@strapi/admin 5.52.3 → 5.53.0

package/dist/server/ee/server/src/audit-logs/routes/audit-logs.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-logs.js","sources":["../../../../../../../ee/server/src/audit-logs/routes/audit-logs.ts"],"sourcesContent":["import { enableFeatureMiddleware } from '../../routes/utils';\n\nconst getRouteConfig = () => ({\n  middlewares: [enableFeatureMiddleware('audit-logs')],\n  policies: [\n    'admin::isAuthenticatedAdmin',\n    {\n      name: 'admin::hasPermissions',\n      config: {\n        actions: ['admin::audit-logs.read'],\n      },\n    },\n  ],\n});\n\nexport default {\n  type: 'admin',\n  routes: [\n    {\n      method: 'GET',\n      path: '/audit-logs',\n      handler: 'audit-logs.findMany',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/users',\n      handler: 'audit-logs.findManyUsers',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/:id',\n      handler: 'audit-logs.findOne',\n      config: getRouteConfig(),\n    },\n  ],\n};\n"],"names":["getRouteConfig","middlewares","enableFeatureMiddleware","policies","name","config","actions","type","routes","method","path","handler"],"mappings":";;;;AAEA,MAAMA,cAAAA,GAAiB,KAAO;QAC5BC,WAAAA,EAAa;YAACC,6BAAAA,CAAwB,YAAA;AAAc,SAAA;QACpDC,QAAAA,EAAU;AACR,YAAA,6BAAA;AACA,YAAA;gBACEC,IAAAA,EAAM,uBAAA;gBACNC,MAAAA,EAAQ;oBACNC,OAAAA,EAAS;AAAC,wBAAA;AAAyB;AACrC;AACF;AACD;KACH,CAAA;AAEA,sBAAe;IACbC,IAAAA,EAAM,OAAA;IACNC,MAAAA,EAAQ;AACN,QAAA;YACEC,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,aAAA;YACNC,OAAAA,EAAS,qBAAA;YACTN,MAAAA,EAAQL,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,mBAAA;YACNC,OAAAA,EAAS,0BAAA;YACTN,MAAAA,EAAQL,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,iBAAA;YACNC,OAAAA,EAAS,oBAAA;YACTN,MAAAA,EAAQL,cAAAA;AACV;AACD;AACH,CAAA;;;;"}
+{"version":3,"file":"audit-logs.js","sources":["../../../../../../../ee/server/src/audit-logs/routes/audit-logs.ts"],"sourcesContent":["import { enableFeatureMiddleware } from '../../routes/utils';\n\nconst getRouteConfig = (actions: string[] = ['admin::audit-logs.read']) => ({\n  middlewares: [enableFeatureMiddleware('audit-logs')],\n  policies: [\n    'admin::isAuthenticatedAdmin',\n    {\n      name: 'admin::hasPermissions',\n      config: {\n        actions,\n      },\n    },\n  ],\n});\n\nexport default {\n  type: 'admin',\n  routes: [\n    {\n      method: 'GET',\n      path: '/audit-logs',\n      handler: 'audit-logs.findMany',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/users',\n      handler: 'audit-logs.findManyUsers',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/export',\n      handler: 'audit-logs.export',\n      config: getRouteConfig(['admin::audit-logs.read', 'admin::audit-logs.export']),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/:id',\n      handler: 'audit-logs.findOne',\n      config: getRouteConfig(),\n    },\n  ],\n};\n"],"names":["getRouteConfig","actions","middlewares","enableFeatureMiddleware","policies","name","config","type","routes","method","path","handler"],"mappings":";;;;AAEA,MAAMA,cAAAA,GAAiB,CAACC,OAAAA,GAAoB;AAAC,IAAA;AAAyB,CAAA,IAAM;QAC1EC,WAAAA,EAAa;YAACC,6BAAAA,CAAwB,YAAA;AAAc,SAAA;QACpDC,QAAAA,EAAU;AACR,YAAA,6BAAA;AACA,YAAA;gBACEC,IAAAA,EAAM,uBAAA;gBACNC,MAAAA,EAAQ;AACNL,oBAAAA;AACF;AACF;AACD;KACH,CAAA;AAEA,sBAAe;IACbM,IAAAA,EAAM,OAAA;IACNC,MAAAA,EAAQ;AACN,QAAA;YACEC,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,aAAA;YACNC,OAAAA,EAAS,qBAAA;YACTL,MAAAA,EAAQN,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,mBAAA;YACNC,OAAAA,EAAS,0BAAA;YACTL,MAAAA,EAAQN,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,oBAAA;YACNC,OAAAA,EAAS,mBAAA;AACTL,YAAAA,MAAAA,EAAQN,cAAAA,CAAe;AAAC,gBAAA,wBAAA;AAA0B,gBAAA;AAA2B,aAAA;AAC/E,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,iBAAA;YACNC,OAAAA,EAAS,oBAAA;YACTL,MAAAA,EAAQN,cAAAA;AACV;AACD;AACH,CAAA;;;;"}

package/dist/server/ee/server/src/audit-logs/routes/audit-logs.mjs

@@ -1,6 +1,8 @@
 import { enableFeatureMiddleware } from '../../routes/utils.mjs';
 
-const getRouteConfig = ()=>({
+const getRouteConfig = (actions = [
+    'admin::audit-logs.read'
+])=>({
         middlewares: [
             enableFeatureMiddleware('audit-logs')
         ],
@@ -9,9 +11,7 @@ const getRouteConfig = ()=>({
             {
                 name: 'admin::hasPermissions',
                 config: {
-                    actions: [
-                        'admin::audit-logs.read'
-                    ]
+                    actions
                 }
             }
         ]
@@ -31,6 +31,15 @@ var auditLogsRoutes = {
             handler: 'audit-logs.findManyUsers',
             config: getRouteConfig()
         },
+        {
+            method: 'GET',
+            path: '/audit-logs/export',
+            handler: 'audit-logs.export',
+            config: getRouteConfig([
+                'admin::audit-logs.read',
+                'admin::audit-logs.export'
+            ])
+        },
         {
             method: 'GET',
             path: '/audit-logs/:id',

package/dist/server/ee/server/src/audit-logs/routes/audit-logs.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"audit-logs.mjs","sources":["../../../../../../../ee/server/src/audit-logs/routes/audit-logs.ts"],"sourcesContent":["import { enableFeatureMiddleware } from '../../routes/utils';\n\nconst getRouteConfig = () => ({\n  middlewares: [enableFeatureMiddleware('audit-logs')],\n  policies: [\n    'admin::isAuthenticatedAdmin',\n    {\n      name: 'admin::hasPermissions',\n      config: {\n        actions: ['admin::audit-logs.read'],\n      },\n    },\n  ],\n});\n\nexport default {\n  type: 'admin',\n  routes: [\n    {\n      method: 'GET',\n      path: '/audit-logs',\n      handler: 'audit-logs.findMany',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/users',\n      handler: 'audit-logs.findManyUsers',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/:id',\n      handler: 'audit-logs.findOne',\n      config: getRouteConfig(),\n    },\n  ],\n};\n"],"names":["getRouteConfig","middlewares","enableFeatureMiddleware","policies","name","config","actions","type","routes","method","path","handler"],"mappings":";;AAEA,MAAMA,cAAAA,GAAiB,KAAO;QAC5BC,WAAAA,EAAa;YAACC,uBAAAA,CAAwB,YAAA;AAAc,SAAA;QACpDC,QAAAA,EAAU;AACR,YAAA,6BAAA;AACA,YAAA;gBACEC,IAAAA,EAAM,uBAAA;gBACNC,MAAAA,EAAQ;oBACNC,OAAAA,EAAS;AAAC,wBAAA;AAAyB;AACrC;AACF;AACD;KACH,CAAA;AAEA,sBAAe;IACbC,IAAAA,EAAM,OAAA;IACNC,MAAAA,EAAQ;AACN,QAAA;YACEC,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,aAAA;YACNC,OAAAA,EAAS,qBAAA;YACTN,MAAAA,EAAQL,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,mBAAA;YACNC,OAAAA,EAAS,0BAAA;YACTN,MAAAA,EAAQL,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,iBAAA;YACNC,OAAAA,EAAS,oBAAA;YACTN,MAAAA,EAAQL,cAAAA;AACV;AACD;AACH,CAAA;;;;"}
