const std = @import("std"); const geometry = @import("geometry"); const platform_mod = @import("../root.zig"); const policy_values = @import("../policy_values.zig"); const security = @import("../../security/root.zig"); pub const Error = error{ CallbackFailed, CreateFailed, FocusFailed, CloseFailed, UnsupportedWindowClosePolicy, }; const GtkHost = opaque {}; const GtkEventKind = enum(c_int) { start = 0, frame = 1, shutdown = 2, resize = 3, window_frame = 4, shortcut = 5, native_command = 6, app_activated = 7, app_deactivated = 8, menu_command = 9, files_dropped = 10, gpu_surface_frame = 11, gpu_surface_resize = 12, gpu_surface_input = 13, wake = 14, timer = 15, appearance = 16, audio = 17, context_menu_action = 18, view_focused = 19, notification_command = 20, }; const GtkEvent = extern struct { kind: GtkEventKind, window_id: u64, width: f64, height: f64, scale: f64, x: f64, y: f64, open: c_int, focused: c_int, hidden: c_int, label: [*]const u8, label_len: usize, title: [*]const u8, title_len: usize, shortcut_id: [*]const u8, shortcut_id_len: usize, shortcut_key: [*]const u8, shortcut_key_len: usize, shortcut_modifiers: u32, command_name: [*]const u8, command_name_len: usize, view_label: [*]const u8, view_label_len: usize, drop_paths: [*]const u8, drop_paths_len: usize, frame_index: u64, timestamp_ns: u64, frame_interval_ns: u64, nonblank: c_int, sample_color: u32, input_kind: c_int, button: c_int, delta_x: f64, delta_y: f64, key_text: [*]const u8, key_text_len: usize, input_text: [*]const u8, input_text_len: usize, has_composition_cursor: c_int, composition_cursor: usize, timer_id: u64, color_scheme: c_int, reduce_motion: c_int, high_contrast: c_int, /// Audio player report payload (`kind == .audio`): the report kind /// ordinal plus the live transport readout. `audio_buffering` is the /// honest stream-stall mirror (an un-paused stream waiting for /// bytes), distinct from `audio_playing` (the transport intent). audio_kind: c_int, audio_position_ms: u64, audio_duration_ms: u64, audio_playing: c_int, audio_buffering: c_int, /// SPECTRUM report payload: the 32 band magnitude bytes on the /// documented scale (log-spaced 50 Hz..16 kHz buckets, linear-in-dB /// from -60 dBFS at 0 to full scale at 255). Zeros elsewhere. audio_bands: [platform_mod.audio_spectrum_band_count]u8, /// CONTEXT_MENU_ACTION payload (same field names as the macOS and /// Windows hosts): `widget_id` echoes the request's correlation /// token and `menu_item_id` is the selected item's id (0 = dismissed /// without a selection). widget_id: u64, menu_item_id: u32, }; const GtkCallback = *const fn (context: ?*anyopaque, event: *const GtkEvent) callconv(.c) void; const GtkBridgeCallback = *const fn (context: ?*anyopaque, window_id: u64, webview_label: [*]const u8, webview_label_len: usize, message: [*]const u8, message_len: usize, origin: [*]const u8, origin_len: usize) callconv(.c) void; const shortcut_modifier_primary: u32 = 1 << 0; const shortcut_modifier_command: u32 = 1 << 1; const shortcut_modifier_control: u32 = 1 << 2; const shortcut_modifier_option: u32 = 1 << 3; const shortcut_modifier_shift: u32 = 1 << 4; extern fn native_sdk_gtk_create(app_name: [*]const u8, app_name_len: usize, window_title: [*]const u8, window_title_len: usize, bundle_id: [*]const u8, bundle_id_len: usize, icon_path: [*]const u8, icon_path_len: usize, window_label: [*]const u8, window_label_len: usize, x: f64, y: f64, width: f64, height: f64, restore_frame: c_int, initial_placement: c_int, restore_policy: c_int, resizable: c_int, titlebar_style: c_int, min_width: f64, min_height: f64, show_policy: c_int, window_flags: u32) ?*GtkHost; extern fn native_sdk_gtk_destroy(host: *GtkHost) void; extern fn native_sdk_gtk_run(host: *GtkHost, callback: GtkCallback, context: ?*anyopaque) void; extern fn native_sdk_gtk_stop(host: *GtkHost) void; extern fn native_sdk_gtk_wake(host: *GtkHost) void; extern fn native_sdk_gtk_request_frame(host: *GtkHost) void; extern fn native_sdk_gtk_decode_image(bytes: [*]const u8, bytes_len: usize, pixels: [*]u8, pixels_len: usize, max_pixels: usize, out_width: *usize, out_height: *usize) c_int; extern fn native_sdk_gtk_load_webview(host: *GtkHost, source: [*]const u8, source_len: usize, source_kind: c_int, asset_root: [*]const u8, asset_root_len: usize, asset_entry: [*]const u8, asset_entry_len: usize, asset_origin: [*]const u8, asset_origin_len: usize, spa_fallback: c_int) void; extern fn native_sdk_gtk_load_window_webview(host: *GtkHost, window_id: u64, source: [*]const u8, source_len: usize, source_kind: c_int, asset_root: [*]const u8, asset_root_len: usize, asset_entry: [*]const u8, asset_entry_len: usize, asset_origin: [*]const u8, asset_origin_len: usize, spa_fallback: c_int) void; extern fn native_sdk_gtk_set_bridge_callback(host: *GtkHost, callback: GtkBridgeCallback, context: ?*anyopaque) void; extern fn native_sdk_gtk_bridge_respond(host: *GtkHost, response: [*]const u8, response_len: usize) void; extern fn native_sdk_gtk_bridge_respond_window(host: *GtkHost, window_id: u64, response: [*]const u8, response_len: usize) void; extern fn native_sdk_gtk_bridge_respond_webview(host: *GtkHost, window_id: u64, webview_label: [*]const u8, webview_label_len: usize, response: [*]const u8, response_len: usize) void; extern fn native_sdk_gtk_emit_window_event(host: *GtkHost, window_id: u64, name: [*]const u8, name_len: usize, detail_json: [*]const u8, detail_json_len: usize) void; extern fn native_sdk_gtk_set_security_policy(host: *GtkHost, allowed_origins: [*]const u8, allowed_origins_len: usize, external_urls: [*]const u8, external_urls_len: usize, external_action: c_int) void; extern fn native_sdk_gtk_set_menus(host: *GtkHost, menu_titles: [*]const [*]const u8, menu_title_lens: [*]const usize, menu_count: usize, item_menu_indices: [*]const u32, item_labels: [*]const [*]const u8, item_label_lens: [*]const usize, item_commands: [*]const [*]const u8, item_command_lens: [*]const usize, item_keys: [*]const [*]const u8, item_key_lens: [*]const usize, item_modifiers: [*]const u32, item_separators: [*]const c_int, item_enabled: [*]const c_int, item_checked: [*]const c_int, item_count: usize) void; extern fn native_sdk_gtk_set_shortcuts(host: *GtkHost, ids: [*]const [*]const u8, id_lens: [*]const usize, keys: [*]const [*]const u8, key_lens: [*]const usize, modifiers: [*]const u32, count: usize) void; extern fn native_sdk_gtk_create_window(host: *GtkHost, window_id: u64, window_title: [*]const u8, window_title_len: usize, window_label: [*]const u8, window_label_len: usize, x: f64, y: f64, width: f64, height: f64, restore_frame: c_int, initial_placement: c_int, restore_policy: c_int, resizable: c_int, titlebar_style: c_int, min_width: f64, min_height: f64, show_policy: c_int, window_flags: u32) c_int; extern fn native_sdk_gtk_start_window_drag(host: *GtkHost, window_id: u64) c_int; extern fn native_sdk_gtk_set_window_drag_regions(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize, rects: [*]const f64, exclusions: [*]const c_int, count: usize) c_int; extern fn native_sdk_gtk_window_chrome(host: *GtkHost, window_id: u64, top: *f64, left: *f64, bottom: *f64, right: *f64, buttons_x: *f64, buttons_y: *f64, buttons_width: *f64, buttons_height: *f64) c_int; extern fn native_sdk_gtk_start_timer(host: *GtkHost, timer_id: u64, interval_ns: u64, repeats: c_int) void; extern fn native_sdk_gtk_cancel_timer(host: *GtkHost, timer_id: u64) void; extern fn native_sdk_gtk_focus_window(host: *GtkHost, window_id: u64) c_int; extern fn native_sdk_gtk_show_window(host: *GtkHost, window_id: u64) c_int; extern fn native_sdk_gtk_hide_window(host: *GtkHost, window_id: u64) c_int; extern fn native_sdk_gtk_close_window(host: *GtkHost, window_id: u64) c_int; extern fn native_sdk_gtk_minimize_window(host: *GtkHost, window_id: u64) c_int; extern fn native_sdk_gtk_create_view(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize, kind: c_int, parent: [*]const u8, parent_len: usize, x: f64, y: f64, width: f64, height: f64, layer: c_int, visible: c_int, enabled: c_int, role: [*]const u8, role_len: usize, accessibility_label: [*]const u8, accessibility_label_len: usize, text: [*]const u8, text_len: usize, command: [*]const u8, command_len: usize) c_int; extern fn native_sdk_gtk_update_view(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize, has_frame: c_int, x: f64, y: f64, width: f64, height: f64, has_layer: c_int, layer: c_int, has_visible: c_int, visible: c_int, has_enabled: c_int, enabled: c_int, has_role: c_int, role: [*]const u8, role_len: usize, has_accessibility_label: c_int, accessibility_label: [*]const u8, accessibility_label_len: usize, has_text: c_int, text: [*]const u8, text_len: usize, has_command: c_int, command: [*]const u8, command_len: usize) c_int; extern fn native_sdk_gtk_set_view_frame(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize, x: f64, y: f64, width: f64, height: f64) c_int; extern fn native_sdk_gtk_set_view_visible(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize, visible: c_int) c_int; extern fn native_sdk_gtk_focus_view(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize) c_int; extern fn native_sdk_gtk_close_view(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize) c_int; extern fn native_sdk_gtk_request_gpu_surface_frame(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize) c_int; extern fn native_sdk_gtk_present_gpu_surface_pixels(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize, width: usize, height: usize, scale: f64, has_dirty_rect: c_int, dirty_x: f64, dirty_y: f64, dirty_width: f64, dirty_height: f64, rgba8: [*]const u8, rgba8_len: usize) c_int; extern fn native_sdk_gtk_create_webview(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize, url: [*]const u8, url_len: usize, x: f64, y: f64, width: f64, height: f64, layer: c_int, transparent: c_int, bridge_enabled: c_int) c_int; extern fn native_sdk_gtk_set_webview_frame(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize, x: f64, y: f64, width: f64, height: f64) c_int; extern fn native_sdk_gtk_navigate_webview(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize, url: [*]const u8, url_len: usize) c_int; extern fn native_sdk_gtk_set_webview_zoom(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize, zoom: f64) c_int; extern fn native_sdk_gtk_set_webview_layer(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize, layer: c_int) c_int; extern fn native_sdk_gtk_close_webview(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize) c_int; extern fn native_sdk_gtk_open_external_url(host: *GtkHost, url: [*]const u8, url_len: usize) c_int; extern fn native_sdk_gtk_reveal_path(host: *GtkHost, path: [*]const u8, path_len: usize) c_int; extern fn native_sdk_gtk_show_notification(host: *GtkHost, title: [*]const u8, title_len: usize, subtitle: [*]const u8, subtitle_len: usize, body: [*]const u8, body_len: usize, notification_id: [*]const u8, notification_id_len: usize, action_label: [*]const u8, action_label_len: usize, action_command: [*]const u8, action_command_len: usize) c_int; extern fn native_sdk_gtk_add_recent_document(host: *GtkHost, path: [*]const u8, path_len: usize) c_int; extern fn