betterstart-cli 0.0.12 → 0.0.13

package/dist/assets/adapters/next/plugins/blog/plugin.ts

@@ -8,7 +8,7 @@ export const blogPlugin: BetterstartPluginDefinition = {
   version: '1.0.0',
   dependencies: [],
   conflicts: [],
-  schemaFiles: ['posts.json'],
+  schemaFiles: ['posts.json', 'menus.json'],
   files: [],
   packageDependencies: ['katex', 'markdown-it@^13.0.2', 'markdown-it-dollarmath', 'sanitize-html'],
   devDependencies: ['@types/markdown-it@13', '@types/sanitize-html'],

package/dist/assets/adapters/next/plugins/blog/schemas/menus.json

@@ -0,0 +1,115 @@
+{
+  "name": "menus",
+  "label": "Menus",
+  "description": "Manage Menus",
+  "icon": "Menu",
+  "navGroup": {
+    "label": "Collections",
+    "position": 0
+  },
+  "navPosition": 1,
+  "slot": {
+    "main": {
+      "fields": [
+        {
+          "name": "title",
+          "type": "string",
+          "label": "Title",
+          "required": true
+        },
+        {
+          "name": "slug",
+          "type": "string",
+          "label": "Slug",
+          "hint": "URL-friendly identifier (auto-generated from title)"
+        },
+        {
+          "name": "items",
+          "type": "list",
+          "label": "Items",
+          "hint": "Items in the navigation menu",
+          "fields": [
+            {
+              "name": "label",
+              "type": "string",
+              "label": "Label",
+              "required": true
+            },
+            {
+              "name": "href",
+              "type": "string",
+              "label": "Href",
+              "required": true
+            },
+            {
+              "name": "openInNewTab",
+              "type": "boolean",
+              "label": "Open in New Tab",
+              "hint": "Open this link in a new browser tab",
+              "default": false
+            }
+          ]
+        }
+      ]
+    },
+    "sidebar": {
+      "fields": [
+        {
+          "name": "generalSidebar",
+          "type": "section",
+          "heading": {
+            "icon": "bolt",
+            "title": "General"
+          },
+          "fields": [
+            {
+              "name": "description",
+              "type": "text",
+              "label": "Description",
+              "hint": "Internal note describing this menu's purpose"
+            }
+          ]
+        }
+      ]
+    }
+  },
+  "columns": [
+    {
+      "accessorKey": "title",
+      "header": "Title",
+      "type": "text",
+      "sortable": true,
+      "size": "xl"
+    },
+    {
+      "accessorKey": "published",
+      "header": "Status",
+      "type": "boolean",
+      "sortable": true,
+      "size": "sm"
+    },
+    {
+      "accessorKey": "updatedAt",
+      "header": "Updated",
+      "type": "date",
+      "sortable": true,
+      "size": "sm"
+    },
+    {
+      "accessorKey": "createdAt",
+      "header": "Created",
+      "type": "date",
+      "sortable": true,
+      "size": "sm"
+    }
+  ],
+  "actions": {
+    "create": true,
+    "edit": true,
+    "delete": true,
+    "draft": true
+  },
+  "search": {
+    "fields": ["title"]
+  }
+}

package/dist/assets/adapters/next/plugins/blog/schemas/posts.json

@@ -1,10 +1,10 @@
 {
   "name": "posts",
   "label": "Posts",
-  "description": "Manage blog posts and articles",
+  "description": "Manage blog posts",
   "icon": "FileText",
   "navGroup": {
-    "label": "Blog",
+    "label": "Collections",
     "position": 0
   },
   "navPosition": 0,
@@ -160,10 +160,5 @@
   },
   "search": {
     "fields": ["title", "excerpt"]
-  },
-  "autoSlugify": {
-    "enabled": true,
-    "sourceField": "title",
-    "targetField": "slug"
   }
 }

package/dist/assets/adapters/next/templates/init/components/layouts/admin-sidebar.tsx

