[{"data":1,"prerenderedAt":2396},["ShallowReactive",2],{"navigation_docs":3,"-use-cases-audit-recipes":528,"-use-cases-audit-recipes-surround":2391},[4,29,76,122,304,435,496],{"title":5,"path":6,"stem":7,"children":8,"page":28},"Start","\u002Fstart","1.start",[9,13,18,23],{"title":10,"path":11,"stem":12},"Introduction","\u002Fstart\u002Fintroduction","1.start\u002F1.introduction",{"title":14,"path":15,"stem":16,"icon":17},"Why start with evlog","\u002Fstart\u002Fwhy-evlog","1.start\u002F2.why-evlog","i-lucide-rocket",{"title":19,"path":20,"stem":21,"icon":22},"Installation","\u002Fstart\u002Finstallation","1.start\u002F3.installation","i-lucide-download",{"title":24,"path":25,"stem":26,"icon":27},"Quick Start","\u002Fstart\u002Fquick-start","1.start\u002F4.quick-start","i-lucide-zap",false,{"title":30,"path":31,"stem":32,"children":33,"page":28},"Learn","\u002Flearn","2.learn",[34,38,43,48,53,58,62,67,72],{"title":35,"path":36,"stem":37},"Learn evlog","\u002Flearn\u002Foverview","2.learn\u002F0.overview",{"title":39,"path":40,"stem":41,"icon":42},"Simple Logging","\u002Flearn\u002Fsimple-logging","2.learn\u002F1.simple-logging","i-lucide-terminal",{"title":44,"path":45,"stem":46,"icon":47},"Wide Events","\u002Flearn\u002Fwide-events","2.learn\u002F2.wide-events","i-lucide-layers",{"title":49,"path":50,"stem":51,"icon":52},"Structured Errors","\u002Flearn\u002Fstructured-errors","2.learn\u002F3.structured-errors","i-lucide-shield-alert",{"title":54,"path":55,"stem":56,"icon":57},"Lifecycle","\u002Flearn\u002Flifecycle","2.learn\u002F4.lifecycle","i-lucide-arrow-right-left",{"title":59,"path":60,"stem":61},"Sampling","\u002Flearn\u002Fsampling","2.learn\u002F5.sampling",{"title":63,"path":64,"stem":65,"icon":66},"Auto-Redaction","\u002Flearn\u002Fredaction","2.learn\u002F6.redaction","i-lucide-eye-off",{"title":68,"path":69,"stem":70,"icon":71},"Typed Fields","\u002Flearn\u002Ftyped-fields","2.learn\u002F7.typed-fields","i-simple-icons-typescript",{"title":73,"path":74,"stem":75},"Catalogs","\u002Flearn\u002Fcatalogs","2.learn\u002F8.catalogs",{"title":77,"path":78,"stem":79,"children":80,"page":28},"CLI","\u002Fcli","3.cli",[81,85,90,95,99,103,108,113,118],{"title":82,"path":83,"stem":84},"evlog CLI","\u002Fcli\u002Foverview","3.cli\u002F0.overview",{"title":86,"path":87,"stem":88,"icon":89},"init","\u002Fcli\u002Finit","3.cli\u002F1.init","i-lucide-wand-sparkles",{"title":91,"path":92,"stem":93,"icon":94},"map","\u002Fcli\u002Fmap","3.cli\u002F2.map","i-lucide-radar",{"title":96,"path":97,"stem":98},"Map rules","\u002Fcli\u002Frules","3.cli\u002F3.rules",{"title":100,"path":101,"stem":102},"Map scoring","\u002Fcli\u002Fscoring","3.cli\u002F4.scoring",{"title":104,"path":105,"stem":106,"icon":107},"CI","\u002Fcli\u002Fci","3.cli\u002F5.ci","i-lucide-git-pull-request",{"title":109,"path":110,"stem":111,"icon":112},"doctor","\u002Fcli\u002Fdoctor","3.cli\u002F6.doctor","i-lucide-stethoscope",{"title":114,"path":115,"stem":116,"icon":117},"telemetry","\u002Fcli\u002Ftelemetry","3.cli\u002F7.telemetry","i-lucide-bar-chart-3",{"title":119,"path":120,"stem":121},"evlog agents","\u002Fcli\u002Fagents","3.cli\u002F8.agents",{"title":123,"path":124,"stem":125,"children":126,"page":28},"Integrate","\u002Fintegrate","4.integrate",[127,132,216],{"title":128,"path":129,"stem":130,"icon":131},"Overview","\u002Fintegrate\u002Foverview","4.integrate\u002F0.overview","i-lucide-plug",{"title":133,"path":134,"stem":135,"children":136,"page":28},"Adapters","\u002Fintegrate\u002Fadapters","4.integrate\u002Fadapters",[137,141,171,196],{"title":128,"path":138,"stem":139,"icon":140},"\u002Fintegrate\u002Fadapters\u002Foverview","4.integrate\u002Fadapters\u002F01.overview","i-lucide-list",{"title":142,"path":143,"stem":144,"children":145,"page":28},"Cloud","\u002Fintegrate\u002Fadapters\u002Fcloud","4.integrate\u002Fadapters\u002Fcloud",[146,151,156,161,166],{"title":147,"path":148,"stem":149,"icon":150},"Axiom","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Faxiom","4.integrate\u002Fadapters\u002Fcloud\u002F01.axiom","i-custom-axiom",{"title":152,"path":153,"stem":154,"icon":155},"PostHog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fposthog","4.integrate\u002Fadapters\u002Fcloud\u002F02.posthog","i-simple-icons-posthog",{"title":157,"path":158,"stem":159,"icon":160},"Sentry","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fsentry","4.integrate\u002Fadapters\u002Fcloud\u002F03.sentry","i-simple-icons-sentry",{"title":162,"path":163,"stem":164,"icon":165},"Better Stack","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fbetter-stack","4.integrate\u002Fadapters\u002Fcloud\u002F04.better-stack","i-simple-icons-betterstack",{"title":167,"path":168,"stem":169,"icon":170},"Datadog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fdatadog","4.integrate\u002Fadapters\u002Fcloud\u002F05.datadog","i-simple-icons-datadog",{"title":172,"path":173,"stem":174,"children":175,"page":28},"Cloud or Self-Hosted","\u002Fintegrate\u002Fadapters\u002Fhybrid","4.integrate\u002Fadapters\u002Fhybrid",[176,181,186,191],{"title":177,"path":178,"stem":179,"icon":180},"Grafana Loki","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Floki","4.integrate\u002Fadapters\u002Fhybrid\u002F01.loki","i-simple-icons-grafana",{"title":182,"path":183,"stem":184,"icon":185},"ClickHouse","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Fclickhouse","4.integrate\u002Fadapters\u002Fhybrid\u002F02.clickhouse","i-simple-icons-clickhouse",{"title":187,"path":188,"stem":189,"icon":190},"OTLP","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Fotlp","4.integrate\u002Fadapters\u002Fhybrid\u002F03.otlp","i-simple-icons-opentelemetry",{"title":192,"path":193,"stem":194,"icon":195},"HyperDX","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Fhyperdx","4.integrate\u002Fadapters\u002Fhybrid\u002F04.hyperdx","i-custom-hyperdx",{"title":197,"path":198,"stem":199,"children":200,"page":28},"Self-Hosted","\u002Fintegrate\u002Fadapters\u002Fself-hosted","4.integrate\u002Fadapters\u002Fself-hosted",[201,206,211],{"title":202,"path":203,"stem":204,"icon":205},"File