[{"data":1,"prerenderedAt":2402},["ShallowReactive",2],{"navigation_docs":3,"-use-cases-audit-recipes":534,"-use-cases-audit-recipes-surround":2397},[4,30,80,128,308,440,499],{"title":5,"path":6,"stem":7,"children":8,"page":29},"Start","\u002Fstart","1.start",[9,14,19,24],{"title":10,"path":11,"stem":12,"icon":13},"Introduction","\u002Fstart\u002Fintroduction","1.start\u002F1.introduction","i-lucide-info",{"title":15,"path":16,"stem":17,"icon":18},"Why start with evlog","\u002Fstart\u002Fwhy-evlog","1.start\u002F2.why-evlog","i-lucide-rocket",{"title":20,"path":21,"stem":22,"icon":23},"Installation","\u002Fstart\u002Finstallation","1.start\u002F3.installation","i-lucide-download",{"title":25,"path":26,"stem":27,"icon":28},"Quick Start","\u002Fstart\u002Fquick-start","1.start\u002F4.quick-start","i-lucide-zap",false,{"title":31,"path":32,"stem":33,"children":34,"page":29},"Learn","\u002Flearn","2.learn",[35,40,45,50,55,60,65,70,75],{"title":36,"path":37,"stem":38,"icon":39},"Overview","\u002Flearn\u002Foverview","2.learn\u002F0.overview","i-lucide-list",{"title":41,"path":42,"stem":43,"icon":44},"Simple Logging","\u002Flearn\u002Fsimple-logging","2.learn\u002F1.simple-logging","i-lucide-terminal",{"title":46,"path":47,"stem":48,"icon":49},"Wide Events","\u002Flearn\u002Fwide-events","2.learn\u002F2.wide-events","i-lucide-layers",{"title":51,"path":52,"stem":53,"icon":54},"Structured Errors","\u002Flearn\u002Fstructured-errors","2.learn\u002F3.structured-errors","i-lucide-shield-alert",{"title":56,"path":57,"stem":58,"icon":59},"Lifecycle","\u002Flearn\u002Flifecycle","2.learn\u002F4.lifecycle","i-lucide-arrow-right-left",{"title":61,"path":62,"stem":63,"icon":64},"Sampling","\u002Flearn\u002Fsampling","2.learn\u002F5.sampling","i-lucide-filter",{"title":66,"path":67,"stem":68,"icon":69},"Auto-Redaction","\u002Flearn\u002Fredaction","2.learn\u002F6.redaction","i-lucide-eye-off",{"title":71,"path":72,"stem":73,"icon":74},"Typed Fields","\u002Flearn\u002Ftyped-fields","2.learn\u002F7.typed-fields","i-simple-icons-typescript",{"title":76,"path":77,"stem":78,"icon":79},"Catalogs","\u002Flearn\u002Fcatalogs","2.learn\u002F8.catalogs","i-lucide-book-open",{"title":81,"path":82,"stem":83,"children":84,"page":29},"CLI","\u002Fcli","3.cli",[85,88,93,98,103,108,113,118,123],{"title":36,"path":86,"stem":87,"icon":44},"\u002Fcli\u002Foverview","3.cli\u002F0.overview",{"title":89,"path":90,"stem":91,"icon":92},"init","\u002Fcli\u002Finit","3.cli\u002F1.init","i-lucide-wand-sparkles",{"title":94,"path":95,"stem":96,"icon":97},"map","\u002Fcli\u002Fmap","3.cli\u002F2.map","i-lucide-radar",{"title":99,"path":100,"stem":101,"icon":102},"Rules","\u002Fcli\u002Frules","3.cli\u002F3.rules","i-lucide-list-checks",{"title":104,"path":105,"stem":106,"icon":107},"Scoring","\u002Fcli\u002Fscoring","3.cli\u002F4.scoring","i-lucide-gauge",{"title":109,"path":110,"stem":111,"icon":112},"CI","\u002Fcli\u002Fci","3.cli\u002F5.ci","i-lucide-git-pull-request",{"title":114,"path":115,"stem":116,"icon":117},"doctor","\u002Fcli\u002Fdoctor","3.cli\u002F6.doctor","i-lucide-stethoscope",{"title":119,"path":120,"stem":121,"icon":122},"telemetry","\u002Fcli\u002Ftelemetry","3.cli\u002F7.telemetry","i-lucide-bar-chart-3",{"title":124,"path":125,"stem":126,"icon":127},"agents","\u002Fcli\u002Fagents","3.cli\u002F8.agents","i-lucide-bot",{"title":129,"path":130,"stem":131,"children":132,"page":29},"Integrate","\u002Fintegrate","4.integrate",[133,137,220],{"title":36,"path":134,"stem":135,"icon":136},"\u002Fintegrate\u002Foverview","4.integrate\u002F0.overview","i-lucide-plug",{"title":138,"path":139,"stem":140,"children":141,"page":29},"Adapters","\u002Fintegrate\u002Fadapters","4.integrate\u002Fadapters",[142,145,175,200],{"title":36,"path":143,"stem":144,"icon":39},"\u002Fintegrate\u002Fadapters\u002Foverview","4.integrate\u002Fadapters\u002F01.overview",{"title":146,"path":147,"stem":148,"children":149,"page":29},"Cloud","\u002Fintegrate\u002Fadapters\u002Fcloud","4.integrate\u002Fadapters\u002Fcloud",[150,155,160,165,170],{"title":151,"path":152,"stem":153,"icon":154},"Axiom","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Faxiom","4.integrate\u002Fadapters\u002Fcloud\u002F01.axiom","i-custom-axiom",{"title":156,"path":157,"stem":158,"icon":159},"PostHog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fposthog","4.integrate\u002Fadapters\u002Fcloud\u002F02.posthog","i-simple-icons-posthog",{"title":161,"path":162,"stem":163,"icon":164},"Sentry","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fsentry","4.integrate\u002Fadapters\u002Fcloud\u002F03.sentry","i-simple-icons-sentry",{"title":166,"path":167,"stem":168,"icon":169},"Better Stack","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fbetter-stack","4.integrate\u002Fadapters\u002Fcloud\u002F04.better-stack","i-simple-icons-betterstack",{"title":171,"path":172,"stem":173,"icon":174},"Datadog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fdatadog","4.integrate\u002Fadapters\u002Fcloud\u002F05.datadog","i-simple-icons-datadog",{"title":176,"path":177,"stem":178,"children":179,"page":29},"Cloud or Self-Hosted","\u002Fintegrate\u002Fadapters\u002Fhybrid","4.integrate\u002Fadapters\u002Fhybrid",[180,185,190,195],{"title":181,"path":182,"stem":183,"icon":184},"Grafana Loki","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Floki","4.integrate\u002Fadapters\u002Fhybrid\u002F01.loki","i-simple-icons-grafana",{"title":186,"path":187,"stem":188,"icon":189},"ClickHouse","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Fclickhouse","4.integrate\u002Fadapters\u002Fhybrid\u002F02.clickhouse","i-simple-icons-clickhouse",{"title":191,"path":192,"stem":193,"icon":194},"OTLP","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Fotlp","4.integrate\u002Fadapters\u002Fhybrid\u002F03.otlp","i-simple-icons-opentelemetry",{"title":196,"path":197,"stem":198,"icon":199},"HyperDX","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Fhyperdx","4.integrate\u002Fadapters\u002Fhybrid\u002F04.hyperdx","i-custom-hyperdx",{"title":201,"path":202,"stem":203,"children":204,"page":29},"Self-Hosted","\u002Fintegrate\u002Fadapters\u002Fself-hosted","4.integrate\u002Fadapters\u002Fself-hosted",[205,210,215],{"title":206,"path":207,"stem":208,"icon":209},"File