[{"data":1,"prerenderedAt":2373},["ShallowReactive",2],{"navigation_docs":3,"-use-cases-audit-recipes":505,"-use-cases-audit-recipes-surround":2368},[4,30,80,123,288,420,475],{"title":5,"path":6,"stem":7,"children":8,"page":29},"Start","\u002Fstart","1.start",[9,14,19,24],{"title":10,"path":11,"stem":12,"icon":13},"Introduction","\u002Fstart\u002Fintroduction","1.start\u002F1.introduction","i-lucide-info",{"title":15,"path":16,"stem":17,"icon":18},"Why start with evlog","\u002Fstart\u002Fwhy-evlog","1.start\u002F2.why-evlog","i-lucide-rocket",{"title":20,"path":21,"stem":22,"icon":23},"Installation","\u002Fstart\u002Finstallation","1.start\u002F3.installation","i-lucide-download",{"title":25,"path":26,"stem":27,"icon":28},"Quick Start","\u002Fstart\u002Fquick-start","1.start\u002F4.quick-start","i-lucide-zap",false,{"title":31,"path":32,"stem":33,"children":34,"page":29},"Learn","\u002Flearn","2.learn",[35,40,45,50,55,60,65,70,75],{"title":36,"path":37,"stem":38,"icon":39},"Overview","\u002Flearn\u002Foverview","2.learn\u002F0.overview","i-lucide-list",{"title":41,"path":42,"stem":43,"icon":44},"Simple Logging","\u002Flearn\u002Fsimple-logging","2.learn\u002F1.simple-logging","i-lucide-terminal",{"title":46,"path":47,"stem":48,"icon":49},"Wide Events","\u002Flearn\u002Fwide-events","2.learn\u002F2.wide-events","i-lucide-layers",{"title":51,"path":52,"stem":53,"icon":54},"Structured Errors","\u002Flearn\u002Fstructured-errors","2.learn\u002F3.structured-errors","i-lucide-shield-alert",{"title":56,"path":57,"stem":58,"icon":59},"Lifecycle","\u002Flearn\u002Flifecycle","2.learn\u002F4.lifecycle","i-lucide-arrow-right-left",{"title":61,"path":62,"stem":63,"icon":64},"Sampling","\u002Flearn\u002Fsampling","2.learn\u002F5.sampling","i-lucide-filter",{"title":66,"path":67,"stem":68,"icon":69},"Auto-Redaction","\u002Flearn\u002Fredaction","2.learn\u002F6.redaction","i-lucide-eye-off",{"title":71,"path":72,"stem":73,"icon":74},"Typed Fields","\u002Flearn\u002Ftyped-fields","2.learn\u002F7.typed-fields","i-simple-icons-typescript",{"title":76,"path":77,"stem":78,"icon":79},"Catalogs","\u002Flearn\u002Fcatalogs","2.learn\u002F8.catalogs","i-lucide-book-open",{"title":81,"path":82,"stem":83,"children":84,"page":29},"CLI","\u002Fcli","3.cli",[85,88,93,98,103,108,113,118],{"title":36,"path":86,"stem":87,"icon":44},"\u002Fcli\u002Foverview","3.cli\u002F0.overview",{"title":89,"path":90,"stem":91,"icon":92},"init","\u002Fcli\u002Finit","3.cli\u002F1.init","i-lucide-wand-sparkles",{"title":94,"path":95,"stem":96,"icon":97},"map","\u002Fcli\u002Fmap","3.cli\u002F2.map","i-lucide-radar",{"title":99,"path":100,"stem":101,"icon":102},"Rules","\u002Fcli\u002Frules","3.cli\u002F3.rules","i-lucide-list-checks",{"title":104,"path":105,"stem":106,"icon":107},"Scoring","\u002Fcli\u002Fscoring","3.cli\u002F4.scoring","i-lucide-gauge",{"title":109,"path":110,"stem":111,"icon":112},"CI","\u002Fcli\u002Fci","3.cli\u002F5.ci","i-lucide-git-pull-request",{"title":114,"path":115,"stem":116,"icon":117},"doctor","\u002Fcli\u002Fdoctor","3.cli\u002F6.doctor","i-lucide-stethoscope",{"title":119,"path":120,"stem":121,"icon":122},"telemetry","\u002Fcli\u002Ftelemetry","3.cli\u002F7.telemetry","i-lucide-bar-chart-3",{"title":124,"path":125,"stem":126,"children":127,"page":29},"Integrate","\u002Fintegrate","4.integrate",[128,132,200],{"title":36,"path":129,"stem":130,"icon":131},"\u002Fintegrate\u002Foverview","4.integrate\u002F0.overview","i-lucide-plug",{"title":133,"path":134,"stem":135,"children":136,"page":29},"Adapters","\u002Fintegrate\u002Fadapters","4.integrate\u002Fadapters",[137,140,180],{"title":36,"path":138,"stem":139,"icon":39},"\u002Fintegrate\u002Fadapters\u002Foverview","4.integrate\u002Fadapters\u002F01.overview",{"title":141,"path":142,"stem":143,"children":144,"page":29},"Cloud","\u002Fintegrate\u002Fadapters\u002Fcloud","4.integrate\u002Fadapters\u002Fcloud",[145,150,155,160,165,170,175],{"title":146,"path":147,"stem":148,"icon":149},"Axiom","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Faxiom","4.integrate\u002Fadapters\u002Fcloud\u002F01.axiom","i-custom-axiom",{"title":151,"path":152,"stem":153,"icon":154},"OTLP","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fotlp","4.integrate\u002Fadapters\u002Fcloud\u002F02.otlp","i-simple-icons-opentelemetry",{"title":156,"path":157,"stem":158,"icon":159},"PostHog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fposthog","4.integrate\u002Fadapters\u002Fcloud\u002F03.posthog","i-simple-icons-posthog",{"title":161,"path":162,"stem":163,"icon":164},"Sentry","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fsentry","4.integrate\u002Fadapters\u002Fcloud\u002F04.sentry","i-simple-icons-sentry",{"title":166,"path":167,"stem":168,"icon":169},"Better Stack","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fbetter-stack","4.integrate\u002Fadapters\u002Fcloud\u002F05.better-stack","i-simple-icons-betterstack",{"title":171,"path":172,"stem":173,"icon":174},"Datadog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fdatadog","4.integrate\u002Fadapters\u002Fcloud\u002F06.datadog","i-simple-icons-datadog",{"title":176,"path":177,"stem":178,"icon":179},"HyperDX","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fhyperdx","4.integrate\u002Fadapters\u002Fcloud\u002F07.hyperdx","i-custom-hyperdx",{"title":181,"path":182,"stem":183,"children":184,"page":29},"Self-Hosted","\u002Fintegrate\u002Fadapters\u002Fself-hosted","4.integrate\u002Fadapters\u002Fself-hosted",[185,190,195],{"title":186,"path":187,"stem":188,"icon":189},"File