@unchainedshop/events 5.0.0-alpha.4 → 5.0.0-alpha.5

package/lib/audit/audit-integration.js

@@ -1,13 +1,38 @@
 import { createLogger } from '@unchainedshop/logger';
 import { EventDirector } from "../EventDirector.js";
 import { OCSF_AUTH_ACTIVITY, OCSF_ACCOUNT_ACTIVITY, OCSF_API_ACTIVITY } from "./ocsf-types.js";
+import { getAuditContext } from "./request-context.js";
 const logger = createLogger('unchained:audit-integration');
+function entityLabel(entity, fallbackId) {
+    if (!entity)
+        return fallbackId || 'unknown';
+    const name = entity.slugs?.[0] || entity.key || entity.isoCode || entity.title || entity.name || entity.type;
+    const id = entity._id || fallbackId;
+    if (name && id)
+        return `${name} (${id})`;
+    return name || id || 'unknown';
+}
+function changedFields(payload, excludeKeys) {
+    const keys = Object.keys(payload).filter((k) => !excludeKeys.includes(k) && !k.startsWith('_') && k !== 'updated');
+    if (!keys.length)
+        return { label: '', data: null };
+    const data = {};
+    for (const key of keys) {
+        data[key] = payload[key];
+    }
+    return { label: ` [${keys.join(', ')}]`, data };
+}
 function extractContext(payload) {
+    const reqCtx = getAuditContext();
     return {
-        userId: payload.userId || payload.user?._id || payload.user?.id,
-        userName: payload.userName || payload.user?.username || payload.user?.emails?.[0]?.address,
-        remoteAddress: payload.remoteAddress || payload.ip,
-        sessionId: payload.sessionId,
+        userId: payload.userId || payload.user?._id || payload.user?.id || reqCtx?.userId,
+        userName: payload.userName ||
+            payload.username ||
+            payload.user?.username ||
+            payload.user?.emails?.[0]?.address ||
+            reqCtx?.userName,
+        remoteAddress: payload.remoteAddress || payload.ip || reqCtx?.remoteAddress,
+        sessionId: payload.sessionId || reqCtx?.sessionId,
     };
 }
 const ACCOUNT_ACTION_MAP = {
@@ -18,7 +43,462 @@ const ACCOUNT_ACTION_MAP = {
     'verify-email': { activity: OCSF_ACCOUNT_ACTIVITY.ENABLE, message: 'Email verified' },
     'enroll-account': { activity: OCSF_ACCOUNT_ACTIVITY.ENABLE, message: 'Account enrolled' },
 };
+const PAYLOAD_META_KEYS = ['userId', 'userName', 'remoteAddress', 'sessionId'];
+const API_EVENT_MAP = {
+    ORDER_CREATE: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createOrder',
+        message: (p) => `Order created: ${entityLabel(p.order)}`,
+        useOrderUserId: true,
+    },
+    ORDER_CHECKOUT: {
+        activity: OCSF_API_ACTIVITY.CHECKOUT,
+        operation: 'checkoutOrder',
+        message: (p) => `Order checkout: ${entityLabel(p.order)}`,
+        useOrderUserId: true,
+    },
+    ORDER_CONFIRMED: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'confirmOrder',
+        message: (p) => `Order confirmed: ${entityLabel(p.order)}`,
+        useOrderUserId: true,
+    },
+    ORDER_FULFILLED: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'fulfillOrder',
+        message: (p) => `Order fulfilled: ${entityLabel(p.order)}`,
+        useOrderUserId: true,
+    },
+    ORDER_REJECTED: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'rejectOrder',
+        message: (p) => `Order rejected: ${entityLabel(p.order)}`,
+        success: false,
+        useOrderUserId: true,
+    },
+    ORDER_DELIVER: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'deliverOrder',
+        message: (p) => `Order delivered: ${entityLabel(p.order)}`,
+        useOrderUserId: true,
+    },
+    ORDER_REMOVE: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeOrder',
+        message: (p) => `Order removed: ${entityLabel(p.order)}`,
+    },
+    ORDER_EMPTY_CART: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'emptyCart',
+        message: 'Cart emptied',
+    },
+    ORDER_ADD_PRODUCT: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'addToCart',
+        message: (p) => `Product added to cart: ${p.orderPosition?.productId || 'unknown'}`,
+    },
+    ORDER_REMOVE_CART_ITEM: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeFromCart',
