Function ordered_fields

crates/openshell-tui/src/ui/sandbox_logs.rs:333–374

Return fields in a smart order based on the log message type.

(log: &LogLine)

/// Return fields in a smart order based on the log message type.
pub fn ordered_fields(log: &LogLine) -> Vec<(&str, &str)> {
    // Matches both "CONNECT" (L4-only decision) and "CONNECT_L7" (tunnel lifecycle for L7 endpoints)
    let order: Option<&[&str]> = if log.message.starts_with("CONNECT") {
        Some(CONNECT_FIELD_ORDER)
    } else if log.message.starts_with("L7_REQUEST") {
        Some(L7_FIELD_ORDER)
    } else {
        None
    };

    order.map_or_else(
        || {
            // Default: alphabetical.
            let mut pairs: Vec<(&str, &str)> = log
                .fields
                .iter()
                .map(|(k, v)| (k.as_str(), v.as_str()))
                .collect();
            pairs.sort_by_key(|(k, _)| *k);
            pairs
        },
        |priority| {
            let mut result: Vec<(&str, &str)> = Vec::with_capacity(log.fields.len());
            // Add priority fields first (in order).
            for &key in priority {
                if let Some(val) = log.fields.get(key) {
                    result.push((key, val.as_str()));
                }
            }
            // Add remaining fields alphabetically.
            let mut remaining: Vec<(&str, &str)> = log
                .fields
                .iter()
                .filter(|(k, _)| !priority.contains(&k.as_str()))
                .map(|(k, v)| (k.as_str(), v.as_str()))
                .collect();
            remaining.sort_by_key(|(k, _)| *k);
            result.extend(remaining);
            result
        },
    )
}

// ---------------------------------------------------------------------------
// Helpers