@stotles/better-auth-audit-logs 0.4.0-rc.1

package/dist/internal.d.ts

@@ -0,0 +1,16 @@
+import type { GenericEndpointContext } from "@better-auth/core";
+import type { AuditLogEntry, AuditLogStatus, PathConfig, ResolvedOptions } from "./types";
+interface BuildParams {
+    userId: string | null;
+    request: Request | undefined;
+    headers: Headers | undefined;
+    metadata?: Record<string, unknown>;
+    pathConfig?: PathConfig;
+    options: ResolvedOptions;
+    authOptions: GenericEndpointContext["context"]["options"];
+    logger?: GenericEndpointContext["context"]["logger"];
+}
+export declare function buildLogEntry(path: string, status: AuditLogStatus, params: BuildParams): Promise<Omit<AuditLogEntry, "id">>;
+export declare function buildLogEntryFromAction(action: string, status: AuditLogStatus, params: Omit<BuildParams, "pathConfig">): Promise<Omit<AuditLogEntry, "id">>;
+export declare function writeEntry(ctx: GenericEndpointContext, entry: Omit<AuditLogEntry, "id">, opts: ResolvedOptions, modelName: string): Promise<void>;
+export {};

package/dist/internal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../src/internal.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAChE,OAAO,KAAK,EACV,aAAa,EACb,cAAc,EACd,UAAU,EACV,eAAe,EAChB,MAAM,SAAS,CAAC;AAUjB,UAAU,WAAW;IACnB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,OAAO,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,OAAO,EAAE,eAAe,CAAC;IACzB,WAAW,EAAE,sBAAsB,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC;CAC3D;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CA+BpC;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,GACtC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC,CAwBpC;AAED,wBAAsB,UAAU,CAC9B,GAAG,EAAE,sBAAsB,EAC3B,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,EAChC,IAAI,EAAE,eAAe,EACrB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAuDf"}