+        message: 'Product removed from cart',
+    },
+    ORDER_SET_PAYMENT_PROVIDER: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'setPaymentProvider',
+        message: (p) => `Payment provider set: ${p.paymentProviderId || 'unknown'}`,
+    },
+    ORDER_SET_DELIVERY_PROVIDER: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'setDeliveryProvider',
+        message: (p) => `Delivery provider set: ${p.deliveryProviderId || 'unknown'}`,
+    },
+    ORDER_PAY: {
+        activity: OCSF_API_ACTIVITY.PAYMENT,
+        operation: 'processPayment',
+        message: 'Payment processed for order',
+    },
+    ORDER_UPDATE_PAYMENT: {
+        activity: OCSF_API_ACTIVITY.PAYMENT,
+        operation: 'updatePayment',
+        message: 'Payment updated',
+    },
+    ACL_DENIED: {
+        activity: OCSF_API_ACTIVITY.ACCESS_DENIED,
+        operation: '',
+        message: (p) => `Access denied: ${p.action || 'unknown'}`,
+        success: false,
+    },
+    ACL_GRANTED_SENSITIVE: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: '',
+        message: (p) => `Sensitive access granted: ${p.action || 'unknown'}`,
+    },
+    PRODUCT_CREATE: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createProduct',
+        message: (p) => `Product created: ${entityLabel(p.product)}`,
+    },
+    PRODUCT_UPDATE: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateProduct',
+        entityKey: 'product',
+        entityIdKey: 'productId',
+        trackChangedFields: true,
+        message: '',
+    },
+    PRODUCT_REMOVE: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeProduct',
+        message: (p) => `Product removed: ${entityLabel(p.product, p.productId)}`,
+    },
+    PRODUCT_PUBLISH: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'publishProduct',
+        message: (p) => `Product published: ${entityLabel(p.product, p.productId)}`,
+    },
+    PRODUCT_UNPUBLISH: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'unpublishProduct',
+        message: (p) => `Product unpublished: ${entityLabel(p.product, p.productId)}`,
+    },
+    PRODUCT_UPDATE_TEXT: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateProductText',
+        message: (p) => `Product text updated: ${p.productId || 'unknown'} [${p.text?.locale || ''}] ${p.text?.title || ''}`,
+    },
+    PRODUCT_UPDATE_MEDIA_TEXT: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateProductMediaText',
+        message: (p) => `Product media text updated: ${p.productId || p.mediaId || 'unknown'}`,
+    },
+    PRODUCT_ADD_MEDIA: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'addProductMedia',
+        message: (p) => `Product media added: ${p.productId || 'unknown'}`,
+    },
+    PRODUCT_REMOVE_MEDIA: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeProductMedia',
+        message: (p) => `Product media removed: ${p.productId || p.mediaId || 'unknown'}`,
+    },
+    PRODUCT_REORDER_MEDIA: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'reorderProductMedia',
+        message: (p) => `Product media reordered: ${p.productId || 'unknown'}`,
+    },
+    PRODUCT_ADD_ASSIGNMENT: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'addProductAssignment',
+        message: (p) => `Product assignment added: ${p.productId || 'unknown'}`,
+    },
+    PRODUCT_REMOVE_ASSIGNMENT: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeProductAssignment',
+        message: (p) => `Product assignment removed: ${p.productId || 'unknown'}`,
+    },
+    PRODUCT_CREATE_BUNDLE_ITEM: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createBundleItem',
+        message: (p) => `Bundle item created: ${p.productId || 'unknown'}`,
+    },
+    PRODUCT_REMOVE_BUNDLE_ITEM: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeBundleItem',
+        message: (p) => `Bundle item removed: ${p.productId || 'unknown'}`,
+    },
+    PRODUCT_CREATE_VARIATION: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createProductVariation',
+        message: (p) => `Product variation created: ${p.productId || 'unknown'}`,
+    },
