Phase 1 of `docs/console.md` (builds on #6, whose docs commit it includes; merge #6 first). **API** - `permissions.ts`: `resource:action` permissions, built-in roles as bundles at a scope (hub, catalog, product), `can`/`require`, "may give" checks. A missing permission answers 403 with `missing: {permission, scope}`. - Catalog management: settings (incl. rating ceiling, upload policy, mirroring), key rotation, operators, membership (open / approval / invite links, bans), delisting, suspension by moderators, and `GET /api/v1/catalog/changes` for catalogs. - Membership is enforced: getting a product (403 `members_only` with the catalogs to join), the library list, and outfits relayed to others. Seeing products still needs no membership. - Console for everyone who controls a catalog, product or hosted room; `/console/audit` (tagged entries, scoped by permission, with filters), `/console/permissions`; `/me` says whether the console is for them. - Migration 0010: `role_assignment`, `catalog_member`, `catalog_invite`, `catalog_change`, catalog settings, audit `tags` (backfilled from old entries). **Website** - Console overview by what you manage; audit log page with filters; catalog list scoped to your teams; a catalog management page (settings, key, team, members, invitations, products, moderation, recent changes). - Public catalog pages with join / ask / accept invitation / leave; product pages say "members only" and link the catalogs. **Checked**: 43 API tests pass (8 new in `catalogs.test.ts`); API, web and db type checks; every new page rendered against a local hub for owner, operator, member, outsider and admin; the Eden DELETE-with-query calls tested against the API. Server-action forms weren't clicked through in a browser. Not in this PR (later phases): catalog deletion requests (with cases), drafts and moderator product edits, notifications, API tokens, two-factor, imports, charts. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Phase 1 of `docs/console.md` (builds on #6, whose docs commit it includes; merge #6 first). **API** - `permissions.ts`: `resource:action` permissions, built-in roles as bundles at a scope (hub, catalog, product), `can`/`require`, "may give" checks. A missing permission answers 403 with `missing: {permission, scope}`. - Catalog management: settings (incl. rating ceiling, upload policy, mirroring), key rotation, operators, membership (open / approval / invite links, bans), delisting, suspension by moderators, and `GET /api/v1/catalog/changes` for catalogs. - Membership is enforced: getting a product (403 `members_only` with the catalogs to join), the library list, and outfits relayed to others. Seeing products still needs no membership. - Console for everyone who controls a catalog, product or hosted room; `/console/audit` (tagged entries, scoped by permission, with filters), `/console/permissions`; `/me` says whether the console is for them. - Migration 0010: `role_assignment`, `catalog_member`, `catalog_invite`, `catalog_change`, catalog settings, audit `tags` (backfilled from old entries). **Website** - Console overview by what you manage; audit log page with filters; catalog list scoped to your teams; a catalog management page (settings, key, team, members, invitations, products, moderation, recent changes). - Public catalog pages with join / ask / accept invitation / leave; product pages say "members only" and link the catalogs. **Checked**: 43 API tests pass (8 new in `catalogs.test.ts`); API, web and db type checks; every new page rendered against a local hub for owner, operator, member, outsider and admin; the Eden DELETE-with-query calls tested against the API. Server-action forms weren't clicked through in a browser. Not in this PR (later phases): catalog deletion requests (with cases), drafts and moderator product edits, notifications, API tokens, two-factor, imports, charts. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: dhkatz <[email protected]>
68 lines
3.2 KiB
TypeScript
68 lines
3.2 KiB
TypeScript
import type { Metadata } from "next";
|
|
import Link from "next/link";
|
|
import { PageHeader } from "@/components/status";
|
|
import { Button, buttonVariants } from "@/components/ui/button";
|
|
import { Card, CardContent } from "@/components/ui/card";
|
|
import { Input } from "@/components/ui/input";
|
|
import { api, unwrap } from "@/lib/api";
|
|
import { AuditTable } from "../audit-table";
|
|
import { ConsoleNav, requireConsole } from "../console-nav";
|
|
|
|
export const metadata: Metadata = { title: "Audit Log" };
|
|
|
|
const filters = ["action", "actor", "person", "catalog", "product", "room", "q", "from", "to"] as const;
|
|
type Filters = Partial<Record<(typeof filters)[number], string>>;
|
|
|
|
export default async function AuditPage({ searchParams }: { searchParams: Promise<Record<string, string | string[]>> }) {
|
|
const { console: data } = await requireConsole("/console/audit");
|
|
const params = await searchParams;
|
|
const f: Filters = {};
|
|
for (const k of filters) {
|
|
const v = params[k];
|
|
if (typeof v === "string" && v.trim()) f[k] = v.trim().slice(0, 100);
|
|
}
|
|
const before = typeof params.before === "string" && /^\d+$/.test(params.before) ? Number(params.before) : undefined;
|
|
const { entries, before: next } = unwrap(await api.console.audit.get({ query: { ...f, ...(before ? { before } : {}), limit: 100 } }));
|
|
const older = new URLSearchParams({ ...f, ...(next ? { before: String(next) } : {}) });
|
|
const moderator = data.moderation !== null;
|
|
|
|
return (
|
|
<>
|
|
<PageHeader title="Audit Log">
|
|
{moderator ? "Every change on the hub." : "Changes to what you manage, and the ones you made."}
|
|
</PageHeader>
|
|
<ConsoleNav />
|
|
<form action="/console/audit" className="mb-6 grid gap-2 sm:grid-cols-2 lg:grid-cols-4">
|
|
<Input name="q" defaultValue={f.q} placeholder="Search" aria-label="Search" />
|
|
<Input name="action" defaultValue={f.action} placeholder="Action, e.g. catalog." aria-label="Action" />
|
|
<Input name="actor" defaultValue={f.actor} placeholder="Done by (username)" aria-label="Done by" />
|
|
{moderator && <Input name="person" defaultValue={f.person} placeholder="About or by a person" aria-label="Person" />}
|
|
<Input name="catalog" defaultValue={f.catalog} placeholder="Catalog ID" aria-label="Catalog" />
|
|
<Input name="product" defaultValue={f.product} placeholder="Product ID" aria-label="Product" />
|
|
<Input type="date" name="from" defaultValue={f.from} aria-label="From" />
|
|
<Input type="date" name="to" defaultValue={f.to} aria-label="To" />
|
|
<div className="flex gap-2">
|
|
<Button type="submit">Filter</Button>
|
|
{Object.keys(f).length > 0 && (
|
|
<Link href="/console/audit" className={buttonVariants({ variant: "outline" })}>
|
|
Clear
|
|
</Link>
|
|
)}
|
|
</div>
|
|
</form>
|
|
<Card>
|
|
<CardContent>
|
|
<AuditTable entries={entries} empty={Object.keys(f).length ? "Nothing matches." : "Nothing yet."} />
|
|
</CardContent>
|
|
</Card>
|
|
{next && entries.length === 100 && (
|
|
<div className="mt-4">
|
|
<Link href={`/console/audit?${older}`} className={buttonVariants({ variant: "outline" })}>
|
|
Older
|
|
</Link>
|
|
</div>
|
|
)}
|
|
</>
|
|
);
|
|
}
|