@open-mercato/core 0.6.6-develop.6465.1.019f0fb26f → 0.6.6-develop.6471.1.9ab5bdd79a

package/dist/modules/audit_logs/backend/audit-logs/page.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../../src/modules/audit_logs/backend/audit-logs/page.tsx"],
-  "sourcesContent": ["'use client'\n\nimport React from 'react'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { ActionLogItem } from '../../components/AuditLogsActions'\nimport { AuditLogsActions } from '../../components/AuditLogsActions'\nimport type { AccessLogItem } from '../../components/AccessLogsTable'\nimport { AccessLogsTable } from '../../components/AccessLogsTable'\n\ntype ActionLogResponse = {\n  items: ActionLogItem[]\n  canViewTenant: boolean\n  page: number\n  pageSize: number\n  total: number\n  totalPages: number\n}\n\ntype AccessLogResponse = {\n  items: AccessLogItem[]\n  canViewTenant: boolean\n  page: number\n  pageSize: number\n  total: number\n  totalPages: number\n}\n\ntype TabOption = 'actions' | 'access'\n\nconst DEFAULT_PAGE_SIZE = 50\n\nexport default function AuditLogsPage() {\n  const t = useT()\n  const [tab, setTab] = React.useState<TabOption>('actions')\n  const [actions, setActions] = React.useState<ActionLogItem[]>([])\n  const [accessLogs, setAccessLogs] = React.useState<AccessLogItem[]>([])\n  const [loading, setLoading] = React.useState(false)\n  const [error, setError] = React.useState<string | null>(null)\n  const [undoableOnly, setUndoableOnly] = React.useState(false)\n  const [actionsPage, setActionsPage] = React.useState(1)\n  const [actionsPageSize, setActionsPageSize] = React.useState(DEFAULT_PAGE_SIZE)\n  const [actionsTotal, setActionsTotal] = React.useState(0)\n  const [actionsTotalPages, setActionsTotalPages] = React.useState(1)\n  const actionsPageSizeRef = React.useRef(DEFAULT_PAGE_SIZE)\n  const [accessPage, setAccessPage] = React.useState(1)\n  const [accessPageSize, setAccessPageSize] = React.useState(DEFAULT_PAGE_SIZE)\n  const [accessTotal, setAccessTotal] = React.useState(0)\n  const [accessTotalPages, setAccessTotalPages] = React.useState(1)\n  const accessPageSizeRef = React.useRef(DEFAULT_PAGE_SIZE)\n\n  const fetchActions = React.useCallback(async (page: number, pageSize: number) => {\n    const params = new URLSearchParams()\n    params.set('page', String(page))\n    params.set('pageSize', String(pageSize))\n    if (undoableOnly) params.set('undoableOnly', 'true')\n    return readApiResultOrThrow<ActionLogResponse>(\n      `/api/audit_logs/audit-logs/actions?${params.toString()}`,\n      undefined,\n      { errorMessage: t('audit_logs.error.load') },\n    )\n  }, [undoableOnly, t])\n\n  const fetchAccess = React.useCallback(async (page: number, pageSize: number) => {\n    const params = new URLSearchParams()\n    params.set('page', String(page))\n    params.set('pageSize', String(pageSize))\n    return readApiResultOrThrow<AccessLogResponse>(\n      `/api/audit_logs/audit-logs/access?${params.toString()}`,\n      undefined,\n      { errorMessage: t('audit_logs.error.load') },\n    )\n  }, [t])\n\n  const loadAll = React.useCallback(async (\n    actionPage: number, actionPageSize: number,\n    accessPageNum: number, accessPageSizeNum: number,\n  ) => {\n    const [actionsRes, accessRes] = await Promise.all([\n      fetchActions(actionPage, actionPageSize),\n      fetchAccess(accessPageNum, accessPageSizeNum),\n    ])\n    setActions(actionsRes.items ?? [])\n    setActionsPage(actionsRes.page ?? actionPage)\n    setActionsPageSize((prev) => {\n      const resolved = actionsRes.pageSize ?? actionPageSize\n      actionsPageSizeRef.current = resolved\n      return resolved === prev ? prev : resolved\n    })\n    setActionsTotal(actionsRes.total ?? (actionsRes.items?.length ?? 0))\n    setActionsTotalPages(actionsRes.totalPages ?? 1)\n    setAccessLogs(accessRes.items ?? [])\n    const resolvedPage = accessRes.page ?? accessPageNum\n    const resolvedPageSize = accessRes.pageSize ?? accessPageSizeNum\n    const resolvedTotal = accessRes.total ?? (accessRes.items?.length ?? 0)\n    const resolvedTotalPages = accessRes.totalPages ?? Math.max(1, Math.ceil((resolvedTotal || 0) / (resolvedPageSize || 1)))\n    setAccessPage(resolvedPage)\n    setAccessPageSize((prev) => {\n      if (resolvedPageSize === prev) {\n        accessPageSizeRef.current = prev\n        return prev\n      }\n      accessPageSizeRef.current = resolvedPageSize\n      return resolvedPageSize\n    })\n    setAccessTotal(resolvedTotal)\n    setAccessTotalPages(resolvedTotalPages)\n  }, [fetchActions, fetchAccess])\n\n  const loadWithState = React.useCallback(async (\n    actionPage: number, actionPageSize: number,\n    accessPageNum: number, accessPageSizeNum: number,\n  ) => {\n    setLoading(true)\n    setError(null)\n    try {\n      await loadAll(actionPage, actionPageSize, accessPageNum, accessPageSizeNum)\n    } catch (err) {\n      console.error('Failed to load audit logs', err)\n      setError(t('audit_logs.error.load'))\n    } finally {\n      setLoading(false)\n    }\n  }, [loadAll, t])\n\n  React.useEffect(() => {\n    setActionsPage(1)\n    setAccessPage(1)\n    void loadWithState(1, actionsPageSizeRef.current, 1, accessPageSizeRef.current)\n  }, [loadWithState, undoableOnly])\n\n  const renderRefreshButton = React.useCallback(() => (\n    <Button\n      variant=\"outline\"\n      size=\"sm\"\n      onClick={() => void loadWithState(actionsPage, actionsPageSize, accessPage, accessPageSize)}\n      disabled={loading}\n    >\n      {loading ? t('audit_logs.common.refreshing') : t('audit_logs.common.refresh')}\n    </Button>\n  ), [loadWithState, actionsPage, actionsPageSize, accessPage, accessPageSize, loading, t])\n\n  const handleUndoError = React.useCallback(() => {\n    setError(t('audit_logs.error.undo'))\n  }, [t])\n  const handleRedoError = React.useCallback(() => {\n    setError(t('audit_logs.error.redo'))\n  }, [t])\n\n  const handleActionsPageChange = React.useCallback((nextPage: number) => {\n    const totalPages = actionsTotalPages || 1\n    const normalized = Math.max(1, Math.min(nextPage, totalPages))\n    void loadWithState(normalized, actionsPageSizeRef.current, accessPage, accessPageSizeRef.current)\n  }, [actionsTotalPages, loadWithState, accessPage])\n\n  const handleAccessPageChange = React.useCallback((nextPage: number) => {\n    const totalPages = accessTotalPages || 1\n    const normalized = Math.max(1, Math.min(nextPage, totalPages))\n    void loadWithState(actionsPage, actionsPageSizeRef.current, normalized, accessPageSizeRef.current)\n  }, [accessTotalPages, loadWithState, actionsPage])\n\n  const headerExtras = (\n    <>\n      {renderRefreshButton()}\n      <label className=\"flex items-center gap-2 rounded border border-transparent px-2 py-1 text-sm text-muted-foreground\">\n        <span>{t('audit_logs.filters.undoable_only')}</span>\n        <input\n          type=\"checkbox\"\n          className=\"h-4 w-4 rounded border border-input\"\n          checked={undoableOnly}\n          onChange={(e) => setUndoableOnly(e.target.checked)}\n        />\n      </label>\n    </>\n  )\n\n  return (\n    <Page>\n      <PageBody>\n        <div className=\"mb-6 border-b border-border\">\n      <nav className=\"flex items-center gap-6 text-sm\" role=\"tablist\" aria-label={t('audit_logs.tabs.label')}>\n            <button\n              type=\"button\"\n              role=\"tab\"\n              aria-selected={tab === 'actions'}\n              className={`relative -mb-px border-b-2 px-0 pb-3 pt-2 font-medium transition-colors ${tab === 'actions' ? 'border-accent-indigo text-foreground' : 'border-transparent text-muted-foreground hover:text-foreground'}`}\n              onClick={() => setTab('actions')}\n            >\n              {t('audit_logs.actions.title')}\n            </button>\n            <button\n              type=\"button\"\n              role=\"tab\"\n              aria-selected={tab === 'access'}\n              className={`relative -mb-px border-b-2 px-0 pb-3 pt-2 font-medium transition-colors ${tab === 'access' ? 'border-accent-indigo text-foreground' : 'border-transparent text-muted-foreground hover:text-foreground'}`}\n              onClick={() => setTab('access')}\n            >\n              {t('audit_logs.access.title')}\n            </button>\n          </nav>\n        </div>\n\n        {error && <div className=\"mb-4 rounded-md border border-status-error-border bg-status-error-bg p-3 text-sm text-status-error-text\">{error}</div>}\n\n        {tab === 'actions' && (\n          <AuditLogsActions\n            items={actions}\n            onRefresh={() => loadWithState(actionsPage, actionsPageSize, accessPage, accessPageSize)}\n            isLoading={loading}\n            headerExtras={headerExtras}\n            onUndoError={handleUndoError}\n            onRedoError={handleRedoError}\n            pagination={{\n              page: actionsPage,\n              pageSize: actionsPageSize,\n              total: actionsTotal,\n              totalPages: actionsTotalPages,\n              onPageChange: handleActionsPageChange,\n            }}\n          />\n        )}\n\n        {tab === 'access' && (\n          <AccessLogsTable\n            items={accessLogs}\n            isLoading={loading}\n            actions={renderRefreshButton()}\n            pagination={{\n              page: accessPage,\n              pageSize: accessPageSize,\n              total: accessTotal,\n              totalPages: accessTotalPages,\n              onPageChange: handleAccessPageChange,\n            }}\n          />\n        )}\n      </PageBody>\n    </Page>\n  )\n}\n"],
-  "mappings": ";AAsII,SA8BA,UA9BA,KAgCE,YAhCF;AApIJ,OAAO,WAAW;AAClB,SAAS,MAAM,gBAAgB;AAC/B,SAAS,4BAA4B;AACrC,SAAS,cAAc;AACvB,SAAS,YAAY;AAErB,SAAS,wBAAwB;AAEjC,SAAS,uBAAuB;AAsBhC,MAAM,oBAAoB;AAEX,SAAR,gBAAiC;AACtC,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,KAAK,MAAM,IAAI,MAAM,SAAoB,SAAS;AACzD,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAA0B,CAAC,CAAC;AAChE,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAA0B,CAAC,CAAC;AACtE,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,KAAK;AAClD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAS,KAAK;AAC5D,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAS,CAAC;AACtD,QAAM,CAAC,iBAAiB,kBAAkB,IAAI,MAAM,SAAS,iBAAiB;AAC9E,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAS,CAAC;AACxD,QAAM,CAAC,mBAAmB,oBAAoB,IAAI,MAAM,SAAS,CAAC;AAClE,QAAM,qBAAqB,MAAM,OAAO,iBAAiB;AACzD,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AACpD,QAAM,CAAC,gBAAgB,iBAAiB,IAAI,MAAM,SAAS,iBAAiB;AAC5E,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAS,CAAC;AACtD,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,MAAM,SAAS,CAAC;AAChE,QAAM,oBAAoB,MAAM,OAAO,iBAAiB;AAExD,QAAM,eAAe,MAAM,YAAY,OAAO,MAAc,aAAqB;AAC/E,UAAM,SAAS,IAAI,gBAAgB;AACnC,WAAO,IAAI,QAAQ,OAAO,IAAI,CAAC;AAC/B,WAAO,IAAI,YAAY,OAAO,QAAQ,CAAC;AACvC,QAAI,aAAc,QAAO,IAAI,gBAAgB,MAAM;AACnD,WAAO;AAAA,MACL,sCAAsC,OAAO,SAAS,CAAC;AAAA,MACvD;AAAA,MACA,EAAE,cAAc,EAAE,uBAAuB,EAAE;AAAA,IAC7C;AAAA,EACF,GAAG,CAAC,cAAc,CAAC,CAAC;AAEpB,QAAM,cAAc,MAAM,YAAY,OAAO,MAAc,aAAqB;AAC9E,UAAM,SAAS,IAAI,gBAAgB;AACnC,WAAO,IAAI,QAAQ,OAAO,IAAI,CAAC;AAC/B,WAAO,IAAI,YAAY,OAAO,QAAQ,CAAC;AACvC,WAAO;AAAA,MACL,qCAAqC,OAAO,SAAS,CAAC;AAAA,MACtD;AAAA,MACA,EAAE,cAAc,EAAE,uBAAuB,EAAE;AAAA,IAC7C;AAAA,EACF,GAAG,CAAC,CAAC,CAAC;AAEN,QAAM,UAAU,MAAM,YAAY,OAChC,YAAoB,gBACpB,eAAuB,sBACpB;AACH,UAAM,CAAC,YAAY,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,MAChD,aAAa,YAAY,cAAc;AAAA,MACvC,YAAY,eAAe,iBAAiB;AAAA,IAC9C,CAAC;AACD,eAAW,WAAW,SAAS,CAAC,CAAC;AACjC,mBAAe,WAAW,QAAQ,UAAU;AAC5C,uBAAmB,CAAC,SAAS;AAC3B,YAAM,WAAW,WAAW,YAAY;AACxC,yBAAmB,UAAU;AAC7B,aAAO,aAAa,OAAO,OAAO;AAAA,IACpC,CAAC;AACD,oBAAgB,WAAW,UAAU,WAAW,OAAO,UAAU,EAAE;AACnE,yBAAqB,WAAW,cAAc,CAAC;AAC/C,kBAAc,UAAU,SAAS,CAAC,CAAC;AACnC,UAAM,eAAe,UAAU,QAAQ;AACvC,UAAM,mBAAmB,UAAU,YAAY;AAC/C,UAAM,gBAAgB,UAAU,UAAU,UAAU,OAAO,UAAU;AACrE,UAAM,qBAAqB,UAAU,cAAc,KAAK,IAAI,GAAG,KAAK,MAAM,iBAAiB,MAAM,oBAAoB,EAAE,CAAC;AACxH,kBAAc,YAAY;AAC1B,sBAAkB,CAAC,SAAS;AAC1B,UAAI,qBAAqB,MAAM;AAC7B,0BAAkB,UAAU;AAC5B,eAAO;AAAA,MACT;AACA,wBAAkB,UAAU;AAC5B,aAAO;AAAA,IACT,CAAC;AACD,mBAAe,aAAa;AAC5B,wBAAoB,kBAAkB;AAAA,EACxC,GAAG,CAAC,cAAc,WAAW,CAAC;AAE9B,QAAM,gBAAgB,MAAM,YAAY,OACtC,YAAoB,gBACpB,eAAuB,sBACpB;AACH,eAAW,IAAI;AACf,aAAS,IAAI;AACb,QAAI;AACF,YAAM,QAAQ,YAAY,gBAAgB,eAAe,iBAAiB;AAAA,IAC5E,SAAS,KAAK;AACZ,cAAQ,MAAM,6BAA6B,GAAG;AAC9C,eAAS,EAAE,uBAAuB,CAAC;AAAA,IACrC,UAAE;AACA,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,SAAS,CAAC,CAAC;AAEf,QAAM,UAAU,MAAM;AACpB,mBAAe,CAAC;AAChB,kBAAc,CAAC;AACf,SAAK,cAAc,GAAG,mBAAmB,SAAS,GAAG,kBAAkB,OAAO;AAAA,EAChF,GAAG,CAAC,eAAe,YAAY,CAAC;AAEhC,QAAM,sBAAsB,MAAM,YAAY,MAC5C;AAAA,IAAC;AAAA;AAAA,MACC,SAAQ;AAAA,MACR,MAAK;AAAA,MACL,SAAS,MAAM,KAAK,cAAc,aAAa,iBAAiB,YAAY,cAAc;AAAA,MAC1F,UAAU;AAAA,MAET,oBAAU,EAAE,8BAA8B,IAAI,EAAE,2BAA2B;AAAA;AAAA,EAC9E,GACC,CAAC,eAAe,aAAa,iBAAiB,YAAY,gBAAgB,SAAS,CAAC,CAAC;AAExF,QAAM,kBAAkB,MAAM,YAAY,MAAM;AAC9C,aAAS,EAAE,uBAAuB,CAAC;AAAA,EACrC,GAAG,CAAC,CAAC,CAAC;AACN,QAAM,kBAAkB,MAAM,YAAY,MAAM;AAC9C,aAAS,EAAE,uBAAuB,CAAC;AAAA,EACrC,GAAG,CAAC,CAAC,CAAC;AAEN,QAAM,0BAA0B,MAAM,YAAY,CAAC,aAAqB;AACtE,UAAM,aAAa,qBAAqB;AACxC,UAAM,aAAa,KAAK,IAAI,GAAG,KAAK,IAAI,UAAU,UAAU,CAAC;AAC7D,SAAK,cAAc,YAAY,mBAAmB,SAAS,YAAY,kBAAkB,OAAO;AAAA,EAClG,GAAG,CAAC,mBAAmB,eAAe,UAAU,CAAC;AAEjD,QAAM,yBAAyB,MAAM,YAAY,CAAC,aAAqB;AACrE,UAAM,aAAa,oBAAoB;AACvC,UAAM,aAAa,KAAK,IAAI,GAAG,KAAK,IAAI,UAAU,UAAU,CAAC;AAC7D,SAAK,cAAc,aAAa,mBAAmB,SAAS,YAAY,kBAAkB,OAAO;AAAA,EACnG,GAAG,CAAC,kBAAkB,eAAe,WAAW,CAAC;AAEjD,QAAM,eACJ,iCACG;AAAA,wBAAoB;AAAA,IACrB,qBAAC,WAAM,WAAU,qGACf;AAAA,0BAAC,UAAM,YAAE,kCAAkC,GAAE;AAAA,MAC7C;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,WAAU;AAAA,UACV,SAAS;AAAA,UACT,UAAU,CAAC,MAAM,gBAAgB,EAAE,OAAO,OAAO;AAAA;AAAA,MACnD;AAAA,OACF;AAAA,KACF;AAGF,SACE,oBAAC,QACC,+BAAC,YACC;AAAA,wBAAC,SAAI,WAAU,+BACjB,+BAAC,SAAI,WAAU,mCAAkC,MAAK,WAAU,cAAY,EAAE,uBAAuB,GAC/F;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,iBAAe,QAAQ;AAAA,UACvB,WAAW,2EAA2E,QAAQ,YAAY,yCAAyC,gEAAgE;AAAA,UACnN,SAAS,MAAM,OAAO,SAAS;AAAA,UAE9B,YAAE,0BAA0B;AAAA;AAAA,MAC/B;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,iBAAe,QAAQ;AAAA,UACvB,WAAW,2EAA2E,QAAQ,WAAW,yCAAyC,gEAAgE;AAAA,UAClN,SAAS,MAAM,OAAO,QAAQ;AAAA,UAE7B,YAAE,yBAAyB;AAAA;AAAA,MAC9B;AAAA,OACF,GACF;AAAA,IAEC,SAAS,oBAAC,SAAI,WAAU,2GAA2G,iBAAM;AAAA,IAEzI,QAAQ,aACP;AAAA,MAAC;AAAA;AAAA,QACC,OAAO;AAAA,QACP,WAAW,MAAM,cAAc,aAAa,iBAAiB,YAAY,cAAc;AAAA,QACvF,WAAW;AAAA,QACX;AAAA,QACA,aAAa;AAAA,QACb,aAAa;AAAA,QACb,YAAY;AAAA,UACV,MAAM;AAAA,UACN,UAAU;AAAA,UACV,OAAO;AAAA,UACP,YAAY;AAAA,UACZ,cAAc;AAAA,QAChB;AAAA;AAAA,IACF;AAAA,IAGD,QAAQ,YACP;AAAA,MAAC;AAAA;AAAA,QACC,OAAO;AAAA,QACP,WAAW;AAAA,QACX,SAAS,oBAAoB;AAAA,QAC7B,YAAY;AAAA,UACV,MAAM;AAAA,UACN,UAAU;AAAA,UACV,OAAO;AAAA,UACP,YAAY;AAAA,UACZ,cAAc;AAAA,QAChB;AAAA;AAAA,IACF;AAAA,KAEJ,GACF;AAEJ;",
