strapi-cms-audit-log 1.1.0 → 1.2.1

package/dist/admin/{App-ou5hy99f.mjs → App-jWvaMXIw.mjs}

@@ -1,11 +1,11 @@
 import { jsxs, jsx } from "react/jsx-runtime";
-import { useFetchClient, Page, Layouts, BackButton, useNotification, useQueryParams, useRBAC, SearchInput, Pagination, ConfirmDialog } from "@strapi/strapi/admin";
+import { useFetchClient, Page, Layouts, BackButton, useQueryParams, SearchInput, Pagination } from "@strapi/strapi/admin";
 import { useParams, useNavigate, Routes, Route } from "react-router-dom";
-import { g as getTranslation, P as PLUGIN_ID, a as PERMISSIONS } from "./index-DdmY-p3Q.mjs";
-import { Box, Flex, Typography, Button, Badge, Divider, Grid, Field, SingleSelect, SingleSelectOption, Combobox, ComboboxOption, TextInput, DatePicker, EmptyStateLayout, Table, Thead, Tr, Th, VisuallyHidden, Tbody, Td, IconButton, Dialog } from "@strapi/design-system";
+import { g as getTranslation, P as PLUGIN_ID, a as PERMISSIONS } from "./index-BIIMJgKU.mjs";
+import { Box, Flex, Typography, Button, Badge, Divider, Grid, Field, SingleSelect, SingleSelectOption, Combobox, ComboboxOption, TextInput, DatePicker, EmptyStateLayout, Table, Thead, Tr, Th, VisuallyHidden, Tbody, Td, IconButton } from "@strapi/design-system";
 import { useIntl } from "react-intl";
 import * as React from "react";
-import { CaretUp, CaretDown, Cross, Eye, Trash } from "@strapi/icons";
+import { CaretUp, CaretDown, Cross, Eye } from "@strapi/icons";
 const ACTION_COLORS = {
   create: { background: "success100", text: "success600" },
   update: { background: "primary100", text: "primary600" },
@@ -33,7 +33,9 @@ const ACTION_COLORS = {
   "media.delete": { background: "danger100", text: "danger600" },
   "media-folder.create": { background: "success100", text: "success600" },
   "media-folder.update": { background: "primary100", text: "primary600" },
-  "media-folder.delete": { background: "danger100", text: "danger600" }
+  "media-folder.delete": { background: "danger100", text: "danger600" },
+  // The log's own housekeeping. Neutral: expected, scheduled, and self-reported.
+  "retention.purge": { background: "neutral150", text: "neutral700" }
 };
 const actionColor = (action) => ACTION_COLORS[action] ?? { background: "neutral150", text: "neutral700" };
 const shortContentTypeName = (uid) => {
@@ -568,6 +570,30 @@ const useAuditFilterOptions = () => {
   }, [get]);
   return { options, isLoading };
 };
+const useAuditIntegrity = () => {
+  const { get } = useFetchClient();
+  const [data, setData] = React.useState(null);
+  const [isLoading, setIsLoading] = React.useState(true);
+  const [error, setError] = React.useState(null);
+  React.useEffect(() => {
+    let cancelled = false;
+    const load = async () => {
+      try {
+        const { data: response } = await get(`/${PLUGIN_ID}/integrity`);
+        if (!cancelled) setData(response.data);
+      } catch (err) {
+        if (!cancelled) setError(message(err));
+      } finally {
+        if (!cancelled) setIsLoading(false);
+      }
+    };
+    void load();
+    return () => {
+      cancelled = true;
+    };
+  }, [get]);
+  return { data, isLoading, error };
+};
 const useAuditLog = (id) => {
   const { get } = useFetchClient();
   const [data, setData] = React.useState(null);
@@ -602,15 +628,6 @@ const useAuditLog = (id) => {
   }, [get, id]);
   return { data, isLoading, error };
 };
-const useDeleteAuditLog = () => {
-  const { del } = useFetchClient();
-  return React.useCallback(
-    async (id) => {
-      await del(`/${PLUGIN_ID}/logs/${id}`);
-    },
-    [del]
-  );
-};
 const MetaField = ({ label, value, mono = false }) => /* @__PURE__ */ jsxs(Grid.Item, { col: 4, s: 6, xs: 12, direction: "column", alignItems: "flex-start", gap: 1, children: [
   /* @__PURE__ */ jsx(Typography, { variant: "sigma", textColor: "neutral600", children: label }),
   /* @__PURE__ */ jsx(
@@ -786,6 +803,25 @@ const AuditLogDetails = () => {
               value: log.userAgent,
               mono: true
             }
+          ),
+          /* @__PURE__ */ jsx(
+            MetaField,
+            {
+              label: formatMessage({ id: getTranslation("detail.hash"), defaultMessage: "Hash" }),
+              value: log.hash,
+              mono: true
+            }
+          ),
+          /* @__PURE__ */ jsx(
+            MetaField,
+            {
+              label: formatMessage({
+                id: getTranslation("detail.prevHash"),
+                defaultMessage: "Previous hash"
+              }),
+              value: log.prevHash,
