systemd-journal-sdk-common 0.7.3

//! Time units for journal timestamps.
//!
//! Provides type-safe wrappers for seconds and microseconds to prevent unit confusion.

use serde::{Deserialize, Serialize};
use std::cell::Cell;
use std::ops::{Add, Rem, Sub};
#[cfg(all(not(unix), not(windows)))]
use std::sync::OnceLock;
#[cfg(all(not(unix), not(windows)))]
use std::time::Instant;

/// Timestamp in seconds since Unix epoch.
///
/// Used for histogram buckets, time ranges, and coarse-grained time operations.
#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord, Hash, Serialize, Deserialize)]
#[cfg_attr(feature = "allocative", derive(allocative::Allocative))]
pub struct Seconds(pub u32);

/// Timestamp in microseconds since Unix epoch.
///
/// Used for journal entry timestamps and fine-grained time operations.
#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord, Hash, Serialize, Deserialize)]
#[cfg_attr(feature = "allocative", derive(allocative::Allocative))]
pub struct Microseconds(pub u64);

/// Journal entry timestamp overrides used by writer-side APIs.
#[derive(Debug, Clone, Copy, Default, PartialEq, Eq)]
#[cfg_attr(feature = "allocative", derive(allocative::Allocative))]
pub struct EntryTimestamps {
    /// Optional source timestamp for `_SOURCE_REALTIME_TIMESTAMP` field injection.
    pub source_realtime_usec: Option<u64>,
    /// Optional journal entry realtime timestamp override.
    pub entry_realtime_usec: Option<u64>,
    /// Optional journal entry monotonic timestamp override.
    pub entry_monotonic_usec: Option<u64>,
}

impl EntryTimestamps {
    pub fn with_source_realtime_usec(mut self, ts: u64) -> Self {
        self.source_realtime_usec = Some(ts);
        self
    }

    pub fn with_entry_realtime_usec(mut self, ts: u64) -> Self {
        self.entry_realtime_usec = Some(ts);
        self
    }

    pub fn with_entry_monotonic_usec(mut self, ts: u64) -> Self {
        self.entry_monotonic_usec = Some(ts);
        self
    }
}

impl Seconds {
    /// Create a timestamp from seconds.
    pub fn new(seconds: u32) -> Self {
        Self(seconds)
    }

    /// Get the current time as seconds since Unix epoch.
    pub fn now() -> Self {
        Self(
            std::time::SystemTime::now()
                .duration_since(std::time::UNIX_EPOCH)
                .expect("system time must be after UNIX_EPOCH")
                .as_secs() as u32,
        )
    }

    /// Get the raw seconds value.
    pub fn get(self) -> u32 {
        self.0
    }

    /// Convert to microseconds.
    pub fn to_microseconds(self) -> Microseconds {
        Microseconds(self.0 as u64 * 1_000_000)
    }

    /// Add two durations with saturation at the numeric bounds.
    pub fn saturating_add(self, other: Self) -> Self {
        Seconds(self.0.saturating_add(other.0))
    }

    /// Subtract two durations with saturation at the numeric bounds.
    pub fn saturating_sub(self, other: Self) -> Self {
        Seconds(self.0.saturating_sub(other.0))
    }

    /// Checked addition. Returns None if overflow occurred.
    pub fn checked_add(self, other: Self) -> Option<Self> {
        self.0.checked_add(other.0).map(Seconds)
    }

    /// Checked subtraction. Returns None if overflow occurred.
    pub fn checked_sub(self, other: Self) -> Option<Self> {
        self.0.checked_sub(other.0).map(Seconds)
    }

    /// Returns true if this duration is a multiple of the other duration.
    ///
    /// Useful for checking if bucket durations align.
    pub fn is_multiple_of(self, other: Self) -> bool {
        other.0 != 0 && self.0 % other.0 == 0
    }
}

impl Microseconds {
    /// Create a timestamp from microseconds.
    pub fn new(microseconds: u64) -> Self {
        Self(microseconds)
    }

    /// Get the current time as microseconds since Unix epoch.
    pub fn now() -> Self {
        Self(
            std::time::SystemTime::now()
                .duration_since(std::time::UNIX_EPOCH)
                .expect("system time must be after UNIX_EPOCH")
                .as_micros() as u64,
        )
    }

