feat: v2

command/audit.ts

@@ -0,0 +1,59 @@
+import { defineCommand } from "citty";
+import { apiRequest, type ApiRequestInit } from "../lib/api";
+import { toTable } from "../lib/format";
+
+export type AuditApiRequest = <T>(
+  path: string,
+  init?: ApiRequestInit,
+) => Promise<T>;
+
+type AuditEvent = {
+  metadata: { name: string; creationTimestamp: string };
+  spec: {
+    actor: { username: string };
+    action: string;
+    workspaceId?: string;
+    operationId?: string;
+    outcome: string;
+  };
+};
+
+export async function listAuditEvents(
+  workspace?: string,
+  request: AuditApiRequest = apiRequest,
+): Promise<string> {
+  const path = workspace
+    ? `/audit?${new URLSearchParams({ workspaceId: workspace })}`
+    : "/audit";
+  const response = await request<{ items: AuditEvent[] }>(path);
+  if (response.items.length === 0) return "No audit events";
+  return toTable(
+    response.items.map((event) => ({
+      timestamp: event.metadata.creationTimestamp,
+      actor: event.spec.actor.username,
+      action: event.spec.action,
+      workspace: event.spec.workspaceId,
+      outcome: event.spec.outcome,
+      operation: event.spec.operationId,
+    })),
+  );
+}
+
+const list = defineCommand({
+  meta: { name: "ls", description: "List audit events" },
+  args: {
+    workspace: {
+      type: "string",
+      alias: "w",
+      description: "Filter by workspace",
+    },
+  },
+  async run({ args }) {
+    console.log(await listAuditEvents(args.workspace ?? args._[0]));
+  },
+});
+
+export const audit = defineCommand({
+  meta: { name: "audit", description: "Inspect the audit log" },
+  subCommands: { ls: list },
+});