@objectstack/plugin-audit 3.2.6 → 3.2.8

package/.turbo/turbo-build.log

@@ -1,5 +1,5 @@
 
-> @objectstack/plugin-audit@3.2.6 build /home/runner/work/spec/spec/packages/plugins/plugin-audit
+> @objectstack/plugin-audit@3.2.8 build /home/runner/work/spec/spec/packages/plugins/plugin-audit
 > tsup --config ../../../tsup.config.ts
 
 CLI Building entry: src/index.ts
@@ -10,13 +10,13 @@
 CLI Cleaning output folder
 ESM Build start
 CJS Build start
-CJS dist/index.js     3.97 KB
-CJS dist/index.js.map 5.38 KB
-CJS ⚡️ Build success in 29ms
-ESM dist/index.mjs     2.83 KB
-ESM dist/index.mjs.map 4.98 KB
-ESM ⚡️ Build success in 33ms
+ESM dist/index.mjs     3.29 KB
+ESM dist/index.mjs.map 6.16 KB
+ESM ⚡️ Build success in 84ms
+CJS dist/index.js     4.47 KB
+CJS dist/index.js.map 6.62 KB
+CJS ⚡️ Build success in 86ms
 DTS Build start
-DTS ⚡️ Build success in 3256ms
-DTS dist/index.d.mts 104.39 KB
-DTS dist/index.d.ts  104.39 KB
+DTS ⚡️ Build success in 19915ms
+DTS dist/index.d.mts 104.77 KB
+DTS dist/index.d.ts  104.77 KB

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @objectstack/plugin-audit
 
+## 3.2.8
+
+### Patch Changes
+
+- @objectstack/spec@3.2.8
+- @objectstack/core@3.2.8
+
+## 3.2.7
+
+### Patch Changes
+
+- @objectstack/spec@3.2.7
+
 ## 3.2.6
 
 ### Patch Changes

package/dist/index.d.mts

@@ -1,6 +1,20 @@
+import { Plugin, PluginContext } from '@objectstack/core';
 import { z } from 'zod';
 import * as _objectstack_spec_data from '@objectstack/spec/data';
 
+/**
+ * AuditPlugin
+ *
+ * Registers the sys_audit_log system object with ObjectQL so it is
+ * discoverable by the studio and available for CRUD operations.
+ */
+declare class AuditPlugin implements Plugin {
+    name: string;
+    type: string;
+    version: string;
+    init(ctx: PluginContext): Promise<void>;
+}
+
 /**
  * XState-inspired State Machine Protocol
  * Used to define strict business logic constraints and lifecycle management.
@@ -2310,4 +2324,4 @@ declare const SysAuditLog: Omit<{
     };
 }, "fields">;
 
-export { SysAuditLog };
+export { AuditPlugin, SysAuditLog };

package/dist/index.d.ts

@@ -1,6 +1,20 @@
+import { Plugin, PluginContext } from '@objectstack/core';
 import { z } from 'zod';
 import * as _objectstack_spec_data from '@objectstack/spec/data';
 
+/**
+ * AuditPlugin
+ *
+ * Registers the sys_audit_log system object with ObjectQL so it is
+ * discoverable by the studio and available for CRUD operations.
+ */
+declare class AuditPlugin implements Plugin {
+    name: string;
+    type: string;
+    version: string;
+    init(ctx: PluginContext): Promise<void>;
+}
+
 /**
  * XState-inspired State Machine Protocol
  * Used to define strict business logic constraints and lifecycle management.
@@ -2310,4 +2324,4 @@ declare const SysAuditLog: Omit<{
     };
 }, "fields">;
 
-export { SysAuditLog };
+export { AuditPlugin, SysAuditLog };