@@ -35,7 +35,7 @@ export function AdminSidebar(props: ComponentProps<typeof Sidebar>) {
           <Fragment key={group.label ?? '_ungrouped'}>
             <SidebarGroup className="py-0">
               {group.label && <SidebarGroupLabel>{group.label}</SidebarGroupLabel>}
-              <SidebarMenu className="gap-px">
+              <SidebarMenu className="gap-0.5">
                 {group.items.map((item) => (
                   <SidebarMenuItem key={item.href}>
                     <SidebarNavLink href={item.href}>
@@ -51,7 +51,7 @@ export function AdminSidebar(props: ComponentProps<typeof Sidebar>) {
 
         <SidebarGroup className="mt-auto gap-2 px-0">
           <Separator />
-          <SidebarMenu className="px-2 gap-px">
+          <SidebarMenu className="px-2 gap-0.5">
             <SidebarMenuItem>
               <SidebarNavLink href="/admin/users">
                 <Users strokeWidth={2} />

package/dist/assets/adapters/next/templates/init/components/shared/dev-mode/lifecycle-hooks-tab.tsx

@@ -53,14 +53,14 @@ export function LifecycleHooksTab({ lifecycleHooks }: LifecycleHooksTabProps) {
 
   if (!firstHook) {
     return (
-      <div className="flex min-h-80 items-center justify-center rounded-lg border border-dashed border-border px-6 text-center text-sm text-muted-foreground">
+      <div className="flex min-h-80 items-center justify-center rounded-xl border border-dashed border-border px-6 text-center text-sm text-muted-foreground">
         Lifecycle hook examples are generated for entity schemas in v1.
       </div>
     )
   }
 
   return (
-    <Accordion type="single" defaultValue={firstHook.id} className="min-h-0 shrink-0 rounded-lg">
+    <Accordion type="single" defaultValue={firstHook.id} className="min-h-0 shrink-0 rounded-xl">
       {lifecycleHooks.map((hook) => {
         const HookIcon = LIFECYCLE_HOOK_ICONS[hook.icon]
         const phaseLabel = LIFECYCLE_HOOK_PHASE_LABELS[hook.phase]

package/dist/assets/adapters/next/templates/init/components/shared/dev-mode/snippets-tab.tsx

@@ -56,7 +56,7 @@ export function SnippetsTab({ snippets }: SnippetsTabProps) {
   }
 
   return (
-    <Accordion type="single" defaultValue={firstSnippet.id} className="min-h-0 shrink-0 rounded-lg">
+    <Accordion type="single" defaultValue={firstSnippet.id} className="min-h-0 shrink-0 rounded-xl">
       {snippets.map((snippet) => {
         const SnippetIcon = SNIPPET_ICONS[snippet.icon]
         const snippetKindLabel = SNIPPET_KIND_LABELS[snippet.kind]

package/dist/assets/adapters/next/templates/init/components/shared/dev-mode-integrate.tsx

@@ -50,7 +50,7 @@ export function DevModeIntegrateButton({
       <DrawerTrigger asChild>
         <Button type="button" variant="outline">
           <Code2 data-icon="inline-start" />
-          <span className="hidden sm:inline">Integration Snippets</span>
+          <span className="hidden sm:inline">Dev Mode</span>
         </Button>
       </DrawerTrigger>
       <DrawerContent className="w-full overflow-hidden data-[vaul-drawer-direction=right]:sm:max-w-2xl data-[vaul-drawer-direction=right]:lg:max-w-4xl">

package/dist/assets/adapters/next/templates/init/components/shared/entity-versions/entity-versions-drawer.tsx

@@ -44,7 +44,7 @@ export function EntityVersionsDrawer({
   return (
     <Drawer direction="right" open={open} onOpenChange={onOpenChange} modal>
       <DrawerContent className="h-full sm:max-w-lg">
-        <DrawerHeader className="border-b border-border">
+        <DrawerHeader>
           <DrawerTitle>Versions</DrawerTitle>
           <DrawerDescription>
             Review previous {entityType} versions and restore a saved state.

