@paroicms/server 1.109.5 → 1.110.0

package/dist/admin-backend/document/document.resolver.js

@@ -1,23 +1,25 @@
 import { createNoTracker, toAbsoluteUrl } from "@paroicms/internal-server-lib";
-import { isDef, parseLNodeId } from "@paroicms/public-anywhere-lib";
+import { encodeLNodeId, isDef, parseLNodeId } from "@paroicms/public-anywhere-lib";
 import { toDocumentSeed } from "../../common/data-format.js";
 import { siteReadyGuard } from "../../graphql/graphql.types.js";
 import { getUrlOfDocument } from "../../rendered-site/page-route/make-url.js";
-import { authGuard } from "../auth/auth.helper.js";
+import { permissionGuard } from "../auth/authorization.helper.js";
+import { recordEvent } from "../event-log/event-log.service.js";
+import { getTypeNameOf } from "../node/node.queries.js";
 import { getOneDocument } from "./load-documents.queries.js";
 import { createDocumentOnNode, createNodeWithDocument, deleteDocument, deleteNodeAndDocuments, updateDocument, } from "./save-documents.queries.js";
 export const documentResolvers = {
     Query: {
         document: async (_parent, { id }, { siteContext, httpContext }) => {
-            authGuard(httpContext);
             siteReadyGuard(siteContext);
+            await permissionGuard(siteContext, httpContext, "document.edit");
             return toDocumentSeed(await getOneDocument(siteContext, parseLNodeId(id)));
         },
     },
     Mutation: {
         updateDocumentTitle: async (_parent, { values, id }, { siteContext, httpContext }) => {
-            authGuard(httpContext);
             siteReadyGuard(siteContext);
+            const authorizedAccount = await permissionGuard(siteContext, httpContext, "document.edit");
             const lNodeId = parseLNodeId(id);
             const empty = Object.values(values).every((v) => !isDef(v));
             if (!empty) {
@@ -26,34 +28,87 @@ export const documentResolvers = {
                     slug: values.slug ?? undefined,
                 });
             }
-            return toDocumentSeed(await getOneDocument(siteContext, lNodeId));
+            const doc = await getOneDocument(siteContext, lNodeId);
+            if (!empty) {
+                const typeName = await getTypeNameOf(siteContext, doc.nodeId);
+                recordEvent(siteContext, {
+                    eventType: "document.update",
+                    actorId: authorizedAccount.accountId,
+                    targetType: "document",
+                    targetId: encodeLNodeId(lNodeId),
+                    eventData: {
+                        nodeId: doc.nodeId,
+                        typeName,
+                        title: doc.title,
+                        language: doc.language,
+                        changedFields: ["title"],
+                    },
+                });
+            }
+            return toDocumentSeed(doc);
         },
         updateDocumentMeta: async (_parent, { values, id }, { siteContext, httpContext }) => {
-            authGuard(httpContext);
             siteReadyGuard(siteContext);
+            const authorizedAccount = await permissionGuard(siteContext, httpContext, "document.edit");
             const lNodeId = parseLNodeId(id);
             const empty = Object.values(values).every((v) => !isDef(v));
             if (!empty) {
                 await updateDocument(siteContext, lNodeId, values);
             }
-            return toDocumentSeed(await getOneDocument(siteContext, lNodeId));
+            const doc = await getOneDocument(siteContext, lNodeId);
+            if (!empty) {
+                const typeName = await getTypeNameOf(siteContext, doc.nodeId);
+                const changedFields = [];
+                if (isDef(values.metaDescription))
+                    changedFields.push("meta.description");
+                if (isDef(values.metaKeywords))
+                    changedFields.push("meta.keywords");
+                recordEvent(siteContext, {
+                    eventType: "document.update",
+                    actorId: authorizedAccount.accountId,
+                    targetType: "document",
+                    targetId: encodeLNodeId(lNodeId),
+                    eventData: {
+                        nodeId: doc.nodeId,
+                        typeName,
+                        title: doc.title,
+                        language: doc.language,
+                        changedFields,
+                    },
+                });
+            }
+            return toDocumentSeed(doc);
         },
         deleteDocument: async (_parent, { lNodeId }, { siteContext, httpContext }) => {
-            authGuard(httpContext);
             siteReadyGuard(siteContext);
+            const authorizedAccount = await permissionGuard(siteContext, httpContext, "document.edit");
             const parsedId = parseLNodeId(lNodeId);
+            const doc = await getOneDocument(siteContext, parsedId);
+            const typeName = await getTypeNameOf(siteContext, doc.nodeId);
             await deleteDocument(siteContext, parsedId);
+            recordEvent(siteContext, {
+                eventType: "document.delete",
+                actorId: authorizedAccount.accountId,
+                targetType: "document",
+                targetId: lNodeId,
+                eventData: {
+                    nodeId: doc.nodeId,
+                    typeName,
+                    title: doc.title,
+                    language: doc.language,
+                },
+            });
             return true;
         },
         deleteNodeAndDocuments: async (_parent, { lNodeId }, { siteContext, httpContext }) => {
-            authGuard(httpContext);
             siteReadyGuard(siteContext);
+            await permissionGuard(siteContext, httpContext, "document.edit");
             await deleteNodeAndDocuments(siteContext, parseLNodeId(lNodeId).nodeId);
             return true;
         },
         createNodeWithDocument: async (_parent, { values, parentLNodeId }, { siteContext, httpContext }) => {
-            authGuard(httpContext);
             siteReadyGuard(siteContext);
+            const authorizedAccount = await permissionGuard(siteContext, httpContext, "document.edit");
             const documentId = await createNodeWithDocument(siteContext, {
                 parentId: parseLNodeId(parentLNodeId),
                 values: {
@@ -62,11 +117,25 @@ export const documentResolvers = {
                     typeName: values.typeName,
                 },
             });
-            return toDocumentSeed(await getOneDocument(siteContext, documentId));
+            const doc = await getOneDocument(siteContext, documentId);
+            recordEvent(siteContext, {
+                eventType: "document.create",
+                actorId: authorizedAccount.accountId,
+                targetType: "document",
+                targetId: encodeLNodeId(documentId),
+                eventData: {
+                    nodeId: doc.nodeId,
+                    typeName: values.typeName,
+                    title: doc.title,
+                    language: doc.language,
+                },
+            });
+            return toDocumentSeed(doc);
         },
         createDocumentOnNode: async (_parent, { values, language, nodeId }, { siteContext, httpContext }) => {
-            authGuard(httpContext);
             siteReadyGuard(siteContext);
+            const authorizedAccount = await permissionGuard(siteContext, httpContext, "document.edit");
+            const typeName = await getTypeNameOf(siteContext, nodeId);
             const documentId = await createDocumentOnNode(siteContext, {
                 language,
                 nodeId,
@@ -74,7 +143,20 @@ export const documentResolvers = {
                     ? { title: values.title ?? undefined, slug: values.slug ?? undefined }
                     : undefined,
             });
-            return toDocumentSeed(await getOneDocument(siteContext, documentId));
+            const doc = await getOneDocument(siteContext, documentId);
+            recordEvent(siteContext, {
+                eventType: "document.create",
+                actorId: authorizedAccount.accountId,
+                targetType: "document",
+                targetId: encodeLNodeId(documentId),
+                eventData: {
+                    nodeId: doc.nodeId,
+                    typeName,
+                    title: doc.title,
+                    language: doc.language,
+                },
+            });
+            return toDocumentSeed(doc);
         },
     },
     Document: {

