[{"data":1,"prerenderedAt":2383},["ShallowReactive",2],{"navigation_docs":3,"-use-cases-audit-recipes":515,"-use-cases-audit-recipes-surround":2378},[4,30,80,123,298,430,485],{"title":5,"path":6,"stem":7,"children":8,"page":29},"Start","\u002Fstart","1.start",[9,14,19,24],{"title":10,"path":11,"stem":12,"icon":13},"Introduction","\u002Fstart\u002Fintroduction","1.start\u002F1.introduction","i-lucide-info",{"title":15,"path":16,"stem":17,"icon":18},"Why start with evlog","\u002Fstart\u002Fwhy-evlog","1.start\u002F2.why-evlog","i-lucide-rocket",{"title":20,"path":21,"stem":22,"icon":23},"Installation","\u002Fstart\u002Finstallation","1.start\u002F3.installation","i-lucide-download",{"title":25,"path":26,"stem":27,"icon":28},"Quick Start","\u002Fstart\u002Fquick-start","1.start\u002F4.quick-start","i-lucide-zap",false,{"title":31,"path":32,"stem":33,"children":34,"page":29},"Learn","\u002Flearn","2.learn",[35,40,45,50,55,60,65,70,75],{"title":36,"path":37,"stem":38,"icon":39},"Overview","\u002Flearn\u002Foverview","2.learn\u002F0.overview","i-lucide-list",{"title":41,"path":42,"stem":43,"icon":44},"Simple Logging","\u002Flearn\u002Fsimple-logging","2.learn\u002F1.simple-logging","i-lucide-terminal",{"title":46,"path":47,"stem":48,"icon":49},"Wide Events","\u002Flearn\u002Fwide-events","2.learn\u002F2.wide-events","i-lucide-layers",{"title":51,"path":52,"stem":53,"icon":54},"Structured Errors","\u002Flearn\u002Fstructured-errors","2.learn\u002F3.structured-errors","i-lucide-shield-alert",{"title":56,"path":57,"stem":58,"icon":59},"Lifecycle","\u002Flearn\u002Flifecycle","2.learn\u002F4.lifecycle","i-lucide-arrow-right-left",{"title":61,"path":62,"stem":63,"icon":64},"Sampling","\u002Flearn\u002Fsampling","2.learn\u002F5.sampling","i-lucide-filter",{"title":66,"path":67,"stem":68,"icon":69},"Auto-Redaction","\u002Flearn\u002Fredaction","2.learn\u002F6.redaction","i-lucide-eye-off",{"title":71,"path":72,"stem":73,"icon":74},"Typed Fields","\u002Flearn\u002Ftyped-fields","2.learn\u002F7.typed-fields","i-simple-icons-typescript",{"title":76,"path":77,"stem":78,"icon":79},"Catalogs","\u002Flearn\u002Fcatalogs","2.learn\u002F8.catalogs","i-lucide-book-open",{"title":81,"path":82,"stem":83,"children":84,"page":29},"CLI","\u002Fcli","3.cli",[85,88,93,98,103,108,113,118],{"title":36,"path":86,"stem":87,"icon":44},"\u002Fcli\u002Foverview","3.cli\u002F0.overview",{"title":89,"path":90,"stem":91,"icon":92},"init","\u002Fcli\u002Finit","3.cli\u002F1.init","i-lucide-wand-sparkles",{"title":94,"path":95,"stem":96,"icon":97},"map","\u002Fcli\u002Fmap","3.cli\u002F2.map","i-lucide-radar",{"title":99,"path":100,"stem":101,"icon":102},"Rules","\u002Fcli\u002Frules","3.cli\u002F3.rules","i-lucide-list-checks",{"title":104,"path":105,"stem":106,"icon":107},"Scoring","\u002Fcli\u002Fscoring","3.cli\u002F4.scoring","i-lucide-gauge",{"title":109,"path":110,"stem":111,"icon":112},"CI","\u002Fcli\u002Fci","3.cli\u002F5.ci","i-lucide-git-pull-request",{"title":114,"path":115,"stem":116,"icon":117},"doctor","\u002Fcli\u002Fdoctor","3.cli\u002F6.doctor","i-lucide-stethoscope",{"title":119,"path":120,"stem":121,"icon":122},"telemetry","\u002Fcli\u002Ftelemetry","3.cli\u002F7.telemetry","i-lucide-bar-chart-3",{"title":124,"path":125,"stem":126,"children":127,"page":29},"Integrate","\u002Fintegrate","4.integrate",[128,132,210],{"title":36,"path":129,"stem":130,"icon":131},"\u002Fintegrate\u002Foverview","4.integrate\u002F0.overview","i-lucide-plug",{"title":133,"path":134,"stem":135,"children":136,"page":29},"Adapters","\u002Fintegrate\u002Fadapters","4.integrate\u002Fadapters",[137,140,180,190],{"title":36,"path":138,"stem":139,"icon":39},"\u002Fintegrate\u002Fadapters\u002Foverview","4.integrate\u002Fadapters\u002F01.overview",{"title":141,"path":142,"stem":143,"children":144,"page":29},"Cloud","\u002Fintegrate\u002Fadapters\u002Fcloud","4.integrate\u002Fadapters\u002Fcloud",[145,150,155,160,165,170,175],{"title":146,"path":147,"stem":148,"icon":149},"Axiom","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Faxiom","4.integrate\u002Fadapters\u002Fcloud\u002F01.axiom","i-custom-axiom",{"title":151,"path":152,"stem":153,"icon":154},"OTLP","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fotlp","4.integrate\u002Fadapters\u002Fcloud\u002F02.otlp","i-simple-icons-opentelemetry",{"title":156,"path":157,"stem":158,"icon":159},"PostHog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fposthog","4.integrate\u002Fadapters\u002Fcloud\u002F03.posthog","i-simple-icons-posthog",{"title":161,"path":162,"stem":163,"icon":164},"Sentry","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fsentry","4.integrate\u002Fadapters\u002Fcloud\u002F04.sentry","i-simple-icons-sentry",{"title":166,"path":167,"stem":168,"icon":169},"Better Stack","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fbetter-stack","4.integrate\u002Fadapters\u002Fcloud\u002F05.better-stack","i-simple-icons-betterstack",{"title":171,"path":172,"stem":173,"icon":174},"Datadog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fdatadog","4.integrate\u002Fadapters\u002Fcloud\u002F06.datadog","i-simple-icons-datadog",{"title":176,"path":177,"stem":178,"icon":179},"HyperDX","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fhyperdx","4.integrate\u002Fadapters\u002Fcloud\u002F07.hyperdx","i-custom-hyperdx",{"title":181,"path":182,"stem":183,"children":184,"page":29},"Cloud or Self-Hosted","\u002Fintegrate\u002Fadapters\u002Fhybrid","4.integrate\u002Fadapters\u002Fhybrid",[185],{"title":186,"path":187,"stem":188,"icon":189},"Grafana Loki","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Floki","4.integrate\u002Fadapters\u002Fhybrid\u002F01.loki","i-simple-icons-grafana",{"title":191,"path":192,"stem":193,"children":194,"page":29},"Self-Hosted","\u002Fintegrate\u002Fadapters\u002Fself-hosted","4.integrate\u002Fadapters\u002Fself-hosted",[195,200,205],{"title":196,"path":197,"stem":198,"icon":199},"File