+              mono: true
+            }
           )
         ] }) })
       ] }),
@@ -1009,7 +1045,6 @@ const AuditLogTable = ({
   sort,
   onSortChange,
   onView,
-  onDelete,
   isLoading
 }) => {
   const { formatMessage, locale } = useIntl();
@@ -1064,36 +1099,69 @@ const AuditLogTable = ({
         /* @__PURE__ */ jsx(Td, { children: /* @__PURE__ */ jsx(Typography, { textColor: "neutral800", children: log.locale ?? "-" }) }),
         /* @__PURE__ */ jsx(Td, { children: /* @__PURE__ */ jsx(Typography, { textColor: "neutral600", children: log.source }) }),
         /* @__PURE__ */ jsx(Td, { children: log.outcome === "failure" ? /* @__PURE__ */ jsx(Badge, { backgroundColor: "danger100", textColor: "danger600", children: log.outcome }) : /* @__PURE__ */ jsx(Typography, { textColor: "neutral600", children: log.outcome ?? "success" }) }),
-        /* @__PURE__ */ jsx(Td, { children: /* @__PURE__ */ jsxs(Flex, { gap: 1, justifyContent: "flex-end", onClick: (event) => event.stopPropagation(), children: [
-          /* @__PURE__ */ jsx(
-            IconButton,
-            {
-              label: formatMessage({
-                id: getTranslation("list.view"),
-                defaultMessage: "View details"
-              }),
-              variant: "ghost",
-              onClick: () => onView(log),
-              children: /* @__PURE__ */ jsx(Eye, {})
-            }
-          ),
-          onDelete ? /* @__PURE__ */ jsx(
-            IconButton,
-            {
-              label: formatMessage({
-                id: getTranslation("list.delete"),
-                defaultMessage: "Delete this record"
-              }),
-              variant: "ghost",
-              onClick: () => onDelete(log),
-              children: /* @__PURE__ */ jsx(Trash, {})
-            }
-          ) : null
-        ] }) })
+        /* @__PURE__ */ jsx(Td, { children: /* @__PURE__ */ jsx(Flex, { gap: 1, justifyContent: "flex-end", onClick: (event) => event.stopPropagation(), children: /* @__PURE__ */ jsx(
+          IconButton,
+          {
+            label: formatMessage({
+              id: getTranslation("list.view"),
+              defaultMessage: "View details"
+            }),
+            variant: "ghost",
+            onClick: () => onView(log),
+            children: /* @__PURE__ */ jsx(Eye, {})
+          }
+        ) }) })
       ] }, log.id);
     }) })
   ] });
 };
+const IntegrityStatus = () => {
+  const { formatMessage, locale } = useIntl();
+  const { data, isLoading, error } = useAuditIntegrity();
+  if (isLoading) {
+    return /* @__PURE__ */ jsx(Typography, { variant: "pi", textColor: "neutral600", children: formatMessage({
+      id: getTranslation("integrity.checking"),
+      defaultMessage: "Verifying the audit chain…"
+    }) });
+  }
+  if (error || !data) {
+    return /* @__PURE__ */ jsx(Typography, { variant: "pi", textColor: "warning600", children: formatMessage(
+      {
+        id: getTranslation("integrity.unavailable"),
+        defaultMessage: "Integrity check unavailable: {error}"
+      },
+      { error: error ?? "no report" }
+    ) });
+  }
+  if (!data.ok) {
+    return /* @__PURE__ */ jsxs(Box, { background: "danger100", hasRadius: true, padding: 3, borderColor: "danger200", borderWidth: "1px", borderStyle: "solid", children: [
+      /* @__PURE__ */ jsxs(Flex, { alignItems: "center", gap: 2, wrap: "wrap", children: [
+        /* @__PURE__ */ jsx(Badge, { backgroundColor: "danger600", textColor: "neutral0", children: formatMessage({ id: getTranslation("integrity.broken"), defaultMessage: "CHAIN BROKEN" }) }),
+        /* @__PURE__ */ jsx(Typography, { variant: "pi", textColor: "danger700", fontWeight: "bold", children: formatMessage(
+          {
+            id: getTranslation("integrity.brokenAt"),
+            defaultMessage: "Record #{id}: {reason}"
+          },
+          { id: data.brokenAt?.id ?? "?", reason: data.brokenAt?.reason ?? "" }
+        ) })
+      ] }),
+      /* @__PURE__ */ jsx(Box, { paddingTop: 1, children: /* @__PURE__ */ jsx(Typography, { variant: "pi", textColor: "danger700", children: formatMessage({
+        id: getTranslation("integrity.brokenHint"),
+        defaultMessage: "A record was modified, removed or inserted after it was written. Treat everything from this point as unverified and compare against the forwarded copy."
+      }) }) })
+    ] });
+  }
+  return /* @__PURE__ */ jsxs(Flex, { alignItems: "center", gap: 2, wrap: "wrap", children: [