package/dist/admin-backend/document/document.resolver.js.map

@@ -1 +1 @@
-{"version":3,"file":"document.resolver.js","sourceRoot":"","sources":["../../../src/admin-backend/document/document.resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,OAAO,EAAE,cAAc,EAAuB,MAAM,gCAAgC,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,sBAAsB,EACtB,cAAc,GACf,MAAM,6BAA6B,CAAC;AAErC,MAAM,CAAC,MAAM,iBAAiB,GAAiC;IAC7D,KAAK,EAAE;QACL,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE;YAChE,SAAS,CAAC,WAAW,CAAC,CAAC;YACvB,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,OAAO,cAAc,CAAC,MAAM,cAAc,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;KACF;IAED,QAAQ,EAAE;QACR,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE;YACnF,SAAS,CAAC,WAAW,CAAC,CAAC;YACvB,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE;oBACzC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS;oBAChC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;iBAC/B,CAAC,CAAC;YACL,CAAC;YAED,OAAO,cAAc,CAAC,MAAM,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE;YAClF,SAAS,CAAC,WAAW,CAAC,CAAC;YACvB,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;YAED,OAAO,cAAc,CAAC,MAAM,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE;YAC3E,SAAS,CAAC,WAAW,CAAC,CAAC;YACvB,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YACvC,MAAM,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE;YACnF,SAAS,CAAC,WAAW,CAAC,CAAC;YACvB,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,sBAAsB,CAAC,WAAW,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sBAAsB,EAAE,KAAK,EAC3B,OAAO,EACP,EAAE,MAAM,EAAE,aAAa,EAAE,EACzB,EAAE,WAAW,EAAE,WAAW,EAAE,EAC5B,EAAE;YACF,SAAS,CAAC,WAAW,CAAC,CAAC;YACvB,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,WAAW,EAAE;gBAC3D,QAAQ,EAAE,YAAY,CAAC,aAAa,CAAC;gBACrC,MAAM,EAAE;oBACN,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS;oBAChC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;oBAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B;aACF,CAAC,CAAC;YACH,OAAO,cAAc,CAAC,MAAM,cAAc,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;QACvE,CAAC;QAED,oBAAoB,EAAE,KAAK,EACzB,OAAO,EACP,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAC5B,EAAE,WAAW,EAAE,WAAW,EAAE,EAC5B,EAAE;YACF,SAAS,CAAC,WAAW,CAAC,CAAC;YACvB,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE;gBACzD,QAAQ;gBACR,MAAM;gBACN,MAAM,EAAE,MAAM;oBACZ,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS,EAAE;oBACtE,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YACH,OAAO,cAAc,CAAC,MAAM,cAAc,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC;QACvE,CAAC;KACF;IAED,QAAQ,EAAE;QACR,KAAK,CAAC,GAAG,CAAC,MAA4C,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE;YAC9E,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAChC,WAAW,EACX,eAAe,EAAE,EACjB;gBACE,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,EACD,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;YACF,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,CAAC;KACF;CACF,CAAC"}
+{"version":3,"file":"document.resolver.js","sourceRoot":"","sources":["../../../src/admin-backend/document/document.resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAE7D,OAAO,EAAE,cAAc,EAAuB,MAAM,gCAAgC,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,mCAAmC,CAAC;AAMhE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAC7D,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,sBAAsB,EACtB,cAAc,GACf,MAAM,6BAA6B,CAAC;AAErC,MAAM,CAAC,MAAM,iBAAiB,GAAiC;IAC7D,KAAK,EAAE;QACL,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE;YAChE,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,eAAe,CAAC,WAAW,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;YACjE,OAAO,cAAc,CAAC,MAAM,cAAc,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;KACF;IAED,QAAQ,EAAE;QACR,mBAAmB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE;YACnF,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,iBAAiB,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;YAC3F,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE;oBACzC,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS;oBAChC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;iBAC/B,CAAC,CAAC;YACL,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAEvD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC9D,WAAW,CAAC,WAAW,EAAE;oBACvB,SAAS,EAAE,iBAAiB;oBAC5B,OAAO,EAAE,iBAAiB,CAAC,SAAS;oBACpC,UAAU,EAAE,UAAU;oBACtB,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC;oBAChC,SAAS,EAAE;wBACT,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,QAAQ;wBACR,KAAK,EAAE,GAAG,CAAC,KAAK;wBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,aAAa,EAAE,CAAC,OAAO,CAAC;qBACU;iBACrC,CAAC,CAAC;YACL,CAAC;YAED,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAED,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE;YAClF,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,iBAAiB,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;YAC3F,MAAM,OAAO,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;YACjC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,cAAc,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACrD,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YAEvD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC9D,MAAM,aAAa,GAAa,EAAE,CAAC;gBACnC,IAAI,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC;oBAAE,aAAa,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBAC1E,IAAI,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC;oBAAE,aAAa,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBAEpE,WAAW,CAAC,WAAW,EAAE;oBACvB,SAAS,EAAE,iBAAiB;oBAC5B,OAAO,EAAE,iBAAiB,CAAC,SAAS;oBACpC,UAAU,EAAE,UAAU;oBACtB,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC;oBAChC,SAAS,EAAE;wBACT,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,QAAQ;wBACR,KAAK,EAAE,GAAG,CAAC,KAAK;wBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;wBACtB,aAAa;qBACqB;iBACrC,CAAC,CAAC;YACL,CAAC;YAED,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAED,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE;YAC3E,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,iBAAiB,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;YAC3F,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;YAEvC,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YACxD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YAE9D,MAAM,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;YAE5C,WAAW,CAAC,WAAW,EAAE;gBACvB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE,iBAAiB,CAAC,SAAS;gBACpC,UAAU,EAAE,UAAU;gBACtB,QAAQ,EAAE,OAAO;gBACjB,SAAS,EAAE;oBACT,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,QAAQ;oBACR,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;iBACY;aACrC,CAAC,CAAC;YAEH,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE;YACnF,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,eAAe,CAAC,WAAW,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;YACjE,MAAM,sBAAsB,CAAC,WAAW,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;QAED,sBAAsB,EAAE,KAAK,EAC3B,OAAO,EACP,EAAE,MAAM,EAAE,aAAa,EAAE,EACzB,EAAE,WAAW,EAAE,WAAW,EAAE,EAC5B,EAAE;YACF,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,iBAAiB,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;YAC3F,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,WAAW,EAAE;gBAC3D,QAAQ,EAAE,YAAY,CAAC,aAAa,CAAC;gBACrC,MAAM,EAAE;oBACN,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS;oBAChC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS;oBAC9B,QAAQ,EAAE,MAAM,CAAC,QAAQ;iBAC1B;aACF,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAE1D,WAAW,CAAC,WAAW,EAAE;gBACvB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE,iBAAiB,CAAC,SAAS;gBACpC,UAAU,EAAE,UAAU;gBACtB,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC;gBACnC,SAAS,EAAE;oBACT,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;iBACY;aACrC,CAAC,CAAC;YAEH,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAED,oBAAoB,EAAE,KAAK,EACzB,OAAO,EACP,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAC5B,EAAE,WAAW,EAAE,WAAW,EAAE,EAC5B,EAAE;YACF,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,iBAAiB,GAAG,MAAM,eAAe,CAAC,WAAW,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;YAC3F,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,MAAM,oBAAoB,CAAC,WAAW,EAAE;gBACzD,QAAQ;gBACR,MAAM;gBACN,MAAM,EAAE,MAAM;oBACZ,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,SAAS,EAAE;oBACtE,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YAEH,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;YAE1D,WAAW,CAAC,WAAW,EAAE;gBACvB,SAAS,EAAE,iBAAiB;gBAC5B,OAAO,EAAE,iBAAiB,CAAC,SAAS;gBACpC,UAAU,EAAE,UAAU;gBACtB,QAAQ,EAAE,aAAa,CAAC,UAAU,CAAC;gBACnC,SAAS,EAAE;oBACT,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,QAAQ;oBACR,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,QAAQ,EAAE,GAAG,CAAC,QAAQ;iBACY;aACrC,CAAC,CAAC;YAEH,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;KACF;IAED,QAAQ,EAAE;QACR,KAAK,CAAC,GAAG,CAAC,MAA4C,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE;YAC9E,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAChC,WAAW,EACX,eAAe,EAAE,EACjB;gBACE,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,MAAM,EAAE,MAAM,CAAC,MAAM;aACtB,EACD,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;YACF,OAAO,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,CAAC;KACF;CACF,CAAC"}

