@open-mercato/core 0.5.1-develop.2663.2c29774b5b → 0.5.1-develop.2681.c559bb2bc3

package/src/modules/attachments/i18n/de.json

@@ -14,12 +14,14 @@
   "attachments.library.actions.refresh": "Aktualisieren",
   "attachments.library.actions.upload": "Hochladen",
   "attachments.library.confirm.delete": "Anhang \"{{name}}\" löschen? Diese Aktion kann nicht rückgängig gemacht werden.",
+  "attachments.library.delete": "Anhang löschen",
   "attachments.library.description": "Durchsuchen, taggen und verwalten Sie alle in diesem Arbeitsbereich gespeicherten Dateien.",
   "attachments.library.errors.delete": "Anhang konnte nicht gelöscht werden.",
   "attachments.library.errors.load": "Anhänge konnten nicht geladen werden.",
   "attachments.library.filters.partition": "Partition",
   "attachments.library.filters.tags": "Tags",
   "attachments.library.filters.tagsPlaceholder": "Nach Tag filtern",
+  "attachments.library.loadMore": "Load more",
   "attachments.library.loading": "Anhänge werden geladen…",
   "attachments.library.messages.deleted": "Anhang entfernt.",
   "attachments.library.metadata.assignments.add": "Zuordnung hinzufügen",
@@ -56,6 +58,8 @@
   "attachments.library.metadata.success": "Anhang aktualisiert.",
   "attachments.library.metadata.tagsPlaceholder": "Tags hinzufügen",
   "attachments.library.metadata.title": "Anhang-Metadaten bearbeiten",
+  "attachments.library.open": "Anhangdetails öffnen",
+  "attachments.library.openMetadata": "Details für {name} öffnen",
   "attachments.library.table.assignments": "Zuordnungen",
   "attachments.library.table.created": "Erstellt",
   "attachments.library.table.download": "Herunterladen",

package/src/modules/attachments/i18n/en.json

@@ -14,12 +14,14 @@
   "attachments.library.actions.refresh": "Refresh",
   "attachments.library.actions.upload": "Upload",
   "attachments.library.confirm.delete": "Delete attachment \"{{name}}\"? This action cannot be undone.",
+  "attachments.library.delete": "Delete attachment",
   "attachments.library.description": "Browse, tag, and manage every file stored in this workspace.",
   "attachments.library.errors.delete": "Failed to delete attachment.",
   "attachments.library.errors.load": "Failed to load attachments.",
   "attachments.library.filters.partition": "Partition",
   "attachments.library.filters.tags": "Tags",
   "attachments.library.filters.tagsPlaceholder": "Filter by tag",
+  "attachments.library.loadMore": "Load more",
   "attachments.library.loading": "Loading attachments…",
   "attachments.library.messages.deleted": "Attachment removed.",
   "attachments.library.metadata.assignments.add": "Add assignment",
@@ -56,6 +58,8 @@
   "attachments.library.metadata.success": "Attachment updated.",
   "attachments.library.metadata.tagsPlaceholder": "Add tags",
   "attachments.library.metadata.title": "Edit attachment metadata",
+  "attachments.library.open": "Open attachment details",
+  "attachments.library.openMetadata": "Open attachment details for {name}",
   "attachments.library.table.assignments": "Assignments",
   "attachments.library.table.created": "Created",
   "attachments.library.table.download": "Download",