    /// Get the raw microseconds value.
    pub fn get(self) -> u64 {
        self.0
    }

    /// Convert to seconds (truncates).
    pub fn to_seconds(self) -> Seconds {
        Seconds((self.0 / 1_000_000) as u32)
    }

    /// Add two durations with saturation at the numeric bounds.
    pub fn saturating_add(self, other: Self) -> Self {
        Microseconds(self.0.saturating_add(other.0))
    }

    /// Subtract two durations with saturation at the numeric bounds.
    pub fn saturating_sub(self, other: Self) -> Self {
        Microseconds(self.0.saturating_sub(other.0))
    }

    /// Checked addition. Returns None if overflow occurred.
    pub fn checked_add(self, other: Self) -> Option<Self> {
        self.0.checked_add(other.0).map(Microseconds)
    }

    /// Checked subtraction. Returns None if overflow occurred.
    pub fn checked_sub(self, other: Self) -> Option<Self> {
        self.0.checked_sub(other.0).map(Microseconds)
    }

    /// Returns true if this duration is a multiple of the other duration.
    ///
    /// Useful for checking if bucket durations align.
    pub fn is_multiple_of(self, other: Self) -> bool {
        other.0 != 0 && self.0 % other.0 == 0
    }
}

impl From<Seconds> for Microseconds {
    fn from(s: Seconds) -> Self {
        s.to_microseconds()
    }
}

impl From<u32> for Seconds {
    fn from(s: u32) -> Self {
        Seconds(s)
    }
}

impl From<u64> for Microseconds {
    fn from(us: u64) -> Self {
        Microseconds(us)
    }
}

// Arithmetic operators for Seconds
impl Add for Seconds {
    type Output = Self;

    fn add(self, other: Self) -> Self {
        Seconds(self.0 + other.0)
    }
}

impl Sub for Seconds {
    type Output = Self;

    fn sub(self, other: Self) -> Self {
        Seconds(self.0 - other.0)
    }
}

impl Rem for Seconds {
    type Output = Self;

    fn rem(self, other: Self) -> Self {
        Seconds(self.0 % other.0)
    }
}

// Arithmetic operators for Microseconds
impl Add for Microseconds {
    type Output = Self;

    fn add(self, other: Self) -> Self {
        Microseconds(self.0 + other.0)
    }
}

impl Sub for Microseconds {
    type Output = Self;

    fn sub(self, other: Self) -> Self {
        Microseconds(self.0 - other.0)
    }
}

impl Rem for Microseconds {
    type Output = Self;

    fn rem(self, other: Self) -> Self {
        Microseconds(self.0 % other.0)
    }
}

impl std::fmt::Display for Seconds {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        write!(f, "{}s", self.0)
    }
}

impl std::fmt::Display for Microseconds {
    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
        write!(f, "{}µs", self.0)
    }
}

/// A monotonic realtime clock that ensures timestamps always move forward.
///
/// Wraps `SystemTime` but guarantees each `now()` call returns a timestamp
/// strictly greater than all previous calls, even if the system clock jumps
/// backwards. When the clock goes backwards, it increments from the last seen
/// timestamp by one microsecond.
#[derive(Debug)]
pub struct RealtimeClock {
    max_seen: Cell<u64>,
}

impl RealtimeClock {
    /// Create a new realtime clock initialized with the current system time.
    pub fn new() -> Self {
        Self::with_initial(Microseconds::now())
    }

    /// Create a realtime clock initialized with a specific timestamp.
    ///
    /// Useful for resuming from a persisted state (e.g., last journal entry).
    pub fn with_initial(initial: Microseconds) -> Self {
        Self {
            max_seen: Cell::new(initial.get()),
        }
    }