native_sdk_gtk_clear_recent_documents(host: *GtkHost) c_int; extern fn native_sdk_gtk_credentials_available(host: *GtkHost) c_int; extern fn native_sdk_gtk_set_credential(host: *GtkHost, service: [*]const u8, service_len: usize, account: [*]const u8, account_len: usize, secret: [*]const u8, secret_len: usize) c_int; extern fn native_sdk_gtk_get_credential(host: *GtkHost, service: [*]const u8, service_len: usize, account: [*]const u8, account_len: usize, buffer: [*]u8, buffer_len: usize) usize; extern fn native_sdk_gtk_delete_credential(host: *GtkHost, service: [*]const u8, service_len: usize, account: [*]const u8, account_len: usize) c_int; extern fn native_sdk_gtk_format_local_time(host: *GtkHost, timestamp_ms: i64, style: c_int, buffer: [*]u8, buffer_len: usize) usize; extern fn native_sdk_gtk_audio_available(host: *GtkHost) c_int; extern fn native_sdk_gtk_audio_spectrum_available(host: *GtkHost) c_int; extern fn native_sdk_gtk_audio_load(host: *GtkHost, path: [*]const u8, path_len: usize) c_int; extern fn native_sdk_gtk_audio_load_url(host: *GtkHost, url: [*]const u8, url_len: usize, cache_path: [*]const u8, cache_path_len: usize, expected_bytes: u64) c_int; extern fn native_sdk_gtk_audio_play(host: *GtkHost) c_int; extern fn native_sdk_gtk_audio_pause(host: *GtkHost) c_int; extern fn native_sdk_gtk_audio_stop(host: *GtkHost) c_int; extern fn native_sdk_gtk_audio_seek(host: *GtkHost, position_ms: u64) c_int; extern fn native_sdk_gtk_audio_set_volume(host: *GtkHost, volume: f64) c_int; extern fn native_sdk_gtk_clipboard_read(host: *GtkHost, buffer: [*]u8, buffer_len: usize) usize; extern fn native_sdk_gtk_clipboard_write(host: *GtkHost, text: [*]const u8, text_len: usize) void; extern fn native_sdk_gtk_clipboard_read_data(host: *GtkHost, mime_type: [*]const u8, mime_type_len: usize, buffer: [*]u8, buffer_len: usize) usize; extern fn native_sdk_gtk_clipboard_write_data(host: *GtkHost, mime_type: [*]const u8, mime_type_len: usize, bytes: [*]const u8, bytes_len: usize) c_int; extern fn native_sdk_gtk_show_context_menu(host: *GtkHost, window_id: u64, label: [*]const u8, label_len: usize, x: f64, y: f64, token: u64, items: [*]const GtkContextMenuItem, count: usize) c_int; /// One context-menu entry crossing the C ABI (the same shape the macOS /// and Windows hosts take): labels ride as pointer+length, flags as /// ints. const GtkContextMenuItem = extern struct { item_id: u32, label: [*]const u8, label_len: usize, enabled: c_int, separator: c_int, }; const GtkOpenDialogOpts = extern struct { title: [*]const u8, title_len: usize, default_path: [*]const u8, default_path_len: usize, extensions: [*]const u8, extensions_len: usize, allow_directories: c_int, allow_multiple: c_int, }; const GtkOpenDialogResult = extern struct { count: usize, bytes_written: usize, }; const GtkSaveDialogOpts = extern struct { title: [*]const u8, title_len: usize, default_path: [*]const u8, default_path_len: usize, default_name: [*]const u8, default_name_len: usize, extensions: [*]const u8, extensions_len: usize, }; const GtkMessageDialogOpts = extern struct { style: c_int, title: [*]const u8, title_len: usize, message: [*]const u8, message_len: usize, informative_text: [*]const u8, informative_text_len: usize, primary_button: [*]const u8, primary_button_len: usize, secondary_button: [*]const u8, secondary_button_len: usize, tertiary_button: [*]const u8, tertiary_button_len: usize, }; extern fn native_sdk_gtk_show_open_dialog(host: *GtkHost, opts: *const GtkOpenDialogOpts, buffer: [*]u8, buffer_len: usize) GtkOpenDialogResult; extern fn native_sdk_gtk_show_save_dialog(host: *GtkHost, opts: *const GtkSaveDialogOpts, buffer: [*]u8, buffer_len: usize) usize; extern fn native_sdk_gtk_show_message_dialog(host: *GtkHost, opts: *const GtkMessageDialogOpts) c_int; /// The startup-window twin of the runtime's create-time `.hide` gate: /// GTK reports `window_hide_on_close` false (no status item exists to /// bring a hidden window back), and every seam that could accept the /// declaration must refuse it loudly with the same teaching — the /// generated runner refuses at comptime, the runtime refuses secondary /// windows at create, and this refuses the platform-created main /// window at init. Pure (no GTK externs), so the refusal is /// unit-testable on every host. fn refuseUnsupportedMainWindowClosePolicy(window_options: platform_mod.WindowOptions) Error!void { if (window_options.close_policy != .hide) return; std.debug.print("window close_policy \"hide\" is not supported on linux: the GTK host has no status item (tray), so nothing could bring the hidden window back - declare \"quit\" (the default), or scope the .hide declaration to macos/windows builds\n", .{}); return error.UnsupportedWindowClosePolicy; } pub const LinuxPlatform = struct { host: *GtkHost, web_engine: platform_mod.WebEngine, app_info: platform_mod.AppInfo, surface_value: platform_mod.Surface, state: RunState = .{}, /// Latched when effects teardown abandons an in-flight platform call /// (a channel wake or blocking credential operation): the stale /// call still holds this platform as its context and may execute /// into it at any later time, so `deinit` must skip destruction /// and leak the host, process-lived — and the wrapper struct the /// context actually points at (the wake thunk casts to /// `*LinuxPlatform` before reaching the host) must outlive the /// call too, which is why runners allocate it through /// `createWithOptions` and retire it through `destroy`, the /// latch-gated free. channel_wake_abandoned: std.atomic.Value(bool) = std.atomic.Value(bool).init(false), pub fn init(title: []const u8, size: geometry.SizeF) Error!LinuxPlatform { return initWithEngine(title, size, .system); } pub fn initWithEngine(title: []const u8, size: geometry.SizeF, web_engine: platform_mod.WebEngine) Error!LinuxPlatform { return initWithOptions(size, web_engine, .{ .app_name = title, .window_title = title }); } pub fn initWithOptions(size: geometry.SizeF, web_engine: platform_mod.WebEngine, app_info: platform_mod.AppInfo) Error!LinuxPlatform { const window_options = app_info.resolvedMainWindow(); // The MAIN window is created right here, before any runtime // exists, so the runtime's create-time `.hide` gate // (window_storage's error.UnsupportedWindowClosePolicy) never // sees it — without this twin refusal a direct-SDK or // custom-runner user declaring `.hide` silently got // quit-on-close. Same loud line as the generated runner's // comptime check, at the last seam that can hold it. try refuseUnsupportedMainWindowClosePolicy(window_options); const window_title = window_options.resolvedTitle(app_info.app_name); const frame = window_options.default_frame; const host = native_sdk_gtk_create(app_info.app_name.ptr, app_info.app_name.len, window_title.ptr, window_title.len, app_info.bundle_id.ptr, app_info.bundle_id.len, app_info.icon_path.ptr, app_info.icon_path.len, window_options.label.ptr, window_options.label.len, frame.x, frame.y, frame.width, frame.height, if (window_options.restore_state) 1 else 0, initialPlacementInt(window_options.initial_placement), restorePolicyInt(window_options.restore_policy), if (window_options.resizable) 1 else 0, titlebarStyleInt(window_options.titlebar), minSizeFloor(window_options.min_width), minSizeFloor(window_options.min_height), showModeInt(window_options.show), windowFlags(window_options)) orelse return error.CreateFailed; return .{ .host = host, .web_engine = web_engine, .app_info = app_info, .surface_value = .{ .id = 1, .size = size, .scale_factor = 1, }, }; } /// Heap-allocate the wrapper (process allocator) and initialize it /// in place. Runners must use this over a stack `initWithOptions` /// value: `platform().services.context` is this wrapper's ADDRESS, /// worker threads dereference it inside the channel wake path, and /// a wake call teardown abandons may do so at any later time — /// after a runner's stack frame would have unwound. Pair with /// `destroy`, the latch-gated free. pub fn createWithOptions(size: geometry.SizeF, web_engine: platform_mod.WebEngine, app_info: platform_mod.AppInfo) Error!*LinuxPlatform { const self = std.heap.page_allocator.create(LinuxPlatform) catch return error.CreateFailed; errdefer std.heap.page_allocator.destroy(self); self.* = try initWithOptions(size, web_engine, app_info); return self; } /// `deinit` plus the wrapper's own storage, gated by the same /// latch: an abandoned channel wake call dereferences this wrapper /// (its context) BEFORE it reaches the native host, so on abandon /// both are leaked, process-lived — deinit-gating extended to /// lifetime-gating, the honest completion of the abandoned-worker /// idiom. No cross-thread race on the gate: the latch is set /// synchronously on the loop thread during effects teardown, which /// runs before the runner's deferred destroy. pub fn destroy(self: *LinuxPlatform) void { self.deinit(); if (self.channel_wake_abandoned.load(.seq_cst)) return; std.heap.page_allocator.destroy(self); } pub fn deinit(self: *LinuxPlatform) void { // An abandoned platform call may still enter this host at // any later time (see `channel_wake_abandoned`): destroying it // would turn that stale call into a use-after-free, so the // host is deliberately leaked, process-lived — the // abandoned-worker idiom, applied to the platform itself. if (self.channel_wake_abandoned.load(.seq_cst)) { std.debug.print("linux platform teardown: an abandoned platform call may still enter this host; skipping destruction and leaking it (and the wrapper it enters through), process-lived, so the stale call stays safe\n", .{}); return; } native_sdk_gtk_destroy(self.host); } pub fn platform(self: *LinuxPlatform) platform_mod.Platform { return .{ .context = self, .name = "linux", .surface_value = self.surface_value, .run_fn = run, .supports_fn = supportsFeature, .services = .