process

type Cgroup struct {
	// HierarchyID that can be matched to a named hierarchy using /proc/cgroups. Cgroups V2 only has one
	// hierarchy, so HierarchyID is always 0. For cgroups v1 this is a unique ID number
	HierarchyID int
	// Controllers using this hierarchy of processes. Controllers are also known as subsystems. For
	// Cgroups V2 this may be empty, as all active controllers use the same hierarchy
	Controllers []string
	// Path of this control group, relative to the mount point of the cgroupfs representing this specific
	// hierarchy
	Path string
}

type Container struct {
	ID          string            `json:"container_id,omitempty"`
	Name        string            `json:"container_name,omitempty"`
	Labels      map[string]string `json:"container_labels,omitempty"`
	Image       string            `json:"container_image,omitempty"`
	ImageDigest string            `json:"container_imageDigest,omitempty"`
	RootFS      string            `json:"-"`
}

type ContainerEnricher struct {
	DefaultObserver
	// contains filtered or unexported fields
}

type DefaultObserver struct{}

type Eventer interface {
	Start(ctx context.Context) error
	Stop() error
	Register(Receiver)
	SetMeta(p *Process) error
}

type ExeFilter struct {
	// contains filtered or unexported fields
}

type ExeRegexFilter struct {
	// contains filtered or unexported fields
}

type Filter interface {
	Evaluate(*Process) (bool, error)
	Bitmask() uint8
	String() string
}

type Manager struct {
	Logger *zap.Logger

	// observers
	Observers []Observer
	// contains filtered or unexported fields
}

type Observer interface {
	ProcessStarted(ctx context.Context, proc *Process) error
	ProcessReplaced(ctx context.Context, proc *Process) error
	ProcessStopped(ctx context.Context, proc *Process) error
}

type PIDFilter struct {
	PID int
	// contains filtered or unexported fields
}

type Pod struct {
	Name        string            `json:"pod_name,omitempty"`
	Namespace   string            `json:"pod_namespace,omitempty"`
	Labels      map[string]string `json:"pod_labels,omitempty"`
	Annotations map[string]string `json:"pod_annotations,omitempty"`
}

type Process struct {
	Pid         int
	PidExe      string // PidExe is the path to the /proc process symlink
	PodID       string // TODO: remove
	Cgroup      string
	ContainerID string
	RootID      uint64
	Binary      string
	// Exe is the absolute path to the executable of the process.
	// If the process is running in a container, this path will be relative to the container's root filesystem.
	Exe            string
	ExeFilename    string // ExeFilename is the path to the file that was called by the syscall. It can be empty.
	Args           []string
	Root           string
	Env            map[string]string
	Strategy       QpointStrategy
	PredatesQpoint bool
	User           resolvable.V[*ProcessUser]
	UserShell      resolvable.V[bool]
	ExitCode       int

	// TLSProbeTypesDetected are the the probes that have scanned the process binary and found matching hooks.
	TLSProbeTypesDetected []string

	Container resolvable.V[*Container]
	Pod       resolvable.V[*Pod]
	// contains filtered or unexported fields
}

type ProcessUser struct {
	UID      uint
	Username string
}

type QpointStrategy uint32

type Receiver interface {
	RegisterProcess(ctx context.Context, p *Process) error
	UnregisterProcess(ctx context.Context, pid, exitCode int) error
}

type TlsProbeError struct {
	ProbeName string
	Err       error
}