1.5.6

dist/modules/seo/assets/sitemap.css

@@ -18,7 +18,7 @@
     --badge-bg: #f3f4f6;
     --badge-border: #e5e7eb;
     --badge-text: #4b5563;
-    --accent: #f97316;
+    --accent: #027bd0;
 }
 
 @media (prefers-color-scheme: dark) {
@@ -34,12 +34,13 @@
         --badge-bg: #1a1c26;
         --badge-border: #282b3d;
         --badge-text: #9ca3af;
-        --accent: #fb923c;
+        --accent: #027bd0;
     }
 }
 
 urlset {
-    display: block;
+    display: flex;
+    flex-direction: column;
     font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Inter, Helvetica, Arial, sans-serif;
     background-color: var(--bg);
     color: var(--text-main);
@@ -55,6 +56,7 @@ urlset {
 urlset::before {
     content: "XML Sitemap";
     display: block;
+    order: -2;
     font-size: 1.35rem;
     font-weight: 600;
     letter-spacing: -0.02em;
@@ -66,6 +68,7 @@ urlset::before {
 urlset::after {
     content: "Intecion.com, Technology — engineered for modern digital experiences.";
     display: block;
+    order: -1;
     font-size: 0.8rem;
     color: var(--text-muted);
     padding-bottom: 1.25rem;
@@ -76,6 +79,8 @@ urlset::after {
 /* URL card */
 url {
     display: block;
+    width: 100%;
+    order: 0;
     background-color: var(--card);
     border: 1px solid var(--border);
     border-radius: 8px;
@@ -114,17 +119,17 @@ priority {
 }
 
 lastmod::before {
-    content: "Zaktualizowano: ";
+    content: "Updated: ";
     color: var(--text-muted);
 }
 
 changefreq::before {
-    content: "Częstotliwość: ";
+    content: "Frequency: ";
     color: var(--text-muted);
 }
 
 priority::before {
-    content: "Priorytet: ";
+    content: "Priority: ";
     color: var(--text-muted);
 }
 
@@ -132,7 +137,7 @@ priority::before {
 link {
     display: inline-block;
     font-size: 0.7rem;
-    font-weight: 500;
+    font-weight: 600;
     background-color: var(--badge-bg);
     border: 1px solid var(--badge-border);
     color: var(--badge-text);
@@ -140,4 +145,10 @@ link {
     border-radius: 4px;
     margin-right: 0.3rem;
     margin-top: 0.35rem;
+    text-transform: uppercase;
 }
+
+link::before {
+    content: attr(hreflang);
+}
+

dist/modules/seo/buildMetadata.d.ts

@@ -17,12 +17,27 @@ export type PageMetadata = {
             url: string;
         }[];
         locale?: string;
+        /** Site/brand name for the OG card. */
+        siteName?: string;
         title: string;
+        /** 'website' | 'article' etc. Defaults to 'website'. */
+        type?: string;
+        /** Canonical URL of this page. */
+        url?: string;
     };
-    /** robots directives — set to noindex/follow for legal/thin/search pages. */
+    /**
+     * robots directives. Indexed pages get generous snippet/preview limits by
+     * default (Google shows richer results); noindex pages get index:false.
+     */
     robots?: {
         follow: boolean;
         index: boolean;
+        /** 'none' | 'standard' | 'large' — image preview size in results. */
+        'max-image-preview'?: 'large' | 'none' | 'standard';
+        /** Max text snippet length; -1 = no limit. Next maps to max-snippet. */
+        'max-snippet'?: number;
+        /** Max video preview seconds; -1 = no limit. */
+        'max-video-preview'?: number;
     };
     title: string;
 };

dist/modules/seo/buildMetadata.js

@@ -71,16 +71,32 @@ import { buildHreflangAlternates } from './hreflang.js';
             ...images && {
                 images
             },
-            locale
+            type: 'website',
+            locale,
+            ...siteName ? {
+                siteName
+            } : {},
+            ...canonical ? {
+                url: canonical
+            } : {}
         },
-        // noindex → tell search engines to exclude the page but still follow links
-        // (authority flows through). For legal/thin/search-result pages.
+        // robots: noindex pages are excluded (follow keeps link authority). Indexed
+        // pages get generous snippet/preview limits so Google can show rich results
+        // (long snippets, large image previews, full video previews).
         ...meta?.noindex ? {
             robots: {
                 follow: true,
                 index: false
             }
-        } : {}
+        } : {
+            robots: {
+                follow: true,
+                index: true,
+                'max-image-preview': 'large',
+                'max-snippet': -1,
+                'max-video-preview': -1
+            }
+        }
     };
 }
 