+{"version":3,"file":"audit-logs.mjs","sources":["../../../../../../../ee/server/src/audit-logs/routes/audit-logs.ts"],"sourcesContent":["import { enableFeatureMiddleware } from '../../routes/utils';\n\nconst getRouteConfig = (actions: string[] = ['admin::audit-logs.read']) => ({\n  middlewares: [enableFeatureMiddleware('audit-logs')],\n  policies: [\n    'admin::isAuthenticatedAdmin',\n    {\n      name: 'admin::hasPermissions',\n      config: {\n        actions,\n      },\n    },\n  ],\n});\n\nexport default {\n  type: 'admin',\n  routes: [\n    {\n      method: 'GET',\n      path: '/audit-logs',\n      handler: 'audit-logs.findMany',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/users',\n      handler: 'audit-logs.findManyUsers',\n      config: getRouteConfig(),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/export',\n      handler: 'audit-logs.export',\n      config: getRouteConfig(['admin::audit-logs.read', 'admin::audit-logs.export']),\n    },\n    {\n      method: 'GET',\n      path: '/audit-logs/:id',\n      handler: 'audit-logs.findOne',\n      config: getRouteConfig(),\n    },\n  ],\n};\n"],"names":["getRouteConfig","actions","middlewares","enableFeatureMiddleware","policies","name","config","type","routes","method","path","handler"],"mappings":";;AAEA,MAAMA,cAAAA,GAAiB,CAACC,OAAAA,GAAoB;AAAC,IAAA;AAAyB,CAAA,IAAM;QAC1EC,WAAAA,EAAa;YAACC,uBAAAA,CAAwB,YAAA;AAAc,SAAA;QACpDC,QAAAA,EAAU;AACR,YAAA,6BAAA;AACA,YAAA;gBACEC,IAAAA,EAAM,uBAAA;gBACNC,MAAAA,EAAQ;AACNL,oBAAAA;AACF;AACF;AACD;KACH,CAAA;AAEA,sBAAe;IACbM,IAAAA,EAAM,OAAA;IACNC,MAAAA,EAAQ;AACN,QAAA;YACEC,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,aAAA;YACNC,OAAAA,EAAS,qBAAA;YACTL,MAAAA,EAAQN,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,mBAAA;YACNC,OAAAA,EAAS,0BAAA;YACTL,MAAAA,EAAQN,cAAAA;AACV,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,oBAAA;YACNC,OAAAA,EAAS,mBAAA;AACTL,YAAAA,MAAAA,EAAQN,cAAAA,CAAe;AAAC,gBAAA,wBAAA;AAA0B,gBAAA;AAA2B,aAAA;AAC/E,SAAA;AACA,QAAA;YACES,MAAAA,EAAQ,KAAA;YACRC,IAAAA,EAAM,iBAAA;YACNC,OAAAA,EAAS,oBAAA;YACTL,MAAAA,EAAQN,cAAAA;AACV;AACD;AACH,CAAA;;;;"}

package/dist/server/ee/server/src/audit-logs/services/audit-logs.js

@@ -1,18 +1,93 @@
 'use strict';
 
+var stream = require('stream');
+var auditLogExport = require('../../../../../shared/utils/audit-log-export.js');
+var utils = require('../utils.js');
+var csv = require('../utils/csv.js');
+var exportToken = require('../utils/export-token.js');
+
+const EXPORT_CSV_COLUMNS = [
+    'id',
+    'action',
+    'date',
+    'user_id',
+    'user_email',
+    'user_display_name',
+    'origin',
+    'payload'
+];
+const EXPORT_USER_COLUMNS = [
+    'id',
+    'email',
+    'username',
+    'firstname',
+    'lastname'
+];
+const EXPORT_BATCH_SIZE = 5000;
 const getSanitizedUser = (user)=>{
-    let displayName = user.email;
-    if (user.username) {
-        displayName = user.username;
-    } else if (user.firstname && user.lastname) {
-        displayName = `${user.firstname} ${user.lastname}`;
-    }
     return {
         id: user.id,
         email: user.email,
-        displayName
+        displayName: utils.getDisplayName(user)
     };
 };
+const serializeCsvPayload = (payload)=>{
+    if (payload === null || payload === undefined) {
+        return null;
+    }
+    return typeof payload === 'string' ? payload : JSON.stringify(payload);
+};
+const parseCsvPayload = (payload)=>{
+    if (typeof payload === 'string') {
+        try {
+            return JSON.parse(payload);
+        } catch  {
+            return null;
+        }
+    }
+    return typeof payload === 'object' ? payload : null;
+};
+const getExportSecret = (strapi)=>{
+    const secret = strapi.config.get('admin.auth.secret');
+    if (typeof secret !== 'string' || secret.length === 0) {
+        throw new Error('The audit logs export requires admin.auth.secret to be set in config/admin.js.');
+    }
+    return secret;
+};
+const isTrustedExportContinuation = (strapi, query)=>{
+    return query.cursor !== undefined && query.until !== undefined && exportToken.verifyExportToken(getExportSecret(strapi), query.token, query.until, query.filters);
+};
+const buildExportWhere = (filtersWhere, untilId, afterId)=>({
+        $and: [
+            filtersWhere ?? {},
+            {
+                id: {
+                    $lte: untilId
+                }
+            },
+            ...afterId > 0 ? [
+                {
+                    id: {
+                        $gt: afterId
+                    }
+                }
+            ] : []
+        ]
+    });
+const toCsvLine = (row)=>{
+    const user = row.user ? getSanitizedUser(row.user) : null;
+    const { payload } = row;
+    return csv.serializeCsvLine([
+        row.id,
+        row.action,
+        row.date instanceof Date ? row.date.toISOString() : row.date,
+        user?.id ?? null,
+        user?.email ?? null,
+        user?.displayName ?? null,
+        parseCsvPayload(payload)?.origin ?? null,
+        serializeCsvPayload(payload)
+    ]);
+};
 /**
  * @description
  * Manages audit logs interaction with the database. Accessible via strapi.get('audit-logs')
@@ -72,6 +147,124 @@ const getSanitizedUser = (user)=>{
                 pagination
             };
         },
+        async isExportTooLarge (query) {
+            const maxRows = strapi.config.get('admin.auditLogs.exportMaxRows', auditLogExport.AUDIT_LOGS_EXPORT_DEFAULT_MAX_ROWS);
+            const { where } = strapi.get('query-params').transform('admin::audit-log', {
+                filters: query.filters ?? undefined
+            });
+            const beyondCap = await strapi.db.query('admin::audit-log').findMany({
+                select: [
+                    'id'
+                ],
+                where: where ?? {},
+                orderBy: {
+                    id: 'asc'
+                },
+                offset: maxRows,
+                limit: 1
+            });
+            return beyondCap.length > 0;
+        },
+        isTrustedContinuation (query) {
+            return isTrustedExportContinuation(strapi, query);
+        },
+        async createExportStream (query) {
+            getExportSecret(strapi);
+            const { cursor, pageSize, until, token, page: _page, sort: _sort, ...filtersQuery } = query;
+            const configuredPartSize = strapi.config.get('admin.auditLogs.exportPartRows', auditLogExport.AUDIT_LOGS_EXPORT_PART_ROWS);
+            const partSize = Math.max(1, Math.min(pageSize ?? configuredPartSize, auditLogExport.AUDIT_LOGS_EXPORT_PART_MAX_ROWS));
+            const { where: filtersWhere } = strapi.get('query-params').transform('admin::audit-log', filtersQuery);
+            const isNewExport = !isTrustedExportContinuation(strapi, query);
+            if (isNewExport) {
+                await strapi.eventHub.emit(auditLogExport.AUDIT_LOG_EXPORT_EVENT, {
+                    filters: filtersQuery.filters ?? null
+                });
+            }
+            let frozenUntil = isNewExport ? undefined : until;
+            if (frozenUntil === undefined) {
+                const [lastRow] = await strapi.db.query('admin::audit-log').findMany({
+                    select: [
+                        'id'
+                    ],
+                    orderBy: {
+                        id: 'desc'
+                    },
+                    limit: 1
+                });
+                frozenUntil = lastRow?.id ?? 0;
+            }
+            const untilId = frozenUntil ?? 0;
+            const getWhere = (afterId)=>buildExportWhere(filtersWhere, untilId, afterId);
+            const boundary = await strapi.db.query('admin::audit-log').findMany({
+                select: [
+                    'id'
+                ],
+                where: getWhere(cursor ?? 0),
