strapi-cms-audit-log 1.1.0

package/dist/admin/en-B0rPiE2W.mjs

@@ -0,0 +1,87 @@
+const en = {
+  "plugin.name": "Audit Logs",
+  "plugin.description": "Track every change to your content and every security event.",
+  "list.subtitle": "{total, plural, =0 {No records} one {# record} other {# records}} of content and security activity",
+  "list.search": "Search by document id, user, content type or request id",
+  "list.empty": "No audit logs match these filters. Records appear here as soon as content is created, updated, deleted, published or unpublished, and whenever someone signs in, signs out, is refused access, or changes an admin user, role, permission or media file.",
+  "list.view": "View details",
+  "list.delete": "Delete this record",
+  "list.column.createdAt": "Date",
+  "list.column.userName": "User",
+  "list.column.action": "Action",
+  "list.column.contentType": "Content type",
+  "list.column.contentDocumentId": "Document ID",
+  "list.column.locale": "Locale",
+  "list.column.source": "Source",
+  "list.column.actions": "Actions",
+  "filters.all": "All",
+  "filters.action": "Action",
+  "filters.contentType": "Content type",
+  "filters.user": "User",
+  "filters.locale": "Locale",
+  "filters.source": "Source",
+  "filters.documentId": "Document ID",
+  "filters.documentIdPlaceholder": "Exact document id",
+  "filters.dateFrom": "From",
+  "filters.dateTo": "To",
+  "filters.clearDate": "Clear date",
+  "filters.clear": "Clear all filters",
+  "detail.title": "Audit Log",
+  "detail.overview": "Overview",
+  "detail.action": "Action",
+  "detail.user": "User",
+  "detail.userEmail": "User email",
+  "detail.date": "Date",
+  "detail.contentType": "Content type",
+  "detail.documentId": "Document ID",
+  "detail.entryId": "Entry ID",
+  "detail.locale": "Locale",
+  "detail.source": "Source",
+  "detail.ipAddress": "IP address",
+  "detail.requestId": "Request ID",
+  "detail.userAgent": "User agent",
+  "detail.snapshots": "Raw snapshots",
+  "detail.snapshotsHint": "The document state either side of this operation, with configured sensitive fields removed. A missing snapshot means the state did not exist (a create has no before, a delete has no after) or storage for it is disabled in the plugin configuration.",
+  "detail.before": "Before",
+  "detail.after": "After",
+  "changes.title": "Changes",
+  "changes.before": "Before",
+  "changes.after": "After",
+  "changes.raw": "Raw value for {path}",
+  "changes.empty": "No field-level changes were recorded for this operation. This is expected for creates and deletes, and for updates that re-saved a document without modifying it.",
+  "json.show": "Show ({count} lines)",
+  "json.hide": "Hide",
+  "delete.title": "Delete audit record",
+  "delete.confirm": "Audit records are evidence of what happened to your content. Deleting one cannot be undone. Are you sure?",
+  "delete.action": "Delete",
+  "delete.cancel": "Cancel",
+  "delete.success": "Audit record deleted.",
+  "delete.error": "Could not delete this audit record.",
+  "filters.outcome": "Outcome",
+  "detail.outcome": "Outcome",
+  "detail.metadata": "Event detail",
+  "widgets.title": "Widgets",
+  "widgets.hint": "Each changed widget is shown twice — once with the data it held before this operation, and once with the data it holds after. Fields that differ are highlighted in both copies.",
+  "widgets.before": "Before",
+  "widgets.after": "After",
+  "widgets.show": "Show",
+  "widgets.hide": "Hide",
+  "widgets.showUnchanged": "Show unchanged widgets",
+  "widgets.hideUnchanged": "Hide unchanged widgets",
+  "widgets.showAllFields": "Show {count} more fields",
+  "widgets.fieldCount": "{count} fields",
+  "widgets.zoneSummary": "{changed} changed of {total}",
+  "widgets.allUnchanged": "No widget in this zone changed. {count} unchanged widgets are hidden.",
+  "widgets.replaced": "This slot previously held a different widget ({component}).",
+  "widgets.noBefore": "This widget did not exist before the change.",
+  "widgets.noAfter": "This widget was removed by the change.",
+  "widgets.raw": "Raw JSON for slot {index}",
+  "widgets.status.changed": "Changed",
+  "widgets.status.added": "Added",
+  "widgets.status.removed": "Removed",
+  "widgets.status.unchanged": "Unchanged",
+  "list.column.outcome": "Outcome"
+};
+export {
+  en as default
+};