package/dist/index.js

@@ -20,6 +20,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  AuditPlugin: () => AuditPlugin,
   SysAuditLog: () => SysAuditLog
 });
 module.exports = __toCommonJS(index_exports);
@@ -119,8 +120,29 @@ var SysAuditLog = import_data.ObjectSchema.create({
     clone: false
   }
 });
+
+// src/audit-plugin.ts
+var AuditPlugin = class {
+  constructor() {
+    this.name = "com.objectstack.audit";
+    this.type = "standard";
+    this.version = "1.0.0";
+  }
+  async init(ctx) {
+    ctx.registerService("app.com.objectstack.audit", {
+      id: "com.objectstack.audit",
+      name: "Audit",
+      version: "1.0.0",
+      type: "plugin",
+      namespace: "sys",
+      objects: [SysAuditLog]
+    });
+    ctx.logger.info("Audit Plugin initialized");
+  }
+};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  AuditPlugin,
   SysAuditLog
 });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/objects/sys-audit-log.object.ts"],"sourcesContent":["// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\n/**\n * @objectstack/plugin-audit\n *\n * Audit Plugin for ObjectStack\n * Provides the sys_audit_log system object definition for immutable audit trails.\n */\n\n// System Object Definitions (sys namespace)\nexport { SysAuditLog } from './objects/index.js';\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { ObjectSchema, Field } from '@objectstack/spec/data';\n\n/**\n * sys_audit_log — System Audit Log Object\n *\n * Immutable audit trail for all significant platform events.\n * Records who did what, when, and the before/after state.\n *\n * @namespace sys\n */\nexport const SysAuditLog = ObjectSchema.create({\n  namespace: 'sys',\n  name: 'audit_log',\n  label: 'Audit Log',\n  pluralLabel: 'Audit Logs',\n  icon: 'scroll-text',\n  isSystem: true,\n  description: 'Immutable audit trail for platform events',\n  titleFormat: '{action} on {object_name} by {user_id}',\n  compactLayout: ['action', 'object_name', 'user_id', 'created_at'],\n  \n  fields: {\n    id: Field.text({\n      label: 'Audit Log ID',\n      required: true,\n      readonly: true,\n    }),\n    \n    created_at: Field.datetime({\n      label: 'Timestamp',\n      required: true,\n      defaultValue: 'NOW()',\n      readonly: true,\n    }),\n    \n    user_id: Field.text({\n      label: 'User ID',\n      required: false,\n      description: 'User who performed the action (null for system actions)',\n    }),\n    \n    action: Field.select(['create', 'update', 'delete', 'restore', 'login', 'logout', 'permission_change', 'config_change', 'export', 'import'], {\n      label: 'Action',\n      required: true,\n      description: 'Action type (snake_case). Values: create, update, delete, restore, login, logout, permission_change, config_change, export, import',\n    }),\n    \n    object_name: Field.text({\n      label: 'Object Name',\n      required: false,\n      maxLength: 255,\n      description: 'Target object (e.g. sys_user, project_task)',\n    }),\n    \n    record_id: Field.text({\n      label: 'Record ID',\n      required: false,\n      description: 'ID of the affected record',\n    }),\n    \n    old_value: Field.textarea({\n      label: 'Old Value',\n      required: false,\n      description: 'JSON-serialized previous state',\n    }),\n    \n    new_value: Field.textarea({\n      label: 'New Value',\n      required: false,\n      description: 'JSON-serialized new state',\n    }),\n    \n    ip_address: Field.text({\n      label: 'IP Address',\n      required: false,\n      maxLength: 45,\n    }),\n    \n    user_agent: Field.textarea({\n      label: 'User Agent',\n      required: false,\n    }),\n    \n    tenant_id: Field.text({\n      label: 'Tenant ID',\n      required: false,\n      description: 'Tenant context for multi-tenant isolation',\n    }),\n    \n    metadata: Field.textarea({\n      label: 'Metadata',\n      required: false,\n      description: 'JSON-serialized additional context',\n    }),\n  },\n  \n  indexes: [\n    { fields: ['created_at'] },\n    { fields: ['user_id'] },\n    { fields: ['object_name', 'record_id'] },\n    { fields: ['action'] },\n    { fields: ['tenant_id'] },\n  ],\n  \n  enable: {\n    trackHistory: false, // Audit logs are themselves the audit trail\n    searchable: true,\n    apiEnabled: true,\n    apiMethods: ['get', 'list'], // Read-only — audit