+  "sourcesContent": ["'use client'\n\nimport React from 'react'\nimport { Page, PageBody } from '@open-mercato/ui/backend/Page'\nimport { readApiResultOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport type { ActionLogItem } from '../../components/AuditLogsActions'\nimport { AuditLogsActions } from '../../components/AuditLogsActions'\nimport type { AccessLogItem } from '../../components/AccessLogsTable'\nimport { AccessLogsTable } from '../../components/AccessLogsTable'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('audit_logs').child({ component: 'audit-logs-page' })\n\ntype ActionLogResponse = {\n  items: ActionLogItem[]\n  canViewTenant: boolean\n  page: number\n  pageSize: number\n  total: number\n  totalPages: number\n}\n\ntype AccessLogResponse = {\n  items: AccessLogItem[]\n  canViewTenant: boolean\n  page: number\n  pageSize: number\n  total: number\n  totalPages: number\n}\n\ntype TabOption = 'actions' | 'access'\n\nconst DEFAULT_PAGE_SIZE = 50\n\nexport default function AuditLogsPage() {\n  const t = useT()\n  const [tab, setTab] = React.useState<TabOption>('actions')\n  const [actions, setActions] = React.useState<ActionLogItem[]>([])\n  const [accessLogs, setAccessLogs] = React.useState<AccessLogItem[]>([])\n  const [loading, setLoading] = React.useState(false)\n  const [error, setError] = React.useState<string | null>(null)\n  const [undoableOnly, setUndoableOnly] = React.useState(false)\n  const [actionsPage, setActionsPage] = React.useState(1)\n  const [actionsPageSize, setActionsPageSize] = React.useState(DEFAULT_PAGE_SIZE)\n  const [actionsTotal, setActionsTotal] = React.useState(0)\n  const [actionsTotalPages, setActionsTotalPages] = React.useState(1)\n  const actionsPageSizeRef = React.useRef(DEFAULT_PAGE_SIZE)\n  const [accessPage, setAccessPage] = React.useState(1)\n  const [accessPageSize, setAccessPageSize] = React.useState(DEFAULT_PAGE_SIZE)\n  const [accessTotal, setAccessTotal] = React.useState(0)\n  const [accessTotalPages, setAccessTotalPages] = React.useState(1)\n  const accessPageSizeRef = React.useRef(DEFAULT_PAGE_SIZE)\n\n  const fetchActions = React.useCallback(async (page: number, pageSize: number) => {\n    const params = new URLSearchParams()\n    params.set('page', String(page))\n    params.set('pageSize', String(pageSize))\n    if (undoableOnly) params.set('undoableOnly', 'true')\n    return readApiResultOrThrow<ActionLogResponse>(\n      `/api/audit_logs/audit-logs/actions?${params.toString()}`,\n      undefined,\n      { errorMessage: t('audit_logs.error.load') },\n    )\n  }, [undoableOnly, t])\n\n  const fetchAccess = React.useCallback(async (page: number, pageSize: number) => {\n    const params = new URLSearchParams()\n    params.set('page', String(page))\n    params.set('pageSize', String(pageSize))\n    return readApiResultOrThrow<AccessLogResponse>(\n      `/api/audit_logs/audit-logs/access?${params.toString()}`,\n      undefined,\n      { errorMessage: t('audit_logs.error.load') },\n    )\n  }, [t])\n\n  const loadAll = React.useCallback(async (\n    actionPage: number, actionPageSize: number,\n    accessPageNum: number, accessPageSizeNum: number,\n  ) => {\n    const [actionsRes, accessRes] = await Promise.all([\n      fetchActions(actionPage, actionPageSize),\n      fetchAccess(accessPageNum, accessPageSizeNum),\n    ])\n    setActions(actionsRes.items ?? [])\n    setActionsPage(actionsRes.page ?? actionPage)\n    setActionsPageSize((prev) => {\n      const resolved = actionsRes.pageSize ?? actionPageSize\n      actionsPageSizeRef.current = resolved\n      return resolved === prev ? prev : resolved\n    })\n    setActionsTotal(actionsRes.total ?? (actionsRes.items?.length ?? 0))\n    setActionsTotalPages(actionsRes.totalPages ?? 1)\n    setAccessLogs(accessRes.items ?? [])\n    const resolvedPage = accessRes.page ?? accessPageNum\n    const resolvedPageSize = accessRes.pageSize ?? accessPageSizeNum\n    const resolvedTotal = accessRes.total ?? (accessRes.items?.length ?? 0)\n    const resolvedTotalPages = accessRes.totalPages ?? Math.max(1, Math.ceil((resolvedTotal || 0) / (resolvedPageSize || 1)))\n    setAccessPage(resolvedPage)\n    setAccessPageSize((prev) => {\n      if (resolvedPageSize === prev) {\n        accessPageSizeRef.current = prev\n        return prev\n      }\n      accessPageSizeRef.current = resolvedPageSize\n      return resolvedPageSize\n    })\n    setAccessTotal(resolvedTotal)\n    setAccessTotalPages(resolvedTotalPages)\n  }, [fetchActions, fetchAccess])\n\n  const loadWithState = React.useCallback(async (\n    actionPage: number, actionPageSize: number,\n    accessPageNum: number, accessPageSizeNum: number,\n  ) => {\n    setLoading(true)\n    setError(null)\n    try {\n      await loadAll(actionPage, actionPageSize, accessPageNum, accessPageSizeNum)\n    } catch (err) {\n      logger.error('Failed to load audit logs', { err })\n      setError(t('audit_logs.error.load'))\n    } finally {\n      setLoading(false)\n    }\n  }, [loadAll, t])\n\n  React.useEffect(() => {\n    setActionsPage(1)\n    setAccessPage(1)\n    void loadWithState(1, actionsPageSizeRef.current, 1, accessPageSizeRef.current)\n  }, [loadWithState, undoableOnly])\n\n  const renderRefreshButton = React.useCallback(() => (\n    <Button\n      variant=\"outline\"\n      size=\"sm\"\n      onClick={() => void loadWithState(actionsPage, actionsPageSize, accessPage, accessPageSize)}\n      disabled={loading}\n    >\n      {loading ? t('audit_logs.common.refreshing') : t('audit_logs.common.refresh')}\n    </Button>\n  ), [loadWithState, actionsPage, actionsPageSize, accessPage, accessPageSize, loading, t])\n\n  const handleUndoError = React.useCallback(() => {\n    setError(t('audit_logs.error.undo'))\n  }, [t])\n  const handleRedoError = React.useCallback(() => {\n    setError(t('audit_logs.error.redo'))\n  }, [t])\n\n  const handleActionsPageChange = React.useCallback((nextPage: number) => {\n    const totalPages = actionsTotalPages || 1\n    const normalized = Math.max(1, Math.min(nextPage, totalPages))\n    void loadWithState(normalized, actionsPageSizeRef.current, accessPage, accessPageSizeRef.current)\n  }, [actionsTotalPages, loadWithState, accessPage])\n\n  const handleAccessPageChange = React.useCallback((nextPage: number) => {\n    const totalPages = accessTotalPages || 1\n    const normalized = Math.max(1, Math.min(nextPage, totalPages))\n    void loadWithState(actionsPage, actionsPageSizeRef.current, normalized, accessPageSizeRef.current)\n  }, [accessTotalPages, loadWithState, actionsPage])\n\n  const headerExtras = (\n    <>\n      {renderRefreshButton()}\n      <label className=\"flex items-center gap-2 rounded border border-transparent px-2 py-1 text-sm text-muted-foreground\">\n        <span>{t('audit_logs.filters.undoable_only')}</span>\n        <input\n          type=\"checkbox\"\n          className=\"h-4 w-4 rounded border border-input\"\n          checked={undoableOnly}\n          onChange={(e) => setUndoableOnly(e.target.checked)}\n        />\n      </label>\n    </>\n  )\n\n  return (\n    <Page>\n      <PageBody>\n        <div className=\"mb-6 border-b border-border\">\n      <nav className=\"flex items-center gap-6 text-sm\" role=\"tablist\" aria-label={t('audit_logs.tabs.label')}>\n            <button\n              type=\"button\"\n              role=\"tab\"\n              aria-selected={tab === 'actions'}\n              className={`relative -mb-px border-b-2 px-0 pb-3 pt-2 font-medium transition-colors ${tab === 'actions' ? 'border-accent-indigo text-foreground' : 'border-transparent text-muted-foreground hover:text-foreground'}`}\n              onClick={() => setTab('actions')}\n            >\n              {t('audit_logs.actions.title')}\n            </button>\n            <button\n              type=\"button\"\n              role=\"tab\"\n              aria-selected={tab === 'access'}\n              className={`relative -mb-px border-b-2 px-0 pb-3 pt-2 font-medium transition-colors ${tab === 'access' ? 'border-accent-indigo text-foreground' : 'border-transparent text-muted-foreground hover:text-foreground'}`}\n              onClick={() => setTab('access')}\n            >\n              {t('audit_logs.access.title')}\n            </button>\n          </nav>\n        </div>\n\n        {error && <div className=\"mb-4 rounded-md border border-status-error-border bg-status-error-bg p-3 text-sm text-status-error-text\">{error}</div>}\n\n        {tab === 'actions' && (\n          <AuditLogsActions\n            items={actions}\n            onRefresh={() => loadWithState(actionsPage, actionsPageSize, accessPage, accessPageSize)}\n            isLoading={loading}\n            headerExtras={headerExtras}\n            onUndoError={handleUndoError}\n            onRedoError={handleRedoError}\n            pagination={{\n              page: actionsPage,\n              pageSize: actionsPageSize,\n              total: actionsTotal,\n              totalPages: actionsTotalPages,\n              onPageChange: handleActionsPageChange,\n            }}\n          />\n        )}\n\n        {tab === 'access' && (\n          <AccessLogsTable\n            items={accessLogs}\n            isLoading={loading}\n            actions={renderRefreshButton()}\n            pagination={{\n              page: accessPage,\n              pageSize: accessPageSize,\n              total: accessTotal,\n              totalPages: accessTotalPages,\n              onPageChange: handleAccessPageChange,\n            }}\n          />\n        )}\n      </PageBody>\n    </Page>\n  )\n}\n"],
+  "mappings": ";AAyII,SA8BA,UA9BA,KAgCE,YAhCF;AAvIJ,OAAO,WAAW;AAClB,SAAS,MAAM,gBAAgB;AAC/B,SAAS,4BAA4B;AACrC,SAAS,cAAc;AACvB,SAAS,YAAY;AAErB,SAAS,wBAAwB;AAEjC,SAAS,uBAAuB;AAChC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,YAAY,EAAE,MAAM,EAAE,WAAW,kBAAkB,CAAC;AAsBhF,MAAM,oBAAoB;AAEX,SAAR,gBAAiC;AACtC,QAAM,IAAI,KAAK;AACf,QAAM,CAAC,KAAK,MAAM,IAAI,MAAM,SAAoB,SAAS;AACzD,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAA0B,CAAC,CAAC;AAChE,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAA0B,CAAC,CAAC;AACtE,QAAM,CAAC,SAAS,UAAU,IAAI,MAAM,SAAS,KAAK;AAClD,QAAM,CAAC,OAAO,QAAQ,IAAI,MAAM,SAAwB,IAAI;AAC5D,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAS,KAAK;AAC5D,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAS,CAAC;AACtD,QAAM,CAAC,iBAAiB,kBAAkB,IAAI,MAAM,SAAS,iBAAiB;AAC9E,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAS,CAAC;AACxD,QAAM,CAAC,mBAAmB,oBAAoB,IAAI,MAAM,SAAS,CAAC;AAClE,QAAM,qBAAqB,MAAM,OAAO,iBAAiB;AACzD,QAAM,CAAC,YAAY,aAAa,IAAI,MAAM,SAAS,CAAC;AACpD,QAAM,CAAC,gBAAgB,iBAAiB,IAAI,MAAM,SAAS,iBAAiB;AAC5E,QAAM,CAAC,aAAa,cAAc,IAAI,MAAM,SAAS,CAAC;AACtD,QAAM,CAAC,kBAAkB,mBAAmB,IAAI,MAAM,SAAS,CAAC;AAChE,QAAM,oBAAoB,MAAM,OAAO,iBAAiB;AAExD,QAAM,eAAe,MAAM,YAAY,OAAO,MAAc,aAAqB;AAC/E,UAAM,SAAS,IAAI,gBAAgB;AACnC,WAAO,IAAI,QAAQ,OAAO,IAAI,CAAC;AAC/B,WAAO,IAAI,YAAY,OAAO,QAAQ,CAAC;AACvC,QAAI,aAAc,QAAO,IAAI,gBAAgB,MAAM;AACnD,WAAO;AAAA,MACL,sCAAsC,OAAO,SAAS,CAAC;AAAA,MACvD;AAAA,MACA,EAAE,cAAc,EAAE,uBAAuB,EAAE;AAAA,IAC7C;AAAA,EACF,GAAG,CAAC,cAAc,CAAC,CAAC;AAEpB,QAAM,cAAc,MAAM,YAAY,OAAO,MAAc,aAAqB;AAC9E,UAAM,SAAS,IAAI,gBAAgB;AACnC,WAAO,IAAI,QAAQ,OAAO,IAAI,CAAC;AAC/B,WAAO,IAAI,YAAY,OAAO,QAAQ,CAAC;AACvC,WAAO;AAAA,MACL,qCAAqC,OAAO,SAAS,CAAC;AAAA,MACtD;AAAA,MACA,EAAE,cAAc,EAAE,uBAAuB,EAAE;AAAA,IAC7C;AAAA,EACF,GAAG,CAAC,CAAC,CAAC;AAEN,QAAM,UAAU,MAAM,YAAY,OAChC,YAAoB,gBACpB,eAAuB,sBACpB;AACH,UAAM,CAAC,YAAY,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,MAChD,aAAa,YAAY,cAAc;AAAA,MACvC,YAAY,eAAe,iBAAiB;AAAA,IAC9C,CAAC;AACD,eAAW,WAAW,SAAS,CAAC,CAAC;AACjC,mBAAe,WAAW,QAAQ,UAAU;AAC5C,uBAAmB,CAAC,SAAS;AAC3B,YAAM,WAAW,WAAW,YAAY;AACxC,yBAAmB,UAAU;AAC7B,aAAO,aAAa,OAAO,OAAO;AAAA,IACpC,CAAC;AACD,oBAAgB,WAAW,UAAU,WAAW,OAAO,UAAU,EAAE;AACnE,yBAAqB,WAAW,cAAc,CAAC;AAC/C,kBAAc,UAAU,SAAS,CAAC,CAAC;AACnC,UAAM,eAAe,UAAU,QAAQ;AACvC,UAAM,mBAAmB,UAAU,YAAY;AAC/C,UAAM,gBAAgB,UAAU,UAAU,UAAU,OAAO,UAAU;AACrE,UAAM,qBAAqB,UAAU,cAAc,KAAK,IAAI,GAAG,KAAK,MAAM,iBAAiB,MAAM,oBAAoB,EAAE,CAAC;AACxH,kBAAc,YAAY;AAC1B,sBAAkB,CAAC,SAAS;AAC1B,UAAI,qBAAqB,MAAM;AAC7B,0BAAkB,UAAU;AAC5B,eAAO;AAAA,MACT;AACA,wBAAkB,UAAU;AAC5B,aAAO;AAAA,IACT,CAAC;AACD,mBAAe,aAAa;AAC5B,wBAAoB,kBAAkB;AAAA,EACxC,GAAG,CAAC,cAAc,WAAW,CAAC;AAE9B,QAAM,gBAAgB,MAAM,YAAY,OACtC,YAAoB,gBACpB,eAAuB,sBACpB;AACH,eAAW,IAAI;AACf,aAAS,IAAI;AACb,QAAI;AACF,YAAM,QAAQ,YAAY,gBAAgB,eAAe,iBAAiB;AAAA,IAC5E,SAAS,KAAK;AACZ,aAAO,MAAM,6BAA6B,EAAE,IAAI,CAAC;AACjD,eAAS,EAAE,uBAAuB,CAAC;AAAA,IACrC,UAAE;AACA,iBAAW,KAAK;AAAA,IAClB;AAAA,EACF,GAAG,CAAC,SAAS,CAAC,CAAC;AAEf,QAAM,UAAU,MAAM;AACpB,mBAAe,CAAC;AAChB,kBAAc,CAAC;AACf,SAAK,cAAc,GAAG,mBAAmB,SAAS,GAAG,kBAAkB,OAAO;AAAA,EAChF,GAAG,CAAC,eAAe,YAAY,CAAC;AAEhC,QAAM,sBAAsB,MAAM,YAAY,MAC5C;AAAA,IAAC;AAAA;AAAA,MACC,SAAQ;AAAA,MACR,MAAK;AAAA,MACL,SAAS,MAAM,KAAK,cAAc,aAAa,iBAAiB,YAAY,cAAc;AAAA,MAC1F,UAAU;AAAA,MAET,oBAAU,EAAE,8BAA8B,IAAI,EAAE,2BAA2B;AAAA;AAAA,EAC9E,GACC,CAAC,eAAe,aAAa,iBAAiB,YAAY,gBAAgB,SAAS,CAAC,CAAC;AAExF,QAAM,kBAAkB,MAAM,YAAY,MAAM;AAC9C,aAAS,EAAE,uBAAuB,CAAC;AAAA,EACrC,GAAG,CAAC,CAAC,CAAC;AACN,QAAM,kBAAkB,MAAM,YAAY,MAAM;AAC9C,aAAS,EAAE,uBAAuB,CAAC;AAAA,EACrC,GAAG,CAAC,CAAC,CAAC;AAEN,QAAM,0BAA0B,MAAM,YAAY,CAAC,aAAqB;AACtE,UAAM,aAAa,qBAAqB;AACxC,UAAM,aAAa,KAAK,IAAI,GAAG,KAAK,IAAI,UAAU,UAAU,CAAC;AAC7D,SAAK,cAAc,YAAY,mBAAmB,SAAS,YAAY,kBAAkB,OAAO;AAAA,EAClG,GAAG,CAAC,mBAAmB,eAAe,UAAU,CAAC;AAEjD,QAAM,yBAAyB,MAAM,YAAY,CAAC,aAAqB;AACrE,UAAM,aAAa,oBAAoB;AACvC,UAAM,aAAa,KAAK,IAAI,GAAG,KAAK,IAAI,UAAU,UAAU,CAAC;AAC7D,SAAK,cAAc,aAAa,mBAAmB,SAAS,YAAY,kBAAkB,OAAO;AAAA,EACnG,GAAG,CAAC,kBAAkB,eAAe,WAAW,CAAC;AAEjD,QAAM,eACJ,iCACG;AAAA,wBAAoB;AAAA,IACrB,qBAAC,WAAM,WAAU,qGACf;AAAA,0BAAC,UAAM,YAAE,kCAAkC,GAAE;AAAA,MAC7C;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,WAAU;AAAA,UACV,SAAS;AAAA,UACT,UAAU,CAAC,MAAM,gBAAgB,EAAE,OAAO,OAAO;AAAA;AAAA,MACnD;AAAA,OACF;AAAA,KACF;AAGF,SACE,oBAAC,QACC,+BAAC,YACC;AAAA,wBAAC,SAAI,WAAU,+BACjB,+BAAC,SAAI,WAAU,mCAAkC,MAAK,WAAU,cAAY,EAAE,uBAAuB,GAC/F;AAAA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,iBAAe,QAAQ;AAAA,UACvB,WAAW,2EAA2E,QAAQ,YAAY,yCAAyC,gEAAgE;AAAA,UACnN,SAAS,MAAM,OAAO,SAAS;AAAA,UAE9B,YAAE,0BAA0B;AAAA;AAAA,MAC/B;AAAA,MACA;AAAA,QAAC;AAAA;AAAA,UACC,MAAK;AAAA,UACL,MAAK;AAAA,UACL,iBAAe,QAAQ;AAAA,UACvB,WAAW,2EAA2E,QAAQ,WAAW,yCAAyC,gEAAgE;AAAA,UAClN,SAAS,MAAM,OAAO,QAAQ;AAAA,UAE7B,YAAE,yBAAyB;AAAA;AAAA,MAC9B;AAAA,OACF,GACF;AAAA,IAEC,SAAS,oBAAC,SAAI,WAAU,2GAA2G,iBAAM;AAAA,IAEzI,QAAQ,aACP;AAAA,MAAC;AAAA;AAAA,QACC,OAAO;AAAA,QACP,WAAW,MAAM,cAAc,aAAa,iBAAiB,YAAY,cAAc;AAAA,QACvF,WAAW;AAAA,QACX;AAAA,QACA,aAAa;AAAA,QACb,aAAa;AAAA,QACb,YAAY;AAAA,UACV,MAAM;AAAA,UACN,UAAU;AAAA,UACV,OAAO;AAAA,UACP,YAAY;AAAA,UACZ,cAAc;AAAA,QAChB;AAAA;AAAA,IACF;AAAA,IAGD,QAAQ,YACP;AAAA,MAAC;AAAA;AAAA,QACC,OAAO;AAAA,QACP,WAAW;AAAA,QACX,SAAS,oBAAoB;AAAA,QAC7B,YAAY;AAAA,UACV,MAAM;AAAA,UACN,UAAU;AAAA,UACV,OAAO;AAAA,UACP,YAAY;AAAA,UACZ,cAAc;AAAA,QAChB;AAAA;AAAA,IACF;AAAA,KAEJ,GACF;AAEJ;",
   "names": []
 }

package/dist/modules/audit_logs/components/AuditLogsActions.js

@@ -10,6 +10,8 @@ import { Undo2, RotateCcw } from "lucide-react";
