auditlog

type Entry struct {
	CreatedAt string `json:"created_at"`

	// Action is a short, stable identifier (e.g. "session_opened", "codespace_start").
	Action string `json:"action"`

	// Status is "success" or "failure".
	Status string `json:"status"`

	// Error is a human-readable error summary (best-effort, non-secret).
	Error string `json:"error,omitempty"`

	ChannelID string `json:"channel_id,omitempty"`

	EnvPublicID       string `json:"env_public_id,omitempty"`
	NamespacePublicID string `json:"namespace_public_id,omitempty"`

	UserPublicID string `json:"user_public_id,omitempty"`
	UserEmail    string `json:"user_email,omitempty"`

	FloeApp     string `json:"floe_app,omitempty"`
	SessionKind string `json:"session_kind,omitempty"`
	CodeSpaceID string `json:"code_space_id,omitempty"`
	TunnelURL   string `json:"tunnel_url,omitempty"`
	CanRead     bool   `json:"can_read"`
	CanWrite    bool   `json:"can_write"`
	CanExecute  bool   `json:"can_execute"`
	CanAdmin    bool   `json:"can_admin"`

	// Detail is a small, action-specific object (avoid secrets).
	Detail map[string]any `json:"detail,omitempty"`
}

type Options struct {
	Logger *slog.Logger
	// StateDir is the runtime state directory (e.g. ~/.redeven).
	StateDir string

	// MaxBytes limits the size of a single audit log file (rotation threshold).
	// If <= 0, a safe default is used.
	MaxBytes int64
	// MaxBackups keeps the latest N rotated files (in addition to the active file).
	// If <= 0, a safe default is used.
	MaxBackups int
}

type Store struct {
	// contains filtered or unexported fields
}