tracestore

type Filter struct {
	Since, Until time.Time
	NodeIDs      []string
	UserIDs      []string
	LineUUIDs    []string
	SessionIDs   []string
	// DstContains is a case-insensitive substring of the destination host, which
	// is what an operator actually types. It cannot use the dst_host index (no
	// index serves a leading wildcard), so it narrows whatever the other
	// predicates already selected.
	DstContains  string
	CloseReasons []string
	UserKinds    []string
	OnlyStalled  bool
	// IncludeOpen defaults false: a periodic snapshot of a still-running
	// connection is not a result an operator asked for, and mixing snapshots
	// into a list of finished connections double-reports live traffic.
	IncludeOpen bool
	Limit       int    // clamped to [1, MaxQueryLimit]; 0 means DefaultQueryLimit
	Cursor      string // opaque, from RecordPage.NextCursor
}

type Options struct {
	RecordTTL time.Duration // default DefaultRecordTTL
	LineTTL   time.Duration // default DefaultLineTTL
	RollupTTL time.Duration // default DefaultRollupTTL
	MaxBytes  int64         // default DefaultMaxBytes
}

type RecordPage struct {
	Records           []model.ConnRecord `json:"records"`
	NextCursor        string             `json:"next_cursor,omitempty"`
	CollectedTotal    int64              `json:"collected_total"`
	CollectedNewestAt time.Time          `json:"collected_newest_at,omitzero"`
}

type RetainResult struct {
	// Expired counts come from the three TTLs.
	RecordsExpired int64 `json:"records_expired"`
	LinesExpired   int64 `json:"lines_expired"`
	RollupsExpired int64 `json:"rollups_expired"`
	// Evicted counts come from the MaxBytes ceiling, oldest first.
	RecordsEvicted int64 `json:"records_evicted"`
	LinesEvicted   int64 `json:"lines_evicted"`

	BytesBefore int64 `json:"bytes_before"`
	BytesAfter  int64 `json:"bytes_after"`
	// Truncated reports that the batch ceiling was reached with work left. It is
	// surfaced rather than hidden: a store that never gets back under its cap
	// should be visible, not quietly growing.
	Truncated bool `json:"truncated"`
}

type Rollup struct {
	BucketStart time.Time `json:"bucket_start"`
	UserID      string    `json:"user_id,omitempty"`
	LineUUID    string    `json:"line_uuid,omitempty"`
	NodeID      string    `json:"node_id,omitempty"`

	// Connections counts every final record in the bucket.
	Connections int64 `json:"connections"`
	// BytesKnownCount is how many of those connections had their bytes actually
	// measured. Upload and Download sum only those. The two numbers travel
	// together on purpose: a caller that renders the sums without saying they
	// cover BytesKnownCount of Connections is presenting a partial total as a
	// whole one, which is the exact lie this feature exists to prevent.
	BytesKnownCount int64 `json:"bytes_known_count"`
	Upload          int64 `json:"upload"`
	Download        int64 `json:"download"`

	// CloseReasons counts final records per close reason. The counts sum to
	// Connections; a record with no reason is counted as unknown.
	CloseReasons map[string]int64 `json:"close_reasons,omitempty"`
}

type RollupFilter struct {
	Since, Until time.Time
	UserIDs      []string
	LineUUIDs    []string
	NodeIDs      []string
	Limit        int // clamped to [1, MaxRollupLimit]; 0 means DefaultRollupLimit
}

type Stats struct {
	Path           string    `json:"path"`
	SchemaVersion  int       `json:"schema_version"`
	Records        int64     `json:"records"`
	OpenRecords    int64     `json:"open_records"`
	Lines          int64     `json:"lines"`
	Rollups        int64     `json:"rollups"`
	OldestRecordAt time.Time `json:"oldest_record_at,omitzero"`
	NewestRecordAt time.Time `json:"newest_record_at,omitzero"`
	SizeBytes      int64     `json:"size_bytes"`
	MaxBytes       int64     `json:"max_bytes"`
	CipherEnabled  bool      `json:"cipher_enabled"`
}

type Store struct {
	// contains filtered or unexported fields
}