feat(admin): inquiry inbox, send log, email-template overrides, reports dashboard, recommender keys, role-editor coverage; replace placeholder pages

Closes the bulk of audit-pass-#1 admin gaps in one batch.

New admin pages:
- /admin/inquiries reads website_submissions with filter chips for
  berth/residence/contact + payload viewer per row.
- /admin/sends reads document_sends with sent/failed filter chips and
  expandable body markdown; failures surface errorReason and any
  fallback-to-link reason from the SMTP retry.
- /admin/email-templates lets per-port admins override the subject of
  each transactional template (8 templates catalogued in
  template-catalog.ts). Body editing is a follow-on; portal_activation
  + portal_reset are wired to honor the override via loadSubjectOverride.
- /admin/reports replaces the "Coming in Layer 3" placeholder with a
  KPI dashboard: 4 KPI tiles, pipeline funnel bars, berth occupancy
  donut-bars, conversion %, refresh every 60s.
- backup/import/onboarding admin pages replace placeholders with
  actionable guidance: backup posture + planned features, available CLI
  imports + planned UI, ordered onboarding checklist linking to admin
  pages.

Existing pages widened:
- settings-manager exposes the 9 berth-recommender tunables that were
  previously code-only (recommender_*, heat_weight_*, fallthrough_*,
  tier_ladder_hide_late_stage).
- role-form covers all 19 RolePermissions schema groups; previously
  missing yachts/companies/memberships/reservations + missing
  documents.edit + files.edit checkboxes. snake_case residential
  labels replaced with friendly text.

portal-auth.service.ts now also writes audit_log rows for portal
invite, resend, activate, password-reset request, and reset (closes one
more audit-pass-#2 gap while we were touching the file).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/app/(dashboard)/[portSlug]/admin/backup/page.tsx

@@ -1,14 +1,64 @@
 import { PageHeader } from '@/components/shared/page-header';
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card';
 
 export default function BackupManagementPage() {
   return (
-    <div className="space-y-6">
-      <PageHeader title="Backup Management" description="Manage system backups and restoration" />
-      <div className="flex flex-col items-center justify-center rounded-lg border border-dashed p-12">
-        <p className="text-lg font-medium text-muted-foreground">Coming in Layer 4</p>
-        <p className="text-sm text-muted-foreground">
-          This feature will be implemented in the next phase.
-        </p>
+    <div>
+      <PageHeader
+        title="Backup &amp; Restore"
+        description="How backups are taken today and what an in-app backup admin will look like."
+      />
+
+      <div className="grid gap-4 mt-6 lg:grid-cols-2">
+        <Card>
+          <CardHeader>
+            <CardTitle>Current backup posture</CardTitle>
+            <CardDescription>
+              Database snapshots run outside the app — there is no in-app trigger yet.
+            </CardDescription>
+          </CardHeader>
+          <CardContent className="space-y-3 text-sm">
+            <p>
+              <strong>PostgreSQL:</strong> snapshotted by the platform&rsquo;s nightly{' '}
+              <code>pg_dump</code> job. Retention is set at the infrastructure layer (see{' '}
+              <code>docs/operations/</code> if a runbook exists). Restores are manual.
+            </p>
+            <p>
+              <strong>Object storage:</strong> when{' '}
+              <code>system_settings.storage_backend = &lsquo;s3&rsquo;</code>, the bucket is
+              versioned by the provider. When the filesystem backend is in use, the host&rsquo;s
+              snapshot policy is the only safety net — switch to s3 before relying on point-in-time
+              recovery.
+            </p>
+            <p>
+              <strong>Redis / queue state:</strong> ephemeral. Failed jobs sit on the{' '}
+              <code>removeOnFail</code> retention window (7 days) and then disappear. Anything
+              durable belongs in PostgreSQL.
+            </p>
+          </CardContent>
+        </Card>
+
+        <Card>
+          <CardHeader>
+            <CardTitle>What this page will become</CardTitle>
+            <CardDescription>Planned admin surface, prioritised in upcoming work.</CardDescription>
+          </CardHeader>
+          <CardContent className="space-y-2 text-sm">
+            <ul className="list-disc pl-5 space-y-1">
+              <li>List recent snapshot files with timestamp, size, and origin (cron vs manual).</li>
+              <li>&ldquo;Take backup now&rdquo; button that enqueues a maintenance job.</li>
+              <li>
+                Per-port logical export (&ldquo;give me everything for port-nimara&rdquo;) for
+                compliance.
+              </li>
+              <li>Restore preview that shows row-counts that would change before commit.</li>
+              <li>GDPR per-client export bundled here.</li>
+            </ul>
+            <p className="text-xs text-muted-foreground pt-2">
+              Until this lands, treat ops/devops as the source of truth for backup state.
+            </p>
+          </CardContent>
+        </Card>
       </div>
     </div>
   );