+    PRODUCT_REMOVE_VARIATION: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeProductVariation',
+        message: (p) => `Product variation removed: ${p.productId || 'unknown'}`,
+    },
+    PRODUCT_VARIATION_OPTION_CREATE: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createVariationOption',
+        message: (p) => `Variation option created: ${p.productId || 'unknown'}`,
+    },
+    PRODUCT_REMOVE_VARIATION_OPTION: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeVariationOption',
+        message: (p) => `Variation option removed: ${p.productId || 'unknown'}`,
+    },
+    PRODUCT_UPDATE_VARIATION_TEXT: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateVariationText',
+        message: (p) => `Variation text updated: ${p.productId || 'unknown'}`,
+    },
+    PRODUCT_REVIEW_CREATE: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createProductReview',
+        message: (p) => `Product review created: ${p.productId || 'unknown'}`,
+    },
+    PRODUCT_UPDATE_REVIEW: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateProductReview',
+        message: (p) => `Product review updated: ${p.productId || 'unknown'}`,
+    },
+    PRODUCT_REMOVE_REVIEW: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeProductReview',
+        message: (p) => `Product review removed: ${p.productId || 'unknown'}`,
+    },
+    PRODUCT_REVIEW_ADD_VOTE: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'addProductReviewVote',
+        message: (p) => `Review vote added: ${p.productId || 'unknown'}`,
+    },
+    PRODUCT_REMOVE_REVIEW_VOTE: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeProductReviewVote',
+        message: (p) => `Review vote removed: ${p.productId || 'unknown'}`,
+    },
+    ASSORTMENT_UPDATE_TEXT: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateAssortmentText',
+        message: (p) => `Assortment text updated: ${p.assortmentId || 'unknown'} [${p.text?.locale || ''}] ${p.text?.title || ''}`,
+    },
+    ASSORTMENT_UPDATE_MEDIA_TEXT: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateAssortmentMediaText',
+        message: (p) => `Assortment media text updated: ${p.assortmentId || 'unknown'}`,
+    },
+    ASSORTMENT_ADD_PRODUCT: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'addAssortmentProduct',
+        message: (p) => `Product added to assortment: ${p.productId || 'unknown'} → ${p.assortmentId || 'unknown'}`,
+    },
+    ASSORTMENT_REMOVE_PRODUCT: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeAssortmentProduct',
+        message: (p) => `Product removed from assortment: ${p.assortmentId || 'unknown'}`,
+    },
+    ASSORTMENT_ADD_LINK: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'addAssortmentLink',
+        message: (p) => `Assortment link added: ${p.assortmentId || 'unknown'}`,
+    },
+    ASSORTMENT_REMOVE_LINK: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeAssortmentLink',
+        message: (p) => `Assortment link removed: ${p.assortmentId || 'unknown'}`,
+    },
+    ASSORTMENT_ADD_FILTER: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'addAssortmentFilter',
+        message: (p) => `Filter added to assortment: ${p.assortmentId || 'unknown'}`,
+    },
+    ASSORTMENT_REMOVE_FILTER: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeAssortmentFilter',
+        message: (p) => `Filter removed from assortment: ${p.assortmentId || 'unknown'}`,
+    },
+    ASSORTMENT_ADD_MEDIA: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'addAssortmentMedia',
+        message: (p) => `Assortment media added: ${p.assortmentId || 'unknown'}`,
+    },
+    ASSORTMENT_REMOVE_MEDIA: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeAssortmentMedia',
+        message: (p) => `Assortment media removed: ${p.assortmentId || 'unknown'}`,
+    },
+    ASSORTMENT_REORDER_PRODUCTS: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'reorderAssortmentProducts',
+        message: (p) => `Assortment products reordered: ${p.assortmentId || 'unknown'}`,
+    },
+    ASSORTMENT_REORDER_LINKS: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'reorderAssortmentLinks',
