[{"data":1,"prerenderedAt":2388},["ShallowReactive",2],{"navigation_docs":3,"-use-cases-audit-recipes":520,"-use-cases-audit-recipes-surround":2383},[4,30,80,123,303,435,490],{"title":5,"path":6,"stem":7,"children":8,"page":29},"Start","\u002Fstart","1.start",[9,14,19,24],{"title":10,"path":11,"stem":12,"icon":13},"Introduction","\u002Fstart\u002Fintroduction","1.start\u002F1.introduction","i-lucide-info",{"title":15,"path":16,"stem":17,"icon":18},"Why start with evlog","\u002Fstart\u002Fwhy-evlog","1.start\u002F2.why-evlog","i-lucide-rocket",{"title":20,"path":21,"stem":22,"icon":23},"Installation","\u002Fstart\u002Finstallation","1.start\u002F3.installation","i-lucide-download",{"title":25,"path":26,"stem":27,"icon":28},"Quick Start","\u002Fstart\u002Fquick-start","1.start\u002F4.quick-start","i-lucide-zap",false,{"title":31,"path":32,"stem":33,"children":34,"page":29},"Learn","\u002Flearn","2.learn",[35,40,45,50,55,60,65,70,75],{"title":36,"path":37,"stem":38,"icon":39},"Overview","\u002Flearn\u002Foverview","2.learn\u002F0.overview","i-lucide-list",{"title":41,"path":42,"stem":43,"icon":44},"Simple Logging","\u002Flearn\u002Fsimple-logging","2.learn\u002F1.simple-logging","i-lucide-terminal",{"title":46,"path":47,"stem":48,"icon":49},"Wide Events","\u002Flearn\u002Fwide-events","2.learn\u002F2.wide-events","i-lucide-layers",{"title":51,"path":52,"stem":53,"icon":54},"Structured Errors","\u002Flearn\u002Fstructured-errors","2.learn\u002F3.structured-errors","i-lucide-shield-alert",{"title":56,"path":57,"stem":58,"icon":59},"Lifecycle","\u002Flearn\u002Flifecycle","2.learn\u002F4.lifecycle","i-lucide-arrow-right-left",{"title":61,"path":62,"stem":63,"icon":64},"Sampling","\u002Flearn\u002Fsampling","2.learn\u002F5.sampling","i-lucide-filter",{"title":66,"path":67,"stem":68,"icon":69},"Auto-Redaction","\u002Flearn\u002Fredaction","2.learn\u002F6.redaction","i-lucide-eye-off",{"title":71,"path":72,"stem":73,"icon":74},"Typed Fields","\u002Flearn\u002Ftyped-fields","2.learn\u002F7.typed-fields","i-simple-icons-typescript",{"title":76,"path":77,"stem":78,"icon":79},"Catalogs","\u002Flearn\u002Fcatalogs","2.learn\u002F8.catalogs","i-lucide-book-open",{"title":81,"path":82,"stem":83,"children":84,"page":29},"CLI","\u002Fcli","3.cli",[85,88,93,98,103,108,113,118],{"title":36,"path":86,"stem":87,"icon":44},"\u002Fcli\u002Foverview","3.cli\u002F0.overview",{"title":89,"path":90,"stem":91,"icon":92},"init","\u002Fcli\u002Finit","3.cli\u002F1.init","i-lucide-wand-sparkles",{"title":94,"path":95,"stem":96,"icon":97},"map","\u002Fcli\u002Fmap","3.cli\u002F2.map","i-lucide-radar",{"title":99,"path":100,"stem":101,"icon":102},"Rules","\u002Fcli\u002Frules","3.cli\u002F3.rules","i-lucide-list-checks",{"title":104,"path":105,"stem":106,"icon":107},"Scoring","\u002Fcli\u002Fscoring","3.cli\u002F4.scoring","i-lucide-gauge",{"title":109,"path":110,"stem":111,"icon":112},"CI","\u002Fcli\u002Fci","3.cli\u002F5.ci","i-lucide-git-pull-request",{"title":114,"path":115,"stem":116,"icon":117},"doctor","\u002Fcli\u002Fdoctor","3.cli\u002F6.doctor","i-lucide-stethoscope",{"title":119,"path":120,"stem":121,"icon":122},"telemetry","\u002Fcli\u002Ftelemetry","3.cli\u002F7.telemetry","i-lucide-bar-chart-3",{"title":124,"path":125,"stem":126,"children":127,"page":29},"Integrate","\u002Fintegrate","4.integrate",[128,132,215],{"title":36,"path":129,"stem":130,"icon":131},"\u002Fintegrate\u002Foverview","4.integrate\u002F0.overview","i-lucide-plug",{"title":133,"path":134,"stem":135,"children":136,"page":29},"Adapters","\u002Fintegrate\u002Fadapters","4.integrate\u002Fadapters",[137,140,170,195],{"title":36,"path":138,"stem":139,"icon":39},"\u002Fintegrate\u002Fadapters\u002Foverview","4.integrate\u002Fadapters\u002F01.overview",{"title":141,"path":142,"stem":143,"children":144,"page":29},"Cloud","\u002Fintegrate\u002Fadapters\u002Fcloud","4.integrate\u002Fadapters\u002Fcloud",[145,150,155,160,165],{"title":146,"path":147,"stem":148,"icon":149},"Axiom","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Faxiom","4.integrate\u002Fadapters\u002Fcloud\u002F01.axiom","i-custom-axiom",{"title":151,"path":152,"stem":153,"icon":154},"PostHog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fposthog","4.integrate\u002Fadapters\u002Fcloud\u002F02.posthog","i-simple-icons-posthog",{"title":156,"path":157,"stem":158,"icon":159},"Sentry","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fsentry","4.integrate\u002Fadapters\u002Fcloud\u002F03.sentry","i-simple-icons-sentry",{"title":161,"path":162,"stem":163,"icon":164},"Better Stack","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fbetter-stack","4.integrate\u002Fadapters\u002Fcloud\u002F04.better-stack","i-simple-icons-betterstack",{"title":166,"path":167,"stem":168,"icon":169},"Datadog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fdatadog","4.integrate\u002Fadapters\u002Fcloud\u002F05.datadog","i-simple-icons-datadog",{"title":171,"path":172,"stem":173,"children":174,"page":29},"Cloud or Self-Hosted","\u002Fintegrate\u002Fadapters\u002Fhybrid","4.integrate\u002Fadapters\u002Fhybrid",[175,180,185,190],{"title":176,"path":177,"stem":178,"icon":179},"Grafana Loki","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Floki","4.integrate\u002Fadapters\u002Fhybrid\u002F01.loki","i-simple-icons-grafana",{"title":181,"path":182,"stem":183,"icon":184},"ClickHouse","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Fclickhouse","4.integrate\u002Fadapters\u002Fhybrid\u002F02.clickhouse","i-simple-icons-clickhouse",{"title":186,"path":187,"stem":188,"icon":189},"OTLP","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Fotlp","4.integrate\u002Fadapters\u002Fhybrid\u002F03.otlp","i-simple-icons-opentelemetry",{"title":191,"path":192,"stem":193,"icon":194},"HyperDX","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Fhyperdx","4.integrate\u002Fadapters\u002Fhybrid\u002F04.hyperdx","i-custom-hyperdx",{"title":196,"path":197,"stem":198,"children":199,"page":29},"Self-Hosted","\u002Fintegrate\u002Fadapters\u002Fself-hosted","4.integrate\u002Fadapters\u002Fself-hosted",[200,205,210],{"title":201,"path":202,"stem":203,"icon":204},"File