@bygghammar/cms-platform 0.51.0 → 0.53.0

package/CHANGELOG.md

@@ -1,5 +1,27 @@
 # Changelog
 
+## 0.53.0
+
+- `admin/describe-log`: one place that turns action codes and JSON meta into
+  ordinary English sentences for the Audit, Activity and Email log views.
+- `server/audit-core`: `auditAs` lets any staff-guarded core log through the
+  caller's own client, and every entry now stores its sentence in
+  `meta.summary` at write time.
+- `server/email-log-core`: `logEmail` records every send attempt — form
+  notifications, auto-replies, provider tests and account emails — with a
+  purpose and a sentence. Form delivery and the backoffice test send both go
+  through it.
+- Content records, language domains, redirects, site settings, image focus
+  points, image text and submission/delivery actions are now audited.
+- `AuditView`/`EmailLogsView`: rows lead with the sentence; codes stay in the
+  expanded detail only.
+
+## 0.52.0
+
+- `IndexingStatusCard`: read-only search-engine indexing status (from
+  `site/indexing`), shown on the SEO list and SEO detail views via a new
+  optional `indexing` dep — the same box as Admin → Site settings.
+
 ## 0.51.0
 
 - `site/indexing`: environment-derived search-engine policy (`SITE_INDEXING`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bygghammar/cms-platform",
-  "version": "0.51.0",
+  "version": "0.53.0",
   "description": "Shared CMS platform: blocks, block types, i18n core, UI primitives and design-token contract used by every Bygghammar/Voyara site.",
   "type": "module",
   "sideEffects": [
@@ -141,7 +141,9 @@
     "./backoffice/BlocksLibraryView": "./src/backoffice/BlocksLibraryView.tsx",
     "./backoffice/SharedContentListView": "./src/backoffice/SharedContentListView.tsx",
     "./backoffice/seo/SeoListView": "./src/backoffice/seo/SeoListView.tsx",
+    "./admin/describe-log": "./src/admin/describe-log.ts",
     "./server/audit-core": "./src/server/audit-core.ts",
+    "./server/email-log-core": "./src/server/email-log-core.ts",
     "./server/review-image-validate": "./src/server/review-image-validate.ts",
     "./server/media-library-core": "./src/server/media-library-core.ts",
     "./server/admin-core": "./src/server/admin-core.ts",
@@ -197,7 +199,8 @@
     "./runtime/error-reporting": "./src/runtime/error-reporting.ts",
     "./server/media-usage-host": "./src/server/media-usage-host.ts",
     "./runtime/server-entry": "./src/runtime/server-entry.ts",
-    "./site/indexing": "./src/site/indexing.ts"
+    "./site/indexing": "./src/site/indexing.ts",
+    "./backoffice/IndexingStatusCard": "./src/backoffice/IndexingStatusCard.tsx"
   },
   "dependencies": {
     "fflate": "^0.8.3"

