Tenant activity log with facets and pagination

go.mod

@@ -1,6 +1,6 @@
 module github.com/nais/api
 
-go 1.26.3
+go 1.26.4
 
 tool (
 	github.com/99designs/gqlgen
@@ -406,7 +406,7 @@ require (
 	github.com/zeebo/xxh3 v1.1.0 // indirect
 	github.com/zitadel/logging v0.6.1 // indirect
 	github.com/zitadel/schema v1.3.0 // indirect
-	go.etcd.io/bbolt v1.4.3 // indirect
+	go.etcd.io/bbolt v1.5.0 // indirect
 	go.etcd.io/etcd/api/v3 v3.6.7 // indirect
 	go.etcd.io/etcd/client/pkg/v3 v3.6.7 // indirect
 	go.etcd.io/etcd/client/v3 v3.6.7 // indirect

go.sum

@@ -1119,8 +1119,8 @@ github.com/zitadel/zitadel-go/v3 v3.4.3 h1:Ph+5wkXmxOpykCBjiUSjbhXidbDGgkeZF2/B9
 github.com/zitadel/zitadel-go/v3 v3.4.3/go.mod h1:hylnXtN3ARxTDRO7OzgQTyRyGXFQ8gAIwTC3NAniRds=
 go.einride.tech/aip v0.79.0 h1:19zdPlZzlUvxOA8syAFw4LkdJdXepzyTl6gt9XEeqdU=
 go.einride.tech/aip v0.79.0/go.mod h1:E8+wdTApA70odnpFzJgsGogHozC2JCIhFJBKPr8bVig=
-go.etcd.io/bbolt v1.4.3 h1:dEadXpI6G79deX5prL3QRNP6JB8UxVkqo4UPnHaNXJo=
-go.etcd.io/bbolt v1.4.3/go.mod h1:tKQlpPaYCVFctUIgFKFnAlvbmB3tpy1vkTnDWohtc0E=
+go.etcd.io/bbolt v1.5.0 h1:S7GAl7Fxv12yohbwFfIbQCGDWbQbtDGPET4P/bD4lxU=
+go.etcd.io/bbolt v1.5.0/go.mod h1:mkltfYE5aUHQxUct9N9V+Kp7aSjFqjgrhcXIS70Lrdk=
 go.etcd.io/etcd/api/v3 v3.6.7 h1:7BNJ2gQmc3DNM+9cRkv7KkGQDayElg8x3X+tFDYS+E0=
 go.etcd.io/etcd/api/v3 v3.6.7/go.mod h1:xJ81TLj9hxrYYEDmXTeKURMeY3qEDN24hqe+q7KhbnI=
 go.etcd.io/etcd/client/pkg/v3 v3.6.7 h1:vvzgyozz46q+TyeGBuFzVuI53/yd133CHceNb/AhBVs=

integration_tests/serviceaccounts_queries.lua

@@ -437,7 +437,7 @@ Test.gql("Create service account with non-existent team slug", function(t)
 		errors = {
 			{
 				locations = NotNull(),
-				message = Contains("database encountered an error"),
+				message = Contains("The specified team was not found."),
 				path = {
 					"createServiceAccount",
 				},

integration_tests/tenant_activitylog.lua

@@ -0,0 +1,152 @@
+local admin = User.new()
+admin:admin(true)
+local teamOne = Team.new("slug-1", "purpose", "#channel")
+local teamTwo = Team.new("slug-2", "purpose", "#channel")
+
+Test.gql("Create repository event for team one", function(t)
+	t.addHeader("x-user-email", admin:email())
+
+	t.query [[
+		mutation {
+			addRepositoryToTeam(input: {teamSlug: "slug-1", repositoryName: "nais/api-team-one"}) {
+				repository {
+					name
+				}
+			}
+		}
+	]]
+
+	t.check {
+		data = {
+			addRepositoryToTeam = {
+				repository = {
+					name = "nais/api-team-one",
+				},
+			},
+		},
+	}
+end)
+
+Test.gql("Create repository event for team two", function(t)
+	t.addHeader("x-user-email", admin:email())
+
+	t.query [[
+		mutation {
+			addRepositoryToTeam(input: {teamSlug: "slug-2", repositoryName: "nais/api-team-two"}) {
+				repository {
+					name
+				}
+			}
+		}
+	]]
+
+	t.check {
+		data = {
+			addRepositoryToTeam = {
+				repository = {
+					name = "nais/api-team-two",
+				},
+			},
+		},
+	}
+end)
+
+Test.gql("Tenant activity log returns facets and pagination metadata", function(t)
+	t.addHeader("x-user-email", admin:email())
+
+	t.query [[
+		query {
+			activityLog(first: 10, filter: { activityTypes: [REPOSITORY_ADDED] }) {
+				nodes {
+					resourceName
+					teamSlug
+				}
+				pageInfo {
+					totalCount
+					hasNextPage
+				}
+				facets {
+					activityTypes {
+						activityType
+						count
+					}
+					resourceTypes {
+						resourceType
+						count
+					}
+					environments {
+						value
+						count
+					}
+				}
+			}
+		}
+	]]
+
+	t.check {
+		data = {
+			activityLog = {
+				nodes = {
+					{
+						resourceName = "nais/api-team-two",
+						teamSlug = "slug-2",
+					},
+					{
+						resourceName = "nais/api-team-one",
+						teamSlug = "slug-1",
+					},
+				},
+				pageInfo = {
+					totalCount = 2,
+					hasNextPage = false,
+				},
+				facets = {
+					activityTypes = {
+						{
+							activityType = "REPOSITORY_ADDED",
+							count = 2,
+						},
+					},
+					resourceTypes = {
+						{
+							resourceType = "REPOSITORY",
+							count = 2,
+						},
+					},
+					environments = {},
+				},
+			},
+		},
+	}
+end)
+
+Test.gql("Tenant activity log supports time filtering", function(t)
+	t.addHeader("x-user-email", admin:email())
+
+	t.query [[
+		query {
+			activityLog(
+				first: 10
+				filter: { activityTypes: [REPOSITORY_ADDED], from: "9999-01-01T00:00:00Z" }
+			) {
+				nodes {
+					resourceName
+				}
+				pageInfo {
+					totalCount
+				}
+			}
+		}
+	]]
+
+	t.check {
+		data = {
+			activityLog = {
+				nodes = {},
+				pageInfo = {
+					totalCount = 0,
+				},
+			},
+		},
+	}
+end)