windows

var (
	// ToolsetScreen: read-only perception of the desktop.
	ToolsetScreen = inventory.ToolsetMetadata{
		ID:          "screen",
		Description: "Read-only perception of the desktop: UI-tree snapshots, screenshots, and display inventory.",
		Default:     true,
		Icon:        "device-desktop",
	}
	// ToolsetInteraction: synthetic input and UI interaction.
	ToolsetInteraction = inventory.ToolsetMetadata{
		ID:          "interaction",
		Description: "Mouse and keyboard interaction: click, type, scroll, move, shortcuts, waits, and multi-element actions.",
		Default:     true,
		Icon:        "pointer",
	}
	// ToolsetApps: application and window lifecycle.
	ToolsetApps = inventory.ToolsetMetadata{
		ID:          "apps",
		Description: "Launch, switch, resize, and manage applications and windows.",
		Default:     true,
		Icon:        "browser",
	}
	// ToolsetSystem: local system state and objects.
	ToolsetSystem = inventory.ToolsetMetadata{
		ID:          "system",
		Description: "Local system operations: process list/kill, clipboard, and notifications.",
		Default:     true,
		Icon:        "gear",
	}
	// ToolsetSystemAdmin: persistence and machine-configuration tools.
	//
	// Separate from ToolsetSystem, and non-default, because these outlive the
	// session. ScheduledTask create/run registers a program on logon or startup and
	// Registry set writes Run keys, so either survives the session, the kill switch
	// and a reboot — a different class of risk from listing processes or reading the
	// clipboard, and not something a persona should carry implicitly.
	ToolsetSystemAdmin = inventory.ToolsetMetadata{
		ID: "system-admin",
		Description: "Registry read/write and scheduled-task management. These change machine " +
			"configuration and can persist across reboots; disabled by default.",
		Icon: "gear",
	}
	// ToolsetShell: arbitrary PowerShell execution (powerful; non-default).
	ToolsetShell = inventory.ToolsetMetadata{
		ID:          "shell",
		Description: "Execute arbitrary PowerShell commands. Powerful and potentially destructive; disabled by default.",
		Icon:        "terminal",
	}
	// ToolsetFilesystem: file operations (non-default).
	ToolsetFilesystem = inventory.ToolsetMetadata{
		ID:          "filesystem",
		Description: "Read, write, copy, move, delete, list, and search files. Disabled by default.",
		Icon:        "file-directory",
	}
	// ToolsetWeb: web scraping (non-default).
	ToolsetWeb = inventory.ToolsetMetadata{
		ID:          "web",
		Description: "Fetch and extract web page content, optionally via the active browser's DOM. Disabled by default.",
		Icon:        "globe",
	}
	// ToolsetDiagnostics: system diagnostics for support workflows (non-default).
	ToolsetDiagnostics = inventory.ToolsetMetadata{
		ID: "diagnostics",
		Description: "System diagnostics: OS/hardware inventory, Windows service control, event-log queries, and " +
			"network inspection, for support and troubleshooting. Disabled by default.",
		Icon: "pulse",
	}
	// ToolsetTesting: assertions and evidence capture for QA (non-default).
	ToolsetTesting = inventory.ToolsetMetadata{
		ID:          "testing",
		Description: "UI test assertions and evidence capture, for authoring and running automated tests. Disabled by default.",
		Icon:        "beaker",
	}
	// ToolsetPlanning: propose a sequence of tool calls for whole-plan
	// adjudication, then apply it (non-default). Opt-in because it is a distinct
	// way of working — the agent proposes, the plan is reviewed and adjudicated as
	// a whole, then executed — rather than an extra tool for the usual loop.
	ToolsetPlanning = inventory.ToolsetMetadata{
		ID: "planning",
		Description: "Propose a whole sequence of tool calls as a reviewable plan, adjudicated up front, then " +
			"apply it. Disabled by default.",
		Icon: "checklist",
	}
	// ToolsetPackages: software install/removal via winget and MSI (non-default).
	// Opt-in and in no persona: it downloads and runs installers from the network,
	// outside the egress proxy, so it stays off the default surface until an
	// operator deliberately asks for it.
	ToolsetPackages = inventory.ToolsetMetadata{
		ID: "packages",
		Description: "Install, remove, list, and search software via winget and MSI. Downloads run installers " +
			"from the network, outside the egress proxy. Disabled by default and in no persona.",
		Icon: "package",
	}
	// ToolsetCredentials: use of credentials installed at init (non-default).
	// Enabled automatically when --credentials-file is supplied; there is nothing
	// to use without it.
	ToolsetCredentials = inventory.ToolsetMetadata{
		ID: "credentials",
		Description: "Sign-in using credentials supplied to the server at startup and held in the Windows " +
			"Credential Manager. Secrets can be injected into fields but never read back. Disabled by " +
			"default; enabled automatically with --credentials-file.",
		Icon: "key",
	}
)