System","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Ffs","4.integrate\u002Fadapters\u002Fself-hosted\u002F01.fs","i-lucide-hard-drive",{"title":211,"path":212,"stem":213,"icon":214},"NuxtHub","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fnuxthub","4.integrate\u002Fadapters\u002Fself-hosted\u002F02.nuxthub","i-simple-icons-nuxt",{"title":216,"path":217,"stem":218,"icon":219},"Memory","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fmemory","4.integrate\u002Fadapters\u002Fself-hosted\u002F03.memory","i-lucide-cpu",{"title":221,"path":222,"stem":223,"children":224,"page":29},"Frameworks","\u002Fintegrate\u002Fframeworks","4.integrate\u002Fframeworks",[225,229,234,239,244,249,254,259,264,269,274,279,284,289,293,298,303],{"title":36,"path":226,"stem":227,"icon":228},"\u002Fintegrate\u002Fframeworks\u002Foverview","4.integrate\u002Fframeworks\u002F00.overview","i-lucide-layout-grid",{"title":230,"path":231,"stem":232,"icon":233},"Nuxt","\u002Fintegrate\u002Fframeworks\u002Fnuxt","4.integrate\u002Fframeworks\u002F01.nuxt","i-simple-icons-nuxtdotjs",{"title":235,"path":236,"stem":237,"icon":238},"Next.js","\u002Fintegrate\u002Fframeworks\u002Fnextjs","4.integrate\u002Fframeworks\u002F02.nextjs","i-simple-icons-nextdotjs",{"title":240,"path":241,"stem":242,"icon":243},"SvelteKit","\u002Fintegrate\u002Fframeworks\u002Fsveltekit","4.integrate\u002Fframeworks\u002F03.sveltekit","i-simple-icons-svelte",{"title":245,"path":246,"stem":247,"icon":248},"Nitro","\u002Fintegrate\u002Fframeworks\u002Fnitro","4.integrate\u002Fframeworks\u002F04.nitro","i-custom-nitro",{"title":250,"path":251,"stem":252,"icon":253},"TanStack Start","\u002Fintegrate\u002Fframeworks\u002Ftanstack-start","4.integrate\u002Fframeworks\u002F05.tanstack-start","i-custom-tanstack",{"title":255,"path":256,"stem":257,"icon":258},"NestJS","\u002Fintegrate\u002Fframeworks\u002Fnestjs","4.integrate\u002Fframeworks\u002F06.nestjs","i-simple-icons-nestjs",{"title":260,"path":261,"stem":262,"icon":263},"Express","\u002Fintegrate\u002Fframeworks\u002Fexpress","4.integrate\u002Fframeworks\u002F07.express","i-simple-icons-express",{"title":265,"path":266,"stem":267,"icon":268},"Hono","\u002Fintegrate\u002Fframeworks\u002Fhono","4.integrate\u002Fframeworks\u002F08.hono","i-simple-icons-hono",{"title":270,"path":271,"stem":272,"icon":273},"Fastify","\u002Fintegrate\u002Fframeworks\u002Ffastify","4.integrate\u002Fframeworks\u002F09.fastify","i-simple-icons-fastify",{"title":275,"path":276,"stem":277,"icon":278},"Elysia","\u002Fintegrate\u002Fframeworks\u002Felysia","4.integrate\u002Fframeworks\u002F10.elysia","i-custom-elysia",{"title":280,"path":281,"stem":282,"icon":283},"React Router","\u002Fintegrate\u002Fframeworks\u002Freact-router","4.integrate\u002Fframeworks\u002F11.react-router","i-custom-reactrouter",{"title":285,"path":286,"stem":287,"icon":288},"Cloudflare Workers","\u002Fintegrate\u002Fframeworks\u002Fcloudflare-workers","4.integrate\u002Fframeworks\u002F12.cloudflare-workers","i-simple-icons-cloudflare",{"title":290,"path":291,"stem":292,"icon":74},"Standalone","\u002Fintegrate\u002Fframeworks\u002Fstandalone","4.integrate\u002Fframeworks\u002F13.standalone",{"title":294,"path":295,"stem":296,"icon":297},"Astro","\u002Fintegrate\u002Fframeworks\u002Fastro","4.integrate\u002Fframeworks\u002F14.astro","i-simple-icons-astro",{"title":299,"path":300,"stem":301,"icon":302},"oRPC","\u002Fintegrate\u002Fframeworks\u002Forpc","4.integrate\u002Fframeworks\u002F15.orpc","i-lucide-network",{"title":304,"path":305,"stem":306,"icon":307},"AWS Lambda","\u002Fintegrate\u002Fframeworks\u002Faws-lambda","4.integrate\u002Fframeworks\u002F16.aws-lambda","i-custom-lambda",{"title":309,"path":310,"stem":311,"children":312,"page":29},"Use Cases","\u002Fuse-cases","5.use-cases",[313,316,321,350,377,409,430,435],{"title":36,"path":314,"stem":315,"icon":102},"\u002Fuse-cases\u002Foverview","5.use-cases\u002F0.overview",{"title":317,"path":318,"stem":319,"icon":320},"Client Logging","\u002Fuse-cases\u002Fclient-logging","5.use-cases\u002F1.client-logging","i-lucide-monitor",{"title":322,"icon":323,"path":324,"stem":325,"children":326,"page":29},"AI SDK","i-simple-icons-vercel","\u002Fuse-cases\u002Fai-sdk","5.use-cases\u002F2.ai-sdk",[327,330,335,340,345],{"title":36,"path":328,"stem":329,"icon":39},"\u002Fuse-cases\u002Fai-sdk\u002Foverview","5.use-cases\u002F2.ai-sdk\u002F01.overview",{"title":331,"path":332,"stem":333,"icon":334},"Usage","\u002Fuse-cases\u002Fai-sdk\u002Fusage","5.use-cases\u002F2.ai-sdk\u002F02.usage","i-lucide-code",{"title":336,"path":337,"stem":338,"icon":339},"Options","\u002Fuse-cases\u002Fai-sdk\u002Foptions","5.use-cases\u002F2.ai-sdk\u002F03.options","i-lucide-sliders",{"title":341,"path":342,"stem":343,"icon":344},"Metadata","\u002Fuse-cases\u002Fai-sdk\u002Fmetadata","5.use-cases\u002F2.ai-sdk\u002F04.metadata","i-lucide-database",{"title":346,"path":347,"stem":348,"icon":349},"Telemetry","\u002Fuse-cases\u002Fai-sdk\u002Ftelemetry","5.use-cases\u002F2.ai-sdk\u002F05.telemetry","i-lucide-activity",{"title":351,"icon":352,"path":353,"stem":354,"children":355,"page":29},"Better Auth","i-simple-icons-betterauth","\u002Fuse-cases\u002Fbetter-auth","5.use-cases\u002F3.better-auth",[356,359,364,369,373],{"title":36,"path":357,"stem":358,"icon":39},"\u002Fuse-cases\u002Fbetter-auth\u002Foverview","5.use-cases\u002F3.better-auth\u002F01.overview",{"title":360,"path":361,"stem":362,"icon":363},"Identify User","\u002Fuse-cases\u002Fbetter-auth\u002Fidentify-user","5.use-cases\u002F3.better-auth\u002F02.identify-user","i-lucide-user-check",{"title":365,"path":366,"stem":367,"icon":368},"Middleware","\u002Fuse-cases\u002Fbetter-auth\u002Fmiddleware","5.use-cases\u002F3.better-auth\u002F03.middleware","i-lucide-shield",{"title":370,"path":371,"stem":372,"icon":320},"Client Sync","\u002Fuse-cases\u002Fbetter-auth\u002Fclient-sync","5.use-cases\u002F3.better-auth\u002F04.client-sync",{"title":374,"path":375,"stem":376,"icon":107},"Performance","\u002Fuse-cases\u002Fbetter-auth\u002Fperformance","5.use-cases\u002F3.better-auth\u002F05.performance",{"title":378,"icon":379,"path":380,"stem":381,"children":382,"page":29},"Audit