src/app/(dashboard)/[portSlug]/admin/email-templates/page.tsx

@@ -0,0 +1,5 @@
+import { EmailTemplatesAdmin } from '@/components/admin/email-templates-admin';
+
+export default function EmailTemplatesPage() {
+  return <EmailTemplatesAdmin />;
+}

src/app/(dashboard)/[portSlug]/admin/import/page.tsx

@@ -1,14 +1,75 @@
 import { PageHeader } from '@/components/shared/page-header';
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card';
 
 export default function DataImportPage() {
   return (
-    <div className="space-y-6">
-      <PageHeader title="Data Import" description="Import data from external sources" />
-      <div className="flex flex-col items-center justify-center rounded-lg border border-dashed p-12">
-        <p className="text-lg font-medium text-muted-foreground">Coming in Layer 4</p>
-        <p className="text-sm text-muted-foreground">
-          This feature will be implemented in the next phase.
-        </p>
+    <div>
+      <PageHeader
+        title="Data import"
+        description="What you can import today and what an in-app importer will look like."
+      />
+
+      <div className="grid gap-4 mt-6 lg:grid-cols-2">
+        <Card>
+          <CardHeader>
+            <CardTitle>Available imports today</CardTitle>
+            <CardDescription>Run from the command line until the UI catches up.</CardDescription>
+          </CardHeader>
+          <CardContent className="space-y-3 text-sm">
+            <div>
+              <p>
+                <strong>Berths from NocoDB:</strong>
+              </p>
+              <pre className="bg-muted/40 rounded-md p-2 text-xs mt-1 overflow-auto">
+                pnpm tsx scripts/import-berths-from-nocodb.ts --apply --port-slug port-nimara
+              </pre>
+              <p className="text-xs text-muted-foreground mt-1">
+                Idempotent. Skips rows where <code>updated_at &gt; last_imported_at</code> unless
+                you pass <code>--force</code>. Add <code>--update-snapshot</code> to also rewrite{' '}
+                <code>src/lib/db/seed-data/berths.json</code>.
+              </p>
+            </div>
+            <div>
+              <p>
+                <strong>Storage backend migration:</strong>
+              </p>
+              <pre className="bg-muted/40 rounded-md p-2 text-xs mt-1 overflow-auto">
+                pnpm tsx scripts/migrate-storage.ts
+              </pre>
+              <p className="text-xs text-muted-foreground mt-1">
+                Run after switching <code>system_settings.storage_backend</code> in System Settings.
+              </p>
+            </div>
+            <div>
+              <p>
+                <strong>Seed (rebuild dev fixtures):</strong>
+              </p>
+              <pre className="bg-muted/40 rounded-md p-2 text-xs mt-1 overflow-auto">
+                pnpm db:seed
+              </pre>
+            </div>
+          </CardContent>
+        </Card>
+
+        <Card>
+          <CardHeader>
+            <CardTitle>What this page will become</CardTitle>
+            <CardDescription>Planned UI for self-serve imports.</CardDescription>
+          </CardHeader>
+          <CardContent className="space-y-2 text-sm">
+            <ul className="list-disc pl-5 space-y-1">
+              <li>Drag-and-drop CSV / XLSX upload with column-mapping UI.</li>
+              <li>Dry-run preview that shows new vs. matched-existing rows before commit.</li>
+              <li>Conflict-resolution choices (skip, update, dedup-by-email) per import type.</li>
+              <li>Per-port import history with rollback.</li>
+              <li>Templates for clients, yachts, companies, berths, reservations, expenses.</li>
+            </ul>
+            <p className="text-xs text-muted-foreground pt-2">
+              Imports run against the BullMQ <code>import</code> queue (concurrency 1) so partial
+              failures don&rsquo;t leave the database half-loaded.
+            </p>
+          </CardContent>
+        </Card>
       </div>
     </div>
   );