System","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Ffs","4.integrate\u002Fadapters\u002Fself-hosted\u002F01.fs","i-lucide-hard-drive",{"title":191,"path":192,"stem":193,"icon":194},"NuxtHub","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fnuxthub","4.integrate\u002Fadapters\u002Fself-hosted\u002F02.nuxthub","i-simple-icons-nuxt",{"title":196,"path":197,"stem":198,"icon":199},"Memory","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fmemory","4.integrate\u002Fadapters\u002Fself-hosted\u002F03.memory","i-lucide-cpu",{"title":201,"path":202,"stem":203,"children":204,"page":29},"Frameworks","\u002Fintegrate\u002Fframeworks","4.integrate\u002Fframeworks",[205,209,214,219,224,229,234,239,244,249,254,259,264,269,273,278,283],{"title":36,"path":206,"stem":207,"icon":208},"\u002Fintegrate\u002Fframeworks\u002Foverview","4.integrate\u002Fframeworks\u002F00.overview","i-lucide-layout-grid",{"title":210,"path":211,"stem":212,"icon":213},"Nuxt","\u002Fintegrate\u002Fframeworks\u002Fnuxt","4.integrate\u002Fframeworks\u002F01.nuxt","i-simple-icons-nuxtdotjs",{"title":215,"path":216,"stem":217,"icon":218},"Next.js","\u002Fintegrate\u002Fframeworks\u002Fnextjs","4.integrate\u002Fframeworks\u002F02.nextjs","i-simple-icons-nextdotjs",{"title":220,"path":221,"stem":222,"icon":223},"SvelteKit","\u002Fintegrate\u002Fframeworks\u002Fsveltekit","4.integrate\u002Fframeworks\u002F03.sveltekit","i-simple-icons-svelte",{"title":225,"path":226,"stem":227,"icon":228},"Nitro","\u002Fintegrate\u002Fframeworks\u002Fnitro","4.integrate\u002Fframeworks\u002F04.nitro","i-custom-nitro",{"title":230,"path":231,"stem":232,"icon":233},"TanStack Start","\u002Fintegrate\u002Fframeworks\u002Ftanstack-start","4.integrate\u002Fframeworks\u002F05.tanstack-start","i-custom-tanstack",{"title":235,"path":236,"stem":237,"icon":238},"NestJS","\u002Fintegrate\u002Fframeworks\u002Fnestjs","4.integrate\u002Fframeworks\u002F06.nestjs","i-simple-icons-nestjs",{"title":240,"path":241,"stem":242,"icon":243},"Express","\u002Fintegrate\u002Fframeworks\u002Fexpress","4.integrate\u002Fframeworks\u002F07.express","i-simple-icons-express",{"title":245,"path":246,"stem":247,"icon":248},"Hono","\u002Fintegrate\u002Fframeworks\u002Fhono","4.integrate\u002Fframeworks\u002F08.hono","i-simple-icons-hono",{"title":250,"path":251,"stem":252,"icon":253},"Fastify","\u002Fintegrate\u002Fframeworks\u002Ffastify","4.integrate\u002Fframeworks\u002F09.fastify","i-simple-icons-fastify",{"title":255,"path":256,"stem":257,"icon":258},"Elysia","\u002Fintegrate\u002Fframeworks\u002Felysia","4.integrate\u002Fframeworks\u002F10.elysia","i-custom-elysia",{"title":260,"path":261,"stem":262,"icon":263},"React Router","\u002Fintegrate\u002Fframeworks\u002Freact-router","4.integrate\u002Fframeworks\u002F11.react-router","i-custom-reactrouter",{"title":265,"path":266,"stem":267,"icon":268},"Cloudflare Workers","\u002Fintegrate\u002Fframeworks\u002Fcloudflare-workers","4.integrate\u002Fframeworks\u002F12.cloudflare-workers","i-simple-icons-cloudflare",{"title":270,"path":271,"stem":272,"icon":74},"Standalone","\u002Fintegrate\u002Fframeworks\u002Fstandalone","4.integrate\u002Fframeworks\u002F13.standalone",{"title":274,"path":275,"stem":276,"icon":277},"Astro","\u002Fintegrate\u002Fframeworks\u002Fastro","4.integrate\u002Fframeworks\u002F14.astro","i-simple-icons-astro",{"title":279,"path":280,"stem":281,"icon":282},"oRPC","\u002Fintegrate\u002Fframeworks\u002Forpc","4.integrate\u002Fframeworks\u002F15.orpc","i-lucide-network",{"title":284,"path":285,"stem":286,"icon":287},"AWS Lambda","\u002Fintegrate\u002Fframeworks\u002Faws-lambda","4.integrate\u002Fframeworks\u002F16.aws-lambda","i-custom-lambda",{"title":289,"path":290,"stem":291,"children":292,"page":29},"Use Cases","\u002Fuse-cases","5.use-cases",[293,296,301,330,357,389,410,415],{"title":36,"path":294,"stem":295,"icon":102},"\u002Fuse-cases\u002Foverview","5.use-cases\u002F0.overview",{"title":297,"path":298,"stem":299,"icon":300},"Client Logging","\u002Fuse-cases\u002Fclient-logging","5.use-cases\u002F1.client-logging","i-lucide-monitor",{"title":302,"icon":303,"path":304,"stem":305,"children":306,"page":29},"AI SDK","i-simple-icons-vercel","\u002Fuse-cases\u002Fai-sdk","5.use-cases\u002F2.ai-sdk",[307,310,315,320,325],{"title":36,"path":308,"stem":309,"icon":39},"\u002Fuse-cases\u002Fai-sdk\u002Foverview","5.use-cases\u002F2.ai-sdk\u002F01.overview",{"title":311,"path":312,"stem":313,"icon":314},"Usage","\u002Fuse-cases\u002Fai-sdk\u002Fusage","5.use-cases\u002F2.ai-sdk\u002F02.usage","i-lucide-code",{"title":316,"path":317,"stem":318,"icon":319},"Options","\u002Fuse-cases\u002Fai-sdk\u002Foptions","5.use-cases\u002F2.ai-sdk\u002F03.options","i-lucide-sliders",{"title":321,"path":322,"stem":323,"icon":324},"Metadata","\u002Fuse-cases\u002Fai-sdk\u002Fmetadata","5.use-cases\u002F2.ai-sdk\u002F04.metadata","i-lucide-database",{"title":326,"path":327,"stem":328,"icon":329},"Telemetry","\u002Fuse-cases\u002Fai-sdk\u002Ftelemetry","5.use-cases\u002F2.ai-sdk\u002F05.telemetry","i-lucide-activity",{"title":331,"icon":332,"path":333,"stem":334,"children":335,"page":29},"Better Auth","i-simple-icons-betterauth","\u002Fuse-cases\u002Fbetter-auth","5.use-cases\u002F3.better-auth",[336,339,344,349,353],{"title":36,"path":337,"stem":338,"icon":39},"\u002Fuse-cases\u002Fbetter-auth\u002Foverview","5.use-cases\u002F3.better-auth\u002F01.overview",{"title":340,"path":341,"stem":342,"icon":343},"Identify User","\u002Fuse-cases\u002Fbetter-auth\u002Fidentify-user","5.use-cases\u002F3.better-auth\u002F02.identify-user","i-lucide-user-check",{"title":345,"path":346,"stem":347,"icon":348},"Middleware","\u002Fuse-cases\u002Fbetter-auth\u002Fmiddleware","5.use-cases\u002F3.better-auth\u002F03.middleware","i-lucide-shield",{"title":350,"path":351,"stem":352,"icon":300},"Client Sync","\u002Fuse-cases\u002Fbetter-auth\u002Fclient-sync","5.use-cases\u002F3.better-auth\u002F04.client-sync",{"title":354,"path":355,"stem":356,"icon":107},"Performance","\u002Fuse-cases\u002Fbetter-auth\u002Fperformance","5.use-cases\u002F3.better-auth\u002F05.performance",{"title":358,"icon":359,"path":360,"stem":361,"children":362,"page":29},"Audit Logs","i-lucide-shield-check","\u002Fuse-cases\u002Faudit","5.use-cases\u002F4.audit",[363,366,371,376,381,385],{"title":36,"path":364,"stem":365,"icon":39},"\u002Fuse-cases\u002Faudit\u002Foverview","5.use-cases\u002F4.audit\u002F01.overview",{"title":367,"path":368,"stem":369,"icon":370},"Schema","\u002Fuse-cases\u002Faudit\u002Fschema","5.use-cases\u002F4.audit\u002F02.schema","i-lucide-file-text",{"title":372,"path":373,"stem":374,"icon":375},"Recording","\u002Fuse-cases\u002Faudit\u002Frecording","5.use-cases\u002F4.audit\u002F03.recording","i-lucide-pen-line",{"title":377,"path":378,"stem":379,"icon":380},"Drains","\u002Fuse-cases\u002Faudit\u002Fpipeline","5.use-cases\u002F4.audit\u002F04.pipeline","i-lucide-link",{"title":382,"path":383,"stem":384,"icon":359},"Compliance","\u002Fuse-cases\u002Faudit\u002Fcompliance","5.use-cases\u002F4.audit\u002F05.compliance",{"title":386,"path":387,"stem":388,"icon":79},"Recipes","\u002Fuse-cases\u002Faudit\u002Frecipes","5.use-cases\u002