Logs","i-lucide-shield-check","\u002Fuse-cases\u002Faudit","5.use-cases\u002F4.audit",[383,386,391,396,401,405],{"title":36,"path":384,"stem":385,"icon":39},"\u002Fuse-cases\u002Faudit\u002Foverview","5.use-cases\u002F4.audit\u002F01.overview",{"title":387,"path":388,"stem":389,"icon":390},"Schema","\u002Fuse-cases\u002Faudit\u002Fschema","5.use-cases\u002F4.audit\u002F02.schema","i-lucide-file-text",{"title":392,"path":393,"stem":394,"icon":395},"Recording","\u002Fuse-cases\u002Faudit\u002Frecording","5.use-cases\u002F4.audit\u002F03.recording","i-lucide-pen-line",{"title":397,"path":398,"stem":399,"icon":400},"Drains","\u002Fuse-cases\u002Faudit\u002Fpipeline","5.use-cases\u002F4.audit\u002F04.pipeline","i-lucide-link",{"title":402,"path":403,"stem":404,"icon":379},"Compliance","\u002Fuse-cases\u002Faudit\u002Fcompliance","5.use-cases\u002F4.audit\u002F05.compliance",{"title":406,"path":407,"stem":408,"icon":79},"Recipes","\u002Fuse-cases\u002Faudit\u002Frecipes","5.use-cases\u002F4.audit\u002F06.recipes",{"title":346,"icon":107,"path":410,"stem":411,"children":412,"page":29},"\u002Fuse-cases\u002Ftelemetry","5.use-cases\u002F4.telemetry",[413,416,421,426],{"title":36,"path":414,"stem":415,"icon":39},"\u002Fuse-cases\u002Ftelemetry\u002Foverview","5.use-cases\u002F4.telemetry\u002F01.overview",{"title":417,"path":418,"stem":419,"icon":420},"Setup","\u002Fuse-cases\u002Ftelemetry\u002Fsetup","5.use-cases\u002F4.telemetry\u002F02.setup","i-lucide-wrench",{"title":422,"path":423,"stem":424,"icon":425},"Ingest","\u002Fuse-cases\u002Ftelemetry\u002Fingest","5.use-cases\u002F4.telemetry\u002F03.ingest","i-lucide-server",{"title":427,"path":428,"stem":429,"icon":79},"Reference","\u002Fuse-cases\u002Ftelemetry\u002Freference","5.use-cases\u002F4.telemetry\u002F04.reference",{"title":431,"path":432,"stem":433,"icon":434},"Enrichers","\u002Fuse-cases\u002Fenrichers","5.use-cases\u002F5.enrichers","i-lucide-sparkles",{"title":436,"path":437,"stem":438,"icon":439},"eve","\u002Fuse-cases\u002Feve","5.use-cases\u002F5.eve","i-custom-eve",{"title":441,"path":442,"stem":443,"children":444,"page":29},"Extend","\u002Fextend","6.extend",[445,449,454,459,463,468,472,476,480,484,489,494],{"title":36,"path":446,"stem":447,"icon":448},"\u002Fextend\u002Foverview","6.extend\u002F0.overview","i-lucide-blocks",{"title":450,"path":451,"stem":452,"icon":453},"Stream","\u002Fextend\u002Fstream","6.extend\u002F1.stream","i-lucide-radio-tower",{"title":455,"path":456,"stem":457,"icon":458},"Custom framework","\u002Fextend\u002Fcustom-framework","6.extend\u002F10.custom-framework","i-lucide-puzzle",{"title":460,"path":461,"stem":462,"icon":453},"Diagnostics channel","\u002Fextend\u002Fdiagnostics-channel","6.extend\u002F11.diagnostics-channel",{"title":464,"path":465,"stem":466,"icon":467},"FS reader","\u002Fextend\u002Ffs-reader","6.extend\u002F2.fs-reader","i-lucide-folder-search",{"title":406,"path":469,"stem":470,"icon":471},"\u002Fextend\u002Fconsumer-recipes","6.extend\u002F3.consumer-recipes","i-lucide-chef-hat",{"title":473,"path":474,"stem":475,"icon":448},"Plugins","\u002Fextend\u002Fplugins","6.extend\u002F4.plugins",{"title":477,"path":478,"stem":479,"icon":434},"Custom enrichers","\u002Fextend\u002Fcustom-enrichers","6.extend\u002F5.custom-enrichers",{"title":481,"path":482,"stem":483,"icon":64},"Tail sampling","\u002Fextend\u002Ftail-sampling","6.extend\u002F6.tail-sampling",{"title":485,"path":486,"stem":487,"icon":488},"Identity headers","\u002Fextend\u002Fidentity-headers","6.extend\u002F7.identity-headers","i-lucide-fingerprint",{"title":490,"path":491,"stem":492,"icon":493},"Custom drains","\u002Fextend\u002Fcustom-drains","6.extend\u002F8.custom-drains","i-lucide-share-2",{"title":495,"path":496,"stem":497,"icon":498},"Drain pipeline","\u002Fextend\u002Fdrain-pipeline","6.extend\u002F9.drain-pipeline","i-lucide-workflow",{"title":427,"path":500,"stem":501,"children":502,"page":29},"\u002Freference","7.reference",[503,508,511,516,520,525,529],{"title":504,"path":505,"stem":506,"icon":507},"Configuration","\u002Freference\u002Fconfiguration","7.reference\u002F1.configuration","i-lucide-settings",{"title":374,"path":509,"stem":510,"icon":107},"\u002Freference\u002Fperformance","7.reference\u002F2.performance",{"title":512,"path":513,"stem":514,"icon":515},"Vite Plugin","\u002Freference\u002Fvite-plugin","7.reference\u002F3.vite-plugin","i-custom-vite",{"title":517,"path":518,"stem":519,"icon":379},"Best Practices","\u002Freference\u002Fbest-practices","7.reference\u002F4.best-practices",{"title":521,"path":522,"stem":523,"icon":524},"vs Other Loggers","\u002Freference\u002Fvs-other-loggers","7.reference\u002F5.vs-other-loggers","i-lucide-scale",{"title":526,"path":527,"stem":528,"icon":434},"Agent Skills","\u002Freference\u002Fagent-skills","7.reference\u002F6.agent-skills",{"title":530,"path":531,"stem":532,"icon":533},"Cost","\u002Freference\u002Fcost","7.reference\u002F7.cost","i-lucide-receipt",{"id":535,"title":536,"body":537,"description":2386,"extension":2387,"links":2388,"meta":2393,"navigation":2394,"path":407,"seo":2395,"stem":408,"__hash__":2396},"docs\u002F5.use-cases\u002F4.audit\u002F06.recipes.md","Recipes & Reference",{"type":538,"value":539,"toc":2379},"minimark",[540,557,562,1170,1179,1183,1482,1485,1489,1864,1874,1878,1894,2140,2154,2165,2169,2369,2375],[541,542,543,544,548,549,552,553,556],"p",{},"Pick the recipe that matches your sink, drop it in, and you have a tamper-evident audit log. Each recipe composes the same primitives (",[545,546,547],"code",{},"auditOnly",", ",[545,550,551],{},"signed",", optional ",[545,554,555],{},"await: true",") over different drains.",[558,559,561],"h2",{"id":560},"audit-logs-on-disk","Audit logs on disk",[563,564,565,771],"code-group",{},[566,567,573],"pre",{"className":568,"code":569,"filename":570,"language":571,"meta":572,"style":572},"language-typescript shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { auditOnly, signed } from 'evlog'\nimport { createFsDrain } from 'evlog\u002Ffs'\n\nnitro.hooks.hook('evlog:drain', auditOnly(\n  signed(createFsDrain({ dir: '.audit', maxFiles: 30 }), { strategy: 'hash-chain' }),\n  { await: true },\n))\n","Input — server\u002Fplugins\u002Fevlog.ts","typescript","",[545,574,575,614,635,642,678,747,765],{"__ignoreMap":572},[576,577,580,584,588,592,595,598,601,604,607,611],"span",{"class":578,"line":579},"line",1,[576,581,583],{"class":582},"s7zQu","import",[576,585,587],{"class":586},"sMK4o"," {",[576,589,591],{"class":590},"sTEyZ"," auditOnly",[576,593,594],{"class":586},",",[576,596,597],{"class":590}," signed",[576,599,600],{"class":586}," }",[576,602,603],{"class":582}," from",[576,605,606],{"class":586}," '",[576,608,610],{"class":609},"sfazB","evlog",[576,612,613],{"class":586},"'\n",[576,615,617,619,621,624,626,628,630,633],{"class":578,"line":616},2,[576,618,583],{"class":582},[576,620,587],{"class":586},[576,622,623],{"class":590}," createFsDrain",[576,625,600],{"class":586},[576,627,603],{"class":582},[576,629,606],{"class":586},[576,631,632],{"class":609},"evlog\u002Ffs",[576,634,613],{"class":586},[576,636,638],{"class":578,"line":637},3,[576,639,641],{"emptyLinePlaceholder":640},true,"\n",[576,643,645,648,651,654,656,660,663,666,669,671,673,675],{"class":578,"line":644},4,[576,646,647],{"class":590},"nitro",[576,649,650],{"class":586},".",[576,652,653],{"class":590},"hooks",[576,655,650],{"class":586},[576,657,659],{"class":658},"s2Zo4","hook",[576,661,662],{"class":590},"(",[576,664,665],{"class":586},"'",[576,667,668],{"class":609},"evlog:drain",[576,670,665],{"class":586},[576,672,594],{"class":586},[576,674,591],{"class":658},[576,676,677],{"class":590},"(\n",[576,679,681,684,686,689,691,694,698,701,703,706,708,710,713,715,719,721,724,726,728,731,733,735,738,740,742,744],{"class":578,"line":680},5,[576,682,683],{"class":658},"  