feat(scanners): nix-state, version/package managers, containers

Implement 4 new scanners detecting non-macOS-native package management:

- nix_state: Nix installation, profiles, nix-darwin, home-manager,
  channels, flakes, registries, config, devbox/devenv/direnv
- version_managers: asdf, mise, nvm, pyenv, rbenv, jenv, sdkman
- package_managers: MacPorts, Conda/Mamba
- containers: Docker, Podman, Colima, OrbStack, Lima

Also extends existing scanners:
- system_scanner: Rosetta 2, System Extensions, iCloud, MDM detection
- applications: 9 new BinarySource values + 19 path patterns

New models in package_managers.py (27 models). SystemConfig extended
with rosetta_installed, system_extensions, icloud, mdm_enrolled.
SystemState wired with 4 new domain fields. 19 total scanners.

242 new tests (734 total), ruff clean, pyright 0 errors.

Author: wgordon17

src/mac2nix/models/__init__.py

@@ -37,6 +37,35 @@
     Monitor,
     NightShiftConfig,
 )
+from mac2nix.models.package_managers import (
+    CondaEnvironment,
+    CondaPackage,
+    CondaState,
+    ContainerRuntimeInfo,
+    ContainerRuntimeType,
+    ContainersResult,
+    DevboxProject,
+    DevenvProject,
+    HomeManagerState,
+    MacPortsPackage,
+    MacPortsState,
+    ManagedRuntime,
+    NixChannel,
+    NixConfig,
+    NixDarwinState,
+    NixDirenvConfig,
+    NixFlakeInput,
+    NixInstallation,
+    NixInstallType,
+    NixProfile,
+    NixProfilePackage,
+    NixRegistryEntry,
+    NixState,
+    PackageManagersResult,
+    VersionManagerInfo,
+    VersionManagersResult,
+    VersionManagerType,
+)
 from mac2nix.models.preferences import PreferencesDomain, PreferencesResult, PreferenceValue
 from mac2nix.models.services import (
     CronEntry,
@@ -50,11 +79,13 @@
 )
 from mac2nix.models.system import (
     FirewallAppRule,
+    ICloudState,
     NetworkConfig,
     NetworkInterface,
     PrinterInfo,
     SecurityState,
     SystemConfig,
+    SystemExtension,
     TimeMachineConfig,
     VpnProfile,
 )
@@ -72,8 +103,16 @@
     "BrewFormula",
     "BrewService",
     "BundleEntry",
+    "CondaEnvironment",
+    "CondaPackage",
+    "CondaState",
     "ConfigFileType",
+    "ContainerRuntimeInfo",
+    "ContainerRuntimeType",
+    "ContainersResult",
     "CronEntry",
+    "DevboxProject",
+    "DevenvProject",
     "DisplayConfig",
     "DotfileEntry",
     "DotfileManager",
@@ -83,7 +122,9 @@
     "FontEntry",
     "FontSource",
     "FontsResult",
+    "HomeManagerState",
     "HomebrewState",
+    "ICloudState",
     "InstalledApp",
     "KeyBindingEntry",
     "LaunchAgentEntry",
@@ -93,11 +134,26 @@
     "LibraryAuditResult",
     "LibraryDirEntry",
     "LibraryFileEntry",
+    "MacPortsPackage",
+    "MacPortsState",
+    "ManagedRuntime",
     "MasApp",
     "Monitor",
     "NetworkConfig",
     "NetworkInterface",
     "NightShiftConfig",
+    "NixChannel",
+    "NixConfig",
+    "NixDarwinState",
+    "NixDirenvConfig",
+    "NixFlakeInput",
+    "NixInstallType",
+    "NixInstallation",
+    "NixProfile",
+    "NixProfilePackage",
+    "NixRegistryEntry",
+    "NixState",
+    "PackageManagersResult",
     "PathBinary",
     "PreferenceValue",
     "PreferencesDomain",
@@ -108,8 +164,12 @@
     "ShellConfig",
     "ShellFramework",
     "SystemConfig",
+    "SystemExtension",
     "SystemState",
     "TimeMachineConfig",
+    "VersionManagerInfo",
+    "VersionManagerType",
+    "VersionManagersResult",
     "VpnProfile",
     "WorkflowEntry",
 ]