{ .context = self, .read_clipboard_fn = readClipboard, .write_clipboard_fn = writeClipboard, .read_clipboard_data_fn = readClipboardData, .write_clipboard_data_fn = writeClipboardData, .load_webview_fn = loadWebView, .load_window_webview_fn = loadWindowWebView, .complete_bridge_fn = completeBridge, .complete_window_bridge_fn = completeWindowBridge, .complete_webview_bridge_fn = completeWebViewBridge, .create_window_fn = createWindow, .focus_window_fn = focusWindow, .close_window_fn = closeWindow, .minimize_window_fn = minimizeWindow, .hide_window_fn = hideWindow, .show_window_fn = showWindow, .quit_app_fn = quitApp, .start_window_drag_fn = startWindowDrag, .set_window_drag_regions_fn = setWindowDragRegions, .window_chrome_fn = windowChrome, .create_view_fn = createView, .update_view_fn = updateView, .set_view_frame_fn = setViewFrame, .set_view_visible_fn = setViewVisible, .focus_view_fn = focusView, .close_view_fn = closeView, .request_gpu_surface_frame_fn = requestGpuSurfaceFrame, .present_gpu_surface_pixels_fn = presentGpuSurfacePixels, .show_context_menu_fn = showContextMenu, .create_webview_fn = createWebView, .set_webview_frame_fn = setWebViewFrame, .navigate_webview_fn = navigateWebView, .set_webview_zoom_fn = setWebViewZoom, .set_webview_layer_fn = setWebViewLayer, .close_webview_fn = closeWebView, .show_open_dialog_fn = showOpenDialog, .show_save_dialog_fn = showSaveDialog, .show_message_dialog_fn = showMessageDialog, .open_external_url_fn = openExternalUrl, .reveal_path_fn = revealPath, .show_notification_fn = showNotification, .add_recent_document_fn = addRecentDocument, .clear_recent_documents_fn = clearRecentDocuments, .set_credential_fn = setCredential, .get_credential_fn = getCredential, .delete_credential_fn = deleteCredential, .note_blocking_call_abandoned_fn = noteChannelWakeAbandoned, .format_local_time_fn = formatLocalTime, .audio_load_fn = audioLoad, .audio_load_url_fn = audioLoadUrl, .audio_play_fn = audioPlay, .audio_pause_fn = audioPause, .audio_stop_fn = audioStop, .audio_seek_fn = audioSeek, .audio_set_volume_fn = audioSetVolume, // The video load verbs are teaching refusals (see // `videoLoad`); the transport verbs stay null — the // channel never activates without a successful load. .video_load_fn = videoLoad, .video_load_url_fn = videoLoadUrl, .create_tray_fn = createTray, .update_tray_menu_fn = updateTrayMenu, .remove_tray_fn = removeTray, .configure_security_policy_fn = configureSecurityPolicy, .configure_menus_fn = configureMenus, .configure_shortcuts_fn = configureShortcuts, .emit_window_event_fn = emitWindowEvent, .start_timer_fn = startTimer, .cancel_timer_fn = cancelTimer, .wake_fn = wake, .note_channel_wake_abandoned_fn = noteChannelWakeAbandoned, .request_frame_fn = requestFrame, .decode_image_fn = decodeImage, }, .app_info = self.app_info, }; } fn supportsFeature(context: *anyopaque, feature: platform_mod.PlatformFeature) bool { const self: *LinuxPlatform = @ptrCast(@alignCast(context)); return switch (feature) { .main_webview, .child_webviews, .native_views, .native_control_commands, .menus, .shortcuts, .dialogs, .clipboard_text, .clipboard_rich_data, .open_url, .reveal_path, .notifications, .recent_documents, .file_drops, .app_activation_events, .gpu_surfaces, => self.web_engine == .system, .credentials => credentialsAvailable(self.host), // Audio rides GStreamer (playbin), runtime-loaded like // libsecret: the report is a live probe, so a host without // the library honestly answers false and playback degrades // to one explicit failed Msg instead of pretending. .audio_playback, .audio_streaming => self.web_engine == .system and audioAvailable(self.host), // Spectrum analysis rides GStreamer's `spectrum` element in // the same playbin (gst-plugins-good, packaged separately // from the core library) — probed live like the player, so // a host whose plugin set lacks it answers false and the // deck's glass rests honestly instead of dancing on fakes. .audio_spectrum => self.web_engine == .system and audioSpectrumAvailable(self.host), .microphone_capture, .system_audio_capture => false, .tray => false, // No tray means no affordance to bring a policy-hidden // window back — reporting support would strand windows, so // GTK refuses `close_policy = .hide` at create instead. .window_hide_on_close => false, // Native context menus present through GtkPopoverMenu (a // GMenu pointed at the click, dispatching through a // per-invocation action group), riding the same // system-engine gate as the other native surfaces. .context_menus => self.web_engine == .system, // Native scroll drivers and app-owned view-surface adoption // are macOS-only today; GTK keeps the engine's wheel // physics. .gpu_surface_scroll_drivers, .view_surface_adoption => false, // Video decode (a GStreamer appsink feeding the // media-surface texture channel) is not implemented yet: // an honest false rather than a half-implemented player. // The load verbs teach and refuse (see `videoLoad`), so an // app that skips the capability check still learns exactly // what is missing. .video_playback => false, }; } fn credentialsAvailable(host: *GtkHost) bool { if (comptime @import("builtin").is_test) return false; if (@import("builtin").target.os.tag != .linux) return false; return native_sdk_gtk_credentials_available(host) != 0; } /// Runtime probe for the GStreamer-backed audio player, the same /// shape as `credentialsAvailable`: hermetic builds (tests, non-Linux /// hosts) answer false without touching the extern. fn audioAvailable(host: *GtkHost) bool { if (comptime @import("builtin").is_test) return false; if (@import("builtin").target.os.tag != .linux) return false; return native_sdk_gtk_audio_available(host) != 0; } fn audioSpectrumAvailable(host: *GtkHost) bool { if (comptime @import("builtin").is_test) return false; if (@import("builtin").target.os.tag != .linux) return false; return native_sdk_gtk_audio_spectrum_available(host) != 0; } fn run(context: *anyopaque, handler: platform_mod.EventHandler, handler_context: *anyopaque) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context)); self.state = .{ .self = self, .handler = handler, .handler_context = handler_context, }; native_sdk_gtk_set_bridge_callback(self.host, gtkBridgeCallback, &self.state); native_sdk_gtk_run(self.host, gtkCallback, &self.state); if (self.state.failed) return error.CallbackFailed; } fn windowById(self: *const LinuxPlatform, window_id: platform_mod.WindowId) platform_mod.WindowOptions { var index: usize = 0; while (index < self.app_info.startupWindowCount()) : (index += 1) { const window = self.app_info.resolvedStartupWindow(index); if (window.id == window_id) return window; } return .{ .id = window_id, .label = "", .title = self.app_info.resolvedWindowTitle() }; } }; const RunState = struct { self: ?*LinuxPlatform = null, handler: ?platform_mod.EventHandler = null, handler_context: ?*anyopaque = null, failed: bool = false, fn emit(self: *RunState, event: platform_mod.Event) void { const handler = self.handler orelse return; const context = self.handler_context orelse return; handler(context, event) catch { self.failed = true; if (self.self) |linux| native_sdk_gtk_stop(linux.host); }; } }; fn gtkCallback(context: ?*anyopaque, event: *const GtkEvent) callconv(.c) void { const state: *RunState = @ptrCast(@alignCast(context.?)); switch (event.kind) { .start => state.emit(.app_start), .frame => state.emit(.frame_requested), .shutdown => state.emit(.app_shutdown), .app_activated => state.emit(.app_activated), .app_deactivated => state.emit(.app_deactivated), .resize => { const surface: platform_mod.Surface = .{ .id = event.window_id, .size = geometry.SizeF.init(@floatCast(event.width), @floatCast(event.height)), .scale_factor = @floatCast(event.scale), }; if (state.self) |linux| linux.surface_value = surface; state.emit(.{ .surface_resized = surface }); }, .window_frame => if (state.self) |linux| { const event_label = event.label[0..event.label_len]; const event_title = event.title[0..event.title_len]; const window = if (event_label.len > 0) platform_mod.WindowOptions{ .id = event.window_id, .label = event_label, .title = event_title } else linux.windowById(event.window_id); state.emit(.{ .window_frame_changed = .{ .id = window.id, .label = window.label, .title = window.resolvedTitle(linux.app_info.app_name), .frame = geometry.RectF.init(@floatCast(event.x), @floatCast(event.y), @floatCast(event.width), @floatCast(event.height)), .scale_factor = @floatCast(event.scale), .open = event.open != 0, .focused = event.focused != 0, .hidden = event.hidden != 0, } }); }, .view_focused => state.emit(.{ .view_focused = .{ .window_id = event.window_id, .label = event.view_label[0..event.view_label_len], } }), .shortcut => state.emit(.{ .shortcut = .{ .id = event.shortcut_id[0..event.shortcut_id_len], .key = event.shortcut_key[0..event.shortcut_key_len], .modifiers = shortcutModifiersFromFlags(event.shortcut_modifiers), .window_id = event.window_id, } }), .native_command => state.emit(.{ .native_command = .{ .name = event.command_name[0..event.command_name_len], .window_id = event.window_id, .view_label = event.view_label[0..event.view_label_len], } }), .menu_command => state.emit(.{ .menu_command = .{ .name = event.command_name[0..event.command_name_len], .window_id = event.window_id, } }), .notification_command => state.emit(.{ .notification_command = .{ .name = event.command_name[0..event.command_name_len], .window_id = event.window_id, } }), .files_dropped => { var paths_buffer: [platform_mod.max_drop_paths][]const u8 = undefined; const paths = platform_mod.splitDropPaths(event.drop_paths[0..event.drop_paths_len], paths_buffer[0..]); state.emit(.{ .files_dropped = .{ .window_id = event.window_id, .paths = paths, } }); }, .gpu_surface_frame => state.emit(.{ .gpu_surface_frame = .{ .window_id = event.window_id, .label = event.view_label[0..event.view_label_len], .size = geometry.SizeF.init(@floatCast(event.width), @floatCast(event.height)), .scale_factor = @floatCast(event.scale), .frame_index = event.frame_index, .timestamp_ns = event.timestamp_ns, .frame_interval_ns = event.frame_interval_ns, .nonblank = event.nonblank != 0, .sample_color = event.sample_color, .backend = .software, .pixel_format = .bgra8_unorm, .present_mode = .timer, .alpha_mode = .@"opaque", .color_space = .srgb, .vsync = true, .status = .ready, } }), .gpu_surface_resize => state.emit(.{ .gpu_surface_resized = .{ .window_id = event.window_id, .label = event.view_label[0..event.view_label_len], .frame = geometry.RectF.init(@floatCast(event.x), @floatCast(event.y), @floatCast(event.width), @floatCast(event.height)), .scale_factor = @floatCast(event.scale), } }), .gpu_surface_input => state.emit(.{ .gpu_surface_input = gpuSurfaceInputEventFromGtkEvent(event) }), .wake => state.emit(.wake), .timer => state.emit(.{ .timer = .{ .id = event.timer_id, .timestamp_ns = event.timestamp_ns, } }), .appearance => state.emit(.{ .appearance_changed = .{ .color_scheme = if (event.color_scheme == 1) .dark else .light, .reduce_motion = event.reduce_motion != 0, .high_contrast = event.high_contrast != 0, } }), .audio => state.emit(.{ .audio = .{ .kind = audioEventKindFromInt(event.audio_kind), .position_ms = event.audio_position_ms, .duration_ms = event.audio_duration_ms, .playing = event.audio_playing != 0, .buffering = event.audio_buffering != 0, .bands = event.audio_bands, } }), .context_menu_action => state.emit(.{ .context_menu_action = contextMenuActionEventFromGtkEvent(event) }), } } /// Pure event mapping (no host calls), unit-testable on every build /// host: the C event's `widget_id` is the request's correlation token /// and `menu_item_id` the selected item (0 = dismissed) — the same /// payload contract as the macOS and Windows hosts, so replay is /// shape-identical. fn contextMenuActionEventFromGtkEvent(event: *const GtkEvent) platform_mod.ContextMenuActionEvent { return .{ .window_id = event.window_id, .view_label = event.view_label[0..event.view_label_len], .token = event.widget_id, .item_id = event.menu_item_id, }; } /// Ordinals match the audio report kinds in gtk_host.c (the same set the /// macOS and Windows hosts use); anything unknown degrades to `.failed` /// so a host/SDK skew is loud in the app instead of undefined behavior /// here. fn audioEventKindFromInt(value: c_int) platform_mod.AudioEventKind { return switch (value) { 0 => .loaded, 1 => .position, 2 => .completed, 4 => .spectrum, else => .failed, }; } fn gpuSurfaceInputEventFromGtkEvent(event: *const GtkEvent) platform_mod.GpuSurfaceInputEvent { return .