[{"data":1,"prerenderedAt":2332},["ShallowReactive",2],{"navigation_docs":3,"-use-cases-audit-recipes":464,"-use-cases-audit-recipes-surround":2327},[4,30,80,245,379,434],{"title":5,"path":6,"stem":7,"children":8,"page":29},"Start","\u002Fstart","1.start",[9,14,19,24],{"title":10,"path":11,"stem":12,"icon":13},"Introduction","\u002Fstart\u002Fintroduction","1.start\u002F1.introduction","i-lucide-info",{"title":15,"path":16,"stem":17,"icon":18},"Why start with evlog","\u002Fstart\u002Fwhy-evlog","1.start\u002F2.why-evlog","i-lucide-rocket",{"title":20,"path":21,"stem":22,"icon":23},"Installation","\u002Fstart\u002Finstallation","1.start\u002F3.installation","i-lucide-download",{"title":25,"path":26,"stem":27,"icon":28},"Quick Start","\u002Fstart\u002Fquick-start","1.start\u002F4.quick-start","i-lucide-zap",false,{"title":31,"path":32,"stem":33,"children":34,"page":29},"Learn","\u002Flearn","2.learn",[35,40,45,50,55,60,65,70,75],{"title":36,"path":37,"stem":38,"icon":39},"Overview","\u002Flearn\u002Foverview","2.learn\u002F0.overview","i-lucide-list",{"title":41,"path":42,"stem":43,"icon":44},"Simple Logging","\u002Flearn\u002Fsimple-logging","2.learn\u002F1.simple-logging","i-lucide-terminal",{"title":46,"path":47,"stem":48,"icon":49},"Wide Events","\u002Flearn\u002Fwide-events","2.learn\u002F2.wide-events","i-lucide-layers",{"title":51,"path":52,"stem":53,"icon":54},"Structured Errors","\u002Flearn\u002Fstructured-errors","2.learn\u002F3.structured-errors","i-lucide-shield-alert",{"title":56,"path":57,"stem":58,"icon":59},"Lifecycle","\u002Flearn\u002Flifecycle","2.learn\u002F4.lifecycle","i-lucide-arrow-right-left",{"title":61,"path":62,"stem":63,"icon":64},"Sampling","\u002Flearn\u002Fsampling","2.learn\u002F5.sampling","i-lucide-filter",{"title":66,"path":67,"stem":68,"icon":69},"Auto-Redaction","\u002Flearn\u002Fredaction","2.learn\u002F6.redaction","i-lucide-eye-off",{"title":71,"path":72,"stem":73,"icon":74},"Typed Fields","\u002Flearn\u002Ftyped-fields","2.learn\u002F7.typed-fields","i-simple-icons-typescript",{"title":76,"path":77,"stem":78,"icon":79},"Catalogs","\u002Flearn\u002Fcatalogs","2.learn\u002F8.catalogs","i-lucide-book-open",{"title":81,"path":82,"stem":83,"children":84,"page":29},"Integrate","\u002Fintegrate","3.integrate",[85,89,157],{"title":36,"path":86,"stem":87,"icon":88},"\u002Fintegrate\u002Foverview","3.integrate\u002F0.overview","i-lucide-plug",{"title":90,"path":91,"stem":92,"children":93,"page":29},"Adapters","\u002Fintegrate\u002Fadapters","3.integrate\u002Fadapters",[94,97,137],{"title":36,"path":95,"stem":96,"icon":39},"\u002Fintegrate\u002Fadapters\u002Foverview","3.integrate\u002Fadapters\u002F01.overview",{"title":98,"path":99,"stem":100,"children":101,"page":29},"Cloud","\u002Fintegrate\u002Fadapters\u002Fcloud","3.integrate\u002Fadapters\u002Fcloud",[102,107,112,117,122,127,132],{"title":103,"path":104,"stem":105,"icon":106},"Axiom","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Faxiom","3.integrate\u002Fadapters\u002Fcloud\u002F01.axiom","i-custom-axiom",{"title":108,"path":109,"stem":110,"icon":111},"OTLP","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fotlp","3.integrate\u002Fadapters\u002Fcloud\u002F02.otlp","i-simple-icons-opentelemetry",{"title":113,"path":114,"stem":115,"icon":116},"PostHog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fposthog","3.integrate\u002Fadapters\u002Fcloud\u002F03.posthog","i-simple-icons-posthog",{"title":118,"path":119,"stem":120,"icon":121},"Sentry","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fsentry","3.integrate\u002Fadapters\u002Fcloud\u002F04.sentry","i-simple-icons-sentry",{"title":123,"path":124,"stem":125,"icon":126},"Better Stack","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fbetter-stack","3.integrate\u002Fadapters\u002Fcloud\u002F05.better-stack","i-simple-icons-betterstack",{"title":128,"path":129,"stem":130,"icon":131},"Datadog","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fdatadog","3.integrate\u002Fadapters\u002Fcloud\u002F06.datadog","i-simple-icons-datadog",{"title":133,"path":134,"stem":135,"icon":136},"HyperDX","\u002Fintegrate\u002Fadapters\u002Fcloud\u002Fhyperdx","3.integrate\u002Fadapters\u002Fcloud\u002F07.hyperdx","i-custom-hyperdx",{"title":138,"path":139,"stem":140,"children":141,"page":29},"Self-Hosted","\u002Fintegrate\u002Fadapters\u002Fself-hosted","3.integrate\u002Fadapters\u002Fself-hosted",[142,147,152],{"title":143,"path":144,"stem":145,"icon":146},"File System","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Ffs","3.integrate\u002Fadapters\u002Fself-hosted\u002F01.fs","i-lucide-hard-drive",{"title":148,"path":149,"stem":150,"icon":151},"NuxtHub","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fnuxthub","3.integrate\u002Fadapters\u002Fself-hosted\u002F02.nuxthub","i-simple-icons-nuxt",{"title":153,"path":154,"stem":155,"icon":156},"Memory","\u002Fintegrate\u002Fadapters\u002Fself-hosted\u002Fmemory","3.integrate\u002Fadapters\u002Fself-hosted\u002F03.memory","i-lucide-cpu",{"title":158,"path":159,"stem":160,"children":161,"page":29},"Frameworks","\u002Fintegrate\u002Fframeworks","3.integrate\u002Fframeworks",[162,166,171,176,181,186,191,196,201,206,211,216,221,226,230,235,240],{"title":36,"path":163,"stem":164,"icon":165},"\u002Fintegrate\u002Fframeworks\u002Foverview","3.integrate\u002Fframeworks\u002F00.overview","i-lucide-layout-grid",{"title":167,"path":168,"stem":169,"icon":170},"Nuxt","\u002Fintegrate\u002Fframeworks\u002Fnuxt","3.integrate\u002Fframeworks\u002F01.nuxt","i-simple-icons-nuxtdotjs",{"title":172,"path":173,"stem":174,"icon":175},"Next.js","\u002Fintegrate\u002Fframeworks\u002Fnextjs","3.integrate\u002Fframeworks\u002F02.nextjs","i-simple-icons-nextdotjs",{"title":177,"path":178,"stem":179,"icon":180},"SvelteKit","\u002Fintegrate\u002Fframeworks\u002Fsveltekit","3.integrate\u002Fframeworks\u002F03.sveltekit","i-simple-icons-svelte",{"title":182,"path":183,"stem":184,"icon":185},"Nitro","\u002Fintegrate\u002Fframeworks\u002Fnitro","3.integrate\u002Fframeworks\u002F04.nitro","i-custom-nitro",{"title":187,"path":188,"stem":189,"icon":190},"TanStack