@bygghammar/cms-platform 0.52.0 → 0.54.0

package/src/server/domains-core.ts

@@ -7,6 +7,7 @@
  */
 
 import { assertStaff, type PlatformAuthContext } from "./guards";
+import { auditAs } from "./audit-core";
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 /** Structural subset of a Supabase-shaped client used by this core. */
@@ -165,6 +166,18 @@ export async function saveLocaleDomainCore(
     { onConflict: "locale" },
   );
   if (error) throw new Error(error.message);
+
+  await auditAs(context as never, {
+    action: "domain.save",
+    entity: "locale_domains",
+    entityId: input.locale,
+    meta: {
+      locale: input.locale,
+      domain: normalized,
+      is_default: input.isDefault,
+      is_admin_domain: input.isAdminDomain,
+    },
+  });
   return { ok: true };
 }
 
@@ -176,5 +189,11 @@ export async function deleteLocaleDomainCore(
   await assertStaff(context);
   const { error } = await context.supabase.from("locale_domains").delete().eq("locale", locale);
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "domain.delete",
+    entity: "locale_domains",
+    entityId: locale,
+    meta: { locale },
+  });
   return { ok: true };
 }

package/src/server/email-log-core.ts

@@ -0,0 +1,69 @@
+/**
+ * Central email log writer.
+ *
+ * Every message the platform attempts to send — form notifications, auto-replies,
+ * provider tests and account emails sent by the authentication service — is
+ * recorded in `email_logs`, successful or not, with a plain-English sentence in
+ * `meta.summary`. Logging is best-effort and never fails a send.
+ */
+import { describeEmail } from "../admin/describe-log";
+
+/* eslint-disable @typescript-eslint/no-explicit-any */
+
+export type EmailLogClient = {
+  from: (table: string) => { insert: (row: any) => PromiseLike<{ error: any }> };
+};
+
+/** Why the message was sent, e.g. `form_notification` or `password_reset`. */
+export type EmailPurpose =
+  | "form_notification"
+  | "form_autoreply"
+  | "form_test"
+  | "provider_test"
+  | "password_reset"
+  | "user_invite"
+  | (string & {});
+
+export type EmailLogEntry = {
+  to: string;
+  from?: string | null;
+  replyTo?: string | null;
+  subject?: string | null;
+  bodyPreview?: string | null;
+  /** Provider name as shown in the backoffice, or the transport used. */
+  provider?: string | null;
+  status: "sent" | "failed" | "skipped" | string;
+  error?: string | null;
+  purpose?: EmailPurpose | null;
+  meta?: Record<string, unknown>;
+};
+
+/** Record one send attempt. Never throws. */
+export async function logEmail(db: EmailLogClient, entry: EmailLogEntry): Promise<void> {
+  try {
+    const meta = { ...(entry.meta ?? {}) } as Record<string, unknown>;
+    if (entry.purpose) meta["purpose"] = entry.purpose;
+    meta["summary"] = describeEmail({
+      status: entry.status,
+      to: entry.to,
+      subject: entry.subject ?? null,
+      provider: entry.provider ?? null,
+      purpose: entry.purpose ?? null,
+      error: entry.error ?? null,
+    });
+    const { error } = await db.from("email_logs").insert({
+      to_address: entry.to,
+      from_address: entry.from ?? null,
+      reply_to: entry.replyTo ?? null,
+      subject: entry.subject ?? null,
+      body_preview: (entry.bodyPreview ?? "").slice(0, 200) || null,
+      provider: entry.provider ?? null,
+      status: entry.status,
+      error: entry.error ?? null,
+      meta: meta as unknown,
+    });
+    if (error) console.warn("email log failed", error.message);
+  } catch (err) {
+    console.warn("email log failed", err);
+  }
+}

package/src/server/forms-delivery-core.ts

@@ -14,6 +14,7 @@
 
 import type { FormFieldDef } from "../forms/field-sets";
 import { sendViaProvider } from "./email-send-core";
+import { logEmail } from "./email-log-core";
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 /** Structural subset of a Supabase-shaped privileged client. */
@@ -132,15 +133,16 @@ async function dispatch(
     },
   );
 