dist/plugin.js

@@ -67,9 +67,15 @@ import { buildSeoPlugin, injectAutoFillMeta, injectSeoTabs } from './modules/seo
                 // optional peer dependency at build time (it isn't in the plugin's own
                 // node_modules). Avoids TS2307 without @ts-expect-error; the module
                 // exists at runtime in projects that installed it.
-                const pkg = '@clocklimited/payload-2fa';
-                const { totpPlugin } = await import(pkg);
-                config = await totpPlugin({
+                // @ts-ignore
+                const mod = await import('@clocklimited/payload-2fa');
+                // The package exports `payloadTotp`; older/other builds may use
+                // `totpPlugin`. Accept either so a rename doesn't break us.
+                const totp = mod.payloadTotp ?? mod.totpPlugin;
+                if (typeof totp !== 'function') {
+                    throw new Error('expected export payloadTotp (or totpPlugin) to be a function — ' + 'check the installed @clocklimited/payload-2fa version');
+                }
+                config = await totp({
                     collection: tf.collectionSlug ?? 'users',
                     forceSetup: true,
                     totp: {

docs/security.md

@@ -253,8 +253,11 @@ sprawdzane przed dostępem do DANYCH, nie tylko UI panelu).
 ### Zależność
 
 ```bash
-pnpm add @clocklimited/payload-2fa
+pnpm add @clocklimited/payload-2fa@3.0.0-beta.7
 ```
+Uwaga: pakiet nie ma jeszcze stabilnego 3.0.0 — użyj konkretnej wersji beta
+(albo `^3.0.0-0`, żeby dopuścić prereleasy). Sam `^3.0.0` da błąd
+ERR_PNPM_NO_MATCHING_VERSION.
 To PEER dependency — ipal-kit importuje ją dynamicznie tylko gdy 2FA włączone
 (domyślnie). Bez niej i z włączonym 2FA plugin rzuci jasny błąd.
 

docs/seo.md

@@ -843,6 +843,31 @@ const jsonLd = buildArticleJsonLd({
 
 Dane z dokumentu/panelu. Google wymaga headline + dat dla rich result.
 
+## Robots — rich results (max-snippet, image/video preview)
+
+Strony indeksowane dostają automatycznie dyrektywy pozwalające Google na bogate
+wyniki (buildMetadata generuje):
+- `max-snippet: -1` — pełnej długości snippet (bez limitu)
+- `max-image-preview: large` — duży podgląd obrazu w wynikach
+- `max-video-preview: -1` — pełny podgląd wideo
+
+Strony noindex (polityki) dostają `index: false, follow: true` — bez powyższych.
+Zero konfiguracji — działa automatycznie dla każdej strony przez createPageMetadata.
+
+## Open Graph — pełne pola (type, siteName, url, description)
+
+buildMetadata generuje kompletny OG dla social share (Facebook, LinkedIn, Slack):
+- `og:title` — tytuł strony
+- `og:description` — meta.description → fallback siteDescription (dziedziczy)
+- `og:image` — defaultShareImage / obraz strony
+- `og:type` — 'website'
+- `og:site_name` — siteName z panelu
+- `og:url` — canonical strony
+- `og:locale` — język strony
+
+Wszystko z panelu, automatycznie. Opis OG dziedziczy z meta.description (albo
+globalnego siteDescription gdy pusty) — patrz niżej.
+
 ## Fallback meta description (siteDescription)
 
 Strona bez `meta.description` → plugin używa globalnego `siteDescription` z

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intecion/ipal-kit",
-  "version": "1.5.0",
+  "version": "1.5.6",
   "description": "Intecion Payload Advanced Library — a Payload CMS 3 plugin: i18n, SEO, forms, consent, analytics, blog/archives.",
   "license": "MIT",
   "repository": {

src/modules/seo/assets/sitemap.css

@@ -18,7 +18,7 @@
     --badge-bg: #f3f4f6;
     --badge-border: #e5e7eb;
     --badge-text: #4b5563;
-    --accent: #f97316;
+    --accent: #027bd0;
 }
 
 @media (prefers-color-scheme: dark) {
@@ -34,12 +34,13 @@
         --badge-bg: #1a1c26;
         --badge-border: #282b3d;
         --badge-text: #9ca3af;
-        --accent: #fb923c;
+        --accent: #027bd0;
     }
 }
 
 urlset {
-    display: block;
+    display: flex;
+    flex-direction: column;
     font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Inter, Helvetica, Arial, sans-serif;
     background-color: var(--bg);
     color: var(--text-main);
@@ -55,6 +56,7 @@ urlset {
 urlset::before {
     content: "XML Sitemap";
     display: block;
+    order: -2;
     font-size: 1.35rem;
     font-weight: 600;
     letter-spacing: -0.02em;
@@ -66,6 +68,7 @@ urlset::before {
 urlset::after {
     content: "Intecion.com, Technology — engineered for modern digital experiences.";
     display: block;
+    order: -1;
     font-size: 0.8rem;
     color: var(--text-muted);
     padding-bottom: 1.25rem;
@@ -76,6 +79,8 @@ urlset::after {
 /* URL card */
 url {
     display: block;
+    width: 100%;
+    order: 0;
     background-color: var(--card);
     border: 1px solid var(--border);
     border-radius: 8px;
@@ -114,17 +119,17 @@ priority {
 }
 
