Danijel Martinek
a2be5d5488
The audit-logs collection was never registered (record() would throw), bindAudit/createAuditErasureHook were unused, and DSR cascade-hard never touched the audit trail (audit finding A6). core-cms now registers the collection and wires a req-scoped afterDelete erasure hook on users; bindAllProduction binds the audit log into consent/DSR; cascade-hard pseudonymizes the subject's audit entries; the action select accepts the full AuditAction enum so consent/DSR entries pass validation. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
11 lines
270 B
TypeScript
11 lines
270 B
TypeScript
export {
|
|
createAuditErasureHook,
|
|
createReqScopedAuditErasureHook,
|
|
type AuditErasureHookOpts,
|
|
type ReqScopedAuditErasureHookOpts,
|
|
} from "./audit-erasure-hook";
|
|
export {
|
|
createAuditAfterReadHook,
|
|
type AuditAfterReadHookOpts,
|
|
} from "./audit-after-read-hook";
|