daemon

type Client struct {
	BaseURL string
	HTTP    *http.Client
	Token   string
}

type LockInfo struct {
	PID       int    `json:"pid"`
	Addr      string `json:"addr"`
	StartedAt string `json:"started_at"`
}

type Server struct {
	DB                 *sql.DB
	Paths              store.Paths
	Driver             runtimeplane.Driver
	SampleInterval     time.Duration
	SampleLimit        int
	SampleTimeout      time.Duration
	RawRetention       time.Duration
	MaxRawSamples      int
	EvidenceInterval   time.Duration
	EvidenceLimit      int
	SpoolInterval      time.Duration
	SpoolLimit         int
	SpoolMaxQueued     int
	SpoolMaxBytes      int64
	SpoolMaxBatchBytes int64
	SpoolDropPolicy    string
	GCInterval         time.Duration
	GCLimit            int
	// AuthToken, when set, requires every request except the health endpoints to carry
	// `Authorization: Bearer <AuthToken>`. `daemon serve` generates a strong token into
	// <data-dir>/auth-token when none is provided; empty = open and is only reachable
	// via the explicit --insecure-open escape hatch.
	AuthToken string
	// ListenAddr also defines the optional DNS host trusted in open mode.
	ListenAddr string
	// IngestAllowDir confines file-path inputs of /v1/leases (task) and
	// /v1/telemetry/ingest-falco (file). Empty = <data-dir>/ingest.
	IngestAllowDir string
	// RecordAllowShell / RecordExecTimeout feed record.Options for /v1/record:
	// the execution policy of the authenticated record API. Running arbitrary
	// programs for authenticated callers is the product design; these only
	// control the shell wrapper form (AllowShell, default false) and the
	// per-exec bound (Timeout: 0 = policy default, negative = unbounded).
	RecordAllowShell  bool
	RecordExecTimeout time.Duration
	// contains filtered or unexported fields
}

type SnapshotCreateResponse struct {
	SnapshotID       string `json:"snapshot_id"`
	Files            int64  `json:"files"`
	Bytes            int64  `json:"bytes"`
	SnapshotCreateMS int64  `json:"snapshot_create_ms"`
	Hash             string `json:"hash"`
}