audit

package

v0.4.1 Latest Latest Go to latest Published: Oct 15, 2026 License: Apache-2.0 Imports: 12 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type Event struct {
	Actor     string
	SessionID *uuid.UUID
	RunID     *uuid.UUID
	Action    string
	Metadata  models.JSONB
}

type Logger struct {
	// contains filtered or unexported fields
}

func New(db *sqlx.DB, hmacKey string) *Logger

New creates an audit Logger. hmacKey is the raw HMAC-SHA256 signing key (AUDIT_HMAC_KEY env var). Pass an empty string to disable signing.

func (l *Logger) Enabled() bool

Enabled reports whether entries are being signed (AUDIT_HMAC_KEY is set).

func (l *Logger) Log(ctx context.Context, e Event)

func (l *Logger) VerifyAuditSig(entry *models.AuditLog) bool

VerifyAuditSig re-computes the HMAC for entry and returns true when it matches the stored Sig. Returns false when signing is not configured.