package/src/admin/describe-log.ts

@@ -0,0 +1,229 @@
+/**
+ * Plain-English descriptions for audit and email log rows.
+ *
+ * Everything an editor sees in the Activity, Audit and Email log views is
+ * written here in ordinary sentences — never raw action codes, table names or
+ * JSON. The same module runs on the server, where each log row gets its sentence
+ * stored in `meta.summary` at write time, so the wording survives even if the
+ * label tables later change.
+ */
+
+export const ACTION_LABELS: Record<string, string> = {
+  "user.create": "Created user",
+  "user.delete": "Deleted user",
+  "user.password_reset": "Set a new password",
+  "user.send_reset": "Sent a password reset email",
+  "user.set_roles": "Changed user roles",
+  "user.invite": "Invited user",
+  "role.grant": "Granted role",
+  "role.revoke": "Revoked role",
+  "role.update": "Updated role",
+  "email.settings.update": "Updated email settings",
+  "email_settings.update": "Updated email settings",
+  "email.settings.test": "Sent test email",
+  "email_provider.create": "Added email provider",
+  "email_provider.update": "Updated email provider",
+  "email_provider.delete": "Deleted email provider",
+  "email_provider.test_send": "Sent a test email",
+  "content.section.save": "Saved content",
+  "content.section.delete": "Deleted content",
+  "site_settings.update": "Updated site settings",
+  "site_settings.clear": "Reset a site setting to the code default",
+  "page.create": "Created page",
+  "page.update": "Updated page",
+  "page.delete": "Deleted page",
+  "page.publish": "Published page",
+  "page.unpublish": "Unpublished page",
+  "page.version.create": "Saved page version",
+  "page.version.restore": "Restored page version",
+  "template.create": "Created block template",
+  "template.update": "Updated block template",
+  "template.delete": "Deleted block template",
+  "global.section.save": "Saved global block",
+  "global.section.delete": "Deleted global block",
+  "domain.create": "Added language domain",
+  "domain.update": "Updated language domain",
+  "domain.save": "Saved language domain",
+  "domain.delete": "Removed language domain",
+  "seo.update": "Updated SEO settings",
+  "seo.delete": "Removed SEO settings",
+  "redirect.save": "Saved redirect",
+  "redirect.delete": "Deleted redirect",
+  "media.upload": "Uploaded media",
+  "media.delete": "Deleted media",
+  "media.import": "Imported external media",
+  "media.replace": "Replaced an image",
+  "media.focus.set": "Set an image focus point",
+  "media.focus.clear": "Cleared an image focus point",
+  "media.meta.set": "Updated image text",
+  "media.meta.clear": "Cleared image text",
+  "submission.partial.delete": "Deleted saved partial submissions",
+  "delivery.resolve": "Marked delivery attempts as resolved",
+  "translate.run": "Ran auto-translation",
+  "form.create": "Created form",
+  "form.update": "Updated form",
+  "form.duplicate": "Duplicated form",
+  "form.soft_delete": "Moved form to bin",
+  "form.restore": "Restored form",
+  "form.purge": "Permanently deleted form",
+  "form.defaults.update": "Updated shared form defaults",
+  "submission.status": "Changed a submission status",
+  "submission.purge": "Removed old submissions",
+  "submission.sheet_push": "Sent submissions to the spreadsheet",
+  "submission.delivery_retry": "Retried a failed delivery",
+  "submission.delivery_resolve": "Marked a delivery problem as resolved",
+  "submission.partials_delete": "Deleted saved drafts",
+  "backup.export": "Exported a backup",
+  "backup.import": "Restored from a backup",
+  "auth.login": "Signed in",
+  "auth.logout": "Signed out",
+};
+
+export const ENTITY_LABELS: Record<string, string> = {
+  user: "user",
+  "auth.users": "user",
+  user_role: "role",
+  user_roles: "roles",
+  content_section: "content record",
+  content_sections: "content record",
+  site_settings: "site settings",
+  page: "page",
+  page_version: "page version",
+  page_publication: "publication",
+  block_template: "template",
+  global_section: "global block",
+  locale_domain: "language domain",
+  locale_domains: "language domain",
+  page_seo: "SEO settings",
+  email_settings: "email settings",
+  email_providers: "email provider",
+  media: "media file",
+  media_focus: "image focus point",
+  media_meta: "image text",
+  redirect: "redirect",
+  redirects: "redirect",
+  forms: "form",
+  form_submissions: "submission",
+  form_partials: "saved draft",
+  form_delivery_attempts: "delivery attempt",
+  translations: "translations",
+  backup: "backup",
+};
+
+export function humanizeAction(action: string | null | undefined): string {
+  if (!action) return "—";
+  const label = ACTION_LABELS[action];
+  if (label) return label;
+  return action
+    .replace(/[._-]+/g, " ")
+    .replace(/\s+/g, " ")
+    .trim()
+    .replace(/^./, (c) => c.toUpperCase());
+}
+
+export function humanizeEntity(entity: string | null | undefined): string {
+  if (!entity) return "—";
+  const label = ENTITY_LABELS[entity];
+  if (label) return label.replace(/^./, (c) => c.toUpperCase());
+  return entity.replace(/[._-]+/g, " ").replace(/^./, (c) => c.toUpperCase());
+}
+
+/** Lower-case noun for use inside a sentence, e.g. "the page". */
+export function entityNoun(entity: string | null | undefined): string {
+  if (!entity) return "record";
+  return ENTITY_LABELS[entity] ?? entity.replace(/[._-]+/g, " ").toLowerCase();
+}
+
+const isUuid = (v: string) => /^[0-9a-f]{8}-[0-9a-f]{4}-/i.test(v);
+
+function metaString(meta: Record<string, unknown>, keys: string[]): string | null {
+  for (const key of keys) {
+    const value = meta[key];
+    if (typeof value === "string" && value.trim()) return value.trim();
+    if (typeof value === "number") return String(value);
+  }
+  return null;
+}
+
+/**
+ * One sentence describing what happened, in ordinary English.
+ *
+ * Uses whatever human-friendly handle the meta payload carries (name, key,
+ * email, path) and only falls back to an identifier when nothing better exists.
+ */
+export function describeAudit(input: {
+  action: string;
+  entity?: string | null;
+  entityId?: string | null;
+  meta?: Record<string, unknown> | null;
+}): string {
+  const meta = (input.meta ?? {}) as Record<string, unknown>;
+  const existing = metaString(meta, ["summary"]);
+  if (existing) return existing;
+
+  const verb = humanizeAction(input.action);
+  const noun = entityNoun(input.entity);
+  const handle =
+    metaString(meta, ["name", "title", "email", "key", "path", "from_path", "domain", "locale"]) ??
+    (input.entityId && !isUuid(input.entityId) ? input.entityId : null);
+
+  const firstWord = noun.split(" ")[0] ?? "";
+  const alreadyNamesEntity = firstWord ? verb.toLowerCase().includes(firstWord) : false;
+  const subject = alreadyNamesEntity ? "" : ` the ${noun}`;
+  const named = handle ? ` “${handle}”` : "";
+
+  let sentence = `${verb}${subject}${named}`.replace(/\s+/g, " ").trim();
+
+  const extras: string[] = [];
+  const roles = meta["roles"];
+  if (Array.isArray(roles) && roles.length) extras.push(`roles: ${roles.join(", ")}`);
+  const to = metaString(meta, ["to_path"]);
+  if (to && input.action.startsWith("redirect")) extras.push(`now points to ${to}`);
+  const count = meta["count"] ?? meta["deleted"] ?? meta["updated"];
+  if (typeof count === "number") extras.push(`${count} item${count === 1 ? "" : "s"}`);
+  const status = metaString(meta, ["status"]);
+  if (status && input.action.startsWith("submission.status")) extras.push(`set to ${status}`);
+  const reason = metaString(meta, ["reason", "note"]);
+  if (reason) extras.push(reason);
+
+  if (extras.length) sentence += ` — ${extras.join("; ")}`;
+  if (!/[.!?]$/.test(sentence)) sentence += ".";
+  return sentence;
+}
+
+/** One sentence describing an email attempt. */
+export function describeEmail(input: {
+  status: string;
+  to: string;
+  subject?: string | null;
+  provider?: string | null;
+  purpose?: string | null;
+  error?: string | null;
+}): string {
+  const purposeLabel = humanizeEmailPurpose(input.purpose);
+  const lead = purposeLabel ? `${purposeLabel} email` : "Email";
+  const subject = input.subject ? ` “${input.subject}”` : "";
+  const via = input.provider ? ` via ${input.provider}` : "";
+  const ok = input.status === "sent" || input.status === "delivered";
+  const verb = ok ? "sent to" : "could not be sent to";
+  const tail = !ok && input.error ? ` — ${input.error}` : "";
+  return `${lead}${subject} ${verb} ${input.to}${via}${tail}.`;
+}
+
+/** Friendly names for the purposes app emails are sent for. */
+export const EMAIL_PURPOSE_LABELS: Record<string, string> = {
+  form_notification: "Form notification",
+  form_autoreply: "Form auto-reply",
+  form_test: "Form test",
+  provider_test: "Provider test",
+  password_reset: "Password reset",
+  user_invite: "New account",
+};
+
+export function humanizeEmailPurpose(purpose: string | null | undefined): string | null {
+  if (!purpose) return null;
+  return (
+    EMAIL_PURPOSE_LABELS[purpose] ??
+    purpose.replace(/[._-]+/g, " ").replace(/^./, (c) => c.toUpperCase())
+  );
+}

