[{"data":1,"prerenderedAt":2406},["ShallowReactive",2],{"navigation_docs":3,"-use-cases-audit-recipes":538,"-use-cases-audit-recipes-surround":2401},[4,30,80,128,308,440,499],{"title":5,"path":6,"stem":7,"children":8,"page":29},"Start","\u002Fstart","1.start",[9,14,19,24],{"title":10,"path":11,"stem":12,"icon":13},"Introduction","\u002Fstart\u002Fintroduction","1.start\u002F1.introduction","i-lucide-info",{"title":15,"path":16,"stem":17,"icon":18},"Why start with evlog","\u002Fstart\u002Fwhy-evlog","1.start\u002F2.why-evlog","i-lucide-rocket",{"title":20,"path":21,"stem":22,"icon":23},"Installation","\u002Fstart\u002Finstallation","1.start\u002F3.installation","i-lucide-download",{"title":25,"path":26,"stem":27,"icon":28},"Quick Start","\u002Fstart\u002Fquick-start","1.start\u002F4.quick-start","i-lucide-zap",false,{"title":31,"path":32,"stem":33,"children":34,"page":29},"Learn","\u002Flearn","2.learn",[35,40,45,50,55,60,65,70,75],{"title":36,"path":37,"stem":38,"icon":39},"Overview","\u002Flearn\u002Foverview","2.learn\u002F0.overview","i-lucide-list",{"title":41,"path":42,"stem":43,"icon":44},"Simple Logging","\u002Flearn\u002Fsimple-logging","2.learn\u002F1.simple-logging","i-lucide-terminal",{"title":46,"path":47,"stem":48,"icon":49},"Wide Events","\u002Flearn\u002Fwide-events","2.learn\u002F2.wide-events","i-lucide-layers",{"title":51,"path":52,"stem":53,"icon":54},"Structured Errors","\u002Flearn\u002Fstructured-errors","2.learn\u002F3.structured-errors","i-lucide-shield-alert",{"title":56,"path":57,"stem":58,"icon":59},"Lifecycle","\u002Flearn\u002Flifecycle","2.learn\u002F4.lifecycle","i-lucide-arrow-right-left",{"title":61,"path":62,"stem":63,"icon":64},"Sampling","\u002Flearn\u002Fsampling","2.learn\u002F5.sampling","i-lucide-filter",{"title":66,"path":67,"stem":68,"icon":69},"Auto-Redaction","\u002Flearn\u002Fredaction","2.learn\u002F6.redaction","i-lucide-eye-off",{"title":71,"path":72,"stem":73,"icon":74},"Typed Fields","\u002Flearn\u002Ftyped-fields","2.learn\u002F7.typed-fields","i-simple-icons-typescript",{"title":76,"path":77,"stem":78,"icon":79},"Catalogs","\u002Flearn\u002Fcatalogs","2.learn\u002F8.catalogs","i-lucide-book-open",{"title":81,"path":82,"stem":83,"children":84,"page":29},"CLI","\u002Fcli","3.cli",[85,88,93,98,103,108,113,118,123],{"title":36,"path":86,"stem":87,"icon":44},"\u002Fcli\u002Foverview","3.cli\u002F0.overview",{"title":89,"path":90,"stem":91,"icon":92},"init","\u002Fcli\u002Finit","3.cli\u002F1.init","i-lucide-wand-sparkles",{"title":94,"path":95,"stem":96,"icon":97},"map","\u002Fcli\u002Fmap","3.cli\u002F2.map","i-lucide-radar",{"title":99,"path":100,"stem":101,"icon":102},"Rules","\u002Fcli\u002Frules","3.cli\u002F3.rules","i-lucide-list-checks",{"title":104,"path":105,"stem":106,"icon":107},"Scoring","\u002Fcli\u002Fscoring","3.cli\u002F4.scoring","i-lucide-gauge",{"title":109,"path":110,"stem":111,"icon":112},"CI","\u002Fcli\u002Fci","3.cli\u002F5.ci","i-lucide-git-pull-request",{"title":114,"path":115,"stem":116,"icon":117},"doctor","\u002Fcli\u002Fdoctor","3.cli\u002F6.doctor","i-lucide-stethoscope",{"title":119,"path":120,"stem":121,"icon":122},"telemetry","\u002Fcli\u002Ftelemetry","3.cli\u002F7.telemetry","i-lucide-bar-chart-3",{"title":124,"path":125,"stem":126,"icon":127},"agents","\u002Fcli\u002Fagents","3.cli\u002F8.agents","i-lucide-bot",{"title":129,"path":130,"stem":131,"children":132,"page":29},"Integrate","\u002Fintegrate","4.integrate",[133,137,220],{"title":36,"path":134,"stem":135,"icon":136},"\u002Fintegrate\u002Foverview","4.integrate\u002F0.overview","i-lucide-plug",{"title":138,"path":139,"stem":140,"children":141,"page":29},"Adapters","\u002Fintegrate\u002Fadapters","4.integrate\u002Fadapters",[142,145,175,200],{"title":36,"path":143,"stem":144,"icon":39},"\u002Fintegrate\u002Fadapters\u002Foverview","4.integrate\u002Fadapters\u002F01.overview",{"title":146,"path":147,"stem":148,"children":149,"page":29},"Cloud","\u002Fintegrate\u002Fadapters\u002Fcloud","4.integrate\u002Fadapters\u002Fcloud",[150,155,160,165,170],{"title":151,"path":152,"stem":153,"icon":154},"Axiom","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Faxiom","4.integrate\u002Fadapters\u002Fcloud\u002F01.axiom","i-custom-axiom",{"title":156,"path":157,"stem":158,"icon":159},"PostHog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fposthog","4.integrate\u002Fadapters\u002Fcloud\u002F02.posthog","i-simple-icons-posthog",{"title":161,"path":162,"stem":163,"icon":164},"Sentry","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fsentry","4.integrate\u002Fadapters\u002Fcloud\u002F03.sentry","i-simple-icons-sentry",{"title":166,"path":167,"stem":168,"icon":169},"Better Stack","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fbetter-stack","4.integrate\u002Fadapters\u002Fcloud\u002F04.better-stack","i-simple-icons-betterstack",{"title":171,"path":172,"stem":173,"icon":174},"Datadog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fdatadog","4.integrate\u002Fadapters\u002Fcloud\u002F05.datadog","i-simple-icons-datadog",{"title":176,"path":177,"stem":178,"children":179,"page":29},"Cloud or Self-Hosted","\u002Fintegrate\u002Fadapters\u002Fhybrid","4.integrate\u002Fadapters\u002Fhybrid",[180,185,190,195],{"title":181,"path":182,"stem":183,"icon":184},"Grafana Loki","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Floki","4.integrate\u002Fadapters\u002Fhybrid\u002F01.loki","i-simple-icons-grafana",{"title":186,"path":187,"stem":188,"icon":189},"ClickHouse","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Fclickhouse","4.integrate\u002Fadapters\u002Fhybrid\u002F02.clickhouse","i-simple-icons-clickhouse",{"title":191,"path":192,"stem":193,"icon":194},"OTLP","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Fotlp","4.integrate\u002Fadapters\u002Fhybrid\u002F03.otlp","i-simple-icons-opentelemetry",{"title":196,"path":197,"stem":198,"icon":199},"HyperDX","\u002Fintegrate\u002Fadapters\u002Fhybrid\u002Fhyperdx","4.integrate\u002Fadapters\u002Fhybrid\u002F04.hyperdx","i-custom-hyperdx",{"title":201,"path":202,"stem":203,"children":204,"page":29},"Self-Hosted","\u002Fintegrate\u002Fadapters\u002Fself-hosted","4.integrate\u002Fadapters\u002Fself-hosted",[205,210,215],{"title":206,"path":207,"stem":208,"icon":209},"File