package/src/modules/attachments/i18n/es.json

@@ -14,12 +14,14 @@
   "attachments.library.actions.refresh": "Actualizar",
   "attachments.library.actions.upload": "Subir",
   "attachments.library.confirm.delete": "¿Eliminar el archivo adjunto \"{{name}}\"? Esta acción no se puede deshacer.",
+  "attachments.library.delete": "Eliminar archivo adjunto",
   "attachments.library.description": "Explore, etiquete y administre todos los archivos almacenados en este espacio de trabajo.",
   "attachments.library.errors.delete": "No se pudo eliminar el archivo adjunto.",
   "attachments.library.errors.load": "No se pudieron cargar los archivos adjuntos.",
   "attachments.library.filters.partition": "Partición",
   "attachments.library.filters.tags": "Etiquetas",
   "attachments.library.filters.tagsPlaceholder": "Filtrar por etiqueta",
+  "attachments.library.loadMore": "Load more",
   "attachments.library.loading": "Cargando archivos adjuntos…",
   "attachments.library.messages.deleted": "Archivo adjunto eliminado.",
   "attachments.library.metadata.assignments.add": "Agregar asignación",
@@ -56,6 +58,8 @@
   "attachments.library.metadata.success": "Archivo adjunto actualizado.",
   "attachments.library.metadata.tagsPlaceholder": "Agregar etiquetas",
   "attachments.library.metadata.title": "Editar metadatos del archivo adjunto",
+  "attachments.library.open": "Abrir detalles del archivo adjunto",
+  "attachments.library.openMetadata": "Abrir detalles del archivo adjunto {name}",
   "attachments.library.table.assignments": "Asignaciones",
   "attachments.library.table.created": "Creado",
   "attachments.library.table.download": "Descargar",

package/src/modules/attachments/i18n/pl.json

@@ -14,12 +14,14 @@
   "attachments.library.actions.refresh": "Odśwież",
   "attachments.library.actions.upload": "Prześlij",
   "attachments.library.confirm.delete": "Usunąć załącznik \"{{name}}\"? Tej operacji nie można cofnąć.",
+  "attachments.library.delete": "Usuń załącznik",
   "attachments.library.description": "Przeglądaj, taguj i zarządzaj wszystkimi plikami w tym obszarze roboczym.",
   "attachments.library.errors.delete": "Nie udało się usunąć załącznika.",
   "attachments.library.errors.load": "Nie udało się załadować załączników.",
   "attachments.library.filters.partition": "Partycja",
   "attachments.library.filters.tags": "Tagi",
   "attachments.library.filters.tagsPlaceholder": "Filtruj wg tagu",
+  "attachments.library.loadMore": "Load more",
   "attachments.library.loading": "Ładowanie załączników…",
   "attachments.library.messages.deleted": "Załącznik usunięty.",
   "attachments.library.metadata.assignments.add": "Dodaj przypisanie",
@@ -56,6 +58,8 @@
   "attachments.library.metadata.success": "Załącznik zaktualizowany.",
   "attachments.library.metadata.tagsPlaceholder": "Dodaj tagi",
   "attachments.library.metadata.title": "Edytuj metadane załącznika",
+  "attachments.library.open": "Otwórz szczegóły załącznika",
+  "attachments.library.openMetadata": "Otwórz szczegóły załącznika {name}",
   "attachments.library.table.assignments": "Przypisania",
   "attachments.library.table.created": "Utworzono",
   "attachments.library.table.download": "Pobierz",