-  await db.from("email_logs").insert({
-    to_address: msg.to,
-    from_address: fromEmail,
-    reply_to: msg.replyTo,
+  await logEmail(db as never, {
+    to: msg.to,
+    from: fromEmail,
+    replyTo: msg.replyTo,
     subject: msg.subject,
-    body_preview: msg.text.slice(0, 200),
+    bodyPreview: msg.text,
     provider: provider.name,
     status: result.ok ? "sent" : "failed",
     error: result.ok ? null : result.error,
+    purpose: typeof meta["purpose"] === "string" ? (meta["purpose"] as string) : null,
     meta: { ...meta, kind: provider.kind },
   });
 

package/src/server/forms-submissions-core.ts

@@ -33,6 +33,7 @@ import {
   type FormsContext,
   type FormsDb,
 } from "./forms-core";
+import { auditAs } from "./audit-core";
 import {
   evaluateRule,
   isFieldVisible,
@@ -461,6 +462,12 @@ export async function setSubmissionStatusCore(
     .update({ status: data.status })
     .in("id", data.ids);
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "submission.status",
+    entity: "form_submissions",
+    entityId: data.ids.join(", "),
+    meta: { status: data.status, count: data.ids.length },
+  });
   return { ok: true as const, updated: data.ids.length };
 }
 
@@ -800,6 +807,12 @@ export async function deletePartialsCore(context: FormsContext, ids: string[]) {
   await assertStaff(context);
   const { error } = await context.supabase.from("form_partials").delete().in("id", ids);
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "submission.partial.delete",
+    entity: "form_partials",
+    entityId: ids.join(", "),
+    meta: { count: ids.length },
+  });
   return { ok: true as const, deleted: ids.length };
 }
 
@@ -1326,6 +1339,12 @@ export async function resolveDeliveryAttemptsCore(context: FormsContext, ids: st
     .update({ resolved_at: new Date().toISOString() })
     .in("id", ids);
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "delivery.resolve",
+    entity: "form_delivery_attempts",
+    entityId: ids.join(", "),
+    meta: { count: ids.length },
+  });
   return { ok: true as const, resolved: ids.length };
 }
 

package/src/server/media-focus-core.ts

@@ -10,6 +10,7 @@
  */
 import { assertStaff, type PlatformAuthContext } from "./guards";
 import { clampFocal, focusKey, type FocusDevice, type FocusMap } from "../media/focus";
+import { auditAs } from "./audit-core";
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 
@@ -95,6 +96,12 @@ export async function setMediaFocusCore(
       { onConflict: "path" },
     );
     if (error) throw new Error(error.message);
+    await auditAs(context as never, {
+      action: "media.focus.set",
+      entity: "media_focus",
+      entityId: path,
+      meta: { path, device, x: point.x, y: point.y },
+    });
     return { ok: true, path, device, ...point };
   }
 
@@ -105,6 +112,12 @@ export async function setMediaFocusCore(
       { onConflict: "path" },
     );
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "media.focus.set",
+    entity: "media_focus",
+    entityId: path,
+    meta: { path, device, x: point.x, y: point.y },
+  });
   return { ok: true, path, device, ...point };
 }
 
@@ -127,10 +140,22 @@ export async function clearMediaFocusCore(
       .update({ mobile_x: null, mobile_y: null, updated_by: context.userId })
       .eq("path", path);
     if (error) throw new Error(error.message);
+    await auditAs(context as never, {
+      action: "media.focus.clear",
+      entity: "media_focus",
+      entityId: path,
+      meta: { path, device: "mobile" },
+    });
     return { ok: true };
   }
 
   const { error } = await context.supabase.from("media_focus").delete().eq("path", path);
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "media.focus.clear",
+    entity: "media_focus",
+    entityId: path,
+    meta: { path, device: "desktop" },
+  });
   return { ok: true };
 }

package/src/server/media-meta-core.ts

@@ -9,6 +9,7 @@
  * public site; writes run under the host's authenticated context.
  */
 import { assertStaff, type PlatformAuthContext } from "./guards";
+import { auditAs } from "./audit-core";
 import {
   cleanLocalized,
   metaKey,
@@ -77,6 +78,12 @@ export async function setMediaMetaCore(
     { onConflict: "path" },
   );
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "media.meta.set",
+    entity: "media_meta",
+    entityId: path,
+    meta: { path },
+  });
   return { ok: true, path };
 }
 