System","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Ffs","4.integrate\u002Fadapters\u002Fself-hosted\u002F01.fs","i-lucide-hard-drive",{"title":201,"path":202,"stem":203,"icon":204},"NuxtHub","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fnuxthub","4.integrate\u002Fadapters\u002Fself-hosted\u002F02.nuxthub","i-simple-icons-nuxt",{"title":206,"path":207,"stem":208,"icon":209},"Memory","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fmemory","4.integrate\u002Fadapters\u002Fself-hosted\u002F03.memory","i-lucide-cpu",{"title":211,"path":212,"stem":213,"children":214,"page":29},"Frameworks","\u002Fintegrate\u002Fframeworks","4.integrate\u002Fframeworks",[215,219,224,229,234,239,244,249,254,259,264,269,274,279,283,288,293],{"title":36,"path":216,"stem":217,"icon":218},"\u002Fintegrate\u002Fframeworks\u002Foverview","4.integrate\u002Fframeworks\u002F00.overview","i-lucide-layout-grid",{"title":220,"path":221,"stem":222,"icon":223},"Nuxt","\u002Fintegrate\u002Fframeworks\u002Fnuxt","4.integrate\u002Fframeworks\u002F01.nuxt","i-simple-icons-nuxtdotjs",{"title":225,"path":226,"stem":227,"icon":228},"Next.js","\u002Fintegrate\u002Fframeworks\u002Fnextjs","4.integrate\u002Fframeworks\u002F02.nextjs","i-simple-icons-nextdotjs",{"title":230,"path":231,"stem":232,"icon":233},"SvelteKit","\u002Fintegrate\u002Fframeworks\u002Fsveltekit","4.integrate\u002Fframeworks\u002F03.sveltekit","i-simple-icons-svelte",{"title":235,"path":236,"stem":237,"icon":238},"Nitro","\u002Fintegrate\u002Fframeworks\u002Fnitro","4.integrate\u002Fframeworks\u002F04.nitro","i-custom-nitro",{"title":240,"path":241,"stem":242,"icon":243},"TanStack Start","\u002Fintegrate\u002Fframeworks\u002Ftanstack-start","4.integrate\u002Fframeworks\u002F05.tanstack-start","i-custom-tanstack",{"title":245,"path":246,"stem":247,"icon":248},"NestJS","\u002Fintegrate\u002Fframeworks\u002Fnestjs","4.integrate\u002Fframeworks\u002F06.nestjs","i-simple-icons-nestjs",{"title":250,"path":251,"stem":252,"icon":253},"Express","\u002Fintegrate\u002Fframeworks\u002Fexpress","4.integrate\u002Fframeworks\u002F07.express","i-simple-icons-express",{"title":255,"path":256,"stem":257,"icon":258},"Hono","\u002Fintegrate\u002Fframeworks\u002Fhono","4.integrate\u002Fframeworks\u002F08.hono","i-simple-icons-hono",{"title":260,"path":261,"stem":262,"icon":263},"Fastify","\u002Fintegrate\u002Fframeworks\u002Ffastify","4.integrate\u002Fframeworks\u002F09.fastify","i-simple-icons-fastify",{"title":265,"path":266,"stem":267,"icon":268},"Elysia","\u002Fintegrate\u002Fframeworks\u002Felysia","4.integrate\u002Fframeworks\u002F10.elysia","i-custom-elysia",{"title":270,"path":271,"stem":272,"icon":273},"React Router","\u002Fintegrate\u002Fframeworks\u002Freact-router","4.integrate\u002Fframeworks\u002F11.react-router","i-custom-reactrouter",{"title":275,"path":276,"stem":277,"icon":278},"Cloudflare Workers","\u002Fintegrate\u002Fframeworks\u002Fcloudflare-workers","4.integrate\u002Fframeworks\u002F12.cloudflare-workers","i-simple-icons-cloudflare",{"title":280,"path":281,"stem":282,"icon":74},"Standalone","\u002Fintegrate\u002Fframeworks\u002Fstandalone","4.integrate\u002Fframeworks\u002F13.standalone",{"title":284,"path":285,"stem":286,"icon":287},"Astro","\u002Fintegrate\u002Fframeworks\u002Fastro","4.integrate\u002Fframeworks\u002F14.astro","i-simple-icons-astro",{"title":289,"path":290,"stem":291,"icon":292},"oRPC","\u002Fintegrate\u002Fframeworks\u002Forpc","4.integrate\u002Fframeworks\u002F15.orpc","i-lucide-network",{"title":294,"path":295,"stem":296,"icon":297},"AWS Lambda","\u002Fintegrate\u002Fframeworks\u002Faws-lambda","4.integrate\u002Fframeworks\u002F16.aws-lambda","i-custom-lambda",{"title":299,"path":300,"stem":301,"children":302,"page":29},"Use Cases","\u002Fuse-cases","5.use-cases",[303,306,311,340,367,399,420,425],{"title":36,"path":304,"stem":305,"icon":102},"\u002Fuse-cases\u002Foverview","5.use-cases\u002F0.overview",{"title":307,"path":308,"stem":309,"icon":310},"Client Logging","\u002Fuse-cases\u002Fclient-logging","5.use-cases\u002F1.client-logging","i-lucide-monitor",{"title":312,"icon":313,"path":314,"stem":315,"children":316,"page":29},"AI SDK","i-simple-icons-vercel","\u002Fuse-cases\u002Fai-sdk","5.use-cases\u002F2.ai-sdk",[317,320,325,330,335],{"title":36,"path":318,"stem":319,"icon":39},"\u002Fuse-cases\u002Fai-sdk\u002Foverview","5.use-cases\u002F2.ai-sdk\u002F01.overview",{"title":321,"path":322,"stem":323,"icon":324},"Usage","\u002Fuse-cases\u002Fai-sdk\u002Fusage","5.use-cases\u002F2.ai-sdk\u002F02.usage","i-lucide-code",{"title":326,"path":327,"stem":328,"icon":329},"Options","\u002Fuse-cases\u002Fai-sdk\u002Foptions","5.use-cases\u002F2.ai-sdk\u002F03.options","i-lucide-sliders",{"title":331,"path":332,"stem":333,"icon":334},"Metadata","\u002Fuse-cases\u002Fai-sdk\u002Fmetadata","5.use-cases\u002F2.ai-sdk\u002F04.metadata","i-lucide-database",{"title":336,"path":337,"stem":338,"icon":339},"Telemetry","\u002Fuse-cases\u002Fai-sdk\u002Ftelemetry","5.use-cases\u002F2.ai-sdk\u002F05.telemetry","i-lucide-activity",{"title":341,"icon":342,"path":343,"stem":344,"children":345,"page":29},"Better Auth","i-simple-icons-betterauth","\u002Fuse-cases\u002Fbetter-auth","5.use-cases\u002F3.better-auth",[346,349,354,359,363],{"title":36,"path":347,"stem":348,"icon":39},"\u002Fuse-cases\u002Fbetter-auth\u002Foverview","5.use-cases\u002F3.better-auth\u002F01.overview",{"title":350,"path":351,"stem":352,"icon":353},"Identify User","\u002Fuse-cases\u002Fbetter-auth\u002Fidentify-user","5.use-cases\u002F3.better-auth\u002F02.identify-user","i-lucide-user-check",{"title":355,"path":356,"stem":357,"icon":358},"Middleware","\u002Fuse-cases\u002Fbetter-auth\u002Fmiddleware","5.use-cases\u002F3.better-auth\u002F03.middleware","i-lucide-shield",{"title":360,"path":361,"stem":362,"icon":310},"Client Sync","\u002Fuse-cases\u002Fbetter-auth\u002Fclient-sync","5.use-cases\u002F3.better-auth\u002F04.client-sync",{"title":364,"path":365,"stem":366,"icon":107},"Performance","\u002Fuse-cases\u002Fbetter-auth\u002Fperformance","5.use-cases\u002F3.better-auth\u002F05.performance",{"title":368,"icon":369,"path":370,"stem":371,"children":372,"page":29},"Audit