src/mac2nix/models/application.py

@@ -15,14 +15,24 @@ class AppSource(StrEnum):
 
 
 class BinarySource(StrEnum):
+    ASDF = "asdf"
     BREW = "brew"
     CARGO = "cargo"
+    CONDA = "conda"
+    GEM = "gem"
     GO = "go"
-    PIPX = "pipx"
+    JENV = "jenv"
+    MACPORTS = "macports"
+    MANUAL = "manual"
+    MISE = "mise"
+    NIX = "nix"
     NPM = "npm"
-    GEM = "gem"
+    NVM = "nvm"
+    PIPX = "pipx"
+    PYENV = "pyenv"
+    RBENV = "rbenv"
+    SDKMAN = "sdkman"
     SYSTEM = "system"
-    MANUAL = "manual"
 
 
 class InstalledApp(BaseModel):

src/mac2nix/models/package_managers.py

@@ -0,0 +1,209 @@
+"""Nix, version manager, and third-party package manager models."""
+
+from __future__ import annotations
+
+from enum import StrEnum
+from pathlib import Path
+
+from pydantic import BaseModel, Field
+
+
+class NixInstallType(StrEnum):
+    SINGLE_USER = "single_user"
+    MULTI_USER = "multi_user"
+    DETERMINATE = "determinate"
+    UNKNOWN = "unknown"
+
+
+class NixInstallation(BaseModel):
+    present: bool = False
+    version: str | None = None
+    store_path: Path = Path("/nix/store")
+    install_type: NixInstallType = NixInstallType.UNKNOWN
+    daemon_running: bool = False
+
+
+class NixProfilePackage(BaseModel):
+    name: str
+    version: str | None = None
+    store_path: Path | None = None
+
+
+class NixProfile(BaseModel):
+    name: str
+    path: Path
+    packages: list[NixProfilePackage] = []
+
+
+class NixDarwinState(BaseModel):
+    present: bool = False
+    generation: int | None = None
+    config_path: Path | None = None
+    system_packages: list[str] = []
+
+
+class HomeManagerState(BaseModel):
+    present: bool = False
+    generation: int | None = None
+    config_path: Path | None = None
+    packages: list[str] = []
+
+
+class NixChannel(BaseModel):
+    name: str
+    url: str
+
+
+class NixFlakeInput(BaseModel):
+    name: str
+    url: str | None = None
+    locked_rev: str | None = None
+
+
+class NixRegistryEntry(BaseModel):
+    from_name: str
+    to_url: str
+
+
+class NixConfig(BaseModel):
+    """Key settings from nix.conf.
+
+    SECURITY: access-tokens and netrc-file values MUST be redacted before storing.
+    """
+
+    experimental_features: list[str] = []
+    substituters: list[str] = []
+    trusted_users: list[str] = []
+    max_jobs: int | None = None
+    sandbox: bool | None = None
+    extra_config: dict[str, str] = Field(default_factory=dict)
+
+
+class DevboxProject(BaseModel):
+    path: Path
+    packages: list[str] = []
+
+
+class DevenvProject(BaseModel):
+    path: Path
+    has_lock: bool = False
+
+
+class NixDirenvConfig(BaseModel):
+    """Tracks .envrc files that use nix-direnv or use_nix."""
+
+    path: Path
+    use_flake: bool = False
+    use_nix: bool = False
+
+
+class NixState(BaseModel):
+    """Aggregate Nix ecosystem state."""
+
+    installation: NixInstallation = Field(default_factory=NixInstallation)
+    profiles: list[NixProfile] = []
+    darwin: NixDarwinState = Field(default_factory=NixDarwinState)
+    home_manager: HomeManagerState = Field(default_factory=HomeManagerState)
+    channels: list[NixChannel] = []
+    flake_inputs: list[NixFlakeInput] = []
+    registries: list[NixRegistryEntry] = []
+    config: NixConfig = Field(default_factory=NixConfig)
+    devbox_projects: list[DevboxProject] = []
+    devenv_projects: list[DevenvProject] = []
+    direnv_configs: list[NixDirenvConfig] = []
+
+
+class VersionManagerType(StrEnum):
+    ASDF = "asdf"
+    MISE = "mise"
+    NVM = "nvm"
+    PYENV = "pyenv"
+    RBENV = "rbenv"
+    JENV = "jenv"
+    SDKMAN = "sdkman"
+
+
+class ManagedRuntime(BaseModel):
+    """A single runtime version managed by a version manager."""
+
+    manager: VersionManagerType
+    language: str
+    version: str
+    path: Path | None = None
+    active: bool = False
+
+
+class VersionManagerInfo(BaseModel):
+    """State of one version manager installation."""
+
+    manager_type: VersionManagerType
+    version: str | None = None
+    config_path: Path | None = None
+    runtimes: list[ManagedRuntime] = []
+
+
+class VersionManagersResult(BaseModel):
+    """Aggregate version manager state."""
+
+    managers: list[VersionManagerInfo] = []
+    global_tool_versions: Path | None = None
+
+
+class MacPortsPackage(BaseModel):
+    name: str
+    version: str | None = None
+    active: bool = True
+    variants: list[str] = []
+
+
+class MacPortsState(BaseModel):
+    present: bool = False
+    version: str | None = None
+    prefix: Path = Path("/opt/local")
+    packages: list[MacPortsPackage] = []
+
+
+class CondaPackage(BaseModel):
+    name: str
+    version: str | None = None
+    channel: str | None = None
+
+
+class CondaEnvironment(BaseModel):
+    name: str
+    path: Path
+    is_active: bool = False
+    packages: list[CondaPackage] = []
+
+
+class CondaState(BaseModel):
+    present: bool = False
+    version: str | None = None
+    environments: list[CondaEnvironment] = []
+
+
+class PackageManagersResult(BaseModel):
+    """Third-party (non-Homebrew, non-Nix) package managers."""
+
+    macports: MacPortsState = Field(default_factory=MacPortsState)
+    conda: CondaState = Field(default_factory=CondaState)
+
+
+class ContainerRuntimeType(StrEnum):
+    DOCKER = "docker"
+    PODMAN = "podman"
+    COLIMA = "colima"
+    ORBSTACK = "orbstack"
+    LIMA = "lima"
+
+
+class ContainerRuntimeInfo(BaseModel):
+    runtime_type: ContainerRuntimeType
+    version: str | None = None
+    running: bool = False
+    config_path: Path | None = None
+    socket_path: Path | None = None
+
+
+class ContainersResult(BaseModel):
+    runtimes: list[ContainerRuntimeInfo] = []