 import { markRedoConsumed, markUndoSuccess } from "@open-mercato/ui/backend/operations/store";
 import { useAuditPermissions, canUndoEntry, canRedoEntry } from "@open-mercato/ui/backend/version-history";
 import { Alert, AlertDescription } from "@open-mercato/ui/primitives/alert";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("audit_logs").child({ component: "AuditLogsActions" });
 function AuditLogsActions({
   items,
   onRefresh,
@@ -69,7 +71,7 @@ function AuditLogsActions({
       markUndoSuccess(token);
       await onRefresh();
     } catch (err) {
-      console.error(t("audit_logs.actions.undo"), err);
+      logger.error("Undo action failed", { err });
       onUndoError?.();
     } finally {
       setUndoingToken(null);
@@ -87,7 +89,7 @@ function AuditLogsActions({
       markRedoConsumed(logId);
       await onRefresh();
     } catch (err) {
-      console.error(t("audit_logs.actions.redo"), err);
+      logger.error("Redo action failed", { err });
       onRedoError?.();
     } finally {
       setRedoingId(null);

package/dist/modules/audit_logs/components/AuditLogsActions.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/audit_logs/components/AuditLogsActions.tsx"],
-  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport type { ColumnDef } from '@tanstack/react-table'\nimport { DataTable, type PaginationProps } from '@open-mercato/ui/backend/DataTable'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { apiCallOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { ActionLogDetailsDialog } from './ActionLogDetailsDialog'\nimport { Undo2, RotateCcw } from 'lucide-react'\nimport { markRedoConsumed, markUndoSuccess } from '@open-mercato/ui/backend/operations/store'\nimport { useAuditPermissions, canUndoEntry, canRedoEntry } from '@open-mercato/ui/backend/version-history'\nimport { Alert, AlertDescription } from '@open-mercato/ui/primitives/alert'\n\nexport type ActionLogItem = {\n  id: string\n  commandId: string\n  actionLabel: string | null\n  executionState: string\n  actorUserId: string | null\n  actorUserName: string | null\n  tenantId: string | null\n  tenantName: string | null\n  organizationId: string | null\n  organizationName: string | null\n  resourceKind: string | null\n  resourceId: string | null\n  undoToken: string | null\n  createdAt: string\n  updatedAt: string\n  snapshotBefore?: unknown | null\n  snapshotAfter?: unknown | null\n  changes?: Record<string, unknown> | null\n  context?: Record<string, unknown> | null\n}\n\nexport function AuditLogsActions({\n  items,\n  onRefresh,\n  isLoading,\n  headerExtras,\n  onUndoError,\n  onRedoError,\n  pagination,\n}: {\n  items: ActionLogItem[] | undefined\n  onRefresh: () => Promise<void>\n  isLoading?: boolean\n  headerExtras?: React.ReactNode\n  onUndoError?: () => void\n  onRedoError?: () => void\n  pagination?: PaginationProps\n}) {\n  const t = useT()\n  const permissions = useAuditPermissions(true)\n  const [undoingToken, setUndoingToken] = React.useState<string | null>(null)\n  const [redoingId, setRedoingId] = React.useState<string | null>(null)\n  const [selected, setSelected] = React.useState<ActionLogItem | null>(null)\n  const actionItems = Array.isArray(items) ? items : []\n  const latestUndoable = React.useMemo(() => actionItems.find((item) => !!item.undoToken && item.executionState === 'done'), [actionItems])\n  const noneLabel = t('audit_logs.common.none')\n  const latestPerResource = React.useMemo(() => {\n    const map = new Map<string, string>()\n    let fallback: string | null = null\n    for (const item of actionItems) {\n      if (!item.undoToken || item.executionState !== 'done') continue\n      const key = buildResourceKey(item)\n      if (key) {\n        if (!map.has(key)) map.set(key, item.id)\n      } else if (!fallback) {\n        fallback = item.id\n      }\n    }\n    return { map, fallback }\n  }, [actionItems])\n  const latestUndoneId = React.useMemo(() => {\n    const undone = actionItems.filter((item) => item.executionState === 'undone')\n    if (!undone.length) return null\n    const sorted = [...undone].sort((a, b) => {\n      const aTs = Date.parse(a.updatedAt)\n      const bTs = Date.parse(b.updatedAt)\n      return (Number.isFinite(bTs) ? bTs : 0) - (Number.isFinite(aTs) ? aTs : 0)\n    })\n    return sorted[0]?.id ?? null\n  }, [actionItems])\n\n  const isLatestUndoableForItem = React.useCallback((item: ActionLogItem) => {\n    const key = buildResourceKey(item)\n    if (key) return latestPerResource.map.get(key) === item.id\n    return latestPerResource.fallback === item.id\n  }, [latestPerResource])\n\n  const isRedoCandidate = React.useCallback((item: ActionLogItem) => item.executionState === 'undone' && latestUndoneId === item.id, [latestUndoneId])\n\n  const handleUndo = React.useCallback(async (token: string | null) => {\n    if (!token) return\n    setUndoingToken(token)\n    try {\n      await apiCallOrThrow('/api/audit_logs/audit-logs/actions/undo', {\n        method: 'POST',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify({ undoToken: token }),\n      }, { errorMessage: t('audit_logs.error.undo') })\n      markUndoSuccess(token)\n      await onRefresh()\n    } catch (err) {\n      console.error(t('audit_logs.actions.undo'), err)\n      onUndoError?.()\n    } finally {\n      setUndoingToken(null)\n    }\n  }, [onRefresh, onUndoError, t])\n\n  const handleRedo = React.useCallback(async (logId: string | null) => {\n    if (!logId) return\n    setRedoingId(logId)\n    try {\n      await apiCallOrThrow('/api/audit_logs/audit-logs/actions/redo', {\n        method: 'POST',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify({ logId }),\n      }, { errorMessage: t('audit_logs.error.redo') })\n      markRedoConsumed(logId)\n      await onRefresh()\n    } catch (err) {\n      console.error(t('audit_logs.actions.redo'), err)\n      onRedoError?.()\n    } finally {\n      setRedoingId(null)\n    }\n  }, [onRefresh, onRedoError, t])\n\n  const columns = React.useMemo<ColumnDef<ActionLogItem, any>[]>(() => [\n    {\n      accessorKey: 'actionLabel',\n      header: t('audit_logs.actions.columns.action'),\n      cell: (info) => info.row.original.actionLabel || info.row.original.commandId,\n    },\n    {\n      accessorKey: 'resourceKind',\n      header: t('audit_logs.actions.columns.resource'),\n      cell: (info) => formatResource(info.row.original, noneLabel),\n    },\n    {\n      accessorKey: 'actorUserId',\n      header: t('audit_logs.actions.columns.user'),\n      cell: (info) => info.row.original.actorUserName || info.getValue() || noneLabel,\n      meta: { priority: 3 },\n    },\n    {\n      accessorKey: 'tenantId',\n      header: t('audit_logs.actions.columns.tenant'),\n      cell: (info) => info.row.original.tenantName || info.getValue() || noneLabel,\n      meta: { priority: 4 },\n    },\n    {\n      accessorKey: 'organizationId',\n      header: t('audit_logs.actions.columns.organization'),\n      cell: (info) => info.row.original.organizationName || info.getValue() || noneLabel,\n      meta: { priority: 4 },\n    },\n    {\n      accessorKey: 'createdAt',\n      header: t('audit_logs.actions.columns.when'),\n      cell: (info) => formatDate(info.getValue() as string),\n    },\n    {\n      accessorKey: 'executionState',\n      header: t('audit_logs.actions.columns.status'),\n    },\n    {\n      id: 'controls',\n      header: t('audit_logs.actions.columns.controls'),\n      enableSorting: false,\n      cell: (info) => {\n        const item = info.row.original\n        const itemCanUndo = canUndoEntry(permissions, item.actorUserId)\n        const itemCanRedo = canRedoEntry(permissions, item.actorUserId)\n        const canUndo = itemCanUndo && Boolean(item.undoToken) && item.executionState === 'done' && isLatestUndoableForItem(item)\n        const showRedo = itemCanRedo && item.executionState === 'undone'\n        const canRedo = showRedo && isRedoCandidate(item)\n        if (!canUndo && !showRedo) return null\n        return (\n          <div className=\"flex justify-end gap-1\">\n            {canUndo ? (\n              <Button\n                variant=\"ghost\"\n                size=\"icon\"\n                aria-label={t('audit_logs.actions.undo')}\n                onClick={() => { void handleUndo(item.undoToken) }}\n                disabled={undoingToken === item.undoToken || Boolean(redoingId)}\n              >\n                <Undo2 className=\"size-4\" aria-hidden=\"true\" />\n              </Button>\n            ) : null}\n            {showRedo ? (\n              <Button\n                variant=\"ghost\"\n                size=\"icon\"\n                aria-label={t('audit_logs.actions.redo')}\n                onClick={() => { void handleRedo(item.id) }}\n                disabled={!canRedo || redoingId === item.id || Boolean(undoingToken)}\n              >\n                <RotateCcw className=\"size-4\" aria-hidden=\"true\" />\n              </Button>\n            ) : null}\n          </div>\n        )\n      },\n      meta: { align: 'right' },\n    },\n  ], [t, noneLabel, handleUndo, handleRedo, isLatestUndoableForItem, isRedoCandidate, undoingToken, redoingId, permissions])\n\n  const undoButton = latestUndoable?.undoToken && canUndoEntry(permissions, latestUndoable.actorUserId) ? (\n    <Button\n      variant=\"secondary\"\n      size=\"sm\"\n      onClick={() => { void handleUndo(latestUndoable.undoToken) }}\n      disabled={Boolean(undoingToken) || Boolean(redoingId)}\n    >\n      {undoingToken ? t('audit_logs.actions.undoing') : t('audit_logs.actions.undo')}\n    </Button>\n  ) : null\n\n  const combinedActions = undoButton || headerExtras\n    ? <div className=\"flex items-center gap-2\">{headerExtras}{undoButton}</div>\n    : undefined\n\n  const showSelfOnlyHint = !permissions.isLoading && !permissions.canViewTenant && !!permissions.currentUserId\n\n  return (\n    <>\n      {showSelfOnlyHint ? (\n        <Alert variant=\"info\" className=\"mb-4\">\n          <AlertDescription>\n            {t('audit_logs.hint.view_self_only', 'Showing only your own changes. Contact an administrator for broader access.')}\n          </AlertDescription>\n        </Alert>\n      ) : null}\n      <DataTable<ActionLogItem>\n        title={t('audit_logs.actions.title')}\n        data={actionItems}\n        columns={columns}\n        actions={combinedActions}\n        perspective={{ tableId: 'audit_logs.actions.list' }}\n        isLoading={Boolean(isLoading) || Boolean(undoingToken) || Boolean(redoingId)}\n        onRowClick={(item) => setSelected(item)}\n        pagination={pagination}\n      />\n      {selected ? (\n        <ActionLogDetailsDialog\n          item={selected}\n          onClose={() => setSelected(null)}\n        />\n      ) : null}\n    </>\n  )\n}\n\nfunction formatResource(item: { resourceKind?: string | null; resourceId?: string | null }, fallback: string) {\n  if (!item.resourceKind && !item.resourceId) return fallback\n  return [item.resourceKind, item.resourceId].filter(Boolean).join(' \u00B7 ')\n}\n\nfunction buildResourceKey(item: { resourceKind?: string | null; resourceId?: string | null }) {\n  const kind = typeof item.resourceKind === 'string' ? item.resourceKind.trim() : ''\n  const id = typeof item.resourceId === 'string' ? item.resourceId.trim() : ''\n  if (!kind && !id) return null\n  return `${kind}::${id}`\n}\n\nfunction formatDate(value: string) {\n  const date = new Date(value)\n  if (Number.isNaN(date.getTime())) return value\n  return new Intl.DateTimeFormat(undefined, {\n    dateStyle: 'medium',\n    timeStyle: 'short',\n  }).format(date)\n}\n"],
-  "mappings": ";AAuLU,SAgDN,UAvCY,KATN;AArLV,YAAY,WAAW;AAEvB,SAAS,iBAAuC;AAChD,SAAS,cAAc;AACvB,SAAS,sBAAsB;AAC/B,SAAS,YAAY;AACrB,SAAS,8BAA8B;AACvC,SAAS,OAAO,iBAAiB;AACjC,SAAS,kBAAkB,uBAAuB;AAClD,SAAS,qBAAqB,cAAc,oBAAoB;AAChE,SAAS,OAAO,wBAAwB;AAwBjC,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAQG;AACD,QAAM,IAAI,KAAK;AACf,QAAM,cAAc,oBAAoB,IAAI;AAC5C,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAwB,IAAI;AAC1E,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAwB,IAAI;AACpE,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAA+B,IAAI;AACzE,QAAM,cAAc,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC;AACpD,QAAM,iBAAiB,MAAM,QAAQ,MAAM,YAAY,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,aAAa,KAAK,mBAAmB,MAAM,GAAG,CAAC,WAAW,CAAC;AACxI,QAAM,YAAY,EAAE,wBAAwB;AAC5C,QAAM,oBAAoB,MAAM,QAAQ,MAAM;AAC5C,UAAM,MAAM,oBAAI,IAAoB;AACpC,QAAI,WAA0B;AAC9B,eAAW,QAAQ,aAAa;AAC9B,UAAI,CAAC,KAAK,aAAa,KAAK,mBAAmB,OAAQ;AACvD,YAAM,MAAM,iBAAiB,IAAI;AACjC,UAAI,KAAK;AACP,YAAI,CAAC,IAAI,IAAI,GAAG,EAAG,KAAI,IAAI,KAAK,KAAK,EAAE;AAAA,MACzC,WAAW,CAAC,UAAU;AACpB,mBAAW,KAAK;AAAA,MAClB;AAAA,IACF;AACA,WAAO,EAAE,KAAK,SAAS;AAAA,EACzB,GAAG,CAAC,WAAW,CAAC;AAChB,QAAM,iBAAiB,MAAM,QAAQ,MAAM;AACzC,UAAM,SAAS,YAAY,OAAO,CAAC,SAAS,KAAK,mBAAmB,QAAQ;AAC5E,QAAI,CAAC,OAAO,OAAQ,QAAO;AAC3B,UAAM,SAAS,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM;AACxC,YAAM,MAAM,KAAK,MAAM,EAAE,SAAS;AAClC,YAAM,MAAM,KAAK,MAAM,EAAE,SAAS;AAClC,cAAQ,OAAO,SAAS,GAAG,IAAI,MAAM,MAAM,OAAO,SAAS,GAAG,IAAI,MAAM;AAAA,IAC1E,CAAC;AACD,WAAO,OAAO,CAAC,GAAG,MAAM;AAAA,EAC1B,GAAG,CAAC,WAAW,CAAC;AAEhB,QAAM,0BAA0B,MAAM,YAAY,CAAC,SAAwB;AACzE,UAAM,MAAM,iBAAiB,IAAI;AACjC,QAAI,IAAK,QAAO,kBAAkB,IAAI,IAAI,GAAG,MAAM,KAAK;AACxD,WAAO,kBAAkB,aAAa,KAAK;AAAA,EAC7C,GAAG,CAAC,iBAAiB,CAAC;AAEtB,QAAM,kBAAkB,MAAM,YAAY,CAAC,SAAwB,KAAK,mBAAmB,YAAY,mBAAmB,KAAK,IAAI,CAAC,cAAc,CAAC;AAEnJ,QAAM,aAAa,MAAM,YAAY,OAAO,UAAyB;AACnE,QAAI,CAAC,MAAO;AACZ,oBAAgB,KAAK;AACrB,QAAI;AACF,YAAM,eAAe,2CAA2C;AAAA,QAC9D,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,WAAW,MAAM,CAAC;AAAA,MAC3C,GAAG,EAAE,cAAc,EAAE,uBAAuB,EAAE,CAAC;AAC/C,sBAAgB,KAAK;AACrB,YAAM,UAAU;AAAA,IAClB,SAAS,KAAK;AACZ,cAAQ,MAAM,EAAE,yBAAyB,GAAG,GAAG;AAC/C,oBAAc;AAAA,IAChB,UAAE;AACA,sBAAgB,IAAI;AAAA,IACtB;AAAA,EACF,GAAG,CAAC,WAAW,aAAa,CAAC,CAAC;AAE9B,QAAM,aAAa,MAAM,YAAY,OAAO,UAAyB;AACnE,QAAI,CAAC,MAAO;AACZ,iBAAa,KAAK;AAClB,QAAI;AACF,YAAM,eAAe,2CAA2C;AAAA,QAC9D,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC;AAAA,MAChC,GAAG,EAAE,cAAc,EAAE,uBAAuB,EAAE,CAAC;AAC/C,uBAAiB,KAAK;AACtB,YAAM,UAAU;AAAA,IAClB,SAAS,KAAK;AACZ,cAAQ,MAAM,EAAE,yBAAyB,GAAG,GAAG;AAC/C,oBAAc;AAAA,IAChB,UAAE;AACA,mBAAa,IAAI;AAAA,IACnB;AAAA,EACF,GAAG,CAAC,WAAW,aAAa,CAAC,CAAC;AAE9B,QAAM,UAAU,MAAM,QAAyC,MAAM;AAAA,IACnE;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,mCAAmC;AAAA,MAC7C,MAAM,CAAC,SAAS,KAAK,IAAI,SAAS,eAAe,KAAK,IAAI,SAAS;AAAA,IACrE;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,qCAAqC;AAAA,MAC/C,MAAM,CAAC,SAAS,eAAe,KAAK,IAAI,UAAU,SAAS;AAAA,IAC7D;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,iCAAiC;AAAA,MAC3C,MAAM,CAAC,SAAS,KAAK,IAAI,SAAS,iBAAiB,KAAK,SAAS,KAAK;AAAA,MACtE,MAAM,EAAE,UAAU,EAAE;AAAA,IACtB;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,mCAAmC;AAAA,MAC7C,MAAM,CAAC,SAAS,KAAK,IAAI,SAAS,cAAc,KAAK,SAAS,KAAK;AAAA,MACnE