package/dist/admin-backend/event-log/event-log.queries.d.ts

@@ -0,0 +1,24 @@
+import type { SiteContext } from "../../site-context/site-context.types.js";
+export interface EventLogQueryResult {
+    items: EventLogEntryRow[];
+    total: number;
+    offset: number;
+}
+export interface EventLogEntryRow {
+    id: string;
+    eventType: string;
+    actorEmail?: string;
+    actorName?: string;
+    targetType: string;
+    targetId: string;
+    eventData?: string;
+    createdAt: Date;
+}
+export declare function getEventLog(siteContext: Pick<SiteContext, "cn">, options: {
+    offset: number;
+    limit: number;
+    searchText?: string;
+}): Promise<EventLogQueryResult>;
+export declare function cleanupOldEventLogEntries(siteContext: Pick<SiteContext, "cn">, { retainCount }: {
+    retainCount: number;
+}): Promise<number>;

package/dist/admin-backend/event-log/event-log.queries.js

@@ -0,0 +1,84 @@
+import { parseSqliteDateTime } from "@paroicms/internal-server-lib";
+import { type } from "arktype";
+const EventLogEntryRowAT = type({
+    id: "number",
+    eventType: "string",
+    actorEmail: "string|null",
+    actorName: "string|null",
+    targetType: "string",
+    targetId: "string",
+    eventData: "string|null",
+    createdAt: "string|number|Date",
+    "+": "reject",
+}).pipe((r) => ({
+    id: String(r.id),
+    eventType: r.eventType,
+    actorEmail: r.actorEmail ?? undefined,
+    actorName: r.actorName ?? undefined,
+    targetType: r.targetType,
+    targetId: r.targetId,
+    eventData: r.eventData ?? undefined,
+    createdAt: parseSqliteDateTime(r.createdAt),
+}));
+const EventLogCountRowAT = type({
+    count: "number",
+    "+": "reject",
+});
+export async function getEventLog(siteContext, options) {
+    const { offset, limit: requestedLimit, searchText } = options;
+    const limit = requestedLimit > 200 ? 200 : requestedLimit;
+    let countQuery = siteContext
+        .cn("PaEventLog as e")
+        .leftJoin("PaAccount as a", "e.actorId", "a.id");
+    let dataQuery = siteContext
+        .cn("PaEventLog as e")
+        .select("e.id", "e.eventType", "a.email as actorEmail", "a.name as actorName", "e.targetType", "e.targetId", "e.eventData", "e.createdAt")
+        .leftJoin("PaAccount as a", "e.actorId", "a.id");
+    if (searchText) {
+        const searchPattern = `%${searchText}%`;
+        const applySearch = (builder) => {
+            builder
+                .where("e.eventData", "like", searchPattern)
+                .orWhere("a.email", "like", searchPattern)
+                .orWhere("a.name", "like", searchPattern);
+        };
+        countQuery = countQuery.where(applySearch);
+        dataQuery = dataQuery.where(applySearch);
+    }
+    const countResult = await countQuery.count("* as count").first();
+    const total = countResult ? EventLogCountRowAT.assert(countResult).count : 0;
+    const rows = await dataQuery.orderBy("e.createdAt", "desc").limit(limit).offset(offset);
+    const items = rows.map((row) => EventLogEntryRowAT.assert(row));
+    return {
+        items,
+        total,
+        offset,
+    };
+}
+export async function cleanupOldEventLogEntries(siteContext, { retainCount }) {
+    const deletedOld = await siteContext
+        .cn("PaEventLog")
+        .whereRaw("createdAt < datetime(current_timestamp, '-1 year')")
+        .delete();
+    const countResult = await siteContext.cn("PaEventLog").count("* as count").first();
+    const count = countResult ? EventLogCountRowAT.assert(countResult).count : 0;
+    if (count > retainCount + 500) {
+        const rowsToDelete = count - retainCount;
+        const deletedRecent = await siteContext
+            .cn("PaEventLog as e")
+            .whereExists(function () {
+            this.select(1)