+    /* @__PURE__ */ jsx(Badge, { backgroundColor: "success100", textColor: "success700", children: formatMessage({ id: getTranslation("integrity.ok"), defaultMessage: "Chain verified" }) }),
+    /* @__PURE__ */ jsx(Typography, { variant: "pi", textColor: "neutral600", children: formatMessage(
+      {
+        id: getTranslation("integrity.summary"),
+        defaultMessage: "{hashed, plural, one {# linked record} other {# linked records}}{legacy, plural, =0 {} one { · # pre-chain record} other { · # pre-chain records}} · checked {when}"
+      },
+      { hashed: data.hashed, legacy: data.legacy, when: formatDate(data.verifiedAt, locale) }
+    ) })
+  ] });
+};
 const toSearchParams = (query) => {
   const params = new URLSearchParams();
   for (const [key, value] of Object.entries(query)) {
@@ -1105,17 +1173,10 @@ const toSearchParams = (query) => {
 const AuditLogs = () => {
   const { formatMessage } = useIntl();
   const navigate = useNavigate();
-  const { toggleNotification } = useNotification();
   const [{ query }, setQuery] = useQueryParams({ page: 1, pageSize: 20 });
-  const {
-    allowedActions: { canDelete },
-    isLoading: isLoadingPermissions
-  } = useRBAC(PERMISSIONS);
   const search = React.useMemo(() => toSearchParams(query), [query]);
-  const { data, pagination, isLoading, error, refresh } = useAuditLogs(search);
+  const { data, pagination, isLoading, error } = useAuditLogs(search);
   const { options } = useAuditFilterOptions();
-  const deleteLog = useDeleteAuditLog();
-  const [pendingDelete, setPendingDelete] = React.useState(null);
   const updateQuery = React.useCallback(
     (patch) => {
       setQuery({ ...patch, page: 1 });
@@ -1139,33 +1200,6 @@ const AuditLogs = () => {
       "remove"
     );
   }, [setQuery]);
-  const confirmDelete = React.useCallback(async () => {
-    if (!pendingDelete) return;
-    try {
-      await deleteLog(pendingDelete.id);
-      toggleNotification({
-        type: "success",
-        message: formatMessage({
-          id: getTranslation("delete.success"),
-          defaultMessage: "Audit record deleted."
-        })
-      });
-      refresh();
-    } catch {
-      toggleNotification({
-        type: "danger",
-        message: formatMessage({
-          id: getTranslation("delete.error"),
-          defaultMessage: "Could not delete this audit record."
-        })
-      });
-    } finally {
-      setPendingDelete(null);
-    }
-  }, [deleteLog, formatMessage, pendingDelete, refresh, toggleNotification]);
-  if (isLoadingPermissions) {
-    return /* @__PURE__ */ jsx(Page.Loading, {});
-  }
   return /* @__PURE__ */ jsxs(Page.Main, { children: [
     /* @__PURE__ */ jsx(Page.Title, { children: formatMessage({ id: getTranslation("plugin.name"), defaultMessage: "Audit Logs" }) }),
     /* @__PURE__ */ jsx(
@@ -1196,6 +1230,7 @@ const AuditLogs = () => {
       }
     ),
     /* @__PURE__ */ jsxs(Layouts.Content, { children: [
+      /* @__PURE__ */ jsx(Box, { paddingBottom: 4, children: /* @__PURE__ */ jsx(IntegrityStatus, {}) }),
       /* @__PURE__ */ jsx(
         AuditLogFilters,
         {
@@ -1213,8 +1248,7 @@ const AuditLogs = () => {
           isLoading,
           sort: String(query.sort ?? "createdAt:desc"),
           onSortChange: (sort) => setQuery({ sort, page: 1 }),
-          onView: (log) => navigate(`${log.id}`),
-          onDelete: canDelete ? setPendingDelete : null
+          onView: (log) => navigate(`${log.id}`)
         }
       ),
       /* @__PURE__ */ jsx(Box, { paddingTop: 4, children: /* @__PURE__ */ jsx(
@@ -1229,31 +1263,7 @@ const AuditLogs = () => {
           ] })
         }
       ) })
-    ] }),
-    /* @__PURE__ */ jsx(
-      Dialog.Root,
-      {
-        open: pendingDelete !== null,
-        onOpenChange: (open) => {
-          if (!open) setPendingDelete(null);
-        },
-        children: /* @__PURE__ */ jsx(
-          ConfirmDialog,
-          {
-            title: formatMessage({
-              id: getTranslation("delete.title"),
-              defaultMessage: "Delete audit record"
-            }),
-            onConfirm: confirmDelete,
-            onCancel: () => setPendingDelete(null),
-            children: formatMessage({
-              id: getTranslation("delete.confirm"),
-              defaultMessage: "Audit records are evidence of what happened to your content. Deleting one cannot be undone. Are you sure?"
-            })
-          }
-        )
-      }
-    )
+    ] })
   ] });
 };
 const App = () => /* @__PURE__ */ jsx(Page.Protect, { permissions: PERMISSIONS.read, children: /* @__PURE__ */ jsxs(Routes, { children: [