package/dist/assets/adapters/next/templates/init/components/shared/media/edit-media-dialog-content.tsx

@@ -93,7 +93,7 @@ export function EditMediaDialogContent({
     <DrawerContent className="h-full w-full overflow-hidden">
       <div
         ref={handleDrawerContainerRef}
-        className="pointer-events-none absolute inset-3 z-20 overflow-hidden rounded-lg"
+        className="pointer-events-none absolute inset-3 z-20 overflow-hidden rounded-xl"
       />
       <div className="relative z-10 flex min-h-0 flex-1 flex-col overflow-hidden">
         <DrawerHeader>
@@ -107,7 +107,7 @@ export function EditMediaDialogContent({
           >
             <Card>
               <CardContent className="p-0">
-                <div className="relative aspect-video overflow-hidden rounded-lg bg-background">
+                <div className="relative aspect-video overflow-hidden rounded-xl bg-background">
                   <MediaPreview media={media} showMetadata />
                 </div>
               </CardContent>

package/dist/assets/adapters/next/templates/init/components/shared/media/media-url-importer.tsx

@@ -90,7 +90,7 @@ export function MediaUrlImporter({ onImportFromUrl, accept, className }: MediaUr
   return (
     <div
       className={cn(
-        'flex items-center justify-center transition-colors rounded-lg border bg-input border-border overflow-hidden h-full flex-col p-5 gap-5',
+        'flex items-center justify-center transition-colors rounded-xl border bg-input border-border overflow-hidden h-full flex-col p-5 gap-5',
         className
       )}
     >

package/dist/assets/adapters/next/templates/init/components/shared/page-header.tsx

@@ -22,22 +22,25 @@ export function PageHeader({
   const router = useRouter()
 
   return (
-    <header className="sticky top-0 border-t right-0 left-(--admin-shell-content-left) z-20 grid h-14 grid-cols-[minmax(0,1fr)_auto_minmax(0,1fr)] items-center border-b border-border/80 px-4 bg-sidebar transition-[left] duration-200 ease-linear">
-      <div className="flex w-full items-center justify-start gap-2">
-        {hasBackButton && (
-          <Button variant="ghost" size="icon" onClick={() => router.back()}>
-            <ChevronLeft className="size-4" />
-          </Button>
-        )}
-      </div>
-      <div className="flex min-w-0 items-center justify-center gap-2">
-        <h2 className="truncate text-sm font-medium tracking-tight">{title}</h2>
-      </div>
-      <div className="flex w-full min-w-0 items-center justify-end gap-2">
-        {children && children}
-        {search && search}
-        {actions && actions}
-      </div>
-    </header>
+    <>
+      <header className="fixed top-0 border-t right-0 left-(--admin-shell-content-left) z-20 grid h-14 grid-cols-[minmax(0,1fr)_auto_minmax(0,1fr)] items-center border-b border-border/80 px-4 bg-sidebar transition-[left] duration-200 ease-linear">
+        <div className="flex w-full items-center justify-start gap-2">
+          {hasBackButton && (
+            <Button variant="ghost" size="icon" onClick={() => router.back()}>
+              <ChevronLeft className="size-4" />
+            </Button>
+          )}
+        </div>
+        <div className="flex min-w-0 items-center justify-center gap-2">
+          <h2 className="truncate text-sm font-medium tracking-tight">{title}</h2>
+        </div>
+        <div className="flex w-full min-w-0 items-center justify-end gap-2">
+          {children && children}
+          {search && search}
+          {actions && actions}
+        </div>
+      </header>
+      <div className="h-14 shrink-0" aria-hidden="true" />
+    </>
   )
 }

package/dist/assets/adapters/next/templates/init/data/navigation.ts

@@ -1,5 +1,6 @@
 import type { AdminNavigationItem } from '@admin/types/navigation'
 import { House, ImagePlay } from 'lucide-react'
+import { menusNav } from './navigation/menus'
 import { postsNav } from './navigation/posts'
 
 export type { AdminNavigationItem } from '@admin/types/navigation'
@@ -26,7 +27,7 @@ function comparePositions(a?: number, b?: number): number {
   return 0
 }
 
