e11y 0.2.0 → 1.0.0

data/docs/{ADR-011-testing-strategy.md → architecture/ADR-011-testing-strategy.md}

@@ -369,12 +369,12 @@ module E11y
         end
         
         def no_events_message
-          all_events = E11y.test_adapter.all_events
+          events = E11y.test_adapter.events
           
-          if all_events.empty?
+          if events.empty?
             "expected to have tracked #{event_name}, but no events were tracked at all"
           else
-            tracked_names = all_events.map { |e| e[:event_name] }.uniq.join(', ')
+            tracked_names = events.map { |e| e[:event_name] }.uniq.join(', ')
             "expected to have tracked #{event_name}, but only tracked: #{tracked_names}"
           end
         end
@@ -495,78 +495,38 @@ end
 
 ```ruby
 # lib/e11y/adapters/in_memory.rb
+# API: write, write_batch (adapter contract), events, find_events, clear!, any_event?
 module E11y
   module Adapters
     class InMemory < Base
-      def initialize
-        super(name: :test)
-        @events = []
-        @mutex = Mutex.new
-      end
-      
-      def send_batch(events)
-        @mutex.synchronize do
-          events.each do |event|
-            @events << event.dup
-          end
-        end
-        
-        { success: true, sent: events.size }
+      attr_reader :events
+
+      def write(event_data)
+        @mutex.synchronize { @events << event_data }
+        true
       end
-      
-      def health_check
+
+      def write_batch(events)
+        @mutex.synchronize { @events.concat(events) }
         true
       end
-      
+
       # Test helper methods
-      def all_events
-        @mutex.synchronize { @events.dup }
-      end
-      
-      def find_events(pattern)
-        @mutex.synchronize do
-          @events.select do |event|
-            case pattern
-            when String
-              event[:event_name] == pattern
-            when Regexp
-              event[:event_name] =~ pattern
-            when Class
-              event[:event_name] == pattern.event_name
-            else
-              false
-            end
-          end
-        end
-      end
-      
-      def find_event(pattern)
-        find_events(pattern).first
+      def find_events(pattern)  # pattern: String or Regexp
+        pattern = Regexp.new(Regexp.escape(pattern)) if pattern.is_a?(String)
+        @events.select { |e| e[:event_name].to_s.match?(pattern) }
       end
-      
-      def event_count(pattern = nil)
-        if pattern
-          find_events(pattern).size
-        else
-          @mutex.synchronize { @events.size }
-        end
+
+      def event_count(event_name = nil)
+        event_name ? @events.count { |e| e[:event_name] == event_name } : @events.size
       end
-      
+
       def clear!
-        @mutex.synchronize { @events.clear }
-      end
-      
-      def tracked?(event_class_or_pattern)
-        find_events(event_class_or_pattern).any?
-      end
-      
-      # Pretty print for debugging
-      def inspect
-        "#<E11y::Adapters::InMemory events=#{@events.size}>"
+        @events.clear
       end
-      
-      def to_s
-        inspect
+
+      def any_event?(pattern)  # true if any events match pattern
+        find_events(pattern).any?
       end
     end
   end
@@ -590,7 +550,7 @@ module E11y
         @call_count = 0
       end
       
-      def send_batch(events)
+      def write_batch(events)
         @call_count += 1
         
         # Simulate delay
@@ -634,7 +594,7 @@ RSpec.configure do |config|
       e11y_config.adapters.register :test, E11y::Adapters::InMemory.new
       
       # Disable rate limiting in tests
-      e11y_config.rate_limiting.enabled = false
+      e11y_config.rate_limiting_enabled = false
       
       # Disable sampling (track everything)
       e11y_config.sampling.default_sample_rate = 1.0
@@ -661,10 +621,10 @@ RSpec.configure do |config|
   config.alias_example_group_to :describe_event, type: :event
 end
 
-# Convenience method to access test adapter
+# Convenience method to access test adapter (uses config.adapters[:test] or [:memory])
 module E11y
   def self.test_adapter
-    Adapters::Registry.get(:test)
+    configuration.adapters[:test] || configuration.adapters[:memory]
   end
 end
 ```
@@ -963,7 +923,7 @@ RSpec.describe 'Order flow integration', type: :integration do
       .and have_tracked_event(Events::EmailQueued)
     
     # Verify event sequence
-    events = E11y.test_adapter.all_events
+    events = E11y.test_adapter.events
     event_names = events.map { |e| e[:event_name] }
     
     expect(event_names).to eq([
@@ -1050,16 +1010,16 @@ end
 RSpec.shared_examples 'an E11y adapter' do
   let(:adapter) { described_class.new }
   