package/src/modules/audit_logs/api/audit-logs/actions/export/route.ts

@@ -0,0 +1,260 @@
+import { NextResponse } from 'next/server'
+import { z } from 'zod'
+import type { EntityManager } from '@mikro-orm/postgresql'
+import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
+import { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'
+import { defaultExportFilename, serializeExport, type PreparedExport } from '@open-mercato/shared/lib/crud/exporters'
+import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
+import { parseBooleanToken } from '@open-mercato/shared/lib/boolean'
+import { resolveFeatureCheckContext } from '@open-mercato/core/modules/directory/utils/organizationScope'
+import type { RbacService } from '@open-mercato/core/modules/auth/services/rbacService'
+import { extractChangeRows } from '@open-mercato/core/modules/audit_logs/lib/changeRows'
+import {
+  ACTION_LOG_FILTER_TYPES,
+  deriveActionLogActionType,
+  deriveActionLogSource,
+} from '@open-mercato/core/modules/audit_logs/lib/projections'
+import { ActionLogService } from '@open-mercato/core/modules/audit_logs/services/actionLogService'
+import { loadAuditLogDisplayMaps } from '../../display'
+
+export const metadata = {
+  GET: { requireAuth: true, requireFeatures: ['audit_logs.view_self'] },
+}
+
+const ACTION_TYPE_TOKENS = ACTION_LOG_FILTER_TYPES
+const SORT_FIELDS = ['createdAt', 'user', 'action', 'field', 'source'] as const
+const SORT_DIRECTIONS = ['asc', 'desc'] as const
+
+const exportQuerySchema = z.object({
+  organizationId: z.string().uuid().describe('Limit results to a specific organization').optional(),
+  actorUserId: z
+    .string()
+    .describe('Filter logs created by specific actor IDs (tenant administrators only). Accepts a single UUID or a comma-separated UUID list.')
+    .optional(),
+  resourceKind: z.string().describe('Filter by resource kind (e.g., "order", "product")').optional(),
+  resourceId: z.string().describe('Filter by resource ID (UUID of the specific record)').optional(),
+  actionType: z
+    .string()
+    .describe('Filter by action type (`create`, `edit`, `delete`, `assign`). Accepts a single value or a comma-separated list.')
+    .optional(),
+  fieldName: z
+    .string()
+    .describe('Filter to entries where the given field changed. Accepts a single field name or a comma-separated list.')
+    .optional(),
+  includeRelated: z
+    .enum(['true', 'false'])
+    .default('false')
+    .describe('When `true`, also returns changes to child entities linked via parentResourceKind/parentResourceId')
+    .optional(),
+  undoableOnly: z
+    .enum(['true', 'false'])
+    .default('false')
+    .describe('When `true`, only undoable actions are returned')
+    .optional(),
+  limit: z.string().describe('Maximum number of records to export (default 1000, capped at 1000)').optional(),
+  sortField: z
+    .enum(SORT_FIELDS)
+    .describe('Sort field: `createdAt`, `user`, `action`, `field`, or `source`.')
+    .optional(),
+  sortDir: z
+    .enum(SORT_DIRECTIONS)
+    .describe('Sort direction: `asc` or `desc`.')
+    .optional(),
+  before: z.string().describe('Return actions created before this ISO-8601 timestamp').optional(),
+  after: z.string().describe('Return actions created after this ISO-8601 timestamp').optional(),
+})
+
+const responseSchema = z.object({
+  file: z.literal('csv'),
+})
+
+const errorSchema = z.object({
+  error: z.string(),
+})
+
