feat(api): audit log read endpoints for admin and enterprise

[waleedlatif1]

Summary

• Admin endpoints: GET /v1/admin/audit-logs (list with filtering/pagination) and GET /v1/admin/audit-logs/[id]
• Enterprise endpoints: GET /v1/audit-logs (org-scoped, cursor pagination) and GET /v1/audit-logs/[id]
• Enterprise auth: requires org admin/owner role + active enterprise subscription
• Supports filtering by action, resourceType, resourceId, workspaceId, actorId, date range
• includeDeparted param for enterprise list to include departed member logs

Type of Change

• New feature

Testing

Tested manually

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Feb 25, 2026 9:23pm

[greptile-apps]

Greptile Summary

This PR adds comprehensive audit log read endpoints for both admin and enterprise users. The implementation follows established patterns in the codebase and addresses previous review feedback.

Key changes:

• Admin endpoints (/v1/admin/audit-logs) provide unrestricted access to all audit logs with offset pagination
• Enterprise endpoints (/v1/audit-logs) provide org-scoped access with cursor pagination and require active enterprise subscription + admin/owner role
• Enterprise endpoints properly handle departed members and system actions (null actorId) via the includeDeparted parameter
• Sensitive fields (ipAddress, userAgent) are excluded from enterprise responses but included in admin responses
• Cursor validation has been implemented with proper date and field validation before query execution
• All endpoints use Zod validation for query parameters and follow consistent error handling patterns

Confidence Score: 5/5

• This PR is safe to merge with minimal risk
• The implementation follows established patterns in the codebase, includes proper authorization and validation, addresses previous review feedback (cursor validation and null actorId handling), and implements appropriate privacy controls by excluding sensitive fields from enterprise responses
• No files require special attention

Important Files Changed

Filename	Overview
apps/sim/app/api/v1/audit-logs/route.ts	Enterprise audit log list endpoint with comprehensive filtering, cursor pagination, and proper validation
apps/sim/app/api/v1/audit-logs/[id]/route.ts	Enterprise audit log detail endpoint with org-scoped access including departed members
apps/sim/app/api/v1/audit-logs/auth.ts	Enterprise subscription and role validation with proper authorization checks
apps/sim/app/api/v1/admin/audit-logs/route.ts	Admin audit log list endpoint with offset pagination and comprehensive filtering
apps/sim/app/api/v1/admin/audit-logs/[id]/route.ts	Admin audit log detail endpoint with unrestricted access to all audit logs

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[Client Request] --> B{Endpoint Type?}
    B -->|Enterprise| C[Rate Limit Check]
    B -->|Admin| D[Admin Auth Check]
    
    C --> E[validateEnterpriseAuditAccess]
    E --> F{Org Member?}
    F -->|No| G[403 Error]
    F -->|Yes| H{Admin/Owner Role?}
    H -->|No| G
    H -->|Yes| I{Enterprise Subscription?}
    I -->|No| G
    I -->|Yes| J[Get Org Member IDs]
    
    J --> K{includeDeparted?}
    K -->|Yes| L[Query by actorId OR workspaceId]
    K -->|No| M[Query by actorId only]
    
    L --> N[Apply Filters & Cursor]
    M --> N
    N --> O[Return Data excluding IP/UserAgent]
    
    D --> P[Query All Logs]
    P --> Q[Apply Filters]
    Q --> R[Return All Data including IP/UserAgent]

Loading

_{Last reviewed commit: 2f08f6e}

[greptile-apps]

_{8 files reviewed, 2 comments}

_{Edit Code Review Agent Settings | Greptile}

[waleedlatif1]

@cursor review

[waleedlatif1]

@greptile

[greptile-apps]

_{8 files reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}

[cursor]

✅ Bugbot reviewed your changes and found no new issues!

Comment @cursor review or bugbot run to trigger another review on this PR