gsadmin/sencho
1
0
Fork 0
mirror of https://github.com/Studio-Saelix/sencho.git synced 2026-08-31 04:38:11 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat: give Community a 14-day in-app audit log (#1337)

Browse Source 
* feat: give Community a 14-day in-app audit log

The audit-log list view is now reachable on the Community tier, scoped to a
rolling 14-day recent-activity window, with the existing filters (actor,
method, search, date range). Full retention, CSV/JSON export, and per-row
anomaly annotation remain on the paid tier.

Backend clamps the list window for unpaid tiers and forces anomaly annotation
off; a non-numeric from query value is normalized so it cannot lift the clamp.
The stats and export endpoints keep their paid gate. The frontend hides the
export control and the anomaly stat tiles for Community and omits the anomaly
request. Audit entries are still captured for every tier, so only read access
changes.

* test: repoint distributed-license stand-in to a still-paid audit route

The distributed-license trust-chain test borrowed GET /api/audit-log as a
paid-gated, DB-reading stand-in. That route is now Community-accessible, so its
six 403 PAID_REQUIRED assertions flipped to 200. Point the stand-in at
GET /api/audit-log/stats, which keeps requirePaid plus the system:audit
permission gate and is satisfied by both token types the test uses.
This commit is contained in:
Anso
2026-06-08 08:58:49 -04:00
committed by GitHub
parent 54119be0c2
commit ea1267b32f
4 changed files with 141 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/__tests__/distributed-license.test.ts
+6 -4
View File
@@ -24,10 +24,12 @@ const signToken = (payload: Record<string, unknown>, expiresIn: string | number
jwt.sign(payload, TEST_JWT_SECRET, { expiresIn: expiresIn as jwt.SignOptions['expiresIn'] });
// We need a Paid-gated route that doesn't depend on Docker or remote nodes.
// /api/webhooks/... triggers are public, but the management routes are
// admin-gated, so we use a Paid-gated route that just reads from the DB.
// /api/audit-log is paid-gated and reads from the DB.
const PAID_ROUTE = '/api/audit-log';
// The bare /api/audit-log list is Community (recent-activity window), but
// /api/audit-log/stats keeps requirePaid and reads from the DB, so it is a
// stable stand-in for exercising the distributed-license trust chain. The
// node_proxy and admin session tokens used below both satisfy its
// system:audit permission gate.
const PAID_ROUTE = '/api/audit-log/stats';
// ─── authMiddleware: proxyTier propagation ──────────────────────────────────