,MAAM,EAAE,UAAU,EAAE;AAAA,IACtB;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,yCAAyC;AAAA,MACnD,MAAM,CAAC,SAAS,KAAK,IAAI,SAAS,oBAAoB,KAAK,SAAS,KAAK;AAAA,MACzE,MAAM,EAAE,UAAU,EAAE;AAAA,IACtB;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,iCAAiC;AAAA,MAC3C,MAAM,CAAC,SAAS,WAAW,KAAK,SAAS,CAAW;AAAA,IACtD;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,mCAAmC;AAAA,IAC/C;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,qCAAqC;AAAA,MAC/C,eAAe;AAAA,MACf,MAAM,CAAC,SAAS;AACd,cAAM,OAAO,KAAK,IAAI;AACtB,cAAM,cAAc,aAAa,aAAa,KAAK,WAAW;AAC9D,cAAM,cAAc,aAAa,aAAa,KAAK,WAAW;AAC9D,cAAM,UAAU,eAAe,QAAQ,KAAK,SAAS,KAAK,KAAK,mBAAmB,UAAU,wBAAwB,IAAI;AACxH,cAAM,WAAW,eAAe,KAAK,mBAAmB;AACxD,cAAM,UAAU,YAAY,gBAAgB,IAAI;AAChD,YAAI,CAAC,WAAW,CAAC,SAAU,QAAO;AAClC,eACE,qBAAC,SAAI,WAAU,0BACZ;AAAA,oBACC;AAAA,YAAC;AAAA;AAAA,cACC,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,cAAY,EAAE,yBAAyB;AAAA,cACvC,SAAS,MAAM;AAAE,qBAAK,WAAW,KAAK,SAAS;AAAA,cAAE;AAAA,cACjD,UAAU,iBAAiB,KAAK,aAAa,QAAQ,SAAS;AAAA,cAE9D,8BAAC,SAAM,WAAU,UAAS,eAAY,QAAO;AAAA;AAAA,UAC/C,IACE;AAAA,UACH,WACC;AAAA,YAAC;AAAA;AAAA,cACC,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,cAAY,EAAE,yBAAyB;AAAA,cACvC,SAAS,MAAM;AAAE,qBAAK,WAAW,KAAK,EAAE;AAAA,cAAE;AAAA,cAC1C,UAAU,CAAC,WAAW,cAAc,KAAK,MAAM,QAAQ,YAAY;AAAA,cAEnE,8BAAC,aAAU,WAAU,UAAS,eAAY,QAAO;AAAA;AAAA,UACnD,IACE;AAAA,WACN;AAAA,MAEJ;AAAA,MACA,MAAM,EAAE,OAAO,QAAQ;AAAA,IACzB;AAAA,EACF,GAAG,CAAC,GAAG,WAAW,YAAY,YAAY,yBAAyB,iBAAiB,cAAc,WAAW,WAAW,CAAC;AAEzH,QAAM,aAAa,gBAAgB,aAAa,aAAa,aAAa,eAAe,WAAW,IAClG;AAAA,IAAC;AAAA;AAAA,MACC,SAAQ;AAAA,MACR,MAAK;AAAA,MACL,SAAS,MAAM;AAAE,aAAK,WAAW,eAAe,SAAS;AAAA,MAAE;AAAA,MAC3D,UAAU,QAAQ,YAAY,KAAK,QAAQ,SAAS;AAAA,MAEnD,yBAAe,EAAE,4BAA4B,IAAI,EAAE,yBAAyB;AAAA;AAAA,EAC/E,IACE;AAEJ,QAAM,kBAAkB,cAAc,eAClC,qBAAC,SAAI,WAAU,2BAA2B;AAAA;AAAA,IAAc;AAAA,KAAW,IACnE;AAEJ,QAAM,mBAAmB,CAAC,YAAY,aAAa,CAAC,YAAY,iBAAiB,CAAC,CAAC,YAAY;AAE/F,SACE,iCACG;AAAA,uBACC,oBAAC,SAAM,SAAQ,QAAO,WAAU,QAC9B,8BAAC,oBACE,YAAE,kCAAkC,6EAA6E,GACpH,GACF,IACE;AAAA,IACJ;AAAA,MAAC;AAAA;AAAA,QACC,OAAO,EAAE,0BAA0B;AAAA,QACnC,MAAM;AAAA,QACN;AAAA,QACA,SAAS;AAAA,QACT,aAAa,EAAE,SAAS,0BAA0B;AAAA,QAClD,WAAW,QAAQ,SAAS,KAAK,QAAQ,YAAY,KAAK,QAAQ,SAAS;AAAA,QAC3E,YAAY,CAAC,SAAS,YAAY,IAAI;AAAA,QACtC;AAAA;AAAA,IACF;AAAA,IACC,WACC;AAAA,MAAC;AAAA;AAAA,QACC,MAAM;AAAA,QACN,SAAS,MAAM,YAAY,IAAI;AAAA;AAAA,IACjC,IACE;AAAA,KACN;AAEJ;AAEA,SAAS,eAAe,MAAoE,UAAkB;AAC5G,MAAI,CAAC,KAAK,gBAAgB,CAAC,KAAK,WAAY,QAAO;AACnD,SAAO,CAAC,KAAK,cAAc,KAAK,UAAU,EAAE,OAAO,OAAO,EAAE,KAAK,QAAK;AACxE;AAEA,SAAS,iBAAiB,MAAoE;AAC5F,QAAM,OAAO,OAAO,KAAK,iBAAiB,WAAW,KAAK,aAAa,KAAK,IAAI;AAChF,QAAM,KAAK,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,KAAK,IAAI;AAC1E,MAAI,CAAC,QAAQ,CAAC,GAAI,QAAO;AACzB,SAAO,GAAG,IAAI,KAAK,EAAE;AACvB;AAEA,SAAS,WAAW,OAAe;AACjC,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,MAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,EAAG,QAAO;AACzC,SAAO,IAAI,KAAK,eAAe,QAAW;AAAA,IACxC,WAAW;AAAA,IACX,WAAW;AAAA,EACb,CAAC,EAAE,OAAO,IAAI;AAChB;",
+  "sourcesContent": ["'use client'\n\nimport * as React from 'react'\nimport type { ColumnDef } from '@tanstack/react-table'\nimport { DataTable, type PaginationProps } from '@open-mercato/ui/backend/DataTable'\nimport { Button } from '@open-mercato/ui/primitives/button'\nimport { apiCallOrThrow } from '@open-mercato/ui/backend/utils/apiCall'\nimport { useT } from '@open-mercato/shared/lib/i18n/context'\nimport { ActionLogDetailsDialog } from './ActionLogDetailsDialog'\nimport { Undo2, RotateCcw } from 'lucide-react'\nimport { markRedoConsumed, markUndoSuccess } from '@open-mercato/ui/backend/operations/store'\nimport { useAuditPermissions, canUndoEntry, canRedoEntry } from '@open-mercato/ui/backend/version-history'\nimport { Alert, AlertDescription } from '@open-mercato/ui/primitives/alert'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('audit_logs').child({ component: 'AuditLogsActions' })\n\nexport type ActionLogItem = {\n  id: string\n  commandId: string\n  actionLabel: string | null\n  executionState: string\n  actorUserId: string | null\n  actorUserName: string | null\n  tenantId: string | null\n  tenantName: string | null\n  organizationId: string | null\n  organizationName: string | null\n  resourceKind: string | null\n  resourceId: string | null\n  undoToken: string | null\n  createdAt: string\n  updatedAt: string\n  snapshotBefore?: unknown | null\n  snapshotAfter?: unknown | null\n  changes?: Record<string, unknown> | null\n  context?: Record<string, unknown> | null\n}\n\nexport function AuditLogsActions({\n  items,\n  onRefresh,\n  isLoading,\n  headerExtras,\n  onUndoError,\n  onRedoError,\n  pagination,\n}: {\n  items: ActionLogItem[] | undefined\n  onRefresh: () => Promise<void>\n  isLoading?: boolean\n  headerExtras?: React.ReactNode\n  onUndoError?: () => void\n  onRedoError?: () => void\n  pagination?: PaginationProps\n}) {\n  const t = useT()\n  const permissions = useAuditPermissions(true)\n  const [undoingToken, setUndoingToken] = React.useState<string | null>(null)\n  const [redoingId, setRedoingId] = React.useState<string | null>(null)\n  const [selected, setSelected] = React.useState<ActionLogItem | null>(null)\n  const actionItems = Array.isArray(items) ? items : []\n  const latestUndoable = React.useMemo(() => actionItems.find((item) => !!item.undoToken && item.executionState === 'done'), [actionItems])\n  const noneLabel = t('audit_logs.common.none')\n  const latestPerResource = React.useMemo(() => {\n    const map = new Map<string, string>()\n    let fallback: string | null = null\n    for (const item of actionItems) {\n      if (!item.undoToken || item.executionState !== 'done') continue\n      const key = buildResourceKey(item)\n      if (key) {\n        if (!map.has(key)) map.set(key, item.id)\n      } else if (!fallback) {\n        fallback = item.id\n      }\n    }\n    return { map, fallback }\n  }, [actionItems])\n  const latestUndoneId = React.useMemo(() => {\n    const undone = actionItems.filter((item) => item.executionState === 'undone')\n    if (!undone.length) return null\n    const sorted = [...undone].sort((a, b) => {\n      const aTs = Date.parse(a.updatedAt)\n      const bTs = Date.parse(b.updatedAt)\n      return (Number.isFinite(bTs) ? bTs : 0) - (Number.isFinite(aTs) ? aTs : 0)\n    })\n    return sorted[0]?.id ?? null\n  }, [actionItems])\n\n  const isLatestUndoableForItem = React.useCallback((item: ActionLogItem) => {\n    const key = buildResourceKey(item)\n    if (key) return latestPerResource.map.get(key) === item.id\n    return latestPerResource.fallback === item.id\n  }, [latestPerResource])\n\n  const isRedoCandidate = React.useCallback((item: ActionLogItem) => item.executionState === 'undone' && latestUndoneId === item.id, [latestUndoneId])\n\n  const handleUndo = React.useCallback(async (token: string | null) => {\n    if (!token) return\n    setUndoingToken(token)\n    try {\n      await apiCallOrThrow('/api/audit_logs/audit-logs/actions/undo', {\n        method: 'POST',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify({ undoToken: token }),\n      }, { errorMessage: t('audit_logs.error.undo') })\n      markUndoSuccess(token)\n      await onRefresh()\n    } catch (err) {\n      logger.error('Undo action failed', { err })\n      onUndoError?.()\n    } finally {\n      setUndoingToken(null)\n    }\n  }, [onRefresh, onUndoError, t])\n\n  const handleRedo = React.useCallback(async (logId: string | null) => {\n    if (!logId) return\n    setRedoingId(logId)\n    try {\n      await apiCallOrThrow('/api/audit_logs/audit-logs/actions/redo', {\n        method: 'POST',\n        headers: { 'content-type': 'application/json' },\n        body: JSON.stringify({ logId }),\n      }, { errorMessage: t('audit_logs.error.redo') })\n      markRedoConsumed(logId)\n      await onRefresh()\n    } catch (err) {\n      logger.error('Redo action failed', { err })\n      onRedoError?.()\n    } finally {\n      setRedoingId(null)\n    }\n  }, [onRefresh, onRedoError, t])\n\n  const columns = React.useMemo<ColumnDef<ActionLogItem, any>[]>(() => [\n    {\n      accessorKey: 'actionLabel',\n      header: t('audit_logs.actions.columns.action'),\n      cell: (info) => info.row.original.actionLabel || info.row.original.commandId,\n    },\n    {\n      accessorKey: 'resourceKind',\n      header: t('audit_logs.actions.columns.resource'),\n      cell: (info) => formatResource(info.row.original, noneLabel),\n    },\n    {\n      accessorKey: 'actorUserId',\n      header: t('audit_logs.actions.columns.user'),\n      cell: (info) => info.row.original.actorUserName || info.getValue() || noneLabel,\n      meta: { priority: 3 },\n    },\n    {\n      accessorKey: 'tenantId',\n      header: t('audit_logs.actions.columns.tenant'),\n      cell: (info) => info.row.original.tenantName || info.getValue() || noneLabel,\n      meta: { priority: 4 },\n    },\n    {\n      accessorKey: 'organizationId',\n      header: t('audit_logs.actions.columns.organization'),\n      cell: (info) => info.row.original.organizationName || info.getValue() || noneLabel,\n      meta: { priority: 4 },\n    },\n    {\n      accessorKey: 'createdAt',\n      header: t('audit_logs.actions.columns.when'),\n      cell: (info) => formatDate(info.getValue() as string),\n    },\n    {\n      accessorKey: 'executionState',\n      header: t('audit_logs.actions.columns.status'),\n    },\n    {\n      id: 'controls',\n      header: t('audit_logs.actions.columns.controls'),\n      enableSorting: false,\n      cell: (info) => {\n        const item = info.row.original\n        const itemCanUndo = canUndoEntry(permissions, item.actorUserId)\n        const itemCanRedo = canRedoEntry(permissions, item.actorUserId)\n        const canUndo = itemCanUndo && Boolean(item.undoToken) && item.executionState === 'done' && isLatestUndoableForItem(item)\n        const showRedo = itemCanRedo && item.executionState === 'undone'\n        const canRedo = showRedo && isRedoCandidate(item)\n        if (!canUndo && !showRedo) return null\n        return (\n          <div className=\"flex justify-end gap-1\">\n            {canUndo ? (\n              <Button\n                variant=\"ghost\"\n                size=\"icon\"\n                aria-label={t('audit_logs.actions.undo')}\n                onClick={() => { void handleUndo(item.undoToken) }}\n                disabled={undoingToken === item.undoToken || Boolean(redoingId)}\n              >\n                <Undo2 className=\"size-4\" aria-hidden=\"true\" />\n              </Button>\n            ) : null}\n            {showRedo ? (\n              <Button\n                variant=\"ghost\"\n                size=\"icon\"\n                aria-label={t('audit_logs.actions.redo')}\n                onClick={() => { void handleRedo(item.id) }}\n                disabled={!canRedo || redoingId === item.id || Boolean(undoingToken)}\n              >\n                <RotateCcw className=\"size-4\" aria-hidden=\"true\" />\n              </Button>\n            ) : null}\n          </div>\n        )\n      },\n      meta: { align: 'right' },\n    },\n  ], [t, noneLabel, handleUndo, handleRedo, isLatestUndoableForItem, isRedoCandidate, undoingToken, redoingId, permissions])\n\n  const undoButton = latestUndoable?.undoToken && canUndoEntry(permissions, latestUndoable.actorUserId) ? (\n    <Button\n      variant=\"secondary\"\n      size=\"sm\"\n      onClick={() => { void handleUndo(latestUndoable.undoToken) }}\n      disabled={Boolean(undoingToken) || Boolean(redoingId)}\n    >\n      {undoingToken ? t('audit_logs.actions.undoing') : t('audit_logs.actions.undo')}\n    </Button>\n  ) : null\n\n  const combinedActions = undoButton || headerExtras\n    ? <div className=\"flex items-center gap-2\">{headerExtras}{undoButton}</div>\n    : undefined\n\n  const showSelfOnlyHint = !permissions.isLoading && !permissions.canViewTenant && !!permissions.currentUserId\n\n  return (\n    <>\n      {showSelfOnlyHint ? (\n        <Alert variant=\"info\" className=\"mb-4\">\n          <AlertDescription>\n            {t('audit_logs.hint.view_self_only', 'Showing only your own changes. Contact an administrator for broader access.')}\n          </AlertDescription>\n        </Alert>\n      ) : null}\n      <DataTable<ActionLogItem>\n        title={t('audit_logs.actions.title')}\n        data={actionItems}\n        columns={columns}\n        actions={combinedActions}\n        perspective={{ tableId: 'audit_logs.actions.list' }}\n        isLoading={Boolean(isLoading) || Boolean(undoingToken) || Boolean(redoingId)}\n        onRowClick={(item) => setSelected(item)}\n        pagination={pagination}\n      />\n      {selected ? (\n        <ActionLogDetailsDialog\n          item={selected}\n          onClose={() => setSelected(null)}\n        />\n      ) : null}\n    </>\n  )\n}\n\nfunction formatResource(item: { resourceKind?: string | null; resourceId?: string | null }, fallback: string) {\n  if (!item.resourceKind && !item.resourceId) return fallback\n  return [item.resourceKind, item.resourceId].filter(Boolean).join(' \u00B7 ')\n}\n\nfunction buildResourceKey(item: { resourceKind?: string | null; resourceId?: string | null }) {\n  const kind = typeof item.resourceKind === 'string' ? item.resourceKind.trim() : ''\n  const id = typeof item.resourceId === 'string' ? item.resourceId.trim() : ''\n  if (!kind && !id) return null\n  return `${kind}::${id}`\n}\n\nfunction formatDate(value: string) {\n  const date = new Date(value)\n  if (Number.isNaN(date.getTime())) return value\n  return new Intl.DateTimeFormat(undefined, {\n    dateStyle: 'medium',\n    timeStyle: 'short',\n  }).format(date)\n}\n"],
