@strapi/admin 5.52.2 → 5.53.0

package/dist/server/ee/server/src/audit-logs/services/lifecycles.js.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycles.js","sources":["../../../../../../../ee/server/src/audit-logs/services/lifecycles.ts"],"sourcesContent":["import type { Core, Modules } from '@strapi/types';\n\nconst DEFAULT_RETENTION_DAYS = 90;\n\nconst defaultEvents = [\n  'entry.create',\n  'entry.update',\n  'entry.delete',\n  'entry.publish',\n  'entry.unpublish',\n  'media.create',\n  'media.update',\n  'media.delete',\n  'media-folder.create',\n  'media-folder.update',\n  'media-folder.delete',\n  'user.create',\n  'user.update',\n  'user.delete',\n  'admin.auth.success',\n  'admin.logout',\n  'content-type.create',\n  'content-type.update',\n  'content-type.delete',\n  'component.create',\n  'component.update',\n  'component.delete',\n  'role.create',\n  'role.update',\n  'role.delete',\n  'permission.create',\n  'permission.update',\n  'permission.delete',\n];\n\nconst getEventMap = (defaultEvents: any) => {\n  const getDefaultPayload = (...args: any) => args[0];\n\n  // Use the default payload for all default events\n  return defaultEvents.reduce((acc: any, event: any) => {\n    acc[event] = getDefaultPayload;\n    return acc;\n  }, {} as any);\n};\n\nconst getRetentionDays = (strapi: Core.Strapi) => {\n  const featureConfig = strapi.ee.features.get('audit-logs');\n  const licenseRetentionDays =\n    typeof featureConfig === 'object' && featureConfig?.options?.retentionDays;\n  const userRetentionDays = strapi.config.get('admin.auditLogs.retentionDays');\n\n  // For enterprise plans, use 90 days by default, but allow users to override it\n  if (licenseRetentionDays == null) {\n    return userRetentionDays ?? DEFAULT_RETENTION_DAYS;\n  }\n\n  // Allow users to override the license retention days, but not to increase it\n  if (userRetentionDays && userRetentionDays <= licenseRetentionDays) {\n    return userRetentionDays;\n  }\n\n  // User didn't provide a retention days value, use the license one\n  return licenseRetentionDays;\n};\n\n/**\n * @description\n * Manages the lifecycle of audit logs. Accessible via strapi.get('audit-logs-lifecycles')\n */\nconst createAuditLogsLifecycleService = (strapi: Core.Strapi) => {\n  // Manage internal service state privately\n  const state = {} as any;\n  const auditLogsService = strapi.get('audit-logs');\n\n  // NOTE: providers should be able to replace getEventMap to add or remove events\n  const eventMap = getEventMap(defaultEvents);\n\n  const processEvent = (name: string, ...args: any) => {\n    const requestState = strapi.requestContext.get()?.state;\n\n    // Only audit admin-authenticated actions, plus MCP actions flagged via auditSource.\n    const isUsingAdminAuth = requestState?.route.info.type === 'admin';\n    const auditSource = requestState?.auditSource;\n    const isMcpAdminAction = auditSource === 'mcp';\n    const user = requestState?.user;\n    if ((!isUsingAdminAuth && !isMcpAdminAction) || !user) {\n      return null;\n    }\n\n    const origin: Modules.AuditLogs.AuditSource = auditSource ?? 'admin';\n\n    const getPayload = eventMap[name];\n\n    // Ignore the event if it's not in the map\n    if (!getPayload) {\n      return null;\n    }\n\n    // Ignore some events based on payload\n    // TODO: What does this ignore in upload? Why would we want to ignore anything?\n    const ignoredUids = ['plugin::upload.file', 'plugin::upload.folder'];\n    if (ignoredUids.includes(args[0]?.uid)) {\n      return null;\n    }\n\n    return {\n      action: name,\n      date: new Date().toISOString(),\n      payload: { ...(getPayload(...args) || {}), origin },\n      userId: user.id,\n    };\n  };\n\n  const handleEvent = async (name: string, ...args: any) => {\n    const processedEvent = processEvent(name, ...args);\n\n    if (processedEvent) {\n      await auditLogsService.saveEvent(processedEvent);\n    }\n  };\n\n  return {\n    async register() {\n      // Handle license being enabled\n      if (!state.eeEnableUnsubscribe) {\n        // @ts-expect-error- update event hub to receive callback argument\n        state.eeEnableUnsubscribe = strapi.eventHub.on('ee.enable', () => {\n          // Recreate the service to use the new license info\n          this.destroy();\n          this.register();\n        });\n      }\n\n      // Handle license being updated\n      if (!state.eeUpdateUnsubscribe) {\n        // @ts-expect-error- update event hub to receive callback argument\n        state.eeUpdateUnsubscribe = strapi.eventHub.on('ee.update', () => {\n          // Recreate the service to use the new license info\n          this.destroy();\n          this.register();\n        });\n      }\n\n      // Handle license being disabled\n      // @ts-expect-error- update event hub to receive callback argument\n      state.eeDisableUnsubscribe = strapi.eventHub.on('ee.disable', () => {\n        // Turn off service when the license gets disabled\n        // Only ee.enable and ee.update listeners remain active to recreate the service\n        this.destroy();\n      });\n\n      // Check current state of license\n      if (!strapi.ee.features.isEnabled('audit-logs')) {\n        return this;\n      }\n\n      // Start saving events\n      state.eventHubUnsubscribe = strapi.eventHub.subscribe(handleEvent);\n\n      // Manage audit logs auto deletion\n      const retentionDays = getRetentionDays(strapi);\n\n      strapi.cron.add({\n        deleteExpiredAuditLogs: {\n          async task() {\n            const expirationDate = new Date(Date.now() - retentionDays * 24 * 60 * 60 * 1000);\n            await auditLogsService.deleteExpiredEvents(expirationDate);\n          },\n          options: '0 0 * * *',\n        },\n      });\n\n      return this;\n    },\n\n    unsubscribe() {\n      if (state.eeDisableUnsubscribe) {\n        state.eeDisableUnsubscribe();\n      }\n\n      if (state.eventHubUnsubscribe) {\n        state.eventHubUnsubscribe();\n      }\n\n      strapi.cron.remove('deleteExpiredAuditLogs');\n\n      return this;\n    },\n\n    destroy() {\n      return this.unsubscribe();\n    },\n  };\n};\n\nexport { createAuditLogsLifecycleService };\n"],"names":["DEFAULT_RETENTION_DAYS","defaultEvents","getEventMap","getDefaultPayload","args","reduce","acc","event","getRetentionDays","strapi","featureConfig","ee","features","get","licenseRetentionDays","options","retentionDays","userRetentionDays","config","createAuditLogsLifecycleService","state","auditLogsService","eventMap","processEvent","name","requestState","requestContext","isUsingAdminAuth","route","info","type","auditSource","isMcpAdminAction","user","origin","getPayload","ignoredUids","includes","uid","action","date","Date","toISOString","payload","userId","id","handleEvent","processedEvent","saveEvent","register","eeEnableUnsubscribe","eventHub","on","destroy","eeUpdateUnsubscribe","eeDisableUnsubscribe","isEnabled","eventHubUnsubscribe","subscribe","cron","add","deleteExpiredAuditLogs","task","expirationDate","now","deleteExpiredEvents","unsubscribe","remove"],"mappings":";;AAEA,MAAMA,sBAAAA,GAAyB,EAAA;AAE/B,MAAMC,aAAAA,GAAgB;AACpB,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,eAAA;AACA,IAAA,iBAAA;AACA,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,oBAAA;AACA,IAAA,cAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,kBAAA;AACA,IAAA,kBAAA;AACA,IAAA,kBAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,mBAAA;AACA,IAAA,mBAAA;AACA,IAAA;AACD,CAAA;AAED,MAAMC,cAAc,CAACD,aAAAA,GAAAA;AACnB,IAAA,MAAME,oBAAoB,CAAC,GAAGC,IAAAA,GAAcA,IAAI,CAAC,CAAA,CAAE;;AAGnD,IAAA,OAAOH,aAAAA,CAAcI,MAAM,CAAC,CAACC,GAAAA,EAAUC,KAAAA,GAAAA;QACrCD,GAAG,CAACC,MAAM,GAAGJ,iBAAAA;QACb,OAAOG,GAAAA;AACT,IAAA,CAAA,EAAG,EAAC,CAAA;AACN,CAAA;AAEA,MAAME,mBAAmB,CAACC,MAAAA,GAAAA;AACxB,IAAA,MAAMC,gBAAgBD,MAAAA,CAAOE,EAAE,CAACC,QAAQ,CAACC,GAAG,CAAC,YAAA,CAAA;AAC7C,IAAA,MAAMC,oBAAAA,GACJ,OAAOJ,aAAAA,KAAkB,QAAA,IAAYA,eAAeK,OAAAA,EAASC,aAAAA;AAC/D,IAAA,MAAMC,iBAAAA,GAAoBR,MAAAA,CAAOS,MAAM,CAACL,GAAG,CAAC,+BAAA,CAAA;;AAG5C,IAAA,IAAIC,wBAAwB,IAAA,EAAM;AAChC,QAAA,OAAOG,iBAAAA,IAAqBjB,sBAAAA;AAC9B,IAAA;;IAGA,IAAIiB,iBAAAA,IAAqBA,qBAAqBH,oBAAAA,EAAsB;QAClE,OAAOG,iBAAAA;AACT,IAAA;;IAGA,OAAOH,oBAAAA;AACT,CAAA;AAEA;;;IAIA,MAAMK,kCAAkC,CAACV,MAAAA,GAAAA;;AAEvC,IAAA,MAAMW,QAAQ,EAAC;IACf,MAAMC,gBAAAA,GAAmBZ,MAAAA,CAAOI,GAAG,CAAC,YAAA,CAAA;;AAGpC,IAAA,MAAMS,WAAWpB,WAAAA,CAAYD,aAAAA,CAAAA;IAE7B,MAAMsB,YAAAA,GAAe,CAACC,IAAAA,EAAc,GAAGpB,IAAAA,GAAAA;AACrC,QAAA,MAAMqB,YAAAA,GAAehB,MAAAA,CAAOiB,cAAc,CAACb,GAAG,EAAA,EAAIO,KAAAA;;AAGlD,QAAA,MAAMO,gBAAAA,GAAmBF,YAAAA,EAAcG,KAAAA,CAAMC,IAAAA,CAAKC,IAAAA,KAAS,OAAA;AAC3D,QAAA,MAAMC,cAAcN,YAAAA,EAAcM,WAAAA;AAClC,QAAA,MAAMC,mBAAmBD,WAAAA,KAAgB,KAAA;AACzC,QAAA,MAAME,OAAOR,YAAAA,EAAcQ,IAAAA;AAC3B,QAAA,IAAI,CAAEN,gBAAAA,IAAoB,CAACK,gBAAAA,IAAqB,CAACC,IAAAA,EAAM;YACrD,OAAO,IAAA;AACT,QAAA;AAEA,QAAA,MAAMC,SAAwCH,WAAAA,IAAe,OAAA;QAE7D,MAAMI,UAAAA,GAAab,QAAQ,CAACE,IAAAA,CAAK;;AAGjC,QAAA,IAAI,CAACW,UAAAA,EAAY;YACf,OAAO,IAAA;AACT,QAAA;;;AAIA,QAAA,MAAMC,WAAAA,GAAc;AAAC,YAAA,qBAAA;AAAuB,YAAA;AAAwB,SAAA;AACpE,QAAA,IAAIA,YAAYC,QAAQ,CAACjC,IAAI,CAAC,CAAA,CAAE,EAAEkC,GAAAA,CAAAA,EAAM;YACtC,OAAO,IAAA;AACT,QAAA;QAEA,OAAO;YACLC,MAAAA,EAAQf,IAAAA;YACRgB,IAAAA,EAAM,IAAIC,OAAOC,WAAW,EAAA;YAC5BC,OAAAA,EAAS;gBAAE,GAAIR,UAAAA,CAAAA,GAAc/B,IAAAA,CAAAA,IAAS,EAAE;AAAG8B,gBAAAA;AAAO,aAAA;AAClDU,YAAAA,MAAAA,EAAQX,KAAKY;AACf,SAAA;AACF,IAAA,CAAA;IAEA,MAAMC,WAAAA,GAAc,OAAOtB,IAAAA,EAAc,GAAGpB,IAAAA,GAAAA;QAC1C,MAAM2C,cAAAA,GAAiBxB,aAAaC,IAAAA,EAAAA,GAASpB,IAAAA,CAAAA;AAE7C,QAAA,IAAI2C,cAAAA,EAAgB;YAClB,MAAM1B,gBAAAA,CAAiB2B,SAAS,CAACD,cAAAA,CAAAA;AACnC,QAAA;AACF,IAAA,CAAA;IAEA,OAAO;QACL,MAAME,QAAAA,CAAAA,GAAAA;;YAEJ,IAAI,CAAC7B,KAAAA,CAAM8B,mBAAmB,EAAE;;AAE9B9B,gBAAAA,KAAAA,CAAM8B,mBAAmB,GAAGzC,MAAAA,CAAO0C,QAAQ,CAACC,EAAE,CAAC,WAAA,EAAa,IAAA;;AAE1D,oBAAA,IAAI,CAACC,OAAO,EAAA;AACZ,oBAAA,IAAI,CAACJ,QAAQ,EAAA;AACf,gBAAA,CAAA,CAAA;AACF,YAAA;;YAGA,IAAI,CAAC7B,KAAAA,CAAMkC,mBAAmB,EAAE;;AAE9BlC,gBAAAA,KAAAA,CAAMkC,mBAAmB,GAAG7C,MAAAA,CAAO0C,QAAQ,CAACC,EAAE,CAAC,WAAA,EAAa,IAAA;;AAE1D,oBAAA,IAAI,CAACC,OAAO,EAAA;AACZ,oBAAA,IAAI,CAACJ,QAAQ,EAAA;AACf,gBAAA,CAAA,CAAA;AACF,YAAA;;;AAIA7B,YAAAA,KAAAA,CAAMmC,oBAAoB,GAAG9C,MAAAA,CAAO0C,QAAQ,CAACC,EAAE,CAAC,YAAA,EAAc,IAAA;;;AAG5D,gBAAA,IAAI,CAACC,OAAO,EAAA;AACd,YAAA,CAAA,CAAA;;YAGA,IAAI,CAAC5C,OAAOE,EAAE,CAACC,QAAQ,CAAC4C,SAAS,CAAC,YAAA,CAAA,EAAe;AAC/C,gBAAA,OAAO,IAAI;AACb,YAAA;;AAGApC,YAAAA,KAAAA,CAAMqC,mBAAmB,GAAGhD,MAAAA,CAAO0C,QAAQ,CAACO,SAAS,CAACZ,WAAAA,CAAAA;;AAGtD,YAAA,MAAM9B,gBAAgBR,gBAAAA,CAAiBC,MAAAA,CAAAA;YAEvCA,MAAAA,CAAOkD,IAAI,CAACC,GAAG,CAAC;gBACdC,sBAAAA,EAAwB;oBACtB,MAAMC,IAAAA,CAAAA,GAAAA;wBACJ,MAAMC,cAAAA,GAAiB,IAAItB,IAAAA,CAAKA,IAAAA,CAAKuB,GAAG,EAAA,GAAKhD,aAAAA,GAAgB,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,IAAA,CAAA;wBAC5E,MAAMK,gBAAAA,CAAiB4C,mBAAmB,CAACF,cAAAA,CAAAA;AAC7C,oBAAA,CAAA;oBACAhD,OAAAA,EAAS;AACX;AACF,aAAA,CAAA;AAEA,YAAA,OAAO,IAAI;AACb,QAAA,CAAA;AAEAmD,QAAAA,WAAAA,CAAAA,GAAAA;YACE,IAAI9C,KAAAA,CAAMmC,oBAAoB,EAAE;AAC9BnC,gBAAAA,KAAAA,CAAMmC,oBAAoB,EAAA;AAC5B,YAAA;YAEA,IAAInC,KAAAA,CAAMqC,mBAAmB,EAAE;AAC7BrC,gBAAAA,KAAAA,CAAMqC,mBAAmB,EAAA;AAC3B,YAAA;YAEAhD,MAAAA,CAAOkD,IAAI,CAACQ,MAAM,CAAC,wBAAA,CAAA;AAEnB,YAAA,OAAO,IAAI;AACb,QAAA,CAAA;AAEAd,QAAAA,OAAAA,CAAAA,GAAAA;YACE,OAAO,IAAI,CAACa,WAAW,EAAA;AACzB,QAAA;AACF,KAAA;AACF;;;;"}
+{"version":3,"file":"lifecycles.js","sources":["../../../../../../../ee/server/src/audit-logs/services/lifecycles.ts"],"sourcesContent":["import type { Core, Modules } from '@strapi/types';\n\nimport { getDisplayName } from '../utils';\n\nconst DEFAULT_RETENTION_DAYS = 90;\n\n/**\n * Events audited before the payload standard; their stored shape is frozen for\n * compatibility. Do not add events here: new events come through registerEvent().\n * TODO: migrate these to the standard.\n */\nconst defaultEvents = [\n  'entry.create',\n  'entry.update',\n  'entry.delete',\n  'entry.publish',\n  'entry.unpublish',\n  'media.create',\n  'media.update',\n  'media.delete',\n  'media-folder.create',\n  'media-folder.update',\n  'media-folder.delete',\n  'user.create',\n  'user.update',\n  'user.delete',\n  'admin.auth.success',\n  'admin.logout',\n  'content-type.create',\n  'content-type.update',\n  'content-type.delete',\n  'component.create',\n  'component.update',\n  'component.delete',\n  'role.create',\n  'role.update',\n  'role.delete',\n  'permission.create',\n  'permission.update',\n  'permission.delete',\n];\n\n/**\n * Legacy events store the first emitted argument as-is; registered events store the\n * standard shape built by their transformer.\n */\ntype EventRegistration =\n  | { kind: 'legacy' }\n  | { kind: 'standard'; transform: Modules.AuditLogs.EventTransformer };\n\nconst getEventMap = (events: string[]) => {\n  return events.reduce(\n    (acc, event) => {\n      acc[event] = { kind: 'legacy' };\n      return acc;\n    },\n    {} as Record<string, EventRegistration>\n  );\n};\n\nconst getRetentionDays = (strapi: Core.Strapi) => {\n  const featureConfig = strapi.ee.features.get('audit-logs');\n  const licenseRetentionDays =\n    typeof featureConfig === 'object' && featureConfig?.options?.retentionDays;\n  const userRetentionDays = strapi.config.get('admin.auditLogs.retentionDays');\n\n  // For enterprise plans, use 90 days by default, but allow users to override it\n  if (licenseRetentionDays == null) {\n    return userRetentionDays ?? DEFAULT_RETENTION_DAYS;\n  }\n\n  // Allow users to override the license retention days, but not to increase it\n  if (userRetentionDays && userRetentionDays <= licenseRetentionDays) {\n    return userRetentionDays;\n  }\n\n  // User didn't provide a retention days value, use the license one\n  return licenseRetentionDays;\n};\n\n/**\n * @description\n * Manages the lifecycle of audit logs. Accessible via strapi.get('audit-logs-lifecycle')\n */\nconst createAuditLogsLifecycleService = (strapi: Core.Strapi) => {\n  // Manage internal service state privately\n  const state = {} as any;\n  const auditLogsService = strapi.get('audit-logs');\n\n  const eventMap = getEventMap(defaultEvents);\n\n  /**\n   * The system origins accepted from the execution context; anything else needs a\n   * user. Keyed on the type, so extending SystemOrigin without gating it here fails\n   * to compile.