package/dist/admin/en-BMlJxq3g.js

@@ -0,0 +1,87 @@
+"use strict";
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const en = {
+  "plugin.name": "Audit Logs",
+  "plugin.description": "Track every change to your content and every security event.",
+  "list.subtitle": "{total, plural, =0 {No records} one {# record} other {# records}} of content and security activity",
+  "list.search": "Search by document id, user, content type or request id",
+  "list.empty": "No audit logs match these filters. Records appear here as soon as content is created, updated, deleted, published or unpublished, and whenever someone signs in, signs out, is refused access, or changes an admin user, role, permission or media file.",
+  "list.view": "View details",
+  "list.delete": "Delete this record",
+  "list.column.createdAt": "Date",
+  "list.column.userName": "User",
+  "list.column.action": "Action",
+  "list.column.contentType": "Content type",
+  "list.column.contentDocumentId": "Document ID",
+  "list.column.locale": "Locale",
+  "list.column.source": "Source",
+  "list.column.actions": "Actions",
+  "filters.all": "All",
+  "filters.action": "Action",
+  "filters.contentType": "Content type",
+  "filters.user": "User",
+  "filters.locale": "Locale",
+  "filters.source": "Source",
+  "filters.documentId": "Document ID",
+  "filters.documentIdPlaceholder": "Exact document id",
+  "filters.dateFrom": "From",
+  "filters.dateTo": "To",
+  "filters.clearDate": "Clear date",
+  "filters.clear": "Clear all filters",
+  "detail.title": "Audit Log",
+  "detail.overview": "Overview",
+  "detail.action": "Action",
+  "detail.user": "User",
+  "detail.userEmail": "User email",
+  "detail.date": "Date",
+  "detail.contentType": "Content type",
+  "detail.documentId": "Document ID",
+  "detail.entryId": "Entry ID",
+  "detail.locale": "Locale",
+  "detail.source": "Source",
+  "detail.ipAddress": "IP address",
+  "detail.requestId": "Request ID",
+  "detail.userAgent": "User agent",
+  "detail.snapshots": "Raw snapshots",
+  "detail.snapshotsHint": "The document state either side of this operation, with configured sensitive fields removed. A missing snapshot means the state did not exist (a create has no before, a delete has no after) or storage for it is disabled in the plugin configuration.",
+  "detail.before": "Before",
+  "detail.after": "After",
+  "changes.title": "Changes",
+  "changes.before": "Before",
+  "changes.after": "After",
+  "changes.raw": "Raw value for {path}",
+  "changes.empty": "No field-level changes were recorded for this operation. This is expected for creates and deletes, and for updates that re-saved a document without modifying it.",
+  "json.show": "Show ({count} lines)",
+  "json.hide": "Hide",
+  "delete.title": "Delete audit record",
+  "delete.confirm": "Audit records are evidence of what happened to your content. Deleting one cannot be undone. Are you sure?",
+  "delete.action": "Delete",
+  "delete.cancel": "Cancel",
+  "delete.success": "Audit record deleted.",
+  "delete.error": "Could not delete this audit record.",
+  "filters.outcome": "Outcome",
+  "detail.outcome": "Outcome",
+  "detail.metadata": "Event detail",
+  "widgets.title": "Widgets",
+  "widgets.hint": "Each changed widget is shown twice — once with the data it held before this operation, and once with the data it holds after. Fields that differ are highlighted in both copies.",
+  "widgets.before": "Before",
+  "widgets.after": "After",
+  "widgets.show": "Show",
+  "widgets.hide": "Hide",
+  "widgets.showUnchanged": "Show unchanged widgets",
+  "widgets.hideUnchanged": "Hide unchanged widgets",
+  "widgets.showAllFields": "Show {count} more fields",
+  "widgets.fieldCount": "{count} fields",
+  "widgets.zoneSummary": "{changed} changed of {total}",
+  "widgets.allUnchanged": "No widget in this zone changed. {count} unchanged widgets are hidden.",
+  "widgets.replaced": "This slot previously held a different widget ({component}).",
+  "widgets.noBefore": "This widget did not exist before the change.",
+  "widgets.noAfter": "This widget was removed by the change.",
+  "widgets.raw": "Raw JSON for slot {index}",
+  "widgets.status.changed": "Changed",
+  "widgets.status.added": "Added",
+  "widgets.status.removed": "Removed",
+  "widgets.status.unchanged": "Unchanged",
+  "list.column.outcome": "Outcome"
+};
+exports.default = en;

