feat: 사용자 작업(감사) 로그 자동 기록 + 관리자 조회 화면

- Auditable 트레잇: 모델 insert/update/delete 시 activity_log 자동 기록
  (조회 제외, before/after JSON, 민감필드 마스킹, 사용자/IP)
- 도메인 모델 28개에 적용 (로그성 테이블 제외)
- 관리자 전용 조회: Admin\ActivityLog (기간/작업/대상/사용자 필터 + 상세 변경내역)
- 라우트 admin/access/activity-logs(+상세), 메뉴 '활동 로그' 추가
- 테넌트 분리: 슈퍼=전체, 지자체관리자=소속 지자체만

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

app/Config/Routes.php

@@ -256,6 +256,8 @@ $routes->group('admin', ['filter' => 'adminAuth'], static function ($routes): vo
     $routes->post('users/unlock-login/(:num)', 'Admin\User::unlockLogin/$1');
     $routes->post('users/delete/(:num)', 'Admin\User::delete/$1');
     $routes->get('access/login-history', 'Admin\Access::loginHistory');
+    $routes->get('access/activity-logs', 'Admin\ActivityLog::index');
+    $routes->get('access/activity-logs/(:num)', 'Admin\ActivityLog::show/$1');
     $routes->get('access/approvals', 'Admin\Access::approvals');
     $routes->post('access/approve/(:num)', 'Admin\Access::approve/$1');
     $routes->post('access/reject/(:num)', 'Admin\Access::reject/$1');