logs are immutable; creation happens via internal system hooks only\n    trash: false, // Never soft-delete audit logs\n    mru: false,\n    clone: false,\n  },\n});\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACEA,kBAAoC;AAU7B,IAAM,cAAc,yBAAa,OAAO;AAAA,EAC7C,WAAW;AAAA,EACX,MAAM;AAAA,EACN,OAAO;AAAA,EACP,aAAa;AAAA,EACb,MAAM;AAAA,EACN,UAAU;AAAA,EACV,aAAa;AAAA,EACb,aAAa;AAAA,EACb,eAAe,CAAC,UAAU,eAAe,WAAW,YAAY;AAAA,EAEhE,QAAQ;AAAA,IACN,IAAI,kBAAM,KAAK;AAAA,MACb,OAAO;AAAA,MACP,UAAU;AAAA,MACV,UAAU;AAAA,IACZ,CAAC;AAAA,IAED,YAAY,kBAAM,SAAS;AAAA,MACzB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,cAAc;AAAA,MACd,UAAU;AAAA,IACZ,CAAC;AAAA,IAED,SAAS,kBAAM,KAAK;AAAA,MAClB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,QAAQ,kBAAM,OAAO,CAAC,UAAU,UAAU,UAAU,WAAW,SAAS,UAAU,qBAAqB,iBAAiB,UAAU,QAAQ,GAAG;AAAA,MAC3I,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,aAAa,kBAAM,KAAK;AAAA,MACtB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,WAAW;AAAA,MACX,aAAa;AAAA,IACf,CAAC;AAAA,IAED,WAAW,kBAAM,KAAK;AAAA,MACpB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,WAAW,kBAAM,SAAS;AAAA,MACxB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,WAAW,kBAAM,SAAS;AAAA,MACxB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,YAAY,kBAAM,KAAK;AAAA,MACrB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,WAAW;AAAA,IACb,CAAC;AAAA,IAED,YAAY,kBAAM,SAAS;AAAA,MACzB,OAAO;AAAA,MACP,UAAU;AAAA,IACZ,CAAC;AAAA,IAED,WAAW,kBAAM,KAAK;AAAA,MACpB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,UAAU,kBAAM,SAAS;AAAA,MACvB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,EACH;AAAA,EAEA,SAAS;AAAA,IACP,EAAE,QAAQ,CAAC,YAAY,EAAE;AAAA,IACzB,EAAE,QAAQ,CAAC,SAAS,EAAE;AAAA,IACtB,EAAE,QAAQ,CAAC,eAAe,WAAW,EAAE;AAAA,IACvC,EAAE,QAAQ,CAAC,QAAQ,EAAE;AAAA,IACrB,EAAE,QAAQ,CAAC,WAAW,EAAE;AAAA,EAC1B;AAAA,EAEA,QAAQ;AAAA,IACN,cAAc;AAAA;AAAA,IACd,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,YAAY,CAAC,OAAO,MAAM;AAAA;AAAA,IAC1B,OAAO;AAAA;AAAA,IACP,KAAK;AAAA,IACL,OAAO;AAAA,EACT;AACF,CAAC;","names":[]}
+{"version":3,"sources":["../src/index.ts","../src/objects/sys-audit-log.object.ts","../src/audit-plugin.ts"],"sourcesContent":["// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\n/**\n * @objectstack/plugin-audit\n *\n * Audit Plugin for ObjectStack\n * Provides the sys_audit_log system object definition for immutable audit trails.\n */\n\nexport { AuditPlugin } from './audit-plugin.js';\n\n// System Object Definitions (sys namespace)\nexport { SysAuditLog } from './objects/index.js';\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { ObjectSchema, Field } from '@objectstack/spec/data';\n\n/**\n * sys_audit_log — System Audit Log Object\n *\n * Immutable audit trail for all significant platform events.\n * Records who did what, when, and the before/after state.\n *\n * @namespace sys\n */\nexport const SysAuditLog = ObjectSchema.create({\n  namespace: 'sys',\n  name: 'audit_log',\n  label: 'Audit Log',\n  pluralLabel: 'Audit Logs',\n  icon: 'scroll-text',\n  isSystem: true,\n  description: 'Immutable audit trail for platform events',\n  titleFormat: '{action} on {object_name} by {user_id}',\n  compactLayout: ['action', 'object_name', 'user_id', 'created_at'],\n  \n  fields: {\n    id: Field.text({\n      label: 'Audit Log ID',\n      required: true,\n      readonly: true,\n    }),\n    \n    created_at: Field.datetime({\n      label: 'Timestamp',\n      required: true,\n      defaultValue: 'NOW()',\n      readonly: true,\n    }),\n    \n    user_id: Field.text({\n      label: 'User ID',\n      required: false,\n      description: 'User who performed the action (null for system actions)',\n    }),\n    \n    action: Field.select(['create', 'update', 'delete', 'restore', 'login', 'logout', 'permission_change', 'config_change', 'export', 'import'], {\n      label: 'Action',\n      required: true,\n      description: 'Action type (snake_case). Values: create, update, delete, restore, login, logout, permission_change, config_change, export, import',\n    }),\n    \n    object_name: Field.text({\n      label: 'Object Name',\n      required: false,\n      maxLength: 255,\n      description: 'Target object (e.g. sys_user, project_task)',\n    }),\n    \n    record_id: Field.text({\n      label: 'Record ID',\n      required: false,\n      description: 'ID of the affected record',\n    }),\n    \n    old_value: Field.textarea({\n      label: 'Old Value',\n      required: false,\n      description: 'JSON-serialized previous state',\n    }),\n    \n    new_value: Field.textarea({\n      label: 'New Value',\n      required: false,\n      description: 'JSON-serialized new state',\n    }),\n    \n    ip_address: Field.text({\n      label: 'IP Address',\n      required: false,\n      maxLength: 45,\n    }),\n    \n    user_agent: Field.textarea({\n      label: 'User Agent',\n      required: false,\n    }),\n    \n    tenant_id: Field.text({\n      label: 'Tenant ID',\n      required: false,\n      description: 'Tenant context for multi-tenant isolation',\n    }),\n    \n    metadata: Field.textarea({\n      label: 'Metadata',\n      required: false,\n      description: 'JSON-serialized additional context',\n    }),\n  },\n  \n  indexes: [\n    { fields: ['created_at'] },\n    { fields: ['user_id'] },\n    { fields: ['object_name', 'record_id'] },\n    { fields: ['action'] },\n    { fields: ['tenant_id'] },\n  ],\n  \n  enable: {\n    trackHistory: false, // Audit logs are themselves the audit trail\n    searchable: true,\n    apiEnabled: true,\n    apiMethods: ['get', 'list'], // Read-only — audit logs are immutable; creation happens via internal system hooks only\n    trash: false, // Never soft-delete audit logs\n    mru: false,\n    clone: false,\n  },\n});\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport type { Plugin, PluginContext } from '@objectstack/core';\nimport { SysAuditLog } from './objects/index.js';\n\n/**\n * AuditPlugin\n *\n * Registers the sys_audit_log system object with ObjectQL so it is\n * discoverable by the studio and available for CRUD operations.\n */\nexport class AuditPlugin implements Plugin {\n  name = 'com.objectstack.audit';\n  type = 'standard';\n  version = '1.0.0';\n\n  async init(ctx: PluginContext): Promise<void> {\n    // Register audit system objects so ObjectQLPlugin auto-discovers them\n    ctx.registerService('app.com.objectstack.audit', {\n      id: 'com.objectstack.audit',\n      name: 'Audit',\n      version: '1.0.0',\n      type: 'plugin',\n      namespace: 'sys',\n      objects: [SysAuditLog],\n    });\n\n    ctx.logger.info('Audit Plugin initialized');\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACEA,kBAAoC;AAU7B,IAAM,cAAc,yBAAa,OAAO;AAAA,EAC7C,WAAW;AAAA,EACX,MAAM;AAAA,EACN,OAAO;AAAA,EACP,aAAa;AAAA,EACb,MAAM;AAAA,EACN,UAAU;AAAA,EACV,aAAa;AAAA,EACb,aAAa;AAAA,EACb,eAAe,CAAC,UAAU,eAAe,WAAW,YAAY;AAAA,EAEhE,QAAQ;AAAA,IACN,IAAI,kBAAM,KAAK;AAAA,MACb,OAAO;AAAA,MACP,UAAU;AAAA,MACV,UAAU;AAAA,IACZ,CAAC;AAAA,IAED,YAAY,kBAAM,SAAS;AAAA,MACzB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,cAAc;AAAA,MACd,UAAU;AAAA,IACZ,CAAC;AAAA,IAED,SAAS,kBAAM,KAAK;AAAA,MAClB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,QAAQ,kBAAM,OAAO,CAAC,UAAU,UAAU,UAAU,WAAW,SAAS,UAAU,qBAAqB,iBAAiB,UAAU,QAAQ,GAAG;AAAA,MAC3I,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,aAAa,kBAAM,KAAK;AAAA,MACtB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,WAAW;AAAA,MACX,aAAa;AAAA,IACf,CAAC;AAAA,IAED,WAAW,kBAAM,KAAK;AAAA,MACpB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,WAAW,kBAAM,SAAS;AAAA,MACxB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,WAAW,kBAAM,SAAS;AAAA,MACxB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,YAAY,kBAAM,KAAK;AAAA,MACrB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,WAAW;AAAA,IACb,CAAC;AAAA,IAED,YAAY,kBAAM,SAAS;AAAA,MACzB,OAAO;AAAA,MACP,UAAU;AAAA,IACZ,CAAC;AAAA,IAED,WAAW,kBAAM,KAAK;AAAA,MACpB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,UAAU,kBAAM,SAAS;AAAA,MACvB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,EACH;AAAA,EAEA,SAAS;AAAA,IACP,EAAE,QAAQ,CAAC,YAAY,EAAE;AAAA,IACzB,EAAE,QAAQ,CAAC,SAAS,EAAE;AAAA,IACtB,EAAE,QAAQ,CAAC,eAAe,WAAW,EAAE;AAAA,IACvC,EAAE,QAAQ,CAAC,QAAQ,EAAE;AAAA,IACrB,EAAE,QAAQ,CAAC,WAAW,EAAE;AAAA,EAC1B;AAAA,EAEA,QAAQ;AAAA,IACN,cAAc;AAAA;AAAA,IACd,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,YAAY,CAAC,OAAO,MAAM;AAAA;AAAA,IAC1B,OAAO;AAAA;AAAA,IACP,KAAK;AAAA,IACL,OAAO;AAAA,EACT;AACF,CAAC;;;ACxGM,IAAM,cAAN,MAAoC;AAAA,EAApC;AACL,gBAAO;AACP,gBAAO;AACP,mBAAU;AAAA;AAAA,EAEV,MAAM,KAAK,KAAmC;AAE5C,QAAI,gBAAgB,6BAA6B;AAAA,MAC/C,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,MACN,WAAW;AAAA,MACX,SAAS,CAAC,WAAW;AAAA,IACvB,CAAC;AAED,QAAI,OAAO,KAAK,0BAA0B;AAAA,EAC5C;AACF;","names":[]}