+                orderBy: {
+                    id: 'asc'
+                },
+                offset: partSize - 1,
+                limit: 2
+            });
+            const nextCursor = boundary.length > 1 ? boundary[0].id : null;
+            const partUpperBound = nextCursor ?? untilId;
+            async function* csvChunks() {
+                if (isNewExport) {
+                    yield csv.CSV_BOM + csv.serializeCsvLine(EXPORT_CSV_COLUMNS);
+                }
+                let lastId = cursor ?? 0;
+                let remaining = partSize;
+                while(remaining > 0){
+                    const batchLimit = Math.min(EXPORT_BATCH_SIZE, remaining);
+                    const rows = await strapi.db.query('admin::audit-log').findMany({
+                        select: [
+                            'id',
+                            'action',
+                            'date',
+                            'payload'
+                        ],
+                        populate: {
+                            user: {
+                                select: EXPORT_USER_COLUMNS
+                            }
+                        },
+                        where: buildExportWhere(filtersWhere, partUpperBound, lastId),
+                        orderBy: {
+                            id: 'asc'
+                        },
+                        limit: batchLimit
+                    });
+                    if (rows.length === 0) {
+                        break;
+                    }
+                    yield rows.map(toCsvLine).join('');
+                    lastId = rows[rows.length - 1].id;
+                    remaining -= rows.length;
+                    if (rows.length < batchLimit) {
+                        break;
+                    }
+                }
+            }
+            async function* loggedCsvChunks() {
+                try {
+                    yield* csvChunks();
+                } catch (error) {
+                    strapi.log.error(`Audit logs export failed after the response started, the CSV part is truncated: ${error}`);
+                    throw error;
+                }
+            }
+            return {
+                stream: stream.Readable.from(loggedCsvChunks(), {
+                    objectMode: false,
+                    highWaterMark: 64 * 1024
+                }),
+                nextCursor,
+                until: untilId,
+                isNewExport,
+                partSize,
+                exportToken: isNewExport ? exportToken.signExportToken(getExportSecret(strapi), untilId, filtersQuery.filters) : token
+            };
+        },
         async findManyUsers (query) {
             const { page = 1, pageSize = 10 } = query;
             const userAttribute = strapi.db.metadata.get('admin::audit-log').attributes.user;
@@ -140,4 +333,5 @@ const getSanitizedUser = (user)=>{
 };
 
 exports.createAuditLogsService = createAuditLogsService;
+exports.toCsvLine = toCsvLine;
 //# sourceMappingURL=audit-logs.js.map

package/dist/server/ee/server/src/audit-logs/services/audit-logs.js.map

@@ -1 +1 @@
-{"version":3,"file":"audit-logs.js","sources":["../../../../../../../ee/server/src/audit-logs/services/audit-logs.ts"],"sourcesContent":["import type { Core } from '@strapi/types';\n\ninterface Event {\n  action: string;\n  date: Date;\n  userId: string | number;\n  payload: Record<string, unknown>;\n}\n\ninterface Log extends Omit<Event, 'userId'> {\n  user: string | number;\n}\n\nconst getSanitizedUser = (user: any) => {\n  let displayName = user.email;\n\n  if (user.username) {\n    displayName = user.username;\n  } else if (user.firstname && user.lastname) {\n    displayName = `${user.firstname} ${user.lastname}`;\n  }\n\n  return {\n    id: user.id,\n    email: user.email,\n    displayName,\n  };\n};\n\n/**\n * @description\n * Manages audit logs interaction with the database. Accessible via strapi.get('audit-logs')\n */\nconst createAuditLogsService = (strapi: Core.Strapi) => {\n  return {\n    async saveEvent(event: Event) {\n      const { userId, ...rest } = event;\n\n      const auditLog: Log = { ...rest, user: userId };\n\n      // Save to database\n      await strapi.db.query('admin::audit-log').create({ data: auditLog });\n\n      return this;\n    },\n\n    async findMany(query: unknown) {\n      // NOTE: We get the IDs first because sorting full rows runs MySQL/MariaDB out of sort memory\n      // See: https://github.com/strapi/strapi/issues/27399\n      const { results: logRows, pagination } = await strapi.db.query('admin::audit-log').findPage({\n        ...strapi.get('query-params').transform('admin::audit-log', query),\n        select: ['id'],\n      });\n\n      const ids = logRows.map((log) => log.id);\n      const logs = ids.length\n        ? await strapi.db.query('admin::audit-log').findMany({\n            where: { id: { $in: ids } },\n            populate: ['user'],\n            select: ['action', 'date', 'payload'],\n          })\n        : [];\n      const logsById = new Map(logs.map((log) => [log.id, log]));\n      const results = ids.map((id) => logsById.get(id)).filter(Boolean);\n\n      const sanitizedResults = results.map((result: any) => {\n        const { user, ...rest } = result;\n        return {\n          ...rest,\n          user: user ? getSanitizedUser(user) : null,\n        };\n      });\n\n      return {\n        results: sanitizedResults,\n        pagination,\n      };\n    },\n\n    async findManyUsers(query: { page?: number | string; pageSize?: number | string }) {\n      const { page = 1, pageSize = 10 } = query;\n\n      const userAttribute = strapi.db.metadata.get('admin::audit-log').attributes.user;\n\n      if (\n        userAttribute?.type !== 'relation' ||\n        !('joinTable' in userAttribute) ||\n        !userAttribute.joinTable ||\n        !('inverseJoinColumn' in userAttribute.joinTable)\n      ) {\n        throw new Error('The audit log user relation is expected to use a join table');\n      }\n\n      const { joinTable } = userAttribute;\n\n      const authorIds = await strapi.db\n        .connection(joinTable.name)\n        .distinct(joinTable.inverseJoinColumn.name)\n        .pluck(joinTable.inverseJoinColumn.name);\n\n      const { results, pagination } = await strapi.db.query('admin::user').findPage({\n        select: ['id', 'email', 'username', 'firstname', 'lastname'],\n        where: { id: { $in: authorIds } },\n        orderBy: { id: 'asc' },\n        page: Number(page),\n        pageSize: Number(pageSize),\n      });\n\n      return {\n        results: results.map(getSanitizedUser),\n        pagination,\n      };\n    },\n\n    async findOne(id: unknown) {\n      const result: any = await strapi.db.query('admin::audit-log').findOne({\n        where: { id },\n        populate: ['user'],\n        select: ['action', 'date', 'payload'],\n      });\n\n      if (!result) {\n        return null;\n      }\n\n      const { user, ...rest } = result;\n      return {\n        ...rest,\n        user: user ? getSanitizedUser(user) : null,\n      };\n    },\n\n    deleteExpiredEvents(expirationDate: Date) {\n      return strapi.db.query('admin::audit-log').deleteMany({\n        where: {\n          date: {\n            $lt: expirationDate.toISOString(),\n          },\n        },\n      });\n    },\n  };\n};\n\nexport { createAuditLogsService };\n"],"names":["getSanitizedUser","user","displayName","email","username","firstname","lastname","id","createAuditLogsService","strapi","saveEvent","event","userId","rest","auditLog","db","query","create","data","findMany","results","logRows","pagination","findPage","get","transform","select","ids","map","log","logs","length","where","$in","populate","logsById","Map","filter","Boolean","sanitizedResults","result","findManyUsers","page","pageSize","userAttribute","metadata","attributes","type","joinTable","Error","authorIds","connection","name","distinct","inverseJoinColumn","pluck","orderBy","Number","findOne","deleteExpiredEvents","expirationDate","deleteMany","date","$lt","toISOString"],"mappings":";;AAaA,MAAMA,mBAAmB,CAACC,IAAAA,GAAAA;IACxB,IAAIC,WAAAA,GAAcD,KAAKE,KAAK;IAE5B,IAAIF,IAAAA,CAAKG,QAAQ,EAAE;AACjBF,QAAAA,WAAAA,GAAcD,KAAKG,QAAQ;AAC7B,IAAA,CAAA,MAAO,IAAIH,IAAAA,CAAKI,SAAS,IAAIJ,IAAAA,CAAKK,QAAQ,EAAE;QAC1CJ,WAAAA,GAAc,CAAA,EAAGD,KAAKI,SAAS,CAAC,CAAC,EAAEJ,IAAAA,CAAKK,QAAQ,CAAA,CAAE;AACpD,IAAA;IAEA,OAAO;AACLC,QAAAA,EAAAA,EAAIN,KAAKM,EAAE;AACXJ,QAAAA,KAAAA,EAAOF,KAAKE,KAAK;AACjBD,QAAAA;AACF,KAAA;AACF,CAAA;AAEA;;;IAIA,MAAMM,yBAAyB,CAACC,MAAAA,GAAAA;IAC9B,OAAO;AACL,QAAA,MAAMC,WAAUC,KAAY,EAAA;AAC1B,YAAA,MAAM,EAAEC,MAAM,EAAE,GAAGC,MAAM,GAAGF,KAAAA;AAE5B,YAAA,MAAMG,QAAAA,GAAgB;AAAE,gBAAA,GAAGD,IAAI;gBAAEZ,IAAAA,EAAMW;AAAO,aAAA;;AAG9C,YAAA,MAAMH,OAAOM,EAAE,CAACC,KAAK,CAAC,kBAAA,CAAA,CAAoBC,MAAM,CAAC;gBAAEC,IAAAA,EAAMJ;AAAS,aAAA,CAAA;AAElE,YAAA,OAAO,IAAI;AACb,QAAA,CAAA;AAEA,QAAA,MAAMK,UAASH,KAAc,EAAA;;;AAG3B,YAAA,MAAM,EAAEI,OAAAA,EAASC,OAAO,EAAEC,UAAU,EAAE,GAAG,MAAMb,MAAAA,CAAOM,EAAE,CAACC,KAAK,CAAC,kBAAA,CAAA,CAAoBO,QAAQ,CAAC;AAC1F,gBAAA,GAAGd,OAAOe,GAAG,CAAC,gBAAgBC,SAAS,CAAC,oBAAoBT,KAAAA,CAAM;gBAClEU,MAAAA,EAAQ;AAAC,oBAAA;AAAK;AAChB,aAAA,CAAA;AAEA,YAAA,MAAMC,MAAMN,OAAAA,CAAQO,GAAG,CAAC,CAACC,GAAAA,GAAQA,IAAItB,EAAE,CAAA;AACvC,YAAA,MAAMuB,IAAAA,GAAOH,GAAAA,CAAII,MAAM,GACnB,MAAMtB,MAAAA,CAAOM,EAAE,CAACC,KAAK,CAAC,kBAAA,CAAA,CAAoBG,QAAQ,CAAC;gBACjDa,KAAAA,EAAO;oBAAEzB,EAAAA,EAAI;wBAAE0B,GAAAA,EAAKN;AAAI;AAAE,iBAAA;gBAC1BO,QAAAA,EAAU;AAAC,oBAAA;AAAO,iBAAA;gBAClBR,MAAAA,EAAQ;AAAC,oBAAA,QAAA;AAAU,oBAAA,MAAA;AAAQ,oBAAA;AAAU;AACvC,aAAA,CAAA,GACA,EAAE;AACN,YAAA,MAAMS,WAAW,IAAIC,GAAAA,CAAIN,KAAKF,GAAG,CAAC,CAACC,GAAAA,GAAQ;AAACA,oBAAAA,GAAAA,CAAItB,EAAE;AAAEsB,oBAAAA;AAAI,iBAAA,CAAA,CAAA;YACxD,MAAMT,OAAAA,GAAUO,GAAAA,CAAIC,GAAG,CAAC,CAACrB,EAAAA,GAAO4B,QAAAA,CAASX,GAAG,CAACjB,EAAAA,CAAAA,CAAAA,CAAK8B,MAAM,CAACC,OAAAA,CAAAA;AAEzD,YAAA,MAAMC,gBAAAA,GAAmBnB,OAAAA,CAAQQ,GAAG,CAAC,CAACY,MAAAA,GAAAA;AACpC,gBAAA,MAAM,EAAEvC,IAAI,EAAE,GAAGY,MAAM,GAAG2B,MAAAA;gBAC1B,OAAO;AACL,oBAAA,GAAG3B,IAAI;oBACPZ,IAAAA,EAAMA,IAAAA,GAAOD,iBAAiBC,IAAAA,CAAAA,GAAQ;AACxC,iBAAA;AACF,YAAA,CAAA,CAAA;YAEA,OAAO;gBACLmB,OAAAA,EAASmB,gBAAAA;AACTjB,gBAAAA;AACF,aAAA;AACF,QAAA,CAAA;AAEA,QAAA,MAAMmB,eAAczB,KAA6D,EAAA;AAC/E,YAAA,MAAM,EAAE0B,IAAAA,GAAO,CAAC,EAAEC,QAAAA,GAAW,EAAE,EAAE,GAAG3B,KAAAA;YAEpC,MAAM4B,aAAAA,GAAgBnC,MAAAA,CAAOM,EAAE,CAAC8B,QAAQ,CAACrB,GAAG,CAAC,kBAAA,CAAA,CAAoBsB,UAAU,CAAC7C,IAAI;AAEhF,YAAA,IACE2C,eAAeG,IAAAA,KAAS,UAAA,IACxB,EAAE,WAAA,IAAeH,aAAY,CAAA,IAC7B,CAACA,aAAAA,CAAcI,SAAS,IACxB,EAAE,uBAAuBJ,aAAAA,CAAcI,SAAS,CAAD,EAC/C;AACA,gBAAA,MAAM,IAAIC,KAAAA,CAAM,6DAAA,CAAA;AAClB,YAAA;YAEA,MAAM,EAAED,SAAS,EAAE,GAAGJ,aAAAA;YAEtB,MAAMM,SAAAA,GAAY,MAAMzC,MAAAA,CAAOM,EAAE,CAC9BoC,UAAU,CAACH,SAAAA,CAAUI,IAAI,CAAA,CACzBC,QAAQ,CAACL,SAAAA,CAAUM,iBAAiB,CAACF,IAAI,CAAA,CACzCG,KAAK,CAACP,SAAAA,CAAUM,iBAAiB,CAACF,IAAI,CAAA;AAEzC,YAAA,MAAM,EAAEhC,OAAO,EAAEE,UAAU,EAAE,GAAG,MAAMb,MAAAA,CAAOM,EAAE,CAACC,KAAK,CAAC,aAAA,CAAA,CAAeO,QAAQ,CAAC;gBAC5EG,MAAAA,EAAQ;AAAC,oBAAA,IAAA;AAAM,oBAAA,OAAA;AAAS,oBAAA,UAAA;AAAY,oBAAA,WAAA;AAAa,oBAAA;AAAW,iBAAA;gBAC5DM,KAAAA,EAAO;oBAAEzB,EAAAA,EAAI;wBAAE0B,GAAAA,EAAKiB;AAAU;AAAE,iBAAA;gBAChCM,OAAAA,EAAS;oBAAEjD,EAAAA,EAAI;AAAM,iBAAA;AACrBmC,gBAAAA,IAAAA,EAAMe,MAAAA,CAAOf,IAAAA,CAAAA;AACbC,gBAAAA,QAAAA,EAAUc,MAAAA,CAAOd,QAAAA;AACnB,aAAA,CAAA;YAEA,OAAO;gBACLvB,OAAAA,EAASA,OAAAA,CAAQQ,GAAG,CAAC5B,gBAAAA,CAAAA;AACrBsB,gBAAAA;AACF,aAAA;AACF,QAAA,CAAA;AAEA,QAAA,MAAMoC,SAAQnD,EAAW,EAAA;YACvB,MAAMiC,MAAAA,GAAc,MAAM/B,MAAAA,CAAOM,EAAE,CAACC,KAAK,CAAC,kBAAA,CAAA,CAAoB0C,OAAO,CAAC;gBACpE1B,KAAAA,EAAO;AAAEzB,oBAAAA;AAAG,iBAAA;gBACZ2B,QAAAA,EAAU;AAAC,oBAAA;AAAO,iBAAA;gBAClBR,MAAAA,EAAQ;AAAC,oBAAA,QAAA;AAAU,oBAAA,MAAA;AAAQ,oBAAA;AAAU;AACvC,aAAA,CAAA;AAEA,YAAA,IAAI,CAACc,MAAAA,EAAQ;gBACX,OAAO,IAAA;AACT,YAAA;AAEA,YAAA,MAAM,EAAEvC,IAAI,EAAE,GAAGY,MAAM,GAAG2B,MAAAA;YAC1B,OAAO;AACL,gBAAA,GAAG3B,IAAI;gBACPZ,IAAAA,EAAMA,IAAAA,GAAOD,iBAAiBC,IAAAA,CAAAA,GAAQ;AACxC,aAAA;AACF,QAAA,CAAA;AAEA0D,QAAAA,mBAAAA,CAAAA,CAAoBC,cAAoB,EAAA;AACtC,YAAA,OAAOnD,OAAOM,EAAE,CAACC,KAAK,CAAC,kBAAA,CAAA,CAAoB6C,UAAU,CAAC;gBACpD7B,KAAAA,EAAO;oBACL8B,IAAAA,EAAM;AACJC,wBAAAA,GAAAA,EAAKH,eAAeI,WAAW;AACjC;AACF;AACF,aAAA,CAAA;AACF,QAAA;AACF,KAAA;AACF;;;;"}
+{"version":3,"file":"audit-logs.js","sources":["../../../../../../../ee/server/src/audit-logs/services/audit-logs.ts"],"sourcesContent":["import { Readable } from 'stream';\n\nimport type { Core } from '@strapi/types';\n\nimport {\n  AUDIT_LOG_EXPORT_EVENT,\n  AUDIT_LOGS_EXPORT_DEFAULT_MAX_ROWS,\n  AUDIT_LOGS_EXPORT_PART_MAX_ROWS,\n  AUDIT_LOGS_EXPORT_PART_ROWS,\n} from '../../../../../shared/utils/audit-log-export';\nimport { getDisplayName } from '../utils';\nimport { CSV_BOM, serializeCsvLine } from '../utils/csv';\nimport { signExportToken, verifyExportToken } from '../utils/export-token';\n\nconst EXPORT_CSV_COLUMNS = [\n  'id',\n  'action',\n  'date',\n  'user_id',\n  'user_email',\n  'user_display_name',\n  'origin',\n  'payload',\n];\nconst EXPORT_USER_COLUMNS = ['id', 'email', 'username', 'firstname', 'lastname'];\nconst EXPORT_BATCH_SIZE = 5000;\n\ninterface Event {\n  action: string;\n  date: Date;\n  // Null for actions no person performed, such as a scheduled job\n  userId: string | number | null;\n  payload: Record<string, unknown>;\n}\n\ninterface Log extends Omit<Event, 'userId'> {\n  user: string | number | null;\n}\n\nconst getSanitizedUser = (user: any) => {\n  return {\n    id: user.id,\n    email: user.email,\n    displayName: getDisplayName(user),\n  };\n};\n\nconst serializeCsvPayload = (payload: unknown) => {\n  if (payload === null || payload === undefined) {\n    return null;\n  }\n\n  return typeof payload === 'string' ? payload : JSON.stringify(payload);\n};\n\nconst parseCsvPayload = (payload: unknown): Record<string, unknown> | null => {\n  if (typeof payload === 'string') {\n    try {\n      return JSON.parse(payload);\n    } catch {\n      return null;\n    }\n  }\n\n  return typeof payload === 'object' ? (payload as Record<string, unknown> | null) : null;\n};\n\ninterface ExportQuery {\n  cursor?: number;\n  pageSize?: number;\n  until?: number;\n  token?: string;\n  [key: string]: unknown;\n}\n\nconst getExportSecret = (strapi: Core.Strapi): string => {\n  const secret = strapi.config.get('admin.auth.secret');\n\n  if (typeof secret !== 'string' || secret.length === 0) {\n    throw new Error(\n      'The audit logs export requires admin.auth.secret to be set in config/admin.js.'\n    );\n  }\n\n  return secret;\n};\n\nconst isTrustedExportContinuation = (strapi: Core.Strapi, query: ExportQuery) => {\n  return (\n    query.cursor !