$j&dZddlmZddlZddlZddlZddlZddlmZddl m Z ddl m Z m Z ddlmZmZddlmZd d lmZejeZe Gd d Zd!dZd"dZdZGddZe d#d$d ZdS)%zAudit logging for feature usage tracking. Provides fire-and-forget audit logging of all mutating and core operations (retain, recall, reflect, bank CRUD, etc.) across HTTP, MCP, and system transports. ) annotationsN)Callable)asynccontextmanager) dataclassfield)datetimetimezone)Any)acquire_with_retryceZdZUdZded<ded<dZded<ed Zd ed <dZd ed <dZ ded<dZ ded<ee Z ded<dS) AuditEntryzA single audit log entry.straction transportN str | Nonebank_idc>tjtjSN)rnowr utcb/home/rurouni/.hermes/hermes-agent/venv/lib/python3.11/site-packages/hindsight_api/engine/audit.pyzAuditEntry.shl9S9Sr)default_factoryr started_atzdatetime | Noneended_atdict[str, Any] | Nonerequestresponsezdict[str, Any]metadata) __name__ __module__ __qualname____doc____annotations__rrrrr r!dictr"rrrrrs##KKKNNNG 51S1STTTJTTTT $H$$$$%)G))))&*H****$uT:::H::::::rrobjr returnrc:t|tr|St|tjrt |St|t rdSt|trt|St |S)z8JSON serializer for objects not serializable by default.z) isinstancer isoformatuuidUUIDrbytessetlist)r)s r _json_defaultr3&s#x  }}#ty!!3xx#uy#sCyy s88Ordatarc|dS tj|tS#t$r tddYdSwxYw)z9Serialize data to JSON string, returning None on failure.N)defaultzFailed to serialize audit dataT)exc_info)jsondumpsr3 Exceptionloggerdebug)r4s r _safe_jsonr=3s_ |tz$ 6666  5 EEEtts!&A  A icVeZdZdZ dddZddZddZddZd dZd dZ d dZ d dZ dS)! AuditLoggerz?Fire-and-forget audit log writer with optional retention sweep. pool_getterCallable[[], Any] schema_getterCallable[[], str]enabledboolallowed_actions list[str]retention_daysintr*Nonec|||_||_||_|rt|nd|_||_d|_dSr) _pool_getter_schema_getter_enabled frozenset_allowed_actions_retention_days _sweep_task)selfrArCrErGrIs r__init__zAuditLogger.__init__DsL(+ Ud7ny7Q7Q7Qjn-04rrrc8|jsdS|j ||jvSdS)z2Check if audit logging is enabled for this action.FNT)rOrQ)rTrs r is_enabledzAuditLogger.is_enabledSs-} 5  ,T22 2trentryrc||jsdS tj||dS#t $rt dYdSwxYw)z-Schedule an audit write as a background task.Nz6Cannot schedule audit log write: no running event loop)rWrasyncio create_task _safe_log RuntimeErrorr;r<)rTrXs rlog_fire_and_forgetzAuditLogger.log_fire_and_forget[su|,,  F S  u 5 5 6 6 6 6 6 S S S LLQ R R R R R R Ss'A$A/.A/cK|}|tddS |}|d}t |d4d{V}|d|dt j|j|j |j |j |j t|jt|jt|jpd d{Vdddd{VdS#1d{VswxYwYdS#t"$r0}td |jd |Yd}~dSd}~wwxYw) z9Write audit entry to DB. Errors are logged, never raised.Nz%Audit log skipped: pool not available .audit_log max_retriesz! INSERT INTO z (id, action, transport, bank_id, started_at, ended_at, request, response, metadata) VALUES ($1, $2, $3, $4, $5, $6, $7::jsonb, $8::jsonb, $9::jsonb) z{}z"Audit log write failed for action=z: )rMr;r<rNr executer.uuid4rrrrrr=r r!r"r:warning)rTrXpoolschematableconnes rr\zAuditLogger._safe_loges   "" < LL@ A A A F U((**F)))E)$A>>>       $ll!& JLLLOM$Nu}--u~..u~..6$                              $ U U U NNS SSPQSS T T T T T T T T T Us<0D&B D1D DDDD E!%E  Ec|jdks|jsdS tj||_dS#t $rtdYdSwxYw)z>Start the periodic retention sweep if retention is configured.rNz3Cannot start retention sweep: no running event loop) rRrOrZr[ _sweep_looprSr]r;r<rTs rstart_retention_sweepz!AuditLogger.start_retention_sweeps  1 $ $DM $ F P&243C3C3E3EFFD    P P P LLN O O O O O O Ps+A$A+*A+cK|jr_|jsH|j |jd{Vn#tj$rYnwxYwd|_dSdSdS)z"Stop the periodic retention sweep.N)rSdonecancelrZCancelledErrorrns rstop_retention_sweepz AuditLogger.stop_retention_sweeps   $D$4$9$9$;$; $   # # % % % &&&&&&&&&)    #D     $ $ $ $s A AAc|K |d{Vtjtd{V:)z@Periodically delete audit log entries older than retention_days.TN) _run_sweeprZsleep_SWEEP_INTERVAL_SECONDSrns rrmzAuditLogger._sweep_loopsU 9//## # # # # # # #- 788 8 8 8 8 8 8 8 9rcK|}|dS |}|d}t|d4d{V}|d|d|jdd{V}|r#|dkrt d |dddd{VdS#1d{VswxYwYdS#t$r(}t d |Yd}~dSd}~wwxYw) zHDelete expired audit log entries. Concurrent-safe via row-level deletes.Nr`rarbz DELETE FROM z& WHERE started_at < NOW() - INTERVAL 'z days'zDELETE 0zAudit log retention sweep: z"Audit log retention sweep failed: ) rMrNr rdrRr;infor:rf)rTrgrhrirjresultrks rrvzAuditLogger._run_sweeps  "" < F E((**F)))E)$A>>> H H H H H H H$#||l5llPTPdlll  Hf 22KK Ff F FGGG  H H H H H H H H H H H H H H H H H H H H H H H H H H H H H H  E E E NNCCC D D D D D D D D D Es<0B? A B,B?, B66B?9B6:B?? C1 C,,C1N)r@) rArBrCrDrErFrGrHrIrJr*rK)rrr*rF)rXrr*rK)r*rK) r#r$r%r&rUrWr^r\rortrmrvrrrr?r?AsII! 5 5 5 5 5SSSSUUUU<PPPP$$$$9999 EEEEEErr? audit_loggerAuditLogger | Nonerrrr rr"cK|||st|||}|WVdSt|||tjtj||pi} |WVtjtj|_||dS#tjtj|_||wxYw)aAsync context manager that times the operation and writes audit on exit. Usage: async with audit_context(logger, "retain", "http", bank_id, request_dict) as entry: result = await do_work() entry.response = result_dict N)rrr)rrrrr r")rWrrrr rrr^)r|rrrr r"rXs r audit_contextrs <#:#:6#B#B&IwOOO  < --R    E0 !hl33((/////"hl33((////s 'B&&:C )r)r r*r)r4r r*r)NNN) r|r}rrrrrrr rr"r)r& __future__rrZr8loggingr.collections.abcr contextlibr dataclassesrrrr typingr engine.db_utilsr getLoggerr#r;rr3r=rxr?rrrrrs #"""""  $$$$$$******((((((((''''''''000000  8 $ $  ; ; ; ; ; ; ;  ;    jEjEjEjEjEjEjEjEZ %)&* 0 0 0 0 0 0 0r