System","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Ffs","4.integrate\u002Fadapters\u002Fself-hosted\u002F01.fs","i-lucide-hard-drive",{"title":211,"path":212,"stem":213,"icon":214},"NuxtHub","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fnuxthub","4.integrate\u002Fadapters\u002Fself-hosted\u002F02.nuxthub","i-simple-icons-nuxt",{"title":216,"path":217,"stem":218,"icon":219},"Memory","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fmemory","4.integrate\u002Fadapters\u002Fself-hosted\u002F03.memory","i-lucide-cpu",{"title":221,"path":222,"stem":223,"children":224,"page":29},"Frameworks","\u002Fintegrate\u002Fframeworks","4.integrate\u002Fframeworks",[225,229,234,239,244,249,254,259,264,269,274,279,284,289,293,298,303],{"title":36,"path":226,"stem":227,"icon":228},"\u002Fintegrate\u002Fframeworks\u002Foverview","4.integrate\u002Fframeworks\u002F00.overview","i-lucide-layout-grid",{"title":230,"path":231,"stem":232,"icon":233},"Nuxt","\u002Fintegrate\u002Fframeworks\u002Fnuxt","4.integrate\u002Fframeworks\u002F01.nuxt","i-simple-icons-nuxtdotjs",{"title":235,"path":236,"stem":237,"icon":238},"Next.js","\u002Fintegrate\u002Fframeworks\u002Fnextjs","4.integrate\u002Fframeworks\u002F02.nextjs","i-simple-icons-nextdotjs",{"title":240,"path":241,"stem":242,"icon":243},"SvelteKit","\u002Fintegrate\u002Fframeworks\u002Fsveltekit","4.integrate\u002Fframeworks\u002F03.sveltekit","i-simple-icons-svelte",{"title":245,"path":246,"stem":247,"icon":248},"Nitro","\u002Fintegrate\u002Fframeworks\u002Fnitro","4.integrate\u002Fframeworks\u002F04.nitro","i-custom-nitro",{"title":250,"path":251,"stem":252,"icon":253},"TanStack Start","\u002Fintegrate\u002Fframeworks\u002Ftanstack-start","4.integrate\u002Fframeworks\u002F05.tanstack-start","i-custom-tanstack",{"title":255,"path":256,"stem":257,"icon":258},"NestJS","\u002Fintegrate\u002Fframeworks\u002Fnestjs","4.integrate\u002Fframeworks\u002F06.nestjs","i-simple-icons-nestjs",{"title":260,"path":261,"stem":262,"icon":263},"Express","\u002Fintegrate\u002Fframeworks\u002Fexpress","4.integrate\u002Fframeworks\u002F07.express","i-simple-icons-express",{"title":265,"path":266,"stem":267,"icon":268},"Hono","\u002Fintegrate\u002Fframeworks\u002Fhono","4.integrate\u002Fframeworks\u002F08.hono","i-simple-icons-hono",{"title":270,"path":271,"stem":272,"icon":273},"Fastify","\u002Fintegrate\u002Fframeworks\u002Ffastify","4.integrate\u002Fframeworks\u002F09.fastify","i-simple-icons-fastify",{"title":275,"path":276,"stem":277,"icon":278},"Elysia","\u002Fintegrate\u002Fframeworks\u002Felysia","4.integrate\u002Fframeworks\u002F10.elysia","i-custom-elysia",{"title":280,"path":281,"stem":282,"icon":283},"React Router","\u002Fintegrate\u002Fframeworks\u002Freact-router","4.integrate\u002Fframeworks\u002F11.react-router","i-custom-reactrouter",{"title":285,"path":286,"stem":287,"icon":288},"Cloudflare Workers","\u002Fintegrate\u002Fframeworks\u002Fcloudflare-workers","4.integrate\u002Fframeworks\u002F12.cloudflare-workers","i-simple-icons-cloudflare",{"title":290,"path":291,"stem":292,"icon":74},"Standalone","\u002Fintegrate\u002Fframeworks\u002Fstandalone","4.integrate\u002Fframeworks\u002F13.standalone",{"title":294,"path":295,"stem":296,"icon":297},"Astro","\u002Fintegrate\u002Fframeworks\u002Fastro","4.integrate\u002Fframeworks\u002F14.astro","i-simple-icons-astro",{"title":299,"path":300,"stem":301,"icon":302},"oRPC","\u002Fintegrate\u002Fframeworks\u002Forpc","4.integrate\u002Fframeworks\u002F15.orpc","i-lucide-network",{"title":304,"path":305,"stem":306,"icon":307},"AWS Lambda","\u002Fintegrate\u002Fframeworks\u002Faws-lambda","4.integrate\u002Fframeworks\u002F16.aws-lambda","i-custom-lambda",{"title":309,"path":310,"stem":311,"children":312,"page":29},"Use Cases","\u002Fuse-cases","5.use-cases",[313,316,321,350,377,409,430,435],{"title":36,"path":314,"stem":315,"icon":102},"\u002Fuse-cases\u002Foverview","5.use-cases\u002F0.overview",{"title":317,"path":318,"stem":319,"icon":320},"Client Logging","\u002Fuse-cases\u002Fclient-logging","5.use-cases\u002F1.client-logging","i-lucide-monitor",{"title":322,"icon":323,"path":324,"stem":325,"children":326,"page":29},"AI SDK","i-simple-icons-vercel","\u002Fuse-cases\u002Fai-sdk","5.use-cases\u002F2.ai-sdk",[327,330,335,340,345],{"title":36,"path":328,"stem":329,"icon":39},"\u002Fuse-cases\u002Fai-sdk\u002Foverview","5.use-cases\u002F2.ai-sdk\u002F01.overview",{"title":331,"path":332,"stem":333,"icon":334},"Usage","\u002Fuse-cases\u002Fai-sdk\u002Fusage","5.use-cases\u002F2.ai-sdk\u002F02.usage","i-lucide-code",{"title":336,"path":337,"stem":338,"icon":339},"Options","\u002Fuse-cases\u002Fai-sdk\u002Foptions","5.use-cases\u002F2.ai-sdk\u002F03.options","i-lucide-sliders",{"title":341,"path":342,"stem":343,"icon":344},"Metadata","\u002Fuse-cases\u002Fai-sdk\u002Fmetadata","5.use-cases\u002F2.ai-sdk\u002F04.metadata","i-lucide-database",{"title":346,"path":347,"stem":348,"icon":349},"Telemetry","\u002Fuse-cases\u002Fai-sdk\u002Ftelemetry","5.use-cases\u002F2.ai-sdk\u002F05.telemetry","i-lucide-activity",{"title":351,"icon":352,"path":353,"stem":354,"children":355,"page":29},"Better Auth","i-simple-icons-betterauth","\u002Fuse-cases\u002Fbetter-auth","5.use-cases\u002F3.better-auth",[356,359,364,369,373],{"title":36,"path":357,"stem":358,"icon":39},"\u002Fuse-cases\u002Fbetter-auth\u002Foverview","5.use-cases\u002F3.better-auth\u002F01.overview",{"title":360,"path":361,"stem":362,"icon":363},"Identify User","\u002Fuse-cases\u002Fbetter-auth\u002Fidentify-user","5.use-cases\u002F3.better-auth\u002F02.identify-user","i-lucide-user-check",{"title":365,"path":366,"stem":367,"icon":368},"Middleware","\u002Fuse-cases\u002Fbetter-auth\u002Fmiddleware","5.use-cases\u002F3.better-auth\u002F03.middleware","i-lucide-shield",{"title":370,"path":371,"stem":372,"icon":320},"Client Sync","\u002Fuse-cases\u002Fbetter-auth\u002Fclient-sync","5.use-cases\u002F3.better-auth\u002F04.client-sync",{"title":374,"path":375,"stem":376,"icon":107},"Performance","\u002Fuse-cases\u002Fbetter-auth\u002Fperformance","5.use-cases\u002F3.better-auth\u002F05.performance",{"title":378,"icon":379,"path":380,"stem":381,"children":382,"page":29},"Audit