package/dist/index.mjs

@@ -93,7 +93,28 @@ var SysAuditLog = ObjectSchema.create({
     clone: false
   }
 });
+
+// src/audit-plugin.ts
+var AuditPlugin = class {
+  constructor() {
+    this.name = "com.objectstack.audit";
+    this.type = "standard";
+    this.version = "1.0.0";
+  }
+  async init(ctx) {
+    ctx.registerService("app.com.objectstack.audit", {
+      id: "com.objectstack.audit",
+      name: "Audit",
+      version: "1.0.0",
+      type: "plugin",
+      namespace: "sys",
+      objects: [SysAuditLog]
+    });
+    ctx.logger.info("Audit Plugin initialized");
+  }
+};
 export {
+  AuditPlugin,
   SysAuditLog
 };
 //# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/objects/sys-audit-log.object.ts"],"sourcesContent":["// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { ObjectSchema, Field } from '@objectstack/spec/data';\n\n/**\n * sys_audit_log — System Audit Log Object\n *\n * Immutable audit trail for all significant platform events.\n * Records who did what, when, and the before/after state.\n *\n * @namespace sys\n */\nexport const SysAuditLog = ObjectSchema.create({\n  namespace: 'sys',\n  name: 'audit_log',\n  label: 'Audit Log',\n  pluralLabel: 'Audit Logs',\n  icon: 'scroll-text',\n  isSystem: true,\n  description: 'Immutable audit trail for platform events',\n  titleFormat: '{action} on {object_name} by {user_id}',\n  compactLayout: ['action', 'object_name', 'user_id', 'created_at'],\n  \n  fields: {\n    id: Field.text({\n      label: 'Audit Log ID',\n      required: true,\n      readonly: true,\n    }),\n    \n    created_at: Field.datetime({\n      label: 'Timestamp',\n      required: true,\n      defaultValue: 'NOW()',\n      readonly: true,\n    }),\n    \n    user_id: Field.text({\n      label: 'User ID',\n      required: false,\n      description: 'User who performed the action (null for system actions)',\n    }),\n    \n    action: Field.select(['create', 'update', 'delete', 'restore', 'login', 'logout', 'permission_change', 'config_change', 'export', 'import'], {\n      label: 'Action',\n      required: true,\n      description: 'Action type (snake_case). Values: create, update, delete, restore, login, logout, permission_change, config_change, export, import',\n    }),\n    \n    object_name: Field.text({\n      label: 'Object Name',\n      required: false,\n      maxLength: 255,\n      description: 'Target object (e.g. sys_user, project_task)',\n    }),\n    \n    record_id: Field.text({\n      label: 'Record ID',\n      required: false,\n      description: 'ID of the affected record',\n    }),\n    \n    old_value: Field.textarea({\n      label: 'Old Value',\n      required: false,\n      description: 'JSON-serialized previous state',\n    }),\n    \n    new_value: Field.textarea({\n      label: 'New Value',\n      required: false,\n      description: 'JSON-serialized new state',\n    }),\n    \n    ip_address: Field.text({\n      label: 'IP Address',\n      required: false,\n      maxLength: 45,\n    }),\n    \n    user_agent: Field.textarea({\n      label: 'User Agent',\n      required: false,\n    }),\n    \n    tenant_id: Field.text({\n      label: 'Tenant ID',\n      required: false,\n      description: 'Tenant context for multi-tenant isolation',\n    }),\n    \n    metadata: Field.textarea({\n      label: 'Metadata',\n      required: false,\n      description: 'JSON-serialized additional context',\n    }),\n  },\n  \n  indexes: [\n    { fields: ['created_at'] },\n    { fields: ['user_id'] },\n    { fields: ['object_name', 'record_id'] },\n    { fields: ['action'] },\n    { fields: ['tenant_id'] },\n  ],\n  \n  enable: {\n    trackHistory: false, // Audit logs are themselves the audit trail\n    searchable: true,\n    apiEnabled: true,\n    apiMethods: ['get', 'list'], // Read-only — audit logs are immutable; creation happens via internal system hooks only\n    trash: false, // Never soft-delete audit logs\n    mru: false,\n    clone: false,\n  },\n});\n"],"mappings":";AAEA,SAAS,cAAc,aAAa;AAU7B,IAAM,cAAc,aAAa,OAAO;AAAA,EAC7C,WAAW;AAAA,EACX,MAAM;AAAA,EACN,OAAO;AAAA,EACP,aAAa;AAAA,EACb,MAAM;AAAA,EACN,UAAU;AAAA,EACV,aAAa;AAAA,EACb,aAAa;AAAA,EACb,eAAe,CAAC,UAAU,eAAe,WAAW,YAAY;AAAA,EAEhE,QAAQ;AAAA,IACN,IAAI,MAAM,KAAK;AAAA,MACb,OAAO;AAAA,MACP,UAAU;AAAA,MACV,UAAU;AAAA,IACZ,CAAC;AAAA,IAED,YAAY,MAAM,SAAS;AAAA,MACzB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,cAAc;AAAA,MACd,UAAU;AAAA,IACZ,CAAC;AAAA,IAED,SAAS,MAAM,KAAK;AAAA,MAClB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,QAAQ,MAAM,OAAO,CAAC,UAAU,UAAU,UAAU,WAAW,SAAS,UAAU,qBAAqB,iBAAiB,UAAU,QAAQ,GAAG;AAAA,MAC3I,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,aAAa,MAAM,KAAK;AAAA,MACtB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,WAAW;AAAA,MACX,aAAa;AAAA,IACf,CAAC;AAAA,IAED,WAAW,MAAM,KAAK;AAAA,MACpB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,WAAW,MAAM,SAAS;AAAA,MACxB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,WAAW,MAAM,SAAS;AAAA,MACxB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,YAAY,MAAM,KAAK;AAAA,MACrB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,WAAW;AAAA,IACb,CAAC;AAAA,IAED,YAAY,MAAM,SAAS;AAAA,MACzB,OAAO;AAAA,MACP,UAAU;AAAA,IACZ,CAAC;AAAA,IAED,WAAW,MAAM,KAAK;AAAA,MACpB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,UAAU,MAAM,SAAS;AAAA,MACvB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,EACH;AAAA,EAEA,SAAS;AAAA,IACP,EAAE,QAAQ,CAAC,YAAY,EAAE;AAAA,IACzB,EAAE,QAAQ,CAAC,SAAS,EAAE;AAAA,IACtB,EAAE,QAAQ,CAAC,eAAe,WAAW,EAAE;AAAA,IACvC,EAAE,QAAQ,CAAC,QAAQ,EAAE;AAAA,IACrB,EAAE,QAAQ,CAAC,WAAW,EAAE;AAAA,EAC1B;AAAA,EAEA,QAAQ;AAAA,IACN,cAAc;AAAA;AAAA,IACd,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,YAAY,CAAC,OAAO,MAAM;AAAA;AAAA,IAC1B,OAAO;AAAA;AAAA,IACP,KAAK;AAAA,IACL,OAAO;AAAA,EACT;AACF,CAAC;","names":[]}
+{"version":3,"sources":["../src/objects/sys-audit-log.object.ts","../src/audit-plugin.ts"],"sourcesContent":["// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport { ObjectSchema, Field } from '@objectstack/spec/data';\n\n/**\n * sys_audit_log — System Audit Log Object\n *\n * Immutable audit trail for all significant platform events.\n * Records who did what, when, and the before/after state.\n *\n * @namespace sys\n */\nexport const SysAuditLog = ObjectSchema.create({\n  namespace: 'sys',\n  name: 'audit_log',\n  label: 'Audit Log',\n  pluralLabel: 'Audit Logs',\n  icon: 'scroll-text',\n  isSystem: true,\n  description: 'Immutable audit trail for platform events',\n  titleFormat: '{action} on {object_name} by {user_id}',\n  compactLayout: ['action', 'object_name', 'user_id', 'created_at'],\n  \n  fields: {\n    id: Field.text({\n      label: 'Audit Log ID',\n      required: true,\n      readonly: true,\n    }),\n    \n    created_at: Field.datetime({\n      label: 'Timestamp',\n      required: true,\n      defaultValue: 'NOW()',\n      readonly: true,\n    }),\n    \n    user_id: Field.text({\n      label: 'User ID',\n      required: false,\n      description: 'User who performed the action (null for system actions)',\n    }),\n    \n    action: Field.select(['create', 'update', 'delete', 'restore', 'login', 'logout', 'permission_change', 'config_change', 'export', 'import'], {\n      label: 'Action',\n      required: true,\n      description: 'Action type (snake_case). Values: create, update, delete, restore, login, logout, permission_change, config_change, export, import',\n    }),\n    \n    object_name: Field.text({\n      label: 'Object Name',\n      required: false,\n      maxLength: 255,\n      description: 'Target object (e.g. sys_user, project_task)',\n    }),\n    \n    record_id: Field.text({\n      label: 'Record ID',\n      required: false,\n      description: 'ID of the affected record',\n    }),\n    \n    old_value: Field.textarea({\n      label: 'Old Value',\n      required: false,\n      description: 'JSON-serialized previous state',\n    }),\n    \n    new_value: Field.textarea({\n      label: 'New Value',\n      required: false,\n      description: 'JSON-serialized new state',\n    }),\n    \n    ip_address: Field.text({\n      label: 'IP Address',\n      required: false,\n      maxLength: 45,\n    }),\n    \n    user_agent: Field.textarea({\n      label: 'User Agent',\n      required: false,\n    }),\n    \n    tenant_id: Field.text({\n      label: 'Tenant ID',\n      required: false,\n      description: 'Tenant context for multi-tenant isolation',\n    }),\n    \n    metadata: Field.textarea({\n      label: 'Metadata',\n      required: false,\n      description: 'JSON-serialized additional context',\n    }),\n  },\n  \n  indexes: [\n    { fields: ['created_at'] },\n    { fields: ['user_id'] },\n    { fields: ['object_name', 'record_id'] },\n    { fields: ['action'] },\n    { fields: ['tenant_id'] },\n  ],\n  \n  enable: {\n    trackHistory: false, // Audit logs are themselves the audit trail\n    searchable: true,\n    apiEnabled: true,\n    apiMethods: ['get', 'list'], // Read-only — audit logs are immutable; creation happens via internal system hooks only\n    trash: false, // Never soft-delete audit logs\n    mru: false,\n    clone: false,\n  },\n});\n","// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.