package/src/admin/format-log.ts

@@ -1,83 +1,18 @@
 // Turn machine action codes and JSON meta into human-readable strings for the
-// backoffice Audit and Email log views.
+// backoffice Audit and Email log views. All wording lives in `describe-log`.
 
-const ACTION_LABELS: Record<string, string> = {
-  "user.create": "Created user",
-  "user.delete": "Deleted user",
-  "user.password_reset": "Reset password",
-  "user.invite": "Invited user",
-  "role.grant": "Granted role",
-  "role.revoke": "Revoked role",
-  "role.update": "Updated role",
-  "email.settings.update": "Updated email settings",
-  "email.settings.test": "Sent test email",
-  "content.section.save": "Saved section",
-  "content.section.delete": "Deleted section",
-  "page.create": "Created page",
-  "page.update": "Updated page",
-  "page.delete": "Deleted page",
-  "page.publish": "Published page",
-  "page.unpublish": "Unpublished page",
-  "page.version.create": "Saved page version",
-  "page.version.restore": "Restored page version",
-  "template.create": "Created block template",
-  "template.update": "Updated block template",
-  "template.delete": "Deleted block template",
-  "global.section.save": "Saved global block",
-  "global.section.delete": "Deleted global block",
-  "domain.create": "Added locale domain",
-  "domain.update": "Updated locale domain",
-  "domain.delete": "Removed locale domain",
-  "seo.update": "Updated SEO",
-  "media.upload": "Uploaded media",
-  "media.delete": "Deleted media",
-  "media.import": "Imported external media",
-  "translate.run": "Ran auto-translation",
-  "form.create": "Created form",
-  "form.update": "Updated form",
-  "form.duplicate": "Duplicated form",
-  "form.soft_delete": "Moved form to bin",
-  "form.restore": "Restored form",
-  "form.purge": "Permanently deleted form",
-  "form.defaults.update": "Updated shared form defaults",
-  "auth.login": "Signed in",
-  "auth.logout": "Signed out",
-};
+export {
+  ACTION_LABELS,
+  ENTITY_LABELS,
+  describeAudit,
+  describeEmail,
+  entityNoun,
+  humanizeAction,
+  humanizeEmailPurpose,
+  humanizeEntity,
+} from "./describe-log";
 
-const ENTITY_LABELS: Record<string, string> = {
-  user: "User",
-  user_role: "Role",
-  content_section: "Section",
-  page: "Page",
-  page_version: "Page version",
-  page_publication: "Publication",
-  block_template: "Template",
-  global_section: "Global block",
-  locale_domain: "Domain",
-  page_seo: "SEO",
-  email_settings: "Email settings",
-  media: "Media",
-  redirect: "Redirect",
-  forms: "Form",
-};
-
-export function humanizeAction(action: string | null | undefined): string {
-  if (!action) return "—";
-  if (ACTION_LABELS[action]) return ACTION_LABELS[action];
-  // Fallback: turn "some.snake_case.action" into "Some snake case action".
-  return action
-    .replace(/[._-]+/g, " ")
-    .replace(/\s+/g, " ")
-    .trim()
-    .replace(/^./, (c) => c.toUpperCase());
-}
-
-export function humanizeEntity(entity: string | null | undefined): string {
-  if (!entity) return "—";
-  return (
-    ENTITY_LABELS[entity] ?? entity.replace(/[._-]+/g, " ").replace(/^./, (c) => c.toUpperCase())
-  );
-}
+import { describeAudit, humanizeEntity } from "./describe-log";
 
 function shortId(id: string): string {
   if (id.length <= 12) return id;
@@ -105,6 +40,7 @@ export function summarizeMeta(meta: unknown): string {
   if (!Object.keys(m).length) return "";
 
   const parts: string[] = [];
+  // `summary` is rendered on its own as the row's sentence — never repeat it here.
   const push = (label: string, value: unknown) => {
     if (value == null || value === "") return;
     if (typeof value === "object") {
@@ -120,7 +56,6 @@ export function summarizeMeta(meta: unknown): string {
 
