alepha 0.21.2 → 0.23.0

package/dist/api/audits/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/api/audits/entities/audits.ts","../../../src/api/audits/schemas/auditQuerySchema.ts","../../../src/api/audits/schemas/createAuditSchema.ts","../../../src/api/audits/services/AuditService.ts","../../../src/api/audits/controllers/AdminAuditController.ts","../../../src/api/audits/primitives/$audit.ts","../../../src/orm/core/schemas/insertSchema.ts","../../../src/orm/core/schemas/updateSchema.ts","../../../src/orm/core/primitives/$entity.ts","../../../src/orm/core/constants/PG_SYMBOLS.ts","../../../src/orm/core/helpers/pgAttr.ts","../../../src/orm/core/schemas/databaseEnvSchema.ts","../../../src/api/audits/schemas/auditResourceSchema.ts","../../../src/api/audits/index.ts"],"mappings":";;;;;;;;;;;;;;cAOa,mBAAA,EAGX,SAAA,CAH8B,OAAA;AAAA,KAKpB,aAAA,GAAgB,MAAA,QAAc,mBAAA;;;;;;;;;;cAW7B,MAAA,EAAM,aAAA,CAAA,eAAA,WAAA,OAAA;gDAyGjB,SAAA,CAAA,OAAA;;;EAzHW;;;;;EAKD;;;;EAAiD;AAW7D;;;EAyGE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAzGiB;;;;;cA2GN,iBAAA,YAAiB,OAAA;gDAAgB,SAAA,CAAA,OAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAA9C;;;;cACa,uBAAA,EAAuB,aAAA,CAAA,aAAA,WAAA,OAAA;gDAAsB,SAAA,CAAA,OAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAC9C,WAAA,GAAc,MAAA,QAAc,MAAA,CAAO,MAAA;;;;;;cC5HlC,gBAAA,YAAgB,OAAA;4BAY3B,SAAA,CAAA,QAAA;;;;;;;;;;;;;;;KAEU,UAAA,GAAa,MAAA,QAAc,gBAAA;;;;;;cCf1B,iBAAA,YAAiB,OAAA;QAiB5B,SAAA,CAAA,OAAA;;;;;;;;;;;;;;;;;KAEU,WAAA,GAAc,MAAA,QAAc,iBAAA;;;;;;UCXvB,mBAAA;EACf,IAAA;EACA,WAAA;EACA,OAAA;AAAA;;;;;;AHXF;;;;cGuBa,YAAA;EAAA,mBACQ,MAAA,EAAM,MAAA;EAAA,mBACN,GAAA,EADM,gBAAA,CACH,MAAA;EAAA,mBACH,IAAA,EAAI,aAAA,CAAA,UAAA,WAAA,OAAA;kDADD,SAAA,CAAA,OAAA;;;;;;;;;;;;;;;;;;;;;;;qBAMH,UAAA,EAAU,GAAA,SAAA,mBAAA;;;;EAKtB,YAAA,CAAa,UAAA,EAAY,mBAAA;;;;EAWzB,kBAAA,CAAA,GAAsB,mBAAA;;;;YAOnB,iBAAA,CAAA,GAAqB,aAAA;;;;;EAQlB,MAAA,CAAO,IAAA,EAAM,WAAA,GAAc,OAAA,CAAQ,WAAA;;;;EA4DnC,MAAA,CACX,IAAA,UACA,MAAA,UACA,OAAA,GAAS,IAAA,CAAK,WAAA,uBACb,OAAA,CAAQ,WAAA;;;;EAOE,UAAA,CACX,MAAA,sFAOA,OAAA,GAAS,IAAA,CAAK,WAAA,uBACb,OAAA,CAAQ,WAAA;;;;EAYE,UAAA,CACX,MAAA,yEAOA,OAAA,GAAS,IAAA,CAAK,WAAA,uBACb,OAAA,CAAQ,WAAA;EHnJM;;;EG+JJ,YAAA,CACX,MAAA,kCACA,OAAA,GAAS,IAAA,CAAK,WAAA,uBACb,OAAA,CAAQ,WAAA;;;;EAOE,cAAA,CACX,MAAA,4EAKA,OAAA,GAAS,IAAA,CAAK,WAAA,uBACb,OAAA,CAAQ,WAAA;;;;EAYE,YAAA,CACX,MAAA,sEACA,OAAA,GAAS,IAAA,CAAK,WAAA,uBACb,OAAA,CAAQ,WAAA;;;;EAYE,IAAA,CAAK,KAAA,GAAO,UAAA,GAAkB,OAAA,CAAQ,IAAA,CAAK,WAAA;;;;EAgE3C,OAAA,CAAQ,EAAA,WAAa,OAAA,CAAQ,WAAA;;;;EAO7B,UAAA,CACX,MAAA,UACA,KAAA,GAAO,IAAA,CAAK,UAAA,cACX,OAAA,CAAQ,IAAA,CAAK,WAAA;;;;EAOH,cAAA,CACX,YAAA,UACA,UAAA,UACA,KAAA,GAAO,IAAA,CAAK,UAAA,mCACX,OAAA,CAAQ,IAAA,CAAK,WAAA;;;;EAOH,QAAA,CACX,OAAA;IAAW,IAAA,GAAO,IAAA;IAAM,EAAA,GAAK,IAAA;IAAM,SAAA;EAAA,IAClC,OAAA,CAAQ,UAAA;;;;EAiEE,eAAA,CAAgB,IAAA,EAAM,IAAA,GAAO,OAAA;AAAA;;;;UAoB3B,UAAA;EACf,KAAA;EACA,MAAA,EAAQ,MAAA;EACR,UAAA,EAAY,MAAA,CAAO,aAAA;EACnB,WAAA;EACA,cAAA,EAAgB,WAAA;AAAA;;;;;;;;;;;;cCvYL,oBAAA;EAAA,mBACQ,GAAA;EAAA,mBACA,KAAA;EAAA,mBACA,YAAA,EAAY,YAAA;EAAA,mBACZ,IAAA,EAAI,aAAA,CAAA,UAAA,WAAA,OAAA;kDADQ,SAAA,CAAA,OAAA;;;;;;;;;;;;;;;;;;;;;;;WAMf,UAAA,mBAAU,iBAAA;;gCALH,SAAA,CAAA,QAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAoBP,QAAA,mBAAQ,iBAAA;;UAfE,SAAA,CAAA,OAAA;IAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;WAiCV,YAAA,mBAAY,iBAAA;;4BAlBJ,SAAA,CAAA,OAAA;IAAA;;;;;;;;;WA4CR,WAAA,mBAAW,iBAAA;;YA1BC,SAAA,CAAA,OAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA0CZ,UAAA,mBAAU,iBAAA;;cAhBC,SAAA,CAAA,OAAA;IAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAmCX,cAAA,mBAAc,iBAAA;;oBAnBJ,SAAA,CAAA,OAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA2CV,aAAA,mBAAa,iBAAA;;gCAxBC,SAAA,CAAA,OAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA0Dd,QAAA,mBAAQ,iBAAA;;YAlCK,SAAA,CAAA,OAAA;;;;;;;;WAsDb,gBAAA,mBAAgB,iBAAA;;8BApBR,SAAA,CAAA,OAAA;;;;;;;;;;;;UC3KT,qBAAA;;;;EAIf,IAAA;;;;EAKA,WAAA;;;;EAKA,OAAA;AAAA;ALhBF;;;;;AAKA;;;;;AAWA;;;;;;;;;;;;;;;;AAhBA,cK6Ca,cAAA,SAAuB,SAAA,CAAU,qBAAA;EAAA,mBACzB,YAAA,EAAY,YAAA;;;;MAKpB,IAAA,CAAA;;;;MAOA,WAAA,CAAA;;;;MAOA,OAAA,CAAA;;;;EAOE,GAAA,CACX,MAAA,UACA,OAAA,GAAS,eAAA,GACR,OAAA;;;;EAOU,UAAA,CACX,MAAA,UACA,OAAA,GAAS,IAAA,CAAK,eAAA,eACb,OAAA;;;;EAOU,UAAA,CACX,MAAA,UACA,YAAA,UACA,OAAA,GAAS,IAAA,CAAK,eAAA,gCACb,OAAA;;;;YAOO,MAAA,CAAA;AAAA;;;;UAaK,eAAA;EACf,QAAA;EACA,MAAA;EACA,SAAA;EACA,SAAA;EACA,YAAA;EACA,UAAA;EACA,WAAA;EACA,QAAA,GAAW,MAAA;EACX,SAAA;EACA,SAAA;EACA,SAAA;EACA,SAAA;EACA,OAAA;EACA,YAAA;AAAA;;;;;;;;;;;;;;;cAiBW,MAAA;EAAA,UAAmB,qBAAA,GAAqB,cAAA;EAAA;;;;;;;;;;;;;KCzIzC,aAAA,WAAwB,OAAA,IAAW,OAAA,eACjC,CAAA,kBAAmB,CAAA,eAAgB,CAAA;EAAA,CAC5C,YAAA;AAAA,YAGC,CAAA,GAAI,CAAA,eAAgB,CAAA;EAAA,CACjB,UAAA;AAAA;EAAA,CACA,eAAA;AAAA;EACD,WAAA;AAAA,IACF,SAAA,CAAU,CAAA,eAAgB,CAAA,KAC1B,CAAA,eAAgB,CAAA;;;;;;;;;;;;KCTV,aAAA,WAAwB,OAAA,IAAW,OAAA,eACjC,CAAA,kBAAmB,CAAA,eAAgB,CAAA;EAAA,CAC5C,YAAA;AAAA,YAGC,CAAA,GAAI,CAAA,eAAgB,CAAA,UAAW,SAAA,YAC/B,SAAA,CAAU,MAAA,EAAQ,CAAA,EAAG,KAAA,MACrB,CAAA,eAAgB,CAAA;;;UCWL,sBAAA,WACL,OAAA,eACG,MAAA,CAAO,CAAA;ER1BuC;AAW7D;;;EQqBE,IAAA;;;;EAKA,MAAA,EAAQ,CAAA;;;;EAKR,OAAA,IACI,IAAA;;;;IAKE,MAAA,EAAQ,IAAA;;;;IAIR,MAAA;;;;IAIA,IAAA;;;;IAIA,KAAA,GAAQ,GAAA;EAAA;;;;IAMR,OAAA,EAAS,IAAA;;;;IAIT,MAAA;;;;IAIA,IAAA;;;;IAIA,KAAA,GAAQ,GAAA;EAAA;;;;;;;;;;;;;;;;;IAmBR,WAAA,GAAc,IAAA,EAAM,MAAA,CAAO,IAAA,qBAAyB,GAAA;;;;IAIpD,MAAA;;;;IAIA,IAAA;;;;IAIA,KAAA,GAAQ,GAAA;EAAA;;;;EAOd,WAAA,GAAc,KAAA;;;;IAIZ,IAAA;;;;IAIA,OAAA,EAAS,KAAA,OAAY,MAAA,CAAO,CAAA;;;;;IAK5B,cAAA,EAAgB,KAAA,OAAY,YAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ARXhC;;;EQ6CE,WAAA,GAAc,KAAA;;;;IAIZ,OAAA,EAAS,KAAA,OAAY,MAAA,CAAO,CAAA;;;;IAI5B,IAAA;;;;IAIA,MAAA;;;;IAIA,KAAA,GAAQ,GAAA;EAAA;;;;EAMV,MAAA,IACE,IAAA,EAAM,uBAAA,SAAgC,UAAA,CAAW,CAAA,aAC9C,uBAAA;AAAA;AAAA,cAKM,eAAA,WAA0B,OAAA,GAAU,OAAA;EAAA,SAC/B,OAAA,EAAS,sBAAA,CAAuB,CAAA;cAEpC,OAAA,EAAS,sBAAA,CAAuB,CAAA;EAI5C,KAAA,CAAM,KAAA;EAAA,IAYF,IAAA,CAAA,GAAQ,aAAA,CAAc,CAAA;EAAA,IActB,IAAA,CAAA;EAAA,IAIA,MAAA,CAAA,GAAU,CAAA;EAAA,IAIV,YAAA,CAAA,GAAgB,aAAA,CAAc,CAAA;EAAA,IAI9B,YAAA,CAAA,GAAgB,aAAA,CAAc,CAAA;AAAA;;;;KAYxB,UAAA,WAAqB,OAAA,oBACjB,CAAA,iBAAkB,mBAAA;AAAA,KAYtB,YAAA,WAAuB,OAAA;EACjC,IAAA;EACA,MAAA,EAAQ,eAAA,CAAgB,CAAA;AAAA;AAAA,KAGd,aAAA,WAAwB,OAAA,oBACpB,CAAA,iBAAkB,YAAA,CAAa,CAAA;;;cCjRlC,UAAA;AAAA,cACA,cAAA;AAAA,cACA,aAAA;AAAA,cACA,aAAA;AAAA,cACA,aAAA;AAAA,cACA,UAAA;AAAA,cACA,WAAA;AAAA,cACA,OAAA;AAAA,cACA,MAAA;AAAA,cACA,YAAA;AAAA,cACA,eAAA;;;;cAKA,SAAA;AAAA,KAMD,SAAA;EAAA,CACT,UAAA;EAAA,CACA,cAAA;EAAA,CACA,aAAA;EAAA,CACA,aAAA;EAAA,CACA,aAAA;EAAA,CACA,UAAA;EAAA,CACA,WAAA,GAAc,iBAAA;EAAA,CACd,MAAA,GAAS,YAAA;EAAA,CACT,OAAA,GAAU,aAAA;EAAA,CACV,YAAA,GAAe,kBAAA;EAAA,CACf,eAAA;;;;GAKA,SAAA;AAAA;AAAA,KAGS,YAAA,SAAqB,SAAA;AAAA,KAErB,iBAAA;EACV,IAAA;AAAA,IACE,iBAAA;EACA,IAAA;AAAA;AAAA,UAGa,aAAA;EACf,IAAA;EACA,WAAA;AAAA;AAAA,UAGe,kBAAA;;;;EAIf,UAAA,EAAY,GAAA;;;;;;EAOZ,IAAA;AAAA;AAAA,UAGe,YAAA;EACf,GAAA;IACE,IAAA;IACA,MAAA,EAAQ,eAAA;EAAA;EAEV,OAAA;IACE,QAAA,GAAW,kBAAA;IACX,QAAA,GAAW,kBAAA;EAAA;AAAA;;;;;ATrEf;KUyCY,MAAA,WAAiB,OAAA,gBAAuB,YAAA,IAAgB,CAAA,WAC5D,KAAA,GAAQ,SAAA,CAAU,CAAA;;;;;;;;;;;;;;;;cCvCb,iBAAA,YAAiB,OAAA;oCAW5B,SAAA,CAAA,OAAA;;;;AXnBF;;;;;;;YWsBY,GAAA,SAAY,OAAA,CAAQ,MAAA,QAAc,iBAAA;AAAA;;;;;;cCvBjC,mBAAA,YAAmB,OAAA;oBAAgB,SAAA,CAAA,OAAA;;;;;;;;;;;;;;;;;;;;KAEpC,aAAA,GAAgB,MAAA,QAAc,mBAAA;;;;;;;;;;;;;;cCmB7B,eAAA,EAAe,QAAA,CAAA,OAAA,CAG1B,QAAA,CAH0B,MAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/api/audits/entities/audits.ts","../../../src/api/audits/schemas/auditQuerySchema.ts","../../../src/api/audits/schemas/createAuditSchema.ts","../../../src/api/audits/services/AuditService.ts","../../../src/api/audits/controllers/AdminAuditController.ts","../../../src/api/audits/primitives/$audit.ts","../../../src/orm/core/schemas/insertSchema.ts","../../../src/orm/core/schemas/updateSchema.ts","../../../src/orm/core/primitives/$entity.ts","../../../src/orm/core/constants/PG_SYMBOLS.ts","../../../src/orm/core/helpers/pgAttr.ts","../../../src/orm/core/schemas/databaseEnvSchema.ts","../../../src/api/audits/schemas/auditResourceSchema.ts","../../../src/api/audits/index.ts"],"mappings":";;;;;;;;;cAOa,mBAAA,oBAAmB,OAAA;AAAA,KAKpB,aAAA,GAAgB,MAAM,QAAQ,mBAAA;;;;;;;;;AAL1C;cAgBa,MAAA,uBAAM,eAAA,mBAAA,OAAA;;;;EAXP;;;;;EAWC;;;;EAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cA2GN,iBAAA,oBAAiB,OAAA;;;;;;;;;;;;;EAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