-const combinedNavigation = [...coreNav, ...postsNav]
+const combinedNavigation = [...coreNav, ...menusNav, ...postsNav]
 
 const dashboard = combinedNavigation.find((item) => item.href === '/admin')
 const others = combinedNavigation.filter((item) => item.href !== '/admin')

package/dist/assets/adapters/next/templates/init/hooks/content-editor/use-content-editor-slash-menu.ts

@@ -15,12 +15,13 @@ import * as React from 'react'
 
 export function useContentEditorSlashMenu(editorRef: React.RefObject<Editor | null>) {
   const [slashMenu, setSlashMenu] = React.useState<SlashMenuState | null>(null)
+  const [slashSearchQuery, setSlashSearchQuery] = React.useState('')
   const [activeSlashIndexState, setActiveSlashIndexState] = React.useState(0)
   const slashMenuRef = React.useRef<SlashMenuState | null>(null)
   const activeSlashIndexRef = React.useRef(0)
   const filteredSlashCommands = React.useMemo(
-    () => getFilteredSlashCommands(slashMenu?.query ?? ''),
-    [slashMenu]
+    () => getFilteredSlashCommands(slashSearchQuery),
+    [slashSearchQuery]
   )
   const filteredSlashCommandsRef = React.useRef(filteredSlashCommands)
   const activeSlashIndex =
@@ -37,6 +38,23 @@ export function useContentEditorSlashMenu(editorRef: React.RefObject<Editor | nu
       isSameSlashMenuState(current, nextSlashMenu) ? current : nextSlashMenu
     )
 
+    setSlashSearchQuery((current) => {
+      const currentSlashMenu = slashMenuRef.current
+
+      if (!nextSlashMenu) return ''
+
+      if (
+        currentSlashMenu &&
+        currentSlashMenu.from === nextSlashMenu.from &&
+        currentSlashMenu.to === nextSlashMenu.to &&
+        currentSlashMenu.query === nextSlashMenu.query
+      ) {
+        return current
+      }
+
+      return nextSlashMenu.query
+    })
+
     setActiveSlashIndexState((current) =>
       slashMenuRef.current?.query === nextSlashMenu?.query && nextSlashMenu ? current : 0
     )
@@ -44,6 +62,12 @@ export function useContentEditorSlashMenu(editorRef: React.RefObject<Editor | nu
 
   const closeSlashMenu = React.useCallback(() => {
     setSlashMenu(null)
+    setSlashSearchQuery('')
+    setActiveSlashIndexState(0)
+  }, [])
+
+  const setSlashSearch = React.useCallback((query: string) => {
+    setSlashSearchQuery(query)
     setActiveSlashIndexState(0)
   }, [])
 
@@ -110,7 +134,9 @@ export function useContentEditorSlashMenu(editorRef: React.RefObject<Editor | nu
     handleSlashKeyDown,
     selectSlashCommand,
     setActiveSlashIndex: setActiveSlashIndexState,
+    setSlashSearch,
     slashMenu,
+    slashSearchQuery,
     updateSlashMenu
   }
 }

package/dist/assets/adapters/next/templates/init/hooks/content-editor/use-content-editor.ts

@@ -66,6 +66,7 @@ export function useContentEditor({
   const isInternalChange = React.useRef(false)
   const isSyncingRichContent = React.useRef(false)
   const editorRef = React.useRef<Editor | null>(null)
+  const isSlashMenuOpenRef = React.useRef(false)
   const {
     activeSlashIndex,
     closeSlashMenu,
@@ -73,10 +74,14 @@ export function useContentEditor({
     handleSlashKeyDown,
     selectSlashCommand,
     setActiveSlashIndex,
+    setSlashSearch,
     slashMenu,
+    slashSearchQuery,
     updateSlashMenu
   } = useContentEditorSlashMenu(editorRef)
 