   // Common well-known fields, in a nice order
   const known = [
-    ["summary", "Summary"],
     ["email", "Email"],
     ["role", "Role"],
     ["name", "Name"],
@@ -146,7 +81,7 @@ export function summarizeMeta(meta: unknown): string {
   }
   // Any remaining keys, up to 4 total extra fields
   const extras = Object.keys(m)
-    .filter((k) => !used.has(k))
+    .filter((k) => !used.has(k) && k !== "summary")
     .slice(0, 4);
   for (const k of extras) {
     push(
@@ -215,3 +150,28 @@ export function emailStatusTone(status: string | null | undefined): {
     }
   );
 }
+
+
+/**
+ * The plain-English sentence for one audit row: the stored `meta.summary`
+ * written at the time of the action, or a sentence derived from the row.
+ */
+export function auditSentence(row: {
+  action: string;
+  entity?: string | null;
+  entity_id?: string | null;
+  meta?: Record<string, unknown> | null;
+}): string {
+  return describeAudit({
+    action: row.action,
+    entity: row.entity ?? null,
+    entityId: row.entity_id ?? null,
+    meta: row.meta ?? null,
+  });
+}
+
+/** The plain-English sentence stored with an email log row, when present. */
+export function emailSentence(row: { meta?: Record<string, unknown> | null }): string {
+  const summary = row.meta?.["summary"];
+  return typeof summary === "string" ? summary : "";
+}

package/src/backoffice/AuditView.tsx

@@ -1,6 +1,7 @@
 import { Fragment, useMemo, useState } from "react";
 
 import {
+  auditSentence,
   formatAbsoluteTime,
   formatEntityRef,
   formatRelativeTime,
@@ -35,6 +36,7 @@ export function AuditView({ rows }: { rows: AuditLogRow[] }) {
         r.actor_email,
         r.action,
         humanizeAction(r.action),
+        auditSentence(r),
         r.entity,
         r.entity_id,
         JSON.stringify(r.meta ?? {}),
@@ -77,6 +79,7 @@ export function AuditView({ rows }: { rows: AuditLogRow[] }) {
           </thead>
           <tbody>
             {filtered.map((r) => {
+              const sentence = auditSentence(r);
               const summary = summarizeMeta(r.meta as never);
               const isOpen = expanded === r.id;
               return (
@@ -100,7 +103,7 @@ export function AuditView({ rows }: { rows: AuditLogRow[] }) {
                       )}
                     </td>
                     <td className="p-3">
-                      <div className="text-ink">{humanizeAction(r.action)}</div>
+                      <div className="text-ink">{sentence}</div>
                       {summary && (
                         <div className="text-[0.7rem] text-ink/60 mt-1 line-clamp-2">{summary}</div>
                       )}

package/src/backoffice/EmailLogsView.tsx

@@ -1,6 +1,12 @@
 import { Fragment, useMemo, useState } from "react";
 
-import { emailStatusTone, formatAbsoluteTime, formatRelativeTime } from "../admin/format-log";
+import {
+  emailSentence,
+  emailStatusTone,
+  formatAbsoluteTime,
+  formatRelativeTime,
+  humanizeEmailPurpose,
+} from "../admin/format-log";
 
 /** One outgoing email attempt. */
 export type EmailLogRow = {
@@ -33,7 +39,17 @@ export function EmailLogsView({ rows }: { rows: EmailLogRow[] }) {
     return rows.filter((r) => {
       if (status !== "all" && r.status !== status) return false;
       if (!s) return true;
-      const hay = [r.to_address, r.from_address, r.subject, r.provider, r.error]
+      const hay = [
+        r.to_address,
+        r.from_address,
+        r.subject,
+        r.provider,
+        r.error,
+        emailSentence(r),
+        humanizeEmailPurpose(
+          typeof r.meta?.["purpose"] === "string" ? (r.meta["purpose"] as string) : null,
+        ),
+      ]
         .filter(Boolean)
         .join(" ")
         .toLowerCase();
@@ -88,6 +104,10 @@ export function EmailLogsView({ rows }: { rows: EmailLogRow[] }) {
           <tbody>
             {filtered.map((r) => {
               const tone = emailStatusTone(r.status);
+              const purpose = humanizeEmailPurpose(
+                typeof r.meta?.["purpose"] === "string" ? (r.meta["purpose"] as string) : null,
+              );
+              const sentence = emailSentence(r);
               const isOpen = expanded === r.id;
               return (
                 <Fragment key={r.id}>
@@ -109,6 +129,11 @@ export function EmailLogsView({ rows }: { rows: EmailLogRow[] }) {
                     </td>
                     <td className="p-3">
                       <div className="text-ink">{r.subject ?? "(no subject)"}</div>
+                      {purpose && (
+                        <div className="text-[0.65rem] uppercase tracking-[0.15em] text-ink/50 mt-1">
+                          {purpose}
+                        </div>
+                      )}
                       {r.body_preview && (
                         <div className="text-[0.7rem] text-ink/50 mt-1 line-clamp-1">
                           {r.body_preview}
@@ -133,6 +158,7 @@ export function EmailLogsView({ rows }: { rows: EmailLogRow[] }) {
                   {isOpen && (
                     <tr className="bg-ink/[0.02] border-t border-ink/10">
                       <td colSpan={6} className="p-4 space-y-3 text-xs">
+                        {sentence && <p className="text-ink/80">{sentence}</p>}
                         <dl className="grid grid-cols-1 md:grid-cols-2 gap-x-8 gap-y-2">
                           <DetailRow label="To" value={r.to_address} />
                           <DetailRow label="From" value={r.from_address ?? "—"} />