== undefined &&\n    query.until !== undefined &&\n    verifyExportToken(getExportSecret(strapi), query.token, query.until, query.filters)\n  );\n};\n\nconst buildExportWhere = (filtersWhere: unknown, untilId: number, afterId: number) => ({\n  $and: [\n    filtersWhere ?? {},\n    { id: { $lte: untilId } },\n    ...(afterId > 0 ? [{ id: { $gt: afterId } }] : []),\n  ],\n});\n\nconst toCsvLine = (row: any) => {\n  const user = row.user ? getSanitizedUser(row.user) : null;\n  const { payload } = row;\n\n  return serializeCsvLine([\n    row.id,\n    row.action,\n    row.date instanceof Date ? row.date.toISOString() : row.date,\n    user?.id ?? null,\n    user?.email ?? null,\n    user?.displayName ?? null,\n    parseCsvPayload(payload)?.origin ?? null,\n    serializeCsvPayload(payload),\n  ]);\n};\n\n/**\n * @description\n * Manages audit logs interaction with the database. Accessible via strapi.get('audit-logs')\n */\nconst createAuditLogsService = (strapi: Core.Strapi) => {\n  return {\n    async saveEvent(event: Event) {\n      const { userId, ...rest } = event;\n\n      const auditLog: Log = { ...rest, user: userId };\n\n      // Save to database\n      await strapi.db.query('admin::audit-log').create({ data: auditLog });\n\n      return this;\n    },\n\n    async findMany(query: unknown) {\n      // NOTE: We get the IDs first because sorting full rows runs MySQL/MariaDB out of sort memory\n      // See: https://github.com/strapi/strapi/issues/27399\n      const { results: logRows, pagination } = await strapi.db.query('admin::audit-log').findPage({\n        ...strapi.get('query-params').transform('admin::audit-log', query),\n        select: ['id'],\n      });\n\n      const ids = logRows.map((log) => log.id);\n      const logs = ids.length\n        ? await strapi.db.query('admin::audit-log').findMany({\n            where: { id: { $in: ids } },\n            populate: ['user'],\n            select: ['action', 'date', 'payload'],\n          })\n        : [];\n      const logsById = new Map(logs.map((log) => [log.id, log]));\n      const results = ids.map((id) => logsById.get(id)).filter(Boolean);\n\n      const sanitizedResults = results.map((result: any) => {\n        const { user, ...rest } = result;\n        return {\n          ...rest,\n          user: user ? getSanitizedUser(user) : null,\n        };\n      });\n\n      return {\n        results: sanitizedResults,\n        pagination,\n      };\n    },\n\n    async isExportTooLarge(query: { filters?: unknown }) {\n      const maxRows = strapi.config.get(\n        'admin.auditLogs.exportMaxRows',\n        AUDIT_LOGS_EXPORT_DEFAULT_MAX_ROWS\n      );\n      const { where } = strapi\n        .get('query-params')\n        .transform('admin::audit-log', { filters: query.filters ?? undefined });\n\n      const beyondCap = await strapi.db.query('admin::audit-log').findMany({\n        select: ['id'],\n        where: where ?? {},\n        orderBy: { id: 'asc' },\n        offset: maxRows,\n        limit: 1,\n      });\n\n      return beyondCap.length > 0;\n    },\n\n    isTrustedContinuation(query: ExportQuery) {\n      return isTrustedExportContinuation(strapi, query);\n    },\n\n    async createExportStream(query: ExportQuery) {\n      getExportSecret(strapi);\n\n      const { cursor, pageSize, until, token, page: _page, sort: _sort, ...filtersQuery } = query;\n\n      const configuredPartSize = strapi.config.get(\n        'admin.auditLogs.exportPartRows',\n        AUDIT_LOGS_EXPORT_PART_ROWS\n      );\n      const partSize = Math.max(\n        1,\n        Math.min(pageSize ?? configuredPartSize, AUDIT_LOGS_EXPORT_PART_MAX_ROWS)\n      );\n\n      const { where: filtersWhere } = strapi\n        .get('query-params')\n        .transform('admin::audit-log', filtersQuery);\n\n      const isNewExport = !isTrustedExportContinuation(strapi, query);\n      if (isNewExport) {\n        await strapi.eventHub.emit(AUDIT_LOG_EXPORT_EVENT, {\n          filters: filtersQuery.filters ?? null,\n        });\n      }\n\n      let frozenUntil = isNewExport ? undefined : until;\n      if (frozenUntil === undefined) {\n        const [lastRow] = await strapi.db.query('admin::audit-log').findMany({\n          select: ['id'],\n          orderBy: { id: 'desc' },\n          limit: 1,\n        });\n\n        frozenUntil = lastRow?.id ?? 0;\n      }\n\n      const untilId = frozenUntil ?? 0;\n      const getWhere = (afterId: number) => buildExportWhere(filtersWhere, untilId, afterId);\n\n      const boundary: Array<{ id: number }> = await strapi.db.query('admin::audit-log').findMany({\n        select: ['id'],\n        where: getWhere(cursor ?? 0),\n        orderBy: { id: 'asc' },\n        offset: partSize - 1,\n        limit: 2,\n      });\n\n      const nextCursor = boundary.length > 1 ? boundary[0].id : null;\n\n      const partUpperBound = nextCursor ?? untilId;\n\n      async function* csvChunks() {\n        if (isNewExport) {\n          yield CSV_BOM + serializeCsvLine(EXPORT_CSV_COLUMNS);\n        }\n\n        let lastId = cursor ?? 0;\n        let remaining = partSize;\n\n        while (remaining > 0) {\n          const batchLimit = Math.min(EXPORT_BATCH_SIZE, remaining);\n          const rows: any[] = await strapi.db.query('admin::audit-log').findMany({\n            select: ['id', 'action', 'date', 'payload'],\n            populate: { user: { select: EXPORT_USER_COLUMNS } },\n            where: buildExportWhere(filtersWhere, partUpperBound, lastId),\n            orderBy: { id: 'asc' },\n            limit: batchLimit,\n          });\n\n          if (rows.length === 0) {\n            break;\n          }\n\n          yield rows.map(toCsvLine).join('');\n\n          lastId = rows[rows.length - 1].id;\n          remaining -= rows.length;\n\n          if (rows.length < batchLimit) {\n            break;\n          }\n        }\n      }\n\n      async function* loggedCsvChunks() {\n        try {\n          yield* csvChunks();\n        } catch (error) {\n          strapi.log.error(\n            `Audit logs export failed after the response started, the CSV part is truncated: ${error}`\n          );\n          throw error;\n        }\n      }\n\n      return {\n        stream: Readable.from(loggedCsvChunks(), { objectMode: false, highWaterMark: 64 * 1024 }),\n        nextCursor,\n        until: untilId,\n        isNewExport,\n        partSize,\n        exportToken: isNewExport\n          ? signExportToken(getExportSecret(strapi), untilId, filtersQuery.filters)\n          : (token as string),\n      };\n    },\n\n    async findManyUsers(query: { page?: number | string; pageSize?: number | string }) {\n      const { page = 1, pageSize = 10 } = query;\n\n      const userAttribute = strapi.db.metadata.get('admin::audit-log').attributes.user;\n\n      if (\n        userAttribute?.type !== 'relation' ||\n        !('joinTable' in userAttribute) ||\n        !userAttribute.joinTable ||\n        !