/* global React, Icon, PageSkeleton, DemoChip, Chips, PersonAvatar,
useAuditLog, AUDIT_ACTIONS, auditSentence, auditName */
// Activity — what changed, who changed it, newest first.
//
// Not purely staff any more: since set_membership_tier landed on the
// golfer-app side, a member joining or cancelling SBX+ writes its own row
// here too. Those read in the first person ("joined SBX+") so they are not
// mistaken for staff acting on a member's account.
//
// Read as a feed rather than a table. A table invites you to compare rows
// column by column, which is not the question anyone brings here; the
// question is "what happened, and who did it", and that is a sentence.
//
// The raw before/after stays one click away instead of on the surface. It is
// the thing you want in the rare case where the sentence is not enough, and
// putting jsonb in front of somebody by default would bury the readable part.
// "4m ago" / "3h ago" / a date once it stops being recent. An audit trail is
// usually read about something that just happened, so relative time is the
// useful default — but the exact stamp is always in the title attribute.
function actAgo(iso) {
const ms = Date.now() - new Date(iso).getTime();
const min = Math.round(ms / 60000);
if (min < 1) return 'just now';
if (min < 60) return `${min}m ago`;
const hr = Math.round(min / 60);
if (hr < 24) return `${hr}h ago`;
const d = Math.round(hr / 24);
if (d < 7) return `${d}d ago`;
return new Date(iso).toLocaleDateString('en-US', { month: 'short', day: 'numeric' });
}
const actStamp = (iso) => new Date(iso).toLocaleString('en-US', {
weekday: 'short', month: 'short', day: 'numeric', hour: 'numeric', minute: '2-digit',
});
// Shape carries severity, the way match results and payout states already do:
// something lost is outlined in the loss tone, everything else is quiet.
function ActionPill({ action }) {
const meta = AUDIT_ACTIONS[action] || { label: action, destructive: false };
const s = meta.destructive
? { background: 'rgba(155,58,46,0.18)', color: 'var(--loss-soft, #E7B8A7)', border: '1px solid rgba(155,58,46,0.5)' }
: { background: 'transparent', color: 'var(--ink-muted)', border: '1px solid var(--line-strong)' };
return {meta.label};
}
// The before/after, for when the sentence isn't enough.
function JsonPeek({ label, value }) {
if (!value || !Object.keys(value).length) return null;
return (
{label}
{JSON.stringify(value, null, 1)}
);
}
function ActivityRow({ row, nameFor, first }) {
const [open, setOpen] = React.useState(false);
// "Unknown admin" was right when only staff wrote here; members write
// their own membership changes now.
const who = auditName(row.actor) || 'Unknown account';
const hasDetail = !!((row.before && Object.keys(row.before).length) || (row.after && Object.keys(row.after).length));
return (
{who}{' '}
{auditSentence(row, nameFor)}
{actAgo(row.created_at)}
{hasDetail && (
)}
{open && (
Record
{row.entity} {row.entity_id || '—'}
)}
);
}
// ─── ActivityLog ──────────────────────────────────────────────────────
function ActivityLog() {
const [pages, setPages] = React.useState(1);
const [log, reload] = useAuditLog(pages);
const [who, setWho] = React.useState('all');
const [kind, setKind] = React.useState('all');
if (!log) return ;
// The table or its read policy is missing — say which, and what fixes it.
if (log.blocked) {
return (
Activity
The activity log can’t be read.
The admin_audit table is missing, or its
admin read policy is. Run sql/admin-overhaul.sql in
Supabase — it creates both.
{log.message}
);
}
const nameFor = (id) => {
const row = log.rows.find(r => r.entity_id === id && r.targetProfile);
return row ? auditName(row.targetProfile) : null;
};
// Filters are built from what is actually in the log, not from every action
// the portal can theoretically record — a filter for a thing that has never
// happened is a dead end.
const actorCounts = {};
const kindCounts = {};
log.rows.forEach(r => {
const k = r.actor_id || 'unknown';
actorCounts[k] = (actorCounts[k] || 0) + 1;
kindCounts[r.action] = (kindCounts[r.action] || 0) + 1;
});
const actors = Object.keys(actorCounts).map(id => {
const row = log.rows.find(r => (r.actor_id || 'unknown') === id);
return { key: id, label: auditName(row && row.actor) || 'Unknown', count: actorCounts[id] };
});
const shown = log.rows.filter(r =>
(who === 'all' || (r.actor_id || 'unknown') === who)
&& (kind === 'all'
|| (kind === 'destructive' ? (AUDIT_ACTIONS[r.action] || {}).destructive : r.action === kind)));
const since = new Date(); since.setHours(0, 0, 0, 0);
const today = log.rows.filter(r => new Date(r.created_at) >= since).length;
const destructive = log.rows.filter(r => (AUDIT_ACTIONS[r.action] || {}).destructive).length;
return (
({
key: a, label: (AUDIT_ACTIONS[a] || {}).label || a, count: kindCounts[a],
})),
]}/>
{shown.length ? shown.map((r, i) => (
)) : (
{log.rows.length ? 'Nothing matches these filters.' : 'No admin actions recorded yet.'}
{!log.rows.length && (
The log records from the moment it was switched on — deleting an account, changing a
tier, moving a payout, editing a match. Anything done before then isn’t here and
can’t be recovered.
)}
)}
{log.hasMore && (
)}
Staff actions are recorded by this portal as they happen; membership changes a golfer
makes themselves are recorded by the golfer app. Routine edits — tee slots, yardages,
pin placements — are deliberately not logged.