Logs","i-lucide-shield-check","\u002Fuse-cases\u002Faudit","5.use-cases\u002F4.audit",[373,376,381,386,391,395],{"title":36,"path":374,"stem":375,"icon":39},"\u002Fuse-cases\u002Faudit\u002Foverview","5.use-cases\u002F4.audit\u002F01.overview",{"title":377,"path":378,"stem":379,"icon":380},"Schema","\u002Fuse-cases\u002Faudit\u002Fschema","5.use-cases\u002F4.audit\u002F02.schema","i-lucide-file-text",{"title":382,"path":383,"stem":384,"icon":385},"Recording","\u002Fuse-cases\u002Faudit\u002Frecording","5.use-cases\u002F4.audit\u002F03.recording","i-lucide-pen-line",{"title":387,"path":388,"stem":389,"icon":390},"Drains","\u002Fuse-cases\u002Faudit\u002Fpipeline","5.use-cases\u002F4.audit\u002F04.pipeline","i-lucide-link",{"title":392,"path":393,"stem":394,"icon":369},"Compliance","\u002Fuse-cases\u002Faudit\u002Fcompliance","5.use-cases\u002F4.audit\u002F05.compliance",{"title":396,"path":397,"stem":398,"icon":79},"Recipes","\u002Fuse-cases\u002Faudit\u002Frecipes","5.use-cases\u002F4.audit\u002F06.recipes",{"title":336,"icon":107,"path":400,"stem":401,"children":402,"page":29},"\u002Fuse-cases\u002Ftelemetry","5.use-cases\u002F4.telemetry",[403,406,411,416],{"title":36,"path":404,"stem":405,"icon":39},"\u002Fuse-cases\u002Ftelemetry\u002Foverview","5.use-cases\u002F4.telemetry\u002F01.overview",{"title":407,"path":408,"stem":409,"icon":410},"Setup","\u002Fuse-cases\u002Ftelemetry\u002Fsetup","5.use-cases\u002F4.telemetry\u002F02.setup","i-lucide-wrench",{"title":412,"path":413,"stem":414,"icon":415},"Ingest","\u002Fuse-cases\u002Ftelemetry\u002Fingest","5.use-cases\u002F4.telemetry\u002F03.ingest","i-lucide-server",{"title":417,"path":418,"stem":419,"icon":79},"Reference","\u002Fuse-cases\u002Ftelemetry\u002Freference","5.use-cases\u002F4.telemetry\u002F04.reference",{"title":421,"path":422,"stem":423,"icon":424},"Enrichers","\u002Fuse-cases\u002Fenrichers","5.use-cases\u002F5.enrichers","i-lucide-sparkles",{"title":426,"path":427,"stem":428,"icon":429},"eve","\u002Fuse-cases\u002Feve","5.use-cases\u002F5.eve","i-custom-eve",{"title":431,"path":432,"stem":433,"children":434,"page":29},"Extend","\u002Fextend","6.extend",[435,439,444,449,454,458,462,466,470,475,480],{"title":36,"path":436,"stem":437,"icon":438},"\u002Fextend\u002Foverview","6.extend\u002F0.overview","i-lucide-blocks",{"title":440,"path":441,"stem":442,"icon":443},"Stream","\u002Fextend\u002Fstream","6.extend\u002F1.stream","i-lucide-radio-tower",{"title":445,"path":446,"stem":447,"icon":448},"Custom framework","\u002Fextend\u002Fcustom-framework","6.extend\u002F10.custom-framework","i-lucide-puzzle",{"title":450,"path":451,"stem":452,"icon":453},"FS reader","\u002Fextend\u002Ffs-reader","6.extend\u002F2.fs-reader","i-lucide-folder-search",{"title":396,"path":455,"stem":456,"icon":457},"\u002Fextend\u002Fconsumer-recipes","6.extend\u002F3.consumer-recipes","i-lucide-chef-hat",{"title":459,"path":460,"stem":461,"icon":438},"Plugins","\u002Fextend\u002Fplugins","6.extend\u002F4.plugins",{"title":463,"path":464,"stem":465,"icon":424},"Custom enrichers","\u002Fextend\u002Fcustom-enrichers","6.extend\u002F5.custom-enrichers",{"title":467,"path":468,"stem":469,"icon":64},"Tail sampling","\u002Fextend\u002Ftail-sampling","6.extend\u002F6.tail-sampling",{"title":471,"path":472,"stem":473,"icon":474},"Identity headers","\u002Fextend\u002Fidentity-headers","6.extend\u002F7.identity-headers","i-lucide-fingerprint",{"title":476,"path":477,"stem":478,"icon":479},"Custom drains","\u002Fextend\u002Fcustom-drains","6.extend\u002F8.custom-drains","i-lucide-share-2",{"title":481,"path":482,"stem":483,"icon":484},"Drain pipeline","\u002Fextend\u002Fdrain-pipeline","6.extend\u002F9.drain-pipeline","i-lucide-workflow",{"title":417,"path":486,"stem":487,"children":488,"page":29},"\u002Freference","7.reference",[489,494,497,502,506,511],{"title":490,"path":491,"stem":492,"icon":493},"Configuration","\u002Freference\u002Fconfiguration","7.reference\u002F1.configuration","i-lucide-settings",{"title":364,"path":495,"stem":496,"icon":107},"\u002Freference\u002Fperformance","7.reference\u002F2.performance",{"title":498,"path":499,"stem":500,"icon":501},"Vite Plugin","\u002Freference\u002Fvite-plugin","7.reference\u002F3.vite-plugin","i-custom-vite",{"title":503,"path":504,"stem":505,"icon":369},"Best Practices","\u002Freference\u002Fbest-practices","7.reference\u002F4.best-practices",{"title":507,"path":508,"stem":509,"icon":510},"vs Other Loggers","\u002Freference\u002Fvs-other-loggers","7.reference\u002F5.vs-other-loggers","i-lucide-scale",{"title":512,"path":513,"stem":514,"icon":424},"Agent Skills","\u002Freference\u002Fagent-skills","7.reference\u002F6.agent-skills",{"id":516,"title":517,"body":518,"description":2367,"extension":2368,"links":2369,"meta":2374,"navigation":2375,"path":397,"seo":2376,"stem":398,"__hash__":2377},"docs\u002F5.use-cases\u002F4.audit\u002F06.recipes.md","Recipes & Reference",{"type":519,"value":520,"toc":2360},"minimark",[521,538,543,1151,1160,1164,1463,1466,1470,1845,1855,1859,1875,2121,2135,2146,2150,2350,2356],[522,523,524,525,529,530,533,534,537],"p",{},"Pick the recipe that matches your sink, drop it in, and you have a tamper-evident audit log. Each recipe composes the same primitives (",[526,527,528],"code",{},"auditOnly",", ",[526,531,532],{},"signed",", optional ",[526,535,536],{},"await: true",") over different drains.",[539,540,542],"h2",{"id":541},"audit-logs-on-disk","Audit logs on disk",[544,545,546,752],"code-group",{},[547,548,554],"pre",{"className":549,"code":550,"filename":551,"language":552,"meta":553,"style":553},"language-typescript shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { auditOnly, signed } from 'evlog'\nimport { createFsDrain } from 'evlog\u002Ffs'\n\nnitro.hooks.hook('evlog:drain', auditOnly(\n  signed(createFsDrain({ dir: '.audit', maxFiles: 30 }), { strategy: 'hash-chain' }),\n  { await: true },\n))\n","Input — server\u002Fplugins\u002Fevlog.ts","typescript","",[526,555,556,595,616,623,659,728,746],{"__ignoreMap":553},[557,558,561,565,569,573,576,579,582,585,588,592],"span",{"class":559,"line":560},"line",1,[557,562,564],{"class":563},"s7zQu","import",[557,566,568],{"class":567},"sMK4o"," {",[557,570,572],{"class":571},"sTEyZ"," auditOnly",[557,574,575],{"class":567},",",[557,577,578],{"class":571}," signed",[557,580,581],{"class":567}," }",[557,583,584],{"class":563}," from",[557,586,587],{"class":567}," '",[557,589,591],{"class":590},"sfazB","evlog",[557,593,594],{"class":567},"'\n",[557,596,598,600,602,605,607,609,611,614],{"class":559,"line":597},2,[557,599,564],{"class":563},[557,601,568],{"class":567},[557,603,604],{"class":571}," createFsDrain",[557,606,581],{"class":567},[557,608,584],{"class":563},[557,610,587],{"class":567},[557,612,613],{"class":590},"evlog\u002Ffs",[557,615,594],{"class":567},[557,617,619],{"class":559,"line":618},3,[557,620,622],{"emptyLinePlaceholder":621},true,"\n",[557,624,626,629,632,635,637,641,644,647,650,652,654,656],{"class":559,"line":625},4,[557,627,628],{"class":571},"nitro",[557,630,631],{"class":567},".",[557,633,634],{"class":571},"hooks",[557,636,631],{"class":567},[557,638,640],{"class":639},"s2Zo4","hook",[557,642,643],{"class":571},"(",[557,645,646],{"class":567},"'",[557,648,649],{"class":590},"evlog:drain",[557,651,646],{"class":567},[557,653,575],{"class":567},[557,655,572],{"class":639},[557,657,658],{"class":571},"(\n",[557,660,662,665,667,670,672,675,679,682,684,687,689,691,694,696,700,702,705,707,709,712,714,716,719,721,723,725],{"class":559,"line":661},5,[557,663,664],{"class":639},"  