Add log export for audit logs and SCIM events

Route audit-log and SCIM-event exports through export_jobs with typed
arguments, an iam BuildAndUploadExport/SendExportEmail implementation,
and a concurrent export-job worker with stale recovery. Stream JSONL via
page.WalkAll into S3, and expose the request flow on console, connect,
MCP, and CLI.

Co-authored-by: Bryan Frimin <bryan@getprobo.com>
Signed-off-by: Sacha Al Himdani <sacha@probo.com>
This commit is contained in:
Sacha Al Himdani
2026-07-29 16:12:23 +02:00
parent b2e2d15582
commit cd6c46212a
45 changed files with 2340 additions and 153 deletions

37
go.mod
View File

@@ -7,11 +7,12 @@ require (
fyne.io/systray v1.12.2
github.com/99designs/gqlgen v0.17.94
github.com/anthropics/anthropic-sdk-go v1.58.1
github.com/aws/aws-sdk-go-v2 v1.43.0
github.com/aws/aws-sdk-go-v2/config v1.32.31
github.com/aws/aws-sdk-go-v2/credentials v1.19.30
github.com/aws/aws-sdk-go-v2 v1.43.1
github.com/aws/aws-sdk-go-v2/config v1.32.32
github.com/aws/aws-sdk-go-v2/credentials v1.19.31
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager v0.3.6
github.com/aws/aws-sdk-go-v2/service/bedrockruntime v1.56.0
github.com/aws/aws-sdk-go-v2/service/s3 v1.106.0
github.com/aws/aws-sdk-go-v2/service/s3 v1.106.1
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.44.0
github.com/aws/aws-sdk-go-v2/service/ssm v1.73.0
github.com/brianvoe/gofakeit/v7 v7.15.0
@@ -60,11 +61,11 @@ require (
github.com/ProtonMail/go-crypto v1.4.1 // indirect
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
github.com/atotto/clipboard v0.1.4 // indirect
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.31 // indirect
github.com/aws/aws-sdk-go-v2/service/signin v1.5.0 // indirect
github.com/aws/aws-sdk-go-v2/service/sso v1.33.0 // indirect
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.0 // indirect
github.com/aws/aws-sdk-go-v2/service/sts v1.45.0 // indirect
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.32 // indirect
github.com/aws/aws-sdk-go-v2/service/signin v1.5.1 // indirect
github.com/aws/aws-sdk-go-v2/service/sso v1.33.1 // indirect
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.1 // indirect
github.com/aws/aws-sdk-go-v2/service/sts v1.45.1 // indirect
github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
github.com/aymerick/douceur v0.2.0 // indirect
github.com/bahlo/generic-list-go v0.2.0 // indirect
@@ -164,15 +165,15 @@ require (
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
cloud.google.com/go/compute/metadata v0.9.0 // indirect
github.com/agnivade/levenshtein v1.2.1 // indirect
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.14 // indirect
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.31 // indirect
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.31 // indirect
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.32 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.13 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.24 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.31 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.32 // indirect
github.com/aws/smithy-go v1.27.4
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.15 // indirect
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.32 // indirect
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.32 // indirect
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.33 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.14 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.9.25 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.32 // indirect
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.19.33 // indirect
github.com/aws/smithy-go v1.27.5
github.com/beevik/etree v1.7.0 // indirect
github.com/beorn7/perks v1.0.1 // indirect
github.com/bitfield/gotestdox v0.2.2 // indirect