\n   */\n  const SYSTEM_ORIGIN_FLAGS: Record<Modules.AuditLogs.SystemOrigin, true> = {\n    scheduler: true,\n  };\n  const SYSTEM_ORIGINS = Object.keys(SYSTEM_ORIGIN_FLAGS);\n\n  const processEvent = async (name: string, ...args: any) => {\n    const registration = eventMap[name];\n\n    if (!registration) {\n      return null;\n    }\n\n    const rawEvent = args[0];\n\n    const requestState = strapi.requestContext.get()?.state;\n\n    const isUsingAdminAuth = requestState?.route?.info?.type === 'admin';\n    const auditSource = requestState?.auditSource;\n    const isMcpAdminAction = auditSource === 'mcp';\n    const user = requestState?.user;\n\n    const systemOrigin =\n      auditSource && SYSTEM_ORIGINS.includes(auditSource)\n        ? (auditSource as Modules.AuditLogs.SystemOrigin)\n        : undefined;\n\n    if (!systemOrigin && ((!isUsingAdminAuth && !isMcpAdminAction) || !user)) {\n      return null;\n    }\n\n    const origin: Modules.AuditLogs.AuditSource = systemOrigin ?? auditSource ?? 'admin-panel';\n    const date = new Date().toISOString();\n    // Scheduled actions have no user, so a null user is expected. The earlier audit\n    // entry that set the schedule records who did it.\n    const userId = systemOrigin ? null : user.id;\n\n    if (registration.kind === 'legacy') {\n      // TODO: What does this ignore in upload? Why would we want to ignore anything?\n      const ignoredUids = ['plugin::upload.file', 'plugin::upload.folder'];\n      if (ignoredUids.includes(rawEvent?.uid)) {\n        return null;\n      }\n\n      return {\n        action: name,\n        date,\n        payload: { ...rawEvent, origin },\n        userId,\n      };\n    }\n\n    const actor: Modules.AuditLogs.Actor = systemOrigin\n      ? { type: 'system' }\n      : {\n          type: 'admin-user',\n          // We copy the user data into the row so the history stays unchanged if the\n          // user changes later\n          user: { id: user.id, email: user.email, name: getDisplayName(user) },\n        };\n\n    let shape: Modules.AuditLogs.EventShape | null = null;\n\n    try {\n      shape = await registration.transform(...args);\n    } catch (error) {\n      // If the transformer fails, we still keep the audit event: the row is saved\n      // with the subscriber's fields only.\n      strapi.log.error(`Failed to build the audit log payload for ${name}`, { error });\n    }\n\n    const {\n      action: _action,\n      date: _date,\n      actor: _actor,\n      origin: _origin,\n      ...rest\n    } = (shape ?? {}) as Record<string, unknown>;\n    const payload = shape\n      ? ({ action: name, date, actor, origin, ...rest } as Modules.AuditLogs.StoredPayload)\n      : { action: name, date, actor, origin };\n\n    return { action: name, date, payload, userId };\n  };\n\n  const handleEvent = async (name: string, ...args: any) => {\n    try {\n      const processedEvent = await processEvent(name, ...args);\n\n      if (processedEvent) {\n        await auditLogsService.saveEvent(processedEvent);\n      }\n    } catch (error) {\n      // Logged, not propagated: most emitters fire and forget (the document service\n      // emits entry.* from an unawaited onCommit callback), and a rejection with no\n      // one awaiting it takes the process down. Audit logging is therefore fail-open:\n      // the entry is lost and only this line records it.\n      strapi.log.error(`Failed to save the audit log entry for ${name}`, { error });\n    }\n  };\n\n  return {\n    /**\n     * Adds an event to the list of audited events. Plugins register their own from\n     * their bootstrap; the transformer builds the audited shape\n     * ({resource, details, outcome}) from the arguments passed to eventHub.emit().\n     */\n    registerEvent<TDetails = unknown>(\n      name: string,\n      transform: Modules.AuditLogs.EventTransformer<TDetails>\n    ) {\n      if (eventMap[name]?.kind === 'legacy') {\n        throw new Error(\n          `Cannot register the audit log event \"${name}\": it is one of the built-in events, whose stored shape is frozen.`\n        );\n      }\n\n      if (eventMap[name]) {\n        strapi.log.warn(`The audit log event \"${name}\" was already registered and is replaced.`);\n      }\n\n      eventMap[name] = {\n        kind: 'standard',\n        transform: transform as Modules.AuditLogs.EventTransformer,\n      };\n    },\n\n    async register() {\n      // Handle license being enabled\n      if (!state.eeEnableUnsubscribe) {\n        // @ts-expect-error- update event hub to receive callback argument\n        state.eeEnableUnsubscribe = strapi.eventHub.on('ee.enable', () => {\n          // Recreate the service to use the new license info\n          this.destroy();\n          this.register();\n        });\n      }\n\n      // Handle license being updated\n      if (!state.eeUpdateUnsubscribe) {\n        // @ts-expect-error- update event hub to receive callback argument\n        state.eeUpdateUnsubscribe = strapi.eventHub.on('ee.update', () => {\n          // Recreate the service to use the new license info\n          this.destroy();\n          this.register();\n        });\n      }\n\n      // Handle license being disabled\n      // @ts-expect-error- update event hub to receive callback argument\n      state.eeDisableUnsubscribe = strapi.eventHub.on('ee.disable', () => {\n        // Turn off service when the license gets disabled\n        // Only ee.enable and ee.update listeners remain active to recreate the service\n        this.destroy();\n      });\n\n      // Check current state of license\n      if (!strapi.ee.features.isEnabled('audit-logs')) {\n        return this;\n      }\n\n      // Start saving events\n      state.eventHubUnsubscribe = strapi.eventHub.subscribe(handleEvent);\n\n      // Manage audit logs auto deletion\n      const retentionDays = getRetentionDays(strapi);\n\n      strapi.cron.add({\n        deleteExpiredAuditLogs: {\n          async task() {\n            const expirationDate = new Date(Date.now() - retentionDays * 24 * 60 * 60 * 1000);\n            await auditLogsService.deleteExpiredEvents(expirationDate);\n          },\n          options: '0 0 * * *',\n        },\n      });\n\n      return this;\n    },\n\n    unsubscribe() {\n      if (state.eeDisableUnsubscribe) {\n        state.eeDisableUnsubscribe();\n      }\n\n      if (state.eventHubUnsubscribe) {\n        state.eventHubUnsubscribe();\n      }\n\n      strapi.cron.remove('deleteExpiredAuditLogs');\n\n      return this;\n    },\n\n    destroy() {\n      return this.unsubscribe();\n    },\n  };\n};\n\nexport { createAuditLogsLifecycleService };\n"],"names":["DEFAULT_RETENTION_DAYS","defaultEvents","getEventMap","events","reduce","acc","event","kind","getRetentionDays","strapi","featureConfig","ee","features","get","licenseRetentionDays","options","retentionDays","userRetentionDays","config","createAuditLogsLifecycleService","state","auditLogsService","eventMap","SYSTEM_ORIGIN_FLAGS","scheduler","SYSTEM_ORIGINS","Object","keys","processEvent","name","args","registration","rawEvent","requestState","requestContext","isUsingAdminAuth","route","info","type","auditSource","isMcpAdminAction","user","systemOrigin","includes","undefined","origin","date","Date","toISOString","userId","id","ignoredUids","uid","action","payload","actor","email","getDisplayName","shape","transform","error","log","_action","_date","_actor","_origin","rest","handleEvent","processedEvent","saveEvent","registerEvent","Error","warn","register","eeEnableUnsubscribe","eventHub","on","destroy","eeUpdateUnsubscribe","eeDisableUnsubscribe","isEnabled","eventHubUnsubscribe","subscribe","cron","add","deleteExpiredAuditLogs","task","expirationDate","now","deleteExpiredEvents","unsubscribe","remove"],"mappings":";;;;AAIA,MAAMA,sBAAAA,GAAyB,EAAA;AAE/B;;;;AAIC,IACD,MAAMC,aAAAA,GAAgB;AACpB,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,eAAA;AACA,IAAA,iBAAA;AACA,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,oBAAA;AACA,IAAA,cAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,kBAAA;AACA,IAAA,kBAAA;AACA,IAAA,kBAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,mBAAA;AACA,IAAA,mBAAA;AACA,IAAA;AACD,CAAA;AAUD,MAAMC,cAAc,CAACC,MAAAA,GAAAA;AACnB,IAAA,OAAOA,MAAAA,CAAOC,MAAM,CAClB,CAACC,GAAAA,EAAKC,KAAAA,GAAAA;QACJD,GAAG,CAACC,MAAM,GAAG;YAAEC,IAAAA,EAAM;AAAS,SAAA;QAC9B,OAAOF,GAAAA;AACT,IAAA,CAAA,EACA,EAAC,CAAA;AAEL,CAAA;AAEA,MAAMG,mBAAmB,CAACC,MAAAA,GAAAA;AACxB,IAAA,MAAMC,gBAAgBD,MAAAA,CAAOE,EAAE,CAACC,QAAQ,CAACC,GAAG,CAAC,YAAA,CAAA;AAC7C,IAAA,MAAMC,oBAAAA,GACJ,OAAOJ,aAAAA,KAAkB,QAAA,IAAYA,eAAeK,OAAAA,EAASC,aAAAA;AAC/D,IAAA,MAAMC,iBAAAA,GAAoBR,MAAAA,CAAOS,MAAM,CAACL,GAAG,CAAC,+BAAA,CAAA;;AAG5C,IAAA,IAAIC,wBAAwB,IAAA,EAAM;AAChC,QAAA,OAAOG,iBAAAA,IAAqBjB,sBAAAA;AAC9B,IAAA;;IAGA,IAAIiB,iBAAAA,IAAqBA,qBAAqBH,oBAAAA,EAAsB;QAClE,OAAOG,iBAAAA;AACT,IAAA;;IAGA,OAAOH,oBAAAA;AACT,CAAA;AAEA;;;IAIA,MAAMK,kCAAkC,CAACV,MAAAA,GAAAA;;AAEvC,IAAA,MAAMW,QAAQ,EAAC;IACf,MAAMC,gBAAAA,GAAmBZ,MAAAA,CAAOI,GAAG,CAAC,YAAA,CAAA;AAEpC,IAAA,MAAMS,WAAWpB,WAAAA,CAAYD,aAAAA,CAAAA;AAE7B;;;;AAIC,MACD,MAAMsB,mBAAAA,GAAoE;QACxEC,SAAAA,EAAW;AACb,KAAA;IACA,MAAMC,cAAAA,GAAiBC,MAAAA,CAAOC,IAAI,CAACJ,mBAAAA,CAAAA;IAEnC,MAAMK,YAAAA,GAAe,OAAOC,IAAAA,EAAc,GAAGC,IAAAA,GAAAA;QAC3C,MAAMC,YAAAA,GAAeT,QAAQ,CAACO,IAAAA,CAAK;AAEnC,QAAA,IAAI,CAACE,YAAAA,EAAc;YACjB,OAAO,IAAA;AACT,QAAA;QAEA,MAAMC,QAAAA,GAAWF,IAAI,CAAC,CAAA,CAAE;AAExB,QAAA,MAAMG,YAAAA,GAAexB,MAAAA,CAAOyB,cAAc,CAACrB,GAAG,EAAA,EAAIO,KAAAA;AAElD,QAAA,MAAMe,gBAAAA,GAAmBF,YAAAA,EAAcG,KAAAA,EAAOC,IAAAA,EAAMC,IAAAA,KAAS,OAAA;AAC7D,QAAA,MAAMC,cAAcN,YAAAA,EAAcM,WAAAA;AAClC,QAAA,MAAMC,mBAAmBD,WAAAA,KAAgB,KAAA;AACzC,QAAA,MAAME,OAAOR,YAAAA,EAAcQ,IAAAA;AAE3B,QAAA,MAAMC,eACJH,WAAAA,IAAed,cAAAA,CAAekB,QAAQ,CAACJ,eAClCA,WAAAA,GACDK,SAAAA;QAEN,IAAI,CAACF,YAAAA,KAAiB,CAAEP,oBAAoB,CAACK,gBAAAA,IAAqB,CAACC,IAAG,CAAA,EAAI;YACxE,OAAO,IAAA;AACT,QAAA;QAEA,MAAMI,MAAAA,GAAwCH,gBAAgBH,WAAAA,IAAe,aAAA;QAC7E,MAAMO,IAAAA,GAAO,IAAIC,IAAAA,EAAAA,CAAOC,WAAW,EAAA;;;AAGnC,QAAA,MAAMC,MAAAA,GAASP,YAAAA,GAAe,IAAA,GAAOD,IAAAA,CAAKS,EAAE;QAE5C,IAAInB,YAAAA,CAAaxB,IAAI,KAAK,QAAA,EAAU;;AAElC,YAAA,MAAM4C,WAAAA,GAAc;AAAC,gBAAA,qBAAA;AAAuB,gBAAA;AAAwB,aAAA;AACpE,YAAA,IAAIA,WAAAA,CAAYR,QAAQ,CAACX,QAAAA,EAAUoB,GAAAA,CAAAA,EAAM;gBACvC,OAAO,IAAA;AACT,YAAA;YAEA,OAAO;gBACLC,MAAAA,EAAQxB,IAAAA;AACRiB,gBAAAA,IAAAA;gBACAQ,OAAAA,EAAS;AAAE,oBAAA,GAAGtB,QAAQ;AAAEa,oBAAAA;AAAO,iBAAA;AAC/BI,gBAAAA;AACF,aAAA;AACF,QAAA;AAEA,QAAA,MAAMM,QAAiCb,YAAAA,GACnC;YAAEJ,IAAAA,EAAM;SAAS,GACjB;YACEA,IAAAA,EAAM,YAAA;;;YAGNG,IAAAA,EAAM;AAAES,gBAAAA,EAAAA,EAAIT,KAAKS,EAAE;AAAEM,gBAAAA,KAAAA,EAAOf,KAAKe,KAAK;AAAE3B,gBAAAA,IAAAA,EAAM4B,oBAAAA,CAAehB,IAAAA;AAAM;AACrE,SAAA;AAEJ,QAAA,IAAIiB,KAAAA,GAA6C,IAAA;QAEjD,IAAI;YACFA,KAAAA,GAAQ,MAAM3B,YAAAA,CAAa4B,SAAS,CAAA,GAAI7B,IAAAA,CAAAA;AAC1C,QAAA,CAAA,CAAE,OAAO8B,KAAAA,EAAO;;;YAGdnD,MAAAA,CAAOoD,GAAG,CAACD,KAAK,CAAC,CAAC,0CAA0C,EAAE/B,MAAM,EAAE;AAAE+B,gBAAAA;AAAM,aAAA,CAAA;AAChF,QAAA;AAEA,QAAA,MAAM,EACJP,MAAAA,EAAQS,OAAO,EACfhB,IAAAA,EAAMiB,KAAK,EACXR,KAAAA,EAAOS,MAAM,EACbnB,QAAQoB,OAAO,EACf,GAAGC,IAAAA,EACJ,GAAIR,SAAS,EAAC;AACf,QAAA,MAAMJ,UAAUI,KAAAA,GACX;YAAEL,MAAAA,EAAQxB,IAAAA;AAAMiB,YAAAA,IAAAA;AAAMS,YAAAA,KAAAA;AAAOV,YAAAA,MAAAA;AAAQ,YAAA,GAAGqB;SAAK,GAC9C;YAAEb,MAAAA,EAAQxB,IAAAA;AAAMiB,YAAAA,IAAAA;AAAMS,YAAAA,KAAAA;AAAOV,YAAAA;AAAO,SAAA;QAExC,OAAO;YAAEQ,MAAAA,EAAQxB,IAAAA;AAAMiB,YAAAA,IAAAA;AAAMQ,YAAAA,OAAAA;AAASL,YAAAA;AAAO,SAAA;AAC/C,IAAA,CAAA;IAEA,MAAMkB,WAAAA,GAAc,OAAOtC,IAAAA,EAAc,GAAGC,IAAAA,GAAAA;QAC1C,IAAI;YACF,MAAMsC,cAAAA,GAAiB,MAAMxC,YAAAA,CAAaC,IAAAA,EAAAA,GAASC,IAAAA,CAAAA;AAEnD,YAAA,IAAIsC,cAAAA,EAAgB;gBAClB,MAAM/C,gBAAAA,CAAiBgD,SAAS,CAACD,cAAAA,CAAAA;AACnC,YAAA;AACF,QAAA,CAAA,CAAE,OAAOR,KAAAA,EAAO;;;;;YAKdnD,MAAAA,CAAOoD,GAAG,CAACD,KAAK,CAAC,CAAC,uCAAuC,EAAE/B,MAAM,EAAE;AAAE+B,gBAAAA;AAAM,aAAA,CAAA;AAC7E,QAAA;AACF,IAAA,CAAA;IAEA,OAAO;AACL;;;;QAKAU,aAAAA,CAAAA,CACEzC,IAAY,EACZ8B,SAAuD,EAAA;AAEvD,YAAA,IAAIrC,QAAQ,CAACO,IAAAA,CAAK,EAAEtB,SAAS,QAAA,EAAU;AACrC,gBAAA,MAAM,IAAIgE,KAAAA,CACR,CAAC,qCAAqC,EAAE1C,IAAAA,CAAK,kEAAkE,CAAC,CAAA;AAEpH,YAAA;YAEA,IAAIP,QAAQ,CAACO,IAAAA,CAAK,EAAE;gBAClBpB,MAAAA,CAAOoD,GAAG,CAACW,IAAI,CAAC,CAAC,qBAAqB,EAAE3C,IAAAA,CAAK,yCAAyC,CAAC,CAAA;AACzF,YAAA;YAEAP,QAAQ,CAACO,KAAK,GAAG;gBACftB,IAAAA,EAAM,UAAA;gBACNoD,SAAAA,EAAWA;AACb,aAAA;AACF,QAAA,CAAA;QAEA,MAAMc,QAAAA,CAAAA,GAAAA;;YAEJ,IAAI,CAACrD,KAAAA,CAAMsD,mBAAmB,EAAE;;AAE9BtD,gBAAAA,KAAAA,CAAMsD,mBAAmB,GAAGjE,MAAAA,CAAOkE,QAAQ,CAACC,EAAE,CAAC,WAAA,EAAa,IAAA;;AAE1D,oBAAA,IAAI,CAACC,OAAO,EAAA;AACZ,oBAAA,IAAI,CAACJ,QAAQ,EAAA;AACf,gBAAA,CAAA,CAAA;AACF,YAAA;;YAGA,IAAI,CAACrD,KAAAA,CAAM0D,mBAAmB,EAAE;;AAE9B1D,gBAAAA,KAAAA,CAAM0D,mBAAmB,GAAGrE,MAAAA,CAAOkE,QAAQ,CAACC,EAAE,CAAC,WAAA,EAAa,IAAA;;AAE1D,oBAAA,IAAI,CAACC,OAAO,EAAA;AACZ,oBAAA,IAAI,CAACJ,QAAQ,EAAA;AACf,gBAAA,CAAA,CAAA;AACF,YAAA;;;AAIArD,YAAAA,KAAAA,CAAM2D,oBAAoB,GAAGtE,MAAAA,CAAOkE,QAAQ,CAACC,EAAE,CAAC,YAAA,EAAc,IAAA;;;AAG5D,gBAAA,IAAI,CAACC,OAAO,EAAA;AACd,YAAA,CAAA,CAAA;;YAGA,IAAI,CAACpE,OAAOE,EAAE,CAACC,QAAQ,CAACoE,SAAS,CAAC,YAAA,CAAA,EAAe;AAC/C,gBAAA,OAAO,IAAI;AACb,YAAA;;AAGA5D,YAAAA,KAAAA,CAAM6D,mBAAmB,GAAGxE,MAAAA,CAAOkE,QAAQ,CAACO,SAAS,CAACf,WAAAA,CAAAA;;AAGtD,YAAA,MAAMnD,gBAAgBR,gBAAAA,CAAiBC,MAAAA,CAAAA;YAEvCA,MAAAA,CAAO0E,IAAI,CAACC,GAAG,CAAC;gBACdC,sBAAAA,EAAwB;oBACtB,MAAMC,IAAAA,CAAAA,GAAAA;wBACJ,MAAMC,cAAAA,GAAiB,IAAIxC,IAAAA,CAAKA,IAAAA,CAAKyC,GAAG,EAAA,GAAKxE,aAAAA,GAAgB,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,IAAA,CAAA;wBAC5E,MAAMK,gBAAAA,CAAiBoE,mBAAmB,CAACF,cAAAA,CAAAA;AAC7C,oBAAA,CAAA;oBACAxE,OAAAA,EAAS;AACX;AACF,aAAA,CAAA;AAEA,YAAA,OAAO,IAAI;AACb,QAAA,CAAA;AAEA2E,QAAAA,WAAAA,CAAAA,GAAAA;YACE,IAAItE,KAAAA,CAAM2D,oBAAoB,EAAE;AAC9B3D,gBAAAA,KAAAA,CAAM2D,oBAAoB,EAAA;AAC5B,YAAA;YAEA,IAAI3D,KAAAA,CAAM6D,mBAAmB,EAAE;AAC7B7D,gBAAAA,KAAAA,CAAM6D,mBAAmB,EAAA;AAC3B,YAAA;YAEAxE,MAAAA,CAAO0E,IAAI,CAACQ,MAAM,CAAC,wBAAA,CAAA;AAEnB,YAAA,OAAO,IAAI;AACb,QAAA,CAAA;AAEAd,QAAAA,OAAAA,CAAAA,GAAAA;YACE,OAAO,IAAI,CAACa,WAAW,EAAA;AACzB,QAAA;AACF,KAAA;AACF;;;;"}

