dragonborn

#!/bin/bash
# =============================================================================
# DragonBornOS - Unified Build & Flash System
# =============================================================================
# Single entry point for all DragonBornOS operations:
#   build  - Compile ROM from AOSP source
#   flash  - Full ROM flash with integrity checks
#   sign   - Generate AVB keys and sign images
#   inject - Apply hardening to AOSP source tree
#   audit  - Run security audit
#   clean  - Clean build artifacts
#
# Usage: ./dragonborn [command] [device] [options]
# =============================================================================

set -e

RED='\033[0;31m'
GREEN='\033[0;32m'
YELLOW='\033[1;33m'
CYAN='\033[0;36m'
WHITE='\033[1;37m'
NC='\033[0m'

log()    { echo -e "${CYAN}[*]${NC} $1"; }
success() { echo -e "${GREEN}[+]${NC} $1"; }
warn()   { echo -e "${YELLOW}[-]${NC} $1"; }
error()  { echo -e "${RED}[!]${NC} $1"; }

# =============================================================================
# CONFIGURATION
# =============================================================================

export DRAGONBORN_VERSION="13.0.0"
export DRAGONBORN_CODENAME="WhiteDragon"
export DRAGONBORN_MAINTAINER="methodwhite"
export DRAGONBORN_BUILD_TYPE="UNOFFICIAL"

PROJECT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
SCRIPTS_DIR="$PROJECT_DIR/scripts"
OUT_DIR="$PROJECT_DIR/out"
DEVICE_DIR="$PROJECT_DIR/device"
KERNEL_DIR="$PROJECT_DIR/kernel"

# Supported devices
declare -A DEVICES=(
    ["neo"]="motorola/neo|miami|DragonBorn-neo|Moto Edge 30 Neo|Snapdragon 695"
    ["vayu"]="xiaomi/vayu|vayu|DragonBorn-vayu|POCO X3 Pro|Snapdragon 860"
    ["hwstk"]="huawei/HWSTK-HF|HWSTK-HF|DragonBorn-HWSTK|P Smart 2019|Kirin 710"
)

DEFAULT_DEVICE="neo"

# =============================================================================
# BANNER
# =============================================================================

banner() {
    echo -e "${WHITE}"
    echo '  ╔══════════════════════════════════════════════════════════╗'
    echo '  ║     ____                                ____   _____   ║'
    echo '  ║    |  _ \ _ __ __ _  __ _  ___  _ __  | __ ) / _ \ \  ║'
    echo '  ║    | | | |  __/ _  |/ _  |/ _ \|  _ \ |  _ \| | | |  ║'
    echo '  ║    | |_| | | | (_| | (_| | (_) | | | || |_) | |_| |  ║'
    echo '  ║    |____/|_|  \__  |\__  |\___/|_| |_||____/ \___/   ║'
    echo '  ║                __/ |  __/ |                            ║'
    echo '  ║               |___/  |___/                             ║'
    echo '  ║                                                        ║'
    echo '  ║        DragonBornOS Unified Build System               ║'
    echo '  ║        v'"$DRAGONBORN_VERSION"' - '"$DRAGONBORN_CODENAME"'                      ║'
    echo '  ╚══════════════════════════════════════════════════════════╝'
    echo -e "${NC}"
}

# =============================================================================
# HELP
# =============================================================================

show_help() {
    banner
    echo "  Usage: dragonborn [COMMAND] [DEVICE] [OPTIONS]"
    echo ""
    echo "  Commands:"
    echo "    build      Compile DragonBornOS from source"
    echo "    flash      Flash ROM to device (with integrity checks)"
    echo "    sign       Generate AVB keys and sign vbmeta"
    echo "    inject     Apply security hardening to AOSP source tree"
    echo "    audit      Run comprehensive security audit"
    echo "    clean      Clean build artifacts"
    echo "    deps       Check and install build dependencies"
    echo "    info       Show device information"
    echo ""
    echo "  Devices:"
    for dev in "${!DEVICES[@]}"; do
        IFS='|' read -r path codename product name soc <<< "${DEVICES[$dev]}"
        echo "    $dev       - $name ($codename) [$soc]"
    done
    echo ""
    echo "  Examples:"
    echo "    dragonborn build neo"
    echo "    dragonborn flash neo"
    echo "    dragonborn inject /path/to/aosp/source"
    echo "    dragonborn audit"
    echo "    dragonborn sign neo"
    echo ""
}