System","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Ffs","4.integrate\u002Fadapters\u002Fself-hosted\u002F01.fs","i-lucide-hard-drive",{"title":207,"path":208,"stem":209,"icon":210},"NuxtHub","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fnuxthub","4.integrate\u002Fadapters\u002Fself-hosted\u002F02.nuxthub","i-simple-icons-nuxt",{"title":212,"path":213,"stem":214,"icon":215},"Memory","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fmemory","4.integrate\u002Fadapters\u002Fself-hosted\u002F03.memory","i-lucide-cpu",{"title":217,"path":218,"stem":219,"children":220,"page":28},"Frameworks","\u002Fintegrate\u002Fframeworks","4.integrate\u002Fframeworks",[221,225,230,235,240,245,250,255,260,265,270,275,280,285,289,294,299],{"title":128,"path":222,"stem":223,"icon":224},"\u002Fintegrate\u002Fframeworks\u002Foverview","4.integrate\u002Fframeworks\u002F00.overview","i-lucide-layout-grid",{"title":226,"path":227,"stem":228,"icon":229},"Nuxt","\u002Fintegrate\u002Fframeworks\u002Fnuxt","4.integrate\u002Fframeworks\u002F01.nuxt","i-simple-icons-nuxtdotjs",{"title":231,"path":232,"stem":233,"icon":234},"Next.js","\u002Fintegrate\u002Fframeworks\u002Fnextjs","4.integrate\u002Fframeworks\u002F02.nextjs","i-simple-icons-nextdotjs",{"title":236,"path":237,"stem":238,"icon":239},"SvelteKit","\u002Fintegrate\u002Fframeworks\u002Fsveltekit","4.integrate\u002Fframeworks\u002F03.sveltekit","i-simple-icons-svelte",{"title":241,"path":242,"stem":243,"icon":244},"Nitro","\u002Fintegrate\u002Fframeworks\u002Fnitro","4.integrate\u002Fframeworks\u002F04.nitro","i-custom-nitro",{"title":246,"path":247,"stem":248,"icon":249},"TanStack Start","\u002Fintegrate\u002Fframeworks\u002Ftanstack-start","4.integrate\u002Fframeworks\u002F05.tanstack-start","i-custom-tanstack",{"title":251,"path":252,"stem":253,"icon":254},"NestJS","\u002Fintegrate\u002Fframeworks\u002Fnestjs","4.integrate\u002Fframeworks\u002F06.nestjs","i-simple-icons-nestjs",{"title":256,"path":257,"stem":258,"icon":259},"Express","\u002Fintegrate\u002Fframeworks\u002Fexpress","4.integrate\u002Fframeworks\u002F07.express","i-simple-icons-express",{"title":261,"path":262,"stem":263,"icon":264},"Hono","\u002Fintegrate\u002Fframeworks\u002Fhono","4.integrate\u002Fframeworks\u002F08.hono","i-simple-icons-hono",{"title":266,"path":267,"stem":268,"icon":269},"Fastify","\u002Fintegrate\u002Fframeworks\u002Ffastify","4.integrate\u002Fframeworks\u002F09.fastify","i-simple-icons-fastify",{"title":271,"path":272,"stem":273,"icon":274},"Elysia","\u002Fintegrate\u002Fframeworks\u002Felysia","4.integrate\u002Fframeworks\u002F10.elysia","i-custom-elysia",{"title":276,"path":277,"stem":278,"icon":279},"React Router","\u002Fintegrate\u002Fframeworks\u002Freact-router","4.integrate\u002Fframeworks\u002F11.react-router","i-custom-reactrouter",{"title":281,"path":282,"stem":283,"icon":284},"Cloudflare Workers","\u002Fintegrate\u002Fframeworks\u002Fcloudflare-workers","4.integrate\u002Fframeworks\u002F12.cloudflare-workers","i-simple-icons-cloudflare",{"title":286,"path":287,"stem":288,"icon":71},"Standalone","\u002Fintegrate\u002Fframeworks\u002Fstandalone","4.integrate\u002Fframeworks\u002F13.standalone",{"title":290,"path":291,"stem":292,"icon":293},"Astro","\u002Fintegrate\u002Fframeworks\u002Fastro","4.integrate\u002Fframeworks\u002F14.astro","i-simple-icons-astro",{"title":295,"path":296,"stem":297,"icon":298},"oRPC","\u002Fintegrate\u002Fframeworks\u002Forpc","4.integrate\u002Fframeworks\u002F15.orpc","i-lucide-network",{"title":300,"path":301,"stem":302,"icon":303},"AWS Lambda","\u002Fintegrate\u002Fframeworks\u002Faws-lambda","4.integrate\u002Fframeworks\u002F16.aws-lambda","i-custom-lambda",{"title":305,"path":306,"stem":307,"children":308,"page":28},"Use Cases","\u002Fuse-cases","5.use-cases",[309,312,317,346,374,407,427,431],{"title":305,"path":310,"stem":311},"\u002Fuse-cases\u002Foverview","5.use-cases\u002F0.overview",{"title":313,"path":314,"stem":315,"icon":316},"Client Logging","\u002Fuse-cases\u002Fclient-logging","5.use-cases\u002F1.client-logging","i-lucide-monitor",{"title":318,"icon":319,"path":320,"stem":321,"children":322,"page":28},"AI SDK","i-simple-icons-vercel","\u002Fuse-cases\u002Fai-sdk","5.use-cases\u002F2.ai-sdk",[323,326,331,336,341],{"title":128,"path":324,"stem":325,"icon":140},"\u002Fuse-cases\u002Fai-sdk\u002Foverview","5.use-cases\u002F2.ai-sdk\u002F01.overview",{"title":327,"path":328,"stem":329,"icon":330},"Usage","\u002Fuse-cases\u002Fai-sdk\u002Fusage","5.use-cases\u002F2.ai-sdk\u002F02.usage","i-lucide-code",{"title":332,"path":333,"stem":334,"icon":335},"Options","\u002Fuse-cases\u002Fai-sdk\u002Foptions","5.use-cases\u002F2.ai-sdk\u002F03.options","i-lucide-sliders",{"title":337,"path":338,"stem":339,"icon":340},"Metadata","\u002Fuse-cases\u002Fai-sdk\u002Fmetadata","5.use-cases\u002F2.ai-sdk\u002F04.metadata","i-lucide-database",{"title":342,"path":343,"stem":344,"icon":345},"Telemetry","\u002Fuse-cases\u002Fai-sdk\u002Ftelemetry","5.use-cases\u002F2.ai-sdk\u002F05.telemetry","i-lucide-activity",{"title":347,"icon":348,"path":349,"stem":350,"children":351,"page":28},"Better Auth","i-simple-icons-betterauth","\u002Fuse-cases\u002Fbetter-auth","5.use-cases\u002F3.better-auth",[352,355,360,365,369],{"title":128,"path":353,"stem":354,"icon":140},"\u002Fuse-cases\u002Fbetter-auth\u002Foverview","5.use-cases\u002F3.better-auth\u002F01.overview",{"title":356,"path":357,"stem":358,"icon":359},"Identify User","\u002Fuse-cases\u002Fbetter-auth\u002Fidentify-user","5.use-cases\u002F3.better-auth\u002F02.identify-user","i-lucide-user-check",{"title":361,"path":362,"stem":363,"icon":364},"Middleware","\u002Fuse-cases\u002Fbetter-auth\u002Fmiddleware","5.use-cases\u002F3.better-auth\u002F03.middleware","i-lucide-shield",{"title":366,"path":367,"stem":368,"icon":316},"Client Sync","\u002Fuse-cases\u002Fbetter-auth\u002Fclient-sync","5.use-cases\u002F3.better-auth\u002F04.client-sync",{"title":370,"path":371,"stem":372,"icon":373},"Performance","\u002Fuse-cases\u002Fbetter-auth\u002Fperformance","5.use-cases\u002F3.better-auth\u002F05.performance","i-lucide-gauge",{"title":375,"icon":376,"path":377,"stem":378,"children":379,"page":28},"Audit