cACjC,uBAAA,uBAAuB,aAAA,mBAAA,OAAA;;;;;;;;;;;;;;AAApC;;;EAA0D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAC9C,WAAA,GAAc,MAAM,QAAQ,MAAA,CAAO,MAAA;;;;;;cC5HlC,gBAAA,oBAAgB,OAAA;;;;;;;;;;;;;;;;KAcjB,UAAA,GAAa,MAAM,QAAQ,gBAAA;;;;;;cCf1B,iBAAA,oBAAiB,OAAA;;;;;;;;;;;;;;;;;;KAmBlB,WAAA,GAAc,MAAM,QAAQ,iBAAA;;;;;;UCXvB,mBAAA;EACf,IAAA;EACA,WAAA;EACA,OAAA;AAAA;AHXF;;;;AAAgC;AAKhC;;;;AALA,cGuBa,YAAA;EAAA,mBACQ,MAAA,EAAM,MAAA;EAAA,mBACN,GAAA,0BAAG,MAAA;EAAA,mBACH,IAAA,uBAAI,UAAA,mBAAA,OAAA;;;;;;;;;;;;;;;;;;;;;;;;qBAKJ,UAAA,EAAU,GAAA,SAAA,mBAAA;;;;EAKtB,YAAA,CAAa,UAAA,EAAY,mBAAA;;;;EAWzB,kBAAA,IAAsB,mBAAA;;;;;;;;;EAYtB,kBAAA;;;;YASG,iBAAA,IAAqB,aAAA;;;;;EAQlB,MAAA,CAAO,IAAA,EAAM,WAAA,GAAc,OAAA,CAAQ,WAAA;;;;EAiEnC,MAAA,CACX,IAAA,UACA,MAAA,UACA,OAAA,GAAS,IAAA,CAAK,WAAA,uBACb,OAAA,CAAQ,WAAA;;;;EAOE,IAAA,CAAK,KAAA,GAAO,UAAA,GAAkB,OAAA,CAAQ,IAAA,CAAK,WAAA;;;;EAgE3C,OAAA,CAAQ,EAAA,WAAa,OAAA,CAAQ,WAAA;;;;EAO7B,UAAA,CACX,MAAA,UACA,KAAA,GAAO,IAAA,CAAK,UAAA,cACX,OAAA,CAAQ,IAAA,CAAK,WAAA;;;;EAOH,cAAA,CACX,YAAA,UACA,UAAA,UACA,KAAA,GAAO,IAAA,CAAK,UAAA,mCACX,OAAA,CAAQ,IAAA,CAAK,WAAA;EHlHL;;;EGyHE,QAAA,CACX,OAAA;IAAW,IAAA,GAAO,IAAA;IAAM,EAAA,GAAK,IAAA;IAAM,SAAA;EAAA,IAClC,OAAA,CAAQ,UAAA;;;;EAiEE,eAAA,CAAgB,IAAA,EAAM,IAAA,GAAO,OAAA;AAAA;;;;UAoB3B,UAAA;EACf,KAAA;EACA,MAAA,EAAQ,MAAA;EACR,UAAA,EAAY,MAAA,CAAO,aAAA;EACnB,WAAA;EACA,cAAA,EAAgB,WAAA;AAAA;;;;;;;;;;;;cCpUL,oBAAA;EAAA,mBACQ,GAAA;EAAA,mBACA,KAAA;EAAA,mBACA,YAAA,EAAY,YAAA;EAAA,mBACZ,IAAA,uBAAI,UAAA,mBAAA,OAAA;;;;;;;;;;;;;;;;;;;;;;;;WAKP,UAAA,0BAAU,iBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAeV,QAAA,0BAAQ,iBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAkBR,YAAA,0BAAY,iBAAA;;;;;;;;;;;;WA0BZ,WAAA,0BAAW,iBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAgBX,UAAA,0BAAU,iBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAmBV,cAAA,0BAAc,iBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAwBd,aAAA,0BAAa,iBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WAkCb,eAAA,0BAAe,iBAAA;;;;;;WAcf,QAAA,0BAAQ,iBAAA;;;;;;;;;;WAoBR,gBAAA,0BAAgB,iBAAA;;;;;;;;;;;;;;UC7MjB,qBAAA;;;;EAIf,IAAA;;;;EAKA,WAAA;ELXW;;;EKgBX,OAAA;AAAA;ALXF;;;;AAA6D;AAW7D;;;;;;;;;;;;;;;;;;;;;AAXA,cKwCa,cAAA,SAAuB,SAAA,CAAU,qBAAA;EAAA,mBACzB,YAAA,EAAY,YAAA;;;;MAKpB,IAAA;;;;MAOA,WAAA;;;;MAOA,OAAA;;;;EAOE,GAAA,CACX,MAAA,UACA,OAAA,GAAS,eAAA,GACR,OAAA;;;;EAOU,UAAA,CACX,MAAA,UACA,OAAA,GAAS,IAAA,CAAK,eAAA,eACb,OAAA;;;;EAOU,UAAA,CACX,MAAA,UACA,YAAA,UACA,OAAA,GAAS,IAAA,CAAK,eAAA,gCACb,OAAA;;;;YAOO,MAAA;AAAA;;;;UAaK,eAAA;EACf,QAAA;EACA,MAAA;EACA,SAAA;EACA,SAAA;EACA,YAAA;EACA,UAAA;EACA,WAAA;EACA,QAAA,GAAW,MAAM;EACjB,SAAA;EACA,SAAA;EACA,SAAA;EACA,SAAA;EACA,OAAA;EACA,YAAA;AAAA;;;ALPF;;;;;;;;;;;;cKwBa,MAAA;EAAA,UAAmB,qBAAA,GAAqB,cAAA;EAAA;;;;;;;;;;;;;KCzIzC,aAAA,WAAwB,OAAA,IAAW,OAAA,eACjC,CAAA,kBAAmB,CAAA,eAAgB,CAAA;EAAA,CAC5C,YAAA;AAAA,YAGC,CAAA,GAAI,CAAA,eAAgB,CAAA;EAAA,CACjB,UAAA;AAAA;EAAA,CACA,eAAA;AAAA;EACD,WAAA;AAAA,IACF,SAAA,CAAU,CAAA,eAAgB,CAAA,KAC1B,CAAA,eAAgB,CAAA;;;;;;;;;;;;KCTV,aAAA,WAAwB,OAAA,IAAW,OAAA,eACjC,CAAA,kBAAmB,CAAA,eAAgB,CAAA;EAAA,CAC5C,YAAA;AAAA,YAGC,CAAA,GAAI,CAAA,eAAgB,CAAA,UAAW,SAAA,YAC/B,SAAA,CAAU,MAAA,EAAQ,CAAA,EAAG,KAAA,MACrB,CAAA,eAAgB,CAAA;;;UCWL,sBAAA,WACL,OAAA,eACG,MAAA,CAAO,CAAA;ERfH;;;;EQqBjB,IAAA;;;;EAKA,MAAA,EAAQ,CAAA;;;;EAKR,OAAA,IACI,IAAA;;;;IAKE,MAAA,EAAQ,IAAA;;;;IAIR,MAAA;;;;IAIA,IAAA;;;;IAIA,KAAA,GAAQ,GAAA;EAAA;;;;IAMR,OAAA,EAAS,IAAA;;;;IAIT,MAAA;;;;IAIA,IAAA;;;;IAIA,KAAA,GAAQ,GAAA;EAAA;;;;;;;;;;;;;;;;;IAmBR,WAAA,GAAc,IAAA,EAAM,MAAA,CAAO,IAAA,qBAAyB,GAAA;;;;IAIpD,MAAA;;ARiBR;;IQbQ,IAAA;IRasC;;;IQTtC,KAAA,GAAQ,GAAA;EAAA;;;;EAOd,WAAA,GAAc,KAAA;;;;IAIZ,IAAA;;;;IAIA,OAAA,EAAS,KAAA,OAAY,MAAA,CAAO,CAAA;;;;;IAK5B,cAAA,EAAgB,KAAA,OAAY,YAAA;EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkC9B,WAAA,GAAc,KAAA;;;;IAIZ,OAAA,EAAS,KAAA,OAAY,MAAA,CAAO,CAAA;;;;IAI5B,IAAA;;;;IAIA,MAAA;;;ARxDJ;IQ4DI,KAAA,GAAQ,GAAA;EAAA;ER5D8C;;;EQkExD,MAAA,IACE,IAAA,EAAM,uBAAA,SAAgC,UAAA,CAAW,CAAA,aAC9C,uBAAA;AAAA;AAAA,cAKM,eAAA,WAA0B,OAAA,GAAU,OAAA;EAAA,SAC/B,OAAA,EAAS,sBAAA,CAAuB,CAAA;cAEpC,OAAA,EAAS,sBAAA,CAAuB,CAAA;EAI5C,KAAA,CAAM,KAAA;EAAA,IAYF,IAAA,IAAQ,aAAA,CAAc,CAAA;EAAA,IActB,IAAA;EAAA,IAIA,MAAA,IAAU,CAAA;EAAA,IAIV,YAAA,IAAgB,aAAA,CAAc,CAAA;EAAA,IAI9B,YAAA,IAAgB,aAAA,CAAc,CAAA;AAAA;;;;KAYxB,UAAA,WAAqB,OAAA,oBACjB,CAAA,iBAAkB,mBAAA;AAAA,KAYtB,YAAA,WAAuB,OAAA;EACjC,IAAA;EACA,MAAA,EAAQ,eAAA,CAAgB,CAAA;AAAA;AAAA,KAGd,aAAA,WAAwB,OAAA,oBACpB,CAAA,iBAAkB,YAAA,CAAa,CAAA;;;cCjRlC,UAAA;AAAA,cACA,cAAA;AAAA,cACA,aAAA;AAAA,cACA,aAAA;AAAA,cACA,aAAA;AAAA,cACA,UAAA;AAAA,cACA,WAAA;AAAA,cACA,OAAA;AAAA,cACA,MAAA;AAAA,cACA,YAAA;AAAA,cACA,eAAA;ATVb;;;AAAA,cSea,SAAA;AAAA,KAMD,SAAA;EAAA,CACT,UAAA;EAAA,CACA,cAAA;EAAA,CACA,aAAA;EAAA,CACA,aAAA;EAAA,CACA,aAAA;EAAA,CACA,UAAA;EAAA,CACA,WAAA,GAAc,iBAAA;EAAA,CACd,MAAA,GAAS,YAAA;EAAA,CACT,OAAA,GAAU,aAAA;EAAA,CACV,YAAA,GAAe,kBAAA;EAAA,CACf,eAAA;;;;GAKA,SAAA;AAAA;AAAA,KAGS,YAAA,SAAqB,SAAS;AAAA,KAE9B,iBAAA;EACV,IAAA;AAAA,IACE,iBAAiB;EACjB,IAAA;AAAA;AAAA,UAGa,aAAA;EACf,IAAA;EACA,WAAW;AAAA;AAAA,UAGI,kBAAA;;;;EAIf,UAAA,EAAY,GAAG;;;;;;EAOf,IAAA;AAAA;AAAA,UAGe,YAAA;EACf,GAAA;IACE,IAAA;IACA,MAAA,EAAQ,eAAA;EAAA;EAEV,OAAA;IACE,QAAA,GAAW,kBAAA;IACX,QAAA,GAAW,kBAAA;EAAA;AAAA;;;;ATrE8C;AAW7D;KU8BY,MAAA,WAAiB,OAAA,gBAAuB,YAAA,IAAgB,CAAA,WAC5D,KAAA,GAAQ,SAAA,CAAU,CAAA;;;;;;;;;;;;;;;;cCvCb,iBAAA,oBAAiB,OAAA;;;;AXRE;AAKhC;;;;;;;YWiBY,GAAA,SAAY,OAAA,CAAQ,MAAA,QAAc,iBAAA;AAAA;;;;;;cCvBjC,mBAAA,oBAAmB,OAAA;sDAAgB,cAAA;;;;;;;;;;;;;;;;;;;;KAEpC,aAAA,GAAgB,MAAM,QAAQ,mBAAA;;;;;;;;;;AZD1C;;;;caoBa,eAAA,mBAAe,OAAA,kBAAA,MAAA"}

package/dist/api/audits/index.js

@@ -195,6 +195,17 @@ var AuditService = class {
 		return Array.from(this.auditTypes.values());
 	}
 	/**
+	* Distinct action names across all registered audit types, sorted.
+	*
+	* Sourced from the `$audit` type registry. Audit types register lazily —
+	* when their holder (e.g. `SessionAudits`, `ParameterAudits`) is first
+	* injected — so the admin filter only lists actions for audit domains that
+	* are actually in use, which is the intended behaviour.
+	*/
+	getDistinctActions() {
+		return [...new Set(this.getRegisteredTypes().flatMap((type) => type.actions))].sort();
+	}
+	/**
 	* Get current request context if available.
 	*/
 	getRequestContext() {
@@ -224,11 +235,12 @@ var AuditService = class {
 			action: data.action,
 			userId: data.userId ?? contextData.userId
 		});
+		const success = data.success ?? true;
 		const entry = await this.repo.create({
 			...contextData,
 			...data,
-			severity: data.severity ?? "info",
-			success: data.success ?? true
+			severity: data.severity ?? (success ? "info" : "warning"),
+			success
 		});
 		this.log.debug("Audit entry created", {
 			id: entry.id,
@@ -248,60 +260,6 @@ var AuditService = class {
 		});
 	}
 	/**
-	* Record an authentication event.
-	*/
-	async recordAuth(action, options = {}) {
-		return this.create({
-			type: "auth",
-			action,
-			severity: action === "login_failed" ? "warning" : "info",
-			...options
-		});
-	}
-	/**
-	* Record a user management event.
-	*/
-	async recordUser(action, options = {}) {
-		return this.create({
-			type: "user",
-			action,
-			resourceType: "user",
-			...options
-		});
-	}
-	/**
-	* Record a data access event.
-	*/
-	async recordAccess(action, options = {}) {
-		return this.create({
-			type: "access",
-			action,
-			...options
-		});
-	}
-	/**
-	* Record a security event.
-	*/
-	async recordSecurity(action, options = {}) {
-		return this.create({
-			type: "security",
-			action,
-			severity: "warning",
-			...options
-		});
-	}
-	/**
-	* Record a system event.
-	*/
-	async recordSystem(action, options = {}) {
-		return this.create({
-			type: "system",
-			action,
-			severity: action === "error" ? "critical" : "info",
-			...options
-		});
-	}
-	/**
 	* Find audit entries with filtering and pagination.
 	*/
 	async find(query = {}) {
@@ -550,6 +508,17 @@ var AdminAuditController = class {
 		})
 	});
 	/**
+	* List distinct action names present in the audit log (for filters).
+	*/
+	getAuditActions = $action({
+		path: `${this.url}/actions`,
+		group: this.group,
+		use: [$secure({ permissions: ["admin:audit:read"] })],
+		description: "List distinct action names present in the audit log",
+		schema: { response: t.array(t.text()) },
+		handler: () => this.auditService.getDistinctActions()
+	});
+	/**
 	* Get registered audit types.