+                .from(siteContext
+                .cn("PaEventLog")
+                .select("id")
+                .orderBy("createdAt", "asc")
+                .limit(rowsToDelete)
+                .as("old"))
+                .whereRaw("e.id = old.id");
+        })
+            .delete();
+        return deletedOld + deletedRecent;
+    }
+    return deletedOld;
+}
+//# sourceMappingURL=event-log.queries.js.map

package/dist/admin-backend/event-log/event-log.queries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-log.queries.js","sourceRoot":"","sources":["../../../src/admin-backend/event-log/event-log.queries.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAoB/B,MAAM,kBAAkB,GAAG,IAAI,CAAC;IAC9B,EAAE,EAAE,QAAQ;IACZ,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,aAAa;IACzB,SAAS,EAAE,aAAa;IACxB,UAAU,EAAE,QAAQ;IACpB,QAAQ,EAAE,QAAQ;IAClB,SAAS,EAAE,aAAa;IACxB,SAAS,EAAE,oBAAoB;IAC/B,GAAG,EAAE,QAAQ;CACd,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACd,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAChB,SAAS,EAAE,CAAC,CAAC,SAAS;IACtB,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,SAAS;IACrC,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,SAAS;IACnC,UAAU,EAAE,CAAC,CAAC,UAAU;IACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;IACpB,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,SAAS;IACnC,SAAS,EAAE,mBAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;CAC5C,CAAC,CAAC,CAAC;AAEJ,MAAM,kBAAkB,GAAG,IAAI,CAAC;IAC9B,KAAK,EAAE,QAAQ;IACf,GAAG,EAAE,QAAQ;CACd,CAAC,CAAC;AAEH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,WAAoC,EACpC,OAIC;IAED,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC9D,MAAM,KAAK,GAAG,cAAc,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC;IAE1D,IAAI,UAAU,GAAG,WAAW;SACzB,EAAE,CAAC,iBAAiB,CAAC;SACrB,QAAQ,CAAC,gBAAgB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAEnD,IAAI,SAAS,GAAG,WAAW;SACxB,EAAE,CAAC,iBAAiB,CAAC;SACrB,MAAM,CACL,MAAM,EACN,aAAa,EACb,uBAAuB,EACvB,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,aAAa,CACd;SACA,QAAQ,CAAC,gBAAgB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAEnD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,aAAa,GAAG,IAAI,UAAU,GAAG,CAAC;QACxC,MAAM,WAAW,GAAG,CAAC,OAAY,EAAE,EAAE;YACnC,OAAO;iBACJ,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,aAAa,CAAC;iBAC3C,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,aAAa,CAAC;iBACzC,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,CAAC,CAAC;QAC9C,CAAC,CAAC;QAEF,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3C,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC;IACjE,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7E,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAExF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAEhE,OAAO;QACL,KAAK;QACL,KAAK;QACL,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,WAAoC,EACpC,EAAE,WAAW,EAA2B;IAExC,MAAM,UAAU,GAAG,MAAM,WAAW;SACjC,EAAE,CAAC,YAAY,CAAC;SAChB,QAAQ,CAAC,oDAAoD,CAAC;SAC9D,MAAM,EAAE,CAAC;IAEZ,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,EAAE,CAAC;IACnF,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAE7E,IAAI,KAAK,GAAG,WAAW,GAAG,GAAG,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAG,KAAK,GAAG,WAAW,CAAC;QACzC,MAAM,aAAa,GAAG,MAAM,WAAW;aACpC,EAAE,CAAC,iBAAiB,CAAC;aACrB,WAAW,CAAC;YACX,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;iBACX,IAAI,CACH,WAAW;iBACR,EAAE,CAAC,YAAY,CAAC;iBAChB,MAAM,CAAC,IAAI,CAAC;iBACZ,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC;iBAC3B,KAAK,CAAC,YAAY,CAAC;iBACnB,EAAE,CAAC,KAAK,CAAC,CACb;iBACA,QAAQ,CAAC,eAAe,CAAC,CAAC;QAC/B,CAAC,CAAC;aACD,MAAM,EAAE,CAAC;QACZ,OAAO,UAAU,GAAG,aAAa,CAAC;IACpC,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/admin-backend/event-log/event-log.resolver.d.ts

