@iblai/data-layer 1.12.4 → 1.12.5

package/dist/index.js

@@ -46698,17 +46698,54 @@ const { useGetWorkflowsQuery, useLazyGetWorkflowsQuery, useGetWorkflowQuery, use
 const AUDIT_LOGS_REDUCER_PATH = 'auditLogsApiSlice';
 const AUDIT_LOGS_QUERY_KEYS = {
     GET_AUDIT_LOGS: () => ['AUDIT_LOGS'],
+    GET_PLATFORM_AUDIT_LOGS: () => ['PLATFORM_AUDIT_LOGS'],
 };
 const AUDIT_LOGS_ENDPOINTS = {
     GET_AUDIT_LOGS: {
         service: exports.SERVICES.AXD,
         path: (org, userId) => `/api/ai-mentor/orgs/${org}/users/${userId}/mentors/audit-logs/`,
     },
+    GET_PLATFORM_AUDIT_LOGS: {
+        service: exports.SERVICES.DM,
+        path: (platformKey) => `/api/core/platforms/${encodeURIComponent(platformKey)}/audit-logs/`,
+    },
 };
 
+/**
+ * The only query params the platform audit endpoint accepts. Anything else a
+ * caller puts on `params` — `platform_key` above all — is dropped rather than
+ * forwarded: tenant isolation rests on the path segment, and a smuggled scope
+ * override must never reach the query string.
+ */
+const ALLOWED_PLATFORM_AUDIT_PARAMS = [
+    'event_type',
+    'action',
+    'actor_username',
+    'actor_email',
+    'from_date',
+    'to_date',
+    'limit',
+    'offset',
+];
+const pickAllowedParams = (params) => {
+    if (!params)
+        return params;
+    const safeParams = {};
+    for (const key of ALLOWED_PLATFORM_AUDIT_PARAMS) {
+        const value = params[key];
+        if (value !== undefined) {
+            // Each key maps to its own value type; the loop erases that pairing.
+            safeParams[key] = value;
+        }
+    }
+    return safeParams;
+};
 const auditLogsApiSlice = react.createApi({
     reducerPath: AUDIT_LOGS_REDUCER_PATH,
-    tagTypes: [...AUDIT_LOGS_QUERY_KEYS.GET_AUDIT_LOGS()],
+    tagTypes: [
+        ...AUDIT_LOGS_QUERY_KEYS.GET_AUDIT_LOGS(),
+        ...AUDIT_LOGS_QUERY_KEYS.GET_PLATFORM_AUDIT_LOGS(),
+    ],
     baseQuery: iblFetchBaseQuery,
     endpoints: (builder) => ({
         getAuditLogs: builder.query({
@@ -46719,9 +46756,51 @@ const auditLogsApiSlice = react.createApi({
             }),
             providesTags: AUDIT_LOGS_QUERY_KEYS.GET_AUDIT_LOGS(),
         }),
+        getPlatformAuditLogs: builder.query({
+            query: (args) => ({
+                url: AUDIT_LOGS_ENDPOINTS.GET_PLATFORM_AUDIT_LOGS.path(args.platformKey),
+                service: AUDIT_LOGS_ENDPOINTS.GET_PLATFORM_AUDIT_LOGS.service,
+                params: pickAllowedParams(args.params),
+            }),
+            providesTags: AUDIT_LOGS_QUERY_KEYS.GET_PLATFORM_AUDIT_LOGS(),
+        }),
     }),
 });
-const { useGetAuditLogsQuery, useLazyGetAuditLogsQuery } = auditLogsApiSlice;
+const { useGetAuditLogsQuery, useLazyGetAuditLogsQuery, useGetPlatformAuditLogsQuery, useLazyGetPlatformAuditLogsQuery, } = auditLogsApiSlice;
+
+/* -------------------------------------------------------------------------
+ * Platform-scoped audit trail
+ *
+ * `/api/core/platforms/<platform_key>/audit-logs/` merges two kinds of entry
+ * into one stream, told apart by `event_type`:
+ *   - `event_type === null` → an automatic CRUD/model change. Read
+ *     `resource_type` / `resource_id` / `resource_repr` and the `changes` diff.
+ *   - `event_type !== null` → a manually recorded security/activity event.
+ *     Read the `event_type` label and the `metadata` payload.
+ * Everything else (`action`, `actor_*`, `timestamp`, `remote_addr`) is shared.
+ * ---------------------------------------------------------------------- */
+/** Manual event categories the backend records. `null` means a CRUD entry. */
+const PLATFORM_AUDIT_EVENT_TYPES = [
+    'login',
+    'logout',
+    'login_failed',
+    'password_change',
+    'export',
+    'download_file',
+    'api_call',
+    'view_student_record',
+    'change_grade',
+    'admin_action',
+];
+/** Integer codes the `action` query param accepts. */
+const PLATFORM_AUDIT_ACTION_CODES = {
+    create: 0,
+    update: 1,
+    delete: 2,
+    access: 3,
+};
+/** Backend caps `limit` at 1000 and defaults to 100 when it is omitted. */
+const PLATFORM_AUDIT_LOGS_MAX_LIMIT = 1000;
 
