# ============================================================
# SOVEREIGN DUAL RUNTIME — Docker Container
# Outer sandbox hosting:
#   - QEMU ARM64 Android phone emulator (Termux inside)
#   - 6502 sovereign VM (control plane)
#   - M5 compatibility bridge
# All connected through ORTHO-32-T doorbell mechanism
#
# Author: Ahmad Ali Parr
# Trust: Bel Esprit D'Accord Irrevocable Trust · EIN 42-697643
# ============================================================

FROM ubuntu:22.04

ENV DEBIAN_FRONTEND=noninteractive
ENV TERM=xterm-256color

# ── System dependencies ──────────────────────────────────────
RUN apt-get update && apt-get install -y --no-install-recommends \
    # QEMU full system emulation
    qemu-system-aarch64 \
    qemu-utils \
    # Build tools
    build-essential \
    gcc-aarch64-linux-gnu \
    nasm \
    # Runtime
    python3 python3-pip \
    curl wget git \
    # Networking / isolation
    socat netcat-openbsd iptables \
    # Terminal
    tmux \
    && rm -rf /var/lib/apt/lists/*

# ── Rust toolchain (for 6502 VM + M5 bridge) ────────────────
RUN curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | \
    sh -s -- -y --default-toolchain 1.79.0 --profile minimal
ENV PATH="/root/.cargo/bin:${PATH}"
RUN rustup target add aarch64-unknown-linux-gnu

# ── Android system image for QEMU ───────────────────────────
WORKDIR /sovereign/qemu
COPY qemu/download-android.sh .
RUN chmod +x download-android.sh

# ── 6502 VM ─────────────────────────────────────────────────
WORKDIR /sovereign/vm6502
COPY vm6502/ .
RUN cargo build --release 2>/dev/null || true

# ── M5 Bridge ───────────────────────────────────────────────
WORKDIR /sovereign/m5-bridge
COPY m5-bridge/ .
RUN cargo build --release 2>/dev/null || true

# ── Doorbell IPC ────────────────────────────────────────────
WORKDIR /sovereign/doorbell
COPY doorbell/ .

# ── Termux bootstrap ────────────────────────────────────────
WORKDIR /sovereign/termux-bootstrap
COPY termux-bootstrap/ .

# ── Orchestration scripts ────────────────────────────────────
WORKDIR /sovereign
COPY scripts/ scripts/
RUN chmod +x scripts/*.sh

EXPOSE 5554  # QEMU console
EXPOSE 5555  # ADB
EXPOSE 8788  # ASM bridge (sovereign OS)
EXPOSE 9090  # 6502 VM telemetry
EXPOSE 9091  # M5 bridge telemetry
EXPOSE 2222  # Termux SSH

WORKDIR /sovereign
CMD ["scripts/dual-runtime-start.sh"]