name: Setup pinned root implementation
description: 'Clone exactly one supported root implementation at a verified commit for Samsung'
inputs:
  flavor:
    description: 'kernelsu, next, or resukisu'
    required: true
  commit:
    description: 'Full immutable commit SHA'
    required: true

runs:
  using: composite
  steps:
    - name: Clone and integrate selected root
      shell: bash
      run: |
        set -euo pipefail

        flavor="${{ inputs.flavor }}"
        expected_commit="${{ inputs.commit }}"
        case "$flavor" in
          kernelsu)
            repo="https://github.com/tiann/KernelSU.git"
            directory="KernelSU"
            manager="KernelSU Manager"
            ;;
          next)
            repo="https://github.com/KernelSU-Next/KernelSU-Next.git"
            directory="KernelSU-Next"
            manager="KernelSU Next Manager"
            ;;
          resukisu)
            repo="https://github.com/ReSukiSU/ReSukiSU.git"
            directory="ReSukiSU"
            manager="ReSukiSU Manager"
            ;;
          *)
            echo "Unsupported root flavor: $flavor" >&2
            exit 2
            ;;
        esac

        if ! [[ "$expected_commit" =~ ^[0-9a-f]{40}$ ]]; then
          echo "Root commit must be a full 40-character SHA." >&2
          exit 2
        fi

        if [ -n "${COMMON:-}" ] && [ -d "$COMMON" ]; then
          KROOT="$COMMON"
          CLONE_BASE="$CONFIG"
        elif [ -n "${CONFIG:-}" ] && [ -d "$CONFIG" ]; then
          if [ -d "$CONFIG/kernel_platform/common" ]; then KROOT="$CONFIG/kernel_platform/common"
          elif [ -d "$CONFIG/common" ]; then KROOT="$CONFIG/common"
          elif [ -d "$CONFIG/kernel-6.6" ]; then KROOT="$CONFIG/kernel-6.6"
          elif [ -d "$CONFIG/kernel-6.1" ]; then KROOT="$CONFIG/kernel-6.1"
          elif [ -d "$CONFIG/kernel-5.10" ]; then KROOT="$CONFIG/kernel-5.10"
          elif [ -d "$CONFIG/kernel" ]; then KROOT="$CONFIG/kernel"
          else KROOT="$CONFIG"
          fi
          CLONE_BASE="$CONFIG"
        else
          echo "Cannot resolve kernel root (COMMON/CONFIG not set)." >&2
          exit 1
        fi

        echo "KROOT=$KROOT CLONE_BASE=$CLONE_BASE flavor=$flavor"

        for candidate in KernelSU KernelSU-Next ReSukiSU; do
          if [ "$candidate" != "$directory" ] && [ -e "$CLONE_BASE/$candidate" ]; then
            echo "Refusing mixed root implementations: found $candidate." >&2
            exit 1
          fi
        done

        drivers_dir="$KROOT/drivers"
        if [ ! -d "$drivers_dir" ]; then
          echo "Kernel drivers directory not found at $drivers_dir" >&2
          exit 1
        fi

        if [ -e "$drivers_dir/kernelsu" ] || [ -L "$drivers_dir/kernelsu" ]; then
          echo "Refusing to replace an existing kernelsu integration." >&2
          exit 1
        fi
        if [ -e "$CLONE_BASE/$directory" ]; then
          echo "Refusing to reuse an existing root checkout: $directory." >&2
          exit 1
        fi

        git clone --no-checkout "$repo" "$CLONE_BASE/$directory"
        git -C "$CLONE_BASE/$directory" fetch --depth=1 origin "$expected_commit"
        git -C "$CLONE_BASE/$directory" checkout --detach "$expected_commit"
        actual_commit="$(git -C "$CLONE_BASE/$directory" rev-parse HEAD)"
        if [ "$actual_commit" != "$expected_commit" ]; then
          echo "Root commit mismatch: expected $expected_commit, got $actual_commit." >&2
          exit 1
        fi
        if [ ! -f "$CLONE_BASE/$directory/kernel/Kconfig" ] || [ ! -f "$CLONE_BASE/$directory/kernel/Makefile" ]; then
          echo "Selected root checkout does not contain a kernel integration." >&2
          exit 1
        fi
        root_version="$(git -C "$CLONE_BASE/$directory" describe --tags --always --dirty)"
        relative_kernel="$(realpath --relative-to="$drivers_dir" "$CLONE_BASE/$directory/kernel" 2>/dev/null || echo "$CLONE_BASE/$directory/kernel")"
        ln -s "$relative_kernel" "$drivers_dir/kernelsu"
        grep -q 'obj-$(CONFIG_KSU) += kernelsu/' "$drivers_dir/Makefile" || printf '\nobj-$(CONFIG_KSU) += kernelsu/\n' >> "$drivers_dir/Makefile"
        grep -q 'source "drivers/kernelsu/Kconfig"' "$drivers_dir/Kconfig" || sed -i '/endmenu/i source "drivers/kernelsu/Kconfig"' "$drivers_dir/Kconfig"
        ln -sf "$CLONE_BASE/$directory" "$COMMON/KernelSU-Next" 2>/dev/null || true
        echo "ROOT_IMPLEMENTATION=$flavor" >> "$GITHUB_ENV"
        echo "ROOT_MANAGER=$manager" >> "$GITHUB_ENV"
        echo "ROOT_VERSION=$root_version" >> "$GITHUB_ENV"
        echo "ROOT_COMMIT=$actual_commit" >> "$GITHUB_ENV"
        echo "ROOT_DIR=$CLONE_BASE/$directory" >> "$GITHUB_ENV"

    - name: Enable root configuration
      shell: bash
      run: |
        "$COMMON/scripts/config" --file "$GKI_DEFCONFIG" --enable CONFIG_KSU