@@ -0,0 +1,3 @@
+import type { GqlResolvers } from "../../graphql/generated-graphql-types.d.ts";
+import { type GraphqlContext } from "../../graphql/graphql.types.js";
+export declare const eventLogResolvers: GqlResolvers<GraphqlContext>;

package/dist/admin-backend/event-log/event-log.resolver.js

@@ -0,0 +1,21 @@
+import { ApiError } from "@paroicms/public-server-lib";
+import { siteReadyGuard } from "../../graphql/graphql.types.js";
+import { permissionGuard } from "../auth/authorization.helper.js";
+import { getEventLog } from "./event-log.queries.js";
+export const eventLogResolvers = {
+    Query: {
+        eventLog: async (_parent, { offset, limit, searchText }, { siteContext, httpContext }) => {
+            siteReadyGuard(siteContext);
+            await permissionGuard(siteContext, httpContext, "site.eventLog");
+            if (limit < 1 || limit > 200)
+                throw new ApiError("limit must be between 1 and 200", 400);
+            const result = await getEventLog(siteContext, {
+                offset,
+                limit,
+                searchText: searchText ?? undefined,
+            });
+            return result;
+        },
+    },
+};
+//# sourceMappingURL=event-log.resolver.js.map

package/dist/admin-backend/event-log/event-log.resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-log.resolver.js","sourceRoot":"","sources":["../../../src/admin-backend/event-log/event-log.resolver.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEvD,OAAO,EAAE,cAAc,EAAuB,MAAM,gCAAgC,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErD,MAAM,CAAC,MAAM,iBAAiB,GAAiC;IAC7D,KAAK,EAAE;QACL,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,EAAE,EAAE;YACvF,cAAc,CAAC,WAAW,CAAC,CAAC;YAC5B,MAAM,eAAe,CAAC,WAAW,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC;YAEjE,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,GAAG;gBAAE,MAAM,IAAI,QAAQ,CAAC,iCAAiC,EAAE,GAAG,CAAC,CAAC;YAEzF,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,WAAW,EAAE;gBAC5C,MAAM;gBACN,KAAK;gBACL,UAAU,EAAE,UAAU,IAAI,SAAS;aACpC,CAAC,CAAC;YAEH,OAAO,MAAM,CAAC;QAChB,CAAC;KACF;CACF,CAAC"}

package/dist/admin-backend/event-log/event-log.service.d.ts

@@ -0,0 +1,11 @@
+import type { SiteContext } from "../../site-context/site-context.types.js";
+import type { EventLogEntry } from "./event-log.types.js";
+export declare function recordEvent(siteContext: Pick<SiteContext, "cn" | "logger">, entry: EventLogEntry): void;
+export interface GetEventLogFilters {
+    eventType?: string;
+    actorId?: string;
+    targetType?: "document" | "account" | "media" | "site" | "documentNode";
+    targetId?: string;
+    limit?: number;
+}
+export declare function getEventLog(siteContext: Pick<SiteContext, "cn">, filters?: GetEventLogFilters): Promise<EventLogEntry[]>;

