Merge pull request #12 from radiantlab/feat/SQLite-audit-logging

Feat/sq lite audit logging, reviewed during team meetings today.

Author: tylerlv3

.gitignore

@@ -229,3 +229,5 @@ svc/data/panels_config.json
 # Note: panels_config.json is tracked (structural data)
 # panels_state.json is ignored (runtime state)
 
+svc/data/audit.db
+# audit.db is a SQLite database for the audit log, changes on run time, so ignore it for now

svc/app/config.py

@@ -17,6 +17,7 @@
 PANELS_CONFIG_FILE = os.path.join(_SVC_DIR, DATA_DIR, "panels_config.json")
 PANELS_STATE_FILE = os.path.join(_SVC_DIR, DATA_DIR, "panels_state.json")
 AUDIT_FILE = os.path.join(_SVC_DIR, DATA_DIR, "audit.json")
+AUDIT_DB_FILE = os.path.join(_SVC_DIR, DATA_DIR, "audit.db")
 
 # Halio API configuration (for real mode)
 # NOTE: The previous default ("http://192.168.2.200:8084/api") was trailer-specific.

svc/app/routes.py

@@ -1,9 +1,11 @@
 from __future__ import annotations
 from fastapi import APIRouter, HTTPException, Depends
-from .models import Panel, Group, CommandRequest, CommandResult, GroupCreate, GroupUpdate
+from .models import Panel, Group, CommandRequest, CommandResult, GroupCreate, GroupUpdate, AuditEntry
 from typing import List
 from .service import ControlService
 from .config import MODE
+from .state import fetch_audit_entries
+
 
 
 router = APIRouter()
@@ -80,3 +82,9 @@ def delete_group(group_id: str, service: ControlService = Depends(get_service))
     if not ok:
         raise HTTPException(status_code=404, detail="group not found")
     return {"ok": True}
+
+
+@router.get("/logs/audit", response_model=List[AuditEntry])
+def get_audit_logs(limit: int = 500, offset: int = 0) -> List[AuditEntry]:
+    rows = fetch_audit_entries(limit=limit, offset=offset)
+    return [AuditEntry(**row) for row in rows]

svc/app/state.py

@@ -2,15 +2,17 @@
 import json
 import os
 import time
-from typing import Dict, List, Tuple
+import sqlite3
+from typing import Dict, List, Tuple, Any
 from .models import Panel, Group, Snapshot, AuditEntry
-from .config import PANELS_FILE, PANELS_CONFIG_FILE, PANELS_STATE_FILE, AUDIT_FILE
+from .config import PANELS_FILE, PANELS_CONFIG_FILE, PANELS_STATE_FILE, AUDIT_FILE, AUDIT_DB_FILE
 
 
 def _ensure_dirs() -> None:
     os.makedirs(os.path.dirname(PANELS_CONFIG_FILE), exist_ok=True)
     os.makedirs(os.path.dirname(PANELS_STATE_FILE), exist_ok=True)
     os.makedirs(os.path.dirname(AUDIT_FILE), exist_ok=True)
+    # AUDIT_DB_FILE lives in the same directory as AUDIT_FILE so no extra work needed
 
 
 def _migrate_from_legacy_panels_json() -> None:
@@ -145,13 +147,95 @@ def save_snapshot(s: Snapshot) -> None:
     save_state(s.panels)
 
 
+def _ensure_audit_db() -> None:
+    """Create the SQLite database and table for audit logs if they do not exist."""
+    _ensure_dirs()
+    conn = sqlite3.connect(AUDIT_DB_FILE)
+    try:
+        cur = conn.cursor()
+        cur.execute(
+            """
+            CREATE TABLE IF NOT EXISTS audit_log (
+                id INTEGER PRIMARY KEY AUTOINCREMENT,
+                ts REAL NOT NULL,
+                actor TEXT NOT NULL,
+                target_type TEXT NOT NULL,
+                target_id TEXT NOT NULL,
+                level INTEGER NOT NULL,
+                applied_to TEXT NOT NULL,
+                result TEXT NOT NULL
+            )
+            """
+        )
+        conn.commit()
+    finally:
+        conn.close()
+
+
 def append_audit(entry: AuditEntry) -> None:
+    """Append audit entry to JSON file and SQLite database."""
     _ensure_dirs()
     row = entry.model_dump()
     # write one JSON per line for easy tailing
     with open(AUDIT_FILE, "a", encoding="utf-8") as f:
         f.write(json.dumps(row) + "\n")
 