{ .window_id = event.window_id, .label = event.view_label[0..event.view_label_len], .kind = gpuSurfaceInputKindFromInt(event.input_kind), .timestamp_ns = event.timestamp_ns, .x = @floatCast(event.x), .y = @floatCast(event.y), .button = event.button, .delta_x = @floatCast(event.delta_x), .delta_y = @floatCast(event.delta_y), .key = event.key_text[0..event.key_text_len], .text = event.input_text[0..event.input_text_len], .composition_cursor = if (event.has_composition_cursor != 0) event.composition_cursor else null, .modifiers = shortcutModifiersFromFlags(event.shortcut_modifiers), }; } fn gpuSurfaceInputKindFromInt(value: c_int) platform_mod.GpuSurfaceInputKind { return switch (value) { 0 => .pointer_down, 1 => .pointer_up, 2 => .pointer_move, 3 => .pointer_drag, 4 => .scroll, 5 => .key_down, 6 => .key_up, 7 => .text_input, 8 => .ime_set_composition, 9 => .ime_commit_composition, 10 => .ime_cancel_composition, 11 => .pointer_cancel, else => .pointer_move, }; } fn gtkBridgeCallback(context: ?*anyopaque, window_id: u64, webview_label: [*]const u8, webview_label_len: usize, message: [*]const u8, message_len: usize, origin: [*]const u8, origin_len: usize) callconv(.c) void { const state: *RunState = @ptrCast(@alignCast(context.?)); state.emit(.{ .bridge_message = .{ .bytes = message[0..message_len], .origin = origin[0..origin_len], .window_id = window_id, .webview_label = webview_label[0..webview_label_len], } }); } fn readClipboard(context: ?*anyopaque, buffer: []u8) anyerror![]const u8 { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); const len = native_sdk_gtk_clipboard_read(self.host, buffer.ptr, buffer.len); if (len > buffer.len) return error.NoSpaceLeft; return buffer[0..len]; } fn writeClipboard(context: ?*anyopaque, text: []const u8) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); native_sdk_gtk_clipboard_write(self.host, text.ptr, text.len); } fn readClipboardData(context: ?*anyopaque, mime_type: []const u8, buffer: []u8) anyerror![]const u8 { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); const len = native_sdk_gtk_clipboard_read_data(self.host, mime_type.ptr, mime_type.len, buffer.ptr, buffer.len); if (len > buffer.len) return error.NoSpaceLeft; return buffer[0..len]; } fn writeClipboardData(context: ?*anyopaque, data: platform_mod.ClipboardData) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (native_sdk_gtk_clipboard_write_data(self.host, data.mime_type.ptr, data.mime_type.len, data.bytes.ptr, data.bytes.len) == 0) return error.UnsupportedService; } fn loadWebView(context: ?*anyopaque, source: platform_mod.WebViewSource) anyerror!void { try loadWindowWebView(context, 1, source); } fn loadWindowWebView(context: ?*anyopaque, window_id: platform_mod.WindowId, source: platform_mod.WebViewSource) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); const assets: platform_mod.WebViewAssetSource = source.asset_options orelse .{ .root_path = "", .entry = "", .origin = "", .spa_fallback = false }; native_sdk_gtk_load_window_webview( self.host, window_id, source.bytes.ptr, source.bytes.len, switch (source.kind) { .html => 0, .url => 1, .assets => 2, }, assets.root_path.ptr, assets.root_path.len, assets.entry.ptr, assets.entry.len, assets.origin.ptr, assets.origin.len, if (assets.spa_fallback) 1 else 0, ); } fn completeBridge(context: ?*anyopaque, response: []const u8) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); native_sdk_gtk_bridge_respond(self.host, response.ptr, response.len); } fn completeWindowBridge(context: ?*anyopaque, window_id: platform_mod.WindowId, response: []const u8) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); native_sdk_gtk_bridge_respond_window(self.host, window_id, response.ptr, response.len); } fn completeWebViewBridge(context: ?*anyopaque, window_id: platform_mod.WindowId, webview_label: []const u8, response: []const u8) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); native_sdk_gtk_bridge_respond_webview(self.host, window_id, webview_label.ptr, webview_label.len, response.ptr, response.len); } fn emitWindowEvent(context: ?*anyopaque, window_id: platform_mod.WindowId, name: []const u8, detail_json: []const u8) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); native_sdk_gtk_emit_window_event(self.host, window_id, name.ptr, name.len, detail_json.ptr, detail_json.len); } /// Thread-safe: schedules an idle source on the GLib main loop /// (`g_idle_add` — the enqueue-only shape the wake contract requires), /// which emits `.wake` there. One of the two services worker threads /// may call. fn wake(context: ?*anyopaque) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); native_sdk_gtk_wake(self.host); } /// Teardown abandoned an in-flight channel wake call: latch the flag /// `deinit` consults so this host is leaked rather than destroyed (see /// `LinuxPlatform.channel_wake_abandoned`). fn noteChannelWakeAbandoned(context: ?*anyopaque) void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); self.channel_wake_abandoned.store(true, .seq_cst); } /// Thread-safe like `wake`: schedules an idle source on the GLib main /// loop, which emits one `.frame` event there. The automation arrival /// watcher calls this when a command lands so consumption never depends /// on the host's own frame pump. fn requestFrame(context: ?*anyopaque) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); native_sdk_gtk_request_frame(self.host); } /// Headless image codec for session replay: the SAME gdk-pixbuf decode /// a live host serves (see `decodeImage` below — a context-free /// bytes-to-pixels call, no window, no run loop), so journaled image /// bytes re-register the identical pixels under a headless replay on /// the same platform. pub fn installHeadlessImageCodec(services: *platform_mod.PlatformServices) void { services.decode_image_fn = decodeImage; } /// gdk-pixbuf-backed image decoding (PNG, JPEG, ... — whatever loaders /// the system ships) into straight-alpha RGBA8. fn decodeImage(context: ?*anyopaque, bytes: []const u8, buffer: []u8, max_pixels: usize) anyerror!platform_mod.DecodedImage { _ = context; var width: usize = 0; var height: usize = 0; return switch (native_sdk_gtk_decode_image(bytes.ptr, bytes.len, buffer.ptr, buffer.len, max_pixels, &width, &height)) { 1 => .{ .width = width, .height = height, .rgba8 = buffer[0 .. width * height * 4] }, -1 => error.ImageTooLarge, else => error.ImageDecodeFailed, }; } fn titlebarStyleInt(style: platform_mod.WindowTitlebarStyle) c_int { return switch (style) { .standard => 0, .hidden_inset => 1, .hidden_inset_tall => 2, .chromeless => 3, }; } fn initialPlacementInt(placement: platform_mod.WindowInitialPlacement) c_int { return switch (placement) { .restored => 0, .explicit => 1, .default => 2, }; } fn restorePolicyInt(policy: platform_mod.WindowRestorePolicy) c_int { return switch (policy) { .clamp_to_visible_screen => 0, .center_on_primary => 1, }; } fn showModeInt(mode: platform_mod.WindowShowMode) c_int { return switch (mode) { .immediate => 0, .on_first_present => 1, .hidden => 2, }; } fn windowFlags(options: platform_mod.WindowOptions) u32 { var flags: u32 = 0; if (options.transparent) flags |= 1 << 0; if (options.always_on_top) flags |= 1 << 1; if (options.click_through) flags |= 1 << 2; if (!options.activate_on_show) flags |= 1 << 3; if (!options.allows_fullscreen) flags |= 1 << 4; return flags; } /// Zero/negative/non-finite floors are the "no floor" sentinel (the /// host leaves that axis at its natural minimum). fn minSizeFloor(value: f32) f64 { return if (std.math.isFinite(value) and value > 0) value else 0; } fn createWindow(context: ?*anyopaque, options: platform_mod.WindowOptions) anyerror!platform_mod.WindowInfo { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); const title = options.resolvedTitle(self.app_info.app_name); const frame = options.default_frame; if (native_sdk_gtk_create_window(self.host, options.id, title.ptr, title.len, options.label.ptr, options.label.len, frame.x, frame.y, frame.width, frame.height, if (options.restore_state) 1 else 0, initialPlacementInt(options.initial_placement), restorePolicyInt(options.restore_policy), if (options.resizable) 1 else 0, titlebarStyleInt(options.titlebar), minSizeFloor(options.min_width), minSizeFloor(options.min_height), showModeInt(options.show), windowFlags(options)) == 0) return error.CreateFailed; return .{ .id = options.id, .label = options.label, .title = title, .frame = frame, .scale_factor = 1, .open = true, .focused = options.activate_on_show and options.show == .immediate, .hidden = options.show == .hidden, }; } fn focusWindow(context: ?*anyopaque, window_id: platform_mod.WindowId) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (native_sdk_gtk_focus_window(self.host, window_id) == 0) return error.FocusFailed; } fn closeWindow(context: ?*anyopaque, window_id: platform_mod.WindowId) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (native_sdk_gtk_close_window(self.host, window_id) == 0) return error.CloseFailed; } fn minimizeWindow(context: ?*anyopaque, window_id: platform_mod.WindowId) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (native_sdk_gtk_minimize_window(self.host, window_id) == 0) return error.WindowNotFound; } fn hideWindow(context: ?*anyopaque, window_id: platform_mod.WindowId) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (native_sdk_gtk_hide_window(self.host, window_id) == 0) return error.WindowNotFound; } /// GTK has no hide-on-close, but show is still distinct from explicit /// focus for passive overlay windows. fn showWindow(context: ?*anyopaque, window_id: platform_mod.WindowId) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (native_sdk_gtk_show_window(self.host, window_id) == 0) return error.WindowNotFound; } /// The graceful quit: the same emitShutdown + g_application_quit the /// last window's close-request runs, queued to the NEXT loop turn — /// this verb is requested mid dispatch (the command whose update /// returned it is still being dispatched), and `app_shutdown` must /// emit only after that dispatch returns, or a recording session /// seals its journal before the requesting command commits (the /// command record is lost and replay diverges). fn quitApp(context: ?*anyopaque) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); native_sdk_gtk_stop(self.host); } fn startWindowDrag(context: ?*anyopaque, window_id: platform_mod.WindowId) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (native_sdk_gtk_start_window_drag(self.host, window_id) == 0) return error.WindowNotFound; } /// Drag-region mirror capacity per push: the runtime's own per-view cap /// (`max_canvas_widget_window_drag_regions_per_view` = 32) bounds it in /// practice; the flat buffers below are sized for that with headroom. const max_drag_region_push: usize = 64; /// Push the canvas view's window-drag region mirror to the host. The /// GTK host consults it at the press gesture — a primary press inside a /// region (and outside its press-claiming exclusions) becomes a system /// interactive move, with the user's titlebar double-click convention /// applied on double press — so markup `window-drag` regions behave /// like the window's own titlebar without a round trip into the /// runtime. fn setWindowDragRegions(context: ?