import { jsonSuccess } from "@/modules/core/server/api";
import { requirePermission } from "@/modules/core/server/auth";
import { readData } from "@/modules/core/server/store";

export async function GET(): Promise<Response> {
  const auth = await requirePermission("audit:read", {
    action: "audit.list",
    targetType: "auditLog",
  });

  if (!auth.success) {
    return auth.response;
  }

  const data = await readData();
  return jsonSuccess("审计日志已加载", {
    auditLogs: data.auditLogs.slice(0, 100),
  });
}