vm

type LinuxVM interface {
	// Client returns a containerd client connected to containerd inside the VM.
	Client() *client.Client

	// DispatchAddr returns the address of the dispatch gRPC server running
	// inside the VM (e.g. "localhost:10001"). Empty if dispatch is unavailable.
	DispatchAddr() string

	// Stop gracefully shuts down the VM.
	Stop()
}

type LinuxVMConfig struct {
	// DataDir is the ephemerd data directory. VM assets live under <DataDir>/vm/linux/.
	DataDir string

	// CPUs is the number of virtual CPUs. Defaults to 2.
	CPUs uint

	// MemoryMB is the VM memory in megabytes. Defaults to 2048.
	MemoryMB uint64

	// DiskSizeGB is the VM root disk size in gigabytes (sparse). Defaults to 50.
	DiskSizeGB uint64

	// ContainerdPort is the port containerd listens on inside the VM. Defaults to 10000.
	ContainerdPort uint32

	// DindEnabled passes --dind to the VM's ephemerd serve, mounting a fake
	// Docker socket into each container.
	DindEnabled bool

	// DindAllowPrivileged forwards the host's dind.allow_privileged setting
	// to the in-VM ephemerd via the kernel cmdline. Kept as a fallback for
	// environments where the Plan9 host-config share fails to mount (e.g.
	// stripped kernel without 9p modules); the share normally supersedes
	// this by carrying the same value through the shared config.toml.
	DindAllowPrivileged bool

	// HostDataDir is the host's ephemerd data directory. When set,
	// <HostDataDir>/config.toml is appended into the runtime-generated
	// boot-initrd tail (next to ephemerd-linux) and staged at
	// /etc/ephemerd/config.toml inside the VM, so any host-side setting
	// takes effect on the next VM boot without per-setting kernel cmdline
	// plumbing. A missing config.toml is non-fatal (fresh installs run on
	// defaults). See docs/arch/host-config-initrd.md.
	HostDataDir string

	Log *slog.Logger
}

type MacOSCloneSweep struct {
	Removed    int
	FreedBytes int64 // allocated bytes, not apparent size: a clone is sparse
	Failed     []string
}

type MacOSInstallOptions struct {
	CustomDiskImage string
	TartImage       string
}

type MacOSVM interface {
	// WriteJITConfig writes the encoded JIT runner config to the job's shared
	// directory so the guest can pick it up on boot via virtio-fs.
	WriteJITConfig(encodedJIT string) error

	// Start boots the VM from a clone-on-write copy of the base image.
	Start(ctx context.Context) error

	// WaitForRunner blocks until the GitHub runner inside the VM is reachable.
	// Checks for a .ready sentinel file on the virtio-fs share first, then
	// falls back to SSH port 22. Returns the VM's discovered IP address.
	WaitForRunner(ctx context.Context) (string, error)

	// RunnerAddress returns the VM's discovered IP address, or empty if not yet known.
	RunnerAddress() string

	// Wait blocks until the VM exits. Returns the exit code.
	Wait(ctx context.Context) (int, error)

	// Stop forcefully stops the VM and deletes the clone.
	Stop()
}

type MacOSVMConfig struct {
	// DataDir is the ephemerd data directory. VM assets live under <DataDir>/vm/macos/.
	DataDir string

	// DiskImage is the path to the installed macOS disk (produced from
	// an Apple IPSW via EnsureMacOSBaseImage). Each job gets an APFS
	// clone of this file. Not to be confused with the OCI base image
	// that jobs overlay onto the VM at runtime.
	DiskImage string

	// SSHSigner is the ephemeral SSH private key for guest access.
	// Generated fresh on each ephemerd startup — never persisted to disk.
	SSHSigner interface{} // crypto.Signer (ed25519.PrivateKey)

	// SSHPubKey is the authorized_keys-format public key to inject into
	// each job's virtio-fs share. The guest picks it up on boot.
	SSHPubKey string

	// CPUs per macOS VM. Defaults to 4.
	CPUs uint

	// MemoryMB per macOS VM. Defaults to 8192.
	MemoryMB uint64

	// DiskSizeGB grows each job's disk clone to this many GiB before boot and
	// the guest's boot container with it (see macos_disk.go). 0 keeps the
	// base image's size. Pass it through ResolveMacOSDiskSize first.
	DiskSizeGB uint64

	// JobEnv is extra KEY=VALUE env for every job's runner: the cache-proxy
	// env, already rewritten to the host's address on the VM NAT. It is
	// verified reachable from inside each VM before use; see macos_proxyenv.go.
	JobEnv []string

	Log *slog.Logger
}

type MacOSVMDiskFiles struct {
	DataDir       string
	DiskImage     string
	AuxStorage    string
	MachineID     string
	HardwareModel string
}

type RunDistro struct {
	Name string
	// contains filtered or unexported fields
}

type RunDistroConfig struct {
	DataDir string
	Log     *slog.Logger
}

type RunInWSLConfig struct {
	WorkflowPath string // absolute path to the workflow YAML
	JobFilter    string // optional --job filter
	RepoDir      string // absolute path to the repo root
}