feat: channel audit logging, name cleaning, message formatting, and dashboard UI

- Add audit log entries for channel create, update, rotate_config, delete
- Clean channel names on create/update (trim, lowercase, spaces → hyphens,
  SafeName validation)
- Format chat notifications with full event details (resource, actor, team,
  timestamp) instead of one-liners
- Fix Discord split-line embeds by setting splitLines=No on shoutrrr URL
- Add channels dashboard page and sidebar navigation

internal/channels/message.go

@@ -2,30 +2,64 @@ package channels
 
 import (
 	"fmt"
+	"strings"
 
 	"git.omukk.dev/wrenn/sandbox/internal/events"
 )
 
-// FormatMessage produces a compact notification string for chat providers.
+// FormatMessage produces a human-readable notification string containing
+// the event summary, resource details, actor, and timestamp.
 func FormatMessage(e events.Event) string {
+	var b strings.Builder
+
+	b.WriteString(formatSummary(e))
+	fmt.Fprintf(&b, "\n\nEvent: %s", e.Event)
+	fmt.Fprintf(&b, "\nResource: %s %s", e.Resource.Type, e.Resource.ID)
+	fmt.Fprintf(&b, "\nActor: %s", formatActor(e.Actor))
+	fmt.Fprintf(&b, "\nTeam: %s", e.TeamID)
+	fmt.Fprintf(&b, "\nTime: %s", e.Timestamp)
+
+	return b.String()
+}
+
+func formatSummary(e events.Event) string {
 	switch e.Event {
 	case events.CapsuleCreated:
-		return fmt.Sprintf("[%s] Capsule %s created", e.Event, e.Resource.ID)
+		return fmt.Sprintf("Capsule %s created", e.Resource.ID)
 	case events.CapsuleRunning:
-		return fmt.Sprintf("[%s] Capsule %s is running", e.Event, e.Resource.ID)
+		return fmt.Sprintf("Capsule %s is running", e.Resource.ID)
 	case events.CapsulePaused:
-		return fmt.Sprintf("[%s] Capsule %s paused", e.Event, e.Resource.ID)
+		return fmt.Sprintf("Capsule %s paused", e.Resource.ID)
 	case events.CapsuleDestroyed:
-		return fmt.Sprintf("[%s] Capsule %s destroyed", e.Event, e.Resource.ID)
+		return fmt.Sprintf("Capsule %s destroyed", e.Resource.ID)
 	case events.SnapshotCreated:
-		return fmt.Sprintf("[%s] Template snapshot %s created", e.Event, e.Resource.ID)
+		return fmt.Sprintf("Template snapshot %s created", e.Resource.ID)
 	case events.SnapshotDeleted:
-		return fmt.Sprintf("[%s] Template snapshot %s deleted", e.Event, e.Resource.ID)
+		return fmt.Sprintf("Template snapshot %s deleted", e.Resource.ID)
 	case events.HostUp:
-		return fmt.Sprintf("[%s] Host %s is up", e.Event, e.Resource.ID)
+		return fmt.Sprintf("Host %s is up", e.Resource.ID)
 	case events.HostDown:
-		return fmt.Sprintf("[%s] Host %s is down", e.Event, e.Resource.ID)
+		return fmt.Sprintf("Host %s is down", e.Resource.ID)
 	default:
-		return fmt.Sprintf("[%s] %s %s", e.Event, e.Resource.Type, e.Resource.ID)
+		return fmt.Sprintf("%s %s", e.Resource.Type, e.Resource.ID)
+	}
+}
+
+func formatActor(a events.Actor) string {
+	switch a.Type {
+	case events.ActorSystem:
+		return "system"
+	case events.ActorUser:
+		if a.Name != "" {
+			return fmt.Sprintf("%s (%s)", a.Name, a.ID)
+		}
+		return a.ID
+	case events.ActorAPIKey:
+		if a.Name != "" {
+			return fmt.Sprintf("api_key %s (%s)", a.Name, a.ID)
+		}
+		return fmt.Sprintf("api_key %s", a.ID)
+	default:
+		return string(a.Type)
 	}
 }

internal/channels/service.go

@@ -7,6 +7,7 @@ import (
 	"encoding/json"
 	"errors"
 	"fmt"
+	"strings"
 
 	"github.com/jackc/pgx/v5"
 	"github.com/jackc/pgx/v5/pgconn"
@@ -15,6 +16,7 @@ import (
 	"git.omukk.dev/wrenn/sandbox/internal/db"
 	"git.omukk.dev/wrenn/sandbox/internal/events"
 	"git.omukk.dev/wrenn/sandbox/internal/id"
+	"git.omukk.dev/wrenn/sandbox/internal/validate"
 )
 
 // Valid providers.
@@ -72,9 +74,11 @@ type CreateResult struct {
 
 // Create creates a new notification channel.
 func (s *Service) Create(ctx context.Context, p CreateParams) (CreateResult, error) {
-	if p.Name == "" {
-		return CreateResult{}, fmt.Errorf("invalid: channel name is required")
+	clean, err := cleanName(p.Name)
+	if err != nil {
+		return CreateResult{}, err
 	}
+	p.Name = clean
 
 	if !validProviders[p.Provider] {
 		return CreateResult{}, fmt.Errorf("invalid: unsupported provider %q", p.Provider)
@@ -154,9 +158,11 @@ func (s *Service) Get(ctx context.Context, channelID, teamID pgtype.UUID) (db.Ch
 
 // Update updates a channel's name and event types.
 func (s *Service) Update(ctx context.Context, channelID, teamID pgtype.UUID, name string, eventTypes []string) (db.Channel, error) {
-	if name == "" {
-		return db.Channel{}, fmt.Errorf("invalid: channel name is required")
+	clean, err := cleanName(name)
+	if err != nil {
+		return db.Channel{}, err
 	}
+	name = clean
 
 	if len(eventTypes) == 0 {
 		return db.Channel{}, fmt.Errorf("invalid: at least one event type is required")
@@ -271,6 +277,18 @@ func (s *Service) Delete(ctx context.Context, channelID, teamID pgtype.UUID) err
 	return s.DB.DeleteChannelByTeam(ctx, db.DeleteChannelByTeamParams{ID: channelID, TeamID: teamID})
 }
 
+// cleanName normalises a channel name: trim whitespace, lowercase, replace
+// spaces with hyphens, then validate against SafeName rules.
+func cleanName(name string) (string, error) {
+	name = strings.TrimSpace(name)
+	name = strings.ToLower(name)
+	name = strings.ReplaceAll(name, " ", "-")
+	if err := validate.SafeName(name); err != nil {
+		return "", fmt.Errorf("invalid: %w", err)
+	}
+	return name, nil
+}
+
 func generateSecret() string {
 	b := make([]byte, 32)
 	if _, err := rand.Read(b); err != nil {

internal/channels/shoutrrr.go

@@ -39,7 +39,7 @@ func discordURL(config map[string]string) (string, error) {
 		return "", fmt.Errorf("unexpected discord webhook URL format")
 	}
 	webhookID, token := parts[2], parts[3]
-	return fmt.Sprintf("discord://%s@%s", token, webhookID), nil
+	return fmt.Sprintf("discord://%s@%s?splitLines=No", token, webhookID), nil
 }
 
 // slackURL converts https://hooks.slack.com/services/T.../B.../XXX → slack://T.../B.../XXX