@@ -91,5 +98,11 @@ export async function clearMediaMetaCore(
   if (!path) return { ok: true };
   const { error } = await context.supabase.from("media_meta").delete().eq("path", path);
   if (error) throw new Error(error.message);
+  await auditAs(context as never, {
+    action: "media.meta.clear",
+    entity: "media_meta",
+    entityId: path,
+    meta: { path },
+  });
   return { ok: true };
 }

package/src/server/redirects-core.ts

@@ -6,6 +6,8 @@
  * so every site behaves identically.
  */
 
+import { auditAs } from "./audit-core";
+
 /** Structural subset of a Supabase-shaped client used by these cores. */
 export type RedirectClient = {
   from: (table: string) => any; // eslint-disable-line @typescript-eslint/no-explicit-any
@@ -50,6 +52,7 @@ export async function saveRedirectCore(
   client: RedirectClient,
   input: { id?: string; from_path: string; to_path: string; status: number },
   userId: string,
+  context?: Parameters<typeof auditAs>[0],
 ): Promise<{ ok: true }> {
   const row = {
     from_path: normalizePath(input.from_path),
@@ -61,15 +64,40 @@ export async function saveRedirectCore(
     ? await client.from("redirects").update(row).eq("id", input.id)
     : await client.from("redirects").insert({ ...row, created_by: userId });
   if (error) throw new Error(error.message);
+  if (context) {
+    await auditAs(context, {
+      action: "redirect.save",
+      entity: "redirects",
+      entityId: input.id ?? row.from_path,
+      meta: { from_path: row.from_path, to_path: row.to_path, status: row.status },
+    });
+  }
   return { ok: true };
 }
 
 export async function deleteRedirectCore(
   client: RedirectClient,
   id: string,
+  context?: Parameters<typeof auditAs>[0],
 ): Promise<{ ok: true }> {
+  const { data: existing } = await client
+    .from("redirects")
+    .select("from_path, to_path")
+    .eq("id", id)
+    .maybeSingle();
   const { error } = await client.from("redirects").delete().eq("id", id);
   if (error) throw new Error(error.message);
+  if (context) {
+    await auditAs(context, {
+      action: "redirect.delete",
+      entity: "redirects",
+      entityId: id,
+      meta: {
+        from_path: existing?.from_path ?? null,
+        to_path: existing?.to_path ?? null,
+      },
+    });
+  }
   return { ok: true };
 }
 

package/src/server/site-settings-core.ts

@@ -1,4 +1,5 @@
 /**
+import { auditAs } from "./audit-core";
  * Host-agnostic core for the `site_settings` key/value store.
  *
  * Rows are `{ key, value jsonb }` where `key` is one of
@@ -13,6 +14,7 @@ import {
   type OverridableSettingKey,
   type SiteSettingOverrides,
 } from "../config/site-config";
+import { auditAs } from "./audit-core";
 
 /* eslint-disable @typescript-eslint/no-explicit-any */
 type Client = {
@@ -20,6 +22,9 @@ type Client = {
 };
 /* eslint-enable @typescript-eslint/no-explicit-any */
 
+/** Optional auth context, supplied when the caller wants the change audited. */
+type AuditContext = Parameters<typeof auditAs>[0];
+
 export const SITE_SETTINGS_TABLE = "site_settings";
 
 /** Load every stored override, narrowed to the overridable subset. */
@@ -41,6 +46,7 @@ export async function saveSiteSettingsCore(
   client: Client,
   patch: SiteSettingOverrides,
   actorId?: string | null,
+  context?: AuditContext,
 ): Promise<SiteSettingOverrides> {
   const clean = parseSiteSettingOverrides(patch);
   const rows = (Object.keys(clean) as OverridableSettingKey[]).map((key) => ({
@@ -52,6 +58,14 @@ export async function saveSiteSettingsCore(
   if (rows.length) {
     const { error } = await client.from(SITE_SETTINGS_TABLE).upsert(rows, { onConflict: "key" });
     if (error) throw new Error(error.message);
+    if (context) {
+      await auditAs(context, {
+        action: "site_settings.update",
+        entity: "site_settings",
+        entityId: rows.map((r) => r.key).join(", "),
+        meta: { keys: rows.map((r) => r.key) },
+      });
+    }
   }
   return loadSiteSettingsCore(client);
 }
@@ -60,7 +74,16 @@ export async function saveSiteSettingsCore(
 export async function clearSiteSettingCore(
   client: Client,
   key: OverridableSettingKey,
+  context?: AuditContext,
 ): Promise<void> {
   const { error } = await client.from(SITE_SETTINGS_TABLE).delete().eq("key", key);
   if (error) throw new Error(error.message);
+  if (context) {
+    await auditAs(context, {
+      action: "site_settings.clear",
+      entity: "site_settings",
+      entityId: key,
+      meta: { key },
+    });
+  }
 }