-  describe '#send_batch' do
+  describe '#write_batch' do
     it 'accepts array of events' do
       events = [build(:event)]
       
-      expect { adapter.send_batch(events) }.not_to raise_error
+      expect { adapter.write_batch(events) }.not_to raise_error
     end
     
     it 'returns success hash' do
       events = [build(:event)]
-      result = adapter.send_batch(events)
+      result = adapter.write_batch(events)
       
       expect(result).to be_a(Hash)
       expect(result).to have_key(:success)
@@ -1067,11 +1027,11 @@ RSpec.shared_examples 'an E11y adapter' do
     end
     
     it 'handles empty batch' do
-      expect { adapter.send_batch([]) }.not_to raise_error
+      expect { adapter.write_batch([]) }.not_to raise_error
     end
     
     it 'raises on invalid input' do
-      expect { adapter.send_batch(nil) }.to raise_error(ArgumentError)
+      expect { adapter.write_batch(nil) }.to raise_error(ArgumentError)
     end
   end
   
@@ -1537,8 +1497,8 @@ RSpec.describe 'Rate limiting', type: :integration do
   
   before do
     E11y.configure do |config|
-      config.rate_limiting.enabled = true
-      config.rate_limiting.global_limit = 10  # 10 events/sec
+      config.rate_limiting_enabled = true
+      config.rate_limiting_global_limit = 10  # 10 events/sec
     end
   end
   
@@ -1554,7 +1514,7 @@ RSpec.describe 'Rate limiting', type: :integration do
   end
   
   it 'never drops critical events (bypass rate limit)' do
-    E11y.config.rate_limiting.global_limit = 1  # Extremely low
+    E11y.config.rate_limiting_global_limit = 1  # Extremely low
     
     # Track 10 critical events
     10.times { Events::PaymentFailed.track(payment_id: 'p123') }
@@ -1564,9 +1524,7 @@ RSpec.describe 'Rate limiting', type: :integration do
   end
   
   it 'applies per-event rate limits' do
-    E11y.config.rate_limiting.per_event_limits = {
-      'Events::DebugQuery' => 5  # Max 5 per second
-    }
+    E11y.config.add_rate_limit_per_event('Events::DebugQuery', limit: 5)  # Max 5 per second
     
     10.times { Events::DebugQuery.track(sql: 'SELECT 1') }
     
@@ -1659,12 +1617,12 @@ RSpec.configure do |config|
     next unless E11y.config.pii.strict_mode
     
     # Get all events from all adapters
-    all_events = E11y.config.adapters.all.flat_map do |adapter|
-      adapter.respond_to?(:all_events) ? adapter.all_events : []
+    events = E11y.config.adapters.all.flat_map do |adapter|
+      adapter.respond_to?(:events) ? adapter.events : []
     end
     
     # Verify no plain-text PII (if event declares contains_pii)
-    all_events.each do |event|
+    events.each do |event|
       event_class = E11y::Registry.get(event[:event_name])
       
       if event_class&.contains_pii?

data/docs/{ADR-013-reliability-error-handling.md → architecture/ADR-013-reliability-error-handling.md}

@@ -1038,11 +1038,11 @@ module E11y
     class SidekiqErrorHandlingMiddleware
       def call(worker, job, queue)
         # Save original setting
-        original_fail_on_error = E11y.config.error_handling.fail_on_error
+        original_fail_on_error = E11y.config.error_handling_fail_on_error
         
         # Disable failing on errors for this job
         # Observability should NOT block business logic!
-        E11y.config.error_handling.fail_on_error = false
+        E11y.config.error_handling_fail_on_error = false
         
         E11y.logger.debug(
           "Sidekiq job starting with fail_on_error=false",
@@ -1053,7 +1053,7 @@ module E11y
         yield
       ensure
         # Restore original setting
-        E11y.config.error_handling.fail_on_error = original_fail_on_error
+        E11y.config.error_handling_fail_on_error = original_fail_on_error
       end
     end
   end
@@ -1112,7 +1112,7 @@ module E11y
     
     def self.handle_error(error)
       # Should we raise or swallow?
-      if E11y.config.error_handling.fail_on_error
+      if E11y.config.error_handling_fail_on_error
         # Web request context: RAISE (fast feedback!)
         raise error
       else
@@ -1177,7 +1177,7 @@ class CriticalReportJob < ApplicationJob
   
   def perform(report_id)
     # Temporarily enable fail_on_error
-    E11y.config.error_handling.fail_on_error = true
+    E11y.config.error_handling_fail_on_error = true
     