+        message: (p) => `Assortment links reordered: ${p.assortmentId || 'unknown'}`,
+    },
+    ASSORTMENT_REORDER_FILTERS: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'reorderAssortmentFilters',
+        message: (p) => `Assortment filters reordered: ${p.assortmentId || 'unknown'}`,
+    },
+    ASSORTMENT_REORDER_MEDIA: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'reorderAssortmentMedia',
+        message: (p) => `Assortment media reordered: ${p.assortmentId || 'unknown'}`,
+    },
+    FILTER_UPDATE_TEXT: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateFilterText',
+        message: (p) => `Filter text updated: ${p.filterId || 'unknown'} [${p.text?.locale || ''}] ${p.text?.title || ''}`,
+    },
+    PAYMENT_PROVIDER_CREATE: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createPaymentProvider',
+        message: (p) => `Payment provider created: ${entityLabel(p.paymentProvider)}`,
+    },
+    PAYMENT_PROVIDER_UPDATE: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updatePaymentProvider',
+        message: (p) => `Payment provider updated: ${entityLabel(p.paymentProvider, p.paymentProviderId)}`,
+    },
+    PAYMENT_PROVIDER_REMOVE: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removePaymentProvider',
+        message: (p) => `Payment provider removed: ${entityLabel(p.paymentProvider, p.paymentProviderId)}`,
+    },
+    DELIVERY_PROVIDER_CREATE: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createDeliveryProvider',
+        message: (p) => `Delivery provider created: ${entityLabel(p.deliveryProvider)}`,
+    },
+    DELIVERY_PROVIDER_UPDATE: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateDeliveryProvider',
+        message: (p) => `Delivery provider updated: ${entityLabel(p.deliveryProvider, p.deliveryProviderId)}`,
+    },
+    DELIVERY_PROVIDER_REMOVE: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeDeliveryProvider',
+        message: (p) => `Delivery provider removed: ${entityLabel(p.deliveryProvider, p.deliveryProviderId)}`,
+    },
+    WAREHOUSING_PROVIDER_CREATE: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createWarehousingProvider',
+        message: (p) => `Warehousing provider created: ${entityLabel(p.warehousingProvider)}`,
+    },
+    WAREHOUSING_PROVIDER_UPDATE: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateWarehousingProvider',
+        message: (p) => `Warehousing provider updated: ${entityLabel(p.warehousingProvider, p.warehousingProviderId)}`,
+    },
+    WAREHOUSING_PROVIDER_REMOVE: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeWarehousingProvider',
+        message: (p) => `Warehousing provider removed: ${entityLabel(p.warehousingProvider, p.warehousingProviderId)}`,
+    },
+    TOKEN_OWNERSHIP_CHANGED: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'transferToken',
+        message: (p) => `Token ownership changed: ${entityLabel(p.token, p.tokenId)}`,
+    },
+    TOKEN_INVALIDATED: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'invalidateToken',
+        message: (p) => `Token invalidated: ${entityLabel(p.token, p.tokenId)}`,
+    },
+    ENROLLMENT_CREATE: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createEnrollment',
+        message: (p) => `Enrollment created: ${entityLabel(p.enrollment)}`,
+    },
+    ENROLLMENT_UPDATE: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateEnrollment',
+        message: (p) => `Enrollment updated: ${entityLabel(p.enrollment, p.enrollmentId)}`,
+    },
+    ENROLLMENT_REMOVE: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeEnrollment',
+        message: (p) => `Enrollment removed: ${entityLabel(p.enrollment, p.enrollmentId)}`,
+    },
+    QUOTATION_REQUEST_CREATE: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createQuotation',
+        message: (p) => `Quotation created: ${entityLabel(p.quotation)}`,
+    },
+    QUOTATION_UPDATE: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateQuotation',
+        message: (p) => `Quotation updated: ${entityLabel(p.quotation, p.quotationId)}`,
+    },
+    ASSORTMENT_CREATE: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createAssortment',