package/dist/admin-backend/event-log/event-log.service.js

@@ -0,0 +1,290 @@
+import { type } from "arktype";
+export function recordEvent(siteContext, entry) {
+    recordEventInternal(siteContext, entry).catch((error) => {
+        siteContext.logger.error("Failed to record event (uncaught)", error);
+    });
+}
+async function recordEventInternal(siteContext, entry) {
+    try {
+        await siteContext.cn("PaEventLog").insert({
+            eventType: entry.eventType,
+            actorId: entry.actorId,
+            targetType: entry.targetType,
+            targetId: entry.targetId,
+            eventData: entry.eventData ? JSON.stringify(entry.eventData) : undefined,
+        });
+    }
+    catch (error) {
+        siteContext.logger.error("Failed to record event", error);
+    }
+}
+const DocumentCreatedEventDataAT = type({
+    nodeId: "string",
+    typeName: "string",
+    title: "string",
+    language: "string",
+    "+": "reject",
+});
+const DocumentUpdatedEventDataAT = type({
+    nodeId: "string",
+    typeName: "string",
+    "title?": "string|undefined",
+    language: "string",
+    changedFields: "string[]",
+    "+": "reject",
+});
+const DocumentDeletedEventDataAT = type({
+    nodeId: "string",
+    typeName: "string",
+    title: "string",
+    language: "string",
+    "+": "reject",
+});
+const PartMovedEventDataAT = type({
+    partNodeId: "string",
+    documentNodeId: "string",
+    typeName: "string",
+    newParentNodeId: "string",
+    newListName: "string",
+    "+": "reject",
+});
+const AccountCreatedEventDataAT = type({
+    accountId: "string",
+    email: "string",
+    "name?": "string|undefined",
+    "+": "reject",
+});
+const AccountUpdatedEventDataAT = type({
+    accountId: "string",
+    email: "string",
+    changedFields: "string[]",
+    "+": "reject",
+});
+const AccountDeletedEventDataAT = type({
+    accountId: "string",
+    email: "string",
+    "name?": "string|undefined",
+    "+": "reject",
+});
+const AccountLoginEventDataAT = type({
+    accountId: "string",
+    email: "string",
+    loginMethod: '"local"|"localDev"|"platform"|"platformAdmin"',
+    "+": "reject",
+});
+const AccountLoginMethodChangedEventDataAT = type({
+    accountId: "string",
+    email: "string",
+    oldLoginMethod: '"local"|"localDev"|"platform"|"platformAdmin"',
+    newLoginMethod: '"local"|"localDev"|"platform"|"platformAdmin"',
+    "+": "reject",
+});
+const AccountDeactivatedEventDataAT = type({
+    accountId: "string",
+    email: "string",
+    reason: "string",
+    "+": "reject",
+});
+const MediaCreatedEventDataAT = type({
+    mediaId: "string",
+    filename: "string",
+    mimeType: "string",
+    sizeBytes: "number",
+    "+": "reject",
+});
+const MediaUpdatedEventDataAT = type({
+    mediaId: "string",
+    changedFields: "string[]",
+    "+": "reject",
+});
+const MediaDeletedEventDataAT = type({
+    mediaId: "string",
+    filename: "string",
+    "+": "reject",
+});
+const EventLogRowAT = type({
+    id: "number",
+    eventType: "string",
+    actorId: "number|null",
+    targetType: "string",
+    targetId: "string",
+    eventData: "string|null",
+    createdAt: "Date|string|number",
+    "+": "reject",
+}).pipe((r) => ({
+    eventType: r.eventType,
+    actorId: r.actorId !== null ? String(r.actorId) : undefined,
+    targetType: r.targetType,
+    targetId: r.targetId,
+    eventData: r.eventData ? JSON.parse(r.eventData) : undefined,
+}));
+export async function getEventLog(siteContext, filters = {}) {
+    let query = siteContext.cn("PaEventLog").select("*").orderBy("createdAt", "desc");
+    if (filters.eventType) {
+        query = query.where("eventType", filters.eventType);
+    }
+    if (filters.actorId) {
+        query = query.where("actorId", filters.actorId);
+    }
+    if (filters.targetType) {
+        query = query.where("targetType", filters.targetType);
+    }
+    if (filters.targetId) {
+        query = query.where("targetId", filters.targetId);
+    }
+    if (filters.limit) {
+        query = query.limit(filters.limit);
+    }
+    const rows = await query;
+    return rows.map((row) => {
+        const validated = EventLogRowAT.assert(row);
+        switch (validated.eventType) {
+            case "document.create":
+                if (validated.targetType !== "document") {
+                    throw new Error(`invalid target type "${validated.targetType}"`);
+                }
+                return {
+                    eventType: validated.eventType,
+                    actorId: validated.actorId,
+                    targetType: validated.targetType,
+                    targetId: validated.targetId,
+                    eventData: DocumentCreatedEventDataAT.assert(validated.eventData),
+                };
+            case "document.update":
+                if (validated.targetType !== "document") {
+                    throw new Error(`invalid target type "${validated.targetType}"`);
+                }
+                return {
+                    eventType: validated.eventType,
+                    actorId: validated.actorId,
+                    targetType: validated.targetType,
+                    targetId: validated.targetId,
+                    eventData: DocumentUpdatedEventDataAT.assert(validated.eventData),
+                };
+            case "document.delete":
+                if (validated.targetType !== "document") {
+                    throw new Error(`invalid target type "${validated.targetType}"`);
+                }
+                return {
+                    eventType: validated.eventType,
+                    actorId: validated.actorId,
+                    targetType: validated.targetType,
