stacklok / toolhive / 20257424148

50%

Build Type

push

github

Committed by web-flow

Commit Message

Add audit logging for composite workflow execution (#3011)

* Add audit logging for composite workflow execution

Implements audit logging for vMCP composite workflow operations to track
workflow lifecycle events for security, compliance, and debugging.

Changes:
  - Add 8 new workflow-specific audit event types (started, completed,
    failed, timed out, step started/completed/failed/skipped)
  - Implement WorkflowAuditor with methods for logging workflow and step
    lifecycle events
  - Integrate auditor into workflow engine execution path
  - Extract user identity from context for audit subjects
  - Update vMCP server to initialize workflow auditor from config
  - Add workflow event types to audit config validation

Related-to: #2850

* changes from review

* reduce pr size

* changes from review

* changes from review

* validate that logs are json

---------

Co-authored-by: taskbot <taskbot@users.noreply.github.com>

Run Details

384 of 407 new or added lines in 5 files covered. (94.35%)

24 existing lines in 3 files now uncovered.

27868 of 55524 relevant lines covered (50.19%)

56.66 hits per line