('inverseJoinColumn' in userAttribute.joinTable)\n      ) {\n        throw new Error('The audit log user relation is expected to use a join table');\n      }\n\n      const { joinTable } = userAttribute;\n\n      const authorIds = await strapi.db\n        .connection(joinTable.name)\n        .distinct(joinTable.inverseJoinColumn.name)\n        .pluck(joinTable.inverseJoinColumn.name);\n\n      const { results, pagination } = await strapi.db.query('admin::user').findPage({\n        select: ['id', 'email', 'username', 'firstname', 'lastname'],\n        where: { id: { $in: authorIds } },\n        orderBy: { id: 'asc' },\n        page: Number(page),\n        pageSize: Number(pageSize),\n      });\n\n      return {\n        results: results.map(getSanitizedUser),\n        pagination,\n      };\n    },\n\n    async findOne(id: unknown) {\n      const result: any = await strapi.db.query('admin::audit-log').findOne({\n        where: { id },\n        populate: ['user'],\n        select: ['action', 'date', 'payload'],\n      });\n\n      if (!result) {\n        return null;\n      }\n\n      const { user, ...rest } = result;\n      return {\n        ...rest,\n        user: user ? getSanitizedUser(user) : null,\n      };\n    },\n\n    deleteExpiredEvents(expirationDate: Date) {\n      return strapi.db.query('admin::audit-log').deleteMany({\n        where: {\n          date: {\n            $lt: expirationDate.toISOString(),\n          },\n        },\n      });\n    },\n  };\n};\n\nexport { createAuditLogsService, toCsvLine };\n"],"names":["EXPORT_CSV_COLUMNS","EXPORT_USER_COLUMNS","EXPORT_BATCH_SIZE","getSanitizedUser","user","id","email","displayName","getDisplayName","serializeCsvPayload","payload","undefined","JSON","stringify","parseCsvPayload","parse","getExportSecret","strapi","secret","config","get","length","Error","isTrustedExportContinuation","query","cursor","until","verifyExportToken","token","filters","buildExportWhere","filtersWhere","untilId","afterId","$and","$lte","$gt","toCsvLine","row","serializeCsvLine","action","date","Date","toISOString","origin","createAuditLogsService","saveEvent","event","userId","rest","auditLog","db","create","data","findMany","results","logRows","pagination","findPage","transform","select","ids","map","log","logs","where","$in","populate","logsById","Map","filter","Boolean","sanitizedResults","result","isExportTooLarge","maxRows","AUDIT_LOGS_EXPORT_DEFAULT_MAX_ROWS","beyondCap","orderBy","offset","limit","isTrustedContinuation","createExportStream","pageSize","page","_page","sort","_sort","filtersQuery","configuredPartSize","AUDIT_LOGS_EXPORT_PART_ROWS","partSize","Math","max","min","AUDIT_LOGS_EXPORT_PART_MAX_ROWS","isNewExport","eventHub","emit","AUDIT_LOG_EXPORT_EVENT","frozenUntil","lastRow","getWhere","boundary","nextCursor","partUpperBound","csvChunks","CSV_BOM","lastId","remaining","batchLimit","rows","join","loggedCsvChunks","error","stream","Readable","from","objectMode","highWaterMark","exportToken","signExportToken","findManyUsers","userAttribute","metadata","attributes","type","joinTable","authorIds","connection","name","distinct","inverseJoinColumn","pluck","Number","findOne","deleteExpiredEvents","expirationDate","deleteMany","$lt"],"mappings":";;;;;;;;AAcA,MAAMA,kBAAAA,GAAqB;AACzB,IAAA,IAAA;AACA,IAAA,QAAA;AACA,IAAA,MAAA;AACA,IAAA,SAAA;AACA,IAAA,YAAA;AACA,IAAA,mBAAA;AACA,IAAA,QAAA;AACA,IAAA;AACD,CAAA;AACD,MAAMC,mBAAAA,GAAsB;AAAC,IAAA,IAAA;AAAM,IAAA,OAAA;AAAS,IAAA,UAAA;AAAY,IAAA,WAAA;AAAa,IAAA;AAAW,CAAA;AAChF,MAAMC,iBAAAA,GAAoB,IAAA;AAc1B,MAAMC,mBAAmB,CAACC,IAAAA,GAAAA;IACxB,OAAO;AACLC,QAAAA,EAAAA,EAAID,KAAKC,EAAE;AACXC,QAAAA,KAAAA,EAAOF,KAAKE,KAAK;AACjBC,QAAAA,WAAAA,EAAaC,oBAAAA,CAAeJ,IAAAA;AAC9B,KAAA;AACF,CAAA;AAEA,MAAMK,sBAAsB,CAACC,OAAAA,GAAAA;IAC3B,IAAIA,OAAAA,KAAY,IAAA,IAAQA,OAAAA,KAAYC,SAAAA,EAAW;QAC7C,OAAO,IAAA;AACT,IAAA;AAEA,IAAA,OAAO,OAAOD,OAAAA,KAAY,QAAA,GAAWA,OAAAA,GAAUE,IAAAA,CAAKC,SAAS,CAACH,OAAAA,CAAAA;AAChE,CAAA;AAEA,MAAMI,kBAAkB,CAACJ,OAAAA,GAAAA;IACvB,IAAI,OAAOA,YAAY,QAAA,EAAU;QAC/B,IAAI;YACF,OAAOE,IAAAA,CAAKG,KAAK,CAACL,OAAAA,CAAAA;AACpB,QAAA,CAAA,CAAE,OAAM;YACN,OAAO,IAAA;AACT,QAAA;AACF,IAAA;IAEA,OAAO,OAAOA,OAAAA,KAAY,QAAA,GAAYA,OAAAA,GAA6C,IAAA;AACrF,CAAA;AAUA,MAAMM,kBAAkB,CAACC,MAAAA,GAAAA;AACvB,IAAA,MAAMC,MAAAA,GAASD,MAAAA,CAAOE,MAAM,CAACC,GAAG,CAAC,mBAAA,CAAA;AAEjC,IAAA,IAAI,OAAOF,MAAAA,KAAW,QAAA,IAAYA,MAAAA,CAAOG,MAAM,KAAK,CAAA,EAAG;AACrD,QAAA,MAAM,IAAIC,KAAAA,CACR,gFAAA,CAAA;AAEJ,IAAA;IAEA,OAAOJ,MAAAA;AACT,CAAA;AAEA,MAAMK,2BAAAA,GAA8B,CAACN,MAAAA,EAAqBO,KAAAA,GAAAA;AACxD,IAAA,OACEA,MAAMC,MAAM,KAAKd,aACjBa,KAAAA,CAAME,KAAK,KAAKf,SAAAA,IAChBgB,6BAAAA,CAAkBX,eAAAA,CAAgBC,MAAAA,CAAAA,EAASO,MAAMI,KAAK,EAAEJ,MAAME,KAAK,EAAEF,MAAMK,OAAO,CAAA;AAEtF,CAAA;AAEA,MAAMC,gBAAAA,GAAmB,CAACC,YAAAA,EAAuBC,OAAAA,EAAiBC,WAAqB;QACrFC,IAAAA,EAAM;AACJH,YAAAA,YAAAA,IAAgB,EAAC;AACjB,YAAA;gBAAE1B,EAAAA,EAAI;oBAAE8B,IAAAA,EAAMH;AAAQ;AAAE,aAAA;AACpBC,YAAAA,GAAAA,OAAAA,GAAU,CAAA,GAAI;AAAC,gBAAA;oBAAE5B,EAAAA,EAAI;wBAAE+B,GAAAA,EAAKH;AAAQ;AAAE;AAAE,aAAA,GAAG;AAChD;KACH,CAAA;AAEA,MAAMI,YAAY,CAACC,GAAAA,GAAAA;AACjB,IAAA,MAAMlC,OAAOkC,GAAAA,CAAIlC,IAAI,GAAGD,gBAAAA,CAAiBmC,GAAAA,CAAIlC,IAAI,CAAA,GAAI,IAAA;IACrD,MAAM,EAAEM,OAAO,EAAE,GAAG4B,GAAAA;AAEpB,IAAA,OAAOC,oBAAAA,CAAiB;AACtBD,QAAAA,GAAAA,CAAIjC,EAAE;AACNiC,QAAAA,GAAAA,CAAIE,MAAM;QACVF,GAAAA,CAAIG,IAAI,YAAYC,IAAAA,GAAOJ,GAAAA,CAAIG,IAAI,CAACE,WAAW,EAAA,GAAKL,GAAAA,CAAIG,IAAI;AAC5DrC,QAAAA,IAAAA,EAAMC,EAAAA,IAAM,IAAA;AACZD,QAAAA,IAAAA,EAAME,KAAAA,IAAS,IAAA;AACfF,QAAAA,IAAAA,EAAMG,WAAAA,IAAe,IAAA;AACrBO,QAAAA,eAAAA,CAAgBJ,UAAUkC,MAAAA,IAAU,IAAA;QACpCnC,mBAAAA,CAAoBC,OAAAA;AACrB,KAAA,CAAA;AACH;AAEA;;;IAIA,MAAMmC,yBAAyB,CAAC5B,MAAAA,GAAAA;IAC9B,OAAO;AACL,QAAA,MAAM6B,WAAUC,KAAY,EAAA;AAC1B,YAAA,MAAM,EAAEC,MAAM,EAAE,GAAGC,MAAM,GAAGF,KAAAA;AAE5B,YAAA,MAAMG,QAAAA,GAAgB;AAAE,gBAAA,GAAGD,IAAI;gBAAE7C,IAAAA,EAAM4C;AAAO,aAAA;;AAG9C,YAAA,MAAM/B,OAAOkC,EAAE,CAAC3B,KAAK,CAAC,kBAAA,CAAA,CAAoB4B,MAAM,CAAC;gBAAEC,IAAAA,EAAMH;AAAS,aAAA,CAAA;AAElE,YAAA,OAAO,IAAI;AACb,QAAA,CAAA;AAEA,QAAA,MAAMI,UAAS9B,KAAc,EAAA;;;AAG3B,YAAA,MAAM,EAAE+B,OAAAA,EAASC,OAAO,EAAEC,UAAU,EAAE,GAAG,MAAMxC,MAAAA,CAAOkC,EAAE,CAAC3B,KAAK,CAAC,kBAAA,CAAA,CAAoBkC,QAAQ,CAAC;AAC1F,gBAAA,GAAGzC,OAAOG,GAAG,CAAC,gBAAgBuC,SAAS,CAAC,oBAAoBnC,KAAAA,CAAM;gBAClEoC,MAAAA,EAAQ;AAAC,oBAAA;AAAK;AAChB,aAAA,CAAA;AAEA,YAAA,MAAMC,MAAML,OAAAA,CAAQM,GAAG,CAAC,CAACC,GAAAA,GAAQA,IAAI1D,EAAE,CAAA;AACvC,YAAA,MAAM2D,IAAAA,GAAOH,GAAAA,CAAIxC,MAAM,GACnB,MAAMJ,MAAAA,CAAOkC,EAAE,CAAC3B,KAAK,CAAC,kBAAA,CAAA,CAAoB8B,QAAQ,CAAC;gBACjDW,KAAAA,EAAO;oBAAE5D,EAAAA,EAAI;wBAAE6D,GAAAA,EAAKL;AAAI;AAAE,iBAAA;gBAC1BM,QAAAA,EAAU;AAAC,oBAAA;AAAO,iBAAA;gBAClBP,MAAAA,EAAQ;AAAC,oBAAA,QAAA;AAAU,oBAAA,MAAA;AAAQ,oBAAA;AAAU;AACvC,aAAA,CAAA,GACA,EAAE;AACN,YAAA,MAAMQ,WAAW,IAAIC,GAAAA,CAAIL,KAAKF,GAAG,CAAC,CAACC,GAAAA,GAAQ;AAACA,oBAAAA,GAAAA,CAAI1D,EAAE;AAAE0D,oBAAAA;AAAI,iBAAA,CAAA,CAAA;YACxD,MAAMR,OAAAA,GAAUM,GAAAA,CAAIC,GAAG,CAAC,CAACzD,EAAAA,GAAO+D,QAAAA,CAAShD,GAAG,CAACf,EAAAA,CAAAA,CAAAA,CAAKiE,MAAM,CAACC,OAAAA,CAAAA;AAEzD,YAAA,MAAMC,gBAAAA,GAAmBjB,OAAAA,CAAQO,GAAG,CAAC,CAACW,MAAAA,GAAAA;AACpC,gBAAA,MAAM,EAAErE,IAAI,EAAE,GAAG6C,MAAM,GAAGwB,MAAAA;gBAC1B,OAAO;AACL,oBAAA,GAAGxB,IAAI;oBACP7C,IAAAA,EAAMA,IAAAA,GAAOD,iBAAiBC,IAAAA,CAAAA,GAAQ;AACxC,iBAAA;AACF,YAAA,CAAA,CAAA;YAEA,OAAO;gBACLmD,OAAAA,EAASiB,gBAAAA;AACTf,gBAAAA;AACF,aAAA;AACF,QAAA,CAAA;AAEA,QAAA,MAAMiB,kBAAiBlD,KAA4B,EAAA;AACjD,YAAA,MAAMmD,UAAU1D,MAAAA,CAAOE,MAAM,CAACC,GAAG,CAC/B,+BAAA,EACAwD,iDAAAA,CAAAA;YAEF,MAAM,EAAEX,KAAK,EAAE,GAAGhD,MAAAA,CACfG,GAAG,CAAC,cAAA,CAAA,CACJuC,SAAS,CAAC,kBAAA,EAAoB;gBAAE9B,OAAAA,EAASL,KAAAA,CAAMK,OAAO,IAAIlB;AAAU,aAAA,CAAA;YAEvE,MAAMkE,SAAAA,GAAY,MAAM5D,MAAAA,CAAOkC,EAAE,CAAC3B,KAAK,CAAC,kBAAA,CAAA,CAAoB8B,QAAQ,CAAC;gBACnEM