Logs","i-lucide-shield-check","\u002Fuse-cases\u002Faudit","5.use-cases\u002F4.audit",[383,386,391,396,401,405],{"title":36,"path":384,"stem":385,"icon":39},"\u002Fuse-cases\u002Faudit\u002Foverview","5.use-cases\u002F4.audit\u002F01.overview",{"title":387,"path":388,"stem":389,"icon":390},"Schema","\u002Fuse-cases\u002Faudit\u002Fschema","5.use-cases\u002F4.audit\u002F02.schema","i-lucide-file-text",{"title":392,"path":393,"stem":394,"icon":395},"Recording","\u002Fuse-cases\u002Faudit\u002Frecording","5.use-cases\u002F4.audit\u002F03.recording","i-lucide-pen-line",{"title":397,"path":398,"stem":399,"icon":400},"Drains","\u002Fuse-cases\u002Faudit\u002Fpipeline","5.use-cases\u002F4.audit\u002F04.pipeline","i-lucide-link",{"title":402,"path":403,"stem":404,"icon":379},"Compliance","\u002Fuse-cases\u002Faudit\u002Fcompliance","5.use-cases\u002F4.audit\u002F05.compliance",{"title":406,"path":407,"stem":408,"icon":79},"Recipes","\u002Fuse-cases\u002Faudit\u002Frecipes","5.use-cases\u002F4.audit\u002F06.recipes",{"title":346,"icon":107,"path":410,"stem":411,"children":412,"page":29},"\u002Fuse-cases\u002Ftelemetry","5.use-cases\u002F4.telemetry",[413,416,421,426],{"title":36,"path":414,"stem":415,"icon":39},"\u002Fuse-cases\u002Ftelemetry\u002Foverview","5.use-cases\u002F4.telemetry\u002F01.overview",{"title":417,"path":418,"stem":419,"icon":420},"Setup","\u002Fuse-cases\u002Ftelemetry\u002Fsetup","5.use-cases\u002F4.telemetry\u002F02.setup","i-lucide-wrench",{"title":422,"path":423,"stem":424,"icon":425},"Ingest","\u002Fuse-cases\u002Ftelemetry\u002Fingest","5.use-cases\u002F4.telemetry\u002F03.ingest","i-lucide-server",{"title":427,"path":428,"stem":429,"icon":79},"Reference","\u002Fuse-cases\u002Ftelemetry\u002Freference","5.use-cases\u002F4.telemetry\u002F04.reference",{"title":431,"path":432,"stem":433,"icon":434},"Enrichers","\u002Fuse-cases\u002Fenrichers","5.use-cases\u002F5.enrichers","i-lucide-sparkles",{"title":436,"path":437,"stem":438,"icon":439},"eve","\u002Fuse-cases\u002Feve","5.use-cases\u002F5.eve","i-custom-eve",{"title":441,"path":442,"stem":443,"children":444,"page":29},"Extend","\u002Fextend","6.extend",[445,449,454,459,463,468,472,476,480,484,489,494],{"title":36,"path":446,"stem":447,"icon":448},"\u002Fextend\u002Foverview","6.extend\u002F0.overview","i-lucide-blocks",{"title":450,"path":451,"stem":452,"icon":453},"Stream","\u002Fextend\u002Fstream","6.extend\u002F1.stream","i-lucide-radio-tower",{"title":455,"path":456,"stem":457,"icon":458},"Custom framework","\u002Fextend\u002Fcustom-framework","6.extend\u002F10.custom-framework","i-lucide-puzzle",{"title":460,"path":461,"stem":462,"icon":453},"Diagnostics channel","\u002Fextend\u002Fdiagnostics-channel","6.extend\u002F11.diagnostics-channel",{"title":464,"path":465,"stem":466,"icon":467},"FS reader","\u002Fextend\u002Ffs-reader","6.extend\u002F2.fs-reader","i-lucide-folder-search",{"title":406,"path":469,"stem":470,"icon":471},"\u002Fextend\u002Fconsumer-recipes","6.extend\u002F3.consumer-recipes","i-lucide-chef-hat",{"title":473,"path":474,"stem":475,"icon":448},"Plugins","\u002Fextend\u002Fplugins","6.extend\u002F4.plugins",{"title":477,"path":478,"stem":479,"icon":434},"Custom enrichers","\u002Fextend\u002Fcustom-enrichers","6.extend\u002F5.custom-enrichers",{"title":481,"path":482,"stem":483,"icon":64},"Tail sampling","\u002Fextend\u002Ftail-sampling","6.extend\u002F6.tail-sampling",{"title":485,"path":486,"stem":487,"icon":488},"Identity headers","\u002Fextend\u002Fidentity-headers","6.extend\u002F7.identity-headers","i-lucide-fingerprint",{"title":490,"path":491,"stem":492,"icon":493},"Custom drains","\u002Fextend\u002Fcustom-drains","6.extend\u002F8.custom-drains","i-lucide-share-2",{"title":495,"path":496,"stem":497,"icon":498},"Drain pipeline","\u002Fextend\u002Fdrain-pipeline","6.extend\u002F9.drain-pipeline","i-lucide-workflow",{"title":427,"path":500,"stem":501,"children":502,"page":29},"\u002Freference","7.reference",[503,507,512,515,520,524,529,533],{"title":36,"path":504,"stem":505,"icon":506},"\u002Freference\u002Foverview","7.reference\u002F0.overview","i-lucide-book-marked",{"title":508,"path":509,"stem":510,"icon":511},"Configuration","\u002Freference\u002Fconfiguration","7.reference\u002F1.configuration","i-lucide-settings",{"title":374,"path":513,"stem":514,"icon":107},"\u002Freference\u002Fperformance","7.reference\u002F2.performance",{"title":516,"path":517,"stem":518,"icon":519},"Vite Plugin","\u002Freference\u002Fvite-plugin","7.reference\u002F3.vite-plugin","i-custom-vite",{"title":521,"path":522,"stem":523,"icon":379},"Best Practices","\u002Freference\u002Fbest-practices","7.reference\u002F4.best-practices",{"title":525,"path":526,"stem":527,"icon":528},"vs Other Loggers","\u002Freference\u002Fvs-other-loggers","7.reference\u002F5.vs-other-loggers","i-lucide-scale",{"title":530,"path":531,"stem":532,"icon":434},"Agent Skills","\u002Freference\u002Fagent-skills","7.reference\u002F6.agent-skills",{"title":534,"path":535,"stem":536,"icon":537},"Cost","\u002Freference\u002Fcost","7.reference\u002F7.cost","i-lucide-receipt",{"id":539,"title":540,"body":541,"description":2390,"extension":2391,"links":2392,"meta":2397,"navigation":2398,"path":407,"seo":2399,"stem":408,"__hash__":2400},"docs\u002F5.use-cases\u002F4.audit\u002F06.recipes.md","Recipes & Reference",{"type":542,"value":543,"toc":2383},"minimark",[544,561,566,1174,1183,1187,1486,1489,1493,1868,1878,1882,1898,2144,2158,2169,2173,2373,2379],[545,546,547,548,552,553,556,557,560],"p",{},"Pick the recipe that matches your drain, drop it in, and you have a tamper-evident audit log. Each recipe composes the same primitives (",[549,550,551],"code",{},"auditOnly",", ",[549,554,555],{},"signed",", optional ",[549,558,559],{},"await: true",") over different drains.",[562,563,565],"h2",{"id":564},"audit-logs-on-disk","Audit logs on disk",[567,568,569,775],"code-group",{},[570,571,577],"pre",{"className":572,"code":573,"filename":574,"language":575,"meta":576,"style":576},"language-typescript shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { auditOnly, signed } from 'evlog'\nimport { createFsDrain } from 'evlog\u002Ffs'\n\nnitro.hooks.hook('evlog:drain', auditOnly(\n  signed(createFsDrain({ dir: '.audit', maxFiles: 30 }), { strategy: 'hash-chain' }),\n  { await: true },\n))\n","Input — server\u002Fplugins\u002Fevlog.ts","typescript","",[549,578,579,618,639,646,682,751,769],{"__ignoreMap":576},[580,581,584,588,592,596,599,602,605,608,611,615],"span",{"class":582,"line":583},"line",1,[580,585,587],{"class":586},"s7zQu","import",[580,589,591],{"class":590},"sMK4o"," {",[580,593,595],{"class":594},"sTEyZ"," auditOnly",[580,597,598],{"class":590},",",[580,600,601],{"class":594}," signed",[580,603,604],{"class":590}," }",[580,606,607],{"class":586}," from",[580,609,610],{"class":590}," '",[580,612,614],{"class":613},"sfazB","evlog",[580,616,617],{"class":590},"'\n",[580,619,621,623,625,628,630,632,634,637],{"class":582,"line":620},2,[580,622,587],{"class":586},[580,624,591],{"class":590},[580,626,627],{"class":594}," createFsDrain",[580,629,604],{"class":590},[580,631,607],{"class":586},[580,633,610],{"class":590},[580,635,636],{"class":613},"evlog\u002Ffs",[580,638,617],{"class":590},[580,640,642],{"class":582,"line":641},3,[580,643,645],{"emptyLinePlaceholder":644},true,"\n",[580,647,649,652,655,658,660,664,667,670,673,675,677,679],{"class":582,"line":648},4,[580,650,651],{"class":594},"nitro",[580,653,654],{"class":590},".",[580,656,657],{"class":594},"hooks",[580,659,654],{"class":590},[580,661,663],{"class":662},"s2Zo4","hook",[580,665,666],{"class":594},"(",[580,668,669],{"class":590},"'",[580,671,672],{"class":613},"evlog:drain",[580,674,669],{"class":590},[580,676,598],{"class":590},[580,678,595],{"class":662},[580,680,681],{"class":594},"(\n",[580,683,685,688,690,693,695,698,702,705,707,710,712,714,717,719,723,725,728,730,732,735,737,739,742,744,746,748],{"class":582,"line":684},5,[580,686,687],{"class":662},"  signed",[580,689,666],{"class":594},[580,691,692],{"class":662},"createFsDrain",[580,694,666],{"class":594},[580,696,697],{"class":590},"{",[580,699,701],{"class":700},"swJcz"," dir",[580,703,704],{"class":590},":",[580,706,610],{"class":590},[580,708,709],{"class":613},".audit",[580,711,669],{"class":590},[580,713,598],{"class":590},[580,715,716],{"class":700}," maxFiles",[580,718,704],{"class":590},[580,720,722],{"class":721},"sbssI"," 30",[580,724,604],{"class":590},[580,726,727],{"class":594},")",[580,729,598],{"class":590},[580,731,591],{"class":590},[580,733,734],{"class":700}," strategy",[580,736,704],{"class":590},[580,738,610],{"class":590},[580,740,741],{"class":613},"hash-chain",[580,743,669],{"class":590},[580,745,604],{"class":590},[580,747,727],{"class":594},[580,749,750],{"class":590},",\n",[580,752,754,757,760,762,766],{"class":582,"line":753},6,[580,755,756],{"class":590},"  {",[580,758,759],{"class":700}," await",[580,761,704],{"class":590},[580,763,765],{"class":764},"sfNiH"," true",[580,767,768],{"class":590}," },\n",[580,770,772],{"class":582,"line":771},7,[580,773,774],{"class":594},"))\n",[570,776,781],{"className":777,"code":778,"filename":779,"language":780,"meta":576,"style":576},"language-jsonl shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\"audit\":{\"action\":\"invoice.refund\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"invoice\",\"id\":\"inv_889\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_8f3c4b2a1e5d6f7c\",\"prevHash\":null,\"hash\":\"3f2c8e1a...\"}}\n{\"audit\":{\"action\":\"user.update\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"user\",\"id\":\"usr_99\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_5e7d8f9a0b1c2d3e\",\"prevHash\":\"3f2c8e1a...\",\"hash\":\"9a1b4d7c...\"}}\n","Output — .audit\u002F2026-04-24.ndjson","jsonl",[549,782,783,986],{"__ignoreMap":576},[580,784,785,787,790,794,796,799,801,805,807,809,811,814,816,818,820,823,825,827,829,832,834,836,838,841,843,845,847,850,852,854,856,859,861,864,866,869,871,873,875,877,879,881,883,886,888,890,892,894,896,898,900,903,905,907,909,912,914,916,918,921,923,925,927,930,932,934,937,939,941,944,946,948,950,953,955,957,959,962,964,967,969,972,974,976,978,981,983],{"class":582,"line":583},[580,786,697],{"class":590},[580,788,789],{"class":590},"\"",[580,791,793],{"class":792},"spNyl","audit",[580,795,789],{"class":590},[580,797,798],{"class":590},":{",[580,800,789],{"class":590},[580,802,804],{"class":803},"sBMFI","action",[580,806,789],{"class":590},[580,808,704],{"class":590},[580,810,789],{"class":590},[580,812,813],{"class":613},"invoice.refund",[580,815,789],{"class":590},[580,817,598],{"class":590},[580,819,789],{"class":590},[580,821,822],{"class":803},"actor",[580,824,789],{"class":590},[580,826,798],{"class":590},[580,828,789],{"class":590},[580,830,831],{"class":721},"type",[580,833,789],{"class":590},[580,835,704],{"class":590},[580,837,789],{"class":590},[580,839,840],{"class":613},"user",[580,842,789],{"class":590},[580,844,598],{"class":590},[580,846,789],{"class":590},[580,848,849],{"class":721},"id",[580,851,789],{"class":590},[580,853,704],{"class":590},[580,855,789],{"class":590},[580,857,858],{"class":613},"usr_42",[580,860,789],{"class":590},[580,862,863],{"class":590},"},",[580,865,789],{"class":590},[580,867,868],{"class":803},"target",[580,870,789],{"class":590},[580,872,798],{"class":590},[580,874,789],{"class":590},[580,876,831],{"class":721},[580,878,789],{"class":590},[580,880,704],{"class":590},[580,882,789],{"class":590},[580,884,885],{"class":613},"invoice",[580,887,789],{"class":590},[580,889,598],{"class":590},[580,891,789],{"class":590},[580,893,849],{"class":721},[580,895,789],{"class":590},[580,897,704],{"class":590},[580,899,789],{"class":590},[580,901,902],{"class":613},"inv_889",[580,904,789],{"class":590},[580,906,863],{"class":590},[580,908,789],{"class":590},[580,910,911],{"class":803},"outcome",[580,913,789],{"class":590},[580,915,704],{"class":590},[580,917,789],{"class":590},[580,919,920],{"class":613},"success",[580,922,789],{"class":590},[580,924,598],{"class":590},[580,926,789],{"class":590},[580,928,929],{"class":803},"version",[580,931,789],{"class":590},[580,933,704],{"class":590},[580,935,936],{"class":721},"1",[580,938,598],{"class":590},[580,940,789],{"class":590},[580,942,943],{"class":803},"idempotencyKey",[580,945,789],{"class":590},[580,947,704],{"class":590},[580,949,789],{"class":590},[580,951,952],{"class":613},"ak_8f3c4b2a1e5d6f7c",[580,954,789],{"class":590},[580,956,598],{"class":590},[580,958,789],{"class":590},[580,960,961],{"class":803},"prevHash",[580,963,789],{"class":590},[580,965,966],{"class":590},":null,",[580,968,789],{"class":590},[580,970,971],{"class":803},"hash",[580,973,789],{"class":590},[580,975,704],{"class":590},[580,977,789],{"class":590},[580,979,980],{"class":613},"3f2c8e1a...",[580,982,789],{"class":590},[580,984,985],{"class":590},"}}\n",[580,987,988,990,992,994,996,998,1000,1002,1004,1006,1008,1011,1013,1015,1017,1019,1021,1023,1025,1027,1029,1031,1033,1035,1037,1039,1041,1043,1045,1047,1049,1051,1053,1055,1057,1059,1061,1063,1065,1067,1069,1071,1073,1075,1077,1079,1081,1083,1085,1087,1089,1092,1094,1096,1098,1100,1102,1104,1106,1108,1110,1112,1114,1116,1118,1120,1122,1124,1126,1128,1130,1132,1134,1137,1139,1141,1143,1145,1147,1149,1151,1153,1155,1157,1159,1161,1163,1165,1167,1170,1172],{"class":582,"line":620},[580,989,697],{"class":590},[580,991,789],{"class":590},[580,993,793],{"class":792},[580,995,789],{"class":590},[580,997,798],{"class":590},[580,999,789],{"class":590},[580,1001,804],{"class":803},[580