# veilor-os ujust recipes — opt-in components
# Loaded into /usr/share/ublue-os/just/ at image build time;
# `ujust install-X` discovers + dispatches.

# install Reticulum / RetiNet AGPL fork + Sideband (mesh layer 3)
install-reticulum:
    #!/usr/bin/env bash
    echo "═══ Reticulum (RetiNet AGPL fork) install ═══"
    echo
    echo "Installs RetiNet (AGPL fork — NOT upstream RNS due to anti-AI"
    echo "license) plus Sideband messenger. Default config: AutoInterface"
    echo "(LAN multicast) + 1-2 TCP backbone peers. RNode hardware (LoRa"
    echo "transceiver) is a separate install."
    echo
    read -p "Proceed? [y/N]: " confirm
    if [[ "$confirm" != "y" ]]; then echo "Cancelled."; exit 0; fi
    rpm-ostree install python3-pip
    pip install --user retinet sideband-cli
    echo
    echo "Done. To attach an RNode (LoRa transceiver), run:"
    echo "    ujust install-reticulum-rnode"

# install Reticulum RNode hardware support (LoRa transceiver)
install-reticulum-rnode:
    #!/usr/bin/env bash
    echo "═══ RNode (LoRa transceiver) hardware install ═══"
    echo
    echo "Adds RNode firmware-update tooling + udev rules for the LoRa"
    echo "USB hardware. Required only if you have an RNode device."
    echo
    read -p "Proceed? [y/N]: " confirm
    if [[ "$confirm" != "y" ]]; then echo "Cancelled."; exit 0; fi
    pip install --user rnodeconf
    echo "Done. Plug in your RNode via USB; it will appear as a serial device."

# install Thorium browser (OPT-IN, with explicit CVE-lag warning)
install-thorium:
    #!/usr/bin/env bash
    echo "═══ Thorium browser install ═══"
    echo
    echo "WARNING: Thorium is a perf/media-focused fork of Chromium that"
    echo "uses LTS Chromium as its base. As of 2026-05 it lags upstream"
    echo "stable by ~9 milestones (months of CVE backlog)."
    echo
    echo "veilor-os ships Trivalent (secureblue's hardened Chromium fork,"
    echo "tracking upstream M147+ within hours) as the default browser."
    echo "Thorium is provided as an OPT-IN profile for users who"
    echo "explicitly need its perf characteristics (e.g. WebGL games,"
    echo "media decode profiles)."
    echo
    echo "DO NOT use Thorium as your daily-driver browser. Use Trivalent"
    echo "or Mullvad Browser for that."
    echo
    read -p "Acknowledge CVE-lag risk and continue? [y/N]: " confirm
    if [[ "$confirm" != "y" ]]; then echo "Cancelled."; exit 0; fi
    flatpak install --user -y org.thorium.Thorium 2>/dev/null || \
        rpm-ostree install thorium-browser
    echo "Done. Launch via Plasma menu or `flatpak run org.thorium.Thorium`."

# join the veilor mesh (Tailscale via Headscale)
veilor-mesh-join:
    #!/usr/bin/env bash
    echo "═══ Join veilor mesh (Tailscale via Headscale) ═══"
    echo
    echo "Pre-auth keys are minted by the Misskey signup page at"
    echo "x.veilor (TTL 24h, single-use). You can paste the hex key"
    echo "directly OR scan the QR code shown after signup."
    echo
    read -p "Hex key (paste): " preauth
    if [[ -z "$preauth" ]]; then echo "Empty key. Cancelled."; exit 0; fi
    sudo systemctl enable --now tailscaled
    sudo tailscale up --login-server=https://hs.s8n.ru --auth-key="$preauth"
    echo "Done. Status: $(sudo tailscale status | head -1)"