+  isSlashMenuOpenRef.current = slashMenu !== null
+
   if (value !== lastValuePropRef.current) {
     lastValuePropRef.current = value
     latestMarkdownRef.current = value
@@ -158,7 +163,20 @@ export function useContentEditor({
       updateSlashMenu(nextEditor)
     },
     onSelectionUpdate: ({ editor: nextEditor }) => updateSlashMenu(nextEditor),
-    onBlur: closeSlashMenu
+    onBlur: ({ event }) => {
+      const nextFocusTarget = event.relatedTarget
+
+      if (isSlashMenuOpenRef.current && !nextFocusTarget) return
+
+      if (
+        nextFocusTarget instanceof Element &&
+        nextFocusTarget.closest('[data-content-editor-slash-menu]')
+      ) {
+        return
+      }
+
+      closeSlashMenu()
+    }
   })
 
   editorRef.current = editor
@@ -278,9 +296,12 @@ export function useContentEditor({
     handleSourceChange,
     handleSourceSelectionChange,
     mode,
+    closeSlashMenu,
     selectSlashCommand,
     setActiveSlashIndex,
+    setSlashSearch,
     slashMenu,
+    slashSearchQuery,
     sourceValue: latestMarkdownRef.current,
     sourceSelectionRequest,
     syncRichContent

package/dist/assets/adapters/next/templates/init/hooks/use-audit-log.ts

@@ -0,0 +1,23 @@
+'use client'
+
+import type { AuditLogPage, AuditLogQuery, CleanupAuditLogsResult } from '@admin/actions/audit'
+import { cleanupAuditLogs, getAuditLogs } from '@admin/actions/audit'
+import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query'
+
+export function useAuditLogs(query: AuditLogQuery) {
+  return useQuery<AuditLogPage>({
+    queryKey: ['audit-log', query],
+    queryFn: () => getAuditLogs(query)
+  })
+}
+
+export function useCleanupAuditLogs() {
+  const queryClient = useQueryClient()
+
+  return useMutation<CleanupAuditLogsResult>({
+    mutationFn: () => cleanupAuditLogs(),
+    onSuccess: () => {
+      void queryClient.invalidateQueries({ queryKey: ['audit-log'] })
+    }
+  })
+}

package/dist/assets/adapters/next/templates/init/lib/actions/audit/cleanup-audit-logs.ts

@@ -0,0 +1,63 @@
+'use server'
+
+import { getSetting } from '@admin/actions/settings'
+import { requireRole, UserRole } from '@admin/auth/middleware'
+import db from '@admin/db'
+import { auditLog } from '@admin/db/schema'
+import { runAdminEventHooks } from '@admin/lib/lifecycle-hooks'
+import { lt } from 'drizzle-orm'
+import { getAuditRequestMetadata } from './request-metadata'
+import type { CleanupAuditLogsResult } from './types'
+
+const MS_PER_DAY = 24 * 60 * 60 * 1000
+
+function getRetentionDays(value: unknown): number | null {
+  if (typeof value !== 'number' || !Number.isFinite(value)) return null
+  const days = Math.floor(value)
+  return days > 0 ? days : null
+}
+
+export async function cleanupAuditLogs(): Promise<CleanupAuditLogsResult> {
+  const actor = await requireRole([UserRole.ADMIN])
+
+  try {
+    const settings = await getSetting()
+    const retentionEnabled = settings?.auditRetentionEnabled === true
+    const retentionDays = getRetentionDays(settings?.auditRetentionDays)
+
+    if (!retentionEnabled || !retentionDays) {
+      return { success: true, deletedCount: 0, skipped: true }
+    }
+
+    const cutoff = new Date(Date.now() - retentionDays * MS_PER_DAY).toISOString()
+    const deletedRows = await db
+      .delete(auditLog)
+      .where(lt(auditLog.createdAt, cutoff))
+      .returning({ id: auditLog.id })
+
+    const requestMetadata = await getAuditRequestMetadata()
+    await runAdminEventHooks({
+      category: 'system',
+      action: 'cleanup',
+      targetType: 'audit-log',
+      targetLabel: 'Audit log retention cleanup',
+      user: actor,
+      timestamp: new Date().toISOString(),
+      sourceType: 'system_job',
+      changedFields: [],
+      metadata: {
+        cutoff,
+        deletedCount: deletedRows.length,
+        retentionDays
+      },
+      ...requestMetadata
+    })
+
+    return { success: true, deletedCount: deletedRows.length, cutoff }
+  } catch (error) {
+    return {
+      success: false,
+      error: error instanceof Error ? error.message : 'Failed to clean up audit logs'
+    }
+  }
+}

