[{"data":1,"prerenderedAt":2393},["ShallowReactive",2],{"navigation_docs":3,"-use-cases-audit-recipes":525,"-use-cases-audit-recipes-surround":2388},[4,30,80,128,308,440,495],{"title":5,"path":6,"stem":7,"children":8,"page":29},"Start","\u002Fstart","1.start",[9,14,19,24],{"title":10,"path":11,"stem":12,"icon":13},"Introduction","\u002Fstart\u002Fintroduction","1.start\u002F1.introduction","i-lucide-info",{"title":15,"path":16,"stem":17,"icon":18},"Why start with evlog","\u002Fstart\u002Fwhy-evlog","1.start\u002F2.why-evlog","i-lucide-rocket",{"title":20,"path":21,"stem":22,"icon":23},"Installation","\u002Fstart\u002Finstallation","1.start\u002F3.installation","i-lucide-download",{"title":25,"path":26,"stem":27,"icon":28},"Quick Start","\u002Fstart\u002Fquick-start","1.start\u002F4.quick-start","i-lucide-zap",false,{"title":31,"path":32,"stem":33,"children":34,"page":29},"Learn","\u002Flearn","2.learn",[35,40,45,50,55,60,65,70,75],{"title":36,"path":37,"stem":38,"icon":39},"Overview","\u002Flearn\u002Foverview","2.learn\u002F0.overview","i-lucide-list",{"title":41,"path":42,"stem":43,"icon":44},"Simple Logging","\u002Flearn\u002Fsimple-logging","2.learn\u002F1.simple-logging","i-lucide-terminal",{"title":46,"path":47,"stem":48,"icon":49},"Wide Events","\u002Flearn\u002Fwide-events","2.learn\u002F2.wide-events","i-lucide-layers",{"title":51,"path":52,"stem":53,"icon":54},"Structured Errors","\u002Flearn\u002Fstructured-errors","2.learn\u002F3.structured-errors","i-lucide-shield-alert",{"title":56,"path":57,"stem":58,"icon":59},"Lifecycle","\u002Flearn\u002Flifecycle","2.learn\u002F4.lifecycle","i-lucide-arrow-right-left",{"title":61,"path":62,"stem":63,"icon":64},"Sampling","\u002Flearn\u002Fsampling","2.learn\u002F5.sampling","i-lucide-filter",{"title":66,"path":67,"stem":68,"icon":69},"Auto-Redaction","\u002Flearn\u002Fredaction","2.learn\u002F6.redaction","i-lucide-eye-off",{"title":71,"path":72,"stem":73,"icon":74},"Typed Fields","\u002Flearn\u002Ftyped-fields","2.learn\u002F7.typed-fields","i-simple-icons-typescript",{"title":76,"path":77,"stem":78,"icon":79},"Catalogs","\u002Flearn\u002Fcatalogs","2.learn\u002F8.catalogs","i-lucide-book-open",{"title":81,"path":82,"stem":83,"children":84,"page":29},"CLI","\u002Fcli","3.cli",[85,88,93,98,103,108,113,118,123],{"title":36,"path":86,"stem":87,"icon":44},"\u002Fcli\u002Foverview","3.cli\u002F0.overview",{"title":89,"path":90,"stem":91,"icon":92},"init","\u002Fcli\u002Finit","3.cli\u002F1.init","i-lucide-wand-sparkles",{"title":94,"path":95,"stem":96,"icon":97},"map","\u002Fcli\u002Fmap","3.cli\u002F2.map","i-lucide-radar",{"title":99,"path":100,"stem":101,"icon":102},"Rules","\u002Fcli\u002Frules","3.cli\u002F3.rules","i-lucide-list-checks",{"title":104,"path":105,"stem":106,"icon":107},"Scoring","\u002Fcli\u002Fscoring","3.cli\u002F4.scoring","i-lucide-gauge",{"title":109,"path":110,"stem":111,"icon":112},"CI","\u002Fcli\u002Fci","3.cli\u002F5.ci","i-lucide-git-pull-request",{"title":114,"path":115,"stem":116,"icon":117},"doctor","\u002Fcli\u002Fdoctor","3.cli\u002F6.doctor","i-lucide-stethoscope",{"title":119,"path":120,"stem":121,"icon":122},"telemetry","\u002Fcli\u002Ftelemetry","3.cli\u002F7.telemetry","i-lucide-bar-chart-3",{"title":124,"path":125,"stem":126,"icon":127},"agents","\u002Fcli\u002Fagents","3.cli\u002F8.agents","i-lucide-bot",{"title":129,"path":130,"stem":131,"children":132,"page":29},"Integrate","\u002Fintegrate","4.integrate",[133,137,220],{"title":36,"path":134,"stem":135,"icon":136},"\u002Fintegrate\u002Foverview","4.integrate\u002F0.overview","i-lucide-plug",{"title":138,"path":139,"stem":140,"children":141,"page":29},"Adapters","\u002Fintegrate\u002Fadapters","4.integrate\u002Fadapters",[142,145,175,200],{"title":36,"path":143,"stem":144,"icon":39},"\u002Fintegrate\u002Fadapters\u002Foverview","4.integrate\u002Fadapters\u002F01.overview",{"title":146,"path":147,"stem":148,"children":149,"page":29},"Cloud","\u002Fintegrate\u002Fadapters\u002Fcloud","4.integrate\u002Fadapters\u002Fcloud",[150,155,160,165,170],{"title":151,"path":152,"stem":153,"icon":154},"Axiom","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Faxiom","4.integrate\u002Fadapters\u002Fcloud\u002F01.axiom","i-custom-axiom",{"title":156,"path":157,"stem":158,"icon":159},"PostHog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fposthog","4.integrate\u002Fadapters\u002Fcloud\u002F02.posthog","i-simple-icons-posthog",{"title":161,"path":162,"stem":163,"icon":164},"Sentry","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fsentry","4.integrate\u002Fadapters\u002Fcloud\u002F03.sentry","i-simple-icons-sentry",{"title":166,"path":167,"stem":168,"icon":169},"Better Stack","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fbetter-stack","4.integrate\u002Fadapters\u002Fcloud\u002F04.better-stack","i-simple-icons-betterstack",{"title":171,"path":172,"stem":173,"icon":174},"Datadog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fdatadog","4.integrate\u002Fadapters\u002Fcloud\u002F05.datadog","i-simple-icons-datadog",{"title":176,"path":177,"stem":178,"children":179,"page":29},"Cloud or Self-Hosted","\u002Fintegrate\u002Fadapters\u002Fhybrid","4.integrate\u002Fadapters\u002Fhybrid",[180,185,190,195],{"title":181,"path":182,"stem":183,"icon":184},"Grafana Loki","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Floki","4.integrate\u002Fadapters\u002Fhybrid\u002F01.loki","i-simple-icons-grafana",{"title":186,"path":187,"stem":188,"icon":189},"ClickHouse","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Fclickhouse","4.integrate\u002Fadapters\u002Fhybrid\u002F02.clickhouse","i-simple-icons-clickhouse",{"title":191,"path":192,"stem":193,"icon":194},"OTLP","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Fotlp","4.integrate\u002Fadapters\u002Fhybrid\u002F03.otlp","i-simple-icons-opentelemetry",{"title":196,"path":197,"stem":198,"icon":199},"HyperDX","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Fhyperdx","4.integrate\u002Fadapters\u002Fhybrid\u002F04.hyperdx","i-custom-hyperdx",{"title":201,"path":202,"stem":203,"children":204,"page":29},"Self-Hosted","\u002Fintegrate\u002Fadapters\u002Fself-hosted","4.integrate\u002Fadapters\u002Fself-hosted",[205,210,215],{"title":206,"path":207,"stem":208,"icon":209},"File