var AssertOperators = []any{
	OpIs, OpIsNot, OpContains, OpDoesNotContain, OpStartsWith, OpEndsWith,
	OpMatches, OpDoesNotMatch, OpIsEmpty, OpIsNotEmpty, OpIsOneOf, OpIsNotOneOf,
	OpIsTrue, OpIsFalse, OpExists, OpDoesNotExist,
	OpGreaterThan, OpGreaterOrEqual, OpLessThan, OpLessOrEqual,
}

var AssertSubjects = []any{
	SubjectScreenText, SubjectWindowTitle, SubjectWindow, SubjectElement,
	SubjectElementName, SubjectElementValue, SubjectElementControlType,
	SubjectElementEnabled, SubjectElementChecked, SubjectElementSelected,
	SubjectElementFocused, SubjectElementCount, SubjectResultText,
}

var ErrAssertionShape = fmt.Errorf("the assertion cannot be evaluated as written")

var Personas = map[string]Persona{
	"first-line-support": {
		ID:          "first-line-support",
		Description: "1st-line support engineer: perceive and drive the desktop, manage apps and system state, run diagnostics, and control services.",

		Toolsets: []string{"screen", "interaction", "apps", "system", "system-admin", "shell", "diagnostics"},
		ReadOnly: false,
		Instructions: "You are assisting a 1st-line support engineer troubleshooting a Windows machine. " +
			"Diagnose before you act: take a Snapshot to see the desktop, and use SystemInfo, Process, and Service " +
			"to gather state before making changes. Use PowerShell for deeper diagnostics. Before any destructive or " +
			"disruptive action (killing a process, stopping a service, editing the registry), state what you will do " +
			"and why. Report findings and the steps you took in clear, non-jargon language the end user can follow.",
	},
	"qa-test-engineer": {
		ID:          "qa-test-engineer",
		Description: "QA test engineer: full desktop automation for authoring and running UI tests, with assertions, evidence capture, filesystem, and web access.",
		Toolsets:    []string{"screen", "interaction", "apps", "system", "filesystem", "web", "testing"},
		ReadOnly:    false,
		Instructions: "You are automating and verifying UI tests as a QA engineer. Work deterministically: take a " +
			"Snapshot before each interaction and target elements by their label rather than raw coordinates, since " +
			"labels are stable across DPI, theme, and window position. Verify every expected outcome with Assert or " +
			"WaitFor, and treat a failed Assert as a test failure to report — do not silently continue. Capture " +
			"evidence with CaptureEvidence at key steps and on failure. Re-Snapshot after the UI changes.",
	},
	"business-user": {
		ID: "business-user",
		Description: "Business end-user & user-journey testing: drive everyday applications and browse the web through " +
			"the real UI, verify outcomes, and capture evidence — without shell, registry, or file-system access.",
		Toolsets: []string{"screen", "interaction", "apps", "web", "testing"},
		ReadOnly: false,
		Instructions: "You are driving a Windows device as a business end-user, to complete everyday tasks and to test " +
			"user journeys through the real application UI. Work one observable step at a time: take a Snapshot, act on " +
			"an element by its label (Click, Type, or the UIA actions Invoke/SetValue/Toggle/Select), then verify the " +
			"result with Assert or WaitFor before moving on — treat a failed Assert as a failed journey step and report " +
			"it. Prefer the UIA actions (Invoke/SetValue) over raw Click/Type where available: they are more reliable and " +
			"do not depend on window focus. Capture evidence with CaptureEvidence at key steps and on failure. You have " +
			"no shell, registry, or file-system access — stay within the open applications and browser. " +
			"Note: the Windows sign-in screen, lock screen, and UAC elevation prompts run on a protected desktop that " +
			"cannot be automated; assume you are already in an unlocked, signed-in session. Explain each step in plain " +
			"language and confirm before anything a user might not expect (submitting forms, deleting content, closing apps).",
	},
}