package/dist/admin/{en-BMlJxq3g.js → en-Bs4tlklI.js}

@@ -5,9 +5,8 @@ const en = {
   "plugin.description": "Track every change to your content and every security event.",
   "list.subtitle": "{total, plural, =0 {No records} one {# record} other {# records}} of content and security activity",
   "list.search": "Search by document id, user, content type or request id",
-  "list.empty": "No audit logs match these filters. Records appear here as soon as content is created, updated, deleted, published or unpublished, and whenever someone signs in, signs out, is refused access, or changes an admin user, role, permission or media file.",
+  "list.empty": "No audit logs match these filters. Records appear here as soon as content is created, updated, deleted, published or unpublished, and whenever someone signs in, signs out, is refused access, or changes an admin user, role, permission or media file. Records cannot be deleted from this page.",
   "list.view": "View details",
-  "list.delete": "Delete this record",
   "list.column.createdAt": "Date",
   "list.column.userName": "User",
   "list.column.action": "Action",
@@ -53,12 +52,6 @@ const en = {
   "changes.empty": "No field-level changes were recorded for this operation. This is expected for creates and deletes, and for updates that re-saved a document without modifying it.",
   "json.show": "Show ({count} lines)",
   "json.hide": "Hide",
-  "delete.title": "Delete audit record",
-  "delete.confirm": "Audit records are evidence of what happened to your content. Deleting one cannot be undone. Are you sure?",
-  "delete.action": "Delete",
-  "delete.cancel": "Cancel",
-  "delete.success": "Audit record deleted.",
-  "delete.error": "Could not delete this audit record.",
   "filters.outcome": "Outcome",
   "detail.outcome": "Outcome",
   "detail.metadata": "Event detail",
@@ -82,6 +75,15 @@ const en = {
   "widgets.status.added": "Added",
   "widgets.status.removed": "Removed",
   "widgets.status.unchanged": "Unchanged",
-  "list.column.outcome": "Outcome"
+  "list.column.outcome": "Outcome",
+  "detail.hash": "Hash",
+  "detail.prevHash": "Previous hash",
+  "integrity.checking": "Verifying the audit chain…",
+  "integrity.unavailable": "Integrity check unavailable: {error}",
+  "integrity.ok": "Chain verified",
+  "integrity.summary": "{hashed, plural, one {# linked record} other {# linked records}}{legacy, plural, =0 {} one { · # pre-chain record} other { · # pre-chain records}} · checked {when}",
+  "integrity.broken": "CHAIN BROKEN",
+  "integrity.brokenAt": "Record #{id}: {reason}",
+  "integrity.brokenHint": "A record was modified, removed or inserted after it was written. Treat everything from this point as unverified and compare against the forwarded copy."
 };
 exports.default = en;