src/mac2nix/models/system.py

@@ -5,7 +5,7 @@
 from datetime import datetime
 from typing import Any
 
-from pydantic import BaseModel
+from pydantic import BaseModel, Field
 
 
 class NetworkInterface(BaseModel):
@@ -67,6 +67,23 @@ class PrinterInfo(BaseModel):
     options: dict[str, str] = {}
 
 
+class SystemExtension(BaseModel):
+    """A system extension from /Library/SystemExtensions/."""
+
+    identifier: str
+    team_id: str | None = None
+    version: str | None = None
+    state: str | None = None
+
+
+class ICloudState(BaseModel):
+    """iCloud sync status — scan-only, cannot be configured via nix-darwin."""
+
+    signed_in: bool = False
+    desktop_sync: bool = False
+    documents_sync: bool = False
+
+
 class SystemConfig(BaseModel):
     hostname: str
     timezone: str | None = None
@@ -93,3 +110,7 @@ class SystemConfig(BaseModel):
     remote_login: bool | None = None
     screen_sharing: bool | None = None
     file_sharing: bool | None = None
+    rosetta_installed: bool | None = None
+    system_extensions: list[SystemExtension] = []
+    icloud: ICloudState = Field(default_factory=ICloudState)
+    mdm_enrolled: bool | None = None