package/dist/server/ee/server/src/audit-logs/services/lifecycles.mjs

@@ -1,5 +1,11 @@
+import { getDisplayName } from '../utils.mjs';
+
 const DEFAULT_RETENTION_DAYS = 90;
-const defaultEvents = [
+/**
+ * Events audited before the payload standard; their stored shape is frozen for
+ * compatibility. Do not add events here: new events come through registerEvent().
+ * TODO: migrate these to the standard.
+ */ const defaultEvents = [
     'entry.create',
     'entry.update',
     'entry.delete',
@@ -29,11 +35,11 @@ const defaultEvents = [
     'permission.update',
     'permission.delete'
 ];
-const getEventMap = (defaultEvents)=>{
-    const getDefaultPayload = (...args)=>args[0];
-    // Use the default payload for all default events
-    return defaultEvents.reduce((acc, event)=>{
-        acc[event] = getDefaultPayload;
+const getEventMap = (events)=>{
+    return events.reduce((acc, event)=>{
+        acc[event] = {
+            kind: 'legacy'
+        };
         return acc;
     }, {});
 };
@@ -54,55 +60,134 @@ const getRetentionDays = (strapi)=>{
 };
 /**
  * @description
- * Manages the lifecycle of audit logs. Accessible via strapi.get('audit-logs-lifecycles')
+ * Manages the lifecycle of audit logs. Accessible via strapi.get('audit-logs-lifecycle')
  */ const createAuditLogsLifecycleService = (strapi)=>{
     // Manage internal service state privately
     const state = {};
     const auditLogsService = strapi.get('audit-logs');
-    // NOTE: providers should be able to replace getEventMap to add or remove events
     const eventMap = getEventMap(defaultEvents);
-    const processEvent = (name, ...args)=>{
+    /**
+   * The system origins accepted from the execution context; anything else needs a
+   * user. Keyed on the type, so extending SystemOrigin without gating it here fails
+   * to compile.
+   */ const SYSTEM_ORIGIN_FLAGS = {
+        scheduler: true
+    };
+    const SYSTEM_ORIGINS = Object.keys(SYSTEM_ORIGIN_FLAGS);
+    const processEvent = async (name, ...args)=>{
+        const registration = eventMap[name];
+        if (!registration) {
+            return null;
+        }
+        const rawEvent = args[0];
         const requestState = strapi.requestContext.get()?.state;
-        // Only audit admin-authenticated actions, plus MCP actions flagged via auditSource.
-        const isUsingAdminAuth = requestState?.route.info.type === 'admin';
+        const isUsingAdminAuth = requestState?.route?.info?.type === 'admin';
         const auditSource = requestState?.auditSource;
         const isMcpAdminAction = auditSource === 'mcp';
         const user = requestState?.user;
-        if (!isUsingAdminAuth && !isMcpAdminAction || !user) {
+        const systemOrigin = auditSource && SYSTEM_ORIGINS.includes(auditSource) ? auditSource : undefined;
+        if (!systemOrigin && (!isUsingAdminAuth && !isMcpAdminAction || !user)) {
             return null;
         }
-        const origin = auditSource ?? 'admin';
-        const getPayload = eventMap[name];
-        // Ignore the event if it's not in the map
-        if (!getPayload) {
-            return null;
+        const origin = systemOrigin ?? auditSource ?? 'admin-panel';
+        const date = new Date().toISOString();
+        // Scheduled actions have no user, so a null user is expected. The earlier audit
+        // entry that set the schedule records who did it.
+        const userId = systemOrigin ? null : user.id;
+        if (registration.kind === 'legacy') {
+            // TODO: What does this ignore in upload? Why would we want to ignore anything?
+            const ignoredUids = [
+                'plugin::upload.file',
+                'plugin::upload.folder'
+            ];
+            if (ignoredUids.includes(rawEvent?.uid)) {
+                return null;
+            }
+            return {
+                action: name,
+                date,
+                payload: {
+                    ...rawEvent,
+                    origin
+                },
+                userId
+            };
         }
-        // Ignore some events based on payload
-        // TODO: What does this ignore in upload? Why would we want to ignore anything?
-        const ignoredUids = [
-            'plugin::upload.file',
-            'plugin::upload.folder'
-        ];
-        if (ignoredUids.includes(args[0]?.uid)) {
-            return null;
+        const actor = systemOrigin ? {
+            type: 'system'
+        } : {
+            type: 'admin-user',
+            // We copy the user data into the row so the history stays unchanged if the
+            // user changes later
+            user: {
+                id: user.id,
+                email: user.email,
+                name: getDisplayName(user)
+            }
+        };
+        let shape = null;
+        try {
+            shape = await registration.transform(...args);
+        } catch (error) {
+            // If the transformer fails, we still keep the audit event: the row is saved
+            // with the subscriber's fields only.
+            strapi.log.error(`Failed to build the audit log payload for ${name}`, {
+                error
+            });
         }
+        const { action: _action, date: _date, actor: _actor, origin: _origin, ...rest } = shape ?? {};
+        const payload = shape ? {
+            action: name,
+            date,
+            actor,
+            origin,
+            ...rest
+        } : {
+            action: name,
+            date,
+            actor,
+            origin
+        };
         return {
             action: name,
-            date: new Date().toISOString(),
-            payload: {
-                ...getPayload(...args) || {},
-                origin
-            },
-            userId: user.id
+            date,
+            payload,
+            userId
         };
     };
     const handleEvent = async (name, ...args)=>{
-        const processedEvent = processEvent(name, ...args);
-        if (processedEvent) {
-            await auditLogsService.saveEvent(processedEvent);
+        try {
+            const processedEvent = await processEvent(name, ...args);
+            if (processedEvent) {
+                await auditLogsService.saveEvent(processedEvent);
+            }
+        } catch (error) {
+            // Logged, not propagated: most emitters fire and forget (the document service
+            // emits entry.* from an unawaited onCommit callback), and a rejection with no
+            // one awaiting it takes the process down. Audit logging is therefore fail-open:
+            // the entry is lost and only this line records it.
+            strapi.log.error(`Failed to save the audit log entry for ${name}`, {
+                error
+            });
         }
     };
     return {
+        /**
+     * Adds an event to the list of audited events. Plugins register their own from
+     * their bootstrap; the transformer builds the audited shape
+     * ({resource, details, outcome}) from the arguments passed to eventHub.emit().
+     */ registerEvent (name, transform) {
+            if (eventMap[name]?.kind === 'legacy') {
+                throw new Error(`Cannot register the audit log event "${name}": it is one of the built-in events, whose stored shape is frozen.`);
+            }
+            if (eventMap[name]) {
+                strapi.log.warn(`The audit log event "${name}" was already registered and is replaced.`);
+            }
+            eventMap[name] = {
+                kind: 'standard',
+                transform: transform
+            };
+        },
         async register () {
             // Handle license being enabled
             if (!state.eeEnableUnsubscribe) {