package/dist/admin/{en-B0rPiE2W.mjs → en-C3Og1VyK.mjs}

@@ -3,9 +3,8 @@ const en = {
   "plugin.description": "Track every change to your content and every security event.",
   "list.subtitle": "{total, plural, =0 {No records} one {# record} other {# records}} of content and security activity",
   "list.search": "Search by document id, user, content type or request id",
-  "list.empty": "No audit logs match these filters. Records appear here as soon as content is created, updated, deleted, published or unpublished, and whenever someone signs in, signs out, is refused access, or changes an admin user, role, permission or media file.",
+  "list.empty": "No audit logs match these filters. Records appear here as soon as content is created, updated, deleted, published or unpublished, and whenever someone signs in, signs out, is refused access, or changes an admin user, role, permission or media file. Records cannot be deleted from this page.",
   "list.view": "View details",
-  "list.delete": "Delete this record",
   "list.column.createdAt": "Date",
   "list.column.userName": "User",
   "list.column.action": "Action",
@@ -51,12 +50,6 @@ const en = {
   "changes.empty": "No field-level changes were recorded for this operation. This is expected for creates and deletes, and for updates that re-saved a document without modifying it.",
   "json.show": "Show ({count} lines)",
   "json.hide": "Hide",
-  "delete.title": "Delete audit record",
-  "delete.confirm": "Audit records are evidence of what happened to your content. Deleting one cannot be undone. Are you sure?",
-  "delete.action": "Delete",
-  "delete.cancel": "Cancel",
-  "delete.success": "Audit record deleted.",
-  "delete.error": "Could not delete this audit record.",
   "filters.outcome": "Outcome",
   "detail.outcome": "Outcome",
   "detail.metadata": "Event detail",
@@ -80,7 +73,16 @@ const en = {
   "widgets.status.added": "Added",
   "widgets.status.removed": "Removed",
   "widgets.status.unchanged": "Unchanged",
-  "list.column.outcome": "Outcome"
+  "list.column.outcome": "Outcome",
+  "detail.hash": "Hash",
+  "detail.prevHash": "Previous hash",
+  "integrity.checking": "Verifying the audit chain…",
+  "integrity.unavailable": "Integrity check unavailable: {error}",
+  "integrity.ok": "Chain verified",
+  "integrity.summary": "{hashed, plural, one {# linked record} other {# linked records}}{legacy, plural, =0 {} one { · # pre-chain record} other { · # pre-chain records}} · checked {when}",
+  "integrity.broken": "CHAIN BROKEN",
+  "integrity.brokenAt": "Record #{id}: {reason}",
+  "integrity.brokenHint": "A record was modified, removed or inserted after it was written. Treat everything from this point as unverified and compare against the forwarded copy."
 };
 export {
   en as default

package/dist/admin/{index-DdmY-p3Q.mjs → index-BIIMJgKU.mjs}

@@ -27,9 +27,7 @@ const entity = (action) => ({
   conditions: []
 });
 const PERMISSIONS = {
-  read: [entity(`plugin::${PLUGIN_ID}.read`)],
-  delete: [entity(`plugin::${PLUGIN_ID}.delete`)],
-  settings: [entity(`plugin::${PLUGIN_ID}.settings`)]
+  read: [entity(`plugin::${PLUGIN_ID}.read`)]
 };
 const getTranslation = (id) => `${PLUGIN_ID}.${id}`;
 const plugin = {
@@ -42,7 +40,7 @@ const plugin = {
         defaultMessage: "Audit Logs"
       },
       permissions: PERMISSIONS.read,
-      Component: () => import("./App-ou5hy99f.mjs").then((mod) => ({ default: mod.App }))
+      Component: () => import("./App-jWvaMXIw.mjs").then((mod) => ({ default: mod.App }))
     });
     app.registerPlugin({
       id: PLUGIN_ID,
@@ -60,7 +58,7 @@ const plugin = {
     return Promise.all(
       locales.map(async (locale) => {
         try {
-          const { default: data } = await __variableDynamicImportRuntimeHelper(/* @__PURE__ */ Object.assign({ "./translations/en.json": () => import("./en-B0rPiE2W.mjs") }), `./translations/${locale}.json`, 3);
+          const { default: data } = await __variableDynamicImportRuntimeHelper(/* @__PURE__ */ Object.assign({ "./translations/en.json": () => import("./en-C3Og1VyK.mjs") }), `./translations/${locale}.json`, 3);
           const namespaced = {};
           for (const key of Object.keys(data)) {
             namespaced[getTranslation(key)] = data[key];

