ilpanich / axiam-c-sdk / 29638219448

87%

push

github

feat: initial AXIAM C SDK (REST core + mTLS, CONTRACT §1–§7/§9–§11) (#1)

* feat: greenfield AXIAM C SDK (REST core, mTLS, JWKS, guard)

Implements the AXIAM C SDK conforming to CONTRACT.md §1–§7, §9–§11
(including §6.1 mTLS). C11 + libcurl + OpenSSL + vendored cJSON.

- §1 canonical ops (axiam_login/verify_mfa/refresh/logout/check_access/
  can/batch_check), snake_case, axiam_ prefix, (action, resource[, scope])
- §2 error taxonomy (AUTH/AUTHZ/NETWORK) + HTTP status mapping; no tokens
  in messages
- §3 CSRF capture/echo; §4 per-client libcurl cookie engine;
  §5 X-Tenant-ID on every request (tenant required, no default)
- §6 strict TLS always on, custom-CA-only escape hatch; §6.1 in-memory PEM
  mTLS cert+key blobs (no temp files); §7 opaque axiam_sensitive_t
- §9 single-flight refresh (pthread mutex + condvar), no retry loop
- §10/§11 framework-agnostic guard + AXIAM_REQUIRE_* macros over JWKS verify
- JWKS EdDSA/Ed25519 verify via OpenSSL EVP_DigestVerify, 300s cache
- function-pointer transport seam for testability; 11 CTest suites incl.
  threaded single-flight + real-libcurl integration; ~90% logic coverage
- CMake (static+shared, install, package config, CPack), vcpkg port,
  conanfile.py, Doxygen, CI (build gcc+clang, TLS-bypass gate, recipes,
  tag-on-main, release) + coverage workflow

gRPC and §8 AMQP are out of scope for v1.0 (documented follow-ups).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FM1xTLBaGvfUv8X3bPw6oj

* ci(coverage): tolerate gcc-13 gcov negative-hit parse errors

gcc-13's gcov can emit spurious "branch N taken -1" counts (gcc bug 68080),
which aborts gcovr's parser and fails the coverage job. Pass
--gcov-ignore-parse-errors=negative_hits.warn_once_per_file so parsing warns
instead of erroring, as gcovr itself recommends.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FM1xTLBaGvfUv8X3bPw6oj

---------

C... (continued)

474 of 766 branches covered (61.88%)

Branch coverage included in aggregate %.

899 of 997 new or added lines in 10 files covered. (90.17%)

899 of 997 relevant lines covered (90.17%)

36.47 hits per line