package/src/backoffice/IndexingStatusCard.tsx

@@ -0,0 +1,43 @@
+import type { ReactNode } from "react";
+
+import type { IndexingPolicy } from "../site/indexing";
+
+/**
+ * Read-only search-engine indexing status, resolved server-side from the
+ * environment (`SITE_INDEXING` / `SITE_ENV` — see `site/indexing`). Shown on
+ * Site settings and the SEO screens so a blocked staging deployment is
+ * visible wherever metadata is edited. Never a database toggle: indexing is
+ * an environment fact so a content restore cannot flip it.
+ */
+export function IndexingStatusCard({
+  indexing,
+}: {
+  indexing?: IndexingPolicy;
+}): ReactNode {
+  const status = indexing
+    ? indexing.mode === "block"
+      ? "Blocked — not indexed"
+      : "Indexed"
+    : "Unknown";
+  const source = indexing
+    ? indexing.source === "SITE_INDEXING"
+      ? `From SITE_INDEXING=${indexing.value}`
+      : indexing.source === "SITE_ENV"
+        ? `From SITE_ENV=${indexing.value}`
+        : "Safe default — SITE_INDEXING unset"
+    : "Set SITE_INDEXING per environment";
+
+  return (
+    <div className="max-w-sm border border-ink/10 bg-white p-4">
+      <div className="text-xs uppercase tracking-wider text-ink/50">Search engines</div>
+      <div className="mt-1 text-sm text-ink">{status}</div>
+      <div className="mt-2 text-[11px] uppercase tracking-wider text-ink/40">{source}</div>
+      <p className="mt-3 text-xs text-ink/50">
+        Indexing is an environment fact, not a setting here: set <code>SITE_INDEXING=off</code> on
+        staging and <code>SITE_INDEXING=on</code> in production. A blocked deployment serves{" "}
+        <code>Disallow: /</code> in robots.txt and a <code>noindex, nofollow</code> header on every
+        response.
+      </p>
+    </div>
+  );
+}

package/src/backoffice/seo/SeoListView.tsx

@@ -7,6 +7,9 @@
 import type { ReactNode } from "react";
 import { Check, ChevronLeft, ChevronRight } from "lucide-react";
 
+import type { IndexingPolicy } from "../../site/indexing";
+import { IndexingStatusCard } from "../IndexingStatusCard";
+
 export type SeoListRow = {
   /** Page key, e.g. `index` or a CMS-only page key. */
   key: string;
@@ -21,10 +24,15 @@ export type SeoListDeps = {
   rows: readonly SeoListRow[];
   /** Navigate to the SEO editor for one page key. */
   openEditor: (key: string) => void;
+  /**
+   * Indexing policy for the running deployment, resolved from the environment
+   * server-side (see `site/indexing`). Shown read-only, same as Site settings.
+   */
+  indexing?: IndexingPolicy;
 };
 
 export function SeoListView({ deps }: { deps: SeoListDeps }): ReactNode {
-  const { rows, openEditor } = deps;
+  const { rows, openEditor, indexing } = deps;
 
   return (
     <div className="p-8 md:p-12 w-full">
@@ -36,6 +44,10 @@ export function SeoListView({ deps }: { deps: SeoListDeps }): ReactNode {
         defaults from the codebase and are used directly by canonical, hreflang and sitemap.
       </p>
 
+      <div className="mt-6">
+        <IndexingStatusCard indexing={indexing} />
+      </div>
+
       <ul className="mt-10 divide-y divide-ink/10 border-y border-ink/10">
         {rows.map((row) => (
           <li key={row.key}>
@@ -73,10 +85,15 @@ export type SeoDetailDeps = {
   onBack: () => void;
   /** The host's page SEO panel for this page key. */
   children: ReactNode;
+  /**
+   * Indexing policy for the running deployment, resolved from the environment
+   * server-side (see `site/indexing`). Shown read-only, same as Site settings.
+   */
+  indexing?: IndexingPolicy;
 };
 
 export function SeoDetailView({ deps }: { deps: SeoDetailDeps }): ReactNode {
-  const { pageKey, onBack, children } = deps;
+  const { pageKey, onBack, children, indexing } = deps;
 
   return (
     <div className="p-8 md:p-12 w-full">
@@ -98,6 +115,10 @@ export function SeoDetailView({ deps }: { deps: SeoDetailDeps }): ReactNode {
         hreflang, Open Graph and Twitter cards.
       </p>
 
+      <div className="mt-6">
+        <IndexingStatusCard indexing={indexing} />
+      </div>
+
       <div className="mt-8">{children}</div>
     </div>
   );

package/src/server/admin-core.ts

@@ -15,6 +15,7 @@ import type { SupabaseClient } from "@supabase/supabase-js";
 
 import { writeAudit } from "./audit-core";
 import { actorEmail, assertRole, assertStaff, type PlatformAuthContext } from "./guards";
+import { logEmail } from "./email-log-core";
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 
@@ -111,6 +112,15 @@ export async function createUserCore(
       .from("user_roles")
       .insert(roles.map((role) => ({ user_id: uid, role })));
   }
+  if (!input.password) {
+    await logEmail(anyClient(admin), {
+      to: input.email,
+      subject: "Your new account",
+      provider: "Authentication service",
+      status: "sent",
+      purpose: "user_invite",
+    });
+  }
   await audit(deps, "user.create", "auth.users", uid, { email: input.email, roles });
   return { id: uid };
 }
@@ -153,6 +163,13 @@ export async function sendPasswordResetEmailCore(
     email: input.email,
   });
   if (error) throw new Error(error.message);
+  await logEmail(anyClient(admin), {
+    to: input.email,
+    subject: "Password reset",
+    provider: "Authentication service",
+    status: "sent",
+    purpose: "password_reset",
+  });
   await audit(deps, "user.send_reset", "auth.users", undefined, { email: input.email });
   return { ok: true };
 }
@@ -359,19 +376,18 @@ export async function sendTestEmailCore(
       )
     : ({ ok: false, error: "No from address configured for this provider or in the email settings." } as const);
 
