bugfix

internal/jobs/runners/audit_retention.go

@@ -0,0 +1,45 @@
+package runners
+
+import (
+	"context"
+	"log/slog"
+	"time"
+)
+
+// AuditRetentionRepo is the minimal surface this runner needs.
+// internal/audit.Reader satisfies it (PurgeBefore).
+type AuditRetentionRepo interface {
+	PurgeBefore(ctx context.Context, before time.Time) (int64, error)
+}
+
+// AuditRetention deletes audit_logs older than retention. Periodic; idempotent.
+type AuditRetention struct {
+	repo      AuditRetentionRepo
+	retention time.Duration
+	log       *slog.Logger
+}
+
+// NewAuditRetention builds the audit-log retention purger.
+func NewAuditRetention(repo AuditRetentionRepo, retention time.Duration, log *slog.Logger) *AuditRetention {
+	if log == nil {
+		log = slog.Default()
+	}
+	return &AuditRetention{repo: repo, retention: retention, log: log}
+}
+
+// Run purges once. A non-positive retention disables the purge (safety: never
+// delete the whole table when misconfigured).
+func (r *AuditRetention) Run(ctx context.Context) {
+	if r.retention <= 0 {
+		return
+	}
+	cutoff := time.Now().Add(-r.retention)
+	rows, err := r.repo.PurgeBefore(ctx, cutoff)
+	if err != nil {
+		r.log.Error("audit_retention.purge", "err", err.Error())
+		return
+	}
+	if rows > 0 {
+		r.log.Info("audit_retention.purged", "count", rows, "before", cutoff.UTC().Format(time.RFC3339))
+	}
+}