+function splitCsv(value: string | null): string[] {
+  if (!value) return []
+  return value
+    .split(',')
+    .map((entry) => entry.trim())
+    .filter(Boolean)
+}
+
+function parseActionTypes(param: string | null) {
+  return splitCsv(param).filter((value): value is (typeof ACTION_TYPE_TOKENS)[number] =>
+    ACTION_TYPE_TOKENS.includes(value as (typeof ACTION_TYPE_TOKENS)[number]),
+  )
+}
+
+function parseLimit(param: string | null): number {
+  if (!param) return 1000
+  const value = Number(param)
+  if (!Number.isFinite(value)) return 1000
+  return Math.min(Math.max(Math.trunc(value), 1), 1000)
+}
+
+function parseDate(value: string | null): Date | undefined {
+  if (!value) return undefined
+  const timestamp = Date.parse(value)
+  if (Number.isNaN(timestamp)) return undefined
+  return new Date(timestamp)
+}
+
+function formatValue(value: unknown): string {
+  if (value == null) return ''
+  if (value instanceof Date) return value.toISOString()
+  if (Array.isArray(value)) return value.map((entry) => formatValue(entry)).filter(Boolean).join(', ')
+  if (typeof value === 'object') return JSON.stringify(value)
+  return String(value)
+}
+
+export async function GET(req: Request) {
+  const auth = await getAuthFromRequest(req)
+  if (!auth) return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })
+
+  const container = await createRequestContainer()
+  const { organizationId: defaultOrganizationId, scope } = await resolveFeatureCheckContext({ container, auth, request: req })
+  const rbac = container.resolve('rbacService') as RbacService
+  const actionLogs = container.resolve('actionLogService') as ActionLogService
+  const em = container.resolve('em') as EntityManager
+
+  const canViewTenant = await rbac.userHasAllFeatures(
+    auth.sub,
+    ['audit_logs.view_tenant'],
+    { tenantId: auth.tenantId ?? null, organizationId: defaultOrganizationId ?? null },
+  )
+
+  const url = new URL(req.url)
+  const queryOrgId = url.searchParams.get('organizationId')
+  const actorQuery = url.searchParams.get('actorUserId')
+  const resourceKind = url.searchParams.get('resourceKind') ?? undefined
+  const resourceId = url.searchParams.get('resourceId') ?? undefined
+  const actionTypes = parseActionTypes(url.searchParams.get('actionType'))
+  const fieldNames = splitCsv(url.searchParams.get('fieldName'))
+  const includeRelated = parseBooleanToken(url.searchParams.get('includeRelated')) === true
+  const undoableOnly = parseBooleanToken(url.searchParams.get('undoableOnly')) === true
+  const limit = parseLimit(url.searchParams.get('limit'))
+  const sortField = SORT_FIELDS.find((value) => value === url.searchParams.get('sortField')) ?? 'createdAt'
+  const sortDir = SORT_DIRECTIONS.find((value) => value === url.searchParams.get('sortDir')) ?? 'desc'
+  const before = parseDate(url.searchParams.get('before'))
+  const after = parseDate(url.searchParams.get('after'))
+
+  let organizationId = defaultOrganizationId
+  if (queryOrgId) {
+    if (scope.allowedIds === null || scope.allowedIds.includes(queryOrgId)) {
+      organizationId = queryOrgId
+    }
+  }
+
+  let actorUserId: string | undefined = canViewTenant ? undefined : auth.sub
+  let actorUserIds: string[] | undefined
+  if (canViewTenant && actorQuery) {
+    const parsedActorUserIds = splitCsv(actorQuery)
+    if (parsedActorUserIds.length === 1) {
+      actorUserId = parsedActorUserIds[0]
+    } else if (parsedActorUserIds.length > 1) {