# =============================================================================
# DEPENDENCY CHECK
# =============================================================================

check_deps() {
    log "Checking build dependencies..."
    
    local MISSING=()
    
    # Required system tools
    for tool in java javac python3 git make repo adb fastboot curl; do
        if ! command -v "$tool" &>/dev/null; then
            MISSING+=("$tool")
        fi
    done
    
    if [ ${#MISSING[@]} -gt 0 ]; then
        warn "Missing tools: ${MISSING[*]}"
        echo ""
        echo "  Install with:"
        echo "    sudo apt install -y bc bison build-essential ccache curl flex g++"
        echo "    gcc git gnupg liblz4-tool libncurses5 libncurses5-dev libssl-dev"
        echo "    libxml2 libxml2-utils lzop maven pngcrush python3 rsync schedtool"
        echo "    squashfs-tools xsltproc zip zlib1g-dev imagemagick openjdk-11-jdk"
        echo "    adb fastboot"
        return 1
    fi
    
    # Check disk space
    local DISK_GB=$(df -BG "$PROJECT_DIR" | awk 'NR==2 {print $4}' | sed 's/G//')
    if [ "$DISK_GB" -lt 100 ]; then
        warn "Low disk space: ${DISK_GB}GB free (need 100GB+)"
    fi
    
    # Check RAM
    local RAM_GB=$(free -g | awk 'NR==2 {print $2}')
    if [ "$RAM_GB" -lt 16 ]; then
        warn "Low RAM: ${RAM_GB}GB (recommended 32GB+)"
    fi
    
    success "Dependencies check passed"
    return 0
}

# =============================================================================
# SOURCE SYNC
# =============================================================================

sync_source() {
    log "Checking AOSP source..."
    
    if [ ! -d "$PROJECT_DIR/.repo" ]; then
        warn "AOSP source not initialized."
        echo ""
        echo "  To sync LineageOS 22 source for DragonBornOS:"
        echo ""
        echo "    mkdir -p ~/android/lineage"
        echo "    cd ~/android/lineage"
        echo "    repo init -u https://github.com/LineageOS/android.git -b lineage-22.0 --git-lfs"
        echo ""
        echo "    # Copy DragonBorn local manifest:"
        echo "    mkdir -p .repo/local_manifests"
        echo "    cp $PROJECT_DIR/.repo/local_manifests/dragonborn.xml .repo/local_manifests/"
        echo ""
        echo "    # Sync (this takes hours):"
        echo "    repo sync -c --force-sync --optimized-fetch --no-tags --no-clone-bundle -j4"
        echo ""
        echo "  Disk space needed: ~150GB"
        return 1
    fi
    
    log "Syncing sources..."
    repo sync -c --force-sync --optimized-fetch --no-tags --no-clone-bundle -j$(nproc --all)
    success "Source sync complete"
    return 0
}

# =============================================================================
# BUILD
# =============================================================================

cmd_build() {
    local DEVICE="${1:-$DEFAULT_DEVICE}"
    local BUILD_TYPE="${2:-userdebug}"
    
    banner
    
    if ! check_deps; then
        error "Dependencies not met. Run 'dragonborn deps' for instructions."
        exit 1
    fi
    
    if ! sync_source; then
        error "Cannot build without AOSP source. Follow instructions above."
        exit 1
    fi
    
    log "Building DragonBornOS for $DEVICE ($BUILD_TYPE)..."
    