package/dist/admin/index-BYi8OPTw.js

@@ -0,0 +1,80 @@
+"use strict";
+const jsxRuntime = require("react/jsx-runtime");
+const icons = require("@strapi/icons");
+const __variableDynamicImportRuntimeHelper = (glob, path, segs) => {
+  const v = glob[path];
+  if (v) {
+    return typeof v === "function" ? v() : Promise.resolve(v);
+  }
+  return new Promise((_, reject) => {
+    (typeof queueMicrotask === "function" ? queueMicrotask : setTimeout)(
+      reject.bind(
+        null,
+        new Error(
+          "Unknown variable dynamic import: " + path + (path.split("/").length !== segs ? ". Note that variables only represent file names one level deep." : "")
+        )
+      )
+    );
+  });
+};
+const PluginIcon = () => /* @__PURE__ */ jsxRuntime.jsx(icons.ClockCounterClockwise, {});
+const PLUGIN_ID = "audit-log";
+const entity = (action) => ({
+  action,
+  subject: null,
+  id: "",
+  actionParameters: {},
+  properties: {},
+  conditions: []
+});
+const PERMISSIONS = {
+  read: [entity(`plugin::${PLUGIN_ID}.read`)],
+  delete: [entity(`plugin::${PLUGIN_ID}.delete`)],
+  settings: [entity(`plugin::${PLUGIN_ID}.settings`)]
+};
+const getTranslation = (id) => `${PLUGIN_ID}.${id}`;
+const plugin = {
+  register(app) {
+    app.addMenuLink({
+      to: "audit-logs",
+      icon: PluginIcon,
+      intlLabel: {
+        id: `${PLUGIN_ID}.plugin.name`,
+        defaultMessage: "Audit Logs"
+      },
+      permissions: PERMISSIONS.read,
+      Component: () => Promise.resolve().then(() => require("./App-BLt4lqEM.js")).then((mod) => ({ default: mod.App }))
+    });
+    app.registerPlugin({
+      id: PLUGIN_ID,
+      name: PLUGIN_ID,
+      isReady: true
+    });
+  },
+  /**
+   * Loads a translation bundle per admin locale, namespacing every key with the
+   * plugin id so it cannot collide with the admin's own messages. A locale with
+   * no bundle resolves to an empty object, and React Intl falls back to each
+   * message's `defaultMessage`.
+   */
+  registerTrads({ locales }) {
+    return Promise.all(
+      locales.map(async (locale) => {
+        try {
+          const { default: data } = await __variableDynamicImportRuntimeHelper(/* @__PURE__ */ Object.assign({ "./translations/en.json": () => Promise.resolve().then(() => require("./en-BMlJxq3g.js")) }), `./translations/${locale}.json`, 3);
+          const namespaced = {};
+          for (const key of Object.keys(data)) {
+            namespaced[getTranslation(key)] = data[key];
+          }
+          return { data: namespaced, locale };
+        } catch {
+          return { data: {}, locale };
+        }
+      })
+    );
+  }
+};
+exports.PERMISSIONS = PERMISSIONS;
+exports.PLUGIN_ID = PLUGIN_ID;
+exports.getTranslation = getTranslation;
+exports.plugin = plugin;