Logs","i-lucide-shield-check","\u002Fuse-cases\u002Faudit","5.use-cases\u002F4.audit",[380,383,388,393,398,402],{"title":128,"path":381,"stem":382,"icon":140},"\u002Fuse-cases\u002Faudit\u002Foverview","5.use-cases\u002F4.audit\u002F01.overview",{"title":384,"path":385,"stem":386,"icon":387},"Schema","\u002Fuse-cases\u002Faudit\u002Fschema","5.use-cases\u002F4.audit\u002F02.schema","i-lucide-file-text",{"title":389,"path":390,"stem":391,"icon":392},"Recording","\u002Fuse-cases\u002Faudit\u002Frecording","5.use-cases\u002F4.audit\u002F03.recording","i-lucide-pen-line",{"title":394,"path":395,"stem":396,"icon":397},"Drains","\u002Fuse-cases\u002Faudit\u002Fpipeline","5.use-cases\u002F4.audit\u002F04.pipeline","i-lucide-link",{"title":399,"path":400,"stem":401,"icon":376},"Compliance","\u002Fuse-cases\u002Faudit\u002Fcompliance","5.use-cases\u002F4.audit\u002F05.compliance",{"title":403,"path":404,"stem":405,"icon":406},"Recipes","\u002Fuse-cases\u002Faudit\u002Frecipes","5.use-cases\u002F4.audit\u002F06.recipes","i-lucide-book-open",{"title":342,"icon":373,"path":408,"stem":409,"children":410,"page":28},"\u002Fuse-cases\u002Ftelemetry","5.use-cases\u002F4.telemetry",[411,414,419,423],{"title":128,"path":412,"stem":413,"icon":140},"\u002Fuse-cases\u002Ftelemetry\u002Foverview","5.use-cases\u002F4.telemetry\u002F01.overview",{"title":415,"path":416,"stem":417,"icon":418},"Setup","\u002Fuse-cases\u002Ftelemetry\u002Fsetup","5.use-cases\u002F4.telemetry\u002F02.setup","i-lucide-wrench",{"title":420,"path":421,"stem":422},"Telemetry Ingest","\u002Fuse-cases\u002Ftelemetry\u002Fingest","5.use-cases\u002F4.telemetry\u002F03.ingest",{"title":424,"path":425,"stem":426,"icon":406},"Reference","\u002Fuse-cases\u002Ftelemetry\u002Freference","5.use-cases\u002F4.telemetry\u002F04.reference",{"title":428,"path":429,"stem":430},"Enrichers","\u002Fuse-cases\u002Fenrichers","5.use-cases\u002F5.enrichers",{"title":432,"path":433,"stem":434},"eve","\u002Fuse-cases\u002Feve","5.use-cases\u002F5.eve",{"title":436,"path":437,"stem":438,"children":439,"page":28},"Extend","\u002Fextend","6.extend",[440,444,449,454,458,463,467,471,476,481,486,491],{"title":128,"path":441,"stem":442,"icon":443},"\u002Fextend\u002Foverview","6.extend\u002F0.overview","i-lucide-blocks",{"title":445,"path":446,"stem":447,"icon":448},"Stream","\u002Fextend\u002Fstream","6.extend\u002F1.stream","i-lucide-radio-tower",{"title":450,"path":451,"stem":452,"icon":453},"Custom framework","\u002Fextend\u002Fcustom-framework","6.extend\u002F10.custom-framework","i-lucide-puzzle",{"title":455,"path":456,"stem":457,"icon":448},"Diagnostics channel","\u002Fextend\u002Fdiagnostics-channel","6.extend\u002F11.diagnostics-channel",{"title":459,"path":460,"stem":461,"icon":462},"FS reader","\u002Fextend\u002Ffs-reader","6.extend\u002F2.fs-reader","i-lucide-folder-search",{"title":403,"path":464,"stem":465,"icon":466},"\u002Fextend\u002Fconsumer-recipes","6.extend\u002F3.consumer-recipes","i-lucide-chef-hat",{"title":468,"path":469,"stem":470},"Plugins","\u002Fextend\u002Fplugins","6.extend\u002F4.plugins",{"title":472,"path":473,"stem":474,"icon":475},"Custom enrichers","\u002Fextend\u002Fcustom-enrichers","6.extend\u002F5.custom-enrichers","i-lucide-sparkles",{"title":477,"path":478,"stem":479,"icon":480},"Tail sampling","\u002Fextend\u002Ftail-sampling","6.extend\u002F6.tail-sampling","i-lucide-filter",{"title":482,"path":483,"stem":484,"icon":485},"Identity headers","\u002Fextend\u002Fidentity-headers","6.extend\u002F7.identity-headers","i-lucide-fingerprint",{"title":487,"path":488,"stem":489,"icon":490},"Custom drains","\u002Fextend\u002Fcustom-drains","6.extend\u002F8.custom-drains","i-lucide-share-2",{"title":492,"path":493,"stem":494,"icon":495},"Drain pipeline","\u002Fextend\u002Fdrain-pipeline","6.extend\u002F9.drain-pipeline","i-lucide-workflow",{"title":424,"path":497,"stem":498,"children":499,"page":28},"\u002Freference","7.reference",[500,504,507,512,516,520,524],{"title":501,"path":502,"stem":503},"Configuration","\u002Freference\u002Fconfiguration","7.reference\u002F1.configuration",{"title":370,"path":505,"stem":506,"icon":373},"\u002Freference\u002Fperformance","7.reference\u002F2.performance",{"title":508,"path":509,"stem":510,"icon":511},"Vite Plugin","\u002Freference\u002Fvite-plugin","7.reference\u002F3.vite-plugin","i-custom-vite",{"title":513,"path":514,"stem":515,"icon":376},"Best Practices","\u002Freference\u002Fbest-practices","7.reference\u002F4.best-practices",{"title":517,"path":518,"stem":519},"evlog vs pino, winston, consola","\u002Freference\u002Fvs-other-loggers","7.reference\u002F5.vs-other-loggers",{"title":521,"path":522,"stem":523,"icon":475},"Agent Skills","\u002Freference\u002Fagent-skills","7.reference\u002F6.agent-skills",{"title":525,"path":526,"stem":527},"Log cost","\u002Freference\u002Fcost","7.reference\u002F7.cost",{"id":529,"title":530,"body":531,"description":2380,"extension":2381,"links":2382,"meta":2387,"navigation":2388,"path":404,"seo":2389,"stem":405,"__hash__":2390},"docs\u002F5.use-cases\u002F4.audit\u002F06.recipes.md","Recipes & Reference",{"type":532,"value":533,"toc":2373},"minimark",[534,551,556,1164,1173,1177,1476,1479,1483,1858,1868,1872,1888,2134,2148,2159,2163,2363,2369],[535,536,537,538,542,543,546,547,550],"p",{},"Pick the recipe that matches your drain, drop it in, and you have a tamper-evident audit log. Each recipe composes the same primitives (",[539,540,541],"code",{},"auditOnly",", ",[539,544,545],{},"signed",", optional ",[539,548,549],{},"await: true",") over different drains.",[552,553,555],"h2",{"id":554},"audit-logs-on-disk","Audit logs on disk",[557,558,559,765],"code-group",{},[560,561,567],"pre",{"className":562,"code":563,"filename":564,"language":565,"meta":566,"style":566},"language-typescript shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { auditOnly, signed } from 'evlog'\nimport { createFsDrain } from 'evlog\u002Ffs'\n\nnitro.hooks.hook('evlog:drain', auditOnly(\n  signed(createFsDrain({ dir: '.audit', maxFiles: 30 }), { strategy: 'hash-chain' }),\n  { await: true },\n))\n","Input — server\u002Fplugins\u002Fevlog.ts","typescript","",[539,568,569,608,629,636,672,741,759],{"__ignoreMap":566},[570,571,574,578,582,586,589,592,595,598,601,605],"span",{"class":572,"line":573},"line",1,[570,575,577],{"class":576},"s7zQu","import",[570,579,581],{"class":580},"sMK4o"," {",[570,583,585],{"class":584},"sTEyZ"," auditOnly",[570,587,588],{"class":580},",",[570,590,591],{"class":584}," signed",[570,593,594],{"class":580}," }",[570,596,597],{"class":576}," from",[570,599,600],{"class":580}," '",[570,602,604],{"class":603},"sfazB","evlog",[570,606,607],{"class":580},"'\n",[570,609,611,613,615,618,620,622,624,627],{"class":572,"line":610},2,[570,612,577],{"class":576},[570,614,581],{"class":580},[570,616,617],{"class":584}," createFsDrain",[570,619,594],{"class":580},[570,621,597],{"class":576},[570,623,600],{"class":580},[570,625,626],{"class":603},"evlog\u002Ffs",[570,628,607],{"class":580},[570,630,632],{"class":572,"line":631},3,[570,633,635],{"emptyLinePlaceholder":634},true,"\n",[570,637,639,642,645,648,650,654,657,660,663,665,667,669],{"class":572,"line":638},4,[570,640,641],{"class":584},"nitro",[570,643,644],{"class":580},".",[570,646,647],{"class":584},"hooks",[570,649,644],{"class":580},[570,651,653],{"class":652},"s2Zo4","hook",[570,655,656],{"class":584},"(",[570,658,659],{"class":580},"'",[570,661,662],{"class":603},"evlog:drain",[570,664,659],{"class":580},[570,666,588],{"class":580},[570,668,585],{"class":652},[570,670,671],{"class":584},"(\n",[570,673,675,678,680,683,685,688,692,695,697,700,702,704,707,709,713,715,718,720,722,725,727,729,732,734,736,738],{"class":572,"line":674},5,[570,676,677],{"class":652},"  