,1003,789],{"class":590},[580,1005,704],{"class":590},[580,1007,789],{"class":590},[580,1009,1010],{"class":613},"user.update",[580,1012,789],{"class":590},[580,1014,598],{"class":590},[580,1016,789],{"class":590},[580,1018,822],{"class":803},[580,1020,789],{"class":590},[580,1022,798],{"class":590},[580,1024,789],{"class":590},[580,1026,831],{"class":721},[580,1028,789],{"class":590},[580,1030,704],{"class":590},[580,1032,789],{"class":590},[580,1034,840],{"class":613},[580,1036,789],{"class":590},[580,1038,598],{"class":590},[580,1040,789],{"class":590},[580,1042,849],{"class":721},[580,1044,789],{"class":590},[580,1046,704],{"class":590},[580,1048,789],{"class":590},[580,1050,858],{"class":613},[580,1052,789],{"class":590},[580,1054,863],{"class":590},[580,1056,789],{"class":590},[580,1058,868],{"class":803},[580,1060,789],{"class":590},[580,1062,798],{"class":590},[580,1064,789],{"class":590},[580,1066,831],{"class":721},[580,1068,789],{"class":590},[580,1070,704],{"class":590},[580,1072,789],{"class":590},[580,1074,840],{"class":613},[580,1076,789],{"class":590},[580,1078,598],{"class":590},[580,1080,789],{"class":590},[580,1082,849],{"class":721},[580,1084,789],{"class":590},[580,1086,704],{"class":590},[580,1088,789],{"class":590},[580,1090,1091],{"class":613},"usr_99",[580,1093,789],{"class":590},[580,1095,863],{"class":590},[580,1097,789],{"class":590},[580,1099,911],{"class":803},[580,1101,789],{"class":590},[580,1103,704],{"class":590},[580,1105,789],{"class":590},[580,1107,920],{"class":613},[580,1109,789],{"class":590},[580,1111,598],{"class":590},[580,1113,789],{"class":590},[580,1115,929],{"class":803},[580,1117,789],{"class":590},[580,1119,704],{"class":590},[580,1121,936],{"class":721},[580,1123,598],{"class":590},[580,1125,789],{"class":590},[580,1127,943],{"class":803},[580,1129,789],{"class":590},[580,1131,704],{"class":590},[580,1133,789],{"class":590},[580,1135,1136],{"class":613},"ak_5e7d8f9a0b1c2d3e",[580,1138,789],{"class":590},[580,1140,598],{"class":590},[580,1142,789],{"class":590},[580,1144,961],{"class":803},[580,1146,789],{"class":590},[580,1148,704],{"class":590},[580,1150,789],{"class":590},[580,1152,980],{"class":613},[580,1154,789],{"class":590},[580,1156,598],{"class":590},[580,1158,789],{"class":590},[580,1160,971],{"class":803},[580,1162,789],{"class":590},[580,1164,704],{"class":590},[580,1166,789],{"class":590},[580,1168,1169],{"class":613},"9a1b4d7c...",[580,1171,789],{"class":590},[580,1173,985],{"class":590},[545,1175,1176,1177,1179,1180,1182],{},"Each line's ",[549,1178,961],{}," matches the previous line's ",[549,1181,971],{},". Tampering with any row breaks the chain forward of that point, and a verifier replays the hashes and reports the first mismatch.",[562,1184,1186],{"id":1185},"audit-logs-to-a-dedicated-axiom-dataset","Audit logs to a dedicated Axiom dataset",[567,1188,1189,1356,1424],{},[570,1190,1192],{"className":572,"code":1191,"filename":574,"language":575,"meta":576,"style":576},"import { auditOnly } from 'evlog'\nimport { createAxiomDrain } from 'evlog\u002Faxiom'\n\nnitro.hooks.hook('evlog:drain', createAxiomDrain({ dataset: 'logs' }))\nnitro.hooks.hook('evlog:drain', auditOnly(\n  createAxiomDrain({ dataset: 'audit', apiKey: process.env.AXIOM_AUDIT_API_KEY }),\n))\n",[549,1193,1194,1212,1232,1236,1280,1306,1352],{"__ignoreMap":576},[580,1195,1196,1198,1200,1202,1204,1206,1208,1210],{"class":582,"line":583},[580,1197,587],{"class":586},[580,1199,591],{"class":590},[580,1201,595],{"class":594},[580,1203,604],{"class":590},[580,1205,607],{"class":586},[580,1207,610],{"class":590},[580,1209,614],{"class":613},[580,1211,617],{"class":590},[580,1213,1214,1216,1218,1221,1223,1225,1227,1230],{"class":582,"line":620},[580,1215,587],{"class":586},[580,1217,591],{"class":590},[580,1219,1220],{"class":594}," createAxiomDrain",[580,1222,604],{"class":590},[580,1224,607],{"class":586},[580,1226,610],{"class":590},[580,1228,1229],{"class":613},"evlog\u002Faxiom",[580,1231,617],{"class":590},[580,1233,1234],{"class":582,"line":641},[580,1235,645],{"emptyLinePlaceholder":644},[580,1237,1238,1240,1242,1244,1246,1248,1250,1252,1254,1256,1258,1260,1262,1264,1267,1269,1271,1274,1276,1278],{"class":582,"line":648},[580,1239,651],{"class":594},[580,1241,654],{"class":590},[580,1243,657],{"class":594},[580,1245,654],{"class":590},[580,1247,663],{"class":662},[580,1249,666],{"class":594},[580,1251,669],{"class":590},[580,1253,672],{"class":613},[580,1255,669],{"class":590},[580,1257,598],{"class":590},[580,1259,1220],{"class":662},[580,1261,666],{"class":594},[580,1263,697],{"class":590},[580,1265,1266],{"class":700}," dataset",[580,1268,704],{"class":590},[580,1270,610],{"class":590},[580,1272,1273],{"class":613},"logs",[580,1275,669],{"class":590},[580,1277,604],{"class":590},[580,1279,774],{"class":594},[580,1281,1282,1284,1286,1288,1290,1292,1294,1296,1298,1300,1302,1304],{"class":582,"line":684},[580,1283,651],{"class":594},[580,1285,654],{"class":590},[580,1287,657],{"class":594},[580,1289,654],{"class":590},[580,1291,663],{"class":662},[580,1293,666],{"class":594},[580,1295,669],{"class":590},[580,1297,672],{"class":613},[580,1299,669],{"class":590},[580,1301,598],{"class":590},[580,1303,595],{"class":662},[580,1305,681],{"class":594},[580,1307,1308,1311,1313,1315,1317,1319,1321,1323,1325,1327,1330,1332,1335,1337,1340,1342,1345,1348,1350],{"class":582,"line":753},[580,1309,1310],{"class":662},"  createAxiomDrain",[580,1312,666],{"class":594},[580,1314,697],{"class":590},[580,1316,1266],{"class":700},[580,1318,704],{"class":590},[580,1320,610],{"class":590},[580,1322,793],{"class":613},[580,1324,669],{"class":590},[580,1326,598],{"class":590},[580,1328,1329],{"class":700}," apiKey",[580,1331,704],{"class":590},[580,1333,1334],{"class":594}," process",[580,1336,654],{"class":590},[580,1338,1339],{"class":594},"env",[580,1341,654],{"class":590},[580,1343,1344],{"class":594},"AXIOM_AUDIT_API_KEY ",[580,1346,1347],{"class":590},"}",[580,1349,727],{"class":594},[580,1351,750],{"class":590},[580,1353,1354],{"class":582,"line":771},[580,1355,774],{"class":594},[570,1357,1362],{"className":1358,"code":1359,"filename":1360,"language":1361,"meta":576,"style":576},"language-kusto shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","['audit']\n| where audit.action == \"invoice.refund\"\n| summarize count() by audit.outcome, bin(_time, 1h)\n","Output — Axiom