feat: add full-stack API persistence and RBAC

app/api/audit-logs/route.ts

@@ -0,0 +1,20 @@
+import { jsonSuccess } from "@/modules/core/server/api";
+import { requirePermission } from "@/modules/core/server/auth";
+import { readData } from "@/modules/core/server/store";
+
+export async function GET(): Promise<Response> {
+  const auth = await requirePermission("audit:read", {
+    action: "audit.list",
+    targetType: "auditLog",
+  });
+
+  if (!auth.success) {
+    return auth.response;
+  }
+
+  const data = await readData();
+  return jsonSuccess("审计日志已加载", {
+    auditLogs: data.auditLogs.slice(0, 100),
+  });
+}
+