package/dist/plugin.d.ts

@@ -0,0 +1,180 @@
+import type { AuditLogOptions } from "./types";
+export declare function auditLog(options?: AuditLogOptions): {
+    id: "audit-log";
+    schema: {
+        auditLog: {
+            modelName: string;
+            fields: {
+                userId: {
+                    type: "string";
+                    required: boolean;
+                    references: {
+                        model: string;
+                        field: string;
+                        onDelete: "set null";
+                    };
+                    index: boolean;
+                };
+                action: {
+                    type: "string";
+                    required: boolean;
+                    sortable: boolean;
+                    index: boolean;
+                };
+                status: {
+                    type: "string";
+                    required: boolean;
+                    sortable: boolean;
+                };
+                severity: {
+                    type: "string";
+                    required: boolean;
+                    sortable: boolean;
+                };
+                ipAddress: {
+                    type: "string";
+                    required: boolean;
+                };
+                userAgent: {
+                    type: "string";
+                    required: boolean;
+                    returned: boolean;
+                };
+                metadata: {
+                    type: "string";
+                    required: boolean;
+                };
+                createdAt: {
+                    type: "date";
+                    required: boolean;
+                    sortable: boolean;
+                    index: boolean;
+                    defaultValue: () => Date;
+                };
+            };
+        };
+    };
+    hooks: {
+        before: {
+            matcher: (context: import("better-auth").HookEndpointContext) => boolean;
+            handler: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
+        }[];
+        after: {
+            matcher: (context: import("better-auth").HookEndpointContext) => boolean;
+            handler: (inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<void>;
+        }[];
+    };
+    endpoints: {
+        listAuditLogs: import("better-call").StrictEndpoint<"/audit-log/list", {
+            method: "GET";
+            use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+                session: {
+                    session: Record<string, any> & {
+                        id: string;
+                        createdAt: Date;
+                        updatedAt: Date;
+                        userId: string;
+                        expiresAt: Date;
+                        token: string;
+                        ipAddress?: string | null | undefined;
+                        userAgent?: string | null | undefined;
+                    };
+                    user: Record<string, any> & {
+                        id: string;
+                        createdAt: Date;
+                        updatedAt: Date;
+                        email: string;
+                        emailVerified: boolean;
+                        name: string;
+                        image?: string | null | undefined;
+                    };
+                };
+            }>)[];
+            query: import("zod").ZodObject<{
+                userId: import("zod").ZodOptional<import("zod").ZodString>;
+                action: import("zod").ZodOptional<import("zod").ZodString>;
+                status: import("zod").ZodOptional<import("zod").ZodEnum<{
+                    success: "success";
+                    failed: "failed";
+                }>>;
+                from: import("zod").ZodOptional<import("zod").ZodString>;
+                to: import("zod").ZodOptional<import("zod").ZodString>;
+                limit: import("zod").ZodDefault<import("zod").ZodOptional<import("zod").ZodCoercedNumber<unknown>>>;
+                offset: import("zod").ZodDefault<import("zod").ZodOptional<import("zod").ZodCoercedNumber<unknown>>>;
+            }, import("zod/v4/core").$strip>;
+        }, import("./types").StorageReadResult>;
+        getAuditLog: import("better-call").StrictEndpoint<"/audit-log/:id", {
+            method: "GET";
+            use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+                session: {
+                    session: Record<string, any> & {
+                        id: string;
+                        createdAt: Date;
+                        updatedAt: Date;
+                        userId: string;
+                        expiresAt: Date;
+                        token: string;
+                        ipAddress?: string | null | undefined;
+                        userAgent?: string | null | undefined;
+                    };
+                    user: Record<string, any> & {
+                        id: string;
+                        createdAt: Date;
+                        updatedAt: Date;
+                        email: string;
+                        emailVerified: boolean;
+                        name: string;
+                        image?: string | null | undefined;
+                    };
+                };
+            }>)[];
+        }, import("./types").AuditLogEntry>;
+        insertAuditLog: import("better-call").StrictEndpoint<"/audit-log/insert", {
+            method: "POST";
+            use: ((inputContext: import("better-call").MiddlewareInputContext<import("better-call").MiddlewareOptions>) => Promise<{
+                session: {
+                    session: Record<string, any> & {
+                        id: string;
+                        createdAt: Date;
+                        updatedAt: Date;
+                        userId: string;
+                        expiresAt: Date;
+                        token: string;
+                        ipAddress?: string | null | undefined;
+                        userAgent?: string | null | undefined;
+                    };
+                    user: Record<string, any> & {
+                        id: string;
+                        createdAt: Date;
+                        updatedAt: Date;
+                        email: string;
+                        emailVerified: boolean;
+                        name: string;
+                        image?: string | null | undefined;
+                    };
+                };
+            }>)[];
+            body: import("zod").ZodObject<{
+                action: import("zod").ZodString;
+                status: import("zod").ZodDefault<import("zod").ZodOptional<import("zod").ZodEnum<{
+                    success: "success";
+                    failed: "failed";
+                }>>>;
+                severity: import("zod").ZodOptional<import("zod").ZodEnum<{
+                    low: "low";
+                    medium: "medium";
+                    high: "high";
+                    critical: "critical";
+                }>>;
+                metadata: import("zod").ZodDefault<import("zod").ZodOptional<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>>;
+            }, import("zod/v4/core").$strip>;
+        }, {
+            success: boolean;
+        }>;
+    };
+    rateLimit: {
+        pathMatcher: (path: string) => boolean;
+        window: number;
+        max: number;
+    }[];
+};

package/dist/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,eAAe,EAGhB,MAAM,SAAS,CAAC;AAqFjB,wBAAgB,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAtB5B,CAAC;iCAEF,CAAC;;;;;;;;;6BAKsB,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAPvB,CAAC;iCAEF,CAAC;;;;;;;;;6BAKsB,CAAC;;;;;;;;;;;;;;;;iCAPvB,CAAC;iCAEF,CAAC;;;;;;;;;6BAKsB,CAAC;;;;;;;;;;;;;;;;;;;;;;;4BAyCjB,MAAM;;;;EAMjC"}