F4.audit\u002F06.recipes",{"title":326,"icon":107,"path":390,"stem":391,"children":392,"page":29},"\u002Fuse-cases\u002Ftelemetry","5.use-cases\u002F4.telemetry",[393,396,401,406],{"title":36,"path":394,"stem":395,"icon":39},"\u002Fuse-cases\u002Ftelemetry\u002Foverview","5.use-cases\u002F4.telemetry\u002F01.overview",{"title":397,"path":398,"stem":399,"icon":400},"Setup","\u002Fuse-cases\u002Ftelemetry\u002Fsetup","5.use-cases\u002F4.telemetry\u002F02.setup","i-lucide-wrench",{"title":402,"path":403,"stem":404,"icon":405},"Ingest","\u002Fuse-cases\u002Ftelemetry\u002Fingest","5.use-cases\u002F4.telemetry\u002F03.ingest","i-lucide-server",{"title":407,"path":408,"stem":409,"icon":79},"Reference","\u002Fuse-cases\u002Ftelemetry\u002Freference","5.use-cases\u002F4.telemetry\u002F04.reference",{"title":411,"path":412,"stem":413,"icon":414},"Enrichers","\u002Fuse-cases\u002Fenrichers","5.use-cases\u002F5.enrichers","i-lucide-sparkles",{"title":416,"path":417,"stem":418,"icon":419},"eve","\u002Fuse-cases\u002Feve","5.use-cases\u002F5.eve","i-custom-eve",{"title":421,"path":422,"stem":423,"children":424,"page":29},"Extend","\u002Fextend","6.extend",[425,429,434,439,444,448,452,456,460,465,470],{"title":36,"path":426,"stem":427,"icon":428},"\u002Fextend\u002Foverview","6.extend\u002F0.overview","i-lucide-blocks",{"title":430,"path":431,"stem":432,"icon":433},"Stream","\u002Fextend\u002Fstream","6.extend\u002F1.stream","i-lucide-radio-tower",{"title":435,"path":436,"stem":437,"icon":438},"Custom framework","\u002Fextend\u002Fcustom-framework","6.extend\u002F10.custom-framework","i-lucide-puzzle",{"title":440,"path":441,"stem":442,"icon":443},"FS reader","\u002Fextend\u002Ffs-reader","6.extend\u002F2.fs-reader","i-lucide-folder-search",{"title":386,"path":445,"stem":446,"icon":447},"\u002Fextend\u002Fconsumer-recipes","6.extend\u002F3.consumer-recipes","i-lucide-chef-hat",{"title":449,"path":450,"stem":451,"icon":428},"Plugins","\u002Fextend\u002Fplugins","6.extend\u002F4.plugins",{"title":453,"path":454,"stem":455,"icon":414},"Custom enrichers","\u002Fextend\u002Fcustom-enrichers","6.extend\u002F5.custom-enrichers",{"title":457,"path":458,"stem":459,"icon":64},"Tail sampling","\u002Fextend\u002Ftail-sampling","6.extend\u002F6.tail-sampling",{"title":461,"path":462,"stem":463,"icon":464},"Identity headers","\u002Fextend\u002Fidentity-headers","6.extend\u002F7.identity-headers","i-lucide-fingerprint",{"title":466,"path":467,"stem":468,"icon":469},"Custom drains","\u002Fextend\u002Fcustom-drains","6.extend\u002F8.custom-drains","i-lucide-share-2",{"title":471,"path":472,"stem":473,"icon":474},"Drain pipeline","\u002Fextend\u002Fdrain-pipeline","6.extend\u002F9.drain-pipeline","i-lucide-workflow",{"title":407,"path":476,"stem":477,"children":478,"page":29},"\u002Freference","7.reference",[479,484,487,492,496,501],{"title":480,"path":481,"stem":482,"icon":483},"Configuration","\u002Freference\u002Fconfiguration","7.reference\u002F1.configuration","i-lucide-settings",{"title":354,"path":485,"stem":486,"icon":107},"\u002Freference\u002Fperformance","7.reference\u002F2.performance",{"title":488,"path":489,"stem":490,"icon":491},"Vite Plugin","\u002Freference\u002Fvite-plugin","7.reference\u002F3.vite-plugin","i-custom-vite",{"title":493,"path":494,"stem":495,"icon":359},"Best Practices","\u002Freference\u002Fbest-practices","7.reference\u002F4.best-practices",{"title":497,"path":498,"stem":499,"icon":500},"vs Other Loggers","\u002Freference\u002Fvs-other-loggers","7.reference\u002F5.vs-other-loggers","i-lucide-scale",{"title":502,"path":503,"stem":504,"icon":414},"Agent Skills","\u002Freference\u002Fagent-skills","7.reference\u002F6.agent-skills",{"id":506,"title":507,"body":508,"description":2357,"extension":2358,"links":2359,"meta":2364,"navigation":2365,"path":387,"seo":2366,"stem":388,"__hash__":2367},"docs\u002F5.use-cases\u002F4.audit\u002F06.recipes.md","Recipes & Reference",{"type":509,"value":510,"toc":2350},"minimark",[511,528,533,1141,1150,1154,1453,1456,1460,1835,1845,1849,1865,2111,2125,2136,2140,2340,2346],[512,513,514,515,519,520,523,524,527],"p",{},"Pick the recipe that matches your sink, drop it in, and you have a tamper-evident audit log. Each recipe composes the same primitives (",[516,517,518],"code",{},"auditOnly",", ",[516,521,522],{},"signed",", optional ",[516,525,526],{},"await: true",") over different drains.",[529,530,532],"h2",{"id":531},"audit-logs-on-disk","Audit logs on disk",[534,535,536,742],"code-group",{},[537,538,544],"pre",{"className":539,"code":540,"filename":541,"language":542,"meta":543,"style":543},"language-typescript shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { auditOnly, signed } from 'evlog'\nimport { createFsDrain } from 'evlog\u002Ffs'\n\nnitro.hooks.hook('evlog:drain', auditOnly(\n  signed(createFsDrain({ dir: '.audit', maxFiles: 30 }), { strategy: 'hash-chain' }),\n  { await: true },\n))\n","Input — server\u002Fplugins\u002Fevlog.ts","typescript","",[516,545,546,585,606,613,649,718,736],{"__ignoreMap":543},[547,548,551,555,559,563,566,569,572,575,578,582],"span",{"class":549,"line":550},"line",1,[547,552,554],{"class":553},"s7zQu","import",[547,556,558],{"class":557},"sMK4o"," {",[547,560,562],{"class":561},"sTEyZ"," auditOnly",[547,564,565],{"class":557},",",[547,567,568],{"class":561}," signed",[547,570,571],{"class":557}," }",[547,573,574],{"class":553}," from",[547,576,577],{"class":557}," '",[547,579,581],{"class":580},"sfazB","evlog",[547,583,584],{"class":557},"'\n",[547,586,588,590,592,595,597,599,601,604],{"class":549,"line":587},2,[547,589,554],{"class":553},[547,591,558],{"class":557},[547,593,594],{"class":561}," createFsDrain",[547,596,571],{"class":557},[547,598,574],{"class":553},[547,600,577],{"class":557},[547,602,603],{"class":580},"evlog\u002Ffs",[547,605,584],{"class":557},[547,607,609],{"class":549,"line":608},3,[547,610,612],{"emptyLinePlaceholder":611},true,"\n",[547,614,616,619,622,625,627,631,634,637,640,642,644,646],{"class":549,"line":615},4,[547,617,618],{"class":561},"nitro",[547,620,621],{"class":557},".",[547,623,624],{"class":561},"hooks",[547,626,621],{"class":557},[547,628,630],{"class":629},"s2Zo4","hook",[547,632,633],{"class":561},"(",[547,635,636],{"class":557},"'",[547,638,639],{"class":580},"evlog:drain",[547,641,636],{"class":557},[547,643,565],{"class":557},[547,645,562],{"class":629},[547,647,648],{"class":561},"(\n",[547,650,652,655,657,660,662,665,669,672,674,677,679,681,684,686,690,692,695,697,699,702,704,706,709,711,713,715],{"class":549,"line":651},5,[547,653,654],{"class":629},"  