base

type BuildEBPFProcessContext struct {
	HostIP string
}

type FinderBaseConfig interface {
	// ActiveFinder to detect process
	ActiveFinder() bool
}

type ProcessFinder interface {
	// Init the finder before Start
	Init(ctx context.Context, conf FinderBaseConfig, manager ProcessManager) error
	// Start to detect process
	Start()
	// Stop the process detect
	Stop() error
	// DetectType of Process is detecting
	DetectType() api.ProcessDetectType

	// ShouldMonitor validate the process needs to be monitored, if true, then add it into the storage
	ShouldMonitor(pid int32) bool

	// ValidateProcessIsSame between two same finder process
	ValidateProcessIsSame(p1, p2 api.DetectedProcess) bool

	// BuildEBPFProcess is transform the process entity as backend protocol data
	BuildEBPFProcess(ctx *BuildEBPFProcessContext, process api.DetectedProcess) *v3.EBPFProcessProperties
	// BuildNecessaryProperties is getting minimize necessary properties when keep alive
	BuildNecessaryProperties(process api.DetectedProcess) []*commonv3.KeyStringValuePair
	// ParseProcessId is means how to read the process id receive from backend
	ParseProcessID(process api.DetectedProcess, downstream *v3.EBPFProcessDownstream) string
}

type ProcessManager interface {
	GetModuleManager() *module.Manager
	// SyncAllProcessInFinder is mean synchronized all processes data from current ProcessFinder
	SyncAllProcessInFinder(processes []api.DetectedProcess)
	// AddDetectedProcess only add the specific processes
	AddDetectedProcess(processes []api.DetectedProcess)
}

type TemplateBuilder struct {
	Name     string
	Template string
	// contains filtered or unexported fields
}

type TemplateProcess struct {
	*process.Process
}

type TemplateRover struct {
	// contains filtered or unexported fields
}