package/dist/admin/index-DdmY-p3Q.mjs

@@ -0,0 +1,81 @@
+import { jsx } from "react/jsx-runtime";
+import { ClockCounterClockwise } from "@strapi/icons";
+const __variableDynamicImportRuntimeHelper = (glob, path, segs) => {
+  const v = glob[path];
+  if (v) {
+    return typeof v === "function" ? v() : Promise.resolve(v);
+  }
+  return new Promise((_, reject) => {
+    (typeof queueMicrotask === "function" ? queueMicrotask : setTimeout)(
+      reject.bind(
+        null,
+        new Error(
+          "Unknown variable dynamic import: " + path + (path.split("/").length !== segs ? ". Note that variables only represent file names one level deep." : "")
+        )
+      )
+    );
+  });
+};
+const PluginIcon = () => /* @__PURE__ */ jsx(ClockCounterClockwise, {});
+const PLUGIN_ID = "audit-log";
+const entity = (action) => ({
+  action,
+  subject: null,
+  id: "",
+  actionParameters: {},
+  properties: {},
+  conditions: []
+});
+const PERMISSIONS = {
+  read: [entity(`plugin::${PLUGIN_ID}.read`)],
+  delete: [entity(`plugin::${PLUGIN_ID}.delete`)],
+  settings: [entity(`plugin::${PLUGIN_ID}.settings`)]
+};
+const getTranslation = (id) => `${PLUGIN_ID}.${id}`;
+const plugin = {
+  register(app) {
+    app.addMenuLink({
+      to: "audit-logs",
+      icon: PluginIcon,
+      intlLabel: {
+        id: `${PLUGIN_ID}.plugin.name`,
+        defaultMessage: "Audit Logs"
+      },
+      permissions: PERMISSIONS.read,
+      Component: () => import("./App-ou5hy99f.mjs").then((mod) => ({ default: mod.App }))
+    });
+    app.registerPlugin({
+      id: PLUGIN_ID,
+      name: PLUGIN_ID,
+      isReady: true
+    });
+  },
+  /**
+   * Loads a translation bundle per admin locale, namespacing every key with the
+   * plugin id so it cannot collide with the admin's own messages. A locale with
+   * no bundle resolves to an empty object, and React Intl falls back to each
+   * message's `defaultMessage`.
+   */
+  registerTrads({ locales }) {
+    return Promise.all(
+      locales.map(async (locale) => {
+        try {
+          const { default: data } = await __variableDynamicImportRuntimeHelper(/* @__PURE__ */ Object.assign({ "./translations/en.json": () => import("./en-B0rPiE2W.mjs") }), `./translations/${locale}.json`, 3);
+          const namespaced = {};
+          for (const key of Object.keys(data)) {
+            namespaced[getTranslation(key)] = data[key];
+          }
+          return { data: namespaced, locale };
+        } catch {
+          return { data: {}, locale };
+        }
+      })
+    );
+  }
+};
+export {
+  PLUGIN_ID as P,
+  PERMISSIONS as a,
+  getTranslation as g,
+  plugin as p
+};

package/dist/admin/index.js

@@ -0,0 +1,4 @@
+"use strict";
+Object.defineProperties(exports, { __esModule: { value: true }, [Symbol.toStringTag]: { value: "Module" } });
+const index = require("./index-BYi8OPTw.js");
+exports.default = index.plugin;

package/dist/admin/index.mjs

@@ -0,0 +1,4 @@
+import { p } from "./index-DdmY-p3Q.mjs";
+export {
+  p as default
+};