System","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Ffs","4.integrate\u002Fadapters\u002Fself-hosted\u002F01.fs","i-lucide-hard-drive",{"title":206,"path":207,"stem":208,"icon":209},"NuxtHub","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fnuxthub","4.integrate\u002Fadapters\u002Fself-hosted\u002F02.nuxthub","i-simple-icons-nuxt",{"title":211,"path":212,"stem":213,"icon":214},"Memory","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fmemory","4.integrate\u002Fadapters\u002Fself-hosted\u002F03.memory","i-lucide-cpu",{"title":216,"path":217,"stem":218,"children":219,"page":29},"Frameworks","\u002Fintegrate\u002Fframeworks","4.integrate\u002Fframeworks",[220,224,229,234,239,244,249,254,259,264,269,274,279,284,288,293,298],{"title":36,"path":221,"stem":222,"icon":223},"\u002Fintegrate\u002Fframeworks\u002Foverview","4.integrate\u002Fframeworks\u002F00.overview","i-lucide-layout-grid",{"title":225,"path":226,"stem":227,"icon":228},"Nuxt","\u002Fintegrate\u002Fframeworks\u002Fnuxt","4.integrate\u002Fframeworks\u002F01.nuxt","i-simple-icons-nuxtdotjs",{"title":230,"path":231,"stem":232,"icon":233},"Next.js","\u002Fintegrate\u002Fframeworks\u002Fnextjs","4.integrate\u002Fframeworks\u002F02.nextjs","i-simple-icons-nextdotjs",{"title":235,"path":236,"stem":237,"icon":238},"SvelteKit","\u002Fintegrate\u002Fframeworks\u002Fsveltekit","4.integrate\u002Fframeworks\u002F03.sveltekit","i-simple-icons-svelte",{"title":240,"path":241,"stem":242,"icon":243},"Nitro","\u002Fintegrate\u002Fframeworks\u002Fnitro","4.integrate\u002Fframeworks\u002F04.nitro","i-custom-nitro",{"title":245,"path":246,"stem":247,"icon":248},"TanStack Start","\u002Fintegrate\u002Fframeworks\u002Ftanstack-start","4.integrate\u002Fframeworks\u002F05.tanstack-start","i-custom-tanstack",{"title":250,"path":251,"stem":252,"icon":253},"NestJS","\u002Fintegrate\u002Fframeworks\u002Fnestjs","4.integrate\u002Fframeworks\u002F06.nestjs","i-simple-icons-nestjs",{"title":255,"path":256,"stem":257,"icon":258},"Express","\u002Fintegrate\u002Fframeworks\u002Fexpress","4.integrate\u002Fframeworks\u002F07.express","i-simple-icons-express",{"title":260,"path":261,"stem":262,"icon":263},"Hono","\u002Fintegrate\u002Fframeworks\u002Fhono","4.integrate\u002Fframeworks\u002F08.hono","i-simple-icons-hono",{"title":265,"path":266,"stem":267,"icon":268},"Fastify","\u002Fintegrate\u002Fframeworks\u002Ffastify","4.integrate\u002Fframeworks\u002F09.fastify","i-simple-icons-fastify",{"title":270,"path":271,"stem":272,"icon":273},"Elysia","\u002Fintegrate\u002Fframeworks\u002Felysia","4.integrate\u002Fframeworks\u002F10.elysia","i-custom-elysia",{"title":275,"path":276,"stem":277,"icon":278},"React Router","\u002Fintegrate\u002Fframeworks\u002Freact-router","4.integrate\u002Fframeworks\u002F11.react-router","i-custom-reactrouter",{"title":280,"path":281,"stem":282,"icon":283},"Cloudflare Workers","\u002Fintegrate\u002Fframeworks\u002Fcloudflare-workers","4.integrate\u002Fframeworks\u002F12.cloudflare-workers","i-simple-icons-cloudflare",{"title":285,"path":286,"stem":287,"icon":74},"Standalone","\u002Fintegrate\u002Fframeworks\u002Fstandalone","4.integrate\u002Fframeworks\u002F13.standalone",{"title":289,"path":290,"stem":291,"icon":292},"Astro","\u002Fintegrate\u002Fframeworks\u002Fastro","4.integrate\u002Fframeworks\u002F14.astro","i-simple-icons-astro",{"title":294,"path":295,"stem":296,"icon":297},"oRPC","\u002Fintegrate\u002Fframeworks\u002Forpc","4.integrate\u002Fframeworks\u002F15.orpc","i-lucide-network",{"title":299,"path":300,"stem":301,"icon":302},"AWS Lambda","\u002Fintegrate\u002Fframeworks\u002Faws-lambda","4.integrate\u002Fframeworks\u002F16.aws-lambda","i-custom-lambda",{"title":304,"path":305,"stem":306,"children":307,"page":29},"Use Cases","\u002Fuse-cases","5.use-cases",[308,311,316,345,372,404,425,430],{"title":36,"path":309,"stem":310,"icon":102},"\u002Fuse-cases\u002Foverview","5.use-cases\u002F0.overview",{"title":312,"path":313,"stem":314,"icon":315},"Client Logging","\u002Fuse-cases\u002Fclient-logging","5.use-cases\u002F1.client-logging","i-lucide-monitor",{"title":317,"icon":318,"path":319,"stem":320,"children":321,"page":29},"AI SDK","i-simple-icons-vercel","\u002Fuse-cases\u002Fai-sdk","5.use-cases\u002F2.ai-sdk",[322,325,330,335,340],{"title":36,"path":323,"stem":324,"icon":39},"\u002Fuse-cases\u002Fai-sdk\u002Foverview","5.use-cases\u002F2.ai-sdk\u002F01.overview",{"title":326,"path":327,"stem":328,"icon":329},"Usage","\u002Fuse-cases\u002Fai-sdk\u002Fusage","5.use-cases\u002F2.ai-sdk\u002F02.usage","i-lucide-code",{"title":331,"path":332,"stem":333,"icon":334},"Options","\u002Fuse-cases\u002Fai-sdk\u002Foptions","5.use-cases\u002F2.ai-sdk\u002F03.options","i-lucide-sliders",{"title":336,"path":337,"stem":338,"icon":339},"Metadata","\u002Fuse-cases\u002Fai-sdk\u002Fmetadata","5.use-cases\u002F2.ai-sdk\u002F04.metadata","i-lucide-database",{"title":341,"path":342,"stem":343,"icon":344},"Telemetry","\u002Fuse-cases\u002Fai-sdk\u002Ftelemetry","5.use-cases\u002F2.ai-sdk\u002F05.telemetry","i-lucide-activity",{"title":346,"icon":347,"path":348,"stem":349,"children":350,"page":29},"Better Auth","i-simple-icons-betterauth","\u002Fuse-cases\u002Fbetter-auth","5.use-cases\u002F3.better-auth",[351,354,359,364,368],{"title":36,"path":352,"stem":353,"icon":39},"\u002Fuse-cases\u002Fbetter-auth\u002Foverview","5.use-cases\u002F3.better-auth\u002F01.overview",{"title":355,"path":356,"stem":357,"icon":358},"Identify User","\u002Fuse-cases\u002Fbetter-auth\u002Fidentify-user","5.use-cases\u002F3.better-auth\u002F02.identify-user","i-lucide-user-check",{"title":360,"path":361,"stem":362,"icon":363},"Middleware","\u002Fuse-cases\u002Fbetter-auth\u002Fmiddleware","5.use-cases\u002F3.better-auth\u002F03.middleware","i-lucide-shield",{"title":365,"path":366,"stem":367,"icon":315},"Client Sync","\u002Fuse-cases\u002Fbetter-auth\u002Fclient-sync","5.use-cases\u002F3.better-auth\u002F04.client-sync",{"title":369,"path":370,"stem":371,"icon":107},"Performance","\u002Fuse-cases\u002Fbetter-auth\u002Fperformance","5.use-cases\u002F3.better-auth\u002F05.performance",{"title":373,"icon":374,"path":375,"stem":376,"children":377,"page":29},"Audit