,MAAAA,EAAQ;AAAC,oBAAA;AAAK,iBAAA;AACdK,gBAAAA,KAAAA,EAAOA,SAAS,EAAC;gBACjBa,OAAAA,EAAS;oBAAEzE,EAAAA,EAAI;AAAM,iBAAA;gBACrB0E,MAAAA,EAAQJ,OAAAA;gBACRK,KAAAA,EAAO;AACT,aAAA,CAAA;YAEA,OAAOH,SAAAA,CAAUxD,MAAM,GAAG,CAAA;AAC5B,QAAA,CAAA;AAEA4D,QAAAA,qBAAAA,CAAAA,CAAsBzD,KAAkB,EAAA;AACtC,YAAA,OAAOD,4BAA4BN,MAAAA,EAAQO,KAAAA,CAAAA;AAC7C,QAAA,CAAA;AAEA,QAAA,MAAM0D,oBAAmB1D,KAAkB,EAAA;YACzCR,eAAAA,CAAgBC,MAAAA,CAAAA;AAEhB,YAAA,MAAM,EAAEQ,MAAM,EAAE0D,QAAQ,EAAEzD,KAAK,EAAEE,KAAK,EAAEwD,IAAAA,EAAMC,KAAK,EAAEC,IAAAA,EAAMC,KAAK,EAAE,GAAGC,cAAc,GAAGhE,KAAAA;AAEtF,YAAA,MAAMiE,qBAAqBxE,MAAAA,CAAOE,MAAM,CAACC,GAAG,CAC1C,gCAAA,EACAsE,0CAAAA,CAAAA;YAEF,MAAMC,QAAAA,GAAWC,KAAKC,GAAG,CACvB,GACAD,IAAAA,CAAKE,GAAG,CAACX,QAAAA,IAAYM,kBAAAA,EAAoBM,8CAAAA,CAAAA,CAAAA;YAG3C,MAAM,EAAE9B,KAAAA,EAAOlC,YAAY,EAAE,GAAGd,MAAAA,CAC7BG,GAAG,CAAC,cAAA,CAAA,CACJuC,SAAS,CAAC,kBAAA,EAAoB6B,YAAAA,CAAAA;YAEjC,MAAMQ,WAAAA,GAAc,CAACzE,2BAAAA,CAA4BN,MAAAA,EAAQO,KAAAA,CAAAA;AACzD,YAAA,IAAIwE,WAAAA,EAAa;AACf,gBAAA,MAAM/E,MAAAA,CAAOgF,QAAQ,CAACC,IAAI,CAACC,qCAAAA,EAAwB;oBACjDtE,OAAAA,EAAS2D,YAAAA,CAAa3D,OAAO,IAAI;AACnC,iBAAA,CAAA;AACF,YAAA;YAEA,IAAIuE,WAAAA,GAAcJ,cAAcrF,SAAAA,GAAYe,KAAAA;AAC5C,YAAA,IAAI0E,gBAAgBzF,SAAAA,EAAW;gBAC7B,MAAM,CAAC0F,OAAAA,CAAQ,GAAG,MAAMpF,MAAAA,CAAOkC,EAAE,CAAC3B,KAAK,CAAC,kBAAA,CAAA,CAAoB8B,QAAQ,CAAC;oBACnEM,MAAAA,EAAQ;AAAC,wBAAA;AAAK,qBAAA;oBACdkB,OAAAA,EAAS;wBAAEzE,EAAAA,EAAI;AAAO,qBAAA;oBACtB2E,KAAAA,EAAO;AACT,iBAAA,CAAA;AAEAoB,gBAAAA,WAAAA,GAAcC,SAAShG,EAAAA,IAAM,CAAA;AAC/B,YAAA;AAEA,YAAA,MAAM2B,UAAUoE,WAAAA,IAAe,CAAA;AAC/B,YAAA,MAAME,QAAAA,GAAW,CAACrE,OAAAA,GAAoBH,gBAAAA,CAAiBC,cAAcC,OAAAA,EAASC,OAAAA,CAAAA;YAE9E,MAAMsE,QAAAA,GAAkC,MAAMtF,MAAAA,CAAOkC,EAAE,CAAC3B,KAAK,CAAC,kBAAA,CAAA,CAAoB8B,QAAQ,CAAC;gBACzFM,MAAAA,EAAQ;AAAC,oBAAA;AAAK,iBAAA;AACdK,gBAAAA,KAAAA,EAAOqC,SAAS7E,MAAAA,IAAU,CAAA,CAAA;gBAC1BqD,OAAAA,EAAS;oBAAEzE,EAAAA,EAAI;AAAM,iBAAA;AACrB0E,gBAAAA,MAAAA,EAAQY,QAAAA,GAAW,CAAA;gBACnBX,KAAAA,EAAO;AACT,aAAA,CAAA;YAEA,MAAMwB,UAAAA,GAAaD,QAAAA,CAASlF,MAAM,GAAG,CAAA,GAAIkF,QAAQ,CAAC,CAAA,CAAE,CAAClG,EAAE,GAAG,IAAA;AAE1D,YAAA,MAAMoG,iBAAiBD,UAAAA,IAAcxE,OAAAA;YAErC,gBAAgB0E,SAAAA,GAAAA;AACd,gBAAA,IAAIV,WAAAA,EAAa;AACf,oBAAA,MAAMW,cAAUpE,oBAAAA,CAAiBvC,kBAAAA,CAAAA;AACnC,gBAAA;AAEA,gBAAA,IAAI4G,SAASnF,MAAAA,IAAU,CAAA;AACvB,gBAAA,IAAIoF,SAAAA,GAAYlB,QAAAA;AAEhB,gBAAA,MAAOkB,YAAY,CAAA,CAAG;AACpB,oBAAA,MAAMC,UAAAA,GAAalB,IAAAA,CAAKE,GAAG,CAAC5F,iBAAAA,EAAmB2G,SAAAA,CAAAA;oBAC/C,MAAME,IAAAA,GAAc,MAAM9F,MAAAA,CAAOkC,EAAE,CAAC3B,KAAK,CAAC,kBAAA,CAAA,CAAoB8B,QAAQ,CAAC;wBACrEM,MAAAA,EAAQ;AAAC,4BAAA,IAAA;AAAM,4BAAA,QAAA;AAAU,4BAAA,MAAA;AAAQ,4BAAA;AAAU,yBAAA;wBAC3CO,QAAAA,EAAU;4BAAE/D,IAAAA,EAAM;gCAAEwD,MAAAA,EAAQ3D;AAAoB;AAAE,yBAAA;wBAClDgE,KAAAA,EAAOnC,gBAAAA,CAAiBC,cAAc0E,cAAAA,EAAgBG,MAAAA,CAAAA;wBACtD9B,OAAAA,EAAS;4BAAEzE,EAAAA,EAAI;AAAM,yBAAA;wBACrB2E,KAAAA,EAAO8B;AACT,qBAAA,CAAA;oBAEA,IAAIC,IAAAA,CAAK1F,MAAM,KAAK,CAAA,EAAG;AACrB,wBAAA;AACF,oBAAA;AAEA,oBAAA,MAAM0F,IAAAA,CAAKjD,GAAG,CAACzB,SAAAA,CAAAA,CAAW2E,IAAI,CAAC,EAAA,CAAA;AAE/BJ,oBAAAA,MAAAA,GAASG,IAAI,CAACA,IAAAA,CAAK1F,MAAM,GAAG,CAAA,CAAE,CAAChB,EAAE;AACjCwG,oBAAAA,SAAAA,IAAaE,KAAK1F,MAAM;oBAExB,IAAI0F,IAAAA,CAAK1F,MAAM,GAAGyF,UAAAA,EAAY;AAC5B,wBAAA;AACF,oBAAA;AACF,gBAAA;AACF,YAAA;YAEA,gBAAgBG,eAAAA,GAAAA;gBACd,IAAI;oBACF,OAAOP,SAAAA,EAAAA;AACT,gBAAA,CAAA,CAAE,OAAOQ,KAAAA,EAAO;AACdjG,oBAAAA,MAAAA,CAAO8C,GAAG,CAACmD,KAAK,CACd,CAAC,gFAAgF,EAAEA,KAAAA,CAAAA,CAAO,CAAA;oBAE5F,MAAMA,KAAAA;AACR,gBAAA;AACF,YAAA;YAEA,OAAO;gBACLC,MAAAA,EAAQC,eAAAA,CAASC,IAAI,CAACJ,eAAAA,EAAAA,EAAmB;oBAAEK,UAAAA,EAAY,KAAA;AAAOC,oBAAAA,aAAAA,EAAe,EAAA,GAAK;AAAK,iBAAA,CAAA;AACvFf,gBAAAA,UAAAA;gBACA9E,KAAAA,EAAOM,OAAAA;AACPgE,gBAAAA,WAAAA;AACAL,gBAAAA,QAAAA;AACA6B,gBAAAA,WAAAA,EAAaxB,cACTyB,2BAAAA,CAAgBzG,eAAAA,CAAgBC,SAASe,OAAAA,EAASwD,YAAAA,CAAa3D,OAAO,CAAA,GACrED;AACP,aAAA;AACF,QAAA,CAAA;AAEA,QAAA,MAAM8F,eAAclG,KAA6D,EAAA;AAC/E,YAAA,MAAM,EAAE4D,IAAAA,GAAO,CAAC,EAAED,QAAAA,GAAW,EAAE,EAAE,GAAG3D,KAAAA;YAEpC,MAAMmG,aAAAA,GAAgB1G,MAAAA,CAAOkC,EAAE,CAACyE,QAAQ,CAACxG,GAAG,CAAC,kBAAA,CAAA,CAAoByG,UAAU,CAACzH,IAAI;AAEhF,YAAA,IACEuH,eAAeG,IAAAA,KAAS,UAAA,IACxB,EAAE,WAAA,IAAeH,aAAY,CAAA,IAC7B,CAACA,aAAAA,CAAcI,SAAS,IACxB,EAAE,uBAAuBJ,aAAAA,CAAcI,SAAS,CAAD,EAC/C;AACA,gBAAA,MAAM,IAAIzG,KAAAA,CAAM,6DAAA,CAAA;AAClB,YAAA;YAEA,MAAM,EAAEyG,SAAS,EAAE,GAAGJ,aAAAA;YAEtB,MAAMK,SAAAA,GAAY,MAAM/G,MAAAA,CAAOkC,EAAE,CAC9B8E,UAAU,CAACF,SAAAA,CAAUG,IAAI,CAAA,CACzBC,QAAQ,CAACJ,SAAAA,CAAUK,iBAAiB,CAACF,IAAI,CAAA,CACzCG,KAAK,CAACN,SAAAA,CAAUK,iBAAiB,CAACF,IAAI,CAAA;AAEzC,YAAA,MAAM,EAAE3E,OAAO,EAAEE,UAAU,EAAE,GAAG,MAAMxC,MAAAA,CAAOkC,EAAE,CAAC3B,KAAK,CAAC,aAAA,CAAA,CAAekC,QAAQ,CAAC;gBAC5EE,MAAAA,EAAQ;AAAC,oBAAA,IAAA;AAAM,oBAAA,OAAA;AAAS,oBAAA,UAAA;AAAY,oBAAA,WAAA;AAAa,oBAAA;AAAW,iBAAA;gBAC5DK,KAAAA,EAAO;oBAAE5D,EAAAA,EAAI;wBAAE6D,GAAAA,EAAK8D;AAAU;AAAE,iBAAA;gBAChClD,OAAAA,EAAS;oBAAEzE,EAAAA,EAAI;AAAM,iBAAA;AACrB+E,gBAAAA,IAAAA,EAAMkD,MAAAA,CAAOlD,IAAAA,CAAAA;AACbD,gBAAAA,QAAAA,EAAUmD,MAAAA,CAAOnD,QAAAA;AACnB,aAAA,CAAA;YAEA,OAAO;gBACL5B,OAAAA,EAASA,OAAAA,CAAQO,GAAG,CAAC3D,gBAAAA,CAAAA;AACrBsD,gBAAAA;AACF,aAAA;AACF,QAAA,CAAA;AAEA,QAAA,MAAM8E,SAAQlI,EAAW,EAAA;YACvB,MAAMoE,MAAAA,GAAc,MAAMxD,MAAAA,CAAOkC,EAAE,CAAC3B,KAAK,CAAC,kBAAA,CAAA,CAAoB+G,OAAO,CAAC;gBACpEtE,KAAAA,EAAO;AAAE5D,oBAAAA;AAAG,iBAAA;gBACZ8D,QAAAA,EAAU;AAAC,oBAAA;AAAO,iBAAA;gBAClBP,MAAAA,EAAQ;AAAC,oBAAA,QAAA;AAAU,oBAAA,MAAA;AAAQ,oBAAA;AAAU;AACvC,aAAA,CAAA;AAEA,YAAA,IAAI,CAACa,MAAAA,EAAQ;gBACX,OAAO,IAAA;AACT,YAAA;AAEA,YAAA,MAAM,EAAErE,IAAI,EAAE,GAAG6C,MAAM,GAAGwB,MAAAA;YAC1B,OAAO;AACL,gBAAA,GAAGxB,IAAI;gBACP7C,IAAAA,EAAMA,IAAAA,GAAOD,iBAAiBC,IAAAA,CAAAA,GAAQ;AACxC,aAAA;AACF,QAAA,CAAA;AAEAoI,QAAAA,mBAAAA,CAAAA,CAAoBC,cAAoB,EAAA;AACtC,YAAA,OAAOxH,OAAOkC,EAAE,CAAC3B,KAAK,CAAC,kBAAA,CAAA,CAAoBkH,UAAU,CAAC;gBACpDzE,KAAAA,EAAO;oBACLxB,IAAAA,EAAM;AACJkG,wBAAAA,GAAAA,EAAKF,eAAe9F,WAAW;AACjC;AACF;AACF,aAAA,CAAA;AACF,QAAA;AACF,KAAA;AACF;;;;;"}

package/dist/server/ee/server/src/audit-logs/services/audit-logs.mjs

@@ -1,16 +1,91 @@
+import { Readable } from 'stream';
+import { AUDIT_LOGS_EXPORT_PART_ROWS, AUDIT_LOG_EXPORT_EVENT, AUDIT_LOGS_EXPORT_DEFAULT_MAX_ROWS, AUDIT_LOGS_EXPORT_PART_MAX_ROWS } from '../../../../../shared/utils/audit-log-export.mjs';
+import { getDisplayName } from '../utils.mjs';
+import { CSV_BOM, serializeCsvLine } from '../utils/csv.mjs';
+import { signExportToken, verifyExportToken } from '../utils/export-token.mjs';
+
+const EXPORT_CSV_COLUMNS = [
+    'id',
+    'action',
+    'date',
+    'user_id',
+    'user_email',
+    'user_display_name',
+    'origin',
+    'payload'
+];
+const EXPORT_USER_COLUMNS = [
+    'id',
+    'email',
+    'username',
+    'firstname',
+    'lastname'
+];
+const EXPORT_BATCH_SIZE = 5000;
 const getSanitizedUser = (user)=>{
-    let displayName = user.email;
-    if (user.username) {
-        displayName = user.username;
-    } else if (user.firstname && user.lastname) {
-        displayName = `${user.firstname} ${user.lastname}`;
-    }
     return {
         id: user.id,
         email: user.email,
-        displayName
+        displayName: getDisplayName(user)
     };
 };
+const serializeCsvPayload = (payload)=>{
+    if (payload === null || payload === undefined) {
+        return null;
+    }
+    return typeof payload === 'string' ? payload : JSON.stringify(payload);
+};
+const parseCsvPayload = (payload)=>{
+    if (typeof payload === 'string') {
+        try {
