#!/bin/sh
# compile.sh - compile-only guard for the TI C2000 (C28x, CHAR_BIT==16) port.
#
# Builds the wolfCrypt subset that compiles under CHAR_BIT==16 with the TI cl2000
# code generation tools, using IDE/C2000/user_settings.h.  No linking, no
# C2000Ware, no hardware: this only catches compile regressions in the
# CHAR_BIT != 8 gated code paths (SHA-2/3/SHAKE, ML-DSA-87 verify, SP-ECC).
#
# Usage:
#   CGT_ROOT=/path/to/ti-cgt-c2000_xx.y.z IDE/C2000/compile.sh
#
# CGT_ROOT must point at a TI C2000 codegen install (the dir containing
# bin/cl2000).  The CGT is a free download from TI; in CI it is fetched/cached
# by .github/workflows/ti-c2000-compile.yml.

set -e

: "${CGT_ROOT:?set CGT_ROOT to the ti-cgt-c2000 install (dir with bin/cl2000)}"

# Repo root = two levels up from this script.
SELF_DIR=$(cd "$(dirname "$0")" && pwd)
WOLFROOT=$(cd "$SELF_DIR/../.." && pwd)
CL="$CGT_ROOT/bin/cl2000"

if [ ! -x "$CL" ]; then
    echo "ERROR: cl2000 not found/executable at $CL" >&2
    exit 2
fi

OUT=$(mktemp -d)
trap 'rm -rf "$OUT"' EXIT

# $SELF_DIR before $WOLFROOT: wolfSSL's documented user_settings.h workflow
# puts one at the repo root, and if $WOLFROOT came first that copy would shadow
# this guard's config and silently compile a different build.
INCS="-I$CGT_ROOT/include -I$SELF_DIR -I$WOLFROOT"
CFLAGS="-v28 --abi=eabi --float_support=fpu32 --tmu_support=tmu1 -O2 \
  --define=WOLFSSL_USER_SETTINGS --display_error_number --diag_warning=225"

# wolfCrypt sources to compile-guard under CHAR_BIT==16.  This is the set that
# carries the CHAR_BIT != 8 gated fixes (plus their direct deps) - the
# regression surface for this port, plus hash.c, which HashML-DSA
# (wc_MlDsaKey_VerifyCtxHash) calls for the digest size and OID.
SRCS="error wc_port memory logging misc coding hash \
  sha sha256 sha512 sha3 wc_mldsa random ecc sp_int sp_c32 \
  aes cmac chacha poly1305 cryptocb \
  curve25519 ed25519 fe_operations ge_operations \
  curve448 ed448 fe_448 ge_448"

rc=0
for s in $SRCS; do
    printf 'CC  %s.c ... ' "$s"
    if "$CL" $CFLAGS $INCS --compile_only --skip_assembler \
            --asm_directory="$OUT" --obj_directory="$OUT" \
            "$WOLFROOT/wolfcrypt/src/$s.c" > "$OUT/$s.log" 2>&1; then
        echo "ok"
    else
        echo "FAIL"
        cat "$OUT/$s.log"
        rc=1
    fi
done

# random.c again with the entropy gate on: that turns WOLFSSL_NOISE_SRC on and
# pulls in the generic SP800-90B noise-source layer, which is otherwise left
# out of the sweep above.  Needs no C2000Ware - only the port .c touches
# driverlib.
printf 'CC  random.c (WOLFSSL_C2000_ENTROPY) ... '
if "$CL" $CFLAGS $INCS --define=WOLFSSL_C2000_ENTROPY \
        --compile_only --skip_assembler \
        --asm_directory="$OUT" --obj_directory="$OUT" \
        "$WOLFROOT/wolfcrypt/src/random.c" > "$OUT/random-noise.log" 2>&1; then
    echo "ok"
else
    echo "FAIL"
    cat "$OUT/random-noise.log"
    rc=1
fi

# The AESA hardware-AES port needs C2000Ware driverlib headers, which CI does
# not download, so it is an opt-in extra leg: set C2000WARE to a C2000Ware
# install to include it.
if [ -n "${C2000WARE:-}" ]; then
    DRV="$C2000WARE/driverlib/f28p55x/driverlib"
    DRVINCS="-I$DRV \
        -I$C2000WARE/device_support/f28p55x/common/include \
        -I$C2000WARE/device_support/f28p55x/headers/include"
    for p in "ti-c2000-aes:--define=WOLF_CRYPTO_CB --define=WOLFSSL_C2000_AES" \
             "ti-c2000-entropy:--define=WOLFSSL_C2000_ENTROPY"; do
        f=${p%%:*}
        d=${p#*:}
        printf 'CC  port/ti/%s.c ... ' "$f"
        if "$CL" $CFLAGS $INCS $DRVINCS $d \
                --compile_only --skip_assembler \
                --asm_directory="$OUT" --obj_directory="$OUT" \
                "$WOLFROOT/wolfcrypt/src/port/ti/$f.c" \
                > "$OUT/$f.log" 2>&1; then
            echo "ok"
        else
            echo "FAIL"
            cat "$OUT/$f.log"
            rc=1
        fi
    done
else
    echo "SKIP port/ti/ti-c2000-*.c (set C2000WARE to include them)"
fi

if [ "$rc" -eq 0 ]; then
    echo "TI C2000 compile-only guard: PASS"
else
    echo "TI C2000 compile-only guard: FAIL" >&2
fi
exit "$rc"