System","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Ffs","4.integrate\u002Fadapters\u002Fself-hosted\u002F01.fs","i-lucide-hard-drive",{"title":211,"path":212,"stem":213,"icon":214},"NuxtHub","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fnuxthub","4.integrate\u002Fadapters\u002Fself-hosted\u002F02.nuxthub","i-simple-icons-nuxt",{"title":216,"path":217,"stem":218,"icon":219},"Memory","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fmemory","4.integrate\u002Fadapters\u002Fself-hosted\u002F03.memory","i-lucide-cpu",{"title":221,"path":222,"stem":223,"children":224,"page":29},"Frameworks","\u002Fintegrate\u002Fframeworks","4.integrate\u002Fframeworks",[225,229,234,239,244,249,254,259,264,269,274,279,284,289,293,298,303],{"title":36,"path":226,"stem":227,"icon":228},"\u002Fintegrate\u002Fframeworks\u002Foverview","4.integrate\u002Fframeworks\u002F00.overview","i-lucide-layout-grid",{"title":230,"path":231,"stem":232,"icon":233},"Nuxt","\u002Fintegrate\u002Fframeworks\u002Fnuxt","4.integrate\u002Fframeworks\u002F01.nuxt","i-simple-icons-nuxtdotjs",{"title":235,"path":236,"stem":237,"icon":238},"Next.js","\u002Fintegrate\u002Fframeworks\u002Fnextjs","4.integrate\u002Fframeworks\u002F02.nextjs","i-simple-icons-nextdotjs",{"title":240,"path":241,"stem":242,"icon":243},"SvelteKit","\u002Fintegrate\u002Fframeworks\u002Fsveltekit","4.integrate\u002Fframeworks\u002F03.sveltekit","i-simple-icons-svelte",{"title":245,"path":246,"stem":247,"icon":248},"Nitro","\u002Fintegrate\u002Fframeworks\u002Fnitro","4.integrate\u002Fframeworks\u002F04.nitro","i-custom-nitro",{"title":250,"path":251,"stem":252,"icon":253},"TanStack Start","\u002Fintegrate\u002Fframeworks\u002Ftanstack-start","4.integrate\u002Fframeworks\u002F05.tanstack-start","i-custom-tanstack",{"title":255,"path":256,"stem":257,"icon":258},"NestJS","\u002Fintegrate\u002Fframeworks\u002Fnestjs","4.integrate\u002Fframeworks\u002F06.nestjs","i-simple-icons-nestjs",{"title":260,"path":261,"stem":262,"icon":263},"Express","\u002Fintegrate\u002Fframeworks\u002Fexpress","4.integrate\u002Fframeworks\u002F07.express","i-simple-icons-express",{"title":265,"path":266,"stem":267,"icon":268},"Hono","\u002Fintegrate\u002Fframeworks\u002Fhono","4.integrate\u002Fframeworks\u002F08.hono","i-simple-icons-hono",{"title":270,"path":271,"stem":272,"icon":273},"Fastify","\u002Fintegrate\u002Fframeworks\u002Ffastify","4.integrate\u002Fframeworks\u002F09.fastify","i-simple-icons-fastify",{"title":275,"path":276,"stem":277,"icon":278},"Elysia","\u002Fintegrate\u002Fframeworks\u002Felysia","4.integrate\u002Fframeworks\u002F10.elysia","i-custom-elysia",{"title":280,"path":281,"stem":282,"icon":283},"React Router","\u002Fintegrate\u002Fframeworks\u002Freact-router","4.integrate\u002Fframeworks\u002F11.react-router","i-custom-reactrouter",{"title":285,"path":286,"stem":287,"icon":288},"Cloudflare Workers","\u002Fintegrate\u002Fframeworks\u002Fcloudflare-workers","4.integrate\u002Fframeworks\u002F12.cloudflare-workers","i-simple-icons-cloudflare",{"title":290,"path":291,"stem":292,"icon":74},"Standalone","\u002Fintegrate\u002Fframeworks\u002Fstandalone","4.integrate\u002Fframeworks\u002F13.standalone",{"title":294,"path":295,"stem":296,"icon":297},"Astro","\u002Fintegrate\u002Fframeworks\u002Fastro","4.integrate\u002Fframeworks\u002F14.astro","i-simple-icons-astro",{"title":299,"path":300,"stem":301,"icon":302},"oRPC","\u002Fintegrate\u002Fframeworks\u002Forpc","4.integrate\u002Fframeworks\u002F15.orpc","i-lucide-network",{"title":304,"path":305,"stem":306,"icon":307},"AWS Lambda","\u002Fintegrate\u002Fframeworks\u002Faws-lambda","4.integrate\u002Fframeworks\u002F16.aws-lambda","i-custom-lambda",{"title":309,"path":310,"stem":311,"children":312,"page":29},"Use Cases","\u002Fuse-cases","5.use-cases",[313,316,321,350,377,409,430,435],{"title":36,"path":314,"stem":315,"icon":102},"\u002Fuse-cases\u002Foverview","5.use-cases\u002F0.overview",{"title":317,"path":318,"stem":319,"icon":320},"Client Logging","\u002Fuse-cases\u002Fclient-logging","5.use-cases\u002F1.client-logging","i-lucide-monitor",{"title":322,"icon":323,"path":324,"stem":325,"children":326,"page":29},"AI SDK","i-simple-icons-vercel","\u002Fuse-cases\u002Fai-sdk","5.use-cases\u002F2.ai-sdk",[327,330,335,340,345],{"title":36,"path":328,"stem":329,"icon":39},"\u002Fuse-cases\u002Fai-sdk\u002Foverview","5.use-cases\u002F2.ai-sdk\u002F01.overview",{"title":331,"path":332,"stem":333,"icon":334},"Usage","\u002Fuse-cases\u002Fai-sdk\u002Fusage","5.use-cases\u002F2.ai-sdk\u002F02.usage","i-lucide-code",{"title":336,"path":337,"stem":338,"icon":339},"Options","\u002Fuse-cases\u002Fai-sdk\u002Foptions","5.use-cases\u002F2.ai-sdk\u002F03.options","i-lucide-sliders",{"title":341,"path":342,"stem":343,"icon":344},"Metadata","\u002Fuse-cases\u002Fai-sdk\u002Fmetadata","5.use-cases\u002F2.ai-sdk\u002F04.metadata","i-lucide-database",{"title":346,"path":347,"stem":348,"icon":349},"Telemetry","\u002Fuse-cases\u002Fai-sdk\u002Ftelemetry","5.use-cases\u002F2.ai-sdk\u002F05.telemetry","i-lucide-activity",{"title":351,"icon":352,"path":353,"stem":354,"children":355,"page":29},"Better Auth","i-simple-icons-betterauth","\u002Fuse-cases\u002Fbetter-auth","5.use-cases\u002F3.better-auth",[356,359,364,369,373],{"title":36,"path":357,"stem":358,"icon":39},"\u002Fuse-cases\u002Fbetter-auth\u002Foverview","5.use-cases\u002F3.better-auth\u002F01.overview",{"title":360,"path":361,"stem":362,"icon":363},"Identify User","\u002Fuse-cases\u002Fbetter-auth\u002Fidentify-user","5.use-cases\u002F3.better-auth\u002F02.identify-user","i-lucide-user-check",{"title":365,"path":366,"stem":367,"icon":368},"Middleware","\u002Fuse-cases\u002Fbetter-auth\u002Fmiddleware","5.use-cases\u002F3.better-auth\u002F03.middleware","i-lucide-shield",{"title":370,"path":371,"stem":372,"icon":320},"Client Sync","\u002Fuse-cases\u002Fbetter-auth\u002Fclient-sync","5.use-cases\u002F3.better-auth\u002F04.client-sync",{"title":374,"path":375,"stem":376,"icon":107},"Performance","\u002Fuse-cases\u002Fbetter-auth\u002Fperformance","5.use-cases\u002F3.better-auth\u002F05.performance",{"title":378,"icon":379,"path":380,"stem":381,"children":382,"page":29},"Audit