+            return JSON.parse(payload);
+        } catch  {
+            return null;
+        }
+    }
+    return typeof payload === 'object' ? payload : null;
+};
+const getExportSecret = (strapi)=>{
+    const secret = strapi.config.get('admin.auth.secret');
+    if (typeof secret !== 'string' || secret.length === 0) {
+        throw new Error('The audit logs export requires admin.auth.secret to be set in config/admin.js.');
+    }
+    return secret;
+};
+const isTrustedExportContinuation = (strapi, query)=>{
+    return query.cursor !== undefined && query.until !== undefined && verifyExportToken(getExportSecret(strapi), query.token, query.until, query.filters);
+};
+const buildExportWhere = (filtersWhere, untilId, afterId)=>({
+        $and: [
+            filtersWhere ?? {},
+            {
+                id: {
+                    $lte: untilId
+                }
+            },
+            ...afterId > 0 ? [
+                {
+                    id: {
+                        $gt: afterId
+                    }
+                }
+            ] : []
+        ]
+    });
+const toCsvLine = (row)=>{
+    const user = row.user ? getSanitizedUser(row.user) : null;
+    const { payload } = row;
+    return serializeCsvLine([
+        row.id,
+        row.action,
+        row.date instanceof Date ? row.date.toISOString() : row.date,
+        user?.id ?? null,
+        user?.email ?? null,
+        user?.displayName ?? null,
+        parseCsvPayload(payload)?.origin ?? null,
+        serializeCsvPayload(payload)
+    ]);
+};
 /**
  * @description
  * Manages audit logs interaction with the database. Accessible via strapi.get('audit-logs')
@@ -70,6 +145,124 @@ const getSanitizedUser = (user)=>{
                 pagination
             };
         },
+        async isExportTooLarge (query) {
+            const maxRows = strapi.config.get('admin.auditLogs.exportMaxRows', AUDIT_LOGS_EXPORT_DEFAULT_MAX_ROWS);
+            const { where } = strapi.get('query-params').transform('admin::audit-log', {
+                filters: query.filters ?? undefined
+            });
+            const beyondCap = await strapi.db.query('admin::audit-log').findMany({
+                select: [
+                    'id'
+                ],
+                where: where ?? {},
+                orderBy: {
+                    id: 'asc'
+                },
+                offset: maxRows,
+                limit: 1
+            });
+            return beyondCap.length > 0;
+        },
+        isTrustedContinuation (query) {
+            return isTrustedExportContinuation(strapi, query);
+        },
+        async createExportStream (query) {
+            getExportSecret(strapi);
+            const { cursor, pageSize, until, token, page: _page, sort: _sort, ...filtersQuery } = query;
+            const configuredPartSize = strapi.config.get('admin.auditLogs.exportPartRows', AUDIT_LOGS_EXPORT_PART_ROWS);
+            const partSize = Math.max(1, Math.min(pageSize ?? configuredPartSize, AUDIT_LOGS_EXPORT_PART_MAX_ROWS));
+            const { where: filtersWhere } = strapi.get('query-params').transform('admin::audit-log', filtersQuery);
+            const isNewExport = !isTrustedExportContinuation(strapi, query);
+            if (isNewExport) {
+                await strapi.eventHub.emit(AUDIT_LOG_EXPORT_EVENT, {
+                    filters: filtersQuery.filters ?? null
+                });
+            }
+            let frozenUntil = isNewExport ? undefined : until;
+            if (frozenUntil === undefined) {
+                const [lastRow] = await strapi.db.query('admin::audit-log').findMany({
+                    select: [
+                        'id'
+                    ],
+                    orderBy: {
+                        id: 'desc'
+                    },
+                    limit: 1
+                });
+                frozenUntil = lastRow?.id ?? 0;
+            }
+            const untilId = frozenUntil ?? 0;
+            const getWhere = (afterId)=>buildExportWhere(filtersWhere, untilId, afterId);
+            const boundary = await strapi.db.query('admin::audit-log').findMany({
+                select: [
+                    'id'
+                ],
+                where: getWhere(cursor ?? 0),
+                orderBy: {
+                    id: 'asc'
+                },
+                offset: partSize - 1,
+                limit: 2
+            });
+            const nextCursor = boundary.length > 1 ? boundary[0].id : null;
+            const partUpperBound = nextCursor ?? untilId;
+            async function* csvChunks() {
+                if (isNewExport) {
+                    yield CSV_BOM + serializeCsvLine(EXPORT_CSV_COLUMNS);
+                }
+                let lastId = cursor ?? 0;
+                let remaining = partSize;
+                while(remaining > 0){
+                    const batchLimit = Math.min(EXPORT_BATCH_SIZE, remaining);
+                    const rows = await strapi.db.query('admin::audit-log').findMany({
+                        select: [
+                            'id',
+                            'action',
+                            'date',
+                            'payload'
+                        ],
+                        populate: {
+                            user: {
+                                select: EXPORT_USER_COLUMNS
+                            }
+                        },
+                        where: buildExportWhere(filtersWhere, partUpperBound, lastId),
+                        orderBy: {
+                            id: 'asc'
+                        },
+                        limit: batchLimit
+                    });
+                    if (rows.length === 0) {
+                        break;
+                    }
+                    yield rows.map(toCsvLine).join('');
+                    lastId = rows[rows.length - 1].id;
+                    remaining -= rows.length;
+                    if (rows.length < batchLimit) {
+                        break;
+                    }
+                }
+            }
+            async function* loggedCsvChunks() {
+                try {
+                    yield* csvChunks();
+                } catch (error) {
+                    strapi.log.error(`Audit logs export failed after the response started, the CSV part is truncated: ${error}`);
+                    throw error;
+                }
+            }
+            return {
+                stream: Readable.from(loggedCsvChunks(), {
+                    objectMode: false,
+                    highWaterMark: 64 * 1024
+                }),
+                nextCursor,
+                until: untilId,
+                isNewExport,
+                partSize,
+                exportToken: isNewExport ? signExportToken(getExportSecret(strapi), untilId, filtersQuery.filters) : token
+            };
+        },
         async findManyUsers (query) {
             const { page = 1, pageSize = 10 } = query;
             const userAttribute = strapi.db.metadata.get('admin::audit-log').attributes.user;
@@ -137,5 +330,5 @@ const getSanitizedUser = (user)=>{
     };
 };
 
-export { createAuditLogsService };
+export { createAuditLogsService, toCsvLine };
 //# sourceMappingURL=audit-logs.mjs.map