    /// Get the current monotonic timestamp in microseconds since Unix epoch.
    ///
    /// Returns system time if it moved forward, otherwise returns last seen + 1µs.
    pub fn now(&self) -> Microseconds {
        let current = Microseconds::now();
        let max = self.max_seen.get();

        let next = if current.get() > max {
            current.get()
        } else {
            max.saturating_add(1)
        };

        self.max_seen.set(next);
        Microseconds::new(next)
    }

    /// Observe an external timestamp and return a monotonic realtime value.
    ///
    /// If the provided value is not strictly greater than the last seen timestamp,
    /// returns `last_seen + 1us` to preserve strict monotonicity.
    pub fn observe(&self, candidate: Microseconds) -> Microseconds {
        let max = self.max_seen.get();
        let next = if candidate.get() > max {
            candidate.get()
        } else {
            max.saturating_add(1)
        };

        self.max_seen.set(next);
        Microseconds::new(next)
    }

    /// Get the last seen timestamp without advancing the clock.
    pub fn last_seen(&self) -> Microseconds {
        Microseconds::new(self.max_seen.get())
    }
}

impl Default for RealtimeClock {
    fn default() -> Self {
        Self::new()
    }
}

/// Gets the current monotonic timestamp in microseconds since boot or system start.
///
/// Unix targets use `CLOCK_MONOTONIC`, which provides a monotonically increasing
/// timestamp that is not affected by system clock adjustments. Suspend/sleep
/// semantics are OS-specific: Linux excludes suspended time, while FreeBSD and
/// macOS include suspended/asleep time for `CLOCK_MONOTONIC`. Windows uses
/// unbiased interrupt time, which counts only time spent in the working state
/// since system start.
///
/// Other non-Unix targets fall back to process-local monotonic elapsed time.
pub fn monotonic_now() -> std::io::Result<Microseconds> {
    #[cfg(unix)]
    {
        let mut ts = std::mem::MaybeUninit::<libc::timespec>::uninit();
        // SAFETY: `ts` points to valid uninitialized storage for
        // `clock_gettime` to initialize on success.
        // nosemgrep: rust.lang.security.unsafe-usage.unsafe-usage
        let rc = unsafe { libc::clock_gettime(libc::CLOCK_MONOTONIC, ts.as_mut_ptr()) };
        if rc != 0 {
            return Err(std::io::Error::last_os_error());
        }
        // SAFETY: `assume_init` is reached only after `clock_gettime`
        // returned success and initialized the full `timespec`.
        // nosemgrep: rust.lang.security.unsafe-usage.unsafe-usage
        let ts = unsafe { ts.assume_init() };
        let seconds = u64::try_from(ts.tv_sec).map_err(|_| {
            std::io::Error::new(
                std::io::ErrorKind::InvalidData,
                "CLOCK_MONOTONIC returned a negative seconds value",
            )
        })?;
        let nanos = u64::try_from(ts.tv_nsec).map_err(|_| {
            std::io::Error::new(
                std::io::ErrorKind::InvalidData,
                "CLOCK_MONOTONIC returned a negative nanoseconds value",
            )
        })?;
        let micros = seconds
            .checked_mul(1_000_000)
            .and_then(|value| value.checked_add(nanos / 1_000))
            .ok_or_else(|| {
                std::io::Error::new(
                    std::io::ErrorKind::InvalidData,
                    "CLOCK_MONOTONIC microseconds overflowed u64",
                )
            })?;
        Ok(Microseconds::new(micros))
    }

    #[cfg(windows)]
    {
        use windows_sys::Win32::System::WindowsProgramming::QueryUnbiasedInterruptTime;

        let mut ticks_100ns = 0u64;
        // SAFETY: Windows writes a 64-bit tick count through this valid stack
        // pointer and does not retain the pointer after the call.
        // nosemgrep: rust.lang.security.unsafe-usage.unsafe-usage
        let ok = unsafe { QueryUnbiasedInterruptTime(&mut ticks_100ns) };
        if ok == 0 {
            return Err(std::io::Error::last_os_error());
        }
        Ok(Microseconds::new(ticks_100ns / 10))
    }

    #[cfg(all(not(unix), not(windows)))]
    {
        static START: OnceLock<Instant> = OnceLock::new();
        let elapsed = START.get_or_init(Instant::now).elapsed();
        let micros = u64::try_from(elapsed.as_micros()).map_err(|_| {
            std::io::Error::new(
                std::io::ErrorKind::InvalidData,
                "monotonic elapsed microseconds overflowed u64",
            )
        })?;
        Ok(Microseconds::new(micros))
    }
}

#[cfg(test)]
mod tests {
    use super::*;

