@pya-platform/audit 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,9 @@
+# @pya/audit
+
+## 0.1.0
+
+### Minor Changes
+
+- a9ca6bf: Initial release of the Pya platform packages. Extracted from `pyaeats-app`, consumed by `pyaeats-app` (food delivery) and `pyaserv` (services classifieds).
+
+  Each package exposes a Hono router factory (auth/cms/reviews/comments) or a typed helper (email/audit/cf) parameterised over Cloudflare D1 + KV bindings. UI primitives ship as Lit web components on top of `@pya/tokens` (CSS custom properties). See `ROADMAP.md` and `docs/phase-6-rollout.md` for the consumer cutover plan.

package/package.json

@@ -0,0 +1,22 @@
+{
+  "name": "@pya-platform/audit",
+  "version": "0.1.0",
+  "private": false,
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org",
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/undeadliner/pya-platform.git"
+  },
+  "type": "module",
+  "description": "Audit logging — emit structured events to the `audit` stream; downstream sinks aggregate by stream tag.",
+  "exports": {
+    ".": "./src/index.ts"
+  },
+  "scripts": {
+    "type-check": "tsc --noEmit",
+    "test": "echo '@pya/audit has no tests yet'"
+  }
+}

package/src/index.ts

@@ -0,0 +1,29 @@
+// @pya-platform/audit — structured audit logging.
+//
+// Every event is a single JSON line on stdout, prefixed with stream:'audit'.
+// Cloudflare Workers tail logs aggregate by stream tag; downstream pipelines
+// (Logpush → R2 → BigQuery / DuckDB) consume only audit-tagged lines.
+//
+// Don't throw, don't buffer, don't fetch — the audit log must work even when
+// every other dependency is broken.
+
+export interface AuditEvent {
+  /** Dot-separated event name. `<feature>.<action>` ([.modifier]). */
+  readonly event: string
+  /** When it happened. Defaults to "now" if omitted. */
+  readonly ts?: number
+  /** Subject of the action — typically a user id. */
+  readonly actorId?: string
+  /** Object of the action — order id, store id, comment id, etc. */
+  readonly targetId?: string
+  /** Outcome label. Examples: ok, created, linked, rejected, sent, failed. */
+  readonly outcome?: string
+  /** Free-form context. Keep small — log lines must not exceed ~32 KB. */
+  readonly meta?: Readonly<Record<string, unknown>>
+}
+
+export const audit = (event: AuditEvent): void => {
+  const ts = event.ts ?? Math.floor(Date.now() / 1000)
+  const { ts: _evTs, ...rest } = event
+  console.log(JSON.stringify({ stream: 'audit', ts, ...rest }))
+}

package/tsconfig.json

@@ -0,0 +1,9 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "rootDir": "src",
+    "outDir": "dist",
+    "noEmit": true
+  },
+  "include": ["src/**/*.ts"]
+}