*anyopaque, window_id: platform_mod.WindowId, label: []const u8, regions: []const platform_mod.WindowDragRegion) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (regions.len > max_drag_region_push) return error.WindowLimitReached; var rects: [max_drag_region_push * 4]f64 = undefined; var exclusions: [max_drag_region_push]c_int = undefined; for (regions, 0..) |region, index| { rects[index * 4 + 0] = region.frame.x; rects[index * 4 + 1] = region.frame.y; rects[index * 4 + 2] = region.frame.width; rects[index * 4 + 3] = region.frame.height; exclusions[index] = if (region.exclusion) 1 else 0; } if (native_sdk_gtk_set_window_drag_regions(self.host, window_id, label.ptr, label.len, &rects, &exclusions, regions.len) == 0) return error.ViewNotFound; } /// Chrome overlay geometry for hidden-titlebar windows: the header-bar /// band height on top plus the window-control cluster's extent on the /// leading or trailing edge — whichever side the user's /// gtk-decoration-layout setting put the buttons — and the cluster's /// frame in the band's coordinates, all in logical points. /// Standard-chrome windows report zero. fn windowChrome(context: ?*anyopaque, window_id: platform_mod.WindowId) platform_mod.WindowChrome { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); var top: f64 = 0; var left: f64 = 0; var bottom: f64 = 0; var right: f64 = 0; var buttons_x: f64 = 0; var buttons_y: f64 = 0; var buttons_width: f64 = 0; var buttons_height: f64 = 0; if (native_sdk_gtk_window_chrome(self.host, window_id, &top, &left, &bottom, &right, &buttons_x, &buttons_y, &buttons_width, &buttons_height) == 0) return .{}; return .{ .insets = .{ .top = @floatCast(top), .left = @floatCast(left), .bottom = @floatCast(bottom), .right = @floatCast(right), }, .buttons = geometry.RectF.init(@floatCast(buttons_x), @floatCast(buttons_y), @floatCast(buttons_width), @floatCast(buttons_height)), }; } fn startTimer(context: ?*anyopaque, id: u64, interval_ns: u64, repeats: bool) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); native_sdk_gtk_start_timer(self.host, id, interval_ns, if (repeats) 1 else 0); } fn cancelTimer(context: ?*anyopaque, id: u64) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); native_sdk_gtk_cancel_timer(self.host, id); } fn createView(context: ?*anyopaque, options: platform_mod.ViewOptions) anyerror!void { if (options.kind == .webview) return createWebView(context, options.webViewOptions()); if (!isSupportedNativeViewKind(options.kind)) return error.UnsupportedViewKind; const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedViewKind; const frame = options.frame; const parent = options.parent orelse ""; if (native_sdk_gtk_create_view( self.host, options.window_id, options.label.ptr, options.label.len, viewKindInt(options.kind), parent.ptr, parent.len, frame.x, frame.y, frame.width, frame.height, options.layer, if (options.visible) 1 else 0, if (options.enabled) 1 else 0, options.role.ptr, options.role.len, options.accessibility_label.ptr, options.accessibility_label.len, options.text.ptr, options.text.len, options.command.ptr, options.command.len, ) == 0) return error.CreateFailed; } fn updateView(context: ?*anyopaque, window_id: platform_mod.WindowId, label: []const u8, patch: platform_mod.ViewPatch) anyerror!void { if (patch.url != null) return error.InvalidViewOptions; const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedViewKind; const frame = patch.frame orelse geometry.RectF.init(0, 0, 0, 0); const role = patch.role orelse ""; const accessibility_label = patch.accessibility_label orelse ""; const text = patch.text orelse ""; const command = patch.command orelse ""; if (native_sdk_gtk_update_view( self.host, window_id, label.ptr, label.len, if (patch.frame != null) 1 else 0, frame.x, frame.y, frame.width, frame.height, if (patch.layer != null) 1 else 0, patch.layer orelse 0, if (patch.visible != null) 1 else 0, if (patch.visible orelse false) 1 else 0, if (patch.enabled != null) 1 else 0, if (patch.enabled orelse false) 1 else 0, if (patch.role != null) 1 else 0, role.ptr, role.len, if (patch.accessibility_label != null) 1 else 0, accessibility_label.ptr, accessibility_label.len, if (patch.text != null) 1 else 0, text.ptr, text.len, if (patch.command != null) 1 else 0, command.ptr, command.len, ) == 0) return error.ViewNotFound; } fn setViewFrame(context: ?*anyopaque, window_id: platform_mod.WindowId, label: []const u8, frame: geometry.RectF) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedViewKind; if (native_sdk_gtk_set_view_frame(self.host, window_id, label.ptr, label.len, frame.x, frame.y, frame.width, frame.height) == 0) return error.ViewNotFound; } fn setViewVisible(context: ?*anyopaque, window_id: platform_mod.WindowId, label: []const u8, visible: bool) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedViewKind; if (native_sdk_gtk_set_view_visible(self.host, window_id, label.ptr, label.len, if (visible) 1 else 0) == 0) return error.ViewNotFound; } fn focusView(context: ?*anyopaque, window_id: platform_mod.WindowId, label: []const u8) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedViewFocus; if (native_sdk_gtk_focus_view(self.host, window_id, label.ptr, label.len) == 0) return error.UnsupportedViewFocus; } fn closeView(context: ?*anyopaque, window_id: platform_mod.WindowId, label: []const u8) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedViewKind; if (native_sdk_gtk_close_view(self.host, window_id, label.ptr, label.len) == 0) return error.ViewNotFound; } fn requestGpuSurfaceFrame(context: ?*anyopaque, window_id: platform_mod.WindowId, label: []const u8) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedService; if (native_sdk_gtk_request_gpu_surface_frame(self.host, window_id, label.ptr, label.len) == 0) return error.ViewNotFound; } fn presentGpuSurfacePixels(context: ?*anyopaque, pixels: platform_mod.GpuSurfacePixels) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedViewKind; const dirty_bounds = if (pixels.dirty_bounds) |bounds| bounds.normalized() else geometry.RectF{}; if (native_sdk_gtk_present_gpu_surface_pixels( self.host, pixels.window_id, pixels.label.ptr, pixels.label.len, pixels.width, pixels.height, pixels.scale_factor, if (pixels.dirty_bounds != null) 1 else 0, dirty_bounds.x, dirty_bounds.y, dirty_bounds.width, dirty_bounds.height, pixels.rgba8.ptr, pixels.rgba8.len, ) == 0) return error.ViewNotFound; } /// GTK popover menus treat `_` in an item label as a mnemonic marker — /// GtkPopoverMenu eats the underscore and underlines the next character — /// so an app-authored label like "Save_As" must cross the ABI with the /// underscore doubled ("Save__As") to render literally. Labels without /// an underscore pass through uncopied; a label whose escaped form does /// not fit the remaining pool also passes through raw, because an /// accidental mnemonic on a pathological label beats dropping bytes. fn escapeMenuLabelUnderscores(label: []const u8, pool: []u8, used: *usize) []const u8 { const underscores = std.mem.count(u8, label, "_"); if (underscores == 0) return label; if (label.len + underscores > pool.len - used.*) return label; const start = used.*; var out = start; for (label) |byte| { pool[out] = byte; out += 1; if (byte == '_') { pool[out] = '_'; out += 1; } } used.* = out; return pool[start..out]; } /// Translate the request's items to the C ABI shape, escaping mnemonic /// underscores into `label_pool` (the host strndup-copies every label /// before returning, so a caller stack pool is safe). Pure (no host /// calls), so the separator/disabled/label mapping is unit-testable on /// every build host. fn contextMenuItemsToGtk(items: []const platform_mod.ContextMenuItem, buffer: []GtkContextMenuItem, label_pool: []u8) []const GtkContextMenuItem { const count = @min(items.len, buffer.len); var pool_used: usize = 0; for (items[0..count], 0..) |item, index| { const label = escapeMenuLabelUnderscores(item.label, label_pool, &pool_used); buffer[index] = .{ .item_id = item.id, .label = label.ptr, .label_len = label.len, .enabled = if (item.enabled) 1 else 0, .separator = if (item.separator) 1 else 0, }; } return buffer[0..count]; } fn showContextMenu(context: ?*anyopaque, request: platform_mod.ContextMenuRequest) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedService; var items: [platform_mod.max_context_menu_items]GtkContextMenuItem = undefined; var label_pool: [platform_mod.max_context_menu_items * 64]u8 = undefined; const translated = contextMenuItemsToGtk(request.items, &items, &label_pool); if (native_sdk_gtk_show_context_menu( self.host, request.window_id, request.view_label.ptr, request.view_label.len, request.point.x, request.point.y, request.token, translated.ptr, translated.len, ) == 0) return error.WindowNotFound; } fn createWebView(context: ?*anyopaque, options: platform_mod.WebViewOptions) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine == .chromium) return error.UnsupportedChildWebViews; const frame = options.frame; if (native_sdk_gtk_create_webview(self.host, options.window_id, options.label.ptr, options.label.len, options.url.ptr, options.url.len, frame.x, frame.y, frame.width, frame.height, options.layer, if (options.transparent) 1 else 0, if (options.bridge_enabled) 1 else 0) == 0) return error.CreateFailed; } fn setWebViewFrame(context: ?*anyopaque, window_id: platform_mod.WindowId, label: []const u8, frame: geometry.RectF) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine == .chromium) { if (std.mem.eql(u8, label, "main")) return error.UnsupportedMainWebViewFrame; return error.UnsupportedChildWebViews; } if (native_sdk_gtk_set_webview_frame(self.host, window_id, label.ptr, label.len, frame.x, frame.y, frame.width, frame.height) == 0) return error.WebViewNotFound; } fn navigateWebView(context: ?*anyopaque, window_id: platform_mod.WindowId, label: []const u8, url: []const u8) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine == .chromium) { if (std.mem.eql(u8, label, "main")) return error.InvalidWebViewOptions; return error.UnsupportedChildWebViews; } if (native_sdk_gtk_navigate_webview(self.host, window_id, label.ptr, label.len, url.ptr, url.len) == 0) return error.WebViewNotFound; } fn setWebViewZoom(context: ?*anyopaque, window_id: platform_mod.WindowId, label: []const u8, zoom: f64) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine == .chromium) { if (std.mem.eql(u8, label, "main")) return error.UnsupportedMainWebViewZoom; return error.UnsupportedChildWebViews; } if (native_sdk_gtk_set_webview_zoom(self.host, window_id, label.ptr, label.len, zoom) == 0) return error.WebViewNotFound; } fn setWebViewLayer(context: ?*anyopaque, window_id: platform_mod.WindowId, label: []const u8, layer: i32) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine == .chromium) { if (std.mem.eql(u8, label, "main")) return error.UnsupportedMainWebViewLayer; return error.UnsupportedChildWebViews; } if (native_sdk_gtk_set_webview_layer(self.host, window_id, label.ptr, label.len, layer) == 0) return error.WebViewNotFound; } fn closeWebView(context: ?