     # Generate report
     report = Report.generate(report_id)
@@ -1190,7 +1190,7 @@ class CriticalReportJob < ApplicationJob
     # ↑ If this fails, job SHOULD fail (retry later)
   ensure
     # Restore default (will be restored by middleware anyway)
-    E11y.config.error_handling.fail_on_error = false
+    E11y.config.error_handling_fail_on_error = false
   end
 end
 ```
@@ -1501,7 +1501,7 @@ module E11y
           # Re-dispatch event through normal pipeline
           E11y::Pipeline.dispatch(
             entry[:event_data],
-            metadata: entry[:metadata].merge(replayed: true)
+            metadata: entry[:metadata].merge(dlq_replayed: true)
           )
           
           # Delete from DLQ after successful replay
@@ -1665,7 +1665,7 @@ module E11y
           # Re-dispatch
           E11y::Pipeline.dispatch(
             entry[:event_data],
-            metadata: entry[:metadata].merge(replayed: true)
+            metadata: entry[:metadata].merge(dlq_replayed: true)
           )
           
           # Delete from DLQ
@@ -1782,6 +1782,31 @@ module E11y
 end
 ```
 
+### 4.4.1. DLQ Filter: Event DSL (Implemented)
+
+The DLQ filter uses **Event DSL** with a single `use_dlq` flag:
+
+```ruby
+# Audit events (Presets::AuditEvent) have use_dlq true by default
+class Events::UserDeleted < E11y::Events::BaseAuditEvent
+  # use_dlq true from preset — always saved to DLQ
+end
+
+# Explicit opt-in for critical business events
+class Events::PaymentFailed < E11y::Event::Base
+  use_dlq true
+end
+
+# Explicit opt-out for noise
+class Events::DebugTrace < E11y::Event::Base
+  use_dlq false
+end
+
+# Default (nil): severity-based (error/fatal saved) + default_behavior
+```
+
+**Priority order:** 1) `use_dlq false` → 2) `use_dlq true` → 3) severity → 4) default.
+
 ### 4.5. DLQ Configuration
 
 ```ruby
@@ -2562,8 +2587,8 @@ module E11y
       end
       
       def check_all_adapters
-        E11y::Adapters::Registry.all.each do |adapter|
-          circuit_breaker = CircuitBreaker.for(adapter.name)
+        E11y.config.adapters.each do |name, adapter|
+          circuit_breaker = CircuitBreaker.for(name)
           
           # Only check adapters with open/half-open circuits
           next if circuit_breaker.healthy?
@@ -2572,11 +2597,11 @@ module E11y
             adapter.health_check
             
             E11y::Metrics.increment('e11y.health_check.success', {
-              adapter: adapter.name
+              adapter: name
             })
           rescue => error
             E11y::Metrics.increment('e11y.health_check.failure', {
-              adapter: adapter.name,
+              adapter: name,
               error: error.class.name
             })
           end

data/docs/{ADR-014-event-driven-slo.md → architecture/ADR-014-event-driven-slo.md}

@@ -752,27 +752,15 @@ app_wide:
 ### 6.1. Yabeda Metrics Definition
 
