{% extends "base.html" %}
{% block title %}Audit log — docpipe{% endblock %}

{% block header %}
<header class="hero" style="padding-bottom:1rem;">
  <h1>Audit log</h1>
  <nav style="margin-top:1rem;display:flex;gap:1rem;">
    <a href="/admin">Dashboard</a>
    <a href="/admin/audit">Audit</a>
    <a href="/admin/jobs">Jobs</a>
  </nav>
</header>
{% endblock %}

{% block content %}
{% if not flags.persist_audit_events %}
<section class="card">
  <p>Audit persistence is off. Set <code>DOCPIPE_PERSIST_AUDIT_EVENTS=true</code> to record plugin denials and resolutions.</p>
</section>
{% else %}
<section class="card">
  <table style="width:100%;border-collapse:collapse;font-size:0.9rem;">
    <thead>
      <tr>
        <th align="left">ID</th>
        <th align="left">Event</th>
        <th align="left">Tenant</th>
        <th align="left">Created</th>
      </tr>
    </thead>
    <tbody>
      {% for row in events %}
      <tr>
        <td>{{ row.id }}</td>
        <td>{{ row.event }}</td>
        <td>{{ row.tenant or "—" }}</td>
        <td>{{ row.created_at }}</td>
      </tr>
      {% else %}
      <tr><td colspan="4">No audit events yet.</td></tr>
      {% endfor %}
    </tbody>
  </table>
</section>
{% endif %}
{% endblock %}