+      actorUserId = undefined
+      actorUserIds = parsedActorUserIds
+    }
+  }
+
+  const entriesResult = await actionLogs.list({
+    tenantId: auth.tenantId ?? undefined,
+    organizationId: organizationId ?? undefined,
+    actorUserId,
+    actorUserIds,
+    resourceKind,
+    resourceId,
+    actionTypes,
+    fieldNames,
+    includeRelated,
+    undoableOnly,
+    sortField,
+    sortDir,
+    limit,
+    before,
+    after,
+  })
+  const entries = entriesResult.items
+
+  const displayMaps = await loadAuditLogDisplayMaps(em, {
+    userIds: entries.map((entry) => entry.actorUserId).filter((value): value is string => Boolean(value)),
+    tenantIds: entries.map((entry) => entry.tenantId).filter((value): value is string => Boolean(value)),
+    organizationIds: entries.map((entry) => entry.organizationId).filter((value): value is string => Boolean(value)),
+  })
+
+  const rows = entries.flatMap((entry) => {
+    const actionType = deriveActionLogActionType(entry)
+    const actionLabel = actionType === 'system'
+      ? entry.actionLabel ?? 'System'
+      : actionType.charAt(0).toUpperCase() + actionType.slice(1)
+    const baseRow = {
+      when: entry.createdAt?.toISOString?.() ?? '',
+      user: entry.actorUserId ? displayMaps.users[entry.actorUserId] ?? entry.actorUserId : 'System',
+      action: actionLabel,
+      source: deriveActionLogSource(entry.contextJson, entry.actorUserId).toUpperCase(),
+    }
+    const changes = extractChangeRows(entry.changesJson, entry.snapshotBefore)
+
+    if (changes.length === 0) {
+      return [{
+        ...baseRow,
+        field: '',
+        oldValue: '',
+        newValue: '',
+      }]
+    }
+
+    return changes.map((change) => {
+      return {
+        ...baseRow,
+        field: change.field,
+        oldValue: formatValue(change.from),
+        newValue: formatValue(change.to),
+      }
+    })
+  })
+
+  const prepared: PreparedExport = {
+    columns: [
+      { field: 'when', header: 'When' },
+      { field: 'user', header: 'User' },
+      { field: 'action', header: 'Action' },
+      { field: 'field', header: 'Field' },
+      { field: 'oldValue', header: 'Old Value' },
+      { field: 'newValue', header: 'New Value' },
+      { field: 'source', header: 'Source' },
+    ],
+    rows,
+  }
+
+  const serialized = serializeExport(prepared, 'csv')
+  const filename = defaultExportFilename('changelog-export', 'csv')
+
+  return new Response(serialized.body, {
+    headers: {
+      'content-type': serialized.contentType,
+      'content-disposition': `attachment; filename="${filename}"`,
+    },
+  })
+}
+
+export const openApi: OpenApiRouteDoc = {
+  summary: 'Export action audit logs',
+  description: 'Exports filtered action audit log entries for the current tenant as CSV.',
+  methods: {
+    GET: {
+      summary: 'Export action logs as CSV',
+      description:
+        'Returns a CSV attachment containing filtered action audit log entries. Tenant administrators can widen the scope to other actors or organizations.',
+      query: exportQuerySchema,
+      responses: [
+        { status: 200, description: 'CSV export generated successfully', schema: responseSchema },
+      ],
+      errors: [
+        { status: 400, description: 'Invalid filter values', schema: errorSchema },
+        { status: 401, description: 'Authentication required', schema: errorSchema },
+      ],
+    },
+  },
+}

