bvandeusen
88ab5b917e
Renames the Python package directory, CLI command, env var prefix, docker-compose service/container/image, Postgres role/db, and all visible branding. Marketing form is "Fabled Steward". Clean break from the previous rebrand: drops the fabledscryer→roundtable import shim in __init__.py and the FABLEDSCRYER_* env var fallback in config.py and migrations/env.py. Env vars are now STEWARD_* only. Heads-up for existing deployments: - Postgres user/db renamed fabledscryer → steward in docker-compose.yml. Existing volumes need the role/db renamed inside Postgres, or override POSTGRES_USER/POSTGRES_DB to keep the old names. - Host-agent systemd unit is now steward-agent.service. Existing agents keep running under the old name; reinstall to switch. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
41 lines
1.3 KiB
Python
41 lines
1.3 KiB
Python
"""steward/core/audit.py
|
|
|
|
Helpers for writing audit log entries. Each call opens its own DB
|
|
session so audit events are committed independently of the calling
|
|
route's transaction (audit is only written after the main action
|
|
succeeds, by calling this after the main `async with db.begin()` block).
|
|
"""
|
|
from __future__ import annotations
|
|
import json
|
|
import logging
|
|
from datetime import datetime, timezone
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
|
|
async def log_audit(
|
|
app,
|
|
user_id: str | None,
|
|
username: str,
|
|
action: str,
|
|
entity_type: str | None = None,
|
|
entity_id: str | None = None,
|
|
detail: dict | None = None,
|
|
) -> None:
|
|
"""Write one audit event. Never raises — failures are logged and swallowed."""
|
|
from steward.models.audit import AuditEvent
|
|
try:
|
|
async with app.db_sessionmaker() as db:
|
|
async with db.begin():
|
|
db.add(AuditEvent(
|
|
user_id=user_id,
|
|
username=username or "unknown",
|
|
action=action,
|
|
entity_type=entity_type,
|
|
entity_id=entity_id,
|
|
detail_json=json.dumps(detail) if detail else None,
|
|
timestamp=datetime.now(timezone.utc),
|
|
))
|
|
except Exception:
|
|
logger.exception("Failed to write audit event action=%r", action)
|