f89e074dd1
Governed substrate for autonomous agents: scoped identity (passports), audited actions, MCP workspace. Infra IPs and secrets redacted for public release.
75 lines
2.4 KiB
JavaScript
75 lines
2.4 KiB
JavaScript
/**
|
|
* Migration 025: AI Audit Log Table
|
|
* ADR-071: Security Hardening — Task 7
|
|
*
|
|
* Creates ai_audit_log table for tracking AI agent interactions
|
|
* Used for security auditing, threat detection, and compliance
|
|
*/
|
|
|
|
import { dbRun, isPostgres } from '../connection.js';
|
|
import { logger } from '../../utils/logger.js';
|
|
|
|
export async function runMigration() {
|
|
logger.info('Running Migration 025: AI Audit Log Table...');
|
|
|
|
if (isPostgres()) {
|
|
// PostgreSQL version
|
|
await dbRun(`
|
|
CREATE TABLE IF NOT EXISTS ai_audit_log (
|
|
id SERIAL PRIMARY KEY,
|
|
timestamp TIMESTAMPTZ DEFAULT NOW(),
|
|
user_id INTEGER REFERENCES users(id),
|
|
agent_id INTEGER,
|
|
agent_name VARCHAR(255),
|
|
conversation_id INTEGER,
|
|
message_type VARCHAR(50),
|
|
content_hash VARCHAR(64),
|
|
token_count INTEGER,
|
|
threat_detected INTEGER DEFAULT 0,
|
|
threat_type VARCHAR(100),
|
|
ip_address VARCHAR(45),
|
|
user_agent TEXT,
|
|
metadata JSONB
|
|
)
|
|
`);
|
|
} else {
|
|
// SQLite version
|
|
await dbRun(`
|
|
CREATE TABLE IF NOT EXISTS ai_audit_log (
|
|
id INTEGER PRIMARY KEY AUTOINCREMENT,
|
|
timestamp DATETIME DEFAULT CURRENT_TIMESTAMP,
|
|
user_id INTEGER REFERENCES users(id),
|
|
agent_id INTEGER,
|
|
agent_name TEXT,
|
|
conversation_id INTEGER,
|
|
message_type TEXT,
|
|
content_hash TEXT,
|
|
token_count INTEGER,
|
|
threat_detected INTEGER DEFAULT 0,
|
|
threat_type TEXT,
|
|
ip_address TEXT,
|
|
user_agent TEXT,
|
|
metadata TEXT
|
|
)
|
|
`);
|
|
}
|
|
logger.info(' Created table: ai_audit_log');
|
|
|
|
// Create indexes for performance
|
|
await dbRun('CREATE INDEX IF NOT EXISTS idx_ai_audit_user ON ai_audit_log(user_id)');
|
|
await dbRun('CREATE INDEX IF NOT EXISTS idx_ai_audit_agent ON ai_audit_log(agent_id)');
|
|
await dbRun('CREATE INDEX IF NOT EXISTS idx_ai_audit_timestamp ON ai_audit_log(timestamp)');
|
|
|
|
if (isPostgres()) {
|
|
// Partial index for threats (PostgreSQL)
|
|
await dbRun('CREATE INDEX IF NOT EXISTS idx_ai_audit_threat ON ai_audit_log(threat_detected) WHERE threat_detected = 1');
|
|
} else {
|
|
// Regular index for SQLite
|
|
await dbRun('CREATE INDEX IF NOT EXISTS idx_ai_audit_threat ON ai_audit_log(threat_detected)');
|
|
}
|
|
logger.info(' Created indexes');
|
|
|
|
logger.info('Migration 025 completed successfully!');
|
|
}
|
|
|
|
export default { runMigration };
|