\n\nimport type { Plugin, PluginContext } from '@objectstack/core';\nimport { SysAuditLog } from './objects/index.js';\n\n/**\n * AuditPlugin\n *\n * Registers the sys_audit_log system object with ObjectQL so it is\n * discoverable by the studio and available for CRUD operations.\n */\nexport class AuditPlugin implements Plugin {\n  name = 'com.objectstack.audit';\n  type = 'standard';\n  version = '1.0.0';\n\n  async init(ctx: PluginContext): Promise<void> {\n    // Register audit system objects so ObjectQLPlugin auto-discovers them\n    ctx.registerService('app.com.objectstack.audit', {\n      id: 'com.objectstack.audit',\n      name: 'Audit',\n      version: '1.0.0',\n      type: 'plugin',\n      namespace: 'sys',\n      objects: [SysAuditLog],\n    });\n\n    ctx.logger.info('Audit Plugin initialized');\n  }\n}\n"],"mappings":";AAEA,SAAS,cAAc,aAAa;AAU7B,IAAM,cAAc,aAAa,OAAO;AAAA,EAC7C,WAAW;AAAA,EACX,MAAM;AAAA,EACN,OAAO;AAAA,EACP,aAAa;AAAA,EACb,MAAM;AAAA,EACN,UAAU;AAAA,EACV,aAAa;AAAA,EACb,aAAa;AAAA,EACb,eAAe,CAAC,UAAU,eAAe,WAAW,YAAY;AAAA,EAEhE,QAAQ;AAAA,IACN,IAAI,MAAM,KAAK;AAAA,MACb,OAAO;AAAA,MACP,UAAU;AAAA,MACV,UAAU;AAAA,IACZ,CAAC;AAAA,IAED,YAAY,MAAM,SAAS;AAAA,MACzB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,cAAc;AAAA,MACd,UAAU;AAAA,IACZ,CAAC;AAAA,IAED,SAAS,MAAM,KAAK;AAAA,MAClB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,QAAQ,MAAM,OAAO,CAAC,UAAU,UAAU,UAAU,WAAW,SAAS,UAAU,qBAAqB,iBAAiB,UAAU,QAAQ,GAAG;AAAA,MAC3I,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,aAAa,MAAM,KAAK;AAAA,MACtB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,WAAW;AAAA,MACX,aAAa;AAAA,IACf,CAAC;AAAA,IAED,WAAW,MAAM,KAAK;AAAA,MACpB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,WAAW,MAAM,SAAS;AAAA,MACxB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,WAAW,MAAM,SAAS;AAAA,MACxB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,YAAY,MAAM,KAAK;AAAA,MACrB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,WAAW;AAAA,IACb,CAAC;AAAA,IAED,YAAY,MAAM,SAAS;AAAA,MACzB,OAAO;AAAA,MACP,UAAU;AAAA,IACZ,CAAC;AAAA,IAED,WAAW,MAAM,KAAK;AAAA,MACpB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,IAED,UAAU,MAAM,SAAS;AAAA,MACvB,OAAO;AAAA,MACP,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,EACH;AAAA,EAEA,SAAS;AAAA,IACP,EAAE,QAAQ,CAAC,YAAY,EAAE;AAAA,IACzB,EAAE,QAAQ,CAAC,SAAS,EAAE;AAAA,IACtB,EAAE,QAAQ,CAAC,eAAe,WAAW,EAAE;AAAA,IACvC,EAAE,QAAQ,CAAC,QAAQ,EAAE;AAAA,IACrB,EAAE,QAAQ,CAAC,WAAW,EAAE;AAAA,EAC1B;AAAA,EAEA,QAAQ;AAAA,IACN,cAAc;AAAA;AAAA,IACd,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,YAAY,CAAC,OAAO,MAAM;AAAA;AAAA,IAC1B,OAAO;AAAA;AAAA,IACP,KAAK;AAAA,IACL,OAAO;AAAA,EACT;AACF,CAAC;;;ACxGM,IAAM,cAAN,MAAoC;AAAA,EAApC;AACL,gBAAO;AACP,gBAAO;AACP,mBAAU;AAAA;AAAA,EAEV,MAAM,KAAK,KAAmC;AAE5C,QAAI,gBAAgB,6BAA6B;AAAA,MAC/C,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,SAAS;AAAA,MACT,MAAM;AAAA,MACN,WAAW;AAAA,MACX,SAAS,CAAC,WAAW;AAAA,IACvB,CAAC;AAED,QAAI,OAAO,KAAK,0BAA0B;AAAA,EAC5C;AACF;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@objectstack/plugin-audit",
-  "version": "3.2.6",
+  "version": "3.2.8",
   "license": "Apache-2.0",
   "description": "Audit Plugin for ObjectStack — System audit log object and audit trail",
   "main": "dist/index.js",
@@ -13,15 +13,16 @@
     }
   },
   "dependencies": {
-    "@objectstack/spec": "3.2.6"
+    "@objectstack/core": "3.2.8",
+    "@objectstack/spec": "3.2.8"
   },
   "devDependencies": {
-    "@types/node": "^25.3.5",
+    "@types/node": "^25.5.0",
     "typescript": "^5.0.0",
-    "vitest": "^4.0.18"
+    "vitest": "^4.1.0"
   },
   "scripts": {
     "build": "tsup --config ../../../tsup.config.ts",
-    "test": "vitest run"
+    "test": "vitest run --passWithNoTests"
   }
 }