package/dist/admin/{index-BYi8OPTw.js → index-BsVOGSDf.js}

@@ -28,9 +28,7 @@ const entity = (action) => ({
   conditions: []
 });
 const PERMISSIONS = {
-  read: [entity(`plugin::${PLUGIN_ID}.read`)],
-  delete: [entity(`plugin::${PLUGIN_ID}.delete`)],
-  settings: [entity(`plugin::${PLUGIN_ID}.settings`)]
+  read: [entity(`plugin::${PLUGIN_ID}.read`)]
 };
 const getTranslation = (id) => `${PLUGIN_ID}.${id}`;
 const plugin = {
@@ -43,7 +41,7 @@ const plugin = {
         defaultMessage: "Audit Logs"
       },
       permissions: PERMISSIONS.read,
-      Component: () => Promise.resolve().then(() => require("./App-BLt4lqEM.js")).then((mod) => ({ default: mod.App }))
+      Component: () => Promise.resolve().then(() => require("./App-CmbG2k9E.js")).then((mod) => ({ default: mod.App }))
     });
     app.registerPlugin({
       id: PLUGIN_ID,
@@ -61,7 +59,7 @@ const plugin = {
     return Promise.all(
       locales.map(async (locale) => {
         try {
-          const { default: data } = await __variableDynamicImportRuntimeHelper(/* @__PURE__ */ Object.assign({ "./translations/en.json": () => Promise.resolve().then(() => require("./en-BMlJxq3g.js")) }), `./translations/${locale}.json`, 3);
+          const { default: data } = await __variableDynamicImportRuntimeHelper(/* @__PURE__ */ Object.assign({ "./translations/en.json": () => Promise.resolve().then(() => require("./en-Bs4tlklI.js")) }), `./translations/${locale}.json`, 3);
           const namespaced = {};
           for (const key of Object.keys(data)) {
             namespaced[getTranslation(key)] = data[key];

package/dist/admin/index.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperties(exports, { __esModule: { value: true }, [Symbol.toStringTag]: { value: "Module" } });
-const index = require("./index-BYi8OPTw.js");
+const index = require("./index-BsVOGSDf.js");
 exports.default = index.plugin;

package/dist/admin/index.mjs

@@ -1,4 +1,4 @@
-import { p } from "./index-DdmY-p3Q.mjs";
+import { p } from "./index-BIIMJgKU.mjs";
 export {
   p as default
 };

package/dist/admin/src/components/AuditLogTable.d.ts

@@ -5,7 +5,6 @@ interface AuditLogTableProps {
     sort: string;
     onSortChange: (sort: string) => void;
     onView: (log: AuditLog) => void;
-    onDelete: ((log: AuditLog) => void) | null;
     isLoading: boolean;
 }
 /**
@@ -15,5 +14,5 @@ interface AuditLogTableProps {
  * `Array.sort`: the table only ever holds one page, so sorting it locally would
  * reorder twenty rows and quietly lie about the other ten thousand.
  */
-declare const AuditLogTable: ({ logs, sort, onSortChange, onView, onDelete, isLoading, }: AuditLogTableProps) => React.JSX.Element;
+declare const AuditLogTable: ({ logs, sort, onSortChange, onView, isLoading, }: AuditLogTableProps) => React.JSX.Element;
 export { AuditLogTable };

package/dist/admin/src/components/IntegrityStatus.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The hash-chain verdict, shown above the list.
+ *
+ * An audit log that cannot say whether it has been tampered with is taking its
+ * own word for it. This runs the full chain walk on every visit to the page —
+ * deliberately, rather than on demand, so that the check is not something an
+ * administrator has to remember to do — and states the result in one line.
+ *
+ * A broken chain is the one thing on this page that should look alarming, so it
+ * is the only thing here rendered in red.
+ */
+declare const IntegrityStatus: () => import("react").JSX.Element;
+export { IntegrityStatus };