signed",[570,679,656],{"class":584},[570,681,682],{"class":652},"createFsDrain",[570,684,656],{"class":584},[570,686,687],{"class":580},"{",[570,689,691],{"class":690},"swJcz"," dir",[570,693,694],{"class":580},":",[570,696,600],{"class":580},[570,698,699],{"class":603},".audit",[570,701,659],{"class":580},[570,703,588],{"class":580},[570,705,706],{"class":690}," maxFiles",[570,708,694],{"class":580},[570,710,712],{"class":711},"sbssI"," 30",[570,714,594],{"class":580},[570,716,717],{"class":584},")",[570,719,588],{"class":580},[570,721,581],{"class":580},[570,723,724],{"class":690}," strategy",[570,726,694],{"class":580},[570,728,600],{"class":580},[570,730,731],{"class":603},"hash-chain",[570,733,659],{"class":580},[570,735,594],{"class":580},[570,737,717],{"class":584},[570,739,740],{"class":580},",\n",[570,742,744,747,750,752,756],{"class":572,"line":743},6,[570,745,746],{"class":580},"  {",[570,748,749],{"class":690}," await",[570,751,694],{"class":580},[570,753,755],{"class":754},"sfNiH"," true",[570,757,758],{"class":580}," },\n",[570,760,762],{"class":572,"line":761},7,[570,763,764],{"class":584},"))\n",[560,766,771],{"className":767,"code":768,"filename":769,"language":770,"meta":566,"style":566},"language-jsonl shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\"audit\":{\"action\":\"invoice.refund\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"invoice\",\"id\":\"inv_889\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_8f3c4b2a1e5d6f7c\",\"prevHash\":null,\"hash\":\"3f2c8e1a...\"}}\n{\"audit\":{\"action\":\"user.update\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"user\",\"id\":\"usr_99\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_5e7d8f9a0b1c2d3e\",\"prevHash\":\"3f2c8e1a...\",\"hash\":\"9a1b4d7c...\"}}\n","Output — .audit\u002F2026-04-24.ndjson","jsonl",[539,772,773,976],{"__ignoreMap":566},[570,774,775,777,780,784,786,789,791,795,797,799,801,804,806,808,810,813,815,817,819,822,824,826,828,831,833,835,837,840,842,844,846,849,851,854,856,859,861,863,865,867,869,871,873,876,878,880,882,884,886,888,890,893,895,897,899,902,904,906,908,911,913,915,917,920,922,924,927,929,931,934,936,938,940,943,945,947,949,952,954,957,959,962,964,966,968,971,973],{"class":572,"line":573},[570,776,687],{"class":580},[570,778,779],{"class":580},"\"",[570,781,783],{"class":782},"spNyl","audit",[570,785,779],{"class":580},[570,787,788],{"class":580},":{",[570,790,779],{"class":580},[570,792,794],{"class":793},"sBMFI","action",[570,796,779],{"class":580},[570,798,694],{"class":580},[570,800,779],{"class":580},[570,802,803],{"class":603},"invoice.refund",[570,805,779],{"class":580},[570,807,588],{"class":580},[570,809,779],{"class":580},[570,811,812],{"class":793},"actor",[570,814,779],{"class":580},[570,816,788],{"class":580},[570,818,779],{"class":580},[570,820,821],{"class":711},"type",[570,823,779],{"class":580},[570,825,694],{"class":580},[570,827,779],{"class":580},[570,829,830],{"class":603},"user",[570,832,779],{"class":580},[570,834,588],{"class":580},[570,836,779],{"class":580},[570,838,839],{"class":711},"id",[570,841,779],{"class":580},[570,843,694],{"class":580},[570,845,779],{"class":580},[570,847,848],{"class":603},"usr_42",[570,850,779],{"class":580},[570,852,853],{"class":580},"},",[570,855,779],{"class":580},[570,857,858],{"class":793},"target",[570,860,779],{"class":580},[570,862,788],{"class":580},[570,864,779],{"class":580},[570,866,821],{"class":711},[570,868,779],{"class":580},[570,870,694],{"class":580},[570,872,779],{"class":580},[570,874,875],{"class":603},"invoice",[570,877,779],{"class":580},[570,879,588],{"class":580},[570,881,779],{"class":580},[570,883,839],{"class":711},[570,885,779],{"class":580},[570,887,694],{"class":580},[570,889,779],{"class":580},[570,891,892],{"class":603},"inv_889",[570,894,779],{"class":580},[570,896,853],{"class":580},[570,898,779],{"class":580},[570,900,901],{"class":793},"outcome",[570,903,779],{"class":580},[570,905,694],{"class":580},[570,907,779],{"class":580},[570,909,910],{"class":603},"success",[570,912,779],{"class":580},[570,914,588],{"class":580},[570,916,779],{"class":580},[570,918,919],{"class":793},"version",[570,921,779],{"class":580},[570,923,694],{"class":580},[570,925,926],{"class":711},"1",[570,928,588],{"class":580},[570,930,779],{"class":580},[570,932,933],{"class":793},"idempotencyKey",[570,935,779],{"class":580},[570,937,694],{"class":580},[570,939,779],{"class":580},[570,941,942],{"class":603},"ak_8f3c4b2a1e5d6f7c",[570,944,779],{"class":580},[570,946,588],{"class":580},[570,948,779],{"class":580},[570,950,951],{"class":793},"prevHash",[570,953,779],{"class":580},[570,955,956],{"class":580},":null,",[570,958,779],{"class":580},[570,960,961],{"class":793},"hash",[570,963,779],{"class":580},[570,965,694],{"class":580},[570,967,779],{"class":580},[570,969,970],{"class":603},"3f2c8e1a...",[570,972,779],{"class":580},[570,974,975],{"class":580},"}}\n",[570,977,978,980,982,984,986,988,990,992,994,996,998,1001,1003,1005,1007,1009,1011,1013,1015,1017,1019,1021,1023,1025,1027,1029,1031,1033,1035,1037,1039,1041,1043,1045,1047,1049,1051,1053,1055,1057,1059,1061,1063,1065,1067,1069,1071,1073,1075,1077,1079,1082,1084,1086,1088,1090,1092,1094,1096,1098,1100,1102,1104,1106,1108,1110,1112,1114,1116,1118,1120,1122,1124,1127,1129,1131,1133,1135,1137,1139,1141,1143,1145,1147,1149,1151,1153,1155,1157,1160,1162],{"class":572,"line":610},[570,979,687],{"class":580},[570,981,779],{"class":580},[570,983,783],{"class":782},[570,985,779],{"class":580},[570,987,788],{"class":580},[570,989,779],{"class":580},[570,991,794],{"class":793},[570,993,779],{"class":580},[570,995,694],{"class":580},[570,997,779],{"class":580},[570,999,1000],{"class":603},"user.update",[570,1002,779],{"class":580},[570,1004,588],{