package/src/audit-plugin.ts

@@ -0,0 +1,30 @@
+// Copyright (c) 2025 ObjectStack. Licensed under the Apache-2.0 license.
+
+import type { Plugin, PluginContext } from '@objectstack/core';
+import { SysAuditLog } from './objects/index.js';
+
+/**
+ * AuditPlugin
+ *
+ * Registers the sys_audit_log system object with ObjectQL so it is
+ * discoverable by the studio and available for CRUD operations.
+ */
+export class AuditPlugin implements Plugin {
+  name = 'com.objectstack.audit';
+  type = 'standard';
+  version = '1.0.0';
+
+  async init(ctx: PluginContext): Promise<void> {
+    // Register audit system objects so ObjectQLPlugin auto-discovers them
+    ctx.registerService('app.com.objectstack.audit', {
+      id: 'com.objectstack.audit',
+      name: 'Audit',
+      version: '1.0.0',
+      type: 'plugin',
+      namespace: 'sys',
+      objects: [SysAuditLog],
+    });
+
+    ctx.logger.info('Audit Plugin initialized');
+  }
+}

package/src/index.ts

@@ -7,5 +7,7 @@
  * Provides the sys_audit_log system object definition for immutable audit trails.
  */
 
+export { AuditPlugin } from './audit-plugin.js';
+
 // System Object Definitions (sys namespace)
 export { SysAuditLog } from './objects/index.js';