*anyopaque, window_id: platform_mod.WindowId, label: []const u8) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine == .chromium) { if (std.mem.eql(u8, label, "main")) return error.InvalidWebViewOptions; return error.UnsupportedChildWebViews; } if (native_sdk_gtk_close_webview(self.host, window_id, label.ptr, label.len) == 0) return error.WebViewNotFound; } fn showOpenDialog(context: ?*anyopaque, options: platform_mod.OpenDialogOptions, buffer: []u8) anyerror!platform_mod.OpenDialogResult { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); var ext_buf: [1024]u8 = undefined; const ext_str = flattenFilters(options.filters, &ext_buf); const opts = GtkOpenDialogOpts{ .title = options.title.ptr, .title_len = options.title.len, .default_path = options.default_path.ptr, .default_path_len = options.default_path.len, .extensions = ext_str.ptr, .extensions_len = ext_str.len, .allow_directories = if (options.allow_directories) 1 else 0, .allow_multiple = if (options.allow_multiple) 1 else 0, }; const result = native_sdk_gtk_show_open_dialog(self.host, &opts, buffer.ptr, buffer.len); if (result.bytes_written > buffer.len) return error.NoSpaceLeft; return .{ .count = result.count, .paths = buffer[0..result.bytes_written] }; } fn showSaveDialog(context: ?*anyopaque, options: platform_mod.SaveDialogOptions, buffer: []u8) anyerror!?[]const u8 { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); var ext_buf: [1024]u8 = undefined; const ext_str = flattenFilters(options.filters, &ext_buf); const opts = GtkSaveDialogOpts{ .title = options.title.ptr, .title_len = options.title.len, .default_path = options.default_path.ptr, .default_path_len = options.default_path.len, .default_name = options.default_name.ptr, .default_name_len = options.default_name.len, .extensions = ext_str.ptr, .extensions_len = ext_str.len, }; const written = native_sdk_gtk_show_save_dialog(self.host, &opts, buffer.ptr, buffer.len); if (written > buffer.len) return error.NoSpaceLeft; if (written == 0) return null; return buffer[0..written]; } fn showMessageDialog(context: ?*anyopaque, options: platform_mod.MessageDialogOptions) anyerror!platform_mod.MessageDialogResult { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); const opts = GtkMessageDialogOpts{ .style = @intFromEnum(options.style), .title = options.title.ptr, .title_len = options.title.len, .message = options.message.ptr, .message_len = options.message.len, .informative_text = options.informative_text.ptr, .informative_text_len = options.informative_text.len, .primary_button = options.primary_button.ptr, .primary_button_len = options.primary_button.len, .secondary_button = options.secondary_button.ptr, .secondary_button_len = options.secondary_button.len, .tertiary_button = options.tertiary_button.ptr, .tertiary_button_len = options.tertiary_button.len, }; return @enumFromInt(native_sdk_gtk_show_message_dialog(self.host, &opts)); } fn openExternalUrl(context: ?*anyopaque, url: []const u8) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedService; if (native_sdk_gtk_open_external_url(self.host, url.ptr, url.len) == 0) return error.UnsupportedService; } fn revealPath(context: ?*anyopaque, path: []const u8) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedService; if (native_sdk_gtk_reveal_path(self.host, path.ptr, path.len) == 0) return error.UnsupportedService; } fn showNotification(context: ?*anyopaque, options: platform_mod.NotificationOptions) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedService; if (native_sdk_gtk_show_notification( self.host, options.title.ptr, options.title.len, options.subtitle.ptr, options.subtitle.len, options.body.ptr, options.body.len, options.id.ptr, options.id.len, options.action_label.ptr, options.action_label.len, options.action_command.ptr, options.action_command.len, ) == 0) return error.UnsupportedService; } fn addRecentDocument(context: ?*anyopaque, path: []const u8) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedService; if (native_sdk_gtk_add_recent_document(self.host, path.ptr, path.len) == 0) return error.UnsupportedService; } fn clearRecentDocuments(context: ?*anyopaque) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedService; if (native_sdk_gtk_clear_recent_documents(self.host) == 0) return error.UnsupportedService; } fn setCredential(context: ?*anyopaque, credential: platform_mod.Credential) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (native_sdk_gtk_credentials_available(self.host) == 0) return error.CredentialStoreLocked; const result = native_sdk_gtk_set_credential( self.host, credential.service.ptr, credential.service.len, credential.account.ptr, credential.account.len, credential.secret.ptr, credential.secret.len, ); if (result == -2) return error.CredentialStoreLocked; if (result <= 0) return error.CredentialStoreFailed; } fn getCredential(context: ?*anyopaque, key: platform_mod.CredentialKey, buffer: []u8) anyerror![]const u8 { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (native_sdk_gtk_credentials_available(self.host) == 0) return error.CredentialStoreLocked; const len = native_sdk_gtk_get_credential( self.host, key.service.ptr, key.service.len, key.account.ptr, key.account.len, buffer.ptr, buffer.len, ); if (len == std.math.maxInt(usize)) return error.CredentialNotFound; if (len == std.math.maxInt(usize) - 2) return error.CredentialStoreLocked; if (len == std.math.maxInt(usize) - 1) return error.CredentialStoreFailed; if (len > buffer.len) return error.NoSpaceLeft; return buffer[0..len]; } fn deleteCredential(context: ?*anyopaque, key: platform_mod.CredentialKey) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (native_sdk_gtk_credentials_available(self.host) == 0) return error.CredentialStoreLocked; const result = native_sdk_gtk_delete_credential( self.host, key.service.ptr, key.service.len, key.account.ptr, key.account.len, ); if (result == -2) return error.CredentialStoreLocked; if (result < 0) return error.CredentialStoreFailed; if (result == 0) return error.CredentialNotFound; } fn formatLocalTime(context: ?*anyopaque, timestamp_ms: i64, style: platform_mod.LocalTimeStyle, buffer: []u8) anyerror![]const u8 { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); const len = native_sdk_gtk_format_local_time(self.host, timestamp_ms, @intFromEnum(style), buffer.ptr, buffer.len); if (len == 0 or len > buffer.len) return error.LocalTimeFormatFailed; return buffer[0..len]; } /// Map the audio host's synchronous load result: 0 loading (the /// asynchronous `.loaded` acknowledgment with the decoded duration /// follows on the main loop), 1 the file is missing, 2 an unusable /// source, 3 no backend — GStreamer is runtime-loaded, so its absence /// answers `error.UnsupportedService` here, matching the capability /// report. fn audioLoad(context: ?*anyopaque, path: []const u8) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedService; return switch (native_sdk_gtk_audio_load(self.host, path.ptr, path.len)) { 0 => {}, 1 => error.AudioSourceNotFound, 3 => error.UnsupportedService, else => error.AudioDecodeFailed, }; } /// Map the streaming host's synchronous result: 1 a verified cache entry /// is playing locally, 0 a progressive stream started (the `.loaded` /// acknowledgment follows at preroll), 3 no backend, anything else the /// URL itself was unusable. Network failures after this point are /// asynchronous and arrive as `.audio`/`.failed` events. fn audioLoadUrl(context: ?*anyopaque, url: []const u8, cache_path: []const u8, expected_bytes: u64) anyerror!platform_mod.AudioLoadResolution { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (self.web_engine != .system) return error.UnsupportedService; return switch (native_sdk_gtk_audio_load_url(self.host, url.ptr, url.len, cache_path.ptr, cache_path.len, expected_bytes)) { 0 => .stream, 1 => .cache, 3 => error.UnsupportedService, else => error.InvalidAudioOptions, }; } fn audioPlay(context: ?*anyopaque) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (native_sdk_gtk_audio_play(self.host) == 0) return error.InvalidAudioOptions; } fn audioPause(context: ?*anyopaque) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); _ = native_sdk_gtk_audio_pause(self.host); } fn audioStop(context: ?*anyopaque) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); _ = native_sdk_gtk_audio_stop(self.host); } fn audioSeek(context: ?*anyopaque, position_ms: u64) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (native_sdk_gtk_audio_seek(self.host, position_ms) == 0) return error.InvalidAudioOptions; } fn audioSetVolume(context: ?*anyopaque, volume: f32) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); _ = native_sdk_gtk_audio_set_volume(self.host, volume); } /// The video tier's teaching refusal: the load verbs exist so a video /// source fails with a NAMED explanation instead of a bare /// unsupported-service, while the transport verbs stay null — the /// channel never activates without a successful load. Pure (no GTK /// externs), so the teaching is unit-testable on every host. fn videoLoad(context: ?*anyopaque, path: []const u8, token: u64, sink: platform_mod.VideoFrameSink) anyerror!void { _ = context; _ = path; _ = token; _ = sink; std.debug.print("video playback is not implemented on linux yet: the GTK host has no GStreamer decode path into the media-surface texture channel - the app receives one failed video event (scope video sources to macos builds, or compose a media-surface with your own producer)\n", .{}); return error.UnsupportedService; } /// The URL twin rides the same teaching — a stream would need the same /// missing decode path a file does. fn videoLoadUrl(context: ?*anyopaque, url: []const u8, token: u64, sink: platform_mod.VideoFrameSink) anyerror!void { return videoLoad(context, url, token, sink); } fn createTray(context: ?*anyopaque, status_item_id: platform_mod.StatusItemId, options: platform_mod.TrayOptions) anyerror!void { _ = context; _ = status_item_id; _ = options; return error.UnsupportedService; } fn updateTrayMenu(context: ?*anyopaque, status_item_id: platform_mod.StatusItemId, items: []const platform_mod.TrayMenuItem) anyerror!void { _ = context; _ = status_item_id; _ = items; return error.UnsupportedService; } fn removeTray(context: ?*anyopaque, status_item_id: platform_mod.StatusItemId) anyerror!void { _ = context; _ = status_item_id; return error.UnsupportedService; } fn flattenFilters(filters: []const platform_mod.FileFilter, buffer: []u8) []const u8 { var offset: usize = 0; for (filters) |filter| { for (filter.extensions) |ext| { if (offset > 0 and offset < buffer.len) { buffer[offset] = ';'; offset += 1; } const end = @min(offset + ext.len, buffer.len); if (end > offset) { @memcpy(buffer[offset..end], ext[0..(end - offset)]); offset = end; } } } return buffer[0..offset]; } fn configureSecurityPolicy(context: ?*anyopaque, policy: security.Policy) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); var origins_buffer: [4096]u8 = undefined; var external_buffer: [4096]u8 = undefined; const origins = try policy_values.join(policy.navigation.allowed_origins, &origins_buffer); const external_urls = try policy_values.join(policy.navigation.external_links.allowed_urls, &external_buffer); native_sdk_gtk_set_security_policy( self.host, origins.ptr, origins.len, external_urls.ptr, external_urls.len, @intFromEnum(policy.navigation.external_links.action), ); } fn configureMenus(context: ?