package/dist/server/ee/server/src/audit-logs/services/lifecycles.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycles.mjs","sources":["../../../../../../../ee/server/src/audit-logs/services/lifecycles.ts"],"sourcesContent":["import type { Core, Modules } from '@strapi/types';\n\nconst DEFAULT_RETENTION_DAYS = 90;\n\nconst defaultEvents = [\n  'entry.create',\n  'entry.update',\n  'entry.delete',\n  'entry.publish',\n  'entry.unpublish',\n  'media.create',\n  'media.update',\n  'media.delete',\n  'media-folder.create',\n  'media-folder.update',\n  'media-folder.delete',\n  'user.create',\n  'user.update',\n  'user.delete',\n  'admin.auth.success',\n  'admin.logout',\n  'content-type.create',\n  'content-type.update',\n  'content-type.delete',\n  'component.create',\n  'component.update',\n  'component.delete',\n  'role.create',\n  'role.update',\n  'role.delete',\n  'permission.create',\n  'permission.update',\n  'permission.delete',\n];\n\nconst getEventMap = (defaultEvents: any) => {\n  const getDefaultPayload = (...args: any) => args[0];\n\n  // Use the default payload for all default events\n  return defaultEvents.reduce((acc: any, event: any) => {\n    acc[event] = getDefaultPayload;\n    return acc;\n  }, {} as any);\n};\n\nconst getRetentionDays = (strapi: Core.Strapi) => {\n  const featureConfig = strapi.ee.features.get('audit-logs');\n  const licenseRetentionDays =\n    typeof featureConfig === 'object' && featureConfig?.options?.retentionDays;\n  const userRetentionDays = strapi.config.get('admin.auditLogs.retentionDays');\n\n  // For enterprise plans, use 90 days by default, but allow users to override it\n  if (licenseRetentionDays == null) {\n    return userRetentionDays ?? DEFAULT_RETENTION_DAYS;\n  }\n\n  // Allow users to override the license retention days, but not to increase it\n  if (userRetentionDays && userRetentionDays <= licenseRetentionDays) {\n    return userRetentionDays;\n  }\n\n  // User didn't provide a retention days value, use the license one\n  return licenseRetentionDays;\n};\n\n/**\n * @description\n * Manages the lifecycle of audit logs. Accessible via strapi.get('audit-logs-lifecycles')\n */\nconst createAuditLogsLifecycleService = (strapi: Core.Strapi) => {\n  // Manage internal service state privately\n  const state = {} as any;\n  const auditLogsService = strapi.get('audit-logs');\n\n  // NOTE: providers should be able to replace getEventMap to add or remove events\n  const eventMap = getEventMap(defaultEvents);\n\n  const processEvent = (name: string, ...args: any) => {\n    const requestState = strapi.requestContext.get()?.state;\n\n    // Only audit admin-authenticated actions, plus MCP actions flagged via auditSource.\n    const isUsingAdminAuth = requestState?.route.info.type === 'admin';\n    const auditSource = requestState?.auditSource;\n    const isMcpAdminAction = auditSource === 'mcp';\n    const user = requestState?.user;\n    if ((!isUsingAdminAuth && !isMcpAdminAction) || !user) {\n      return null;\n    }\n\n    const origin: Modules.AuditLogs.AuditSource = auditSource ?? 'admin';\n\n    const getPayload = eventMap[name];\n\n    // Ignore the event if it's not in the map\n    if (!getPayload) {\n      return null;\n    }\n\n    // Ignore some events based on payload\n    // TODO: What does this ignore in upload? Why would we want to ignore anything?\n    const ignoredUids = ['plugin::upload.file', 'plugin::upload.folder'];\n    if (ignoredUids.includes(args[0]?.uid)) {\n      return null;\n    }\n\n    return {\n      action: name,\n      date: new Date().toISOString(),\n      payload: { ...(getPayload(...args) || {}), origin },\n      userId: user.id,\n    };\n  };\n\n  const handleEvent = async (name: string, ...args: any) => {\n    const processedEvent = processEvent(name, ...args);\n\n    if (processedEvent) {\n      await auditLogsService.saveEvent(processedEvent);\n    }\n  };\n\n  return {\n    async register() {\n      // Handle license being enabled\n      if (!state.eeEnableUnsubscribe) {\n        // @ts-expect-error- update event hub to receive callback argument\n        state.eeEnableUnsubscribe = strapi.eventHub.on('ee.enable', () => {\n          // Recreate the service to use the new license info\n          this.destroy();\n          this.register();\n        });\n      }\n\n      // Handle license being updated\n      if (!state.eeUpdateUnsubscribe) {\n        // @ts-expect-error- update event hub to receive callback argument\n        state.eeUpdateUnsubscribe = strapi.eventHub.on('ee.update', () => {\n          // Recreate the service to use the new license info\n          this.destroy();\n          this.register();\n        });\n      }\n\n      // Handle license being disabled\n      // @ts-expect-error- update event hub to receive callback argument\n      state.eeDisableUnsubscribe = strapi.eventHub.on('ee.disable', () => {\n        // Turn off service when the license gets disabled\n        // Only ee.enable and ee.update listeners remain active to recreate the service\n        this.destroy();\n      });\n\n      // Check current state of license\n      if (!strapi.ee.features.isEnabled('audit-logs')) {\n        return this;\n      }\n\n      // Start saving events\n      state.eventHubUnsubscribe = strapi.eventHub.subscribe(handleEvent);\n\n      // Manage audit logs auto deletion\n      const retentionDays = getRetentionDays(strapi);\n\n      strapi.cron.add({\n        deleteExpiredAuditLogs: {\n          async task() {\n            const expirationDate = new Date(Date.now() - retentionDays * 24 * 60 * 60 * 1000);\n            await auditLogsService.deleteExpiredEvents(expirationDate);\n          },\n          options: '0 0 * * *',\n        },\n      });\n\n      return this;\n    },\n\n    unsubscribe() {\n      if (state.eeDisableUnsubscribe) {\n        state.eeDisableUnsubscribe();\n      }\n\n      if (state.eventHubUnsubscribe) {\n        state.eventHubUnsubscribe();\n      }\n\n      strapi.cron.remove('deleteExpiredAuditLogs');\n\n      return this;\n    },\n\n    destroy() {\n      return this.unsubscribe();\n    },\n  };\n};\n\nexport { createAuditLogsLifecycleService };\n"],"names":["DEFAULT_RETENTION_DAYS","defaultEvents","getEventMap","getDefaultPayload","args","reduce","acc","event","getRetentionDays","strapi","featureConfig","ee","features","get","licenseRetentionDays","options","retentionDays","userRetentionDays","config","createAuditLogsLifecycleService","state","auditLogsService","eventMap","processEvent","name","requestState","requestContext","isUsingAdminAuth","route","info","type","auditSource","isMcpAdminAction","user","origin","getPayload","ignoredUids","includes","uid","action","date","Date","toISOString","payload","userId","id","handleEvent","processedEvent","saveEvent","register","eeEnableUnsubscribe","eventHub","on","destroy","eeUpdateUnsubscribe","eeDisableUnsubscribe","isEnabled","eventHubUnsubscribe","subscribe","cron","add","deleteExpiredAuditLogs","task","expirationDate","now","deleteExpiredEvents","unsubscribe","remove"],"mappings":"AAEA,MAAMA,sBAAAA,GAAyB,EAAA;AAE/B,MAAMC,aAAAA,GAAgB;AACpB,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,eAAA;AACA,IAAA,iBAAA;AACA,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,oBAAA;AACA,IAAA,cAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,kBAAA;AACA,IAAA,kBAAA;AACA,IAAA,kBAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,mBAAA;AACA,IAAA,mBAAA;AACA,IAAA;AACD,CAAA;AAED,MAAMC,cAAc,CAACD,aAAAA,GAAAA;AACnB,IAAA,MAAME,oBAAoB,CAAC,GAAGC,IAAAA,GAAcA,IAAI,CAAC,CAAA,CAAE;;AAGnD,IAAA,OAAOH,aAAAA,CAAcI,MAAM,CAAC,CAACC,GAAAA,EAAUC,KAAAA,GAAAA;QACrCD,GAAG,CAACC,MAAM,GAAGJ,iBAAAA;QACb,OAAOG,GAAAA;AACT,IAAA,CAAA,EAAG,EAAC,CAAA;AACN,CAAA;AAEA,MAAME,mBAAmB,CAACC,MAAAA,GAAAA;AACxB,IAAA,MAAMC,gBAAgBD,MAAAA,CAAOE,EAAE,CAACC,QAAQ,CAACC,GAAG,CAAC,YAAA,CAAA;AAC7C,IAAA,MAAMC,oBAAAA,GACJ,OAAOJ,aAAAA,KAAkB,QAAA,IAAYA,eAAeK,OAAAA,EAASC,aAAAA;AAC/D,IAAA,MAAMC,iBAAAA,GAAoBR,MAAAA,CAAOS,MAAM,CAACL,GAAG,CAAC,+BAAA,CAAA;;AAG5C,IAAA,IAAIC,wBAAwB,IAAA,EAAM;AAChC,QAAA,OAAOG,iBAAAA,IAAqBjB,sBAAAA;AAC9B,IAAA;;IAGA,IAAIiB,iBAAAA,IAAqBA,qBAAqBH,oBAAAA,EAAsB;QAClE,OAAOG,iBAAAA;AACT,IAAA;;IAGA,OAAOH,oBAAAA;AACT,CAAA;AAEA;;;IAIA,MAAMK,kCAAkC,CAACV,MAAAA,GAAAA;;AAEvC,IAAA,MAAMW,QAAQ,EAAC;IACf,MAAMC,gBAAAA,GAAmBZ,MAAAA,CAAOI,GAAG,CAAC,YAAA,CAAA;;AAGpC,IAAA,MAAMS,WAAWpB,WAAAA,CAAYD,aAAAA,CAAAA;IAE7B,MAAMsB,YAAAA,GAAe,CAACC,IAAAA,EAAc,GAAGpB,IAAAA,GAAAA;AACrC,QAAA,MAAMqB,YAAAA,GAAehB,MAAAA,CAAOiB,cAAc,CAACb,GAAG,EAAA,EAAIO,KAAAA;;AAGlD,QAAA,MAAMO,gBAAAA,GAAmBF,YAAAA,EAAcG,KAAAA,CAAMC,IAAAA,CAAKC,IAAAA,KAAS,OAAA;AAC3D,QAAA,MAAMC,cAAcN,YAAAA,EAAcM,WAAAA;AAClC,QAAA,MAAMC,mBAAmBD,WAAAA,KAAgB,KAAA;AACzC,QAAA,MAAME,OAAOR,YAAAA,EAAcQ,IAAAA;AAC3B,QAAA,IAAI,CAAEN,gBAAAA,IAAoB,CAACK,gBAAAA,IAAqB,CAACC,IAAAA,EAAM;YACrD,OAAO,IAAA;AACT,QAAA;AAEA,QAAA,MAAMC,SAAwCH,WAAAA,IAAe,OAAA;QAE7D,MAAMI,UAAAA,GAAab,QAAQ,CAACE,IAAAA,CAAK;;AAGjC,QAAA,IAAI,CAACW,UAAAA,EAAY;YACf,OAAO,IAAA;AACT,QAAA;;;AAIA,QAAA,MAAMC,WAAAA,GAAc;AAAC,YAAA,qBAAA;AAAuB,YAAA;AAAwB,SAAA;AACpE,QAAA,IAAIA,YAAYC,QAAQ,CAACjC,IAAI,CAAC,CAAA,CAAE,EAAEkC,GAAAA,CAAAA,EAAM;YACtC,OAAO,IAAA;AACT,QAAA;QAEA,OAAO;YACLC,MAAAA,EAAQf,IAAAA;YACRgB,IAAAA,EAAM,IAAIC,OAAOC,WAAW,EAAA;YAC5BC,OAAAA,EAAS;gBAAE,GAAIR,UAAAA,CAAAA,GAAc/B,IAAAA,CAAAA,IAAS,EAAE;AAAG8B,gBAAAA;AAAO,aAAA;AAClDU,YAAAA,MAAAA,EAAQX,KAAKY;AACf,SAAA;AACF,IAAA,CAAA;IAEA,MAAMC,WAAAA,GAAc,OAAOtB,IAAAA,EAAc,GAAGpB,IAAAA,GAAAA;QAC1C,MAAM2C,cAAAA,GAAiBxB,aAAaC,IAAAA,EAAAA,GAASpB,IAAAA,CAAAA;AAE7C,QAAA,IAAI2C,cAAAA,EAAgB;YAClB,MAAM1B,gBAAAA,CAAiB2B,SAAS,CAACD,cAAAA,CAAAA;AACnC,QAAA;AACF,IAAA,CAAA;IAEA,OAAO;QACL,MAAME,QAAAA,CAAAA,GAAAA;;YAEJ,IAAI,CAAC7B,KAAAA,CAAM8B,mBAAmB,EAAE;;AAE9B9B,gBAAAA,KAAAA,CAAM8B,mBAAmB,GAAGzC,MAAAA,CAAO0C,QAAQ,CAACC,EAAE,CAAC,WAAA,EAAa,IAAA;;AAE1D,oBAAA,IAAI,CAACC,OAAO,EAAA;AACZ,oBAAA,IAAI,CAACJ,QAAQ,EAAA;AACf,gBAAA,CAAA,CAAA;AACF,YAAA;;YAGA,IAAI,CAAC7B,KAAAA,CAAMkC,mBAAmB,EAAE;;AAE9BlC,gBAAAA,KAAAA,CAAMkC,mBAAmB,GAAG7C,MAAAA,CAAO0C,QAAQ,CAACC,EAAE,CAAC,WAAA,EAAa,IAAA;;AAE1D,oBAAA,IAAI,CAACC,OAAO,EAAA;AACZ,oBAAA,IAAI,CAACJ,QAAQ,EAAA;AACf,gBAAA,CAAA,CAAA;AACF,YAAA;;;AAIA7B,YAAAA,KAAAA,CAAMmC,oBAAoB,GAAG9C,MAAAA,CAAO0C,QAAQ,CAACC,EAAE,CAAC,YAAA,EAAc,IAAA;;;AAG5D,gBAAA,IAAI,CAACC,OAAO,EAAA;AACd,YAAA,CAAA,CAAA;;YAGA,IAAI,CAAC5C,OAAOE,EAAE,CAACC,QAAQ,CAAC4C,SAAS,CAAC,YAAA,CAAA,EAAe;AAC/C,gBAAA,OAAO,IAAI;AACb,YAAA;;AAGApC,YAAAA,KAAAA,CAAMqC,mBAAmB,GAAGhD,MAAAA,CAAO0C,QAAQ,CAACO,SAAS,CAACZ,WAAAA,CAAAA;;AAGtD,YAAA,MAAM9B,gBAAgBR,gBAAAA,CAAiBC,MAAAA,CAAAA;YAEvCA,MAAAA,CAAOkD,IAAI,CAACC,GAAG,CAAC;gBACdC,sBAAAA,EAAwB;oBACtB,MAAMC,IAAAA,CAAAA,GAAAA;wBACJ,MAAMC,cAAAA,GAAiB,IAAItB,IAAAA,CAAKA,IAAAA,CAAKuB,GAAG,EAAA,GAAKhD,aAAAA,GAAgB,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,IAAA,CAAA;wBAC5E,MAAMK,gBAAAA,CAAiB4C,mBAAmB,CAACF,cAAAA,CAAAA;AAC7C,oBAAA,CAAA;oBACAhD,OAAAA,EAAS;AACX;AACF,aAAA,CAAA;AAEA,YAAA,OAAO,IAAI;AACb,QAAA,CAAA;AAEAmD,QAAAA,WAAAA,CAAAA,GAAAA;YACE,IAAI9C,KAAAA,CAAMmC,oBAAoB,EAAE;AAC9BnC,gBAAAA,KAAAA,CAAMmC,oBAAoB,EAAA;AAC5B,YAAA;YAEA,IAAInC,KAAAA,CAAMqC,mBAAmB,EAAE;AAC7BrC,gBAAAA,KAAAA,CAAMqC,mBAAmB,EAAA;AAC3B,YAAA;YAEAhD,MAAAA,CAAOkD,IAAI,CAACQ,MAAM,CAAC,wBAAA,CAAA;AAEnB,YAAA,OAAO,IAAI;AACb,QAAA,CAAA;AAEAd,QAAAA,OAAAA,CAAAA,GAAAA;YACE,OAAO,IAAI,CAACa,WAAW,EAAA;AACzB,QAAA;AACF,KAAA;AACF;;;;"}
+{"version":3,"file":"lifecycles.mjs","sources":["../../../../../../../ee/server/src/audit-logs/services/lifecycles.ts"],"sourcesContent":["import type { Core, Modules } from '@strapi/types';\n\nimport { getDisplayName } from '../utils';\n\nconst DEFAULT_RETENTION_DAYS = 90;\n\n/**\n * Events audited before the payload standard; their stored shape is frozen for\n * compatibility. Do not add events here: new events come through registerEvent().\n * TODO: migrate these to the standard.\n */\nconst defaultEvents = [\n  'entry.create',\n  'entry.update',\n  'entry.delete',\n  'entry.publish',\n  'entry.unpublish',\n  'media.create',\n  'media.update',\n  'media.delete',\n  'media-folder.create',\n  'media-folder.update',\n  'media-folder.delete',\n  'user.create',\n  'user.update',\n  'user.delete',\n  'admin.auth.success',\n  'admin.logout',\n  'content-type.create',\n  'content-type.update',\n  'content-type.delete',\n  'component.create',\n  'component.update',\n  'component.delete',\n  'role.create',\n  'role.update',\n  'role.delete',\n  'permission.create',\n  'permission.update',\n  'permission.delete',\n];\n\n/**\n * Legacy events store the first emitted argument as-is; registered events store the\n * standard shape built by their transformer.\n */\ntype EventRegistration =\n  | { kind: 'legacy' }\n  | { kind: 'standard'; transform: Modules.AuditLogs.EventTransformer };\n\nconst getEventMap = (events: string[]) => {\n  return events.reduce(\n    (acc, event) => {\n      acc[event] = { kind: 'legacy' };\n      return acc;\n    },\n    {} as Record<string, EventRegistration>\n  );\n};\n\nconst getRetentionDays = (strapi: Core.Strapi) => {\n  const featureConfig = strapi.ee.features.get('audit-logs');\n  const licenseRetentionDays =\n    typeof featureConfig === 'object' && featureConfig?.options?.retentionDays;\n  const userRetentionDays = strapi.config.get('admin.auditLogs.retentionDays');\n\n  // For enterprise plans, use 90 days by default, but allow users to override it\n  if (licenseRetentionDays == null) {\n    return userRetentionDays ?? DEFAULT_RETENTION_DAYS;\n  }\n\n  // Allow users to override the license retention days, but not to increase it\n  if (userRetentionDays && userRetentionDays <= licenseRetentionDays) {\n    return userRetentionDays;\n  }\n\n  // User didn't provide a retention days value, use the license one\n  return licenseRetentionDays;\n};\n\n/**\n * @description\n * Manages the lifecycle of audit logs. Accessible via strapi.get('audit-logs-lifecycle')\n */\nconst createAuditLogsLifecycleService = (strapi: Core.Strapi) => {\n  // Manage internal service state privately\n  const state = {} as any;\n  const auditLogsService = strapi.get('audit-logs');\n\n  const eventMap = getEventMap(defaultEvents);\n\n  /**\n   * The system origins accepted from the execution context; anything else needs a\n   * user. Keyed on the type, so extending SystemOrigin without gating it here fails\n   * to compile.