Logs","i-lucide-shield-check","\u002Fuse-cases\u002Faudit","5.use-cases\u002F4.audit",[378,381,386,391,396,400],{"title":36,"path":379,"stem":380,"icon":39},"\u002Fuse-cases\u002Faudit\u002Foverview","5.use-cases\u002F4.audit\u002F01.overview",{"title":382,"path":383,"stem":384,"icon":385},"Schema","\u002Fuse-cases\u002Faudit\u002Fschema","5.use-cases\u002F4.audit\u002F02.schema","i-lucide-file-text",{"title":387,"path":388,"stem":389,"icon":390},"Recording","\u002Fuse-cases\u002Faudit\u002Frecording","5.use-cases\u002F4.audit\u002F03.recording","i-lucide-pen-line",{"title":392,"path":393,"stem":394,"icon":395},"Drains","\u002Fuse-cases\u002Faudit\u002Fpipeline","5.use-cases\u002F4.audit\u002F04.pipeline","i-lucide-link",{"title":397,"path":398,"stem":399,"icon":374},"Compliance","\u002Fuse-cases\u002Faudit\u002Fcompliance","5.use-cases\u002F4.audit\u002F05.compliance",{"title":401,"path":402,"stem":403,"icon":79},"Recipes","\u002Fuse-cases\u002Faudit\u002Frecipes","5.use-cases\u002F4.audit\u002F06.recipes",{"title":341,"icon":107,"path":405,"stem":406,"children":407,"page":29},"\u002Fuse-cases\u002Ftelemetry","5.use-cases\u002F4.telemetry",[408,411,416,421],{"title":36,"path":409,"stem":410,"icon":39},"\u002Fuse-cases\u002Ftelemetry\u002Foverview","5.use-cases\u002F4.telemetry\u002F01.overview",{"title":412,"path":413,"stem":414,"icon":415},"Setup","\u002Fuse-cases\u002Ftelemetry\u002Fsetup","5.use-cases\u002F4.telemetry\u002F02.setup","i-lucide-wrench",{"title":417,"path":418,"stem":419,"icon":420},"Ingest","\u002Fuse-cases\u002Ftelemetry\u002Fingest","5.use-cases\u002F4.telemetry\u002F03.ingest","i-lucide-server",{"title":422,"path":423,"stem":424,"icon":79},"Reference","\u002Fuse-cases\u002Ftelemetry\u002Freference","5.use-cases\u002F4.telemetry\u002F04.reference",{"title":426,"path":427,"stem":428,"icon":429},"Enrichers","\u002Fuse-cases\u002Fenrichers","5.use-cases\u002F5.enrichers","i-lucide-sparkles",{"title":431,"path":432,"stem":433,"icon":434},"eve","\u002Fuse-cases\u002Feve","5.use-cases\u002F5.eve","i-custom-eve",{"title":436,"path":437,"stem":438,"children":439,"page":29},"Extend","\u002Fextend","6.extend",[440,444,449,454,459,463,467,471,475,480,485],{"title":36,"path":441,"stem":442,"icon":443},"\u002Fextend\u002Foverview","6.extend\u002F0.overview","i-lucide-blocks",{"title":445,"path":446,"stem":447,"icon":448},"Stream","\u002Fextend\u002Fstream","6.extend\u002F1.stream","i-lucide-radio-tower",{"title":450,"path":451,"stem":452,"icon":453},"Custom framework","\u002Fextend\u002Fcustom-framework","6.extend\u002F10.custom-framework","i-lucide-puzzle",{"title":455,"path":456,"stem":457,"icon":458},"FS reader","\u002Fextend\u002Ffs-reader","6.extend\u002F2.fs-reader","i-lucide-folder-search",{"title":401,"path":460,"stem":461,"icon":462},"\u002Fextend\u002Fconsumer-recipes","6.extend\u002F3.consumer-recipes","i-lucide-chef-hat",{"title":464,"path":465,"stem":466,"icon":443},"Plugins","\u002Fextend\u002Fplugins","6.extend\u002F4.plugins",{"title":468,"path":469,"stem":470,"icon":429},"Custom enrichers","\u002Fextend\u002Fcustom-enrichers","6.extend\u002F5.custom-enrichers",{"title":472,"path":473,"stem":474,"icon":64},"Tail sampling","\u002Fextend\u002Ftail-sampling","6.extend\u002F6.tail-sampling",{"title":476,"path":477,"stem":478,"icon":479},"Identity headers","\u002Fextend\u002Fidentity-headers","6.extend\u002F7.identity-headers","i-lucide-fingerprint",{"title":481,"path":482,"stem":483,"icon":484},"Custom drains","\u002Fextend\u002Fcustom-drains","6.extend\u002F8.custom-drains","i-lucide-share-2",{"title":486,"path":487,"stem":488,"icon":489},"Drain pipeline","\u002Fextend\u002Fdrain-pipeline","6.extend\u002F9.drain-pipeline","i-lucide-workflow",{"title":422,"path":491,"stem":492,"children":493,"page":29},"\u002Freference","7.reference",[494,499,502,507,511,516],{"title":495,"path":496,"stem":497,"icon":498},"Configuration","\u002Freference\u002Fconfiguration","7.reference\u002F1.configuration","i-lucide-settings",{"title":369,"path":500,"stem":501,"icon":107},"\u002Freference\u002Fperformance","7.reference\u002F2.performance",{"title":503,"path":504,"stem":505,"icon":506},"Vite Plugin","\u002Freference\u002Fvite-plugin","7.reference\u002F3.vite-plugin","i-custom-vite",{"title":508,"path":509,"stem":510,"icon":374},"Best Practices","\u002Freference\u002Fbest-practices","7.reference\u002F4.best-practices",{"title":512,"path":513,"stem":514,"icon":515},"vs Other Loggers","\u002Freference\u002Fvs-other-loggers","7.reference\u002F5.vs-other-loggers","i-lucide-scale",{"title":517,"path":518,"stem":519,"icon":429},"Agent Skills","\u002Freference\u002Fagent-skills","7.reference\u002F6.agent-skills",{"id":521,"title":522,"body":523,"description":2372,"extension":2373,"links":2374,"meta":2379,"navigation":2380,"path":402,"seo":2381,"stem":403,"__hash__":2382},"docs\u002F5.use-cases\u002F4.audit\u002F06.recipes.md","Recipes & Reference",{"type":524,"value":525,"toc":2365},"minimark",[526,543,548,1156,1165,1169,1468,1471,1475,1850,1860,1864,1880,2126,2140,2151,2155,2355,2361],[527,528,529,530,534,535,538,539,542],"p",{},"Pick the recipe that matches your sink, drop it in, and you have a tamper-evident audit log. Each recipe composes the same primitives (",[531,532,533],"code",{},"auditOnly",", ",[531,536,537],{},"signed",", optional ",[531,540,541],{},"await: true",") over different drains.",[544,545,547],"h2",{"id":546},"audit-logs-on-disk","Audit logs on disk",[549,550,551,757],"code-group",{},[552,553,559],"pre",{"className":554,"code":555,"filename":556,"language":557,"meta":558,"style":558},"language-typescript shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { auditOnly, signed } from 'evlog'\nimport { createFsDrain } from 'evlog\u002Ffs'\n\nnitro.hooks.hook('evlog:drain', auditOnly(\n  signed(createFsDrain({ dir: '.audit', maxFiles: 30 }), { strategy: 'hash-chain' }),\n  { await: true },\n))\n","Input — server\u002Fplugins\u002Fevlog.ts","typescript","",[531,560,561,600,621,628,664,733,751],{"__ignoreMap":558},[562,563,566,570,574,578,581,584,587,590,593,597],"span",{"class":564,"line":565},"line",1,[562,567,569],{"class":568},"s7zQu","import",[562,571,573],{"class":572},"sMK4o"," {",[562,575,577],{"class":576},"sTEyZ"," auditOnly",[562,579,580],{"class":572},",",[562,582,583],{"class":576}," signed",[562,585,586],{"class":572}," }",[562,588,589],{"class":568}," from",[562,591,592],{"class":572}," '",[562,594,596],{"class":595},"sfazB","evlog",[562,598,599],{"class":572},"'\n",[562,601,603,605,607,610,612,614,616,619],{"class":564,"line":602},2,[562,604,569],{"class":568},[562,606,573],{"class":572},[562,608,609],{"class":576}," createFsDrain",[562,611,586],{"class":572},[562,613,589],{"class":568},[562,615,592],{"class":572},[562,617,618],{"class":595},"evlog\u002Ffs",[562,620,599],{"class":572},[562,622,624],{"class":564,"line":623},3,[562,625,627],{"emptyLinePlaceholder":626},true,"\n",[562,629,631,634,637,640,642,646,649,652,655,657,659,661],{"class":564,"line":630},4,[562,632,633],{"class":576},"nitro",[562,635,636],{"class":572},".",[562,638,639],{"class":576},"hooks",[562,641,636],{"class":572},[562,643,645],{"class":644},"s2Zo4","hook",[562,647,648],{"class":576},"(",[562,650,651],{"class":572},"'",[562,653,654],{"class":595},"evlog:drain",[562,656,651],{"class":572},[562,658,580],{"class":572},[562,660,577],{"class":644},[562,662,663],{"class":576},"(\n",[562,665,667,670,672,675,677,680,684,687,689,692,694,696,699,701,705,707,710,712,714,717,719,721,724,726,728,730],{"class":564,"line":666},5,[562,668,669],{"class":644},"  