    #[test]
    fn test_seconds_to_microseconds() {
        let seconds = Seconds::new(42);
        let micros = seconds.to_microseconds();
        assert_eq!(micros.get(), 42_000_000);
    }

    #[test]
    fn test_microseconds_to_seconds() {
        let micros = Microseconds::new(42_500_000);
        let seconds = micros.to_seconds();
        assert_eq!(seconds.get(), 42);
    }

    #[test]
    fn test_conversion_roundtrip() {
        let original = Seconds::new(100);
        let roundtrip = original.to_microseconds().to_seconds();
        assert_eq!(original, roundtrip);
    }

    #[test]
    fn test_from_conversions() {
        let s: Seconds = 42u32.into();
        assert_eq!(s.get(), 42);

        let us: Microseconds = 42000u64.into();
        assert_eq!(us.get(), 42000);
    }

    // Arithmetic operator tests for Seconds
    #[test]
    fn test_seconds_add() {
        let a = Seconds::new(10);
        let b = Seconds::new(20);
        assert_eq!(a + b, Seconds::new(30));
    }

    #[test]
    fn test_seconds_sub() {
        let a = Seconds::new(30);
        let b = Seconds::new(10);
        assert_eq!(a - b, Seconds::new(20));
    }

    #[test]
    #[should_panic]
    fn test_seconds_sub_underflow() {
        let a = Seconds::new(10);
        let b = Seconds::new(20);
        let _ = a - b; // Should panic
    }

    #[test]
    fn test_seconds_rem() {
        let a = Seconds::new(10);
        let b = Seconds::new(3);
        assert_eq!(a % b, Seconds::new(1));
    }

    #[test]
    fn test_seconds_saturating_add() {
        let a = Seconds::new(u32::MAX - 5);
        let b = Seconds::new(10);
        assert_eq!(a.saturating_add(b), Seconds::new(u32::MAX));
    }

    #[test]
    fn test_seconds_saturating_sub() {
        let a = Seconds::new(10);
        let b = Seconds::new(20);
        assert_eq!(a.saturating_sub(b), Seconds::new(0));
    }

    #[test]
    fn test_seconds_checked_add() {
        let a = Seconds::new(10);
        let b = Seconds::new(20);
        assert_eq!(a.checked_add(b), Some(Seconds::new(30)));

        let c = Seconds::new(u32::MAX);
        let d = Seconds::new(1);
        assert_eq!(c.checked_add(d), None);
    }

    #[test]
    fn test_seconds_checked_sub() {
        let a = Seconds::new(30);
        let b = Seconds::new(10);
        assert_eq!(a.checked_sub(b), Some(Seconds::new(20)));

        let c = Seconds::new(10);
        let d = Seconds::new(20);
        assert_eq!(c.checked_sub(d), None);
    }

    #[test]
    fn test_seconds_is_multiple_of() {
        let a = Seconds::new(60);
        let b = Seconds::new(15);
        assert!(a.is_multiple_of(b));

        let c = Seconds::new(60);
        let d = Seconds::new(17);
        assert!(!c.is_multiple_of(d));

        let e = Seconds::new(0);
        let f = Seconds::new(10);
        assert!(e.is_multiple_of(f));

        let g = Seconds::new(10);
        let h = Seconds::new(0);
        assert!(!g.is_multiple_of(h)); // Division by zero case
    }

    // Arithmetic operator tests for Microseconds
    #[test]
    fn test_microseconds_add() {
        let a = Microseconds::new(1000);
        let b = Microseconds::new(2000);
        assert_eq!(a + b, Microseconds::new(3000));
    }

    #[test]
    fn test_microseconds_sub() {
        let a = Microseconds::new(3000);
        let b = Microseconds::new(1000);
        assert_eq!(a - b, Microseconds::new(2000));
    }

    #[test]
    #[should_panic]
    fn test_microseconds_sub_underflow() {
        let a = Microseconds::new(1000);
        let b = Microseconds::new(2000);
        let _ = a - b; // Should panic
    }

    #[test]
    fn test_microseconds_rem() {
        let a = Microseconds::new(1000);
        let b = Microseconds::new(300);
        assert_eq!(a % b, Microseconds::new(100));
    }