signed",[557,666,643],{"class":571},[557,668,669],{"class":639},"createFsDrain",[557,671,643],{"class":571},[557,673,674],{"class":567},"{",[557,676,678],{"class":677},"swJcz"," dir",[557,680,681],{"class":567},":",[557,683,587],{"class":567},[557,685,686],{"class":590},".audit",[557,688,646],{"class":567},[557,690,575],{"class":567},[557,692,693],{"class":677}," maxFiles",[557,695,681],{"class":567},[557,697,699],{"class":698},"sbssI"," 30",[557,701,581],{"class":567},[557,703,704],{"class":571},")",[557,706,575],{"class":567},[557,708,568],{"class":567},[557,710,711],{"class":677}," strategy",[557,713,681],{"class":567},[557,715,587],{"class":567},[557,717,718],{"class":590},"hash-chain",[557,720,646],{"class":567},[557,722,581],{"class":567},[557,724,704],{"class":571},[557,726,727],{"class":567},",\n",[557,729,731,734,737,739,743],{"class":559,"line":730},6,[557,732,733],{"class":567},"  {",[557,735,736],{"class":677}," await",[557,738,681],{"class":567},[557,740,742],{"class":741},"sfNiH"," true",[557,744,745],{"class":567}," },\n",[557,747,749],{"class":559,"line":748},7,[557,750,751],{"class":571},"))\n",[547,753,758],{"className":754,"code":755,"filename":756,"language":757,"meta":553,"style":553},"language-jsonl shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\"audit\":{\"action\":\"invoice.refund\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"invoice\",\"id\":\"inv_889\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_8f3c4b2a1e5d6f7c\",\"prevHash\":null,\"hash\":\"3f2c8e1a...\"}}\n{\"audit\":{\"action\":\"user.update\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"user\",\"id\":\"usr_99\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_5e7d8f9a0b1c2d3e\",\"prevHash\":\"3f2c8e1a...\",\"hash\":\"9a1b4d7c...\"}}\n","Output — .audit\u002F2026-04-24.ndjson","jsonl",[526,759,760,963],{"__ignoreMap":553},[557,761,762,764,767,771,773,776,778,782,784,786,788,791,793,795,797,800,802,804,806,809,811,813,815,818,820,822,824,827,829,831,833,836,838,841,843,846,848,850,852,854,856,858,860,863,865,867,869,871,873,875,877,880,882,884,886,889,891,893,895,898,900,902,904,907,909,911,914,916,918,921,923,925,927,930,932,934,936,939,941,944,946,949,951,953,955,958,960],{"class":559,"line":560},[557,763,674],{"class":567},[557,765,766],{"class":567},"\"",[557,768,770],{"class":769},"spNyl","audit",[557,772,766],{"class":567},[557,774,775],{"class":567},":{",[557,777,766],{"class":567},[557,779,781],{"class":780},"sBMFI","action",[557,783,766],{"class":567},[557,785,681],{"class":567},[557,787,766],{"class":567},[557,789,790],{"class":590},"invoice.refund",[557,792,766],{"class":567},[557,794,575],{"class":567},[557,796,766],{"class":567},[557,798,799],{"class":780},"actor",[557,801,766],{"class":567},[557,803,775],{"class":567},[557,805,766],{"class":567},[557,807,808],{"class":698},"type",[557,810,766],{"class":567},[557,812,681],{"class":567},[557,814,766],{"class":567},[557,816,817],{"class":590},"user",[557,819,766],{"class":567},[557,821,575],{"class":567},[557,823,766],{"class":567},[557,825,826],{"class":698},"id",[557,828,766],{"class":567},[557,830,681],{"class":567},[557,832,766],{"class":567},[557,834,835],{"class":590},"usr_42",[557,837,766],{"class":567},[557,839,840],{"class":567},"},",[557,842,766],{"class":567},[557,844,845],{"class":780},"target",[557,847,766],{"class":567},[557,849,775],{"class":567},[557,851,766],{"class":567},[557,853,808],{"class":698},[557,855,766],{"class":567},[557,857,681],{"class":567},[557,859,766],{"class":567},[557,861,862],{"class":590},"invoice",[557,864,766],{"class":567},[557,866,575],{"class":567},[557,868,766],{"class":567},[557,870,826],{"class":698},[557,872,766],{"class":567},[557,874,681],{"class":567},[557,876,766],{"class":567},[557,878,879],{"class":590},"inv_889",[557,881,766],{"class":567},[557,883,840],{"class":567},[557,885,766],{"class":567},[557,887,888],{"class":780},"outcome",[557,890,766],{"class":567},[557,892,681],{"class":567},[557,894,766],{"class":567},[557,896,897],{"class":590},"success",[557,899,766],{"class":567},[557,901,575],{"class":567},[557,903,766],{"class":567},[557,905,906],{"class":780},"version",[557,908,766],{"class":567},[557,910,681],{"class":567},[557,912,913],{"class":698},"1",[557,915,575],{"class":567},[557,917,766],{"class":567},[557,919,920],{"class":780},"idempotencyKey",[557,922,766],{"class":567},[557,924,681],{"class":567},[557,926,766],{"class":567},[557,928,929],{"class":590},"ak_8f3c4b2a1e5d6f7c",[557,931,766],{"class":567},[557,933,575],{"class":567},[557,935,766],{"class":567},[557,937,938],{"class":780},"prevHash",[557,940,766],{"class":567},[557,942,943],{"class":567},":null,",[557,945,766],{"class":567},[557,947,948],{"class":780},"hash",[557,950,766],{"class":567},[557,952,681],{"class":567},[557,954,766],{"class":567},[557,956,957],{"class":590},"3f2c8e1a...",[557,959,766],{"class":567},[557,961,962],{"class":567},"}}\n",[557,964,965,967,969,971,973,975,977,979,981,983,985,988,990,992,994,996,998,1000,1002,1004,1006,1008,1010,1012,1014,1016,1018,1020,1022,1024,1026,1028,1030,1032,1034,1036,1038,1040,1042,1044,1046,1048,1050,1052,1054,1056,1058,1060,1062,1064,1066,1069,1071,1073,1075,1077,1079,1081,1083,1085,1087,1089,1091,1093,1095,1097,1099,1101,1103,1105,1107,1109,1111,1114,1116,1118,1120,1122,1124,1126,1128,1130,1132,1134,1136,1138,1140,1142,1144,1147,1149],{"class":559,"line":597},[557,966,674],{"class":567},[557,968,766],{"class":567},[557,970,770],{"class":769},[557,972,766],{"class":567},[557,974,775],{"class":567},[557,976,766],{"class":567},[557,978,781],{"class":780},[557,980,766],{"class":567},[557,982,681],{"class":567},[557,984,766],{"class":567},[557,986,987],{"class":590},"user.update",[557,989,766],{"class":567},[557,991,575],{"class":567},[557,993,766],{"class":567},[557,995,799],{"class":780},[557,997,766],{"class":567},[557,999,775],{"class":567},[557,1001,766],{"class":567},[557,1003,808],{"class":698},[557,1005,766],{"class":567},[557,1007