Greptile Overview

Greptile Summary

This PR enhances the audit logs event creation with automatic idempotency key generation and retry capabilities. When createEvent is called without an idempotency key, the SDK now auto-generates a UUID v4, ensuring safe retries even when users don't provide one. The PR also enables retry logic (up to 4 total attempts with exponential backoff) for the /audit_logs/events endpoint for status codes 408, 500, 502, and 504.

Key changes:

• Auto-generates UUID v4 idempotency key in createEvent if not provided
• Extended isPathRetryable to include /audit_logs/events endpoint
• Added comprehensive test coverage for both features including retry scenarios

Implementation quality:

• Clean implementation using spread operator to preserve user options
• Properly maintains same idempotency key across retry attempts
• Thorough test coverage including edge cases (multiple requests, max retries, key persistence)

Confidence Score: 5/5

• This PR is safe to merge with no identified risks
• The implementation is straightforward and well-tested. The auto-generation of idempotency keys improves reliability without breaking existing functionality (users can still provide their own keys). The retry logic follows existing patterns and is correctly scoped to the specific endpoint. All custom security rules are satisfied, and the comprehensive test suite validates both happy paths and edge cases.
• No files require special attention

Important Files Changed

File Analysis

Sequence Diagram

sequenceDiagram
    participant Client
    participant AuditLogs
    participant WorkOS
    participant HttpClient
    participant API

    Client->>AuditLogs: createEvent(org, event, options?)
    AuditLogs->>AuditLogs: Generate UUID if idempotencyKey missing
    Note over AuditLogs: options.idempotencyKey || randomUUID()
    AuditLogs->>WorkOS: post('/audit_logs/events', data, optionsWithIdempotency)
    WorkOS->>WorkOS: Add Idempotency-Key header
    WorkOS->>HttpClient: post(path, entity, headers)
    HttpClient->>HttpClient: Check isPathRetryable('/audit_logs/events')
    Note over HttpClient: Returns true (new behavior)
    
    loop Retry up to 4 attempts
        HttpClient->>API: POST request with same idempotency key
        alt Success (201)
            API-->>HttpClient: Success response
            HttpClient-->>WorkOS: Response
            WorkOS-->>AuditLogs: void
            AuditLogs-->>Client: Success
        else Retryable error (408, 500, 502, 504)
            API-->>HttpClient: Error response
            HttpClient->>HttpClient: Sleep with exponential backoff
            Note over HttpClient: Retry with same idempotency key
        end
    end
    
    alt Max retries exceeded
        HttpClient-->>WorkOS: Throw error
        WorkOS-->>AuditLogs: Exception
        AuditLogs-->>Client: Exception
    end

_{3 files reviewed, no comments}

_{Edit Code Review Agent Settings | Greptile}

Changes looks great! One tiny nitpick if we want to differentiate between sdk generated idempotency key vs customer.