bcgov / digital-trust-common-service / 31020922726

86%

push

github

feat: audit producers, partition maintenance, auto-audit interceptor (#147)

* feat: audit producers, partition maintenance, and auto-audit interceptor

Enqueue audit.write from tenant/tenant-user/credential-definition/connection
mutations (#141), add rolling audit_log partition job (#140), and land an
optional Nest interceptor behind AUDIT_AUTO_INTERCEPTOR_ENABLED (#142).

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: address PR #147 review (helm-docs, emit asserts, interceptor)

Regenerate chart README for new audit config keys, assert domain audit
emit in service specs, skip interceptor creates without path ids, and
guard invalid monthsAhead for partition maintenance.

Co-authored-by: Cursor <cursoragent@cursor.com>

* test: cover audit interceptor, partition worker, and schedule

Close the 16 uncovered patch lines on #147 by exercising skip/fail-open
interceptor paths, disabled workers, register-handler callback, and JobsService.schedule.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: satisfy eslint on mock.calls access in specs

Cast full mock call tuples before destructuring handlers so
no-unsafe-member-access passes lint:ci on #147.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: use current-month timestamps in audit log integration test

The keyset pagination test hardcoded July 2026 rows, but migrations
only create partitions from the current month forward, causing CI to
fail once August rolled over.

Co-authored-by: Cursor <cursoragent@cursor.com>

* fix: format audit log integration spec for prettier

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>

1056 of 1378 branches covered (76.63%)

Branch coverage included in aggregate %.

159 of 159 new or added lines in 14 files covered. (100.0%)

1830 of 2033 relevant lines covered (90.01%)

5.36 hits per line