\n   */\n  const SYSTEM_ORIGIN_FLAGS: Record<Modules.AuditLogs.SystemOrigin, true> = {\n    scheduler: true,\n  };\n  const SYSTEM_ORIGINS = Object.keys(SYSTEM_ORIGIN_FLAGS);\n\n  const processEvent = async (name: string, ...args: any) => {\n    const registration = eventMap[name];\n\n    if (!registration) {\n      return null;\n    }\n\n    const rawEvent = args[0];\n\n    const requestState = strapi.requestContext.get()?.state;\n\n    const isUsingAdminAuth = requestState?.route?.info?.type === 'admin';\n    const auditSource = requestState?.auditSource;\n    const isMcpAdminAction = auditSource === 'mcp';\n    const user = requestState?.user;\n\n    const systemOrigin =\n      auditSource && SYSTEM_ORIGINS.includes(auditSource)\n        ? (auditSource as Modules.AuditLogs.SystemOrigin)\n        : undefined;\n\n    if (!systemOrigin && ((!isUsingAdminAuth && !isMcpAdminAction) || !user)) {\n      return null;\n    }\n\n    const origin: Modules.AuditLogs.AuditSource = systemOrigin ?? auditSource ?? 'admin-panel';\n    const date = new Date().toISOString();\n    // Scheduled actions have no user, so a null user is expected. The earlier audit\n    // entry that set the schedule records who did it.\n    const userId = systemOrigin ? null : user.id;\n\n    if (registration.kind === 'legacy') {\n      // TODO: What does this ignore in upload? Why would we want to ignore anything?\n      const ignoredUids = ['plugin::upload.file', 'plugin::upload.folder'];\n      if (ignoredUids.includes(rawEvent?.uid)) {\n        return null;\n      }\n\n      return {\n        action: name,\n        date,\n        payload: { ...rawEvent, origin },\n        userId,\n      };\n    }\n\n    const actor: Modules.AuditLogs.Actor = systemOrigin\n      ? { type: 'system' }\n      : {\n          type: 'admin-user',\n          // We copy the user data into the row so the history stays unchanged if the\n          // user changes later\n          user: { id: user.id, email: user.email, name: getDisplayName(user) },\n        };\n\n    let shape: Modules.AuditLogs.EventShape | null = null;\n\n    try {\n      shape = await registration.transform(...args);\n    } catch (error) {\n      // If the transformer fails, we still keep the audit event: the row is saved\n      // with the subscriber's fields only.\n      strapi.log.error(`Failed to build the audit log payload for ${name}`, { error });\n    }\n\n    const {\n      action: _action,\n      date: _date,\n      actor: _actor,\n      origin: _origin,\n      ...rest\n    } = (shape ?? {}) as Record<string, unknown>;\n    const payload = shape\n      ? ({ action: name, date, actor, origin, ...rest } as Modules.AuditLogs.StoredPayload)\n      : { action: name, date, actor, origin };\n\n    return { action: name, date, payload, userId };\n  };\n\n  const handleEvent = async (name: string, ...args: any) => {\n    try {\n      const processedEvent = await processEvent(name, ...args);\n\n      if (processedEvent) {\n        await auditLogsService.saveEvent(processedEvent);\n      }\n    } catch (error) {\n      // Logged, not propagated: most emitters fire and forget (the document service\n      // emits entry.* from an unawaited onCommit callback), and a rejection with no\n      // one awaiting it takes the process down. Audit logging is therefore fail-open:\n      // the entry is lost and only this line records it.\n      strapi.log.error(`Failed to save the audit log entry for ${name}`, { error });\n    }\n  };\n\n  return {\n    /**\n     * Adds an event to the list of audited events. Plugins register their own from\n     * their bootstrap; the transformer builds the audited shape\n     * ({resource, details, outcome}) from the arguments passed to eventHub.emit().\n     */\n    registerEvent<TDetails = unknown>(\n      name: string,\n      transform: Modules.AuditLogs.EventTransformer<TDetails>\n    ) {\n      if (eventMap[name]?.kind === 'legacy') {\n        throw new Error(\n          `Cannot register the audit log event \"${name}\": it is one of the built-in events, whose stored shape is frozen.`\n        );\n      }\n\n      if (eventMap[name]) {\n        strapi.log.warn(`The audit log event \"${name}\" was already registered and is replaced.`);\n      }\n\n      eventMap[name] = {\n        kind: 'standard',\n        transform: transform as Modules.AuditLogs.EventTransformer,\n      };\n    },\n\n    async register() {\n      // Handle license being enabled\n      if (!state.eeEnableUnsubscribe) {\n        // @ts-expect-error- update event hub to receive callback argument\n        state.eeEnableUnsubscribe = strapi.eventHub.on('ee.enable', () => {\n          // Recreate the service to use the new license info\n          this.destroy();\n          this.register();\n        });\n      }\n\n      // Handle license being updated\n      if (!state.eeUpdateUnsubscribe) {\n        // @ts-expect-error- update event hub to receive callback argument\n        state.eeUpdateUnsubscribe = strapi.eventHub.on('ee.update', () => {\n          // Recreate the service to use the new license info\n          this.destroy();\n          this.register();\n        });\n      }\n\n      // Handle license being disabled\n      // @ts-expect-error- update event hub to receive callback argument\n      state.eeDisableUnsubscribe = strapi.eventHub.on('ee.disable', () => {\n        // Turn off service when the license gets disabled\n        // Only ee.enable and ee.update listeners remain active to recreate the service\n        this.destroy();\n      });\n\n      // Check current state of license\n      if (!strapi.ee.features.isEnabled('audit-logs')) {\n        return this;\n      }\n\n      // Start saving events\n      state.eventHubUnsubscribe = strapi.eventHub.subscribe(handleEvent);\n\n      // Manage audit logs auto deletion\n      const retentionDays = getRetentionDays(strapi);\n\n      strapi.cron.add({\n        deleteExpiredAuditLogs: {\n          async task() {\n            const expirationDate = new Date(Date.now() - retentionDays * 24 * 60 * 60 * 1000);\n            await auditLogsService.deleteExpiredEvents(expirationDate);\n          },\n          options: '0 0 * * *',\n        },\n      });\n\n      return this;\n    },\n\n    unsubscribe() {\n      if (state.eeDisableUnsubscribe) {\n        state.eeDisableUnsubscribe();\n      }\n\n      if (state.eventHubUnsubscribe) {\n        state.eventHubUnsubscribe();\n      }\n\n      strapi.cron.remove('deleteExpiredAuditLogs');\n\n      return this;\n    },\n\n    destroy() {\n      return this.unsubscribe();\n    },\n  };\n};\n\nexport { createAuditLogsLifecycleService };\n"],"names":["DEFAULT_RETENTION_DAYS","defaultEvents","getEventMap","events","reduce","acc","event","kind","getRetentionDays","strapi","featureConfig","ee","features","get","licenseRetentionDays","options","retentionDays","userRetentionDays","config","createAuditLogsLifecycleService","state","auditLogsService","eventMap","SYSTEM_ORIGIN_FLAGS","scheduler","SYSTEM_ORIGINS","Object","keys","processEvent","name","args","registration","rawEvent","requestState","requestContext","isUsingAdminAuth","route","info","type","auditSource","isMcpAdminAction","user","systemOrigin","includes","undefined","origin","date","Date","toISOString","userId","id","ignoredUids","uid","action","payload","actor","email","getDisplayName","shape","transform","error","log","_action","_date","_actor","_origin","rest","handleEvent","processedEvent","saveEvent","registerEvent","Error","warn","register","eeEnableUnsubscribe","eventHub","on","destroy","eeUpdateUnsubscribe","eeDisableUnsubscribe","isEnabled","eventHubUnsubscribe","subscribe","cron","add","deleteExpiredAuditLogs","task","expirationDate","now","deleteExpiredEvents","unsubscribe","remove"],"mappings":";;AAIA,MAAMA,sBAAAA,GAAyB,EAAA;AAE/B;;;;AAIC,IACD,MAAMC,aAAAA,GAAgB;AACpB,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,eAAA;AACA,IAAA,iBAAA;AACA,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,cAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,oBAAA;AACA,IAAA,cAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,qBAAA;AACA,IAAA,kBAAA;AACA,IAAA,kBAAA;AACA,IAAA,kBAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,aAAA;AACA,IAAA,mBAAA;AACA,IAAA,mBAAA;AACA,IAAA;AACD,CAAA;AAUD,MAAMC,cAAc,CAACC,MAAAA,GAAAA;AACnB,IAAA,OAAOA,MAAAA,CAAOC,MAAM,CAClB,CAACC,GAAAA,EAAKC,KAAAA,GAAAA;QACJD,GAAG,CAACC,MAAM,GAAG;YAAEC,IAAAA,EAAM;AAAS,SAAA;QAC9B,OAAOF,GAAAA;AACT,IAAA,CAAA,EACA,EAAC,CAAA;AAEL,CAAA;AAEA,MAAMG,mBAAmB,CAACC,MAAAA,GAAAA;AACxB,IAAA,MAAMC,gBAAgBD,MAAAA,CAAOE,EAAE,CAACC,QAAQ,CAACC,GAAG,CAAC,YAAA,CAAA;AAC7C,IAAA,MAAMC,oBAAAA,GACJ,OAAOJ,aAAAA,KAAkB,QAAA,IAAYA,eAAeK,OAAAA,EAASC,aAAAA;AAC/D,IAAA,MAAMC,iBAAAA,GAAoBR,MAAAA,CAAOS,MAAM,CAACL,GAAG,CAAC,+BAAA,CAAA;;AAG5C,IAAA,IAAIC,wBAAwB,IAAA,EAAM;AAChC,QAAA,OAAOG,iBAAAA,IAAqBjB,sBAAAA;AAC9B,IAAA;;IAGA,IAAIiB,iBAAAA,IAAqBA,qBAAqBH,oBAAAA,EAAsB;QAClE,OAAOG,iBAAAA;AACT,IAAA;;IAGA,OAAOH,oBAAAA;AACT,CAAA;AAEA;;;IAIA,MAAMK,kCAAkC,CAACV,MAAAA,GAAAA;;AAEvC,IAAA,MAAMW,QAAQ,EAAC;IACf,MAAMC,gBAAAA,GAAmBZ,MAAAA,CAAOI,GAAG,CAAC,YAAA,CAAA;AAEpC,IAAA,MAAMS,WAAWpB,WAAAA,CAAYD,aAAAA,CAAAA;AAE7B;;;;AAIC,MACD,MAAMsB,mBAAAA,GAAoE;QACxEC,SAAAA,EAAW;AACb,KAAA;IACA,MAAMC,cAAAA,GAAiBC,MAAAA,CAAOC,IAAI,CAACJ,mBAAAA,CAAAA;IAEnC,MAAMK,YAAAA,GAAe,OAAOC,IAAAA,EAAc,GAAGC,IAAAA,GAAAA;QAC3C,MAAMC,YAAAA,GAAeT,QAAQ,CAACO,IAAAA,CAAK;AAEnC,QAAA,IAAI,CAACE,YAAAA,EAAc;YACjB,OAAO,IAAA;AACT,QAAA;QAEA,MAAMC,QAAAA,GAAWF,IAAI,CAAC,CAAA,CAAE;AAExB,QAAA,MAAMG,YAAAA,GAAexB,MAAAA,CAAOyB,cAAc,CAACrB,GAAG,EAAA,EAAIO,KAAAA;AAElD,QAAA,MAAMe,gBAAAA,GAAmBF,YAAAA,EAAcG,KAAAA,EAAOC,IAAAA,EAAMC,IAAAA,KAAS,OAAA;AAC7D,QAAA,MAAMC,cAAcN,YAAAA,EAAcM,WAAAA;AAClC,QAAA,MAAMC,mBAAmBD,WAAAA,KAAgB,KAAA;AACzC,QAAA,MAAME,OAAOR,YAAAA,EAAcQ,IAAAA;AAE3B,QAAA,MAAMC,eACJH,WAAAA,IAAed,cAAAA,CAAekB,QAAQ,CAACJ,eAClCA,WAAAA,GACDK,SAAAA;QAEN,IAAI,CAACF,YAAAA,KAAiB,CAAEP,oBAAoB,CAACK,gBAAAA,IAAqB,CAACC,IAAG,CAAA,EAAI;YACxE,OAAO,IAAA;AACT,QAAA;QAEA,MAAMI,MAAAA,GAAwCH,gBAAgBH,WAAAA,IAAe,aAAA;QAC7E,MAAMO,IAAAA,GAAO,IAAIC,IAAAA,EAAAA,CAAOC,WAAW,EAAA;;;AAGnC,QAAA,MAAMC,MAAAA,GAASP,YAAAA,GAAe,IAAA,GAAOD,IAAAA,CAAKS,EAAE;QAE5C,IAAInB,YAAAA,CAAaxB,IAAI,KAAK,QAAA,EAAU;;AAElC,YAAA,MAAM4C,WAAAA,GAAc;AAAC,gBAAA,qBAAA;AAAuB,gBAAA;AAAwB,aAAA;AACpE,YAAA,IAAIA,WAAAA,CAAYR,QAAQ,CAACX,QAAAA,EAAUoB,GAAAA,CAAAA,EAAM;gBACvC,OAAO,IAAA;AACT,YAAA;YAEA,OAAO;gBACLC,MAAAA,EAAQxB,IAAAA;AACRiB,gBAAAA,IAAAA;gBACAQ,OAAAA,EAAS;AAAE,oBAAA,GAAGtB,QAAQ;AAAEa,oBAAAA;AAAO,iBAAA;AAC/BI,gBAAAA;AACF,aAAA;AACF,QAAA;AAEA,QAAA,MAAMM,QAAiCb,YAAAA,GACnC;YAAEJ,IAAAA,EAAM;SAAS,GACjB;YACEA,IAAAA,EAAM,YAAA;;;YAGNG,IAAAA,EAAM;AAAES,gBAAAA,EAAAA,EAAIT,KAAKS,EAAE;AAAEM,gBAAAA,KAAAA,EAAOf,KAAKe,KAAK;AAAE3B,gBAAAA,IAAAA,EAAM4B,cAAAA,CAAehB,IAAAA;AAAM;AACrE,SAAA;AAEJ,QAAA,IAAIiB,KAAAA,GAA6C,IAAA;QAEjD,IAAI;YACFA,KAAAA,GAAQ,MAAM3B,YAAAA,CAAa4B,SAAS,CAAA,GAAI7B,IAAAA,CAAAA;AAC1C,QAAA,CAAA,CAAE,OAAO8B,KAAAA,EAAO;;;YAGdnD,MAAAA,CAAOoD,GAAG,CAACD,KAAK,CAAC,CAAC,0CAA0C,EAAE/B,MAAM,EAAE;AAAE+B,gBAAAA;AAAM,aAAA,CAAA;AAChF,QAAA;AAEA,QAAA,MAAM,EACJP,MAAAA,EAAQS,OAAO,EACfhB,IAAAA,EAAMiB,KAAK,EACXR,KAAAA,EAAOS,MAAM,EACbnB,QAAQoB,OAAO,EACf,GAAGC,IAAAA,EACJ,GAAIR,SAAS,EAAC;AACf,QAAA,MAAMJ,UAAUI,KAAAA,GACX;YAAEL,MAAAA,EAAQxB,IAAAA;AAAMiB,YAAAA,IAAAA;AAAMS,YAAAA,KAAAA;AAAOV,YAAAA,MAAAA;AAAQ,YAAA,GAAGqB;SAAK,GAC9C;YAAEb,MAAAA,EAAQxB,IAAAA;AAAMiB,YAAAA,IAAAA;AAAMS,YAAAA,KAAAA;AAAOV,YAAAA;AAAO,SAAA;QAExC,OAAO;YAAEQ,MAAAA,EAAQxB,IAAAA;AAAMiB,YAAAA,IAAAA;AAAMQ,YAAAA,OAAAA;AAASL,YAAAA;AAAO,SAAA;AAC/C,IAAA,CAAA;IAEA,MAAMkB,WAAAA,GAAc,OAAOtC,IAAAA,EAAc,GAAGC,IAAAA,GAAAA;QAC1C,IAAI;YACF,MAAMsC,cAAAA,GAAiB,MAAMxC,YAAAA,CAAaC,IAAAA,EAAAA,GAASC,IAAAA,CAAAA;AAEnD,YAAA,IAAIsC,cAAAA,EAAgB;gBAClB,MAAM/C,gBAAAA,CAAiBgD,SAAS,CAACD,cAAAA,CAAAA;AACnC,YAAA;AACF,QAAA,CAAA,CAAE,OAAOR,KAAAA,EAAO;;;;;YAKdnD,MAAAA,CAAOoD,GAAG,CAACD,KAAK,CAAC,CAAC,uCAAuC,EAAE/B,MAAM,EAAE;AAAE+B,gBAAAA;AAAM,aAAA,CAAA;AAC7E,QAAA;AACF,IAAA,CAAA;IAEA,OAAO;AACL;;;;QAKAU,aAAAA,CAAAA,CACEzC,IAAY,EACZ8B,SAAuD,EAAA;AAEvD,YAAA,IAAIrC,QAAQ,CAACO,IAAAA,CAAK,EAAEtB,SAAS,QAAA,EAAU;AACrC,gBAAA,MAAM,IAAIgE,KAAAA,CACR,CAAC,qCAAqC,EAAE1C,IAAAA,CAAK,kEAAkE,CAAC,CAAA;AAEpH,YAAA;YAEA,IAAIP,QAAQ,CAACO,IAAAA,CAAK,EAAE;gBAClBpB,MAAAA,CAAOoD,GAAG,CAACW,IAAI,CAAC,CAAC,qBAAqB,EAAE3C,IAAAA,CAAK,yCAAyC,CAAC,CAAA;AACzF,YAAA;YAEAP,QAAQ,CAACO,KAAK,GAAG;gBACftB,IAAAA,EAAM,UAAA;gBACNoD,SAAAA,EAAWA;AACb,aAAA;AACF,QAAA,CAAA;QAEA,MAAMc,QAAAA,CAAAA,GAAAA;;YAEJ,IAAI,CAACrD,KAAAA,CAAMsD,mBAAmB,EAAE;;AAE9BtD,gBAAAA,KAAAA,CAAMsD,mBAAmB,GAAGjE,MAAAA,CAAOkE,QAAQ,CAACC,EAAE,CAAC,WAAA,EAAa,IAAA;;AAE1D,oBAAA,IAAI,CAACC,OAAO,EAAA;AACZ,oBAAA,IAAI,CAACJ,QAAQ,EAAA;AACf,gBAAA,CAAA,CAAA;AACF,YAAA;;YAGA,IAAI,CAACrD,KAAAA,CAAM0D,mBAAmB,EAAE;;AAE9B1D,gBAAAA,KAAAA,CAAM0D,mBAAmB,GAAGrE,MAAAA,CAAOkE,QAAQ,CAACC,EAAE,CAAC,WAAA,EAAa,IAAA;;AAE1D,oBAAA,IAAI,CAACC,OAAO,EAAA;AACZ,oBAAA,IAAI,CAACJ,QAAQ,EAAA;AACf,gBAAA,CAAA,CAAA;AACF,YAAA;;;AAIArD,YAAAA,KAAAA,CAAM2D,oBAAoB,GAAGtE,MAAAA,CAAOkE,QAAQ,CAACC,EAAE,CAAC,YAAA,EAAc,IAAA;;;AAG5D,gBAAA,IAAI,CAACC,OAAO,EAAA;AACd,YAAA,CAAA,CAAA;;YAGA,IAAI,CAACpE,OAAOE,EAAE,CAACC,QAAQ,CAACoE,SAAS,CAAC,YAAA,CAAA,EAAe;AAC/C,gBAAA,OAAO,IAAI;AACb,YAAA;;AAGA5D,YAAAA,KAAAA,CAAM6D,mBAAmB,GAAGxE,MAAAA,CAAOkE,QAAQ,CAACO,SAAS,CAACf,WAAAA,CAAAA;;AAGtD,YAAA,MAAMnD,gBAAgBR,gBAAAA,CAAiBC,MAAAA,CAAAA;YAEvCA,MAAAA,CAAO0E,IAAI,CAACC,GAAG,CAAC;gBACdC,sBAAAA,EAAwB;oBACtB,MAAMC,IAAAA,CAAAA,GAAAA;wBACJ,MAAMC,cAAAA,GAAiB,IAAIxC,IAAAA,CAAKA,IAAAA,CAAKyC,GAAG,EAAA,GAAKxE,aAAAA,GAAgB,EAAA,GAAK,EAAA,GAAK,EAAA,GAAK,IAAA,CAAA;wBAC5E,MAAMK,gBAAAA,CAAiBoE,mBAAmB,CAACF,cAAAA,CAAAA;AAC7C,oBAAA,CAAA;oBACAxE,OAAAA,EAAS;AACX;AACF,aAAA,CAAA;AAEA,YAAA,OAAO,IAAI;AACb,QAAA,CAAA;AAEA2E,QAAAA,WAAAA,CAAAA,GAAAA;YACE,IAAItE,KAAAA,CAAM2D,oBAAoB,EAAE;AAC9B3D,gBAAAA,KAAAA,CAAM2D,oBAAoB,EAAA;AAC5B,YAAA;YAEA,IAAI3D,KAAAA,CAAM6D,mBAAmB,EAAE;AAC7B7D,gBAAAA,KAAAA,CAAM6D,mBAAmB,EAAA;AAC3B,YAAA;YAEAxE,MAAAA,CAAO0E,IAAI,CAACQ,MAAM,CAAC,wBAAA,CAAA;AAEnB,YAAA,OAAO,IAAI;AACb,QAAA,CAAA;AAEAd,QAAAA,OAAAA,CAAAA,GAAAA;YACE,OAAO,IAAI,CAACa,WAAW,EAAA;AACzB,QAAA;AACF,KAAA;AACF;;;;"}

