[{"data":1,"prerenderedAt":2378},["ShallowReactive",2],{"navigation_docs":3,"-use-cases-audit-recipes":510,"-use-cases-audit-recipes-surround":2373},[4,30,80,123,293,425,480],{"title":5,"path":6,"stem":7,"children":8,"page":29},"Start","\u002Fstart","1.start",[9,14,19,24],{"title":10,"path":11,"stem":12,"icon":13},"Introduction","\u002Fstart\u002Fintroduction","1.start\u002F1.introduction","i-lucide-info",{"title":15,"path":16,"stem":17,"icon":18},"Why start with evlog","\u002Fstart\u002Fwhy-evlog","1.start\u002F2.why-evlog","i-lucide-rocket",{"title":20,"path":21,"stem":22,"icon":23},"Installation","\u002Fstart\u002Finstallation","1.start\u002F3.installation","i-lucide-download",{"title":25,"path":26,"stem":27,"icon":28},"Quick Start","\u002Fstart\u002Fquick-start","1.start\u002F4.quick-start","i-lucide-zap",false,{"title":31,"path":32,"stem":33,"children":34,"page":29},"Learn","\u002Flearn","2.learn",[35,40,45,50,55,60,65,70,75],{"title":36,"path":37,"stem":38,"icon":39},"Overview","\u002Flearn\u002Foverview","2.learn\u002F0.overview","i-lucide-list",{"title":41,"path":42,"stem":43,"icon":44},"Simple Logging","\u002Flearn\u002Fsimple-logging","2.learn\u002F1.simple-logging","i-lucide-terminal",{"title":46,"path":47,"stem":48,"icon":49},"Wide Events","\u002Flearn\u002Fwide-events","2.learn\u002F2.wide-events","i-lucide-layers",{"title":51,"path":52,"stem":53,"icon":54},"Structured Errors","\u002Flearn\u002Fstructured-errors","2.learn\u002F3.structured-errors","i-lucide-shield-alert",{"title":56,"path":57,"stem":58,"icon":59},"Lifecycle","\u002Flearn\u002Flifecycle","2.learn\u002F4.lifecycle","i-lucide-arrow-right-left",{"title":61,"path":62,"stem":63,"icon":64},"Sampling","\u002Flearn\u002Fsampling","2.learn\u002F5.sampling","i-lucide-filter",{"title":66,"path":67,"stem":68,"icon":69},"Auto-Redaction","\u002Flearn\u002Fredaction","2.learn\u002F6.redaction","i-lucide-eye-off",{"title":71,"path":72,"stem":73,"icon":74},"Typed Fields","\u002Flearn\u002Ftyped-fields","2.learn\u002F7.typed-fields","i-simple-icons-typescript",{"title":76,"path":77,"stem":78,"icon":79},"Catalogs","\u002Flearn\u002Fcatalogs","2.learn\u002F8.catalogs","i-lucide-book-open",{"title":81,"path":82,"stem":83,"children":84,"page":29},"CLI","\u002Fcli","3.cli",[85,88,93,98,103,108,113,118],{"title":36,"path":86,"stem":87,"icon":44},"\u002Fcli\u002Foverview","3.cli\u002F0.overview",{"title":89,"path":90,"stem":91,"icon":92},"init","\u002Fcli\u002Finit","3.cli\u002F1.init","i-lucide-wand-sparkles",{"title":94,"path":95,"stem":96,"icon":97},"map","\u002Fcli\u002Fmap","3.cli\u002F2.map","i-lucide-radar",{"title":99,"path":100,"stem":101,"icon":102},"Rules","\u002Fcli\u002Frules","3.cli\u002F3.rules","i-lucide-list-checks",{"title":104,"path":105,"stem":106,"icon":107},"Scoring","\u002Fcli\u002Fscoring","3.cli\u002F4.scoring","i-lucide-gauge",{"title":109,"path":110,"stem":111,"icon":112},"CI","\u002Fcli\u002Fci","3.cli\u002F5.ci","i-lucide-git-pull-request",{"title":114,"path":115,"stem":116,"icon":117},"doctor","\u002Fcli\u002Fdoctor","3.cli\u002F6.doctor","i-lucide-stethoscope",{"title":119,"path":120,"stem":121,"icon":122},"telemetry","\u002Fcli\u002Ftelemetry","3.cli\u002F7.telemetry","i-lucide-bar-chart-3",{"title":124,"path":125,"stem":126,"children":127,"page":29},"Integrate","\u002Fintegrate","4.integrate",[128,132,205],{"title":36,"path":129,"stem":130,"icon":131},"\u002Fintegrate\u002Foverview","4.integrate\u002F0.overview","i-lucide-plug",{"title":133,"path":134,"stem":135,"children":136,"page":29},"Adapters","\u002Fintegrate\u002Fadapters","4.integrate\u002Fadapters",[137,140,180],{"title":36,"path":138,"stem":139,"icon":39},"\u002Fintegrate\u002Fadapters\u002Foverview","4.integrate\u002Fadapters\u002F01.overview",{"title":141,"path":142,"stem":143,"children":144,"page":29},"Cloud","\u002Fintegrate\u002Fadapters\u002Fcloud","4.integrate\u002Fadapters\u002Fcloud",[145,150,155,160,165,170,175],{"title":146,"path":147,"stem":148,"icon":149},"Axiom","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Faxiom","4.integrate\u002Fadapters\u002Fcloud\u002F01.axiom","i-custom-axiom",{"title":151,"path":152,"stem":153,"icon":154},"OTLP","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fotlp","4.integrate\u002Fadapters\u002Fcloud\u002F02.otlp","i-simple-icons-opentelemetry",{"title":156,"path":157,"stem":158,"icon":159},"PostHog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fposthog","4.integrate\u002Fadapters\u002Fcloud\u002F03.posthog","i-simple-icons-posthog",{"title":161,"path":162,"stem":163,"icon":164},"Sentry","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fsentry","4.integrate\u002Fadapters\u002Fcloud\u002F04.sentry","i-simple-icons-sentry",{"title":166,"path":167,"stem":168,"icon":169},"Better Stack","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fbetter-stack","4.integrate\u002Fadapters\u002Fcloud\u002F05.better-stack","i-simple-icons-betterstack",{"title":171,"path":172,"stem":173,"icon":174},"Datadog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fdatadog","4.integrate\u002Fadapters\u002Fcloud\u002F06.datadog","i-simple-icons-datadog",{"title":176,"path":177,"stem":178,"icon":179},"HyperDX","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fhyperdx","4.integrate\u002Fadapters\u002Fcloud\u002F07.hyperdx","i-custom-hyperdx",{"title":181,"path":182,"stem":183,"children":184,"page":29},"Self-Hosted","\u002Fintegrate\u002Fadapters\u002Fself-hosted","4.integrate\u002Fadapters\u002Fself-hosted",[185,190,195,200],{"title":186,"path":187,"stem":188,"icon":189},"File System","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Ffs","4.integrate\u002Fadapters\u002Fself-hosted\u002F01.fs","i-lucide-hard-drive",{"title":191,"path":192,"stem":193,"icon":194},"NuxtHub","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fnuxthub","4.integrate\u002Fadapters\u002Fself-hosted\u002F02.nuxthub","i-simple-icons-nuxt",{"title":196,"path":197,"stem":198,"icon":199},"Memory","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fmemory","4.integrate\u002Fadapters\u002Fself-hosted\u002F03.memory","i-lucide-cpu",{"title":201,"path":202,"stem":203,"icon":204},"Grafana