package/dist/schema.d.ts

@@ -0,0 +1,109 @@
+import type { AuditLogOptions } from "./types";
+export declare const baseSchema: {
+    auditLog: {
+        modelName: string;
+        fields: {
+            userId: {
+                type: "string";
+                required: boolean;
+                references: {
+                    model: string;
+                    field: string;
+                    onDelete: "set null";
+                };
+                index: boolean;
+            };
+            action: {
+                type: "string";
+                required: boolean;
+                sortable: boolean;
+                index: boolean;
+            };
+            status: {
+                type: "string";
+                required: boolean;
+                sortable: boolean;
+            };
+            severity: {
+                type: "string";
+                required: boolean;
+                sortable: boolean;
+            };
+            ipAddress: {
+                type: "string";
+                required: boolean;
+            };
+            userAgent: {
+                type: "string";
+                required: boolean;
+                returned: boolean;
+            };
+            metadata: {
+                type: "string";
+                required: boolean;
+            };
+            createdAt: {
+                type: "date";
+                required: boolean;
+                sortable: boolean;
+                index: boolean;
+                defaultValue: () => Date;
+            };
+        };
+    };
+};
+export declare function buildSchema(options?: AuditLogOptions): {
+    auditLog: {
+        modelName: string;
+        fields: {
+            userId: {
+                type: "string";
+                required: boolean;
+                references: {
+                    model: string;
+                    field: string;
+                    onDelete: "set null";
+                };
+                index: boolean;
+            };
+            action: {
+                type: "string";
+                required: boolean;
+                sortable: boolean;
+                index: boolean;
+            };
+            status: {
+                type: "string";
+                required: boolean;
+                sortable: boolean;
+            };
+            severity: {
+                type: "string";
+                required: boolean;
+                sortable: boolean;
+            };
+            ipAddress: {
+                type: "string";
+                required: boolean;
+            };
+            userAgent: {
+                type: "string";
+                required: boolean;
+                returned: boolean;
+            };
+            metadata: {
+                type: "string";
+                required: boolean;
+            };
+            createdAt: {
+                type: "date";
+                required: boolean;
+                sortable: boolean;
+                index: boolean;
+                defaultValue: () => Date;
+            };
+        };
+    };
+};
+export declare function getModelName(options?: AuditLogOptions): string;
+export declare function validateSchema(schema: ReturnType<typeof buildSchema>): void;

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AAE/C,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoDtB,CAAC;AAEF,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEpD;AAED,wBAAgB,YAAY,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,MAAM,CAE9D;AAID,wBAAgB,cAAc,CAC5B,MAAM,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,GACrC,IAAI,CAkBN"}

package/dist/types.d.ts

@@ -0,0 +1,102 @@
+import type { GenericEndpointContext } from "@better-auth/core";
+export type AuditLogStatus = "success" | "failed";
+export type AuditLogSeverity = "low" | "medium" | "high" | "critical";
+export type PIIStrategy = "mask" | "hash" | "remove";
+export interface AuditLogEntry {
+    id: string;
+    userId: string | null;
+    action: string;
+    status: AuditLogStatus;
+    severity: AuditLogSeverity;
+    ipAddress: string | null;
+    userAgent: string | null;
+    metadata: Record<string, unknown>;
+    createdAt: Date;
+}
+export interface StorageReadOptions {
+    userId?: string;
+    action?: string;
+    status?: AuditLogStatus;
+    from?: Date;
+    to?: Date;
+    limit: number;
+    offset: number;
+}
+export interface StorageReadResult {
+    entries: AuditLogEntry[];
+    total: number;
+}
+export interface AuditLogStorage {
+    write(entry: AuditLogEntry): Promise<void>;
+    read?(options: StorageReadOptions): Promise<StorageReadResult>;
+    readById?(id: string): Promise<AuditLogEntry | null>;
+    deleteOlderThan?(date: Date): Promise<number>;
+}
+export interface PIIRedactionOptions {
+    enabled: boolean;
+    fields?: string[];
+    strategy?: PIIStrategy;
+}
+export interface CaptureOptions {
+    ipAddress?: boolean;
+    userAgent?: boolean;
+    requestBody?: boolean;
+}
+export interface PathConfig {
+    severity?: AuditLogSeverity;
+    capture?: CaptureOptions;
+}
+export interface RetentionConfig {
+    enabled: boolean;
+    days: number;
+}
+export interface MetadataLimitsConfig {
+    maxBytes?: number;
+    maxDepth?: number;
+}
+export interface AuditLogOptions {
+    enabled?: boolean;
+    nonBlocking?: boolean;
+    storage?: AuditLogStorage;
+    paths?: (string | {
+        path: string;
+        config?: PathConfig;
+    })[];
+    beforePaths?: string[];
+    piiRedaction?: PIIRedactionOptions;
+    capture?: CaptureOptions;
+    retention?: RetentionConfig;
+    metadataLimits?: MetadataLimitsConfig | false;
+    schema?: {
+        auditLog?: {
+            modelName?: string;
+            fields?: Record<string, string>;
+        };
+    };
+    beforeLog?: (entry: Omit<AuditLogEntry, "id">, ctx: GenericEndpointContext) => Promise<Omit<AuditLogEntry, "id"> | null>;
+    afterLog?: (entry: AuditLogEntry) => Promise<void>;
+    onWriteError?: (error: unknown, entry: Omit<AuditLogEntry, "id">) => void;
+}
+export interface ResolvedMetadataLimits {
+    maxBytes: number;
+    maxDepth: number;
+}
+export interface ResolvedOptions {
+    enabled: boolean;
+    nonBlocking: boolean;
+    storage: AuditLogStorage | undefined;
+    capture: Required<CaptureOptions>;
+    piiRedaction: {
+        enabled: boolean;
+        fields?: string[];
+        strategy: PIIStrategy;
+    };
+    retention: RetentionConfig | undefined;
+    metadataLimits: ResolvedMetadataLimits | false;
+    beforePaths: readonly string[];
+    beforeLog: AuditLogOptions["beforeLog"];
+    afterLog: AuditLogOptions["afterLog"];
+    onWriteError: AuditLogOptions["onWriteError"];
+    shouldCapture: (path: string) => boolean;
+    getPathConfig: (path: string) => PathConfig | undefined;
+}