signed",[562,671,648],{"class":576},[562,673,674],{"class":644},"createFsDrain",[562,676,648],{"class":576},[562,678,679],{"class":572},"{",[562,681,683],{"class":682},"swJcz"," dir",[562,685,686],{"class":572},":",[562,688,592],{"class":572},[562,690,691],{"class":595},".audit",[562,693,651],{"class":572},[562,695,580],{"class":572},[562,697,698],{"class":682}," maxFiles",[562,700,686],{"class":572},[562,702,704],{"class":703},"sbssI"," 30",[562,706,586],{"class":572},[562,708,709],{"class":576},")",[562,711,580],{"class":572},[562,713,573],{"class":572},[562,715,716],{"class":682}," strategy",[562,718,686],{"class":572},[562,720,592],{"class":572},[562,722,723],{"class":595},"hash-chain",[562,725,651],{"class":572},[562,727,586],{"class":572},[562,729,709],{"class":576},[562,731,732],{"class":572},",\n",[562,734,736,739,742,744,748],{"class":564,"line":735},6,[562,737,738],{"class":572},"  {",[562,740,741],{"class":682}," await",[562,743,686],{"class":572},[562,745,747],{"class":746},"sfNiH"," true",[562,749,750],{"class":572}," },\n",[562,752,754],{"class":564,"line":753},7,[562,755,756],{"class":576},"))\n",[552,758,763],{"className":759,"code":760,"filename":761,"language":762,"meta":558,"style":558},"language-jsonl shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\"audit\":{\"action\":\"invoice.refund\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"invoice\",\"id\":\"inv_889\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_8f3c4b2a1e5d6f7c\",\"prevHash\":null,\"hash\":\"3f2c8e1a...\"}}\n{\"audit\":{\"action\":\"user.update\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"user\",\"id\":\"usr_99\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_5e7d8f9a0b1c2d3e\",\"prevHash\":\"3f2c8e1a...\",\"hash\":\"9a1b4d7c...\"}}\n","Output — .audit\u002F2026-04-24.ndjson","jsonl",[531,764,765,968],{"__ignoreMap":558},[562,766,767,769,772,776,778,781,783,787,789,791,793,796,798,800,802,805,807,809,811,814,816,818,820,823,825,827,829,832,834,836,838,841,843,846,848,851,853,855,857,859,861,863,865,868,870,872,874,876,878,880,882,885,887,889,891,894,896,898,900,903,905,907,909,912,914,916,919,921,923,926,928,930,932,935,937,939,941,944,946,949,951,954,956,958,960,963,965],{"class":564,"line":565},[562,768,679],{"class":572},[562,770,771],{"class":572},"\"",[562,773,775],{"class":774},"spNyl","audit",[562,777,771],{"class":572},[562,779,780],{"class":572},":{",[562,782,771],{"class":572},[562,784,786],{"class":785},"sBMFI","action",[562,788,771],{"class":572},[562,790,686],{"class":572},[562,792,771],{"class":572},[562,794,795],{"class":595},"invoice.refund",[562,797,771],{"class":572},[562,799,580],{"class":572},[562,801,771],{"class":572},[562,803,804],{"class":785},"actor",[562,806,771],{"class":572},[562,808,780],{"class":572},[562,810,771],{"class":572},[562,812,813],{"class":703},"type",[562,815,771],{"class":572},[562,817,686],{"class":572},[562,819,771],{"class":572},[562,821,822],{"class":595},"user",[562,824,771],{"class":572},[562,826,580],{"class":572},[562,828,771],{"class":572},[562,830,831],{"class":703},"id",[562,833,771],{"class":572},[562,835,686],{"class":572},[562,837,771],{"class":572},[562,839,840],{"class":595},"usr_42",[562,842,771],{"class":572},[562,844,845],{"class":572},"},",[562,847,771],{"class":572},[562,849,850],{"class":785},"target",[562,852,771],{"class":572},[562,854,780],{"class":572},[562,856,771],{"class":572},[562,858,813],{"class":703},[562,860,771],{"class":572},[562,862,686],{"class":572},[562,864,771],{"class":572},[562,866,867],{"class":595},"invoice",[562,869,771],{"class":572},[562,871,580],{"class":572},[562,873,771],{"class":572},[562,875,831],{"class":703},[562,877,771],{"class":572},[562,879,686],{"class":572},[562,881,771],{"class":572},[562,883,884],{"class":595},"inv_889",[562,886,771],{"class":572},[562,888,845],{"class":572},[562,890,771],{"class":572},[562,892,893],{"class":785},"outcome",[562,895,771],{"class":572},[562,897,686],{"class":572},[562,899,771],{"class":572},[562,901,902],{"class":595},"success",[562,904,771],{"class":572},[562,906,580],{"class":572},[562,908,771],{"class":572},[562,910,911],{"class":785},"version",[562,913,771],{"class":572},[562,915,686],{"class":572},[562,917,918],{"class":703},"1",[562,920,580],{"class":572},[562,922,771],{"class":572},[562,924,925],{"class":785},"idempotencyKey",[562,927,771],{"class":572},[562,929,686],{"class":572},[562,931,771],{"class":572},[562,933,934],{"class":595},"ak_8f3c4b2a1e5d6f7c",[562,936,771],{"class":572},[562,938,580],{"class":572},[562,940,771],{"class":572},[562,942,943],{"class":785},"prevHash",[562,945,771],{"class":572},[562,947,948],{"class":572},":null,",[562,950,771],{"class":572},[562,952,953],{"class":785},"hash",[562,955,771],{"class":572},[562,957,686],{"class":572},[562,959,771],{"class":572},[562,961,962],{"class":595},"3f2c8e1a...",[562,964,771],{"class":572},[562,966,967],{"class":572},"}}\n",[562,969,970,972,974,976,978,980,982,984,986,988,990,993,995,997,999,1001,1003,1005,1007,1009,1011,1013,1015,1017,1019,1021,1023,1025,1027,1029,1031,1033,1035,1037,1039,1041,1043,1045,1047,1049,1051,1053,1055,1057,1059,1061,1063,1065,1067,1069,1071,1074,1076,1078,1080,1082,1084,1086,1088,1090,1092,1094,1096,1098,1100,1102,1104,1106,1108,1110,1112,1114,1116,1119,1121,1123,1125,1127,1129,1131,1133,1135,1137,1139,1141,1143,1145,1147,1149,1152,1154],{"class":564,"line":602},[562,971,679],{"class":572},[562,973,771],{"class":572},[562,975,775],{"class":774},[562,977,771],{"class":572},[562,979,780],{"class":572},[562,981,771],{"class":572},[562,983,786],{"class":785},[562,985,771],{"class":572},[562,987,686],{"class":572},[562,989,771],{"class":572},[562,991,992],{"class":595},"user.update",[562,994,771],{"class":572},[562,996,580],{"class":572},[562,998,771],{"class":572},[562,1000,804],{"class":785},[562,1002,771],{"class":572},[562,1004,780