alerts

type AlertChannel struct {
	gorm.Model
	Name          string `gorm:"uniqueIndex:idx_alert_channels_unique"`
	EnvironmentID uint   `gorm:"uniqueIndex:idx_alert_channels_unique"`
	// Type is the Registry key: "email", "webhook", …
	Type string `gorm:"index;size:32"`
	// Config is a JSON blob whose shape depends on Type.
	Config  string `gorm:"type:text"`
	Enabled bool
	Info    string
}

type AlertHistory struct {
	ID        uint      `gorm:"primarykey" json:"id"`
	CreatedAt time.Time `json:"created_at"`
	// RuleID / ChannelID are denormalized as uint rather than FKs so
	// deleting a rule or channel does not cascade-delete history.
	RuleID      uint   `gorm:"index" json:"rule_id"`
	RuleName    string `gorm:"size:128" json:"rule_name"`
	ChannelID   uint   `gorm:"index" json:"channel_id"`
	ChannelName string `gorm:"size:128" json:"channel_name"`
	Environment string `gorm:"size:64;index" json:"environment"`
	NodeUUID    string `gorm:"size:64;index" json:"node_uuid"`
	// Entity is what matched: a hostname, a query name, or "node" for
	// inactive/recovered rules. Part of the Redis dedupe key.
	Entity string `gorm:"size:256" json:"entity"`
	// Detail is the rendered match context (bounded at match time).
	Detail string `gorm:"type:text" json:"detail"`
}

type AlertRule struct {
	gorm.Model
	Name          string `gorm:"uniqueIndex:idx_alert_rules_unique"`
	EnvironmentID uint   `gorm:"uniqueIndex:idx_alert_rules_unique"`
	// Source is one of the Source* constants.
	Source string `gorm:"index;size:32"`
	// NodeUUID optionally scopes the rule to a single node. When set:
	// log-matching rules only match entries whose hostIdentifier equals
	// it, and node-state rules only fire for that node. Empty = all
	// nodes in scope (the original behavior).
	NodeUUID string `gorm:"size:64;index"`
	// MatchType is MatchTypeSubstring or MatchTypeRegex.
	MatchType string `gorm:"size:16"`
	// MatchField scopes the match to one column ("message" for status
	// logs, a column name for result/query logs). Empty = any field.
	MatchField string `gorm:"size:128"`
	// MatchValue is the substring or regex pattern.
	MatchValue string `gorm:"type:text"`
	// StatusSeverity filters status-log rules: "error", "warning" or
	// "any". Only consulted when Source == SourceStatusLog.
	StatusSeverity string `gorm:"size:16;default:any"`
	// CooldownMinutes suppresses repeat notifications for the same
	// rule+entity within this window. 0 = alert on every match (subject
	// to the global default cooldown).
	CooldownMinutes int `gorm:"default:0"`
	// ChannelIDs is a JSON-encoded array of alert_channel IDs. Empty
	// array = no channels yet; the rule matches but nothing is sent.
	ChannelIDs string `gorm:"type:text"`
	Enabled    bool
	Info       string
}

type ChannelSender interface {
	Send(h Hit) error
	// Name identifies the channel in logs and history.
	Name() string
}

type ChannelSpec struct {
	Type         string
	Description  string
	HasSecret    bool
	SecretFields []string
	Fields       []FieldSpec
	// Decode unmarshals a raw JSON Config into the typed struct the
	// sender expects.
	Decode func(json.RawMessage) (any, error)
	// Build instantiates a ChannelSender from a decoded config.
	Build func(any) (ChannelSender, error)
}

type DispatchSink interface {
	Dispatch(ctx context.Context, h Hit) error
}

type Dispatcher struct {
	// contains filtered or unexported fields
}

type EmailConfig struct {
	Host     string `json:"host"`
	Port     int    `json:"port"`
	Username string `json:"username"`
	Password string `json:"password"`
	From     string `json:"from"`
	To       string `json:"to"`
	StartTLS bool   `json:"starttls"`
}

type FieldSpec struct {
	Name        string
	Label       string
	Type        string // string | integer | boolean | secret
	Required    bool
	Placeholder string
	Help        string
	Default     any
}

type Hit struct {
	RuleID        uint
	RuleName      string
	EnvironmentID uint
	// Environment is the env name captured at match time, used for the
	// history row and rendered payloads.
	Environment     string
	NodeUUID        string
	Entity          string
	Detail          string
	CooldownMinutes int
	Channels        []uint
}

type InactiveWatcher struct {
	// contains filtered or unexported fields
}

type IngestMatcher struct {
	// contains filtered or unexported fields
}

type Manager struct {
	DB *gorm.DB
}

type NodeSnapshot struct {
	UUID string
	// EnvironmentID / Environment identify the node's environment for
	// rule scoping (ruleApplies) and hit attribution respectively.
	EnvironmentID uint
	Environment   string
	Hostname      string
	Active        bool
	LastSeen      time.Time
}

type NodeSource interface {
	// InactiveNodes returns every node whose last_seen is older than
	// the given threshold, and the threshold itself is resolved per
	// environment by the implementation.
	InactiveNodes(ctx context.Context) ([]NodeSnapshot, error)
	// ActiveNodes returns every currently-active node (used to detect
	// recoveries of nodes previously marked inactive).
	ActiveNodes(ctx context.Context) ([]NodeSnapshot, error)
}

type RuleSet struct {
	// contains filtered or unexported fields
}

type State struct {
	// contains filtered or unexported fields
}

type Store struct {
	// contains filtered or unexported fields
}

type WebhookConfig struct {
	URL                string `json:"url"`
	Secret             string `json:"secret"`
	TimeoutSeconds     int    `json:"timeoutSeconds"`
	InsecureSkipVerify bool   `json:"insecureSkipVerify"`
	// AllowPrivateTargets permits http(s):// targets on loopback or
	// RFC1918 / link-local ranges. Intended for the dev stack's
	// sink-catchall container; production deployments should leave it
	// off so a compromised operator account cannot probe internals.
	AllowPrivateTargets bool `json:"allowPrivateTargets"`
}

type Worker struct {
	// contains filtered or unexported fields
}

type WorkerMetrics struct {
	// Matched counts hits accepted into the queue.
	Matched atomic.Uint64
	// Dropped counts hits rejected because the queue was full.
	Dropped atomic.Uint64
	// Dispatched counts hits processed by the sink.
	Dispatched atomic.Uint64
	// Collapsed counts hits suppressed by the cooldown gate.
	Collapsed atomic.Uint64
	// Failed counts sink errors.
	Failed atomic.Uint64
}

type WorkerSnapshot struct {
	QueueDepth    int
	QueueCapacity int
	Matched       uint64
	Dispatched    uint64
	Collapsed     uint64
	Dropped       uint64
	Failed        uint64
}