feat(telemetry): implement active network sockets and connection provider (fixes #16)

Sources/Bridging/MacMonitor-Bridging-Header.h

@@ -23,5 +23,6 @@
 #import "MMLoadAverageProvider.h"
 #import "MMDiskIOProvider.h"
 #import "MMNetworkBandwidthProvider.h"
+#import "MMNetworkSocketsProvider.h"
 
 #endif /* MacMonitor_Bridging_Header_h */

Sources/Telemetry/Network/MMNetworkSocketsProvider.h

@@ -0,0 +1,27 @@
+#ifndef MMNetworkSocketsProvider_h
+#define MMNetworkSocketsProvider_h
+
+#import <Foundation/Foundation.h>
+#import "MMTelemetryProvider.h"
+
+NS_ASSUME_NONNULL_BEGIN
+
+/**
+ * MMNetworkSocketsProvider
+ * Inspects system-wide open TCP and UDP sockets, local/remote endpoints, connection states,
+ * and owning processes.
+ */
+@interface MMNetworkSocketsProvider : NSObject <MMTelemetryProvider>
+
+- (instancetype)init;
+
+/**
+ * Pure calculator / summarizer method for deterministic unit testing.
+ */
++ (NSDictionary<NSString *, id> *)calculateSocketSummaryWithSocketList:(NSArray<NSDictionary<NSString *, id> *> *)sockets;
+
+@end
+
+NS_ASSUME_NONNULL_END
+
+#endif /* MMNetworkSocketsProvider_h */

Sources/Telemetry/Network/MMNetworkSocketsProvider.m

@@ -0,0 +1,152 @@
+#import "MMNetworkSocketsProvider.h"
+#import <libproc.h>
+#import <sys/proc_info.h>
+#import <arpa/inet.h>
+
+@implementation MMNetworkSocketsProvider
+
+- (instancetype)init {
+    self = [super init];
+    return self;
+}
+
+- (MMTelemetryDomain)domain {
+    return MMTelemetryDomainNetwork;
+}
+
+- (NSString *)providerIdentifier {
+    return @"com.i3omb.macmonitor.telemetry.network.sockets";
+}
+
+- (BOOL)isAvailable {
+    return YES;
+}
+
+static NSString *tcpStateString(int state) {
+    switch (state) {
+        case 0: return @"CLOSED";
+        case 1: return @"LISTEN";
+        case 2: return @"SYN_SENT";
+        case 3: return @"SYN_RCVD";
+        case 4: return @"ESTABLISHED";
+        case 5: return @"CLOSE_WAIT";
+        case 6: return @"FIN_WAIT_1";
+        case 7: return @"CLOSING";
+        case 8: return @"LAST_ACK";
+        case 9: return @"FIN_WAIT_2";
+        case 10: return @"TIME_WAIT";
+        default: return @"UNKNOWN";
+    }
+}
+
++ (NSDictionary<NSString *, id> *)calculateSocketSummaryWithSocketList:(NSArray<NSDictionary<NSString *, id> *> *)sockets {
+    NSUInteger tcpCount = 0;
+    NSUInteger udpCount = 0;
+    NSUInteger listenCount = 0;
+    NSUInteger establishedCount = 0;
+    
+    for (NSDictionary<NSString *, id> *sock in sockets) {
+        NSString *proto = sock[@"protocol"];
+        NSString *state = sock[@"state"];
+        
+        if ([proto isEqualToString:@"TCP"]) {
+            tcpCount++;
+            if ([state isEqualToString:@"LISTEN"]) {
+                listenCount++;
+            } else if ([state isEqualToString:@"ESTABLISHED"]) {
+                establishedCount++;
+            }
+        } else if ([proto isEqualToString:@"UDP"]) {
+            udpCount++;
+        }
+    }
+    
+    return @{
+        @"socketCount": @(sockets.count),
+        @"tcpCount": @(tcpCount),
+        @"udpCount": @(udpCount),
+        @"listenCount": @(listenCount),
+        @"establishedCount": @(establishedCount),
+        @"sockets": sockets
+    };
+}
+
+- (nullable NSDictionary<NSString *, id> *)sampleTelemetryWithError:(NSError **)error {
+    int pids[2048];
+    int bytes = proc_listpids(PROC_ALL_PIDS, 0, pids, sizeof(pids));
+    int pidCount = bytes / sizeof(int);
+    
+    NSMutableArray<NSDictionary<NSString *, id> *> *sockets = [NSMutableArray array];
+    
+    for (int i = 0; i < pidCount; i++) {
+        pid_t pid = pids[i];
+        if (pid <= 0) continue;
+        
+        int sz = proc_pidinfo(pid, PROC_PIDLISTFDS, 0, NULL, 0);
+        if (sz <= 0) continue;
+        
+        struct proc_fdinfo *fds = malloc(sz);
+        if (!fds) continue;
+        
+        int actual = proc_pidinfo(pid, PROC_PIDLISTFDS, 0, fds, sz);
+        int fdCount = actual / sizeof(struct proc_fdinfo);
+        
+        char procNameBuf[256] = {0};
+        BOOL procNameFetched = NO;
+        
+        for (int j = 0; j < fdCount; j++) {
+            if (fds[j].proc_fdtype == PROX_FDTYPE_SOCKET) {
+                struct socket_fdinfo si;
+                if (proc_pidfdinfo(pid, fds[j].proc_fd, PROC_PIDFDSOCKETINFO, &si, sizeof(si)) == sizeof(si)) {
+                    int family = si.psi.soi_family;
+                    if (family == AF_INET || family == AF_INET6) {
+                        if (!procNameFetched) {
+                            proc_name(pid, procNameBuf, sizeof(procNameBuf));
+                            procNameFetched = YES;
+                        }
+                        
+                        char localIP[INET6_ADDRSTRLEN] = {0};
+                        char remoteIP[INET6_ADDRSTRLEN] = {0};
+                        int lport = 0, rport = 0;
+                        NSString *familyStr = (family == AF_INET) ? @"IPv4" : @"IPv6";
+                        NSString *proto = (si.psi.soi_type == SOCK_STREAM) ? @"TCP" : @"UDP";
+                        NSString *state = @"NONE";
+                        
+                        if (family == AF_INET) {
+                            inet_ntop(AF_INET, &si.psi.soi_proto.pri_in.insi_laddr.ina_46.i46a_addr4, localIP, sizeof(localIP));
+                            inet_ntop(AF_INET, &si.psi.soi_proto.pri_in.insi_faddr.ina_46.i46a_addr4, remoteIP, sizeof(remoteIP));
+                            lport = ntohs(si.psi.soi_proto.pri_in.insi_lport);
+                            rport = ntohs(si.psi.soi_proto.pri_in.insi_fport);
+                        } else {
+                            inet_ntop(AF_INET6, &si.psi.soi_proto.pri_in.insi_laddr.ina_6, localIP, sizeof(localIP));
+                            inet_ntop(AF_INET6, &si.psi.soi_proto.pri_in.insi_faddr.ina_6, remoteIP, sizeof(remoteIP));
+                            lport = ntohs(si.psi.soi_proto.pri_in.insi_lport);
+                            rport = ntohs(si.psi.soi_proto.pri_in.insi_fport);
+                        }
+                        
+                        if (si.psi.soi_type == SOCK_STREAM) {
+                            state = tcpStateString(si.psi.soi_proto.pri_tcp.tcpsi_state);
+                        }
+                        
+                        [sockets addObject:@{
+                            @"pid": @(pid),
+                            @"processName": [NSString stringWithUTF8String:procNameBuf],
+                            @"protocol": proto,
+                            @"family": familyStr,
+                            @"localAddress": [NSString stringWithUTF8String:localIP],
+                            @"localPort": @(lport),
+                            @"remoteAddress": [NSString stringWithUTF8String:remoteIP],
+                            @"remotePort": @(rport),
+                            @"state": state
+                        }];
+                    }
+                }
+            }
+        }
+        free(fds);
+    }
+    
+    return [MMNetworkSocketsProvider calculateSocketSummaryWithSocketList:sockets];
+}
+
+@end

