Struct AuditLogConfig 

pub struct AuditLogConfig {
    pub log_path: PathBuf,
    pub buffer_size: usize,
    pub flush_interval_secs: u64,
    pub max_file_size: usize,
    pub rotation_count: usize,
    pub user_context: String,
}

Audit logger configuration

Path Selection Rules (per Codex iter10)

The audit log path is resolved as follows:

1. CLI override (--audit-log <path>): User-specified path takes precedence.
2. Environment variable (SQRY_AUDIT_LOG): Fallback if no CLI arg.
3. Default: .sqry-audit.jsonl in the current working directory.

Deployment Considerations

• Read-only repos: If deploying in a read-only directory, use --audit-log to specify a writable location (e.g., ~/.sqry/audit.jsonl or /tmp/sqry-audit.jsonl).
• Permission denied: The logger validates writability on startup and warns early if the path is unwritable.
• Multi-user: Consider using user-specific paths (~/.sqry/) to avoid conflicts.

Fields

log_path: PathBuf

Log file path

buffer_size: usize

Buffer size before auto-flush

flush_interval_secs: u64

Flush interval (seconds)

max_file_size: usize

Max file size before rotation (bytes)

rotation_count: usize

Number of rotated files to keep

user_context: String

User context for audit trail (per Codex iter10) Captured from environment: $SQRY_USER, $USER, or “unknown”

Implementations

impl AuditLogConfig

pub fn detect_user_context() -> String

Detect user context from environment (per Codex iter10)

Priority: $SQRY_USER > $USER > $USERNAME > “unknown”

pub fn with_log_path(self, path: PathBuf) -> Self

Create config with a custom log path

pub fn with_buffer_size(self, size: usize) -> Self

Create config with a custom buffer size

pub fn validate_path(&self) -> Result<(), PathValidationError>

Validate that the audit log path is writable (per Codex iter10)

Call this early in CLI startup to warn users if the path is unwritable. This prevents silent audit failures that would violate compliance requirements.

Returns

• Ok(()) if path is writable (or can be created)
• Err(PathValidationError) with explanation if unwritable

Errors

Returns error if the path is not writable due to permission or I/O issues.

Trait Implementations

impl Clone for AuditLogConfig

fn clone(&self) -> AuditLogConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for AuditLogConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for AuditLogConfig

fn default() -> Self

Returns the “default value” for a type.