"class":580},[570,1006,779],{"class":580},[570,1008,812],{"class":793},[570,1010,779],{"class":580},[570,1012,788],{"class":580},[570,1014,779],{"class":580},[570,1016,821],{"class":711},[570,1018,779],{"class":580},[570,1020,694],{"class":580},[570,1022,779],{"class":580},[570,1024,830],{"class":603},[570,1026,779],{"class":580},[570,1028,588],{"class":580},[570,1030,779],{"class":580},[570,1032,839],{"class":711},[570,1034,779],{"class":580},[570,1036,694],{"class":580},[570,1038,779],{"class":580},[570,1040,848],{"class":603},[570,1042,779],{"class":580},[570,1044,853],{"class":580},[570,1046,779],{"class":580},[570,1048,858],{"class":793},[570,1050,779],{"class":580},[570,1052,788],{"class":580},[570,1054,779],{"class":580},[570,1056,821],{"class":711},[570,1058,779],{"class":580},[570,1060,694],{"class":580},[570,1062,779],{"class":580},[570,1064,830],{"class":603},[570,1066,779],{"class":580},[570,1068,588],{"class":580},[570,1070,779],{"class":580},[570,1072,839],{"class":711},[570,1074,779],{"class":580},[570,1076,694],{"class":580},[570,1078,779],{"class":580},[570,1080,1081],{"class":603},"usr_99",[570,1083,779],{"class":580},[570,1085,853],{"class":580},[570,1087,779],{"class":580},[570,1089,901],{"class":793},[570,1091,779],{"class":580},[570,1093,694],{"class":580},[570,1095,779],{"class":580},[570,1097,910],{"class":603},[570,1099,779],{"class":580},[570,1101,588],{"class":580},[570,1103,779],{"class":580},[570,1105,919],{"class":793},[570,1107,779],{"class":580},[570,1109,694],{"class":580},[570,1111,926],{"class":711},[570,1113,588],{"class":580},[570,1115,779],{"class":580},[570,1117,933],{"class":793},[570,1119,779],{"class":580},[570,1121,694],{"class":580},[570,1123,779],{"class":580},[570,1125,1126],{"class":603},"ak_5e7d8f9a0b1c2d3e",[570,1128,779],{"class":580},[570,1130,588],{"class":580},[570,1132,779],{"class":580},[570,1134,951],{"class":793},[570,1136,779],{"class":580},[570,1138,694],{"class":580},[570,1140,779],{"class":580},[570,1142,970],{"class":603},[570,1144,779],{"class":580},[570,1146,588],{"class":580},[570,1148,779],{"class":580},[570,1150,961],{"class":793},[570,1152,779],{"class":580},[570,1154,694],{"class":580},[570,1156,779],{"class":580},[570,1158,1159],{"class":603},"9a1b4d7c...",[570,1161,779],{"class":580},[570,1163,975],{"class":580},[535,1165,1166,1167,1169,1170,1172],{},"Each line's ",[539,1168,951],{}," matches the previous line's ",[539,1171,961],{},". Tampering with any row breaks the chain forward of that point, and a verifier replays the hashes and reports the first mismatch.",[552,1174,1176],{"id":1175},"audit-logs-to-a-dedicated-axiom-dataset","Audit logs to a dedicated Axiom dataset",[557,1178,1179,1346,1414],{},[560,1180,1182],{"className":562,"code":1181,"filename":564,"language":565,"meta":566,"style":566},"import { auditOnly } from 'evlog'\nimport { createAxiomDrain } from 'evlog\u002Faxiom'\n\nnitro.hooks.hook('evlog:drain', createAxiomDrain({ dataset: 'logs' }))\nnitro.hooks.hook('evlog:drain', auditOnly(\n  createAxiomDrain({ dataset: 'audit', apiKey: process.env.AXIOM_AUDIT_API_KEY }),\n))\n",[539,1183,1184,1202,1222,1226,1270,1296,1342],{"__ignoreMap":566},[570,1185,1186,1188,1190,1192,1194,1196,1198,1200],{"class":572,"line":573},[570,1187,577],{"class":576},[570,1189,581],{"class":580},[570,1191,585],{"class":584},[570,1193,594],{"class":580},[570,1195,597],{"class":576},[570,1197,600],{"class":580},[570,1199,604],{"class":603},[570,1201,607],{"class":580},[570,1203,1204,1206,1208,1211,1213,1215,1217,1220],{"class":572,"line":610},[570,1205,577],{"class":576},[570,1207,581],{"class":580},[570,1209,1210],{"class":584}," createAxiomDrain",[570,1212,594],{"class":580},[570,1214,597],{"class":576},[570,1216,600],{"class":580},[570,1218,1219],{"class":603},"evlog\u002Faxiom",[570,1221,607],{"class":580},[570,1223,1224],{"class":572,"line":631},[570,1225,635],{"emptyLinePlaceholder":634},[570,1227,1228,1230,1232,1234,1236,1238,1240,1242,1244,1246,1248,1250,1252,1254,1257,1259,1261,1264,1266,1268],{"class":572,"line":638},[570,1229,641],{"class":584},[570,1231,644],{"class":580},[570,1233,647],{"class":584},[570,1235,644],{"class":580},[570,1237,653],{"class":652},[570,1239,656],{"class":584},[570,1241,659],{"class":580},[570,1243,662],{"class":603},[570,1245,659],{"class":580},[570,1247,588],{"class":580},[570,1249,1210],{"class":652},[570,1251,656],{"class":584},[570,1253,687],{"class":580},[570,1255,1256],{"class":690}," dataset",[570,1258,694],{"class":580},[570,1260,600],{"class":580},[570,1262,1263],{"class":603},"logs",[570,1265,659],{"class":580},[570,1267,594],{"class":580},[570,1269,764],{"class":584},[570,1271,1272,1274,1276,1278,1280,1282,1284,1286,1288,1290,1292,1294],{"class":572,"line":674},[570,1273,641],{"class":584},[570,1275,644],{"class":580},[570,1277,647],{"class":584},[570,1279,644],{"class":580},[570,1281,653],{"class":652},[570,1283,656],{"class":584},[570,1285,659],{"class":580},[570,1287,662],{"class":603},[570,1289,659],{"class":580},[570,1291,588],{"class":580},[570,1293,585],{"class":652},[570,1295,671],{"class":584},[570,1297,1298,1301,1303,1305,1307,1309,1311,1313,1315,1317,1320,1322,1325,1327,1330,1332,1335,1338,1340],{"class":572,"line":743},[570,1299,1300],{"class":652},"  createAxiomDrain",[570,1302,656],{"class":584},[570,1304,687],{"class":580},[570,1306,1256],{"class":690},[570,1308,694],{"class":580},[570,1310,600],{"class":580},[570,1312,783],{"class":603},[570,1314,659],{"class":580},[570,1316,588],{"class":580},[570,1318,1319],{"class":690}," apiKey",[570,1321,694],{"class":580},[570,1323,1324],{"class":584}," process",[570,1326,644],{"class":580},[570,1328,1329],{"class":584},"env",[570,1331,644],{"class":580},[570,1333,1334],{"class":584},"AXIOM_AUDIT_API_KEY ",[570,1336,1337],{"class":580},"}",[570,1339,717],{"class":584},[570,1341,740],{"class":580},[570,1343,1344],{"class":572,"line":761},[570,1345,764],{"class":584},[560,1347,1352],{"className":1348,"code":1349,"filename":1350,"language":1351,"meta":566,"style":566},"language-kusto shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","['audit']\n| where audit.action == \"invoice.refund\"\n| summarize count() by audit.outcome, bin(_time, 1h)\n","Output — Axiom query","kusto",[539,1353,1354,1368,1386],{"__ignoreMap":566},[570,1355,1356,1359,1361,1363,1365],{"class":572,"line":573},[570,1357,1358],{"class":584},"[",[570,1360,659],{"class":580},[570,1362,783],{"class":603},[570,1364,659],{"class":580},[570,1366,1367],{"class":584},"]\n",[570,1369,1370,1373,1376,1379,1381,1383],{"class":572,"line":610},[570,1371,1372],{"class":584},"| ",[570,1374,1375],{"class":711},"where",[570,1377,1378],{"class":584}," audit.action == ",[570,1380,779],{"class":580},[570,1382,803],{"class":603},[570,1384,1385],{"class":580},"\"\n",[570,1387,1388,1390,1393,1396,1399,1402,1405,1408,1411],{"class":572,"line":631},[570,1389,1372],{"class":584},[570,1391,1392],{"class":711},"summarize",[570,1394,1395],{"class":652}," count()",[570,1397,1398],{"class":711}," by",[570,1400,1401],{"class":584}," audit.outcome, ",[570,1403,1404],{"class":652},"bin",[570,1406,1407],{"class":584},"(_time, ",[570,1409,1410],{"class":711},"1h",[570,1412,1413],{"class":584},")\n",[560,1415,1418],{"className":1348,"code":1416,"filename":1417,"language":1351,"meta":566,"style":566},"['audit']\n| where audit.outcome == \"denied\"\n| summarize count() by audit.actor.id, audit.action\n| order by count_ desc\n","Output — denials by actor",[539,1419,1420,1432,1448,1461],{"__ignoreMap":566},[570,1421,1422,1424,1426,1428,1430],{"class":572,"line":573},[570,1423,1358],{"class":584},[570,1425,659],{"class":580},[570,1427,783],{"class":603},[570,1429,659],{"class":580},[570,1431,1367],{"class":584},[570,1433,1434,1436,1438,1441,1443,1446],{"class":572,"line":610},[570,1435,1372],{"class":584},[570,1437,1375],{"class":711},[570,1439,1440],{"class":584}," audit.outcome == ",[570,1442,779],{"class":580},[570,1444,1445],{"class":603},"denied",[570,1447,1385],{"class":580},[570,1449,1450,1452,1454,1456,1458],{"class":572,"line":631},[570,1451,1372],{"class":584},[570,1453,1392],{"class":711},[570,1455,1395],{"class":652},[570,1457,1398],{"class":711},[570,1459,1460],{"class":584}," audit.actor.id, audit.action\n",[570,1462,1463,1465,1468,1470,1473],{"class":572,"line":638},[570,1464,1372],{"class":584},[570,1466,1467],{"class":711},"order",[570,1469,1398],{"class":711},[570,1471,1472],{"class":584}," count_ ",[570,1474,1475],{"class":711},"desc\n",[535,1477,1478],{},"Splitting datasets means the audit dataset can have a longer retention (7y), tighter access controls, and a separate billing line, without touching the rest of your pipeline.",[552,1480,1482],{"id":1481},"audit-logs-in-postgres","Audit logs in Postgres",[557,1484,1485,1738],{},[560,1486,1488],{"className":562,"code":1487,"filename":564,"language":565,"meta":566,"style":566},"import { auditOnly } from 'evlog'\nimport type { DrainContext } from 'evlog'\n\nconst postgresAudit = async (ctx: DrainContext) => {\n  await db.insert(auditEvents).values({\n    id: ctx.event.audit!.idempotencyKey,\n    timestamp: new Date(ctx.event.timestamp),\n    payload: ctx.event,\n  }).onConflictDoNothing()\n}\n\nnitro.hooks.hook('evlog:drain', auditOnly(postgresAudit, { await: true }))\n",[539,1489,1490,1508,1530,1534,1567,1597,1623,1653,1669,1685,1691,1696],{"__ignoreMap":566},[570,1491,1492,1494,1496,1498,1500,1502,1504,1506],{"class":572,"line":573},[570,1493,577],{"class":576},[570,1495,581],{"class":580},[570,1497,585],{"class":584},[570,1499,594],{"class":580},[570,1501,597],{"class":576},[570,1503,600],{"class":580},[570,1505,604],{"class":603},[570,1507,607],{"class":580},[570,1509,1510,1512,1515,1517,1520,1522,1524,1526,1528],{"class":572,"line":610},[570,1511,577],{"class":576},[570,1513,1514],{"class":576}," type",[570,1516,581],{"class":580},[570,1518,1519],{"class":584}," DrainContext",[570,1521,594],{"class":580},[570,1523,597],{"class":576},[570,1525,600],{"class":580},[570,1527,604],{"class":603},[570,1529,607],{"class":580},[570,1531,1532],{"class":572,"line":631},[570,1533,635],{"emptyLinePlaceholder":634},[570,1535,1536,1539,1542,1545,1548,1551,1555,1557,1559,1561,1564],{"class":572,"line":638},[570,1537,1538],{"class":782},"const",[570,1540,1541],{"class":584}," postgresAudit ",[570,1543,1544],{"class":580},"=",[570,1546,1547],{"class":782}," async",[570,1549,1550],{"class":580}," (",[570,1552,1554],{"class":1553},"sHdIc","ctx",[570,1556,694],{"class":580},[570,1558,1519],{"class":793},[570,1560,717],{"class":580},[570,1562,1563],{"class":782}," =>",[570,1565,1566],{"class":580}," {\n",[570,1568,1569,1572,1575,1577,1580,1582,1585,1587,1589,1592,1594],{"class":572,"line":674},[570,1570,1571],{"class":576},"  await",[570,1573,1574],{"class":584}," db",[570,1576,644],{"class":580},[570,1578,1579],{"class":652},"insert",[570,1581,656],{"class":690},[570,1583,1584],{"class":584},"auditEvents",[570,1586,717],{"class":690},[570,1588,644],{"class":580},[570,1590,1591],{"class":652},"values",[570,1593,656],{"class":690},[570,1595,1596],{"class":580},"{\n",[570,1598,1599,1602,1604,1607,1609,1612,1614,1616,1619,1621],{"class":572,"line":743},[570,1600,1601],{"class":690},"    id",[570,1603,694],{"class":580},[570,1605,1606],{"class":584}," ctx",[570,1608,644],{"class":580},[570,1610,1611],{"class":584},"event",[570,1613,644],{"class":580},[570,1615,783],{"class":584},[570,1617,1618],{"class":580},"!.",[570,1620,933],{"class":584},[570,1622,740],{"class":580},[570,1624,1625,1628,1630,1633,1636,1638,1640,1642,1644,1646,1649,1651],{"class":572,"line":761},[570,1626,1627],{"class":690},"    timestamp",[570,1629,694],{"class":580},[570,1631,1632],{"class":580}," new",[570,1634,1635],{"class":652}," Date",[570,1637,656],{"class":690},[570,1639,1554],{"class":584},[570,1641,644],{"class":580},[570,1643,1611],{"class":584},[570,1645,644],{"class":580},[570,1647,1648],{"class":584},"timestamp",[570,1650,717],{"class":690},[570,1652,740],{"class":580},[570,1654,1656,1659,1661,1663,1665,1667],{"class":572,"line":1655},8,[570,1657,1658],{"class":690},"    payload",[570,1660,694],{"class":580},[570,1662,1606],{"class":584},[570,1664,644],{"class":580},[570,1666,1611],{"class":584},[570,1668,740],{"class":580},[570,1670,1672,1675,1677,1679,1682],{"class":572,"line":1671},9,[570,1673,1674],{"class":580},"  }",[570,1676,717],{"class":690},[570,1678,644],{"class":580},[570,1680,1681],{"class":652},"onConflictDoNothing",[570,1683,1684],{"class":690},"()\n",[570,1686,1688],{"class":572,"line":1687},10,[570,1689,1690],{"class":580},"}\n",[570,1692,1694],{"class":572,"line":1693},11,[570,1695,635],{"emptyLinePlaceholder":634},[570,1697,1699,1701,1703,1705,1707,1709,1711,1713,1715,1717,1719,1721,1724,1726,1728,1730,1732,1734,1736],{"class":572,"line":1698},12,[570,1700,641],{"class":584},[570,1702,644],{"class":580},[570,1704,647],{"class":584},[570,1706,644],{"class":580},[570,1708,653],{"class":652},[570,1710,656],{"class":584},[570,1712,659],{"class":580},[570,1714,662],{"class":603},[570,1716,659],{"class":580},[570,1718,588],{"class":580},[570,1720,585],{"class":652},[570,1722,1723],{"class":584},"(postgresAudit",[570,1725,588],{"class":580},[570,1727,581],{"class":580},[570,1729,749],{"class":690},[570,1731,694],{"class":580},[570,1733,755],{"class":754},[570,1735,594],{"class":580},[570,1737,764],{"class":584},[560,1739,1744],{"className":1740,"code":1741,"filename":1742,"language":1743,"meta":566,"style":566},"language-sql shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","SELECT id, timestamp, payload->'audit'->>'action' AS action,\n       payload->'audit'->>'outcome' AS outcome\nFROM audit_events\nWHERE id = 'ak_8f3c4b2a1e5d6f7c';\n\n--          id          |       timestamp       |     action      | outcome\n-- ---------------------+-----------------------+-----------------+---------\n--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n","Output — audit_events row","sql",[539,1745,1746,1785,1811,1819,1838,1842,1848,1853],{"__ignoreMap":566},[570,1747,1748,1751,1754,1756,1759,1762,1764,1766,1768,1771,1773,1775,1777,1780,1783],{"class":572,"line":573},[570,1749,1750],{"class":711},"SELECT",[570,1752,1753],{"class":584}," id, ",[570,1755,1648],{"class":782},[570,1757,1758],{"class":584},", payload",[570,1760,1761],{"class":580},"->",[570,1763,659],{"class":580},[570,1765,783],{"class":603},[570,1767,659],{"class":580},[570,1769,1770],{"class":580},"->>",[570,1772,659],{"class":580},[570,1774,794],{"class":603},[570,1776,659],{"class":580},[570,1778,1779],{"class":711}," AS",[570,1781,1782],{"class":711}," action",[570,1784,740],{"class":584},[570,1786,1787,1790,1792,1794,1796,1798,1800,1802,1804,1806,1808],{"class":572,"line":610},[570,1788,1789],{"class":584},"       payload",[570,1791,1761],{"class":580},[570,1793,659],{"class":580},[570,1795,783],{"class":603},[570,1797,659],{"class":580},[570,1799,1770],{"class":580},[570,1801,659],{"class":580},[570,1803,901],{"class":603},[570,1805,659],{"class":580},[570,1807,1779],{"class":711},[570,1809,1810],{"class":584}," outcome\n",[570,1812,1813,1816],{"class":572,"line":631},[570,1814,1815],{"class":711},"FROM",[570,1817,1818],{"class":584}," audit_events\n",[570,1820,1821,1824,1827,1829,1831,1833,1835],{"class":572,"line":638},[570,1822,1823],{"class":711},"WHERE",[570,1825,1826],{"class":584}," id ",[570,1828,1544],{"class":580},[570,1830,600],{"class":580},[570,1832,942],{"class":603},[570,1834,659],{"class":580},[570,1836,1837],{"class":584},";\n",[570,1839,1840],{"class":572,"line":674},[570,1841,635],{"emptyLinePlaceholder":634},[570,1843,1844],{"class":572,"line":743},[570,1845,1847],{"class":1846},"sHwdD","--          id          |       timestamp       |     action      | outcome\n",[570,1849,1850],{"class":572,"line":761},[570,1851,1852],{"class":1846},"-- ---------------------+-----------------------+-----------------+---------\n",[570,1854,1855],{"class":572,"line":1655},[570,1856,1857],{"class":1846},"--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n",[535,1859,1860,1861,1863,1864,1867],{},"The deterministic ",[539,1862,933],{}," makes retries safe: duplicate inserts collapse via ",[539,1865,1866],{},"ON CONFLICT DO NOTHING",". Without it, a transient network blip during a retry would create a duplicate audit row, which is exactly what you don't want.",[552,1869,1871],{"id":1870},"testing-audits","Testing audits",[535,1873,1874,1877,1878,542,1881,1884,1885,694],{},[539,1875,1876],{},"mockAudit()"," captures every audit event on emit, from standalone ",[539,1879,1880],{},"audit()",[539,1882,1883],{},"log.audit()",", and ",[539,1886,1887],{},"log.set({ audit })",[560,1889,1891],{"className":562,"code":1890,"language":565,"meta":566,"style":566},"import { mockAudit } from 'evlog'\n\nit('refunds the invoice and records an audit', async () => {\n  const captured = mockAudit()\n\n  await refundInvoice({ id: 'inv_889' }, { actor: { type: 'user', id: 'u1' } })\n\n  captured.assertAudit({\n    action: 'invoice.refund',\n    target: { type: 'invoice', id: 'inv_889' },\n    outcome: 'success',\n  })\n\n  captured.restore()\n})\n",[539,1892,1893,1912,1916,1941,1956,1960,2023,2027,2041,2056,2089,2104,2110,2115,2127],{"__ignoreMap":566},[570,1894,1895,1897,1899,1902,1904,1906,1908,1910],{"class":572,"line":573},[570,1896,577],{"class":576},[570,1898,581],{"class":580},[570,1900,1901],{"class":584}," mockAudit",[570,1903,594],{"class":580},[570,1905,597],{"class":576},[570,1907,600],{"class":580},[570,1909,604],{"class":603},[570,1911,607],{"class":580},[570,1913,1914],{"class":572,"line":610},[570,1915,635],{"emptyLinePlaceholder":634},[570,1917,1918,1921,1923,1925,1928,1930,1932,1934,1937,1939],{"class":572,"line":631},[570,1919,1920],{"class":652},"it",[570,1922,656],{"class":584},[570,1924,659],{"class":580},[570,1926,1927],{"class":603},"refunds the invoice and records an audit",[570,1929,659],{"class":580},[570,1931,588],{"class":580},[570,1933,1547],{"class":782},[570,1935,1936],{"class":580}," ()",[570,1938,1563],{"class":782},[570,1940,1566],{"class":580},[570,1942,1943,1946,1949,1952,1954],{"class":572,"line":638},[570,1944,1945],{"class":782},"  const",[570,1947,1948],{"class":584}," captured",[570,1950,1951],{"class":580}," =",[570,1953,1901],{"class":652},[570,1955,1684],{"class":690},[570,1957,1958],{"class":572,"line":674},[570,1959,635],{"emptyLinePlaceholder":634},[570,1961,1962,1964,1967,1969,1971,1974,1976,1978,1980,1982,1985,1987,1990,1992,1994,1996,1998,2000,2002,2004,2006,2008,2010,2012,2015,2017,2019,2021],{"class":572,"line":743},[570,1963,1571],{"class":576},[570,1965,1966],{"class":652}," refundInvoice",[570,1968,656],{"class":690},[570,1970,687],{"class":580},[570,1972,1973],{"class":690}," id",[570,1975,694],{"class":580},[570,1977,600],{"class":580},[570,1979,892],{"class":603},[570,1981,659],{"class":580},[570,1983,1984],{"class":580}," },",[570,1986,581],{"class":580},[570,1988,1989],{"class":690}," actor",[570,1991,694],{"class":580},[570,1993,581],{"class":580},[570,1995,1514],{"class":690},[570,1997,694],{"class":580},[570,1999,600],{"class":580},[570,2001,830],{"class":603},[570,2003,659],{"class":580},[570,2005,588],{"class":580},[570,2007,1973],{"class":690},[570,2009,694],{"class":580},[570,2011,600],{"class":580},[570,2013,2014],{"class":603},"u1",[570,2016,659],{"class":580},[570,2018,594],{"class":580},[570,2020,594],{"class":580},[570,2022,1413],{"class":690},[570,2024,2025],{"class":572,"line":761},[570,2026,635],{"emptyLinePlaceholder":634},[570,2028,2029,2032,2034,2037,2039],{"class":572,"line":1655},[570,2030,2031],{"class":584},"  