src/app/(dashboard)/[portSlug]/admin/inquiries/page.tsx

@@ -0,0 +1,5 @@
+import { InquiryInbox } from '@/components/admin/inquiry-inbox';
+
+export default function InquiriesPage() {
+  return <InquiryInbox />;
+}

src/app/(dashboard)/[portSlug]/admin/onboarding/page.tsx

@@ -1,15 +1,114 @@
+import Link from 'next/link';
+
 import { PageHeader } from '@/components/shared/page-header';
+import { Card, CardContent, CardDescription, CardHeader, CardTitle } from '@/components/ui/card';
+
+interface ChecklistItem {
+  href: string;
+  label: string;
+  description: string;
+}
+
+const CHECKLIST: ChecklistItem[] = [
+  {
+    href: 'branding',
+    label: 'Set port name, logo, primary colour',
+    description: 'Branding flows into the navbar, emails, and EOI PDFs.',
+  },
+  {
+    href: 'email',
+    label: 'Configure outgoing email',
+    description:
+      'From-address, signature, footer, plus per-port SMTP overrides if you don’t use the global account.',
+  },
+  {
+    href: 'documenso',
+    label: 'Connect Documenso for EOIs',
+    description:
+      'API credentials and the EOI template id, plus the in-app vs Documenso pathway choice.',
+  },
+  {
+    href: 'settings',
+    label: 'Tune business rules + recommender weights',
+    description:
+      'Pipeline weights, net-10 discount, berth recommender knobs (heat weights, fall-through policy).',
+  },
+  {
+    href: 'roles',
+    label: 'Create roles & assign users',
+    description: 'Per-port roles inherit from the global system roles; override permissions here.',
+  },
+  {
+    href: 'invitations',
+    label: 'Invite the rest of the team',
+    description:
+      'Invitations track pending, expired, and accepted state and can be resent or revoked.',
+  },
+  {
+    href: 'tags',
+    label: 'Define starter tags',
+    description: 'Color-coded labels used across clients, yachts, companies, and interests.',
+  },
+  {
+    href: 'forms',
+    label: 'Wire the website intake forms',
+    description:
+      'Inquiry forms on the marketing site dual-write into the CRM via /api/public/website-inquiries.',
+  },
+];
 