Start","\u002Fintegrate\u002Fframeworks\u002Ftanstack-start","3.integrate\u002Fframeworks\u002F05.tanstack-start","i-custom-tanstack",{"title":192,"path":193,"stem":194,"icon":195},"NestJS","\u002Fintegrate\u002Fframeworks\u002Fnestjs","3.integrate\u002Fframeworks\u002F06.nestjs","i-simple-icons-nestjs",{"title":197,"path":198,"stem":199,"icon":200},"Express","\u002Fintegrate\u002Fframeworks\u002Fexpress","3.integrate\u002Fframeworks\u002F07.express","i-simple-icons-express",{"title":202,"path":203,"stem":204,"icon":205},"Hono","\u002Fintegrate\u002Fframeworks\u002Fhono","3.integrate\u002Fframeworks\u002F08.hono","i-simple-icons-hono",{"title":207,"path":208,"stem":209,"icon":210},"Fastify","\u002Fintegrate\u002Fframeworks\u002Ffastify","3.integrate\u002Fframeworks\u002F09.fastify","i-simple-icons-fastify",{"title":212,"path":213,"stem":214,"icon":215},"Elysia","\u002Fintegrate\u002Fframeworks\u002Felysia","3.integrate\u002Fframeworks\u002F10.elysia","i-custom-elysia",{"title":217,"path":218,"stem":219,"icon":220},"React Router","\u002Fintegrate\u002Fframeworks\u002Freact-router","3.integrate\u002Fframeworks\u002F11.react-router","i-custom-reactrouter",{"title":222,"path":223,"stem":224,"icon":225},"Cloudflare Workers","\u002Fintegrate\u002Fframeworks\u002Fcloudflare-workers","3.integrate\u002Fframeworks\u002F12.cloudflare-workers","i-simple-icons-cloudflare",{"title":227,"path":228,"stem":229,"icon":74},"Standalone","\u002Fintegrate\u002Fframeworks\u002Fstandalone","3.integrate\u002Fframeworks\u002F13.standalone",{"title":231,"path":232,"stem":233,"icon":234},"Astro","\u002Fintegrate\u002Fframeworks\u002Fastro","3.integrate\u002Fframeworks\u002F14.astro","i-simple-icons-astro",{"title":236,"path":237,"stem":238,"icon":239},"oRPC","\u002Fintegrate\u002Fframeworks\u002Forpc","3.integrate\u002Fframeworks\u002F15.orpc","i-lucide-network",{"title":241,"path":242,"stem":243,"icon":244},"AWS Lambda","\u002Fintegrate\u002Fframeworks\u002Faws-lambda","3.integrate\u002Fframeworks\u002F16.aws-lambda","i-custom-lambda",{"title":246,"path":247,"stem":248,"children":249,"page":29},"Use Cases","\u002Fuse-cases","4.use-cases",[250,254,259,288,316,348,369,374],{"title":36,"path":251,"stem":252,"icon":253},"\u002Fuse-cases\u002Foverview","4.use-cases\u002F0.overview","i-lucide-list-checks",{"title":255,"path":256,"stem":257,"icon":258},"Client Logging","\u002Fuse-cases\u002Fclient-logging","4.use-cases\u002F1.client-logging","i-lucide-monitor",{"title":260,"icon":261,"path":262,"stem":263,"children":264,"page":29},"AI SDK","i-simple-icons-vercel","\u002Fuse-cases\u002Fai-sdk","4.use-cases\u002F2.ai-sdk",[265,268,273,278,283],{"title":36,"path":266,"stem":267,"icon":39},"\u002Fuse-cases\u002Fai-sdk\u002Foverview","4.use-cases\u002F2.ai-sdk\u002F01.overview",{"title":269,"path":270,"stem":271,"icon":272},"Usage","\u002Fuse-cases\u002Fai-sdk\u002Fusage","4.use-cases\u002F2.ai-sdk\u002F02.usage","i-lucide-code",{"title":274,"path":275,"stem":276,"icon":277},"Options","\u002Fuse-cases\u002Fai-sdk\u002Foptions","4.use-cases\u002F2.ai-sdk\u002F03.options","i-lucide-sliders",{"title":279,"path":280,"stem":281,"icon":282},"Metadata","\u002Fuse-cases\u002Fai-sdk\u002Fmetadata","4.use-cases\u002F2.ai-sdk\u002F04.metadata","i-lucide-database",{"title":284,"path":285,"stem":286,"icon":287},"Telemetry","\u002Fuse-cases\u002Fai-sdk\u002Ftelemetry","4.use-cases\u002F2.ai-sdk\u002F05.telemetry","i-lucide-activity",{"title":289,"icon":290,"path":291,"stem":292,"children":293,"page":29},"Better Auth","i-simple-icons-betterauth","\u002Fuse-cases\u002Fbetter-auth","4.use-cases\u002F3.better-auth",[294,297,302,307,311],{"title":36,"path":295,"stem":296,"icon":39},"\u002Fuse-cases\u002Fbetter-auth\u002Foverview","4.use-cases\u002F3.better-auth\u002F01.overview",{"title":298,"path":299,"stem":300,"icon":301},"Identify User","\u002Fuse-cases\u002Fbetter-auth\u002Fidentify-user","4.use-cases\u002F3.better-auth\u002F02.identify-user","i-lucide-user-check",{"title":303,"path":304,"stem":305,"icon":306},"Middleware","\u002Fuse-cases\u002Fbetter-auth\u002Fmiddleware","4.use-cases\u002F3.better-auth\u002F03.middleware","i-lucide-shield",{"title":308,"path":309,"stem":310,"icon":258},"Client Sync","\u002Fuse-cases\u002Fbetter-auth\u002Fclient-sync","4.use-cases\u002F3.better-auth\u002F04.client-sync",{"title":312,"path":313,"stem":314,"icon":315},"Performance","\u002Fuse-cases\u002Fbetter-auth\u002Fperformance","4.use-cases\u002F3.better-auth\u002F05.performance","i-lucide-gauge",{"title":317,"icon":318,"path":319,"stem":320,"children":321,"page":29},"Audit Logs","i-lucide-shield-check","\u002Fuse-cases\u002Faudit","4.use-cases\u002F4.audit",[322,325,330,335,340,344],{"title":36,"path":323,"stem":324,"icon":39},"\u002Fuse-cases\u002Faudit\u002Foverview","4.use-cases\u002F4.audit\u002F01.overview",{"title":326,"path":327,"stem":328,"icon":329},"Schema","\u002Fuse-cases\u002Faudit\u002Fschema","4.use-cases\u002F4.audit\u002F02.schema","i-lucide-file-text",{"title":331,"path":332,"stem":333,"icon":334},"Recording","\u002Fuse-cases\u002Faudit\u002Frecording","4.use-cases\u002F4.audit\u002F03.recording","i-lucide-pen-line",{"title":336,"path":337,"stem":338,"icon":339},"Drains","\u002Fuse-cases\u002Faudit\u002Fpipeline","4.use-cases\u002F4.audit\u002F04.pipeline","i-lucide-link",{"title":341,"path":342,"stem":343,"icon":318},"Compliance","\u002Fuse-cases\u002Faudit\u002Fcompliance","4.use-cases\u002F4.audit\u002F05.compliance",{"title":345,"path":346,"stem":347,"icon":79},"Recipes","\u002Fuse-cases\u002Faudit\u002Frecipes","4.use-cases\u002F4.audit\u002F06.recipes",{"title":284,"icon":315,"path":349,"stem":350,"children":351,"page":29},"\u002Fuse-cases\u002Ftelemetry","4.use-cases\u002F4.telemetry",[352,355,360,365],{"title":36,"path":353,"stem":354,"icon":39},"\u002Fuse-cases\u002Ftelemetry\u002Foverview","4.use-cases\u002F4.telemetry\u002F01.overview",{"title":356,"path":357,"stem":358,"icon":359},"Setup","\u002Fuse-cases\u002Ftelemetry\u002Fsetup","4.use-cases\u002F4.telemetry\u002F02.setup","i-lucide-wrench",{"title":361,"path":362,"stem":363,"icon":364},"Ingest","\u002Fuse-cases\u002Ftelemetry\u002Fingest","4.use-cases\u002F4.telemetry\u002F03.ingest","i-lucide-server",{"title":366,"path":367,"stem":368,"icon":79},"Reference","\u002Fuse-cases\u002Ftelemetry\u002Freference","4.use-cases\u002F4.telemetry\u002F04.reference",{"title":370,"path":371,"stem":372,"icon":373},"Enrichers","\u002Fuse-cases\u002Fenrichers","4.use-cases\u002F5.enrichers","i-lucide-sparkles",{"title":375,"path":376,"stem":377,"icon":378},"eve","\u002Fuse-cases\u002Feve","4.use-cases\u002F5.eve","i-custom-eve",{"title":380,"path":381,"stem":382,"children":383,"page":29},"Extend","\u002Fextend","5.extend",[384,388,393,398,403,407,411,415,419,424,429],{"title":36,"path":385,"stem":386,"icon":387},"\u002Fextend\u002Foverview","5.extend\u002F0.overview","i-lucide-blocks",{"title":389,"path":390,"stem":391,"icon":392},"Stream","\u002Fextend\u002Fstream","5.extend\u002F1.stream","i-lucide-radio-tower",{"title":394,"path":395,"stem":396,"icon":397},"Custom