captured",[570,2033,644],{"class":580},[570,2035,2036],{"class":652},"assertAudit",[570,2038,656],{"class":690},[570,2040,1596],{"class":580},[570,2042,2043,2046,2048,2050,2052,2054],{"class":572,"line":1671},[570,2044,2045],{"class":690},"    action",[570,2047,694],{"class":580},[570,2049,600],{"class":580},[570,2051,803],{"class":603},[570,2053,659],{"class":580},[570,2055,740],{"class":580},[570,2057,2058,2061,2063,2065,2067,2069,2071,2073,2075,2077,2079,2081,2083,2085,2087],{"class":572,"line":1687},[570,2059,2060],{"class":690},"    target",[570,2062,694],{"class":580},[570,2064,581],{"class":580},[570,2066,1514],{"class":690},[570,2068,694],{"class":580},[570,2070,600],{"class":580},[570,2072,875],{"class":603},[570,2074,659],{"class":580},[570,2076,588],{"class":580},[570,2078,1973],{"class":690},[570,2080,694],{"class":580},[570,2082,600],{"class":580},[570,2084,892],{"class":603},[570,2086,659],{"class":580},[570,2088,758],{"class":580},[570,2090,2091,2094,2096,2098,2100,2102],{"class":572,"line":1693},[570,2092,2093],{"class":690},"    outcome",[570,2095,694],{"class":580},[570,2097,600],{"class":580},[570,2099,910],{"class":603},[570,2101,659],{"class":580},[570,2103,740],{"class":580},[570,2105,2106,2108],{"class":572,"line":1698},[570,2107,1674],{"class":580},[570,2109,1413],{"class":690},[570,2111,2113],{"class":572,"line":2112},13,[570,2114,635],{"emptyLinePlaceholder":634},[570,2116,2118,2120,2122,2125],{"class":572,"line":2117},14,[570,2119,2031],{"class":584},[570,2121,644],{"class":580},[570,2123,2124],{"class":652},"restore",[570,2126,1684],{"class":690},[570,2128,2130,2132],{"class":572,"line":2129},15,[570,2131,1337],{"class":580},[570,2133,1413],{"class":584},[535,2135,2136,2137,2140,2141,2144,2145,644],{},"Prefer ",[539,2138,2139],{},"assertAudit()"," when a missing audit should fail the test with a readable message. Use ",[539,2142,2143],{},"toIncludeAuditOf()"," when you need a boolean inside ",[539,2146,2147],{},"expect(...)",[535,2149,2150,2151,2154,2155,2158],{},"Always call ",[539,2152,2153],{},"captured.restore()"," in an ",[539,2156,2157],{},"afterEach"," (or wrap with a fixture) so a failing assertion never leaks into the next test.",[552,2160,2162],{"id":2161},"api-reference","API Reference",[2164,2165,2166,2182],"table",{},[2167,2168,2169],"thead",{},[2170,2171,2172,2176,2179],"tr",{},[2173,2174,2175],"th",{},"Symbol",[2173,2177,2178],{},"Kind",[2173,2180,2181],{},"Notes",[2183,2184,2185,2198,2211,2223,2239,2251,2264,2277,2293,2310,2323,2338,2350],"tbody",{},[2170,2186,2187,2193,2195],{},[2188,2189,2190],"td",{},[539,2191,2192],{},"AuditFields",[2188,2194,821],{},[2188,2196,2197],{},"Reserved field on the wide event",[2170,2199,2200,2205,2208],{},[2188,2201,2202],{},[539,2203,2204],{},"defineAuditAction(name, opts?)",[2188,2206,2207],{},"factory",[2188,2209,2210],{},"Typed action registry, infers target shape",[2170,2212,2213,2218,2220],{},[2188,2214,2215],{},[539,2216,2217],{},"defineAuditCatalog(prefix, map)",[2188,2219,2207],{},[2188,2221,2222],{},"Bundle of typed audit actions sharing a prefix",[2170,2224,2225,2230,2233],{},[2188,2226,2227],{},[539,2228,2229],{},"log.audit(fields)",[2188,2231,2232],{},"method",[2188,2234,2235,2236,2238],{},"Sugar over ",[539,2237,1887],{}," + force-keep",[2170,2240,2241,2246,2248],{},[2188,2242,2243],{},[539,2244,2245],{},"log.audit.deny(reason, fields)",[2188,2247,2232],{},[2188,2249,2250],{},"Records a denied action",[2170,2252,2253,2258,2261],{},[2188,2254,2255],{},[539,2256,2257],{},"audit(fields)",[2188,2259,2260],{},"function",[2188,2262,2263],{},"Standalone for scripts \u002F jobs",[2170,2265,2266,2271,2274],{},[2188,2267,2268],{},[539,2269,2270],{},"withAudit({ action, target })(fn)",[2188,2272,2273],{},"wrapper",[2188,2275,2276],{},"Auto-emit success \u002F failure \u002F denied",[2170,2278,2279,2284,2287],{},[2188,2280,2281],{},[539,2282,2283],{},"auditDiff(before, after)",[2188,2285,2286],{},"helper",[2188,2288,2289,2290],{},"Redact-aware JSON Patch for ",[539,2291,2292],{},"changes",[2170,2294,2295,2299,2302],{},[2188,2296,2297],{},[539,2298,1876],{},[2188,2300,2301],{},"test util",[2188,2303,2304,2305,2307,2308],{},"Capture audits on emit; ",[539,2306,2139],{}," or ",[539,2309,2143],{},[2170,2311,2312,2317,2320],{},[2188,2313,2314],{},[539,2315,2316],{},"auditEnricher(opts?)",[2188,2318,2319],{},"enricher",[2188,2321,2322],{},"Auto-fill request \u002F runtime \u002F tenant context",[2170,2324,2325,2330,2332],{},[2188,2326,2327],{},[539,2328,2329],{},"auditOnly(drain, { await? })",[2188,2331,2273],{},[2188,2333,2334,2335,2337],{},"Routes only events with an ",[539,2336,783],{}," field",[2170,2339,2340,2345,2347],{},[2188,2341,2342],{},[539,2343,2344],{},"signed(drain, opts)",[2188,2346,2273],{},[2188,2348,2349],{},"Generic integrity wrapper (hmac \u002F hash-chain)",[2170,2351,2352,2357,2360],{},[2188,2353,2354],{},[539,2355,2356],{},"auditRedactPreset",[2188,2358,2359],{},"config",[2188,2361,2362],{},"Strict PII for audit events",[535,2364,2365,2366,2368],{},"Everything ships from the main ",[539,2367,604],{}," entrypoint.",[2370,2371,2372],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}",{"title":566,"searchDepth":610,"depth":610,"links":2374},[2375,2376,2377,2378,2379],{"id":554,"depth":610,"text":555},{"id":1175,"depth":610,"text":1176},{"id":1481,"depth":610,"text":1482},{"id":1870,"depth":610,"text":1871},{"id":2161,"depth":610,"text":2162},"File system, Axiom, and Postgres recipes for audit logs, plus mockAudit for tests and the full API reference.","md",[2383,2386],{"label":399,"icon":376,"to":400,"color":2384,"variant":2385},"neutral","subtle",{"label":133,"icon":131,"to":138,"color":2384,"variant":2385},{},{"title":403,"icon":406},{"title":530,"description":2380},"MlT3FrlOaqaKfHI8yC-qCqgacGr2o54p3fUW2IHSRUI",[2392,2394],{"title":399,"path":400,"stem":401,"description":2393,"icon":376,"children":-1},"Integrity, redact presets, GDPR vs append-only, retention windows, and the most common pitfalls when shipping audit logs to production.",{"title":128,"path":412,"stem":413,"description":2395,"icon":140,"children":-1},"One event per run for CLIs and automation, with privacy-safe flags, consent, an outbox, and disclosure generated from the same config.",1786793476867]