app/Controllers/Admin/ActivityLog.php

@@ -0,0 +1,164 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Controllers\Admin;
+
+use App\Controllers\BaseController;
+use App\Models\ActivityLogModel;
+use Config\Roles;
+
+/**
+ * 사용자 작업(감사) 로그 조회 — 생성/수정/삭제 이력.
+ * 관리자 전용(adminAuth). 슈퍼/본부는 전체, 지자체관리자는 소속 지자체 사용자만.
+ */
+class ActivityLog extends BaseController
+{
+    private ActivityLogModel $logModel;
+
+    /** 테이블명 → 한글 라벨 */
+    private const TABLE_LABELS = [
+        'member'                   => '회원',
+        'member_approval_request'  => '회원 승인요청',
+        'company'                  => '업체',
+        'designated_shop'          => '지정판매소',
+        'sales_agency'             => '판매 대행소',
+        'free_recipient'           => '무료 수령처',
+        'manager'                  => '담당자',
+        'local_government'         => '지자체',
+        'code_kind'                => '기본코드 종류',
+        'code_detail'              => '기본코드',
+        'packaging_unit'           => '포장 단위',
+        'packaging_unit_history'   => '포장 단위 이력',
+        'bag_price'                => '단가',
+        'bag_price_history'        => '단가 이력',
+        'bag_order'                => '발주',
+        'bag_order_item'           => '발주 품목',
+        'bag_receiving'            => '입고',
+        'bag_inventory'            => '재고',
+        'bag_sale'                 => '판매',
+        'bag_issue'                => '무료용 불출',
+        'bag_issue_item_code'      => '불출 품목코드',
+        'shop_order'               => '전화 주문',
+        'shop_order_item'          => '전화 주문 품목',
+        'menu'                     => '메뉴',
+        'menu_type'                => '메뉴 유형',
+        'feedback'                 => '사용자 의견',
+        'feedback_file'            => '의견 첨부',
+        'blockchain_ledger'        => '원장',
+    ];
+
+    /** action → 한글 라벨 */
+    private const ACTION_LABELS = [
+        'create' => '등록',
+        'update' => '수정',
+        'delete' => '삭제',
+    ];
+
+    public function __construct()
+    {
+        $this->logModel = model(ActivityLogModel::class);
+    }
+
+    public function index(): string
+    {
+        helper('admin');
+
+        $start  = (string) ($this->request->getGet('start') ?? '');
+        $end    = (string) ($this->request->getGet('end') ?? '');
+        $action = (string) ($this->request->getGet('action') ?? '');
+        $table  = (string) ($this->request->getGet('table') ?? '');
+        $user   = trim((string) ($this->request->getGet('user') ?? ''));
+
+        $builder = $this->logModel
+            ->select('activity_log.*, member.mb_id, member.mb_name, member.mb_lg_idx')
+            ->join('member', 'member.mb_idx = activity_log.al_mb_idx', 'left');
+
+        // 테넌트 분리: 슈퍼/본부는 전체, 그 외 관리자는 소속 지자체 사용자만
+        $level = (int) session()->get('mb_level');
+        if (! Roles::isSuperAdminEquivalent($level)) {
+            $lgIdx = admin_effective_lg_idx();
+            $builder->where('member.mb_lg_idx', $lgIdx);
+        }
+
+        if ($start !== '') {
+            $builder->where('activity_log.al_regdate >=', $start . ' 00:00:00');
+        }
+        if ($end !== '') {
+            $builder->where('activity_log.al_regdate <=', $end . ' 23:59:59');
+        }
+        if (isset(self::ACTION_LABELS[$action])) {
+            $builder->where('activity_log.al_action', $action);
+        }
+        if ($table !== '' && isset(self::TABLE_LABELS[$table])) {
+            $builder->where('activity_log.al_table', $table);
+        }
+        if ($user !== '') {
+            $builder->groupStart()