],{"class":572},[562,1006,771],{"class":572},[562,1008,813],{"class":703},[562,1010,771],{"class":572},[562,1012,686],{"class":572},[562,1014,771],{"class":572},[562,1016,822],{"class":595},[562,1018,771],{"class":572},[562,1020,580],{"class":572},[562,1022,771],{"class":572},[562,1024,831],{"class":703},[562,1026,771],{"class":572},[562,1028,686],{"class":572},[562,1030,771],{"class":572},[562,1032,840],{"class":595},[562,1034,771],{"class":572},[562,1036,845],{"class":572},[562,1038,771],{"class":572},[562,1040,850],{"class":785},[562,1042,771],{"class":572},[562,1044,780],{"class":572},[562,1046,771],{"class":572},[562,1048,813],{"class":703},[562,1050,771],{"class":572},[562,1052,686],{"class":572},[562,1054,771],{"class":572},[562,1056,822],{"class":595},[562,1058,771],{"class":572},[562,1060,580],{"class":572},[562,1062,771],{"class":572},[562,1064,831],{"class":703},[562,1066,771],{"class":572},[562,1068,686],{"class":572},[562,1070,771],{"class":572},[562,1072,1073],{"class":595},"usr_99",[562,1075,771],{"class":572},[562,1077,845],{"class":572},[562,1079,771],{"class":572},[562,1081,893],{"class":785},[562,1083,771],{"class":572},[562,1085,686],{"class":572},[562,1087,771],{"class":572},[562,1089,902],{"class":595},[562,1091,771],{"class":572},[562,1093,580],{"class":572},[562,1095,771],{"class":572},[562,1097,911],{"class":785},[562,1099,771],{"class":572},[562,1101,686],{"class":572},[562,1103,918],{"class":703},[562,1105,580],{"class":572},[562,1107,771],{"class":572},[562,1109,925],{"class":785},[562,1111,771],{"class":572},[562,1113,686],{"class":572},[562,1115,771],{"class":572},[562,1117,1118],{"class":595},"ak_5e7d8f9a0b1c2d3e",[562,1120,771],{"class":572},[562,1122,580],{"class":572},[562,1124,771],{"class":572},[562,1126,943],{"class":785},[562,1128,771],{"class":572},[562,1130,686],{"class":572},[562,1132,771],{"class":572},[562,1134,962],{"class":595},[562,1136,771],{"class":572},[562,1138,580],{"class":572},[562,1140,771],{"class":572},[562,1142,953],{"class":785},[562,1144,771],{"class":572},[562,1146,686],{"class":572},[562,1148,771],{"class":572},[562,1150,1151],{"class":595},"9a1b4d7c...",[562,1153,771],{"class":572},[562,1155,967],{"class":572},[527,1157,1158,1159,1161,1162,1164],{},"Each line's ",[531,1160,943],{}," matches the previous line's ",[531,1163,953],{},". Tampering with any row breaks the chain forward of that point — a verifier replays the hashes and reports the first mismatch.",[544,1166,1168],{"id":1167},"audit-logs-to-a-dedicated-axiom-dataset","Audit logs to a dedicated Axiom dataset",[549,1170,1171,1338,1406],{},[552,1172,1174],{"className":554,"code":1173,"filename":556,"language":557,"meta":558,"style":558},"import { auditOnly } from 'evlog'\nimport { createAxiomDrain } from 'evlog\u002Faxiom'\n\nnitro.hooks.hook('evlog:drain', createAxiomDrain({ dataset: 'logs' }))\nnitro.hooks.hook('evlog:drain', auditOnly(\n  createAxiomDrain({ dataset: 'audit', apiKey: process.env.AXIOM_AUDIT_API_KEY }),\n))\n",[531,1175,1176,1194,1214,1218,1262,1288,1334],{"__ignoreMap":558},[562,1177,1178,1180,1182,1184,1186,1188,1190,1192],{"class":564,"line":565},[562,1179,569],{"class":568},[562,1181,573],{"class":572},[562,1183,577],{"class":576},[562,1185,586],{"class":572},[562,1187,589],{"class":568},[562,1189,592],{"class":572},[562,1191,596],{"class":595},[562,1193,599],{"class":572},[562,1195,1196,1198,1200,1203,1205,1207,1209,1212],{"class":564,"line":602},[562,1197,569],{"class":568},[562,1199,573],{"class":572},[562,1201,1202],{"class":576}," createAxiomDrain",[562,1204,586],{"class":572},[562,1206,589],{"class":568},[562,1208,592],{"class":572},[562,1210,1211],{"class":595},"evlog\u002Faxiom",[562,1213,599],{"class":572},[562,1215,1216],{"class":564,"line":623},[562,1217,627],{"emptyLinePlaceholder":626},[562,1219,1220,1222,1224,1226,1228,1230,1232,1234,1236,1238,1240,1242,1244,1246,1249,1251,1253,1256,1258,1260],{"class":564,"line":630},[562,1221,633],{"class":576},[562,1223,636],{"class":572},[562,1225,639],{"class":576},[562,1227,636],{"class":572},[562,1229,645],{"class":644},[562,1231,648],{"class":576},[562,1233,651],{"class":572},[562,1235,654],{"class":595},[562,1237,651],{"class":572},[562,1239,580],{"class":572},[562,1241,1202],{"class":644},[562,1243,648],{"class":576},[562,1245,679],{"class":572},[562,1247,1248],{"class":682}," dataset",[562,1250,686],{"class":572},[562,1252,592],{"class":572},[562,1254,1255],{"class":595},"logs",[562,1257,651],{"class":572},[562,1259,586],{"class":572},[562,1261,756],{"class":576},[562,1263,1264,1266,1268,1270,1272,1274,1276,1278,1280,1282,1284,1286],{"class":564,"line":666},[562,1265,633],{"class":576},[562,1267,636],{"class":572},[562,1269,639],{"class":576},[562,1271,636],{"class":572},[562,1273,645],{"class":644},[562,1275,648],{"class":576},[562,1277,651],{"class":572},[562,1279,654],{"class":595},[562,1281,651],{"class":572},[562,1283,580],{"class":572},[562,1285,577],{"class":644},[562,1287,663],{"class":576},[562,1289,1290,1293,1295,1297,1299,1301,1303,1305,1307,1309,1312,1314,1317,1319,1322,1324,1327,1330,1332],{"class":564,"line":735},[562,1291,1292],{"class":644},"  createAxiomDrain",[562,1294,648],{"class":576},[562,1296,679],{"class":572},[562,1298,1248],{"class":682},[562,1300,686],{"class":572},[562,1302,592],{"class":572},[562,1304,775],{"class":595},[562,1306,651],{"class":572},[562,1308,580],{"class":572},[562,1310,1311],{"class":682}," apiKey",[562,1313,686],{"class":572},[562,1315,1316],{"class":576}," process",[562,1318,636],{"class":572},[562,1320,1321],{"class":576},"env",[562,1323,636],{"class":572},[562,1325,1326],{"class":576},"AXIOM_AUDIT_API_KEY ",[562,1328,1329],{"class":572},"}",[562,1331,709],{"class":576},[562,1333,732],{"class":572},[562,1335,1336],{"class":564,"line":753},[562,1337,756],{"class":576},[552,1339,1344],{"className":1340,"code":1341,"filename":1342,"language":1343,"meta":558,"style":558},"language-kusto shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","['audit']\n| where audit.action == \"invoice.refund\"\n| summarize count() by audit.outcome, bin(_time, 1h)\n","Output — Axiom query","kusto",[531,1345,1346,1360,1378],{"__ignoreMap":558},[562,1347,1348,1351,1353,1355,1357],{"class":564,"line":565},[562,1349,1350],{"class":576},"[",[562,1352,651],{"class":572},[562,1354,775],{"class":595},[562,1356,651],{"class":572},[562,1358,1359],{"class":576},"]\n",[562,1361,1362,1365,1368,1371,1373,1375],{"class":564,"line":602},[562,1363,1364],{"class":576},"| ",[562,1366,1367],{"class":703},"where",[562,1369,1370],{"class":576}," audit.action == ",[562,1372,771],{"class":572},[562,1374,795],{"class":595},[562,1376,1377],{"class":572},"\"\n",[562,1379,1380,1382,1385,1388,1391,1394,1397,1400,1403],{"class":564,"line":623},[562,1381,1364],{"class":576},[562,1383,1384],{"class":703},"summarize",[562,1386,1387],{"class":644}," count()",[562,1389,1390],{"class":703}," by",[562,1392,1393],{"class":576}," audit.outcome, ",[562,1395,1396],{"class":644},"bin",[562,1398,1399],{"class":576},"(_time, ",[562,1401,1402],{"class":703},"1h",[562,1404,1405],{"class":576},")\n",[552,1407,1410],{"className":1340,"code":1408,"filename":1409,"language":1343,"meta":558,"style":558},"['audit']\n| where audit.outcome == \"denied\"\n| summarize count() by audit.actor.id, audit.action\n| order by count_ desc\n","Output — denials by actor",[531,1411,1412,1424,1440,1453],{"__ignoreMap":558},[562,1413,1414,1416,1418,1420,1422],{"class":564,"line":565},[562,1415,1350],{"class":576},[562,1417,651],{"class":572},[562,1419,775],{"class":595},[562,1421,651],{"class":572},[562,1423,1359],{"class":576},[562,1425,1426,1428,1430,1433,1435,1438],{"class":564,"line":602},[562,1427,1364],{"class":576},[562,1429,1367],{"class":703},[562,1431,1432],{"class":576}," audit.outcome == ",[562,1434,771],{"class":572},[562,1436,1437],{"class":595},"denied",[562,1439,1377],{"class":572},[562,1441,1442,1444,1446,1448,1450],{"class":564,"line":623},[562,1443,1364],{"class":576},[562,1445,1384],{"class":703},[562,1447,1387],{"class":644},[562,1449,1390],{"class":703},[562,1451,1452],{"class":576}," audit.actor.id, audit.action\n",[562,1454,1455,1457,1460,1462,1465],{"class":564,"line":630},[562,1456,1364],{"class":576},[562,1458,1459],{"class":703},"order",[562,1461,1390],{"class":703},[562,1463,1464],{"class":576}," count_ ",[562,1466,1467],{"class":703},"desc\n",[527,1469,1470],{},"Splitting datasets means the audit dataset can have a longer retention (7y), tighter access controls, and a separate billing line — without touching the rest of your pipeline.",[544,1472,1474],{"id":1473},"audit-logs-in-postgres","Audit logs in Postgres",[549,1476,1477,1730],{},[552,1478,1480],{"className":554,"code":1479,"filename":556,"language":557,"meta":558,"style":558},"import { auditOnly } from 'evlog'\nimport type { DrainContext } from 'evlog'\n\nconst postgresAudit = async (ctx: DrainContext) => {\n  await db.insert(auditEvents).values({\n    id: ctx.event.audit!.idempotencyKey,\n    timestamp: new Date(ctx.event.timestamp),\n    payload: ctx.event,\n  }).onConflictDoNothing()\n}\n\nnitro.hooks.hook('evlog:drain', auditOnly(postgresAudit, { await: true }))\n",[531,1481,1482,1500,1522,1526,1559,1589,1615,1645,1661,1677,1683,1688],{"__ignoreMap":558},[562,1483,1484,1486,1488,1490,1492,1494,1496,1498],{"class":564,"line":565},[562,1485,569],{"class":568},[562,1487,573],{"class":572},[562,1489,577],{"class":576},[562,1491,586],{"class":572},[562,1493,589],{"class":568},[562,1495,592],{"class":572},[562,1497,596],{"class":595},[562,1499,599],{"class":572},[562,1501,1502,1504,1507,1509,1512,1514,1516,1518,1520],{"class":564,"line":602},[562,1503,569],{"class":568},[562,1505,1506],{"class":568}," type",[562,1508,573],{"class":572},[562,1510,1511],{"class":576}," DrainContext",[562,1513,586],{"class":572},[562,1515,589],{"class":568},[562,1517,592],{"class":572},[562,1519,596],{"class":595},[562,1521,599],{"class":572},[562,1523,1524],{"class":564,"line":623},[562,1525,627],{"emptyLinePlaceholder":626},[562,1527,1528,1531,1534,1537,1540,1543,1547,1549,1551,1553,1556],{"class":564,"line":630},[562,1529,1530],{"class":774},"const",[562,1532,1533],{"class":576}," postgresAudit ",[562,1535,1536],{"class":572},"=",[562,1538,1539],{"class":774}," async",[562,1541,1542],{"class":572}," (",[562,1544,1546],{"class":1545},"sHdIc","ctx",[562,1548,686],{"class":572},[562,1550,1511],{"class":785},[562,1552,709],{"class":572},[562,1554,1555],{"class":774}," =>",[562,1557,1558],{"class":572}," {\n",[562,1560,1561,1564,1567,1569,1572,1574,1577,1579,1581,1584,1586],{"class":564,"line":666},[562,1562,1563],{"class":568},"  await",[562,1565,1566],{"class":576}," db",[562,1568,636],{"class":572},[562,1570,1571],{"class":644},"insert",[562,1573,648],{"class":682},[562,1575,1576],{"class":576},"auditEvents",[562,1578,709],{"class":682},[562,1580,636],{"class":572},[562,1582,1583],{"class":644},"values",[562,1585,648],{"class":682},[562,1587,1588],{"class":572},"{\n",[562,1590,1591,1594,1596,1599,1601,1604,1606,1608,1611,1613],{"class":564,"line":735},[562,1592,1593],{"class":682},"    id",[562,1595,686],{"class":572},[562,1597,1598],{"class":576}," ctx",[562,1600,636],{"class":572},[562,1602,1603],{"class":576},"event",[562,1605,636],{"class":572},[562,1607,775],{"class":576},[562,1609,1610],{"class":572},"!.",[562,1612,925],{"class":576},[562,1614,732],{"class":572},[562,1616,1617,1620,1622,1625,1628,1630,1632,1634,1636,1638,1641,1643],{"class":564,"line":753},[562,1618,1619],{"class":682},"    timestamp",[562,1621,686],{"class":572},[562,1623,1624],{"class":572}," new",[562,1626,1627],{"class":644}," Date",[562,1629,648],{"class":682},[562,1631,1546],{"class":576},[562,1633,636],{"class":572},[562,1635,1603],{"class":576},[562,1637,636],{"class":572},[562,1639,1640],{"class":576},"timestamp",[562,1642,709],{"class":682},[562,1644,732],{"class":572},[562,1646,1648,1651,1653,1655,1657,1659],{"class":564,"line":1647},8,[562,1649,1650],{"class":682},"    payload",[562,1652,686],{"class":572},[562,1654,1598],{"class":576},[562,1656,636],{"class":572},[562,1658,1603],{"class":576},[562,1660,732],{"class":572},[562,1662,1664,1667,1669,1671,1674],{"class":564,"line":1663},9,[562,1665,1666],{"class":572},"  }",[562,1668,709],{"class":682},[562,1670,636],{"class":572},[562,1672,1673],{"class":644},"onConflictDoNothing",[562,1675,1676],{"class":682},"()\n",[562,1678,1680],{"class":564,"line":1679},10,[562,1681,1682],{"class":572},"}\n",[562,1684,1686],{"class":564,"line":1685},11,[562,1687,627],{"emptyLinePlaceholder":626},[562,1689,1691,1693,1695,1697,1699,1701,1703,1705,1707,1709,1711,1713,1716,1718,1720,1722,1724,1726,1728],{"class":564,"line":1690},12,[562,1692,633],{"class":576},[562,1694,636],{"class":572},[562,1696,639],{"class":576},[562,1698,636],{"class":572},[562,1700,645],{"class":644},[562,1702,648],{"class":576},[562,1704,651],{"class":572},[562,1706,654],{"class":595},[562,1708,651],{"class":572},[562,1710,580],{"class":572},[562,1712,577],{"class":644},[562,1714,1715],{"class":576},"(postgresAudit",[562,1717,580],{"class":572},[562,1719,573],{"class":572},[562,1721,741],{"class":682},[562,1723,686],{"class":572},[562,1725,747],{"class":746},[562,1727,586],{"class":572},[562,1729,756],{"class":576},[552,1731,1736],{"className":1732,"code":1733,"filename":1734,"language":1735,"meta":558,"style":558},"language-sql shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","SELECT id, timestamp, payload->'audit'->>'action' AS action,\n       payload->'audit'->>'outcome' AS outcome\nFROM audit_events\nWHERE id = 'ak_8f3c4b2a1e5d6f7c';\n\n--          id          |       timestamp       |     action      | outcome\n-- ---------------------+-----------------------+-----------------+---------\n--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n","Output — audit_events row","sql",[531,1737,1738,1777,1803,1811,1830,1834,1840,1845],{"__ignoreMap":558},[562,1739,1740,1743,1746,1748,1751,1754,1756,1758,1760,1763,1765,1767,1769,1772,1775],{"class":564,"line":565},[562,1741,1742],{"class":703},"SELECT",[562,1744,1745],{"class":576}," id, ",[562,1747,1640],{"class":774},[562,1749,1750],{"class":576},", payload",[562,1752,1753],{"class":572},"->",[562,1755,651],{"class":572},[562,1757,775],{"class":595},[562,1759,651],{"class":572},[562,1761,1762],{"class":572},"->>",[562,1764,651],{"class":572},[562,1766,786],{"class":595},[562,1768,651],{"class":572},[562,1770,1771],{"class":703}," AS",[562,1773,1774],{"class":703}," action",[562,1776,732],{"class":576},[562,1778,1779,1782,1784,1786,1788,1790,1792,1794,1796,1798,1800],{"class":564,"line":602},[562,1780,1781],{"class":576},"       payload",[562,1783,1753],{"class":572},[562,1785,651],{"class":572},[562,1787,775],{"class":595},[562,1789,651],{"class":572},[562,1791,1762],{"class":572},[562,1793,651],{"class":572},[562,1795,893],{"class":595},[562,1797,651],{"class":572},[562,1799,1771],{"class":703},[562,1801,1802],{"class":576}," outcome\n",[562,1804,1805,1808],{"class":564,"line":623},[562,1806,1807],{"class":703},"FROM",[562,1809,1810],{"class":576}," audit_events\n",[562,1812,1813,1816,1819,1821,1823,1825,1827],{"class":564,"line":630},[562,1814,1815],{"class":703},"WHERE",[562,1817,1818],{"class":576}," id ",[562,1820,1536],{"class":572},[562,1822,592],{"class":572},[562,1824,934],{"class":595},[562,1826,651],{"class":572},[562,1828,1829],{"class":576},";\n",[562,1831,1832],{"class":564,"line":666},[562,1833,627],{"emptyLinePlaceholder":626},[562,1835,1836],{"class":564,"line":735},[562,1837,1839],{"class":1838},"sHwdD","--          id          |       timestamp       |     action      | outcome\n",[562,1841,1842],{"class":564,"line":753},[562,1843,1844],{"class":1838},"-- ---------------------+-----------------------+-----------------+---------\n",[562,1846,1847],{"class":564,"line":1647},[562,1848,1849],{"class":1838},"--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n",[527,1851,1852,1853,1855,1856,1859],{},"The deterministic ",[531,1854,925],{}," makes retries safe — duplicate inserts collapse via ",[531,1857,1858],{},"ON CONFLICT DO NOTHING",". Without it, a transient network blip during a retry would create a duplicate audit row, which is exactly what you don't want.",[544,1861,1863],{"id":1862},"testing-audits","Testing audits",[527,1865,1866,1869,1870,534,1873,1876,1877,686],{},[531,1867,1868],{},"mockAudit()"," captures every audit event on emit — from standalone ",[531,1871,1872],{},"audit()",[531,1874,1875],{},"log.audit()",", and ",[531,1878,1879],{},"log.set({ audit })",[552,1881,1883],{"className":554,"code":1882,"language":557,"meta":558,"style":558},"import { mockAudit } from 'evlog'\n\nit('refunds the invoice and records an audit', async () => {\n  const captured = mockAudit()\n\n  await refundInvoice({ id: 'inv_889' }, { actor: { type: 'user', id: 'u1' } })\n\n  captured.assertAudit({\n    action: 'invoice.refund',\n    target: { type: 'invoice', id: 'inv_889' },\n    outcome: 'success',\n  })\n\n  captured.restore()\n})\n",[531,1884,1885,1904,1908,1933,1948,1952,2015,2019,2033,2048,2081,2096,2102,2107,2119],{"__ignoreMap":558},[562,1886,1887,1889,1891,1894,1896,1898,1900,1902],{"class":564,"line":565},[562,1888,569],{"class":568},[562,1890,573],{"class":572},[562,1892,1893],{"class":576}," mockAudit",[562,1895,586],{"class":572},[562,1897,589],{"class":568},[562,1899,592],{"class":572},[562,1901,596],{"class":595},[562,1903,599],{"class":572},[562,1905,1906],{"class":564,"line":602},[562,1907,627],{"emptyLinePlaceholder":626},[562,1909,1910,1913,1915,1917,1920,1922,1924,1926,1929,1931],{"class":564,"line":623},[562,1911,1912],{"class":644},"it",[562,1914,648],{"class":576},[562,1916,651],{"class":572},[562,1918,1919],{"class":595},"refunds the invoice and records an audit",[562,1921,651],{"class":572},[562,1923,580],{"class":572},[562,1925,1539],{"class":774},[562,1927,1928],{"class":572}," ()",[562,1930,1555],{"class":774},[562,1932,1558],{"class":572},[562,1934,1935,1938,1941,1944,1946],{"class":564,"line":630},[562,1936,1937],{"class":774},"  const",[562,1939,1940],{"class":576}," captured",[562,1942,1943],{"class":572}," =",[562,1945,1893],{"class":644},[562,1947,1676],{"class":682},[562,1949,1950],{"class":564,"line":666},[562,1951,627],{"emptyLinePlaceholder":626},[562,1953,1954,1956,1959,1961,1963,1966,1968,1970,1972,1974,1977,1979,1982,1984,1986,1988,1990,1992,1994,1996,1998,2000,2002,2004,2007,2009,2011,2013],{"class":564,"line":735},[562,1955,1563],{"class":568},[562,1957,1958],{"class":644}," refundInvoice",[562,1960,648],{"class":682},[562,1962,679],{"class":572},[562,1964,1965],{"class":682}," id",[562,1967,686],{"class":572},[562,1969,592],{"class":572},[562,1971,884],{"class":595},[562,1973,651],{"class":572},[562,1975,1976],{"class":572}," },",[562,1978,573],{"class":572},[562,1980,1981],{"class":682}," actor",[562,1983,686],{"class":572},[562,1985,573],{"class":572},[562,1987,1506],{"class":682},[562,1989,686],{"class":572},[562,1991,592],{"class":572},[562,1993,822],{"class":595},[562,1995,651],{"class":572},[562,1997,580],{"class":572},[562,1999,1965],{"class":682},[562,2001,686],{"class":572},[562,2003,592],{"class":572},[562,2005,2006],{"class":595},"u1",[562,2008,651],{"class":572},[562,2010,586],{"class":572},[562,2012,586],{"class":572},[562,2014,1405],{"class":682},[562,2016,2017],{"class":564,"line":753},[562,2018,627],{"emptyLinePlaceholder":626},[562,2020,2021,2024,2026,2029,2031],{"class":564,"line":1647},[562,2022,2023],{"class":576},"  