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,QAAQ,CAAC;AAClD,MAAM,MAAM,gBAAgB,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AACtE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;AAErD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,cAAc,CAAC;IACvB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,EAAE,CAAC,EAAE,IAAI,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,CAAC,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,CAAC,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/D,QAAQ,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACrD,eAAe,CAAC,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,WAAW,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,KAAK,CAAC,EAAE,CAAC,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,UAAU,CAAA;KAAE,CAAC,EAAE,CAAC;IAC3D,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,cAAc,CAAC,EAAE,oBAAoB,GAAG,KAAK,CAAC;IAC9C,MAAM,CAAC,EAAE;QACP,QAAQ,CAAC,EAAE;YACT,SAAS,CAAC,EAAE,MAAM,CAAC;YACnB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACjC,CAAC;KACH,CAAC;IACF,SAAS,CAAC,EAAE,CACV,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,KAC7B,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAC/C,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC;CAC3E;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,OAAO,CAAC;IACrB,OAAO,EAAE,eAAe,GAAG,SAAS,CAAC;IACrC,OAAO,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAClC,YAAY,EAAE;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,EAAE,WAAW,CAAA;KAAE,CAAC;IAC7E,SAAS,EAAE,eAAe,GAAG,SAAS,CAAC;IACvC,cAAc,EAAE,sBAAsB,GAAG,KAAK,CAAC;IAC/C,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;IACxC,QAAQ,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC;IACtC,YAAY,EAAE,eAAe,CAAC,cAAc,CAAC,CAAC;IAC9C,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,UAAU,GAAG,SAAS,CAAC;CACzD"}

package/dist/utils/index.d.ts

@@ -0,0 +1,7 @@
+export { normalizePath } from "./normalize-path";
+export { inferSeverity } from "./severity";
+export { extractRequestMeta } from "./request-meta";
+export { redactPII, DEFAULT_PII_FIELDS } from "./sanitize";
+export { parseMetadata } from "./parse-metadata";
+export { validateEntry } from "./validate-entry";
+export { withRetry } from "./retry";

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC"}

package/dist/utils/normalize-path.d.ts

@@ -0,0 +1 @@
+export declare function normalizePath(path: string): string;

package/dist/utils/normalize-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"normalize-path.d.ts","sourceRoot":"","sources":["../../src/utils/normalize-path.ts"],"names":[],"mappings":"AAAA,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD"}

package/dist/utils/parse-metadata.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Safely parse metadata from a database record.
+ *
+ * The schema stores metadata as a JSON string, but the application type is
+ * Record<string, unknown>. This function centralizes the conversion and
+ * handles corrupt/malformed data gracefully.
+ */
+export declare function parseMetadata(raw: unknown): Record<string, unknown>;

package/dist/utils/parse-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse-metadata.d.ts","sourceRoot":"","sources":["../../src/utils/parse-metadata.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoBnE"}

package/dist/utils/request-meta.d.ts

@@ -0,0 +1,9 @@
+import type { BetterAuthOptions } from "better-auth";
+type Logger = {
+    error: (message: string, ...args: unknown[]) => void;
+};
+export declare function extractRequestMeta(request: Request | undefined, headers: Headers | undefined, options: BetterAuthOptions, logger?: Logger): {
+    ipAddress: string | null;
+    userAgent: string | null;
+};
+export {};

package/dist/utils/request-meta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-meta.d.ts","sourceRoot":"","sources":["../../src/utils/request-meta.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAYrD,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,OAAO,GAAG,SAAS,EAC5B,OAAO,EAAE,OAAO,GAAG,SAAS,EAC5B,OAAO,EAAE,iBAAiB,GACzB;IAAE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAKxD"}

package/dist/utils/retry.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Retry an async operation with exponential backoff.
+ * Throws the last error if all retries are exhausted.
+ */
+export declare function withRetry<T>(fn: () => Promise<T>, opts: {
+    maxRetries: number;
+    baseDelayMs: number;
+}): Promise<T>;

package/dist/utils/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../../src/utils/retry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAC/B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACpB,IAAI,EAAE;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAChD,OAAO,CAAC,CAAC,CAAC,CAgBZ"}