signed",[576,685,662],{"class":590},[576,687,688],{"class":658},"createFsDrain",[576,690,662],{"class":590},[576,692,693],{"class":586},"{",[576,695,697],{"class":696},"swJcz"," dir",[576,699,700],{"class":586},":",[576,702,606],{"class":586},[576,704,705],{"class":609},".audit",[576,707,665],{"class":586},[576,709,594],{"class":586},[576,711,712],{"class":696}," maxFiles",[576,714,700],{"class":586},[576,716,718],{"class":717},"sbssI"," 30",[576,720,600],{"class":586},[576,722,723],{"class":590},")",[576,725,594],{"class":586},[576,727,587],{"class":586},[576,729,730],{"class":696}," strategy",[576,732,700],{"class":586},[576,734,606],{"class":586},[576,736,737],{"class":609},"hash-chain",[576,739,665],{"class":586},[576,741,600],{"class":586},[576,743,723],{"class":590},[576,745,746],{"class":586},",\n",[576,748,750,753,756,758,762],{"class":578,"line":749},6,[576,751,752],{"class":586},"  {",[576,754,755],{"class":696}," await",[576,757,700],{"class":586},[576,759,761],{"class":760},"sfNiH"," true",[576,763,764],{"class":586}," },\n",[576,766,768],{"class":578,"line":767},7,[576,769,770],{"class":590},"))\n",[566,772,777],{"className":773,"code":774,"filename":775,"language":776,"meta":572,"style":572},"language-jsonl shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\"audit\":{\"action\":\"invoice.refund\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"invoice\",\"id\":\"inv_889\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_8f3c4b2a1e5d6f7c\",\"prevHash\":null,\"hash\":\"3f2c8e1a...\"}}\n{\"audit\":{\"action\":\"user.update\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"user\",\"id\":\"usr_99\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_5e7d8f9a0b1c2d3e\",\"prevHash\":\"3f2c8e1a...\",\"hash\":\"9a1b4d7c...\"}}\n","Output — .audit\u002F2026-04-24.ndjson","jsonl",[545,778,779,982],{"__ignoreMap":572},[576,780,781,783,786,790,792,795,797,801,803,805,807,810,812,814,816,819,821,823,825,828,830,832,834,837,839,841,843,846,848,850,852,855,857,860,862,865,867,869,871,873,875,877,879,882,884,886,888,890,892,894,896,899,901,903,905,908,910,912,914,917,919,921,923,926,928,930,933,935,937,940,942,944,946,949,951,953,955,958,960,963,965,968,970,972,974,977,979],{"class":578,"line":579},[576,782,693],{"class":586},[576,784,785],{"class":586},"\"",[576,787,789],{"class":788},"spNyl","audit",[576,791,785],{"class":586},[576,793,794],{"class":586},":{",[576,796,785],{"class":586},[576,798,800],{"class":799},"sBMFI","action",[576,802,785],{"class":586},[576,804,700],{"class":586},[576,806,785],{"class":586},[576,808,809],{"class":609},"invoice.refund",[576,811,785],{"class":586},[576,813,594],{"class":586},[576,815,785],{"class":586},[576,817,818],{"class":799},"actor",[576,820,785],{"class":586},[576,822,794],{"class":586},[576,824,785],{"class":586},[576,826,827],{"class":717},"type",[576,829,785],{"class":586},[576,831,700],{"class":586},[576,833,785],{"class":586},[576,835,836],{"class":609},"user",[576,838,785],{"class":586},[576,840,594],{"class":586},[576,842,785],{"class":586},[576,844,845],{"class":717},"id",[576,847,785],{"class":586},[576,849,700],{"class":586},[576,851,785],{"class":586},[576,853,854],{"class":609},"usr_42",[576,856,785],{"class":586},[576,858,859],{"class":586},"},",[576,861,785],{"class":586},[576,863,864],{"class":799},"target",[576,866,785],{"class":586},[576,868,794],{"class":586},[576,870,785],{"class":586},[576,872,827],{"class":717},[576,874,785],{"class":586},[576,876,700],{"class":586},[576,878,785],{"class":586},[576,880,881],{"class":609},"invoice",[576,883,785],{"class":586},[576,885,594],{"class":586},[576,887,785],{"class":586},[576,889,845],{"class":717},[576,891,785],{"class":586},[576,893,700],{"class":586},[576,895,785],{"class":586},[576,897,898],{"class":609},"inv_889",[576,900,785],{"class":586},[576,902,859],{"class":586},[576,904,785],{"class":586},[576,906,907],{"class":799},"outcome",[576,909,785],{"class":586},[576,911,700],{"class":586},[576,913,785],{"class":586},[576,915,916],{"class":609},"success",[576,918,785],{"class":586},[576,920,594],{"class":586},[576,922,785],{"class":586},[576,924,925],{"class":799},"version",[576,927,785],{"class":586},[576,929,700],{"class":586},[576,931,932],{"class":717},"1",[576,934,594],{"class":586},[576,936,785],{"class":586},[576,938,939],{"class":799},"idempotencyKey",[576,941,785],{"class":586},[576,943,700],{"class":586},[576,945,785],{"class":586},[576,947,948],{"class":609},"ak_8f3c4b2a1e5d6f7c",[576,950,785],{"class":586},[576,952,594],{"class":586},[576,954,785],{"class":586},[576,956,957],{"class":799},"prevHash",[576,959,785],{"class":586},[576,961,962],{"class":586},":null,",[576,964,785],{"class":586},[576,966,967],{"class":799},"hash",[576,969,785],{"class":586},[576,971,700],{"class":586},[576,973,785],{"class":586},[576,975,976],{"class":609},"3f2c8e1a...",[576,978,785],{"class":586},[576,980,981],{"class":586},"}}\n",[576,983,984,986,988,990,992,994,996,998,1000,1002,1004,1007,1009,1011,1013,1015,1017,1019,1021,1023,1025,1027,1029,1031,1033,1035,1037,1039,1041,1043,1045,1047,1049,1051,1053,1055,1057,1059,1061,1063,1065,1067,1069,1071,1073,1075,1077,1079,1081,1083,1085,1088,1090,1092,1094,1096,1098,1100,1102,1104,1106,1108,1110,1112,1114,1116,1118,1120,1122,1124,1126,1128,1130,1133,1135,1137,1139,1141,1143,1145,1147,1149,1151,1153,1155,1157,1159,1161,1163,1166,1168],{"class":578,"line":616},[576,985,693],{"class":586},[576,987,785],{"class":586},[576,989,789],{"class":788},[576,991,785],{"class":586},[576,993,794],{"class":586},[576,995,785],{"class":586},[576,997,800],{"class":799},[576,999,785],{"class":586},[576,1001,700],{"class":586},[576,1003,785],{"class