Compliance & Audit Trail

import { Agent, AuditLogger, openai } from "@agentium/core";
import { SqliteStorage } from "@agentium/core";

const storage = new SqliteStorage("audit.db");
const auditLogger = new AuditLogger(storage, {
  hashAlgorithm: "sha256",
});

const agent = new Agent({
  name: "compliant-agent",
  model: openai("gpt-4o"),
  compliance: {
    enabled: true,
    storage,
    retention: {
      defaultRetentionDays: 365,
      personalDataRetentionDays: 730,
    },
  },
});

const entry = await auditLogger.log({
  traceId: "run-123",
  agentName: "support-agent",
  action: "llm.call",
  input: "How do I reset my password?",
  output: "To reset your password...",
  metadata: { model: "gpt-4o", tokens: 150 },
});

// entry.hash — SHA-256 of (previousHash + content)
// entry.previousHash — links to previous entry

const result = await auditLogger.verify();
// { valid: true } or { valid: false, brokenAt: "entry-id" }

const entries = await auditLogger.query({
  agentName: "support-agent",
  userId: "user-123",
  fromDate: new Date("2025-01-01"),
  toDate: new Date("2025-12-31"),
  action: "llm.call",
});

import { PiiGuard } from "@agentium/core";

const auditLogger = new AuditLogger(storage, {
  piiScrubber: new PiiGuard({ mode: "redact" }),
});