+                ->like('member.mb_id', $user)
+                ->orLike('member.mb_name', $user)
+                ->groupEnd();
+        }
+
+        $list  = $builder->orderBy('activity_log.al_idx', 'DESC')->paginate(20);
+        $pager = $this->logModel->pager;
+
+        return view('admin/layout', [
+            'title'   => '활동 로그',
+            'content' => view('admin/access/activity_log', [
+                'list'        => $list,
+                'pager'       => $pager,
+                'start'       => $start,
+                'end'         => $end,
+                'action'      => $action,
+                'table'       => $table,
+                'user'        => $user,
+                'tableLabels' => self::TABLE_LABELS,
+                'actionLabels' => self::ACTION_LABELS,
+            ]),
+        ]);
+    }
+
+    public function show(int $id): string
+    {
+        helper('admin');
+        $row = $this->logModel
+            ->select('activity_log.*, member.mb_id, member.mb_name, member.mb_lg_idx')
+            ->join('member', 'member.mb_idx = activity_log.al_mb_idx', 'left')
+            ->where('activity_log.al_idx', $id)
+            ->first();
+
+        if ($row === null) {
+            return view('admin/layout', [
+                'title'   => '활동 로그',
+                'content' => '<div class="p-6 text-gray-500">로그를 찾을 수 없습니다.</div>',
+            ]);
+        }
+
+        // 테넌트 분리 검증
+        $level = (int) session()->get('mb_level');
+        if (! Roles::isSuperAdminEquivalent($level)) {
+            $lgIdx = admin_effective_lg_idx();
+            if ((int) ($row->mb_lg_idx ?? 0) !== (int) $lgIdx) {
+                return view('admin/layout', [
+                    'title'   => '활동 로그',
+                    'content' => '<div class="p-6 text-gray-500">접근 권한이 없습니다.</div>',
+                ]);
+            }
+        }
+
+        $before = $row->al_data_before ? (json_decode((string) $row->al_data_before, true) ?: []) : [];
+        $after  = $row->al_data_after ? (json_decode((string) $row->al_data_after, true) ?: []) : [];
+
+        return view('admin/layout', [
+            'title'   => '활동 로그 상세',
+            'content' => view('admin/access/activity_log_detail', [
+                'row'         => $row,
+                'before'      => $before,
+                'after'       => $after,
+                'tableLabels' => self::TABLE_LABELS,
+                'actionLabels' => self::ACTION_LABELS,
+            ]),
+        ]);
+    }
+}

app/Models/BagInventoryModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class BagInventoryModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'bag_inventory';
     protected $primaryKey    = 'bi_idx';
     protected $returnType    = 'object';

app/Models/BagIssueItemCodeModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class BagIssueItemCodeModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'bag_issue_item_code';
     protected $primaryKey    = 'bic_idx';
     protected $returnType    = 'object';

app/Models/BagIssueModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class BagIssueModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'bag_issue';
     protected $primaryKey    = 'bi2_idx';
     protected $returnType    = 'object';

app/Models/BagOrderItemModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class BagOrderItemModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'bag_order_item';
     protected $primaryKey    = 'boi_idx';
     protected $returnType    = 'object';