package/dist/server/ee/server/src/audit-logs/utils/csv.js

@@ -0,0 +1,33 @@
+'use strict';
+
+const CSV_LINE_SEPARATOR = '\r\n';
+const CSV_BOM = '\uFEFF';
+const FORMULA_TRIGGER_CHARACTERS = [
+    '=',
+    '+',
+    '-',
+    '@',
+    '\t',
+    '\r'
+];
+const escapeCsvValue = (value)=>{
+    if (value === null || value === undefined) {
+        return '';
+    }
+    let stringValue = typeof value === 'string' ? value : String(value);
+    if (typeof value === 'string' && FORMULA_TRIGGER_CHARACTERS.includes(stringValue.charAt(0))) {
+        stringValue = `'${stringValue}`;
+    }
+    if (/[",\r\n]/.test(stringValue)) {
+        return `"${stringValue.replace(/"/g, '""')}"`;
+    }
+    return stringValue;
+};
+const serializeCsvLine = (values)=>{
+    return values.map(escapeCsvValue).join(',') + CSV_LINE_SEPARATOR;
+};
+
+exports.CSV_BOM = CSV_BOM;
+exports.escapeCsvValue = escapeCsvValue;
+exports.serializeCsvLine = serializeCsvLine;
+//# sourceMappingURL=csv.js.map

package/dist/server/ee/server/src/audit-logs/utils/csv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv.js","sources":["../../../../../../../ee/server/src/audit-logs/utils/csv.ts"],"sourcesContent":["const CSV_LINE_SEPARATOR = '\\r\\n';\nconst CSV_BOM = '\\uFEFF';\nconst FORMULA_TRIGGER_CHARACTERS = ['=', '+', '-', '@', '\\t', '\\r'];\n\nconst escapeCsvValue = (value: unknown): string => {\n  if (value === null || value === undefined) {\n    return '';\n  }\n\n  let stringValue = typeof value === 'string' ? value : String(value);\n\n  if (typeof value === 'string' && FORMULA_TRIGGER_CHARACTERS.includes(stringValue.charAt(0))) {\n    stringValue = `'${stringValue}`;\n  }\n\n  if (/[\",\\r\\n]/.test(stringValue)) {\n    return `\"${stringValue.replace(/\"/g, '\"\"')}\"`;\n  }\n\n  return stringValue;\n};\n\nconst serializeCsvLine = (values: unknown[]): string => {\n  return values.map(escapeCsvValue).join(',') + CSV_LINE_SEPARATOR;\n};\n\nexport { escapeCsvValue, serializeCsvLine, CSV_BOM };\n"],"names":["CSV_LINE_SEPARATOR","CSV_BOM","FORMULA_TRIGGER_CHARACTERS","escapeCsvValue","value","undefined","stringValue","String","includes","charAt","test","replace","serializeCsvLine","values","map","join"],"mappings":";;AAAA,MAAMA,kBAAAA,GAAqB,MAAA;AAC3B,MAAMC,OAAAA,GAAU;AAChB,MAAMC,0BAAAA,GAA6B;AAAC,IAAA,GAAA;AAAK,IAAA,GAAA;AAAK,IAAA,GAAA;AAAK,IAAA,GAAA;AAAK,IAAA,IAAA;AAAM,IAAA;AAAK,CAAA;AAEnE,MAAMC,iBAAiB,CAACC,KAAAA,GAAAA;IACtB,IAAIA,KAAAA,KAAU,IAAA,IAAQA,KAAAA,KAAUC,SAAAA,EAAW;QACzC,OAAO,EAAA;AACT,IAAA;AAEA,IAAA,IAAIC,WAAAA,GAAc,OAAOF,KAAAA,KAAU,QAAA,GAAWA,QAAQG,MAAAA,CAAOH,KAAAA,CAAAA;IAE7D,IAAI,OAAOA,UAAU,QAAA,IAAYF,0BAAAA,CAA2BM,QAAQ,CAACF,WAAAA,CAAYG,MAAM,CAAC,CAAA,CAAA,CAAA,EAAK;QAC3FH,WAAAA,GAAc,CAAC,CAAC,EAAEA,WAAAA,CAAAA,CAAa;AACjC,IAAA;IAEA,IAAI,UAAA,CAAWI,IAAI,CAACJ,WAAAA,CAAAA,EAAc;QAChC,OAAO,CAAC,CAAC,EAAEA,WAAAA,CAAYK,OAAO,CAAC,IAAA,EAAM,IAAA,CAAA,CAAM,CAAC,CAAC;AAC/C,IAAA;IAEA,OAAOL,WAAAA;AACT;AAEA,MAAMM,mBAAmB,CAACC,MAAAA,GAAAA;AACxB,IAAA,OAAOA,OAAOC,GAAG,CAACX,cAAAA,CAAAA,CAAgBY,IAAI,CAAC,GAAA,CAAA,GAAOf,kBAAAA;AAChD;;;;;;"}

package/dist/server/ee/server/src/audit-logs/utils/csv.mjs

@@ -0,0 +1,29 @@
+const CSV_LINE_SEPARATOR = '\r\n';
+const CSV_BOM = '\uFEFF';
+const FORMULA_TRIGGER_CHARACTERS = [
+    '=',
+    '+',
+    '-',
+    '@',
+    '\t',
+    '\r'
+];
+const escapeCsvValue = (value)=>{
+    if (value === null || value === undefined) {
+        return '';
+    }
+    let stringValue = typeof value === 'string' ? value : String(value);
+    if (typeof value === 'string' && FORMULA_TRIGGER_CHARACTERS.includes(stringValue.charAt(0))) {
+        stringValue = `'${stringValue}`;
+    }
+    if (/[",\r\n]/.test(stringValue)) {
+        return `"${stringValue.replace(/"/g, '""')}"`;
+    }
+    return stringValue;
+};
+const serializeCsvLine = (values)=>{
+    return values.map(escapeCsvValue).join(',') + CSV_LINE_SEPARATOR;
+};
+
+export { CSV_BOM, escapeCsvValue, serializeCsvLine };
+//# sourceMappingURL=csv.mjs.map