+                    targetId: validated.targetId,
+                    eventData: DocumentDeletedEventDataAT.assert(validated.eventData),
+                };
+            case "part.move":
+                if (validated.targetType !== "documentNode") {
+                    throw new Error(`invalid target type "${validated.targetType}"`);
+                }
+                return {
+                    eventType: validated.eventType,
+                    actorId: validated.actorId,
+                    targetType: validated.targetType,
+                    targetId: validated.targetId,
+                    eventData: PartMovedEventDataAT.assert(validated.eventData),
+                };
+            case "account.create":
+                if (validated.targetType !== "account") {
+                    throw new Error(`invalid target type "${validated.targetType}"`);
+                }
+                return {
+                    eventType: validated.eventType,
+                    actorId: validated.actorId,
+                    targetType: validated.targetType,
+                    targetId: validated.targetId,
+                    eventData: AccountCreatedEventDataAT.assert(validated.eventData),
+                };
+            case "account.update":
+                if (validated.targetType !== "account") {
+                    throw new Error(`invalid target type "${validated.targetType}"`);
+                }
+                return {
+                    eventType: validated.eventType,
+                    actorId: validated.actorId,
+                    targetType: validated.targetType,
+                    targetId: validated.targetId,
+                    eventData: AccountUpdatedEventDataAT.assert(validated.eventData),
+                };
+            case "account.delete":
+                if (validated.targetType !== "account") {
+                    throw new Error(`invalid target type "${validated.targetType}"`);
+                }
+                return {
+                    eventType: validated.eventType,
+                    actorId: validated.actorId,
+                    targetType: validated.targetType,
+                    targetId: validated.targetId,
+                    eventData: AccountDeletedEventDataAT.assert(validated.eventData),
+                };
+            case "account.login":
+                if (validated.targetType !== "account") {
+                    throw new Error(`invalid target type "${validated.targetType}"`);
+                }
+                return {
+                    eventType: validated.eventType,
+                    actorId: validated.actorId,
+                    targetType: validated.targetType,
+                    targetId: validated.targetId,
+                    eventData: AccountLoginEventDataAT.assert(validated.eventData),
+                };
+            case "account.loginMethodChanged":
+                if (validated.targetType !== "account") {
+                    throw new Error(`invalid target type "${validated.targetType}"`);
+                }
+                return {
+                    eventType: validated.eventType,
+                    actorId: validated.actorId,
+                    targetType: validated.targetType,
+                    targetId: validated.targetId,
+                    eventData: AccountLoginMethodChangedEventDataAT.assert(validated.eventData),
+                };
+            case "account.deactivated":
+                if (validated.targetType !== "account") {
+                    throw new Error(`invalid target type "${validated.targetType}"`);
+                }
+                return {
+                    eventType: validated.eventType,
+                    actorId: validated.actorId,
+                    targetType: validated.targetType,
+                    targetId: validated.targetId,
+                    eventData: AccountDeactivatedEventDataAT.assert(validated.eventData),
+                };
+            case "media.create":
+                if (validated.targetType !== "media") {
+                    throw new Error(`invalid target type "${validated.targetType}"`);
+                }
+                return {
+                    eventType: validated.eventType,
+                    actorId: validated.actorId,
+                    targetType: validated.targetType,
+                    targetId: validated.targetId,
+                    eventData: MediaCreatedEventDataAT.assert(validated.eventData),
+                };
+            case "media.update":
+                if (validated.targetType !== "media") {
+                    throw new Error(`invalid target type "${validated.targetType}"`);
+                }
+                return {
+                    eventType: validated.eventType,
+                    actorId: validated.actorId,
+                    targetType: validated.targetType,
+                    targetId: validated.targetId,
+                    eventData: MediaUpdatedEventDataAT.assert(validated.eventData),
+                };
+            case "media.delete":
+                if (validated.targetType !== "media") {
+                    throw new Error(`invalid target type "${validated.targetType}"`);
+                }
+                return {
+                    eventType: validated.eventType,
+                    actorId: validated.actorId,
+                    targetType: validated.targetType,
+                    targetId: validated.targetId,
+                    eventData: MediaDeletedEventDataAT.assert(validated.eventData),
+                };
+            default:
+                throw new Error(`Unknown event type: ${validated.eventType}`);
+        }
+    });
+}
+//# sourceMappingURL=event-log.service.js.map