watchdog

type Action struct {
	Type      ActionType `json:"type"`
	Timestamp time.Time  `json:"timestamp"`
	Reason    string     `json:"reason"`
	Details   string     `json:"details,omitempty"`
	Success   bool       `json:"success"`
}

type ActionExecutor struct {
	// contains filtered or unexported fields
}

type ActionType string

type BaseCollector struct {
	// contains filtered or unexported fields
}

type Collector interface {
	Name() string
	Collect(ctx context.Context, snapshot *Snapshot) error
	Enabled() bool
	SetEnabled(enabled bool)
}

type Config struct {
	// Enable/disable watchdog
	Enabled bool

	// Base collection interval (adjusts dynamically)
	BaseInterval time.Duration

	// ==========================================================================
	// Hysteresis Settings (prevents flapping)
	// ==========================================================================
	HysteresisWarnEnter float64 // Enter WARN at this score
	HysteresisWarnExit  float64 // Exit WARN when below this for WarnExitDuration
	HysteresisCritEnter float64 // Enter CRITICAL at this score
	HysteresisCritExit  float64 // Exit CRITICAL when below this for CritExitDuration
	WarnExitDuration    time.Duration
	CritExitDuration    time.Duration

	// Memory
	MemBudgetBytes         int64   // Align with GOMEMLIMIT
	RSSCritPercentOfBudget float64 // RSS critical threshold as % of budget
	HeapCritPercentOfLimit float64 // Heap critical threshold as % of GOMEMLIMIT

	// CPU
	CPUCritPercent     float64 // Process CPU critical threshold
	LoadNormalizedCrit float64 // Load/NumCPU critical threshold

	// IO
	IOWaitCritPercent  float64 // iowait critical threshold
	DiskUseCritPercent float64 // Disk usage critical threshold

	// Network/Conntrack
	ConntrackUtilCrit    float64 // Conntrack utilization critical threshold
	SoftnetDropsRateCrit float64 // Softnet drops per second critical threshold

	// Goroutines
	GoroutinesCrit int // Goroutine count critical threshold

	// ==========================================================================
	// Collector Intervals (dynamic - change based on mode)
	// ==========================================================================
	ProcessInterval      time.Duration // Process/runtime metrics
	SystemInterval       time.Duration // System metrics
	KernelInterval       time.Duration // Kernel/netfilter metrics
	NFTSetInterval       time.Duration // nft set counts (cheap)
	NFTRulesetInterval   time.Duration // nft full ruleset (expensive)
	TopProcessesInterval time.Duration // Top hogs

	// Degraded mode multipliers
	DegradedIntervalMultiplier float64 // Multiply intervals by this in DEGRADED

	// ==========================================================================
	// Profiling Settings
	// ==========================================================================
	ProfileAutoEnabled       bool
	ProfileDir               string
	ProfileCPUCooldown       time.Duration
	ProfileHeapCooldown      time.Duration
	ProfileGoroutineCooldown time.Duration
	ProfileCPUDuration       time.Duration // Duration of CPU profile
	ProfileMaxCount          int           // Max profiles to keep

	// ==========================================================================
	// Memory Valve Settings
	// ==========================================================================
	FreeOSMemoryEnabled        bool
	FreeOSMemoryCooldown       time.Duration
	FreeOSMemoryOnlyIfCPUBelow float64 // Only trigger if CPU below this %

	// ==========================================================================
	// Degradation Settings
	// ==========================================================================
	DegradeDisableNFTRulesetScan bool
	DegradeReduceWorkersTo       int
	SurvivalReduceWorkersTo      int

	// ==========================================================================
	// Flight Recorder Settings
	// ==========================================================================
	RecorderEnabled          bool
	RecorderDir              string
	RecorderMaxEvents        int           // Ring buffer size
	RecorderSnapshotInterval time.Duration // How often to write snapshots
	RecorderRetentionDays    int           // Days to keep old files

	// ==========================================================================
	// Alerting
	// ==========================================================================
	AlertThrottleDuration time.Duration // Don't repeat same alert within this
}

type Cooldowns struct {
	// contains filtered or unexported fields
}

type Dimension string

type Event struct {
	Type      EventType `json:"type"`
	Timestamp time.Time `json:"timestamp"`
	Message   string    `json:"message"`
	Snapshot  *Snapshot `json:"snapshot,omitempty"`
	Action    *Action   `json:"action,omitempty"`
	OldMode   Mode      `json:"old_mode,omitempty"`
	NewMode   Mode      `json:"new_mode,omitempty"`
	Dimension Dimension `json:"dimension,omitempty"`
	Score     float64   `json:"score,omitempty"`
	Level     Level     `json:"level,omitempty"`
}

type EventType string

type KernelCollector struct {
	BaseCollector
	// contains filtered or unexported fields
}

type KernelMetrics struct {
	ConntrackCount       int     `json:"conntrack_count"`
	ConntrackMax         int     `json:"conntrack_max"`
	ConntrackUtilization float64 `json:"conntrack_utilization"` // count/max
	SoftnetDrops         uint64  `json:"softnet_drops_total"`   // Aggregated across CPUs
	SoftnetTimeSqueeze   uint64  `json:"softnet_time_squeeze_total"`
	NICDrops             uint64  `json:"nic_rx_dropped_total"` // Aggregated across interfaces
}