+        message: (p) => `Assortment created: ${entityLabel(p.assortment)}`,
+    },
+    ASSORTMENT_UPDATE: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateAssortment',
+        message: (p) => `Assortment updated: ${entityLabel(p.assortment, p.assortmentId)}`,
+    },
+    ASSORTMENT_REMOVE: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeAssortment',
+        message: (p) => `Assortment removed: ${entityLabel(p.assortment, p.assortmentId)}`,
+    },
+    FILTER_CREATE: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createFilter',
+        message: (p) => `Filter created: ${entityLabel(p.filter)}`,
+    },
+    FILTER_UPDATE: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateFilter',
+        message: (p) => `Filter updated: ${entityLabel(p.filter, p.filterId)}`,
+    },
+    FILTER_REMOVE: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeFilter',
+        message: (p) => `Filter removed: ${entityLabel(p.filter, p.filterId)}`,
+    },
+    FILE_CREATE: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createFile',
+        message: (p) => `File created: ${entityLabel(p.file, p.fileId)}`,
+    },
+    FILE_REMOVE: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeFile',
+        message: (p) => `File removed: ${entityLabel(p.file, p.fileId)}`,
+    },
+    COUNTRY_CREATE: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createCountry',
+        message: (p) => `Country created: ${entityLabel(p.country, p.countryId)}`,
+    },
+    COUNTRY_UPDATE: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateCountry',
+        message: (p) => `Country updated: ${entityLabel(p.country, p.countryId)}`,
+    },
+    COUNTRY_REMOVE: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeCountry',
+        message: (p) => `Country removed: ${entityLabel(p.country, p.countryId)}`,
+    },
+    CURRENCY_CREATE: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createCurrency',
+        message: (p) => `Currency created: ${entityLabel(p.currency, p.currencyId)}`,
+    },
+    CURRENCY_UPDATE: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateCurrency',
+        message: (p) => `Currency updated: ${entityLabel(p.currency, p.currencyId)}`,
+    },
+    CURRENCY_REMOVE: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeCurrency',
+        message: (p) => `Currency removed: ${entityLabel(p.currency, p.currencyId)}`,
+    },
+    LANGUAGE_CREATE: {
+        activity: OCSF_API_ACTIVITY.CREATE,
+        operation: 'createLanguage',
+        message: (p) => `Language created: ${entityLabel(p.language, p.languageId)}`,
+    },
+    LANGUAGE_UPDATE: {
+        activity: OCSF_API_ACTIVITY.UPDATE,
+        operation: 'updateLanguage',
+        message: (p) => `Language updated: ${entityLabel(p.language, p.languageId)}`,
+    },
+    LANGUAGE_REMOVE: {
+        activity: OCSF_API_ACTIVITY.DELETE,
+        operation: 'removeLanguage',
+        message: (p) => `Language removed: ${entityLabel(p.language, p.languageId)}`,
+    },
+};
 export function configureAuditIntegration(auditLog) {
+    const subscribedEvents = new Set();
     const sub = (event, handler) => {
         try {
             EventDirector.subscribe(event, async ({ payload }) => {
@@ -29,6 +509,7 @@ export function configureAuditIntegration(auditLog) {
                     logger.error(`Audit log error for ${event}: ${error}`);
                 }
             });
+            subscribedEvents.add(event);
         }
         catch {
         }
@@ -37,6 +518,15 @@ export function configureAuditIntegration(auditLog) {
         const ctx = extractContext(p);
         await auditLog.logAuthentication({ activity: OCSF_AUTH_ACTIVITY.LOGON, ...ctx, success: true });
     });
+    sub('API_LOGIN_FAILED', async (p) => {
+        const ctx = extractContext(p);
+        await auditLog.logAuthentication({
+            activity: OCSF_AUTH_ACTIVITY.LOGON,
+            ...ctx,
+            success: false,
+            message: 'Failed login attempt',
+        });
+    });
     sub('API_LOGOUT', async (p) => {
         const ctx = extractContext(p);
