#!/usr/bin/env bash
# After hi-batch3 BOOT_OK: launch release-keys bacon (US-S2) on rom-dev01.
# Does not flash RK zip (needs recovery sideload); only starts bacon + status poll helper.
set -euo pipefail
SSHCFG="${SSHCFG:-/home/aventura/Workspaces/AXP_Resurection/docs/ssh/config}"
BATCH3_LOG="${BATCH3_LOG:-/tmp/009-wait-flash-cve-hi-batch3.log}"
LOG="${LOG:-/tmp/009-chain-hi3-to-releasekeys.log}"
exec > >(tee -a "$LOG") 2>&1

echo "CHAIN start $(date -Is) wait HI_BATCH3_BOOT_OK"
for i in $(seq 1 200); do
  if grep -q 'HI_BATCH3_BOOT_OK' "$BATCH3_LOG" 2>/dev/null; then
    echo "seen HI_BATCH3_BOOT_OK"
    break
  fi
  if grep -qE 'BACON_FAILED|NOT_BOOTED|BOOT_TIMEOUT|TIMEOUT' "$BATCH3_LOG" 2>/dev/null; then
    # allow exit=141 path that still boots — only abort on clear fail without OK
    if ! grep -q 'HI_BATCH3_BOOT_OK' "$BATCH3_LOG" 2>/dev/null; then
      if grep -qE 'BACON_FAILED|NOT_BOOTED|BOOT_TIMEOUT' "$BATCH3_LOG" 2>/dev/null; then
        echo CHAIN_ABORT_BATCH3_FAIL
        exit 1
      fi
    fi
  fi
  sleep 30
done
grep -q 'HI_BATCH3_BOOT_OK' "$BATCH3_LOG" || { echo CHAIN_TIMEOUT; exit 1; }

echo "=== launch release-keys bacon $(date -Is) ==="
ssh -F "$SSHCFG" -o BatchMode=yes rom-dev01 '
test -f /home/android-build/.android-certs/releasekey.pk8
install -m 0755 /tmp/009-bacon-axp-stage1-combo4-cve-hi-releasekeys.sh \
  /srv/rom/artifacts/009-axp-los23-port/scripts/ 2>/dev/null || true
# script must already be on host
test -x /srv/rom/artifacts/009-axp-los23-port/scripts/009-bacon-axp-stage1-combo4-cve-hi-releasekeys.sh
/srv/rom/artifacts/bin/rom-detach 009-bacon-cve-hi-releasekeys -- \
  bash /srv/rom/artifacts/009-axp-los23-port/scripts/009-bacon-axp-stage1-combo4-cve-hi-releasekeys.sh
sleep 2
cat /srv/rom/artifacts/detach-009-bacon-cve-hi-releasekeys.status
'
echo CHAIN_RK_STARTED