":586},[576,1005,1006],{"class":609},"user.update",[576,1008,785],{"class":586},[576,1010,594],{"class":586},[576,1012,785],{"class":586},[576,1014,818],{"class":799},[576,1016,785],{"class":586},[576,1018,794],{"class":586},[576,1020,785],{"class":586},[576,1022,827],{"class":717},[576,1024,785],{"class":586},[576,1026,700],{"class":586},[576,1028,785],{"class":586},[576,1030,836],{"class":609},[576,1032,785],{"class":586},[576,1034,594],{"class":586},[576,1036,785],{"class":586},[576,1038,845],{"class":717},[576,1040,785],{"class":586},[576,1042,700],{"class":586},[576,1044,785],{"class":586},[576,1046,854],{"class":609},[576,1048,785],{"class":586},[576,1050,859],{"class":586},[576,1052,785],{"class":586},[576,1054,864],{"class":799},[576,1056,785],{"class":586},[576,1058,794],{"class":586},[576,1060,785],{"class":586},[576,1062,827],{"class":717},[576,1064,785],{"class":586},[576,1066,700],{"class":586},[576,1068,785],{"class":586},[576,1070,836],{"class":609},[576,1072,785],{"class":586},[576,1074,594],{"class":586},[576,1076,785],{"class":586},[576,1078,845],{"class":717},[576,1080,785],{"class":586},[576,1082,700],{"class":586},[576,1084,785],{"class":586},[576,1086,1087],{"class":609},"usr_99",[576,1089,785],{"class":586},[576,1091,859],{"class":586},[576,1093,785],{"class":586},[576,1095,907],{"class":799},[576,1097,785],{"class":586},[576,1099,700],{"class":586},[576,1101,785],{"class":586},[576,1103,916],{"class":609},[576,1105,785],{"class":586},[576,1107,594],{"class":586},[576,1109,785],{"class":586},[576,1111,925],{"class":799},[576,1113,785],{"class":586},[576,1115,700],{"class":586},[576,1117,932],{"class":717},[576,1119,594],{"class":586},[576,1121,785],{"class":586},[576,1123,939],{"class":799},[576,1125,785],{"class":586},[576,1127,700],{"class":586},[576,1129,785],{"class":586},[576,1131,1132],{"class":609},"ak_5e7d8f9a0b1c2d3e",[576,1134,785],{"class":586},[576,1136,594],{"class":586},[576,1138,785],{"class":586},[576,1140,957],{"class":799},[576,1142,785],{"class":586},[576,1144,700],{"class":586},[576,1146,785],{"class":586},[576,1148,976],{"class":609},[576,1150,785],{"class":586},[576,1152,594],{"class":586},[576,1154,785],{"class":586},[576,1156,967],{"class":799},[576,1158,785],{"class":586},[576,1160,700],{"class":586},[576,1162,785],{"class":586},[576,1164,1165],{"class":609},"9a1b4d7c...",[576,1167,785],{"class":586},[576,1169,981],{"class":586},[541,1171,1172,1173,1175,1176,1178],{},"Each line's ",[545,1174,957],{}," matches the previous line's ",[545,1177,967],{},". Tampering with any row breaks the chain forward of that point — a verifier replays the hashes and reports the first mismatch.",[558,1180,1182],{"id":1181},"audit-logs-to-a-dedicated-axiom-dataset","Audit logs to a dedicated Axiom dataset",[563,1184,1185,1352,1420],{},[566,1186,1188],{"className":568,"code":1187,"filename":570,"language":571,"meta":572,"style":572},"import { auditOnly } from 'evlog'\nimport { createAxiomDrain } from 'evlog\u002Faxiom'\n\nnitro.hooks.hook('evlog:drain', createAxiomDrain({ dataset: 'logs' }))\nnitro.hooks.hook('evlog:drain', auditOnly(\n  createAxiomDrain({ dataset: 'audit', apiKey: process.env.AXIOM_AUDIT_API_KEY }),\n))\n",[545,1189,1190,1208,1228,1232,1276,1302,1348],{"__ignoreMap":572},[576,1191,1192,1194,1196,1198,1200,1202,1204,1206],{"class":578,"line":579},[576,1193,583],{"class":582},[576,1195,587],{"class":586},[576,1197,591],{"class":590},[576,1199,600],{"class":586},[576,1201,603],{"class":582},[576,1203,606],{"class":586},[576,1205,610],{"class":609},[576,1207,613],{"class":586},[576,1209,1210,1212,1214,1217,1219,1221,1223,1226],{"class":578,"line":616},[576,1211,583],{"class":582},[576,1213,587],{"class":586},[576,1215,1216],{"class":590}," createAxiomDrain",[576,1218,600],{"class":586},[576,1220,603],{"class":582},[576,1222,606],{"class":586},[576,1224,1225],{"class":609},"evlog\u002Faxiom",[576,1227,613],{"class":586},[576,1229,1230],{"class":578,"line":637},[576,1231,641],{"emptyLinePlaceholder":640},[576,1233,1234,1236,1238,1240,1242,1244,1246,1248,1250,1252,1254,1256,1258,1260,1263,1265,1267,1270,1272,1274],{"class":578,"line":644},[576,1235,647],{"class":590},[576,1237,650],{"class":586},[576,1239,653],{"class":590},[576,1241,650],{"class":586},[576,1243,659],{"class":658},[576,1245,662],{"class":590},[576,1247,665],{"class":586},[576,1249,668],{"class":609},[576,1251,665],{"class":586},[576,1253,594],{"class":586},[576,1255,1216],{"class":658},[576,1257,662],{"class":590},[576,1259,693],{"class":586},[576,1261,1262],{"class":696}," dataset",[576,1264,700],{"class":586},[576,1266,606],{"class":586},[576,1268,1269],{"class":609},"logs",[576,1271,665],{"class":586},[576,1273,600],{"class":586},[576,1275,770],{"class":590},[576,1277,1278,1280,1282,1284,1286,1288,1290,1292,1294,1296,1298,1300],{"class":578,"line":680},[576,1279,647],{"class":590},[576,1281,650],{"class":586},[576,1283,653],{"class":590},[576,1285,650],{"class":586},[576,1287,659],{"class":658},[576,1289,662],{"class":590},[576,1291,665],{"class":586},[576,1293,668],{"class":609},[576,1295,665],{"class":586},[576,1297,594],{"class":586},[576,1299,591],{"class":658},[576,1301,677],{"class":590},[576,1303,1304,1307,1309,1311,1313,1315,1317,1319,1321,1323,1326,1328,1331,1333,1336,1338,1341,1344,1346],{"class":578,"line":749},[576,1305,1306],{"class":658},"  createAxiomDrain",[576,1308,662],{"class":590},[576,1310,693],{"class":586},[576,1312,1262],{"class":696},[576,1314,700],{"class":586},[576,1316,606],{"class":586},[576,1318,789],{"class":609},[576,1320,665],{"class":586},[576,1322,594],{"class":586},[576,1324,1325],{"class":696}," apiKey",[576,1327,700],{"class":586},[576,1329,1330],{"class":590}," process",[576,1332,650],{"class":586},[576,1334,1335],{"class":590},"env",[576,1337,650],{"class":586},[576,1339,1340],{"class":590},"AXIOM_AUDIT_API_KEY ",[576,1342,1343],{"class":586},"}",[576,1345,723],{"class":590},[576,1347,746],{"class":586},[576,1349,1350],{"class":578,"line":767},[576,1351,770],{"class":590},[566,1353,1358],{"className":1354,"code":1355,"filename":1356,"language":1357,"meta":572,"style":572},"language-kusto shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","['audit']\n| where audit.action == \"invoice.refund\"\n| summarize count() by audit.outcome, bin(_time, 1h)\n","Output — Axiom