 	*/
 	getTypes = $action({

package/dist/api/audits/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/api/audits/entities/audits.ts","../../../src/api/audits/schemas/auditQuerySchema.ts","../../../src/api/audits/schemas/auditResourceSchema.ts","../../../src/api/audits/schemas/createAuditSchema.ts","../../../src/api/audits/services/AuditService.ts","../../../src/api/audits/controllers/AdminAuditController.ts","../../../src/api/audits/primitives/$audit.ts","../../../src/api/audits/index.ts"],"sourcesContent":["import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\n\n/**\n * Audit severity levels for categorizing events.\n */\nexport const auditSeveritySchema = t.enum([\"info\", \"warning\", \"critical\"], {\n  default: \"info\",\n  description: \"Severity level of the audit event\",\n});\n\nexport type AuditSeverity = Static<typeof auditSeveritySchema>;\n\n/**\n * Audit log entity for tracking important system events.\n *\n * Stores comprehensive audit information including:\n * - Who performed the action (userId, userRealm)\n * - What happened (type, action, resource)\n * - When it happened (createdAt)\n * - Context and details (metadata, ipAddress, userAgent)\n */\nexport const audits = $entity({\n  name: \"audits\",\n  schema: t.object({\n    id: db.primaryKey(t.bigint()),\n    createdAt: db.createdAt(),\n    organizationId: db.organization(),\n\n    /**\n     * Audit event type (e.g., \"auth\", \"user\", \"payment\", \"system\").\n     * Used for categorizing and filtering audit events.\n     */\n    type: t.text({\n      description: \"Audit event type (e.g., auth, user, payment, system)\",\n    }),\n\n    /**\n     * Specific action performed (e.g., \"login\", \"logout\", \"create\", \"update\", \"delete\").\n     */\n    action: t.text({\n      description: \"Specific action performed (e.g., login, create, update)\",\n    }),\n\n    /**\n     * Severity level of the event.\n     */\n    severity: db.default(auditSeveritySchema, \"info\"),\n\n    /**\n     * User ID who performed the action (null for system events).\n     */\n    userId: t.optional(t.uuid()),\n\n    /**\n     * User realm for multi-tenant support.\n     */\n    userRealm: t.optional(t.text()),\n\n    /**\n     * User email at the time of the event (denormalized for history).\n     */\n    userEmail: t.optional(t.email()),\n\n    /**\n     * Resource type affected (e.g., \"user\", \"order\", \"file\").\n     */\n    resourceType: t.optional(t.text()),\n\n    /**\n     * Resource ID affected.\n     */\n    resourceId: t.optional(t.text()),\n\n    /**\n     * Human-readable description of the event.\n     */\n    description: t.optional(t.text()),\n\n    /**\n     * Additional metadata/context as JSON.\n     */\n    metadata: t.optional(t.json()),\n\n    /**\n     * Client IP address.\n     */\n    ipAddress: t.optional(t.text()),\n\n    /**\n     * Client user agent.\n     */\n    userAgent: t.optional(t.text()),\n\n    /**\n     * Session ID if applicable.\n     */\n    sessionId: t.optional(t.uuid()),\n\n    /**\n     * Request ID for correlation.\n     */\n    requestId: t.optional(t.text()),\n\n    /**\n     * Whether the action was successful.\n     */\n    success: db.default(t.boolean(), true),\n\n    /**\n     * Error message if the action failed.\n     */\n    errorMessage: t.optional(t.text()),\n  }),\n  indexes: [\n    \"createdAt\",\n    \"type\",\n    \"action\",\n    \"userId\",\n    \"userRealm\",\n    \"resourceType\",\n    \"resourceId\",\n    \"severity\",\n    { columns: [\"type\", \"action\"] },\n    { columns: [\"userId\", \"createdAt\"] },\n    { columns: [\"userRealm\", \"createdAt\"] },\n  ],\n});\n\nexport const auditEntitySchema = audits.schema;\nexport const auditEntityInsertSchema = audits.insertSchema;\nexport type AuditEntity = Static<typeof audits.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { pageQuerySchema } from \"alepha/orm\";\nimport { auditSeveritySchema } from \"../entities/audits.ts\";\n\n/**\n * Query schema for searching and filtering audit logs.\n */\nexport const auditQuerySchema = t.extend(pageQuerySchema, {\n  type: t.optional(t.text({ description: \"Filter by audit type\" })),\n  action: t.optional(t.text({ description: \"Filter by action\" })),\n  severity: t.optional(auditSeveritySchema),\n  userId: t.optional(t.uuid({ description: \"Filter by user ID\" })),\n  userRealm: t.optional(t.text({ description: \"Filter by user realm\" })),\n  resourceType: t.optional(t.text({ description: \"Filter by resource type\" })),\n  resourceId: t.optional(t.text({ description: \"Filter by resource ID\" })),\n  success: t.optional(t.boolean({ description: \"Filter by success status\" })),\n  from: t.optional(t.datetime({ description: \"Start date filter\" })),\n  to: t.optional(t.datetime({ description: \"End date filter\" })),\n  search: t.optional(t.text({ description: \"Search in description\" })),\n});\n\nexport type AuditQuery = Static<typeof auditQuerySchema>;\n","import type { Static } from \"alepha\";\nimport { audits } from \"../entities/audits.ts\";\n\n/**\n * Resource schema for audit log responses.\n */\nexport const auditResourceSchema = audits.schema;\n\nexport type AuditResource = Static<typeof auditResourceSchema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { auditSeveritySchema } from \"../entities/audits.ts\";\n\n/**\n * Schema for creating a new audit log entry.\n */\nexport const createAuditSchema = t.object({\n  type: t.text({ description: \"Audit event type\" }),\n  action: t.text({ description: \"Specific action performed\" }),\n  severity: t.optional(auditSeveritySchema),\n  userId: t.optional(t.uuid()),\n  userRealm: t.optional(t.text()),\n  userEmail: t.optional(t.email()),\n  resourceType: t.optional(t.text()),\n  resourceId: t.optional(t.text()),\n  description: t.optional(t.text()),\n  metadata: t.optional(t.json()),\n  ipAddress: t.optional(t.text()),\n  userAgent: t.optional(t.text()),\n  sessionId: t.optional(t.uuid()),\n  requestId: t.optional(t.text()),\n  success: t.optional(t.boolean()),\n  errorMessage: t.optional(t.text()),\n});\n\nexport type CreateAudit = Static<typeof createAuditSchema>;\n","import { $inject, Alepha } from \"alepha\";\nimport { $logger } from \"alepha/logger\";\nimport { $repository, type Page } from \"alepha/orm\";\nimport type { ServerRequest } from \"alepha/server\";\nimport {\n  type AuditEntity,\n  type AuditSeverity,\n  audits,\n} from \"../entities/audits.ts\";\nimport type { AuditQuery } from \"../schemas/auditQuerySchema.ts\";\nimport type { CreateAudit } from \"../schemas/createAuditSchema.ts\";\n\n/**\n * Registered audit type definition.\n */\nexport interface AuditTypeDefinition {\n  type: string;\n  description?: string;\n  actions: string[];\n}\n\n/**\n * Service for managing audit logs.\n *\n * Provides methods for:\n * - Creating audit entries\n * - Querying audit history\n * - Aggregating audit statistics\n * - Managing registered audit types\n */\nexport class AuditService {\n  protected readonly alepha = $inject(Alepha);\n  protected readonly log = $logger();\n  protected readonly repo = $repository(audits);\n\n  /**\n   * Registry of audit types and their allowed actions.\n   */\n  protected readonly auditTypes = new Map<string, AuditTypeDefinition>();\n\n  /**\n   * Register an audit type with its allowed actions.\n   */\n  public registerType(definition: AuditTypeDefinition): void {\n    this.auditTypes.set(definition.type, definition);\n    this.log.debug(\"Audit type registered\", {\n      type: definition.type,\n      actions: definition.actions,\n    });\n  }\n\n  /**\n   * Get all registered audit types.\n   */\n  public getRegisteredTypes(): AuditTypeDefinition[] {\n    return Array.from(this.auditTypes.values());\n  }\n\n  /**\n   * Get current request context if available.\n   */\n  protected getRequestContext(): ServerRequest | undefined {\n    return this.alepha.store.get(\"alepha.http.request\");\n  }\n\n  /**\n   * Create a new audit log entry.\n   * Automatically populates ipAddress, userAgent, and requestId from the current request context.\n   */\n  public async create(data: CreateAudit): Promise<AuditEntity> {\n    const request = this.getRequestContext();\n\n    // Auto-populate from request context if not provided\n    const contextData: Partial<CreateAudit> = {};\n\n    if (request) {\n      if (!data.ipAddress && request.ip) {\n        contextData.ipAddress = request.ip;\n      }\n      if (!data.userAgent && request.headers[\"user-agent\"]) {\n        contextData.userAgent = request.headers[\"user-agent\"];\n      }\n      if (!data.requestId && request.requestId) {\n        contextData.requestId = request.requestId;\n      }\n      // Check for session in metadata\n      if (!data.sessionId && request.metadata?.sessionId) {\n        contextData.sessionId = request.metadata.sessionId;\n      }\n      // Extract user from request.user (set by ServerSecurityProvider)\n      const user = request.user;\n      if (user) {\n        if (!data.userId && user.id) {\n          contextData.userId = user.id;\n        }\n        if (!data.userEmail && user.email) {\n          contextData.userEmail = user.email;\n        }\n        if (!data.userRealm && user.realm) {\n          contextData.userRealm = user.realm;\n        }\n      }\n    }\n\n    this.log.trace(\"Creating audit entry\", {\n      type: data.type,\n      action: data.action,\n      userId: data.userId ?? contextData.userId,\n    });\n\n    const entry = await this.repo.create({\n      ...contextData,\n      ...data,\n      severity: data.severity ?? \"info\",\n      success: data.success ?? true,\n    });\n\n    this.log.debug(\"Audit entry created\", {\n      id: entry.id,\n      type: data.type,\n      action: data.action,\n    });\n\n    return entry;\n  }\n\n  /**\n   * Record an audit event (convenience method).\n   */\n  public async record(\n    type: string,\n    action: string,\n    options: Omit<CreateAudit, \"type\" | \"action\"> = {},\n  ): Promise<AuditEntity> {\n    return this.create({ type, action, ...options });\n  }\n\n  /**\n   * Record an authentication event.\n   */\n  public async recordAuth(\n    action:\n      | \"login\"\n      | \"logout\"\n      | \"login_failed\"\n      | \"token_refresh\"\n      | \"mfa_setup\"\n      | \"mfa_verify\",\n    options: Omit<CreateAudit, \"type\" | \"action\"> = {},\n  ): Promise<AuditEntity> {\n    return this.create({\n      type: \"auth\",\n      action,\n      severity: action === \"login_failed\" ? \"warning\" : \"info\",\n      ...options,\n    });\n  }\n\n  /**\n   * Record a user management event.\n   */\n  public async recordUser(\n    action:\n      | \"create\"\n      | \"update\"\n      | \"delete\"\n      | \"enable\"\n      | \"disable\"\n      | \"role_change\",\n    options: Omit<CreateAudit, \"type\" | \"action\"> = {},\n  ): Promise<AuditEntity> {\n    return this.create({\n      type: \"user\",\n      action,\n      resourceType: \"user\",\n      ...options,\n    });\n  }\n\n  /**\n   * Record a data access event.\n   */\n  public async recordAccess(\n    action: \"view\" | \"export\" | \"download\",\n    options: Omit<CreateAudit, \"type\" | \"action\"> = {},\n  ): Promise<AuditEntity> {\n    return this.create({ type: \"access\", action, ...options });\n  }\n\n  /**\n   * Record a security event.\n   */\n  public async recordSecurity(\n    action:\n      | \"permission_denied\"\n      | \"suspicious_activity\"\n      | \"rate_limited\"\n      | \"blocked\",\n    options: Omit<CreateAudit, \"type\" | \"action\"> = {},\n  ): Promise<AuditEntity> {\n    return this.create({\n      type: \"security\",\n      action,\n      severity: \"warning\",\n      ...options,\n    });\n  }\n\n  /**\n   * Record a system event.\n   */\n  public async recordSystem(\n    action: \"startup\" | \"shutdown\" | \"config_change\" | \"maintenance\" | \"error\",\n    options: Omit<CreateAudit, \"type\" | \"action\"> = {},\n  ): Promise<AuditEntity> {\n    return this.create({\n      type: \"system\",\n      action,\n      severity: action === \"error\" ? \"critical\" : \"info\",\n      ...options,\n    });\n  }\n\n  /**\n   * Find audit entries with filtering and pagination.\n   */\n  public async find(query: AuditQuery = {}): Promise<Page<AuditEntity>> {\n    this.log.trace(\"Finding audit entries\", { query });\n\n    query.sort ??= \"-createdAt\";\n\n    const where = this.repo.createQueryWhere();\n\n    if (query.type) {\n      where.type = { eq: query.type };\n    }\n\n    if (query.action) {\n      where.action = { eq: query.action };\n    }\n\n    if (query.severity) {\n      where.severity = { eq: query.severity };\n    }\n\n    if (query.userId) {\n      where.userId = { eq: query.userId };\n    }\n\n    if (query.userRealm) {\n      where.userRealm = { eq: query.userRealm };\n    }\n\n    if (query.resourceType) {\n      where.resourceType = { eq: query.resourceType };\n    }\n\n    if (query.resourceId) {\n      where.resourceId = { eq: query.resourceId };\n    }\n\n    if (query.success !== undefined) {\n      where.success = { eq: query.success };\n    }\n\n    if (query.from) {\n      where.createdAt = { ...(where.createdAt as object), gte: query.from };\n    }\n\n    if (query.to) {\n      where.createdAt = { ...(where.createdAt as object), lte: query.to };\n    }\n\n    if (query.search) {\n      where.description = { like: `%${query.search}%` };\n    }\n\n    const result = await this.repo.paginate(query, { where }, { count: true });\n\n    this.log.debug(\"Audit entries found\", {\n      count: result.content.length,\n      total: result.page.totalElements,\n    });\n\n    return result;\n  }\n\n  /**\n   * Get audit entry by ID.\n   */\n  public async getById(id: string): Promise<AuditEntity> {\n    return this.repo.getById(id);\n  }\n\n  /**\n   * Get audit entries for a specific user.\n   */\n  public async findByUser(\n    userId: string,\n    query: Omit<AuditQuery, \"userId\"> = {},\n  ): Promise<Page<AuditEntity>> {\n    return this.find({ ...query, userId });\n  }\n\n  /**\n   * Get audit entries for a specific resource.\n   */\n  public async findByResource(\n    resourceType: string,\n    resourceId: string,\n    query: Omit<AuditQuery, \"resourceType\" | \"resourceId\"> = {},\n  ): Promise<Page<AuditEntity>> {\n    return this.find({ ...query, resourceType, resourceId });\n  }\n\n  /**\n   * Get audit statistics for a time period.\n   */\n  public async getStats(\n    options: { from?: Date; to?: Date; userRealm?: string } = {},\n  ): Promise<AuditStats> {\n    this.log.trace(\"Getting audit stats\", options);\n\n    const where = this.repo.createQueryWhere();\n\n    if (options.from) {\n      where.createdAt = { gte: options.from.toISOString() };\n    }\n\n    if (options.to) {\n      where.createdAt = {\n        ...(where.createdAt as object),\n        lte: options.to.toISOString(),\n      };\n    }\n\n    if (options.userRealm) {\n      where.userRealm = { eq: options.userRealm };\n    }\n\n    const all = await this.repo.findMany({ where });\n\n    const stats: AuditStats = {\n      total: all.length,\n      byType: {},\n      bySeverity: { info: 0, warning: 0, critical: 0 },\n      successRate: 0,\n      recentFailures: [],\n    };\n\n    let successCount = 0;\n\n    for (const entry of all) {\n      // Count by type\n      stats.byType[entry.type] = (stats.byType[entry.type] || 0) + 1;\n\n      // Count by severity\n      const severity = entry.severity as AuditSeverity;\n      stats.bySeverity[severity]++;\n\n      // Count successes\n      if (entry.success) {\n        successCount++;\n      }\n    }\n\n    stats.successRate = stats.total > 0 ? successCount / stats.total : 1;\n\n    // Get recent failures\n    const failures = all\n      .filter((e) => !e.success)\n      .sort(\n        (a, b) =>\n          new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime(),\n      )\n      .slice(0, 10);\n\n    stats.recentFailures = failures;\n\n    return stats;\n  }\n\n  /**\n   * Delete old audit entries (for retention policy).