tlsintent

type CaptureIntegrity struct {
	Rule     string         `json:"rule"`
	State    string         `json:"state"`
	Reason   string         `json:"reason"`
	DataKind string         `json:"data_kind"`
	Position *ChunkPosition `json:"position,omitempty"`
}

type CaptureLoss struct {
	Streams uint64
	Bytes   uint64
}

type Chunk struct {
	PID            uint32
	Conn           uint64 // TLS object address; reusable across connection lifetimes
	ProcessStartNS uint64
	Epoch          uint64 // capture generation; zero for producers without lifecycle probes
	Direction      string // Request or Response
	Data           []byte
	Truncated      bool // the kernel dropped bytes past its capture cap for this call
	Position       *ChunkPosition
	Checkpoint     bool // producer's last call number at a lifecycle boundary; no data
}

type ChunkPosition struct {
	StreamID     uint64 `json:"stream_id,string"`
	CallSequence uint64 `json:"call_sequence,string"`
	Offset       uint32 `json:"offset"`
	TotalBytes   uint32 `json:"total_bytes"`
	Checkpoint   bool   `json:"checkpoint,omitempty"`
}

type Message struct {
	PID            uint32
	Conn           uint64
	ProcessStartNS uint64
	Epoch          uint64
	Direction      string // Request or Response
	Protocol       string // ProtoHTTP11 or ProtoH2
	StreamID       uint32 // HTTP/2 stream ID; zero for HTTP/1.x

	// HTTP surface.
	Method  string // request only
	Path    string // request only
	Host    string // request only
	Status  int    // response only
	Headers map[string]string
	Body    []byte // decoded body: dechunked and, for SSE, the joined data: payloads

	Truncated  bool           // some bytes were dropped, so Body may be incomplete
	CaptureGap string         // why framing or retained content is incomplete
	DataKind   string         // empty/http_body for decoded bodies; otherwise an undecoded fragment
	Position   *ChunkPosition // position of a contiguous raw TLS fragment, not a decoded HTTP body

	// Minimal LLM semantics (best-effort; empty when not an LLM call).
	Model    string
	Endpoint string // request: host+path
}

type Reassembler struct {
	MaxBytes   int // per-direction retained byte cap, including HTTP/2
	MaxStreams int // active connection-directions; 0 -> 128
	// contains filtered or unexported fields
}

type Semantics struct {
	Model        string   `json:"model,omitempty"`
	MessageCount int      `json:"message_count,omitempty"` // request: number of messages
	HasSystem    bool     `json:"has_system,omitempty"`    // request: a system prompt is present
	ToolsOffered []string `json:"tools_offered,omitempty"` // request: tool names offered to the model
	ToolCalls    []string `json:"tool_calls,omitempty"`    // response: tool names the model decided to call
	ToolCommands []string `json:"tool_commands,omitempty"` // response: the shell command(s) the model decided to run
	StopReason   string   `json:"stop_reason,omitempty"`   // response: why generation stopped
}