query","kusto",[545,1359,1360,1374,1392],{"__ignoreMap":572},[576,1361,1362,1365,1367,1369,1371],{"class":578,"line":579},[576,1363,1364],{"class":590},"[",[576,1366,665],{"class":586},[576,1368,789],{"class":609},[576,1370,665],{"class":586},[576,1372,1373],{"class":590},"]\n",[576,1375,1376,1379,1382,1385,1387,1389],{"class":578,"line":616},[576,1377,1378],{"class":590},"| ",[576,1380,1381],{"class":717},"where",[576,1383,1384],{"class":590}," audit.action == ",[576,1386,785],{"class":586},[576,1388,809],{"class":609},[576,1390,1391],{"class":586},"\"\n",[576,1393,1394,1396,1399,1402,1405,1408,1411,1414,1417],{"class":578,"line":637},[576,1395,1378],{"class":590},[576,1397,1398],{"class":717},"summarize",[576,1400,1401],{"class":658}," count()",[576,1403,1404],{"class":717}," by",[576,1406,1407],{"class":590}," audit.outcome, ",[576,1409,1410],{"class":658},"bin",[576,1412,1413],{"class":590},"(_time, ",[576,1415,1416],{"class":717},"1h",[576,1418,1419],{"class":590},")\n",[566,1421,1424],{"className":1354,"code":1422,"filename":1423,"language":1357,"meta":572,"style":572},"['audit']\n| where audit.outcome == \"denied\"\n| summarize count() by audit.actor.id, audit.action\n| order by count_ desc\n","Output — denials by actor",[545,1425,1426,1438,1454,1467],{"__ignoreMap":572},[576,1427,1428,1430,1432,1434,1436],{"class":578,"line":579},[576,1429,1364],{"class":590},[576,1431,665],{"class":586},[576,1433,789],{"class":609},[576,1435,665],{"class":586},[576,1437,1373],{"class":590},[576,1439,1440,1442,1444,1447,1449,1452],{"class":578,"line":616},[576,1441,1378],{"class":590},[576,1443,1381],{"class":717},[576,1445,1446],{"class":590}," audit.outcome == ",[576,1448,785],{"class":586},[576,1450,1451],{"class":609},"denied",[576,1453,1391],{"class":586},[576,1455,1456,1458,1460,1462,1464],{"class":578,"line":637},[576,1457,1378],{"class":590},[576,1459,1398],{"class":717},[576,1461,1401],{"class":658},[576,1463,1404],{"class":717},[576,1465,1466],{"class":590}," audit.actor.id, audit.action\n",[576,1468,1469,1471,1474,1476,1479],{"class":578,"line":644},[576,1470,1378],{"class":590},[576,1472,1473],{"class":717},"order",[576,1475,1404],{"class":717},[576,1477,1478],{"class":590}," count_ ",[576,1480,1481],{"class":717},"desc\n",[541,1483,1484],{},"Splitting datasets means the audit dataset can have a longer retention (7y), tighter access controls, and a separate billing line — without touching the rest of your pipeline.",[558,1486,1488],{"id":1487},"audit-logs-in-postgres","Audit logs in Postgres",[563,1490,1491,1744],{},[566,1492,1494],{"className":568,"code":1493,"filename":570,"language":571,"meta":572,"style":572},"import { auditOnly } from 'evlog'\nimport type { DrainContext } from 'evlog'\n\nconst postgresAudit = async (ctx: DrainContext) => {\n  await db.insert(auditEvents).values({\n    id: ctx.event.audit!.idempotencyKey,\n    timestamp: new Date(ctx.event.timestamp),\n    payload: ctx.event,\n  }).onConflictDoNothing()\n}\n\nnitro.hooks.hook('evlog:drain', auditOnly(postgresAudit, { await: true }))\n",[545,1495,1496,1514,1536,1540,1573,1603,1629,1659,1675,1691,1697,1702],{"__ignoreMap":572},[576,1497,1498,1500,1502,1504,1506,1508,1510,1512],{"class":578,"line":579},[576,1499,583],{"class":582},[576,1501,587],{"class":586},[576,1503,591],{"class":590},[576,1505,600],{"class":586},[576,1507,603],{"class":582},[576,1509,606],{"class":586},[576,1511,610],{"class":609},[576,1513,613],{"class":586},[576,1515,1516,1518,1521,1523,1526,1528,1530,1532,1534],{"class":578,"line":616},[576,1517,583],{"class":582},[576,1519,1520],{"class":582}," type",[576,1522,587],{"class":586},[576,1524,1525],{"class":590}," DrainContext",[576,1527,600],{"class":586},[576,1529,603],{"class":582},[576,1531,606],{"class":586},[576,1533,610],{"class":609},[576,1535,613],{"class":586},[576,1537,1538],{"class":578,"line":637},[576,1539,641],{"emptyLinePlaceholder":640},[576,1541,1542,1545,1548,1551,1554,1557,1561,1563,1565,1567,1570],{"class":578,"line":644},[576,1543,1544],{"class":788},"const",[576,1546,1547],{"class":590}," postgresAudit ",[576,1549,1550],{"class":586},"=",[576,1552,1553],{"class":788}," async",[576,1555,1556],{"class":586}," (",[576,1558,1560],{"class":1559},"sHdIc","ctx",[576,1562,700],{"class":586},[576,1564,1525],{"class":799},[576,1566,723],{"class":586},[576,1568,1569],{"class":788}," =>",[576,1571,1572],{"class":586}," {\n",[576,1574,1575,1578,1581,1583,1586,1588,1591,1593,1595,1598,1600],{"class":578,"line":680},[576,1576,1577],{"class":582},"  await",[576,1579,1580],{"class":590}," db",[576,1582,650],{"class":586},[576,1584,1585],{"class":658},"insert",[576,1587,662],{"class":696},[576,1589,1590],{"class":590},"auditEvents",[576,1592,723],{"class":696},[576,1594,650],{"class":586},[576,1596,1597],{"class":658},"values",[576,1599,662],{"class":696},[576,1601,1602],{"class":586},"{\n",[576,1604,1605,1608,1610,1613,1615,1618,1620,1622,1625,1627],{"class":578,"line":749},[576,1606,1607],{"class":696},"    id",[576,1609,700],{"class":586},[576,1611,1612],{"class":590}," ctx",[576,1614,650],{"class":586},[576,1616,1617],{"class":590},"event",[576,1619,650],{"class":586},[576,1621,789],{"class":590},[576,1623,1624],{"class":586},"!.",[576,1626,939],{"class":590},[576,1628,746],{"class":586},[576,1630,1631,1634,1636,1639,1642,1644,1646,1648,1650,1652,1655,1657],{"class":578,"line":767},[576,1632,1633],{"class":696},"    timestamp",[576,1635,700],{"class":586},[576,1637,1638],{"class":586}," new",[576,1640,1641],{"class":658}," Date",[576,1643,662],{"class":696},[576,1645,1560],{"class":590},[576,1647,650],{"class":586},[576,1649,1617],{"class":590},[576,1651,650],{"class":586},[576,1653,1654],{"class":590},"timestamp",[576,1656,723],{"class":696},[576,1658,746],{"class":586},[576,1660,1662,1665,1667,1669,1671,1673],{"class":578,"line":1661},8,[576,1663,1664],{"class":696},"    payload",[576,1666,700],{"class":586},[576,1668,1612],{"class":590},[576,1670,650],{"class":586},[576,1672,1617],{"class":590},[576,1674,746],{"class":586},[576,1676,1678,1681,1683,1685,1688],{"class":578,"line":1677},9,[576,1679,1680],{"class":586},"  }",[576,1682,723],{"class":696},[576,1684,650],{"class":586},[576,1686,1687],{"class":658},"onConflictDoNothing",[576,1689,1690],{"class":696},"()\n",[576,1692,1694],{"class":578,"line":1693},10,[576,1695,1696],{"class":586},"}\n",[576,1698,1700],{"class":578,"line":1699},11,[576,1701,641],{"emptyLinePlaceholder":640},[576,1703,1705,1707,1709,1711,1713,1715,1717,1719,1721,1723,1725,1727,1730,1732,1734,1736,1738,1740,1742],{"class":578,"line":1704},12,[576,1706,647],{"class":590},[576,1708,650],{"class":586},[576,1710,653],{"class":590},[576,1712,650],{"class":586},[576,1714,659],{"class":658},[576,1716,662],{"class":590},[576,1718,665],{"class":586},[576,1720,668],{"class":609},[576,1722,665],{"class":586},[576,1724,594],{"class":586},[576,1726,591],{"class":658},[576,1728,1729],{"class":590},"(postgresAudit",[576,1731,594],{"class":586},[576,1733,587],{"class":586},[576,1735,755],{"class":696},[576,1737,700],{"class":586},[576,1739,761],{"class":760},[576,1741,600],{"class":586},[576,1743,770],{"class":590},[566,1745,1750],{"className":1746,"code":1747,"filename":1748,"language":1749,"meta":572,"style":572},"language-sql shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","SELECT id, timestamp, payload->'audit'->>'action' AS action,\n       payload->'audit'->>'outcome' AS outcome\nFROM audit_events\nWHERE id = 'ak_8f3c4b2a1e5d6f7c';\n\n--          id          |       timestamp       |     action      | outcome\n-- ---------------------+-----------------------+-----------------+---------\n--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n","Output — audit_events row","sql",[545,1751,1752,1791,1817,1825,1844,1848,1854,1859],{"__ignoreMap":572},[576,1753,1754,1757,1760,1762,1765,1768,1770,1772,1774,1777,1779,1781,1783,1786,1789],{"class":578,"line":579},[576,1755,1756],{"class":717},"SELECT",[576,1758,1759],{"class":590}," id, ",[576,1761,1654],{"class":788},[576,1763,1764],{"class":590},", payload",[576,1766,1767],{"class":586},"->",[576,1769,665],{"class":586},[576,1771,789],{"class":609},[576,1773,665],{"class":586},[576,1775,1776],{"class":586},"->>",[576,1778,665],{"class":586},[576,1780,800],{"class":609},[576,1782,665],{"class":586},[576,1784,1785],{"class":717}," AS",[576,1787,1788],{"class":717}," action",[576,1790,746],{"class":590},[576,1792,1793,1796,1798,1800,1802,1804,1806,1808,1810,1812,1814],{"class":578,"line":616},[576,1794,1795],{"class":590},"       payload",[576,1797,1767],{"class":586},[576,1799,665],{"class":586},[576,1801,789],{"class":609},[576,1803,665],{"class":586},[576,1805,1776],{"class":586},[576,1807,665],{"class":586},[576,1809,907],{"class":609},[576,1811,665],{"class":586},[576,1813,1785],{"class":717},[576,1815,1816],{"class":590}," outcome\n",[576,1818,1819,1822],{"class":578,"line":637},[576,1820,1821],{"class":717},"FROM",[576,1823,1824],{"class":590}," audit_events\n",[576,1826,1827,1830,1833,1835,1837,1839,1841],{"class":578,"line":644},[576,1828,1829],{"class":717},"WHERE",[576,1831,1832],{"class":590}," id ",[576,1834,1550],{"class":586},[576,1836,606],{"class":586},[576,1838,948],{"class":609},[576,1840,665],{"class":586},[576,1842,1843],{"class":590},";\n",[576,1845,1846],{"class":578,"line":680},[576,1847,641],{"emptyLinePlaceholder":640},[576,1849,1850],{"class":578,"line":749},[576,1851,1853],{"class":1852},"sHwdD","--          id          |       timestamp       |     action      | outcome\n",[576,1855,1856],{"class":578,"line":767},[576,1857,1858],{"class":1852},"-- ---------------------+-----------------------+-----------------+---------\n",[576,1860,1861],{"class":578,"line":1661},[576,1862,1863],{"class":1852},"--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n",[541,1865,1866,1867,1869,1870,1873],{},"The deterministic ",[545,1868,939],{}," makes retries safe — duplicate inserts collapse via ",[545,1871,1872],{},"ON CONFLICT DO NOTHING",". Without it, a transient network blip during a retry would create a duplicate audit row, which is exactly what you don't want.",[558,1875,1877],{"id":1876},"testing-audits","Testing audits",[541,1879,1880,1883,1884,548,1887,1890,1891,700],{},[545,1881,1882],{},"mockAudit()"," captures every audit event on emit — from standalone ",[545,1885,1886],{},"audit()",[545,1888,1889],{},"log.audit()",", and ",[545,1892,1893],{},"log.set({ audit })",[566,1895,1897],{"className":568,"code":1896,"language":571,"meta":572,"style":572},"import { mockAudit } from 'evlog'\n\nit('refunds the invoice and records an audit', async () => {\n  const captured = mockAudit()\n\n  await refundInvoice({ id: 'inv_889' }, { actor: { type: 'user', id: 'u1' } })\n\n  captured.assertAudit({\n    action: 'invoice.refund',\n    target: { type: 'invoice', id: 'inv_889' },\n    outcome: 'success',\n  })\n\n  captured.restore()\n})\n",[545,1898,1899,1918,1922,1947,1962,1966,2029,2033,2047,2062,2095,2110,2116,2121,2133],{"__ignoreMap":572},[576,1900,1901,1903,1905,1908,1910,1912,1914,1916],{"class":578,"line":579},[576,1902,583],{"class":582},[576,1904,587],{"class":586},[576,1906,1907],{"class":590}," mockAudit",[576,1909,600],{"class":586},[576,1911,603],{"class":582},[576,1913,606],{"class":586},[576,1915,610],{"class":609},[576,1917,613],{"class":586},[576,1919,1920],{"class":578,"line":616},[576,1921,641],{"emptyLinePlaceholder":640},[576,1923,1924,1927,1929,1931,1934,1936,1938,1940,1943,1945],{"class":578,"line":637},[576,1925,1926],{"class":658},"it",[576,1928,662],{"class":590},[576,1930,665],{"class":586},[576,1932,1933],{"class":609},"refunds the invoice and records an audit",[576,1935,665],{"class":586},[576,1937,594],{"class":586},[576,1939,1553],{"class":788},[576,1941,1942],{"class":586}," ()",[576,1944,1569],{"class":788},[576,1946,1572],{"class":586},[576,1948,1949,1952,1955,1958,1960],{"class":578,"line":644},[576,1950,1951],{"class":788},"  const",[576,1953,1954],{"class":590}," captured",[576,1956,1957],{"class":586}," =",[576,1959,1907],{"class":658},[576,1961,1690],{"class":696},[576,1963,1964],{"class":578,"line":680},[576,1965,641],{"emptyLinePlaceholder":640},[576,1967,1968,1970,1973,1975,1977,1980,1982,1984,1986,1988,1991,1993,1996,1998,2000,2002,2004,2006,2008,2010,2012,2014,2016,2018,2021,2023,2025,2027],{"class":578,"line":749},[576,1969,1577],{"class":582},[576,1971,1972],{"class":658}," refundInvoice",[576,1974,662],{"class":696},[576,1976,693],{"class":586},[576,1978,1979],{"class":696}," id",[576,1981,700],{"class":586},[576,1983,606],{"class":586},[576,1985,898],{"class":609},[576,1987,665],{"class":586},[576,1989,1990],{"class":586}," },",[576,1992,587],{"class":586},[576,1994,1995],{"class":696}," actor",[576,1997,700],{"class":586},[576,1999,587],{"class":586},[576,2001,1520],{"class":696},[576,2003,700],{"class":586},[576,2005,606],{"class":586},[576,2007,836],{"class":609},[576,2009,665],{"class":586},[576,2011,594],{"class":586},[576,2013,1979],{"class":696},[576,2015,700],{"class":586},[576,2017,606],{"class":586},[576,2019,2020],{"class":609},"u1",[576,2022,665],{"class":586},[576,2024,600],{"class":586},[576,2026,600],{"class":586},[576,2028,1419],{"class":696},[576,2030,2031],{"class":578,"line":767},[576,2032,641],{"emptyLinePlaceholder":640},[576,2034,2035,2038,2040,2043,2045],{"class":578,"line":1661},[576,2036,2037],{"class":590},"  