package/dist/assets/adapters/next/templates/init/lib/actions/audit/get-audit-logs.ts

@@ -0,0 +1,97 @@
+'use server'
+
+import { requireRole, UserRole } from '@admin/auth/middleware'
+import db from '@admin/db'
+import { auditLog } from '@admin/db/schema'
+import { and, desc, eq, gte, ilike, lt, or, sql } from 'drizzle-orm'
+import type { AuditLogEntry, AuditLogPage, AuditLogQuery } from './types'
+
+const DEFAULT_AUDIT_LOG_PAGE = 1
+const DEFAULT_AUDIT_LOG_PAGE_SIZE = 25
+const MAX_AUDIT_LOG_PAGE_SIZE = 100
+
+function clampPage(value: number | undefined): number {
+  if (typeof value !== 'number' || !Number.isFinite(value)) return DEFAULT_AUDIT_LOG_PAGE
+  return Math.max(DEFAULT_AUDIT_LOG_PAGE, Math.floor(value))
+}
+
+function clampPageSize(value: number | undefined): number {
+  if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0) {
+    return DEFAULT_AUDIT_LOG_PAGE_SIZE
+  }
+
+  return Math.min(MAX_AUDIT_LOG_PAGE_SIZE, Math.max(1, Math.floor(value)))
+}
+
+function getExclusiveDateUpperBound(value: string | undefined): string | null {
+  if (!value) return null
+  const date = new Date(value)
+  if (Number.isNaN(date.getTime())) return null
+
+  date.setUTCDate(date.getUTCDate() + 1)
+  return date.toISOString()
+}
+
+async function queryAuditLogs(query: AuditLogQuery = {}): Promise<AuditLogPage> {
+  const page = clampPage(query.page)
+  const pageSize = clampPageSize(query.pageSize)
+  const offset = (page - 1) * pageSize
+  const conditions = []
+
+  if (query.category) conditions.push(eq(auditLog.category, query.category))
+  if (query.action) conditions.push(eq(auditLog.action, query.action))
+  if (query.targetType) conditions.push(ilike(auditLog.targetType, `%${query.targetType}%`))
+  if (query.actor) {
+    const actorPattern = `%${query.actor}%`
+    conditions.push(
+      or(ilike(auditLog.actorEmail, actorPattern), ilike(auditLog.actorName, actorPattern))
+    )
+  }
+  if (query.createdAtFrom) {
+    conditions.push(gte(auditLog.createdAt, query.createdAtFrom))
+  }
+  const createdAtExclusiveTo = getExclusiveDateUpperBound(query.createdAtTo)
+  if (createdAtExclusiveTo) {
+    conditions.push(lt(auditLog.createdAt, createdAtExclusiveTo))
+  }
+  if (query.search) {
+    const searchPattern = `%${query.search}%`
+    conditions.push(
+      or(
+        ilike(auditLog.targetId, searchPattern),
+        ilike(auditLog.targetLabel, searchPattern),
+        ilike(auditLog.actorEmail, searchPattern),
+        ilike(auditLog.actorName, searchPattern),
+        ilike(auditLog.sourceType, searchPattern),
+        ilike(auditLog.ipAddress, searchPattern),
+        ilike(auditLog.userAgent, searchPattern)
+      )
+    )
+  }
+
+  const where = conditions.length > 0 ? and(...conditions) : undefined
+  const [rows, countResult] = await Promise.all([
+    db
+      .select()
+      .from(auditLog)
+      .where(where)
+      .orderBy(desc(auditLog.createdAt))
+      .limit(pageSize)
+      .offset(offset),
+    db.select({ count: sql<number>`count(*)` }).from(auditLog).where(where)
+  ])
+  const total = Number(countResult[0]?.count ?? 0)
+
+  return {
+    auditLogs: rows as AuditLogEntry[],
+    total,
+    page,
+    pageSize,
+    totalPages: Math.max(1, Math.ceil(total / pageSize))
+  }
+}
+
+export async function getAuditLogs(query: AuditLogQuery = {}): Promise<AuditLogPage> {
+  await requireRole([UserRole.ADMIN])
+  return queryAuditLogs(query)
+}