 ```ruby
-# config/initializers/e11y.rb
-E11y.configure do |config|
-  config.metrics do
-    enabled true
-    adapter :yabeda
-    
-    # Define SLO metrics
-    Yabeda.configure do
-      group :e11y_slo do
-        # Availability metric (counter)
-        counter :event_result_total,
-                comment: "Total count of Event SLO results (success/failure)",
-                tags: [:event_class, :slo_name, :slo_status]  # slo_status = 'success' | 'failure'
-        
-        # Latency metric (histogram)
-        histogram :event_duration_seconds,
-                  comment: "Event processing duration for SLO (seconds)",
-                  tags: [:event_class, :slo_name],
-                  buckets: [0.01, 0.05, 0.1, 0.5, 1.0, 2.0, 5.0, 10.0, 30.0, 60.0]
-      end
-    end
+Yabeda.configure do
+  group :e11y_slo do
+    counter :event_result_total,
+            comment: "Event SLO results (success/failure)",
+            tags: [:event_class, :slo_name, :slo_status]
+    histogram :event_duration_seconds,
+              comment: "Event processing duration (seconds)",
+              tags: [:event_class, :slo_name],
+              buckets: [0.01, 0.05, 0.1, 0.5, 1.0, 2.0, 5.0, 10.0, 30.0, 60.0]
   end
 end
 ```
@@ -814,7 +802,7 @@ module E11y
         def self.validate!
           errors = []
           
-          E11y::Registry.all_events.each do |event_class|
+          E11y::Registry.event_classes.each do |event_class|
             # Check: Has slo declaration?
             has_slo_enabled = event_class.slo_enabled?
             has_slo_disabled = event_class.slo_disabled?
@@ -850,7 +838,7 @@ module E11y
         def self.validate!
           errors = []
           
-          E11y::Registry.all_events.each do |event_class|
+          E11y::Registry.event_classes.each do |event_class|
             next unless event_class.slo_enabled?
             
             # Check: Has slo_status_from block?
@@ -923,7 +911,7 @@ module E11y
           end
           
           # Check reverse: Events with slo enabled but NOT in slo.yml
-          E11y::Registry.all_events.each do |event_class|
+          E11y::Registry.event_classes.each do |event_class|
             next unless event_class.slo_enabled?
             
             slo_name = event_class.slo_config.contributes_to

data/docs/{ADR-015-middleware-order.md → architecture/ADR-015-middleware-order.md}

@@ -14,7 +14,7 @@
 3. [Correct Order](#3-correct-order)
    - 3.1. Pipeline Flow
    - 3.2. Why Each Middleware Needs Original Class Name
-   - 3.3. Audit Event Pipeline Separation (C01 Resolution) ⚠️ CRITICAL
+   - 3.3. Audit Events in Single Pipeline (C01 Resolution) ⚠️ CRITICAL
      - 3.3.1. The Problem: PII Filtering Breaks Audit Trail
      - 3.3.2. Decision: Two Pipeline Configurations
      - 3.3.3. Declaring Audit Events
@@ -244,17 +244,17 @@ Loki receives:
 - [ ] PII rules are configured **per original class** (if differ)
 - [ ] Sampling rules are configured **per original class** (if differ)
 - [ ] Metrics track **both** normalized name and version
-- [ ] Audit events use separate pipeline (C01 - see §3.3)
+- [ ] Audit events skip PII filtering via conditional logic (C01 - see §3.3, single pipeline)
 - [ ] Audit events stored in encrypted adapter (C01 requirement)
 
 ---
 
-## 3.3. Audit Event Pipeline Separation (C01 Resolution)
+## 3.3. Audit Events in Single Pipeline (C01 Resolution)
 
 > **⚠️ CRITICAL: C01 Conflict Resolution - PII Filtering × Audit Trail Signing**  
 > **See:** [CONFLICT-ANALYSIS.md C01](researches/CONFLICT-ANALYSIS.md#c01-pii-filtering--audit-trail-signing) for detailed analysis  
 > **Problem:** PII filtering before signing breaks non-repudiation (auditors can't verify original event)  
-> **Solution:** Separate pipeline for audit events that skips PII filtering, signs original data
+> **Solution:** Single pipeline for all events. Audit events get conditional skip in PIIFilter via `contains_pii false` in AuditEvent preset (:no_pii = pass-through). No separate pipeline — no need.
 
 ### 3.3.1. The Problem: PII Filtering Breaks Audit Trail
 
@@ -278,39 +278,29 @@ Storage
 - **Audit trail:** Must maintain cryptographic chain of custody
 - **Forensics:** Must be able to reconstruct exact event that occurred
 
-### 3.3.2. Decision: Two Pipeline Configurations
+### 3.3.2. Decision: One Pipeline with Conditional Skip
+
+**All events go through a single pipeline.** Audit events get conditional skip in middleware:
 
-**Standard Events (Non-Audit):**
 ```
 1. TraceContext    → Add trace_id, span_id, timestamp
 2. Validation      → Schema validation (original class)
-3. PIIFiltering    → Filter PII EARLY ✅
-4. RateLimiting    → Rate limit check
-5. Sampling        → Adaptive sampling
+3. PIIFiltering    → Audit: skip (contains_pii false → :no_pii). Standard: filter PII ✅
+4. RateLimiting    → Audit: can skip (event_data[:audit_event]). Standard: rate limit
+5. Sampling        → Audit: sample_rate 1.0 (preset). Standard: adaptive
 6. Versioning      → Normalize event_name (LAST)
-7. Routing         → Route to buffer
+7. Routing         → Route to buffer / audit buffer
 ```
 
-**Audit Events (Legal Compliance):**
-```
-1. TraceContext    → Add trace_id, span_id, timestamp
-2. Validation      → Schema validation (original class)
-3. AuditSigning    → Sign ORIGINAL data (includes PII!) ✅
-4. Versioning      → Normalize event_name (LAST)
-5. Routing         → Route to audit buffer
-   
-❌ NO PII filtering for audit events!
-❌ NO rate limiting for audit events!
-❌ NO sampling for audit events!
-```
+**AuditEvent preset:** `contains_pii false` → PIIFilter :no_pii = pass-through, original data preserved for signing.
 
 ### 3.3.3. Declaring Audit Events
 
 **Event Class Flag:**
 ```ruby
-# Audit event - uses audit pipeline
+# Audit event - conditional skip in pipeline
 class Events::PermissionChanged < E11y::Event::Base
-  audit_event true  # ← Trigger audit pipeline
+  include E11y::Presets::AuditEvent  # audit_event true, contains_pii false
   # Auto-set: retention = E11y.config.audit_retention (configurable!)
   #           rate_limiting = false (LOCKED!)
   #           sampling = false (LOCKED!)
@@ -330,9 +320,9 @@ class Events::PermissionChanged < E11y::Event::Base
   version 1
 end
 