type Level string

type MetricsExporter struct {
	// contains filtered or unexported fields
}

type Mode string

type NFTablesCollector struct {
	BaseCollector
	// contains filtered or unexported fields
}

type NFTablesMetrics struct {
	RulesTotal       int            `json:"rules_total"`
	SetsTotal        int            `json:"sets_total"`
	SetElements      map[string]int `json:"set_elements"`       // set_name -> count
	CountersEnabled  bool           `json:"counters_enabled"`   // Whether rules have counters
	LastApplyLatency float64        `json:"last_apply_latency"` // Seconds
}

type PressureCalculator struct {
	// contains filtered or unexported fields
}

type PressureState struct {
	Timestamp time.Time

	// Per-dimension scores (0-100)
	Scores map[Dimension]float64

	// Per-dimension levels
	Levels map[Dimension]Level

	// Derived operating mode
	Mode Mode

	// Time in current mode
	ModeEnteredAt time.Time
	ModeDuration  time.Duration
}

type ProcessCollector struct {
	BaseCollector
	// contains filtered or unexported fields
}

type ProcessMetrics struct {
	PID     int     `json:"pid"`
	RSS     uint64  `json:"rss_bytes"`      // Resident Set Size
	VMS     uint64  `json:"vms_bytes"`      // Virtual Memory Size
	CPUPct  float64 `json:"cpu_percent"`    // CPU percentage (smoothed)
	FDs     int     `json:"open_fds"`       // Open file descriptors
	Threads int     `json:"threads"`        // Thread count
	Uptime  float64 `json:"uptime_seconds"` // Process uptime
}

type Recorder struct {
	// contains filtered or unexported fields
}

type RecorderStats struct {
	EventsInBuffer    int       `json:"events_in_buffer"`
	MaxEvents         int       `json:"max_events"`
	LastEventWrite    time.Time `json:"last_event_write"`
	LastSnapshotWrite time.Time `json:"last_snapshot_write"`
}

type RuntimeCollector struct {
	BaseCollector
}

type RuntimeControls struct {
	// Worker pool sizing
	MaxWorkers atomic.Int32

	// Feature toggles
	EnableExpensiveCollectors atomic.Bool
	EnableNFTRulesetScan      atomic.Bool
	EnableTopProcesses        atomic.Bool
	EnableVerboseLogging      atomic.Bool

	// Sampling factors (1.0 = normal, 0.5 = half, etc.)
	TelemetrySamplingFactor atomic.Uint32 // stored as percent (100 = 1.0)
	// contains filtered or unexported fields
}

type RuntimeMetrics struct {
	Goroutines     int     `json:"goroutines"`
	HeapAlloc      uint64  `json:"heap_alloc_bytes"`
	HeapInuse      uint64  `json:"heap_inuse_bytes"`
	HeapReleased   uint64  `json:"heap_released_bytes"`
	HeapSys        uint64  `json:"heap_sys_bytes"`
	StackInuse     uint64  `json:"stack_inuse_bytes"`
	GCCPUFraction  float64 `json:"gc_cpu_fraction"`
	GCPauseNs      uint64  `json:"gc_pause_ns"`       // Last GC pause
	GCPauseTotalNs uint64  `json:"gc_pause_total_ns"` // Total GC pause time
	NumGC          uint32  `json:"num_gc"`            // Number of completed GC cycles
	GOMEMLIMIT     int64   `json:"gomemlimit_bytes"`  // GOMEMLIMIT value (-1 if not set)
}

type Snapshot struct {
	Timestamp time.Time `json:"timestamp"`

	// Process metrics
	Process ProcessMetrics `json:"process"`

	// Go runtime metrics
	Runtime RuntimeMetrics `json:"runtime"`

	// System metrics
	System SystemMetrics `json:"system"`

	// Kernel/netfilter metrics
	Kernel KernelMetrics `json:"kernel"`

	// nftables metrics
	NFTables NFTablesMetrics `json:"nftables"`
}

type StateMachine struct {
	// contains filtered or unexported fields
}

type SystemCollector struct {
	BaseCollector
	// contains filtered or unexported fields
}

type SystemMetrics struct {
	LoadAvg1   float64 `json:"load_avg_1"`
	LoadAvg5   float64 `json:"load_avg_5"`
	LoadAvg15  float64 `json:"load_avg_15"`
	NumCPU     int     `json:"num_cpu"`
	IOWaitPct  float64 `json:"iowait_percent"`
	MemTotal   uint64  `json:"mem_total_bytes"`
	MemFree    uint64  `json:"mem_free_bytes"`
	MemAvail   uint64  `json:"mem_available_bytes"`
	SwapTotal  uint64  `json:"swap_total_bytes"`
	SwapFree   uint64  `json:"swap_free_bytes"`
	DiskUsePct float64 `json:"disk_use_percent"`  // Log partition
	Entropy    int     `json:"entropy_available"` // /proc/sys/kernel/random/entropy_avail
}

type Watchdog struct {
	// contains filtered or unexported fields
}