simstudioai--sim/apps/sim/app/api/v1/admin/audit-logs/route.ts

/**
 * GET /api/v1/admin/audit-logs
 *
 * List all audit logs with pagination and filtering.
 *
 * Query Parameters:
 *   - limit: number (default: 50, max: 250)
 *   - offset: number (default: 0)
 *   - action: string (optional) - Filter by action (e.g., "workflow.created")
 *   - resourceType: string (optional) - Filter by resource type (e.g., "workflow")
 *   - resourceId: string (optional) - Filter by resource ID
 *   - workspaceId: string (optional) - Filter by workspace ID
 *   - actorId: string (optional) - Filter by actor user ID
 *   - actorEmail: string (optional) - Filter by actor email
 *   - startDate: string (optional) - ISO 8601 date, filter createdAt >= startDate
 *   - endDate: string (optional) - ISO 8601 date, filter createdAt <= endDate
 *
 * Response: AdminListResponse<AdminAuditLog>
 */

import { dbReplica } from '@sim/db'
import { auditLog } from '@sim/db/schema'
import { createLogger } from '@sim/logger'
import { and, count, desc } from 'drizzle-orm'
import { v1AdminListAuditLogsContract } from '@/lib/api/contracts/v1/audit-logs'
import { parseRequest } from '@/lib/api/server'
import { withRouteHandler } from '@/lib/core/utils/with-route-handler'
import { withAdminAuth } from '@/app/api/v1/admin/middleware'
import {
  adminValidationErrorResponse,
  internalErrorResponse,
  listResponse,
} from '@/app/api/v1/admin/responses'
import {
  type AdminAuditLog,
  createPaginationMeta,
  parsePaginationParams,
  toAdminAuditLog,
} from '@/app/api/v1/admin/types'
import { buildFilterConditions } from '@/app/api/v1/audit-logs/query'

const logger = createLogger('AdminAuditLogsAPI')

export const GET = withRouteHandler(
  withAdminAuth(async (request) => {
    const url = new URL(request.url)
    const { limit, offset } = parsePaginationParams(url)

    const parsed = await parseRequest(
      v1AdminListAuditLogsContract,
      request,
      {},
      { validationErrorResponse: adminValidationErrorResponse }
    )
    if (!parsed.success) return parsed.response

    try {
      const query = parsed.data.query
      const conditions = buildFilterConditions({
        action: query.action,
        resourceType: query.resourceType,
        resourceId: query.resourceId,
        workspaceId: query.workspaceId,
        actorId: query.actorId,
        actorEmail: query.actorEmail,
        startDate: query.startDate,
        endDate: query.endDate,
      })

      const whereClause = conditions.length > 0 ? and(...conditions) : undefined

      const [countResult, logs] = await Promise.all([
        dbReplica.select({ total: count() }).from(auditLog).where(whereClause),
        dbReplica
          .select()
          .from(auditLog)
          .where(whereClause)
          .orderBy(desc(auditLog.createdAt))
          .limit(limit)
          .offset(offset),
      ])

      const total = countResult[0].total
      const data: AdminAuditLog[] = logs.map(toAdminAuditLog)
      const pagination = createPaginationMeta(total, limit, offset)

      logger.info(`Admin API: Listed ${data.length} audit logs (total: ${total})`)

      return listResponse(data, pagination)
    } catch (error) {
      logger.error('Admin API: Failed to list audit logs', { error })
      return internalErrorResponse('Failed to list audit logs')
    }
  })
)