package/src/modules/audit_logs/api/audit-logs/actions/route.ts

@@ -9,29 +9,59 @@ import { loadAuditLogDisplayMaps } from '../display'
 import { z } from 'zod'
 import type { OpenApiRouteDoc } from '@open-mercato/shared/lib/openapi'
 import { parseBooleanToken } from '@open-mercato/shared/lib/boolean'
+import { ACTION_LOG_FILTER_TYPES } from '@open-mercato/core/modules/audit_logs/lib/projections'
 
 export const metadata = {
   GET: { requireAuth: true, requireFeatures: ['audit_logs.view_self'] },
 }
 
+const ACTION_TYPE_TOKENS = ACTION_LOG_FILTER_TYPES
+const SORT_FIELDS = ['createdAt', 'user', 'action', 'field', 'source'] as const
+const SORT_DIRECTIONS = ['asc', 'desc'] as const
+
 const auditActionQuerySchema = z.object({
   organizationId: z.string().uuid().describe('Limit results to a specific organization').optional(),
-  actorUserId: z.string().uuid().describe('Filter logs created by a specific actor (tenant administrators only)').optional(),
+  actorUserId: z
+    .string()
+    .describe('Filter logs created by specific actor IDs (tenant administrators only). Accepts a single UUID or a comma-separated UUID list.')
+    .optional(),
   resourceKind: z.string().describe('Filter by resource kind (e.g., "order", "product")').optional(),
   resourceId: z.string().describe('Filter by resource ID (UUID of the specific record)').optional(),
+  actionType: z
+    .string()
+    .describe('Filter by action type (`create`, `edit`, `delete`, `assign`). Accepts a single value or a comma-separated list.')
+    .optional(),
+  fieldName: z
+    .string()
+    .describe('Filter to entries where the given field changed. Accepts a single field name or a comma-separated list.')
+    .optional(),
   includeRelated: z
     .enum(['true', 'false'])
     .default('false')
     .describe('When `true`, also returns changes to child entities linked via parentResourceKind/parentResourceId')
     .optional(),
+  includeTotal: z
+    .enum(['true', 'false'])
+    .default('false')
+    .describe('When `true`, the response includes the filtered total count.')
+    .optional(),
   undoableOnly: z
     .enum(['true', 'false'])
     .default('false')
     .describe('When `true`, only undoable actions are returned')
     .optional(),
-  limit: z.string().describe('Maximum number of records to return (default 50)').optional(),
+  limit: z.string().describe('Maximum number of records to return (default 50, max 1000)').optional(),
+  offset: z.string().describe('Zero-based record offset for pagination (legacy — prefer page/pageSize)').optional(),
   page: z.string().describe('Page number (default 1)').optional(),
   pageSize: z.string().describe('Page size (default 50, max 200)').optional(),
+  sortField: z
+    .enum(SORT_FIELDS)
+    .describe('Sort field: `createdAt`, `user`, `action`, `field`, or `source`.')
+    .optional(),
+  sortDir: z
+    .enum(SORT_DIRECTIONS)
+    .describe('Sort direction: `asc` or `desc`.')
+    .optional(),
   before: z.string().describe('Return actions created before this ISO-8601 timestamp').optional(),
   after: z.string().describe('Return actions created after this ISO-8601 timestamp').optional(),
 })
@@ -84,7 +114,28 @@ function parseLimit(param: string | null): number {
   if (!param) return 50
   const value = Number(param)
   if (!Number.isFinite(value)) return 50
-  return Math.min(Math.max(Math.trunc(value), 1), 200)
+  return Math.min(Math.max(Math.trunc(value), 1), 1000)
+}
+
+function parseOffset(param: string | null): number {
+  if (!param) return 0
+  const value = Number(param)
+  if (!Number.isFinite(value)) return 0
+  return Math.max(Math.trunc(value), 0)
+}
+
+function splitCsv(value: string | null): string[] {
+  if (!value) return []
+  return value
+    .split(',')
+    .map((entry) => entry.trim())
+    .filter(Boolean)
+}
+
+function parseActionTypes(param: string | null) {
+  return splitCsv(param).filter((value): value is (typeof ACTION_TYPE_TOKENS)[number] =>
+    ACTION_TYPE_TOKENS.includes(value as (typeof ACTION_TYPE_TOKENS)[number]),
+  )
 }
 
 function parseNumber(param: string | null, { min, max, fallback }: { min: number; max: number; fallback: number }) {
@@ -118,11 +169,17 @@ export async function GET(req: Request) {
   const actorQuery = url.searchParams.get('actorUserId')
   const resourceKind = url.searchParams.get('resourceKind') ?? undefined
   const resourceId = url.searchParams.get('resourceId') ?? undefined
+  const actionTypes = parseActionTypes(url.searchParams.get('actionType'))
+  const fieldNames = splitCsv(url.searchParams.get('fieldName'))
   const includeRelated = parseBooleanToken(url.searchParams.get('includeRelated')) === true
+  const includeTotal = parseBooleanToken(url.searchParams.get('includeTotal')) === true
   const undoableOnly = parseBooleanToken(url.searchParams.get('undoableOnly')) === true
   const limit = parseLimit(url.searchParams.get('limit'))
+  const offset = parseOffset(url.searchParams.get('offset'))
   const page = parseNumber(url.searchParams.get('page'), { min: 1, max: 1000000, fallback: 1 })
   const pageSize = parseNumber(url.searchParams.get('pageSize'), { min: 1, max: 200, fallback: 50 })
+  const sortField = SORT_FIELDS.find((value) => value === url.searchParams.get('sortField')) ?? 'createdAt'
+  const sortDir = SORT_DIRECTIONS.find((value) => value === url.searchParams.get('sortDir')) ?? 'desc'
   const before = parseDate(url.searchParams.get('before'))
   const after = parseDate(url.searchParams.get('after'))
 
@@ -134,24 +191,42 @@ export async function GET(req: Request) {
   }
 
   let actorUserId: string | undefined = canViewTenant ? undefined : auth.sub
+  let actorUserIds: string[] | undefined
   if (canViewTenant && actorQuery) {
-    actorUserId = actorQuery
+    const parsedActorUserIds = splitCsv(actorQuery)
+    if (parsedActorUserIds.length === 1) {
+      actorUserId = parsedActorUserIds[0]
+    } else if (parsedActorUserIds.length > 1) {
+      actorUserId = undefined
+      actorUserIds = parsedActorUserIds
+    }
   }
 
