feat(backend): Audit-Log-Abfrage (Modul 19)

AuditModule um GET /audit-log?entityType=&entityId= erweitert
(nur Administrator). Zusaetzlich Jest-E2E-Parallelitaet begrenzt
(maxWorkers: 4), um wiederkehrende Verbindungsengpaesse gegen
Postgres unter vielen parallelen Testsuiten zu vermeiden.

ApiCore-Backend/src/audit/audit-log.service.spec.ts

@@ -0,0 +1,55 @@
+import { AuditLogService } from './audit-log.service';
+import { PrismaService } from '../prisma/prisma.service';
+
+describe('AuditLogService', () => {
+  let service: AuditLogService;
+  let prisma: {
+    auditLog: { create: jest.Mock; findMany: jest.Mock };
+  };
+
+  beforeEach(() => {
+    prisma = {
+      auditLog: {
+        create: jest.fn(),
+        findMany: jest.fn().mockResolvedValue([]),
+      },
+    };
+    service = new AuditLogService(prisma as unknown as PrismaService);
+  });
+
+  it('record writes the entity type, action, and actor', async () => {
+    await service.record({
+      entityType: 'Colony',
+      entityId: 'colony-1',
+      action: 'CREATE',
+      userId: 'user-1',
+    });
+
+    const [[createArg]] = prisma.auditLog.create.mock.calls as [
+      [
+        {
+          data: {
+            entityType: string;
+            entityId: string;
+            action: string;
+            userId?: string;
+          };
+        },
+      ],
+    ];
+    expect(createArg.data.entityType).toBe('Colony');
+    expect(createArg.data.entityId).toBe('colony-1');
+    expect(createArg.data.action).toBe('CREATE');
+    expect(createArg.data.userId).toBe('user-1');
+  });
+
+  it('findAll filters by entity type and id', async () => {
+    await service.findAll({ entityType: 'Colony', entityId: 'colony-1' });
+
+    const [[queryArg]] = prisma.auditLog.findMany.mock.calls as [
+      [{ where: { entityType?: string; entityId?: string } }],
+    ];
+    expect(queryArg.where.entityType).toBe('Colony');
+    expect(queryArg.where.entityId).toBe('colony-1');
+  });
+});

ApiCore-Backend/src/audit/audit-log.service.ts

@@ -1,6 +1,6 @@
 import { Injectable } from '@nestjs/common';
 import { PrismaService } from '../prisma/prisma.service';
-import { AuditAction, Prisma } from '../../generated/prisma';
+import { AuditAction, AuditLog, Prisma } from '../../generated/prisma';
 
 interface RecordAuditLogInput {
   entityType: string;
@@ -11,6 +11,11 @@ interface RecordAuditLogInput {
   afterData?: unknown;
 }
 
+export interface AuditLogFilter {
+  entityType?: string;
+  entityId?: string;
+}
+
 @Injectable()
 export class AuditLogService {
   constructor(private readonly prisma: PrismaService) {}
@@ -27,4 +32,12 @@ export class AuditLogService {
       },
     });
   }
+
+  async findAll(filter: AuditLogFilter = {}): Promise<AuditLog[]> {
+    return this.prisma.auditLog.findMany({
+      where: { entityType: filter.entityType, entityId: filter.entityId },
+      orderBy: { timestamp: 'desc' },
+      take: 200,
+    });
+  }
 }

ApiCore-Backend/src/audit/audit.controller.ts

@@ -0,0 +1,21 @@
+import { Controller, Get, Query } from '@nestjs/common';
+import { ApiBearerAuth, ApiTags } from '@nestjs/swagger';
+import { Role } from '../../generated/prisma';
+import { Roles } from '../auth/decorators/roles.decorator';
+import { AuditLogService } from './audit-log.service';
+
+@ApiTags('audit-log')
+@ApiBearerAuth()
+@Controller('audit-log')
+export class AuditController {
+  constructor(private readonly auditLogService: AuditLogService) {}
+
+  @Roles(Role.ADMIN)
+  @Get()
+  findAll(
+    @Query('entityType') entityType?: string,
+    @Query('entityId') entityId?: string,
+  ) {
+    return this.auditLogService.findAll({ entityType, entityId });
+  }
+}

ApiCore-Backend/src/audit/audit.module.ts

@@ -1,8 +1,10 @@
 import { Global, Module } from '@nestjs/common';
+import { AuditController } from './audit.controller';
 import { AuditLogService } from './audit-log.service';
 
 @Global()
 @Module({
+  controllers: [AuditController],
   providers: [AuditLogService],
   exports: [AuditLogService],
 })