Module audit 

Audit logging module

This module provides comprehensive audit logging capabilities for the MCP server, enabling security incident investigation through structured, immutable audit logs.

Features

• Structured JSON logging format
• Configurable log destinations (file, stdout, or both)
• Log rotation support
• Sensitive data redaction
• All security-relevant operations tracked

Security Operations Logged

• Episode creation/modification/deletion
• Relationship changes
• Configuration changes
• Authentication events
• Rate limit violations

Example

use do_memory_mcp::server::audit::{AuditLogger, AuditConfig, AuditDestination};

#[tokio::main]
async fn main() -> anyhow::Result<()> {
    let config = AuditConfig::from_env();
    let logger = AuditLogger::new(config).await?;

    logger.log_episode_creation(
        "client-123",
        "episode-uuid",
        "task description",
        true,
        None
    ).await;

    Ok(())
}

Re-exports

pub use core::AuditLogger;

pub use types::AuditConfig;

pub use types::AuditDestination;

pub use types::AuditLogEntry;

pub use types::AuditLogLevel;

Modules

core

Audit logging core implementation

episode_ops

Audit logging operations - Episode operations

pattern_ops

Audit logging operations - Pattern operations

query_ops

Audit logging operations - Query and batch operations

relationship_ops

Audit logging operations - Relationship operations

security_ops

Audit logging operations - Security and configuration operations

tag_ops

Audit logging operations - Tag operations

types

Audit logging types and configuration