app/Models/BagOrderModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class BagOrderModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'bag_order';
     protected $primaryKey    = 'bo_idx';
     protected $returnType    = 'object';

app/Models/BagPriceHistoryModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class BagPriceHistoryModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'bag_price_history';
     protected $primaryKey    = 'bph_idx';
     protected $returnType    = 'object';

app/Models/BagPriceModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class BagPriceModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'bag_price';
     protected $primaryKey    = 'bp_idx';
     protected $returnType    = 'object';

app/Models/BagReceivingModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class BagReceivingModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'bag_receiving';
     protected $primaryKey    = 'br_idx';
     protected $returnType    = 'object';

app/Models/BagSaleModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class BagSaleModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'bag_sale';
     protected $primaryKey    = 'bs_idx';
     protected $returnType    = 'object';

app/Models/BlockchainLedgerModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class BlockchainLedgerModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'blockchain_ledger';
     protected $primaryKey    = 'bl_idx';
     protected $returnType    = 'object';

app/Models/CodeDetailModel.php

@@ -8,6 +8,8 @@ use CodeIgniter\Model;
 
 class CodeDetailModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'code_detail';
     protected $primaryKey    = 'cd_idx';
     protected $returnType    = 'object';

app/Models/CodeKindModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class CodeKindModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'code_kind';
     protected $primaryKey    = 'ck_idx';
     protected $returnType    = 'object';

app/Models/CompanyModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class CompanyModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'company';
     protected $primaryKey    = 'cp_idx';
     protected $returnType    = 'object';

app/Models/DesignatedShopModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class DesignatedShopModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'designated_shop';
     protected $primaryKey    = 'ds_idx';
     protected $returnType    = 'object';

app/Models/FeedbackFileModel.php

@@ -11,6 +11,8 @@ use CodeIgniter\Model;
  */
 class FeedbackFileModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'feedback_file';
     protected $primaryKey    = 'ff_idx';
     protected $returnType    = 'object';

app/Models/FeedbackModel.php

@@ -11,6 +11,8 @@ use CodeIgniter\Model;
  */
 class FeedbackModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'feedback';
     protected $primaryKey    = 'fb_idx';
     protected $returnType    = 'object';

app/Models/FreeRecipientModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class FreeRecipientModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'free_recipient';
     protected $primaryKey    = 'fr_idx';
     protected $returnType    = 'object';

app/Models/LocalGovernmentModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class LocalGovernmentModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'local_government';
     protected $primaryKey    = 'lg_idx';
     protected $returnType    = 'object';

app/Models/ManagerModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class ManagerModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'manager';
     protected $primaryKey    = 'mg_idx';
     protected $returnType    = 'object';

app/Models/MemberApprovalRequestModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class MemberApprovalRequestModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     public const STATUS_PENDING  = 'pending';
     public const STATUS_APPROVED = 'approved';
     public const STATUS_REJECTED = 'rejected';

app/Models/MemberModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class MemberModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table          = 'member';
     protected $primaryKey     = 'mb_idx';
     protected $returnType     = 'object';

app/Models/MenuModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class MenuModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'menu';
     protected $primaryKey    = 'mm_idx';
     protected $returnType    = 'object';

app/Models/MenuTypeModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class MenuTypeModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'menu_type';
     protected $primaryKey    = 'mt_idx';
     protected $returnType    = 'object';

app/Models/PackagingUnitHistoryModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class PackagingUnitHistoryModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'packaging_unit_history';
     protected $primaryKey    = 'puh_idx';
     protected $returnType    = 'object';

app/Models/PackagingUnitModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class PackagingUnitModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'packaging_unit';
     protected $primaryKey    = 'pu_idx';
     protected $returnType    = 'object';

app/Models/SalesAgencyModel.php

@@ -8,6 +8,8 @@ use CodeIgniter\Model;
 
 class SalesAgencyModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'sales_agency';
     protected $primaryKey    = 'sa_idx';
     protected $returnType    = 'object';

app/Models/ShopOrderItemModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class ShopOrderItemModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'shop_order_item';
     protected $primaryKey    = 'soi_idx';
     protected $returnType    = 'object';

app/Models/ShopOrderModel.php

@@ -6,6 +6,8 @@ use CodeIgniter\Model;
 