framework","\u002Fextend\u002Fcustom-framework","5.extend\u002F10.custom-framework","i-lucide-puzzle",{"title":399,"path":400,"stem":401,"icon":402},"FS reader","\u002Fextend\u002Ffs-reader","5.extend\u002F2.fs-reader","i-lucide-folder-search",{"title":345,"path":404,"stem":405,"icon":406},"\u002Fextend\u002Fconsumer-recipes","5.extend\u002F3.consumer-recipes","i-lucide-chef-hat",{"title":408,"path":409,"stem":410,"icon":387},"Plugins","\u002Fextend\u002Fplugins","5.extend\u002F4.plugins",{"title":412,"path":413,"stem":414,"icon":373},"Custom enrichers","\u002Fextend\u002Fcustom-enrichers","5.extend\u002F5.custom-enrichers",{"title":416,"path":417,"stem":418,"icon":64},"Tail sampling","\u002Fextend\u002Ftail-sampling","5.extend\u002F6.tail-sampling",{"title":420,"path":421,"stem":422,"icon":423},"Identity headers","\u002Fextend\u002Fidentity-headers","5.extend\u002F7.identity-headers","i-lucide-fingerprint",{"title":425,"path":426,"stem":427,"icon":428},"Custom drains","\u002Fextend\u002Fcustom-drains","5.extend\u002F8.custom-drains","i-lucide-share-2",{"title":430,"path":431,"stem":432,"icon":433},"Drain pipeline","\u002Fextend\u002Fdrain-pipeline","5.extend\u002F9.drain-pipeline","i-lucide-workflow",{"title":366,"path":435,"stem":436,"children":437,"page":29},"\u002Freference","6.reference",[438,443,446,451,455,460],{"title":439,"path":440,"stem":441,"icon":442},"Configuration","\u002Freference\u002Fconfiguration","6.reference\u002F1.configuration","i-lucide-settings",{"title":312,"path":444,"stem":445,"icon":315},"\u002Freference\u002Fperformance","6.reference\u002F2.performance",{"title":447,"path":448,"stem":449,"icon":450},"Vite Plugin","\u002Freference\u002Fvite-plugin","6.reference\u002F3.vite-plugin","i-custom-vite",{"title":452,"path":453,"stem":454,"icon":318},"Best Practices","\u002Freference\u002Fbest-practices","6.reference\u002F4.best-practices",{"title":456,"path":457,"stem":458,"icon":459},"vs Other Loggers","\u002Freference\u002Fvs-other-loggers","6.reference\u002F5.vs-other-loggers","i-lucide-scale",{"title":461,"path":462,"stem":463,"icon":373},"Agent Skills","\u002Freference\u002Fagent-skills","6.reference\u002F6.agent-skills",{"id":465,"title":466,"body":467,"description":2316,"extension":2317,"links":2318,"meta":2323,"navigation":2324,"path":346,"seo":2325,"stem":347,"__hash__":2326},"docs\u002F4.use-cases\u002F4.audit\u002F06.recipes.md","Recipes & Reference",{"type":468,"value":469,"toc":2309},"minimark",[470,487,492,1100,1109,1113,1412,1415,1419,1794,1804,1808,1824,2070,2084,2095,2099,2299,2305],[471,472,473,474,478,479,482,483,486],"p",{},"Pick the recipe that matches your sink, drop it in, and you have a tamper-evident audit log. Each recipe composes the same primitives (",[475,476,477],"code",{},"auditOnly",", ",[475,480,481],{},"signed",", optional ",[475,484,485],{},"await: true",") over different drains.",[488,489,491],"h2",{"id":490},"audit-logs-on-disk","Audit logs on disk",[493,494,495,701],"code-group",{},[496,497,503],"pre",{"className":498,"code":499,"filename":500,"language":501,"meta":502,"style":502},"language-typescript shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","import { auditOnly, signed } from 'evlog'\nimport { createFsDrain } from 'evlog\u002Ffs'\n\nnitro.hooks.hook('evlog:drain', auditOnly(\n  signed(createFsDrain({ dir: '.audit', maxFiles: 30 }), { strategy: 'hash-chain' }),\n  { await: true },\n))\n","Input — server\u002Fplugins\u002Fevlog.ts","typescript","",[475,504,505,544,565,572,608,677,695],{"__ignoreMap":502},[506,507,510,514,518,522,525,528,531,534,537,541],"span",{"class":508,"line":509},"line",1,[506,511,513],{"class":512},"s7zQu","import",[506,515,517],{"class":516},"sMK4o"," {",[506,519,521],{"class":520},"sTEyZ"," auditOnly",[506,523,524],{"class":516},",",[506,526,527],{"class":520}," signed",[506,529,530],{"class":516}," }",[506,532,533],{"class":512}," from",[506,535,536],{"class":516}," '",[506,538,540],{"class":539},"sfazB","evlog",[506,542,543],{"class":516},"'\n",[506,545,547,549,551,554,556,558,560,563],{"class":508,"line":546},2,[506,548,513],{"class":512},[506,550,517],{"class":516},[506,552,553],{"class":520}," createFsDrain",[506,555,530],{"class":516},[506,557,533],{"class":512},[506,559,536],{"class":516},[506,561,562],{"class":539},"evlog\u002Ffs",[506,564,543],{"class":516},[506,566,568],{"class":508,"line":567},3,[506,569,571],{"emptyLinePlaceholder":570},true,"\n",[506,573,575,578,581,584,586,590,593,596,599,601,603,605],{"class":508,"line":574},4,[506,576,577],{"class":520},"nitro",[506,579,580],{"class":516},".",[506,582,583],{"class":520},"hooks",[506,585,580],{"class":516},[506,587,589],{"class":588},"s2Zo4","hook",[506,591,592],{"class":520},"(",[506,594,595],{"class":516},"'",[506,597,598],{"class":539},"evlog:drain",[506,600,595],{"class":516},[506,602,524],{"class":516},[506,604,521],{"class":588},[506,606,607],{"class":520},"(\n",[506,609,611,614,616,619,621,624,628,631,633,636,638,640,643,645,649,651,654,656,658,661,663,665,668,670,672,674],{"class":508,"line":610},5,[506,612,613],{"class":588},"  signed",[506,615,592],{"class":520},[506,617,618],{"class":588},"createFsDrain",[506,620,592],{"class":520},[506,622,623],{"class":516},"{",[506,625,627],{"class":626},"swJcz"," dir",[506,629,630],{"class":516},":",[506,632,536],{"class":516},[506,634,635],{"class":539},".audit",[506,637,595],{"class":516},[506,639,524],{"class":516},[506,641,642],{"class":626}," maxFiles",[506,644,630],{"class":516},[506,646,648],{"class":647},"sbssI"," 30",[506,650,530],{"class":516},[506,652,653],{"class":520},")",[506,655,524],{"class":516},[506,657,517],{"class":516},[506,659,660],{"class":626}," strategy",[506,662,630],{"class":516},[506,664,536],{"class":516},[506,666,667],{"class":539},"hash-chain",[506,669,595],{"class":516},[506,671,530],{"class":516},[506,673,653],{"class":520},[506,675,676],{"class":516},",\n",[506,678,680,683,686,688,692],{"class":508,"line":679},6,[506,681,682],{"class":516},"  {",[506,684,685],{"class":626}," await",[506,687,630],{"class":516},[506,689,691],{"class":690},"sfNiH"," true",[506,693,694],{"class":516}," },\n",[506,696,698],{"class":508,"line":697},7,[506,699,700],{"class":520},"))\n",[496,702,707],{"className":703,"code":704,"filename":705,"language":706,"meta":502,"style":502},"language-jsonl shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","{\"audit\":{\"action\":\"invoice.refund\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"invoice\",\"id\":\"inv_889\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_8f3c4b2a1e5d6f7c\",\"prevHash\":null,\"hash\":\"3f2c8e1a...