Documentation
¶
Index ¶
- func AcquireLock(dataDir, addr string) (func(), error)
- func WarnIfDaemonActive(dataDir string, w io.Writer)
- type Client
- func (c Client) CreateLease(task string) (string, error)
- func (c Client) CreateSession(leaseID string) (string, error)
- func (c Client) CreateSnapshot(sessionID, typ, path, name string) (SnapshotCreateResponse, error)
- func (c Client) EvidenceManifest(runID string, materialize bool) (evidence.MaterializedManifest, error)
- func (c Client) Exec(sessionID string, command []string, stream bool, out io.Writer) (string, error)
- func (c Client) ExplainGraph(opts provenance.ExplainOptions) (provenance.ExplainManifest, error)
- func (c Client) ExportBatchForensics(opts forensics.BatchExportOptions) (forensics.BatchBundleInfo, error)
- func (c Client) ExportForensics(runID string) (forensics.BundleInfo, error)
- func (c Client) GraphLens(opts provenance.GraphLensOptions) (provenance.GraphLensManifest, error)
- func (c Client) ImportSignals(runID, engine string, signals []signal.EvalSignal) (signal.EvalReport, error)
- func (c Client) InspectSession(sessionID string) (control.SessionInfo, error)
- func (c Client) ListSessions() ([]control.SessionInfo, error)
- func (c Client) ObserveSummary(runID string, topN int) (observability.Summary, error)
- func (c Client) RemoveSession(sessionID string) error
- func (c Client) ResumeSnapshot(snapshotNameOrID, leaseID string) (string, error)
- func (c Client) RunBuiltinSignals(runID string) (signal.EvalReport, error)
- func (c Client) SecurityDeviations(runID string) (baseline.DeviationsReport, error)
- func (c Client) SecurityResponses(runID string) (securitymodel.ResponseActionsReport, error)
- func (c Client) SecurityRisks(runID string) (securitymodel.RiskSignalsReport, error)
- func (c Client) SetSessionCPUProfile(sessionID, profile string) error
- func (c Client) SignalContext(runID string) (signal.EvalContext, error)
- func (c Client) StopSession(sessionID string) error
- func (c Client) TelemetryCorrelations(runID, eventID string) (telemetry.CorrelationReport, error)
- func (c Client) TelemetryProducerHealth(runID string) (telemetry.ProducerHealthReport, error)
- func (c Client) Timeline(opts provenance.TimelineOptions) (provenance.TimelineManifest, error)
- func (c Client) VerifyGraph(runID string) (provenance.VerifyResult, error)
- type LockInfo
- type Server
- type SnapshotCreateResponse
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func AcquireLock ¶ added in v0.2.0
AcquireLock records that this process owns dataDir as the control daemon and returns a release func to remove the lock on shutdown. A stale lock (its pid is gone) is overwritten. The lock is advisory: it powers WarnIfDaemonActive so direct CLI writes can surface the two-writer hazard, not a hard mutex.
func WarnIfDaemonActive ¶ added in v0.2.0
WarnIfDaemonActive prints a stderr warning when a live daemon owns dataDir, so a direct CLI write knows it may diverge from the daemon's in-memory state. It never blocks the command (WAL keeps the file safe; the risk is logical).
Types ¶
type Client ¶
func (Client) CreateSnapshot ¶
func (c Client) CreateSnapshot(sessionID, typ, path, name string) (SnapshotCreateResponse, error)
func (Client) EvidenceManifest ¶
func (Client) ExplainGraph ¶
func (c Client) ExplainGraph(opts provenance.ExplainOptions) (provenance.ExplainManifest, error)
func (Client) ExportBatchForensics ¶
func (c Client) ExportBatchForensics(opts forensics.BatchExportOptions) (forensics.BatchBundleInfo, error)
func (Client) ExportForensics ¶
func (c Client) ExportForensics(runID string) (forensics.BundleInfo, error)
func (Client) GraphLens ¶ added in v0.4.0
func (c Client) GraphLens(opts provenance.GraphLensOptions) (provenance.GraphLensManifest, error)
func (Client) ImportSignals ¶
func (c Client) ImportSignals(runID, engine string, signals []signal.EvalSignal) (signal.EvalReport, error)
func (Client) InspectSession ¶
func (c Client) InspectSession(sessionID string) (control.SessionInfo, error)
func (Client) ListSessions ¶
func (c Client) ListSessions() ([]control.SessionInfo, error)
func (Client) ObserveSummary ¶
func (Client) RemoveSession ¶
func (Client) ResumeSnapshot ¶
func (Client) RunBuiltinSignals ¶
func (c Client) RunBuiltinSignals(runID string) (signal.EvalReport, error)
func (Client) SecurityDeviations ¶
func (c Client) SecurityDeviations(runID string) (baseline.DeviationsReport, error)
func (Client) SecurityResponses ¶
func (c Client) SecurityResponses(runID string) (securitymodel.ResponseActionsReport, error)
func (Client) SecurityRisks ¶
func (c Client) SecurityRisks(runID string) (securitymodel.RiskSignalsReport, error)
func (Client) SetSessionCPUProfile ¶
func (Client) SignalContext ¶
func (c Client) SignalContext(runID string) (signal.EvalContext, error)
func (Client) StopSession ¶
func (Client) TelemetryCorrelations ¶
func (c Client) TelemetryCorrelations(runID, eventID string) (telemetry.CorrelationReport, error)
func (Client) TelemetryProducerHealth ¶ added in v0.7.2
func (c Client) TelemetryProducerHealth(runID string) (telemetry.ProducerHealthReport, error)
func (Client) Timeline ¶
func (c Client) Timeline(opts provenance.TimelineOptions) (provenance.TimelineManifest, error)
func (Client) VerifyGraph ¶
func (c Client) VerifyGraph(runID string) (provenance.VerifyResult, error)
type LockInfo ¶ added in v0.2.0
type LockInfo struct {
PID int `json:"pid"`
Addr string `json:"addr"`
StartedAt string `json:"started_at"`
}
LockInfo records which process owns a data dir as the control daemon.
func ActiveLock ¶ added in v0.2.0
ActiveLock returns the lock info if a live daemon currently owns dataDir.
type Server ¶
type Server struct {
DB *sql.DB
Paths store.Paths
Driver runtimeplane.Driver
SampleInterval time.Duration
SampleLimit int
SampleTimeout time.Duration
RawRetention time.Duration
MaxRawSamples int
EvidenceInterval time.Duration
EvidenceLimit int
SpoolInterval time.Duration
SpoolLimit int
SpoolMaxQueued int
SpoolMaxBytes int64
SpoolMaxBatchBytes int64
SpoolDropPolicy string
GCInterval time.Duration
GCLimit int
// AuthToken, when set, requires every request except GET /v1/health to carry
// `Authorization: Bearer <AuthToken>`. Empty = open (backward compatible).
AuthToken string
// contains filtered or unexported fields
}