package/dist/server/ee/server/src/audit-logs/utils/csv.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"csv.mjs","sources":["../../../../../../../ee/server/src/audit-logs/utils/csv.ts"],"sourcesContent":["const CSV_LINE_SEPARATOR = '\\r\\n';\nconst CSV_BOM = '\\uFEFF';\nconst FORMULA_TRIGGER_CHARACTERS = ['=', '+', '-', '@', '\\t', '\\r'];\n\nconst escapeCsvValue = (value: unknown): string => {\n  if (value === null || value === undefined) {\n    return '';\n  }\n\n  let stringValue = typeof value === 'string' ? value : String(value);\n\n  if (typeof value === 'string' && FORMULA_TRIGGER_CHARACTERS.includes(stringValue.charAt(0))) {\n    stringValue = `'${stringValue}`;\n  }\n\n  if (/[\",\\r\\n]/.test(stringValue)) {\n    return `\"${stringValue.replace(/\"/g, '\"\"')}\"`;\n  }\n\n  return stringValue;\n};\n\nconst serializeCsvLine = (values: unknown[]): string => {\n  return values.map(escapeCsvValue).join(',') + CSV_LINE_SEPARATOR;\n};\n\nexport { escapeCsvValue, serializeCsvLine, CSV_BOM };\n"],"names":["CSV_LINE_SEPARATOR","CSV_BOM","FORMULA_TRIGGER_CHARACTERS","escapeCsvValue","value","undefined","stringValue","String","includes","charAt","test","replace","serializeCsvLine","values","map","join"],"mappings":"AAAA,MAAMA,kBAAAA,GAAqB,MAAA;AAC3B,MAAMC,OAAAA,GAAU;AAChB,MAAMC,0BAAAA,GAA6B;AAAC,IAAA,GAAA;AAAK,IAAA,GAAA;AAAK,IAAA,GAAA;AAAK,IAAA,GAAA;AAAK,IAAA,IAAA;AAAM,IAAA;AAAK,CAAA;AAEnE,MAAMC,iBAAiB,CAACC,KAAAA,GAAAA;IACtB,IAAIA,KAAAA,KAAU,IAAA,IAAQA,KAAAA,KAAUC,SAAAA,EAAW;QACzC,OAAO,EAAA;AACT,IAAA;AAEA,IAAA,IAAIC,WAAAA,GAAc,OAAOF,KAAAA,KAAU,QAAA,GAAWA,QAAQG,MAAAA,CAAOH,KAAAA,CAAAA;IAE7D,IAAI,OAAOA,UAAU,QAAA,IAAYF,0BAAAA,CAA2BM,QAAQ,CAACF,WAAAA,CAAYG,MAAM,CAAC,CAAA,CAAA,CAAA,EAAK;QAC3FH,WAAAA,GAAc,CAAC,CAAC,EAAEA,WAAAA,CAAAA,CAAa;AACjC,IAAA;IAEA,IAAI,UAAA,CAAWI,IAAI,CAACJ,WAAAA,CAAAA,EAAc;QAChC,OAAO,CAAC,CAAC,EAAEA,WAAAA,CAAYK,OAAO,CAAC,IAAA,EAAM,IAAA,CAAA,CAAM,CAAC,CAAC;AAC/C,IAAA;IAEA,OAAOL,WAAAA;AACT;AAEA,MAAMM,mBAAmB,CAACC,MAAAA,GAAAA;AACxB,IAAA,OAAOA,OAAOC,GAAG,CAACX,cAAAA,CAAAA,CAAgBY,IAAI,CAAC,GAAA,CAAA,GAAOf,kBAAAA;AAChD;;;;"}

package/dist/server/ee/server/src/audit-logs/utils/export-token.js

@@ -0,0 +1,33 @@
+'use strict';
+
+var crypto = require('crypto');
+
+const EXPORT_TOKEN_TTL_MS = 60 * 60 * 1000;
+const serializeExportClaims = (until, issuedAt, filters)=>`${until}:${issuedAt}:${JSON.stringify(filters ?? null)}`;
+const computeSignature = (secret, until, issuedAt, filters)=>crypto.createHmac('sha256', secret).update(serializeExportClaims(until, issuedAt, filters)).digest('hex');
+const signExportToken = (secret, until, filters, issuedAt = Date.now())=>`${issuedAt}.${computeSignature(secret, until, issuedAt, filters)}`;
+const verifyExportToken = (secret, token, until, filters, now = Date.now())=>{
+    if (typeof token !== 'string' || token.length === 0) {
+        return false;
+    }
+    const separator = token.indexOf('.');
+    if (separator <= 0) {
+        return false;
+    }
+    const issuedAt = Number(token.slice(0, separator));
+    if (!Number.isInteger(issuedAt)) {
+        return false;
+    }
+    const expected = Buffer.from(computeSignature(secret, until, issuedAt, filters));
+    const provided = Buffer.from(token.slice(separator + 1));
+    if (provided.length !== expected.length || !crypto.timingSafeEqual(provided, expected)) {
+        return false;
+    }
+    const age = now - issuedAt;
+    return age >= -6e4 && age <= EXPORT_TOKEN_TTL_MS;
+};
+
+exports.EXPORT_TOKEN_TTL_MS = EXPORT_TOKEN_TTL_MS;
+exports.signExportToken = signExportToken;
+exports.verifyExportToken = verifyExportToken;
+//# sourceMappingURL=export-token.js.map

package/dist/server/ee/server/src/audit-logs/utils/export-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-token.js","sources":["../../../../../../../ee/server/src/audit-logs/utils/export-token.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from 'crypto';\n\nconst EXPORT_TOKEN_TTL_MS = 60 * 60 * 1000;\nconst EXPORT_TOKEN_CLOCK_SKEW_MS = 60 * 1000;\n\nconst serializeExportClaims = (until: number, issuedAt: number, filters: unknown) =>\n  `${until}:${issuedAt}:${JSON.stringify(filters ?? null)}`;\n\nconst computeSignature = (secret: string, until: number, issuedAt: number, filters: unknown) =>\n  createHmac('sha256', secret)\n    .update(serializeExportClaims(until, issuedAt, filters))\n    .digest('hex');\n\nconst signExportToken = (\n  secret: string,\n  until: number,\n  filters: unknown,\n  issuedAt = Date.now()\n): string => `${issuedAt}.${computeSignature(secret, until, issuedAt, filters)}`;\n\nconst verifyExportToken = (\n  secret: string,\n  token: unknown,\n  until: number,\n  filters: unknown,\n  now = Date.now()\n): boolean => {\n  if (typeof token !== 'string' || token.length === 0) {\n    return false;\n  }\n\n  const separator = token.indexOf('.');\n  if (separator <= 0) {\n    return false;\n  }\n\n  const issuedAt = Number(token.slice(0, separator));\n  if (!Number.isInteger(issuedAt)) {\n    return false;\n  }\n\n  const expected = Buffer.from(computeSignature(secret, until, issuedAt, filters));\n  const provided = Buffer.from(token.slice(separator + 1));\n\n  if (provided.length !== expected.length || !timingSafeEqual(provided, expected)) {\n    return false;\n  }\n\n  const age = now - issuedAt;\n\n  return age >= -EXPORT_TOKEN_CLOCK_SKEW_MS && age <= EXPORT_TOKEN_TTL_MS;\n};\n\nexport { signExportToken, verifyExportToken, EXPORT_TOKEN_TTL_MS };\n"],"names":["EXPORT_TOKEN_TTL_MS","serializeExportClaims","until","issuedAt","filters","JSON","stringify","computeSignature","secret","createHmac","update","digest","signExportToken","Date","now","verifyExportToken","token","length","separator","indexOf","Number","slice","isInteger","expected","Buffer","from","provided","timingSafeEqual","age","EXPORT_TOKEN_CLOCK_SKEW_MS"],"mappings":";;;;AAEA,MAAMA,mBAAAA,GAAsB,KAAK,EAAA,GAAK;AAGtC,MAAMC,wBAAwB,CAACC,KAAAA,EAAeC,QAAAA,EAAkBC,OAAAA,GAC9D,GAAGF,KAAAA,CAAM,CAAC,EAAEC,QAAAA,CAAS,CAAC,EAAEE,IAAAA,CAAKC,SAAS,CAACF,WAAW,IAAA,CAAA,CAAA,CAAO;AAE3D,MAAMG,mBAAmB,CAACC,MAAAA,EAAgBN,KAAAA,EAAeC,QAAAA,EAAkBC,UACzEK,iBAAAA,CAAW,QAAA,EAAUD,MAAAA,CAAAA,CAClBE,MAAM,CAACT,qBAAAA,CAAsBC,KAAAA,EAAOC,QAAAA,EAAUC,OAAAA,CAAAA,CAAAA,CAC9CO,MAAM,CAAC,KAAA,CAAA;AAEZ,MAAMC,kBAAkB,CACtBJ,MAAAA,EACAN,OACAE,OAAAA,EACAD,QAAAA,GAAWU,KAAKC,GAAG,EAAE,GACV,CAAA,EAAGX,SAAS,CAAC,EAAEI,iBAAiBC,MAAAA,EAAQN,KAAAA,EAAOC,UAAUC,OAAAA,CAAAA,CAAAA;AAEtE,MAAMW,iBAAAA,GAAoB,CACxBP,MAAAA,EACAQ,KAAAA,EACAd,OACAE,OAAAA,EACAU,GAAAA,GAAMD,IAAAA,CAAKC,GAAG,EAAE,GAAA;AAEhB,IAAA,IAAI,OAAOE,KAAAA,KAAU,QAAA,IAAYA,KAAAA,CAAMC,MAAM,KAAK,CAAA,EAAG;QACnD,OAAO,KAAA;AACT,IAAA;IAEA,MAAMC,SAAAA,GAAYF,KAAAA,CAAMG,OAAO,CAAC,GAAA,CAAA;AAChC,IAAA,IAAID,aAAa,CAAA,EAAG;QAClB,OAAO,KAAA;AACT,IAAA;AAEA,IAAA,MAAMf,QAAAA,GAAWiB,MAAAA,CAAOJ,KAAAA,CAAMK,KAAK,CAAC,CAAA,EAAGH,SAAAA,CAAAA,CAAAA;AACvC,IAAA,IAAI,CAACE,MAAAA,CAAOE,SAAS,CAACnB,QAAAA,CAAAA,EAAW;QAC/B,OAAO,KAAA;AACT,IAAA;AAEA,IAAA,MAAMoB,WAAWC,MAAAA,CAAOC,IAAI,CAAClB,gBAAAA,CAAiBC,MAAAA,EAAQN,OAAOC,QAAAA,EAAUC,OAAAA,CAAAA,CAAAA;AACvE,IAAA,MAAMsB,WAAWF,MAAAA,CAAOC,IAAI,CAACT,KAAAA,CAAMK,KAAK,CAACH,SAAAA,GAAY,CAAA,CAAA,CAAA;IAErD,IAAIQ,QAAAA,CAAST,MAAM,KAAKM,QAAAA,CAASN,MAAM,IAAI,CAACU,sBAAAA,CAAgBD,QAAAA,EAAUH,QAAAA,CAAAA,EAAW;QAC/E,OAAO,KAAA;AACT,IAAA;AAEA,IAAA,MAAMK,MAAMd,GAAAA,GAAMX,QAAAA;IAElB,OAAOyB,GAAAA,IAAO,IAACC,IAA8BD,GAAAA,IAAO5B,mBAAAA;AACtD;;;;;;"}

package/dist/server/ee/server/src/audit-logs/utils/export-token.mjs

@@ -0,0 +1,29 @@
+import { timingSafeEqual, createHmac } from 'crypto';
+
+const EXPORT_TOKEN_TTL_MS = 60 * 60 * 1000;
+const serializeExportClaims = (until, issuedAt, filters)=>`${until}:${issuedAt}:${JSON.stringify(filters ?? null)}`;
+const computeSignature = (secret, until, issuedAt, filters)=>createHmac('sha256', secret).update(serializeExportClaims(until, issuedAt, filters)).digest('hex');
+const signExportToken = (secret, until, filters, issuedAt = Date.now())=>`${issuedAt}.${computeSignature(secret, until, issuedAt, filters)}`;
+const verifyExportToken = (secret, token, until, filters, now = Date.now())=>{
+    if (typeof token !== 'string' || token.length === 0) {
+        return false;
+    }
+    const separator = token.indexOf('.');
+    if (separator <= 0) {
+        return false;
+    }
+    const issuedAt = Number(token.slice(0, separator));
+    if (!Number.isInteger(issuedAt)) {
+        return false;
+    }
+    const expected = Buffer.from(computeSignature(secret, until, issuedAt, filters));
+    const provided = Buffer.from(token.slice(separator + 1));
+    if (provided.length !== expected.length || !timingSafeEqual(provided, expected)) {
+        return false;
+    }
+    const age = now - issuedAt;
+    return age >= -6e4 && age <= EXPORT_TOKEN_TTL_MS;
+};
+
+export { EXPORT_TOKEN_TTL_MS, signExportToken, verifyExportToken };
+//# sourceMappingURL=export-token.mjs.map

package/dist/server/ee/server/src/audit-logs/utils/export-token.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"export-token.mjs","sources":["../../../../../../../ee/server/src/audit-logs/utils/export-token.ts"],"sourcesContent":["import { createHmac, timingSafeEqual } from 'crypto';\n\nconst EXPORT_TOKEN_TTL_MS = 60 * 60 * 1000;\nconst EXPORT_TOKEN_CLOCK_SKEW_MS = 60 * 1000;\n\nconst serializeExportClaims = (until: number, issuedAt: number, filters: unknown) =>\n  `${until}:${issuedAt}:${JSON.stringify(filters ?? null)}`;\n\nconst computeSignature = (secret: string, until: number, issuedAt: number, filters: unknown) =>\n  createHmac('sha256', secret)\n    .update(serializeExportClaims(until, issuedAt, filters))\n    .digest('hex');\n\nconst signExportToken = (\n  secret: string,\n  until: number,\n  filters: unknown,\n  issuedAt = Date.now()\n): string => `${issuedAt}.${computeSignature(secret, until, issuedAt, filters)}`;\n\nconst verifyExportToken = (\n  secret: string,\n  token: unknown,\n  until: number,\n  filters: unknown,\n  now = Date.now()\n): boolean => {\n  if (typeof token !== 'string' || token.length === 0) {\n    return false;\n  }\n\n  const separator = token.indexOf('.');\n  if (separator <= 0) {\n    return false;\n  }\n\n  const issuedAt = Number(token.slice(0, separator));\n  if (!Number.isInteger(issuedAt)) {\n    return false;\n  }\n\n  const expected = Buffer.from(computeSignature(secret, until, issuedAt, filters));\n  const provided = Buffer.from(token.slice(separator + 1));\n\n  if (provided.length !== expected.length || !timingSafeEqual(provided, expected)) {\n    return false;\n  }\n\n  const age = now - issuedAt;\n\n  return age >= -EXPORT_TOKEN_CLOCK_SKEW_MS && age <= EXPORT_TOKEN_TTL_MS;\n};\n\nexport { signExportToken, verifyExportToken, EXPORT_TOKEN_TTL_MS };\n"],"names":["EXPORT_TOKEN_TTL_MS","serializeExportClaims","until","issuedAt","filters","JSON","stringify","computeSignature","secret","createHmac","update","digest","signExportToken","Date","now","verifyExportToken","token","length","separator","indexOf","Number","slice","isInteger","expected","Buffer","from","provided","timingSafeEqual","age","EXPORT_TOKEN_CLOCK_SKEW_MS"],"mappings":";;AAEA,MAAMA,mBAAAA,GAAsB,KAAK,EAAA,GAAK;AAGtC,MAAMC,wBAAwB,CAACC,KAAAA,EAAeC,QAAAA,EAAkBC,OAAAA,GAC9D,GAAGF,KAAAA,CAAM,CAAC,EAAEC,QAAAA,CAAS,CAAC,EAAEE,IAAAA,CAAKC,SAAS,CAACF,WAAW,IAAA,CAAA,CAAA,CAAO;AAE3D,MAAMG,mBAAmB,CAACC,MAAAA,EAAgBN,KAAAA,EAAeC,QAAAA,EAAkBC,UACzEK,UAAAA,CAAW,QAAA,EAAUD,MAAAA,CAAAA,CAClBE,MAAM,CAACT,qBAAAA,CAAsBC,KAAAA,EAAOC,QAAAA,EAAUC,OAAAA,CAAAA,CAAAA,CAC9CO,MAAM,CAAC,KAAA,CAAA;AAEZ,MAAMC,kBAAkB,CACtBJ,MAAAA,EACAN,OACAE,OAAAA,EACAD,QAAAA,GAAWU,KAAKC,GAAG,EAAE,GACV,CAAA,EAAGX,SAAS,CAAC,EAAEI,iBAAiBC,MAAAA,EAAQN,KAAAA,EAAOC,UAAUC,OAAAA,CAAAA,CAAAA;AAEtE,MAAMW,iBAAAA,GAAoB,CACxBP,MAAAA,EACAQ,KAAAA,EACAd,OACAE,OAAAA,EACAU,GAAAA,GAAMD,IAAAA,CAAKC,GAAG,EAAE,GAAA;AAEhB,IAAA,IAAI,OAAOE,KAAAA,KAAU,QAAA,IAAYA,KAAAA,CAAMC,MAAM,KAAK,CAAA,EAAG;QACnD,OAAO,KAAA;AACT,IAAA;IAEA,MAAMC,SAAAA,GAAYF,KAAAA,CAAMG,OAAO,CAAC,GAAA,CAAA;AAChC,IAAA,IAAID,aAAa,CAAA,EAAG;QAClB,OAAO,KAAA;AACT,IAAA;AAEA,IAAA,MAAMf,QAAAA,GAAWiB,MAAAA,CAAOJ,KAAAA,CAAMK,KAAK,CAAC,CAAA,EAAGH,SAAAA,CAAAA,CAAAA;AACvC,IAAA,IAAI,CAACE,MAAAA,CAAOE,SAAS,CAACnB,QAAAA,CAAAA,EAAW;QAC/B,OAAO,KAAA;AACT,IAAA;AAEA,IAAA,MAAMoB,WAAWC,MAAAA,CAAOC,IAAI,CAAClB,gBAAAA,CAAiBC,MAAAA,EAAQN,OAAOC,QAAAA,EAAUC,OAAAA,CAAAA,CAAAA;AACvE,IAAA,MAAMsB,WAAWF,MAAAA,CAAOC,IAAI,CAACT,KAAAA,CAAMK,KAAK,CAACH,SAAAA,GAAY,CAAA,CAAA,CAAA;IAErD,IAAIQ,QAAAA,CAAST,MAAM,KAAKM,QAAAA,CAASN,MAAM,IAAI,CAACU,eAAAA,CAAgBD,QAAAA,EAAUH,QAAAA,CAAAA,EAAW;QAC/E,OAAO,KAAA;AACT,IAAA;AAEA,IAAA,MAAMK,MAAMd,GAAAA,GAAMX,QAAAA;IAElB,OAAOyB,GAAAA,IAAO,IAACC,IAA8BD,GAAAA,IAAO5B,mBAAAA;AACtD;;;;"}