package/dist/admin/src/components/AuditLogFilters.d.ts

@@ -0,0 +1,18 @@
+import { AuditFilterOptions, AuditListQuery } from '../types';
+import * as React from 'react';
+interface AuditLogFiltersProps {
+    options: AuditFilterOptions;
+    query: AuditListQuery;
+    onChange: (patch: Partial<AuditListQuery>) => void;
+    onClear: () => void;
+}
+/**
+ * Filter bar for the audit list.
+ *
+ * Every control writes to the URL rather than to local state, which is what
+ * makes a filtered view shareable — pasting the link into a ticket reproduces
+ * exactly what the reporter was looking at. The parent turns that query string
+ * straight into the server request; nothing is filtered in the browser.
+ */
+declare const AuditLogFilters: ({ options, query, onChange, onClear }: AuditLogFiltersProps) => React.JSX.Element;
+export { AuditLogFilters };

package/dist/admin/src/components/AuditLogTable.d.ts

@@ -0,0 +1,19 @@
+import { AuditLog } from '../types';
+import * as React from 'react';
+interface AuditLogTableProps {
+    logs: AuditLog[];
+    sort: string;
+    onSortChange: (sort: string) => void;
+    onView: (log: AuditLog) => void;
+    onDelete: ((log: AuditLog) => void) | null;
+    isLoading: boolean;
+}
+/**
+ * The audit list.
+ *
+ * Sorting is a link back to the parent's query state rather than an in-memory
+ * `Array.sort`: the table only ever holds one page, so sorting it locally would
+ * reorder twenty rows and quietly lie about the other ten thousand.
+ */
+declare const AuditLogTable: ({ logs, sort, onSortChange, onView, onDelete, isLoading, }: AuditLogTableProps) => React.JSX.Element;
+export { AuditLogTable };

package/dist/admin/src/components/ChangeViewer.d.ts

@@ -0,0 +1,14 @@
+import { AuditChangeSet } from '../types';
+import * as React from 'react';
+interface ChangeViewerProps {
+    changes: AuditChangeSet | null;
+}
+/**
+ * Renders the field-level diff of an audit record.
+ *
+ * Paths arrive already flattened by the server's diff engine
+ * (`seo.metaTitle`, `blocks[2].heading`), so nesting is conveyed by the path
+ * itself and the list stays flat and scannable however deep the change was.
+ */
+declare const ChangeViewer: ({ changes }: ChangeViewerProps) => React.JSX.Element;
+export { ChangeViewer };

package/dist/admin/src/components/JsonViewer.d.ts

@@ -0,0 +1,20 @@
+import * as React from 'react';
+interface JsonViewerProps {
+    value: unknown;
+    /** Rendered above the block; also the label of the expand/collapse control. */
+    label: string;
+    /** Start expanded. Small payloads read better open. */
+    defaultOpen?: boolean;
+    /** Lines shown before the block scrolls internally. */
+    maxHeight?: string;
+}
+/**
+ * Collapsible, monospaced JSON block.
+ *
+ * Collapsed by default because a `before`/`after` snapshot of a page with a
+ * dynamic zone is thousands of lines, and a detail page that opens with a wall
+ * of JSON buries the thing the reader came for — the diff. The raw payload is
+ * still one click away, which matters when the diff summary is not enough.
+ */
+declare const JsonViewer: ({ value, label, defaultOpen, maxHeight }: JsonViewerProps) => React.JSX.Element;
+export { JsonViewer };

package/dist/admin/src/components/PluginIcon.d.ts

@@ -0,0 +1,3 @@
+/** Sidebar icon. A clock running backwards — history, which is what a log is. */
+declare const PluginIcon: () => import("react").JSX.Element;
+export { PluginIcon };