\n   */\n  public async deleteOlderThan(date: Date): Promise<number> {\n    this.log.info(\"Deleting old audit entries\", { olderThan: date });\n\n    const old = await this.repo.findMany({\n      where: { createdAt: { lt: date.toISOString() } },\n    });\n\n    for (const entry of old) {\n      await this.repo.deleteById(entry.id);\n    }\n\n    this.log.info(\"Old audit entries deleted\", { count: old.length });\n\n    return old.length;\n  }\n}\n\n/**\n * Audit statistics summary.\n */\nexport interface AuditStats {\n  total: number;\n  byType: Record<string, number>;\n  bySeverity: Record<AuditSeverity, number>;\n  successRate: number;\n  recentFailures: AuditEntity[];\n}\n","import { $inject, t } from \"alepha\";\nimport { $repository } from \"alepha/orm\";\nimport { $secure } from \"alepha/security\";\nimport { $action } from \"alepha/server\";\nimport { audits } from \"../entities/audits.ts\";\nimport { auditQuerySchema } from \"../schemas/auditQuerySchema.ts\";\nimport { auditResourceSchema } from \"../schemas/auditResourceSchema.ts\";\nimport { createAuditSchema } from \"../schemas/createAuditSchema.ts\";\nimport { AuditService } from \"../services/AuditService.ts\";\n\n/**\n * REST API controller for audit log management.\n *\n * Provides endpoints for:\n * - Querying audit logs with filtering\n * - Creating audit entries\n * - Getting audit statistics\n * - Viewing registered audit types\n */\nexport class AdminAuditController {\n  protected readonly url = \"/audits\";\n  protected readonly group = \"admin:audits\";\n  protected readonly auditService = $inject(AuditService);\n  protected readonly repo = $repository(audits);\n\n  /**\n   * Find audit entries with filtering and pagination.\n   */\n  public readonly findAudits = $action({\n    path: this.url,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:read\"] })],\n    description: \"Find audit entries with filtering and pagination\",\n    schema: {\n      query: auditQuerySchema,\n      response: t.page(auditResourceSchema),\n    },\n    handler: ({ query }) => this.auditService.find(query),\n  });\n\n  /**\n   * Get a single audit entry by ID.\n   */\n  public readonly getAudit = $action({\n    path: `${this.url}/:id`,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:read\"] })],\n    description: \"Get a single audit entry by ID\",\n    schema: {\n      params: t.object({\n        id: t.text(),\n      }),\n      response: auditResourceSchema,\n    },\n    handler: ({ params }) => this.auditService.getById(params.id),\n  });\n\n  /**\n   * Delete many audit entries by id in one repository call. Use with care —\n   * audit logs are usually retained for compliance reasons.\n   */\n  public readonly deleteAudits = $action({\n    method: \"POST\",\n    path: `${this.url}/delete`,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:delete\"] })],\n    description: \"Delete many audit entries\",\n    schema: {\n      body: t.object({\n        ids: t.array(t.text(), { minItems: 1, maxItems: 1000 }),\n      }),\n      response: t.object({\n        deleted: t.array(t.text()),\n      }),\n    },\n    handler: async ({ body }) => {\n      const deleted = await this.repo.deleteMany({\n        id: { inArray: body.ids },\n      });\n      return { deleted: deleted.map(String) };\n    },\n  });\n\n  /**\n   * Create a new audit entry.\n   * System-only — this permission should never be assigned to human roles.\n   */\n  public readonly createAudit = $action({\n    method: \"POST\",\n    path: this.url,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:create\"] })],\n    description: \"Create a new audit entry\",\n    schema: {\n      body: createAuditSchema,\n      response: auditResourceSchema,\n    },\n    handler: ({ body }) => this.auditService.create(body),\n  });\n\n  /**\n   * Get audit entries for a specific user.\n   */\n  public readonly findByUser = $action({\n    path: `${this.url}/user/:userId`,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:read\"] })],\n    description: \"Get audit entries for a specific user\",\n    schema: {\n      params: t.object({\n        userId: t.uuid(),\n      }),\n      query: t.omit(auditQuerySchema, [\"userId\"]),\n      response: t.page(auditResourceSchema),\n    },\n    handler: ({ params, query }) =>\n      this.auditService.findByUser(params.userId, query),\n  });\n\n  /**\n   * Get audit entries for a specific resource.\n   */\n  public readonly findByResource = $action({\n    path: `${this.url}/resource/:resourceType/:resourceId`,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:read\"] })],\n    description: \"Get audit entries for a specific resource\",\n    schema: {\n      params: t.object({\n        resourceType: t.text(),\n        resourceId: t.text(),\n      }),\n      query: t.omit(auditQuerySchema, [\"resourceType\", \"resourceId\"]),\n      response: t.page(auditResourceSchema),\n    },\n    handler: ({ params, query }) =>\n      this.auditService.findByResource(\n        params.resourceType,\n        params.resourceId,\n        query,\n      ),\n  });\n\n  /**\n   * Get audit statistics.\n   */\n  public readonly getAuditStats = $action({\n    path: `${this.url}/stats`,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:read\"] })],\n    description: \"Get audit statistics for a time period\",\n    schema: {\n      query: t.object({\n        from: t.optional(t.datetime()),\n        to: t.optional(t.datetime()),\n        userRealm: t.optional(t.text()),\n      }),\n      response: t.object({\n        total: t.integer(),\n        byType: t.record(t.text(), t.integer()),\n        bySeverity: t.object({\n          info: t.integer(),\n          warning: t.integer(),\n          critical: t.integer(),\n        }),\n        successRate: t.number(),\n        recentFailures: t.array(auditResourceSchema),\n      }),\n    },\n    handler: ({ query }) =>\n      this.auditService.getStats({\n        from: query.from ? new Date(query.from) : undefined,\n        to: query.to ? new Date(query.to) : undefined,\n        userRealm: query.userRealm,\n      }),\n  });\n\n  /**\n   * Get registered audit types.\n   */\n  public readonly getTypes = $action({\n    path: `${this.url}/types`,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:read\"] })],\n    description: \"Get all registered audit types\",\n    schema: {\n      response: t.array(\n        t.object({\n          type: t.text(),\n          description: t.optional(t.text()),\n          actions: t.array(t.text()),\n        }),\n      ),\n    },\n    handler: () => this.auditService.getRegisteredTypes(),\n  });\n\n  /**\n   * Get distinct values for filters.\n   */\n  public readonly getFilterOptions = $action({\n    path: `${this.url}/filters`,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:read\"] })],\n    description: \"Get distinct values for audit filters\",\n    schema: {\n      response: t.object({\n        types: t.array(t.text()),\n        actions: t.array(t.text()),\n        resourceTypes: t.array(t.text()),\n        userRealms: t.array(t.text()),\n      }),\n    },\n    handler: async () => {\n      const types = this.auditService.getRegisteredTypes();\n      return {\n        types: types.map((t) => t.type),\n        actions: types.flatMap((t) => t.actions),\n        resourceTypes: [\"user\", \"session\", \"file\", \"order\", \"payment\"],\n        userRealms: [\"default\"],\n      };\n    },\n  });\n}\n","import { $inject, createPrimitive, KIND, Primitive } from \"alepha\";\nimport {\n  AuditService,\n  type AuditTypeDefinition,\n} from \"../services/AuditService.ts\";\n\n/**\n * Options for creating an audit type primitive.\n */\nexport interface AuditPrimitiveOptions {\n  /**\n   * Unique audit type identifier (e.g., \"auth\", \"payment\", \"order\").\n   */\n  type: string;\n\n  /**\n   * Human-readable description of this audit type.\n   */\n  description?: string;\n\n  /**\n   * List of allowed actions for this audit type.\n   */\n  actions: string[];\n}\n\n/**\n * Audit type primitive for registering domain-specific audit events.\n *\n * Provides a type-safe way to define and log audit events within a specific domain.\n *\n * @example\n * ```ts\n * class PaymentAudits {\n *   audit = $audit({\n *     type: \"payment\",\n *     description: \"Payment-related audit events\",\n *     actions: [\"create\", \"refund\", \"cancel\", \"dispute\"],\n *   });\n *\n *   async logPaymentCreated(paymentId: string, userId: string, amount: number) {\n *     await this.audit.log(\"create\", {\n *       userId,\n *       resourceType: \"payment\",\n *       resourceId: paymentId,\n *       description: `Payment of ${amount} created`,\n *       metadata: { amount },\n *     });\n *   }\n * }\n * ```\n */\nexport class AuditPrimitive extends Primitive<AuditPrimitiveOptions> {\n  protected readonly auditService = $inject(AuditService);\n\n  /**\n   * The audit type identifier.\n   */\n  public get type(): string {\n    return this.options.type;\n  }\n\n  /**\n   * The audit type description.\n   */\n  public get description(): string | undefined {\n    return this.options.description;\n  }\n\n  /**\n   * The allowed actions for this audit type.\n   */\n  public get actions(): string[] {\n    return this.options.actions;\n  }\n\n  /**\n   * Log an audit event for this type.\n   */\n  public async log(\n    action: string,\n    options: AuditLogOptions = {},\n  ): Promise<void> {\n    await this.auditService.record(this.options.type, action, options);\n  }\n\n  /**\n   * Log a successful audit event.\n   */\n  public async logSuccess(\n    action: string,\n    options: Omit<AuditLogOptions, \"success\"> = {},\n  ): Promise<void> {\n    await this.log(action, { ...options, success: true });\n  }\n\n  /**\n   * Log a failed audit event.\n   */\n  public async logFailure(\n    action: string,\n    errorMessage: string,\n    options: Omit<AuditLogOptions, \"success\" | \"errorMessage\"> = {},\n  ): Promise<void> {\n    await this.log(action, { ...options, success: false, errorMessage });\n  }\n\n  /**\n   * Called during initialization to register this audit type.\n   */\n  protected onInit(): void {\n    const definition: AuditTypeDefinition = {\n      type: this.options.type,\n      description: this.options.description,\n      actions: this.options.actions,\n    };\n    this.auditService.registerType(definition);\n  }\n}\n\n/**\n * Options for logging an audit event.\n */\nexport interface AuditLogOptions {\n  severity?: \"info\" | \"warning\" | \"critical\";\n  userId?: string;\n  userRealm?: string;\n  userEmail?: string;\n  resourceType?: string;\n  resourceId?: string;\n  description?: string;\n  metadata?: Record<string, unknown>;\n  ipAddress?: string;\n  userAgent?: string;\n  sessionId?: string;\n  requestId?: string;\n  success?: boolean;\n  errorMessage?: string;\n}\n\n/**\n * Create an audit type primitive.\n *\n * @example\n * ```ts\n * class OrderAudits {\n *   audit = $audit({\n *     type: \"order\",\n *     description: \"Order management events\",\n *     actions: [\"create\", \"update\", \"cancel\", \"fulfill\", \"ship\"],\n *   });\n * }\n * ```\n */\nexport const $audit = (options: AuditPrimitiveOptions) => {\n  return createPrimitive(AuditPrimitive, options);\n};\n\n$audit[KIND] = AuditPrimitive;\n","import { $module } from \"alepha\";\nimport { AdminAuditController } from \"./controllers/AdminAuditController.ts\";\nimport { AuditService } from \"./services/AuditService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./controllers/AdminAuditController.ts\";\nexport * from \"./entities/audits.ts\";\nexport * from \"./primitives/$audit.ts\";\nexport * from \"./schemas/auditQuerySchema.ts\";\nexport * from \"./schemas/auditResourceSchema.ts\";\nexport * from \"./schemas/createAuditSchema.ts\";\nexport * from \"./services/AuditService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Audit trail for compliance.\n *\n * **Features:**\n * - Domain-specific audit types\n * - Audit event logging\n * - Filtering and searching\n * - User action tracking\n *\n * @module alepha.api.audits\n */\nexport const AlephaApiAudits = $module({\n  name: \"alepha.api.audits\",\n  services: [AuditService, AdminAuditController],\n});\n"],"mappings":";;;;;;;;;AAOA,MAAa,sBAAsB,EAAE,KAAK;CAAC;CAAQ;CAAW;CAAW,EAAE;CACzE,SAAS;CACT,aAAa;CACd,CAAC;;;;;;;;;;AAaF,MAAa,SAAS,QAAQ;CAC5B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,QAAQ,CAAC;EAC7B,WAAW,GAAG,WAAW;EACzB,gBAAgB,GAAG,cAAc;;;;;EAMjC,MAAM,EAAE,KAAK,EACX,aAAa,wDACd,CAAC;;;;EAKF,QAAQ,EAAE,KAAK,EACb,aAAa,2DACd,CAAC;;;;EAKF,UAAU,GAAG,QAAQ,qBAAqB,OAAO;;;;EAKjD,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;;;;EAK5B,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC;;;;EAK/B,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC;;;;EAKhC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC;;;;EAKlC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC;;;;EAKhC,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC;;;;EAKjC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC;;;;EAK9B,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC;;;;EAK/B,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC;;;;EAK/B,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC;;;;EAK/B,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC;;;;EAK/B,SAAS,GAAG,QAAQ,EAAE,SAAS,EAAE,KAAK;;;;EAKtC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC;EACnC,CAAC;CACF,SAAS;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,EAAE,SAAS,CAAC,QAAQ,SAAS,EAAE;EAC/B,EAAE,SAAS,CAAC,UAAU,YAAY,EAAE;EACpC,EAAE,SAAS,CAAC,aAAa,YAAY,EAAE;EACxC;CACF,CAAC;AAEF,MAAa,oBAAoB,OAAO;AACxC,MAAa,0BAA0B,OAAO;;;;;;AC3H9C,MAAa,mBAAmB,EAAE,OAAO,iBAAiB;CACxD,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,wBAAwB,CAAC,CAAC;CACjE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,oBAAoB,CAAC,CAAC;CAC/D,UAAU,EAAE,SAAS,oBAAoB;CACzC,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,qBAAqB,CAAC,CAAC;CAChE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,wBAAwB,CAAC,CAAC;CACtE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,2BAA2B,CAAC,CAAC;CAC5E,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,yBAAyB,CAAC,CAAC;CACxE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,4BAA4B,CAAC,CAAC;CAC3E,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,qBAAqB,CAAC,CAAC;CAClE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,mBAAmB,CAAC,CAAC;CAC9D,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,yBAAyB,CAAC,CAAC;CACrE,CAAC;;;;;;ACdF,MAAa,sBAAsB,OAAO;;;;;;ACC1C,MAAa,oBAAoB,EAAE,OAAO;CACxC,MAAM,EAAE,KAAK,EAAE,aAAa,oBAAoB,CAAC;CACjD,QAAQ,EAAE,KAAK,EAAE,aAAa,6BAA6B,CAAC;CAC5D,UAAU,EAAE,SAAS,oBAAoB;CACzC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;CAC5B,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC;CAC/B,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC;CAChC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC;CAClC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC;CAChC,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC;CACjC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC;CAC9B,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC;CAC/B,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC;CAC/B,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC;CAC/B,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC;CAC/B,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;CAChC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC;CACnC,CAAC;;;;;;;;;;;;ACMF,IAAa,eAAb,MAA0B;CACxB,SAA4B,QAAQ,OAAO;CAC3C,MAAyB,SAAS;CAClC,OAA0B,YAAY,OAAO;;;;CAK7C,6BAAgC,IAAI,KAAkC;;;;CAKtE,aAAoB,YAAuC;EACzD,KAAK,WAAW,IAAI,WAAW,MAAM,WAAW;EAChD,KAAK,IAAI,MAAM,yBAAyB;GACtC,MAAM,WAAW;GACjB,SAAS,WAAW;GACrB,CAAC;;;;;CAMJ,qBAAmD;EACjD,OAAO,MAAM,KAAK,KAAK,WAAW,QAAQ,CAAC;;;;;CAM7C,oBAAyD;EACvD,OAAO,KAAK,OAAO,MAAM,IAAI,sBAAsB;;;;;;CAOrD,MAAa,OAAO,MAAyC;EAC3D,MAAM,UAAU,KAAK,mBAAmB;EAGxC,MAAM,cAAoC,EAAE;EAE5C,IAAI,SAAS;GACX,IAAI,CAAC,KAAK,aAAa,QAAQ,IAC7B,YAAY,YAAY,QAAQ;GAElC,IAAI,CAAC,KAAK,aAAa,QAAQ,QAAQ,eACrC,YAAY,YAAY,QAAQ,QAAQ;GAE1C,IAAI,CAAC,KAAK,aAAa,QAAQ,WAC7B,YAAY,YAAY,QAAQ;GAGlC,IAAI,CAAC,KAAK,aAAa,QAAQ,UAAU,WACvC,YAAY,YAAY,QAAQ,SAAS;GAG3C,MAAM,OAAO,QAAQ;GACrB,IAAI,MAAM;IACR,IAAI,CAAC,KAAK,UAAU,KAAK,IACvB,YAAY,SAAS,KAAK;IAE5B,IAAI,CAAC,KAAK,aAAa,KAAK,OAC1B,YAAY,YAAY,KAAK;IAE/B,IAAI,CAAC,KAAK,aAAa,KAAK,OAC1B,YAAY,YAAY,KAAK;;;EAKnC,KAAK,IAAI,MAAM,wBAAwB;GACrC,MAAM,KAAK;GACX,QAAQ,KAAK;GACb,QAAQ,KAAK,UAAU,YAAY;GACpC,CAAC;EAEF,MAAM,QAAQ,MAAM,KAAK,KAAK,OAAO;GACnC,GAAG;GACH,GAAG;GACH,UAAU,KAAK,YAAY;GAC3B,SAAS,KAAK,WAAW;GAC1B,CAAC;EAEF,KAAK,IAAI,MAAM,uBAAuB;GACpC,IAAI,MAAM;GACV,MAAM,KAAK;GACX,QAAQ,KAAK;GACd,CAAC;EAEF,OAAO;;;;;CAMT,MAAa,OACX,MACA,QACA,UAAgD,EAAE,EAC5B;EACtB,OAAO,KAAK,OAAO;GAAE;GAAM;GAAQ,GAAG;GAAS,CAAC;;;;;CAMlD,MAAa,WACX,QAOA,UAAgD,EAAE,EAC5B;EACtB,OAAO,KAAK,OAAO;GACjB,MAAM;GACN;GACA,UAAU,WAAW,iBAAiB,YAAY;GAClD,GAAG;GACJ,CAAC;;;;;CAMJ,MAAa,WACX,QAOA,UAAgD,EAAE,EAC5B;EACtB,OAAO,KAAK,OAAO;GACjB,MAAM;GACN;GACA,cAAc;GACd,GAAG;GACJ,CAAC;;;;;CAMJ,MAAa,aACX,QACA,UAAgD,EAAE,EAC5B;EACtB,OAAO,KAAK,OAAO;GAAE,MAAM;GAAU;GAAQ,GAAG;GAAS,CAAC;;;;;CAM5D,MAAa,eACX,QAKA,UAAgD,EAAE,EAC5B;EACtB,OAAO,KAAK,OAAO;GACjB,MAAM;GACN;GACA,UAAU;GACV,GAAG;GACJ,CAAC;;;;;CAMJ,MAAa,aACX,QACA,UAAgD,EAAE,EAC5B;EACtB,OAAO,KAAK,OAAO;GACjB,MAAM;GACN;GACA,UAAU,WAAW,UAAU,aAAa;GAC5C,GAAG;GACJ,CAAC;;;;;CAMJ,MAAa,KAAK,QAAoB,EAAE,EAA8B;EACpE,KAAK,IAAI,MAAM,yBAAyB,EAAE,OAAO,CAAC;EAElD,MAAM,SAAS;EAEf,MAAM,QAAQ,KAAK,KAAK,kBAAkB;EAE1C,IAAI,MAAM,MACR,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM;EAGjC,IAAI,MAAM,QACR,MAAM,SAAS,EAAE,IAAI,MAAM,QAAQ;EAGrC,IAAI,MAAM,UACR,MAAM,WAAW,EAAE,IAAI,MAAM,UAAU;EAGzC,IAAI,MAAM,QACR,MAAM,SAAS,EAAE,IAAI,MAAM,QAAQ;EAGrC,IAAI,MAAM,WACR,MAAM,YAAY,EAAE,IAAI,MAAM,WAAW;EAG3C,IAAI,MAAM,cACR,MAAM,eAAe,EAAE,IAAI,MAAM,cAAc;EAGjD,IAAI,MAAM,YACR,MAAM,aAAa,EAAE,IAAI,MAAM,YAAY;EAG7C,IAAI,MAAM,YAAY,KAAA,GACpB,MAAM,UAAU,EAAE,IAAI,MAAM,SAAS;EAGvC,IAAI,MAAM,MACR,MAAM,YAAY;GAAE,GAAI,MAAM;GAAsB,KAAK,MAAM;GAAM;EAGvE,IAAI,MAAM,IACR,MAAM,YAAY;GAAE,GAAI,MAAM;GAAsB,KAAK,MAAM;GAAI;EAGrE,IAAI,MAAM,QACR,MAAM,cAAc,EAAE,MAAM,IAAI,MAAM,OAAO,IAAI;EAGnD,MAAM,SAAS,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,MAAM,CAAC;EAE1E,KAAK,IAAI,MAAM,uBAAuB;GACpC,OAAO,OAAO,QAAQ;GACtB,OAAO,OAAO,KAAK;GACpB,CAAC;EAEF,OAAO;;;;;CAMT,MAAa,QAAQ,IAAkC;EACrD,OAAO,KAAK,KAAK,QAAQ,GAAG;;;;;CAM9B,MAAa,WACX,QACA,QAAoC,EAAE,EACV;EAC5B,OAAO,KAAK,KAAK;GAAE,GAAG;GAAO;GAAQ,CAAC;;;;;CAMxC,MAAa,eACX,cACA,YACA,QAAyD,EAAE,EAC/B;EAC5B,OAAO,KAAK,KAAK;GAAE,GAAG;GAAO;GAAc;GAAY,CAAC;;;;;CAM1D,MAAa,SACX,UAA0D,EAAE,EACvC;EACrB,KAAK,IAAI,MAAM,uBAAuB,QAAQ;EAE9C,MAAM,QAAQ,KAAK,KAAK,kBAAkB;EAE1C,IAAI,QAAQ,MACV,MAAM,YAAY,EAAE,KAAK,QAAQ,KAAK,aAAa,EAAE;EAGvD,IAAI,QAAQ,IACV,MAAM,YAAY;GAChB,GAAI,MAAM;GACV,KAAK,QAAQ,GAAG,aAAa;GAC9B;EAGH,IAAI,QAAQ,WACV,MAAM,YAAY,EAAE,IAAI,QAAQ,WAAW;EAG7C,MAAM,MAAM,MAAM,KAAK,KAAK,SAAS,EAAE,OAAO,CAAC;EAE/C,MAAM,QAAoB;GACxB,OAAO,IAAI;GACX,QAAQ,EAAE;GACV,YAAY;IAAE,MAAM;IAAG,SAAS;IAAG,UAAU;IAAG;GAChD,aAAa;GACb,gBAAgB,EAAE;GACnB;EAED,IAAI,eAAe;EAEnB,KAAK,MAAM,SAAS,KAAK;GAEvB,MAAM,OAAO,MAAM,SAAS,MAAM,OAAO,MAAM,SAAS,KAAK;GAG7D,MAAM,WAAW,MAAM;GACvB,MAAM,WAAW;GAGjB,IAAI,MAAM,SACR;;EAIJ,MAAM,cAAc,MAAM,QAAQ,IAAI,eAAe,MAAM,QAAQ;EAWnE,MAAM,iBARW,IACd,QAAQ,MAAM,CAAC,EAAE,QAAQ,CACzB,MACE,GAAG,MACF,IAAI,KAAK,EAAE,UAAU,CAAC,SAAS,GAAG,IAAI,KAAK,EAAE,UAAU,CAAC,SAAS,CACpE,CACA,MAAM,GAAG,GAEmB;EAE/B,OAAO;;;;;CAMT,MAAa,gBAAgB,MAA6B;EACxD,KAAK,IAAI,KAAK,8BAA8B,EAAE,WAAW,MAAM,CAAC;EAEhE,MAAM,MAAM,MAAM,KAAK,KAAK,SAAS,EACnC,OAAO,EAAE,WAAW,EAAE,IAAI,KAAK,aAAa,EAAE,EAAE,EACjD,CAAC;EAEF,KAAK,MAAM,SAAS,KAClB,MAAM,KAAK,KAAK,WAAW,MAAM,GAAG;EAGtC,KAAK,IAAI,KAAK,6BAA6B,EAAE,OAAO,IAAI,QAAQ,CAAC;EAEjE,OAAO,IAAI;;;;;;;;;;;;;;AC3Xf,IAAa,uBAAb,MAAkC;CAChC,MAAyB;CACzB,QAA2B;CAC3B,eAAkC,QAAQ,aAAa;CACvD,OAA0B,YAAY,OAAO;;;;CAK7C,aAA6B,QAAQ;EACnC,MAAM,KAAK;EACX,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,mBAAmB,EAAE,CAAC,CAAC;EACrD,aAAa;EACb,QAAQ;GACN,OAAO;GACP,UAAU,EAAE,KAAK,oBAAoB;GACtC;EACD,UAAU,EAAE,YAAY,KAAK,aAAa,KAAK,MAAM;EACtD,CAAC;;;;CAKF,WAA2B,QAAQ;EACjC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,mBAAmB,EAAE,CAAC,CAAC;EACrD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EACf,IAAI,EAAE,MAAM,EACb,CAAC;GACF,UAAU;GACX;EACD,UAAU,EAAE,aAAa,KAAK,aAAa,QAAQ,OAAO,GAAG;EAC9D,CAAC;;;;;CAMF,eAA+B,QAAQ;EACrC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,qBAAqB,EAAE,CAAC,CAAC;EACvD,aAAa;EACb,QAAQ;GACN,MAAM,EAAE,OAAO,EACb,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE;IAAE,UAAU;IAAG,UAAU;IAAM,CAAC,EACxD,CAAC;GACF,UAAU,EAAE,OAAO,EACjB,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAC3B,CAAC;GACH;EACD,SAAS,OAAO,EAAE,WAAW;GAI3B,OAAO,EAAE,UAAS,MAHI,KAAK,KAAK,WAAW,EACzC,IAAI,EAAE,SAAS,KAAK,KAAK,EAC1B,CAAC,EACwB,IAAI,OAAO,EAAE;;EAE1C,CAAC;;;;;CAMF,cAA8B,QAAQ;EACpC,QAAQ;EACR,MAAM,KAAK;EACX,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,qBAAqB,EAAE,CAAC,CAAC;EACvD,aAAa;EACb,QAAQ;GACN,MAAM;GACN,UAAU;GACX;EACD,UAAU,EAAE,WAAW,KAAK,aAAa,OAAO,KAAK;EACtD,CAAC;;;;CAKF,aAA6B,QAAQ;EACnC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,mBAAmB,EAAE,CAAC,CAAC;EACrD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EACf,QAAQ,EAAE,MAAM,EACjB,CAAC;GACF,OAAO,EAAE,KAAK,kBAAkB,CAAC,SAAS,CAAC;GAC3C,UAAU,EAAE,KAAK,oBAAoB;GACtC;EACD,UAAU,EAAE,QAAQ,YAClB,KAAK,aAAa,WAAW,OAAO,QAAQ,MAAM;EACrD,CAAC;;;;CAKF,iBAAiC,QAAQ;EACvC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,mBAAmB,EAAE,CAAC,CAAC;EACrD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO;IACf,cAAc,EAAE,MAAM;IACtB,YAAY,EAAE,MAAM;IACrB,CAAC;GACF,OAAO,EAAE,KAAK,kBAAkB,CAAC,gBAAgB,aAAa,CAAC;GAC/D,UAAU,EAAE,KAAK,oBAAoB;GACtC;EACD,UAAU,EAAE,QAAQ,YAClB,KAAK,aAAa,eAChB,OAAO,cACP,OAAO,YACP,MACD;EACJ,CAAC;;;;CAKF,gBAAgC,QAAQ;EACtC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,mBAAmB,EAAE,CAAC,CAAC;EACrD,aAAa;EACb,QAAQ;GACN,OAAO,EAAE,OAAO;IACd,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;IAC9B,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC;IAC5B,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC;IAChC,CAAC;GACF,UAAU,EAAE,OAAO;IACjB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,SAAS,CAAC;IACvC,YAAY,EAAE,OAAO;KACnB,MAAM,EAAE,SAAS;KACjB,SAAS,EAAE,SAAS;KACpB,UAAU,EAAE,SAAS;KACtB,CAAC;IACF,aAAa,EAAE,QAAQ;IACvB,gBAAgB,EAAE,MAAM,oBAAoB;IAC7C,CAAC;GACH;EACD,UAAU,EAAE,YACV,KAAK,aAAa,SAAS;GACzB,MAAM,MAAM,OAAO,IAAI,KAAK,MAAM,KAAK,GAAG,KAAA;GAC1C,IAAI,MAAM,KAAK,IAAI,KAAK,MAAM,GAAG,GAAG,KAAA;GACpC,WAAW,MAAM;GAClB,CAAC;EACL,CAAC;;;;CAKF,WAA2B,QAAQ;EACjC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,mBAAmB,EAAE,CAAC,CAAC;EACrD,aAAa;EACb,QAAQ,EACN,UAAU,EAAE,MACV,EAAE,OAAO;GACP,MAAM,EAAE,MAAM;GACd,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC;GACjC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;GAC3B,CAAC,CACH,EACF;EACD,eAAe,KAAK,aAAa,oBAAoB;EACtD,CAAC;;;;CAKF,mBAAmC,QAAQ;EACzC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,mBAAmB,EAAE,CAAC,CAAC;EACrD,aAAa;EACb,QAAQ,EACN,UAAU,EAAE,OAAO;GACjB,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC;GACxB,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC;GAC1B,eAAe,EAAE,MAAM,EAAE,MAAM,CAAC;GAChC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC;GAC9B,CAAC,EACH;EACD,SAAS,YAAY;GACnB,MAAM,QAAQ,KAAK,aAAa,oBAAoB;GACpD,OAAO;IACL,OAAO,MAAM,KAAK,MAAM,EAAE,KAAK;IAC/B,SAAS,MAAM,SAAS,MAAM,EAAE,QAAQ;IACxC,eAAe;KAAC;KAAQ;KAAW;KAAQ;KAAS;KAAU;IAC9D,YAAY,CAAC,UAAU;IACxB;;EAEJ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AC1KJ,IAAa,iBAAb,cAAoC,UAAiC;CACnE,eAAkC,QAAQ,aAAa;;;;CAKvD,IAAW,OAAe;EACxB,OAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,cAAkC;EAC3C,OAAO,KAAK,QAAQ;;;;;CAMtB,IAAW,UAAoB;EAC7B,OAAO,KAAK,QAAQ;;;;;CAMtB,MAAa,IACX,QACA,UAA2B,EAAE,EACd;EACf,MAAM,KAAK,aAAa,OAAO,KAAK,QAAQ,MAAM,QAAQ,QAAQ;;;;;CAMpE,MAAa,WACX,QACA,UAA4C,EAAE,EAC/B;EACf,MAAM,KAAK,IAAI,QAAQ;GAAE,GAAG;GAAS,SAAS;GAAM,CAAC;;;;;CAMvD,MAAa,WACX,QACA,cACA,UAA6D,EAAE,EAChD;EACf,MAAM,KAAK,IAAI,QAAQ;GAAE,GAAG;GAAS,SAAS;GAAO;GAAc,CAAC;;;;;CAMtE,SAAyB;EACvB,MAAM,aAAkC;GACtC,MAAM,KAAK,QAAQ;GACnB,aAAa,KAAK,QAAQ;GAC1B,SAAS,KAAK,QAAQ;GACvB;EACD,KAAK,aAAa,aAAa,WAAW;;;;;;;;;;;;;;;;;AAsC9C,MAAa,UAAU,YAAmC;CACxD,OAAO,gBAAgB,gBAAgB,QAAQ;;AAGjD,OAAO,QAAQ;;;;;;;;;;;;;;ACnIf,MAAa,kBAAkB,QAAQ;CACrC,MAAM;CACN,UAAU,CAAC,cAAc,qBAAqB;CAC/C,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/api/audits/entities/audits.ts","../../../src/api/audits/schemas/auditQuerySchema.ts","../../../src/api/audits/schemas/auditResourceSchema.ts","../../../src/api/audits/schemas/createAuditSchema.ts","../../../src/api/audits/services/AuditService.ts","../../../src/api/audits/controllers/AdminAuditController.ts","../../../src/api/audits/primitives/$audit.ts","../../../src/api/audits/index.ts"],"sourcesContent":["import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\n\n/**\n * Audit severity levels for categorizing events.\n */\nexport const auditSeveritySchema = t.enum([\"info\", \"warning\", \"critical\"], {\n  default: \"info\",\n  description: \"Severity level of the audit event\",\n});\n\nexport type AuditSeverity = Static<typeof auditSeveritySchema>;\n\n/**\n * Audit log entity for tracking important system events.\n *\n * Stores comprehensive audit information including:\n * - Who performed the action (userId, userRealm)\n * - What happened (type, action, resource)\n * - When it happened (createdAt)\n * - Context and details (metadata, ipAddress, userAgent)\n */\nexport const audits = $entity({\n  name: \"audits\",\n  schema: t.object({\n    id: db.primaryKey(t.bigint()),\n    createdAt: db.createdAt(),\n    organizationId: db.organization(),\n\n    /**\n     * Audit event type (e.g., \"auth\", \"user\", \"payment\", \"system\").\n     * Used for categorizing and filtering audit events.\n     */\n    type: t.text({\n      description: \"Audit event type (e.g., auth, user, payment, system)\",\n    }),\n\n    /**\n     * Specific action performed (e.g., \"login\", \"logout\", \"create\", \"update\", \"delete\").\n     */\n    action: t.text({\n      description: \"Specific action performed (e.g., login, create, update)\",\n    }),\n\n    /**\n     * Severity level of the event.\n     */\n    severity: db.default(auditSeveritySchema, \"info\"),\n\n    /**\n     * User ID who performed the action (null for system events).\n     */\n    userId: t.optional(t.uuid()),\n\n    /**\n     * User realm for multi-tenant support.\n     */\n    userRealm: t.optional(t.text()),\n\n    /**\n     * User email at the time of the event (denormalized for history).\n     */\n    userEmail: t.optional(t.email()),\n\n    /**\n     * Resource type affected (e.g., \"user\", \"order\", \"file\").\n     */\n    resourceType: t.optional(t.text()),\n\n    /**\n     * Resource ID affected.\n     */\n    resourceId: t.optional(t.text()),\n\n    /**\n     * Human-readable description of the event.\n     */\n    description: t.optional(t.text()),\n\n    /**\n     * Additional metadata/context as JSON.\n     */\n    metadata: t.optional(t.json()),\n\n    /**\n     * Client IP address.\n     */\n    ipAddress: t.optional(t.text()),\n\n    /**\n     * Client user agent.\n     */\n    userAgent: t.optional(t.text()),\n\n    /**\n     * Session ID if applicable.\n     */\n    sessionId: t.optional(t.uuid()),\n\n    /**\n     * Request ID for correlation.\n     */\n    requestId: t.optional(t.text()),\n\n    /**\n     * Whether the action was successful.\n     */\n    success: db.default(t.boolean(), true),\n\n    /**\n     * Error message if the action failed.\n     */\n    errorMessage: t.optional(t.text()),\n  }),\n  indexes: [\n    \"createdAt\",\n    \"type\",\n    \"action\",\n    \"userId\",\n    \"userRealm\",\n    \"resourceType\",\n    \"resourceId\",\n    \"severity\",\n    { columns: [\"type\", \"action\"] },\n    { columns: [\"userId\", \"createdAt\"] },\n    { columns: [\"userRealm\", \"createdAt\"] },\n  ],\n});\n\nexport const auditEntitySchema = audits.schema;\nexport const auditEntityInsertSchema = audits.insertSchema;\nexport type AuditEntity = Static<typeof audits.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { pageQuerySchema } from \"alepha/orm\";\nimport { auditSeveritySchema } from \"../entities/audits.ts\";\n\n/**\n * Query schema for searching and filtering audit logs.\n */\nexport const auditQuerySchema = t.extend(pageQuerySchema, {\n  type: t.optional(t.text({ description: \"Filter by audit type\" })),\n  action: t.optional(t.text({ description: \"Filter by action\" })),\n  severity: t.optional(auditSeveritySchema),\n  userId: t.optional(t.uuid({ description: \"Filter by user ID\" })),\n  userRealm: t.optional(t.text({ description: \"Filter by user realm\" })),\n  resourceType: t.optional(t.text({ description: \"Filter by resource type\" })),\n  resourceId: t.optional(t.text({ description: \"Filter by resource ID\" })),\n  success: t.optional(t.boolean({ description: \"Filter by success status\" })),\n  from: t.optional(t.datetime({ description: \"Start date filter\" })),\n  to: t.optional(t.datetime({ description: \"End date filter\" })),\n  search: t.optional(t.text({ description: \"Search in description\" })),\n});\n\nexport type AuditQuery = Static<typeof auditQuerySchema>;\n","import type { Static } from \"alepha\";\nimport { audits } from \"../entities/audits.ts\";\n\n/**\n * Resource schema for audit log responses.\n */\nexport const auditResourceSchema = audits.schema;\n\nexport type AuditResource = Static<typeof auditResourceSchema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { auditSeveritySchema } from \"../entities/audits.ts\";\n\n/**\n * Schema for creating a new audit log entry.\n */\nexport const createAuditSchema = t.object({\n  type: t.text({ description: \"Audit event type\" }),\n  action: t.text({ description: \"Specific action performed\" }),\n  severity: t.optional(auditSeveritySchema),\n  userId: t.optional(t.uuid()),\n  userRealm: t.optional(t.text()),\n  userEmail: t.optional(t.email()),\n  resourceType: t.optional(t.text()),\n  resourceId: t.optional(t.text()),\n  description: t.optional(t.text()),\n  metadata: t.optional(t.json()),\n  ipAddress: t.optional(t.text()),\n  userAgent: t.optional(t.text()),\n  sessionId: t.optional(t.uuid()),\n  requestId: t.optional(t.text()),\n  success: t.optional(t.boolean()),\n  errorMessage: t.optional(t.text()),\n});\n\nexport type CreateAudit = Static<typeof createAuditSchema>;\n","import { $inject, Alepha } from \"alepha\";\nimport { $logger } from \"alepha/logger\";\nimport { $repository, type Page } from \"alepha/orm\";\nimport type { ServerRequest } from \"alepha/server\";\nimport {\n  type AuditEntity,\n  type AuditSeverity,\n  audits,\n} from \"../entities/audits.ts\";\nimport type { AuditQuery } from \"../schemas/auditQuerySchema.ts\";\nimport type { CreateAudit } from \"../schemas/createAuditSchema.ts\";\n\n/**\n * Registered audit type definition.\n */\nexport interface AuditTypeDefinition {\n  type: string;\n  description?: string;\n  actions: string[];\n}\n\n/**\n * Service for managing audit logs.\n *\n * Provides methods for:\n * - Creating audit entries\n * - Querying audit history\n * - Aggregating audit statistics\n * - Managing registered audit types\n */\nexport class AuditService {\n  protected readonly alepha = $inject(Alepha);\n  protected readonly log = $logger();\n  protected readonly repo = $repository(audits);\n\n  /**\n   * Registry of audit types and their allowed actions.\n   */\n  protected readonly auditTypes = new Map<string, AuditTypeDefinition>();\n\n  /**\n   * Register an audit type with its allowed actions.\n   */\n  public registerType(definition: AuditTypeDefinition): void {\n    this.auditTypes.set(definition.type, definition);\n    this.log.debug(\"Audit type registered\", {\n      type: definition.type,\n      actions: definition.actions,\n    });\n  }\n\n  /**\n   * Get all registered audit types.