Publish curated Unraid-AppOps-Gateway source from 034c9f844d2455850ba37b31379b7edaa786583e

backend/app/services/audit_logger.py

@@ -31,6 +31,12 @@ def log_event(
     post_checks: dict[str, Any] | None = None,
     redacted_metadata: dict[str, Any] | None = None,
 ) -> AuditEvent:
+    from .user_access import actor_identity
+    user_identity = actor_identity.get()
+    if user_identity and identity in {"manual", "voice", "automation", "system"}:
+        # Keep the request channel separately from the authenticated actor.
+        redacted_metadata = {**(redacted_metadata or {}), "requestSource": identity}
+    identity = user_identity or identity
     event = AuditEvent(
         id=f'audit-{uuid.uuid4().hex[:12]}',
         timestamp=utc_now(),