captured",[576,2039,650],{"class":586},[576,2041,2042],{"class":658},"assertAudit",[576,2044,662],{"class":696},[576,2046,1602],{"class":586},[576,2048,2049,2052,2054,2056,2058,2060],{"class":578,"line":1677},[576,2050,2051],{"class":696},"    action",[576,2053,700],{"class":586},[576,2055,606],{"class":586},[576,2057,809],{"class":609},[576,2059,665],{"class":586},[576,2061,746],{"class":586},[576,2063,2064,2067,2069,2071,2073,2075,2077,2079,2081,2083,2085,2087,2089,2091,2093],{"class":578,"line":1693},[576,2065,2066],{"class":696},"    target",[576,2068,700],{"class":586},[576,2070,587],{"class":586},[576,2072,1520],{"class":696},[576,2074,700],{"class":586},[576,2076,606],{"class":586},[576,2078,881],{"class":609},[576,2080,665],{"class":586},[576,2082,594],{"class":586},[576,2084,1979],{"class":696},[576,2086,700],{"class":586},[576,2088,606],{"class":586},[576,2090,898],{"class":609},[576,2092,665],{"class":586},[576,2094,764],{"class":586},[576,2096,2097,2100,2102,2104,2106,2108],{"class":578,"line":1699},[576,2098,2099],{"class":696},"    outcome",[576,2101,700],{"class":586},[576,2103,606],{"class":586},[576,2105,916],{"class":609},[576,2107,665],{"class":586},[576,2109,746],{"class":586},[576,2111,2112,2114],{"class":578,"line":1704},[576,2113,1680],{"class":586},[576,2115,1419],{"class":696},[576,2117,2119],{"class":578,"line":2118},13,[576,2120,641],{"emptyLinePlaceholder":640},[576,2122,2124,2126,2128,2131],{"class":578,"line":2123},14,[576,2125,2037],{"class":590},[576,2127,650],{"class":586},[576,2129,2130],{"class":658},"restore",[576,2132,1690],{"class":696},[576,2134,2136,2138],{"class":578,"line":2135},15,[576,2137,1343],{"class":586},[576,2139,1419],{"class":590},[541,2141,2142,2143,2146,2147,2150,2151,650],{},"Prefer ",[545,2144,2145],{},"assertAudit()"," when a missing audit should fail the test with a readable message. Use ",[545,2148,2149],{},"toIncludeAuditOf()"," when you need a boolean inside ",[545,2152,2153],{},"expect(...)",[541,2155,2156,2157,2160,2161,2164],{},"Always call ",[545,2158,2159],{},"captured.restore()"," in an ",[545,2162,2163],{},"afterEach"," (or wrap with a fixture) so a failing assertion never leaks into the next test.",[558,2166,2168],{"id":2167},"api-reference","API Reference",[2170,2171,2172,2188],"table",{},[2173,2174,2175],"thead",{},[2176,2177,2178,2182,2185],"tr",{},[2179,2180,2181],"th",{},"Symbol",[2179,2183,2184],{},"Kind",[2179,2186,2187],{},"Notes",[2189,2190,2191,2204,2217,2229,2245,2257,2270,2283,2299,2316,2329,2344,2356],"tbody",{},[2176,2192,2193,2199,2201],{},[2194,2195,2196],"td",{},[545,2197,2198],{},"AuditFields",[2194,2200,827],{},[2194,2202,2203],{},"Reserved field on the wide event",[2176,2205,2206,2211,2214],{},[2194,2207,2208],{},[545,2209,2210],{},"defineAuditAction(name, opts?)",[2194,2212,2213],{},"factory",[2194,2215,2216],{},"Typed action registry, infers target shape",[2176,2218,2219,2224,2226],{},[2194,2220,2221],{},[545,2222,2223],{},"defineAuditCatalog(prefix, map)",[2194,2225,2213],{},[2194,2227,2228],{},"Bundle of typed audit actions sharing a prefix",[2176,2230,2231,2236,2239],{},[2194,2232,2233],{},[545,2234,2235],{},"log.audit(fields)",[2194,2237,2238],{},"method",[2194,2240,2241,2242,2244],{},"Sugar over ",[545,2243,1893],{}," + force-keep",[2176,2246,2247,2252,2254],{},[2194,2248,2249],{},[545,2250,2251],{},"log.audit.deny(reason, fields)",[2194,2253,2238],{},[2194,2255,2256],{},"Records a denied action",[2176,2258,2259,2264,2267],{},[2194,2260,2261],{},[545,2262,2263],{},"audit(fields)",[2194,2265,2266],{},"function",[2194,2268,2269],{},"Standalone for scripts \u002F jobs",[2176,2271,2272,2277,2280],{},[2194,2273,2274],{},[545,2275,2276],{},"withAudit({ action, target })(fn)",[2194,2278,2279],{},"wrapper",[2194,2281,2282],{},"Auto-emit success \u002F failure \u002F denied",[2176,2284,2285,2290,2293],{},[2194,2286,2287],{},[545,2288,2289],{},"auditDiff(before, after)",[2194,2291,2292],{},"helper",[2194,2294,2295,2296],{},"Redact-aware JSON Patch for ",[545,2297,2298],{},"changes",[2176,2300,2301,2305,2308],{},[2194,2302,2303],{},[545,2304,1882],{},[2194,2306,2307],{},"test util",[2194,2309,2310,2311,2313,2314],{},"Capture audits on emit; ",[545,2312,2145],{}," or ",[545,2315,2149],{},[2176,2317,2318,2323,2326],{},[2194,2319,2320],{},[545,2321,2322],{},"auditEnricher(opts?)",[2194,2324,2325],{},"enricher",[2194,2327,2328],{},"Auto-fill request \u002F runtime \u002F tenant context",[2176,2330,2331,2336,2338],{},[2194,2332,2333],{},[545,2334,2335],{},"auditOnly(drain, { await? })",[2194,2337,2279],{},[2194,2339,2340,2341,2343],{},"Routes only events with an ",[545,2342,789],{}," field",[2176,2345,2346,2351,2353],{},[2194,2347,2348],{},[545,2349,2350],{},"signed(drain, opts)",[2194,2352,2279],{},[2194,2354,2355],{},"Generic integrity wrapper (hmac \u002F hash-chain)",[2176,2357,2358,2363,2366],{},[2194,2359,2360],{},[545,2361,2362],{},"auditRedactPreset",[2194,2364,2365],{},"config",[2194,2367,2368],{},"Strict PII for audit events",[541,2370,2371,2372,2374],{},"Everything ships from the main ",[545,2373,610],{}," entrypoint.",[2376,2377,2378],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}",{"title":572,"searchDepth":616,"depth":616,"links":2380},[2381,2382,2383,2384,2385],{"id":560,"depth":616,"text":561},{"id":1181,"depth":616,"text":1182},{"id":1487,"depth":616,"text":1488},{"id":1876,"depth":616,"text":1877},{"id":2167,"depth":616,"text":2168},"File system, Axiom, and Postgres recipes for audit logs, plus mockAudit for tests and the full API reference.","md",[2389,2392],{"label":402,"icon":379,"to":403,"color":2390,"variant":2391},"neutral","subtle",{"label":138,"icon":136,"to":143,"color":2390,"variant":2391},{},{"title":406,"icon":79},{"title":536,"description":2386},"d4tHcUb1EpoUIrMkf-DJ-DPvE575KpxoUq7BH9zzato",[2398,2400],{"title":402,"path":403,"stem":404,"description":2399,"icon":379,"children":-1},"Integrity, redact presets, GDPR vs append-only, retention windows, and the most common pitfalls when shipping audit logs to production.",{"title":36,"path":414,"stem":415,"description":2401,"icon":39,"children":-1},"Wide-event telemetry for CLIs and automation — evlog's one-event-per-run model for tools on user machines, with privacy-safe flags, consent, outbox, and auto-generated disclosure.",1786743657577]