Server-side libraries
for production SaaS

import { drizzle } from "drizzle-orm/node-postgres";
import { Pool } from "pg";
import { betterAudit } from "@usebetterdev/audit";
import { drizzleAuditAdapter, withAuditProxy } from "@usebetterdev/audit/drizzle";

const db = drizzle(new Pool({ connectionString: process.env.DATABASE_URL }));

export const audit = betterAudit({
  database: drizzleAuditAdapter(db),
  auditTables: ["users"],
});

audit.enrich("users", "UPDATE", {
  label: "user.profile.updated",
  description: ({ actorId }) =>
    `Actor ${actorId} updated user email and role`,
  severity: "medium",
  compliance: ["SOC2", "GDPR"],
  redact: ["password"],
});

// use auditedDb instead of db — mutations are captured automatically
export const auditedDb = withAuditProxy(db, audit.captureLog);

import { auditedDb } from "./audit";
import { usersTable } from "./schema";
import { eq } from "drizzle-orm";

// just use auditedDb like normal — audit entry captured automatically
await auditedDb.update(usersTable)
  .set({ email: "new@example.com", role: "admin" })
  .where(eq(usersTable.id, "usr_x9y8z7"));