package/dist/admin/src/components/WidgetDiff.d.ts

@@ -0,0 +1,19 @@
+import * as React from 'react';
+interface WidgetDiffProps {
+    before: Record<string, unknown> | null;
+    after: Record<string, unknown> | null;
+}
+/**
+ * Per-widget before/after view of a dynamic zone.
+ *
+ * The flat `changes` list one section up answers "which fields moved". This
+ * answers the question an editor actually arrives with — "what did that widget
+ * look like before, and what does it look like now" — by rendering each changed
+ * widget twice, once per side, in full.
+ *
+ * Zones are found structurally rather than by name (see `utils/widgets.ts`), so
+ * this works on `widgets`, on `blocks`, and on any zone added to any content
+ * type later, with nothing to register.
+ */
+declare const WidgetDiff: ({ before, after }: WidgetDiffProps) => React.JSX.Element | null;
+export { WidgetDiff };

package/dist/admin/src/hooks/useAuditLogs.d.ts

@@ -0,0 +1,36 @@
+import { AuditFilterOptions, AuditLog, AuditPagination } from '../types';
+/**
+ * Fetches one page of audit logs.
+ *
+ * The whole query — filters, search, sort, pagination — is forwarded to the
+ * server and applied in SQL. Nothing is filtered in the browser, because the
+ * audit table is the one table in a Strapi project that grows without bound;
+ * fetching it to filter it client-side would work fine in development and fall
+ * over the first time it matters.
+ */
+export declare const useAuditLogs: (search: string) => {
+    data: AuditLog[];
+    pagination: AuditPagination;
+    isLoading: boolean;
+    error: string | null;
+    refresh: () => void;
+};
+/**
+ * Loads the distinct values behind the filter dropdowns.
+ *
+ * Fetched once per mount rather than derived from the current page: a filter
+ * list built from twenty visible rows would offer only the options the user can
+ * already see.
+ */
+export declare const useAuditFilterOptions: () => {
+    options: AuditFilterOptions;
+    isLoading: boolean;
+};
+/** Loads one audit record for the detail page. */
+export declare const useAuditLog: (id: string | undefined) => {
+    data: AuditLog | null;
+    isLoading: boolean;
+    error: string | null;
+};
+/** Deletes one record. Requires `plugin::audit-log.delete` on the server. */
+export declare const useDeleteAuditLog: () => (id: number) => Promise<void>;

package/dist/admin/src/index.d.ts

@@ -0,0 +1,3 @@
+import { StrapiApp } from '@strapi/strapi/admin';
+declare const plugin: StrapiApp['appPlugins'][string];
+export default plugin;

package/dist/admin/src/pages/App.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Routes behind the `Audit Logs` sidebar entry, mounted at `/admin/audit-logs`.
+ *
+ * `Page.Protect` re-checks `plugin::audit-log.read` here rather than relying on
+ * the hidden sidebar link. Hiding a menu item stops it being *offered*; it does
+ * nothing about a bookmarked or shared URL. The server enforces the same
+ * permission on every route, so this is the third of three checks and the only
+ * one whose job is to show a friendly "no access" page instead of a raw 403.
+ */
+declare const App: () => import("react").JSX.Element;
+export { App };

package/dist/admin/src/pages/AuditLogDetails.d.ts

@@ -0,0 +1,10 @@
+/**
+ * A single audit record in full.
+ *
+ * Laid out as metadata first, then the diff, then the raw snapshots. That order
+ * matches how the page is actually read: "who and when" answers most questions
+ * outright, the diff answers most of the rest, and the raw JSON is there for the
+ * cases where neither does.
+ */
+declare const AuditLogDetails: () => import("react").JSX.Element;
+export { AuditLogDetails };

package/dist/admin/src/pages/AuditLogs.d.ts

@@ -0,0 +1,3 @@
+import * as React from 'react';
+declare const AuditLogs: () => React.JSX.Element;
+export { AuditLogs };

package/dist/admin/src/permissions.d.ts

@@ -0,0 +1,26 @@
+export declare const PERMISSIONS: {
+    read: {
+        action: string;
+        subject: null;
+        id: string;
+        actionParameters: {};
+        properties: {};
+        conditions: never[];
+    }[];
+    delete: {
+        action: string;
+        subject: null;
+        id: string;
+        actionParameters: {};
+        properties: {};
+        conditions: never[];
+    }[];
+    settings: {
+        action: string;
+        subject: null;
+        id: string;
+        actionParameters: {};
+        properties: {};
+        conditions: never[];
+    }[];
+};