    # Setup environment
    source build/envsetup.sh
    
    # Lunch target
    lunch "dragonborn_${DEVICE}-${BUILD_TYPE}"
    
    # Clean previous build
    make clean
    
    # Build
    log "Starting compilation (this will take 1-4 hours)..."
    mka bacon -j$(nproc --all)
    
    if [ $? -eq 0 ]; then
        success "Build complete!"
        echo ""
        echo "  Output: $OUT_DIR/target/product/$DEVICE/"
        ls -lh "$OUT_DIR/target/product/$DEVICE/"*.zip 2>/dev/null || true
        ls -lh "$OUT_DIR/target/product/$DEVICE/"*.img 2>/dev/null || true
    else
        error "Build failed. Check logs in $OUT_DIR/"
        exit 1
    fi
}

# =============================================================================
# FLASH
# =============================================================================

cmd_flash() {
    local DEVICE="${1:-$DEFAULT_DEVICE}"
    
    banner
    
    log "Starting DragonBornOS flash procedure for $DEVICE..."
    
    # Run the existing flash script with integrity checks
    if [ -f "$SCRIPTS_DIR/full_rom_flash.sh" ]; then
        bash "$SCRIPTS_DIR/full_rom_flash.sh"
    elif [ -f "$SCRIPTS_DIR/safe_flash.sh" ]; then
        bash "$SCRIPTS_DIR/safe_flash.sh"
    else
        error "No flash script found. Manual steps:"
        echo "  1. adb reboot bootloader"
        echo "  2. fastboot flash vbmeta vbmeta_signed.img"
        echo "  3. fastboot flash boot boot.img"
        echo "  4. fastboot reboot recovery"
        echo "  5. adb sideload lineage-*.zip"
        echo "  6. adb reboot"
    fi
}

# =============================================================================
# SIGN
# =============================================================================

cmd_sign() {
    local DEVICE="${1:-$DEFAULT_DEVICE}"
    
    banner
    log "Generating AVB 2.0 signing keys for $DEVICE..."
    
    if [ -f "$SCRIPTS_DIR/sign_vbmeta.sh" ]; then
        bash "$SCRIPTS_DIR/sign_vbmeta.sh"
    else
        warn "sign_vbmeta.sh not found. Using direct avbtool..."
        
        KEY_DIR="$PROJECT_DIR/../secureboot_keys"
        mkdir -p "$KEY_DIR"
        
        # Generate RSA 4096 key for AVB
        if [ ! -f "$KEY_DIR/avb_key.pem" ]; then
            log "Generating RSA 4096 key..."
            openssl genrsa -out "$KEY_DIR/avb_key.pem" 4096
            
            # Extract public key
            openssl rsa -in "$KEY_DIR/avb_key.pem" -pubout -out "$KEY_DIR/avb_pub.pem"
            
            # Convert to AVB format
            python3 "$SCRIPTS_DIR/avbtool.py" extract_public_key \
                --key "$KEY_DIR/avb_key.pem" \
                --output "$KEY_DIR/avb_pub_avb.bin"
            
            success "Keys generated in $KEY_DIR/"
            echo ""
            echo "  WARNING: Store these keys securely. If lost, you cannot update."
            echo "  Private key: $KEY_DIR/avb_key.pem"
            echo "  Public key:  $KEY_DIR/avb_pub.bin"
        else
            log "Keys already exist in $KEY_DIR/"
        fi
        
        # Sign vbmeta
        if [ -f "$OUT_DIR/target/product/$DEVICE/vbmeta.img" ]; then
            python3 "$SCRIPTS_DIR/avbtool.py" add_hash_footer \
                --image "$OUT_DIR/target/product/$DEVICE/vbmeta.img" \
                --partition_name vbmeta \
                --key "$KEY_DIR/avb_key.pem" \
                --algorithm SHA256_RSA4096
            success "vbmeta.img signed"
        fi
    fi
}