-  const list = await actionLogs.list({
+  const listQuery = {
     tenantId: auth.tenantId ?? undefined,
     organizationId: organizationId ?? undefined,
     actorUserId,
+    actorUserIds,
     resourceKind,
     resourceId,
+    actionTypes,
+    fieldNames,
     includeRelated,
     undoableOnly,
+    sortField,
+    sortDir,
     limit,
+    offset,
     page,
     pageSize,
     before,
     after,
-  })
+  }
+
+  // includeTotal flag is retained for backward compatibility but page-based pagination
+  // always returns total/totalPages from the list query's findAndCount.
+  void includeTotal
+  const list = await actionLogs.list(listQuery)
 
   const displayMaps = await loadAuditLogDisplayMaps(em, {
     userIds: list.items.map((entry) => entry.actorUserId).filter((value): value is string => !!value),

package/src/modules/audit_logs/cli.ts

@@ -0,0 +1,79 @@
+import type { ModuleCli } from '@open-mercato/shared/modules/registry'
+import { createRequestContainer } from '@open-mercato/shared/lib/di/container'
+import { parseBooleanToken } from '@open-mercato/shared/lib/boolean'
+import { ActionLogService } from '@open-mercato/core/modules/audit_logs/services/actionLogService'
+
+function parseArgs(rest: string[]) {
+  const args: Record<string, string | boolean> = {}
+
+  for (let index = 0; index < rest.length; index += 1) {
+    const arg = rest[index]
+    if (!arg || !arg.startsWith('--')) continue
+
+    const [key, inlineValue] = arg.replace(/^--/, '').split('=')
+    if (inlineValue !== undefined) {
+      args[key] = inlineValue
+      continue
+    }
+
+    const next = rest[index + 1]
+    if (next && !next.startsWith('--')) {
+      args[key] = next
+      index += 1
+      continue
+    }
+
+    args[key] = true
+  }
+
+  return args
+}
+
+function parsePositiveInt(value: string | boolean | undefined, fallback: number): number {
+  if (typeof value !== 'string') return fallback
+  const parsed = Number.parseInt(value, 10)
+  if (!Number.isFinite(parsed) || parsed <= 0) return fallback
+  return parsed
+}
+
+const projectionsBackfill: ModuleCli = {
+  command: 'projections:backfill',
+  async run(rest) {
+    const args = parseArgs(rest)
+    const tenantId = typeof args.tenantId === 'string' ? args.tenantId : typeof args.tenant === 'string' ? args.tenant : null
+    const organizationId = typeof args.organizationId === 'string'
+      ? args.organizationId
+      : typeof args.orgId === 'string'
+        ? args.orgId
+        : typeof args.org === 'string'
+          ? args.org
+          : null
+    const batchSize = parsePositiveInt(args.batchSize ?? args.batch, 250)
+    const force = parseBooleanToken(
+      typeof args.force === 'boolean' ? 'true' : typeof args.force === 'string' ? args.force : null,
+    ) === true
+
+    const container = await createRequestContainer()
+    const actionLogService = container.resolve('actionLogService') as ActionLogService
+
+    console.log(
+      `[backfill] Starting audit log projection backfill (tenant=${tenantId ?? 'all'}, org=${organizationId ?? 'all'}, batch=${batchSize}, force=${force})`,
+    )
+
+    const result = await actionLogService.backfillProjections({
+      batchSize,
+      force,
+      logger: (message) => console.log(message),
+      organizationId,
+      tenantId,
+    })
+
+    console.log('[backfill] Complete.')
+    console.log(`  Scanned: ${result.scanned}`)
+    console.log(`  Updated: ${result.updated}`)
+    console.log(`  Skipped: ${result.skipped}`)
+    console.log(`  Errors: ${result.errors}`)
+  },
+}
+
+export default [projectionsBackfill]

package/src/modules/audit_logs/data/entities.ts

@@ -1,4 +1,5 @@
 import { Entity, Index, PrimaryKey, Property } from '@mikro-orm/core'
+import type { ActionLogProjectionType, ActionLogSourceKey } from '@open-mercato/core/modules/audit_logs/lib/projections'
 
 export type ActionLogExecutionState = 'done' | 'undone' | 'failed' | 'redone'
 