+  "mappings": ";AA0LU,SAgDN,UAvCY,KATN;AAxLV,YAAY,WAAW;AAEvB,SAAS,iBAAuC;AAChD,SAAS,cAAc;AACvB,SAAS,sBAAsB;AAC/B,SAAS,YAAY;AACrB,SAAS,8BAA8B;AACvC,SAAS,OAAO,iBAAiB;AACjC,SAAS,kBAAkB,uBAAuB;AAClD,SAAS,qBAAqB,cAAc,oBAAoB;AAChE,SAAS,OAAO,wBAAwB;AACxC,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,YAAY,EAAE,MAAM,EAAE,WAAW,mBAAmB,CAAC;AAwB1E,SAAS,iBAAiB;AAAA,EAC/B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,GAQG;AACD,QAAM,IAAI,KAAK;AACf,QAAM,cAAc,oBAAoB,IAAI;AAC5C,QAAM,CAAC,cAAc,eAAe,IAAI,MAAM,SAAwB,IAAI;AAC1E,QAAM,CAAC,WAAW,YAAY,IAAI,MAAM,SAAwB,IAAI;AACpE,QAAM,CAAC,UAAU,WAAW,IAAI,MAAM,SAA+B,IAAI;AACzE,QAAM,cAAc,MAAM,QAAQ,KAAK,IAAI,QAAQ,CAAC;AACpD,QAAM,iBAAiB,MAAM,QAAQ,MAAM,YAAY,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,aAAa,KAAK,mBAAmB,MAAM,GAAG,CAAC,WAAW,CAAC;AACxI,QAAM,YAAY,EAAE,wBAAwB;AAC5C,QAAM,oBAAoB,MAAM,QAAQ,MAAM;AAC5C,UAAM,MAAM,oBAAI,IAAoB;AACpC,QAAI,WAA0B;AAC9B,eAAW,QAAQ,aAAa;AAC9B,UAAI,CAAC,KAAK,aAAa,KAAK,mBAAmB,OAAQ;AACvD,YAAM,MAAM,iBAAiB,IAAI;AACjC,UAAI,KAAK;AACP,YAAI,CAAC,IAAI,IAAI,GAAG,EAAG,KAAI,IAAI,KAAK,KAAK,EAAE;AAAA,MACzC,WAAW,CAAC,UAAU;AACpB,mBAAW,KAAK;AAAA,MAClB;AAAA,IACF;AACA,WAAO,EAAE,KAAK,SAAS;AAAA,EACzB,GAAG,CAAC,WAAW,CAAC;AAChB,QAAM,iBAAiB,MAAM,QAAQ,MAAM;AACzC,UAAM,SAAS,YAAY,OAAO,CAAC,SAAS,KAAK,mBAAmB,QAAQ;AAC5E,QAAI,CAAC,OAAO,OAAQ,QAAO;AAC3B,UAAM,SAAS,CAAC,GAAG,MAAM,EAAE,KAAK,CAAC,GAAG,MAAM;AACxC,YAAM,MAAM,KAAK,MAAM,EAAE,SAAS;AAClC,YAAM,MAAM,KAAK,MAAM,EAAE,SAAS;AAClC,cAAQ,OAAO,SAAS,GAAG,IAAI,MAAM,MAAM,OAAO,SAAS,GAAG,IAAI,MAAM;AAAA,IAC1E,CAAC;AACD,WAAO,OAAO,CAAC,GAAG,MAAM;AAAA,EAC1B,GAAG,CAAC,WAAW,CAAC;AAEhB,QAAM,0BAA0B,MAAM,YAAY,CAAC,SAAwB;AACzE,UAAM,MAAM,iBAAiB,IAAI;AACjC,QAAI,IAAK,QAAO,kBAAkB,IAAI,IAAI,GAAG,MAAM,KAAK;AACxD,WAAO,kBAAkB,aAAa,KAAK;AAAA,EAC7C,GAAG,CAAC,iBAAiB,CAAC;AAEtB,QAAM,kBAAkB,MAAM,YAAY,CAAC,SAAwB,KAAK,mBAAmB,YAAY,mBAAmB,KAAK,IAAI,CAAC,cAAc,CAAC;AAEnJ,QAAM,aAAa,MAAM,YAAY,OAAO,UAAyB;AACnE,QAAI,CAAC,MAAO;AACZ,oBAAgB,KAAK;AACrB,QAAI;AACF,YAAM,eAAe,2CAA2C;AAAA,QAC9D,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,WAAW,MAAM,CAAC;AAAA,MAC3C,GAAG,EAAE,cAAc,EAAE,uBAAuB,EAAE,CAAC;AAC/C,sBAAgB,KAAK;AACrB,YAAM,UAAU;AAAA,IAClB,SAAS,KAAK;AACZ,aAAO,MAAM,sBAAsB,EAAE,IAAI,CAAC;AAC1C,oBAAc;AAAA,IAChB,UAAE;AACA,sBAAgB,IAAI;AAAA,IACtB;AAAA,EACF,GAAG,CAAC,WAAW,aAAa,CAAC,CAAC;AAE9B,QAAM,aAAa,MAAM,YAAY,OAAO,UAAyB;AACnE,QAAI,CAAC,MAAO;AACZ,iBAAa,KAAK;AAClB,QAAI;AACF,YAAM,eAAe,2CAA2C;AAAA,QAC9D,QAAQ;AAAA,QACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,QAC9C,MAAM,KAAK,UAAU,EAAE,MAAM,CAAC;AAAA,MAChC,GAAG,EAAE,cAAc,EAAE,uBAAuB,EAAE,CAAC;AAC/C,uBAAiB,KAAK;AACtB,YAAM,UAAU;AAAA,IAClB,SAAS,KAAK;AACZ,aAAO,MAAM,sBAAsB,EAAE,IAAI,CAAC;AAC1C,oBAAc;AAAA,IAChB,UAAE;AACA,mBAAa,IAAI;AAAA,IACnB;AAAA,EACF,GAAG,CAAC,WAAW,aAAa,CAAC,CAAC;AAE9B,QAAM,UAAU,MAAM,QAAyC,MAAM;AAAA,IACnE;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,mCAAmC;AAAA,MAC7C,MAAM,CAAC,SAAS,KAAK,IAAI,SAAS,eAAe,KAAK,IAAI,SAAS;AAAA,IACrE;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,qCAAqC;AAAA,MAC/C,MAAM,CAAC,SAAS,eAAe,KAAK,IAAI,UAAU,SAAS;AAAA,IAC7D;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,iCAAiC;AAAA,MAC3C,MAAM,CAAC,SAAS,KAAK,IAAI,SAAS,iBAAiB,KAAK,SAAS,KAAK;AAAA,MACtE,MAAM,EAAE,UAAU,EAAE;AAAA,IACtB;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,mCAAmC;AAAA,MAC7C,MAAM,CAAC,SAAS,KAAK,IAAI,SAAS,cAAc,KAAK,SAAS,KAAK;AAAA,MACnE,MAAM,EAAE,UAAU,EAAE;AAAA,IACtB;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,yCAAyC;AAAA,MACnD,MAAM,CAAC,SAAS,KAAK,IAAI,SAAS,oBAAoB,KAAK,SAAS,KAAK;AAAA,MACzE,MAAM,EAAE,UAAU,EAAE;AAAA,IACtB;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,iCAAiC;AAAA,MAC3C,MAAM,CAAC,SAAS,WAAW,KAAK,SAAS,CAAW;AAAA,IACtD;AAAA,IACA;AAAA,MACE,aAAa;AAAA,MACb,QAAQ,EAAE,mCAAmC;AAAA,IAC/C;AAAA,IACA;AAAA,MACE,IAAI;AAAA,MACJ,QAAQ,EAAE,qCAAqC;AAAA,MAC/C,eAAe;AAAA,MACf,MAAM,CAAC,SAAS;AACd,cAAM,OAAO,KAAK,IAAI;AACtB,cAAM,cAAc,aAAa,aAAa,KAAK,WAAW;AAC9D,cAAM,cAAc,aAAa,aAAa,KAAK,WAAW;AAC9D,cAAM,UAAU,eAAe,QAAQ,KAAK,SAAS,KAAK,KAAK,mBAAmB,UAAU,wBAAwB,IAAI;AACxH,cAAM,WAAW,eAAe,KAAK,mBAAmB;AACxD,cAAM,UAAU,YAAY,gBAAgB,IAAI;AAChD,YAAI,CAAC,WAAW,CAAC,SAAU,QAAO;AAClC,eACE,qBAAC,SAAI,WAAU,0BACZ;AAAA,oBACC;AAAA,YAAC;AAAA;AAAA,cACC,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,cAAY,EAAE,yBAAyB;AAAA,cACvC,SAAS,MAAM;AAAE,qBAAK,WAAW,KAAK,SAAS;AAAA,cAAE;AAAA,cACjD,UAAU,iBAAiB,KAAK,aAAa,QAAQ,SAAS;AAAA,cAE9D,8BAAC,SAAM,WAAU,UAAS,eAAY,QAAO;AAAA;AAAA,UAC/C,IACE;AAAA,UACH,WACC;AAAA,YAAC;AAAA;AAAA,cACC,SAAQ;AAAA,cACR,MAAK;AAAA,cACL,cAAY,EAAE,yBAAyB;AAAA,cACvC,SAAS,MAAM;AAAE,qBAAK,WAAW,KAAK,EAAE;AAAA,cAAE;AAAA,cAC1C,UAAU,CAAC,WAAW,cAAc,KAAK,MAAM,QAAQ,YAAY;AAAA,cAEnE,8BAAC,aAAU,WAAU,UAAS,eAAY,QAAO;AAAA;AAAA,UACnD,IACE;AAAA,WACN;AAAA,MAEJ;AAAA,MACA,MAAM,EAAE,OAAO,QAAQ;AAAA,IACzB;AAAA,EACF,GAAG,CAAC,GAAG,WAAW,YAAY,YAAY,yBAAyB,iBAAiB,cAAc,WAAW,WAAW,CAAC;AAEzH,QAAM,aAAa,gBAAgB,aAAa,aAAa,aAAa,eAAe,WAAW,IAClG;AAAA,IAAC;AAAA;AAAA,MACC,SAAQ;AAAA,MACR,MAAK;AAAA,MACL,SAAS,MAAM;AAAE,aAAK,WAAW,eAAe,SAAS;AAAA,MAAE;AAAA,MAC3D,UAAU,QAAQ,YAAY,KAAK,QAAQ,SAAS;AAAA,MAEnD,yBAAe,EAAE,4BAA4B,IAAI,EAAE,yBAAyB;AAAA;AAAA,EAC/E,IACE;AAEJ,QAAM,kBAAkB,cAAc,eAClC,qBAAC,SAAI,WAAU,2BAA2B;AAAA;AAAA,IAAc;AAAA,KAAW,IACnE;AAEJ,QAAM,mBAAmB,CAAC,YAAY,aAAa,CAAC,YAAY,iBAAiB,CAAC,CAAC,YAAY;AAE/F,SACE,iCACG;AAAA,uBACC,oBAAC,SAAM,SAAQ,QAAO,WAAU,QAC9B,8BAAC,oBACE,YAAE,kCAAkC,6EAA6E,GACpH,GACF,IACE;AAAA,IACJ;AAAA,MAAC;AAAA;AAAA,QACC,OAAO,EAAE,0BAA0B;AAAA,QACnC,MAAM;AAAA,QACN;AAAA,QACA,SAAS;AAAA,QACT,aAAa,EAAE,SAAS,0BAA0B;AAAA,QAClD,WAAW,QAAQ,SAAS,KAAK,QAAQ,YAAY,KAAK,QAAQ,SAAS;AAAA,QAC3E,YAAY,CAAC,SAAS,YAAY,IAAI;AAAA,QACtC;AAAA;AAAA,IACF;AAAA,IACC,WACC;AAAA,MAAC;AAAA;AAAA,QACC,MAAM;AAAA,QACN,SAAS,MAAM,YAAY,IAAI;AAAA;AAAA,IACjC,IACE;AAAA,KACN;AAEJ;AAEA,SAAS,eAAe,MAAoE,UAAkB;AAC5G,MAAI,CAAC,KAAK,gBAAgB,CAAC,KAAK,WAAY,QAAO;AACnD,SAAO,CAAC,KAAK,cAAc,KAAK,UAAU,EAAE,OAAO,OAAO,EAAE,KAAK,QAAK;AACxE;AAEA,SAAS,iBAAiB,MAAoE;AAC5F,QAAM,OAAO,OAAO,KAAK,iBAAiB,WAAW,KAAK,aAAa,KAAK,IAAI;AAChF,QAAM,KAAK,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,KAAK,IAAI;AAC1E,MAAI,CAAC,QAAQ,CAAC,GAAI,QAAO;AACzB,SAAO,GAAG,IAAI,KAAK,EAAE;AACvB;AAEA,SAAS,WAAW,OAAe;AACjC,QAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,MAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,EAAG,QAAO;AACzC,SAAO,IAAI,KAAK,eAAe,QAAW;AAAA,IACxC,WAAW;AAAA,IACX,WAAW;AAAA,EACb,CAAC,EAAE,OAAO,IAAI;AAChB;",
   "names": []
 }

package/dist/modules/audit_logs/services/accessLogService.js

@@ -6,6 +6,8 @@ import {
 import { resolveTenantEncryptionService } from "@open-mercato/shared/lib/encryption/customFieldValues";
 import { parseDecryptedFieldValue } from "@open-mercato/shared/lib/encryption/tenantDataEncryptionService";
 import { E } from "../../../generated/entities.ids.generated.js";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("audit_logs").child({ component: "access-log-service" });
 const CORE_RESOURCE_KINDS = /* @__PURE__ */ new Set(["auth.user", "auth.role"]);
 function toPositiveNumber(value, fallback) {
   if (!value) return fallback;
@@ -160,7 +162,7 @@ class AccessLogService {
       } catch (err) {
         if (!isZodRuntimeMissing(err) && !validationWarningLogged) {
           validationWarningLogged = true;
-          console.warn("[audit_logs] falling back to permissive access log payload parser", err);
+          logger.warn("Falling back to permissive access log payload parser", { err });
         }
         if (isZodRuntimeMissing(err)) runtimeValidationAvailable = false;
         return this.normalizeInput(input);
@@ -318,7 +320,7 @@ class AccessLogService {
         createdAt: { $lt: nonCoreCutoff }
       });
     } catch (err) {
-      console.warn("[audit_logs] failed to rotate access logs", err);
+      logger.warn("Failed to rotate access logs", { err });
     }
   }
 }

package/dist/modules/audit_logs/services/accessLogService.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../../src/modules/audit_logs/services/accessLogService.ts"],
-  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { FilterQuery } from '@mikro-orm/core'\nimport { AccessLog } from '@open-mercato/core/modules/audit_logs/data/entities'\nimport {\n  accessLogCreateSchema,\n  accessLogListSchema,\n  type AccessLogCreateInput,\n  type AccessLogListQuery,\n} from '@open-mercato/core/modules/audit_logs/data/validators'\nimport { resolveTenantEncryptionService } from '@open-mercato/shared/lib/encryption/customFieldValues'\nimport { parseDecryptedFieldValue } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'\nimport { E } from '#generated/entities.ids.generated'\n\nconst CORE_RESOURCE_KINDS = new Set<string>(['auth.user', 'auth.role'])\n\nfunction toPositiveNumber(value: string | undefined, fallback: number): number {\n  if (!value) return fallback\n  const parsed = Number(value)\n  if (!Number.isFinite(parsed) || parsed <= 0) return fallback\n  return parsed\n}\n\nfunction toNonNegativeNumber(value: string | undefined, fallback: number): number {\n  if (value === undefined || value === '') return fallback\n  const parsed = Number(value)\n  if (!Number.isFinite(parsed) || parsed < 0) return fallback\n  return parsed\n}\n\nconst CORE_RETENTION_DAYS = toPositiveNumber(process.env.AUDIT_LOGS_CORE_RETENTION_DAYS, 7)\nconst NON_CORE_RETENTION_HOURS = toPositiveNumber(process.env.AUDIT_LOGS_NON_CORE_RETENTION_HOURS, 8)\nconst CORE_RETENTION_MS = CORE_RETENTION_DAYS * 24 * 60 * 60 * 1000\nconst NON_CORE_RETENTION_MS = NON_CORE_RETENTION_HOURS * 60 * 60 * 1000\n// Rotation runs after every successful write; without a gate that means two\n// DELETE statements per CRUD GET. Amortize to one rotation per interval per\n// process \u2014 `0` opts back into rotate-on-every-write (test harnesses).\nconst ROTATE_INTERVAL_MS = toNonNegativeNumber(process.env.AUDIT_LOGS_ROTATE_INTERVAL_MS, 60_000)\n\nlet lastRotatedAt: number | null = null\nconst UUID_REGEX = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$/\n// Postgres has a hard limit of 65k bind parameters per statement. Each access\n// log row uses 10 bind values (see INSERT below), so 500 rows \u00D7 10 = 5 000\n// parameters \u2014 well below the limit while keeping memory bounded.\nconst MAX_BATCH_ROWS = 500\n\nlet validationWarningLogged = false\nlet runtimeValidationAvailable: boolean | null = null\n\n// Module-level registry of in-flight access-log writes. Both `log` and\n// `logMany` opt every promise they kick off into this set so that\n// `flushAccessLog()` can drain them. This is what makes the new\n// fire-and-forget CRUD path safe for test code that asserts on `access_logs`\n// rows immediately after a response \u2014 the integration harness defaults to\n// blocking via `OM_CRUD_ACCESS_LOG_BLOCKING=1`, and direct callers can opt\n// in to draining explicitly via `flushAccessLog()`.\nconst pendingAccessLogWrites = new Set<Promise<unknown>>()\n\nfunction trackPendingAccessLogWrite<T>(promise: Promise<T>): Promise<T> {\n  pendingAccessLogWrites.add(promise as unknown as Promise<unknown>)\n  promise\n    .catch(() => undefined)\n    .finally(() => {\n      pendingAccessLogWrites.delete(promise as unknown as Promise<unknown>)\n    })\n  return promise\n}\n\nexport async function flushAccessLog(): Promise<void> {\n  while (pendingAccessLogWrites.size > 0) {\n    const snapshot = Array.from(pendingAccessLogWrites)\n    await Promise.allSettled(snapshot)\n  }\n}\n\nconst isZodRuntimeMissing = (err: unknown) => err instanceof TypeError && typeof err.message === 'string' && err.message.includes('_zod')\n\ntype RawEncryptedFields = {\n  resourceKind?: unknown\n  resourceId?: unknown\n  accessType?: unknown\n  fieldsJson?: unknown\n  contextJson?: unknown\n}\n\nfunction serializeJsonColumn(value: unknown): string | null {\n  if (value === null || value === undefined) return null\n  if (typeof value === 'string') {\n    try {\n      JSON.parse(value)\n      return value\n    } catch {\n      return JSON.stringify(value)\n    }\n  }\n  try {\n    return JSON.stringify(value)\n  } catch {\n    return null\n  }\n}\n\nexport class AccessLogService {\n  constructor(private readonly em: EntityManager) {}\n\n  async log(input: AccessLogCreateInput): Promise<AccessLog | null> {\n    const promise = this.logInternal(input)\n    return trackPendingAccessLogWrite(promise)\n  }\n\n  async logMany(inputs: AccessLogCreateInput[]): Promise<number> {\n    if (!Array.isArray(inputs) || inputs.length === 0) return 0\n    const promise = this.logManyInternal(inputs)\n    return trackPendingAccessLogWrite(promise)\n  }\n\n  flush(): Promise<void> {\n    return flushAccessLog()\n  }\n\n  private async logManyInternal(inputs: AccessLogCreateInput[]): Promise<number> {\n    // Parsing in parallel matches the legacy fan-out `Promise.all(map(...service.log()))`\n    // path's wall-clock; the previous sequential loop made batched writes slower than\n    // un-batched on tenants with encryption enabled and pushed UI integration tests\n    // over their dialog-stability budget.\n    const parsedResults = await Promise.all(inputs.map((input) => this.parseInput(input)))\n    const normalized: AccessLogCreateInput[] = []\n    for (const parsed of parsedResults) {\n      if (parsed) normalized.push(parsed)\n    }\n    if (!normalized.length) return 0\n\n    let written = 0\n    for (let offset = 0; offset < normalized.length; offset += MAX_BATCH_ROWS) {\n      const chunk = normalized.slice(offset, offset + MAX_BATCH_ROWS)\n      written += await this.writeChunk(chunk)\n    }\n    if (written > 0) {\n      const fork = this.em.fork({ useContext: true })\n      await this.rotate(fork)\n    }\n    return written\n  }\n\n  private async writeChunk(chunk: AccessLogCreateInput[]): Promise<number> {\n    if (!chunk.length) return 0\n    const fork = this.em.fork({ useContext: true })\n    const encryption = resolveTenantEncryptionService(fork as any)\n    const createdAt = new Date()\n\n    // Encrypt every row in parallel so encryption-enabled tenants do not pay\n    // the N-rows \u00D7 per-row latency penalty that the previous sequential\n    // for-of loop introduced. The legacy `service.log()` fan-out resolved\n    // its 50 encryption calls concurrently via `Promise.all`; preserve that\n    // characteristic here so the batched single-INSERT path is strictly\n    // faster than the legacy parallel-INSERTs path.\n    type PreparedRow = {\n      tenantId: string | null\n      organizationId: string | null\n      data: AccessLogCreateInput\n      fields: unknown[] | null\n      context: Record<string, unknown> | null\n      encrypted: RawEncryptedFields | null\n    }\n    const prepared: PreparedRow[] = await Promise.all(\n      chunk.map(async (data) => {\n        const fields = Array.isArray(data.fields) && data.fields.length ? data.fields : null\n        const context = data.context && Object.keys(data.context).length ? data.context : null\n        const tenantId = data.tenantId ?? null\n        const organizationId = data.organizationId ?? null\n        const encrypted = encryption\n          ? ((await encryption.encryptEntityPayload(\n              E.audit_logs.access_log,\n              {\n                resourceKind: data.resourceKind,\n                resourceId: data.resourceId,\n                accessType: data.accessType,\n                fieldsJson: fields,\n                contextJson: context,\n              },\n              tenantId,\n              organizationId,\n            )) as RawEncryptedFields)\n          : null\n        return { tenantId, organizationId, data, fields, context, encrypted }\n      }),\n    )\n\n    const placeholders: string[] = []\n    const params: unknown[] = []\n    for (const row of prepared) {\n      const { tenantId, organizationId, data, fields, context, encrypted } = row\n      const resourceKindOut = encrypted?.resourceKind ?? data.resourceKind\n      const resourceIdOut = encrypted?.resourceId ?? data.resourceId\n      const accessTypeOut = encrypted?.accessType ?? data.accessType\n      const fieldsOut = encrypted?.fieldsJson ?? fields\n      const contextOut = encrypted?.contextJson ?? context\n      placeholders.push('(?, ?, ?, ?, ?, ?, ?, ?, ?, ?)')