using System.Text.Json; namespace Agent.Windows.Security; public sealed record SecurityAuditEvent(DateTimeOffset Timestamp, Guid TaskId, string Event, string Outcome, IReadOnlyDictionary Data, Guid? SessionId = null, string? ErrorCode = null); public interface ISecurityAuditSink { void Write(SecurityAuditEvent auditEvent); } public sealed class JsonLinesSecurityAuditSink(string path) : ISecurityAuditSink { private readonly object _sync = new(); private static readonly JsonSerializerOptions Json = new(JsonSerializerDefaults.Web); public void Write(SecurityAuditEvent auditEvent) { string? directory = Path.GetDirectoryName(Path.GetFullPath(path)); if (directory is not null) Directory.CreateDirectory(directory); string line = JsonSerializer.Serialize(auditEvent, Json); lock (_sync) File.AppendAllText(path, line + Environment.NewLine); } } public sealed class MemorySecurityAuditSink : ISecurityAuditSink { private readonly List _events = []; public IReadOnlyList Events => _events; public void Write(SecurityAuditEvent auditEvent) => _events.Add(auditEvent); }