+    # also mirror into SQLite
+    _ensure_audit_db()
+    conn = sqlite3.connect(AUDIT_DB_FILE)
+    try:
+        cur = conn.cursor()
+        cur.execute(
+            """
+            INSERT INTO audit_log (ts, actor, target_type, target_id, level, applied_to, result)
+            VALUES (?, ?, ?, ?, ?, ?, ?)
+            """,
+            (
+                row["ts"],
+                row["actor"],
+                row["target_type"],
+                row["target_id"],
+                row["level"],
+                json.dumps(row["applied_to"]),
+                row["result"],
+            ),
+        )
+        conn.commit()
+    finally:
+        conn.close()
+
+
+def fetch_audit_entries(limit: int = 500, offset: int = 0) -> List[Dict[str, Any]]:
+    """Fetch audit entries from SQLite ordered newest first."""
+    _ensure_audit_db()
+    conn = sqlite3.connect(AUDIT_DB_FILE)
+    try:
+        conn.row_factory = sqlite3.Row
+        cur = conn.cursor()
+        cur.execute(
+            """
+            SELECT ts, actor, target_type, target_id, level, applied_to, result
+            FROM audit_log
+            ORDER BY ts DESC
+            LIMIT ? OFFSET ?
+            """,
+            (limit, offset),
+        )
+        rows = cur.fetchall()
+        result: List[Dict[str, Any]] = []
+        for r in rows:
+            row_dict = dict(r)
+            # applied_to is stored as JSON text
+            try:
+                row_dict["applied_to"] = json.loads(row_dict.get("applied_to") or "[]")
+            except Exception:
+                row_dict["applied_to"] = []
+            result.append(row_dict)
+        return result
+    finally:
+        conn.close()
+
+
 
 def bootstrap_default_if_empty() -> Snapshot:
     """Bootstrap default panels and groups if config doesn't exist."""

svc/data/audit.db

@@ -1,12 +1,14 @@
-import React, { useEffect, useState } from "react";
-import { api, type Panel, type Group } from "./api";
+import React, { useEffect, useState, useCallback } from "react"
+import { api, type Panel, type Group, type AuditLogEntry } from "./api";
 import { mockApi } from "./mockData";
 import RoomGrid from "./components/RoomGrid";
 import RoomGridCompact from "./components/RoomGridCompact";
 import SidePanel from "./components/SidePanel";
 import ActiveControllersBar from "./components/ActiveControllersBar";
 import { controlManager, type ControlSource } from "./utils/controlManager";
 import { useToast } from "./utils/toast";
+import LogsPanel from "./components/LogsPanel";
+
 
 export default function AppHMI() {
     const [health, setHealth] = useState<string>("checking");
@@ -20,6 +22,11 @@ export default function AppHMI() {
     const { showToast } = useToast();
     const [groupId, setGroupId] = useState<string>("");
     const [groupLevel, setGroupLevel] = useState<number>(50);
+    const [logsPanelOpen, setLogsPanelOpen] = useState<boolean>(false);
+    const [auditLogs, setAuditLogs] = useState<AuditLogEntry[]>([]);
+    const [logsLoading, setLogsLoading] = useState<boolean>(false);
+    const [logsError, setLogsError] = useState<string | null>(null);
+
 
     async function refresh() {
         try {
@@ -281,6 +288,26 @@ export default function AppHMI() {
         setBusy(null);
     }
 
+    async function loadAuditLogs() {
+        if (usingMock) {
+            setAuditLogs([]);
+            setLogsError("Logs are not available in mock mode");
+            return;
+        }
+
+        try {
+            setLogsLoading(true);
+            setLogsError(null);
+            const rows = await api.auditLogs(500);
+            setAuditLogs(rows);
+        } catch (e) {
+            setLogsError(`Failed to load logs ${String(e)}`);
+        } finally {
+            setLogsLoading(false);
+        }
+    }
+
+
     return (
         <>
             <ActiveControllersBar
@@ -336,6 +363,19 @@ export default function AppHMI() {
                             {busy === "clear-all" ? "Clearing..." : "Clear All"}
                         </button>
 
+
+                        <button
+                            className="hmi-manage-btn"
+                            onClick={async () => {
+                                setLogsPanelOpen(true);
+                                setSidePanelOpen(false);
+                                await loadAuditLogs();
+                            }}
+                            title="View system logs"
+                        >
+                            Logs
+                        </button>
+
                         <button
                             className="hmi-manage-btn"
                             onClick={() => setSidePanelOpen(true)}
@@ -436,6 +476,16 @@ export default function AppHMI() {
                 onGroupDelete={deleteGroup}
             />
 
+            <LogsPanel
+                isOpen={logsPanelOpen}
+                onClose={() => setLogsPanelOpen(false)}
+                auditLogs={auditLogs}
+                loading={logsLoading}
+                error={logsError}
+                onRefresh={loadAuditLogs}
+                isMock={usingMock}
+            />
+
         </>
     );
 }

web/src/AppHMI.tsx

@@ -12,6 +12,17 @@ export type Group = {
     member_ids: string[];
 };
 
+export type AuditLogEntry = {
+    ts: number
+    actor: string
+    target_type: "panel" | "group"
+    target_id: string
+    level: number
+    applied_to: string[]
+    result: string
+};
+
+
 const API_BASE = (import.meta.env.VITE_API_BASE || "http://127.0.0.1:8000").replace(/\/$/, "");
 
 async function http<T>(path: string, options?: RequestInit): Promise<T> {
@@ -66,5 +77,10 @@ export const api = {
         http<{ ok: boolean; applied_to: string[]; message: string }>("/commands/set-level", {
             method: "POST",
             body: JSON.stringify({ target_type: "group", target_id: groupId, level })
-        })
+        }),
+
+    auditLogs: (limit = 500) =>
+        http<AuditLogEntry[]>(`/logs/audit?limit=${encodeURIComponent(limit)}`)
 };
+
+