intentkit-audit

Immutable compliance audit log middleware for IntentKit. Records every agent action for compliance-grade verification.

Install

npm install intentkit-audit

Requires intentkit as a peer dependency.

Usage

import { IntentRegistry } from 'intentkit';
import { createAuditMiddleware } from 'intentkit-audit';

const registry = new IntentRegistry();

const audit = createAuditMiddleware({
  storage: 'sqlite',
  connectionString: './audit.db',
  hashPII: true,
  piiFields: ['email', 'name'],
});

registry.use(audit.middleware);
registry.register(/* your functions */);

// Query: "prove no agent deleted data without admin permissions between March 1-15"
const entries = await audit.query.verify('delete_task', {
  since: '2026-03-01T00:00:00Z',
  until: '2026-03-15T23:59:59Z',
});

// Export for compliance review
const csv = await audit.query.export('csv', { since: '2026-03-01' });

// Cleanup
await audit.destroy();

API

• createAuditMiddleware(options) — returns { middleware, query, destroy }
• queryAudit(options) — read-only access to existing audit data
• audit.query.search(filters) — search entries by time, function, role, action
• audit.query.roleActivity(since, until?) — action counts grouped by role
• audit.query.verify(functionName, timeRange) — compliance verification query
• audit.query.export(format, filters?) — export as CSV or JSON

License

MIT