\n   */\n  public getRegisteredTypes(): AuditTypeDefinition[] {\n    return Array.from(this.auditTypes.values());\n  }\n\n  /**\n   * Distinct action names across all registered audit types, sorted.\n   *\n   * Sourced from the `$audit` type registry. Audit types register lazily —\n   * when their holder (e.g. `SessionAudits`, `ParameterAudits`) is first\n   * injected — so the admin filter only lists actions for audit domains that\n   * are actually in use, which is the intended behaviour.\n   */\n  public getDistinctActions(): string[] {\n    return [\n      ...new Set(this.getRegisteredTypes().flatMap((type) => type.actions)),\n    ].sort();\n  }\n\n  /**\n   * Get current request context if available.\n   */\n  protected getRequestContext(): ServerRequest | undefined {\n    return this.alepha.store.get(\"alepha.http.request\");\n  }\n\n  /**\n   * Create a new audit log entry.\n   * Automatically populates ipAddress, userAgent, and requestId from the current request context.\n   */\n  public async create(data: CreateAudit): Promise<AuditEntity> {\n    const request = this.getRequestContext();\n\n    // Auto-populate from request context if not provided\n    const contextData: Partial<CreateAudit> = {};\n\n    if (request) {\n      if (!data.ipAddress && request.ip) {\n        contextData.ipAddress = request.ip;\n      }\n      if (!data.userAgent && request.headers[\"user-agent\"]) {\n        contextData.userAgent = request.headers[\"user-agent\"];\n      }\n      if (!data.requestId && request.requestId) {\n        contextData.requestId = request.requestId;\n      }\n      // Check for session in metadata\n      if (!data.sessionId && request.metadata?.sessionId) {\n        contextData.sessionId = request.metadata.sessionId;\n      }\n      // Extract user from request.user (set by ServerSecurityProvider)\n      const user = request.user;\n      if (user) {\n        if (!data.userId && user.id) {\n          contextData.userId = user.id;\n        }\n        if (!data.userEmail && user.email) {\n          contextData.userEmail = user.email;\n        }\n        if (!data.userRealm && user.realm) {\n          contextData.userRealm = user.realm;\n        }\n      }\n    }\n\n    this.log.trace(\"Creating audit entry\", {\n      type: data.type,\n      action: data.action,\n      userId: data.userId ?? contextData.userId,\n    });\n\n    const success = data.success ?? true;\n    const entry = await this.repo.create({\n      ...contextData,\n      ...data,\n      // Outcome drives severity: a failed audit (success:false) defaults to\n      // `warning`, otherwise `info`. Explicit `severity` always wins. This is\n      // the single place the OK/Failed → severity rule lives, so holders and\n      // `$audit` primitives don't repeat it.\n      severity: data.severity ?? (success ? \"info\" : \"warning\"),\n      success,\n    });\n\n    this.log.debug(\"Audit entry created\", {\n      id: entry.id,\n      type: data.type,\n      action: data.action,\n    });\n\n    return entry;\n  }\n\n  /**\n   * Record an audit event (convenience method).\n   */\n  public async record(\n    type: string,\n    action: string,\n    options: Omit<CreateAudit, \"type\" | \"action\"> = {},\n  ): Promise<AuditEntity> {\n    return this.create({ type, action, ...options });\n  }\n\n  /**\n   * Find audit entries with filtering and pagination.\n   */\n  public async find(query: AuditQuery = {}): Promise<Page<AuditEntity>> {\n    this.log.trace(\"Finding audit entries\", { query });\n\n    query.sort ??= \"-createdAt\";\n\n    const where = this.repo.createQueryWhere();\n\n    if (query.type) {\n      where.type = { eq: query.type };\n    }\n\n    if (query.action) {\n      where.action = { eq: query.action };\n    }\n\n    if (query.severity) {\n      where.severity = { eq: query.severity };\n    }\n\n    if (query.userId) {\n      where.userId = { eq: query.userId };\n    }\n\n    if (query.userRealm) {\n      where.userRealm = { eq: query.userRealm };\n    }\n\n    if (query.resourceType) {\n      where.resourceType = { eq: query.resourceType };\n    }\n\n    if (query.resourceId) {\n      where.resourceId = { eq: query.resourceId };\n    }\n\n    if (query.success !== undefined) {\n      where.success = { eq: query.success };\n    }\n\n    if (query.from) {\n      where.createdAt = { ...(where.createdAt as object), gte: query.from };\n    }\n\n    if (query.to) {\n      where.createdAt = { ...(where.createdAt as object), lte: query.to };\n    }\n\n    if (query.search) {\n      where.description = { like: `%${query.search}%` };\n    }\n\n    const result = await this.repo.paginate(query, { where }, { count: true });\n\n    this.log.debug(\"Audit entries found\", {\n      count: result.content.length,\n      total: result.page.totalElements,\n    });\n\n    return result;\n  }\n\n  /**\n   * Get audit entry by ID.\n   */\n  public async getById(id: string): Promise<AuditEntity> {\n    return this.repo.getById(id);\n  }\n\n  /**\n   * Get audit entries for a specific user.\n   */\n  public async findByUser(\n    userId: string,\n    query: Omit<AuditQuery, \"userId\"> = {},\n  ): Promise<Page<AuditEntity>> {\n    return this.find({ ...query, userId });\n  }\n\n  /**\n   * Get audit entries for a specific resource.\n   */\n  public async findByResource(\n    resourceType: string,\n    resourceId: string,\n    query: Omit<AuditQuery, \"resourceType\" | \"resourceId\"> = {},\n  ): Promise<Page<AuditEntity>> {\n    return this.find({ ...query, resourceType, resourceId });\n  }\n\n  /**\n   * Get audit statistics for a time period.\n   */\n  public async getStats(\n    options: { from?: Date; to?: Date; userRealm?: string } = {},\n  ): Promise<AuditStats> {\n    this.log.trace(\"Getting audit stats\", options);\n\n    const where = this.repo.createQueryWhere();\n\n    if (options.from) {\n      where.createdAt = { gte: options.from.toISOString() };\n    }\n\n    if (options.to) {\n      where.createdAt = {\n        ...(where.createdAt as object),\n        lte: options.to.toISOString(),\n      };\n    }\n\n    if (options.userRealm) {\n      where.userRealm = { eq: options.userRealm };\n    }\n\n    const all = await this.repo.findMany({ where });\n\n    const stats: AuditStats = {\n      total: all.length,\n      byType: {},\n      bySeverity: { info: 0, warning: 0, critical: 0 },\n      successRate: 0,\n      recentFailures: [],\n    };\n\n    let successCount = 0;\n\n    for (const entry of all) {\n      // Count by type\n      stats.byType[entry.type] = (stats.byType[entry.type] || 0) + 1;\n\n      // Count by severity\n      const severity = entry.severity as AuditSeverity;\n      stats.bySeverity[severity]++;\n\n      // Count successes\n      if (entry.success) {\n        successCount++;\n      }\n    }\n\n    stats.successRate = stats.total > 0 ? successCount / stats.total : 1;\n\n    // Get recent failures\n    const failures = all\n      .filter((e) => !e.success)\n      .sort(\n        (a, b) =>\n          new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime(),\n      )\n      .slice(0, 10);\n\n    stats.recentFailures = failures;\n\n    return stats;\n  }\n\n  /**\n   * Delete old audit entries (for retention policy).\n   */\n  public async deleteOlderThan(date: Date): Promise<number> {\n    this.log.info(\"Deleting old audit entries\", { olderThan: date });\n\n    const old = await this.repo.findMany({\n      where: { createdAt: { lt: date.toISOString() } },\n    });\n\n    for (const entry of old) {\n      await this.repo.deleteById(entry.id);\n    }\n\n    this.log.info(\"Old audit entries deleted\", { count: old.length });\n\n    return old.length;\n  }\n}\n\n/**\n * Audit statistics summary.\n */\nexport interface AuditStats {\n  total: number;\n  byType: Record<string, number>;\n  bySeverity: Record<AuditSeverity, number>;\n  successRate: number;\n  recentFailures: AuditEntity[];\n}\n","import { $inject, t } from \"alepha\";\nimport { $repository } from \"alepha/orm\";\nimport { $secure } from \"alepha/security\";\nimport { $action } from \"alepha/server\";\nimport { audits } from \"../entities/audits.ts\";\nimport { auditQuerySchema } from \"../schemas/auditQuerySchema.ts\";\nimport { auditResourceSchema } from \"../schemas/auditResourceSchema.ts\";\nimport { createAuditSchema } from \"../schemas/createAuditSchema.ts\";\nimport { AuditService } from \"../services/AuditService.ts\";\n\n/**\n * REST API controller for audit log management.\n *\n * Provides endpoints for:\n * - Querying audit logs with filtering\n * - Creating audit entries\n * - Getting audit statistics\n * - Viewing registered audit types\n */\nexport class AdminAuditController {\n  protected readonly url = \"/audits\";\n  protected readonly group = \"admin:audits\";\n  protected readonly auditService = $inject(AuditService);\n  protected readonly repo = $repository(audits);\n\n  /**\n   * Find audit entries with filtering and pagination.\n   */\n  public readonly findAudits = $action({\n    path: this.url,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:read\"] })],\n    description: \"Find audit entries with filtering and pagination\",\n    schema: {\n      query: auditQuerySchema,\n      response: t.page(auditResourceSchema),\n    },\n    handler: ({ query }) => this.auditService.find(query),\n  });\n\n  /**\n   * Get a single audit entry by ID.\n   */\n  public readonly getAudit = $action({\n    path: `${this.url}/:id`,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:read\"] })],\n    description: \"Get a single audit entry by ID\",\n    schema: {\n      params: t.object({\n        id: t.text(),\n      }),\n      response: auditResourceSchema,\n    },\n    handler: ({ params }) => this.auditService.getById(params.id),\n  });\n\n  /**\n   * Delete many audit entries by id in one repository call. Use with care —\n   * audit logs are usually retained for compliance reasons.\n   */\n  public readonly deleteAudits = $action({\n    method: \"POST\",\n    path: `${this.url}/delete`,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:delete\"] })],\n    description: \"Delete many audit entries\",\n    schema: {\n      body: t.object({\n        ids: t.array(t.text(), { minItems: 1, maxItems: 1000 }),\n      }),\n      response: t.object({\n        deleted: t.array(t.text()),\n      }),\n    },\n    handler: async ({ body }) => {\n      const deleted = await this.repo.deleteMany({\n        id: { inArray: body.ids },\n      });\n      return { deleted: deleted.map(String) };\n    },\n  });\n\n  /**\n   * Create a new audit entry.\n   * System-only — this permission should never be assigned to human roles.\n   */\n  public readonly createAudit = $action({\n    method: \"POST\",\n    path: this.url,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:create\"] })],\n    description: \"Create a new audit entry\",\n    schema: {\n      body: createAuditSchema,\n      response: auditResourceSchema,\n    },\n    handler: ({ body }) => this.auditService.create(body),\n  });\n\n  /**\n   * Get audit entries for a specific user.\n   */\n  public readonly findByUser = $action({\n    path: `${this.url}/user/:userId`,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:read\"] })],\n    description: \"Get audit entries for a specific user\",\n    schema: {\n      params: t.object({\n        userId: t.uuid(),\n      }),\n      query: t.omit(auditQuerySchema, [\"userId\"]),\n      response: t.page(auditResourceSchema),\n    },\n    handler: ({ params, query }) =>\n      this.auditService.findByUser(params.userId, query),\n  });\n\n  /**\n   * Get audit entries for a specific resource.\n   */\n  public readonly findByResource = $action({\n    path: `${this.url}/resource/:resourceType/:resourceId`,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:read\"] })],\n    description: \"Get audit entries for a specific resource\",\n    schema: {\n      params: t.object({\n        resourceType: t.text(),\n        resourceId: t.text(),\n      }),\n      query: t.omit(auditQuerySchema, [\"resourceType\", \"resourceId\"]),\n      response: t.page(auditResourceSchema),\n    },\n    handler: ({ params, query }) =>\n      this.auditService.findByResource(\n        params.resourceType,\n        params.resourceId,\n        query,\n      ),\n  });\n\n  /**\n   * Get audit statistics.\n   */\n  public readonly getAuditStats = $action({\n    path: `${this.url}/stats`,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:read\"] })],\n    description: \"Get audit statistics for a time period\",\n    schema: {\n      query: t.object({\n        from: t.optional(t.datetime()),\n        to: t.optional(t.datetime()),\n        userRealm: t.optional(t.text()),\n      }),\n      response: t.object({\n        total: t.integer(),\n        byType: t.record(t.text(), t.integer()),\n        bySeverity: t.object({\n          info: t.integer(),\n          warning: t.integer(),\n          critical: t.integer(),\n        }),\n        successRate: t.number(),\n        recentFailures: t.array(auditResourceSchema),\n      }),\n    },\n    handler: ({ query }) =>\n      this.auditService.getStats({\n        from: query.from ? new Date(query.from) : undefined,\n        to: query.to ? new Date(query.to) : undefined,\n        userRealm: query.userRealm,\n      }),\n  });\n\n  /**\n   * List distinct action names present in the audit log (for filters).\n   */\n  public readonly getAuditActions = $action({\n    path: `${this.url}/actions`,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:read\"] })],\n    description: \"List distinct action names present in the audit log\",\n    schema: {\n      response: t.array(t.text()),\n    },\n    handler: () => this.auditService.getDistinctActions(),\n  });\n\n  /**\n   * Get registered audit types.\n   */\n  public readonly getTypes = $action({\n    path: `${this.url}/types`,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:read\"] })],\n    description: \"Get all registered audit types\",\n    schema: {\n      response: t.array(\n        t.object({\n          type: t.text(),\n          description: t.optional(t.text()),\n          actions: t.array(t.text()),\n        }),\n      ),\n    },\n    handler: () => this.auditService.getRegisteredTypes(),\n  });\n\n  /**\n   * Get distinct values for filters.\n   */\n  public readonly getFilterOptions = $action({\n    path: `${this.url}/filters`,\n    group: this.group,\n    use: [$secure({ permissions: [\"admin:audit:read\"] })],\n    description: \"Get distinct values for audit filters\",\n    schema: {\n      response: t.object({\n        types: t.array(t.text()),\n        actions: t.array(t.text()),\n        resourceTypes: t.array(t.text()),\n        userRealms: t.array(t.text()),\n      }),\n    },\n    handler: async () => {\n      const types = this.auditService.getRegisteredTypes();\n      return {\n        types: types.map((t) => t.type),\n        actions: types.flatMap((t) => t.actions),\n        resourceTypes: [\"user\", \"session\", \"file\", \"order\", \"payment\"],\n        userRealms: [\"default\"],\n      };\n    },\n  });\n}\n","import { $inject, createPrimitive, KIND, Primitive } from \"alepha\";\nimport {\n  AuditService,\n  type AuditTypeDefinition,\n} from \"../services/AuditService.ts\";\n\n/**\n * Options for creating an audit type primitive.\n */\nexport interface AuditPrimitiveOptions {\n  /**\n   * Unique audit type identifier (e.g., \"auth\", \"payment\", \"order\").\n   */\n  type: string;\n\n  /**\n   * Human-readable description of this audit type.\n   */\n  description?: string;\n\n  /**\n   * List of allowed actions for this audit type.\n   */\n  actions: string[];\n}\n\n/**\n * Audit type primitive for registering domain-specific audit events.\n *\n * Provides a type-safe way to define and log audit events within a specific domain.