Loki","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Floki","4.integrate\u002Fadapters\u002Fself-hosted\u002F04.loki","i-simple-icons-grafana",{"title":206,"path":207,"stem":208,"children":209,"page":29},"Frameworks","\u002Fintegrate\u002Fframeworks","4.integrate\u002Fframeworks",[210,214,219,224,229,234,239,244,249,254,259,264,269,274,278,283,288],{"title":36,"path":211,"stem":212,"icon":213},"\u002Fintegrate\u002Fframeworks\u002Foverview","4.integrate\u002Fframeworks\u002F00.overview","i-lucide-layout-grid",{"title":215,"path":216,"stem":217,"icon":218},"Nuxt","\u002Fintegrate\u002Fframeworks\u002Fnuxt","4.integrate\u002Fframeworks\u002F01.nuxt","i-simple-icons-nuxtdotjs",{"title":220,"path":221,"stem":222,"icon":223},"Next.js","\u002Fintegrate\u002Fframeworks\u002Fnextjs","4.integrate\u002Fframeworks\u002F02.nextjs","i-simple-icons-nextdotjs",{"title":225,"path":226,"stem":227,"icon":228},"SvelteKit","\u002Fintegrate\u002Fframeworks\u002Fsveltekit","4.integrate\u002Fframeworks\u002F03.sveltekit","i-simple-icons-svelte",{"title":230,"path":231,"stem":232,"icon":233},"Nitro","\u002Fintegrate\u002Fframeworks\u002Fnitro","4.integrate\u002Fframeworks\u002F04.nitro","i-custom-nitro",{"title":235,"path":236,"stem":237,"icon":238},"TanStack Start","\u002Fintegrate\u002Fframeworks\u002Ftanstack-start","4.integrate\u002Fframeworks\u002F05.tanstack-start","i-custom-tanstack",{"title":240,"path":241,"stem":242,"icon":243},"NestJS","\u002Fintegrate\u002Fframeworks\u002Fnestjs","4.integrate\u002Fframeworks\u002F06.nestjs","i-simple-icons-nestjs",{"title":245,"path":246,"stem":247,"icon":248},"Express","\u002Fintegrate\u002Fframeworks\u002Fexpress","4.integrate\u002Fframeworks\u002F07.express","i-simple-icons-express",{"title":250,"path":251,"stem":252,"icon":253},"Hono","\u002Fintegrate\u002Fframeworks\u002Fhono","4.integrate\u002Fframeworks\u002F08.hono","i-simple-icons-hono",{"title":255,"path":256,"stem":257,"icon":258},"Fastify","\u002Fintegrate\u002Fframeworks\u002Ffastify","4.integrate\u002Fframeworks\u002F09.fastify","i-simple-icons-fastify",{"title":260,"path":261,"stem":262,"icon":263},"Elysia","\u002Fintegrate\u002Fframeworks\u002Felysia","4.integrate\u002Fframeworks\u002F10.elysia","i-custom-elysia",{"title":265,"path":266,"stem":267,"icon":268},"React Router","\u002Fintegrate\u002Fframeworks\u002Freact-router","4.integrate\u002Fframeworks\u002F11.react-router","i-custom-reactrouter",{"title":270,"path":271,"stem":272,"icon":273},"Cloudflare Workers","\u002Fintegrate\u002Fframeworks\u002Fcloudflare-workers","4.integrate\u002Fframeworks\u002F12.cloudflare-workers","i-simple-icons-cloudflare",{"title":275,"path":276,"stem":277,"icon":74},"Standalone","\u002Fintegrate\u002Fframeworks\u002Fstandalone","4.integrate\u002Fframeworks\u002F13.standalone",{"title":279,"path":280,"stem":281,"icon":282},"Astro","\u002Fintegrate\u002Fframeworks\u002Fastro","4.integrate\u002Fframeworks\u002F14.astro","i-simple-icons-astro",{"title":284,"path":285,"stem":286,"icon":287},"oRPC","\u002Fintegrate\u002Fframeworks\u002Forpc","4.integrate\u002Fframeworks\u002F15.orpc","i-lucide-network",{"title":289,"path":290,"stem":291,"icon":292},"AWS Lambda","\u002Fintegrate\u002Fframeworks\u002Faws-lambda","4.integrate\u002Fframeworks\u002F16.aws-lambda","i-custom-lambda",{"title":294,"path":295,"stem":296,"children":297,"page":29},"Use Cases","\u002Fuse-cases","5.use-cases",[298,301,306,335,362,394,415,420],{"title":36,"path":299,"stem":300,"icon":102},"\u002Fuse-cases\u002Foverview","5.use-cases\u002F0.overview",{"title":302,"path":303,"stem":304,"icon":305},"Client Logging","\u002Fuse-cases\u002Fclient-logging","5.use-cases\u002F1.client-logging","i-lucide-monitor",{"title":307,"icon":308,"path":309,"stem":310,"children":311,"page":29},"AI SDK","i-simple-icons-vercel","\u002Fuse-cases\u002Fai-sdk","5.use-cases\u002F2.ai-sdk",[312,315,320,325,330],{"title":36,"path":313,"stem":314,"icon":39},"\u002Fuse-cases\u002Fai-sdk\u002Foverview","5.use-cases\u002F2.ai-sdk\u002F01.overview",{"title":316,"path":317,"stem":318,"icon":319},"Usage","\u002Fuse-cases\u002Fai-sdk\u002Fusage","5.use-cases\u002F2.ai-sdk\u002F02.usage","i-lucide-code",{"title":321,"path":322,"stem":323,"icon":324},"Options","\u002Fuse-cases\u002Fai-sdk\u002Foptions","5.use-cases\u002F2.ai-sdk\u002F03.options","i-lucide-sliders",{"title":326,"path":327,"stem":328,"icon":329},"Metadata","\u002Fuse-cases\u002Fai-sdk\u002Fmetadata","5.use-cases\u002F2.ai-sdk\u002F04.metadata","i-lucide-database",{"title":331,"path":332,"stem":333,"icon":334},"Telemetry","\u002Fuse-cases\u002Fai-sdk\u002Ftelemetry","5.use-cases\u002F2.ai-sdk\u002F05.telemetry","i-lucide-activity",{"title":336,"icon":337,"path":338,"stem":339,"children":340,"page":29},"Better Auth","i-simple-icons-betterauth","\u002Fuse-cases\u002Fbetter-auth","5.use-cases\u002F3.better-auth",[341,344,349,354,358],{"title":36,"path":342,"stem":343,"icon":39},"\u002Fuse-cases\u002Fbetter-auth\u002Foverview","5.use-cases\u002F3.better-auth\u002F01.overview",{"title":345,"path":346,"stem":347,"icon":348},"Identify User","\u002Fuse-cases\u002Fbetter-auth\u002Fidentify-user","5.use-cases\u002F3.better-auth\u002F02.identify-user","i-lucide-user-check",{"title":350,"path":351,"stem":352,"icon":353},"Middleware","\u002Fuse-cases\u002Fbetter-auth\u002Fmiddleware","5.use-cases\u002F3.better-auth\u002F03.middleware","i-lucide-shield",{"title":355,"path":356,"stem":357,"icon":305},"Client Sync","\u002Fuse-cases\u002Fbetter-auth\u002Fclient-sync","5.use-cases\u002F3.better-auth\u002F04.client-sync",{"title":359,"path":360,"stem":361,"icon":107},"Performance","\u002Fuse-cases\u002Fbetter-auth\u002Fperformance","5.use-cases\u002F3.better-auth\u002F05.performance",{"title":363,"icon":364,"path":365,"stem":366,"children":367,"page":29},"Audit