import { f as defineAdminEventHandler, h as requireAdminRole, i as requireApiTokenScopes, j as getQuery, c as createError, _ as getAuditLogs } from '../../../nitro/nitro.mjs';
import 'node:crypto';
import 'jsonwebtoken';
import 'node:fs';
import 'node:module';
import 'node:path';
import 'node:url';
import 'node:http';
import 'node:https';
import 'node:events';
import 'node:buffer';
import 'pino';
import 'drizzle-orm/better-sqlite3';
import 'drizzle-orm/node-postgres';
import 'drizzle-orm/mysql2';
import 'better-sqlite3';
import 'pg';
import 'mysql2/promise';
import 'drizzle-orm';
import 'fs';
import 'path';
import 'prom-client';
import 'bcryptjs';
import '@node-rs/argon2';
import 'node:async_hooks';
import 'crypto';
import 'node:dns';
import 'node:util';
import 'node:net';
import 'fs/promises';
import 'url';
import 'semver';

const VALID_OUTCOMES = /* @__PURE__ */ new Set(["success", "failed", "denied"]);
const index_get = defineAdminEventHandler("admin:audit-logs:list", async (event) => {
  try {
    await requireAdminRole(event, ["super-admin", "admin", "editor"]);
    requireApiTokenScopes(event.context.apiToken, { scopes: ["audit-logs:read"] });
    const query = getQuery(event);
    const filters = {};
    if (query.action) {
      const actions = String(query.action).split(",").filter(Boolean);
      filters.action = actions.length === 1 ? actions[0] : actions;
    }
    if (query.actorType) {
      filters.actorType = String(query.actorType);
    }
    if (query.actorId) {
      filters.actorId = Number(query.actorId);
    }
    if (query.targetEntityType) {
      filters.targetEntityType = String(query.targetEntityType);
    }
    if (query.targetEntityId) {
      filters.targetEntityId = String(query.targetEntityId);
    }
    if (query.outcome) {
      const outcomes = String(query.outcome).split(",").map((outcome) => outcome.trim()).filter(Boolean);
      if (outcomes.length === 0) {
        throw createError({
          statusCode: 400,
          statusMessage: "Bad Request",
          message: "outcome must contain at least one valid value"
        });
      }
      const invalidOutcomes = outcomes.filter((outcome) => !VALID_OUTCOMES.has(outcome));
      if (invalidOutcomes.length > 0) {
        throw createError({
          statusCode: 400,
          statusMessage: "Bad Request",
          message: `Invalid audit outcomes: ${invalidOutcomes.join(", ")}`
        });
      }
      filters.outcome = outcomes.length === 1 ? outcomes[0] : outcomes;
    }
    if (query.dateFrom) {
      filters.dateFrom = String(query.dateFrom);
    }
    if (query.dateTo) {
      filters.dateTo = String(query.dateTo);
    }
    const limit = Math.min(Math.max(Number(query.limit) || 50, 1), 200);
    const offset = Math.max(Number(query.offset) || 0, 0);
    const result = await getAuditLogs(filters, limit, offset);
    return {
      success: true,
      data: result.data,
      meta: {
        total: result.total,
        limit,
        offset
      }
    };
  } catch (error) {
    if (error && typeof error === "object" && "statusCode" in error) {
      throw error;
    }
    console.error("[GET /api/admin/audit-logs] Error:", error);
    throw createError({
      statusCode: 500,
      statusMessage: "Failed to fetch audit logs",
      message: error instanceof Error ? error.message : "Unknown error"
    });
  }
});

export { index_get as default };
//# sourceMappingURL=index.get3.mjs.map
