(await api.console.catalogs.get());
 
   return (
     <>
-      <PageHeader title="Catalogs" />
+      <PageHeader title="Catalogs">{moderator ? "Every registered catalog." : "Catalogs you're on the team of."}</PageHeader>
       <ConsoleNav />
       <Card>
         <CardContent>
@@ -29,19 +30,22 @@ export default async function ConsoleCatalogs() {
                 <TableRow>
                   <TableHead>Name</TableHead>
                   <TableHead>Address</TableHead>
-                  <TableHead>Takedown contact</TableHead>
                   <TableHead>Access</TableHead>
                   <TableHead>Registered</TableHead>
                   <TableHead>Status</TableHead>
-                  <TableHead />
+                  {moderator && <TableHead />}
                 </TableRow>
               </TableHeader>
               <TableBody>
                 {catalogs.map((c) => (
                   <TableRow key={c.id}>
-                    <TableCell className="font-medium">{c.name}</TableCell>
+                    <TableCell className="font-medium">
+                      <Link href={`/console/catalogs/${c.id}`} className="underline-offset-4 hover:underline">
+                        {c.name}
+                      </Link>{" "}
+                      {c.mine ? <Tag>owner</Tag> : c.team ? <Tag>team</Tag> : null}
+                    </TableCell>
                     <TableCell className="font-mono text-xs">{c.url}</TableCell>
-                    <TableCell className="text-muted-foreground">{c.contact}</TableCell>
                     <TableCell className="text-muted-foreground">
                       <span className="capitalize">{c.visibility}</span>, {membership[c.membership]?.toLowerCase() ?? c.membership}
                     </TableCell>
@@ -51,29 +55,31 @@ export default async function ConsoleCatalogs() {
                     <TableCell>
                       <CatalogStatus status={c.status} />
                     </TableCell>
-                    <TableCell className="text-right">
-                      <ActionForm action={decideCatalog} fields={{ id: c.id }} className="space-y-1">
-                        <div className="flex justify-end gap-2">
-                          {c.status !== "approved" && (
-                            <SubmitButton size="sm" name="decision" value="approve" pendingLabel="Approving…">
-                              Approve
-                            </SubmitButton>
-                          )}
-                          {c.status !== "rejected" && (
-                            <SubmitButton
-                              size="sm"
-                              variant="outline"
-                              name="decision"
-                              value="reject"
-                              pendingLabel="Rejecting…"
-                              confirm={`Reject ${c.name}?`}
-                            >
-                              Reject
-                            </SubmitButton>
-                          )}
-                        </div>
-                      </ActionForm>
-                    </TableCell>
+                    {moderator && (
+                      <TableCell className="text-right">
+                        {(c.status === "pending" || c.status === "rejected") && (
+                          <ActionForm action={decideCatalog} fields={{ id: c.id }} className="space-y-1">
+                            <div className="flex justify-end gap-2">
+                              <SubmitButton size="sm" name="decision" value="approve" pendingLabel="Approving…">
+                                Approve
+                              </SubmitButton>
+                              {c.status !== "rejected" && (
+                                <SubmitButton
+                                  size="sm"
+                                  variant="outline"
+                                  name="decision"
+                                  value="reject"
+                                  pendingLabel="Rejecting…"
+                                  confirm={`Reject ${c.name}?`}
+                                >
+                                  Reject
+                                </SubmitButton>
+                              )}
+                            </div>
+                          </ActionForm>
+                        )}
+                      </TableCell>
+                    )}
                   </TableRow>
                 ))}
               </TableBody>