Skip to content

Interface: SecurityAuditEvent

Defined in: packages/core/src/observability/TelemetryEvent.ts:181

Emitted on every tool invocation for SOC2/GDPR audit compliance. See AuditTrail middleware for emission.

Properties

action

ts
readonly action: string;

Defined in: packages/core/src/observability/TelemetryEvent.ts:184


argsHash

ts
readonly argsHash: string;

Defined in: packages/core/src/observability/TelemetryEvent.ts:188

SHA-256 hash of arguments (no PII in log)


durationMs

ts
readonly durationMs: number;

Defined in: packages/core/src/observability/TelemetryEvent.ts:192

Execution duration in milliseconds


identity

ts
readonly identity: Record<string, string | undefined>;

Defined in: packages/core/src/observability/TelemetryEvent.ts:186

Extracted identity (userId, role, ip)


status

ts
readonly status: "error" | "success" | "firewall_blocked" | "rate_limited";

Defined in: packages/core/src/observability/TelemetryEvent.ts:190

Execution result status


timestamp

ts
readonly timestamp: number;

Defined in: packages/core/src/observability/TelemetryEvent.ts:193


tool

ts
readonly tool: string;

Defined in: packages/core/src/observability/TelemetryEvent.ts:183


type

ts
readonly type: "security.audit";

Defined in: packages/core/src/observability/TelemetryEvent.ts:182