Class: DecisionLogRepository

Defined in: server/access/decision-log-repository.ts:23

Append-only writer for the decision audit log. SENSITIVE security dataset — the trace holds policy references + condition outcomes only, never full resource payloads. In v1 this backs the OPT-IN createTableDecisionSink adapter (an onDecision hook implementation); the default audit boundary is the no-op hook. Writes are fire-and-forget off the hot path (the sink wraps append so a failure never fails the can() decision), so this repo only exposes append + read helpers; there is no update/delete surface.

ExtendsCopy Anchor Link

• BaseRepository<PrismaClient, Tx<PrismaClient>>

ConstructorsCopy Anchor Link

ConstructorCopy Anchor Link

new DecisionLogRepository(prismaClient: PrismaClientLike<Tx<PrismaClient<PrismaClientOptions, never, DefaultArgs>>> & PrismaClient<PrismaClientOptions, never, DefaultArgs>, options?: RepositoryOptions): DecisionLogRepository;

Defined in: server/persistence/base-repository.ts:68

ParametersCopy Anchor Link

ReturnsCopy Anchor Link

DecisionLogRepository

Inherited fromCopy Anchor Link

BaseRepository.constructor

PropertiesCopy Anchor Link

ENTITY_TYPE?Copy Anchor Link

protected readonly optional ENTITY_TYPE?: string;

Defined in: server/persistence/base-repository.ts:61

Set ENTITY_TYPE in child repositories to enable automatic activity logging. When set, create/update/delete operations auto-log unless silenced with .silent. Requires an activity model on the consumer's Prisma schema.

Inherited fromCopy Anchor Link

BaseRepository.ENTITY_TYPE

logger?Copy Anchor Link

protected readonly optional logger?: Logger;

Defined in: server/persistence/base-repository.ts:64

Inherited fromCopy Anchor Link

BaseRepository.logger

prismaClientCopy Anchor Link

protected prismaClient: PrismaClientLike<Tx<PrismaClient<PrismaClientOptions, never, DefaultArgs>>> & PrismaClient<PrismaClientOptions, never, DefaultArgs>;

Defined in: server/persistence/base-repository.ts:69

Inherited fromCopy Anchor Link

BaseRepository.prismaClient

AccessorsCopy Anchor Link

actorIdCopy Anchor Link

Get SignatureCopy Anchor Link

get protected actorId(): string | null | undefined;

Defined in: server/persistence/base-repository.ts:76

ReturnsCopy Anchor Link

string | null | undefined

Inherited fromCopy Anchor Link

BaseRepository.actorId

auditCreateCopy Anchor Link

Get SignatureCopy Anchor Link

get protected auditCreate(): {
  createdBy: string | null | undefined;
  updatedBy: string | null | undefined;
};

Defined in: server/persistence/base-repository.ts:90

ReturnsCopy Anchor Link

{
  createdBy: string | null | undefined;
  updatedBy: string | null | undefined;
}

createdByCopy Anchor Link

createdBy: string | null | undefined = actorId;

updatedByCopy Anchor Link

updatedBy: string | null | undefined = actorId;

Inherited fromCopy Anchor Link

BaseRepository.auditCreate

auditDeleteCopy Anchor Link

Get SignatureCopy Anchor Link

get protected auditDelete(): {
  deletedAt: Date;
  deletedBy: string | null | undefined;
};

Defined in: server/persistence/base-repository.ts:99

ReturnsCopy Anchor Link

{
  deletedAt: Date;
  deletedBy: string | null | undefined;
}

deletedAtCopy Anchor Link

deletedAt: Date;

deletedByCopy Anchor Link

deletedBy: string | null | undefined;

Inherited fromCopy Anchor Link

BaseRepository.auditDelete

auditUpdateCopy Anchor Link

Get SignatureCopy Anchor Link

get protected auditUpdate(): {
  updatedBy: string | null | undefined;
};

Defined in: server/persistence/base-repository.ts:95

ReturnsCopy Anchor Link

{
  updatedBy: string | null | undefined;
}

updatedByCopy Anchor Link

updatedBy: string | null | undefined;

Inherited fromCopy Anchor Link

BaseRepository.auditUpdate

silentCopy Anchor Link

Get SignatureCopy Anchor Link

get silent(): this;

Defined in: server/persistence/base-repository.ts:115

Suppress activity logging for the next mutation call. One-shot: the flag is consumed by the next create/update/delete.

ExampleCopy Anchor Link

await repo.silent.update(id, data);   // no activity logged
await repo.update(id, data);          // activity logged normally

ReturnsCopy Anchor Link

this

Inherited fromCopy Anchor Link

BaseRepository.silent

txCopy Anchor Link

Get SignatureCopy Anchor Link

get protected tx(): TTx;

Defined in: server/persistence/base-repository.ts:86

The current Prisma handle: the active transaction if one is running on this async context, otherwise the raw client.

ReturnsCopy Anchor Link

TTx

Inherited fromCopy Anchor Link

BaseRepository.tx

MethodsCopy Anchor Link

append()Copy Anchor Link

append(entry: AccessDecisionEntry): Promise<{
  action: string;
  allowed: boolean;
  decidedAt: Date;
  id: string;
  organizationId: string | null;
  reason: string | null;
  resourceId: string | null;
  resourceType: string | null;
  scopeKey: string;
  subjectId: string;
  subjectType: RbacSubjectType;
  trace: JsonValue;
}>;

Defined in: server/access/decision-log-repository.ts:27

ParametersCopy Anchor Link

ReturnsCopy Anchor Link

Promise<{ action: string; allowed: boolean; decidedAt: Date; id: string; organizationId: string | null; reason: string | null; resourceId: string | null; resourceType: string | null; scopeKey: string; subjectId: string; subjectType: RbacSubjectType; trace: JsonValue; }>

consumeSilent()Copy Anchor Link

protected consumeSilent(): boolean;

Defined in: server/persistence/base-repository.ts:128

Consume and reset the silent flag. Called by template methods.

ReturnsCopy Anchor Link

boolean

Inherited fromCopy Anchor Link

BaseRepository.consumeSilent

findRecentForSubject()Copy Anchor Link

findRecentForSubject(
   scopeKey: string, 
   subjectType: SubjectType, 
   subjectId: string, 
   limit?: number
): Promise<{
  action: string;
  allowed: boolean;
  decidedAt: Date;
  id: string;
  organizationId: string | null;
  reason: string | null;
  resourceId: string | null;
  resourceType: string | null;
  scopeKey: string;
  subjectId: string;
  subjectType: RbacSubjectType;
  trace: JsonValue;
}[]>;

Defined in: server/access/decision-log-repository.ts:52

Recent decisions for a subject (newest first).

ParametersCopy Anchor Link

ReturnsCopy Anchor Link

Promise<{ action: string; allowed: boolean; decidedAt: Date; id: string; organizationId: string | null; reason: string | null; resourceId: string | null; resourceType: string | null; scopeKey: string; subjectId: string; subjectType: RbacSubjectType; trace: JsonValue; }[]>

logActivity()Copy Anchor Link

protected logActivity(
   _entityId: string, 
   _action: string, 
   _metadata?: Record<string, unknown>
): Promise<void>;

Defined in: server/persistence/base-repository.ts:140

Log an activity entry.

NOTE: This is not implemented because there's no activity model implemented in taproot yet! https://linear.app/kaizenlabs/issue/ENG-7846/add-activity-log-tables

ParametersCopy Anchor Link

ReturnsCopy Anchor Link

Promise<void>

Inherited fromCopy Anchor Link

BaseRepository.logActivity