#!/bin/mkpkg
# description: Mozilla Firefox browser
# url: https://www.mozilla.org/firefox/

name=firefox
version=153.3.0esr
_version=153.3.0
_patch=153esr-patches-03
release=1
depends=(gtk3 nss nspr libvpx libwebp pixman libffi alsa-lib ffmpeg dbus)
makedeps=(rust cbindgen nodejs python3 nasm)
source=(
  https://ftp.mozilla.org/pub/$name/releases/$version/source/$name-$version.source.tar.xz
  https://dev.gentoo.org/~juippis/mozilla/patchsets/firefox-$_patch.tar.xz
  firefox.desktop
  rawnix.js
  policies.json
)

sha256sums=(
    "69f1335e78d2a340fc13fcf265c0a72bdce2df8774c9d4d49ee77d1726236df5"
    "39efa65af2e5eecac09745b8d2b469a6137365a786d118100d2eb1dc28288e49"
    "a092fddc62bf5bff0c0f7891f59278463fa9b6ec24e9d811e49cd10b2282bdee"
    "bab0f8bba99a0f6b2a129a0767168e6af7462ccdfdf7f610690fefb8f25f06b8"
    "14dafc23074acb8d0cb8b3f9657c80b6d172da1f5711ef1a547301d458cd9004"
)

patch() {
  cd $name-$_version

  # https://dev.gentoo.org/~juippis
  for p in "$SRC"/firefox-patches/*.patch; do
    [ -f "$p" ] && patch -p1 -i "$p"
  done

  # musl: allow select() syscall in all sandbox policies
  awk '/CASES_FOR_poll:/{print; print "#ifdef __NR_select"; print "      case __NR_select:"; print "#endif"; next}1' \
    security/sandbox/linux/SandboxFilter.cpp > SandboxFilter.tmp
  mv SandboxFilter.tmp security/sandbox/linux/SandboxFilter.cpp

  # bindgen: don't panic on unresolved field types when computing union layout (libclang 23)
  sed -i 's/ctx\.resolve_type(inner)\.layout(ctx)/ctx.resolve_item_fallible(inner)?.kind().as_type()?.layout(ctx)/' \
    third_party/rust/bindgen/ir/ty.rs
  sed -i 's/ctx\.resolve_type(data\.ty)\.layout(ctx)/ctx.resolve_item_fallible(data.ty)?.kind().as_type()?.layout(ctx)/' \
    third_party/rust/bindgen/ir/comp.rs
  sed -i 's/"files":{[^}]*}/"files":{}/' third_party/rust/bindgen/.cargo-checksum.json

}

build() {
  cd $name-$_version

  export MACH_BUILD_PYTHON_NATIVE_PACKAGE_SOURCE=none
  export MOZBUILD_STATE_PATH="$PWD"/mozbuild
  export MOZ_NOSPAM=1
  export SHELL=/bin/bash

  # Toolchain
  export CC=clang CXX=clang++
  export AR=llvm-ar NM=llvm-nm RANLIB=llvm-ranlib
  export AS=clang

  # Flags
  export CFLAGS="$CFLAGS -w"
  export CXXFLAGS="$CXXFLAGS -w"
  export LDFLAGS="$LDFLAGS -Wl,-rpath=/usr/lib/firefox,--enable-new-dtags"
  export MOZ_DEBUG_FLAGS=-g0
  export CXXSTDLIB=c++
  export LIBCLANG_PATH=/usr/lib
  export MOZ_MAKE_FLAGS="-j$(nproc)"

  # Rustc wrapper: force -crt-static so build scripts can dlopen libclang
  mkdir -p "$PWD"/rustc-wrap
  printf '#!/bin/sh\nexec /usr/bin/rustc -Ctarget-feature=-crt-static -Cdebuginfo=0 "$@"\n' \
    > "$PWD"/rustc-wrap/rustc
  chmod +x "$PWD"/rustc-wrap/rustc
  export PATH="$PWD/rustc-wrap:$PATH"

  cat > .mozconfig << EOF
mk_add_options MOZ_OBJDIR=@TOPSRCDIR@/firefox-shared
unset MOZ_TELEMETRY_REPORTING

ac_add_options --prefix=/usr
ac_add_options --libdir=/usr/lib
ac_add_options --host=x86_64-unknown-linux-musl
ac_add_options --target=x86_64-unknown-linux-musl

ac_add_options --enable-release
ac_add_options --enable-optimize
ac_add_options --enable-strip
ac_add_options --enable-install-strip
ac_add_options --enable-official-branding
ac_add_options --enable-application=browser
ac_add_options --enable-audio-backends=alsa
ac_add_options --enable-dbus
ac_add_options --enable-rust-simd
ac_add_options --enable-default-toolkit=cairo-gtk3-wayland-only

# System libraries
ac_add_options --with-system-ffi
ac_add_options --with-system-jpeg
ac_add_options --with-system-libvpx
ac_add_options --with-system-nspr
ac_add_options --with-system-nss
ac_add_options --with-system-pixman
ac_add_options --without-system-png
ac_add_options --with-system-webp
ac_add_options --with-system-zlib
ac_add_options --without-wasm-sandboxed-libraries

# No Mozilla/Google service keys
ac_add_options --without-mozilla-api-keyfile
ac_add_options --without-google-location-service-api-keyfile
ac_add_options --without-google-safebrowsing-api-keyfile

# Disable unused features
ac_add_options --disable-jemalloc
ac_add_options --disable-elf-hack
ac_add_options --disable-tests
ac_add_options --disable-updater
ac_add_options --disable-crashreporter
ac_add_options --disable-debug
ac_add_options --disable-debug-symbols
ac_add_options --disable-profiling
ac_add_options --disable-necko-wifi
ac_add_options --disable-webspeech
ac_add_options --disable-accessibility
ac_add_options --disable-parental-controls
ac_add_options --disable-default-browser-agent
ac_add_options --disable-backgroundtasks
ac_add_options --disable-system-extension-dirs
ac_add_options --disable-vtune
ac_add_options --disable-callgrind
ac_add_options --disable-eme
ac_add_options --without-onnx-runtime
EOF

  ./mach configure
  ./mach build

  DESTDIR="$PKG" ./mach install

  # Desktop integration
  install -Dm644 "$SRC"/firefox.desktop "$PKG"/usr/share/applications/firefox.desktop
  mkdir -p "$PKG"/usr/share/pixmaps
  ln -sf /usr/lib/firefox/browser/chrome/icons/default/default128.png \
         "$PKG"/usr/share/pixmaps/firefox.png

  # System-wide privacy prefs (default prefs, user-overridable)
  install -Dm644 "$SRC"/rawnix.js \
    "$PKG"/usr/lib/firefox/browser/defaults/preferences/rawnix.js

  # Enterprise policies (hard kills + locked prefs)
  install -Dm644 "$SRC"/policies.json \
    "$PKG"/usr/lib/firefox/distribution/policies.json

  # Cleanup
  rm -f "$PKG"/usr/lib/firefox/firefox-bin
  rm -rf "$PKG"/usr/lib/firefox/browser/features
  rm -f "$PKG"/usr/lib/firefox/removed-files
}

signify() {
    untrusted comment: public key
    RWTZ9IduCSQ/mL8337TEUinPwT92xFEUpD92hkS7IxcOnzTt9QdpohT3
}

# vim: filetype=sh