signed",[547,656,633],{"class":561},[547,658,659],{"class":629},"createFsDrain",[547,661,633],{"class":561},[547,663,664],{"class":557},"{",[547,666,668],{"class":667},"swJcz"," dir",[547,670,671],{"class":557},":",[547,673,577],{"class":557},[547,675,676],{"class":580},".audit",[547,678,636],{"class":557},[547,680,565],{"class":557},[547,682,683],{"class":667}," maxFiles",[547,685,671],{"class":557},[547,687,689],{"class":688},"sbssI"," 30",[547,691,571],{"class":557},[547,693,694],{"class":561},")",[547,696,565],{"class":557},[547,698,558],{"class":557},[547,700,701],{"class":667}," strategy",[547,703,671],{"class":557},[547,705,577],{"class":557},[547,707,708],{"class":580},"hash-chain",[547,710,636],{"class":557},[547,712,571],{"class":557},[547,714,694],{"class":561},[547,716,717],{"class":557},",\n",[547,719,721,724,727,729,733],{"class":549,"line":720},6,[547,722,723],{"class":557},"  {",[547,725,726],{"class":667}," await",[547,728,671],{"class":557},[547,730,732],{"class":731},"sfNiH"," true",[547,734,735],{"class":557}," },\n",[547,737,739],{"class":549,"line":738},7,[547,740,741],{"class":561},"))\n",[537,743,748],{"className":744,"code":745,"filename":746,"language":747,"meta":543,"style":543},"language-jsonl shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\"audit\":{\"action\":\"invoice.refund\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"invoice\",\"id\":\"inv_889\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_8f3c4b2a1e5d6f7c\",\"prevHash\":null,\"hash\":\"3f2c8e1a...\"}}\n{\"audit\":{\"action\":\"user.update\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"user\",\"id\":\"usr_99\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_5e7d8f9a0b1c2d3e\",\"prevHash\":\"3f2c8e1a...\",\"hash\":\"9a1b4d7c...\"}}\n","Output — .audit\u002F2026-04-24.ndjson","jsonl",[516,749,750,953],{"__ignoreMap":543},[547,751,752,754,757,761,763,766,768,772,774,776,778,781,783,785,787,790,792,794,796,799,801,803,805,808,810,812,814,817,819,821,823,826,828,831,833,836,838,840,842,844,846,848,850,853,855,857,859,861,863,865,867,870,872,874,876,879,881,883,885,888,890,892,894,897,899,901,904,906,908,911,913,915,917,920,922,924,926,929,931,934,936,939,941,943,945,948,950],{"class":549,"line":550},[547,753,664],{"class":557},[547,755,756],{"class":557},"\"",[547,758,760],{"class":759},"spNyl","audit",[547,762,756],{"class":557},[547,764,765],{"class":557},":{",[547,767,756],{"class":557},[547,769,771],{"class":770},"sBMFI","action",[547,773,756],{"class":557},[547,775,671],{"class":557},[547,777,756],{"class":557},[547,779,780],{"class":580},"invoice.refund",[547,782,756],{"class":557},[547,784,565],{"class":557},[547,786,756],{"class":557},[547,788,789],{"class":770},"actor",[547,791,756],{"class":557},[547,793,765],{"class":557},[547,795,756],{"class":557},[547,797,798],{"class":688},"type",[547,800,756],{"class":557},[547,802,671],{"class":557},[547,804,756],{"class":557},[547,806,807],{"class":580},"user",[547,809,756],{"class":557},[547,811,565],{"class":557},[547,813,756],{"class":557},[547,815,816],{"class":688},"id",[547,818,756],{"class":557},[547,820,671],{"class":557},[547,822,756],{"class":557},[547,824,825],{"class":580},"usr_42",[547,827,756],{"class":557},[547,829,830],{"class":557},"},",[547,832,756],{"class":557},[547,834,835],{"class":770},"target",[547,837,756],{"class":557},[547,839,765],{"class":557},[547,841,756],{"class":557},[547,843,798],{"class":688},[547,845,756],{"class":557},[547,847,671],{"class":557},[547,849,756],{"class":557},[547,851,852],{"class":580},"invoice",[547,854,756],{"class":557},[547,856,565],{"class":557},[547,858,756],{"class":557},[547,860,816],{"class":688},[547,862,756],{"class":557},[547,864,671],{"class":557},[547,866,756],{"class":557},[547,868,869],{"class":580},"inv_889",[547,871,756],{"class":557},[547,873,830],{"class":557},[547,875,756],{"class":557},[547,877,878],{"class":770},"outcome",[547,880,756],{"class":557},[547,882,671],{"class":557},[547,884,756],{"class":557},[547,886,887],{"class":580},"success",[547,889,756],{"class":557},[547,891,565],{"class":557},[547,893,756],{"class":557},[547,895,896],{"class":770},"version",[547,898,756],{"class":557},[547,900,671],{"class":557},[547,902,903],{"class":688},"1",[547,905,565],{"class":557},[547,907,756],{"class":557},[547,909,910],{"class":770},"idempotencyKey",[547,912,756],{"class":557},[547,914,671],{"class":557},[547,916,756],{"class":557},[547,918,919],{"class":580},"ak_8f3c4b2a1e5d6f7c",[547,921,756],{"class":557},[547,923,565],{"class":557},[547,925,756],{"class":557},[547,927,928],{"class":770},"prevHash",[547,930,756],{"class":557},[547,932,933],{"class":557},":null,",[547,935,756],{"class":557},[547,937,938],{"class":770},"hash",[547,940,756],{"class":557},[547,942,671],{"class":557},[547,944,756],{"class":557},[547,946,947],{"class":580},"3f2c8e1a...",[547,949,756],{"class":557},[547,951,952],{"class":557},"}}\n",[547,954,955,957,959,961,963,965,967,969,971,973,975,978,980,982,984,986,988,990,992,994,996,998,1000,1002,1004,1006,1008,1010,1012,1014,1016,1018,1020,1022,1024,1026,1028,1030,1032,1034,1036,1038,1040,1042,1044,1046,1048,1050,1052,1054,1056,1059,1061,1063,1065,1067,1069,1071,1073,1075,1077,1079,1081,1083,1085,1087,1089,1091,1093,1095,1097,1099,1101,1104,1106,1108,1110,1112,1114,1116,1118,1120,1122,1124,1126,1128,1130,1132,1134,1137,1139],{"class":549,"line":587},[547,956,664],{"class":557},[547,958,756],{"class":557},[547,960,760],{"class":759},[547,962,756],{"class":557},[547,964,765],{"class":557},[547,966,756],{"class":557},[547,968,771],{"class":770},[547,970,756],{"class":557},[547,972,671],{"class":557},[547,974,756],{"class":557},[547,976,977],{"class":580},"user.update",[547,979,756],{"class":557},[547,981,565],{"class":557},[547,983,756],{"class":557},[547,985,789],{"class":770},[547,987,756],{"class":557},[547,989,765],{"class":557},[547,991,756],{"class":557},[547,993,798],{"class":688},[547,995,756],{"class":557},[547,997,671],{"class":557},[547,999,756],{"class":557},[547,1001,807],{"class":580},[547,1003,756],{"class":557},[547,1005,565],{"class":557},[547,1007,756],{"class":557},[547,1009,816],{"class":688},