\n *\n * @example\n * ```ts\n * class PaymentAudits {\n *   audit = $audit({\n *     type: \"payment\",\n *     description: \"Payment-related audit events\",\n *     actions: [\"create\", \"refund\", \"cancel\", \"dispute\"],\n *   });\n *\n *   async logPaymentCreated(paymentId: string, userId: string, amount: number) {\n *     await this.audit.log(\"create\", {\n *       userId,\n *       resourceType: \"payment\",\n *       resourceId: paymentId,\n *       description: `Payment of ${amount} created`,\n *       metadata: { amount },\n *     });\n *   }\n * }\n * ```\n */\nexport class AuditPrimitive extends Primitive<AuditPrimitiveOptions> {\n  protected readonly auditService = $inject(AuditService);\n\n  /**\n   * The audit type identifier.\n   */\n  public get type(): string {\n    return this.options.type;\n  }\n\n  /**\n   * The audit type description.\n   */\n  public get description(): string | undefined {\n    return this.options.description;\n  }\n\n  /**\n   * The allowed actions for this audit type.\n   */\n  public get actions(): string[] {\n    return this.options.actions;\n  }\n\n  /**\n   * Log an audit event for this type.\n   */\n  public async log(\n    action: string,\n    options: AuditLogOptions = {},\n  ): Promise<void> {\n    await this.auditService.record(this.options.type, action, options);\n  }\n\n  /**\n   * Log a successful audit event.\n   */\n  public async logSuccess(\n    action: string,\n    options: Omit<AuditLogOptions, \"success\"> = {},\n  ): Promise<void> {\n    await this.log(action, { ...options, success: true });\n  }\n\n  /**\n   * Log a failed audit event.\n   */\n  public async logFailure(\n    action: string,\n    errorMessage: string,\n    options: Omit<AuditLogOptions, \"success\" | \"errorMessage\"> = {},\n  ): Promise<void> {\n    await this.log(action, { ...options, success: false, errorMessage });\n  }\n\n  /**\n   * Called during initialization to register this audit type.\n   */\n  protected onInit(): void {\n    const definition: AuditTypeDefinition = {\n      type: this.options.type,\n      description: this.options.description,\n      actions: this.options.actions,\n    };\n    this.auditService.registerType(definition);\n  }\n}\n\n/**\n * Options for logging an audit event.\n */\nexport interface AuditLogOptions {\n  severity?: \"info\" | \"warning\" | \"critical\";\n  userId?: string;\n  userRealm?: string;\n  userEmail?: string;\n  resourceType?: string;\n  resourceId?: string;\n  description?: string;\n  metadata?: Record<string, unknown>;\n  ipAddress?: string;\n  userAgent?: string;\n  sessionId?: string;\n  requestId?: string;\n  success?: boolean;\n  errorMessage?: string;\n}\n\n/**\n * Create an audit type primitive.\n *\n * @example\n * ```ts\n * class OrderAudits {\n *   audit = $audit({\n *     type: \"order\",\n *     description: \"Order management events\",\n *     actions: [\"create\", \"update\", \"cancel\", \"fulfill\", \"ship\"],\n *   });\n * }\n * ```\n */\nexport const $audit = (options: AuditPrimitiveOptions) => {\n  return createPrimitive(AuditPrimitive, options);\n};\n\n$audit[KIND] = AuditPrimitive;\n","import { $module } from \"alepha\";\nimport { AdminAuditController } from \"./controllers/AdminAuditController.ts\";\nimport { AuditService } from \"./services/AuditService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./controllers/AdminAuditController.ts\";\nexport * from \"./entities/audits.ts\";\nexport * from \"./primitives/$audit.ts\";\nexport * from \"./schemas/auditQuerySchema.ts\";\nexport * from \"./schemas/auditResourceSchema.ts\";\nexport * from \"./schemas/createAuditSchema.ts\";\nexport * from \"./services/AuditService.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\n/**\n * Audit trail for compliance.\n *\n * **Features:**\n * - Domain-specific audit types\n * - Audit event logging\n * - Filtering and searching\n * - User action tracking\n *\n * @module alepha.api.audits\n */\nexport const AlephaApiAudits = $module({\n  name: \"alepha.api.audits\",\n  services: [AuditService, AdminAuditController],\n});\n"],"mappings":";;;;;;;;;AAOA,MAAa,sBAAsB,EAAE,KAAK;CAAC;CAAQ;CAAW;AAAU,GAAG;CACzE,SAAS;CACT,aAAa;AACf,CAAC;;;;;;;;;;AAaD,MAAa,SAAS,QAAQ;CAC5B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,OAAO,CAAC;EAC5B,WAAW,GAAG,UAAU;EACxB,gBAAgB,GAAG,aAAa;;;;;EAMhC,MAAM,EAAE,KAAK,EACX,aAAa,uDACf,CAAC;;;;EAKD,QAAQ,EAAE,KAAK,EACb,aAAa,0DACf,CAAC;;;;EAKD,UAAU,GAAG,QAAQ,qBAAqB,MAAM;;;;EAKhD,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;;;;EAK3B,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC;;;;EAK9B,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC;;;;EAK/B,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC;;;;EAKjC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC;;;;EAK/B,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC;;;;EAKhC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC;;;;EAK7B,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC;;;;EAK9B,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC;;;;EAK9B,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC;;;;EAK9B,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC;;;;EAK9B,SAAS,GAAG,QAAQ,EAAE,QAAQ,GAAG,IAAI;;;;EAKrC,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC;CACnC,CAAC;CACD,SAAS;EACP;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA,EAAE,SAAS,CAAC,QAAQ,QAAQ,EAAE;EAC9B,EAAE,SAAS,CAAC,UAAU,WAAW,EAAE;EACnC,EAAE,SAAS,CAAC,aAAa,WAAW,EAAE;CACxC;AACF,CAAC;AAED,MAAa,oBAAoB,OAAO;AACxC,MAAa,0BAA0B,OAAO;;;;;;AC3H9C,MAAa,mBAAmB,EAAE,OAAO,iBAAiB;CACxD,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,uBAAuB,CAAC,CAAC;CAChE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,mBAAmB,CAAC,CAAC;CAC9D,UAAU,EAAE,SAAS,mBAAmB;CACxC,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,oBAAoB,CAAC,CAAC;CAC/D,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,uBAAuB,CAAC,CAAC;CACrE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,0BAA0B,CAAC,CAAC;CAC3E,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,wBAAwB,CAAC,CAAC;CACvE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,2BAA2B,CAAC,CAAC;CAC1E,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,oBAAoB,CAAC,CAAC;CACjE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,kBAAkB,CAAC,CAAC;CAC7D,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,wBAAwB,CAAC,CAAC;AACrE,CAAC;;;;;;ACdD,MAAa,sBAAsB,OAAO;;;;;;ACC1C,MAAa,oBAAoB,EAAE,OAAO;CACxC,MAAM,EAAE,KAAK,EAAE,aAAa,mBAAmB,CAAC;CAChD,QAAQ,EAAE,KAAK,EAAE,aAAa,4BAA4B,CAAC;CAC3D,UAAU,EAAE,SAAS,mBAAmB;CACxC,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC;CAC3B,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC;CAC9B,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC;CAC/B,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC;CACjC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC;CAC/B,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC;CAChC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC;CAC7B,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC;CAC9B,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC;CAC9B,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC;CAC9B,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC;CAC9B,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC/B,cAAc,EAAE,SAAS,EAAE,KAAK,CAAC;AACnC,CAAC;;;;;;;;;;;;ACMD,IAAa,eAAb,MAA0B;CACxB,SAA4B,QAAQ,MAAM;CAC1C,MAAyB,QAAQ;CACjC,OAA0B,YAAY,MAAM;;;;CAK5C,6BAAgC,IAAI,IAAiC;;;;CAKrE,aAAoB,YAAuC;EACzD,KAAK,WAAW,IAAI,WAAW,MAAM,UAAU;EAC/C,KAAK,IAAI,MAAM,yBAAyB;GACtC,MAAM,WAAW;GACjB,SAAS,WAAW;EACtB,CAAC;CACH;;;;CAKA,qBAAmD;EACjD,OAAO,MAAM,KAAK,KAAK,WAAW,OAAO,CAAC;CAC5C;;;;;;;;;CAUA,qBAAsC;EACpC,OAAO,CACL,GAAG,IAAI,IAAI,KAAK,mBAAmB,EAAE,SAAS,SAAS,KAAK,OAAO,CAAC,CACtE,EAAE,KAAK;CACT;;;;CAKA,oBAAyD;EACvD,OAAO,KAAK,OAAO,MAAM,IAAI,qBAAqB;CACpD;;;;;CAMA,MAAa,OAAO,MAAyC;EAC3D,MAAM,UAAU,KAAK,kBAAkB;EAGvC,MAAM,cAAoC,CAAC;EAE3C,IAAI,SAAS;GACX,IAAI,CAAC,KAAK,aAAa,QAAQ,IAC7B,YAAY,YAAY,QAAQ;GAElC,IAAI,CAAC,KAAK,aAAa,QAAQ,QAAQ,eACrC,YAAY,YAAY,QAAQ,QAAQ;GAE1C,IAAI,CAAC,KAAK,aAAa,QAAQ,WAC7B,YAAY,YAAY,QAAQ;GAGlC,IAAI,CAAC,KAAK,aAAa,QAAQ,UAAU,WACvC,YAAY,YAAY,QAAQ,SAAS;GAG3C,MAAM,OAAO,QAAQ;GACrB,IAAI,MAAM;IACR,IAAI,CAAC,KAAK,UAAU,KAAK,IACvB,YAAY,SAAS,KAAK;IAE5B,IAAI,CAAC,KAAK,aAAa,KAAK,OAC1B,YAAY,YAAY,KAAK;IAE/B,IAAI,CAAC,KAAK,aAAa,KAAK,OAC1B,YAAY,YAAY,KAAK;GAEjC;EACF;EAEA,KAAK,IAAI,MAAM,wBAAwB;GACrC,MAAM,KAAK;GACX,QAAQ,KAAK;GACb,QAAQ,KAAK,UAAU,YAAY;EACrC,CAAC;EAED,MAAM,UAAU,KAAK,WAAW;EAChC,MAAM,QAAQ,MAAM,KAAK,KAAK,OAAO;GACnC,GAAG;GACH,GAAG;GAKH,UAAU,KAAK,aAAa,UAAU,SAAS;GAC/C;EACF,CAAC;EAED,KAAK,IAAI,MAAM,uBAAuB;GACpC,IAAI,MAAM;GACV,MAAM,KAAK;GACX,QAAQ,KAAK;EACf,CAAC;EAED,OAAO;CACT;;;;CAKA,MAAa,OACX,MACA,QACA,UAAgD,CAAC,GAC3B;EACtB,OAAO,KAAK,OAAO;GAAE;GAAM;GAAQ,GAAG;EAAQ,CAAC;CACjD;;;;CAKA,MAAa,KAAK,QAAoB,CAAC,GAA+B;EACpE,KAAK,IAAI,MAAM,yBAAyB,EAAE,MAAM,CAAC;EAEjD,MAAM,SAAS;EAEf,MAAM,QAAQ,KAAK,KAAK,iBAAiB;EAEzC,IAAI,MAAM,MACR,MAAM,OAAO,EAAE,IAAI,MAAM,KAAK;EAGhC,IAAI,MAAM,QACR,MAAM,SAAS,EAAE,IAAI,MAAM,OAAO;EAGpC,IAAI,MAAM,UACR,MAAM,WAAW,EAAE,IAAI,MAAM,SAAS;EAGxC,IAAI,MAAM,QACR,MAAM,SAAS,EAAE,IAAI,MAAM,OAAO;EAGpC,IAAI,MAAM,WACR,MAAM,YAAY,EAAE,IAAI,MAAM,UAAU;EAG1C,IAAI,MAAM,cACR,MAAM,eAAe,EAAE,IAAI,MAAM,aAAa;EAGhD,IAAI,MAAM,YACR,MAAM,aAAa,EAAE,IAAI,MAAM,WAAW;EAG5C,IAAI,MAAM,YAAY,KAAA,GACpB,MAAM,UAAU,EAAE,IAAI,MAAM,QAAQ;EAGtC,IAAI,MAAM,MACR,MAAM,YAAY;GAAE,GAAI,MAAM;GAAsB,KAAK,MAAM;EAAK;EAGtE,IAAI,MAAM,IACR,MAAM,YAAY;GAAE,GAAI,MAAM;GAAsB,KAAK,MAAM;EAAG;EAGpE,IAAI,MAAM,QACR,MAAM,cAAc,EAAE,MAAM,IAAI,MAAM,OAAO,GAAG;EAGlD,MAAM,SAAS,MAAM,KAAK,KAAK,SAAS,OAAO,EAAE,MAAM,GAAG,EAAE,OAAO,KAAK,CAAC;EAEzE,KAAK,IAAI,MAAM,uBAAuB;GACpC,OAAO,OAAO,QAAQ;GACtB,OAAO,OAAO,KAAK;EACrB,CAAC;EAED,OAAO;CACT;;;;CAKA,MAAa,QAAQ,IAAkC;EACrD,OAAO,KAAK,KAAK,QAAQ,EAAE;CAC7B;;;;CAKA,MAAa,WACX,QACA,QAAoC,CAAC,GACT;EAC5B,OAAO,KAAK,KAAK;GAAE,GAAG;GAAO;EAAO,CAAC;CACvC;;;;CAKA,MAAa,eACX,cACA,YACA,QAAyD,CAAC,GAC9B;EAC5B,OAAO,KAAK,KAAK;GAAE,GAAG;GAAO;GAAc;EAAW,CAAC;CACzD;;;;CAKA,MAAa,SACX,UAA0D,CAAC,GACtC;EACrB,KAAK,IAAI,MAAM,uBAAuB,OAAO;EAE7C,MAAM,QAAQ,KAAK,KAAK,iBAAiB;EAEzC,IAAI,QAAQ,MACV,MAAM,YAAY,EAAE,KAAK,QAAQ,KAAK,YAAY,EAAE;EAGtD,IAAI,QAAQ,IACV,MAAM,YAAY;GAChB,GAAI,MAAM;GACV,KAAK,QAAQ,GAAG,YAAY;EAC9B;EAGF,IAAI,QAAQ,WACV,MAAM,YAAY,EAAE,IAAI,QAAQ,UAAU;EAG5C,MAAM,MAAM,MAAM,KAAK,KAAK,SAAS,EAAE,MAAM,CAAC;EAE9C,MAAM,QAAoB;GACxB,OAAO,IAAI;GACX,QAAQ,CAAC;GACT,YAAY;IAAE,MAAM;IAAG,SAAS;IAAG,UAAU;GAAE;GAC/C,aAAa;GACb,gBAAgB,CAAC;EACnB;EAEA,IAAI,eAAe;EAEnB,KAAK,MAAM,SAAS,KAAK;GAEvB,MAAM,OAAO,MAAM,SAAS,MAAM,OAAO,MAAM,SAAS,KAAK;GAG7D,MAAM,WAAW,MAAM;GACvB,MAAM,WAAW;GAGjB,IAAI,MAAM,SACR;EAEJ;EAEA,MAAM,cAAc,MAAM,QAAQ,IAAI,eAAe,MAAM,QAAQ;EAWnE,MAAM,iBARW,IACd,QAAQ,MAAM,CAAC,EAAE,OAAO,EACxB,MACE,GAAG,MACF,IAAI,KAAK,EAAE,SAAS,EAAE,QAAQ,IAAI,IAAI,KAAK,EAAE,SAAS,EAAE,QAAQ,CACpE,EACC,MAAM,GAAG,EAEkB;EAE9B,OAAO;CACT;;;;CAKA,MAAa,gBAAgB,MAA6B;EACxD,KAAK,IAAI,KAAK,8BAA8B,EAAE,WAAW,KAAK,CAAC;EAE/D,MAAM,MAAM,MAAM,KAAK,KAAK,SAAS,EACnC,OAAO,EAAE,WAAW,EAAE,IAAI,KAAK,YAAY,EAAE,EAAE,EACjD,CAAC;EAED,KAAK,MAAM,SAAS,KAClB,MAAM,KAAK,KAAK,WAAW,MAAM,EAAE;EAGrC,KAAK,IAAI,KAAK,6BAA6B,EAAE,OAAO,IAAI,OAAO,CAAC;EAEhE,OAAO,IAAI;CACb;AACF;;;;;;;;;;;;AC1TA,IAAa,uBAAb,MAAkC;CAChC,MAAyB;CACzB,QAA2B;CAC3B,eAAkC,QAAQ,YAAY;CACtD,OAA0B,YAAY,MAAM;;;;CAK5C,aAA6B,QAAQ;EACnC,MAAM,KAAK;EACX,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAC;EACpD,aAAa;EACb,QAAQ;GACN,OAAO;GACP,UAAU,EAAE,KAAK,mBAAmB;EACtC;EACA,UAAU,EAAE,YAAY,KAAK,aAAa,KAAK,KAAK;CACtD,CAAC;;;;CAKD,WAA2B,QAAQ;EACjC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAC;EACpD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EACf,IAAI,EAAE,KAAK,EACb,CAAC;GACD,UAAU;EACZ;EACA,UAAU,EAAE,aAAa,KAAK,aAAa,QAAQ,OAAO,EAAE;CAC9D,CAAC;;;;;CAMD,eAA+B,QAAQ;EACrC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,oBAAoB,EAAE,CAAC,CAAC;EACtD,aAAa;EACb,QAAQ;GACN,MAAM,EAAE,OAAO,EACb,KAAK,EAAE,MAAM,EAAE,KAAK,GAAG;IAAE,UAAU;IAAG,UAAU;GAAK,CAAC,EACxD,CAAC;GACD,UAAU,EAAE,OAAO,EACjB,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,EAC3B,CAAC;EACH;EACA,SAAS,OAAO,EAAE,WAAW;GAI3B,OAAO,EAAE,UAAS,MAHI,KAAK,KAAK,WAAW,EACzC,IAAI,EAAE,SAAS,KAAK,IAAI,EAC1B,CAAC,GACyB,IAAI,MAAM,EAAE;EACxC;CACF,CAAC;;;;;CAMD,cAA8B,QAAQ;EACpC,QAAQ;EACR,MAAM,KAAK;EACX,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,oBAAoB,EAAE,CAAC,CAAC;EACtD,aAAa;EACb,QAAQ;GACN,MAAM;GACN,UAAU;EACZ;EACA,UAAU,EAAE,WAAW,KAAK,aAAa,OAAO,IAAI;CACtD,CAAC;;;;CAKD,aAA6B,QAAQ;EACnC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAC;EACpD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EACf,QAAQ,EAAE,KAAK,EACjB,CAAC;GACD,OAAO,EAAE,KAAK,kBAAkB,CAAC,QAAQ,CAAC;GAC1C,UAAU,EAAE,KAAK,mBAAmB;EACtC;EACA,UAAU,EAAE,QAAQ,YAClB,KAAK,aAAa,WAAW,OAAO,QAAQ,KAAK;CACrD,CAAC;;;;CAKD,iBAAiC,QAAQ;EACvC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAC;EACpD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO;IACf,cAAc,EAAE,KAAK;IACrB,YAAY,EAAE,KAAK;GACrB,CAAC;GACD,OAAO,EAAE,KAAK,kBAAkB,CAAC,gBAAgB,YAAY,CAAC;GAC9D,UAAU,EAAE,KAAK,mBAAmB;EACtC;EACA,UAAU,EAAE,QAAQ,YAClB,KAAK,aAAa,eAChB,OAAO,cACP,OAAO,YACP,KACF;CACJ,CAAC;;;;CAKD,gBAAgC,QAAQ;EACtC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAC;EACpD,aAAa;EACb,QAAQ;GACN,OAAO,EAAE,OAAO;IACd,MAAM,EAAE,SAAS,EAAE,SAAS,CAAC;IAC7B,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC;IAC3B,WAAW,EAAE,SAAS,EAAE,KAAK,CAAC;GAChC,CAAC;GACD,UAAU,EAAE,OAAO;IACjB,OAAO,EAAE,QAAQ;IACjB,QAAQ,EAAE,OAAO,EAAE,KAAK,GAAG,EAAE,QAAQ,CAAC;IACtC,YAAY,EAAE,OAAO;KACnB,MAAM,EAAE,QAAQ;KAChB,SAAS,EAAE,QAAQ;KACnB,UAAU,EAAE,QAAQ;IACtB,CAAC;IACD,aAAa,EAAE,OAAO;IACtB,gBAAgB,EAAE,MAAM,mBAAmB;GAC7C,CAAC;EACH;EACA,UAAU,EAAE,YACV,KAAK,aAAa,SAAS;GACzB,MAAM,MAAM,OAAO,IAAI,KAAK,MAAM,IAAI,IAAI,KAAA;GAC1C,IAAI,MAAM,KAAK,IAAI,KAAK,MAAM,EAAE,IAAI,KAAA;GACpC,WAAW,MAAM;EACnB,CAAC;CACL,CAAC;;;;CAKD,kBAAkC,QAAQ;EACxC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAC;EACpD,aAAa;EACb,QAAQ,EACN,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAC5B;EACA,eAAe,KAAK,aAAa,mBAAmB;CACtD,CAAC;;;;CAKD,WAA2B,QAAQ;EACjC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAC;EACpD,aAAa;EACb,QAAQ,EACN,UAAU,EAAE,MACV,EAAE,OAAO;GACP,MAAM,EAAE,KAAK;GACb,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC;GAChC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;EAC3B,CAAC,CACH,EACF;EACA,eAAe,KAAK,aAAa,mBAAmB;CACtD,CAAC;;;;CAKD,mBAAmC,QAAQ;EACzC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAC;EACpD,aAAa;EACb,QAAQ,EACN,UAAU,EAAE,OAAO;GACjB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC;GACvB,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;GACzB,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC;GAC/B,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC;EAC9B,CAAC,EACH;EACA,SAAS,YAAY;GACnB,MAAM,QAAQ,KAAK,aAAa,mBAAmB;GACnD,OAAO;IACL,OAAO,MAAM,KAAK,MAAM,EAAE,IAAI;IAC9B,SAAS,MAAM,SAAS,MAAM,EAAE,OAAO;IACvC,eAAe;KAAC;KAAQ;KAAW;KAAQ;KAAS;IAAS;IAC7D,YAAY,CAAC,SAAS;GACxB;EACF;CACF,CAAC;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACzLA,IAAa,iBAAb,cAAoC,UAAiC;CACnE,eAAkC,QAAQ,YAAY;;;;CAKtD,IAAW,OAAe;EACxB,OAAO,KAAK,QAAQ;CACtB;;;;CAKA,IAAW,cAAkC;EAC3C,OAAO,KAAK,QAAQ;CACtB;;;;CAKA,IAAW,UAAoB;EAC7B,OAAO,KAAK,QAAQ;CACtB;;;;CAKA,MAAa,IACX,QACA,UAA2B,CAAC,GACb;EACf,MAAM,KAAK,aAAa,OAAO,KAAK,QAAQ,MAAM,QAAQ,OAAO;CACnE;;;;CAKA,MAAa,WACX,QACA,UAA4C,CAAC,GAC9B;EACf,MAAM,KAAK,IAAI,QAAQ;GAAE,GAAG;GAAS,SAAS;EAAK,CAAC;CACtD;;;;CAKA,MAAa,WACX,QACA,cACA,UAA6D,CAAC,GAC/C;EACf,MAAM,KAAK,IAAI,QAAQ;GAAE,GAAG;GAAS,SAAS;GAAO;EAAa,CAAC;CACrE;;;;CAKA,SAAyB;EACvB,MAAM,aAAkC;GACtC,MAAM,KAAK,QAAQ;GACnB,aAAa,KAAK,QAAQ;GAC1B,SAAS,KAAK,QAAQ;EACxB;EACA,KAAK,aAAa,aAAa,UAAU;CAC3C;AACF;;;;;;;;;;;;;;;AAoCA,MAAa,UAAU,YAAmC;CACxD,OAAO,gBAAgB,gBAAgB,OAAO;AAChD;AAEA,OAAO,QAAQ;;;;;;;;;;;;;;ACnIf,MAAa,kBAAkB,QAAQ;CACrC,MAAM;CACN,UAAU,CAAC,cAAc,oBAAoB;AAC/C,CAAC"}

package/dist/api/files/index.browser.js

@@ -67,8 +67,38 @@ const fileQuerySchema = t.extend(pageQuerySchema, {
 	createdBefore: t.optional(t.datetime())
 });
 //#endregion
+//#region ../../src/api/files/schemas/fileCreatorSummarySchema.ts
+/**
+* Slim view of a file's uploader, embedded by the admin listing via a
+* best-effort left join (`files.creator` → `users.id`) so the UI can render
+* a human-readable identifier instead of a bare UUID.