package/dist/server/ee/server/src/audit-logs/utils.js

@@ -0,0 +1,14 @@
+'use strict';
+
+/** How an admin user is named across audit logs */ const getDisplayName = (user)=>{
+    if (user.username) {
+        return user.username;
+    }
+    if (user.firstname && user.lastname) {
+        return `${user.firstname} ${user.lastname}`;
+    }
+    return user.email;
+};
+
+exports.getDisplayName = getDisplayName;
+//# sourceMappingURL=utils.js.map

package/dist/server/ee/server/src/audit-logs/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sources":["../../../../../../ee/server/src/audit-logs/utils.ts"],"sourcesContent":["interface AdminUserLike {\n  username?: string | null;\n  firstname?: string | null;\n  lastname?: string | null;\n  email: string;\n}\n\n/** How an admin user is named across audit logs */\nconst getDisplayName = (user: AdminUserLike): string => {\n  if (user.username) {\n    return user.username;\n  }\n\n  if (user.firstname && user.lastname) {\n    return `${user.firstname} ${user.lastname}`;\n  }\n\n  return user.email;\n};\n\nexport { getDisplayName };\n"],"names":["getDisplayName","user","username","firstname","lastname","email"],"mappings":";;AAOA,oDACA,MAAMA,cAAAA,GAAiB,CAACC,IAAAA,GAAAA;IACtB,IAAIA,IAAAA,CAAKC,QAAQ,EAAE;AACjB,QAAA,OAAOD,KAAKC,QAAQ;AACtB,IAAA;AAEA,IAAA,IAAID,IAAAA,CAAKE,SAAS,IAAIF,IAAAA,CAAKG,QAAQ,EAAE;QACnC,OAAO,CAAA,EAAGH,KAAKE,SAAS,CAAC,CAAC,EAAEF,IAAAA,CAAKG,QAAQ,CAAA,CAAE;AAC7C,IAAA;AAEA,IAAA,OAAOH,KAAKI,KAAK;AACnB;;;;"}

package/dist/server/ee/server/src/audit-logs/utils.mjs

@@ -0,0 +1,12 @@
+/** How an admin user is named across audit logs */ const getDisplayName = (user)=>{
+    if (user.username) {
+        return user.username;
+    }
+    if (user.firstname && user.lastname) {
+        return `${user.firstname} ${user.lastname}`;
+    }
+    return user.email;
+};
+
+export { getDisplayName };
+//# sourceMappingURL=utils.mjs.map

package/dist/server/ee/server/src/audit-logs/utils.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.mjs","sources":["../../../../../../ee/server/src/audit-logs/utils.ts"],"sourcesContent":["interface AdminUserLike {\n  username?: string | null;\n  firstname?: string | null;\n  lastname?: string | null;\n  email: string;\n}\n\n/** How an admin user is named across audit logs */\nconst getDisplayName = (user: AdminUserLike): string => {\n  if (user.username) {\n    return user.username;\n  }\n\n  if (user.firstname && user.lastname) {\n    return `${user.firstname} ${user.lastname}`;\n  }\n\n  return user.email;\n};\n\nexport { getDisplayName };\n"],"names":["getDisplayName","user","username","firstname","lastname","email"],"mappings":"AAOA,oDACA,MAAMA,cAAAA,GAAiB,CAACC,IAAAA,GAAAA;IACtB,IAAIA,IAAAA,CAAKC,QAAQ,EAAE;AACjB,QAAA,OAAOD,KAAKC,QAAQ;AACtB,IAAA;AAEA,IAAA,IAAID,IAAAA,CAAKE,SAAS,IAAIF,IAAAA,CAAKG,QAAQ,EAAE;QACnC,OAAO,CAAA,EAAGH,KAAKE,SAAS,CAAC,CAAC,EAAEF,IAAAA,CAAKG,QAAQ,CAAA,CAAE;AAC7C,IAAA;AAEA,IAAA,OAAOH,KAAKI,KAAK;AACnB;;;;"}

package/dist/server/ee/server/src/audit-logs/validation/audit-logs.js

@@ -1,6 +1,7 @@
 'use strict';
 
 var utils = require('@strapi/utils');
+var auditLogExport = require('../../../../../shared/utils/audit-log-export.js');
 
 const ALLOWED_SORT_STRINGS = [
     'action:ASC',
@@ -17,13 +18,23 @@ const validateFindManyUsersSchema = utils.yup.object().shape({
     page: utils.yup.number().integer().min(1),
     pageSize: utils.yup.number().integer().min(1).max(100)
 }).required();
+const validateExportSchema = utils.yup.object().shape({
+    cursor: utils.yup.number().integer().min(1),
+    pageSize: utils.yup.number().integer().min(1).max(auditLogExport.AUDIT_LOGS_EXPORT_PART_MAX_ROWS),
+    until: utils.yup.number().integer().min(0),
+    token: utils.yup.string()
+}).required();
 const validateFindMany = utils.validateYupSchema(validateFindManySchema, {
     strict: false
 });
 const validateFindManyUsers = utils.validateYupSchema(validateFindManyUsersSchema, {
     strict: false
 });
+const validateExport = utils.validateYupSchema(validateExportSchema, {
+    strict: false
+});
 
+exports.validateExport = validateExport;
 exports.validateFindMany = validateFindMany;
 exports.validateFindManyUsers = validateFindManyUsers;
 //# sourceMappingURL=audit-logs.js.map

package/dist/server/ee/server/src/audit-logs/validation/audit-logs.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-logs.js","sources":["../../../../../../../ee/server/src/audit-logs/validation/audit-logs.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\n\nconst ALLOWED_SORT_STRINGS = ['action:ASC', 'action:DESC', 'date:ASC', 'date:DESC'];\n\nconst validateFindManySchema = yup\n  .object()\n  .shape({\n    page: yup.number().integer().min(1),\n    pageSize: yup.number().integer().min(1).max(100),\n    sort: yup.mixed().oneOf(ALLOWED_SORT_STRINGS),\n  })\n  .required();\n\nconst validateFindManyUsersSchema = yup\n  .object()\n  .shape({\n    page: yup.number().integer().min(1),\n    pageSize: yup.number().integer().min(1).max(100),\n  })\n  .required();\n\nexport const validateFindMany = validateYupSchema(validateFindManySchema, { strict: false });\nexport const validateFindManyUsers = validateYupSchema(validateFindManyUsersSchema, {\n  strict: false,\n});\n\nexport default {\n  validateFindMany,\n  validateFindManyUsers,\n};\n"],"names":["ALLOWED_SORT_STRINGS","validateFindManySchema","yup","object","shape","page","number","integer","min","pageSize","max","sort","mixed","oneOf","required","validateFindManyUsersSchema","validateFindMany","validateYupSchema","strict","validateFindManyUsers"],"mappings":";;;;AAEA,MAAMA,oBAAAA,GAAuB;AAAC,IAAA,YAAA;AAAc,IAAA,aAAA;AAAe,IAAA,UAAA;AAAY,IAAA;AAAY,CAAA;AAEnF,MAAMC,sBAAAA,GAAyBC,SAAAA,CAC5BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,UAAII,MAAM,EAAA,CAAGC,OAAO,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA;IACjCC,QAAAA,EAAUP,SAAAA,CAAII,MAAM,EAAA,CAAGC,OAAO,GAAGC,GAAG,CAAC,CAAA,CAAA,CAAGE,GAAG,CAAC,GAAA,CAAA;AAC5CC,IAAAA,IAAAA,EAAMT,SAAAA,CAAIU,KAAK,EAAA,CAAGC,KAAK,CAACb,oBAAAA;AAC1B,CAAA,CAAA,CACCc,QAAQ,EAAA;AAEX,MAAMC,2BAAAA,GAA8Bb,SAAAA,CACjCC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,UAAII,MAAM,EAAA,CAAGC,OAAO,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA;IACjCC,QAAAA,EAAUP,SAAAA,CAAII,MAAM,EAAA,CAAGC,OAAO,GAAGC,GAAG,CAAC,CAAA,CAAA,CAAGE,GAAG,CAAC,GAAA;AAC9C,CAAA,CAAA,CACCI,QAAQ,EAAA;AAEJ,MAAME,gBAAAA,GAAmBC,uBAAAA,CAAkBhB,sBAAAA,EAAwB;IAAEiB,MAAAA,EAAQ;AAAM,CAAA;AACnF,MAAMC,qBAAAA,GAAwBF,uBAAAA,CAAkBF,2BAAAA,EAA6B;IAClFG,MAAAA,EAAQ;AACV,CAAA;;;;;"}
+{"version":3,"file":"audit-logs.js","sources":["../../../../../../../ee/server/src/audit-logs/validation/audit-logs.ts"],"sourcesContent":["import { yup, validateYupSchema } from '@strapi/utils';\n\nimport { AUDIT_LOGS_EXPORT_PART_MAX_ROWS } from '../../../../../shared/utils/audit-log-export';\n\nconst ALLOWED_SORT_STRINGS = ['action:ASC', 'action:DESC', 'date:ASC', 'date:DESC'];\n\nconst validateFindManySchema = yup\n  .object()\n  .shape({\n    page: yup.number().integer().min(1),\n    pageSize: yup.number().integer().min(1).max(100),\n    sort: yup.mixed().oneOf(ALLOWED_SORT_STRINGS),\n  })\n  .required();\n\nconst validateFindManyUsersSchema = yup\n  .object()\n  .shape({\n    page: yup.number().integer().min(1),\n    pageSize: yup.number().integer().min(1).max(100),\n  })\n  .required();\n\nconst validateExportSchema = yup\n  .object()\n  .shape({\n    cursor: yup.number().integer().min(1),\n    pageSize: yup.number().integer().min(1).max(AUDIT_LOGS_EXPORT_PART_MAX_ROWS),\n    until: yup.number().integer().min(0),\n    token: yup.string(),\n  })\n  .required();\n\nexport const validateFindMany = validateYupSchema(validateFindManySchema, { strict: false });\nexport const validateFindManyUsers = validateYupSchema(validateFindManyUsersSchema, {\n  strict: false,\n});\nexport const validateExport = validateYupSchema(validateExportSchema, { strict: false });\n\nexport default {\n  validateFindMany,\n  validateFindManyUsers,\n  validateExport,\n};\n"],"names":["ALLOWED_SORT_STRINGS","validateFindManySchema","yup","object","shape","page","number","integer","min","pageSize","max","sort","mixed","oneOf","required","validateFindManyUsersSchema","validateExportSchema","cursor","AUDIT_LOGS_EXPORT_PART_MAX_ROWS","until","token","string","validateFindMany","validateYupSchema","strict","validateFindManyUsers","validateExport"],"mappings":";;;;;AAIA,MAAMA,oBAAAA,GAAuB;AAAC,IAAA,YAAA;AAAc,IAAA,aAAA;AAAe,IAAA,UAAA;AAAY,IAAA;AAAY,CAAA;AAEnF,MAAMC,sBAAAA,GAAyBC,SAAAA,CAC5BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,UAAII,MAAM,EAAA,CAAGC,OAAO,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA;IACjCC,QAAAA,EAAUP,SAAAA,CAAII,MAAM,EAAA,CAAGC,OAAO,GAAGC,GAAG,CAAC,CAAA,CAAA,CAAGE,GAAG,CAAC,GAAA,CAAA;AAC5CC,IAAAA,IAAAA,EAAMT,SAAAA,CAAIU,KAAK,EAAA,CAAGC,KAAK,CAACb,oBAAAA;AAC1B,CAAA,CAAA,CACCc,QAAQ,EAAA;AAEX,MAAMC,2BAAAA,GAA8Bb,SAAAA,CACjCC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLC,IAAAA,IAAAA,EAAMH,UAAII,MAAM,EAAA,CAAGC,OAAO,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA;IACjCC,QAAAA,EAAUP,SAAAA,CAAII,MAAM,EAAA,CAAGC,OAAO,GAAGC,GAAG,CAAC,CAAA,CAAA,CAAGE,GAAG,CAAC,GAAA;AAC9C,CAAA,CAAA,CACCI,QAAQ,EAAA;AAEX,MAAME,oBAAAA,GAAuBd,SAAAA,CAC1BC,MAAM,EAAA,CACNC,KAAK,CAAC;AACLa,IAAAA,MAAAA,EAAQf,UAAII,MAAM,EAAA,CAAGC,OAAO,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA;IACnCC,QAAAA,EAAUP,SAAAA,CAAII,MAAM,EAAA,CAAGC,OAAO,GAAGC,GAAG,CAAC,CAAA,CAAA,CAAGE,GAAG,CAACQ,8CAAAA,CAAAA;AAC5CC,IAAAA,KAAAA,EAAOjB,UAAII,MAAM,EAAA,CAAGC,OAAO,EAAA,CAAGC,GAAG,CAAC,CAAA,CAAA;AAClCY,IAAAA,KAAAA,EAAOlB,UAAImB,MAAM;AACnB,CAAA,CAAA,CACCP,QAAQ,EAAA;AAEJ,MAAMQ,gBAAAA,GAAmBC,uBAAAA,CAAkBtB,sBAAAA,EAAwB;IAAEuB,MAAAA,EAAQ;AAAM,CAAA;AACnF,MAAMC,qBAAAA,GAAwBF,uBAAAA,CAAkBR,2BAAAA,EAA6B;IAClFS,MAAAA,EAAQ;AACV,CAAA;AACO,MAAME,cAAAA,GAAiBH,uBAAAA,CAAkBP,oBAAAA,EAAsB;IAAEQ,MAAAA,EAAQ;AAAM,CAAA;;;;;;"}

package/dist/server/ee/server/src/audit-logs/validation/audit-logs.mjs

@@ -1,4 +1,5 @@
 import { yup, validateYupSchema } from '@strapi/utils';
+import { AUDIT_LOGS_EXPORT_PART_MAX_ROWS } from '../../../../../shared/utils/audit-log-export.mjs';
 
 const ALLOWED_SORT_STRINGS = [
     'action:ASC',
@@ -15,12 +16,21 @@ const validateFindManyUsersSchema = yup.object().shape({
     page: yup.number().integer().min(1),
     pageSize: yup.number().integer().min(1).max(100)
 }).required();
+const validateExportSchema = yup.object().shape({
+    cursor: yup.number().integer().min(1),
+    pageSize: yup.number().integer().min(1).max(AUDIT_LOGS_EXPORT_PART_MAX_ROWS),
+    until: yup.number().integer().min(0),
+    token: yup.string()
+}).required();
 const validateFindMany = validateYupSchema(validateFindManySchema, {
     strict: false
 });
 const validateFindManyUsers = validateYupSchema(validateFindManyUsersSchema, {
     strict: false
 });
+const validateExport = validateYupSchema(validateExportSchema, {
+    strict: false
+});
 
-export { validateFindMany, validateFindManyUsers };
+export { validateExport, validateFindMany, validateFindManyUsers };
 //# sourceMappingURL=audit-logs.mjs.map