\n      params.push(\n        tenantId,\n        organizationId,\n        data.actorUserId ?? null,\n        resourceKindOut,\n        resourceIdOut,\n        accessTypeOut,\n        serializeJsonColumn(fieldsOut),\n        serializeJsonColumn(contextOut),\n        createdAt,\n        null,\n      )\n    }\n    if (!placeholders.length) return 0\n    const sql = `insert into \"access_logs\" (\"tenant_id\", \"organization_id\", \"actor_user_id\", \"resource_kind\", \"resource_id\", \"access_type\", \"fields_json\", \"context_json\", \"created_at\", \"deleted_at\") values ${placeholders.join(', ')}`\n    await fork.getConnection().execute(sql, params)\n    return chunk.length\n  }\n\n  private async parseInput(input: AccessLogCreateInput): Promise<AccessLogCreateInput | null> {\n    const schema = accessLogCreateSchema as typeof accessLogCreateSchema & { _zod?: unknown }\n    const canValidate = Boolean(schema && typeof schema.parse === 'function')\n    const shouldValidate = canValidate && runtimeValidationAvailable !== false\n    if (shouldValidate) {\n      try {\n        const data = schema.parse(input)\n        runtimeValidationAvailable = true\n        return data\n      } catch (err) {\n        if (!isZodRuntimeMissing(err) && !validationWarningLogged) {\n          validationWarningLogged = true\n          // eslint-disable-next-line no-console\n          console.warn('[audit_logs] falling back to permissive access log payload parser', err)\n        }\n        if (isZodRuntimeMissing(err)) runtimeValidationAvailable = false\n        return this.normalizeInput(input)\n      }\n    }\n    return this.normalizeInput(input)\n  }\n\n  private async logInternal(input: AccessLogCreateInput): Promise<AccessLog | null> {\n    const data = await this.parseInput(input)\n    if (!data) return null\n    const fork = this.em.fork({ useContext: true })\n    const fields = Array.isArray(data.fields) && data.fields.length ? data.fields : null\n    const context = data.context && Object.keys(data.context).length ? data.context : null\n    const createdAt = new Date()\n    const tenantId = data.tenantId ?? null\n    const organizationId = data.organizationId ?? null\n\n    const encryption = resolveTenantEncryptionService(fork as any)\n    const encrypted = encryption\n      ? ((await encryption.encryptEntityPayload(\n          E.audit_logs.access_log,\n          {\n            resourceKind: data.resourceKind,\n            resourceId: data.resourceId,\n            accessType: data.accessType,\n            fieldsJson: fields,\n            contextJson: context,\n          },\n          tenantId,\n          organizationId,\n        )) as RawEncryptedFields)\n      : null\n\n    const payload = {\n      resourceKind: encrypted?.resourceKind ?? data.resourceKind,\n      resourceId: encrypted?.resourceId ?? data.resourceId,\n      accessType: encrypted?.accessType ?? data.accessType,\n      fieldsJson: encrypted?.fieldsJson ?? fields,\n      contextJson: encrypted?.contextJson ?? context,\n    }\n\n    const rows = await fork.getConnection().execute(\n      `insert into \"access_logs\" (\"tenant_id\", \"organization_id\", \"actor_user_id\", \"resource_kind\", \"resource_id\", \"access_type\", \"fields_json\", \"context_json\", \"created_at\", \"deleted_at\") values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?) returning \"id\"`,\n      [\n        tenantId,\n        organizationId,\n        data.actorUserId ?? null,\n        payload.resourceKind,\n        payload.resourceId,\n        payload.accessType,\n        serializeJsonColumn(payload.fieldsJson),\n        serializeJsonColumn(payload.contextJson),\n        createdAt,\n        null,\n      ],\n    )\n    await this.rotate(fork)\n    const id = Array.isArray(rows) && rows.length > 0 ? rows[0]?.id ?? null : null\n    if (!id) return null\n    const entry = fork.create(AccessLog, {\n      id,\n      tenantId: data.tenantId ?? null,\n      organizationId: data.organizationId ?? null,\n      actorUserId: data.actorUserId ?? null,\n      resourceKind: data.resourceKind,\n      resourceId: data.resourceId,\n      accessType: data.accessType,\n      fieldsJson: fields,\n      contextJson: context,\n      createdAt,\n    })\n    return entry\n  }\n\n  private normalizeInput(input: Partial<AccessLogCreateInput> | null | undefined): AccessLogCreateInput {\n    if (!input) {\n      return {\n        tenantId: null,\n        organizationId: null,\n        actorUserId: null,\n        resourceKind: 'unknown',\n        resourceId: 'unknown',\n        accessType: 'unknown',\n        fields: undefined,\n        context: undefined,\n      }\n    }\n    const UUID_REGEX = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$/\n    const toNullableUuid = (value: unknown) => {\n      if (typeof value !== 'string' || value.length === 0) return null\n      const candidate = value.startsWith('api_key:') ? value.slice('api_key:'.length) : value\n      return UUID_REGEX.test(candidate) ? candidate : null\n    }\n    const fields = Array.isArray(input.fields)\n      ? input.fields.filter((f): f is string => typeof f === 'string' && f.length > 0)\n      : undefined\n    const context = typeof input.context === 'object' && input.context !== null\n      ? input.context as Record<string, unknown>\n      : undefined\n    return {\n      tenantId: toNullableUuid(input.tenantId),\n      organizationId: toNullableUuid(input.organizationId),\n      actorUserId: toNullableUuid(input.actorUserId),\n      resourceKind: String(input.resourceKind || 'unknown'),\n      resourceId: String(input.resourceId || 'unknown'),\n      accessType: String(input.accessType || 'unknown'),\n      fields,\n      context,\n    }\n  }\n\n  async list(query: Partial<AccessLogListQuery>) {\n    const parsed = accessLogListSchema.parse({\n      ...query,\n    })\n\n    const where: FilterQuery<AccessLog> = { deletedAt: null }\n    if (parsed.tenantId) where.tenantId = parsed.tenantId\n    if (parsed.organizationId) where.organizationId = parsed.organizationId\n    if (parsed.actorUserId) where.actorUserId = parsed.actorUserId\n    if (parsed.resourceKind) where.resourceKind = parsed.resourceKind\n    if (parsed.accessType) where.accessType = parsed.accessType\n    if (parsed.before) where.createdAt = { ...(where.createdAt as Record<string, any> | undefined), $lt: parsed.before } as any\n    if (parsed.after) where.createdAt = { ...(where.createdAt as Record<string, any> | undefined), $gt: parsed.after } as any\n\n    const pageSize = parsed.pageSize ?? parsed.limit ?? 50\n    const page = parsed.page ?? 1\n    const offset = (page - 1) * pageSize\n\n    const [items, total] = await this.em.findAndCount(\n      AccessLog,\n      where,\n      {\n        orderBy: { createdAt: 'desc' },\n        limit: pageSize,\n        offset,\n      },\n    )\n\n    // Encrypted jsonb columns (`fields_json`, `context_json`) come back as raw\n    // JSON strings from the encryption subscriber after issue #1810 follow-up\n    // (entity-field decryption no longer auto-parses). Restore the structured\n    // shape on read so API consumers see typed objects/arrays.\n    for (const item of items) {\n      const rawFieldsJson = (item as { fieldsJson?: unknown }).fieldsJson\n      if (typeof rawFieldsJson === 'string') {\n        const parsed = parseDecryptedFieldValue(rawFieldsJson)\n        item.fieldsJson = Array.isArray(parsed) ? (parsed as string[]) : null\n      }\n      const rawContextJson = (item as { contextJson?: unknown }).contextJson\n      if (typeof rawContextJson === 'string') {\n        const parsed = parseDecryptedFieldValue(rawContextJson)\n        item.contextJson = parsed && typeof parsed === 'object' && !Array.isArray(parsed)\n          ? (parsed as Record<string, unknown>)\n          : null\n      }\n    }\n\n    const totalPages = Math.max(1, Math.ceil((total || 0) / (pageSize || 1)))\n    return { items, total, page, pageSize, totalPages }\n  }\n\n  private async rotate(fork: EntityManager) {\n    const now = Date.now()\n    if (ROTATE_INTERVAL_MS > 0 && lastRotatedAt !== null && now - lastRotatedAt < ROTATE_INTERVAL_MS) return\n    lastRotatedAt = now\n    const coreCutoff = new Date(now - CORE_RETENTION_MS)\n    const nonCoreCutoff = new Date(now - NON_CORE_RETENTION_MS)\n    try {\n      if (CORE_RESOURCE_KINDS.size > 0) {\n        await fork.nativeDelete(AccessLog, {\n          resourceKind: { $in: Array.from(CORE_RESOURCE_KINDS) },\n          createdAt: { $lt: coreCutoff },\n        })\n      }\n      await fork.nativeDelete(AccessLog, {\n        resourceKind: { $nin: Array.from(CORE_RESOURCE_KINDS) },\n        createdAt: { $lt: nonCoreCutoff },\n      })\n    } catch (err) {\n      // eslint-disable-next-line no-console\n      console.warn('[audit_logs] failed to rotate access logs', err)\n    }\n  }\n}\n"],
-  "mappings": "AAEA,SAAS,iBAAiB;AAC1B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,sCAAsC;AAC/C,SAAS,gCAAgC;AACzC,SAAS,SAAS;AAElB,MAAM,sBAAsB,oBAAI,IAAY,CAAC,aAAa,WAAW,CAAC;AAEtE,SAAS,iBAAiB,OAA2B,UAA0B;AAC7E,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAAS,OAAO,KAAK;AAC3B,MAAI,CAAC,OAAO,SAAS,MAAM,KAAK,UAAU,EAAG,QAAO;AACpD,SAAO;AACT;AAEA,SAAS,oBAAoB,OAA2B,UAA0B;AAChF,MAAI,UAAU,UAAa,UAAU,GAAI,QAAO;AAChD,QAAM,SAAS,OAAO,KAAK;AAC3B,MAAI,CAAC,OAAO,SAAS,MAAM,KAAK,SAAS,EAAG,QAAO;AACnD,SAAO;AACT;AAEA,MAAM,sBAAsB,iBAAiB,QAAQ,IAAI,gCAAgC,CAAC;AAC1F,MAAM,2BAA2B,iBAAiB,QAAQ,IAAI,qCAAqC,CAAC;AACpG,MAAM,oBAAoB,sBAAsB,KAAK,KAAK,KAAK;AAC/D,MAAM,wBAAwB,2BAA2B,KAAK,KAAK;AAInE,MAAM,qBAAqB,oBAAoB,QAAQ,IAAI,+BAA+B,GAAM;AAEhG,IAAI,gBAA+B;AACnC,MAAM,aAAa;AAInB,MAAM,iBAAiB;AAEvB,IAAI,0BAA0B;AAC9B,IAAI,6BAA6C;AASjD,MAAM,yBAAyB,oBAAI,IAAsB;AAEzD,SAAS,2BAA8B,SAAiC;AACtE,yBAAuB,IAAI,OAAsC;AACjE,UACG,MAAM,MAAM,MAAS,EACrB,QAAQ,MAAM;AACb,2BAAuB,OAAO,OAAsC;AAAA,EACtE,CAAC;AACH,SAAO;AACT;AAEA,eAAsB,iBAAgC;AACpD,SAAO,uBAAuB,OAAO,GAAG;AACtC,UAAM,WAAW,MAAM,KAAK,sBAAsB;AAClD,UAAM,QAAQ,WAAW,QAAQ;AAAA,EACnC;AACF;AAEA,MAAM,sBAAsB,CAAC,QAAiB,eAAe,aAAa,OAAO,IAAI,YAAY,YAAY,IAAI,QAAQ,SAAS,MAAM;AAUxI,SAAS,oBAAoB,OAA+B;AAC1D,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,MAAI,OAAO,UAAU,UAAU;AAC7B,QAAI;AACF,WAAK,MAAM,KAAK;AAChB,aAAO;AAAA,IACT,QAAQ;AACN,aAAO,KAAK,UAAU,KAAK;AAAA,IAC7B;AAAA,EACF;AACA,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,iBAAiB;AAAA,EAC5B,YAA6B,IAAmB;AAAnB;AAAA,EAAoB;AAAA,EAEjD,MAAM,IAAI,OAAwD;AAChE,UAAM,UAAU,KAAK,YAAY,KAAK;AACtC,WAAO,2BAA2B,OAAO;AAAA,EAC3C;AAAA,EAEA,MAAM,QAAQ,QAAiD;AAC7D,QAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,EAAG,QAAO;AAC1D,UAAM,UAAU,KAAK,gBAAgB,MAAM;AAC3C,WAAO,2BAA2B,OAAO;AAAA,EAC3C;AAAA,EAEA,QAAuB;AACrB,WAAO,eAAe;AAAA,EACxB;AAAA,EAEA,MAAc,gBAAgB,QAAiD;AAK7E,UAAM,gBAAgB,MAAM,QAAQ,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,WAAW,KAAK,CAAC,CAAC;AACrF,UAAM,aAAqC,CAAC;AAC5C,eAAW,UAAU,eAAe;AAClC,UAAI,OAAQ,YAAW,KAAK,MAAM;AAAA,IACpC;AACA,QAAI,CAAC,WAAW,OAAQ,QAAO;AAE/B,QAAI,UAAU;AACd,aAAS,SAAS,GAAG,SAAS,WAAW,QAAQ,UAAU,gBAAgB;AACzE,YAAM,QAAQ,WAAW,MAAM,QAAQ,SAAS,cAAc;AAC9D,iBAAW,MAAM,KAAK,WAAW,KAAK;AAAA,IACxC;AACA,QAAI,UAAU,GAAG;AACf,YAAM,OAAO,KAAK,GAAG,KAAK,EAAE,YAAY,KAAK,CAAC;AAC9C,YAAM,KAAK,OAAO,IAAI;AAAA,IACxB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,WAAW,OAAgD;AACvE,QAAI,CAAC,MAAM,OAAQ,QAAO;AAC1B,UAAM,OAAO,KAAK,GAAG,KAAK,EAAE,YAAY,KAAK,CAAC;AAC9C,UAAM,aAAa,+BAA+B,IAAW;AAC7D,UAAM,YAAY,oBAAI,KAAK;AAgB3B,UAAM,WAA0B,MAAM,QAAQ;AAAA,MAC5C,MAAM,IAAI,OAAO,SAAS;AACxB,cAAM,SAAS,MAAM,QAAQ,KAAK,MAAM,KAAK,KAAK,OAAO,SAAS,KAAK,SAAS;AAChF,cAAM,UAAU,KAAK,WAAW,OAAO,KAAK,KAAK,OAAO,EAAE,SAAS,KAAK,UAAU;AAClF,cAAM,WAAW,KAAK,YAAY;AAClC,cAAM,iBAAiB,KAAK,kBAAkB;AAC9C,cAAM,YAAY,aACZ,MAAM,WAAW;AAAA,UACjB,EAAE,WAAW;AAAA,UACb;AAAA,YACE,cAAc,KAAK;AAAA,YACnB,YAAY,KAAK;AAAA,YACjB,YAAY,KAAK;AAAA,YACjB,YAAY;AAAA,YACZ,aAAa;AAAA,UACf;AAAA,UACA;AAAA,UACA;AAAA,QACF,IACA;AACJ,eAAO,EAAE,UAAU,gBAAgB,MAAM,QAAQ,SAAS,UAAU;AAAA,MACtE,CAAC;AAAA,IACH;AAEA,UAAM,eAAyB,CAAC;AAChC,UAAM,SAAoB,CAAC;AAC3B,eAAW,OAAO,UAAU;AAC1B,YAAM,EAAE,UAAU,gBAAgB,MAAM,QAAQ,SAAS,UAAU,IAAI;AACvE,YAAM,kBAAkB,WAAW,gBAAgB,KAAK;AACxD,YAAM,gBAAgB,WAAW,cAAc,KAAK;AACpD,YAAM,gBAAgB,WAAW,cAAc,KAAK;AACpD,YAAM,YAAY,WAAW,cAAc;AAC3C,YAAM,aAAa,WAAW,eAAe;AAC7C,mBAAa,KAAK,gCAAgC;AAClD,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,KAAK,eAAe;AAAA,QACpB;AAAA,QACA;AAAA,QACA;AAAA,QACA,oBAAoB,SAAS;AAAA,QAC7B,oBAAoB,UAAU;AAAA,QAC9B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,aAAa,OAAQ,QAAO;AACjC,UAAM,MAAM,gMAAgM,aAAa,KAAK,IAAI,CAAC;AACnO,UAAM,KAAK,cAAc,EAAE,QAAQ,KAAK,MAAM;AAC9C,WAAO,MAAM;AAAA,EACf;AAAA,EAEA,MAAc,WAAW,OAAmE;AAC1F,UAAM,SAAS;AACf,UAAM,cAAc,QAAQ,UAAU,OAAO,OAAO,UAAU,UAAU;AACxE,UAAM,iBAAiB,eAAe,+BAA+B;AACrE,QAAI,gBAAgB;AAClB,UAAI;AACF,cAAM,OAAO,OAAO,MAAM,KAAK;AAC/B,qCAA6B;AAC7B,eAAO;AAAA,MACT,SAAS,KAAK;AACZ,YAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC,yBAAyB;AACzD,oCAA0B;AAE1B,kBAAQ,KAAK,qEAAqE,GAAG;AAAA,QACvF;AACA,YAAI,oBAAoB,GAAG,EAAG,8BAA6B;AAC3D,eAAO,KAAK,eAAe,KAAK;AAAA,MAClC;AAAA,IACF;AACA,WAAO,KAAK,eAAe,KAAK;AAAA,EAClC;AAAA,EAEA,MAAc,YAAY,OAAwD;AAChF,UAAM,OAAO,MAAM,KAAK,WAAW,KAAK;AACxC,QAAI,CAAC,KAAM,QAAO;AAClB,UAAM,OAAO,KAAK,GAAG,KAAK,EAAE,YAAY,KAAK,CAAC;AAC9C,UAAM,SAAS,MAAM,QAAQ,KAAK,MAAM,KAAK,KAAK,OAAO,SAAS,KAAK,SAAS;AAChF,UAAM,UAAU,KAAK,WAAW,OAAO,KAAK,KAAK,OAAO,EAAE,SAAS,KAAK,UAAU;AAClF,UAAM,YAAY,oBAAI,KAAK;AAC3B,UAAM,WAAW,KAAK,YAAY;AAClC,UAAM,iBAAiB,KAAK,kBAAkB;AAE9C,UAAM,aAAa,+BAA+B,IAAW;AAC7D,UAAM,YAAY,aACZ,MAAM,WAAW;AAAA,MACjB,EAAE,WAAW;AAAA,MACb;AAAA,QACE,cAAc,KAAK;AAAA,QACnB,YAAY,KAAK;AAAA,QACjB,YAAY,KAAK;AAAA,QACjB,YAAY;AAAA,QACZ,aAAa;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,IACF,IACA;AAEJ,UAAM,UAAU;AAAA,MACd,cAAc,WAAW,gBAAgB,KAAK;AAAA,MAC9C,YAAY,WAAW,cAAc,KAAK;AAAA,MAC1C,YAAY,WAAW,cAAc,KAAK;AAAA,MAC1C,YAAY,WAAW,cAAc;AAAA,MACrC,aAAa,WAAW,eAAe;AAAA,IACzC;AAEA,UAAM,OAAO,MAAM,KAAK,cAAc,EAAE;AAAA,MACtC;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,KAAK,eAAe;AAAA,QACpB,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,oBAAoB,QAAQ,UAAU;AAAA,QACtC,oBAAoB,QAAQ,WAAW;AAAA,QACvC;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,UAAM,KAAK,OAAO,IAAI;AACtB,UAAM,KAAK,MAAM,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,MAAM,OAAO;AAC1E,QAAI,CAAC,GAAI,QAAO;AAChB,UAAM,QAAQ,KAAK,OAAO,WAAW;AAAA,MACnC;AAAA,MACA,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,kBAAkB;AAAA,MACvC,aAAa,KAAK,eAAe;AAAA,MACjC,cAAc,KAAK;AAAA,MACnB,YAAY,KAAK;AAAA,MACjB,YAAY,KAAK;AAAA,MACjB,YAAY;AAAA,MACZ,aAAa;AAAA,MACb;AAAA,IACF,CAAC;AACD,WAAO;AAAA,EACT;AAAA,EAEQ,eAAe,OAA+E;AACpG,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,QACL,UAAU;AAAA,QACV,gBAAgB;AAAA,QAChB,aAAa;AAAA,QACb,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,YAAY;AAAA,QACZ,QAAQ;AAAA,QACR,SAAS;AAAA,MACX;AAAA,IACF;AACA,UAAMA,cAAa;AACnB,UAAM,iBAAiB,CAAC,UAAmB;AACzC,UAAI,OAAO,UAAU,YAAY,MAAM,WAAW,EAAG,QAAO;AAC5D,YAAM,YAAY,MAAM,WAAW,UAAU,IAAI,MAAM,MAAM,WAAW,MAAM,IAAI;AAClF,aAAOA,YAAW,KAAK,SAAS,IAAI,YAAY;AAAA,IAClD;AACA,UAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,IACrC,MAAM,OAAO,OAAO,CAAC,MAAmB,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC,IAC7E;AACJ,UAAM,UAAU,OAAO,MAAM,YAAY,YAAY,MAAM,YAAY,OACnE,MAAM,UACN;AACJ,WAAO;AAAA,MACL,UAAU,eAAe,MAAM,QAAQ;AAAA,MACvC,gBAAgB,eAAe,MAAM,cAAc;AAAA,MACnD,aAAa,eAAe,MAAM,WAAW;AAAA,MAC7C,cAAc,OAAO,MAAM,gBAAgB,SAAS;AAAA,MACpD,YAAY,OAAO,MAAM,cAAc,SAAS;AAAA,MAChD,YAAY,OAAO,MAAM,cAAc,SAAS;AAAA,MAChD;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,OAAoC;AAC7C,UAAM,SAAS,oBAAoB,MAAM;AAAA,MACvC,GAAG;AAAA,IACL,CAAC;AAED,UAAM,QAAgC,EAAE,WAAW,KAAK;AACxD,QAAI,OAAO,SAAU,OAAM,WAAW,OAAO;AAC7C,QAAI,OAAO,eAAgB,OAAM,iBAAiB,OAAO;AACzD,QAAI,OAAO,YAAa,OAAM,cAAc,OAAO;AACnD,QAAI,OAAO,aAAc,OAAM,eAAe,OAAO;AACrD,QAAI,OAAO,WAAY,OAAM,aAAa,OAAO;AACjD,QAAI,OAAO,OAAQ,OAAM,YAAY,EAAE,GAAI,MAAM,WAA+C,KAAK,OAAO,OAAO;AACnH,QAAI,OAAO,MAAO,OAAM,YAAY,EAAE,GAAI,MAAM,WAA+C,KAAK,OAAO,MAAM;AAEjH,UAAM,WAAW,OAAO,YAAY,OAAO,SAAS;AACpD,UAAM,OAAO,OAAO,QAAQ;AAC5B,UAAM,UAAU,OAAO,KAAK;AAE5B,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM,KAAK,GAAG;AAAA,MACnC;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS,EAAE,WAAW,OAAO;AAAA,QAC7B,OAAO;AAAA,QACP;AAAA,MACF;AAAA,IACF;AAMA,eAAW,QAAQ,OAAO;AACxB,YAAM,gBAAiB,KAAkC;AACzD,UAAI,OAAO,kBAAkB,UAAU;AACrC,cAAMC,UAAS,yBAAyB,aAAa;AACrD,aAAK,aAAa,MAAM,QAAQA,OAAM,IAAKA,UAAsB;AAAA,MACnE;AACA,YAAM,iBAAkB,KAAmC;AAC3D,UAAI,OAAO,mBAAmB,UAAU;AACtC,cAAMA,UAAS,yBAAyB,cAAc;AACtD,aAAK,cAAcA,WAAU,OAAOA,YAAW,YAAY,CAAC,MAAM,QAAQA,OAAM,IAC3EA,UACD;AAAA,MACN;AAAA,IACF;AAEA,UAAM,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,SAAS,MAAM,YAAY,EAAE,CAAC;AACxE,WAAO,EAAE,OAAO,OAAO,MAAM,UAAU,WAAW;AAAA,EACpD;AAAA,EAEA,MAAc,OAAO,MAAqB;AACxC,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,qBAAqB,KAAK,kBAAkB,QAAQ,MAAM,gBAAgB,mBAAoB;AAClG,oBAAgB;AAChB,UAAM,aAAa,IAAI,KAAK,MAAM,iBAAiB;AACnD,UAAM,gBAAgB,IAAI,KAAK,MAAM,qBAAqB;AAC1D,QAAI;AACF,UAAI,oBAAoB,OAAO,GAAG;AAChC,cAAM,KAAK,aAAa,WAAW;AAAA,UACjC,cAAc,EAAE,KAAK,MAAM,KAAK,mBAAmB,EAAE;AAAA,UACrD,WAAW,EAAE,KAAK,WAAW;AAAA,QAC/B,CAAC;AAAA,MACH;AACA,YAAM,KAAK,aAAa,WAAW;AAAA,QACjC,cAAc,EAAE,MAAM,MAAM,KAAK,mBAAmB,EAAE;AAAA,QACtD,WAAW,EAAE,KAAK,cAAc;AAAA,MAClC,CAAC;AAAA,IACH,SAAS,KAAK;AAEZ,cAAQ,KAAK,6CAA6C,GAAG;AAAA,IAC/D;AAAA,EACF;AACF;",