captured",[562,2025,636],{"class":572},[562,2027,2028],{"class":644},"assertAudit",[562,2030,648],{"class":682},[562,2032,1588],{"class":572},[562,2034,2035,2038,2040,2042,2044,2046],{"class":564,"line":1663},[562,2036,2037],{"class":682},"    action",[562,2039,686],{"class":572},[562,2041,592],{"class":572},[562,2043,795],{"class":595},[562,2045,651],{"class":572},[562,2047,732],{"class":572},[562,2049,2050,2053,2055,2057,2059,2061,2063,2065,2067,2069,2071,2073,2075,2077,2079],{"class":564,"line":1679},[562,2051,2052],{"class":682},"    target",[562,2054,686],{"class":572},[562,2056,573],{"class":572},[562,2058,1506],{"class":682},[562,2060,686],{"class":572},[562,2062,592],{"class":572},[562,2064,867],{"class":595},[562,2066,651],{"class":572},[562,2068,580],{"class":572},[562,2070,1965],{"class":682},[562,2072,686],{"class":572},[562,2074,592],{"class":572},[562,2076,884],{"class":595},[562,2078,651],{"class":572},[562,2080,750],{"class":572},[562,2082,2083,2086,2088,2090,2092,2094],{"class":564,"line":1685},[562,2084,2085],{"class":682},"    outcome",[562,2087,686],{"class":572},[562,2089,592],{"class":572},[562,2091,902],{"class":595},[562,2093,651],{"class":572},[562,2095,732],{"class":572},[562,2097,2098,2100],{"class":564,"line":1690},[562,2099,1666],{"class":572},[562,2101,1405],{"class":682},[562,2103,2105],{"class":564,"line":2104},13,[562,2106,627],{"emptyLinePlaceholder":626},[562,2108,2110,2112,2114,2117],{"class":564,"line":2109},14,[562,2111,2023],{"class":576},[562,2113,636],{"class":572},[562,2115,2116],{"class":644},"restore",[562,2118,1676],{"class":682},[562,2120,2122,2124],{"class":564,"line":2121},15,[562,2123,1329],{"class":572},[562,2125,1405],{"class":576},[527,2127,2128,2129,2132,2133,2136,2137,636],{},"Prefer ",[531,2130,2131],{},"assertAudit()"," when a missing audit should fail the test with a readable message. Use ",[531,2134,2135],{},"toIncludeAuditOf()"," when you need a boolean inside ",[531,2138,2139],{},"expect(...)",[527,2141,2142,2143,2146,2147,2150],{},"Always call ",[531,2144,2145],{},"captured.restore()"," in an ",[531,2148,2149],{},"afterEach"," (or wrap with a fixture) so a failing assertion never leaks into the next test.",[544,2152,2154],{"id":2153},"api-reference","API Reference",[2156,2157,2158,2174],"table",{},[2159,2160,2161],"thead",{},[2162,2163,2164,2168,2171],"tr",{},[2165,2166,2167],"th",{},"Symbol",[2165,2169,2170],{},"Kind",[2165,2172,2173],{},"Notes",[2175,2176,2177,2190,2203,2215,2231,2243,2256,2269,2285,2302,2315,2330,2342],"tbody",{},[2162,2178,2179,2185,2187],{},[2180,2181,2182],"td",{},[531,2183,2184],{},"AuditFields",[2180,2186,813],{},[2180,2188,2189],{},"Reserved field on the wide event",[2162,2191,2192,2197,2200],{},[2180,2193,2194],{},[531,2195,2196],{},"defineAuditAction(name, opts?)",[2180,2198,2199],{},"factory",[2180,2201,2202],{},"Typed action registry, infers target shape",[2162,2204,2205,2210,2212],{},[2180,2206,2207],{},[531,2208,2209],{},"defineAuditCatalog(prefix, map)",[2180,2211,2199],{},[2180,2213,2214],{},"Bundle of typed audit actions sharing a prefix",[2162,2216,2217,2222,2225],{},[2180,2218,2219],{},[531,2220,2221],{},"log.audit(fields)",[2180,2223,2224],{},"method",[2180,2226,2227,2228,2230],{},"Sugar over ",[531,2229,1879],{}," + force-keep",[2162,2232,2233,2238,2240],{},[2180,2234,2235],{},[531,2236,2237],{},"log.audit.deny(reason, fields)",[2180,2239,2224],{},[2180,2241,2242],{},"Records a denied action",[2162,2244,2245,2250,2253],{},[2180,2246,2247],{},[531,2248,2249],{},"audit(fields)",[2180,2251,2252],{},"function",[2180,2254,2255],{},"Standalone for scripts \u002F jobs",[2162,2257,2258,2263,2266],{},[2180,2259,2260],{},[531,2261,2262],{},"withAudit({ action, target })(fn)",[2180,2264,2265],{},"wrapper",[2180,2267,2268],{},"Auto-emit success \u002F failure \u002F denied",[2162,2270,2271,2276,2279],{},[2180,2272,2273],{},[531,2274,2275],{},"auditDiff(before, after)",[2180,2277,2278],{},"helper",[2180,2280,2281,2282],{},"Redact-aware JSON Patch for ",[531,2283,2284],{},"changes",[2162,2286,2287,2291,2294],{},[2180,2288,2289],{},[531,2290,1868],{},[2180,2292,2293],{},"test util",[2180,2295,2296,2297,2299,2300],{},"Capture audits on emit; ",[531,2298,2131],{}," or ",[531,2301,2135],{},[2162,2303,2304,2309,2312],{},[2180,2305,2306],{},[531,2307,2308],{},"auditEnricher(opts?)",[2180,2310,2311],{},"enricher",[2180,2313,2314],{},"Auto-fill request \u002F runtime \u002F tenant context",[2162,2316,2317,2322,2324],{},[2180,2318,2319],{},[531,2320,2321],{},"auditOnly(drain, { await? })",[2180,2323,2265],{},[2180,2325,2326,2327,2329],{},"Routes only events with an ",[531,2328,775],{}," field",[2162,2331,2332,2337,2339],{},[2180,2333,2334],{},[531,2335,2336],{},"signed(drain, opts)",[2180,2338,2265],{},[2180,2340,2341],{},"Generic integrity wrapper (hmac \u002F hash-chain)",[2162,2343,2344,2349,2352],{},[2180,2345,2346],{},[531,2347,2348],{},"auditRedactPreset",[2180,2350,2351],{},"config",[2180,2353,2354],{},"Strict PII for audit events",[527,2356,2357,2358,2360],{},"Everything ships from the main ",[531,2359,596],{}," entrypoint.",[2362,2363,2364],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}",{"title":558,"searchDepth":602,"depth":602,"links":2366},[2367,2368,2369,2370,2371],{"id":546,"depth":602,"text":547},{"id":1167,"depth":602,"text":1168},{"id":1473,"depth":602,"text":1474},{"id":1862,"depth":602,"text":1863},{"id":2153,"depth":602,"text":2154},"File system, Axiom, and Postgres recipes for audit logs, plus mockAudit for tests and the full API reference.","md",[2375,2378],{"label":397,"icon":374,"to":398,"color":2376,"variant":2377},"neutral","subtle",{"label":133,"icon":131,"to":138,"color":2376,"variant":2377},{},{"title":401,"icon":79},{"title":522,"description":2372},"d4tHcUb1EpoUIrMkf-DJ-DPvE575KpxoUq7BH9zzato",[2384,2386],{"title":397,"path":398,"stem":399,"description":2385,"icon":374,"children":-1},"Integrity, redact presets, GDPR vs append-only, retention windows, and the most common pitfalls when shipping audit logs to production.",{"title":36,"path":409,"stem":410,"description":2387,"icon":39,"children":-1},"Wide-event telemetry for CLIs and automation — evlog's one-event-per-run model for tools on user machines, with privacy-safe flags, consent, outbox, and auto-generated disclosure.",1785613616389]