\"}}\n{\"audit\":{\"action\":\"user.update\",\"actor\":{\"type\":\"user\",\"id\":\"usr_42\"},\"target\":{\"type\":\"user\",\"id\":\"usr_99\"},\"outcome\":\"success\",\"version\":1,\"idempotencyKey\":\"ak_5e7d8f9a0b1c2d3e\",\"prevHash\":\"3f2c8e1a...\",\"hash\":\"9a1b4d7c...\"}}\n","Output — .audit\u002F2026-04-24.ndjson","jsonl",[475,708,709,912],{"__ignoreMap":502},[506,710,711,713,716,720,722,725,727,731,733,735,737,740,742,744,746,749,751,753,755,758,760,762,764,767,769,771,773,776,778,780,782,785,787,790,792,795,797,799,801,803,805,807,809,812,814,816,818,820,822,824,826,829,831,833,835,838,840,842,844,847,849,851,853,856,858,860,863,865,867,870,872,874,876,879,881,883,885,888,890,893,895,898,900,902,904,907,909],{"class":508,"line":509},[506,712,623],{"class":516},[506,714,715],{"class":516},"\"",[506,717,719],{"class":718},"spNyl","audit",[506,721,715],{"class":516},[506,723,724],{"class":516},":{",[506,726,715],{"class":516},[506,728,730],{"class":729},"sBMFI","action",[506,732,715],{"class":516},[506,734,630],{"class":516},[506,736,715],{"class":516},[506,738,739],{"class":539},"invoice.refund",[506,741,715],{"class":516},[506,743,524],{"class":516},[506,745,715],{"class":516},[506,747,748],{"class":729},"actor",[506,750,715],{"class":516},[506,752,724],{"class":516},[506,754,715],{"class":516},[506,756,757],{"class":647},"type",[506,759,715],{"class":516},[506,761,630],{"class":516},[506,763,715],{"class":516},[506,765,766],{"class":539},"user",[506,768,715],{"class":516},[506,770,524],{"class":516},[506,772,715],{"class":516},[506,774,775],{"class":647},"id",[506,777,715],{"class":516},[506,779,630],{"class":516},[506,781,715],{"class":516},[506,783,784],{"class":539},"usr_42",[506,786,715],{"class":516},[506,788,789],{"class":516},"},",[506,791,715],{"class":516},[506,793,794],{"class":729},"target",[506,796,715],{"class":516},[506,798,724],{"class":516},[506,800,715],{"class":516},[506,802,757],{"class":647},[506,804,715],{"class":516},[506,806,630],{"class":516},[506,808,715],{"class":516},[506,810,811],{"class":539},"invoice",[506,813,715],{"class":516},[506,815,524],{"class":516},[506,817,715],{"class":516},[506,819,775],{"class":647},[506,821,715],{"class":516},[506,823,630],{"class":516},[506,825,715],{"class":516},[506,827,828],{"class":539},"inv_889",[506,830,715],{"class":516},[506,832,789],{"class":516},[506,834,715],{"class":516},[506,836,837],{"class":729},"outcome",[506,839,715],{"class":516},[506,841,630],{"class":516},[506,843,715],{"class":516},[506,845,846],{"class":539},"success",[506,848,715],{"class":516},[506,850,524],{"class":516},[506,852,715],{"class":516},[506,854,855],{"class":729},"version",[506,857,715],{"class":516},[506,859,630],{"class":516},[506,861,862],{"class":647},"1",[506,864,524],{"class":516},[506,866,715],{"class":516},[506,868,869],{"class":729},"idempotencyKey",[506,871,715],{"class":516},[506,873,630],{"class":516},[506,875,715],{"class":516},[506,877,878],{"class":539},"ak_8f3c4b2a1e5d6f7c",[506,880,715],{"class":516},[506,882,524],{"class":516},[506,884,715],{"class":516},[506,886,887],{"class":729},"prevHash",[506,889,715],{"class":516},[506,891,892],{"class":516},":null,",[506,894,715],{"class":516},[506,896,897],{"class":729},"hash",[506,899,715],{"class":516},[506,901,630],{"class":516},[506,903,715],{"class":516},[506,905,906],{"class":539},"3f2c8e1a...",[506,908,715],{"class":516},[506,910,911],{"class":516},"}}\n",[506,913,914,916,918,920,922,924,926,928,930,932,934,937,939,941,943,945,947,949,951,953,955,957,959,961,963,965,967,969,971,973,975,977,979,981,983,985,987,989,991,993,995,997,999,1001,1003,1005,1007,1009,1011,1013,1015,1018,1020,1022,1024,1026,1028,1030,1032,1034,1036,1038,1040,1042,1044,1046,1048,1050,1052,1054,1056,1058,1060,1063,1065,1067,1069,1071,1073,1075,1077,1079,1081,1083,1085,1087,1089,1091,1093,1096,1098],{"class":508,"line":546},[506,915,623],{"class":516},[506,917,715],{"class":516},[506,919,719],{"class":718},[506,921,715],{"class":516},[506,923,724],{"class":516},[506,925,715],{"class":516},[506,927,730],{"class":729},[506,929,715],{"class":516},[506,931,630],{"class":516},[506,933,715],{"class":516},[506,935,936],{"class":539},"user.update",[506,938,715],{"class":516},[506,940,524],{"class":516},[506,942,715],{"class":516},[506,944,748],{"class":729},[506,946,715],{"class":516},[506,948,724],{"class":516},[506,950,715],{"class":516},[506,952,757],{"class":647},[506,954,715],{"class":516},[506,956,630],{"class":516},[506,958,715],{"class":516},[506,960,766],{"class":539},[506,962,715],{"class":516},[506,964,524],{"class":516},[506,966,715],{"class":516},[506,968,775],{"class":647},[506,970,715],{"class":516},[506,972,630],{"class":516},[506,974,715],{"class":516},[506,976,784],{"class":539},[506,978,715],{"class":516},[506,980,789],{"class":516},[506,982,715],{"class":516},[506,984,794],{"class":729},[506,986,715],{"class":516},[506,988,724],{"class":516},[506,990,715],{"class":516},[506,992,757],{"class":647},[506,994,715],{"class":516},[506,996,630],{"class":516},[506,998,715],{"class":516},[506,1000,766],{"class":539},[506,1002,715],{"class":516},[506,1004,524],{"class":516},[506,1006,715],{"class":516},[506,1008,775],{"class":647},[506,1010,715],{"class":516},[506,1012,630],{"class":516},[506,1014,715],{"class":516},[506,1016,1017],{"class":539},"usr_99",[506,1019,715],{"class":516},[506,1021,789],{"class":516},[506,1023,715],{"class":516},[506,1025,837],{"class":729},[506,1027,715],{"class":516},[506,1029,630],{"class":516},[506,1031,715],{"class":516},[506,1033,846],{"class":539},[506,1035,715],{"class":516},[506,1037,524],{"class":516},[506,1039,715],{"class":516},[506,1041,855],{"class":729},[506,1043,715],{"class":516},[506,1045,630],{"class":516},[506,1047,862],{"class":647},[506,1049,524],{"class":516},[506,1051,715],{"class":516},[506,1053,869],{"class":729},[506,1055,715],{"class":516},[506,1057,630],{"class":516},[506,1059,715],{"class":516},[506,1061,1062],{"class":539},"ak_5e7d8f9a0b1c2d3e",[506,1064,715],{"class":516},[506,1066,524],{"class":516},[506,1068,715],{"class":516},[506,1070,887],{"class":729},[506,1072,715],{"class":516},[506,1074,630],{"class":516},[506,1076,715],{"class":516},[506,1078,906],{"class":539},[506,1080,715],{"class":516},[506,1082,524],{"class":516},[506,1084,715],{"class":516},[506,1086,897],{"class":729},[506,1088,715],{"class":516},[506,1090,630],{"class":516},[506,1092,715],{"class":516},[506,1094,1095],{"class":539},"9a1b4d7c...",[506,1097,715],{"class":516},[506,1099,911],{"class":516},[471,1101,1102,1103,1105,1106,1108],{},"Each