config

type AmbientConfig struct {
	Rules  []AmbientRule `yaml:"rules"`
	Limits AmbientLimits `yaml:"limits"`
	OTEL   AmbientOTEL   `yaml:"otel"`
}

type AmbientLimits struct {
	MaxConcurrentSessions int           `yaml:"max_concurrent_sessions"`
	MaxPIDsPerSession     int           `yaml:"max_pids_per_session"`
	MaxTotalPIDs          int           `yaml:"max_total_pids"`
	SessionTimeout        time.Duration `yaml:"session_timeout"`
	RingBufferSize        int           `yaml:"ring_buffer_size"`
}

type AmbientMatch struct {
	Command         string `yaml:"command"`           // glob pattern matched against comm (16-char kernel name)
	IsContainerInit bool   `yaml:"is_container_init"` // match processes that are PID 1 in a non-root PID namespace
}

type AmbientOTEL struct {
	Endpoint    string `yaml:"endpoint"`
	ServiceName string `yaml:"service_name"`
}

type AmbientRule struct {
	Name               string            `yaml:"name"`
	Match              AmbientMatch      `yaml:"match"`
	Attributes         map[string]string `yaml:"attributes"`
	SkipEmptyValues    bool              `yaml:"skip_empty_values"`
	TraceID            string            `yaml:"trace_id"`
	ParentID           string            `yaml:"parent_id"`
	AddDebugAttributes bool              `yaml:"add_debug_attributes"`

	// ContextStarved marks this rule's root process as unable to carry useful
	// context on its own (e.g. `runc exec`: the injector's execve envp lacks
	// the CI_* variables we want for trace_id/attrs — those live on some
	// descendant's exec event, potentially several levels below).
	//
	// When true, a match does NOT start an OTEL session immediately. Instead,
	// a pending session is held; every descendant exec (at any depth) is
	// tried against the rule's Expr expressions (trace_id / parent_id /
	// attributes), and the session materializes at the first descendant
	// whose metadata makes any expression resolve to a non-empty value.
	// If no descendant resolves before session_timeout, the pending session
	// is dropped.
	ContextStarved bool `yaml:"context_starved"`
}

type Config struct {
	// Command is the executable to run
	Command string
	// Args are the arguments to pass to the command
	Args []string
	// TraceID is an optional value for the OpenTelemetry trace ID.
	// Literal strings or "expr:"-prefixed expressions are accepted.
	// If empty, the OpenTelemetry SDK will auto-generate a random trace ID.
	TraceID string
	// ParentID is an optional value for the OpenTelemetry parent span ID.
	// Literal strings or "expr:"-prefixed expressions are accepted.
	// If empty, the root span will have no parent.
	ParentID string
	// CustomAttributes are user-defined span attributes (literal or expr:-prefixed values)
	CustomAttributes []CustomAttribute
	// SkipEmptyValues omits custom attributes whose value evaluates to an empty string
	SkipEmptyValues bool
	// AddDebugAttributes emits debug.* span attributes (argv, environ, trace/parent-id
	// provenance). May leak secrets; opt-in only.
	AddDebugAttributes bool
}

type CustomAttribute struct {
	Name       string
	Expression string
}

type EnvConfig struct {
	TraceID     string `env:"PROCESS_TRACER_TRACE_ID"`
	ParentID    string `env:"PROCESS_TRACER_PARENT_ID"`
	Attributes  string `env:"PROCESS_TRACER_ATTRIBUTES"`
	Mode        string `env:"PROCESS_TRACER_MODE" envDefault:"auto"`
	ShellBinary string `env:"PROCESS_TRACER_SHELL_BINARY"`
}

type OTELConfig struct {
	ServiceName        string `env:"OTEL_SERVICE_NAME" envDefault:"sched_trace"`
	ResourceAttributes string `env:"OTEL_RESOURCE_ATTRIBUTES" envDefault:""`
	ExporterEndpoint   string `env:"OTEL_EXPORTER_OTLP_ENDPOINT" envDefault:""`
	Insecure           string `env:"OTEL_EXPORTER_OTLP_INSECURE" envDefault:""`
	ShutdownTimeoutMs  int    `env:"PROCESS_TRACER_SHUTDOWN_TIMEOUT_MS" envDefault:"200"`
}