*anyopaque, menus: []const platform_mod.Menu) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); try platform_mod.validateMenus(menus); if (menus.len > 0 and self.web_engine != .system) return error.UnsupportedService; var menu_titles: [platform_mod.max_menus][*]const u8 = undefined; var menu_title_lens: [platform_mod.max_menus]usize = undefined; var item_menu_indices: [platform_mod.max_menu_items]u32 = undefined; var item_labels: [platform_mod.max_menu_items][*]const u8 = undefined; var item_label_lens: [platform_mod.max_menu_items]usize = undefined; var item_commands: [platform_mod.max_menu_items][*]const u8 = undefined; var item_command_lens: [platform_mod.max_menu_items]usize = undefined; var item_keys: [platform_mod.max_menu_items][*]const u8 = undefined; var item_key_lens: [platform_mod.max_menu_items]usize = undefined; var item_modifiers: [platform_mod.max_menu_items]u32 = undefined; var item_separators: [platform_mod.max_menu_items]c_int = undefined; var item_enabled: [platform_mod.max_menu_items]c_int = undefined; var item_checked: [platform_mod.max_menu_items]c_int = undefined; var item_count: usize = 0; for (menus, 0..) |menu, menu_index| { menu_titles[menu_index] = menu.title.ptr; menu_title_lens[menu_index] = menu.title.len; for (menu.items) |item| { item_menu_indices[item_count] = @intCast(menu_index); item_labels[item_count] = item.label.ptr; item_label_lens[item_count] = item.label.len; item_commands[item_count] = item.command.ptr; item_command_lens[item_count] = item.command.len; item_keys[item_count] = item.key.ptr; item_key_lens[item_count] = item.key.len; item_modifiers[item_count] = shortcutModifierFlags(item.modifiers); item_separators[item_count] = if (item.separator) 1 else 0; item_enabled[item_count] = if (item.enabled) 1 else 0; item_checked[item_count] = if (item.checked) 1 else 0; item_count += 1; } } native_sdk_gtk_set_menus( self.host, menu_titles[0..menus.len].ptr, menu_title_lens[0..menus.len].ptr, menus.len, item_menu_indices[0..item_count].ptr, item_labels[0..item_count].ptr, item_label_lens[0..item_count].ptr, item_commands[0..item_count].ptr, item_command_lens[0..item_count].ptr, item_keys[0..item_count].ptr, item_key_lens[0..item_count].ptr, item_modifiers[0..item_count].ptr, item_separators[0..item_count].ptr, item_enabled[0..item_count].ptr, item_checked[0..item_count].ptr, item_count, ); } fn configureShortcuts(context: ?*anyopaque, shortcuts: []const platform_mod.Shortcut) anyerror!void { const self: *LinuxPlatform = @ptrCast(@alignCast(context.?)); if (shortcuts.len > platform_mod.max_shortcuts) return error.InvalidShortcut; if (self.web_engine == .chromium and shortcuts.len > 0) return error.UnsupportedService; var ids: [platform_mod.max_shortcuts][*]const u8 = undefined; var id_lens: [platform_mod.max_shortcuts]usize = undefined; var keys: [platform_mod.max_shortcuts][*]const u8 = undefined; var key_lens: [platform_mod.max_shortcuts]usize = undefined; var modifiers: [platform_mod.max_shortcuts]u32 = undefined; for (shortcuts, 0..) |shortcut, index| { try platform_mod.validateShortcut(shortcut); ids[index] = shortcut.id.ptr; id_lens[index] = shortcut.id.len; keys[index] = shortcut.key.ptr; key_lens[index] = shortcut.key.len; modifiers[index] = shortcutModifierFlags(shortcut.modifiers); } native_sdk_gtk_set_shortcuts(self.host, ids[0..shortcuts.len].ptr, id_lens[0..shortcuts.len].ptr, keys[0..shortcuts.len].ptr, key_lens[0..shortcuts.len].ptr, modifiers[0..shortcuts.len].ptr, shortcuts.len); } fn shortcutModifierFlags(modifiers: platform_mod.ShortcutModifiers) u32 { var flags: u32 = 0; if (modifiers.primary) flags |= shortcut_modifier_primary; if (modifiers.command) flags |= shortcut_modifier_command; if (modifiers.control) flags |= shortcut_modifier_control; if (modifiers.option) flags |= shortcut_modifier_option; if (modifiers.shift) flags |= shortcut_modifier_shift; return flags; } fn shortcutModifiersFromFlags(flags: u32) platform_mod.ShortcutModifiers { return .{ .primary = (flags & shortcut_modifier_primary) != 0, .command = (flags & shortcut_modifier_command) != 0, .control = (flags & shortcut_modifier_control) != 0, .option = (flags & shortcut_modifier_option) != 0, .shift = (flags & shortcut_modifier_shift) != 0, }; } fn isSupportedNativeViewKind(kind: platform_mod.ViewKind) bool { return switch (kind) { .toolbar, .titlebar_accessory, .sidebar, .statusbar, .split, .stack, .button, .icon_button, .list_item, .checkbox, .toggle, .segmented_control, .text_field, .search_field, .label, .spacer, .progress_indicator, .gpu_surface, => true, .webview, => false, }; } test "linux supports native container and control kinds" { try std.testing.expect(isSupportedNativeViewKind(.split)); try std.testing.expect(isSupportedNativeViewKind(.stack)); try std.testing.expect(isSupportedNativeViewKind(.icon_button)); try std.testing.expect(isSupportedNativeViewKind(.list_item)); try std.testing.expect(isSupportedNativeViewKind(.gpu_surface)); } test "linux gpu surface input preserves key and text" { const label = "canvas"; const key = "enter"; const text = "\n"; var event = std.mem.zeroes(GtkEvent); event.window_id = 7; event.view_label = label.ptr; event.view_label_len = label.len; event.input_kind = 5; event.timestamp_ns = 123_000_000; event.x = 12; event.y = 18; event.button = 1; event.delta_x = -2; event.delta_y = 4; event.key_text = key.ptr; event.key_text_len = key.len; event.input_text = text.ptr; event.input_text_len = text.len; event.shortcut_modifiers = shortcut_modifier_primary | shortcut_modifier_shift; const input = gpuSurfaceInputEventFromGtkEvent(&event); try std.testing.expectEqual(@as(platform_mod.WindowId, 7), input.window_id); try std.testing.expectEqualStrings("canvas", input.label); try std.testing.expectEqual(platform_mod.GpuSurfaceInputKind.key_down, input.kind); try std.testing.expectEqual(@as(u64, 123_000_000), input.timestamp_ns); try std.testing.expectEqual(@as(f32, 12), input.x); try std.testing.expectEqual(@as(f32, 18), input.y); try std.testing.expectEqual(@as(i32, 1), input.button); try std.testing.expectEqual(@as(f32, -2), input.delta_x); try std.testing.expectEqual(@as(f32, 4), input.delta_y); try std.testing.expectEqualStrings("enter", input.key); try std.testing.expectEqualStrings("\n", input.text); try std.testing.expect(input.modifiers.primary); try std.testing.expect(input.modifiers.shift); } test "linux gpu surface input maps pointer cancel" { var event = std.mem.zeroes(GtkEvent); event.input_kind = 11; try std.testing.expectEqual(platform_mod.GpuSurfaceInputKind.pointer_cancel, gpuSurfaceInputEventFromGtkEvent(&event).kind); } test "linux gpu surface input maps ime text and composition events" { const preedit = "e\xcc\x81"; // "é" as e + combining acute var set_event = std.mem.zeroes(GtkEvent); set_event.input_kind = 8; set_event.input_text = preedit.ptr; set_event.input_text_len = preedit.len; set_event.has_composition_cursor = 1; set_event.composition_cursor = preedit.len; const set_input = gpuSurfaceInputEventFromGtkEvent(&set_event); try std.testing.expectEqual(platform_mod.GpuSurfaceInputKind.ime_set_composition, set_input.kind); try std.testing.expectEqualStrings(preedit, set_input.text); try std.testing.expectEqual(@as(?usize, preedit.len), set_input.composition_cursor); var text_event = std.mem.zeroes(GtkEvent); text_event.input_kind = 7; const committed = "é"; text_event.input_text = committed.ptr; text_event.input_text_len = committed.len; const text_input = gpuSurfaceInputEventFromGtkEvent(&text_event); try std.testing.expectEqual(platform_mod.GpuSurfaceInputKind.text_input, text_input.kind); try std.testing.expectEqualStrings(committed, text_input.text); try std.testing.expectEqual(@as(?usize, null), text_input.composition_cursor); var commit_event = std.mem.zeroes(GtkEvent); commit_event.input_kind = 9; try std.testing.expectEqual(platform_mod.GpuSurfaceInputKind.ime_commit_composition, gpuSurfaceInputEventFromGtkEvent(&commit_event).kind); var cancel_event = std.mem.zeroes(GtkEvent); cancel_event.input_kind = 10; try std.testing.expectEqual(platform_mod.GpuSurfaceInputKind.ime_cancel_composition, gpuSurfaceInputEventFromGtkEvent(&cancel_event).kind); } test "linux chromium reports unsupported desktop features" { var system = testPlatformWithEngine(.system); try std.testing.expect(LinuxPlatform.supportsFeature(&system, .main_webview)); try std.testing.expect(LinuxPlatform.supportsFeature(&system, .child_webviews)); try std.testing.expect(LinuxPlatform.supportsFeature(&system, .native_views)); try std.testing.expect(LinuxPlatform.supportsFeature(&system, .native_control_commands)); try std.testing.expect(LinuxPlatform.supportsFeature(&system, .menus)); try std.testing.expect(LinuxPlatform.supportsFeature(&system, .gpu_surfaces)); var chromium = testPlatformWithEngine(.chromium); try std.testing.expect(!LinuxPlatform.supportsFeature(&chromium, .gpu_surfaces)); try std.testing.expect(!LinuxPlatform.supportsFeature(&chromium, .main_webview)); try std.testing.expect(!LinuxPlatform.supportsFeature(&chromium, .shortcuts)); try std.testing.expect(!LinuxPlatform.supportsFeature(&chromium, .child_webviews)); try std.testing.expect(!LinuxPlatform.supportsFeature(&chromium, .native_views)); try std.testing.expect(!LinuxPlatform.supportsFeature(&chromium, .native_control_commands)); try std.testing.expect(!LinuxPlatform.supportsFeature(&chromium, .menus)); try std.testing.expect(!LinuxPlatform.supportsFeature(&chromium, .dialogs)); // Audio (like credentials) is a runtime probe on the system engine — // the hermetic build answers false without touching the extern — and // categorically unsupported on the chromium engine. try std.testing.expect(!LinuxPlatform.supportsFeature(&chromium, .audio_playback)); try std.testing.expect(!LinuxPlatform.supportsFeature(&chromium, .audio_streaming)); } test "linux audio event maps kinds and payload" { var event = std.mem.zeroes(GtkEvent); event.audio_kind = 1; event.audio_position_ms = 1_500; event.audio_duration_ms = 120_000; event.audio_playing = 1; event.audio_buffering = 1; try std.testing.expectEqual(platform_mod.AudioEventKind.position, audioEventKindFromInt(event.audio_kind)); try std.testing.expectEqual(platform_mod.AudioEventKind.loaded, audioEventKindFromInt(0)); try std.testing.expectEqual(platform_mod.AudioEventKind.completed, audioEventKindFromInt(2)); // Unknown ordinals degrade loudly to failed, never to silence. try std.testing.expectEqual(platform_mod.AudioEventKind.failed, audioEventKindFromInt(3)); try std.testing.expectEqual(platform_mod.AudioEventKind.failed, audioEventKindFromInt(99)); } test "linux context menus ride the system-engine gate" { var system = testPlatformWithEngine(.system); try std.testing.expect(LinuxPlatform.supportsFeature(&system, .context_menus)); var chromium = testPlatformWithEngine(.chromium); try std.testing.expect(!LinuxPlatform.supportsFeature(&chromium, .context_menus)); } test "linux context menu items translate separators, disabled flags, and labels" { const items = [_]platform_mod.ContextMenuItem{ .