Logs","i-lucide-shield-check","\u002Fuse-cases\u002Faudit","5.use-cases\u002F4.audit",[383,386,391,396,401,405],{"title":36,"path":384,"stem":385,"icon":39},"\u002Fuse-cases\u002Faudit\u002Foverview","5.use-cases\u002F4.audit\u002F01.overview",{"title":387,"path":388,"stem":389,"icon":390},"Schema","\u002Fuse-cases\u002Faudit\u002Fschema","5.use-cases\u002F4.audit\u002F02.schema","i-lucide-file-text",{"title":392,"path":393,"stem":394,"icon":395},"Recording","\u002Fuse-cases\u002Faudit\u002Frecording","5.use-cases\u002F4.audit\u002F03.recording","i-lucide-pen-line",{"title":397,"path":398,"stem":399,"icon":400},"Drains","\u002Fuse-cases\u002Faudit\u002Fpipeline","5.use-cases\u002F4.audit\u002F04.pipeline","i-lucide-link",{"title":402,"path":403,"stem":404,"icon":379},"Compliance","\u002Fuse-cases\u002Faudit\u002Fcompliance","5.use-cases\u002F4.audit\u002F05.compliance",{"title":406,"path":407,"stem":408,"icon":79},"Recipes","\u002Fuse-cases\u002Faudit\u002Frecipes","5.use-cases\u002F4.audit\u002F06.recipes",{"title":346,"icon":107,"path":410,"stem":411,"children":412,"page":29},"\u002Fuse-cases\u002Ftelemetry","5.use-cases\u002F4.telemetry",[413,416,421,426],{"title":36,"path":414,"stem":415,"icon":39},"\u002Fuse-cases\u002Ftelemetry\u002Foverview","5.use-cases\u002F4.telemetry\u002F01.overview",{"title":417,"path":418,"stem":419,"icon":420},"Setup","\u002Fuse-cases\u002Ftelemetry\u002Fsetup","5.use-cases\u002F4.telemetry\u002F02.setup","i-lucide-wrench",{"title":422,"path":423,"stem":424,"icon":425},"Ingest","\u002Fuse-cases\u002Ftelemetry\u002Fingest","5.use-cases\u002F4.telemetry\u002F03.ingest","i-lucide-server",{"title":427,"path":428,"stem":429,"icon":79},"Reference","\u002Fuse-cases\u002Ftelemetry\u002Freference","5.use-cases\u002F4.telemetry\u002F04.reference",{"title":431,"path":432,"stem":433,"icon":434},"Enrichers","\u002Fuse-cases\u002Fenrichers","5.use-cases\u002F5.enrichers","i-lucide-sparkles",{"title":436,"path":437,"stem":438,"icon":439},"eve","\u002Fuse-cases\u002Feve","5.use-cases\u002F5.eve","i-custom-eve",{"title":441,"path":442,"stem":443,"children":444,"page":29},"Extend","\u002Fextend","6.extend",[445,449,454,459,464,468,472,476,480,485,490],{"title":36,"path":446,"stem":447,"icon":448},"\u002Fextend\u002Foverview","6.extend\u002F0.overview","i-lucide-blocks",{"title":450,"path":451,"stem":452,"icon":453},"Stream","\u002Fextend\u002Fstream","6.extend\u002F1.stream","i-lucide-radio-tower",{"title":455,"path":456,"stem":457,"icon":458},"Custom framework","\u002Fextend\u002Fcustom-framework","6.extend\u002F10.custom-framework","i-lucide-puzzle",{"title":460,"path":461,"stem":462,"icon":463},"FS reader","\u002Fextend\u002Ffs-reader","6.extend\u002F2.fs-reader","i-lucide-folder-search",{"title":406,"path":465,"stem":466,"icon":467},"\u002Fextend\u002Fconsumer-recipes","6.extend\u002F3.consumer-recipes","i-lucide-chef-hat",{"title":469,"path":470,"stem":471,"icon":448},"Plugins","\u002Fextend\u002Fplugins","6.extend\u002F4.plugins",{"title":473,"path":474,"stem":475,"icon":434},"Custom enrichers","\u002Fextend\u002Fcustom-enrichers","6.extend\u002F5.custom-enrichers",{"title":477,"path":478,"stem":479,"icon":64},"Tail sampling","\u002Fextend\u002Ftail-sampling","6.extend\u002F6.tail-sampling",{"title":481,"path":482,"stem":483,"icon":484},"Identity headers","\u002Fextend\u002Fidentity-headers","6.extend\u002F7.identity-headers","i-lucide-fingerprint",{"title":486,"path":487,"stem":488,"icon":489},"Custom drains","\u002Fextend\u002Fcustom-drains","6.extend\u002F8.custom-drains","i-lucide-share-2",{"title":491,"path":492,"stem":493,"icon":494},"Drain pipeline","\u002Fextend\u002Fdrain-pipeline","6.extend\u002F9.drain-pipeline","i-lucide-workflow",{"title":427,"path":496,"stem":497,"children":498,"page":29},"\u002Freference","7.reference",[499,504,507,512,516,521],{"title":500,"path":501,"stem":502,"icon":503},"Configuration","\u002Freference\u002Fconfiguration","7.reference\u002F1.configuration","i-lucide-settings",{"title":374,"path":505,"stem":506,"icon":107},"\u002Freference\u002Fperformance","7.reference\u002F2.performance",{"title":508,"path":509,"stem":510,"icon":511},"Vite Plugin","\u002Freference\u002Fvite-plugin","7.reference\u002F3.vite-plugin","i-custom-vite",{"title":513,"path":514,"stem":515,"icon":379},"Best Practices","\u002Freference\u002Fbest-practices","7.reference\u002F4.best-practices",{"title":517,"path":518,"stem":519,"icon":520},"vs Other Loggers","\u002Freference\u002Fvs-other-loggers","7.reference\u002F5.vs-other-loggers","i-lucide-scale",{"title":522,"path":523,"stem":524,"icon":434},"Agent Skills","\u002Freference\u002Fagent-skills","7.reference\u002F6.agent-skills",{"id":526,"title":527,"body":528,"description":2377,"extension":2378,"links":2379,"meta":2384,"navigation":2385,"path":407,"seo":2386,"stem":408,"__hash__":2387},"docs\u002F5.use-cases\u002F4.audit\u002F06.recipes.md","Recipes & Reference",{"type":529,"value":530,"toc":2370},"minimark",[531,548,553,1161,1170,1174,1473,1476,1480,1855,1865,1869,1885,2131,2145,2156,2160,2360,2366],[532,533,534,535,539,540,543,544,547],"p",{},"Pick the recipe that matches your sink, drop it in, and you have a tamper-evident audit log. Each recipe composes the same primitives (",[536,537,538],"code",{},"auditOnly",", ",[536,541,542],{},"signed",", optional ",[536,545,546],{},"await: true",") over different drains.",[549,550,552],"h2",{"id":551},"audit-logs-on-disk","Audit logs on disk",[554,555,556,762],"code-group",{},[557,558,564],"pre",{"className":559,"code":560,"filename":561,"language":562,"meta":563,"style":563},"language-typescript shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { auditOnly, signed } from 'evlog'\nimport { createFsDrain } from 'evlog\u002Ffs'\n\nnitro.hooks.hook('evlog:drain', auditOnly(\n  signed(createFsDrain({ dir: '.audit', maxFiles: 30 }), { strategy: 'hash-chain' }),\n  { await: true },\n))\n","Input — server\u002Fplugins\u002Fevlog.ts","typescript","",[536,565,566,605,626,633,669,738,756],{"__ignoreMap":563},[567,568,571,575,579,583,586,589,592,595,598,602],"span",{"class":569,"line":570},"line",1,[567,572,574],{"class":573},"s7zQu","import",[567,576,578],{"class":577},"sMK4o"," {",[567,580,582],{"class":581},"sTEyZ"," auditOnly",[567,584,585],{"class":577},",",[567,587,588],{"class":581}," signed",[567,590,591],{"class":577}," }",[567,593,594],{"class":573}," from",[567,596,597],{"class":577}," '",[567,599,601],{"class":600},"sfazB","evlog",[567,603,604],{"class":577},"'\n",[567,606,608,610,612,615,617,619,621,624],{"class":569,"line":607},2,[567,609,574],{"class":573},[567,611,578],{"class":577},[567,613,614],{"class":581}," createFsDrain",[567,616,591],{"class":577},[567,618,594],{"class":573},[567,620,597],{"class":577},[567,622,623],{"class":600},"evlog\u002Ffs",[567,625,604],{"class":577},[567,627,629],{"class":569,"line":628},3,[567,630,632],{"emptyLinePlaceholder":631},true,"\n",[567,634,636,639,642,645,647,651,654,657,660,662,664,666],{"class":569,"line":635},4,[567,637,638],{"class":581},"nitro",[567,640,641],{"class":577},".",[567,643,644],{"class":581},"hooks",[567,646,641],{"class":577},[567,648,650],{"class":649},"s2Zo4","hook",[567,652,653],{"class":581},"(",[567,655,656],{"class":577},"'",[567,658,659],{"class":600},"evlog:drain",[567,661,656],{"class":577},[567,663,585],{"class":577},[567,665,582],{"class":649},[567,667,668],{"class":581},"(\n",[567,670,672,675,677,680,682,685,689,692,694,697,699,701,704,706,710,712,715,717,719,722,724,726,729,731,733,735],{"class":569,"line":671},5,[567,673,674],{"class":649},"  