+*
+* Optional end-to-end: the join only runs when the `users` entity is
+* registered in the running app (see `FileService.findFiles`), and even then
+* a file whose creator was deleted — or who lives in a non-default realm —
+* comes back with `user` undefined. Callers must fall back to `creatorName`
+* or the raw `creator` id.
+*/
+const fileCreatorSummarySchema = t.object({
+	id: t.uuid(),
+	email: t.optional(t.string({ format: "email" })),
+	username: t.optional(t.shortText({
+		minLength: 3,
+		maxLength: 30
+	})),
+	firstName: t.optional(t.string()),
+	lastName: t.optional(t.string())
+});
+//#endregion
 //#region ../../src/api/files/schemas/fileResourceSchema.ts
-const fileResourceSchema = t.extend(files.schema, {}, {
+const fileResourceSchema = t.extend(files.schema, { 
+/**
+* Uploader summary, embedded by the admin listing via a best-effort
+* left join. Optional — see `fileCreatorSummarySchema`. Distinct from
+* the denormalized `creatorName`, which is set only on direct uploads
+* and never carries an email.
+*/
+user: t.optional(fileCreatorSummarySchema) }, {
 	title: "FileResource",
 	description: "A file resource representing a file stored in the system."
 });

package/dist/api/files/index.browser.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.browser.js","names":[],"sources":["../../../src/api/files/entities/files.ts","../../../src/api/files/schemas/fileQuerySchema.ts","../../../src/api/files/schemas/fileResourceSchema.ts","../../../src/api/files/schemas/storageStatsSchema.ts","../../../src/api/files/index.browser.ts"],"sourcesContent":["import { type Static, t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\n\nexport const files = $entity({\n  name: \"files\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    organizationId: db.organization(),\n    blobId: t.text(),\n    creator: t.optional(t.uuid()),\n    creatorRealm: t.optional(t.string()),\n    creatorName: t.optional(t.string()),\n    bucket: t.text(),\n    expirationDate: t.optional(t.datetime()),\n    /**\n     * Display name. Mutable via `FileService.updateFile` — can be renamed\n     * by callers (e.g. an Archive UI letting users rename uploaded blobs).\n     * Initialized to the uploader's filename at upload time. Use\n     * `originalName` if you need the as-uploaded filename after a rename.\n     */\n    name: t.text(),\n    /**\n     * Immutable record of the uploader's filename at upload time. Set once\n     * by `FileService.uploadFile` and the `bucket:file:uploaded` hook;\n     * `FileService.updateFile` never touches it. Useful for download\n     * headers (Content-Disposition), audit trails, and any UI that wants\n     * to show \"originally uploaded as X\" alongside a renamed file.\n     */\n    originalName: t.optional(t.string()),\n    size: t.number(),\n    mimeType: t.string(),\n    /**\n     * Free-form taxonomy. Normalized server-side (trim/lowercase/dedupe is\n     * caller's responsibility for now). Use with `FileQuery.tags` to\n     * filter via array-contains.\n     */\n    tags: t.optional(t.array(t.text())),\n    /**\n     * SHA-256 hex digest of the file content (64 lowercase hex chars).\n     * Computed at upload time by `FileService.calculateChecksum`. Stable\n     * — never recomputed after upload. Use for integrity verification,\n     * content-based dedup, or downstream virus-scan correlation.\n     */\n    checksum: t.optional(t.string()),\n  }),\n  indexes: [\n    \"expirationDate\",\n    \"bucket\",\n    \"creator\",\n    \"createdAt\",\n    \"mimeType\",\n    {\n      columns: [\"bucket\", \"createdAt\"],\n    },\n  ],\n});\n\nexport type FileEntity = Static<typeof files.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { pageQuerySchema } from \"alepha/orm\";\n\nexport const fileQuerySchema = t.extend(pageQuerySchema, {\n  bucket: t.optional(t.string()),\n  tags: t.optional(t.array(t.string())),\n  name: t.optional(t.string()),\n  mimeType: t.optional(t.string()),\n  creator: t.optional(t.uuid()),\n  createdAfter: t.optional(t.datetime()),\n  createdBefore: t.optional(t.datetime()),\n});\n\nexport type FileQuery = Static<typeof fileQuerySchema>;\n","import { type Static, t } from \"alepha\";\nimport { files } from \"../entities/files.ts\";\n\nexport const fileResourceSchema = t.extend(\n  files.schema,\n  {},\n  {\n    title: \"FileResource\",\n    description: \"A file resource representing a file stored in the system.\",\n  },\n);\n\nexport type FileResource = Static<typeof fileResourceSchema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const bucketStatsSchema = t.object({\n  bucket: t.string(),\n  totalSize: t.number(),\n  fileCount: t.number(),\n});\n\nexport const mimeTypeStatsSchema = t.object({\n  mimeType: t.string(),\n  fileCount: t.number(),\n});\n\nexport const storageStatsSchema = t.object({\n  totalSize: t.number(),\n  totalFiles: t.number(),\n  byBucket: t.array(bucketStatsSchema),\n  byMimeType: t.array(mimeTypeStatsSchema),\n});\n\nexport type BucketStats = Static<typeof bucketStatsSchema>;\nexport type MimeTypeStats = Static<typeof mimeTypeStatsSchema>;\nexport type StorageStats = Static<typeof storageStatsSchema>;\n","import { $module } from \"alepha\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport type * from \"./controllers/AdminFileStatsController.ts\";\nexport type * from \"./controllers/FileController.ts\";\nexport * from \"./entities/files.ts\";\nexport * from \"./schemas/fileQuerySchema.ts\";\nexport * from \"./schemas/fileResourceSchema.ts\";\nexport * from \"./schemas/storageStatsSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport const AlephaApiFiles = $module({\n  name: \"alepha.api.files\",\n  services: [],\n});\n"],"mappings":";;;AAGA,MAAa,QAAQ,QAAQ;CAC3B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,MAAM,CAAC;EAC3B,SAAS,GAAG,SAAS;EACrB,WAAW,GAAG,WAAW;EACzB,WAAW,GAAG,WAAW;EACzB,gBAAgB,GAAG,cAAc;EACjC,QAAQ,EAAE,MAAM;EAChB,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC;EAC7B,cAAc,EAAE,SAAS,EAAE,QAAQ,CAAC;EACpC,aAAa,EAAE,SAAS,EAAE,QAAQ,CAAC;EACnC,QAAQ,EAAE,MAAM;EAChB,gBAAgB,EAAE,SAAS,EAAE,UAAU,CAAC;;;;;;;EAOxC,MAAM,EAAE,MAAM;;;;;;;;EAQd,cAAc,EAAE,SAAS,EAAE,QAAQ,CAAC;EACpC,MAAM,EAAE,QAAQ;EAChB,UAAU,EAAE,QAAQ;;;;;;EAMpB,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;;;;;;;EAOnC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;EACjC,CAAC;CACF,SAAS;EACP;EACA;EACA;EACA;EACA;EACA,EACE,SAAS,CAAC,UAAU,YAAY,EACjC;EACF;CACF,CAAC;;;ACtDF,MAAa,kBAAkB,EAAE,OAAO,iBAAiB;CACvD,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC9B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;CACrC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;CAC5B,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;CAChC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC;CAC7B,cAAc,EAAE,SAAS,EAAE,UAAU,CAAC;CACtC,eAAe,EAAE,SAAS,EAAE,UAAU,CAAC;CACxC,CAAC;;;ACTF,MAAa,qBAAqB,EAAE,OAClC,MAAM,QACN,EAAE,EACF;CACE,OAAO;CACP,aAAa;CACd,CACF;;;ACPD,MAAa,oBAAoB,EAAE,OAAO;CACxC,QAAQ,EAAE,QAAQ;CAClB,WAAW,EAAE,QAAQ;CACrB,WAAW,EAAE,QAAQ;CACtB,CAAC;AAEF,MAAa,sBAAsB,EAAE,OAAO;CAC1C,UAAU,EAAE,QAAQ;CACpB,WAAW,EAAE,QAAQ;CACtB,CAAC;AAEF,MAAa,qBAAqB,EAAE,OAAO;CACzC,WAAW,EAAE,QAAQ;CACrB,YAAY,EAAE,QAAQ;CACtB,UAAU,EAAE,MAAM,kBAAkB;CACpC,YAAY,EAAE,MAAM,oBAAoB;CACzC,CAAC;;;ACNF,MAAa,iBAAiB,QAAQ;CACpC,MAAM;CACN,UAAU,EAAE;CACb,CAAC"}
+{"version":3,"file":"index.browser.js","names":[],"sources":["../../../src/api/files/entities/files.ts","../../../src/api/files/schemas/fileQuerySchema.ts","../../../src/api/files/schemas/fileCreatorSummarySchema.ts","../../../src/api/files/schemas/fileResourceSchema.ts","../../../src/api/files/schemas/storageStatsSchema.ts","../../../src/api/files/index.browser.ts"],"sourcesContent":["import { type Static, t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\n\nexport const files = $entity({\n  name: \"files\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    organizationId: db.organization(),\n    blobId: t.text(),\n    creator: t.optional(t.uuid()),\n    creatorRealm: t.optional(t.string()),\n    creatorName: t.optional(t.string()),\n    bucket: t.text(),\n    expirationDate: t.optional(t.datetime()),\n    /**\n     * Display name. Mutable via `FileService.updateFile` — can be renamed\n     * by callers (e.g. an Archive UI letting users rename uploaded blobs).\n     * Initialized to the uploader's filename at upload time. Use\n     * `originalName` if you need the as-uploaded filename after a rename.\n     */\n    name: t.text(),\n    /**\n     * Immutable record of the uploader's filename at upload time. Set once\n     * by `FileService.uploadFile` and the `bucket:file:uploaded` hook;\n     * `FileService.updateFile` never touches it. Useful for download\n     * headers (Content-Disposition), audit trails, and any UI that wants\n     * to show \"originally uploaded as X\" alongside a renamed file.\n     */\n    originalName: t.optional(t.string()),\n    size: t.number(),\n    mimeType: t.string(),\n    /**\n     * Free-form taxonomy. Normalized server-side (trim/lowercase/dedupe is\n     * caller's responsibility for now). Use with `FileQuery.tags` to\n     * filter via array-contains.\n     */\n    tags: t.optional(t.array(t.text())),\n    /**\n     * SHA-256 hex digest of the file content (64 lowercase hex chars).\n     * Computed at upload time by `FileService.calculateChecksum`. Stable\n     * — never recomputed after upload. Use for integrity verification,\n     * content-based dedup, or downstream virus-scan correlation.\n     */\n    checksum: t.optional(t.string()),\n  }),\n  indexes: [\n    \"expirationDate\",\n    \"bucket\",\n    \"creator\",\n    \"createdAt\",\n    \"mimeType\",\n    {\n      columns: [\"bucket\", \"createdAt\"],\n    },\n  ],\n});\n\nexport type FileEntity = Static<typeof files.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { pageQuerySchema } from \"alepha/orm\";\n\nexport const fileQuerySchema = t.extend(pageQuerySchema, {\n  bucket: t.optional(t.string()),\n  tags: t.optional(t.array(t.string())),\n  name: t.optional(t.string()),\n  mimeType: t.optional(t.string()),\n  creator: t.optional(t.uuid()),\n  createdAfter: t.optional(t.datetime()),\n  createdBefore: t.optional(t.datetime()),\n});\n\nexport type FileQuery = Static<typeof fileQuerySchema>;\n","import { type Static, t } from \"alepha\";\n\n/**\n * Slim view of a file's uploader, embedded by the admin listing via a\n * best-effort left join (`files.creator` → `users.id`) so the UI can render\n * a human-readable identifier instead of a bare UUID.\n *\n * Optional end-to-end: the join only runs when the `users` entity is\n * registered in the running app (see `FileService.findFiles`), and even then\n * a file whose creator was deleted — or who lives in a non-default realm —\n * comes back with `user` undefined. Callers must fall back to `creatorName`\n * or the raw `creator` id.\n */\nexport const fileCreatorSummarySchema = t.object({\n  id: t.uuid(),\n  email: t.optional(t.string({ format: \"email\" })),\n  username: t.optional(t.shortText({ minLength: 3, maxLength: 30 })),\n  firstName: t.optional(t.string()),\n  lastName: t.optional(t.string()),\n});\n\nexport type FileCreatorSummary = Static<typeof fileCreatorSummarySchema>;\n","import { type Static, t } from \"alepha\";\nimport { files } from \"../entities/files.ts\";\nimport { fileCreatorSummarySchema } from \"./fileCreatorSummarySchema.ts\";\n\nexport const fileResourceSchema = t.extend(\n  files.schema,\n  {\n    /**\n     * Uploader summary, embedded by the admin listing via a best-effort\n     * left join. Optional — see `fileCreatorSummarySchema`. Distinct from\n     * the denormalized `creatorName`, which is set only on direct uploads\n     * and never carries an email.\n     */\n    user: t.optional(fileCreatorSummarySchema),\n  },\n  {\n    title: \"FileResource\",\n    description: \"A file resource representing a file stored in the system.\",\n  },\n);\n\nexport type FileResource = Static<typeof fileResourceSchema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const bucketStatsSchema = t.object({\n  bucket: t.string(),\n  totalSize: t.number(),\n  fileCount: t.number(),\n});\n\nexport const mimeTypeStatsSchema = t.object({\n  mimeType: t.string(),\n  fileCount: t.number(),\n});\n\nexport const storageStatsSchema = t.object({\n  totalSize: t.number(),\n  totalFiles: t.number(),\n  byBucket: t.array(bucketStatsSchema),\n  byMimeType: t.array(mimeTypeStatsSchema),\n});\n\nexport type BucketStats = Static<typeof bucketStatsSchema>;\nexport type MimeTypeStats = Static<typeof mimeTypeStatsSchema>;\nexport type StorageStats = Static<typeof storageStatsSchema>;\n","import { $module } from \"alepha\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport type * from \"./controllers/AdminFileStatsController.ts\";\nexport type * from \"./controllers/FileController.ts\";\nexport * from \"./entities/files.ts\";\nexport * from \"./schemas/fileQuerySchema.ts\";\nexport * from \"./schemas/fileResourceSchema.ts\";\nexport * from \"./schemas/storageStatsSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport const AlephaApiFiles = $module({\n  name: \"alepha.api.files\",\n  services: [],\n});\n"],"mappings":";;;AAGA,MAAa,QAAQ,QAAQ;CAC3B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,KAAK,CAAC;EAC1B,SAAS,GAAG,QAAQ;EACpB,WAAW,GAAG,UAAU;EACxB,WAAW,GAAG,UAAU;EACxB,gBAAgB,GAAG,aAAa;EAChC,QAAQ,EAAE,KAAK;EACf,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC;EAC5B,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC;EACnC,aAAa,EAAE,SAAS,EAAE,OAAO,CAAC;EAClC,QAAQ,EAAE,KAAK;EACf,gBAAgB,EAAE,SAAS,EAAE,SAAS,CAAC;;;;;;;EAOvC,MAAM,EAAE,KAAK;;;;;;;;EAQb,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC;EACnC,MAAM,EAAE,OAAO;EACf,UAAU,EAAE,OAAO;;;;;;EAMnB,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;;;;;;;EAOlC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC;CACjC,CAAC;CACD,SAAS;EACP;EACA;EACA;EACA;EACA;EACA,EACE,SAAS,CAAC,UAAU,WAAW,EACjC;CACF;AACF,CAAC;;;ACtDD,MAAa,kBAAkB,EAAE,OAAO,iBAAiB;CACvD,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC;CAC7B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC;CAC3B,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC;CAC/B,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC;CAC5B,cAAc,EAAE,SAAS,EAAE,SAAS,CAAC;CACrC,eAAe,EAAE,SAAS,EAAE,SAAS,CAAC;AACxC,CAAC;;;;;;;;;;;;;;ACCD,MAAa,2BAA2B,EAAE,OAAO;CAC/C,IAAI,EAAE,KAAK;CACX,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,QAAQ,CAAC,CAAC;CAC/C,UAAU,EAAE,SAAS,EAAE,UAAU;EAAE,WAAW;EAAG,WAAW;CAAG,CAAC,CAAC;CACjE,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC;CAChC,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC;AACjC,CAAC;;;ACfD,MAAa,qBAAqB,EAAE,OAClC,MAAM,QACN;;;;;;;AAOE,MAAM,EAAE,SAAS,wBAAwB,EAC3C,GACA;CACE,OAAO;CACP,aAAa;AACf,CACF;;;AChBA,MAAa,oBAAoB,EAAE,OAAO;CACxC,QAAQ,EAAE,OAAO;CACjB,WAAW,EAAE,OAAO;CACpB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAa,sBAAsB,EAAE,OAAO;CAC1C,UAAU,EAAE,OAAO;CACnB,WAAW,EAAE,OAAO;AACtB,CAAC;AAED,MAAa,qBAAqB,EAAE,OAAO;CACzC,WAAW,EAAE,OAAO;CACpB,YAAY,EAAE,OAAO;CACrB,UAAU,EAAE,MAAM,iBAAiB;CACnC,YAAY,EAAE,MAAM,mBAAmB;AACzC,CAAC;;;ACND,MAAa,iBAAiB,QAAQ;CACpC,MAAM;CACN,UAAU,CAAC;AACb,CAAC"}