query","kusto",[549,1363,1364,1378,1396],{"__ignoreMap":576},[580,1365,1366,1369,1371,1373,1375],{"class":582,"line":583},[580,1367,1368],{"class":594},"[",[580,1370,669],{"class":590},[580,1372,793],{"class":613},[580,1374,669],{"class":590},[580,1376,1377],{"class":594},"]\n",[580,1379,1380,1383,1386,1389,1391,1393],{"class":582,"line":620},[580,1381,1382],{"class":594},"| ",[580,1384,1385],{"class":721},"where",[580,1387,1388],{"class":594}," audit.action == ",[580,1390,789],{"class":590},[580,1392,813],{"class":613},[580,1394,1395],{"class":590},"\"\n",[580,1397,1398,1400,1403,1406,1409,1412,1415,1418,1421],{"class":582,"line":641},[580,1399,1382],{"class":594},[580,1401,1402],{"class":721},"summarize",[580,1404,1405],{"class":662}," count()",[580,1407,1408],{"class":721}," by",[580,1410,1411],{"class":594}," audit.outcome, ",[580,1413,1414],{"class":662},"bin",[580,1416,1417],{"class":594},"(_time, ",[580,1419,1420],{"class":721},"1h",[580,1422,1423],{"class":594},")\n",[570,1425,1428],{"className":1358,"code":1426,"filename":1427,"language":1361,"meta":576,"style":576},"['audit']\n| where audit.outcome == \"denied\"\n| summarize count() by audit.actor.id, audit.action\n| order by count_ desc\n","Output — denials by actor",[549,1429,1430,1442,1458,1471],{"__ignoreMap":576},[580,1431,1432,1434,1436,1438,1440],{"class":582,"line":583},[580,1433,1368],{"class":594},[580,1435,669],{"class":590},[580,1437,793],{"class":613},[580,1439,669],{"class":590},[580,1441,1377],{"class":594},[580,1443,1444,1446,1448,1451,1453,1456],{"class":582,"line":620},[580,1445,1382],{"class":594},[580,1447,1385],{"class":721},[580,1449,1450],{"class":594}," audit.outcome == ",[580,1452,789],{"class":590},[580,1454,1455],{"class":613},"denied",[580,1457,1395],{"class":590},[580,1459,1460,1462,1464,1466,1468],{"class":582,"line":641},[580,1461,1382],{"class":594},[580,1463,1402],{"class":721},[580,1465,1405],{"class":662},[580,1467,1408],{"class":721},[580,1469,1470],{"class":594}," audit.actor.id, audit.action\n",[580,1472,1473,1475,1478,1480,1483],{"class":582,"line":648},[580,1474,1382],{"class":594},[580,1476,1477],{"class":721},"order",[580,1479,1408],{"class":721},[580,1481,1482],{"class":594}," count_ ",[580,1484,1485],{"class":721},"desc\n",[545,1487,1488],{},"Splitting datasets means the audit dataset can have a longer retention (7y), tighter access controls, and a separate billing line, without touching the rest of your pipeline.",[562,1490,1492],{"id":1491},"audit-logs-in-postgres","Audit logs in Postgres",[567,1494,1495,1748],{},[570,1496,1498],{"className":572,"code":1497,"filename":574,"language":575,"meta":576,"style":576},"import { auditOnly } from 'evlog'\nimport type { DrainContext } from 'evlog'\n\nconst postgresAudit = async (ctx: DrainContext) => {\n  await db.insert(auditEvents).values({\n    id: ctx.event.audit!.idempotencyKey,\n    timestamp: new Date(ctx.event.timestamp),\n    payload: ctx.event,\n  }).onConflictDoNothing()\n}\n\nnitro.hooks.hook('evlog:drain', auditOnly(postgresAudit, { await: true }))\n",[549,1499,1500,1518,1540,1544,1577,1607,1633,1663,1679,1695,1701,1706],{"__ignoreMap":576},[580,1501,1502,1504,1506,1508,1510,1512,1514,1516],{"class":582,"line":583},[580,1503,587],{"class":586},[580,1505,591],{"class":590},[580,1507,595],{"class":594},[580,1509,604],{"class":590},[580,1511,607],{"class":586},[580,1513,610],{"class":590},[580,1515,614],{"class":613},[580,1517,617],{"class":590},[580,1519,1520,1522,1525,1527,1530,1532,1534,1536,1538],{"class":582,"line":620},[580,1521,587],{"class":586},[580,1523,1524],{"class":586}," type",[580,1526,591],{"class":590},[580,1528,1529],{"class":594}," DrainContext",[580,1531,604],{"class":590},[580,1533,607],{"class":586},[580,1535,610],{"class":590},[580,1537,614],{"class":613},[580,1539,617],{"class":590},[580,1541,1542],{"class":582,"line":641},[580,1543,645],{"emptyLinePlaceholder":644},[580,1545,1546,1549,1552,1555,1558,1561,1565,1567,1569,1571,1574],{"class":582,"line":648},[580,1547,1548],{"class":792},"const",[580,1550,1551],{"class":594}," postgresAudit ",[580,1553,1554],{"class":590},"=",[580,1556,1557],{"class":792}," async",[580,1559,1560],{"class":590}," (",[580,1562,1564],{"class":1563},"sHdIc","ctx",[580,1566,704],{"class":590},[580,1568,1529],{"class":803},[580,1570,727],{"class":590},[580,1572,1573],{"class":792}," =>",[580,1575,1576],{"class":590}," {\n",[580,1578,1579,1582,1585,1587,1590,1592,1595,1597,1599,1602,1604],{"class":582,"line":684},[580,1580,1581],{"class":586},"  await",[580,1583,1584],{"class":594}," db",[580,1586,654],{"class":590},[580,1588,1589],{"class":662},"insert",[580,1591,666],{"class":700},[580,1593,1594],{"class":594},"auditEvents",[580,1596,727],{"class":700},[580,1598,654],{"class":590},[580,1600,1601],{"class":662},"values",[580,1603,666],{"class":700},[580,1605,1606],{"class":590},"{\n",[580,1608,1609,1612,1614,1617,1619,1622,1624,1626,1629,1631],{"class":582,"line":753},[580,1610,1611],{"class":700},"    id",[580,1613,704],{"class":590},[580,1615,1616],{"class":594}," ctx",[580,1618,654],{"class":590},[580,1620,1621],{"class":594},"event",[580,1623,654],{"class":590},[580,1625,793],{"class":594},[580,1627,1628],{"class":590},"!.",[580,1630,943],{"class":594},[580,1632,750],{"class":590},[580,1634,1635,1638,1640,1643,1646,1648,1650,1652,1654,1656,1659,1661],{"class":582,"line":771},[580,1636,1637],{"class":700},"    timestamp",[580,1639,704],{"class":590},[580,1641,1642],{"class":590}," new",[580,1644,1645],{"class":662}," Date",[580,1647,666],{"class":700},[580,1649,1564],{"class":594},[580,1651,654],{"class":590},[580,1653,1621],{"class":594},[580,1655,654],{"class":590},[580,1657,1658],{"class":594},"timestamp",[580,1660,727],{"class":700},[580,1662,750],{"class":590},[580,1664,1666,1669,1671,1673,1675,1677],{"class":582,"line":1665},8,[580,1667,1668],{"class":700},"    payload",[580,1670,704],{"class":590},[580,1672,1616],{"class":594},[580,1674,654],{"class":590},[580,1676,1621],{"class":594},[580,1678,750],{"class":590},[580,1680,1682,1685,1687,1689,1692],{"class":582,"line":1681},9,[580,1683,1684],{"class":590},"  }",[580,1686,727],{"class":700},[580,1688,654],{"class":590},[580,1690,1691],{"class":662},"onConflictDoNothing",[580,1693,1694],{"class":700},"()\n",[580,1696,1698],{"class":582,"line":1697},10,[580,1699,1700],{"class":590},"}\n",[580,1702,1704],{"class":582,"line":1703},11,[580,1705,645],{"emptyLinePlaceholder":644},[580,1707,1709,1711,1713,1715,1717,1719,1721,1723,1725,1727,1729,1731,1734,1736,1738,1740,1742,1744,1746],{"class":582,"line":1708},12,[580,1710,651],{"class":594},[580,1712,654],{"class":590},[580,1714,657],{"class":594},[580,1716,654],{"class":590},[580,1718,663],{"class":662},[580,1720,666],{"class":594},[580,1722,669],{"class":590},[580,1724,672],{"class":613},[580,1726,669],{"class":590},[580,1728,598],{"class":590},[580,1730,595],{"class":662},[580,1732,1733],{"class":594},"(postgresAudit",[580,1735,598],{"class":590},[580,1737,591],{"class":590},[580,1739,759],{"class":700},[580,1741,704],{"class":590},[580,1743,765],{"class":764},[580,1745,604],{"class":590},[580,1747,774],{"class":594},[570,1749,1754],{"className":1750,"code":1751,"filename":1752,"language":1753,"meta":576,"style":576},"language-sql shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","SELECT id, timestamp, payload->'audit'->>'action' AS action,\n       payload->'audit'->>'outcome' AS outcome\nFROM audit_events\nWHERE id = 'ak_8f3c4b2a1e5d6f7c';\n\n--          id          |       timestamp       |     action      | outcome\n-- ---------------------+-----------------------+-----------------+---------\n--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n","Output — audit_events row","sql",[549,1755,1756,1795,1821,1829,1848,1852,1858,1863],{"__ignoreMap":576},[580,1757,1758,1761,1764,1766,1769,1772,1774,1776,1778,1781,1783,1785,1787,1790,1793],{"class":582,"line":583},[580,1759,1760],{"class":721},"SELECT",[580,1762,1763],{"class":594}," id, ",[580,1765,1658],{"class":792},[580,1767,1768],{"class":594},", payload",[580,1770,1771],{"class":590},"->",[580,1773,669],{"class":590},[580,1775,793],{"class":613},[580,1777,669],{"class":590},[580,1779,1780],{"class":590},"->>",[580,1782,669],{"class":590},[580,1784,804],{"class":613},[580,1786,669],{"class":590},[580,1788,1789],{"class":721}," AS",[580,1791,1792],{"class":721}," action",[580,1794,750],{"class":594},[580,1796,1797,1800,1802,1804,1806,1808,1810,1812,1814,1816,1818],{"class":582,"line":620},[580,1798,1799],{"class":594},"       payload",[580,1801,1771],{"class":590},[580,1803,669],{"class":590},[580,1805,793],{"class":613},[580,1807,669],{"class":590},[580,1809,1780],{"class":590},[580,1811,669],{"class":590},[580,1813,911],{"class":613},[580,1815,669],{"class":590},[580,1817,1789],{"class":721},[580,1819,1820],{"class":594}," outcome\n",[580,1822,1823,1826],{"class":582,"line":641},[580,1824,1825],{"class":721},"FROM",[580,1827,1828],{"class":594}," audit_events\n",[580,1830,1831,1834,1837,1839,1841,1843,1845],{"class":582,"line":648},[580,1832,1833],{"class":721},"WHERE",[580,1835,1836],{"class":594}," id ",[580,1838,1554],{"class":590},[580,1840,610],{"class":590},[580,1842,952],{"class":613},[580,1844,669],{"class":590},[580,1846,1847],{"class":594},";\n",[580,1849,1850],{"class":582,"line":684},[580,1851,645],{"emptyLinePlaceholder":644},[580,1853,1854],{"class":582,"line":753},[580,1855,1857],{"class":1856},"sHwdD","--          id          |       timestamp       |     action      | outcome\n",[580,1859,1860],{"class":582,"line":771},[580,1861,1862],{"class":1856},"-- ---------------------+-----------------------+-----------------+---------\n",[580,1864,1865],{"class":582,"line":1665},[580,1866,1867],{"class":1856},"--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n",[545,1869,1870,1871,1873,1874,1877],{},"The deterministic ",[549,1872,943],{}," makes retries safe: duplicate inserts collapse via ",[549,1875,1876],{},"ON CONFLICT DO NOTHING",". Without it, a transient network blip during a retry would create a duplicate audit row, which is exactly what you don't want.",[562,1879,1881],{"id":1880},"test-what-you-recorded","Test what you recorded",[545,1883,1884,1887,1888,552,1891,1894,1895,704],{},[549,1885,1886],{},"mockAudit()"," captures every audit event on emit, from standalone ",[549,1889,1890],{},"audit()",[549,1892,1893],{},"log.audit()",", and ",[549,1896,1897],{},"log.set({ audit })",[570,1899,1901],{"className":572,"code":1900,"language":575,"meta":576,"style":576},"import { mockAudit } from 'evlog'\n\nit('refunds the invoice and records an audit', async () => {\n  const captured = mockAudit()\n\n  await refundInvoice({ id: 'inv_889' }, { actor: { type: 'user', id: 'u1' } })\n\n  captured.assertAudit({\n    action: 'invoice.refund',\n    target: { type: 'invoice', id: 'inv_889' },\n    outcome: 'success',\n  })\n\n  captured.restore()\n})\n",[549,1902,1903,1922,1926,1951,1966,1970,2033,2037,2051,2066,2099,2114,2120,2125,2137],{"__ignoreMap":576},[580,1904,1905,1907,1909,1912,1914,1916,1918,1920],{"class":582,"line":583},[580,1906,587],{"class":586},[580,1908,591],{"class":590},[580,1910,1911],{"class":594}," mockAudit",[580,1913,604],{"class":590},[580,1915,607],{"class":586},[580,1917,610],{"class":590},[580,1919,614],{"class":613},[580,1921,617],{"class":590},[580,1923,1924],{"class":582,"line":620},[580,1925,645],{"emptyLinePlaceholder":644},[580,1927,1928,1931,1933,1935,1938,1940,1942,1944,1947,1949],{"class":582,"line":641},[580,1929,1930],{"class":662},"it",[580,1932,666],{"class":594},[580,1934,669],{"class":590},[580,1936,1937],{"class":613},"refunds the invoice and records an audit",[580,1939,669],{"class":590},[580,1941,598],{"class":590},[580,1943,1557],{"class":792},[580,1945,1946],{"class":590}," ()",[580,1948,1573],{"class":792},[580,1950,1576],{"class":590},[580,1952,1953,1956,1959,1962,1964],{"class":582,"line":648},[580,1954,1955],{"class":792},"  const",[580,1957,1958],{"class":594}," captured",[580,1960,1961],{"class":590}," =",[580,1963,1911],{"class":662},[580,1965,1694],{"class":700},[580,1967,1968],{"class":582,"line":684},[580,1969,645],{"emptyLinePlaceholder":644},[580,1971,1972,1974,1977,1979,1981,1984,1986,1988,1990,1992,1995,1997,2000,2002,2004,2006,2008,2010,2012,2014,2016,2018,2020,2022,2025,2027,2029,2031],{"class":582,"line":753},[580,1973,1581],{"class":586},[580,1975,1976],{"class":662}," refundInvoice",[580,1978,666],{"class":700},[580,1980,697],{"class":590},[580,1982,1983],{"class":700}," id",[580,1985,704],{"class":590},[580,1987,610],{"class":590},[580,1989,902],{"class":613},[580,1991,669],{"class":590},[580,1993,1994],{"class":590}," },",[580,1996,591],{"class":590},[580,1998,1999],{"class":700}," actor",[580,2001,704],{"class":590},[580,2003,591],{"class":590},[580,2005,1524],{"class":700},[580,2007,704],{"class":590},[580,2009,610],{"class":590},[580,2011,840],{"class":613},[580,2013,669],{"class":590},[580,2015,598],{"class":590},[580,2017,1983],{"class":700},[580,2019,704],{"class":590},[580,2021,610],{"class":590},[580,2023,2024],{"class":613},"u1",[580,2026,669],{"class":590},[580,2028,604],{"class":590},[580,2030,604],{"class":590},[580,2032,1423],{"class":700},[580,2034,2035],{"class":582,"line":771},[580,2036,645],{"emptyLinePlaceholder":644},[580,2038,2039,2042,2044,2047,2049],{"class":582,"line":1665},[580,2040,2041],{"class":594},"  