Keep an audit log of monday.com approvals in Sheets

from google.oauth2.credentials import Credentials
from googleapiclient.discovery import build
from clickruntime import on_event, credentials, http, notify

SHEET_ID = "your-spreadsheet-id"

def monday(query, **variables):
    resp = http.post("https://api.monday.com/v2", json={"query": query, "variables": variables},
                     headers={"Authorization": credentials.secret("MONDAY_API_TOKEN"), "API-Version": "2024-10"})
    resp.raise_for_status()
    return resp.json()["data"]

def sheets():
    return build("sheets", "v4", credentials=Credentials(credentials.connection("google", "work")), cache_discovery=False).spreadsheets().values()

@on_event
def handle(event):
    body = event.json or {}
    if "challenge" in body:
        return {"challenge": body["challenge"]}
    e = body.get("event") or {}
    new = ((e.get("value") or {}).get("label") or {}).get("text", "")
    old = ((e.get("previousValue") or {}).get("label") or {}).get("text", "")
    who = monday("query ($u: [ID!]) { users(ids: $u) { name } }", u=[e.get("userId")])["users"]
    row = [event.received_at, e.get("pulseName", ""), old, new, who[0]["name"] if who else str(e.get("userId"))]
    sheets().append(spreadsheetId=SHEET_ID, range="Audit!A:E", valueInputOption="RAW", body={"values": [row]}).execute()
    if new == "Rejected":
        notify.slack(f"❌ Rejected: {row[1]} by {row[4]}", channel="#finance")
    return {"logged": True}