[547,1011,756],{"class":557},[547,1013,671],{"class":557},[547,1015,756],{"class":557},[547,1017,825],{"class":580},[547,1019,756],{"class":557},[547,1021,830],{"class":557},[547,1023,756],{"class":557},[547,1025,835],{"class":770},[547,1027,756],{"class":557},[547,1029,765],{"class":557},[547,1031,756],{"class":557},[547,1033,798],{"class":688},[547,1035,756],{"class":557},[547,1037,671],{"class":557},[547,1039,756],{"class":557},[547,1041,807],{"class":580},[547,1043,756],{"class":557},[547,1045,565],{"class":557},[547,1047,756],{"class":557},[547,1049,816],{"class":688},[547,1051,756],{"class":557},[547,1053,671],{"class":557},[547,1055,756],{"class":557},[547,1057,1058],{"class":580},"usr_99",[547,1060,756],{"class":557},[547,1062,830],{"class":557},[547,1064,756],{"class":557},[547,1066,878],{"class":770},[547,1068,756],{"class":557},[547,1070,671],{"class":557},[547,1072,756],{"class":557},[547,1074,887],{"class":580},[547,1076,756],{"class":557},[547,1078,565],{"class":557},[547,1080,756],{"class":557},[547,1082,896],{"class":770},[547,1084,756],{"class":557},[547,1086,671],{"class":557},[547,1088,903],{"class":688},[547,1090,565],{"class":557},[547,1092,756],{"class":557},[547,1094,910],{"class":770},[547,1096,756],{"class":557},[547,1098,671],{"class":557},[547,1100,756],{"class":557},[547,1102,1103],{"class":580},"ak_5e7d8f9a0b1c2d3e",[547,1105,756],{"class":557},[547,1107,565],{"class":557},[547,1109,756],{"class":557},[547,1111,928],{"class":770},[547,1113,756],{"class":557},[547,1115,671],{"class":557},[547,1117,756],{"class":557},[547,1119,947],{"class":580},[547,1121,756],{"class":557},[547,1123,565],{"class":557},[547,1125,756],{"class":557},[547,1127,938],{"class":770},[547,1129,756],{"class":557},[547,1131,671],{"class":557},[547,1133,756],{"class":557},[547,1135,1136],{"class":580},"9a1b4d7c...",[547,1138,756],{"class":557},[547,1140,952],{"class":557},[512,1142,1143,1144,1146,1147,1149],{},"Each line's ",[516,1145,928],{}," matches the previous line's ",[516,1148,938],{},". Tampering with any row breaks the chain forward of that point — a verifier replays the hashes and reports the first mismatch.",[529,1151,1153],{"id":1152},"audit-logs-to-a-dedicated-axiom-dataset","Audit logs to a dedicated Axiom dataset",[534,1155,1156,1323,1391],{},[537,1157,1159],{"className":539,"code":1158,"filename":541,"language":542,"meta":543,"style":543},"import { auditOnly } from 'evlog'\nimport { createAxiomDrain } from 'evlog\u002Faxiom'\n\nnitro.hooks.hook('evlog:drain', createAxiomDrain({ dataset: 'logs' }))\nnitro.hooks.hook('evlog:drain', auditOnly(\n  createAxiomDrain({ dataset: 'audit', apiKey: process.env.AXIOM_AUDIT_API_KEY }),\n))\n",[516,1160,1161,1179,1199,1203,1247,1273,1319],{"__ignoreMap":543},[547,1162,1163,1165,1167,1169,1171,1173,1175,1177],{"class":549,"line":550},[547,1164,554],{"class":553},[547,1166,558],{"class":557},[547,1168,562],{"class":561},[547,1170,571],{"class":557},[547,1172,574],{"class":553},[547,1174,577],{"class":557},[547,1176,581],{"class":580},[547,1178,584],{"class":557},[547,1180,1181,1183,1185,1188,1190,1192,1194,1197],{"class":549,"line":587},[547,1182,554],{"class":553},[547,1184,558],{"class":557},[547,1186,1187],{"class":561}," createAxiomDrain",[547,1189,571],{"class":557},[547,1191,574],{"class":553},[547,1193,577],{"class":557},[547,1195,1196],{"class":580},"evlog\u002Faxiom",[547,1198,584],{"class":557},[547,1200,1201],{"class":549,"line":608},[547,1202,612],{"emptyLinePlaceholder":611},[547,1204,1205,1207,1209,1211,1213,1215,1217,1219,1221,1223,1225,1227,1229,1231,1234,1236,1238,1241,1243,1245],{"class":549,"line":615},[547,1206,618],{"class":561},[547,1208,621],{"class":557},[547,1210,624],{"class":561},[547,1212,621],{"class":557},[547,1214,630],{"class":629},[547,1216,633],{"class":561},[547,1218,636],{"class":557},[547,1220,639],{"class":580},[547,1222,636],{"class":557},[547,1224,565],{"class":557},[547,1226,1187],{"class":629},[547,1228,633],{"class":561},[547,1230,664],{"class":557},[547,1232,1233],{"class":667}," dataset",[547,1235,671],{"class":557},[547,1237,577],{"class":557},[547,1239,1240],{"class":580},"logs",[547,1242,636],{"class":557},[547,1244,571],{"class":557},[547,1246,741],{"class":561},[547,1248,1249,1251,1253,1255,1257,1259,1261,1263,1265,1267,1269,1271],{"class":549,"line":651},[547,1250,618],{"class":561},[547,1252,621],{"class":557},[547,1254,624],{"class":561},[547,1256,621],{"class":557},[547,1258,630],{"class":629},[547,1260,633],{"class":561},[547,1262,636],{"class":557},[547,1264,639],{"class":580},[547,1266,636],{"class":557},[547,1268,565],{"class":557},[547,1270,562],{"class":629},[547,1272,648],{"class":561},[547,1274,1275,1278,1280,1282,1284,1286,1288,1290,1292,1294,1297,1299,1302,1304,1307,1309,1312,1315,1317],{"class":549,"line":720},[547,1276,1277],{"class":629},"  createAxiomDrain",[547,1279,633],{"class":561},[547,1281,664],{"class":557},[547,1283,1233],{"class":667},[547,1285,671],{"class":557},[547,1287,577],{"class":557},[547,1289,760],{"class":580},[547,1291,636],{"class":557},[547,1293,565],{"class":557},[547,1295,1296],{"class":667}," apiKey",[547,1298,671],{"class":557},[547,1300,1301],{"class":561}," process",[547,1303,621],{"class":557},[547,1305,1306],{"class":561},"env",[547,1308,621],{"class":557},[547,1310,1311],{"class":561},"AXIOM_AUDIT_API_KEY ",[547,1313,1314],{"class":557},"}",[547,1316,694],{"class":561},[547,1318,717],{"class":557},[547,1320,1321],{"class":549,"line":738},[547,1322,741],{"class":561},[537,1324,1329],{"className":1325,"code":1326,"filename":1327,"language":1328,"meta":543,"style":543},"language-kusto shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","['audit']\n| where audit.action == \"invoice.refund\"\n| summarize count() by audit.outcome, bin(_time, 1h)\n","Output — Axiom query","kusto",[516,1330,1331,1345,1363],{"__ignoreMap":543},[547,1332,1333,1336,1338,1340,1342],{"class":549,"line":550},[547,1334,1335],{"class":561},"[",[547,1337,636],{"class":557},[547,1339,760],{"class":580},[547,1341,636],{"class":557},[547,1343,1344],{"class":561},"]\n",[547,1346,1347,1350,1353,1356,1358,1360],{"class":549,"line":587},[547,1348,1349],{"class":561},"| ",[547,1351,1352],{"class":688},"where",[547,1354,1355],{"class":561}," audit.action == ",[547,1357,756],{"class":557},[547,1359,780],{"class":580},[547,1361,1362],{"class":557},"\"\n",[547,1364,1365,1367,1370,1373,1376,1379,1382,1385,1388],{"class":549,"line":608},[547,1366,1349],{"class":561},[547,1368,1369],{"class":688},"summarize",[547,1371,1372],{"class":629}," count()",[547,1374,1375],{"class":688}," by",[547,1377,1378],{"class":561}," audit.outcome, ",[547,1380,1381],{"class":629},"bin",[547,1383,1384],{"class":561},"(_time, ",[547,1386,1387],{"class":688},"1h",[547,1389,1390],{"class":561},")\n",[537,1392,1395],{"className":1325,"code":1393,"filename":1394,"language":1328,"meta":543,"style":543},"['audit']\n| where audit.outcome == \"denied\"\n| summarize count() by audit.actor.id, audit.action\n| order by count_ desc\n","Output — denials by actor",[516,1396,1397,1409,1425,1438],{"__ignoreMap":543},[547,1398,1399,1401,1403,1405,1407],{"class":549,"line":550},[547,1400,1335],{"class":561},[547,1402,636],{"class":557},[547,1404,760],{"class":580},[547,1406,636],{"class":557},[547,1408,1344],{"class":561},[547,1410,1411,1413,1415,1418,1420,1423],{"class":549,"line":587},[547,1412,1349],{"class":561},[547,1414,1352],{"class":688},[547,1416,1417],{"class":561}," audit.outcome == ",[547,1419,756],{"class":557},[547,1421,1422],{"class":580},"denied",[547,1424,1362],{"class":557},[547,1426,1427,1429,1431,1433,1435],{"class":549,"line":608},[547,1428,1349],{"class":561},[547,1430,1369],{"class":688},[547,1432,1372],{"class":629},[547,1434,1375],{"class":688},[547,1436,1437],{"class":561}," audit.actor.id, audit.action\n",[547,1439,1440,1442,1445,1447,1450],{"class":549,"line":615},[547,1441,1349],{"class":561},[547,1443,1444],{"class":688},"order",[547,1446,1375],{"class":688},[547,1448,1449],{"class":561}," count_ ",[547,1451,1452],{"class":688},"desc\n",[512,1454,1455],{},"Splitting datasets means the audit dataset can have a longer retention (7y), tighter access controls, and a separate billing line — without touching the rest of your pipeline.",[529,1457,1459],{"id":1458},"audit-logs-in-postgres","Audit logs in Postgres",[534,1461,1462,1715],{},[537,1463,1465],{"className":539,"code":1464,"filename":541,"language":542,"meta":543,"style":543},"import { auditOnly } from 'evlog'\nimport type { DrainContext } from 'evlog'\n\nconst postgresAudit = async (ctx: DrainContext) => {\n  await db.insert(auditEvents).values({\n    id: ctx.event.audit!.idempotencyKey,\n    timestamp: new Date(ctx.event.timestamp),\n    payload: ctx.event,\n  }).onConflictDoNothing()\n}\n\nnitro.hooks.hook('evlog:drain', auditOnly(postgresAudit, { await: true }))\n",[516,1466,1467,1485,1507,1511,1544,1574,1600,1630,1646,1662,1668,1673],{"__ignoreMap":543},[547,1468,1469,1471,1473,1475,1477,1479,1481,1483],{"class":549,"line":550},[547,1470,554],{"class":553},[547,1472,558],{"class":557},[547,1474,562],{"class":561},[547,1476,571],{"class":557},[547,1478,574],{"class":553},[547,1480,577],{"class":557},[547,1482,581],{"class":580},[547,1484,584],{"class":557},[547,1486,1487,1489,1492,1494,1497,1499,1501,1503,1505],{"class":549,"line":587},[547,1488,554],{"class":553},[547,1490,1491],{"class":553}," type",[547,1493,558],{"class":557},[547,1495,1496],{"class":561}," DrainContext",[547,1498,571],{"class":557},[547,1500,574],{"class":553},[547,1502,577],{"class":557},[547,1504,581],{"class":580},[547,1506,584],{"class":557},[547,1508,1509],{"class":549,"line":608},[547,1510,612],{"emptyLinePlaceholder":611},[547,1512,1513,1516,1519,1522,1525,1528,1532,1534,1536,1538,1541],{"class":549,"line":615},[547,1514,1515],{"class":759},"const",[547,1517,1518],{"class":561}," postgresAudit ",[547,1520,1521],{"class":557},"=",[547,1523,1524],{"class":759}," async",[547,1526,1527],{"class":557}," (",[547,1529,1531],{"class":1530},"sHdIc","ctx",[547,1533,671],{"class":557},[547,1535,1496],{"class":770},[547,1537,694],{"class":557},[547,1539,1540],{"class":759}," =>",[547,1542,1543],{"class":557}," {\n",[547,1545,1546,1549,1552,1554,1557,1559,1562,1564,1566,1569,1571],{"class":549,"line":651},[547,1547,1548],{"class":553},"  await",[547,1550,1551],{"class":561}," db",[547,1553,621],{"class":557},[547,1555,1556],{"class":629},"insert",[547,1558,633],{"class":667},[547,1560,1561],{"class":561},"auditEvents",[547,1563,694],{"class":667},[547,1565,621],{"class":557},[547,1567,1568],{"class":629},"values",[547,1570,633],{"class":667},[547,1572,1573],{"class":557},"{\n",[547,1575,1576,1579,1581,1584,1586,1589,1591,1593,1596,1598],{"class":549,"line":720},[547,1577,1578],{"class":667},"    id",[547,1580,671],{"class":557},[547,1582,1583],{"class":561}," ctx",[547,1585,621],{"class":557},[547,1587,1588],{"class":561},"event",[547,1590,621],{"class":557},[547,1592,760],{"class":561},[547,1594,1595],{"class":557},"!.",[547,1597,910],{"class":561},[547,1599,717],{"class":557},[547,1601,1602,1605,1607,1610,1613,1615,1617,1619,1621,1623,1626,1628],{"class":549,"line":738},[547,1603,1604],{"class":667},"    timestamp",[547,1606,671],{"class":557},[547,1608,1609],{"class":557}," new",[547,1611,1612],{"class":629}," Date",[547,1614,633],{"class":667},[547,1616,1531],{"class":561},[547,1618,621],{"class":557},[547,1620,1588],{"class":561},[547,1622,621],{"class":557},[547,1624,1625],{"class":561},"timestamp",[547,1627,694],{"class":667},[547,1629,717],{"class":557},[547,1631,1633,1636,1638,1640,1642,1644],{"class":549,"line":1632},8,[547,1634,1635],{"class":667},"    payload",[547,1637,671],{"class":557},[547,1639,1583],{"class":561},[547,1641,621],{"class":557},[547,1643,1588],{"class":561},[547,1645,717],{"class":557},[547,1647,1649,1652,1654,1656,1659],{"class":549,"line":1648},9,[547,1650,1651],{"class":557},"  }",[547,1653,694],{"class":667},[547,1655,621],{"class":557},[547,1657,1658],{"class":629},"onConflictDoNothing",[547,1660,1661],{"class":667},"()\n",[547,1663,1665],{"class":549,"line":1664},10,[547,1666,1667],{"class":557},"}\n",[547,1669,1671],{"class":549,"line":1670},11,[547,1672,612],{"emptyLinePlaceholder":611},[547,1674,1676,1678,1680,1682,1684,1686,1688,1690,1692,1694,1696,1698,1701,1703,1705,1707,1709,1711,1713],{"class":549,"line":1675},12,[547,1677,618],{"class":561},[547,1679,621],{"class":557},[547,1681,624],{"class":561},[547,1683,621],{"class":557},[547,1685,630],{"class":629},[547,1687,633],{"class":561},[547,1689,636],{"class":557},[547,1691,639],{"class":580},[547,1693,636],{"class":557},[547,1695,565],{"class":557},[547,1697,562],{"class":629},[547,1699,1700],{"class":561},"(postgresAudit",[547,1702,565],{"class":557},[547,1704,558],{"class":557},[547,1706,726],{"class":667},[547,1708,671],{"class":557},[547,1710,732],{"class":731},[547,1712,571],{"class":557},[547,1714,741],{"class":561},[537,1716,1721],{"className":1717,"code":1718,"filename":1719,"language":1720,"meta":543,"style":543},"language-sql shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","SELECT id, timestamp, payload->'audit'->>'action' AS action,\n       payload->'audit'->>'outcome' AS outcome\nFROM audit_events\nWHERE id = 'ak_8f3c4b2a1e5d6f7c';\n\n--          id          |       timestamp       |     action      | outcome\n-- ---------------------+-----------------------+-----------------+---------\n--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n","Output — audit_events row","sql",[516,1722,1723,1762,1788,1796,1815,1819,1825,1830],{"__ignoreMap":543},[547,1724,1725,1728,1731,1733,1736,1739,1741,1743,1745,1748,1750,1752,1754,1757,1760],{"class":549,"line":550},[547,1726,1727],{"class":688},"SELECT",[547,1729,1730],{"class":561}," id, ",[547,1732,1625],{"class":759},[547,1734,1735],{"class":561},", payload",[547,1737,1738],{"class":557},"->",[547,1740,636],{"class":557},[547,1742,760],{"class":580},[547,1744,636],{"class":557},[547,1746,1747],{"class":557},"->>",[547,1749,636],{"class":557},[547,1751,771],{"class":580},[547,1753,636],{"class":557},[547,1755,1756],{"class":688}," AS",[547,1758,1759],{"class":688}," action",[547,1761,717],{"class":561},[547,1763,1764,1767,1769,1771,1773,1775,1777,1779,1781,1783,1785],{"class":549,"line":587},[547,1765,1766],{"class":561},"       payload",[547,1768,1738],{"class":557},[547,1770,636],{"class":557},[547,1772,760],{"class":580},[547,1774,636],{"class":557},[547,1776,1747],{"class":557},[547,1778,636],{"class":557},[547,1780,878],{"class":580},[547,1782,636],{"class":557},[547,1784,1756],{"class":688},[547,1786,1787],{"class":561}," outcome\n",[547,1789,1790,1793],{"class":549,"line":608},[547,1791,1792],{"class":688},"FROM",[547,1794,1795],{"class":561}," audit_events\n",[547,1797,1798,1801,1804,1806,1808,1810,1812],{"class":549,"line":615},[547,1799,1800],{"class":688},"WHERE",[547,1802,1803],{"class":561}," id ",[547,1805,1521],{"class":557},[547,1807,577],{"class":557},[547,1809,919],{"class":580},[547,1811,636],{"class":557},[547,1813,1814],{"class":561},";\n",[547,1816,1817],{"class":549,"line":651},[547,1818,612],{"emptyLinePlaceholder":611},[547,1820,1821],{"class":549,"line":720},[547,1822,1824],{"class":1823},"sHwdD","--          id          |       timestamp       |     action      | outcome\n",[547,1826,1827],{"class":549,"line":738},[547,1828,1829],{"class":1823},"-- ---------------------+-----------------------+-----------------+---------\n",[547,1831,1832],{"class":549,"line":1632},[547,1833,1834],{"class":1823},"--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n",[512,1836,1837,1838,1840,1841,1844],{},"The deterministic ",[516,1839,910],{}," makes retries safe — duplicate inserts collapse via ",[516,1842,1843],{},"ON CONFLICT DO NOTHING",". Without it, a transient network blip during a retry would create a duplicate audit row, which is exactly what you don't want.",[529,1846,1848],{"id":1847},"testing-audits","Testing audits",[512,1850,1851,1854,1855,519,1858,1861,1862,671],{},[516,1852,1853],{},"mockAudit()"," captures every audit event on emit — from standalone ",[516,1856,1857],{},"audit()",[516,1859,1860],{},"log.audit()",", and ",[516,1863,1864],{},"log.set({ audit })",[537,1866,1868],{"className":539,"code":1867,"language":542,"meta":543,"style":543},"import { mockAudit } from 'evlog'\n\nit('refunds the invoice and records an audit', async () => {\n  const captured = mockAudit()\n\n  await refundInvoice({ id: 'inv_889' }, { actor: { type: 'user', id: 'u1' } })\n\n  captured.assertAudit({\n    action: 'invoice.refund',\n    target: { type: 'invoice', id: 'inv_889' },\n    outcome: 'success',\n  })\n\n  captured.restore()\n})\n",[516,1869,1870,1889,1893,1918,1933,1937,2000,2004,2018,2033,2066,2081,2087,2092,2104],{"__ignoreMap":543},[547,1871,1872,1874,1876,1879,1881,1883,1885,1887],{"class":549,"line":550},[547,1873,554],{"class":553},[547,1875,558],{"class":557},[547,1877,1878],{"class":561}," mockAudit",[547,1880,571],{"class":557},[547,1882,574],{"class":553},[547,1884,577],{"class":557},[547,1886,581],{"class":580},[547,1888,584],{"class":557},[547,1890,1891],{"class":549,"line":587},[547,1892,612],{"emptyLinePlaceholder":611},[547,1894,1895,1898,1900,1902,1905,1907,1909,1911,1914,1916],{"class":549,"line":608},[547,1896,1897],{"class":629},"it",[547,1899,633],{"class":561},[547,1901,636],{"class":557},[547,1903,1904],{"class":580},"refunds the invoice and records an audit",[547,1906,636],{"class":557},[547,1908,565],{"class":557},[547,1910,1524],{"class":759},[547,1912,1913],{"class":557}," ()",[547,1915,1540],{"class":759},[547,1917,1543],{"class":557},[547,1919,1920,1923,1926,1929,1931],{"class":549,"line":615},[547,1921,1922],{"class":759},"  const",[547,1924,1925],{"class":561}," captured",[547,1927,1928],{"class":557}," =",[547,1930,1878],{"class":629},[547,1932,1661],{"class":667},[547,1934,1935],{"class":549,"line":651},[547,1936,612],{"emptyLinePlaceholder":611},[547,1938,1939,1941,1944,1946,1948,1951,1953,1955,1957,1959,1962,1964,1967,1969,1971,1973,1975,1977,1979,1981,1983,1985,1987,1989,1992,1994,1996,1998],{"class":549,"line":720},[547,1940,1548],{"class":553},[547,1942,1943],{"class":629}," refundInvoice",[547,1945,633],{"class":667},[547,1947,664],{"class":557},[547,1949,1950],{"class":667}," id",[547,1952,671],{"class":557},[547,1954,577],{"class":557},[547,1956,869],{"class":580},[547,1958,636],{"class":557},[547,1960,1961],{"class":557}," },",[547,1963,558],{"class":557},[547,1965,1966],{"class":667}," actor",[547,1968,671],{"class":557},[547,1970,558],{"class":557},[547,1972,1491],{"class":667},[547,1974,671],{"class":557},[547,1976,577],{"class":557},[547,1978,807],{"class":580},[547,1980,636],{"class":557},[547,1982,565],{"class":557},[547,1984,1950],{"class":667},[547,1986,671],{"class":557},[547,1988,577],{"class":557},[547,1990,1991],{"class":580},"u1",[547,1993,636],{"class":557},[547,1995,571],{"class":557},[547,1997,571],{"class":557},[547,1999,1390],{"class":667},[547,2001,2002],{"class":549,"line":738},[547,2003,612],{"emptyLinePlaceholder":611},[547,2005,2006,2009,2011,2014,2016],{"class":549,"line":1632},[547,2007,2008],{"class":561},"  