3m-portal/lib/audit.js

const { db } = require('./db');

const stmt = db.prepare(`
    INSERT INTO audit_log (actor_user_id, action, target_user_id, metadata, ip, created_at)
    VALUES (@actorId, @action, @targetId, @metadata, @ip, @createdAt)
`);

function log(actorId, action, targetId = null, metadata = null, ip = null) {
    try {
        stmt.run({
            actorId:   actorId  ?? null,
            action,
            targetId:  targetId ?? null,
            metadata:  metadata ? JSON.stringify(metadata) : null,
            ip:        ip       ?? null,
            createdAt: Date.now(),
        });
    } catch (err) {
        console.error('[audit] log error:', err.message);
    }
}

module.exports = { log };