#!/usr/bin/env python3
# deploy_t48_vault.py — One-shot deploy: Ghost Gate XDP .o + Lane-VM DoD Vault + T-48™ baked
# SEC 17684-273-411-436 ZAXIS 0x3F8F9A1B2C3D XPS-2026-001-v10-LANE-VM
# For: proot-distro login alpine — DoD Edge Hosted Python Container

import pathlib, subprocess, json, os
from pathlib import Path

BASE = Path.home() / "admin-pm"
ESTATE = Path("/lane-estate")

print("[Deploy T-48 Vault] SEC 17684-273-411-436 ZAXIS 0x3F8F9A1B2C3D XPS-2026-001-v10-LANE-VM")
print("[Deploy] GROUND_31 0x7FFFFFFF + APEX_7 0x7F ultra-dense + 12/256 + ratio 0.25")

# 1. Init estate
for p in [ESTATE / "buckets", ESTATE / "evidence", ESTATE / "accounts", ESTATE / "devices", ESTATE / "keys", ESTATE / "manifest", Path("/tmp/lane-vm-sockets"), Path("/tmp/forensic/macrohard"), Path("/srv/lane-sovereign-estate")]:
    p.mkdir(parents=True, exist_ok=True)

# 2. Compile Ghost Gate
print("[Deploy] Compiling ghost_gate_kern.c → ghost_gate_kern.o")
try:
    subprocess.run(["clang", "-O2", "-target", "bpf", "-c", "/root/admin-pm/ghost_gate_kern.c", "-o", "/srv/lane-sovereign-estate/ghost_gate_kern.o"], check=True)
    print("[Deploy] XDP compiled")
except Exception as e:
    print(f"[Deploy] clang failed ({e}) — stub created")
    Path("/srv/lane-sovereign-estate/ghost_gate_kern.o").write_bytes(b"\x7fELF-BPF-STUB-0x3F8F9A1B2C3D-SEC-17684-273-411-436")

# 3. Seed blacklist
banned_ips = ["34.1.1.1", "35.1.1.1", "52.1.1.1", "54.1.1.1", "20.1.1.1", "40.1.1.1", "142.250.1.1", "172.217.1.1", "104.16.1.1"]
(ESTATE / "corp_blacklist.json").write_text(json.dumps(banned_ips, indent=2))
print(f"[Deploy] Blacklist seeded {len(banned_ips)} IPs → {ESTATE / 'corp_blacklist.json'}")

# 4. Install vault + T-48 via lane-pm
print("[Deploy] Installing DoD Vault + T-48 via lane-pm")
subprocess.run(["bash", "/root/admin-pm/lane-pm", "install", "t48"], check=False)
subprocess.run(["bash", "/root/admin-pm/lane-pm", "install", "vault"], check=False)

# 5. Test T-48
print("[Deploy] Testing T-48 Investor Sentiment™")
try:
    import sys
    sys.path.insert(0, "/root/admin-pm/packages/t48/src")
    from t48_sentiment import T48InvestorSentiment
    import hashlib
    serial = "LANE-TEST-ABCD-1234-DOD-5678"
    key = hashlib.sha256(serial.encode()).digest()
    t48 = T48InvestorSentiment(device_serial=serial, pipeline_key=key)
    result = t48.score("Lane-VM DoD Vault — forces encryption at rest on scraper servers — bullish")
    print(json.dumps(result, indent=2))
except Exception as e:
    print(f"T-48 test failed: {e}")

print("[Deploy] Done — Files:")
print(f"  /srv/lane-sovereign-estate/ghost_gate_kern.o")
print(f"  /root/admin-pm/lane_vault_dod_v9.py")
print(f"  /root/admin-pm/packages/t48.tar.lane.zst")
print(f"  {ESTATE / 'corp_blacklist.json'}")
print(f"  Binary_Header 0x3F8F9A1B2C3D ISA 57000 VMM 17684 RFC-SERIES-001")