# =============================================================================
# INJECT HARDENING
# =============================================================================

cmd_inject() {
    local SOURCE_DIR="${1:-}"
    
    banner
    
    if [ -z "$SOURCE_DIR" ]; then
        error "Usage: dragonborn inject <path_to_aosp_source>"
        echo "  Example: dragonborn inject ~/android/lineage"
        exit 1
    fi
    
    if [ -f "$SCRIPTS_DIR/dragonborn_hardening_injector.sh" ]; then
        bash "$SCRIPTS_DIR/dragonborn_hardening_injector.sh" "$SOURCE_DIR"
    else
        error "Hardening injector script not found"
        exit 1
    fi
}

# =============================================================================
# AUDIT
# =============================================================================

cmd_audit() {
    banner
    
    if [ -f "$SCRIPTS_DIR/audit.sh" ]; then
        bash "$SCRIPTS_DIR/audit.sh" "$@"
    else
        error "Audit script not found"
        exit 1
    fi
}

# =============================================================================
# CLEAN
# =============================================================================

cmd_clean() {
    log "Cleaning build artifacts..."
    
    rm -rf "$OUT_DIR"
    mkdir -p "$OUT_DIR"
    
    success "Build directory cleaned"
}

# =============================================================================
# INFO
# =============================================================================

cmd_info() {
    local DEVICE="${1:-$DEFAULT_DEVICE}"
    
    banner
    echo "  DragonBornOS Information"
    echo "  ========================"
    echo ""
    echo "  Version:    $DRAGONBORN_VERSION ($DRAGONBORN_CODENAME)"
    echo "  Maintainer: $DRAGONBORN_MAINTAINER"
    echo "  Build type: $DRAGONBORN_BUILD_TYPE"
    echo "  Project:    $PROJECT_DIR"
    echo ""
    
    if [ -n "${DEVICES[$DEVICE]}" ]; then
        IFS='|' read -r path codename product name soc <<< "${DEVICES[$DEVICE]}"
        echo "  Device: $DEVICE"
        echo "    Name:     $name"
        echo "    Codename: $codename"
        echo "    Product:  $product"
        echo "    SoC:      $soc"
        echo "    Path:     device/$path"
        echo ""
    fi
    
    # Count files
    echo "  Project stats:"
    echo "    Scripts:   $(ls "$SCRIPTS_DIR"/*.sh 2>/dev/null | wc -l)"
    echo "    Devices:   ${#DEVICES[@]}"
    echo "    Docs:      $(ls "$PROJECT_DIR/docs"/*.md 2>/dev/null | wc -l)"
    echo ""
    
    # Check build status
    if [ -d "$PROJECT_DIR/.repo" ]; then
        echo "  Source: Synced"
        echo "    Last sync: $(cd "$PROJECT_DIR" && repo info 2>/dev/null | grep "Manifest last fetched" || echo "Unknown")"
    else
        echo "  Source: NOT synced"
    fi
    
    if [ -d "$OUT_DIR" ]; then
        echo "  Builds: $(find "$OUT_DIR" -name "*.zip" 2>/dev/null | wc -l) compiled"
    else
        echo "  Builds: 0 compiled"
    fi
}

# =============================================================================
# MAIN
# =============================================================================

main() {
    local COMMAND="${1:-help}"
    local DEVICE="${2:-$DEFAULT_DEVICE}"
    
    case "$COMMAND" in
        build)       cmd_build "$DEVICE" "$3" ;;
        flash)       cmd_flash "$DEVICE" ;;
        sign)        cmd_sign "$DEVICE" ;;
        inject)      cmd_inject "$DEVICE" ;;
        audit)       shift; cmd_audit "$@" ;;
        clean)       cmd_clean ;;
        deps)        check_deps ;;
        info)        cmd_info "$DEVICE" ;;
        help|--help|-h)  show_help ;;
        *)
            echo -e "${RED}Unknown command: $COMMAND${NC}"
            echo "Run 'dragonborn help' for usage"
            exit 1
            ;;
    esac
}

main "$@"