package/dist/assets/adapters/next/templates/init/lib/actions/audit/index.ts

@@ -0,0 +1,17 @@
+export { cleanupAuditLogs } from './cleanup-audit-logs'
+export { getAuditLogs } from './get-audit-logs'
+export type {
+  AuditLogAction,
+  AuditLogCategory,
+  AuditLogEntry,
+  AuditLogPage,
+  AuditLogQuery,
+  AuditLogSourceType,
+  CleanupAuditLogsResult
+} from './types'
+export {
+  AUDIT_LOG_ACTIONS,
+  AUDIT_LOG_CATEGORIES,
+  AUDIT_LOG_SOURCE_TYPES,
+  auditLogCacheTags
+} from './types'

package/dist/assets/adapters/next/templates/init/lib/actions/audit/record-audit-event.ts

@@ -0,0 +1,37 @@
+import db from '@admin/db'
+import { auditLog } from '@admin/db/schema'
+import type { AdminEventContext } from '@admin/lib/lifecycle-hooks/types'
+
+const MAX_TARGET_TYPE_LENGTH = 100
+const MAX_SOURCE_TYPE_LENGTH = 50
+const MAX_IP_LENGTH = 100
+const MAX_USER_AGENT_LENGTH = 500
+
+function truncate(value: string | null | undefined, maxLength: number): string | null {
+  if (!value) return null
+  return value.length > maxLength ? value.slice(0, maxLength) : value
+}
+
+function normalizeChangedFields(value: readonly string[] | undefined): string[] {
+  return [...new Set(value ?? [])].filter(Boolean).sort((a, b) => a.localeCompare(b))
+}
+
+export async function recordAuditEvent(event: AdminEventContext): Promise<void> {
+  await db.insert(auditLog).values({
+    category: event.category,
+    action: event.action,
+    targetType: truncate(event.targetType, MAX_TARGET_TYPE_LENGTH) ?? 'unknown',
+    targetId: event.targetId ?? null,
+    targetLabel: event.targetLabel ?? null,
+    actorUserId: event.user?.id ?? null,
+    actorEmail: event.user?.email ?? null,
+    actorName: event.user?.name ?? null,
+    actorRole: typeof event.user?.role === 'string' ? event.user.role : null,
+    sourceType: truncate(event.sourceType, MAX_SOURCE_TYPE_LENGTH) ?? 'server_action',
+    ipAddress: truncate(event.ipAddress, MAX_IP_LENGTH),
+    userAgent: truncate(event.userAgent, MAX_USER_AGENT_LENGTH),
+    changedFields: normalizeChangedFields(event.changedFields),
+    metadata: event.metadata ?? null,
+    createdAt: event.timestamp
+  })
+}