,681],{"class":567},[557,1009,766],{"class":567},[557,1011,817],{"class":590},[557,1013,766],{"class":567},[557,1015,575],{"class":567},[557,1017,766],{"class":567},[557,1019,826],{"class":698},[557,1021,766],{"class":567},[557,1023,681],{"class":567},[557,1025,766],{"class":567},[557,1027,835],{"class":590},[557,1029,766],{"class":567},[557,1031,840],{"class":567},[557,1033,766],{"class":567},[557,1035,845],{"class":780},[557,1037,766],{"class":567},[557,1039,775],{"class":567},[557,1041,766],{"class":567},[557,1043,808],{"class":698},[557,1045,766],{"class":567},[557,1047,681],{"class":567},[557,1049,766],{"class":567},[557,1051,817],{"class":590},[557,1053,766],{"class":567},[557,1055,575],{"class":567},[557,1057,766],{"class":567},[557,1059,826],{"class":698},[557,1061,766],{"class":567},[557,1063,681],{"class":567},[557,1065,766],{"class":567},[557,1067,1068],{"class":590},"usr_99",[557,1070,766],{"class":567},[557,1072,840],{"class":567},[557,1074,766],{"class":567},[557,1076,888],{"class":780},[557,1078,766],{"class":567},[557,1080,681],{"class":567},[557,1082,766],{"class":567},[557,1084,897],{"class":590},[557,1086,766],{"class":567},[557,1088,575],{"class":567},[557,1090,766],{"class":567},[557,1092,906],{"class":780},[557,1094,766],{"class":567},[557,1096,681],{"class":567},[557,1098,913],{"class":698},[557,1100,575],{"class":567},[557,1102,766],{"class":567},[557,1104,920],{"class":780},[557,1106,766],{"class":567},[557,1108,681],{"class":567},[557,1110,766],{"class":567},[557,1112,1113],{"class":590},"ak_5e7d8f9a0b1c2d3e",[557,1115,766],{"class":567},[557,1117,575],{"class":567},[557,1119,766],{"class":567},[557,1121,938],{"class":780},[557,1123,766],{"class":567},[557,1125,681],{"class":567},[557,1127,766],{"class":567},[557,1129,957],{"class":590},[557,1131,766],{"class":567},[557,1133,575],{"class":567},[557,1135,766],{"class":567},[557,1137,948],{"class":780},[557,1139,766],{"class":567},[557,1141,681],{"class":567},[557,1143,766],{"class":567},[557,1145,1146],{"class":590},"9a1b4d7c...",[557,1148,766],{"class":567},[557,1150,962],{"class":567},[522,1152,1153,1154,1156,1157,1159],{},"Each line's ",[526,1155,938],{}," matches the previous line's ",[526,1158,948],{},". Tampering with any row breaks the chain forward of that point — a verifier replays the hashes and reports the first mismatch.",[539,1161,1163],{"id":1162},"audit-logs-to-a-dedicated-axiom-dataset","Audit logs to a dedicated Axiom dataset",[544,1165,1166,1333,1401],{},[547,1167,1169],{"className":549,"code":1168,"filename":551,"language":552,"meta":553,"style":553},"import { auditOnly } from 'evlog'\nimport { createAxiomDrain } from 'evlog\u002Faxiom'\n\nnitro.hooks.hook('evlog:drain', createAxiomDrain({ dataset: 'logs' }))\nnitro.hooks.hook('evlog:drain', auditOnly(\n  createAxiomDrain({ dataset: 'audit', apiKey: process.env.AXIOM_AUDIT_API_KEY }),\n))\n",[526,1170,1171,1189,1209,1213,1257,1283,1329],{"__ignoreMap":553},[557,1172,1173,1175,1177,1179,1181,1183,1185,1187],{"class":559,"line":560},[557,1174,564],{"class":563},[557,1176,568],{"class":567},[557,1178,572],{"class":571},[557,1180,581],{"class":567},[557,1182,584],{"class":563},[557,1184,587],{"class":567},[557,1186,591],{"class":590},[557,1188,594],{"class":567},[557,1190,1191,1193,1195,1198,1200,1202,1204,1207],{"class":559,"line":597},[557,1192,564],{"class":563},[557,1194,568],{"class":567},[557,1196,1197],{"class":571}," createAxiomDrain",[557,1199,581],{"class":567},[557,1201,584],{"class":563},[557,1203,587],{"class":567},[557,1205,1206],{"class":590},"evlog\u002Faxiom",[557,1208,594],{"class":567},[557,1210,1211],{"class":559,"line":618},[557,1212,622],{"emptyLinePlaceholder":621},[557,1214,1215,1217,1219,1221,1223,1225,1227,1229,1231,1233,1235,1237,1239,1241,1244,1246,1248,1251,1253,1255],{"class":559,"line":625},[557,1216,628],{"class":571},[557,1218,631],{"class":567},[557,1220,634],{"class":571},[557,1222,631],{"class":567},[557,1224,640],{"class":639},[557,1226,643],{"class":571},[557,1228,646],{"class":567},[557,1230,649],{"class":590},[557,1232,646],{"class":567},[557,1234,575],{"class":567},[557,1236,1197],{"class":639},[557,1238,643],{"class":571},[557,1240,674],{"class":567},[557,1242,1243],{"class":677}," dataset",[557,1245,681],{"class":567},[557,1247,587],{"class":567},[557,1249,1250],{"class":590},"logs",[557,1252,646],{"class":567},[557,1254,581],{"class":567},[557,1256,751],{"class":571},[557,1258,1259,1261,1263,1265,1267,1269,1271,1273,1275,1277,1279,1281],{"class":559,"line":661},[557,1260,628],{"class":571},[557,1262,631],{"class":567},[557,1264,634],{"class":571},[557,1266,631],{"class":567},[557,1268,640],{"class":639},[557,1270,643],{"class":571},[557,1272,646],{"class":567},[557,1274,649],{"class":590},[557,1276,646],{"class":567},[557,1278,575],{"class":567},[557,1280,572],{"class":639},[557,1282,658],{"class":571},[557,1284,1285,1288,1290,1292,1294,1296,1298,1300,1302,1304,1307,1309,1312,1314,1317,1319,1322,1325,1327],{"class":559,"line":730},[557,1286,1287],{"class":639},"  createAxiomDrain",[557,1289,643],{"class":571},[557,1291,674],{"class":567},[557,1293,1243],{"class":677},[557,1295,681],{"class":567},[557,1297,587],{"class":567},[557,1299,770],{"class":590},[557,1301,646],{"class":567},[557,1303,575],{"class":567},[557,1305,1306],{"class":677}," apiKey",[557,1308,681],{"class":567},[557,1310,1311],{"class":571}," process",[557,1313,631],{"class":567},[557,1315,1316],{"class":571},"env",[557,1318,631],{"class":567},[557,1320,1321],{"class":571},"AXIOM_AUDIT_API_KEY ",[557,1323,1324],{"class":567},"}",[557,1326,704],{"class":571},[557,1328,727],{"class":567},[557,1330,1331],{"class":559,"line":748},[557,1332,751],{"class":571},[547,1334,1339],{"className":1335,"code":1336,"filename":1337,"language":1338,"meta":553,"style":553},"language-kusto shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","['audit']\n| where audit.action == \"invoice.refund\"\n| summarize count() by audit.outcome, bin(_time, 1h)\n","Output — Axiom query","kusto",[526,1340,1341,1355,1373],{"__ignoreMap":553},[557,1342,1343,1346,1348,1350,1352],{"class":559,"line":560},[557,1344,1345],{"class":571},"[",[557,1347,646],{"class":567},[557,1349,770],{"class":590},[557,1351,646],{"class":567},[557,1353,1354],{"class":571},"]\n",[557,1356,1357,1360,1363,1366,1368,1370],{"class":559,"line":597},[557,1358,1359],{"class":571},"| ",[557,1361,1362],{"class":698},"where",[557,1364,1365],{"class":571}," audit.action == ",[557,1367,766],{"class":567},[557,1369,790],{"class":590},[557,1371,1372],{"class":567},"\"\n",[557,1374,1375,1377,1380,1383,1386,1389,1392,1395,1398],{"class":559,"line":618},[557,1376,1359],{"class":571},[557,1378,1379],{"class":698},"summarize",[557,1381,1382],{"class":639}," count()",[557,1384,1385],{"class":698}," by",[557,1387,1388],{"class":571}," audit.outcome, ",[557,1390,1391],{"class":639},"bin",[557,1393,1394],{"class":571},"(_time, ",[557,1396,1397],{"class":698},"1h",[557,1399,1400],{"class":571},")\n",[547,1402,1405],{"className":1335,"code":1403,"filename":1404,"language":1338,"meta":553,"style":553},"['audit']\n| where audit.outcome == \"denied\"\n| summarize count() by audit.actor.id, audit.action\n| order by count_ desc\n","Output — denials by actor",[526,1406,1407,1419,1435,1448],{"__ignoreMap":553},[557,1408,1409,1411,1413,1415,1417],{"class":559,"line":560},[557,1410,1345],{"class":571},[557,1412,646],{"class":567},[557,1414,770],{"class":590},[557,1416,646],{"class":567},[557,1418,1354],{"class":571},[557,1420,1421,1423,1425,1428,1430,1433],{"class":559,"line":597},[557,1422,1359],{"class":571},[557,1424,1362],{"class":698},[557,1426,1427],{"class":571}," audit.outcome == ",[557,1429,766],{"class":567},[557,1431,1432],{"class":590},"denied",[557,1434,1372],{"class":567},[557,1436,1437,1439,1441,1443,1445],{"class":559,"line":618},[557,1438,1359],{"class":571},[557,1440,1379],{"class":698},[557,1442,1382],{"class":639},[557,1444,1385],{"class":698},[557,1446,1447],{"class":571}," audit.actor.id, audit.action\n",[557,1449,1450,1452,1455,1457,1460],{"class":559,"line":625},[557,1451,1359],{"class":571},[557,1453,1454],{"class":698},"order",[557,1456,1385],{"class":698},[557,1458,1459],{"class":571}," count_ ",[557,1461,1462],{"class":698},"desc\n",[522,1464,1465],{},"Splitting datasets means the audit dataset can have a longer retention (7y), tighter access controls, and a separate billing line — without touching the rest of your pipeline.",[539,1467,1469],{"id":1468},"audit-logs-in-postgres","Audit logs in Postgres",[544,1471,1472,1725],{},[547,1473,1475],{"className":549,"code":1474,"filename":551,"language":552,"meta":553,"style":553},"import { auditOnly } from 'evlog'\nimport type { DrainContext } from 'evlog'\n\nconst postgresAudit = async (ctx: DrainContext) => {\n  await db.insert(auditEvents).values({\n    id: ctx.event.audit!.idempotencyKey,\n    timestamp: new Date(ctx.event.timestamp),\n    payload: ctx.event,\n  }).onConflictDoNothing()\n}\n\nnitro.hooks.hook('evlog:drain', auditOnly(postgresAudit, { await: true }))\n",[526,1476,1477,1495,1517,1521,1554,1584,1610,1640,1656,1672,1678,1683],{"__ignoreMap":553},[557,1478,1479,1481,1483,1485,1487,1489,1491,1493],{"class":559,"line":560},[557,1480,564],{"class":563},[557,1482,568],{"class":567},[557,1484,572],{"class":571},[557,1486,581],{"class":567},[557,1488,584],{"class":563},[557,1490,587],{"class":567},[557,1492,591],{"class":590},[557,1494,594],{"class":567},[557,1496,1497,1499,1502,1504,1507,1509,1511,1513,1515],{"class":559,"line":597},[557,1498,564],{"class":563},[557,1500,1501],{"class":563}," type",[557,1503,568],{"class":567},[557,1505,1506],{"class":571}," DrainContext",[557,1508,581],{"class":567},[557,1510,584],{"class":563},[557,1512,587],{"class":567},[557,1514,591],{"class":590},[557,1516,594],{"class":567},[557,1518,1519],{"class":559,"line":618},[557,1520,622],{"emptyLinePlaceholder":621},[557,1522,1523,1526,1529,1532,1535,1538,1542,1544,1546,1548,1551],{"class":559,"line":625},[557,1524,1525],{"class":769},"const",[557,1527,1528],{"class":571}," postgresAudit ",[557,1530,1531],{"class":567},"=",[557,1533,1534],{"class":769}," async",[557,1536,1537],{"class":567}," (",[557,1539,1541],{"class":1540},"sHdIc","ctx",[557,1543,681],{"class":567},[557,1545,1506],{"class":780},[557,1547,704],{"class":567},[557,1549,1550],{"class":769}," =>",[557,1552,1553],{"class":567}," {\n",[557,1555,1556,1559,1562,1564,1567,1569,1572,1574,1576,1579,1581],{"class":559,"line":661},[557,1557,1558],{"class":563},"  await",[557,1560,1561],{"class":571}," db",[557,1563,631],{"class":567},[557,1565,1566],{"class":639},"insert",[557,1568,643],{"class":677},[557,1570,1571],{"class":571},"auditEvents",[557,1573,704],{"class":677},[557,1575,631],{"class":567},[557,1577,1578],{"class":639},"values",[557,1580,643],{"class":677},[557,1582,1583],{"class":567},"{\n",[557,1585,1586,1589,1591,1594,1596,1599,1601,1603,1606,1608],{"class":559,"line":730},[557,1587,1588],{"class":677},"    id",[557,1590,681],{"class":567},[557,1592,1593],{"class":571}," ctx",[557,1595,631],{"class":567},[557,1597,1598],{"class":571},"event",[557,1600,631],{"class":567},[557,1602,770],{"class":571},[557,1604,1605],{"class":567},"!.",[557,1607,920],{"class":571},[557,1609,727],{"class":567},[557,1611,1612,1615,1617,1620,1623,1625,1627,1629,1631,1633,1636,1638],{"class":559,"line":748},[557,1613,1614],{"class":677},"    timestamp",[557,1616,681],{"class":567},[557,1618,1619],{"class":567}," new",[557,1621,1622],{"class":639}," Date",[557,1624,643],{"class":677},[557,1626,1541],{"class":571},[557,1628,631],{"class":567},[557,1630,1598],{"class":571},[557,1632,631],{"class":567},[557,1634,1635],{"class":571},"timestamp",[557,1637,704],{"class":677},[557,1639,727],{"class":567},[557,1641,1643,1646,1648,1650,1652,1654],{"class":559,"line":1642},8,[557,1644,1645],{"class":677},"    payload",[557,1647,681],{"class":567},[557,1649,1593],{"class":571},[557,1651,631],{"class":567},[557,1653,1598],{"class":571},[557,1655,727],{"class":567},[557,1657,1659,1662,1664,1666,1669],{"class":559,"line":1658},9,[557,1660,1661],{"class":567},"  }",[557,1663,704],{"class":677},[557,1665,631],{"class":567},[557,1667,1668],{"class":639},"onConflictDoNothing",[557,1670,1671],{"class":677},"()\n",[557,1673,1675],{"class":559,"line":1674},10,[557,1676,1677],{"class":567},"}\n",[557,1679,1681],{"class":559,"line":1680},11,[557,1682,622],{"emptyLinePlaceholder":621},[557,1684,1686,1688,1690,1692,1694,1696,1698,1700,1702,1704,1706,1708,1711,1713,1715,1717,1719,1721,1723],{"class":559,"line":1685},12,[557,1687,628],{"class":571},[557,1689,631],{"class":567},[557,1691,634],{"class":571},[557,1693,631],{"class":567},[557,1695,640],{"class":639},[557,1697,643],{"class":571},[557,1699,646],{"class":567},[557,1701,649],{"class":590},[557,1703,646],{"class":567},[557,1705,575],{"class":567},[557,1707,572],{"class":639},[557,1709,1710],{"class":571},"(postgresAudit",[557,1712,575],{"class":567},[557,1714,568],{"class":567},[557,1716,736],{"class":677},[557,1718,681],{"class":567},[557,1720,742],{"class":741},[557,1722,581],{"class":567},[557,1724,751],{"class":571},[547,1726,1731],{"className":1727,"code":1728,"filename":1729,"language":1730,"meta":553,"style":553},"language-sql shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","SELECT id, timestamp, payload->'audit'->>'action' AS action,\n       payload->'audit'->>'outcome' AS outcome\nFROM audit_events\nWHERE id = 'ak_8f3c4b2a1e5d6f7c';\n\n--          id          |       timestamp       |     action      | outcome\n-- ---------------------+-----------------------+-----------------+---------\n--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n","Output — audit_events row","sql",[526,1732,1733,1772,1798,1806,1825,1829,1835,1840],{"__ignoreMap":553},[557,1734,1735,1738,1741,1743,1746,1749,1751,1753,1755,1758,1760,1762,1764,1767,1770],{"class":559,"line":560},[557,1736,1737],{"class":698},"SELECT",[557,1739,1740],{"class":571}," id, ",[557,1742,1635],{"class":769},[557,1744,1745],{"class":571},", payload",[557,1747,1748],{"class":567},"->",[557,1750,646],{"class":567},[557,1752,770],{"class":590},[557,1754,646],{"class":567},[557,1756,1757],{"class":567},"->>",[557,1759,646],{"class":567},[557,1761,781],{"class":590},[557,1763,646],{"class":567},[557,1765,1766],{"class":698}," AS",[557,1768,1769],{"class":698}," action",[557,1771,727],{"class":571},[557,1773,1774,1777,1779,1781,1783,1785,1787,1789,1791,1793,1795],{"class":559,"line":597},[557,1775,1776],{"class":571},"       payload",[557,1778,1748],{"class":567},[557,1780,646],{"class":567},[557,1782,770],{"class":590},[557,1784,646],{"class":567},[557,1786,1757],{"class":567},[557,1788,646],{"class":567},[557,1790,888],{"class":590},[557,1792,646],{"class":567},[557,1794,1766],{"class":698},[557,1796,1797],{"class":571}," outcome\n",[557,1799,1800,1803],{"class":559,"line":618},[557,1801,1802],{"class":698},"FROM",[557,1804,1805],{"class":571}," audit_events\n",[557,1807,1808,1811,1814,1816,1818,1820,1822],{"class":559,"line":625},[557,1809,1810],{"class":698},"WHERE",[557,1812,1813],{"class":571}," id ",[557,1815,1531],{"class":567},[557,1817,587],{"class":567},[557,1819,929],{"class":590},[557,1821,646],{"class":567},[557,1823,1824],{"class":571},";\n",[557,1826,1827],{"class":559,"line":661},[557,1828,622],{"emptyLinePlaceholder":621},[557,1830,1831],{"class":559,"line":730},[557,1832,1834],{"class":1833},"sHwdD","--          id          |       timestamp       |     action      | outcome\n",[557,1836,1837],{"class":559,"line":748},[557,1838,1839],{"class":1833},"-- ---------------------+-----------------------+-----------------+---------\n",[557,1841,1842],{"class":559,"line":1642},[557,1843,1844],{"class":1833},"--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n",[522,1846,1847,1848,1850,1851,1854],{},"The deterministic ",[526,1849,920],{}," makes retries safe — duplicate inserts collapse via ",[526,1852,1853],{},"ON CONFLICT DO NOTHING",". Without it, a transient network blip during a retry would create a duplicate audit row, which is exactly what you don't want.",[539,1856,1858],{"id":1857},"testing-audits","Testing audits",[522,1860,1861,1864,1865,529,1868,1871,1872,681],{},[526,1862,1863],{},"mockAudit()"," captures every audit event on emit — from standalone ",[526,1866,1867],{},"audit()",[526,1869,1870],{},"log.audit()",", and ",[526,1873,1874],{},"log.set({ audit })",[547,1876,1878],{"className":549,"code":1877,"language":552,"meta":553,"style":553},"import { mockAudit } from 'evlog'\n\nit('refunds the invoice and records an audit', async () => {\n  const captured = mockAudit()\n\n  await refundInvoice({ id: 'inv_889' }, { actor: { type: 'user', id: 'u1' } })\n\n  captured.assertAudit({\n    action: 'invoice.refund',\n    target: { type: 'invoice', id: 'inv_889' },\n    outcome: 'success',\n  })\n\n  captured.restore()\n})\n",[526,1879,1880,1899,1903,1928,1943,1947,2010,2014,2028,2043,2076,2091,2097,2102,2114],{"__ignoreMap":553},[557,1881,1882,1884,1886,1889,1891,1893,1895,1897],{"class":559,"line":560},[557,1883,564],{"class":563},[557,1885,568],{"class":567},[557,1887,1888],{"class":571}," mockAudit",[557,1890,581],{"class":567},[557,1892,584],{"class":563},[557,1894,587],{"class":567},[557,1896,591],{"class":590},[557,1898,594],{"class":567},[557,1900,1901],{"class":559,"line":597},[557,1902,622],{"emptyLinePlaceholder":621},[557,1904,1905,1908,1910,1912,1915,1917,1919,1921,1924,1926],{"class":559,"line":618},[557,1906,1907],{"class":639},"it",[557,1909,643],{"class":571},[557,1911,646],{"class":567},[557,1913,1914],{"class":590},"refunds the invoice and records an audit",[557,1916,646],{"class":567},[557,1918,575],{"class":567},[557,1920,1534],{"class":769},[557,1922,1923],{"class":567}," ()",[557,1925,1550],{"class":769},[557,1927,1553],{"class":567},[557,1929,1930,1933,1936,1939,1941],{"class":559,"line":625},[557,1931,1932],{"class":769},"  const",[557,1934,1935],{"class":571}," captured",[557,1937,1938],{"class":567}," =",[557,1940,1888],{"class":639},[557,1942,1671],{"class":677},[557,1944,1945],{"class":559,"line":661},[557,1946,622],{"emptyLinePlaceholder":621},[557,1948,1949,1951,1954,1956,1958,1961,1963,1965,1967,1969,1972,1974,1977,1979,1981,1983,1985,1987,1989,1991,1993,1995,1997,1999,2002,2004,2006,2008],{"class":559,"line":730},[557,1950,1558],{"class":563},[557,1952,1953],{"class":639}," refundInvoice",[557,1955,643],{"class":677},[557,1957,674],{"class":567},[557,1959,1960],{"class":677}," id",[557,1962,681],{"class":567},[557,1964,587],{"class":567},[557,1966,879],{"class":590},[557,1968,646],{"class":567},[557,1970,1971],{"class":567}," },",[557,1973,568],{"class":567},[557,1975,1976],{"class":677}," actor",[557,1978,681],{"class":567},[557,1980,568],{"class":567},[557,1982,1501],{"class":677},[557,1984,681],{"class":567},[557,1986,587],{"class":567},[557,1988,817],{"class":590},[557,1990,646],{"class":567},[557,1992,575],{"class":567},[557,1994,1960],{"class":677},[557,1996,681],{"class":567},[557,1998,587],{"class":567},[557,2000,2001],{"class":590},"u1",[557,2003,646],{"class":567},[557,2005,581],{"class":567},[557,2007,581],{"class":567},[557,2009,1400],{"class":677},[557,2011,2012],{"class":559,"line":748},[557,2013,622],{"emptyLinePlaceholder":621},[557,2015,2016,2019,2021,2024,2026],{"class":559,"line":1642},[557,2017,2018],{"class":571},"  