Logs","i-lucide-shield-check","\u002Fuse-cases\u002Faudit","5.use-cases\u002F4.audit",[368,371,376,381,386,390],{"title":36,"path":369,"stem":370,"icon":39},"\u002Fuse-cases\u002Faudit\u002Foverview","5.use-cases\u002F4.audit\u002F01.overview",{"title":372,"path":373,"stem":374,"icon":375},"Schema","\u002Fuse-cases\u002Faudit\u002Fschema","5.use-cases\u002F4.audit\u002F02.schema","i-lucide-file-text",{"title":377,"path":378,"stem":379,"icon":380},"Recording","\u002Fuse-cases\u002Faudit\u002Frecording","5.use-cases\u002F4.audit\u002F03.recording","i-lucide-pen-line",{"title":382,"path":383,"stem":384,"icon":385},"Drains","\u002Fuse-cases\u002Faudit\u002Fpipeline","5.use-cases\u002F4.audit\u002F04.pipeline","i-lucide-link",{"title":387,"path":388,"stem":389,"icon":364},"Compliance","\u002Fuse-cases\u002Faudit\u002Fcompliance","5.use-cases\u002F4.audit\u002F05.compliance",{"title":391,"path":392,"stem":393,"icon":79},"Recipes","\u002Fuse-cases\u002Faudit\u002Frecipes","5.use-cases\u002F4.audit\u002F06.recipes",{"title":331,"icon":107,"path":395,"stem":396,"children":397,"page":29},"\u002Fuse-cases\u002Ftelemetry","5.use-cases\u002F4.telemetry",[398,401,406,411],{"title":36,"path":399,"stem":400,"icon":39},"\u002Fuse-cases\u002Ftelemetry\u002Foverview","5.use-cases\u002F4.telemetry\u002F01.overview",{"title":402,"path":403,"stem":404,"icon":405},"Setup","\u002Fuse-cases\u002Ftelemetry\u002Fsetup","5.use-cases\u002F4.telemetry\u002F02.setup","i-lucide-wrench",{"title":407,"path":408,"stem":409,"icon":410},"Ingest","\u002Fuse-cases\u002Ftelemetry\u002Fingest","5.use-cases\u002F4.telemetry\u002F03.ingest","i-lucide-server",{"title":412,"path":413,"stem":414,"icon":79},"Reference","\u002Fuse-cases\u002Ftelemetry\u002Freference","5.use-cases\u002F4.telemetry\u002F04.reference",{"title":416,"path":417,"stem":418,"icon":419},"Enrichers","\u002Fuse-cases\u002Fenrichers","5.use-cases\u002F5.enrichers","i-lucide-sparkles",{"title":421,"path":422,"stem":423,"icon":424},"eve","\u002Fuse-cases\u002Feve","5.use-cases\u002F5.eve","i-custom-eve",{"title":426,"path":427,"stem":428,"children":429,"page":29},"Extend","\u002Fextend","6.extend",[430,434,439,444,449,453,457,461,465,470,475],{"title":36,"path":431,"stem":432,"icon":433},"\u002Fextend\u002Foverview","6.extend\u002F0.overview","i-lucide-blocks",{"title":435,"path":436,"stem":437,"icon":438},"Stream","\u002Fextend\u002Fstream","6.extend\u002F1.stream","i-lucide-radio-tower",{"title":440,"path":441,"stem":442,"icon":443},"Custom framework","\u002Fextend\u002Fcustom-framework","6.extend\u002F10.custom-framework","i-lucide-puzzle",{"title":445,"path":446,"stem":447,"icon":448},"FS reader","\u002Fextend\u002Ffs-reader","6.extend\u002F2.fs-reader","i-lucide-folder-search",{"title":391,"path":450,"stem":451,"icon":452},"\u002Fextend\u002Fconsumer-recipes","6.extend\u002F3.consumer-recipes","i-lucide-chef-hat",{"title":454,"path":455,"stem":456,"icon":433},"Plugins","\u002Fextend\u002Fplugins","6.extend\u002F4.plugins",{"title":458,"path":459,"stem":460,"icon":419},"Custom enrichers","\u002Fextend\u002Fcustom-enrichers","6.extend\u002F5.custom-enrichers",{"title":462,"path":463,"stem":464,"icon":64},"Tail sampling","\u002Fextend\u002Ftail-sampling","6.extend\u002F6.tail-sampling",{"title":466,"path":467,"stem":468,"icon":469},"Identity headers","\u002Fextend\u002Fidentity-headers","6.extend\u002F7.identity-headers","i-lucide-fingerprint",{"title":471,"path":472,"stem":473,"icon":474},"Custom drains","\u002Fextend\u002Fcustom-drains","6.extend\u002F8.custom-drains","i-lucide-share-2",{"title":476,"path":477,"stem":478,"icon":479},"Drain pipeline","\u002Fextend\u002Fdrain-pipeline","6.extend\u002F9.drain-pipeline","i-lucide-workflow",{"title":412,"path":481,"stem":482,"children":483,"page":29},"\u002Freference","7.reference",[484,489,492,497,501,506],{"title":485,"path":486,"stem":487,"icon":488},"Configuration","\u002Freference\u002Fconfiguration","7.reference\u002F1.configuration","i-lucide-settings",{"title":359,"path":490,"stem":491,"icon":107},"\u002Freference\u002Fperformance","7.reference\u002F2.performance",{"title":493,"path":494,"stem":495,"icon":496},"Vite Plugin","\u002Freference\u002Fvite-plugin","7.reference\u002F3.vite-plugin","i-custom-vite",{"title":498,"path":499,"stem":500,"icon":364},"Best Practices","\u002Freference\u002Fbest-practices","7.reference\u002F4.best-practices",{"title":502,"path":503,"stem":504,"icon":505},"vs Other Loggers","\u002Freference\u002Fvs-other-loggers","7.reference\u002F5.vs-other-loggers","i-lucide-scale",{"title":507,"path":508,"stem":509,"icon":419},"Agent Skills","\u002Freference\u002Fagent-skills","7.reference\u002F6.agent-skills",{"id":511,"title":512,"body":513,"description":2362,"extension":2363,"links":2364,"meta":2369,"navigation":2370,"path":392,"seo":2371,"stem":393,"__hash__":2372},"docs\u002F5.use-cases\u002F4.audit\u002F06.recipes.md","Recipes & Reference",{"type":514,"value":515,"toc":2355},"minimark",[516,533,538,1146,1155,1159,1458,1461,1465,1840,1850,1854,1870,2116,2130,2141,2145,2345,2351],[517,518,519,520,524,525,528,529,532],"p",{},"Pick the recipe that matches your sink, drop it in, and you have a tamper-evident audit log. Each recipe composes the same primitives (",[521,522,523],"code",{},"auditOnly",", ",[521,526,527],{},"signed",", optional ",[521,530,531],{},"await: true",") over different drains.",[534,535,537],"h2",{"id":536},"audit-logs-on-disk","Audit logs on disk",[539,540,541,747],"code-group",{},[542,543,549],"pre",{"className":544,"code":545,"filename":546,"language":547,"meta":548,"style":548},"language-typescript shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { auditOnly, signed } from 'evlog'\nimport { createFsDrain } from 'evlog\u002Ffs'\n\nnitro.hooks.hook('evlog:drain', auditOnly(\n  signed(createFsDrain({ dir: '.audit', maxFiles: 30 }), { strategy: 'hash-chain' }),\n  { await: true },\n))\n","Input — server\u002Fplugins\u002Fevlog.ts","typescript","",[521,550,551,590,611,618,654,723,741],{"__ignoreMap":548},[552,553,556,560,564,568,571,574,577,580,583,587],"span",{"class":554,"line":555},"line",1,[552,557,559],{"class":558},"s7zQu","import",[552,561,563],{"class":562},"sMK4o"," {",[552,565,567],{"class":566},"sTEyZ"," auditOnly",[552,569,570],{"class":562},",",[552,572,573],{"class":566}," signed",[552,575,576],{"class":562}," }",[552,578,579],{"class":558}," from",[552,581,582],{"class":562}," '",[552,584,586],{"class":585},"sfazB","evlog",[552,588,589],{"class":562},"'\n",[552,591,593,595,597,600,602,604,606,609],{"class":554,"line":592},2,[552,594,559],{"class":558},[552,596,563],{"class":562},[552,598,599],{"class":566}," createFsDrain",[552,601,576],{"class":562},[552,603,579],{"class":558},[552,605,582],{"class":562},[552,607,608],{"class":585},"evlog\u002Ffs",[552,610,589],{"class":562},[552,612,614],{"class":554,"line":613},3,[552,615,617],{"emptyLinePlaceholder":616},true,"\n",[552,619,621,624,627,630,632,636,639,642,645,647,649,651],{"class":554,"line":620},4,[552,622,623],{"class":566},"nitro",[552,625,626],{"class":562},".",[552,628,629],{"class":566},"hooks",[552,631,626],{"class":562},[552,633,635],{"class":634},"s2Zo4","hook",[552,637,638],{"class":566},"(",[552,640,641],{"class":562},"'",[552,643,644],{"class":585},"evlog:drain",[552,646,641],{"class":562},[552,648,570],{"class":562},[552,650,567],{"class":634},[552,652,653],{"class":566},"(\n",[552,655,657,660,662,665,667,670,674,677,679,682,684,686,689,691,695,697,700,702,704,707,709,711,714,716,718,720],{"class":554,"line":656},5,[552,658,659],{"class":634},"  