captured",[580,2043,654],{"class":590},[580,2045,2046],{"class":662},"assertAudit",[580,2048,666],{"class":700},[580,2050,1606],{"class":590},[580,2052,2053,2056,2058,2060,2062,2064],{"class":582,"line":1681},[580,2054,2055],{"class":700},"    action",[580,2057,704],{"class":590},[580,2059,610],{"class":590},[580,2061,813],{"class":613},[580,2063,669],{"class":590},[580,2065,750],{"class":590},[580,2067,2068,2071,2073,2075,2077,2079,2081,2083,2085,2087,2089,2091,2093,2095,2097],{"class":582,"line":1697},[580,2069,2070],{"class":700},"    target",[580,2072,704],{"class":590},[580,2074,591],{"class":590},[580,2076,1524],{"class":700},[580,2078,704],{"class":590},[580,2080,610],{"class":590},[580,2082,885],{"class":613},[580,2084,669],{"class":590},[580,2086,598],{"class":590},[580,2088,1983],{"class":700},[580,2090,704],{"class":590},[580,2092,610],{"class":590},[580,2094,902],{"class":613},[580,2096,669],{"class":590},[580,2098,768],{"class":590},[580,2100,2101,2104,2106,2108,2110,2112],{"class":582,"line":1703},[580,2102,2103],{"class":700},"    outcome",[580,2105,704],{"class":590},[580,2107,610],{"class":590},[580,2109,920],{"class":613},[580,2111,669],{"class":590},[580,2113,750],{"class":590},[580,2115,2116,2118],{"class":582,"line":1708},[580,2117,1684],{"class":590},[580,2119,1423],{"class":700},[580,2121,2123],{"class":582,"line":2122},13,[580,2124,645],{"emptyLinePlaceholder":644},[580,2126,2128,2130,2132,2135],{"class":582,"line":2127},14,[580,2129,2041],{"class":594},[580,2131,654],{"class":590},[580,2133,2134],{"class":662},"restore",[580,2136,1694],{"class":700},[580,2138,2140,2142],{"class":582,"line":2139},15,[580,2141,1347],{"class":590},[580,2143,1423],{"class":594},[545,2145,2146,2147,2150,2151,2154,2155,654],{},"Prefer ",[549,2148,2149],{},"assertAudit()"," when a missing audit should fail the test with a readable message. Use ",[549,2152,2153],{},"toIncludeAuditOf()"," when you need a boolean inside ",[549,2156,2157],{},"expect(...)",[545,2159,2160,2161,2164,2165,2168],{},"Always call ",[549,2162,2163],{},"captured.restore()"," in an ",[549,2166,2167],{},"afterEach"," (or wrap with a fixture) so a failing assertion never leaks into the next test.",[562,2170,2172],{"id":2171},"every-audit-export","Every audit export",[2174,2175,2176,2192],"table",{},[2177,2178,2179],"thead",{},[2180,2181,2182,2186,2189],"tr",{},[2183,2184,2185],"th",{},"Symbol",[2183,2187,2188],{},"Kind",[2183,2190,2191],{},"Notes",[2193,2194,2195,2208,2221,2233,2249,2261,2274,2287,2303,2320,2333,2348,2360],"tbody",{},[2180,2196,2197,2203,2205],{},[2198,2199,2200],"td",{},[549,2201,2202],{},"AuditFields",[2198,2204,831],{},[2198,2206,2207],{},"Reserved field on the wide event",[2180,2209,2210,2215,2218],{},[2198,2211,2212],{},[549,2213,2214],{},"defineAuditAction(name, opts?)",[2198,2216,2217],{},"factory",[2198,2219,2220],{},"Typed action registry, infers target shape",[2180,2222,2223,2228,2230],{},[2198,2224,2225],{},[549,2226,2227],{},"defineAuditCatalog(prefix, map)",[2198,2229,2217],{},[2198,2231,2232],{},"Bundle of typed audit actions sharing a prefix",[2180,2234,2235,2240,2243],{},[2198,2236,2237],{},[549,2238,2239],{},"log.audit(fields)",[2198,2241,2242],{},"method",[2198,2244,2245,2246,2248],{},"Sugar over ",[549,2247,1897],{}," + force-keep",[2180,2250,2251,2256,2258],{},[2198,2252,2253],{},[549,2254,2255],{},"log.audit.deny(reason, fields)",[2198,2257,2242],{},[2198,2259,2260],{},"Records a denied action",[2180,2262,2263,2268,2271],{},[2198,2264,2265],{},[549,2266,2267],{},"audit(fields)",[2198,2269,2270],{},"function",[2198,2272,2273],{},"Standalone for scripts \u002F jobs",[2180,2275,2276,2281,2284],{},[2198,2277,2278],{},[549,2279,2280],{},"withAudit({ action, target })(fn)",[2198,2282,2283],{},"wrapper",[2198,2285,2286],{},"Auto-emit success \u002F failure \u002F denied",[2180,2288,2289,2294,2297],{},[2198,2290,2291],{},[549,2292,2293],{},"auditDiff(before, after)",[2198,2295,2296],{},"helper",[2198,2298,2299,2300],{},"Redact-aware JSON Patch for ",[549,2301,2302],{},"changes",[2180,2304,2305,2309,2312],{},[2198,2306,2307],{},[549,2308,1886],{},[2198,2310,2311],{},"test util",[2198,2313,2314,2315,2317,2318],{},"Capture audits on emit; ",[549,2316,2149],{}," or ",[549,2319,2153],{},[2180,2321,2322,2327,2330],{},[2198,2323,2324],{},[549,2325,2326],{},"auditEnricher(opts?)",[2198,2328,2329],{},"enricher",[2198,2331,2332],{},"Auto-fill request \u002F runtime \u002F tenant context",[2180,2334,2335,2340,2342],{},[2198,2336,2337],{},[549,2338,2339],{},"auditOnly(drain, { await? })",[2198,2341,2283],{},[2198,2343,2344,2345,2347],{},"Routes only events with an ",[549,2346,793],{}," field",[2180,2349,2350,2355,2357],{},[2198,2351,2352],{},[549,2353,2354],{},"signed(drain, opts)",[2198,2356,2283],{},[2198,2358,2359],{},"Generic integrity wrapper (hmac \u002F hash-chain)",[2180,2361,2362,2367,2370],{},[2198,2363,2364],{},[549,2365,2366],{},"auditRedactPreset",[2198,2368,2369],{},"config",[2198,2371,2372],{},"Strict PII for audit events",[545,2374,2375,2376,2378],{},"Everything ships from the main ",[549,2377,614],{}," entrypoint.",[2380,2381,2382],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}",{"title":576,"searchDepth":620,"depth":620,"links":2384},[2385,2386,2387,2388,2389],{"id":564,"depth":620,"text":565},{"id":1185,"depth":620,"text":1186},{"id":1491,"depth":620,"text":1492},{"id":1880,"depth":620,"text":1881},{"id":2171,"depth":620,"text":2172},"File system, Axiom, and Postgres recipes for audit logs, plus mockAudit for tests and the full API reference.","md",[2393,2396],{"label":402,"icon":379,"to":403,"color":2394,"variant":2395},"neutral","subtle",{"label":138,"icon":136,"to":143,"color":2394,"variant":2395},{},{"title":406,"icon":79},{"title":540,"description":2390},"_5RK4jKMdGZrkk5XjLN6rkbGLur3OTXTtCRkWokVX7w",[2402,2404],{"title":402,"path":403,"stem":404,"description":2403,"icon":379,"children":-1},"Integrity, redact presets, GDPR vs append-only, retention windows, and the most common pitfalls when shipping audit logs to production.",{"title":36,"path":414,"stem":415,"description":2405,"icon":39,"children":-1},"One event per run for CLIs and automation, with privacy-safe flags, consent, an outbox, and disclosure generated from the same config.",1786817430386]