 class ShopOrderModel extends Model
 {
+    use \App\Models\Traits\Auditable;
+
     protected $table         = 'shop_order';
     protected $primaryKey    = 'so_idx';
     protected $returnType    = 'object';

app/Models/Traits/Auditable.php

@@ -0,0 +1,148 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Models\Traits;
+
+/**
+ * 모델 CRUD(생성/수정/삭제) 자동 감사 로그 트레잇.
+ *
+ * 모델에 `use \App\Models\Traits\Auditable;` 만 추가하면
+ * insert/update/delete 시 activity_log 에 "누가·무엇을·언제" 자동 기록한다.
+ * (조회(select)는 기록하지 않음)
+ *
+ * - 변경 전(before)/후(after) 데이터를 JSON 으로 보관
+ * - 비밀번호·OTP 비밀키·이메일·전화 등 민감 필드는 마스킹
+ * - 기록 실패는 audit_log() 내부에서 흡수되어 본 로직에 영향 없음
+ */
+trait Auditable
+{
+    /** 변경/삭제 전 원본 보관 (PK => row) */
+    protected array $auditBeforeRows = [];
+
+    /**
+     * 모델 이벤트(콜백) 등록.
+     * BaseModel 이 이미 $afterInsert 등 속성을 선언하므로(속성 충돌 방지),
+     * 트레잇에서는 속성 대신 initialize()에서 런타임에 콜백을 덧붙인다.
+     */
+    protected function initialize()
+    {
+        $this->allowCallbacks = true;
+        $this->afterInsert[]  = 'auditAfterInsert';
+        $this->beforeUpdate[] = 'auditBeforeUpdate';
+        $this->afterUpdate[]  = 'auditAfterUpdate';
+        $this->beforeDelete[] = 'auditBeforeDelete';
+        $this->afterDelete[]  = 'auditAfterDelete';
+    }
+
+    /** 마스킹 대상 필드명 */
+    protected array $auditMaskFields = ['mb_passwd', 'mb_totp_secret', 'mb_session_token', 'mb_email', 'mb_phone'];
+
+    private function auditMask(?array $row): ?array
+    {
+        if ($row === null) {
+            return null;
+        }
+        foreach ($this->auditMaskFields as $f) {
+            if (array_key_exists($f, $row) && (string) $row[$f] !== '') {
+                $row[$f] = '***';
+            }
+        }
+
+        return $row;
+    }
+
+    /** find 콜백 재귀를 피하려고 쿼리빌더로 원본 행을 직접 조회 */
+    private function auditFetchRaw(int|string $id): ?array
+    {
+        try {
+            $row = $this->db->table($this->table)
+                ->where($this->primaryKey, $id)
+                ->get()
+                ->getRowArray();
+
+            return $row ?: null;
+        } catch (\Throwable $e) {
+            return null;
+        }
+    }
+
+    public function auditAfterInsert(array $eventData): array
+    {
+        helper('audit');
+        $after = is_array($eventData['data'] ?? null) ? $eventData['data'] : null;
+        audit_log('create', $this->table, (int) ($eventData['id'] ?? 0), null, $this->auditMask($after));
+
+        return $eventData;
+    }
+
+    public function auditBeforeUpdate(array $eventData): array
+    {
+        $this->auditBeforeRows = [];
+        $ids = $eventData['id'] ?? null;
+        if ($ids !== null) {
+            foreach ((array) $ids as $one) {
+                $row = $this->auditFetchRaw($one);
+                if ($row !== null) {
+                    $this->auditBeforeRows[(string) $one] = $row;
+                }
+            }
+        }
+
+        return $eventData;
+    }
+
+    public function auditAfterUpdate(array $eventData): array
+    {
+        helper('audit');
+        $ids     = $eventData['id'] ?? null;
+        $changes = is_array($eventData['data'] ?? null) ? $eventData['data'] : [];
+
+        if ($ids !== null) {
+            foreach ((array) $ids as $one) {
+                $before = $this->auditBeforeRows[(string) $one] ?? null;
+                $after  = $before !== null ? array_merge($before, $changes) : $changes;
+                audit_log('update', $this->table, (int) $one, $this->auditMask($before), $this->auditMask($after));
+            }
+        } else {
+            // 조건(where) 기반 일괄 수정: 대상 PK 미상 → 변경값만 기록
+            audit_log('update', $this->table, 0, null, $this->auditMask($changes));
+        }
+        $this->auditBeforeRows = [];
+
+        return $eventData;
+    }
+
+    public function auditBeforeDelete(array $eventData): array
+    {
+        $this->auditBeforeRows = [];
+        $ids = $eventData['id'] ?? null;
+        if ($ids !== null) {
+            foreach ((array) $ids as $one) {
+                $row = $this->auditFetchRaw($one);
+                if ($row !== null) {
+                    $this->auditBeforeRows[(string) $one] = $row;
+                }
+            }
+        }
+
+        return $eventData;
+    }
+
+    public function auditAfterDelete(array $eventData): array
+    {
+        helper('audit');
+        $ids = $eventData['id'] ?? null;
+        if ($ids !== null) {
+            foreach ((array) $ids as $one) {
+                $before = $this->auditBeforeRows[(string) $one] ?? null;
+                audit_log('delete', $this->table, (int) $one, $this->auditMask($before), null);
+            }
+        } else {
+            audit_log('delete', $this->table, 0, null, null);
+        }
+        $this->auditBeforeRows = [];
+
+        return $eventData;
+    }
+}

