{ lib, config, pkgs, ... }:

let
  inherit (lib) mkIf types mkOption; 
  inherit (builtins) elem;
  cfg = config.homeModules.desktop.security.polkit;
in

{
  options.homeModules.desktop.security.polkit = mkOption {
    type = types.enum ["gnome" "pantheon"]; # TODO: add kde agent
    default = "";
    description = "Type of polkit agent module to use";
  };

  config = {
    systemd.user.services = {
      polkit-pantheon-authentication-agent-1 = mkIf (elem cfg ["pantheon"]) {
        Unit.Description = "polkit-pantheon-authentication-agent-1";

        Install = {
          WantedBy = [ "graphical-session.target" ];
          Wants = [ "graphical-session.target" ];
          After = [ "graphical-session.target" ];
        };

        Service = {
          Type = "simple";
          ExecStart = "${pkgs.pantheon.pantheon-agent-polkit}/libexec/policykit-1-pantheon/io.elementary.desktop.agent-polkit";
          Restart = "on-failure";
          RestartSec = 1;
          TimeoutStopSec = 10;
        };
      };

      polkit-gnome-authentication-agent-1 = mkIf (elem cfg ["gnome"]) {
        Unit.Description = "polkit-pantheon-authentication-agent-1";
        Install = {
          WantedBy = [ "graphical-session.target" ];
          Wants = [ "graphical-session.target" ];
          After = [ "graphical-session.target" ];
        };

        Service = {
          Type = "simple";
          ExecStart = "${pkgs.polkit_gnome}/libexec/polkit-gnome-authentication-agent-1";
          Restart = "on-failure";
          RestartSec = 1;
          TimeoutStopSec = 10;
        };
      };
    };
  };
}