signed",[567,676,653],{"class":581},[567,678,679],{"class":649},"createFsDrain",[567,681,653],{"class":581},[567,683,684],{"class":577},"{",[567,686,688],{"class":687},"swJcz"," dir",[567,690,691],{"class":577},":",[567,693,597],{"class":577},[567,695,696],{"class":600},".audit",[567,698,656],{"class":577},[567,700,585],{"class":577},[567,702,703],{"class":687}," maxFiles",[567,705,691],{"class":577},[567,707,709],{"class":708},"sbssI"," 30",[567,711,591],{"class":577},[567,713,714],{"class":581},")",[567,716,585],{"class":577},[567,718,578],{"class":577},[567,720,721],{"class":687}," strategy",[567,723,691],{"class":577},[567,725,597],{"class":577},[567,727,728],{"class":600},"hash-chain",[567,730,656],{"class":577},[567,732,591],{"class":577},[567,734,714],{"class":581},[567,736,737],{"class":577},",\n",[567,739,741,744,747,749,753],{"class":569,"line":740},6,[567,742,743],{"class":577},"  {",[567,745,746],{"class":687}," await",[567,748,691],{"class":577},[567,750,752],{"class":751},"sfNiH"," true",[567,754,755],{"class":577}," },\n",[567,757,759],{"class":569,"line":758},7,[567,760,761],{"class":581},"))\n",[557,763,768],{"className":764,"code":765,"filename":766,"language":767,"meta":563,"style":563},"language-jsonl shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\"audit\":{\"action\":\"invoice.refund\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"invoice\",\"id\":\"inv_889\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_8f3c4b2a1e5d6f7c\",\"prevHash\":null,\"hash\":\"3f2c8e1a...\"}}\n{\"audit\":{\"action\":\"user.update\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"user\",\"id\":\"usr_99\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_5e7d8f9a0b1c2d3e\",\"prevHash\":\"3f2c8e1a...\",\"hash\":\"9a1b4d7c...\"}}\n","Output — .audit\u002F2026-04-24.ndjson","jsonl",[536,769,770,973],{"__ignoreMap":563},[567,771,772,774,777,781,783,786,788,792,794,796,798,801,803,805,807,810,812,814,816,819,821,823,825,828,830,832,834,837,839,841,843,846,848,851,853,856,858,860,862,864,866,868,870,873,875,877,879,881,883,885,887,890,892,894,896,899,901,903,905,908,910,912,914,917,919,921,924,926,928,931,933,935,937,940,942,944,946,949,951,954,956,959,961,963,965,968,970],{"class":569,"line":570},[567,773,684],{"class":577},[567,775,776],{"class":577},"\"",[567,778,780],{"class":779},"spNyl","audit",[567,782,776],{"class":577},[567,784,785],{"class":577},":{",[567,787,776],{"class":577},[567,789,791],{"class":790},"sBMFI","action",[567,793,776],{"class":577},[567,795,691],{"class":577},[567,797,776],{"class":577},[567,799,800],{"class":600},"invoice.refund",[567,802,776],{"class":577},[567,804,585],{"class":577},[567,806,776],{"class":577},[567,808,809],{"class":790},"actor",[567,811,776],{"class":577},[567,813,785],{"class":577},[567,815,776],{"class":577},[567,817,818],{"class":708},"type",[567,820,776],{"class":577},[567,822,691],{"class":577},[567,824,776],{"class":577},[567,826,827],{"class":600},"user",[567,829,776],{"class":577},[567,831,585],{"class":577},[567,833,776],{"class":577},[567,835,836],{"class":708},"id",[567,838,776],{"class":577},[567,840,691],{"class":577},[567,842,776],{"class":577},[567,844,845],{"class":600},"usr_42",[567,847,776],{"class":577},[567,849,850],{"class":577},"},",[567,852,776],{"class":577},[567,854,855],{"class":790},"target",[567,857,776],{"class":577},[567,859,785],{"class":577},[567,861,776],{"class":577},[567,863,818],{"class":708},[567,865,776],{"class":577},[567,867,691],{"class":577},[567,869,776],{"class":577},[567,871,872],{"class":600},"invoice",[567,874,776],{"class":577},[567,876,585],{"class":577},[567,878,776],{"class":577},[567,880,836],{"class":708},[567,882,776],{"class":577},[567,884,691],{"class":577},[567,886,776],{"class":577},[567,888,889],{"class":600},"inv_889",[567,891,776],{"class":577},[567,893,850],{"class":577},[567,895,776],{"class":577},[567,897,898],{"class":790},"outcome",[567,900,776],{"class":577},[567,902,691],{"class":577},[567,904,776],{"class":577},[567,906,907],{"class":600},"success",[567,909,776],{"class":577},[567,911,585],{"class":577},[567,913,776],{"class":577},[567,915,916],{"class":790},"version",[567,918,776],{"class":577},[567,920,691],{"class":577},[567,922,923],{"class":708},"1",[567,925,585],{"class":577},[567,927,776],{"class":577},[567,929,930],{"class":790},"idempotencyKey",[567,932,776],{"class":577},[567,934,691],{"class":577},[567,936,776],{"class":577},[567,938,939],{"class":600},"ak_8f3c4b2a1e5d6f7c",[567,941,776],{"class":577},[567,943,585],{"class":577},[567,945,776],{"class":577},[567,947,948],{"class":790},"prevHash",[567,950,776],{"class":577},[567,952,953],{"class":577},":null,",[567,955,776],{"class":577},[567,957,958],{"class":790},"hash",[567,960,776],{"class":577},[567,962,691],{"class":577},[567,964,776],{"class":577},[567,966,967],{"class":600},"3f2c8e1a...",[567,969,776],{"class":577},[567,971,972],{"class":577},"}}\n",[567,974,975,977,979,981,983,985,987,989,991,993,995,998,1000,1002,1004,1006,1008,1010,1012,1014,1016,1018,1020,1022,1024,1026,1028,1030,1032,1034,1036,1038,1040,1042,1044,1046,1048,1050,1052,1054,1056,1058,1060,1062,1064,1066,1068,1070,1072,1074,1076,1079,1081,1083,1085,1087,1089,1091,1093,1095,1097,1099,1101,1103,1105,1107,1109,1111,1113,1115,1117,1119,1121,1124,1126,1128,1130,1132,1134,1136,1138,1140,1142,1144,1146,1148,1150,1152,1154,1157,1159],{"class":569,"line":607},[567,976,684],{"class":577},[567,978,776],{"class":577},[567,980,780],{"class":779},[567,982,776],{"class":577},[567,984,785],{"class":577},[567,986,776],{"class":577},[567,988,791],{"class":790},[567,990,776],{"class":577},[567,992,691],{"class":577},[567,994,776],{"class":577},[567,996,997],{"class":600},"user.update",[567,999,776],{"class":577},[567,1001,585],{"class":577},[567,1003,776],{"class":577},[567,1005