-  await anyClient(admin)
-    .from("email_logs")
-    .insert({
-      to_address: input.to,
-      from_address: fromEmail,
-      reply_to: replyTo,
-      subject,
-      body_preview: text.slice(0, 200),
-      provider: provider.name,
-      status: result.ok ? "sent" : "failed",
-      error: result.ok ? null : result.error,
-      meta: { kind: provider.kind, provider_id: provider.id, test: true },
-    });
+  await logEmail(anyClient(admin), {
+    to: input.to,
+    from: fromEmail,
+    replyTo: replyTo,
+    subject,
+    bodyPreview: text,
+    provider: provider.name,
+    status: result.ok ? "sent" : "failed",
+    error: result.ok ? null : result.error,
+    purpose: "provider_test",
+    meta: { kind: provider.kind, provider_id: provider.id, test: true },
+  });
 
   await audit(deps, "email_provider.test_send", "email_providers", provider.id, {
     to: input.to,

package/src/server/audit-core.ts

@@ -2,19 +2,20 @@
  * Host-agnostic audit trail writer.
  *
  * Every platform core records what an editor did in the append-only
- * `audit_logs` table. The host passes a privileged client because the trail must
- * be written even when the acting user cannot read it back, and the entry always
- * carries the acting user's id and email so the log stays attributable.
+ * `audit_logs` table. Entries always carry the acting user's id and email, and
+ * always carry a plain-English sentence in `meta.summary` describing what
+ * happened, so the Audit view never has to show raw codes.
  *
  * Auditing is deliberately best-effort: a failed log entry never fails the
  * operation the editor asked for.
  */
+import { describeAudit } from "../admin/describe-log";
 import type { PlatformAuthContext } from "./guards";
 import { actorEmail } from "./guards";
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 
-/** Minimal privileged-client shape the audit writer needs. */
+/** Minimal client shape the audit writer needs. */
 export type AuditClient = {
   from: (table: string) => { insert: (row: any) => PromiseLike<{ error: any }> };
 };
@@ -26,6 +27,9 @@ export type AuditEntry = {
   meta?: Record<string, unknown>;
 };
 
+/** Writer shape hosts can pass into cores that need auditing. */
+export type AuditWriter = (entry: AuditEntry) => Promise<void>;
+
 /** Write one audit entry. Never throws — logging must not break the action. */
 export async function writeAudit(
   admin: AuditClient,
@@ -33,13 +37,20 @@ export async function writeAudit(
   entry: AuditEntry,
 ): Promise<void> {
   try {
+    const meta = { ...(entry.meta ?? {}) } as Record<string, unknown>;
+    meta["summary"] = describeAudit({
+      action: entry.action,
+      entity: entry.entity ?? null,
+      entityId: entry.entityId ?? null,
+      meta,
+    });
     const { error } = await admin.from("audit_logs").insert({
       actor_id: context.userId,
       actor_email: actorEmail(context),
       action: entry.action,
       entity: entry.entity ?? null,
       entity_id: entry.entityId ?? null,
-      meta: (entry.meta ?? {}) as unknown,
+      meta: meta as unknown,
     });
     if (error) console.warn("audit failed", error.message);
   } catch (err) {
@@ -52,3 +63,17 @@ export function auditWriter(admin: AuditClient, context: PlatformAuthContext, en
   return (action: string, entityId: string, meta: Record<string, unknown> = {}) =>
     writeAudit(admin, context, { action, entity, entityId, meta });
 }
+
+/**
+ * Write one audit entry as the signed-in staff user.
+ *
+ * `audit_logs` accepts inserts from staff under row-level security, so cores
+ * that already ran a staff check can log through the ordinary request client
+ * without any privileged credential.
+ */
+export async function auditAs(
+  context: PlatformAuthContext & { supabase: unknown },
+  entry: AuditEntry,
+): Promise<void> {
+  await writeAudit(context.supabase as unknown as AuditClient, context, entry);
+}

package/src/server/content-sections-core.ts

@@ -10,6 +10,7 @@
 import type { Json } from "../i18n/json";
 import { stampManualEdits } from "../i18n/translation-meta";
 import { assertStaff, type PlatformAuthContext } from "./guards";
+import { auditAs } from "./audit-core";
 
 /** Structural subset of a Supabase-shaped client used by this core. */
 export type ContentClient = {
@@ -64,5 +65,12 @@ export async function saveContentSectionCore(
     .from("content_sections")
     .upsert({ key: input.key, data: stamped as Json }, { onConflict: "key" });
   if (error) throw new Error(error.message);
+
+  await auditAs(context as never, {
+    action: "content.section.save",
+    entity: "content_sections",
+    entityId: input.key,
+    meta: { key: input.key },
+  });
   return { ok: true, key: input.key };
 }

package/src/server/domains-core.ts

@@ -7,6 +7,7 @@
  */
 
 import { assertStaff, type PlatformAuthContext } from "./guards";
+import { auditAs } from "./audit-core";
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 /** Structural subset of a Supabase-shaped client used by this core. */
@@ -165,6 +166,18 @@ export async function saveLocaleDomainCore(
     { onConflict: "locale" },
   );
   if (error) throw new Error(error.message);
+
+  await auditAs(context as never, {
+    action: "domain.save",
+    entity: "locale_domains",
+    entityId: input.locale,
+    meta: {
+      locale: input.locale,
+      domain: normalized,
+      is_default: input.isDefault,
+      is_admin_domain: input.isAdminDomain,
+    },
+  });
   return { ok: true };
 }
 