line's ",[475,1104,887],{}," matches the previous line's ",[475,1107,897],{},". Tampering with any row breaks the chain forward of that point — a verifier replays the hashes and reports the first mismatch.",[488,1110,1112],{"id":1111},"audit-logs-to-a-dedicated-axiom-dataset","Audit logs to a dedicated Axiom dataset",[493,1114,1115,1282,1350],{},[496,1116,1118],{"className":498,"code":1117,"filename":500,"language":501,"meta":502,"style":502},"import { auditOnly } from 'evlog'\nimport { createAxiomDrain } from 'evlog\u002Faxiom'\n\nnitro.hooks.hook('evlog:drain', createAxiomDrain({ dataset: 'logs' }))\nnitro.hooks.hook('evlog:drain', auditOnly(\n  createAxiomDrain({ dataset: 'audit', apiKey: process.env.AXIOM_AUDIT_API_KEY }),\n))\n",[475,1119,1120,1138,1158,1162,1206,1232,1278],{"__ignoreMap":502},[506,1121,1122,1124,1126,1128,1130,1132,1134,1136],{"class":508,"line":509},[506,1123,513],{"class":512},[506,1125,517],{"class":516},[506,1127,521],{"class":520},[506,1129,530],{"class":516},[506,1131,533],{"class":512},[506,1133,536],{"class":516},[506,1135,540],{"class":539},[506,1137,543],{"class":516},[506,1139,1140,1142,1144,1147,1149,1151,1153,1156],{"class":508,"line":546},[506,1141,513],{"class":512},[506,1143,517],{"class":516},[506,1145,1146],{"class":520}," createAxiomDrain",[506,1148,530],{"class":516},[506,1150,533],{"class":512},[506,1152,536],{"class":516},[506,1154,1155],{"class":539},"evlog\u002Faxiom",[506,1157,543],{"class":516},[506,1159,1160],{"class":508,"line":567},[506,1161,571],{"emptyLinePlaceholder":570},[506,1163,1164,1166,1168,1170,1172,1174,1176,1178,1180,1182,1184,1186,1188,1190,1193,1195,1197,1200,1202,1204],{"class":508,"line":574},[506,1165,577],{"class":520},[506,1167,580],{"class":516},[506,1169,583],{"class":520},[506,1171,580],{"class":516},[506,1173,589],{"class":588},[506,1175,592],{"class":520},[506,1177,595],{"class":516},[506,1179,598],{"class":539},[506,1181,595],{"class":516},[506,1183,524],{"class":516},[506,1185,1146],{"class":588},[506,1187,592],{"class":520},[506,1189,623],{"class":516},[506,1191,1192],{"class":626}," dataset",[506,1194,630],{"class":516},[506,1196,536],{"class":516},[506,1198,1199],{"class":539},"logs",[506,1201,595],{"class":516},[506,1203,530],{"class":516},[506,1205,700],{"class":520},[506,1207,1208,1210,1212,1214,1216,1218,1220,1222,1224,1226,1228,1230],{"class":508,"line":610},[506,1209,577],{"class":520},[506,1211,580],{"class":516},[506,1213,583],{"class":520},[506,1215,580],{"class":516},[506,1217,589],{"class":588},[506,1219,592],{"class":520},[506,1221,595],{"class":516},[506,1223,598],{"class":539},[506,1225,595],{"class":516},[506,1227,524],{"class":516},[506,1229,521],{"class":588},[506,1231,607],{"class":520},[506,1233,1234,1237,1239,1241,1243,1245,1247,1249,1251,1253,1256,1258,1261,1263,1266,1268,1271,1274,1276],{"class":508,"line":679},[506,1235,1236],{"class":588},"  createAxiomDrain",[506,1238,592],{"class":520},[506,1240,623],{"class":516},[506,1242,1192],{"class":626},[506,1244,630],{"class":516},[506,1246,536],{"class":516},[506,1248,719],{"class":539},[506,1250,595],{"class":516},[506,1252,524],{"class":516},[506,1254,1255],{"class":626}," apiKey",[506,1257,630],{"class":516},[506,1259,1260],{"class":520}," process",[506,1262,580],{"class":516},[506,1264,1265],{"class":520},"env",[506,1267,580],{"class":516},[506,1269,1270],{"class":520},"AXIOM_AUDIT_API_KEY ",[506,1272,1273],{"class":516},"}",[506,1275,653],{"class":520},[506,1277,676],{"class":516},[506,1279,1280],{"class":508,"line":697},[506,1281,700],{"class":520},[496,1283,1288],{"className":1284,"code":1285,"filename":1286,"language":1287,"meta":502,"style":502},"language-kusto shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","['audit']\n| where audit.action == \"invoice.refund\"\n| summarize count() by audit.outcome, bin(_time, 1h)\n","Output — Axiom query","kusto",[475,1289,1290,1304,1322],{"__ignoreMap":502},[506,1291,1292,1295,1297,1299,1301],{"class":508,"line":509},[506,1293,1294],{"class":520},"[",[506,1296,595],{"class":516},[506,1298,719],{"class":539},[506,1300,595],{"class":516},[506,1302,1303],{"class":520},"]\n",[506,1305,1306,1309,1312,1315,1317,1319],{"class":508,"line":546},[506,1307,1308],{"class":520},"| ",[506,1310,1311],{"class":647},"where",[506,1313,1314],{"class":520}," audit.action == ",[506,1316,715],{"class":516},[506,1318,739],{"class":539},[506,1320,1321],{"class":516},"\"\n",[506,1323,1324,1326,1329,1332,1335,1338,1341,1344,1347],{"class":508,"line":567},[506,1325,1308],{"class":520},[506,1327,1328],{"class":647},"summarize",[506,1330,1331],{"class":588}," count()",[506,1333,1334],{"class":647}," by",[506,1336,1337],{"class":520}," audit.outcome, ",[506,1339,1340],{"class":588},"bin",[506,1342,1343],{"class":520},"(_time, ",[506,1345,1346],{"class":647},"1h",[506,1348,1349],{"class":520},")\n",[496,1351,1354],{"className":1284,"code":1352,"filename":1353,"language":1287,"meta":502,"style":502},"['audit']\n| where audit.outcome == \"denied\"\n| summarize count() by audit.actor.id, audit.action\n| order by count_ desc\n","Output — denials by actor",[475,1355,1356,1368,1384,1397],{"__ignoreMap":502},[506,1357,1358,1360,1362,1364,1366],{"class":508,"line":509},[506,1359,1294],{"class":520},[506,1361,595],{"class":516},[506,1363,719],{"class":539},[506,1365,595],{"class":516},[506,1367,1303],{"class":520},[506,1369,1370,1372,1374,1377,1379,1382],{"class":508,"line":546},[506,1371,1308],{"class":520},[506,1373,1311],{"class":647},[506,1375,1376],{"class":520}," audit.outcome == ",[506,1378,715],{"class":516},[506,1380,1381],{"class":539},"denied",[506,1383,1321],{"class":516},[506,1385,1386,1388,1390,1392,1394],{"class":508,"line":567},[506,1387,1308],{"class":520},[506,1389,1328],{"class":647},[506,1391,1331],{"class":588},[506,1393,1334],{"class":647},[506,1395,1396],{"class":520}," audit.actor.id, audit.action\n",[506,1398,1399,1401,1404,1406,1409],{"class":508,"line":574},[506,1400,1308],{"class":520},[506,1402,1403],{"class":647},"order",[506,1405,1334],{"class":647},[506,1407,1408],{"class":520}," count_ ",[506,1410,1411],{"class":647},"desc\n",[471,1413,1414],{},"Splitting datasets means the audit dataset can have a longer retention (7y), tighter access controls, and a separate billing line — without touching the rest of your pipeline.",[488,1416,1418],{"id":1417},"audit-logs-in-postgres","Audit logs in Postgres",[493,1420,1421,1674],{},[496,1422,1424],{"className":498,"code":1423,"filename":500,"language":501,"meta":502,"style":502},"import { auditOnly } from 'evlog'\nimport type { DrainContext } from 'evlog'\n\nconst postgresAudit = async (ctx: DrainContext) => {\n  await db.insert(auditEvents).values({\n    id: ctx.event.audit!.idempotencyKey,\n    timestamp: new Date(ctx.event.timestamp),\n    payload: ctx.event,\n  }).onConflictDoNothing()\n}\n\nnitro.hooks.hook('evlog:drain', auditOnly(postgresAudit, { await: true }))\n",[475,1425,1426,1444,1466,1470,1503,1533,1559,1589,1605,1621,1627,1632],{"__ignoreMap":502},[506,1427,1428,1430,1432,1434,1436,1438,1440,1442],{"class":508,"line":509},[506,1429,513],{"class":512},[506,1431,517],{"class":516},[506,1433,521],{"class":520},[506,1435,530],{"class":516},[506,1437,533],{"class":512},[506,1439,536],{"class":516},[506,1441,540],{"class":539},[506,1443,543],{"class":516},[506,1445,1446,1448,1451,1453,1456,1458,1460,1462,1464],{"class":508,"line":546},[506,1447,513],{"class":512},[506,1449,1450],{"class":512}," type",[506,1452,517],{"class":516},[506,1454,1455],{"class":520}," DrainContext",[506,1457,530],{"class":516},[506,1459,533],{"class":512},[506,1461,536],{"class":516},[506,1463,540],{"class":539},[506,1465,543],{"class":516},[506,1467,1468],{"class":508,"line":567},[506,1469,571],{"emptyLinePlaceholder":570},[506,1471,1472,1475,1478,1481,1484,1487,1491,1493,1495,1497,1500],{"class":508,"line":574},[506,1473,1474],{"class":718},"const",[506,1476,1477],{"class":520}," postgresAudit ",[506,1479,1480],{"class":516},"=",[506,1482,1483],{"class":718}," async",[506,1485,1486],{"class":516}," (",[506,1488,1490],{"class":1489},"sHdIc","ctx",[506,1492,630],{"class":516},[506,1494,1455],{"class":729},[506,1496,653],{"class":516},[506,1498,1499],{"class":718}," =>",[506,1501,1502],{"class":516}," {\n",[506,1504,1505,1508,1511,1513,1516,1518,1521,1523,1525,1528,1530],{"class":508,"line":610},[506,1506,1507],{"class":512},"  await",[506,1509,1510],{"class":520}," db",[506,1512,580],{"class":516},[506,1514,1515],{"class":588},"insert",[506,1517,592],{"class":626},[506,1519,1520],{"class":520},"auditEvents",[506,1522,653],{"class":626},[506,1524,580],{"class":516},[506,1526,1527],{"class":588},"values",[506,1529,592],{"class":626},[506,1531,1532],{"class":516},"{\n",[506,1534,1535,1538,1540,1543,1545,1548,1550,1552,1555,1557],{"class":508,"line":679},[506,1536,1537],{"class":626},"    id",[506,1539,630],{"class":516},[506,1541,1542],{"class":520}," ctx",[506,1544,580],{"class":516},[506,1546,1547],{"class":520},"event",[506,1549,580],{"class":516},[506,1551,719],{"class":520},[506,1553,1554],{"class":516},"!.",[506,1556,869],{"class":520},[506,1558,676],{"class":516},[506,1560,1561,1564,1566,1569,1572,1574,1576,1578,1580,1582,1585,1587],{"class":508,"line":697},[506,1562,1563],{"class":626},"    timestamp",[506,1565,630],{"class":516},[506,1567,1568],{"class":516}," new",[506,1570,1571],{"class":588}," Date",[506,1573,592],{"class":626},[506,1575,1490],{"class":520},[506,1577,580],{"class":516},[506,1579,1547],{"class":520},[506,1581,580],{"class":516},[506,1583,1584],{"class":520},"timestamp",[506,1586,653],{"class":626},[506,1588,676],{"class":516},[506,1590,1592,1595,1597,1599,1601,1603],{"class":508,"line":1591},8,[506,1593,1594],{"class":626},"    payload",[506,1596,630],{"class":516},[506,1598,1542],{"class":520},[506,1600,580],{"class":516},[506,1602,1547],{"class":520},[506,1604,676],{"class":516},[506,1606,1608,1611,1613,1615,1618],{"class":508,"line":1607},9,[506,1609,1610],{"class":516},"  }",[506,1612,653],{"class":626},[506,1614,580],{"class":516},[506,1616,1617],{"class":588},"onConflictDoNothing",[506,1619,1620],{"class":626},"()\n",[506,1622,1624],{"class":508,"line":1623},10,[506,1625,1626],{"class":516},"}\n",[506,1628,1630],{"class":508,"line":1629},11,[506,1631,571],{"emptyLinePlaceholder":570},[506,1633,1635,1637,1639,1641,1643,1645,1647,1649,1651,1653,1655,1657,1660,1662,1664,1666,1668,1670,1672],{"class":508,"line":1634},12,[506,1636,577],{"class":520},[506,1638,580],{"class":516},[506,1640,583],{"class":520},[506,1642,580],{"class":516},[506,1644,589],{"class":588},[506,1646,592],{"class":520},[506,1648,595],{"class":516},[506,1650,598],{"class":539},[506,1652,595],{"class":516},[506,1654,524],{"class":516},[506,1656,521],{"class":588},[506,1658,1659],{"class":520},"(postgresAudit",[506,1661,524],{"class":516},[506,1663,517],{"class":516},[506,1665,685],{"class":626},[506,1667,630],{"class":516},[506,1669,691],{"class":690},[506,1671,530],{"class":516},[506,1673,700],{"class":520},[496,1675,1680],{"className":1676,"code":1677,"filename":1678,"language":1679,"meta":502,"style":502},"language-sql shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","SELECT id, timestamp, payload->'audit'->>'action' AS action,\n       payload->'audit'->>'outcome' AS outcome\nFROM audit_events\nWHERE id = 'ak_8f3c4b2a1e5d6f7c';\n\n--          id          |       timestamp       |     action      | outcome\n-- ---------------------+-----------------------+-----------------+---------\n--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n","Output — audit_events row","sql",[475,1681,1682,1721,1747,1755,1774,1778,1784,1789],{"__ignoreMap":502},[506,1683,1684,1687,1690,1692,1695,1698,1700,1702,1704,1707,1709,1711,1713,1716,1719],{"class":508,"line":509},[506,1685,1686],{"class":647},"SELECT",[506,1688,1689],{"class":520}," id, ",[506,1691,1584],{"class":718},[506,1693,1694],{"class":520},", payload",[506,1696,1697],{"class":516},"->",[506,1699,595],{"class":516},[506,1701,719],{"class":539},[506,1703,595],{"class":516},[506,1705,1706],{"class":516},"->>",[506,1708,595],{"class":516},[506,1710,730],{"class":539},[506,1712,595],{"class":516},[506,1714,1715],{"class":647}," AS",[506,1717,1718],{"class":647}," action",[506,1720,676],{"class":520},[506,1722,1723,1726,1728,1730,1732,1734,1736,1738,1740,1742,1744],{"class":508,"line":546},[506,1724,1725],{"class":520},"       