,809],{"class":790},[567,1007,776],{"class":577},[567,1009,785],{"class":577},[567,1011,776],{"class":577},[567,1013,818],{"class":708},[567,1015,776],{"class":577},[567,1017,691],{"class":577},[567,1019,776],{"class":577},[567,1021,827],{"class":600},[567,1023,776],{"class":577},[567,1025,585],{"class":577},[567,1027,776],{"class":577},[567,1029,836],{"class":708},[567,1031,776],{"class":577},[567,1033,691],{"class":577},[567,1035,776],{"class":577},[567,1037,845],{"class":600},[567,1039,776],{"class":577},[567,1041,850],{"class":577},[567,1043,776],{"class":577},[567,1045,855],{"class":790},[567,1047,776],{"class":577},[567,1049,785],{"class":577},[567,1051,776],{"class":577},[567,1053,818],{"class":708},[567,1055,776],{"class":577},[567,1057,691],{"class":577},[567,1059,776],{"class":577},[567,1061,827],{"class":600},[567,1063,776],{"class":577},[567,1065,585],{"class":577},[567,1067,776],{"class":577},[567,1069,836],{"class":708},[567,1071,776],{"class":577},[567,1073,691],{"class":577},[567,1075,776],{"class":577},[567,1077,1078],{"class":600},"usr_99",[567,1080,776],{"class":577},[567,1082,850],{"class":577},[567,1084,776],{"class":577},[567,1086,898],{"class":790},[567,1088,776],{"class":577},[567,1090,691],{"class":577},[567,1092,776],{"class":577},[567,1094,907],{"class":600},[567,1096,776],{"class":577},[567,1098,585],{"class":577},[567,1100,776],{"class":577},[567,1102,916],{"class":790},[567,1104,776],{"class":577},[567,1106,691],{"class":577},[567,1108,923],{"class":708},[567,1110,585],{"class":577},[567,1112,776],{"class":577},[567,1114,930],{"class":790},[567,1116,776],{"class":577},[567,1118,691],{"class":577},[567,1120,776],{"class":577},[567,1122,1123],{"class":600},"ak_5e7d8f9a0b1c2d3e",[567,1125,776],{"class":577},[567,1127,585],{"class":577},[567,1129,776],{"class":577},[567,1131,948],{"class":790},[567,1133,776],{"class":577},[567,1135,691],{"class":577},[567,1137,776],{"class":577},[567,1139,967],{"class":600},[567,1141,776],{"class":577},[567,1143,585],{"class":577},[567,1145,776],{"class":577},[567,1147,958],{"class":790},[567,1149,776],{"class":577},[567,1151,691],{"class":577},[567,1153,776],{"class":577},[567,1155,1156],{"class":600},"9a1b4d7c...",[567,1158,776],{"class":577},[567,1160,972],{"class":577},[532,1162,1163,1164,1166,1167,1169],{},"Each line's ",[536,1165,948],{}," matches the previous line's ",[536,1168,958],{},". Tampering with any row breaks the chain forward of that point — a verifier replays the hashes and reports the first mismatch.",[549,1171,1173],{"id":1172},"audit-logs-to-a-dedicated-axiom-dataset","Audit logs to a dedicated Axiom dataset",[554,1175,1176,1343,1411],{},[557,1177,1179],{"className":559,"code":1178,"filename":561,"language":562,"meta":563,"style":563},"import { auditOnly } from 'evlog'\nimport { createAxiomDrain } from 'evlog\u002Faxiom'\n\nnitro.hooks.hook('evlog:drain', createAxiomDrain({ dataset: 'logs' }))\nnitro.hooks.hook('evlog:drain', auditOnly(\n  createAxiomDrain({ dataset: 'audit', apiKey: process.env.AXIOM_AUDIT_API_KEY }),\n))\n",[536,1180,1181,1199,1219,1223,1267,1293,1339],{"__ignoreMap":563},[567,1182,1183,1185,1187,1189,1191,1193,1195,1197],{"class":569,"line":570},[567,1184,574],{"class":573},[567,1186,578],{"class":577},[567,1188,582],{"class":581},[567,1190,591],{"class":577},[567,1192,594],{"class":573},[567,1194,597],{"class":577},[567,1196,601],{"class":600},[567,1198,604],{"class":577},[567,1200,1201,1203,1205,1208,1210,1212,1214,1217],{"class":569,"line":607},[567,1202,574],{"class":573},[567,1204,578],{"class":577},[567,1206,1207],{"class":581}," createAxiomDrain",[567,1209,591],{"class":577},[567,1211,594],{"class":573},[567,1213,597],{"class":577},[567,1215,1216],{"class":600},"evlog\u002Faxiom",[567,1218,604],{"class":577},[567,1220,1221],{"class":569,"line":628},[567,1222,632],{"emptyLinePlaceholder":631},[567,1224,1225,1227,1229,1231,1233,1235,1237,1239,1241,1243,1245,1247,1249,1251,1254,1256,1258,1261,1263,1265],{"class":569,"line":635},[567,1226,638],{"class":581},[567,1228,641],{"class":577},[567,1230,644],{"class":581},[567,1232,641],{"class":577},[567,1234,650],{"class":649},[567,1236,653],{"class":581},[567,1238,656],{"class":577},[567,1240,659],{"class":600},[567,1242,656],{"class":577},[567,1244,585],{"class":577},[567,1246,1207],{"class":649},[567,1248,653],{"class":581},[567,1250,684],{"class":577},[567,1252,1253],{"class":687}," dataset",[567,1255,691],{"class":577},[567,1257,597],{"class":577},[567,1259,1260],{"class":600},"logs",[567,1262,656],{"class":577},[567,1264,591],{"class":577},[567,1266,761],{"class":581},[567,1268,1269,1271,1273,1275,1277,1279,1281,1283,1285,1287,1289,1291],{"class":569,"line":671},[567,1270,638],{"class":581},[567,1272,641],{"class":577},[567,1274,644],{"class":581},[567,1276,641],{"class":577},[567,1278,650],{"class":649},[567,1280,653],{"class":581},[567,1282,656],{"class":577},[567,1284,659],{"class":600},[567,1286,656],{"class":577},[567,1288,585],{"class":577},[567,1290,582],{"class":649},[567,1292,668],{"class":581},[567,1294,1295,1298,1300,1302,1304,1306,1308,1310,1312,1314,1317,1319,1322,1324,1327,1329,1332,1335,1337],{"class":569,"line":740},[567,1296,1297],{"class":649},"  createAxiomDrain",[567,1299,653],{"class":581},[567,1301,684],{"class":577},[567,1303,1253],{"class":687},[567,1305,691],{"class":577},[567,1307,597],{"class":577},[567,1309,780],{"class":600},[567,1311,656],{"class":577},[567,1313,585],{"class":577},[567,1315,1316],{"class":687}," apiKey",[567,1318,691],{"class":577},[567,1320,1321],{"class":581}," process",[567,1323,641],{"class":577},[567,1325,1326],{"class":581},"env",[567,1328,641],{"class":577},[567,1330,1331],{"class":581},"AXIOM_AUDIT_API_KEY ",[567,1333,1334],{"class":577},"}",[567,1336,714],{"class":581},[567,1338,737],{"class":577},[567,1340,1341],{"class":569,"line":758},[567,1342,761],{"class":581},[557,1344,1349],{"className":1345,"code":1346,"filename":1347,"language":1348,"meta":563,"style":563},"language-kusto shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","['audit']\n| where audit.action == \"invoice.refund\"\n| summarize count() by audit.outcome, bin(_time, 1h)\n","Output — Axiom query","kusto",[536,1350,1351,1365,1383],{"__ignoreMap":563},[567,1352,1353,1356,1358,1360,1362],{"class":569,"line":570},[567,1354,1355],{"class":581},"[",[567,1357,656],{"class":577},[567,1359,780],{"class":600},[567,1361,656],{"class":577},[567,1363,1364],{"class":581},"]\n",[567,1366,1367,1370,1373,1376,1378,1380],{"class":569,"line":607},[567,1368,1369],{"class":581},"| ",[567,1371,1372],{"class":708},"where",[567,1374,1375],{"class":581}," audit.action == ",[567,1377,776],{"class":577},[567,1379,800],{"class":600},[567,1381,1382],{"class":577},"\"\n",[567,1384,1385,1387,1390,1393,1396,1399,1402,1405,1408],{"class":569,"line":628},[567,1386,1369],{"class":581},[567,1388,1389],{"class":708},"summarize",[567,1391,1392],{"class":649}," count()",[567,1394,1395],{"class":708}," by",[567,1397,1398],{"class":581}," audit.outcome, ",[567,1400,1401],{"class":649},"bin",[567,1403,1404],{"class":581},"(_time, ",[567,1406,1407],{"class":708},"1h",[567,1409,1410],{"class":581},")\n",[557,1412,1415],{"className":1345,"code":1413,"filename":1414,"language":1348,"meta":563,"style":563},"['audit']\n| where audit.outcome == \"denied\"\n| summarize count() by audit.actor.id, audit.action\n| order by count_ desc\n","Output — denials by actor",[536,1416,1417,1429,1445,1458],{"__ignoreMap":563},[567,1418,1419,1421,1423,1425,1427],{"class":569,"line":570},[567,1420,1355],{"class":581},[567,1422,656],{"class":577},[567,1424,780],{"class":600},[567,1426,656],{"class":577},[567,1428,1364],{"class":581},[567,1430,1431,1433,1435,1438,1440,1443],{"class":569,"line":607},[567,1432,1369],{"class":581},[567,1434,1372],{"class":708},[567,1436,1437],{"class":581}," audit.outcome == ",[567,1439,776],{"class":577},[567,1441,1442],{"class":600},"denied",[567,1444,1382],{"class":577},[567,1446,1447,1449,1451,1453,1455],{"class":569,"line":628},[567,1448,1369],{"class":581},[567,1450,1389],{"class":708},[567,1452,1392],{"class":649},[567,1454,1395],{"class":708},[567,1456,1457],{"class":581}," audit.actor.id, audit.action\n",[567,1459,1460,1462,1465,1467,1470],{"class":569,"line":635},[567,1461,1369],{"class":581},[567,1463,1464],{"class":708},"order",[567,1466,1395],{"class":708},[567,1468,1469],{"class":581}," count_ ",[567,1471,1472],{"class":708},"desc\n",[532,1474,1475],{},"Splitting datasets means the audit dataset can have a longer retention (7y), tighter access controls, and a separate billing line — without touching the rest of your pipeline.",[549,1477,1479],{"id":1478},"audit-logs-in-postgres","Audit logs in Postgres",[554,1481,1482,1735],{},[557,1483,1485],{"className":559,"code":1484,"filename":561,"language":562,"meta":563,"style":563},"import { auditOnly } from 'evlog'\nimport type { DrainContext } from 'evlog'\n\nconst postgresAudit = async (ctx: DrainContext) => {\n  await db.insert(auditEvents).values({\n    id: ctx.event.audit!.idempotencyKey,\n    timestamp: new Date(ctx.event.timestamp),\n    payload: ctx.event,\n  }).onConflictDoNothing()\n}\n\nnitro.hooks.hook('evlog:drain', auditOnly(postgresAudit, { await: true }))\n",[536,1486,1487,1505,1527,1531,1564,1594,1620,1650,1666,1682,1688,1693],{"__ignoreMap":563},[567,1488,1489,1491,1493,1495,1497,1499,1501,1503],{"class":569,"line":570},[567,1490,574],{"class":573},[567,1492,578],{"class":577},[567,1494,582],{"class":581},[567,1496,591],{"class":577},[567,1498,594],{"class":573},[567,1500,597],{"class":577},[567,1502,601],{"class":600},[567,1504,604],{"class":577},[567,1506,1507,1509,1512,1514,1517,1519,1521,1523,1525],{"class":569,"line":607},[567,1508,574],{"class":573},[567,1510,1511],{"class":573}," type",[567,1513,578],{"class":577},[567,1515,1516],{"class":581}," DrainContext",[567,1518,591],{"class":577},[567,1520,594],{"class":573},[567,1522,597],{"class":577},[567,1524,601],{"class":600},[567,1526,604],{"class":577},[567,1528,1529],{"class":569,"line":628},[567,1530,632],{"emptyLinePlaceholder":631},[567,1532,1533,1536,1539,1542,1545,1548,1552,1554,1556,1558,1561],{"class":569,"line":635},[567,1534,1535],{"class":779},"const",[567,1537,1538],{"class":581}," postgresAudit ",[567,1540,1541],{"class":577},"=",[567,1543,1544],{"class":779}," async",[567,1546,1547],{"class":577}," (",[567,1549,1551],{"class":1550},"sHdIc","ctx",[567,1553,691],{"class":577},[567,1555,1516],{"class":790},[567,1557,714],{"class":577},[567,1559,1560],{"class":779}," =>",[567,1562,1563],{"class":577}," {\n",[567,1565,1566,1569,1572,1574,1577,1579,1582,1584,1586,1589,1591],{"class":569,"line":671},[567,1567,1568],{"class":573},"  await",[567,1570,1571],{"class":581}," db",[567,1573,641],{"class":577},[567,1575,1576],{"class":649},"insert",[567,1578,653],{"class":687},[567,1580,1581],{"class":581},"auditEvents",[567,1583,714],{"class":687},[567,1585,641],{"class":577},[567,1587,1588],{"class":649},"values",[567,1590,653],{"class":687},[567,1592,1593],{"class":577},"{\n",[567,1595,1596,1599,1601,1604,1606,1609,1611,1613,1616,1618],{"class":569,"line":740},[567,1597,1598],{"class":687},"    id",[567,1600,691],{"class":577},[567,1602,1603],{"class":581}," ctx",[567,1605,641],{"class":577},[567,1607,1608],{"class":581},"event",[567,1610,641],{"class":577},[567,1612,780],{"class":581},[567,1614,1615],{"class":577},"!.",[567,1617,930],{"class":581},[567,1619,737],{"class":577},[567,1621,1622,1625,1627,1630,1633,1635,1637,1639,1641,1643,1646,1648],{"class":569,"line":758},[567,1623,1624],{"class":687},"    timestamp",[567,1626,691],{"class":577},[567,1628,1629],{"class":577}," new",[567,1631,1632],{"class":649}," Date",[567,1634,653],{"class":687},[567,1636,1551],{"class":581},[567,1638,641],{"class":577},[567,1640,1608],{"class":581},[567,1642,641],{"class":577},[567,1644,1645],{"class":581},"timestamp",[567,1647,714],{"class":687},[567,1649,737],{"class":577},[567,1651,1653,1656,1658,1660,1662,1664],{"class":569,"line":1652},8,[567,1654,1655],{"class":687},"    payload",[567,1657,691],{"class":577},[567,1659,1603],{"class":581},[567,1661,641],{"class":577},[567,1663,1608],{"class":581},[567,1665,737],{"class":577},[567,1667,1669,1672,1674,1676,1679],{"class":569,"line":1668},9,[567,1670,1671],{"class":577},"  }",[567,1673,714],{"class":687},[567,1675,641],{"class":577},[567,1677,1678],{"class":649},"onConflictDoNothing",[567,1680,1681],{"class":687},"()\n",[567,1683,1685],{"class":569,"line":1684},10,[567,1686,1687],{"class":577},"}\n",[567,1689,1691],{"class":569,"line":1690},11,[567,1692,632],{"emptyLinePlaceholder":631},[567,1694,1696,1698,1700,1702,1704,1706,1708,1710,1712,1714,1716,1718,1721,1723,1725,1727,1729,1731,1733],{"class":569,"line":1695},12,[567,1697,638],{"class":581},[567,1699,641],{"class":577},[567,1701,644],{"class":581},[567,1703,641],{"class":577},[567,1705,650],{"class":649},[567,1707,653],{"class":581},[567,1709,656],{"class":577},[567,1711,659],{"class":600},[567,1713,656],{"class":577},[567,1715,585],{"class":577},[567,1717,582],{"class":649},[567,1719,1720],{"class":581},"(postgresAudit",[567,1722,585],{"class":577},[567,1724,578],{"class":577},[567,1726,746],{"class":687},[567,1728,691],{"class":577},[567,1730,752],{"class":751},[567,1732,591],{"class":577},[567,1734,761],{"class":581},[557,1736,1741],{"className":1737,"code":1738,"filename":1739,"language":1740,"meta":563,"style":563},"language-sql shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","SELECT id, timestamp, payload->'audit'->>'action' AS action,\n       payload->'audit'->>'outcome' AS outcome\nFROM audit_events\nWHERE id = 'ak_8f3c4b2a1e5d6f7c';\n\n--          id          |       timestamp       |     action      | outcome\n-- ---------------------+-----------------------+-----------------+---------\n--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n","Output — audit_events row","sql",[536,1742,1743,1782,1808,1816,1835,1839,1845,1850],{"__ignoreMap":563},[567,1744,1745,1748,1751,1753,1756,1759,1761,1763,1765,1768,1770,1772,1774,1777,1780],{"class":569,"line":570},[567,1746,1747],{"class":708},"SELECT",[567,1749,1750],{"class":581}," id, ",[567,1752,1645],{"class":779},[567,1754,1755],{"class":581},", payload",[567,1757,1758],{"class":577},"->",[567,1760,656],{"class":577},[567,1762,780],{"class":600},[567,1764,656],{"class":577},[567,1766,1767],{"class":577},"->>",[567,1769,656],{"class":577},[567,1771,791],{"class":600},[567,1773,656],{"class":577},[567,1775,1776],{"class":708}," AS",[567,1778,1779],{"class":708}," action",[567,1781,737],{"class":581},[567,1783,1784,1787,1789,1791,1793,1795,1797,1799,1801,1803,1805],{"class":569,"line":607},[567,1785,1786],{"class":581},"       payload",[567,1788,1758],{"class":577},[567,1790,656],{"class":577},[567,1792,780],{"class":600},[567,1794,656],{"class":577},[567,1796,1767],{"class":577},[567,1798,656],{"class":577},[567,1800,898],{"class":600},[567,1802,656],{"class":577},[567,1804,1776],{"class":708},[567,1806,1807],{"class":581}," outcome\n",[567,1809,1810,1813],{"class":569,"line":628},[567,1811,1812],{"class":708},"FROM",[567,1814,1815],{"class":581}," audit_events\n",[567,1817,1818,1821,1824,1826,1828,1830,1832],{"class":569,"line":635},[567,1819,1820],{"class":708},"WHERE",[567,1822,1823],{"class":581}," id ",[567,1825,1541],{"class":577},[567,1827,597],{"class":577},[567,1829,939],{"class":600},[567,1831,656],{"class":577},[567,1833,1834],{"class":581},";\n",[567,1836,1837],{"class":569,"line":671},[567,1838,632],{"emptyLinePlaceholder":631},[567,1840,1841],{"class":569,"line":740},[567,1842,1844],{"class":1843},"sHwdD","--          id          |       timestamp       |     action      | outcome\n",[567,1846,1847],{"class":569,"line":758},[567,1848,1849],{"class":1843},"-- ---------------------+-----------------------+-----------------+---------\n",[567,1851,1852],{"class":569,"line":1652},[567,1853,1854],{"class":1843},"--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n",[532,1856,1857,1858,1860,1861,1864],{},"The deterministic ",[536,1859,930],{}," makes retries safe — duplicate inserts collapse via ",[536,1862,1863],{},"ON CONFLICT DO NOTHING",". Without it, a transient network blip during a retry would create a duplicate audit row, which is exactly what you don't want.",[549,1866,1868],{"id":1867},"testing-audits","Testing audits",[532,1870,1871,1874,1875,539,1878,1881,1882,691],{},[536,1872,1873],{},"mockAudit()"," captures every audit event on emit — from standalone ",[536,1876,1877],{},"audit()",[536,1879,1880],{},"log.audit()",", and ",[536,1883,1884],{},"log.set({ audit })",[557,1886,1888],{"className":559,"code":1887,"language":562,"meta":563,"style":563},"import { mockAudit } from 'evlog'\n\nit('refunds the invoice and records an audit', async () => {\n  const captured = mockAudit()\n\n  await refundInvoice({ id: 'inv_889' }, { actor: { type: 'user', id: 'u1' } })\n\n  captured.assertAudit({\n    action: 'invoice.refund',\n    target: { type: 'invoice', id: 'inv_889' },\n    outcome: 'success',\n  })\n\n  captured.restore()\n})\n",[536,1889,1890,1909,1913,1938,1953,1957,2020,2024,2038,2053,2086,2101,2107,2112,2124],{"__ignoreMap":563},[567,1891,1892,1894,1896,1899,1901,1903,1905,1907],{"class":569,"line":570},[567,1893,574],{"class":573},[567,1895,578],{"class":577},[567,1897,1898],{"class":581}," mockAudit",[567,1900,591],{"class":577},[567,1902,594],{"class":573},[567,1904,597],{"class":577},[567,1906,601],{"class":600},[567,1908,604],{"class":577},[567,1910,1911],{"class":569,"line":607},[567,1912,632],{"emptyLinePlaceholder":631},[567,1914,1915,1918,1920,1922,1925,1927,1929,1931,1934,1936],{"class":569,"line":628},[567,1916,1917],{"class":649},"it",[567,1919,653],{"class":581},[567,1921,656],{"class":577},[567,1923,1924],{"class":600},"refunds the invoice and records an audit",[567,1926,656],{"class":577},[567,1928,585],{"class":577},[567,1930,1544],{"class":779},[567,1932,1933],{"class":577}," ()",[567,1935,1560],{"class":779},[567,1937,1563],{"class":577},[567,1939,1940,1943,1946,1949,1951],{"class":569,"line":635},[567,1941,1942],{"class":779},"  const",[567,1944,1945],{"class":581}," captured",[567,1947,1948],{"class":577}," =",[567,1950,1898],{"class":649},[567,1952,1681],{"class":687},[567,1954,1955],{"class":569,"line":671},[567,1956,632],{"emptyLinePlaceholder":631},[567,1958,1959,1961,1964,1966,1968,1971,1973,1975,1977,1979,1982,1984,1987,1989,1991,1993,1995,1997,1999,2001,2003,2005,2007,2009,2012,2014,2016,2018],{"class":569,"line":740},[567,1960,1568],{"class":573},[567,1962,1963],{"class":649}," refundInvoice",[567,1965,653],{"class":687},[567,1967,684],{"class":577},[567,1969,1970],{"class":687}," id",[567,1972,691],{"class":577},[567,1974,597],{"class":577},[567,1976,889],{"class":600},[567,1978,656],{"class":577},[567,1980,1981],{"class":577}," },",[567,1983,578],{"class":577},[567,1985,1986],{"class":687}," actor",[567,1988,691],{"class":577},[567,1990,578],{"class":577},[567,1992,1511],{"class":687},[567,1994,691],{"class":577},[567,1996,597],{"class":577},[567,1998,827],{"class":600},[567,2000,656],{"class":577},[567,2002,585],{"class":577},[567,2004,1970],{"class":687},[567,2006,691],{"class":577},[567,2008,597],{"class":577},[567,2010,2011],{"class":600},"u1",[567,2013,656],{"class":577},[567,2015,591],{"class":577},[567,2017,591],{"class":577},[567,2019,1410],{"class":687},[567,2021,2022],{"class":569,"line":758},[567,2023,632],{"emptyLinePlaceholder":631},[567,2025,2026,2029,2031,2034,2036],{"class":569,"line":1652},[567,2027,2028],{"class":581},"  