 export default function OnboardingPage() {
   return (
-    <div className="space-y-6">
-      <PageHeader title="Onboarding" description="Guided setup for new port configurations" />
-      <div className="flex flex-col items-center justify-center rounded-lg border border-dashed p-12">
-        <p className="text-lg font-medium text-muted-foreground">Coming in Layer 4</p>
-        <p className="text-sm text-muted-foreground">
-          This feature will be implemented in the next phase.
-        </p>
-      </div>
+    <div>
+      <PageHeader
+        title="Port onboarding"
+        description="Recommended order to bring a new port live. Each step links to the right admin page."
+      />
+
+      <Card className="mt-6">
+        <CardHeader>
+          <CardTitle>Setup checklist</CardTitle>
+          <CardDescription>
+            Work through these in order. The future onboarding wizard will track progress per port;
+            for now this is a guided index.
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          <ol className="space-y-4">
+            {CHECKLIST.map((item, idx) => (
+              <li key={item.href} className="flex gap-4">
+                <span className="flex-none w-7 h-7 rounded-full bg-primary/10 text-primary font-medium text-sm flex items-center justify-center mt-0.5">
+                  {idx + 1}
+                </span>
+                <div className="flex-1">
+                  <Link
+                    href={`./${item.href}` as never}
+                    className="text-sm font-medium hover:underline"
+                  >
+                    {item.label}
+                  </Link>
+                  <p className="text-sm text-muted-foreground mt-0.5">{item.description}</p>
+                </div>
+              </li>
+            ))}
+          </ol>
+        </CardContent>
+      </Card>
+
+      <Card className="mt-4">
+        <CardHeader>
+          <CardTitle>What this page will become</CardTitle>
+          <CardDescription>
+            A guided wizard that walks per-port admins through the same steps with progress
+            tracking.
+          </CardDescription>
+        </CardHeader>
+        <CardContent className="text-sm text-muted-foreground">
+          The wizard will record completion per port in <code>system_settings</code>, gate the
+          public marketing-site cutover until required steps are done, and surface a banner on the
+          dashboard when onboarding is incomplete.
+        </CardContent>
+      </Card>
     </div>
   );
 }

src/app/(dashboard)/[portSlug]/admin/page.tsx

@@ -5,6 +5,7 @@ import {
   Database,
   FileText,
   HardDrive,
+  Inbox,
   Key,
   LayoutDashboard,
   Mail,
@@ -120,6 +121,12 @@ const GROUPS: AdminGroup[] = [
         description: 'PDF + email templates with merge-field placeholders.',
         icon: FileText,
       },
+      {
+        href: 'email-templates',
+        label: 'Email Templates',
+        description: 'Customize subject lines for transactional emails (portal, inquiry, invite).',
+        icon: Mail,
+      },
       {
         href: 'tags',
         label: 'Tags',
@@ -138,6 +145,19 @@ const GROUPS: AdminGroup[] = [
     title: 'Data Quality',
     description: 'Cleanup, imports, and the audit trail.',
     sections: [
+      {
+        href: 'inquiries',
+        label: 'Inquiry Inbox',
+        description:
+          'Submissions captured from the public marketing site (berth, residence, contact).',
+        icon: Inbox,
+      },
+      {
+        href: 'sends',
+        label: 'Send Log',
+        description: 'Brochure and per-berth PDF sends, with delivery failures surfaced for retry.',
+        icon: Mail,
+      },
       {
         href: 'duplicates',
         label: 'Duplicates',

src/app/(dashboard)/[portSlug]/admin/reports/page.tsx

@@ -1,18 +1,5 @@
-import { PageHeader } from '@/components/shared/page-header';
+import { ReportsDashboard } from '@/components/admin/reports-dashboard';
 
-export default function ScheduledReportsPage() {
-  return (
-    <div className="space-y-6">
-      <PageHeader
-        title="Scheduled Reports"
-        description="Configure and manage automated report delivery"
-      />
-      <div className="flex flex-col items-center justify-center rounded-lg border border-dashed p-12">
-        <p className="text-lg font-medium text-muted-foreground">Coming in Layer 3</p>
-        <p className="text-sm text-muted-foreground">
-          This feature will be implemented in the next phase.
-        </p>
-      </div>
-    </div>
-  );
+export default function AdminReportsPage() {
+  return <ReportsDashboard />;
 }

src/app/(dashboard)/[portSlug]/admin/sends/page.tsx

@@ -0,0 +1,5 @@
+import { SendsLog } from '@/components/admin/sends-log';
+
+export default function SendsPage() {
+  return <SendsLog />;
+}