{ .id = 1, .label = "Complete" }, .{ .separator = true }, .{ .id = 3, .label = "Delete", .enabled = false }, .{ .id = 4, .label = "Move to Save_As" }, }; var buffer: [platform_mod.max_context_menu_items]GtkContextMenuItem = undefined; var label_pool: [platform_mod.max_context_menu_items * 64]u8 = undefined; const translated = contextMenuItemsToGtk(&items, &buffer, &label_pool); try std.testing.expectEqual(@as(usize, 4), translated.len); try std.testing.expectEqual(@as(u32, 1), translated[0].item_id); try std.testing.expectEqualStrings("Complete", translated[0].label[0..translated[0].label_len]); try std.testing.expectEqual(@as(c_int, 1), translated[0].enabled); try std.testing.expectEqual(@as(c_int, 0), translated[0].separator); try std.testing.expectEqual(@as(c_int, 1), translated[1].separator); try std.testing.expectEqual(@as(u32, 3), translated[2].item_id); try std.testing.expectEqual(@as(c_int, 0), translated[2].enabled); // A literal `_` doubles on the way to GtkPopoverMenu so GTK renders // it instead of eating it as a mnemonic marker; underscore-free // labels pass through pointing at the caller's bytes. try std.testing.expectEqualStrings("Move to Save__As", translated[3].label[0..translated[3].label_len]); try std.testing.expectEqual(items[0].label.ptr, translated[0].label); } test "linux menu label escape passes a label through raw when the pool cannot hold it" { var pool: [8]u8 = undefined; var used: usize = 0; const label = "Save_As"; // Escaped form needs 8 bytes and fits exactly. try std.testing.expectEqualStrings("Save__As", escapeMenuLabelUnderscores(label, &pool, &used)); // The pool is spent: the next underscore label rides unescaped // (accidental mnemonic) rather than truncated. const passed_through = escapeMenuLabelUnderscores(label, &pool, &used); try std.testing.expectEqualStrings("Save_As", passed_through); try std.testing.expectEqual(label.ptr, passed_through.ptr); } test "linux context menu action event maps token and item id" { const label = "canvas"; var event = std.mem.zeroes(GtkEvent); event.kind = .context_menu_action; event.window_id = 7; event.view_label = label.ptr; event.view_label_len = label.len; event.widget_id = 42; event.menu_item_id = 3; const action = contextMenuActionEventFromGtkEvent(&event); try std.testing.expectEqual(@as(platform_mod.WindowId, 7), action.window_id); try std.testing.expectEqualStrings("canvas", action.view_label); try std.testing.expectEqual(@as(u64, 42), action.token); try std.testing.expectEqual(@as(u32, 3), action.item_id); } fn testPlatformWithEngine(web_engine: platform_mod.WebEngine) LinuxPlatform { return .{ .host = undefined, .web_engine = web_engine, .app_info = .{}, .surface_value = .{}, }; } fn viewKindInt(kind: platform_mod.ViewKind) c_int { return switch (kind) { .webview => 0, .toolbar => 1, .titlebar_accessory => 2, .sidebar => 3, .statusbar => 4, .split => 5, .stack => 6, .button => 7, .icon_button => 17, .list_item => 18, .text_field => 8, .search_field => 9, .label => 10, .spacer => 11, .gpu_surface => 12, .checkbox => 13, .toggle => 14, .progress_indicator => 15, .segmented_control => 16, }; } test "linux platform module exports type" { _ = LinuxPlatform; } test "linux message dialogs construct alerts with a non-null format string" { // gtk_alert_dialog_new takes a required printf-style format string. // The host sets the real message below, but NULL still makes GTK // dereference an invalid format pointer during construction. const host_source = @embedFile("gtk_host.c"); try std.testing.expect(std.mem.indexOf( u8, host_source, "GtkAlertDialog *dialog = gtk_alert_dialog_new(\"\");", ) != null); try std.testing.expect(std.mem.indexOf( u8, host_source, "gtk_alert_dialog_new(NULL)", ) == null); } test "linux notification actions use process-scoped opaque tokens" { const host_source = @embedFile("gtk_host.c"); try std.testing.expect(std.mem.indexOf( u8, host_source, "char *action_token = native_sdk_random_notification_action_token();", ) != null); try std.testing.expect(std.mem.indexOf( u8, host_source, "open(\"/dev/urandom\", O_RDONLY | O_CLOEXEC)", ) != null); try std.testing.expect(std.mem.indexOf( u8, host_source, "g_variant_new_string(action_token)", ) != null); try std.testing.expect(std.mem.indexOf( u8, host_source, "native_sdk_take_notification_action_command(host, token, token_len)", ) != null); try std.testing.expect(std.mem.indexOf( u8, host_source, "g_hash_table_remove(host->notification_actions, token);", ) != null); try std.testing.expect(std.mem.indexOf( u8, host_source, "g_variant_new_string(command_copy)", ) == null); } test "linux transparent windows clear the main webview background" { const host_source = @embedFile("gtk_host.c"); const ensure_at = std.mem.indexOf( u8, host_source, "static WebKitWebView *native_sdk_ensure_main_webview", ) orelse return error.TestExpectedEqual; const create_at = std.mem.indexOfPos( u8, host_source, ensure_at, "WebKitWebView *wv = WEBKIT_WEB_VIEW(", ) orelse return error.TestExpectedEqual; const assign_at = std.mem.indexOfPos( u8, host_source, create_at, "win->web_view = wv;", ) orelse return error.TestExpectedEqual; const create_slice = host_source[create_at..assign_at]; try std.testing.expect(std.mem.indexOf( u8, create_slice, "if (win->transparent)", ) != null); try std.testing.expect(std.mem.indexOf( u8, create_slice, "webkit_web_view_set_background_color(wv, &transparent_color);", ) != null); } test "linux transparent window stylesheet is host-owned and removed" { const host_source = @embedFile("gtk_host.c"); try std.testing.expectEqual( @as(usize, 1), std.mem.count(u8, host_source, "gtk_style_context_add_provider_for_display("), ); try std.testing.expectEqual( @as(usize, 1), std.mem.count(u8, host_source, "gtk_style_context_remove_provider_for_display("), ); const ensure_at = std.mem.indexOf( u8, host_source, "static void native_sdk_ensure_transparent_css", ) orelse return error.TestExpectedEqual; const create_at = std.mem.indexOfPos( u8, host_source, ensure_at, "static native_sdk_gtk_window_t *native_sdk_create_window_internal", ) orelse return error.TestExpectedEqual; const ensure = host_source[ensure_at..create_at]; try std.testing.expect(std.mem.indexOf( u8, ensure, "if (!host || host->transparent_css_provider) return;", ) != null); const create_end = std.mem.indexOfPos( u8, host_source, create_at, "static void on_activate", ) orelse return error.TestExpectedEqual; const create = host_source[create_at..create_end]; try std.testing.expect(std.mem.indexOf( u8, create, "native_sdk_ensure_transparent_css(host);", ) != null); const destroy_at = std.mem.indexOf( u8, host_source, "void native_sdk_gtk_destroy", ) orelse return error.TestExpectedEqual; const destroy = host_source[destroy_at..]; const remove_at = std.mem.indexOf( u8, destroy, "gtk_style_context_remove_provider_for_display(", ) orelse return error.TestExpectedEqual; const provider_unref_at = std.mem.indexOf( u8, destroy, "g_object_unref(host->transparent_css_provider);", ) orelse return error.TestExpectedEqual; const display_unref_at = std.mem.indexOf( u8, destroy, "g_object_unref(host->transparent_css_display);", ) orelse return error.TestExpectedEqual; const app_unref_at = std.mem.indexOf( u8, destroy, "g_object_unref(host->app);", ) orelse return error.TestExpectedEqual; try std.testing.expect(remove_at < provider_unref_at); try std.testing.expect(remove_at < display_unref_at); try std.testing.expect(remove_at < app_unref_at); } test "linux passive show restores minimized windows without presenting them" { const host_source = @embedFile("gtk_host.c"); const show_at = std.mem.indexOf( u8, host_source, "int native_sdk_gtk_show_window", ) orelse return error.TestExpectedEqual; const show_end = std.mem.indexOfPos( u8, host_source, show_at, "int native_sdk_gtk_minimize_window", ) orelse return error.TestExpectedEqual; const show = host_source[show_at..show_end]; const unminimize_at = std.mem.indexOf( u8, show, "if (!win->activate_on_show) gtk_window_unminimize(win->gtk_window);", ) orelse return error.TestExpectedEqual; const present_at = std.mem.indexOf( u8, show, "native_sdk_show_window_implicit(win);", ) orelse return error.TestExpectedEqual; try std.testing.expect(unminimize_at < present_at); } test "linux webview presses report the focused child label" { // The capture-phase observer watches without claiming WebKit's // gesture; it exists solely to mirror the focus edge into runtime // state before the page handles the same press. const host_source = @embedFile("gtk_host.c"); try std.testing.expect(std.mem.indexOf(u8, host_source, "gtk_event_controller_set_propagation_phase(GTK_EVENT_CONTROLLER(click), GTK_PHASE_CAPTURE)") != null); try std.testing.expect(std.mem.indexOf(u8, host_source, ".kind = NATIVE_SDK_GTK_EVENT_VIEW_FOCUSED") != null); try std.testing.expect(std.mem.indexOf(u8, host_source, "native_sdk_watch_webview_pointer_focus(win, web_view);") != null); } test "linux first-present windows stay unmapped until present with a cancellable fallback" { const host_source = @embedFile("gtk_host.c"); try std.testing.expect(std.mem.indexOf( u8, host_source, "g_timeout_add(1000, native_sdk_deferred_show_timeout, win)", ) != null); try std.testing.expect(std.mem.indexOf( u8, host_source, "native_sdk_cancel_deferred_show(win);", ) != null); try std.testing.expect(std.mem.indexOf( u8, host_source, "gtk_widget_set_opacity(GTK_WIDGET(win->gtk_window), 0)", ) == null); const first_present_at = std.mem.indexOf( u8, host_source, "if (first_present && win && !win->shown && !win->policy_hidden)", ) orelse return error.TestExpectedEqual; const first_present_tail = host_source[first_present_at..]; const cancel_at = std.mem.indexOf( u8, first_present_tail, "native_sdk_cancel_deferred_show(win);", ) orelse return error.TestExpectedEqual; const show_at = std.mem.indexOf( u8, first_present_tail, "native_sdk_show_window_implicit(win);", ) orelse return error.TestExpectedEqual; const queue_draw_at = std.mem.indexOf( u8, first_present_tail, "gtk_widget_queue_draw(view->widget);", ) orelse return error.TestExpectedEqual; try std.testing.expect(cancel_at < show_at); try std.testing.expect(show_at < queue_draw_at); } test "linux refuses a .hide main window at platform init instead of a silent quit-on-close" { // The pre-created MAIN window never passes through the runtime's // create gate, so the platform's init gate must hold the same // line. The gate sees exactly the options `initWithOptions` // resolves from the caller's AppInfo. const hide_app: platform_mod.AppInfo = .{ .app_name = "player", .main_window = .{ .close_policy = .hide } }; try std.testing.expectError(error.UnsupportedWindowClosePolicy, refuseUnsupportedMainWindowClosePolicy(hide_app.resolvedMainWindow())); // The default (.quit) and every other declaration pass untouched — // the refusal is the .hide declaration's, not the init path's. const quit_app: platform_mod.AppInfo = .{ .app_name = "player" }; try refuseUnsupportedMainWindowClosePolicy(quit_app.resolvedMainWindow()); }