-# Standard event - uses standard pipeline
+# Standard event - full pipeline
 class Events::PageView < E11y::Event::Base
-  audit_event false  # ← Use standard pipeline (default)
+  # audit_event false (default)
   
   schema do
     required(:user_id).filled(:string)
@@ -355,21 +345,15 @@ end
 ```ruby
 # config/initializers/e11y.rb
 E11y.configure do |config|
-  # Standard pipeline (default for most events)
+  # Single pipeline for all events (audit and standard)
   config.pipeline.use E11y::Middleware::TraceContext      # 1
   config.pipeline.use E11y::Middleware::Validation        # 2
-  config.pipeline.use E11y::Middleware::PIIFiltering      # 3
+  config.pipeline.use E11y::Middleware::PIIFiltering      # 3  # Audit: skip (contains_pii false)
   config.pipeline.use E11y::Middleware::RateLimiting      # 4
   config.pipeline.use E11y::Middleware::Sampling          # 5
-  config.pipeline.use E11y::Middleware::Versioning        # 6
-  config.pipeline.use E11y::Middleware::Routing           # 7
-  
-  # Audit pipeline override (for audit_event: true)
-  config.audit_pipeline.use E11y::Middleware::TraceContext      # 1
-  config.audit_pipeline.use E11y::Middleware::Validation        # 2
-  config.audit_pipeline.use E11y::Middleware::AuditSigning      # 3 (NEW!)
-  config.audit_pipeline.use E11y::Middleware::Versioning        # 4
-  config.audit_pipeline.use E11y::Middleware::AuditRouting      # 5
+  config.pipeline.use E11y::Middleware::AuditSigning      # 6  # Pass-through for non-audit
+  config.pipeline.use E11y::Middleware::Versioning        # 7  # Last before Routing
+  config.pipeline.use E11y::Middleware::Routing           # 8
   
   # Audit event configuration
   config.audit_events do
@@ -610,7 +594,7 @@ end
 | Aspect | Pro | Con | Mitigation |
 |--------|-----|-----|------------|
 | **Non-repudiation** | ✅ Signature on original data | ⚠️ PII in audit events | Use encrypted storage adapter |
-| **Legal compliance** | ✅ Meets audit requirements | ⚠️ Two pipelines to maintain | Clear documentation |
+| **Legal compliance** | ✅ Meets audit requirements | ⚠️ Conditional logic in middleware | Clear documentation |
 | **PII protection** | ✅ Standard events filtered | ⚠️ Audit events not filtered | Restrict access to audit logs |
 | **Performance** | ✅ No PII filter overhead | ⚠️ Signing + encryption overhead | Audit events are rare (<1%) |
 
@@ -1041,7 +1025,7 @@ end
 ```
 
 **Related Conflicts:**
-- **C01:** Audit events skip PII filtering (see §3.3)
+- **C01:** Audit events skip PII filtering via contains_pii false (see §3.3)
 - **C08:** Baggage PII protection (see ADR-007)
 
 ---
@@ -1053,8 +1037,6 @@ end
 - **ADR-012: Event Evolution & Versioning** - Full versioning design
 - **ADR-013: Reliability & Error Handling** - DLQ replay considerations
 - **UC-012: Audit Trail** - Audit event use cases
-- **COMPREHENSIVE-CONFIGURATION.md** - Complete configuration examples
-- **CONFLICT-ANALYSIS.md** - Complete conflict analysis
 
 ---