daemon

type BufferedNotification struct {
	Method  string
	Payload []byte // pre-marshaled JSON
}

type CreateRequest struct {
	Profile  string            `json:"profile"`
	Template string            `json:"template"`
	Memory   string            `json:"memory"`
	CPU      float64           `json:"cpu"`
	Storage  string            `json:"storage"` // tmpfs size for /root (e.g. "500m", "1g"). Overrides profile default.
	TTL      int               `json:"ttl"`
	Labels   map[string]string `json:"labels"`
}

type CreateTemplateRequest struct {
	SandboxID string `json:"sandbox_id"`
	Label     string `json:"label"`
}

type Daemon struct {
	Config           config.Config
	Runtimes         map[string]runtime.Runtime // keyed by runtime name ("docker", "docker+gvisor", "firecracker")
	Pool             *pool.Manager
	Registry         *Registry
	Templates        *TemplateRegistry
	TemplateBackend  TemplateBackend            // Default template backend (Docker).
	TemplateBackends map[string]TemplateBackend // Per-runtime template backends.
	Server           *Server
	Metrics          *Metrics
	Events           *EventBus
	Tunnels          *TunnelManager

	AuthLimit   *rateLimiter // Rate limiter for failed auth attempts.
	CreateLimit *rateLimiter // Rate limiter for sandbox creation per identity.
	Log         *slog.Logger
	// contains filtered or unexported fields
}

type DockerTemplateBackend struct {
	Docker *client.Client
}

type Event struct {
	ID        uint64                 `json:"id"`   // Monotonically increasing sequence number.
	Type      string                 `json:"type"` // "sandbox.created", "sandbox.destroyed", "sandbox.disconnected", "sandbox.reconnected"
	SandboxID string                 `json:"sandbox_id"`
	Identity  string                 `json:"identity,omitempty"`
	Timestamp time.Time              `json:"timestamp"`
	Data      map[string]interface{} `json:"data,omitempty"`
}

type EventBus struct {
	// contains filtered or unexported fields
}

type Metrics struct {
	// contains filtered or unexported fields
}

type NotificationBuffer struct {
	// contains filtered or unexported fields
}

type Registry struct {
	// contains filtered or unexported fields
}

type Sandbox struct {
	ID          string            `json:"id"`
	ContainerID string            `json:"container_id"`
	Image       string            `json:"image"`
	State       SandboxState      `json:"state"`
	Identity    identity.Identity `json:"-"`
	IdentityStr string            `json:"identity,omitempty"`
	AgentAddr   string            `json:"-"`
	AuthToken   string            `json:"-"` // Token for agent authentication.
	Created     time.Time         `json:"created"`
	TTL         int               `json:"ttl"`
	Memory      int64             `json:"-"`
	CPU         float64           `json:"-"`
	Profile     string            `json:"profile,omitempty"`
	Template    string            `json:"template,omitempty"`
	Labels      map[string]string `json:"labels,omitempty"`
	RuntimeName string            `json:"runtime,omitempty"` // "docker" or "firecracker"

	// Session tracking.
	Session *proxy.Session `json:"-"`

	// TTL reconnection fields.
	DisconnectedAt time.Time `json:"-"`

	// Notification buffer for disconnected state.
	Buffer *NotificationBuffer `json:"-"`

	// Agent connection kept alive during disconnect for buffering.
	Agent *proxy.AgentConn `json:"-"`

	// Active port tunnels keyed by container port.
	Tunnels map[int]*Tunnel `json:"-"`
	// contains filtered or unexported fields
}

type SandboxInfo struct {
	ID       string            `json:"id"`
	Image    string            `json:"image"`
	State    SandboxState      `json:"state"`
	Created  time.Time         `json:"created"`
	TTL      int               `json:"ttl"`
	Profile  string            `json:"profile,omitempty"`
	Template string            `json:"template,omitempty"`
	Labels   map[string]string `json:"labels,omitempty"`
}

type SandboxState string

type SandboxStats struct {
	CPUPercent       float64 `json:"cpu_percent"`
	MemoryUsageBytes uint64  `json:"memory_usage_bytes"`
	MemoryLimitBytes uint64  `json:"memory_limit_bytes"`
	MemoryPercent    float64 `json:"memory_percent"`
	NetworkRxBytes   uint64  `json:"network_rx_bytes"`
	NetworkTxBytes   uint64  `json:"network_tx_bytes"`
	PIDs             uint64  `json:"pids"`
	UptimeSeconds    float64 `json:"uptime_seconds"`
}

type Server struct {
	// contains filtered or unexported fields
}

type Template struct {
	ID         string    `json:"id"`
	Label      string    `json:"label"`
	Image      string    `json:"image"`   // Docker image tag or snapshot path.
	Backend    string    `json:"backend"` // "docker" or "firecracker".
	Identity   string    `json:"identity,omitempty"`
	Size       int64     `json:"size"`
	CreatedAt  time.Time `json:"created_at"`
	LastUsedAt time.Time `json:"last_used,omitempty"`
}

type TemplateBackend interface {
	// Capture creates a template from a running sandbox, returning the
	// image/snapshot reference and its size in bytes.
	Capture(ctx context.Context, containerID, tag string) (ref string, size int64, err error)

	// Remove deletes the underlying image or snapshot files.
	Remove(ctx context.Context, ref string) error
}

type TemplateRegistry struct {
	// contains filtered or unexported fields
}

type Tunnel struct {
	SandboxID   string
	Port        int // container port
	HostPort    int // allocated host port
	ContainerIP string
	// contains filtered or unexported fields
}

type TunnelInfo struct {
	Port     int    `json:"port"`
	HostPort int    `json:"host_port"`
	URL      string `json:"url"`
}

type TunnelManager struct {
	// contains filtered or unexported fields
}