session

type AgentRuleStatus struct {
	Rules        int        `json:"rules"`
	AddsLastHour int        `json:"adds_last_hour"`
	LastAdd      *time.Time `json:"last_add,omitempty"`
}

type Confinement struct {
	Landlock landlock.Status
	Openat2  bool
}

type Field struct {
	Name    string   `json:"name"`
	Label   bool     `json:"label,omitempty"`
	Trusted bool     `json:"trusted,omitempty"`
	Values  []string `json:"values,omitempty"`
}

type Options struct {
	logconsole.OpenOptions
	Confinement Confinement
	// FirstOpen is set on the first open of the console's process: a
	// profile with pseudonym_rotation = "session" starts a new epoch then
	// (not when the console reconnects).
	FirstOpen bool
	// EpochsOpened, when set, is called synchronously, before Open
	// returns, once the epoch store is open (and rotated, on a first open): an open that fails after it has used up
	// the first open's rotation, so the caller stops passing FirstOpen.
	EpochsOpened func()
	// Workers mask in parallel (default min(2, NumCPU): the launcher runs
	// the console with --cpus min(2, nproc)).
	Workers int
	Now     func() time.Time
	// Cost replaces the calibrated cost model (tests).
	Cost *engine.CostModel
	// MapDir replaces the docker source's map directory (tests).
	MapDir string
	// Egress tunes the remote sources' clients (tests: timeouts).
	Egress egress.Options
}

type Session struct {
	// contains filtered or unexported fields
}

type SourceInfo struct {
	Name    string `json:"name"`
	Kind    string `json:"kind"`
	Format  string `json:"format,omitempty"`
	Streams int    `json:"streams"`
	Bytes   int64  `json:"bytes"`
	// Oldest and Newest bound the records, when known.
	Oldest      *time.Time `json:"oldest,omitempty"`
	Newest      *time.Time `json:"newest,omitempty"`
	IndexedFrom *time.Time `json:"indexed_from,omitempty"`
	Fields      []Field    `json:"fields"`
	// MaskedFields counts the field names left out: the masker shows them
	// masked (⟦key:ID⟧), as the records do.
	MaskedFields int `json:"masked_fields,omitempty"`
	// Error is set when the source could not be described (no detail:
	// its error may name files).
	Error string `json:"error,omitempty"`
}

type SourceStatus struct {
	Name string `json:"name"`
	Kind string `json:"kind"`
	// Containers is a docker source's containers map: its state, the
	// containers served and the stale ones (removed, still mapped).
	Containers *docker.ContainersStatus `json:"containers,omitempty"`
}

type Sources struct {
	Epoch   string       `json:"epoch"`
	Sources []SourceInfo `json:"sources"`
}

type Status struct {
	Epoch   string         `json:"epoch"`
	Sources []SourceStatus `json:"sources"`
	// Landlock is the console's confinement ("landlock enforced (ABI 5)").
	Landlock string `json:"landlock"`
	// Residuals name the docker source's missing guards.
	Residuals []string `json:"residuals,omitempty"`
	Notes     []string `json:"notes,omitempty"`
	// AgentRules counts the agent's masking rules (pii.add).
	AgentRules AgentRuleStatus `json:"agent_rules"`
	// Budgets is what is left of the rolling budgets.
	Budgets engine.BudgetStatus `json:"budgets"`
}