Tests/MMNetworkSocketsTests.swift

@@ -0,0 +1,68 @@
+import XCTest
+@testable import MacMonitor
+
+final class MMNetworkSocketsTests: XCTestCase {
+    
+    func testSocketSummaryCalculation() {
+        let testSockets: [[String: Any]] = [
+            [
+                "pid": 100,
+                "processName": "web_server",
+                "protocol": "TCP",
+                "family": "IPv4",
+                "localAddress": "0.0.0.0",
+                "localPort": 8080,
+                "remoteAddress": "0.0.0.0",
+                "remotePort": 0,
+                "state": "LISTEN"
+            ],
+            [
+                "pid": 200,
+                "processName": "browser",
+                "protocol": "TCP",
+                "family": "IPv4",
+                "localAddress": "192.168.1.50",
+                "localPort": 54321,
+                "remoteAddress": "142.250.190.46",
+                "remotePort": 443,
+                "state": "ESTABLISHED"
+            ],
+            [
+                "pid": 300,
+                "processName": "dns_daemon",
+                "protocol": "UDP",
+                "family": "IPv4",
+                "localAddress": "0.0.0.0",
+                "localPort": 53,
+                "remoteAddress": "0.0.0.0",
+                "remotePort": 0,
+                "state": "NONE"
+            ]
+        ]
+        
+        let summary = MMNetworkSocketsProvider.calculateSocketSummary(withSocketList: testSockets)
+        
+        let total = summary["socketCount"] as? Int ?? 0
+        let tcp = summary["tcpCount"] as? Int ?? 0
+        let udp = summary["udpCount"] as? Int ?? 0
+        let listen = summary["listenCount"] as? Int ?? 0
+        let established = summary["establishedCount"] as? Int ?? 0
+        
+        XCTAssertEqual(total, 3)
+        XCTAssertEqual(tcp, 2)
+        XCTAssertEqual(udp, 1)
+        XCTAssertEqual(listen, 1)
+        XCTAssertEqual(established, 1)
+    }
+    
+    func testLiveNetworkSocketsProvider() throws {
+        let provider = MMNetworkSocketsProvider()
+        XCTAssertEqual(provider.domain, .network)
+        XCTAssertEqual(provider.providerIdentifier, "com.i3omb.macmonitor.telemetry.network.sockets")
+        
+        let sample = try provider.sampleTelemetry()
+        XCTAssertNotNil(sample)
+        XCTAssertNotNil(sample["socketCount"])
+        XCTAssertNotNil(sample["sockets"])
+    }
+}