         await auditLog.logAuthentication({ activity: OCSF_AUTH_ACTIVITY.LOGOFF, ...ctx, success: true });
@@ -83,104 +573,51 @@ export function configureAuditIntegration(auditLog) {
         };
         await auditLog.logAccountChange({ ...mapped, ...ctx, success: true });
     });
-    sub('ORDER_CREATE', async (p) => {
-        const ctx = extractContext(p);
-        await auditLog.logApiActivity({
-            activity: OCSF_API_ACTIVITY.CREATE,
-            ...ctx,
-            userId: p.order?.userId || ctx.userId,
-            success: true,
-            operation: 'createOrder',
-            message: `Order created: ${p.order?._id || 'unknown'}`,
-        });
-    });
-    sub('ORDER_CHECKOUT', async (p) => {
-        const ctx = extractContext(p);
-        await auditLog.logApiActivity({
-            activity: OCSF_API_ACTIVITY.CHECKOUT,
-            ...ctx,
-            userId: p.order?.userId || ctx.userId,
-            success: true,
-            operation: 'checkoutOrder',
-            message: `Order checkout: ${p.order?._id || 'unknown'}`,
-        });
-    });
-    sub('ORDER_CONFIRMED', async (p) => {
-        const ctx = extractContext(p);
-        await auditLog.logApiActivity({
-            activity: OCSF_API_ACTIVITY.UPDATE,
-            ...ctx,
-            userId: p.order?.userId || ctx.userId,
-            success: true,
-            operation: 'confirmOrder',
-            message: `Order confirmed: ${p.order?._id || 'unknown'}`,
-        });
-    });
-    sub('ORDER_FULFILLED', async (p) => {
-        const ctx = extractContext(p);
-        await auditLog.logApiActivity({
-            activity: OCSF_API_ACTIVITY.UPDATE,
-            ...ctx,
-            userId: p.order?.userId || ctx.userId,
-            success: true,
-            operation: 'fulfillOrder',
-            message: `Order fulfilled: ${p.order?._id || 'unknown'}`,
-        });
-    });
-    sub('ORDER_REJECTED', async (p) => {
-        const ctx = extractContext(p);
-        await auditLog.logApiActivity({
-            activity: OCSF_API_ACTIVITY.UPDATE,
-            ...ctx,
-            userId: p.order?.userId || ctx.userId,
-            success: false,
-            operation: 'rejectOrder',
-            message: `Order rejected: ${p.order?._id || 'unknown'}`,
-        });
-    });
-    sub('ORDER_ADD_PRODUCT', async (p) => {
-        const ctx = extractContext(p);
-        await auditLog.logApiActivity({
-            activity: OCSF_API_ACTIVITY.UPDATE,
-            ...ctx,
-            success: true,
-            operation: 'addToCart',
-            message: `Product added to cart: ${p.orderPosition?.productId || 'unknown'}`,
-        });
-    });
-    sub('ORDER_REMOVE_CART_ITEM', async (p) => {
-        const ctx = extractContext(p);
-        await auditLog.logApiActivity({
-            activity: OCSF_API_ACTIVITY.DELETE,
-            ...ctx,
-            success: true,
-            operation: 'removeFromCart',
-            message: 'Product removed from cart',
-        });
-    });
-    sub('ORDER_PAY', async (p) => {
-        const ctx = extractContext(p);
-        await auditLog.logApiActivity({
-            activity: OCSF_API_ACTIVITY.PAYMENT,
-            ...ctx,
-            success: true,
-            operation: 'processPayment',
-            message: 'Payment processed for order',
-        });
-    });
-    sub('ORDER_UPDATE_PAYMENT', async (p) => {
-        const ctx = extractContext(p);
-        await auditLog.logApiActivity({
-            activity: OCSF_API_ACTIVITY.PAYMENT,
-            ...ctx,
-            success: true,
-            operation: 'updatePayment',
-            message: 'Payment updated',
+    for (const [event, mapping] of Object.entries(API_EVENT_MAP)) {
+        sub(event, async (p) => {
+            const ctx = extractContext(p);
+            let message;
+            let data = null;
+            if (mapping.trackChangedFields) {
+                const entity = mapping.entityKey ? p[mapping.entityKey] : undefined;
+                const idKey = mapping.entityIdKey ? p[mapping.entityIdKey] : undefined;
