# Fleet — cyber sci-fi secure-bring-up splash (Plymouth "script" plugin).
#
# Asset-free on purpose: everything is drawn with Image.Text, so the repo carries
# no binary images. The dracut hooks drive it with `plymouth update --status=<tok>`
# (see dot1x-macsec-up.sh / nvmf-connect.sh); this script maps each token to a
# security-handshake checklist and pulses the in-progress step. Tokens are
# best-effort and order-independent — anything not reported just stays "pending",
# and in rd.dot1x=0 test mode the auth/MACsec rows are marked "skipped" (never
# "failed"). No per-host data is ever shown (only states), per the no-state rule.

# ---- background (dark teal -> black) ----
Window.SetBackgroundTopColor(0.00, 0.05, 0.07);
Window.SetBackgroundBottomColor(0.00, 0.00, 0.00);

sw = Window.GetWidth();
sh = Window.GetHeight();

# ---- title / subtitle ----
title_img = Image.Text("F L E E T", 0.0, 1.0, 0.85, 1, "Sans Bold 36");
title = Sprite(title_img);
title.SetX(sw / 2 - title_img.GetWidth() / 2);
title.SetY(sh / 2 - 150);

sub_img = Image.Text("secure diskless bring-up", 0.30, 0.65, 0.65, 1, "Sans 14");
sub = Sprite(sub_img);
sub.SetX(sw / 2 - sub_img.GetWidth() / 2);
sub.SetY(sh / 2 - 102);

# ---- handshake stages ----
# state per stage: 0 pending, 1 active, 2 done, 3 skipped
n = 5;
label[0] = "TPM identity";
label[1] = "802.1X EAP-TLS";
label[2] = "MACsec link";
label[3] = "Network (DHCP)";
label[4] = "NVMe-oF root";

col_x = sw / 2 - 150;
row_y = sh / 2 - 36;
row_h = 34;

fun draw(i) {
    glyph = "[  ]"; r = 0.22; g = 0.42; b = 0.42;            # pending (dim teal)
    if (state[i] == 1) { glyph = "[>>]"; r = 1.00; g = 0.72; b = 0.10; }  # active (amber)
    if (state[i] == 2) { glyph = "[OK]"; r = 0.10; g = 1.00; b = 0.50; }  # done (neon green)
    if (state[i] == 3) { glyph = "[--]"; r = 0.30; g = 0.30; b = 0.36; }  # skipped (grey)
    img = Image.Text(glyph + "   " + label[i], r, g, b, 1, "Sans 16");
    row[i].SetImage(img);
    row[i].SetX(col_x);
    row[i].SetY(row_y + i * row_h);
    row[i].SetOpacity(1.0);
}

i = 0;
while (i < n) {
    state[i] = 0;
    row[i] = Sprite();
    draw(i);
    i = i + 1;
}

# ---- footer ----
foot_img = Image.Text("erofs + dm-verity   •   NVMe/TCP   •   no per-host state",
                      0.25, 0.45, 0.45, 1, "Sans 11");
foot = Sprite(foot_img);
foot.SetX(sw / 2 - foot_img.GetWidth() / 2);
foot.SetY(sh / 2 + 150);

# ---- status tokens from the boot hooks ----
fun set(i, s) { state[i] = s; draw(i); }

fun on_status(t) {
    if (t == "mode-test")     { set(0, 3); set(1, 3); set(2, 3); }
    if (t == "tpm-active")    set(0, 1);
    if (t == "tpm-done")      set(0, 2);
    if (t == "dot1x-active")  set(1, 1);
    if (t == "dot1x-done")    set(1, 2);
    if (t == "macsec-active") set(2, 1);
    if (t == "macsec-done")   set(2, 2);
    if (t == "net-active")    set(3, 1);
    if (t == "net-done")      set(3, 2);
    if (t == "nvme-active")   set(4, 1);
    if (t == "nvme-done")     set(4, 2);
}
Plymouth.SetUpdateStatusFunction(on_status);

# ---- optional free-text line (e.g. warnings via `plymouth message`) ----
msg = Sprite();
fun on_message(text) {
    img = Image.Text(text, 0.55, 0.80, 0.80, 1, "Sans 12");
    msg.SetImage(img);
    msg.SetX(sw / 2 - img.GetWidth() / 2);
    msg.SetY(sh / 2 + 182);
}
Plymouth.SetMessageFunction(on_message);

# ---- pulse the in-progress row ----
tick = 0;
fun on_refresh() {
    tick = tick + 1;
    o = 1.0;
    if (tick % 24 < 12) o = 0.45;
    i = 0;
    while (i < n) {
        if (state[i] == 1) row[i].SetOpacity(o);
        i = i + 1;
    }
}
Plymouth.SetRefreshFunction(on_refresh);