feat(diagnostics): correlate staff operations errors and audit records

src/lib/services/audit.ts

@@ -1,5 +1,6 @@
 import { and, count, desc, eq, gte, inArray, like, lt, or } from "drizzle-orm";
 import { AdminAuditLog, db, User } from "@/lib/db";
+import { getOperationContext } from "@/lib/foundation/request-context";
 import { readAuditChanges } from "./audit-diff";
 import { type AuditFilters, normalizeAuditFilters } from "./audit-filters";
 
@@ -60,6 +61,7 @@ export async function logAudit(entry: AuditEntry): Promise<void> {
 
 	await db.insert(AdminAuditLog).values({
 		userId: entry.userId,
+		details: JSON.stringify(getOperationContext()),
 		action: entry.action,
 		target: entry.target,
 		targetId: entry.targetId,
@@ -79,6 +81,7 @@ export async function getAuditLogs(options: AuditFilters = {}) {
 			? or(
 					like(AdminAuditLog.action, `%${search}%`),
 					like(AdminAuditLog.target, `%${search}%`),
+					like(AdminAuditLog.details, `%${search}%`),
 				)
 			: undefined,
 		action ? eq(AdminAuditLog.action, action) : undefined,
@@ -105,6 +108,7 @@ export async function getAuditLogs(options: AuditFilters = {}) {
 				target: AdminAuditLog.target,
 				targetId: AdminAuditLog.targetId,
 				diff: AdminAuditLog.diff,
+				operationDetails: AdminAuditLog.details,
 				before: AdminAuditLog.before,
 				after: AdminAuditLog.after,
 				createdAt: AdminAuditLog.createdAt,
@@ -131,8 +135,19 @@ export async function getAuditLogs(options: AuditFilters = {}) {
 
 	const enrichedRows = rows.map((r) => {
 		const details = readAuditChanges(r.diff, r.before, r.after);
+		let operationId: string | null = null;
+		try {
+			const meta = JSON.parse(r.operationDetails ?? "{}");
+			if (
+				typeof meta.operationId === "string" &&
+				/^[a-zA-Z0-9-]{1,100}$/.test(meta.operationId)
+			)
+				operationId = meta.operationId;
+		} catch {}
+		const { operationDetails: _privateDetails, ...safeRow } = r;
 		return {
-			...r,
+			...safeRow,
+			operationId,
 			// Only sanitized changes may cross the server/client boundary.
 			before: null,
 			after: null,