 lastmod::before {
-    content: "Zaktualizowano: ";
+    content: "Updated: ";
     color: var(--text-muted);
 }
 
 changefreq::before {
-    content: "Częstotliwość: ";
+    content: "Frequency: ";
     color: var(--text-muted);
 }
 
 priority::before {
-    content: "Priorytet: ";
+    content: "Priority: ";
     color: var(--text-muted);
 }
 
@@ -132,7 +137,7 @@ priority::before {
 link {
     display: inline-block;
     font-size: 0.7rem;
-    font-weight: 500;
+    font-weight: 600;
     background-color: var(--badge-bg);
     border: 1px solid var(--badge-border);
     color: var(--badge-text);
@@ -140,4 +145,10 @@ link {
     border-radius: 4px;
     margin-right: 0.3rem;
     margin-top: 0.35rem;
+    text-transform: uppercase;
 }
+
+link::before {
+    content: attr(hreflang);
+}
+

src/modules/seo/buildMetadata.ts

@@ -20,12 +20,27 @@ export type PageMetadata = {
     description?: string
     images?: { url: string }[]
     locale?: string
+    /** Site/brand name for the OG card. */
+    siteName?: string
     title: string
+    /** 'website' | 'article' etc. Defaults to 'website'. */
+    type?: string
+    /** Canonical URL of this page. */
+    url?: string
   }
-  /** robots directives — set to noindex/follow for legal/thin/search pages. */
+  /**
+   * robots directives. Indexed pages get generous snippet/preview limits by
+   * default (Google shows richer results); noindex pages get index:false.
+   */
   robots?: {
     follow: boolean
     index: boolean
+    /** 'none' | 'standard' | 'large' — image preview size in results. */
+    'max-image-preview'?: 'large' | 'none' | 'standard'
+    /** Max text snippet length; -1 = no limit. Next maps to max-snippet. */
+    'max-snippet'?: number
+    /** Max video preview seconds; -1 = no limit. */
+    'max-video-preview'?: number
   }
   title: string
 }
@@ -140,10 +155,24 @@ export function buildMetadata({
       title,
       ...(description && { description }),
       ...(images && { images }),
+      type: 'website',
       locale,
+      ...(siteName ? { siteName } : {}),
+      ...(canonical ? { url: canonical } : {}),
     },
-    // noindex → tell search engines to exclude the page but still follow links
-    // (authority flows through). For legal/thin/search-result pages.
-    ...(meta?.noindex ? { robots: { follow: true, index: false } } : {}),
+    // robots: noindex pages are excluded (follow keeps link authority). Indexed
+    // pages get generous snippet/preview limits so Google can show rich results
+    // (long snippets, large image previews, full video previews).
+    ...(meta?.noindex
+      ? { robots: { follow: true, index: false } }
+      : {
+          robots: {
+            follow: true,
+            index: true,
+            'max-image-preview': 'large' as const,
+            'max-snippet': -1,
+            'max-video-preview': -1,
+          },
+        }),
   }
 }

src/plugin.ts

@@ -76,11 +76,21 @@ export const ipalKit = (options: IpalOptions): Plugin => {
         // optional peer dependency at build time (it isn't in the plugin's own
         // node_modules). Avoids TS2307 without @ts-expect-error; the module
         // exists at runtime in projects that installed it.
-        const pkg = '@clocklimited/payload-2fa'
-        const { totpPlugin } = (await import(pkg)) as {
-          totpPlugin: (opts: Record<string, unknown>) => Plugin
+        // @ts-ignore
+        const mod = (await import('@clocklimited/payload-2fa')) as {
+          payloadTotp?: (opts: Record<string, unknown>) => Plugin
+          totpPlugin?: (opts: Record<string, unknown>) => Plugin
         }
-        config = await totpPlugin({
+        // The package exports `payloadTotp`; older/other builds may use
+        // `totpPlugin`. Accept either so a rename doesn't break us.
+        const totp = mod.payloadTotp ?? mod.totpPlugin
+        if (typeof totp !== 'function') {
+          throw new Error(
+            'expected export payloadTotp (or totpPlugin) to be a function — ' +
+              'check the installed @clocklimited/payload-2fa version',
+          )
+        }
+        config = await totp({
           collection: tf.collectionSlug ?? 'users',
           forceSetup: true, // ENFORCED — every user must set up TOTP; no opt-out
           totp: { issuer: tf.issuer },