+  "sourcesContent": ["import type { EntityManager } from '@mikro-orm/postgresql'\nimport type { FilterQuery } from '@mikro-orm/core'\nimport { AccessLog } from '@open-mercato/core/modules/audit_logs/data/entities'\nimport {\n  accessLogCreateSchema,\n  accessLogListSchema,\n  type AccessLogCreateInput,\n  type AccessLogListQuery,\n} from '@open-mercato/core/modules/audit_logs/data/validators'\nimport { resolveTenantEncryptionService } from '@open-mercato/shared/lib/encryption/customFieldValues'\nimport { parseDecryptedFieldValue } from '@open-mercato/shared/lib/encryption/tenantDataEncryptionService'\nimport { E } from '#generated/entities.ids.generated'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\n\nconst logger = createLogger('audit_logs').child({ component: 'access-log-service' })\n\nconst CORE_RESOURCE_KINDS = new Set<string>(['auth.user', 'auth.role'])\n\nfunction toPositiveNumber(value: string | undefined, fallback: number): number {\n  if (!value) return fallback\n  const parsed = Number(value)\n  if (!Number.isFinite(parsed) || parsed <= 0) return fallback\n  return parsed\n}\n\nfunction toNonNegativeNumber(value: string | undefined, fallback: number): number {\n  if (value === undefined || value === '') return fallback\n  const parsed = Number(value)\n  if (!Number.isFinite(parsed) || parsed < 0) return fallback\n  return parsed\n}\n\nconst CORE_RETENTION_DAYS = toPositiveNumber(process.env.AUDIT_LOGS_CORE_RETENTION_DAYS, 7)\nconst NON_CORE_RETENTION_HOURS = toPositiveNumber(process.env.AUDIT_LOGS_NON_CORE_RETENTION_HOURS, 8)\nconst CORE_RETENTION_MS = CORE_RETENTION_DAYS * 24 * 60 * 60 * 1000\nconst NON_CORE_RETENTION_MS = NON_CORE_RETENTION_HOURS * 60 * 60 * 1000\n// Rotation runs after every successful write; without a gate that means two\n// DELETE statements per CRUD GET. Amortize to one rotation per interval per\n// process \u2014 `0` opts back into rotate-on-every-write (test harnesses).\nconst ROTATE_INTERVAL_MS = toNonNegativeNumber(process.env.AUDIT_LOGS_ROTATE_INTERVAL_MS, 60_000)\n\nlet lastRotatedAt: number | null = null\nconst UUID_REGEX = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$/\n// Postgres has a hard limit of 65k bind parameters per statement. Each access\n// log row uses 10 bind values (see INSERT below), so 500 rows \u00D7 10 = 5 000\n// parameters \u2014 well below the limit while keeping memory bounded.\nconst MAX_BATCH_ROWS = 500\n\nlet validationWarningLogged = false\nlet runtimeValidationAvailable: boolean | null = null\n\n// Module-level registry of in-flight access-log writes. Both `log` and\n// `logMany` opt every promise they kick off into this set so that\n// `flushAccessLog()` can drain them. This is what makes the new\n// fire-and-forget CRUD path safe for test code that asserts on `access_logs`\n// rows immediately after a response \u2014 the integration harness defaults to\n// blocking via `OM_CRUD_ACCESS_LOG_BLOCKING=1`, and direct callers can opt\n// in to draining explicitly via `flushAccessLog()`.\nconst pendingAccessLogWrites = new Set<Promise<unknown>>()\n\nfunction trackPendingAccessLogWrite<T>(promise: Promise<T>): Promise<T> {\n  pendingAccessLogWrites.add(promise as unknown as Promise<unknown>)\n  promise\n    .catch(() => undefined)\n    .finally(() => {\n      pendingAccessLogWrites.delete(promise as unknown as Promise<unknown>)\n    })\n  return promise\n}\n\nexport async function flushAccessLog(): Promise<void> {\n  while (pendingAccessLogWrites.size > 0) {\n    const snapshot = Array.from(pendingAccessLogWrites)\n    await Promise.allSettled(snapshot)\n  }\n}\n\nconst isZodRuntimeMissing = (err: unknown) => err instanceof TypeError && typeof err.message === 'string' && err.message.includes('_zod')\n\ntype RawEncryptedFields = {\n  resourceKind?: unknown\n  resourceId?: unknown\n  accessType?: unknown\n  fieldsJson?: unknown\n  contextJson?: unknown\n}\n\nfunction serializeJsonColumn(value: unknown): string | null {\n  if (value === null || value === undefined) return null\n  if (typeof value === 'string') {\n    try {\n      JSON.parse(value)\n      return value\n    } catch {\n      return JSON.stringify(value)\n    }\n  }\n  try {\n    return JSON.stringify(value)\n  } catch {\n    return null\n  }\n}\n\nexport class AccessLogService {\n  constructor(private readonly em: EntityManager) {}\n\n  async log(input: AccessLogCreateInput): Promise<AccessLog | null> {\n    const promise = this.logInternal(input)\n    return trackPendingAccessLogWrite(promise)\n  }\n\n  async logMany(inputs: AccessLogCreateInput[]): Promise<number> {\n    if (!Array.isArray(inputs) || inputs.length === 0) return 0\n    const promise = this.logManyInternal(inputs)\n    return trackPendingAccessLogWrite(promise)\n  }\n\n  flush(): Promise<void> {\n    return flushAccessLog()\n  }\n\n  private async logManyInternal(inputs: AccessLogCreateInput[]): Promise<number> {\n    // Parsing in parallel matches the legacy fan-out `Promise.all(map(...service.log()))`\n    // path's wall-clock; the previous sequential loop made batched writes slower than\n    // un-batched on tenants with encryption enabled and pushed UI integration tests\n    // over their dialog-stability budget.\n    const parsedResults = await Promise.all(inputs.map((input) => this.parseInput(input)))\n    const normalized: AccessLogCreateInput[] = []\n    for (const parsed of parsedResults) {\n      if (parsed) normalized.push(parsed)\n    }\n    if (!normalized.length) return 0\n\n    let written = 0\n    for (let offset = 0; offset < normalized.length; offset += MAX_BATCH_ROWS) {\n      const chunk = normalized.slice(offset, offset + MAX_BATCH_ROWS)\n      written += await this.writeChunk(chunk)\n    }\n    if (written > 0) {\n      const fork = this.em.fork({ useContext: true })\n      await this.rotate(fork)\n    }\n    return written\n  }\n\n  private async writeChunk(chunk: AccessLogCreateInput[]): Promise<number> {\n    if (!chunk.length) return 0\n    const fork = this.em.fork({ useContext: true })\n    const encryption = resolveTenantEncryptionService(fork as any)\n    const createdAt = new Date()\n\n    // Encrypt every row in parallel so encryption-enabled tenants do not pay\n    // the N-rows \u00D7 per-row latency penalty that the previous sequential\n    // for-of loop introduced. The legacy `service.log()` fan-out resolved\n    // its 50 encryption calls concurrently via `Promise.all`; preserve that\n    // characteristic here so the batched single-INSERT path is strictly\n    // faster than the legacy parallel-INSERTs path.\n    type PreparedRow = {\n      tenantId: string | null\n      organizationId: string | null\n      data: AccessLogCreateInput\n      fields: unknown[] | null\n      context: Record<string, unknown> | null\n      encrypted: RawEncryptedFields | null\n    }\n    const prepared: PreparedRow[] = await Promise.all(\n      chunk.map(async (data) => {\n        const fields = Array.isArray(data.fields) && data.fields.length ? data.fields : null\n        const context = data.context && Object.keys(data.context).length ? data.context : null\n        const tenantId = data.tenantId ?? null\n        const organizationId = data.organizationId ?? null\n        const encrypted = encryption\n          ? ((await encryption.encryptEntityPayload(\n              E.audit_logs.access_log,\n              {\n                resourceKind: data.resourceKind,\n                resourceId: data.resourceId,\n                accessType: data.accessType,\n                fieldsJson: fields,\n                contextJson: context,\n              },\n              tenantId,\n              organizationId,\n            )) as RawEncryptedFields)\n          : null\n        return { tenantId, organizationId, data, fields, context, encrypted }\n      }),\n    )\n\n    const placeholders: string[] = []\n    const params: unknown[] = []\n    for (const row of prepared) {\n      const { tenantId, organizationId, data, fields, context, encrypted } = row\n      const resourceKindOut = encrypted?.resourceKind ?? data.resourceKind\n      const resourceIdOut = encrypted?.resourceId ?? data.resourceId\n      const accessTypeOut = encrypted?.accessType ?? data.accessType\n      const fieldsOut = encrypted?.fieldsJson ?? fields\n      const contextOut = encrypted?.contextJson ?? context\n      placeholders.push('(?, ?, ?, ?, ?, ?, ?, ?, ?, ?)')\n      params.push(\n        tenantId,\n        organizationId,\n        data.actorUserId ?? null,\n        resourceKindOut,\n        resourceIdOut,\n        accessTypeOut,\n        serializeJsonColumn(fieldsOut),\n        serializeJsonColumn(contextOut),\n        createdAt,\n        null,\n      )\n    }\n    if (!placeholders.length) return 0\n    const sql = `insert into \"access_logs\" (\"tenant_id\", \"organization_id\", \"actor_user_id\", \"resource_kind\", \"resource_id\", \"access_type\", \"fields_json\", \"context_json\", \"created_at\", \"deleted_at\") values ${placeholders.join(', ')}`\n    await fork.getConnection().execute(sql, params)\n    return chunk.length\n  }\n\n  private async parseInput(input: AccessLogCreateInput): Promise<AccessLogCreateInput | null> {\n    const schema = accessLogCreateSchema as typeof accessLogCreateSchema & { _zod?: unknown }\n    const canValidate = Boolean(schema && typeof schema.parse === 'function')\n    const shouldValidate = canValidate && runtimeValidationAvailable !== false\n    if (shouldValidate) {\n      try {\n        const data = schema.parse(input)\n        runtimeValidationAvailable = true\n        return data\n      } catch (err) {\n        if (!isZodRuntimeMissing(err) && !validationWarningLogged) {\n          validationWarningLogged = true\n          logger.warn('Falling back to permissive access log payload parser', { err })\n        }\n        if (isZodRuntimeMissing(err)) runtimeValidationAvailable = false\n        return this.normalizeInput(input)\n      }\n    }\n    return this.normalizeInput(input)\n  }\n\n  private async logInternal(input: AccessLogCreateInput): Promise<AccessLog | null> {\n    const data = await this.parseInput(input)\n    if (!data) return null\n    const fork = this.em.fork({ useContext: true })\n    const fields = Array.isArray(data.fields) && data.fields.length ? data.fields : null\n    const context = data.context && Object.keys(data.context).length ? data.context : null\n    const createdAt = new Date()\n    const tenantId = data.tenantId ?? null\n    const organizationId = data.organizationId ?? null\n\n    const encryption = resolveTenantEncryptionService(fork as any)\n    const encrypted = encryption\n      ? ((await encryption.encryptEntityPayload(\n          E.audit_logs.access_log,\n          {\n            resourceKind: data.resourceKind,\n            resourceId: data.resourceId,\n            accessType: data.accessType,\n            fieldsJson: fields,\n            contextJson: context,\n          },\n          tenantId,\n          organizationId,\n        )) as RawEncryptedFields)\n      : null\n\n    const payload = {\n      resourceKind: encrypted?.resourceKind ?? data.resourceKind,\n      resourceId: encrypted?.resourceId ?? data.resourceId,\n      accessType: encrypted?.accessType ?? data.accessType,\n      fieldsJson: encrypted?.fieldsJson ?? fields,\n      contextJson: encrypted?.contextJson ?? context,\n    }\n\n    const rows = await fork.getConnection().execute(\n      `insert into \"access_logs\" (\"tenant_id\", \"organization_id\", \"actor_user_id\", \"resource_kind\", \"resource_id\", \"access_type\", \"fields_json\", \"context_json\", \"created_at\", \"deleted_at\") values (?, ?, ?, ?, ?, ?, ?, ?, ?, ?) returning \"id\"`,\n      [\n        tenantId,\n        organizationId,\n        data.actorUserId ?? null,\n        payload.resourceKind,\n        payload.resourceId,\n        payload.accessType,\n        serializeJsonColumn(payload.fieldsJson),\n        serializeJsonColumn(payload.contextJson),\n        createdAt,\n        null,\n      ],\n    )\n    await this.rotate(fork)\n    const id = Array.isArray(rows) && rows.length > 0 ? rows[0]?.id ?? null : null\n    if (!id) return null\n    const entry = fork.create(AccessLog, {\n      id,\n      tenantId: data.tenantId ?? null,\n      organizationId: data.organizationId ?? null,\n      actorUserId: data.actorUserId ?? null,\n      resourceKind: data.resourceKind,\n      resourceId: data.resourceId,\n      accessType: data.accessType,\n      fieldsJson: fields,\n      contextJson: context,\n      createdAt,\n    })\n    return entry\n  }\n\n  private normalizeInput(input: Partial<AccessLogCreateInput> | null | undefined): AccessLogCreateInput {\n    if (!input) {\n      return {\n        tenantId: null,\n        organizationId: null,\n        actorUserId: null,\n        resourceKind: 'unknown',\n        resourceId: 'unknown',\n        accessType: 'unknown',\n        fields: undefined,\n        context: undefined,\n      }\n    }\n    const UUID_REGEX = /^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-5][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$/\n    const toNullableUuid = (value: unknown) => {\n      if (typeof value !