Querying

AuditQuery

Reads go through AuditQueryInterface::page(AuditQuery) — keyset-paginated (ordered occurred_at DESC, id DESC, constant cost at any depth). An AuditQuery is always scope-bound: a tenant query carries its tenantId, so a caller can never widen scope.

new AuditQuery(
    scope:          Scope::Tenant,
    tenantId:       $orgId,
    action:         'member.role_granted',   // exact
    actionPrefix:   'payment.',              // namespace: payment.captured, payment.refunded, …
    search:         'grace hopper',          // free-text (driver-dependent)
    minSensitivity: Sensitivity::High,
    outcome:        Outcome::Denied,
    from:           $from, to: $to,
    cursor:         $cursor, limit: 50,
);

Facets

facets(AuditQuery) returns counts by action / sensitivity / outcome over the whole filtered set (pagination dropped) — the data behind a faceted filter rail. Counts don't shift as you scroll.

Search

Free-text search is a pluggable port (AuditSearchIndexInterface) that contributes a WHERE fragment to the single keyset query — no id-materialisation round-trip, so it composes with every other filter and with pagination.

• PostgresFtsSearchIndex (default on Postgres) — to_tsvector(…) @@ plainto_tsquery(…) over actor label + action + target + context, using the simple config so identifier-like tokens (action keys, ids) match verbatim. The matching expression GIN index is installed out-of-band by vortos:audit:pg:install.
• LikeSearchIndex — portable LIKE across the same columns; correct off Postgres.
• External — supply your own impl (OpenSearch, Elastic, …) via ->search(AuditSearchDriver::External).

Saved views

AuditSavedViewStoreInterface persists named, scope- and owner-bound filter sets (audit_saved_views). Reads are ownership-filtered in SQL, so one org can't enumerate another's views.

The console HTTP API (vortos-audit-admin)

Installing vortos/vortos-audit-admin mounts these endpoints (no app controllers required):

Records serialise camelCase with the impersonation chain emitted recursively as onBehalfOf.