fix(security): add audit logging for AI SQL queries

- Log all SQL queries before execution (info level)
- Log blocked queries with reason (warning level)
- Log execution errors with query context (error level)
- All logs truncated to 500 chars for safety

Fixes #8

Author: DavidLambauer

Model/Assistant/Tool/ExecuteSqlTool.php

@@ -5,6 +5,7 @@
 namespace RunAsRoot\TypeSense\Model\Assistant\Tool;
 
 use Magento\Framework\App\ResourceConnection;
+use Psr\Log\LoggerInterface;
 
 class ExecuteSqlTool implements ToolInterface
 {
@@ -13,6 +14,7 @@ class ExecuteSqlTool implements ToolInterface
     public function __construct(
         private readonly ResourceConnection $resource,
         private readonly SqlSandbox $sandbox,
+        private readonly LoggerInterface $logger,
     ) {
     }
 
@@ -48,9 +50,15 @@ public function execute(array $arguments): string
             return json_encode(['error' => 'Query cannot be empty.']);
         }
 
+        $this->logger->info('AI Assistant SQL query', ['query' => mb_substr($query, 0, 500)]);
+
         try {
             $this->sandbox->validate($query);
         } catch (\InvalidArgumentException $e) {
+            $this->logger->warning('AI Assistant blocked SQL query', [
+                'query' => mb_substr($query, 0, 500),
+                'reason' => $e->getMessage(),
+            ]);
             return json_encode(['error' => $e->getMessage()]);
         }
 
@@ -73,6 +81,10 @@ public function execute(array $arguments): string
                 'count' => count($rows),
             ]);
         } catch (\Exception $e) {
+            $this->logger->error('AI Assistant SQL execution error', [
+                'query' => mb_substr($query, 0, 500),
+                'error' => $e->getMessage(),
+            ]);
             return json_encode(['error' => 'Query execution failed. Please check your SQL syntax and try again.']);
         }
     }

Test/Unit/Model/Assistant/Tool/ExecuteSqlToolTest.php

@@ -7,6 +7,7 @@
 use Magento\Framework\App\ResourceConnection;
 use PHPUnit\Framework\MockObject\MockObject;
 use PHPUnit\Framework\TestCase;
+use Psr\Log\LoggerInterface;
 use RunAsRoot\TypeSense\Model\Assistant\Tool\ExecuteSqlTool;
 use RunAsRoot\TypeSense\Model\Assistant\Tool\SqlSandbox;
 
@@ -26,6 +27,7 @@ protected function setUp(): void
         $this->sut = new ExecuteSqlTool(
             $this->resource,
             $this->sandbox,
+            $this->createMock(LoggerInterface::class),
         );
     }