The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated (UTC)
docs	Skipped		Feb 20, 2026 0:30am

Greptile Summary

This PR fixes a gap in audit logging where JWT and API key authentication paths were leaving actorName and actorEmail empty. The solution adds lazy resolution by looking up user details from the database when both fields are undefined.

Key changes:

• Refactored recordAudit to extract async logic into insertAuditLog helper function
• Added user table lookup when actorName === undefined && actorEmail === undefined
• Lookup is fail-safe with try-catch to prevent blocking audit logs on DB errors
• Added comprehensive test coverage (6 new test cases) for all resolution scenarios

Issues found:

• The AND condition on line 208 requires both fields to be undefined for lookup. If one field is undefined and the other is set (even to null), no lookup occurs. Consider using OR logic instead.

Confidence Score: 4/5

• Safe to merge with one logic issue to address
• The implementation is well-tested and fail-safe, but the AND condition in the lookup logic could miss some edge cases where only one field is undefined
• apps/sim/lib/audit/log.ts (line 208) - review the lookup condition logic

Important Files Changed

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[recordAudit called] --> B[insertAuditLog async]
    B --> C{actorName === undefined<br/>AND<br/>actorEmail === undefined?}
    C -->|Yes| D[Query user table<br/>by actorId]
    C -->|No| H[Use provided values]
    D --> E{Query succeeds?}
    E -->|Yes, user found| F[Set actorName & actorEmail<br/>from DB row]
    E -->|Yes, not found| G[Set both to undefined]
    E -->|No, error| G
    F --> I[Insert audit log]
    G --> I
    H --> I
    I --> J{Insert succeeds?}
    J -->|Yes| K[Log debug success]
    J -->|No| L[Log error, never throw]

_{Last reviewed commit: f6b626a}

@greptile

@cursor review

bugbot run

@cursor review

bugbot run

@greptile

@cursor review

@greptile

@greptile

bugbot run