payload",[506,1727,1697],{"class":516},[506,1729,595],{"class":516},[506,1731,719],{"class":539},[506,1733,595],{"class":516},[506,1735,1706],{"class":516},[506,1737,595],{"class":516},[506,1739,837],{"class":539},[506,1741,595],{"class":516},[506,1743,1715],{"class":647},[506,1745,1746],{"class":520}," outcome\n",[506,1748,1749,1752],{"class":508,"line":567},[506,1750,1751],{"class":647},"FROM",[506,1753,1754],{"class":520}," audit_events\n",[506,1756,1757,1760,1763,1765,1767,1769,1771],{"class":508,"line":574},[506,1758,1759],{"class":647},"WHERE",[506,1761,1762],{"class":520}," id ",[506,1764,1480],{"class":516},[506,1766,536],{"class":516},[506,1768,878],{"class":539},[506,1770,595],{"class":516},[506,1772,1773],{"class":520},";\n",[506,1775,1776],{"class":508,"line":610},[506,1777,571],{"emptyLinePlaceholder":570},[506,1779,1780],{"class":508,"line":679},[506,1781,1783],{"class":1782},"sHwdD","--          id          |       timestamp       |     action      | outcome\n",[506,1785,1786],{"class":508,"line":697},[506,1787,1788],{"class":1782},"-- ---------------------+-----------------------+-----------------+---------\n",[506,1790,1791],{"class":508,"line":1591},[506,1792,1793],{"class":1782},"--  ak_8f3c4b2a1e5d6f7c | 2026-04-24 10:23:45.6 | invoice.refund  | success\n",[471,1795,1796,1797,1799,1800,1803],{},"The deterministic ",[475,1798,869],{}," makes retries safe — duplicate inserts collapse via ",[475,1801,1802],{},"ON CONFLICT DO NOTHING",". Without it, a transient network blip during a retry would create a duplicate audit row, which is exactly what you don't want.",[488,1805,1807],{"id":1806},"testing-audits","Testing audits",[471,1809,1810,1813,1814,478,1817,1820,1821,630],{},[475,1811,1812],{},"mockAudit()"," captures every audit event on emit — from standalone ",[475,1815,1816],{},"audit()",[475,1818,1819],{},"log.audit()",", and ",[475,1822,1823],{},"log.set({ audit })",[496,1825,1827],{"className":498,"code":1826,"language":501,"meta":502,"style":502},"import { mockAudit } from 'evlog'\n\nit('refunds the invoice and records an audit', async () => {\n  const captured = mockAudit()\n\n  await refundInvoice({ id: 'inv_889' }, { actor: { type: 'user', id: 'u1' } })\n\n  captured.assertAudit({\n    action: 'invoice.refund',\n    target: { type: 'invoice', id: 'inv_889' },\n    outcome: 'success',\n  })\n\n  captured.restore()\n})\n",[475,1828,1829,1848,1852,1877,1892,1896,1959,1963,1977,1992,2025,2040,2046,2051,2063],{"__ignoreMap":502},[506,1830,1831,1833,1835,1838,1840,1842,1844,1846],{"class":508,"line":509},[506,1832,513],{"class":512},[506,1834,517],{"class":516},[506,1836,1837],{"class":520}," mockAudit",[506,1839,530],{"class":516},[506,1841,533],{"class":512},[506,1843,536],{"class":516},[506,1845,540],{"class":539},[506,1847,543],{"class":516},[506,1849,1850],{"class":508,"line":546},[506,1851,571],{"emptyLinePlaceholder":570},[506,1853,1854,1857,1859,1861,1864,1866,1868,1870,1873,1875],{"class":508,"line":567},[506,1855,1856],{"class":588},"it",[506,1858,592],{"class":520},[506,1860,595],{"class":516},[506,1862,1863],{"class":539},"refunds the invoice and records an audit",[506,1865,595],{"class":516},[506,1867,524],{"class":516},[506,1869,1483],{"class":718},[506,1871,1872],{"class":516}," ()",[506,1874,1499],{"class":718},[506,1876,1502],{"class":516},[506,1878,1879,1882,1885,1888,1890],{"class":508,"line":574},[506,1880,1881],{"class":718},"  const",[506,1883,1884],{"class":520}," captured",[506,1886,1887],{"class":516}," =",[506,1889,1837],{"class":588},[506,1891,1620],{"class":626},[506,1893,1894],{"class":508,"line":610},[506,1895,571],{"emptyLinePlaceholder":570},[506,1897,1898,1900,1903,1905,1907,1910,1912,1914,1916,1918,1921,1923,1926,1928,1930,1932,1934,1936,1938,1940,1942,1944,1946,1948,1951,1953,1955,1957],{"class":508,"line":679},[506,1899,1507],{"class":512},[506,1901,1902],{"class":588}," refundInvoice",[506,1904,592],{"class":626},[506,1906,623],{"class":516},[506,1908,1909],{"class":626}," id",[506,1911,630],{"class":516},[506,1913,536],{"class":516},[506,1915,828],{"class":539},[506,1917,595],{"class":516},[506,1919,1920],{"class":516}," },",[506,1922,517],{"class":516},[506,1924,1925],{"class":626}," actor",[506,1927,630],{"class":516},[506,1929,517],{"class":516},[506,1931,1450],{"class":626},[506,1933,630],{"class":516},[506,1935,536],{"class":516},[506,1937,766],{"class":539},[506,1939,595],{"class":516},[506,1941,524],{"class":516},[506,1943,1909],{"class":626},[506,1945,630],{"class":516},[506,1947,536],{"class":516},[506,1949,1950],{"class":539},"u1",[506,1952,595],{"class":516},[506,1954,530],{"class":516},[506,1956,530],{"class":516},[506,1958,1349],{"class":626},[506,1960,1961],{"class":508,"line":697},[506,1962,571],{"emptyLinePlaceholder":570},[506,1964,1965,1968,1970,1973,1975],{"class":508,"line":1591},[506,1966,1967],{"class":520},"  captured",[506,1969,580],{"class":516},[506,1971,1972],{"class":588},"assertAudit",[506,1974,592],{"class":626},[506,1976,1532],{"class":516},[506,1978,1979,1982,1984,1986,1988,1990],{"class":508,"line":1607},[506,1980,1981],{"class":626},"    action",[506,1983,630],{"class":516},[506,1985,536],{"class":516},[506,1987,739],{"class":539},[506,1989,595],{"class":516},[506,1991,676],{"class":516},[506,1993,1994,1997,1999,2001,2003,2005,2007,2009,2011,2013,2015,2017,2019,2021,2023],{"class":508,"line":1623},[506,1995,1996],{"class":626},"    target",[506,1998,630],{"class":516},[506,2000,517],{"class":516},[506,2002,1450],{"class":626},[506,2004,630],{"class":516},[506,2006,536],{"class":516},[506,2008,811],{"class":539},[506,2010,595],{"class":516},[506,2012,524],{"class":516},[506,2014,1909],{"class":626},[506,2016,630],{"class":516},[506,2018,536],{"class":516},[506,2020,828],{"class":539},[506,2022,595],{"class":516},[506,2024,694],{"class":516},[506,2026,2027,2030,2032,2034,2036,2038],{"class":508,"line":1629},[506,2028,2029],{"class":626},"    outcome",[506,2031,630],{"class":516},[506,2033,536],{"class":516},[506,2035,846],{"class":539},[506,2037,595],{"class":516},[506,2039,676],{"class":516},[506,2041,2042,2044],{"class":508,"line":1634},[506,2043,1610],{"class":516},[506,2045,1349],{"class":626},[506,2047,2049],{"class":508,"line":2048},13,[506,2050,571],{"emptyLinePlaceholder":570},[506,2052,2054,2056,2058,2061],{"class":508,"line":2053},14,[506,2055,1967],{"class":520},[506,2057,580],{"class":516},[506,2059,2060],{"class":588},"restore",[506,2062,1620],{"class":626},[506,2064,2066,2068],{"class":508,"line":2065},15,[506,2067,1273],{"class":516},[506,2069,1349],{"class":520},[471,2071,2072,2073,2076,2077,2080,2081,580],{},"Prefer ",[475,2074,2075],{},"assertAudit()"," when a missing audit should fail the test with a readable message. Use ",[475,2078,2079],{},"toIncludeAuditOf()"," when you need a boolean inside ",[475,2082,2083],{},"expect(...)",[471,2085,2086,2087,2090,2091,2094],{},"Always call ",[475,2088,2089],{},"captured.restore()"," in an ",[475,2092,2093],{},"afterEach"," (or wrap with a fixture) so a failing assertion never leaks into the next test.",[488,2096,2098],{"id":2097},"api-reference","API Reference",[2100,2101,2102,2118],"table",{},[2103,2104,2105],"thead",{},[2106,2107,2108,2112,2115],"tr",{},[2109,2110,2111],"th",{},"Symbol",[2109,2113,2114],{},"Kind",[2109,2116,2117],{},"Notes",[2119,2120,2121,2134,2147,2159,2175,2187,2200,2213,2229,2246,2259,2274,2286],"tbody",{},[2106,2122,2123,2129,2131],{},[2124,2125,2126],"td",{},[475,2127,2128],{},"AuditFields",[2124,2130,757],{},[2124,2132,2133],{},"Reserved field on the wide event",[2106,2135,2136,2141,2144],{},[2124,2137,2138],{},[475,2139,2140],{},"defineAuditAction(name, opts?)",[2124,2142,2143],{},"factory",[2124,2145,2146],{},"Typed action registry, infers target shape",[2106,2148,2149,2154,2156],{},[2124,2150,2151],{},[475,2152,2153],{},"defineAuditCatalog(prefix, map)",[2124,2155,2143],{},[2124,2157,2158],{},"Bundle of typed audit actions sharing a prefix",[2106,2160,2161,2166,2169],{},[2124,2162,2163],{},[475,2164,2165],{},"log.audit(fields)",[2124,2167,2168],{},"method",[2124,2170,2171,2172,2174],{},"Sugar over ",[475,2173,1823],{}," + force-keep",[2106,2176,2177,2182,2184],{},[2124,2178,2179],{},[475,2180,2181],{},"log.audit.deny(reason, fields)",[2124,2183,2168],{},[2124,2185,2186],{},"Records a denied action",[2106,2188,2189,2194,2197],{},[2124,2190,2191],{},[475,2192,2193],{},"audit(fields)",[2124,2195,2196],{},"function",[2124,2198,2199],{},"Standalone for scripts \u002F jobs",[2106,2201,2202,2207,2210],{},[2124,2203,2204],{},[475,2205,2206],{},"withAudit({ action, target })(fn)",[2124,2208,2209],{},"wrapper",[2124,2211,2212],{},"Auto-emit success \u002F failure \u002F denied",[2106,2214,2215,2220,2223],{},[2124,2216,2217],{},[475,2218,2219],{},"auditDiff(before, after)",[2124,2221,2222],{},"helper",[2124,2224,2225,2226],{},"Redact-aware JSON Patch for ",[475,2227,2228],{},"changes",[2106,2230,2231,2235,2238],{},[2124,2232,2233],{},[475,2234,1812],{},[2124,2236,2237],{},"test util",[2124,2239,2240,2241,2243,2244],{},"Capture audits on emit; ",[475,2242,2075],{}," or ",[475,2245,2079],{},[2106,2247,2248,2253,2256],{},[2124,2249,2250],{},[475,2251,2252],{},"auditEnricher(opts?)",[2124,2254,2255],{},"enricher",[2124,2257,2258],{},"Auto-fill request \u002F runtime \u002F tenant context",[2106,2260,2261,2266,2268],{},[2124,2262,2263],{},[475,2264,2265],{},"auditOnly(drain, { await? })",[2124,2267,2209],{},[2124,2269,2270,2271,2273],{},"Routes only events with an ",[475,2272,719],{}," field",[2106,2275,2276,2281,2283],{},[2124,2277,2278],{},[475,2279,2280],{},"signed(drain, opts)",[2124,2282,2209],{},[2124,2284,2285],{},"Generic integrity wrapper (hmac \u002F hash-chain)",[2106,2287,2288,2293,2296],{},[2124,2289,2290],{},[475,2291,2292],{},"auditRedactPreset",[2124,2294,2295],{},"config",[2124,2297,2298],{},"Strict PII for audit events",[471,2300,2301,2302,2304],{},"Everything ships from the main ",[475,2303,540],{}," entrypoint.",[2306,2307,2308],"style",{},"html pre.shiki code .s7zQu, html code.shiki .s7zQu{--shiki-light:#39ADB5;--shiki-light-font-style:italic;--shiki-default:#89DDFF;--shiki-default-font-style:italic;--shiki-dark:#89DDFF;--shiki-dark-font-style:italic}html pre.shiki code .sMK4o, html code.shiki .sMK4o{--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF}html pre.shiki code .sTEyZ, html code.shiki .sTEyZ{--shiki-light:#90A4AE;--shiki-default:#EEFFFF;--shiki-dark:#BABED8}html pre.shiki code .sfazB, html code.shiki .sfazB{--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D}html pre.shiki code .s2Zo4, html code.shiki .s2Zo4{--shiki-light:#6182B8;--shiki-default:#82AAFF;--shiki-dark:#82AAFF}html pre.shiki code .swJcz, html code.shiki .swJcz{--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178}html pre.shiki code .sbssI, html code.shiki .sbssI{--shiki-light:#F76D47;--shiki-default:#F78C6C;--shiki-dark:#F78C6C}html pre.shiki code .sfNiH, html code.shiki .sfNiH{--shiki-light:#FF5370;--shiki-default:#FF9CAC;--shiki-dark:#FF9CAC}html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html pre.shiki code .spNyl, html code.shiki .spNyl{--shiki-light:#9C3EDA;--shiki-default:#C792EA;--shiki-dark:#C792EA}html pre.shiki code .sHdIc, html code.shiki .sHdIc{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#EEFFFF;--shiki-default-font-style:italic;--shiki-dark:#BABED8;--shiki-dark-font-style:italic}html pre.shiki code .sBMFI, html code.shiki .sBMFI{--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B}html pre.shiki code .sHwdD, html code.shiki .sHwdD{--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic}",{"title":502,"searchDepth":546,"depth":546,"links":2310},[2311,2312,2313,2314,2315],{"id":490,"depth":546,"text":491},{"id":1111,"depth":546,"text":1112},{"id":1417,"depth":546,"text":1418},{"id":1806,"depth":546,"text":1807},{"id":2097,"depth":546,"text":2098},"File system, Axiom, and Postgres recipes for audit logs, plus mockAudit for tests and the full API reference.","md",[2319,2322],{"label":341,"icon":318,"to":342,"color":2320,"variant":2321},"neutral","subtle",{"label":90,"icon":88,"to":95,"color":2320,"variant":2321},{},{"title":345,"icon":79},{"title":466,"description":2316},"G8NB7FnsfQLN3-X8z-VLmRH1fueHa9SspEKWSridTto",[2328,2330],{"title":341,"path":342,"stem":343,"description":2329,"icon":318,"children":-1},"Integrity, redact presets, GDPR vs append-only, retention windows, and the most common pitfalls when shipping audit logs to production.",{"title":36,"path":353,"stem":354,"description":2331,"icon":39,"children":-1},"Wide-event telemetry for CLIs and automation — evlog's one-event-per-run model for tools on user machines, with privacy-safe flags, consent, outbox, and auto-generated disclosure.",1784215261243]