@@ -176,5 +189,11 @@ export async function deleteLocaleDomainCore(
   await assertStaff(context);
   const { error } = await context.supabase.from("locale_domains").delete().eq("locale", locale);
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "domain.delete",
+    entity: "locale_domains",
+    entityId: locale,
+    meta: { locale },
+  });
   return { ok: true };
 }

package/src/server/email-log-core.ts

@@ -0,0 +1,69 @@
+/**
+ * Central email log writer.
+ *
+ * Every message the platform attempts to send — form notifications, auto-replies,
+ * provider tests and account emails sent by the authentication service — is
+ * recorded in `email_logs`, successful or not, with a plain-English sentence in
+ * `meta.summary`. Logging is best-effort and never fails a send.
+ */
+import { describeEmail } from "../admin/describe-log";
+
+/* eslint-disable @typescript-eslint/no-explicit-any */
+
+export type EmailLogClient = {
+  from: (table: string) => { insert: (row: any) => PromiseLike<{ error: any }> };
+};
+
+/** Why the message was sent, e.g. `form_notification` or `password_reset`. */
+export type EmailPurpose =
+  | "form_notification"
+  | "form_autoreply"
+  | "form_test"
+  | "provider_test"
+  | "password_reset"
+  | "user_invite"
+  | (string & {});
+
+export type EmailLogEntry = {
+  to: string;
+  from?: string | null;
+  replyTo?: string | null;
+  subject?: string | null;
+  bodyPreview?: string | null;
+  /** Provider name as shown in the backoffice, or the transport used. */
+  provider?: string | null;
+  status: "sent" | "failed" | "skipped" | string;
+  error?: string | null;
+  purpose?: EmailPurpose | null;
+  meta?: Record<string, unknown>;
+};
+
+/** Record one send attempt. Never throws. */
+export async function logEmail(db: EmailLogClient, entry: EmailLogEntry): Promise<void> {
+  try {
+    const meta = { ...(entry.meta ?? {}) } as Record<string, unknown>;
+    if (entry.purpose) meta["purpose"] = entry.purpose;
+    meta["summary"] = describeEmail({
+      status: entry.status,
+      to: entry.to,
+      subject: entry.subject ?? null,
+      provider: entry.provider ?? null,
+      purpose: entry.purpose ?? null,
+      error: entry.error ?? null,
+    });
+    const { error } = await db.from("email_logs").insert({
+      to_address: entry.to,
+      from_address: entry.from ?? null,
+      reply_to: entry.replyTo ?? null,
+      subject: entry.subject ?? null,
+      body_preview: (entry.bodyPreview ?? "").slice(0, 200) || null,
+      provider: entry.provider ?? null,
+      status: entry.status,
+      error: entry.error ?? null,
+      meta: meta as unknown,
+    });
+    if (error) console.warn("email log failed", error.message);
+  } catch (err) {
+    console.warn("email log failed", err);
+  }
+}

package/src/server/forms-delivery-core.ts

@@ -14,6 +14,7 @@
 
 import type { FormFieldDef } from "../forms/field-sets";
 import { sendViaProvider } from "./email-send-core";
+import { logEmail } from "./email-log-core";
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 /** Structural subset of a Supabase-shaped privileged client. */
@@ -132,15 +133,16 @@ async function dispatch(
     },
   );
 
-  await db.from("email_logs").insert({
-    to_address: msg.to,
-    from_address: fromEmail,
-    reply_to: msg.replyTo,
+  await logEmail(db as never, {
+    to: msg.to,
+    from: fromEmail,
+    replyTo: msg.replyTo,
     subject: msg.subject,
-    body_preview: msg.text.slice(0, 200),
+    bodyPreview: msg.text,
     provider: provider.name,
     status: result.ok ? "sent" : "failed",
     error: result.ok ? null : result.error,
+    purpose: typeof meta["purpose"] === "string" ? (meta["purpose"] as string) : null,
     meta: { ...meta, kind: provider.kind },
   });
 

package/src/server/forms-submissions-core.ts

@@ -33,6 +33,7 @@ import {
   type FormsContext,
   type FormsDb,
 } from "./forms-core";
+import { auditAs } from "./audit-core";
 import {
   evaluateRule,
   isFieldVisible,
@@ -461,6 +462,12 @@ export async function setSubmissionStatusCore(
     .update({ status: data.status })
     .in("id", data.ids);
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "submission.status",
+    entity: "form_submissions",
+    entityId: data.ids.join(", "),
+    meta: { status: data.status, count: data.ids.length },
+  });
   return { ok: true as const, updated: data.ids.length };
 }
 
@@ -800,6 +807,12 @@ export async function deletePartialsCore(context: FormsContext, ids: string[]) {
   await assertStaff(context);
   const { error } = await context.supabase.from("form_partials").delete().in("id", ids);
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "submission.partial.delete",
+    entity: "form_partials",
+    entityId: ids.join(", "),
+    meta: { count: ids.length },
+  });
   return { ok: true as const, deleted: ids.length };
 }
 
@@ -1326,6 +1339,12 @@ export async function resolveDeliveryAttemptsCore(context: FormsContext, ids: st
     .update({ resolved_at: new Date().toISOString() })
     .in("id", ids);
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "delivery.resolve",
+    entity: "form_delivery_attempts",
+    entityId: ids.join(", "),
+    meta: { count: ids.length },
+  });
   return { ok: true as const, resolved: ids.length };
 }
 

package/src/server/media-focus-core.ts

@@ -10,6 +10,7 @@
  */
 import { assertStaff, type PlatformAuthContext } from "./guards";
 import { clampFocal, focusKey, type FocusDevice, type FocusMap } from "../media/focus";
+import { auditAs } from "./audit-core";
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 
@@ -95,6 +96,12 @@ export async function setMediaFocusCore(
       { onConflict: "path" },
     );
     if (error) throw new Error(error.message);
+    await auditAs(context as never, {
+      action: "media.focus.set",
+      entity: "media_focus",
+      entityId: path,
+      meta: { path, device, x: point.x, y: point.y },
+    });
     return { ok: true, path, device, ...point };
   }
 
@@ -105,6 +112,12 @@ export async function setMediaFocusCore(
       { onConflict: "path" },
     );
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "media.focus.set",
+    entity: "media_focus",
+    entityId: path,
+    meta: { path, device, x: point.x, y: point.y },
+  });
   return { ok: true, path, device, ...point };
 }
 
