platform

type EditorAdapter interface {
	Name() string
	Open(ctx context.Context, dir, editor string) error
}

type FSEvent struct {
	Kind FSEventKind
	Path string
	At   time.Time
}

type FSEventKind string

type Keychain interface {
	Name() string
	Store(ctx context.Context, service, account string, secret []byte) error
	Load(ctx context.Context, service, account string) ([]byte, error)
	Delete(ctx context.Context, service, account string) error
}

type NativeWatcher struct {
	Debounce   time.Duration
	MaxLatency time.Duration
}

type PollWatcher struct {
	Interval time.Duration
}

type RuntimeInfo struct {
	OS   string
	Arch string
}

type Sandbox interface {
	Name() string
	// Available reports whether the sandbox can be used on this host; the
	// returned error explains why not (wrapped in ErrUnsupported).
	Available() error
	// Command returns the argv wrapped in the sandbox launcher plus a cleanup
	// function (always safe to call) that removes any generated profile file.
	Command(ctx context.Context, spec SandboxSpec, argv []string) ([]string, func(), error)
}

type SandboxSpec struct {
	// WorktreeDir is the agent worktree — the only project location the
	// child may write.
	WorktreeDir string
	// TmpDir is the child's temp directory (writable).
	TmpDir string
	// LogDir is where the generated profile file lives. It is NOT granted to
	// the child: the agent log is written by the parent process, so the child
	// only ever sees inherited pipes — keeping LogDir read-only for the child
	// prevents it from tampering with its own 0600 log or the profile.
	LogDir string
	// UserHome is the REAL user home. The agent child env repoints HOME to
	// the worktree (SECU-02), but the filesystem still contains the user's
	// dotfiles — sensitive-read denies are anchored here.
	UserHome string
	// DevstrapHome is the DevStrap home (~/.devstrap); its keys directory is
	// read-denied.
	DevstrapHome string
	// DenyNetwork blocks all network access for the child.
	DenyNetwork bool
	// DenySensitiveReads blocks reads of credential-bearing paths under
	// UserHome (.ssh, .aws, .gnupg, .config/gh, .kube, .docker) and
	// DevstrapHome/keys.
	DenySensitiveReads bool
}

type ServiceManager interface {
	Name() string
	Install(ctx context.Context, spec ServiceSpec) error
	Uninstall(ctx context.Context, label string) error
	Status(ctx context.Context, label string) (ServiceStatus, error)
}

type ServiceSpec struct {
	Label    string
	ExecPath string
	Args     []string
	Env      map[string]string
}

type ServiceStatus struct {
	Installed bool
	Running   bool
	Detail    string
}

type Set struct {
	OS       string
	Watcher  Watcher
	Service  ServiceManager
	Keychain Keychain
	Editor   EditorAdapter
	Sandbox  Sandbox
}

type SystemEditor struct{}

type SystemKeychain struct {
	Platform string
	Target   string
}

type UnsupportedKeychain struct {
	Platform string
	Target   string
}

type UnsupportedSandbox struct {
	Platform string
}

type UnsupportedServiceManager struct {
	Platform string
	Target   string
}

type Watcher interface {
	Name() string
	Watch(ctx context.Context, root string, events chan<- FSEvent) error
}