    #[test]
    fn test_microseconds_saturating_add() {
        let a = Microseconds::new(u64::MAX - 5);
        let b = Microseconds::new(10);
        assert_eq!(a.saturating_add(b), Microseconds::new(u64::MAX));
    }

    #[test]
    fn test_microseconds_saturating_sub() {
        let a = Microseconds::new(1000);
        let b = Microseconds::new(2000);
        assert_eq!(a.saturating_sub(b), Microseconds::new(0));
    }

    #[test]
    fn test_microseconds_checked_add() {
        let a = Microseconds::new(1000);
        let b = Microseconds::new(2000);
        assert_eq!(a.checked_add(b), Some(Microseconds::new(3000)));

        let c = Microseconds::new(u64::MAX);
        let d = Microseconds::new(1);
        assert_eq!(c.checked_add(d), None);
    }

    #[test]
    fn test_microseconds_checked_sub() {
        let a = Microseconds::new(3000);
        let b = Microseconds::new(1000);
        assert_eq!(a.checked_sub(b), Some(Microseconds::new(2000)));

        let c = Microseconds::new(1000);
        let d = Microseconds::new(2000);
        assert_eq!(c.checked_sub(d), None);
    }

    #[test]
    fn test_microseconds_is_multiple_of() {
        let a = Microseconds::new(60000);
        let b = Microseconds::new(15000);
        assert!(a.is_multiple_of(b));

        let c = Microseconds::new(60000);
        let d = Microseconds::new(17000);
        assert!(!c.is_multiple_of(d));

        let e = Microseconds::new(0);
        let f = Microseconds::new(10000);
        assert!(e.is_multiple_of(f));

        let g = Microseconds::new(10000);
        let h = Microseconds::new(0);
        assert!(!g.is_multiple_of(h)); // Division by zero case
    }

    // RealtimeClock tests
    #[test]
    fn test_realtime_clock_monotonic() {
        let clock = RealtimeClock::new();
        let t1 = clock.now();
        let t2 = clock.now();
        let t3 = clock.now();

        assert!(t2 > t1);
        assert!(t3 > t2);
    }

    #[test]
    fn test_realtime_clock_with_initial() {
        let initial = Microseconds::new(1000000);
        let clock = RealtimeClock::with_initial(initial);

        assert_eq!(clock.last_seen(), initial);

        let t1 = clock.now();
        assert!(t1 >= initial);
    }

    #[test]
    fn test_realtime_clock_handles_same_time() {
        // Start with a specific timestamp
        let initial = Microseconds::new(1000000);
        let clock = RealtimeClock::with_initial(initial);

        // Even if an observed timestamp doesn't advance, clock should increment.
        let t1 = clock.observe(initial);
        let t2 = clock.observe(initial);

        assert!(t2 > t1);
        assert_eq!(t2.get() - t1.get(), 1); // Should increment by 1 microsecond
    }

    #[test]
    fn test_realtime_clock_last_seen() {
        let clock = RealtimeClock::new();

        let t1 = clock.now();
        assert_eq!(clock.last_seen(), t1);

        let t2 = clock.now();
        assert_eq!(clock.last_seen(), t2);
    }

    #[test]
    fn test_realtime_clock_forward_jump() {
        // Start with a timestamp in the past
        let past = Microseconds::new(1000000);
        let clock = RealtimeClock::with_initial(past);

        // When system time is ahead, it should use system time
        let t1 = clock.now();
        assert!(t1.get() > past.get());
    }

    #[test]
    fn test_realtime_clock_observe_preserves_monotonicity() {
        let clock = RealtimeClock::with_initial(Microseconds::new(1_000_000));

        let t1 = clock.observe(Microseconds::new(900_000));
        assert_eq!(t1.get(), 1_000_001);

        let t2 = clock.observe(Microseconds::new(1_000_001));
        assert_eq!(t2.get(), 1_000_002);

        let t3 = clock.observe(Microseconds::new(1_500_000));
        assert_eq!(t3.get(), 1_500_000);
    }

    #[test]
    fn test_monotonic_now_is_ordered() {
        let first = monotonic_now().expect("monotonic clock");
        let second = monotonic_now().expect("monotonic clock");
        assert!(second >= first);
    }
}