captured",[567,2030,641],{"class":577},[567,2032,2033],{"class":649},"assertAudit",[567,2035,653],{"class":687},[567,2037,1593],{"class":577},[567,2039,2040,2043,2045,2047,2049,2051],{"class":569,"line":1668},[567,2041,2042],{"class":687},"    action",[567,2044,691],{"class":577},[567,2046,597],{"class":577},[567,2048,800],{"class":600},[567,2050,656],{"class":577},[567,2052,737],{"class":577},[567,2054,2055,2058,2060,2062,2064,2066,2068,2070,2072,2074,2076,2078,2080,2082,2084],{"class":569,"line":1684},[567,2056,2057],{"class":687},"    target",[567,2059,691],{"class":577},[567,2061,578],{"class":577},[567,2063,1511],{"class":687},[567,2065,691],{"class":577},[567,2067,597],{"class":577},[567,2069,872],{"class":600},[567,2071,656],{"class":577},[567,2073,585],{"class":577},[567,2075,1970],{"class":687},[567,2077,691],{"class":577},[567,2079,597],{"class":577},[567,2081,889],{"class":600},[567,2083,656],{"class":577},[567,2085,755],{"class":577},[567,2087,2088,2091,2093,2095,2097,2099],{"class":569,"line":1690},[567,2089,2090],{"class":687},"    outcome",[567,2092,691],{"class":577},[567,2094,597],{"class":577},[567,2096,907],{"class":600},[567,2098,656],{"class":577},[567,2100,737],{"class":577},[567,2102,2103,2105],{"class":569,"line":1695},[567,2104,1671],{"class":577},[567,2106,1410],{"class":687},[567,2108,2110],{"class":569,"line":2109},13,[567,2111,632],{"emptyLinePlaceholder":631},[567,2113,2115,2117,2119,2122],{"class":569,"line":2114},14,[567,2116,2028],{"class":581},[567,2118,641],{"class":577},[567,2120,2121],{"class":649},"restore",[567,2123,1681],{"class":687},[567,2125,2127,2129],{"class":569,"line":2126},15,[567,2128,1334],{"class":577},[567,2130,1410],{"class":581},[532,2132,2133,2134,2137,2138,2141,2142,641],{},"Prefer ",[536,2135,2136],{},"assertAudit()"," when a missing audit should fail the test with a readable message. Use ",[536,2139,2140],{},"toIncludeAuditOf()"," when you need a boolean inside ",[536,2143,2144],{},"expect(...)",[532,2146,2147,2148,2151,2152,2155],{},"Always call ",[536,2149,2150],{},"captured.restore()"," in an ",[536,2153,2154],{},"afterEach"," (or wrap with a fixture) so a failing assertion never leaks into the next test.",[549,2157,2159],{"id":2158},"api-reference","API Reference",[2161,2162,2163,2179],"table",{},[2164,2165,2166],"thead",{},[2167,2168,2169,2173,2176],"tr",{},[2170,2171,2172],"th",{},"Symbol",[2170,2174,2175],{},"Kind",[2170,2177,2178],{},"Notes",[2180,2181,2182,2195,2208,2220,2236,2248,2261,2274,2290,2307,2320,2335,2347],"tbody",{},[2167,2183,2184,2190,2192],{},[2185,2186,2187],"td",{},[536,2188,2189],{},"AuditFields",[2185,2191,818],{},[2185,2193,2194],{},"Reserved field on the wide event",[2167,2196,2197,2202,2205],{},[2185,2198,2199],{},[536,2200,2201],{},"defineAuditAction(name, opts?)",[2185,2203,2204],{},"factory",[2185,2206,2207],{},"Typed action registry, infers target shape",[2167,2209,2210,2215,2217],{},[2185,2211,2212],{},[536,2213,2214],{},"defineAuditCatalog(prefix, map)",[2185,2216,2204],{},[2185,2218,2219],{},"Bundle of typed audit actions sharing a prefix",[2167,2221,2222,2227,2230],{},[2185,2223,2224],{},[536,2225,2226],{},"log.audit(fields)",[2185,2228,2229],{},"method",[2185,2231,2232,2233,2235],{},"Sugar over ",[536,2234,1884],{}," + force-keep",[2167,2237,2238,2243,2245],{},[2185,2239,2240],{},[536,2241,2242],{},"log.audit.deny(reason, fields)",[2185,2244,2229],{},[2185,2246,2247],{},"Records a denied action",[2167,2249,2250,2255,2258],{},[2185,2251,2252],{},[536,2253,2254],{},"audit(fields)",[2185,2256,2257],{},"function",[2185,2259,2260],{},"Standalone for scripts \u002F jobs",[2167,2262,2263,2268,2271],{},[2185,2264,2265],{},[536,2266,2267],{},"withAudit({ action, target })(fn)",[2185,2269,2270],{},"wrapper",[2185,2272,2273],{},"Auto-emit success \u002F failure \u002F denied",[2167,2275,2276,2281,2284],{},[2185,2277,2278],{},[536,2279,2280],{},"auditDiff(before, after)",[2185,2282,2283],{},"helper",[2185,2285,2286,2287],{},"Redact-aware JSON Patch for ",[536,2288,2289],{},"changes",[2167,2291,2292,2296,2299],{},[2185,2293,2294],{},[536,2295,1873],{},[2185,2297,2298],{},"test util",[2185,2300,2301,2302,2304,2305],{},"Capture audits on emit; ",[536,2303,2136],{}," or ",[536,2306,2140],{},[2167,2308,2309,2314,2317],{},[2185,2310,2311],{},[536,2312,2313],{},"auditEnricher(opts?)",[2185,2315,2316],{},"enricher",[2185,2318,2319],{},"Auto-fill request \u002F runtime \u002F tenant context",[2167,2321,2322,2327,2329],{},[2185,2323,2324],{},[536,2325,2326],{},"auditOnly(drain, { await? })",[2185,2328,2270],{},[2185,2330,2331,2332,2334],{},"Routes only events with an ",[536,2333,780],{}," field",[2167,2336,2337,2342,2344],{},[2185,2338,2339],{},[536,2340,2341],{},"signed(drain, opts)",[2185,2343,2270],{},[2185,2345,2346],{},"Generic integrity wrapper (hmac \u002F hash-chain)",[2167,2348,2349,2354,2357],{},[2185,2350,2351],{},[536,2352,2353],{},"auditRedactPreset",[2185,2355,2356],{},"config",[2185,2358,2359],{},"Strict PII for audit events",[532,2361,2362,2363,2365],{},"Everything ships from the main ",[536,2364,601],{}," entrypoint.",[2367,2368,2369],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}",{"title":563,"searchDepth":607,"depth":607,"links":2371},[2372,2373,2374,2375,2376],{"id":551,"depth":607,"text":552},{"id":1172,"depth":607,"text":1173},{"id":1478,"depth":607,"text":1479},{"id":1867,"depth":607,"text":1868},{"id":2158,"depth":607,"text":2159},"File system, Axiom, and Postgres recipes for audit logs, plus mockAudit for tests and the full API reference.","md",[2380,2383],{"label":402,"icon":379,"to":403,"color":2381,"variant":2382},"neutral","subtle",{"label":138,"icon":136,"to":143,"color":2381,"variant":2382},{},{"title":406,"icon":79},{"title":527,"description":2377},"d4tHcUb1EpoUIrMkf-DJ-DPvE575KpxoUq7BH9zzato",[2389,2391],{"title":402,"path":403,"stem":404,"description":2390,"icon":379,"children":-1},"Integrity, redact presets, GDPR vs append-only, retention windows, and the most common pitfalls when shipping audit logs to production.",{"title":36,"path":414,"stem":415,"description":2392,"icon":39,"children":-1},"Wide-event telemetry for CLIs and automation — evlog's one-event-per-run model for tools on user machines, with privacy-safe flags, consent, outbox, and auto-generated disclosure.",1785673273301]