 const EVALUATIONS_REDUCER_PATH = 'evaluationsApiSlice';
 const evaluationsBase = (org, userId) => `/api/ai-mentor/orgs/${org}/users/${userId}/evaluations`;
@@ -47648,6 +47727,9 @@ exports.MENTOR_SKILL_ASSIGNMENTS_PAGE_SIZE = MENTOR_SKILL_ASSIGNMENTS_PAGE_SIZE;
 exports.NOTIFICATIONS_CUSTOM_ENDPOINTS = NOTIFICATIONS_CUSTOM_ENDPOINTS;
 exports.NOTIFICATIONS_CUSTOM_REDUCER_PATH = NOTIFICATIONS_CUSTOM_REDUCER_PATH;
 exports.NOTIFICATIONS_CUSTOM_TAGS = NOTIFICATIONS_CUSTOM_TAGS;
+exports.PLATFORM_AUDIT_ACTION_CODES = PLATFORM_AUDIT_ACTION_CODES;
+exports.PLATFORM_AUDIT_EVENT_TYPES = PLATFORM_AUDIT_EVENT_TYPES;
+exports.PLATFORM_AUDIT_LOGS_MAX_LIMIT = PLATFORM_AUDIT_LOGS_MAX_LIMIT;
 exports.PLATFORM_CONFIGURATION_TAG = PLATFORM_CONFIGURATION_TAG;
 exports.PLATFORM_CUSTOM_ENDPOINTS = PLATFORM_CUSTOM_ENDPOINTS;
 exports.PLATFORM_CUSTOM_REDUCER_PATH = PLATFORM_CUSTOM_REDUCER_PATH;
@@ -48071,6 +48153,7 @@ exports.useGetPeriodicAgentsQuery = useGetPeriodicAgentsQuery;
 exports.useGetPersonnalizedMentorsQuery = useGetPersonnalizedMentorsQuery;
 exports.useGetPersonnalizedSearchQuery = useGetPersonnalizedSearchQuery;
 exports.useGetPinnedMessagesQuery = useGetPinnedMessagesQuery;
+exports.useGetPlatformAuditLogsQuery = useGetPlatformAuditLogsQuery;
 exports.useGetPlatformConfigurationsQuery = useGetPlatformConfigurationsQuery;
 exports.useGetPlatformImageAssetDetailsQuery = useGetPlatformImageAssetDetailsQuery;
 exports.useGetPlatformImageAssetsListQuery = useGetPlatformImageAssetsListQuery;
@@ -48298,6 +48381,7 @@ exports.useLazyGetPeriodicAgentsQuery = useLazyGetPeriodicAgentsQuery;
 exports.useLazyGetPersonnalizedMentorsQuery = useLazyGetPersonnalizedMentorsQuery;
 exports.useLazyGetPersonnalizedSearchQuery = useLazyGetPersonnalizedSearchQuery;
 exports.useLazyGetPinnedMessagesQuery = useLazyGetPinnedMessagesQuery;
+exports.useLazyGetPlatformAuditLogsQuery = useLazyGetPlatformAuditLogsQuery;
 exports.useLazyGetPlatformInfoQuery = useLazyGetPlatformInfoQuery;
 exports.useLazyGetPlatformMembershipQuery = useLazyGetPlatformMembershipQuery;
 exports.useLazyGetProgramCompletionQuery = useLazyGetProgramCompletionQuery;