signed",[552,661,638],{"class":566},[552,663,664],{"class":634},"createFsDrain",[552,666,638],{"class":566},[552,668,669],{"class":562},"{",[552,671,673],{"class":672},"swJcz"," dir",[552,675,676],{"class":562},":",[552,678,582],{"class":562},[552,680,681],{"class":585},".audit",[552,683,641],{"class":562},[552,685,570],{"class":562},[552,687,688],{"class":672}," maxFiles",[552,690,676],{"class":562},[552,692,694],{"class":693},"sbssI"," 30",[552,696,576],{"class":562},[552,698,699],{"class":566},")",[552,701,570],{"class":562},[552,703,563],{"class":562},[552,705,706],{"class":672}," strategy",[552,708,676],{"class":562},[552,710,582],{"class":562},[552,712,713],{"class":585},"hash-chain",[552,715,641],{"class":562},[552,717,576],{"class":562},[552,719,699],{"class":566},[552,721,722],{"class":562},",\n",[552,724,726,729,732,734,738],{"class":554,"line":725},6,[552,727,728],{"class":562},"  {",[552,730,731],{"class":672}," await",[552,733,676],{"class":562},[552,735,737],{"class":736},"sfNiH"," true",[552,739,740],{"class":562}," },\n",[552,742,744],{"class":554,"line":743},7,[552,745,746],{"class":566},"))\n",[542,748,753],{"className":749,"code":750,"filename":751,"language":752,"meta":548,"style":548},"language-jsonl shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\"audit\":{\"action\":\"invoice.refund\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"invoice\",\"id\":\"inv_889\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_8f3c4b2a1e5d6f7c\",\"prevHash\":null,\"hash\":\"3f2c8e1a...\"}}\n{\"audit\":{\"action\":\"user.update\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"user\",\"id\":\"usr_99\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_5e7d8f9a0b1c2d3e\",\"prevHash\":\"3f2c8e1a...\",\"hash\":\"9a1b4d7c...\"}}\n","Output — .audit\u002F2026-04-24.ndjson","jsonl",[521,754,755,958],{"__ignoreMap":548},[552,756,757,759,762,766,768,771,773,777,779,781,783,786,788,790,792,795,797,799,801,804,806,808,810,813,815,817,819,822,824,826,828,831,833,836,838,841,843,845,847,849,851,853,855,858,860,862,864,866,868,870,872,875,877,879,881,884,886,888,890,893,895,897,899,902,904,906,909,911,913,916,918,920,922,925,927,929,931,934,936,939,941,944,946,948,950,953,955],{"class":554,"line":555},[552,758,669],{"class":562},[552,760,761],{"class":562},"\"",[552,763,765],{"class":764},"spNyl","audit",[552,767,761],{"class":562},[552,769,770],{"class":562},":{",[552,772,761],{"class":562},[552,774,776],{"class":775},"sBMFI","action",[552,778,761],{"class":562},[552,780,676],{"class":562},[552,782,761],{"class":562},[552,784,785],{"class":585},"invoice.refund",[552,787,761],{"class":562},[552,789,570],{"class":562},[552,791,761],{"class":562},[552,793,794],{"class":775},"actor",[552,796,761],{"class":562},[552,798,770],{"class":562},[552,800,761],{"class":562},[552,802,803],{"class":693},"type",[552,805,761],{"class":562},[552,807,676],{"class":562},[552,809,761],{"class":562},[552,811,812],{"class":585},"user",[552,814,761],{"class":562},[552,816,570],{"class":562},[552,818,761],{"class":562},[552,820,821],{"class":693},"id",[552,823,761],{"class":562},[552,825,676],{"class":562},[552,827,761],{"class":562},[552,829,830],{"class":585},"usr_42",[552,832,761],{"class":562},[552,834,835],{"class":562},"},",[552,837,761],{"class":562},[552,839,840],{"class":775},"target",[552,842,761],{"class":562},[552,844,770],{"class":562},[552,846,761],{"class":562},[552,848,803],{"class":693},[552,850,761],{"class":562},[552,852,676],{"class":562},[552,854,761],{"class":562},[552,856,857],{"class":585},"invoice",[552,859,761],{"class":562},[552,861,570],{"class":562},[552,863,761],{"class":562},[552,865,821],{"class":693},[552,867,761],{"class":562},[552,869,676],{"class":562},[552,871,761],{"class":562},[552,873,874],{"class":585},"inv_889",[552,876,761],{"class":562},[552,878,835],{"class":562},[552,880,761],{"class":562},[552,882,883],{"class":775},"outcome",[552,885,761],{"class":562},[552,887,676],{"class":562},[552,889,761],{"class":562},[552,891,892],{"class":585},"success",[552,894,761],{"class":562},[552,896,570],{"class":562},[552,898,761],{"class":562},[552,900,901],{"class":775},"version",[552,903,761],{"class":562},[552,905,676],{"class":562},[552,907,908],{"class":693},"1",[552,910,570],{"class":562},[552,912,761],{"class":562},[552,914,915],{"class":775},"idempotencyKey",[552,917,761],{"class":562},[552,919,676],{"class":562},[552,921,761],{"class":562},[552,923,924],{"class":585},"ak_8f3c4b2a1e5d6f7c",[552,926,761],{"class":562},[552,928,570],{"class":562},[552,930,761],{"class":562},[552,932,933],{"class":775},"prevHash",[552,935,761],{"class":562},[552,937,938],{"class":562},":null,",[552,940,761],{"class":562},[552,942,943],{"class":775},"hash",[552,945,761],{"class":562},[552,947,676],{"class":562},[552,949,761],{"class":562},[552,951,952],{"class":585},"3f2c8e1a...",[552,954,761],{"class":562},[552,956,957],{"class":562},"}}\n",[552,959,960,962,964,966,968,970,972,974,976,978,980,983,985,987,989,991,993,995,997,999,1001,1003,1005,1007,1009,1011,1013,1015,1017,1019,1021,1023,1025,1027,1029,1031,1033,1035,1037,1039,1041,1043,1045,1047,1049,1051,1053,1055,1057,1059,1061,1064,1066,1068,1070,1072,1074,1076,1078,1080,1082,1084,1086,1088,1090,1092,1094,1096,1098,1100,1102,1104,1106,1109,1111,1113,1115,1117,1119,1121,1123,1125,1127,1129,1131,1133,1135,1137,1139,1142,1144],{"class":554,"line":592},[552,961,669],{"class":562},[552,963,761],{"class":562},[552,965,765],{"class":764},[552,967,761],{"class":562},[552,969,770],{"class":562},[552,971,761],{"class":562},[552,973,776],{"class":775},[552,975,761],{"class":562},[552,977,676],{"class":562},[552,979,761],{"class":562},[552,981,982],{"class":585},"user.update",[552,984,761],{"class":562},[552,986,570],{"class":562},[552,988,761],{"class":562},[552,990,794],{"class":775},[552,992,761],{"class":562},[552,994,770],{"class":562},[552,996,761],{"class":562},[552,998,803],{"class":693},[552,1000,761],{"class":562},[552,1002,676],{"class":562},[552,1004,761],{"class":562},[552,1006,812],{"class":585},[552,1008