@@ -127,10 +140,22 @@ export async function clearMediaFocusCore(
       .update({ mobile_x: null, mobile_y: null, updated_by: context.userId })
       .eq("path", path);
     if (error) throw new Error(error.message);
+    await auditAs(context as never, {
+      action: "media.focus.clear",
+      entity: "media_focus",
+      entityId: path,
+      meta: { path, device: "mobile" },
+    });
     return { ok: true };
   }
 
   const { error } = await context.supabase.from("media_focus").delete().eq("path", path);
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "media.focus.clear",
+    entity: "media_focus",
+    entityId: path,
+    meta: { path, device: "desktop" },
+  });
   return { ok: true };
 }

package/src/server/media-meta-core.ts

@@ -9,6 +9,7 @@
  * public site; writes run under the host's authenticated context.
  */
 import { assertStaff, type PlatformAuthContext } from "./guards";
+import { auditAs } from "./audit-core";
 import {
   cleanLocalized,
   metaKey,
@@ -77,6 +78,12 @@ export async function setMediaMetaCore(
     { onConflict: "path" },
   );
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "media.meta.set",
+    entity: "media_meta",
+    entityId: path,
+    meta: { path },
+  });
   return { ok: true, path };
 }
 
@@ -91,5 +98,11 @@ export async function clearMediaMetaCore(
   if (!path) return { ok: true };
   const { error } = await context.supabase.from("media_meta").delete().eq("path", path);
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "media.meta.clear",
+    entity: "media_meta",
+    entityId: path,
+    meta: { path },
+  });
   return { ok: true };
 }

package/src/server/redirects-core.ts

@@ -6,6 +6,8 @@
  * so every site behaves identically.
  */
 
+import { auditAs } from "./audit-core";
+
 /** Structural subset of a Supabase-shaped client used by these cores. */
 export type RedirectClient = {
   from: (table: string) => any; // eslint-disable-line @typescript-eslint/no-explicit-any
@@ -50,6 +52,7 @@ export async function saveRedirectCore(
   client: RedirectClient,
   input: { id?: string; from_path: string; to_path: string; status: number },
   userId: string,
+  context?: Parameters<typeof auditAs>[0],
 ): Promise<{ ok: true }> {
   const row = {
     from_path: normalizePath(input.from_path),
@@ -61,15 +64,40 @@ export async function saveRedirectCore(
     ? await client.from("redirects").update(row).eq("id", input.id)
     : await client.from("redirects").insert({ ...row, created_by: userId });
   if (error) throw new Error(error.message);
+  if (context) {
+    await auditAs(context, {
+      action: "redirect.save",
+      entity: "redirects",
+      entityId: input.id ?? row.from_path,
+      meta: { from_path: row.from_path, to_path: row.to_path, status: row.status },
+    });
+  }
   return { ok: true };
 }
 
 export async function deleteRedirectCore(
   client: RedirectClient,
   id: string,
+  context?: Parameters<typeof auditAs>[0],
 ): Promise<{ ok: true }> {
+  const { data: existing } = await client
+    .from("redirects")
+    .select("from_path, to_path")
+    .eq("id", id)
+    .maybeSingle();
   const { error } = await client.from("redirects").delete().eq("id", id);
   if (error) throw new Error(error.message);
+  if (context) {
+    await auditAs(context, {
+      action: "redirect.delete",
+      entity: "redirects",
+      entityId: id,
+      meta: {
+        from_path: existing?.from_path ?? null,
+        to_path: existing?.to_path ?? null,
+      },
+    });
+  }
   return { ok: true };
 }
 

package/src/server/site-settings-core.ts

@@ -1,4 +1,5 @@
 /**
+import { auditAs } from "./audit-core";
  * Host-agnostic core for the `site_settings` key/value store.
  *
  * Rows are `{ key, value jsonb }` where `key` is one of
@@ -13,6 +14,7 @@ import {
   type OverridableSettingKey,
   type SiteSettingOverrides,
 } from "../config/site-config";
+import { auditAs } from "./audit-core";
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 type Client = {
@@ -20,6 +22,9 @@ type Client = {
 };
 /* eslint-enable @typescript-eslint/no-explicit-any */
 
+/** Optional auth context, supplied when the caller wants the change audited. */
+type AuditContext = Parameters<typeof auditAs>[0];
+
 export const SITE_SETTINGS_TABLE = "site_settings";
 
 /** Load every stored override, narrowed to the overridable subset. */
@@ -41,6 +46,7 @@ export async function saveSiteSettingsCore(
   client: Client,
   patch: SiteSettingOverrides,
   actorId?: string | null,
+  context?: AuditContext,
 ): Promise<SiteSettingOverrides> {
   const clean = parseSiteSettingOverrides(patch);
   const rows = (Object.keys(clean) as OverridableSettingKey[]).map((key) => ({
@@ -52,6 +58,14 @@ export async function saveSiteSettingsCore(
   if (rows.length) {
     const { error } = await client.from(SITE_SETTINGS_TABLE).upsert(rows, { onConflict: "key" });
     if (error) throw new Error(error.message);
+    if (context) {
+      await auditAs(context, {
+        action: "site_settings.update",
+        entity: "site_settings",
+        entityId: rows.map((r) => r.key).join(", "),
+        meta: { keys: rows.map((r) => r.key) },
+      });
+    }
   }
   return loadSiteSettingsCore(client);
 }
@@ -60,7 +74,16 @@ export async function saveSiteSettingsCore(
 export async function clearSiteSettingCore(
   client: Client,
   key: OverridableSettingKey,
+  context?: AuditContext,
 ): Promise<void> {
   const { error } = await client.from(SITE_SETTINGS_TABLE).delete().eq("key", key);
   if (error) throw new Error(error.message);
+  if (context) {
+    await auditAs(context, {
+      action: "site_settings.clear",
+      entity: "site_settings",
+      entityId: key,
+      meta: { key },
+    });
+  }
 }