orca/src/preload/api/pty-management-api.ts

import type { DaemonPtyCwdClass } from '../../shared/daemon-adoption-telemetry'

// Mirror of daemon's `DaemonSessionInfo` (src/main/daemon/types.ts); not imported — preload can't depend on main-only protocol types.
export type PtyManagementSession = {
  sessionId: string
  state: 'created' | 'spawning' | 'running' | 'exiting' | 'exited'
  shellState: 'pending' | 'ready' | 'timed_out' | 'unsupported'
  isAlive: boolean
  pid: number | null
  cwd: string | null
  cols: number
  rows: number
  createdAt: number
  protocolVersion: number
}

// 'severed': macOS can no longer attribute daemon terminals to Orca, so Accessibility/
// Automation grants silently stop applying until the daemon is restarted (STA-3491).
export type PtyManagementMacTccAttributionHealth = 'intact' | 'severed' | 'unknown'

export type PtyManagementDaemonCwdClass = DaemonPtyCwdClass

// The daemon spawned a terminal into a folder it can't read while Orca can (STA-7948).
// `daemonScope` is an opaque per-daemon digest, never a path — it only latches the notice.
// `freshDaemonAccess` is what a daemon forked now would get: 'allowed' means restarting is the
// whole remedy, 'denied' means Orca must be re-allowed first, 'unknown' means main could not tell.
export type PtyManagementFreshDaemonAccess = 'allowed' | 'denied' | 'unknown'

export type PtyManagementFolderAccessMismatch = {
  daemonScope: string
  cwdClass: PtyManagementDaemonCwdClass
  freshDaemonAccess: PtyManagementFreshDaemonAccess
}

// Mirrors DaemonFolderAccessResetResult in src/main/daemon/daemon-folder-access-reset.ts.
// 'unsupported': nothing to reset, or the platform/app bundle cannot support one.
// 'reset_failed': tccutil refused. 'probed': the reset ran and `mismatch` is the fresh verdict.
export type PtyManagementFolderAccessResetResult =
  | { outcome: 'unsupported' }
  | { outcome: 'reset_failed' }
  | { outcome: 'probed'; mismatch: PtyManagementFolderAccessMismatch | null }

// Mirrors SeveredDaemonStatus in src/main/daemon/daemon-host-image-state.ts: a Linux AppImage
// daemon kept for its live terminals although its program files are gone.
export type PtyManagementSeveredDaemon = {
  pid: number
  linuxStartTicks: string
  bootId: string
  liveSessionCount: number | null
}

export type PtyManagementSeveredDaemonRestartResult =
  | { status: 'restarted'; killedCount: number }
  | { status: 'refused'; reason: 'not-severed' | 'replaced' | 'unverifiable' }

export type PtyManagementApi = {
  // `degraded`: daemon is alive but can't spawn fresh PTYs, so new terminals run locally without daemon persistence.
  listSessions: () => Promise<{ sessions: PtyManagementSession[]; degraded: boolean }>
  killAll: () => Promise<{
    killedCount: number
    remainingCount: number
    killedSessionIds?: string[]
  }>
  killOne: (args: { sessionId: string }) => Promise<{ success: boolean }>
  restart: () => Promise<{ success: boolean }>
  macTccAttribution: () => Promise<{
    health: PtyManagementMacTccAttributionHealth
    folderAccessMismatch: PtyManagementFolderAccessMismatch | null
  }>
  resetFolderAccess: () => Promise<PtyManagementFolderAccessResetResult>
  severedDaemon: () => Promise<{ severed: PtyManagementSeveredDaemon | null }>
  restartSeveredDaemon: (
    expected: Pick<PtyManagementSeveredDaemon, 'pid' | 'linuxStartTicks' | 'bootId'>
  ) => Promise<PtyManagementSeveredDaemonRestartResult>
}