,761],{"class":562},[552,1010,570],{"class":562},[552,1012,761],{"class":562},[552,1014,821],{"class":693},[552,1016,761],{"class":562},[552,1018,676],{"class":562},[552,1020,761],{"class":562},[552,1022,830],{"class":585},[552,1024,761],{"class":562},[552,1026,835],{"class":562},[552,1028,761],{"class":562},[552,1030,840],{"class":775},[552,1032,761],{"class":562},[552,1034,770],{"class":562},[552,1036,761],{"class":562},[552,1038,803],{"class":693},[552,1040,761],{"class":562},[552,1042,676],{"class":562},[552,1044,761],{"class":562},[552,1046,812],{"class":585},[552,1048,761],{"class":562},[552,1050,570],{"class":562},[552,1052,761],{"class":562},[552,1054,821],{"class":693},[552,1056,761],{"class":562},[552,1058,676],{"class":562},[552,1060,761],{"class":562},[552,1062,1063],{"class":585},"usr_99",[552,1065,761],{"class":562},[552,1067,835],{"class":562},[552,1069,761],{"class":562},[552,1071,883],{"class":775},[552,1073,761],{"class":562},[552,1075,676],{"class":562},[552,1077,761],{"class":562},[552,1079,892],{"class":585},[552,1081,761],{"class":562},[552,1083,570],{"class":562},[552,1085,761],{"class":562},[552,1087,901],{"class":775},[552,1089,761],{"class":562},[552,1091,676],{"class":562},[552,1093,908],{"class":693},[552,1095,570],{"class":562},[552,1097,761],{"class":562},[552,1099,915],{"class":775},[552,1101,761],{"class":562},[552,1103,676],{"class":562},[552,1105,761],{"class":562},[552,1107,1108],{"class":585},"ak_5e7d8f9a0b1c2d3e",[552,1110,761],{"class":562},[552,1112,570],{"class":562},[552,1114,761],{"class":562},[552,1116,933],{"class":775},[552,1118,761],{"class":562},[552,1120,676],{"class":562},[552,1122,761],{"class":562},[552,1124,952],{"class":585},[552,1126,761],{"class":562},[552,1128,570],{"class":562},[552,1130,761],{"class":562},[552,1132,943],{"class":775},[552,1134,761],{"class":562},[552,1136,676],{"class":562},[552,1138,761],{"class":562},[552,1140,1141],{"class":585},"9a1b4d7c...",[552,1143,761],{"class":562},[552,1145,957],{"class":562},[517,1147,1148,1149,1151,1152,1154],{},"Each line's ",[521,1150,933],{}," matches the previous line's ",[521,1153,943],{},". Tampering with any row breaks the chain forward of that point — a verifier replays the hashes and reports the first mismatch.",[534,1156,1158],{"id":1157},"audit-logs-to-a-dedicated-axiom-dataset","Audit logs to a dedicated Axiom dataset",[539,1160,1161,1328,1396],{},[542,1162,1164],{"className":544,"code":1163,"filename":546,"language":547,"meta":548,"style":548},"import { auditOnly } from 'evlog'\nimport { createAxiomDrain } from 'evlog\u002Faxiom'\n\nnitro.hooks.hook('evlog:drain', createAxiomDrain({ dataset: 'logs' }))\nnitro.hooks.hook('evlog:drain', auditOnly(\n  createAxiomDrain({ dataset: 'audit', apiKey: process.env.AXIOM_AUDIT_API_KEY }),\n))\n",[521,1165,1166,1184,1204,1208,1252,1278,1324],{"__ignoreMap":548},[552,1167,1168,1170,1172,1174,1176,1178,1180,1182],{"class":554,"line":555},[552,1169,559],{"class":558},[552,1171,563],{"class":562},[552,1173,567],{"class":566},[552,1175,576],{"class":562},[552,1177,579],{"class":558},[552,1179,582],{"class":562},[552,1181,586],{"class":585},[552,1183,589],{"class":562},[552,1185,1186,1188,1190,1193,1195,1197,1199,1202],{"class":554,"line":592},[552,1187,559],{"class":558},[552,1189,563],{"class":562},[552,1191,1192],{"class":566}," createAxiomDrain",[552,1194,576],{"class":562},[552,1196,579],{"class":558},[552,1198,582],{"class":562},[552,1200,1201],{"class":585},"evlog\u002Faxiom",[552,1203,589],{"class":562},[552,1205,1206],{"class":554,"line":613},[552,1207,617],{"emptyLinePlaceholder":616},[552,1209,1210,1212,1214,1216,1218,1220,1222,1224,1226,1228,1230,1232,1234,1236,1239,1241,1243,1246,1248,1250],{"class":554,"line":620},[552,1211,623],{"class":566},[552,1213,626],{"class":562},[552,1215,629],{"class":566},[552,1217,626],{"class":562},[552,1219,635],{"class":634},[552,1221,638],{"class":566},[552,1223,641],{"class":562},[552,1225,644],{"class":585},[552,1227,641],{"class":562},[552,1229,570],{"class":562},[552,1231,1192],{"class":634},[552,1233,638],{"class":566},[552,1235,669],{"class":562},[552,1237,1238],{"class":672}," dataset",[552,1240,676],{"class":562},[552,1242,582],{"class":562},[552,1244,1245],{"class":585},"logs",[552,1247,641],{"class":562},[552,1249,576],{"class":562},[552,1251,746],{"class":566},[552,1253,1254,1256,1258,1260,1262,1264,1266,1268,1270,1272,1274,1276],{"class":554,"line":656},[552,1255,623],{"class":566},[552,1257,626],{"class":562},[552,1259,629],{"class":566},[552,1261,626],{"class":562},[552,1263,635],{"class":634},[552,1265,638],{"class":566},[552,1267,641],{"class":562},[552,1269,644],{"class":585},[552,1271,641],{"class":562},[552,1273,570],{"class":562},[552,1275,567],{"class":634},[552,1277,653],{"class":566},[552,1279,1280,1283,1285,1287,1289,1291,1293,1295,1297,1299,1302,1304,1307,1309,1312,1314,1317,1320,1322],{"class":554,"line":725},[552,1281,1282],{"class":634},"  createAxiomDrain",[552,1284,638],{"class":566},[552,1286,669],{"class":562},[552,1288,1238],{"class":672},[552,1290,676],{"class":562},[552,1292,582],{"class":562},[552,1294,765],{"class":585},[552,1296,641],{"class":562},[552,1298,570],{"class":562},[552,1300,1301],{"class":672}," apiKey",[552,1303,676],{"class":562},[552,1305,1306],{"class":566}," process",[552,1308,626],{"class":562},[552,1310,1311],{"class":566},"env",[552,1313,626],{"class":562},[552,1315,1316],{"class":566},"AXIOM_AUDIT_API_KEY ",[552,1318,1319],{"class":562},"}",[552,1321,699],{"class":566},[552,1323,722],{"class":562},[552,1325,1326],{"class":554,"line":743},[552,1327,746],{"class":566},[542,1329,1334],{"className":1330,"code":1331,"filename":1332,"language":1333,"meta":548,"style":548},"language-kusto shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","['audit']\n| where audit.action == \"invoice.refund\"\n| summarize count() by audit.outcome, bin(_time, 1h)\n","Output — Axiom query","kusto",[521,1335,1336,1350,1368],{"__ignoreMap":548},[552,1337,1338,1341,1343,1345,1347],{"class":554,"line":555},[552,1339,1340],{"class":566},"[",[552,1342,641],{"class":562},[552,1344,765],{"class":585},[552,1346,641],{"class":562},[552,1348,1349],{"class":566},"]\n",[552,1351,1352,1355,1358,1361,1363,1365],{"class":554,"line":592},[552,1353,1354],{"class":566},"| ",[552,1356,1357],{"class":693},"where",[552,1359,1360],{"class":566}," audit.action == ",[552,1362,761],{"class":562},[552,1364,785],{"class":585},[552,1366,1367],{"class":562},"\"\n",[552,1369,1370,1372,1375,1378,1381,1384,1387,1390,1393],{"class":554,"line":613},[552,1371,1354],{"class":566},[552,1373,1374],{"class":693},"summarize",[552,1376,1377],{"class":634}," count()",[552,1379,1380],{"class":693}," by",[552,1382,1383],{"class":566}," audit.outcome, ",[552,1385,1386],{"class":634},"bin",[552,1388,1389],{"class":566},"(_time, ",[552,1391,1392],{"class":693},"1h",[552,1394,1395],{"class":566},")\n",[542,1397,1400],{"className":1330,"code":1398,"filename":1399,"language":1333,"meta":548,"style":548},"['audit']\n| where audit.outcome == \"denied\"\n| summarize count() by audit.actor.id, audit.action\n| order by count_ desc\n","Output — denials by actor",[521,1401,1402,1414,1430,1443],{"__ignoreMap":548},[552,1403,1404,1406,1408,1410,1412],{"class":554,"line":555},[552,1405,1340],{"class":566},[552,1407,641],{"class":562},[552,1409,765],{"class":585},[552,1411,641],{"class":562},[552,1413,1349],{"class":566},[552,1415,1416,1418,1420,1423,1425,1428],{"class":554,"line":592},[552,1417,1354],{"class":566},[552,1419,1357],{"class":693},[552,1421,1422],{"class":566}," audit.outcome == ",[552,1424,761],{"class":562},[552,1426,1427],{"class":585},"denied",[552,1429,1367],{"class":562},[552,1431,1432,1434,1436,1438,1440],{"class":554,"line":613},[552,1433,1354],{"class":566},[552,1435,1374],{"class":693},[552,1437,1377],{"class":634},[552,1439,1380],{"class":693},[552,1441,1442],{"class":566}," audit.actor.id, audit.action\n",[552,1444,1445,1447,1450,1452,1455],{"class":554,"line":620},[552,1446,1354],{"class":566},[552,1448,1449],{"class":693},"order",[552,1451,1380],{"class":693},[552,1453,1454],{"class":566}," count_ ",[552,1456,1457],{"class":693},"desc\n",[517,1459,1460],{},"Splitting datasets means the audit dataset can have a longer retention (7y), tighter access controls, and a separate billing line — without touching the rest of your pipeline.",[534,1462,1464],{"id":1463},"audit-logs-in-postgres","Audit logs in Postgres",[539,1466,1467,1720],{},[542,1468,1470],{"className":544,"code":1469,"filename":546,"language":547,"meta":548,"style":548},"import { auditOnly } from 'evlog'\nimport type { DrainContext } from 'evlog'\n\nconst postgresAudit = async (ctx: DrainContext) => {\n  await db.insert(auditEvents).values({\n    id: ctx.event.audit!.idempotencyKey,\n    timestamp: new Date(ctx.event.timestamp),\n    payload: ctx.event,\n  }).onConflictDoNothing()\n}\n\nnitro.hooks.hook('evlog:drain', auditOnly(postgresAudit, { await: true }))\n",[521,1471,1472,1490,1512,1516,1549,1579,1605,1635,1651,1667,1673,1678],{"__ignoreMap":548},[552,1473,1474,1476,1478,1480,1482,1484,1486,1488],{"class":554,"line":555},[552,1475,559],{"class":558},[552,1477,563],{"class":562},[552,1479,567],{"class":566},[552,1481,576],{"class":562},[552,1483,579],{"class":558},[552,1485,582],{"class":562},[552,1487,586],{"class":585},[552,1489,589],{"class":562},[552,1491,1492,1494,1497,1499,1502,1504,1506,1508,1510],{"class":554,"line":592},[552,1493,559],{"class":558},[552,1495,1496],{"class":558}," type",[552,1498,563],{"class":562},[552,1500,1501],{"class":566}," DrainContext",[552,1503,576],{"class":562},[552,1505,579],{"class":558},[552,1507,582],{"class":562},[552,1509,586],{"class":585},[552,1511,589],{"class":562},[552,1513,1514],{"class":554,"line":613},[552,1515,617],{"emptyLinePlaceholder":616},[552,1517,1518,1521,1524,1527,1530,1533,1537,1539,1541,1543,1546],{"class":554,"line":620},[552,1519,1520],{"class":764},"const",[552,1522,1523],{"class":566}," postgresAudit ",[552,1525,1526],{"class":562},"=",[552,1528,1529],{"class":764}," async",[552,1531,1532],{"class":562}," (",[552,1534,1536],{"class":1535},"sHdIc","ctx",[552,1538,676],{"class":562},[552,1540,1501],{"class":775},[552,1542,699],{"class":562},[552,1544,1545],{"class":764}," =>",[552,1547,1548],{"class":562}," {\n",[552,1550,1551,1554,1557,1559,1562,1564,1567,1569,1571,1574,1576],{"class":554,"line":656},[552,1552,1553],{"class":558},"  await",[552,1555,1556],{"class":566}," db",[552,1558,626],{"class":562},[552,1560,1561],{"class":634},"insert",[552,1563,638],{"class":672},[552,1565,1566],{"class":566},"auditEvents",[552,1568,699],{"class":672},[552,1570,626],{"class":562},[552,1572,1573],{"class":634},"values",[552,1575,638],{"class":672},[552,1577,1578],{"class":562},"{\n",[552,1580,1581,1584,1586,1589,1591,1594,1596,1598,1601,1603],{"class":554,"line":725},[552,1582,1583],{"class":672},"    id",[552,1585,676],{"class":562},[552,1587,1588],{"class":566}," ctx",[552,1590,626],{"class":562},[552,1592,1593],{"class":566},"event",[552,1595,626],{"class":562},[552,1597,765],{"class":566},[552,1599,1600],{"class":562},"!.",[552,1602,915],{"class":566},[552,1604,722],{"class":562},[552,1606,1607,1610,1612,1615,1618,1620,1622,1624,1626,1628,1631,1633],{"class":554,"line":743},[552,1608,1609],{"class":672},"    timestamp",[552,1611,676],{"class":562},[552,1613,1614],{"class":562}," new",[552,1616,1617],{"class":634}," Date",[552,1619,638],{"class":672},[552,1621,1536],{"class":566},[552,1623,626],{"class":562},[552,1625,1593],{"class":566},[552,1627,626],{"class":562},[552,1629,1630],{"class":566},"timestamp",[552,1632,699],{"class":672},[552,1634,722],{"class":562},[552,1636,1638,1641,1643,1645,1647,1649],{"class":554,"line":1637},8,[552,1639,1640],{"class":672},"    payload",[552,1642,676],{"class":562},[552,1644,1588],{"class":566},[552,1646,626],{"class":562},[552,1648,1593],{"class":566},[552,1650,722],{"class":562},[552,1652,1654,1657,1659,1661,1664],{"class":554,"line":1653},9,[552,1655,1656],{"class":562},"  }",[552,1658,699],{"class":672},[552,1660,626],{"class":562},[552,1662,1663],{"class":634},"onConflictDoNothing",[552,1665,1666],{"class":672},"()\n",[552,1668,1670],{"class":554,"line":1669},10,[552,1671,1672],{"class":562},"}\n",[552,1674,1676],{"class":554,"line":1675},11,[552,1677,617],{"emptyLinePlaceholder":616},[552,1679,1681,1683,1685,1687,1689,1691,1693,1695,1697,1699,1701,1703,1706,1708,1710,1712,1714,1716,1718],{"class":554,"line":1680},12,[552,1682,623],{"class":566},[552,1684,626],{"class":562},[552,1686,629],{"class":566},[552,1688,626],{"class":562},[552,1690,635],{"class":634},[552,1692,638],{"class":566},[552,1694,641],{"class":562},[552,1696,644],{"class":585},[552,1698,641],{"class":562},[552,1700,570],{"class":562},[552,1702,567],{"class":634},[552,1704,1705],{"class":566},"(postgresAudit",[552,1707,570],{"class":562},[552,1709,563],{"class":562},[552,1711,731],{"class":672},[552,1713,676],{"class":562},[552,1715,737],{"class":736},[552,1717,576],{"class":562},[552,1719,746],{"class":566},[542,1721,1726],{"className":1722,"code":1723,"filename":1724,"language":1725,"meta":548,"style":548},"language-sql shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","SELECT id, timestamp, payload->'audit'->>'action' AS action,\n       payload->'audit'->>'outcome' AS outcome\nFROM audit_events\nWHERE id = 'ak_8f3c4b2a1e5d6f7c';\n\n--          id          |       timestamp       |     action      | outcome\n-- ---------------------+-----------------------+-----------------+---------\n--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n","Output — audit_events row","sql",[521,1727,1728,1767,1793,1801,1820,1824,1830,1835],{"__ignoreMap":548},[552,1729,1730,1733,1736,1738,1741,1744,1746,1748,1750,1753,1755,1757,1759,1762,1765],{"class":554,"line":555},[552,1731,1732],{"class":693},"SELECT",[552,1734,1735],{"class":566}," id, ",[552,1737,1630],{"class":764},[552,1739,1740],{"class":566},", payload",[552,1742,1743],{"class":562},"->",[552,1745,641],{"class":562},[552,1747,765],{"class":585},[552,1749,641],{"class":562},[552,1751,1752],{"class":562},"->>",[552,1754,641],{"class":562},[552,1756,776],{"class":585},[552,1758,641],{"class":562},[552,1760,1761],{"class":693}," AS",[552,1763,1764],{"class":693}," action",[552,1766,722],{"class":566},[552,1768,1769,1772,1774,1776,1778,1780,1782,1784,1786,1788,1790],{"class":554,"line":592},[552,1770,1771],{"class":566},"       payload",[552,1773,1743],{"class":562},[552,1775,641],{"class":562},[552,1777,765],{"class":585},[552,1779,641],{"class":562},[552,1781,1752],{"class":562},[552,1783,641],{"class":562},[552,1785,883],{"class":585},[552,1787,641],{"class":562},[552,1789,1761],{"class":693},[552,1791,1792],{"class":566}," outcome\n",[552,1794,1795,1798],{"class":554,"line":613},[552,1796,1797],{"class":693},"FROM",[552,1799,1800],{"class":566}," audit_events\n",[552,1802,1803,1806,1809,1811,1813,1815,1817],{"class":554,"line":620},[552,1804,1805],{"class":693},"WHERE",[552,1807,1808],{"class":566}," id ",[552,1810,1526],{"class":562},[552,1812,582],{"class":562},[552,1814,924],{"class":585},[552,1816,641],{"class":562},[552,1818,1819],{"class":566},";\n",[552,1821,1822],{"class":554,"line":656},[552,1823,617],{"emptyLinePlaceholder":616},[552,1825,1826],{"class":554,"line":725},[552,1827,1829],{"class":1828},"sHwdD","--          id          |       timestamp       |     action      | outcome\n",[552,1831,1832],{"class":554,"line":743},[552,1833,1834],{"class":1828},"-- ---------------------+-----------------------+-----------------+---------\n",[552,1836,1837],{"class":554,"line":1637},[552,1838,1839],{"class":1828},"--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n",[517,1841,1842,1843,1845,1846,1849],{},"The deterministic ",[521,1844,915],{}," makes retries safe — duplicate inserts collapse via ",[521,1847,1848],{},"ON CONFLICT DO NOTHING",". Without it, a transient network blip during a retry would create a duplicate audit row, which is exactly what you don't want.",[534,1851,1853],{"id":1852},"testing-audits","Testing audits",[517,1855,1856,1859,1860,524,1863,1866,1867,676],{},[521,1857,1858],{},"mockAudit()"," captures every audit event on emit — from standalone ",[521,1861,1862],{},"audit()",[521,1864,1865],{},"log.audit()",", and ",[521,1868,1869],{},"log.set({ audit })",[542,1871,1873],{"className":544,"code":1872,"language":547,"meta":548,"style":548},"import { mockAudit } from 'evlog'\n\nit('refunds the invoice and records an audit', async () => {\n  const captured = mockAudit()\n\n  await refundInvoice({ id: 'inv_889' }, { actor: { type: 'user', id: 'u1' } })\n\n  captured.assertAudit({\n    action: 'invoice.refund',\n    target: { type: 'invoice', id: 'inv_889' },\n    outcome: 'success',\n  })\n\n  captured.restore()\n})\n",[521,1874,1875,1894,1898,1923,1938,1942,2005,2009,2023,2038,2071,2086,2092,2097,2109],{"__ignoreMap":548},[552,1876,1877,1879,1881,1884,1886,1888,1890,1892],{"class":554,"line":555},[552,1878,559],{"class":558},[552,1880,563],{"class":562},[552,1882,1883],{"class":566}," mockAudit",[552,1885,576],{"class":562},[552,1887,579],{"class":558},[552,1889,582],{"class":562},[552,1891,586],{"class":585},[552,1893,589],{"class":562},[552,1895,1896],{"class":554,"line":592},[552,1897,617],{"emptyLinePlaceholder":616},[552,1899,1900,1903,1905,1907,1910,1912,1914,1916,1919,1921],{"class":554,"line":613},[552,1901,1902],{"class":634},"it",[552,1904,638],{"class":566},[552,1906,641],{"class":562},[552,1908,1909],{"class":585},"refunds the invoice and records an audit",[552,1911,641],{"class":562},[552,1913,570],{"class":562},[552,1915,1529],{"class":764},[552,1917,1918],{"class":562}," ()",[552,1920,1545],{"class":764},[552,1922,1548],{"class":562},[552,1924,1925,1928,1931,1934,1936],{"class":554,"line":620},[552,1926,1927],{"class":764},"  const",[552,1929,1930],{"class":566}," captured",[552,1932,1933],{"class":562}," =",[552,1935,1883],{"class":634},[552,1937,1666],{"class":672},[552,1939,1940],{"class":554,"line":656},[552,1941,617],{"emptyLinePlaceholder":616},[552,1943,1944,1946,1949,1951,1953,1956,1958,1960,1962,1964,1967,1969,1972,1974,1976,1978,1980,1982,1984,1986,1988,1990,1992,1994,1997,1999,2001,2003],{"class":554,"line":725},[552,1945,1553],{"class":558},[552,1947,1948],{"class":634}," refundInvoice",[552,1950,638],{"class":672},[552,1952,669],{"class":562},[552,1954,1955],{"class":672}," id",[552,1957,676],{"class":562},[552,1959,582],{"class":562},[552,1961,874],{"class":585},[552,1963,641],{"class":562},[552,1965,1966],{"class":562}," },",[552,1968,563],{"class":562},[552,1970,1971],{"class":672}," actor",[552,1973,676],{"class":562},[552,1975,563],{"class":562},[552,1977,1496],{"class":672},[552,1979,676],{"class":562},[552,1981,582],{"class":562},[552,1983,812],{"class":585},[552,1985,641],{"class":562},[552,1987,570],{"class":562},[552,1989,1955],{"class":672},[552,1991,676],{"class":562},[552,1993,582],{"class":562},[552,1995,1996],{"class":585},"u1",[552,1998,641],{"class":562},[552,2000,576],{"class":562},[552,2002,576],{"class":562},[552,2004,1395],{"class":672},[552,2006,2007],{"class":554,"line":743},[552,2008,617],{"emptyLinePlaceholder":616},[552,2010,2011,2014,2016,2019,2021],{"class":554,"line":1637},[552,2012,2013],{"class":566},"  