chore: import upstream snapshot with attribution

apps/sim/app/api/v1/admin/audit-logs/[id]/route.ts

@@ -0,0 +1,55 @@
+/**
+ * GET /api/v1/admin/audit-logs/[id]
+ *
+ * Get a single audit log entry by ID.
+ *
+ * Response: AdminSingleResponse<AdminAuditLog>
+ */
+
+import { db } from '@sim/db'
+import { auditLog } from '@sim/db/schema'
+import { createLogger } from '@sim/logger'
+import { eq } from 'drizzle-orm'
+import { v1AdminGetAuditLogContract } from '@/lib/api/contracts/v1/audit-logs'
+import { parseRequest } from '@/lib/api/server'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import { withAdminAuthParams } from '@/app/api/v1/admin/middleware'
+import {
+  adminValidationErrorResponse,
+  internalErrorResponse,
+  notFoundResponse,
+  singleResponse,
+} from '@/app/api/v1/admin/responses'
+import { toAdminAuditLog } from '@/app/api/v1/admin/types'
+
+const logger = createLogger('AdminAuditLogDetailAPI')
+
+interface RouteParams {
+  id: string
+}
+
+export const GET = withRouteHandler(
+  withAdminAuthParams<RouteParams>(async (request, context) => {
+    const parsed = await parseRequest(v1AdminGetAuditLogContract, request, context, {
+      validationErrorResponse: adminValidationErrorResponse,
+    })
+    if (!parsed.success) return parsed.response
+
+    const { id } = parsed.data.params
+
+    try {
+      const [log] = await db.select().from(auditLog).where(eq(auditLog.id, id)).limit(1)
+
+      if (!log) {
+        return notFoundResponse('AuditLog')
+      }
+
+      logger.info(`Admin API: Retrieved audit log ${id}`)
+
+      return singleResponse(toAdminAuditLog(log))
+    } catch (error) {
+      logger.error('Admin API: Failed to get audit log', { error, id })
+      return internalErrorResponse('Failed to get audit log')
+    }
+  })
+)

apps/sim/app/api/v1/admin/audit-logs/route.ts

@@ -0,0 +1,95 @@
+/**
+ * GET /api/v1/admin/audit-logs
+ *
+ * List all audit logs with pagination and filtering.
+ *
+ * Query Parameters:
+ *   - limit: number (default: 50, max: 250)
+ *   - offset: number (default: 0)
+ *   - action: string (optional) - Filter by action (e.g., "workflow.created")
+ *   - resourceType: string (optional) - Filter by resource type (e.g., "workflow")
+ *   - resourceId: string (optional) - Filter by resource ID
+ *   - workspaceId: string (optional) - Filter by workspace ID
+ *   - actorId: string (optional) - Filter by actor user ID
+ *   - actorEmail: string (optional) - Filter by actor email
+ *   - startDate: string (optional) - ISO 8601 date, filter createdAt >= startDate
+ *   - endDate: string (optional) - ISO 8601 date, filter createdAt <= endDate
+ *
+ * Response: AdminListResponse<AdminAuditLog>
+ */
+
+import { dbReplica } from '@sim/db'
+import { auditLog } from '@sim/db/schema'
+import { createLogger } from '@sim/logger'
+import { and, count, desc } from 'drizzle-orm'
+import { v1AdminListAuditLogsContract } from '@/lib/api/contracts/v1/audit-logs'
+import { parseRequest } from '@/lib/api/server'
+import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
+import { withAdminAuth } from '@/app/api/v1/admin/middleware'
+import {
+  adminValidationErrorResponse,
+  internalErrorResponse,
+  listResponse,
+} from '@/app/api/v1/admin/responses'
+import {
+  type AdminAuditLog,
+  createPaginationMeta,
+  parsePaginationParams,
+  toAdminAuditLog,
+} from '@/app/api/v1/admin/types'
+import { buildFilterConditions } from '@/app/api/v1/audit-logs/query'
+
+const logger = createLogger('AdminAuditLogsAPI')
+
+export const GET = withRouteHandler(
+  withAdminAuth(async (request) => {
+    const url = new URL(request.url)
+    const { limit, offset } = parsePaginationParams(url)
+
+    const parsed = await parseRequest(
+      v1AdminListAuditLogsContract,
+      request,
+      {},
+      { validationErrorResponse: adminValidationErrorResponse }
+    )
+    if (!parsed.success) return parsed.response
+
+    try {
+      const query = parsed.data.query
+      const conditions = buildFilterConditions({
+        action: query.action,
+        resourceType: query.resourceType,
+        resourceId: query.resourceId,
+        workspaceId: query.workspaceId,
+        actorId: query.actorId,
+        actorEmail: query.actorEmail,
+        startDate: query.startDate,
+        endDate: query.endDate,
+      })
+
+      const whereClause = conditions.length > 0 ? and(...conditions) : undefined
+
+      const [countResult, logs] = await Promise.all([
+        dbReplica.select({ total: count() }).from(auditLog).where(whereClause),
+        dbReplica
+          .select()
+          .from(auditLog)
+          .where(whereClause)
+          .orderBy(desc(auditLog.createdAt))
+          .limit(limit)
+          .offset(offset),
+      ])
+
+      const total = countResult[0].total
+      const data: AdminAuditLog[] = logs.map(toAdminAuditLog)
+      const pagination = createPaginationMeta(total, limit, offset)
+
+      logger.info(`Admin API: Listed ${data.length} audit logs (total: ${total})`)
+
+      return listResponse(data, pagination)
+    } catch (error) {
+      logger.error('Admin API: Failed to list audit logs', { error })
+      return internalErrorResponse('Failed to list audit logs')
+    }
+  })
+)