package/dist/utils/sanitize.d.ts

@@ -0,0 +1,3 @@
+import type { PIIRedactionOptions } from "../types";
+export declare const DEFAULT_PII_FIELDS: string[];
+export declare function redactPII(data: Record<string, unknown>, config: PIIRedactionOptions): Promise<Record<string, unknown>>;

package/dist/utils/sanitize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/utils/sanitize.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAEpD,eAAO,MAAM,kBAAkB,UAY9B,CAAC;AAUF,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAoBlC"}

package/dist/utils/severity.d.ts

@@ -0,0 +1,2 @@
+import type { AuditLogSeverity, AuditLogStatus } from "../types";
+export declare function inferSeverity(action: string, status: AuditLogStatus): AuditLogSeverity;

package/dist/utils/severity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"severity.d.ts","sourceRoot":"","sources":["../../src/utils/severity.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAiBjE,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,cAAc,GACrB,gBAAgB,CAQlB"}

package/dist/utils/validate-entry.d.ts

@@ -0,0 +1,8 @@
+import type { AuditLogEntry } from "../types";
+/**
+ * Validate that a beforeLog return value has all required fields.
+ * Returns the validated entry or null if validation fails.
+ */
+export declare function validateEntry(entry: unknown, logger?: {
+    warn: (message: string, ...args: unknown[]) => void;
+}): Omit<AuditLogEntry, "id"> | null;

package/dist/utils/validate-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-entry.d.ts","sourceRoot":"","sources":["../../src/utils/validate-entry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAiB9C;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,OAAO,EACd,MAAM,CAAC,EAAE;IAAE,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,IAAI,CAAA;CAAE,GAC/D,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,IAAI,CAUlC"}

package/dist/utils/validate-metadata.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Validate metadata size constraints to prevent abuse.
+ * Returns an error message if validation fails, null if valid.
+ */
+export interface MetadataLimits {
+    maxBytes: number;
+    maxDepth: number;
+}
+export declare const DEFAULT_METADATA_LIMITS: MetadataLimits;
+export declare function validateMetadataSize(metadata: Record<string, unknown>, limits?: MetadataLimits): string | null;

package/dist/utils/validate-metadata.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-metadata.d.ts","sourceRoot":"","sources":["../../src/utils/validate-metadata.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,uBAAuB,EAAE,cAGrC,CAAC;AAqBF,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,MAAM,GAAE,cAAwC,GAC/C,MAAM,GAAG,IAAI,CAYf"}

package/package.json

@@ -0,0 +1,72 @@
+{
+  "name": "@stotles/better-auth-audit-logs",
+  "version": "0.4.0-rc.1",
+  "description": "Audit log plugin for Better Auth. Captures auth lifecycle events, stores structured log entries, and exposes query endpoints with PII redaction and custom storage backends.",
+  "type": "module",
+  "license": "MIT",
+  "author": "Ejiro Asiuwhu <ejiroasiuwhu10@gmail.com>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Stotles/better-auth-audit-logs.git"
+  },
+  "homepage": "https://github.com/Stotles/better-auth-audit-logs#readme",
+  "bugs": {
+    "url": "https://github.com/Stotles/better-auth-audit-logs/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "keywords": [
+    "better-auth",
+    "better-auth-plugin",
+    "audit-log",
+    "audit-trail",
+    "auth",
+    "authentication",
+    "security",
+    "logging",
+    "compliance",
+    "pii-redaction",
+    "session-tracking"
+  ],
+  "main": "./dist/index.cjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "require": "./dist/index.cjs",
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./client": {
+      "require": "./dist/client.cjs",
+      "import": "./dist/client.js",
+      "types": "./dist/client.d.ts"
+    }
+  },
+  "typesVersions": {
+    "*": {
+      "client": [
+        "./dist/client.d.ts"
+      ]
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "bun build src/index.ts src/client.ts --outdir dist --target node --external better-auth --external zod && bun build src/index.ts src/client.ts --outdir dist --target node --format cjs --entry-naming '[dir]/[name].cjs' --external better-auth --external zod && tsc -p tsconfig.build.json",
+    "test": "bun test",
+    "typecheck": "tsc --noEmit",
+    "check": "tsc --noEmit && bun test"
+  },
+  "peerDependencies": {
+    "better-auth": ">=1.0.0",
+    "zod": ">=3.0.0",
+    "typescript": "^5"
+  },
+  "devDependencies": {
+    "@types/bun": "latest",
+    "better-auth": "^1.5.5",
+    "zod": "^4.3.6"
+  }
+}