captured",[552,2015,626],{"class":562},[552,2017,2018],{"class":634},"assertAudit",[552,2020,638],{"class":672},[552,2022,1578],{"class":562},[552,2024,2025,2028,2030,2032,2034,2036],{"class":554,"line":1653},[552,2026,2027],{"class":672},"    action",[552,2029,676],{"class":562},[552,2031,582],{"class":562},[552,2033,785],{"class":585},[552,2035,641],{"class":562},[552,2037,722],{"class":562},[552,2039,2040,2043,2045,2047,2049,2051,2053,2055,2057,2059,2061,2063,2065,2067,2069],{"class":554,"line":1669},[552,2041,2042],{"class":672},"    target",[552,2044,676],{"class":562},[552,2046,563],{"class":562},[552,2048,1496],{"class":672},[552,2050,676],{"class":562},[552,2052,582],{"class":562},[552,2054,857],{"class":585},[552,2056,641],{"class":562},[552,2058,570],{"class":562},[552,2060,1955],{"class":672},[552,2062,676],{"class":562},[552,2064,582],{"class":562},[552,2066,874],{"class":585},[552,2068,641],{"class":562},[552,2070,740],{"class":562},[552,2072,2073,2076,2078,2080,2082,2084],{"class":554,"line":1675},[552,2074,2075],{"class":672},"    outcome",[552,2077,676],{"class":562},[552,2079,582],{"class":562},[552,2081,892],{"class":585},[552,2083,641],{"class":562},[552,2085,722],{"class":562},[552,2087,2088,2090],{"class":554,"line":1680},[552,2089,1656],{"class":562},[552,2091,1395],{"class":672},[552,2093,2095],{"class":554,"line":2094},13,[552,2096,617],{"emptyLinePlaceholder":616},[552,2098,2100,2102,2104,2107],{"class":554,"line":2099},14,[552,2101,2013],{"class":566},[552,2103,626],{"class":562},[552,2105,2106],{"class":634},"restore",[552,2108,1666],{"class":672},[552,2110,2112,2114],{"class":554,"line":2111},15,[552,2113,1319],{"class":562},[552,2115,1395],{"class":566},[517,2117,2118,2119,2122,2123,2126,2127,626],{},"Prefer ",[521,2120,2121],{},"assertAudit()"," when a missing audit should fail the test with a readable message. Use ",[521,2124,2125],{},"toIncludeAuditOf()"," when you need a boolean inside ",[521,2128,2129],{},"expect(...)",[517,2131,2132,2133,2136,2137,2140],{},"Always call ",[521,2134,2135],{},"captured.restore()"," in an ",[521,2138,2139],{},"afterEach"," (or wrap with a fixture) so a failing assertion never leaks into the next test.",[534,2142,2144],{"id":2143},"api-reference","API Reference",[2146,2147,2148,2164],"table",{},[2149,2150,2151],"thead",{},[2152,2153,2154,2158,2161],"tr",{},[2155,2156,2157],"th",{},"Symbol",[2155,2159,2160],{},"Kind",[2155,2162,2163],{},"Notes",[2165,2166,2167,2180,2193,2205,2221,2233,2246,2259,2275,2292,2305,2320,2332],"tbody",{},[2152,2168,2169,2175,2177],{},[2170,2171,2172],"td",{},[521,2173,2174],{},"AuditFields",[2170,2176,803],{},[2170,2178,2179],{},"Reserved field on the wide event",[2152,2181,2182,2187,2190],{},[2170,2183,2184],{},[521,2185,2186],{},"defineAuditAction(name, opts?)",[2170,2188,2189],{},"factory",[2170,2191,2192],{},"Typed action registry, infers target shape",[2152,2194,2195,2200,2202],{},[2170,2196,2197],{},[521,2198,2199],{},"defineAuditCatalog(prefix, map)",[2170,2201,2189],{},[2170,2203,2204],{},"Bundle of typed audit actions sharing a prefix",[2152,2206,2207,2212,2215],{},[2170,2208,2209],{},[521,2210,2211],{},"log.audit(fields)",[2170,2213,2214],{},"method",[2170,2216,2217,2218,2220],{},"Sugar over ",[521,2219,1869],{}," + force-keep",[2152,2222,2223,2228,2230],{},[2170,2224,2225],{},[521,2226,2227],{},"log.audit.deny(reason, fields)",[2170,2229,2214],{},[2170,2231,2232],{},"Records a denied action",[2152,2234,2235,2240,2243],{},[2170,2236,2237],{},[521,2238,2239],{},"audit(fields)",[2170,2241,2242],{},"function",[2170,2244,2245],{},"Standalone for scripts \u002F jobs",[2152,2247,2248,2253,2256],{},[2170,2249,2250],{},[521,2251,2252],{},"withAudit({ action, target })(fn)",[2170,2254,2255],{},"wrapper",[2170,2257,2258],{},"Auto-emit success \u002F failure \u002F denied",[2152,2260,2261,2266,2269],{},[2170,2262,2263],{},[521,2264,2265],{},"auditDiff(before, after)",[2170,2267,2268],{},"helper",[2170,2270,2271,2272],{},"Redact-aware JSON Patch for ",[521,2273,2274],{},"changes",[2152,2276,2277,2281,2284],{},[2170,2278,2279],{},[521,2280,1858],{},[2170,2282,2283],{},"test util",[2170,2285,2286,2287,2289,2290],{},"Capture audits on emit; ",[521,2288,2121],{}," or ",[521,2291,2125],{},[2152,2293,2294,2299,2302],{},[2170,2295,2296],{},[521,2297,2298],{},"auditEnricher(opts?)",[2170,2300,2301],{},"enricher",[2170,2303,2304],{},"Auto-fill request \u002F runtime \u002F tenant context",[2152,2306,2307,2312,2314],{},[2170,2308,2309],{},[521,2310,2311],{},"auditOnly(drain, { await? })",[2170,2313,2255],{},[2170,2315,2316,2317,2319],{},"Routes only events with an ",[521,2318,765],{}," field",[2152,2321,2322,2327,2329],{},[2170,2323,2324],{},[521,2325,2326],{},"signed(drain, opts)",[2170,2328,2255],{},[2170,2330,2331],{},"Generic integrity wrapper (hmac \u002F hash-chain)",[2152,2333,2334,2339,2342],{},[2170,2335,2336],{},[521,2337,2338],{},"auditRedactPreset",[2170,2340,2341],{},"config",[2170,2343,2344],{},"Strict PII for audit events",[517,2346,2347,2348,2350],{},"Everything ships from the main ",[521,2349,586],{}," entrypoint.",[2352,2353,2354],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}",{"title":548,"searchDepth":592,"depth":592,"links":2356},[2357,2358,2359,2360,2361],{"id":536,"depth":592,"text":537},{"id":1157,"depth":592,"text":1158},{"id":1463,"depth":592,"text":1464},{"id":1852,"depth":592,"text":1853},{"id":2143,"depth":592,"text":2144},"File system, Axiom, and Postgres recipes for audit logs, plus mockAudit for tests and the full API reference.","md",[2365,2368],{"label":387,"icon":364,"to":388,"color":2366,"variant":2367},"neutral","subtle",{"label":133,"icon":131,"to":138,"color":2366,"variant":2367},{},{"title":391,"icon":79},{"title":512,"description":2362},"d4tHcUb1EpoUIrMkf-DJ-DPvE575KpxoUq7BH9zzato",[2374,2376],{"title":387,"path":388,"stem":389,"description":2375,"icon":364,"children":-1},"Integrity, redact presets, GDPR vs append-only, retention windows, and the most common pitfalls when shipping audit logs to production.",{"title":36,"path":399,"stem":400,"description":2377,"icon":39,"children":-1},"Wide-event telemetry for CLIs and automation — evlog's one-event-per-run model for tools on user machines, with privacy-safe flags, consent, outbox, and auto-generated disclosure.",1785599599641]