package/dist/admin/src/hooks/useAuditLogs.d.ts

@@ -1,4 +1,4 @@
-import { AuditFilterOptions, AuditLog, AuditPagination } from '../types';
+import { AuditFilterOptions, AuditLog, AuditPagination, IntegrityReport } from '../types';
 /**
  * Fetches one page of audit logs.
  *
@@ -26,11 +26,22 @@ export declare const useAuditFilterOptions: () => {
     options: AuditFilterOptions;
     isLoading: boolean;
 };
+/**
+ * Runs the hash-chain verification.
+ *
+ * Fetched once per mount of the list page. The walk is server-side and paged,
+ * so its cost grows with the table, but it is a sequential read of an indexed
+ * primary key — the kind of thing a database does quickly — and the check is
+ * worth nothing if it is not run.
+ */
+export declare const useAuditIntegrity: () => {
+    data: IntegrityReport | null;
+    isLoading: boolean;
+    error: string | null;
+};
 /** Loads one audit record for the detail page. */
 export declare const useAuditLog: (id: string | undefined) => {
     data: AuditLog | null;
     isLoading: boolean;
     error: string | null;
 };
-/** Deletes one record. Requires `plugin::audit-log.delete` on the server. */
-export declare const useDeleteAuditLog: () => (id: number) => Promise<void>;

package/dist/admin/src/permissions.d.ts

@@ -7,14 +7,6 @@ export declare const PERMISSIONS: {
         properties: {};
         conditions: never[];
     }[];
-    delete: {
-        action: string;
-        subject: null;
-        id: string;
-        actionParameters: {};
-        properties: {};
-        conditions: never[];
-    }[];
     settings: {
         action: string;
         subject: null;

package/dist/admin/src/types.d.ts

@@ -5,7 +5,7 @@
  * own model: `Date` columns are ISO strings here, and the compiled ignore-list
  * matchers on `AuditConfig` never cross the wire. The canonical definitions live
  * in `server/src/types` and are re-exported from
- * `strapi-plugin-audit-log/strapi-server`; see the note there on why the two
+ * `strapi-cms-audit-log/strapi-server`; see the note there on why the two
  * halves cannot share one module.
  */
 export type AuditAction = 'create' | 'update' | 'delete' | 'publish' | 'unpublish';
@@ -15,7 +15,9 @@ export type AuditAction = 'create' | 'update' | 'delete' | 'publish' | 'unpublis
  * govern everything else.
  */
 export type AuditSecurityAction = 'login.success' | 'login.failed' | 'logout' | 'access.denied' | 'admin.user.create' | 'admin.user.update' | 'admin.user.delete' | 'admin.role.create' | 'admin.role.update' | 'admin.role.delete' | 'admin.permission.create' | 'admin.permission.update' | 'admin.permission.delete' | 'media.create' | 'media.update' | 'media.delete' | 'media-folder.create' | 'media-folder.update' | 'media-folder.delete';
-export type AuditAnyAction = AuditAction | AuditSecurityAction;
+/** The audit log's own maintenance: the retention purge recording itself. */
+export type AuditMaintenanceAction = 'retention.purge';
+export type AuditAnyAction = AuditAction | AuditSecurityAction | AuditMaintenanceAction;
 /** Whether the recorded attempt succeeded. Only security actions are ever `failure`. */
 export type AuditOutcome = 'success' | 'failure';
 export type AuditSource = 'admin' | 'api' | 'system' | 'cron' | 'migration' | 'unknown';
@@ -46,9 +48,31 @@ export interface AuditLog {
     outcome: AuditOutcome | null;
     /** Action-specific detail: the reason a login failed, the path of a denied request, an upload's filename. */
     metadata: Record<string, unknown> | null;
+    /** SHA-256 of this record and its predecessor's hash. Null on rows written before the chain existed. */
+    hash: string | null;
+    prevHash: string | null;
     createdAt: string;
     updatedAt: string;
 }
+/** Verdict of a full walk of the hash chain. Mirrors the server's `IntegrityReport`. */
+export interface IntegrityReport {
+    ok: boolean;
+    checked: number;
+    hashed: number;
+    legacy: number;
+    head: {
+        id: number;
+        hash: string;
+    } | null;
+    start: {
+        id: number;
+    } | null;
+    brokenAt?: {
+        id: number;
+        reason: string;
+    };
+    verifiedAt: string;
+}
 export interface AuditPagination {
     page: number;
     pageSize: number;