captured",[547,2010,621],{"class":557},[547,2012,2013],{"class":629},"assertAudit",[547,2015,633],{"class":667},[547,2017,1573],{"class":557},[547,2019,2020,2023,2025,2027,2029,2031],{"class":549,"line":1648},[547,2021,2022],{"class":667},"    action",[547,2024,671],{"class":557},[547,2026,577],{"class":557},[547,2028,780],{"class":580},[547,2030,636],{"class":557},[547,2032,717],{"class":557},[547,2034,2035,2038,2040,2042,2044,2046,2048,2050,2052,2054,2056,2058,2060,2062,2064],{"class":549,"line":1664},[547,2036,2037],{"class":667},"    target",[547,2039,671],{"class":557},[547,2041,558],{"class":557},[547,2043,1491],{"class":667},[547,2045,671],{"class":557},[547,2047,577],{"class":557},[547,2049,852],{"class":580},[547,2051,636],{"class":557},[547,2053,565],{"class":557},[547,2055,1950],{"class":667},[547,2057,671],{"class":557},[547,2059,577],{"class":557},[547,2061,869],{"class":580},[547,2063,636],{"class":557},[547,2065,735],{"class":557},[547,2067,2068,2071,2073,2075,2077,2079],{"class":549,"line":1670},[547,2069,2070],{"class":667},"    outcome",[547,2072,671],{"class":557},[547,2074,577],{"class":557},[547,2076,887],{"class":580},[547,2078,636],{"class":557},[547,2080,717],{"class":557},[547,2082,2083,2085],{"class":549,"line":1675},[547,2084,1651],{"class":557},[547,2086,1390],{"class":667},[547,2088,2090],{"class":549,"line":2089},13,[547,2091,612],{"emptyLinePlaceholder":611},[547,2093,2095,2097,2099,2102],{"class":549,"line":2094},14,[547,2096,2008],{"class":561},[547,2098,621],{"class":557},[547,2100,2101],{"class":629},"restore",[547,2103,1661],{"class":667},[547,2105,2107,2109],{"class":549,"line":2106},15,[547,2108,1314],{"class":557},[547,2110,1390],{"class":561},[512,2112,2113,2114,2117,2118,2121,2122,621],{},"Prefer ",[516,2115,2116],{},"assertAudit()"," when a missing audit should fail the test with a readable message. Use ",[516,2119,2120],{},"toIncludeAuditOf()"," when you need a boolean inside ",[516,2123,2124],{},"expect(...)",[512,2126,2127,2128,2131,2132,2135],{},"Always call ",[516,2129,2130],{},"captured.restore()"," in an ",[516,2133,2134],{},"afterEach"," (or wrap with a fixture) so a failing assertion never leaks into the next test.",[529,2137,2139],{"id":2138},"api-reference","API Reference",[2141,2142,2143,2159],"table",{},[2144,2145,2146],"thead",{},[2147,2148,2149,2153,2156],"tr",{},[2150,2151,2152],"th",{},"Symbol",[2150,2154,2155],{},"Kind",[2150,2157,2158],{},"Notes",[2160,2161,2162,2175,2188,2200,2216,2228,2241,2254,2270,2287,2300,2315,2327],"tbody",{},[2147,2163,2164,2170,2172],{},[2165,2166,2167],"td",{},[516,2168,2169],{},"AuditFields",[2165,2171,798],{},[2165,2173,2174],{},"Reserved field on the wide event",[2147,2176,2177,2182,2185],{},[2165,2178,2179],{},[516,2180,2181],{},"defineAuditAction(name, opts?)",[2165,2183,2184],{},"factory",[2165,2186,2187],{},"Typed action registry, infers target shape",[2147,2189,2190,2195,2197],{},[2165,2191,2192],{},[516,2193,2194],{},"defineAuditCatalog(prefix, map)",[2165,2196,2184],{},[2165,2198,2199],{},"Bundle of typed audit actions sharing a prefix",[2147,2201,2202,2207,2210],{},[2165,2203,2204],{},[516,2205,2206],{},"log.audit(fields)",[2165,2208,2209],{},"method",[2165,2211,2212,2213,2215],{},"Sugar over ",[516,2214,1864],{}," + force-keep",[2147,2217,2218,2223,2225],{},[2165,2219,2220],{},[516,2221,2222],{},"log.audit.deny(reason, fields)",[2165,2224,2209],{},[2165,2226,2227],{},"Records a denied action",[2147,2229,2230,2235,2238],{},[2165,2231,2232],{},[516,2233,2234],{},"audit(fields)",[2165,2236,2237],{},"function",[2165,2239,2240],{},"Standalone for scripts \u002F jobs",[2147,2242,2243,2248,2251],{},[2165,2244,2245],{},[516,2246,2247],{},"withAudit({ action, target })(fn)",[2165,2249,2250],{},"wrapper",[2165,2252,2253],{},"Auto-emit success \u002F failure \u002F denied",[2147,2255,2256,2261,2264],{},[2165,2257,2258],{},[516,2259,2260],{},"auditDiff(before, after)",[2165,2262,2263],{},"helper",[2165,2265,2266,2267],{},"Redact-aware JSON Patch for ",[516,2268,2269],{},"changes",[2147,2271,2272,2276,2279],{},[2165,2273,2274],{},[516,2275,1853],{},[2165,2277,2278],{},"test util",[2165,2280,2281,2282,2284,2285],{},"Capture audits on emit; ",[516,2283,2116],{}," or ",[516,2286,2120],{},[2147,2288,2289,2294,2297],{},[2165,2290,2291],{},[516,2292,2293],{},"auditEnricher(opts?)",[2165,2295,2296],{},"enricher",[2165,2298,2299],{},"Auto-fill request \u002F runtime \u002F tenant context",[2147,2301,2302,2307,2309],{},[2165,2303,2304],{},[516,2305,2306],{},"auditOnly(drain, { await? })",[2165,2308,2250],{},[2165,2310,2311,2312,2314],{},"Routes only events with an ",[516,2313,760],{}," field",[2147,2316,2317,2322,2324],{},[2165,2318,2319],{},[516,2320,2321],{},"signed(drain, opts)",[2165,2323,2250],{},[2165,2325,2326],{},"Generic integrity wrapper (hmac \u002F hash-chain)",[2147,2328,2329,2334,2337],{},[2165,2330,2331],{},[516,2332,2333],{},"auditRedactPreset",[2165,2335,2336],{},"config",[2165,2338,2339],{},"Strict PII for audit events",[512,2341,2342,2343,2345],{},"Everything ships from the main ",[516,2344,581],{}," entrypoint.",[2347,2348,2349],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}",{"title":543,"searchDepth":587,"depth":587,"links":2351},[2352,2353,2354,2355,2356],{"id":531,"depth":587,"text":532},{"id":1152,"depth":587,"text":1153},{"id":1458,"depth":587,"text":1459},{"id":1847,"depth":587,"text":1848},{"id":2138,"depth":587,"text":2139},"File system, Axiom, and Postgres recipes for audit logs, plus mockAudit for tests and the full API reference.","md",[2360,2363],{"label":382,"icon":359,"to":383,"color":2361,"variant":2362},"neutral","subtle",{"label":133,"icon":131,"to":138,"color":2361,"variant":2362},{},{"title":386,"icon":79},{"title":507,"description":2357},"d4tHcUb1EpoUIrMkf-DJ-DPvE575KpxoUq7BH9zzato",[2369,2371],{"title":382,"path":383,"stem":384,"description":2370,"icon":359,"children":-1},"Integrity, redact presets, GDPR vs append-only, retention windows, and the most common pitfalls when shipping audit logs to production.",{"title":36,"path":394,"stem":395,"description":2372,"icon":39,"children":-1},"Wide-event telemetry for CLIs and automation — evlog's one-event-per-run model for tools on user machines, with privacy-safe flags, consent, outbox, and auto-generated disclosure.",1785229774475]