app/Views/admin/access/activity_log.php

@@ -0,0 +1,94 @@
+<?php
+declare(strict_types=1);
+/**
+ * @var list<object> $list
+ * @var string $start
+ * @var string $end
+ * @var string $action
+ * @var string $table
+ * @var string $user
+ * @var array<string,string> $tableLabels
+ * @var array<string,string> $actionLabels
+ */
+$actionBadge = static function (string $a): string {
+    $map = [
+        'create' => 'background:#dcfce7;color:#166534;',
+        'update' => 'background:#dbeafe;color:#1e40af;',
+        'delete' => 'background:#fee2e2;color:#991b1b;',
+    ];
+    return $map[$a] ?? 'background:#f3f4f6;color:#374151;';
+};
+?>
+<?= view('components/print_header', ['printTitle' => '활동 로그']) ?>
+
+<section class="border-b border-gray-300 p-2 shrink-0 bg-control-panel no-print">
+  <form method="GET" action="<?= base_url('admin/access/activity-logs') ?>" class="flex flex-wrap items-center gap-2 text-sm">
+    <label class="font-bold text-gray-700">조회기간</label>
+    <input type="date" name="start" class="border border-gray-300 rounded px-2 py-1 text-sm" value="<?= esc($start) ?>"/>
+    <span>~</span>
+    <input type="date" name="end" class="border border-gray-300 rounded px-2 py-1 text-sm" value="<?= esc($end) ?>"/>
+
+    <select name="action" class="border border-gray-300 rounded px-2 py-1 text-sm">
+      <option value="">작업 전체</option>
+      <?php foreach ($actionLabels as $k => $lbl): ?>
+        <option value="<?= esc($k, 'attr') ?>" <?= $action === $k ? 'selected' : '' ?>><?= esc($lbl) ?></option>
+      <?php endforeach; ?>
+    </select>
+
+    <select name="table" class="border border-gray-300 rounded px-2 py-1 text-sm max-w-[12rem]">
+      <option value="">대상 전체</option>
+      <?php foreach ($tableLabels as $k => $lbl): ?>
+        <option value="<?= esc($k, 'attr') ?>" <?= $table === $k ? 'selected' : '' ?>><?= esc($lbl) ?></option>
+      <?php endforeach; ?>
+    </select>
+
+    <input type="text" name="user" placeholder="사용자(아이디/이름)" class="border border-gray-300 rounded px-2 py-1 text-sm" value="<?= esc($user) ?>"/>
+
+    <button type="submit" class="bg-btn-search text-white px-4 py-1.5 rounded-sm text-sm shadow hover:opacity-90 transition border border-transparent">조회</button>
+    <a href="<?= base_url('admin/access/activity-logs') ?>" class="border border-gray-300 text-gray-600 px-3 py-1.5 rounded-sm text-sm hover:bg-gray-50">초기화</a>
+  </form>
+</section>
+
+<div class="border border-gray-300 rounded-lg p-4 overflow-auto mt-2">
+  <table class="w-full data-table text-sm">
+    <thead>
+      <tr>
+        <th class="text-left">일시</th>
+        <th class="text-left">사용자</th>
+        <th class="text-center">작업</th>
+        <th class="text-left">대상</th>
+        <th class="text-center">대상 번호</th>
+        <th class="text-left">IP</th>
+        <th class="text-center no-print">상세</th>
+      </tr>
+    </thead>
+    <tbody>
+      <?php foreach ($list as $row): ?>
+        <?php
+          $act = (string) ($row->al_action ?? '');
+          $tbl = (string) ($row->al_table ?? '');
+          $who = trim((string) ($row->mb_name ?? '') . (($row->mb_id ?? '') !== '' ? ' (' . $row->mb_id . ')' : ''));
+        ?>
+        <tr>
+          <td class="text-left pl-2 whitespace-nowrap"><?= esc((string) ($row->al_regdate ?? '')) ?></td>
+          <td class="text-left pl-2"><?= $who !== '' ? esc($who) : '<span class="text-gray-400">시스템</span>' ?></td>
+          <td class="text-center">
+            <span style="<?= $actionBadge($act) ?>display:inline-block;padding:1px 8px;border-radius:9999px;font-size:11px;font-weight:700;">
+              <?= esc($actionLabels[$act] ?? $act) ?>
+            </span>
+          </td>
+          <td class="text-left pl-2"><?= esc($tableLabels[$tbl] ?? $tbl) ?></td>
+          <td class="text-center"><?= (int) ($row->al_record_id ?? 0) ?: '-' ?></td>
+          <td class="text-left pl-2 text-gray-500"><?= esc((string) ($row->al_ip ?? '')) ?></td>
+          <td class="text-center no-print">
+            <a href="<?= base_url('admin/access/activity-logs/' . (int) $row->al_idx) ?>" class="text-blue-700 hover:underline">보기</a>
+          </td>
+        </tr>
+      <?php endforeach; ?>
+      <?php if ($list === []): ?>
+        <tr><td colspan="7" class="text-center text-gray-400 py-6">조회된 로그가 없습니다.</td></tr>
+      <?php endif; ?>
+    </tbody>
+  </table>
+</div>
+<?php if (isset($pager)): ?><div class="mt-3 no-print"><?= $pager->links() ?></div><?php endif; ?>

