Feature/ak 009 retention redaction idempotency validation

[y-aithnini]

Summary

• What does this PR change?

Why

• Why is this change needed?

Checklist

• Added/updated tests (if behavior changed)
• npm run lint passes
• npm run typecheck passes
• npm test passes
• npm run build passes
• Added a changeset (npx changeset) if this affects consumers

Notes

• Anything reviewers should pay attention to?

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull request overview

This PR expands AuditKit’s core capabilities (redaction, idempotency, retention, cursor pagination, observability/event hooks) while simplifying repository integration by removing the built-in MongoDB/mongoose adapter in favor of in-memory + custom repositories. It also adds supporting tooling (benchmarks, mutation testing), updates CI to a Node/OS matrix, and tightens cross-platform line-ending consistency.

Changes:

• Add runtime features to AuditService: PII redaction, idempotent write dedupe, retention/archival hooks, cursor-based pagination, observer + event publisher ports (with a default EventEmitter publisher).
• Remove MongoDB/mongoose repository adapter and update Nest module wiring to support only in-memory and custom repositories, including runtime options validation.
• Add developer tooling: Vitest benchmarks, Stryker mutation testing config, CI matrix expansion, and LF normalization.

Reviewed changes

Copilot reviewed 12 out of 13 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
vitest.config.ts	Configures Vitest bench runner include/exclude patterns.
tsconfig.json	Adds Node types, includes benchmarks in TS project, ignores TS 5.0 deprecations.
tsconfig.eslint.json	Includes benchmarks in ESLint TS program.
test/smoke.test.ts	Removes trivial smoke test.
stryker.config.json	Adds Stryker mutation testing configuration for Jest + ts-jest.
src/nest/providers.ts	Updates provider factory: option validation, custom repo support, default event publisher wiring, retention archive handler wiring.
src/nest/options.validation.ts	Adds centralized runtime validation + mapping to AuditService runtime options.
src/nest/module.ts	Updates module wiring for custom repos + runtime options; injects module options into AuditService creation.
src/nest/module.spec.ts	Updates module tests for custom repo + validation scenarios (retention/event streaming).
src/nest/interfaces.ts	Updates public module options: custom repo config + redaction/idempotency/retention/event streaming options.
src/infra/repositories/mongodb/mongo-audit.repository.ts	Removes MongoDB repository implementation.
src/infra/repositories/mongodb/mongo-audit.repository.spec.ts	Removes MongoDB repository unit tests.
src/infra/repositories/mongodb/index.ts	Removes MongoDB repository exports.
src/infra/repositories/mongodb/audit-log.schema.ts	Removes Mongoose schema definition.
src/infra/repositories/index.ts	Stops exporting MongoDB repository; keeps in-memory exports.
src/infra/repositories/in-memory/in-memory-audit.repository.ts	Adds archive handler support, cursor-pagination query, and idempotencyKey filtering refactor.
src/infra/repositories/cursor.util.ts	Adds base64url cursor encode/decode utilities.
src/infra/providers/index.ts	Exposes new events infra provider module.
src/infra/providers/events/index.ts	Adds events provider barrel export.
src/infra/providers/events/event-emitter-audit-event.publisher.ts	Adds default in-process EventEmitter-based audit event publisher.
src/core/types.ts	Adds idempotencyKey and cursor pagination types + filter support.
src/core/ports/index.ts	Re-exports new observer and event publisher ports.
src/core/ports/audit-repository.port.ts	Extends repository port with optional queryWithCursor types and docs.
src/core/ports/audit-observer.port.ts	Introduces observer port for operation telemetry.
src/core/ports/audit-event-publisher.port.ts	Introduces event publisher port + event type constants.
src/core/index.ts	Exports new cursor pagination and observability/event types from the public core API.
src/core/dtos/query-audit-logs.dto.ts	Adds idempotencyKey filter to query DTO schema.
src/core/dtos/create-audit-log.dto.ts	Adds idempotencyKey to create DTO schema with validation.
src/core/dtos/audit-log-response.dto.ts	Adds idempotencyKey to response DTO schema.
src/core/audit.service.ts	Implements idempotency, PII redaction, retention cleanup, cursor pagination, observer notifications, and event publishing.
src/core/audit.service.spec.ts	Adds unit tests for redaction, idempotency, retention, cursor pagination, observer, and event publisher behaviors.
package.json	Adds bench + mutation scripts; removes mongoose; adds vitest + stryker deps and Nest dev deps.
docs/RELEASE.md	Adds pre-PR “Quality Gates” including mutation + bench options; documents CI matrix.
docs/ARCHITECTURE.md	Expands architecture doc (ports/adapters, data flow, pagination models).
benchmarks/audit-service.bench.ts	Adds Vitest benchmarks for key AuditService operations.
README.md	Replaces template README with AuditKit docs, quick start, and feature overview.
.prettierrc	Enforces LF line endings via Prettier config.
.github/workflows/pr-validation.yml	Runs CI on an OS + Node version matrix.
.gitattributes	Enforces LF line endings across platforms and marks binaries.

Comments suppressed due to low confidence (2)

src/nest/options.validation.ts:92

• validateEventStreaming only rejects publisher when enabled === false. If publisher is provided but enabled is omitted/undefined, the publisher is silently ignored by toAuditServiceRuntimeOptions, which is a confusing config footgun. Consider validating that publisher implies enabled === true (or auto-enable when a publisher is provided).

function validateEventStreaming(options: AuditKitModuleOptions): void {
  if (options.eventStreaming?.enabled === false && options.eventStreaming?.publisher) {
    throw new Error("Event streaming publisher is configured but event streaming is disabled");
  }

src/nest/options.validation.ts:86

• validateIdempotency only throws for keyStrategy === "requestId" with enabled === false, but the same misconfiguration exists for any configured keyStrategy when idempotency is disabled. Consider validating enabled === false && keyStrategy !== undefined (regardless of strategy) to avoid silently accepting contradictory settings.

function validateIdempotency(options: AuditKitModuleOptions): void {
  if (options.idempotency?.keyStrategy === "requestId" && options.idempotency?.enabled === false) {
    throw new Error("Idempotency key strategy is configured but idempotency is disabled");
  }