初始化仓库

core/runas_windows.go

@@ -0,0 +1,51 @@
+//go:build windows
+
+package core
+
+import (
+	"context"
+	"errors"
+	"os/exec"
+)
+
+// DefaultEnvAllowlist is a stub on Windows — run_as_user is not supported.
+var DefaultEnvAllowlist = []string{}
+
+// SpawnOptions is a stub on Windows.
+type SpawnOptions struct {
+	RunAsUser    string
+	EnvAllowlist []string
+}
+
+// IsolationMode always returns false on Windows.
+func (o SpawnOptions) IsolationMode() bool { return false }
+
+// BuildSpawnCommand on Windows ignores RunAsUser (config validation rejects
+// it before we get here) and delegates to exec.CommandContext.
+func BuildSpawnCommand(ctx context.Context, _ SpawnOptions, name string, args ...string) *exec.Cmd {
+	return exec.CommandContext(ctx, name, args...)
+}
+
+// FilterEnvForSpawn on Windows is a no-op pass-through.
+func FilterEnvForSpawn(env []string, _ SpawnOptions) []string { return env }
+
+// SudoRunner is a stub interface on Windows for API compatibility.
+type SudoRunner interface {
+	Run(ctx context.Context, args ...string) ([]byte, error)
+}
+
+// ExecSudoRunner is a stub on Windows.
+type ExecSudoRunner struct{}
+
+// Run always fails on Windows.
+func (ExecSudoRunner) Run(ctx context.Context, args ...string) ([]byte, error) {
+	return nil, errors.New("sudo is not supported on Windows")
+}
+
+// VerifyRunAsUserCheap always fails on Windows.
+func VerifyRunAsUserCheap(_ context.Context, _ SudoRunner, runAsUser string) error {
+	if runAsUser == "" {
+		return nil
+	}
+	return errors.New("run_as_user is not supported on Windows")
+}