app/Views/admin/access/activity_log_detail.php

@@ -0,0 +1,69 @@
+<?php
+declare(strict_types=1);
+/**
+ * @var object $row
+ * @var array<string,mixed> $before
+ * @var array<string,mixed> $after
+ * @var array<string,string> $tableLabels
+ * @var array<string,string> $actionLabels
+ */
+$act = (string) ($row->al_action ?? '');
+$tbl = (string) ($row->al_table ?? '');
+$who = trim((string) ($row->mb_name ?? '') . (($row->mb_id ?? '') !== '' ? ' (' . $row->mb_id . ')' : ''));
+
+// 변경된 키 강조용: before/after 값이 다른 키
+$allKeys = array_values(array_unique(array_merge(array_keys($before), array_keys($after))));
+$fmt = static function ($v): string {
+    if (is_array($v)) {
+        return json_encode($v, JSON_UNESCAPED_UNICODE);
+    }
+    return (string) ($v ?? '');
+};
+?>
+<section class="p-4">
+  <div class="flex items-center justify-between mb-3 no-print">
+    <a href="<?= base_url('admin/access/activity-logs') ?>" class="text-sm text-blue-700 hover:underline">&larr; 목록으로</a>
+    <button onclick="window.print()" class="border border-btn-print-border text-gray-600 px-3 py-1 rounded-sm text-sm hover:bg-gray-50">인쇄</button>
+  </div>
+
+  <table class="w-full data-table text-sm mb-5" style="max-width:680px;">
+    <tbody>
+      <tr><th class="text-left bg-gray-50 w-32">일시</th><td class="text-left pl-2"><?= esc((string) ($row->al_regdate ?? '')) ?></td></tr>
+      <tr><th class="text-left bg-gray-50">사용자</th><td class="text-left pl-2"><?= $who !== '' ? esc($who) : '시스템' ?></td></tr>
+      <tr><th class="text-left bg-gray-50">작업</th><td class="text-left pl-2"><?= esc($actionLabels[$act] ?? $act) ?></td></tr>
+      <tr><th class="text-left bg-gray-50">대상</th><td class="text-left pl-2"><?= esc($tableLabels[$tbl] ?? $tbl) ?> (<?= esc($tbl) ?>) · 번호 <?= (int) ($row->al_record_id ?? 0) ?></td></tr>
+      <tr><th class="text-left bg-gray-50">IP</th><td class="text-left pl-2"><?= esc((string) ($row->al_ip ?? '')) ?></td></tr>
+    </tbody>
+  </table>
+
+  <h3 class="font-bold text-gray-700 mb-2">변경 내역 (전 → 후)</h3>
+  <?php if ($allKeys === []): ?>
+    <p class="text-gray-400 text-sm">상세 데이터가 없습니다.</p>
+  <?php else: ?>
+  <div class="border border-gray-300 rounded-lg overflow-auto">
+    <table class="w-full data-table text-sm">
+      <thead>
+        <tr>
+          <th class="text-left w-40">항목</th>
+          <th class="text-left">변경 전</th>
+          <th class="text-left">변경 후</th>
+        </tr>
+      </thead>
+      <tbody>
+        <?php foreach ($allKeys as $k): ?>
+          <?php
+            $b = array_key_exists($k, $before) ? $fmt($before[$k]) : null;
+            $a = array_key_exists($k, $after) ? $fmt($after[$k]) : null;
+            $changed = ($act === 'update') && ($b !== $a);
+          ?>
+          <tr<?= $changed ? ' style="background:#fffbeb;"' : '' ?>>
+            <td class="text-left pl-2 font-semibold text-gray-700"><?= esc((string) $k) ?></td>
+            <td class="text-left pl-2 <?= $changed ? 'text-red-700' : 'text-gray-500' ?>"><?= $b === null ? '<span class="text-gray-300">—</span>' : esc($b) ?></td>
+            <td class="text-left pl-2 <?= $changed ? 'text-blue-700 font-semibold' : 'text-gray-700' ?>"><?= $a === null ? '<span class="text-gray-300">—</span>' : esc($a) ?></td>
+          </tr>
+        <?php endforeach; ?>
+      </tbody>
+    </table>
+  </div>
+  <?php endif; ?>
+</section>

app/Views/admin/layout.php

@@ -33,7 +33,7 @@ if ($navItems === []) {
     $navItems = [
         ['idx' => 0, 'name' => '대시보드', 'href' => 'admin', 'url' => base_url('admin'), 'children' => [], 'hasChildren' => false],
         ['idx' => 0, 'name' => '회원·접근', 'href' => '', 'url' => '', 'hasChildren' => true, 'children' => [
-            $mk('회원 관리', 'admin/users'), $mk('로그인 이력', 'admin/access/login-history'), $mk('승인 대기', 'admin/access/approvals'),
+            $mk('회원 관리', 'admin/users'), $mk('로그인 이력', 'admin/access/login-history'), $mk('활동 로그', 'admin/access/activity-logs'), $mk('승인 대기', 'admin/access/approvals'),
         ]],
         ['idx' => 0, 'name' => '시스템', 'href' => '', 'url' => '', 'hasChildren' => true, 'children' => [
             $mk('역할', 'admin/roles'), $mk('메뉴', 'admin/menus'),

writable/database/activity_log_menu_add.sql

@@ -0,0 +1,11 @@
+-- 활동 로그 조회 메뉴 추가 (각 지자체의 '로그인 이력' 메뉴 옆에 삽입, 멱등)
+INSERT INTO `menu` (`mt_idx`, `lg_idx`, `mm_name`, `mm_link`, `mm_pidx`, `mm_dep`, `mm_num`, `mm_cnode`, `mm_level`, `mm_is_view`)
+SELECT lh.`mt_idx`, lh.`lg_idx`, '활동 로그', 'admin/access/activity-logs',
+       lh.`mm_pidx`, lh.`mm_dep`, lh.`mm_num` + 1, lh.`mm_cnode`, lh.`mm_level`, lh.`mm_is_view`
+FROM `menu` lh
+WHERE lh.`mm_link` = 'admin/access/login-history'
+  AND NOT EXISTS (
+      SELECT 1 FROM `menu` x
+      WHERE x.`lg_idx` = lh.`lg_idx`
+        AND x.`mm_link` = 'admin/access/activity-logs'
+  );