entropic_audit.cpp

Go to the documentation of this file.

// SPDX-License-Identifier: Apache-2.0
#include "engine_handle.h"
 
#include <entropic/entropic.h>
#include <entropic/mcp/utf8_sanitize.h>
#include <entropic/types/logging.h>
#include "json_serializers.h"
#include <fstream>
#include <string>
 
static auto logger = entropic::log::get("facade.audit");
 
extern "C" ENTROPIC_EXPORT entropic_error_t
entropic_audit_flush(entropic_handle_t handle) {
    if (!handle) { return ENTROPIC_ERROR_INVALID_HANDLE; }
    if (!handle->audit_logger) { return ENTROPIC_OK; }
    handle->audit_logger->flush();
    return ENTROPIC_OK;
}
 
extern "C" ENTROPIC_EXPORT entropic_error_t
entropic_audit_count(entropic_handle_t handle, size_t* count) {
    if (!handle || !count) {
        return !handle ? ENTROPIC_ERROR_INVALID_HANDLE
                       : ENTROPIC_ERROR_INVALID_ARGUMENT;
    }
    *count = handle->audit_logger
        ? handle->audit_logger->entry_count() : 0;
    return ENTROPIC_OK;
}
 
extern "C" ENTROPIC_EXPORT entropic_error_t
entropic_audit_read(
    entropic_handle_t handle,
    const char* path,
    const char* /*filter_json*/,
    char** result_json) {
    if (!handle || !path || !result_json) {
        return !handle ? ENTROPIC_ERROR_INVALID_HANDLE
                       : ENTROPIC_ERROR_INVALID_ARGUMENT;
    }
    try {
        std::ifstream file(path);
        if (!file.is_open()) { throw std::runtime_error("cannot open"); }
        nlohmann::json arr = nlohmann::json::array();
        std::string line;
        while (std::getline(file, line)) {
            if (line.empty()) { continue; }
            // Issue #3 (v2.1.1): inbound boundary from disk. Audit files
            // written by pre-2.1.1 engine versions (or by future writers
            // that miss a sanitize step) may contain bytes that parse
            // fine but throw on the arr.dump() below. Sanitize before
            // ingestion so the dump cannot fail. See
            // include/entropic/mcp/utf8_sanitize.h for the boundary policy.
            arr.push_back(nlohmann::json::parse(
                entropic::mcp::sanitize_utf8(line)));
        }
        *result_json = strdup(arr.dump().c_str());
        return ENTROPIC_OK;
    } catch (const std::exception& e) {
        handle->last_error = e.what();
        return ENTROPIC_ERROR_IO;
    }
}