+                const changed = changedFields(p, [
+                    mapping.entityKey || '',
+                    mapping.entityIdKey || '',
+                    ...PAYLOAD_META_KEYS,
+                ]);
+                message = `${mapping.operation
+                    .replace(/([A-Z])/g, ' $1')
+                    .replace(/^./, (s) => s.toUpperCase())
+                    .trim()}: ${entityLabel(entity, idKey)}${changed.label}`;
+                data = changed.data;
+            }
+            else if (typeof mapping.message === 'function') {
+                message = mapping.message(p);
+            }
+            else {
+                message = mapping.message;
+            }
+            await auditLog.logApiActivity({
+                activity: mapping.activity,
+                ...ctx,
+                userId: mapping.useOrderUserId ? p.order?.userId || ctx.userId : ctx.userId,
+                success: mapping.success ?? true,
+                operation: mapping.operation || p.action || 'unknown',
+                message,
+                ...(data ? { data } : {}),
+            });
         });
-    });
+    }
+    const missing = AUDITED_EVENTS.filter((e) => !subscribedEvents.has(e));
+    if (missing.length > 0) {
+        logger.warn(`Audit integration: ${missing.length} advertised events not registered: ${missing.join(', ')}`);
+    }
+    logger.info(`Audit integration configured: ${subscribedEvents.size}/${AUDITED_EVENTS.length} events subscribed`);
 }
 export const AUDITED_EVENTS = [
     'API_LOGIN_TOKEN_CREATED',
+    'API_LOGIN_FAILED',
     'API_LOGOUT',
     'USER_CREATE',
     'USER_REMOVE',
@@ -197,4 +634,83 @@ export const AUDITED_EVENTS = [
     'ORDER_REMOVE_CART_ITEM',
     'ORDER_PAY',
     'ORDER_UPDATE_PAYMENT',
+    'ORDER_DELIVER',
+    'ORDER_REMOVE',
+    'ORDER_EMPTY_CART',
+    'ORDER_SET_PAYMENT_PROVIDER',
+    'ORDER_SET_DELIVERY_PROVIDER',
+    'ACL_DENIED',
+    'ACL_GRANTED_SENSITIVE',
+    'PRODUCT_CREATE',
+    'PRODUCT_UPDATE',
+    'PRODUCT_REMOVE',
+    'PRODUCT_PUBLISH',
+    'PRODUCT_UNPUBLISH',
+    'PRODUCT_UPDATE_TEXT',
+    'PRODUCT_UPDATE_MEDIA_TEXT',
+    'PRODUCT_ADD_MEDIA',
+    'PRODUCT_REMOVE_MEDIA',
+    'PRODUCT_REORDER_MEDIA',
+    'PRODUCT_ADD_ASSIGNMENT',
+    'PRODUCT_REMOVE_ASSIGNMENT',
+    'PRODUCT_CREATE_BUNDLE_ITEM',
+    'PRODUCT_REMOVE_BUNDLE_ITEM',
+    'PRODUCT_CREATE_VARIATION',
+    'PRODUCT_REMOVE_VARIATION',
+    'PRODUCT_VARIATION_OPTION_CREATE',
+    'PRODUCT_REMOVE_VARIATION_OPTION',
+    'PRODUCT_UPDATE_VARIATION_TEXT',
+    'PRODUCT_REVIEW_CREATE',
+    'PRODUCT_UPDATE_REVIEW',
+    'PRODUCT_REMOVE_REVIEW',
+    'PRODUCT_REVIEW_ADD_VOTE',
+    'PRODUCT_REMOVE_REVIEW_VOTE',
+    'ASSORTMENT_UPDATE_TEXT',
+    'ASSORTMENT_UPDATE_MEDIA_TEXT',
+    'ASSORTMENT_ADD_PRODUCT',
+    'ASSORTMENT_REMOVE_PRODUCT',
+    'ASSORTMENT_ADD_LINK',
+    'ASSORTMENT_REMOVE_LINK',
+    'ASSORTMENT_ADD_FILTER',
+    'ASSORTMENT_REMOVE_FILTER',
+    'ASSORTMENT_ADD_MEDIA',
+    'ASSORTMENT_REMOVE_MEDIA',
+    'ASSORTMENT_REORDER_PRODUCTS',
+    'ASSORTMENT_REORDER_LINKS',
+    'ASSORTMENT_REORDER_FILTERS',
+    'ASSORTMENT_REORDER_MEDIA',
+    'FILTER_UPDATE_TEXT',
+    'PAYMENT_PROVIDER_CREATE',
+    'PAYMENT_PROVIDER_UPDATE',
+    'PAYMENT_PROVIDER_REMOVE',
+    'DELIVERY_PROVIDER_CREATE',
+    'DELIVERY_PROVIDER_UPDATE',
+    'DELIVERY_PROVIDER_REMOVE',
+    'WAREHOUSING_PROVIDER_CREATE',
+    'WAREHOUSING_PROVIDER_UPDATE',
+    'WAREHOUSING_PROVIDER_REMOVE',
+    'TOKEN_OWNERSHIP_CHANGED',
+    'TOKEN_INVALIDATED',
+    'ENROLLMENT_CREATE',
+    'ENROLLMENT_UPDATE',
+    'ENROLLMENT_REMOVE',
+    'QUOTATION_REQUEST_CREATE',
+    'QUOTATION_UPDATE',
+    'ASSORTMENT_CREATE',
+    'ASSORTMENT_UPDATE',
+    'ASSORTMENT_REMOVE',
+    'FILTER_CREATE',
+    'FILTER_UPDATE',
+    'FILTER_REMOVE',
+    'FILE_CREATE',
+    'FILE_REMOVE',
+    'COUNTRY_CREATE',
+    'COUNTRY_UPDATE',
+    'COUNTRY_REMOVE',
+    'CURRENCY_CREATE',
+    'CURRENCY_UPDATE',
+    'CURRENCY_REMOVE',
+    'LANGUAGE_CREATE',
+    'LANGUAGE_UPDATE',
+    'LANGUAGE_REMOVE',
 ];