package/dist/admin/src/pluginId.d.ts

@@ -0,0 +1,2 @@
+/** Must match `strapi.name` in package.json and `PLUGIN_ID` on the server. */
+export declare const PLUGIN_ID = "audit-log";

package/dist/admin/src/types.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Wire types for the plugin's admin API.
+ *
+ * These describe JSON as it arrives over HTTP, which is not quite the server's
+ * own model: `Date` columns are ISO strings here, and the compiled ignore-list
+ * matchers on `AuditConfig` never cross the wire. The canonical definitions live
+ * in `server/src/types` and are re-exported from
+ * `strapi-plugin-audit-log/strapi-server`; see the note there on why the two
+ * halves cannot share one module.
+ */
+export type AuditAction = 'create' | 'update' | 'delete' | 'publish' | 'unpublish';
+/**
+ * Operations recorded outside the Document Service: authentication, denied
+ * requests, and changes to the admin users, roles, permissions and media that
+ * govern everything else.
+ */
+export type AuditSecurityAction = 'login.success' | 'login.failed' | 'logout' | 'access.denied' | 'admin.user.create' | 'admin.user.update' | 'admin.user.delete' | 'admin.role.create' | 'admin.role.update' | 'admin.role.delete' | 'admin.permission.create' | 'admin.permission.update' | 'admin.permission.delete' | 'media.create' | 'media.update' | 'media.delete' | 'media-folder.create' | 'media-folder.update' | 'media-folder.delete';
+export type AuditAnyAction = AuditAction | AuditSecurityAction;
+/** Whether the recorded attempt succeeded. Only security actions are ever `failure`. */
+export type AuditOutcome = 'success' | 'failure';
+export type AuditSource = 'admin' | 'api' | 'system' | 'cron' | 'migration' | 'unknown';
+export interface AuditChange {
+    from: unknown;
+    to: unknown;
+}
+export type AuditChangeSet = Record<string, AuditChange>;
+export interface AuditLog {
+    id: number;
+    documentId: string;
+    action: AuditAnyAction | string;
+    contentType: string;
+    contentTypeDisplayName: string | null;
+    contentDocumentId: string | null;
+    contentId: string | null;
+    locale: string | null;
+    userId: string | null;
+    userEmail: string | null;
+    userName: string | null;
+    source: AuditSource | string;
+    ipAddress: string | null;
+    userAgent: string | null;
+    requestId: string | null;
+    changes: AuditChangeSet | null;
+    before: Record<string, unknown> | null;
+    after: Record<string, unknown> | null;
+    outcome: AuditOutcome | null;
+    /** Action-specific detail: the reason a login failed, the path of a denied request, an upload's filename. */
+    metadata: Record<string, unknown> | null;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface AuditPagination {
+    page: number;
+    pageSize: number;
+    pageCount: number;
+    total: number;
+}
+export interface AuditLogListResponse {
+    results: AuditLog[];
+    pagination: AuditPagination;
+}
+export interface AuditFilterOptions {
+    contentTypes: Array<{
+        uid: string;
+        displayName: string;
+    }>;
+    users: Array<{
+        userId: string;
+        label: string;
+    }>;
+    locales: string[];
+    actions: string[];
+    sources: string[];
+    outcomes: string[];
+}
+/** Query-string state owned by the list page. Mirrors what the server accepts. */
+export interface AuditListQuery {
+    page?: string | number;
+    pageSize?: string | number;
+    sort?: string;
+    action?: string;
+    contentType?: string;
+    userId?: string;
+    locale?: string;
+    source?: string;
+    outcome?: string;
+    contentDocumentId?: string;
+    dateFrom?: string;
+    dateTo?: string;
+    _q?: string;
+}