@@ -7,6 +8,10 @@ export type ActionLogExecutionState = 'done' | 'undone' | 'failed' | 'redone'
 @Index({ name: 'action_logs_actor_idx', properties: ['actorUserId', 'createdAt'] })
 @Index({ name: 'action_logs_resource_idx', properties: ['tenantId', 'resourceKind', 'resourceId', 'createdAt'] })
 @Index({ name: 'action_logs_parent_resource_idx', properties: ['tenantId', 'parentResourceKind', 'parentResourceId', 'createdAt'] })
+@Index({ name: 'action_logs_action_type_idx', properties: ['tenantId', 'organizationId', 'actionType', 'createdAt'] })
+@Index({ name: 'action_logs_source_key_idx', properties: ['tenantId', 'organizationId', 'sourceKey', 'createdAt'] })
+@Index({ name: 'action_logs_primary_changed_field_idx', properties: ['tenantId', 'organizationId', 'primaryChangedField', 'createdAt'] })
+@Index({ name: 'action_logs_changed_fields_idx', properties: ['changedFields'], type: 'gin' })
 export class ActionLog {
   @PrimaryKey({ type: 'uuid', defaultRaw: 'gen_random_uuid()' })
   id!: string
@@ -26,6 +31,9 @@ export class ActionLog {
   @Property({ name: 'action_label', type: 'text', nullable: true })
   actionLabel: string | null = null
 
+  @Property({ name: 'action_type', type: 'text', nullable: true })
+  actionType: ActionLogProjectionType | null = null
+
   @Property({ name: 'resource_kind', type: 'text', nullable: true })
   resourceKind: string | null = null
 
@@ -56,9 +64,18 @@ export class ActionLog {
   @Property({ name: 'changes_json', type: 'jsonb', nullable: true })
   changesJson: Record<string, unknown> | null = null
 
+  @Property({ name: 'changed_fields', type: 'text[]', nullable: true })
+  changedFields: string[] | null = null
+
+  @Property({ name: 'primary_changed_field', type: 'text', nullable: true })
+  primaryChangedField: string | null = null
+
   @Property({ name: 'context_json', type: 'jsonb', nullable: true })
   contextJson: Record<string, unknown> | null = null
 
+  @Property({ name: 'source_key', type: 'text', nullable: true })
+  sourceKey: ActionLogSourceKey | null = null
+
   @Property({ name: 'created_at', type: Date, onCreate: () => new Date() })
   createdAt: Date = new Date()
 

package/src/modules/audit_logs/data/validators.ts

@@ -34,11 +34,19 @@ export const actionLogListSchema = z.object({
   tenantId: uuid.optional(),
   organizationId: uuid.optional(),
   actorUserId: uuid.optional(),
+  actorUserIds: z.array(uuid).optional(),
   undoableOnly: z.boolean().optional(),
   resourceKind: z.string().min(1).optional(),
   resourceId: z.string().min(1).optional(),
   includeRelated: z.boolean().optional(),
-  limit: z.number().int().positive().max(200).optional(),
+  actionType: z.enum(['create', 'edit', 'delete', 'assign']).optional(),
+  actionTypes: z.array(z.enum(['create', 'edit', 'delete', 'assign'])).optional(),
+  fieldName: z.string().min(1).optional(),
+  fieldNames: z.array(z.string().min(1)).optional(),
+  sortField: z.enum(['createdAt', 'user', 'action', 'field', 'source']).optional(),
+  sortDir: z.enum(['asc', 'desc']).optional(),
+  limit: z.number().int().positive().max(1000).optional(),
+  offset: z.number().int().min(0).optional(),
   page: z.number().int().positive().default(1),
   pageSize: z.number().int().positive().max(200).default(50),
   before: z.date().optional(),