captured",[557,2020,631],{"class":567},[557,2022,2023],{"class":639},"assertAudit",[557,2025,643],{"class":677},[557,2027,1583],{"class":567},[557,2029,2030,2033,2035,2037,2039,2041],{"class":559,"line":1658},[557,2031,2032],{"class":677},"    action",[557,2034,681],{"class":567},[557,2036,587],{"class":567},[557,2038,790],{"class":590},[557,2040,646],{"class":567},[557,2042,727],{"class":567},[557,2044,2045,2048,2050,2052,2054,2056,2058,2060,2062,2064,2066,2068,2070,2072,2074],{"class":559,"line":1674},[557,2046,2047],{"class":677},"    target",[557,2049,681],{"class":567},[557,2051,568],{"class":567},[557,2053,1501],{"class":677},[557,2055,681],{"class":567},[557,2057,587],{"class":567},[557,2059,862],{"class":590},[557,2061,646],{"class":567},[557,2063,575],{"class":567},[557,2065,1960],{"class":677},[557,2067,681],{"class":567},[557,2069,587],{"class":567},[557,2071,879],{"class":590},[557,2073,646],{"class":567},[557,2075,745],{"class":567},[557,2077,2078,2081,2083,2085,2087,2089],{"class":559,"line":1680},[557,2079,2080],{"class":677},"    outcome",[557,2082,681],{"class":567},[557,2084,587],{"class":567},[557,2086,897],{"class":590},[557,2088,646],{"class":567},[557,2090,727],{"class":567},[557,2092,2093,2095],{"class":559,"line":1685},[557,2094,1661],{"class":567},[557,2096,1400],{"class":677},[557,2098,2100],{"class":559,"line":2099},13,[557,2101,622],{"emptyLinePlaceholder":621},[557,2103,2105,2107,2109,2112],{"class":559,"line":2104},14,[557,2106,2018],{"class":571},[557,2108,631],{"class":567},[557,2110,2111],{"class":639},"restore",[557,2113,1671],{"class":677},[557,2115,2117,2119],{"class":559,"line":2116},15,[557,2118,1324],{"class":567},[557,2120,1400],{"class":571},[522,2122,2123,2124,2127,2128,2131,2132,631],{},"Prefer ",[526,2125,2126],{},"assertAudit()"," when a missing audit should fail the test with a readable message. Use ",[526,2129,2130],{},"toIncludeAuditOf()"," when you need a boolean inside ",[526,2133,2134],{},"expect(...)",[522,2136,2137,2138,2141,2142,2145],{},"Always call ",[526,2139,2140],{},"captured.restore()"," in an ",[526,2143,2144],{},"afterEach"," (or wrap with a fixture) so a failing assertion never leaks into the next test.",[539,2147,2149],{"id":2148},"api-reference","API Reference",[2151,2152,2153,2169],"table",{},[2154,2155,2156],"thead",{},[2157,2158,2159,2163,2166],"tr",{},[2160,2161,2162],"th",{},"Symbol",[2160,2164,2165],{},"Kind",[2160,2167,2168],{},"Notes",[2170,2171,2172,2185,2198,2210,2226,2238,2251,2264,2280,2297,2310,2325,2337],"tbody",{},[2157,2173,2174,2180,2182],{},[2175,2176,2177],"td",{},[526,2178,2179],{},"AuditFields",[2175,2181,808],{},[2175,2183,2184],{},"Reserved field on the wide event",[2157,2186,2187,2192,2195],{},[2175,2188,2189],{},[526,2190,2191],{},"defineAuditAction(name, opts?)",[2175,2193,2194],{},"factory",[2175,2196,2197],{},"Typed action registry, infers target shape",[2157,2199,2200,2205,2207],{},[2175,2201,2202],{},[526,2203,2204],{},"defineAuditCatalog(prefix, map)",[2175,2206,2194],{},[2175,2208,2209],{},"Bundle of typed audit actions sharing a prefix",[2157,2211,2212,2217,2220],{},[2175,2213,2214],{},[526,2215,2216],{},"log.audit(fields)",[2175,2218,2219],{},"method",[2175,2221,2222,2223,2225],{},"Sugar over ",[526,2224,1874],{}," + force-keep",[2157,2227,2228,2233,2235],{},[2175,2229,2230],{},[526,2231,2232],{},"log.audit.deny(reason, fields)",[2175,2234,2219],{},[2175,2236,2237],{},"Records a denied action",[2157,2239,2240,2245,2248],{},[2175,2241,2242],{},[526,2243,2244],{},"audit(fields)",[2175,2246,2247],{},"function",[2175,2249,2250],{},"Standalone for scripts \u002F jobs",[2157,2252,2253,2258,2261],{},[2175,2254,2255],{},[526,2256,2257],{},"withAudit({ action, target })(fn)",[2175,2259,2260],{},"wrapper",[2175,2262,2263],{},"Auto-emit success \u002F failure \u002F denied",[2157,2265,2266,2271,2274],{},[2175,2267,2268],{},[526,2269,2270],{},"auditDiff(before, after)",[2175,2272,2273],{},"helper",[2175,2275,2276,2277],{},"Redact-aware JSON Patch for ",[526,2278,2279],{},"changes",[2157,2281,2282,2286,2289],{},[2175,2283,2284],{},[526,2285,1863],{},[2175,2287,2288],{},"test util",[2175,2290,2291,2292,2294,2295],{},"Capture audits on emit; ",[526,2293,2126],{}," or ",[526,2296,2130],{},[2157,2298,2299,2304,2307],{},[2175,2300,2301],{},[526,2302,2303],{},"auditEnricher(opts?)",[2175,2305,2306],{},"enricher",[2175,2308,2309],{},"Auto-fill request \u002F runtime \u002F tenant context",[2157,2311,2312,2317,2319],{},[2175,2313,2314],{},[526,2315,2316],{},"auditOnly(drain, { await? })",[2175,2318,2260],{},[2175,2320,2321,2322,2324],{},"Routes only events with an ",[526,2323,770],{}," field",[2157,2326,2327,2332,2334],{},[2175,2328,2329],{},[526,2330,2331],{},"signed(drain, opts)",[2175,2333,2260],{},[2175,2335,2336],{},"Generic integrity wrapper (hmac \u002F hash-chain)",[2157,2338,2339,2344,2347],{},[2175,2340,2341],{},[526,2342,2343],{},"auditRedactPreset",[2175,2345,2346],{},"config",[2175,2348,2349],{},"Strict PII for audit events",[522,2351,2352,2353,2355],{},"Everything ships from the main ",[526,2354,591],{}," entrypoint.",[2357,2358,2359],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}",{"title":553,"searchDepth":597,"depth":597,"links":2361},[2362,2363,2364,2365,2366],{"id":541,"depth":597,"text":542},{"id":1162,"depth":597,"text":1163},{"id":1468,"depth":597,"text":1469},{"id":1857,"depth":597,"text":1858},{"id":2148,"depth":597,"text":2149},"File system, Axiom, and Postgres recipes for audit logs, plus mockAudit for tests and the full API reference.","md",[2370,2373],{"label":392,"icon":369,"to":393,"color":2371,"variant":2372},"neutral","subtle",{"label":133,"icon":131,"to":138,"color":2371,"variant":2372},{},{"title":396,"icon":79},{"title":517,"description":2367},"d4tHcUb1EpoUIrMkf-DJ-DPvE575KpxoUq7BH9zzato",[2379,2381],{"title":392,"path":393,"stem":394,"description":2380,"icon":369,"children":-1},"Integrity, redact presets, GDPR vs append-only, retention windows, and the most common pitfalls when shipping audit logs to production.",{"title":36,"path":404,"stem":405,"description":2382,"icon":39,"children":-1},"Wide-event telemetry for CLIs and automation — evlog's one-event-per-run model for tools on user machines, with privacy-safe flags, consent, outbox, and auto-generated disclosure.",1785609685526]