== 'string' || value.length === 0) return null\n      const candidate = value.startsWith('api_key:') ? value.slice('api_key:'.length) : value\n      return UUID_REGEX.test(candidate) ? candidate : null\n    }\n    const fields = Array.isArray(input.fields)\n      ? input.fields.filter((f): f is string => typeof f === 'string' && f.length > 0)\n      : undefined\n    const context = typeof input.context === 'object' && input.context !== null\n      ? input.context as Record<string, unknown>\n      : undefined\n    return {\n      tenantId: toNullableUuid(input.tenantId),\n      organizationId: toNullableUuid(input.organizationId),\n      actorUserId: toNullableUuid(input.actorUserId),\n      resourceKind: String(input.resourceKind || 'unknown'),\n      resourceId: String(input.resourceId || 'unknown'),\n      accessType: String(input.accessType || 'unknown'),\n      fields,\n      context,\n    }\n  }\n\n  async list(query: Partial<AccessLogListQuery>) {\n    const parsed = accessLogListSchema.parse({\n      ...query,\n    })\n\n    const where: FilterQuery<AccessLog> = { deletedAt: null }\n    if (parsed.tenantId) where.tenantId = parsed.tenantId\n    if (parsed.organizationId) where.organizationId = parsed.organizationId\n    if (parsed.actorUserId) where.actorUserId = parsed.actorUserId\n    if (parsed.resourceKind) where.resourceKind = parsed.resourceKind\n    if (parsed.accessType) where.accessType = parsed.accessType\n    if (parsed.before) where.createdAt = { ...(where.createdAt as Record<string, any> | undefined), $lt: parsed.before } as any\n    if (parsed.after) where.createdAt = { ...(where.createdAt as Record<string, any> | undefined), $gt: parsed.after } as any\n\n    const pageSize = parsed.pageSize ?? parsed.limit ?? 50\n    const page = parsed.page ?? 1\n    const offset = (page - 1) * pageSize\n\n    const [items, total] = await this.em.findAndCount(\n      AccessLog,\n      where,\n      {\n        orderBy: { createdAt: 'desc' },\n        limit: pageSize,\n        offset,\n      },\n    )\n\n    // Encrypted jsonb columns (`fields_json`, `context_json`) come back as raw\n    // JSON strings from the encryption subscriber after issue #1810 follow-up\n    // (entity-field decryption no longer auto-parses). Restore the structured\n    // shape on read so API consumers see typed objects/arrays.\n    for (const item of items) {\n      const rawFieldsJson = (item as { fieldsJson?: unknown }).fieldsJson\n      if (typeof rawFieldsJson === 'string') {\n        const parsed = parseDecryptedFieldValue(rawFieldsJson)\n        item.fieldsJson = Array.isArray(parsed) ? (parsed as string[]) : null\n      }\n      const rawContextJson = (item as { contextJson?: unknown }).contextJson\n      if (typeof rawContextJson === 'string') {\n        const parsed = parseDecryptedFieldValue(rawContextJson)\n        item.contextJson = parsed && typeof parsed === 'object' && !Array.isArray(parsed)\n          ? (parsed as Record<string, unknown>)\n          : null\n      }\n    }\n\n    const totalPages = Math.max(1, Math.ceil((total || 0) / (pageSize || 1)))\n    return { items, total, page, pageSize, totalPages }\n  }\n\n  private async rotate(fork: EntityManager) {\n    const now = Date.now()\n    if (ROTATE_INTERVAL_MS > 0 && lastRotatedAt !== null && now - lastRotatedAt < ROTATE_INTERVAL_MS) return\n    lastRotatedAt = now\n    const coreCutoff = new Date(now - CORE_RETENTION_MS)\n    const nonCoreCutoff = new Date(now - NON_CORE_RETENTION_MS)\n    try {\n      if (CORE_RESOURCE_KINDS.size > 0) {\n        await fork.nativeDelete(AccessLog, {\n          resourceKind: { $in: Array.from(CORE_RESOURCE_KINDS) },\n          createdAt: { $lt: coreCutoff },\n        })\n      }\n      await fork.nativeDelete(AccessLog, {\n        resourceKind: { $nin: Array.from(CORE_RESOURCE_KINDS) },\n        createdAt: { $lt: nonCoreCutoff },\n      })\n    } catch (err) {\n      logger.warn('Failed to rotate access logs', { err })\n    }\n  }\n}\n"],
+  "mappings": "AAEA,SAAS,iBAAiB;AAC1B;AAAA,EACE;AAAA,EACA;AAAA,OAGK;AACP,SAAS,sCAAsC;AAC/C,SAAS,gCAAgC;AACzC,SAAS,SAAS;AAClB,SAAS,oBAAoB;AAE7B,MAAM,SAAS,aAAa,YAAY,EAAE,MAAM,EAAE,WAAW,qBAAqB,CAAC;AAEnF,MAAM,sBAAsB,oBAAI,IAAY,CAAC,aAAa,WAAW,CAAC;AAEtE,SAAS,iBAAiB,OAA2B,UAA0B;AAC7E,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,SAAS,OAAO,KAAK;AAC3B,MAAI,CAAC,OAAO,SAAS,MAAM,KAAK,UAAU,EAAG,QAAO;AACpD,SAAO;AACT;AAEA,SAAS,oBAAoB,OAA2B,UAA0B;AAChF,MAAI,UAAU,UAAa,UAAU,GAAI,QAAO;AAChD,QAAM,SAAS,OAAO,KAAK;AAC3B,MAAI,CAAC,OAAO,SAAS,MAAM,KAAK,SAAS,EAAG,QAAO;AACnD,SAAO;AACT;AAEA,MAAM,sBAAsB,iBAAiB,QAAQ,IAAI,gCAAgC,CAAC;AAC1F,MAAM,2BAA2B,iBAAiB,QAAQ,IAAI,qCAAqC,CAAC;AACpG,MAAM,oBAAoB,sBAAsB,KAAK,KAAK,KAAK;AAC/D,MAAM,wBAAwB,2BAA2B,KAAK,KAAK;AAInE,MAAM,qBAAqB,oBAAoB,QAAQ,IAAI,+BAA+B,GAAM;AAEhG,IAAI,gBAA+B;AACnC,MAAM,aAAa;AAInB,MAAM,iBAAiB;AAEvB,IAAI,0BAA0B;AAC9B,IAAI,6BAA6C;AASjD,MAAM,yBAAyB,oBAAI,IAAsB;AAEzD,SAAS,2BAA8B,SAAiC;AACtE,yBAAuB,IAAI,OAAsC;AACjE,UACG,MAAM,MAAM,MAAS,EACrB,QAAQ,MAAM;AACb,2BAAuB,OAAO,OAAsC;AAAA,EACtE,CAAC;AACH,SAAO;AACT;AAEA,eAAsB,iBAAgC;AACpD,SAAO,uBAAuB,OAAO,GAAG;AACtC,UAAM,WAAW,MAAM,KAAK,sBAAsB;AAClD,UAAM,QAAQ,WAAW,QAAQ;AAAA,EACnC;AACF;AAEA,MAAM,sBAAsB,CAAC,QAAiB,eAAe,aAAa,OAAO,IAAI,YAAY,YAAY,IAAI,QAAQ,SAAS,MAAM;AAUxI,SAAS,oBAAoB,OAA+B;AAC1D,MAAI,UAAU,QAAQ,UAAU,OAAW,QAAO;AAClD,MAAI,OAAO,UAAU,UAAU;AAC7B,QAAI;AACF,WAAK,MAAM,KAAK;AAChB,aAAO;AAAA,IACT,QAAQ;AACN,aAAO,KAAK,UAAU,KAAK;AAAA,IAC7B;AAAA,EACF;AACA,MAAI;AACF,WAAO,KAAK,UAAU,KAAK;AAAA,EAC7B,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAEO,MAAM,iBAAiB;AAAA,EAC5B,YAA6B,IAAmB;AAAnB;AAAA,EAAoB;AAAA,EAEjD,MAAM,IAAI,OAAwD;AAChE,UAAM,UAAU,KAAK,YAAY,KAAK;AACtC,WAAO,2BAA2B,OAAO;AAAA,EAC3C;AAAA,EAEA,MAAM,QAAQ,QAAiD;AAC7D,QAAI,CAAC,MAAM,QAAQ,MAAM,KAAK,OAAO,WAAW,EAAG,QAAO;AAC1D,UAAM,UAAU,KAAK,gBAAgB,MAAM;AAC3C,WAAO,2BAA2B,OAAO;AAAA,EAC3C;AAAA,EAEA,QAAuB;AACrB,WAAO,eAAe;AAAA,EACxB;AAAA,EAEA,MAAc,gBAAgB,QAAiD;AAK7E,UAAM,gBAAgB,MAAM,QAAQ,IAAI,OAAO,IAAI,CAAC,UAAU,KAAK,WAAW,KAAK,CAAC,CAAC;AACrF,UAAM,aAAqC,CAAC;AAC5C,eAAW,UAAU,eAAe;AAClC,UAAI,OAAQ,YAAW,KAAK,MAAM;AAAA,IACpC;AACA,QAAI,CAAC,WAAW,OAAQ,QAAO;AAE/B,QAAI,UAAU;AACd,aAAS,SAAS,GAAG,SAAS,WAAW,QAAQ,UAAU,gBAAgB;AACzE,YAAM,QAAQ,WAAW,MAAM,QAAQ,SAAS,cAAc;AAC9D,iBAAW,MAAM,KAAK,WAAW,KAAK;AAAA,IACxC;AACA,QAAI,UAAU,GAAG;AACf,YAAM,OAAO,KAAK,GAAG,KAAK,EAAE,YAAY,KAAK,CAAC;AAC9C,YAAM,KAAK,OAAO,IAAI;AAAA,IACxB;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,WAAW,OAAgD;AACvE,QAAI,CAAC,MAAM,OAAQ,QAAO;AAC1B,UAAM,OAAO,KAAK,GAAG,KAAK,EAAE,YAAY,KAAK,CAAC;AAC9C,UAAM,aAAa,+BAA+B,IAAW;AAC7D,UAAM,YAAY,oBAAI,KAAK;AAgB3B,UAAM,WAA0B,MAAM,QAAQ;AAAA,MAC5C,MAAM,IAAI,OAAO,SAAS;AACxB,cAAM,SAAS,MAAM,QAAQ,KAAK,MAAM,KAAK,KAAK,OAAO,SAAS,KAAK,SAAS;AAChF,cAAM,UAAU,KAAK,WAAW,OAAO,KAAK,KAAK,OAAO,EAAE,SAAS,KAAK,UAAU;AAClF,cAAM,WAAW,KAAK,YAAY;AAClC,cAAM,iBAAiB,KAAK,kBAAkB;AAC9C,cAAM,YAAY,aACZ,MAAM,WAAW;AAAA,UACjB,EAAE,WAAW;AAAA,UACb;AAAA,YACE,cAAc,KAAK;AAAA,YACnB,YAAY,KAAK;AAAA,YACjB,YAAY,KAAK;AAAA,YACjB,YAAY;AAAA,YACZ,aAAa;AAAA,UACf;AAAA,UACA;AAAA,UACA;AAAA,QACF,IACA;AACJ,eAAO,EAAE,UAAU,gBAAgB,MAAM,QAAQ,SAAS,UAAU;AAAA,MACtE,CAAC;AAAA,IACH;AAEA,UAAM,eAAyB,CAAC;AAChC,UAAM,SAAoB,CAAC;AAC3B,eAAW,OAAO,UAAU;AAC1B,YAAM,EAAE,UAAU,gBAAgB,MAAM,QAAQ,SAAS,UAAU,IAAI;AACvE,YAAM,kBAAkB,WAAW,gBAAgB,KAAK;AACxD,YAAM,gBAAgB,WAAW,cAAc,KAAK;AACpD,YAAM,gBAAgB,WAAW,cAAc,KAAK;AACpD,YAAM,YAAY,WAAW,cAAc;AAC3C,YAAM,aAAa,WAAW,eAAe;AAC7C,mBAAa,KAAK,gCAAgC;AAClD,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,KAAK,eAAe;AAAA,QACpB;AAAA,QACA;AAAA,QACA;AAAA,QACA,oBAAoB,SAAS;AAAA,QAC7B,oBAAoB,UAAU;AAAA,QAC9B;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,QAAI,CAAC,aAAa,OAAQ,QAAO;AACjC,UAAM,MAAM,gMAAgM,aAAa,KAAK,IAAI,CAAC;AACnO,UAAM,KAAK,cAAc,EAAE,QAAQ,KAAK,MAAM;AAC9C,WAAO,MAAM;AAAA,EACf;AAAA,EAEA,MAAc,WAAW,OAAmE;AAC1F,UAAM,SAAS;AACf,UAAM,cAAc,QAAQ,UAAU,OAAO,OAAO,UAAU,UAAU;AACxE,UAAM,iBAAiB,eAAe,+BAA+B;AACrE,QAAI,gBAAgB;AAClB,UAAI;AACF,cAAM,OAAO,OAAO,MAAM,KAAK;AAC/B,qCAA6B;AAC7B,eAAO;AAAA,MACT,SAAS,KAAK;AACZ,YAAI,CAAC,oBAAoB,GAAG,KAAK,CAAC,yBAAyB;AACzD,oCAA0B;AAC1B,iBAAO,KAAK,wDAAwD,EAAE,IAAI,CAAC;AAAA,QAC7E;AACA,YAAI,oBAAoB,GAAG,EAAG,8BAA6B;AAC3D,eAAO,KAAK,eAAe,KAAK;AAAA,MAClC;AAAA,IACF;AACA,WAAO,KAAK,eAAe,KAAK;AAAA,EAClC;AAAA,EAEA,MAAc,YAAY,OAAwD;AAChF,UAAM,OAAO,MAAM,KAAK,WAAW,KAAK;AACxC,QAAI,CAAC,KAAM,QAAO;AAClB,UAAM,OAAO,KAAK,GAAG,KAAK,EAAE,YAAY,KAAK,CAAC;AAC9C,UAAM,SAAS,MAAM,QAAQ,KAAK,MAAM,KAAK,KAAK,OAAO,SAAS,KAAK,SAAS;AAChF,UAAM,UAAU,KAAK,WAAW,OAAO,KAAK,KAAK,OAAO,EAAE,SAAS,KAAK,UAAU;AAClF,UAAM,YAAY,oBAAI,KAAK;AAC3B,UAAM,WAAW,KAAK,YAAY;AAClC,UAAM,iBAAiB,KAAK,kBAAkB;AAE9C,UAAM,aAAa,+BAA+B,IAAW;AAC7D,UAAM,YAAY,aACZ,MAAM,WAAW;AAAA,MACjB,EAAE,WAAW;AAAA,MACb;AAAA,QACE,cAAc,KAAK;AAAA,QACnB,YAAY,KAAK;AAAA,QACjB,YAAY,KAAK;AAAA,QACjB,YAAY;AAAA,QACZ,aAAa;AAAA,MACf;AAAA,MACA;AAAA,MACA;AAAA,IACF,IACA;AAEJ,UAAM,UAAU;AAAA,MACd,cAAc,WAAW,gBAAgB,KAAK;AAAA,MAC9C,YAAY,WAAW,cAAc,KAAK;AAAA,MAC1C,YAAY,WAAW,cAAc,KAAK;AAAA,MAC1C,YAAY,WAAW,cAAc;AAAA,MACrC,aAAa,WAAW,eAAe;AAAA,IACzC;AAEA,UAAM,OAAO,MAAM,KAAK,cAAc,EAAE;AAAA,MACtC;AAAA,MACA;AAAA,QACE;AAAA,QACA;AAAA,QACA,KAAK,eAAe;AAAA,QACpB,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ;AAAA,QACR,oBAAoB,QAAQ,UAAU;AAAA,QACtC,oBAAoB,QAAQ,WAAW;AAAA,QACvC;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,UAAM,KAAK,OAAO,IAAI;AACtB,UAAM,KAAK,MAAM,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,MAAM,OAAO;AAC1E,QAAI,CAAC,GAAI,QAAO;AAChB,UAAM,QAAQ,KAAK,OAAO,WAAW;AAAA,MACnC;AAAA,MACA,UAAU,KAAK,YAAY;AAAA,MAC3B,gBAAgB,KAAK,kBAAkB;AAAA,MACvC,aAAa,KAAK,eAAe;AAAA,MACjC,cAAc,KAAK;AAAA,MACnB,YAAY,KAAK;AAAA,MACjB,YAAY,KAAK;AAAA,MACjB,YAAY;AAAA,MACZ,aAAa;AAAA,MACb;AAAA,IACF,CAAC;AACD,WAAO;AAAA,EACT;AAAA,EAEQ,eAAe,OAA+E;AACpG,QAAI,CAAC,OAAO;AACV,aAAO;AAAA,QACL,UAAU;AAAA,QACV,gBAAgB;AAAA,QAChB,aAAa;AAAA,QACb,cAAc;AAAA,QACd,YAAY;AAAA,QACZ,YAAY;AAAA,QACZ,QAAQ;AAAA,QACR,SAAS;AAAA,MACX;AAAA,IACF;AACA,UAAMA,cAAa;AACnB,UAAM,iBAAiB,CAAC,UAAmB;AACzC,UAAI,OAAO,UAAU,YAAY,MAAM,WAAW,EAAG,QAAO;AAC5D,YAAM,YAAY,MAAM,WAAW,UAAU,IAAI,MAAM,MAAM,WAAW,MAAM,IAAI;AAClF,aAAOA,YAAW,KAAK,SAAS,IAAI,YAAY;AAAA,IAClD;AACA,UAAM,SAAS,MAAM,QAAQ,MAAM,MAAM,IACrC,MAAM,OAAO,OAAO,CAAC,MAAmB,OAAO,MAAM,YAAY,EAAE,SAAS,CAAC,IAC7E;AACJ,UAAM,UAAU,OAAO,MAAM,YAAY,YAAY,MAAM,YAAY,OACnE,MAAM,UACN;AACJ,WAAO;AAAA,MACL,UAAU,eAAe,MAAM,QAAQ;AAAA,MACvC,gBAAgB,eAAe,MAAM,cAAc;AAAA,MACnD,aAAa,eAAe,MAAM,WAAW;AAAA,MAC7C,cAAc,OAAO,MAAM,gBAAgB,SAAS;AAAA,MACpD,YAAY,OAAO,MAAM,cAAc,SAAS;AAAA,MAChD,YAAY,OAAO,MAAM,cAAc,SAAS;AAAA,MAChD;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,OAAoC;AAC7C,UAAM,SAAS,oBAAoB,MAAM;AAAA,MACvC,GAAG;AAAA,IACL,CAAC;AAED,UAAM,QAAgC,EAAE,WAAW,KAAK;AACxD,QAAI,OAAO,SAAU,OAAM,WAAW,OAAO;AAC7C,QAAI,OAAO,eAAgB,OAAM,iBAAiB,OAAO;AACzD,QAAI,OAAO,YAAa,OAAM,cAAc,OAAO;AACnD,QAAI,OAAO,aAAc,OAAM,eAAe,OAAO;AACrD,QAAI,OAAO,WAAY,OAAM,aAAa,OAAO;AACjD,QAAI,OAAO,OAAQ,OAAM,YAAY,EAAE,GAAI,MAAM,WAA+C,KAAK,OAAO,OAAO;AACnH,QAAI,OAAO,MAAO,OAAM,YAAY,EAAE,GAAI,MAAM,WAA+C,KAAK,OAAO,MAAM;AAEjH,UAAM,WAAW,OAAO,YAAY,OAAO,SAAS;AACpD,UAAM,OAAO,OAAO,QAAQ;AAC5B,UAAM,UAAU,OAAO,KAAK;AAE5B,UAAM,CAAC,OAAO,KAAK,IAAI,MAAM,KAAK,GAAG;AAAA,MACnC;AAAA,MACA;AAAA,MACA;AAAA,QACE,SAAS,EAAE,WAAW,OAAO;AAAA,QAC7B,OAAO;AAAA,QACP;AAAA,MACF;AAAA,IACF;AAMA,eAAW,QAAQ,OAAO;AACxB,YAAM,gBAAiB,KAAkC;AACzD,UAAI,OAAO,kBAAkB,UAAU;AACrC,cAAMC,UAAS,yBAAyB,aAAa;AACrD,aAAK,aAAa,MAAM,QAAQA,OAAM,IAAKA,UAAsB;AAAA,MACnE;AACA,YAAM,iBAAkB,KAAmC;AAC3D,UAAI,OAAO,mBAAmB,UAAU;AACtC,cAAMA,UAAS,yBAAyB,cAAc;AACtD,aAAK,cAAcA,WAAU,OAAOA,YAAW,YAAY,CAAC,MAAM,QAAQA,OAAM,IAC3EA,UACD;AAAA,MACN;AAAA,IACF;AAEA,UAAM,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,SAAS,MAAM,YAAY,EAAE,CAAC;AACxE,WAAO,EAAE,OAAO,OAAO,MAAM,UAAU,WAAW;AAAA,EACpD;AAAA,EAEA,MAAc,OAAO,MAAqB;AACxC,UAAM,MAAM,KAAK,IAAI;AACrB,QAAI,qBAAqB,KAAK,kBAAkB,QAAQ,MAAM,gBAAgB,mBAAoB;AAClG,oBAAgB;AAChB,UAAM,aAAa,IAAI,KAAK,MAAM,iBAAiB;AACnD,UAAM,gBAAgB,IAAI,KAAK,MAAM,qBAAqB;AAC1D,QAAI;AACF,UAAI,oBAAoB,OAAO,GAAG;AAChC,cAAM,KAAK,aAAa,WAAW;AAAA,UACjC,cAAc,EAAE,KAAK,MAAM,KAAK,mBAAmB,EAAE;AAAA,UACrD,WAAW,EAAE,KAAK,WAAW;AAAA,QAC/B,CAAC;AAAA,MACH;AACA,YAAM,KAAK,aAAa,WAAW;AAAA,QACjC,cAAc,EAAE,MAAM,MAAM,KAAK,mBAAmB,EAAE;AAAA,QACtD,WAAW,EAAE,KAAK,cAAc;AAAA,MAClC,CAAC;AAAA,IACH,SAAS,KAAK;AACZ,aAAO,KAAK,gCAAgC,EAAE,IAAI,CAAC;AAAA,IACrD;AAAA,EACF;AACF;",
   "names": ["UUID_REGEX", "parsed"]
 }

package/dist/modules/audit_logs/services/actionLogService.js

@@ -14,6 +14,8 @@ import {
   parseDecryptedFieldValue
 } from "@open-mercato/shared/lib/encryption/tenantDataEncryptionService";
 import { toOptionalString } from "@open-mercato/shared/lib/string/coerce";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+const logger = createLogger("audit_logs").child({ component: "action-log-service" });
 let validationWarningLogged = false;
 let runtimeValidationAvailable = null;
 let decryptionWarningLogged = false;
@@ -109,7 +111,7 @@ class ActionLogService {
     } catch (err) {
       if (!decryptionWarningLogged) {
         decryptionWarningLogged = true;
-        console.warn("[audit_logs] failed to decrypt action log entry", err);
+        logger.warn("Failed to decrypt action log entry", { err });
       }
       return entry;
     }
@@ -141,7 +143,7 @@ class ActionLogService {
       } catch (err) {
         if (!isZodRuntimeMissing(err) && !validationWarningLogged) {
           validationWarningLogged = true;
-          console.warn("[audit_logs] falling back to permissive action log payload parser", err);
+          logger.warn("Falling back to permissive action log payload parser", { err });
         }
         if (isZodRuntimeMissing(err)) runtimeValidationAvailable = false;
         data = this.normalizeInput(input);
@@ -457,7 +459,7 @@ class ActionLogService {
   }
   async backfillProjections(options = {}) {
     const batchSize = Math.min(Math.max(Math.trunc(options.batchSize ?? 250), 1), 1e3);
-    const logger = options.logger ?? (() => {
+    const logger2 = options.logger ?? (() => {
     });
     const result = {
       errors: 0,
@@ -534,13 +536,13 @@ class ActionLogService {
           result.updated += 1;
         } catch (err) {
           result.errors += 1;
-          logger(`[backfill] Failed for action log ${row.id}: ${err instanceof Error ? err.message : String(err)}`);
+          logger2(`[backfill] Failed for action log ${row.id}: ${err instanceof Error ? err.message : String(err)}`);
         }
       }
       const lastRow = rows[rows.length - 1];
       cursorCreatedAt = lastRow.created_at;
       cursorId = lastRow.id;
-      logger(
+      logger2(
         `[backfill] Processed ${result.scanned} action logs (updated: ${result.updated}, skipped: ${result.skipped}, errors: ${result.errors})`
       );
       if (rows.length < batchSize) break;