# XIAOMI / REDMI / POCO — HyperOS SAFE (Android 14-16 / OS2-OS3)
# Modo suspend-first: NAO quebra boot, Play Store, internet, reboot.
# Validado em: Redmi 2510DRA23L (spinel) HyperOS OS3.0 Android 16 — 2026-07-25
#
# NUNCA disable system pkgs neste nivel sem probe.
# NUNCA tocar: com.android.vending / GMS / SystemUI / miui.home

shell pm enable --user 0 com.android.vending
shell cmd package unsuspend com.android.vending
shell pm unsuspend com.android.vending

# --- OTA core ---
shell am force-stop com.android.updater
shell cmd package suspend com.android.updater
shell cmd jobscheduler cancel -u 0 com.android.updater
shell cmd appops set --user 0 com.android.updater RUN_IN_BACKGROUND deny
shell cmd appops set --user 0 com.android.updater RUN_ANY_IN_BACKGROUND deny
shell cmd appops set --user 0 com.android.updater WAKE_LOCK deny
shell cmd appops set --user 0 com.android.updater REQUEST_INSTALL_PACKAGES deny
shell cmd appops set --user 0 com.android.updater START_FOREGROUND deny
shell cmd appops set --user 0 com.android.updater POST_NOTIFICATION deny
shell cmd netpolicy set restrict-background true com.android.updater

shell am force-stop com.xiaomi.mipicks
shell cmd package suspend com.xiaomi.mipicks
shell cmd jobscheduler cancel -u 0 com.xiaomi.mipicks
shell cmd appops set --user 0 com.xiaomi.mipicks RUN_IN_BACKGROUND deny
shell cmd appops set --user 0 com.xiaomi.mipicks RUN_ANY_IN_BACKGROUND deny
shell cmd appops set --user 0 com.xiaomi.mipicks POST_NOTIFICATION deny
shell cmd appops set --user 0 com.xiaomi.mipicks START_FOREGROUND deny
shell cmd netpolicy set restrict-background true com.xiaomi.mipicks

shell am force-stop com.xiaomi.discover
shell cmd package suspend com.xiaomi.discover
shell cmd jobscheduler cancel -u 0 com.xiaomi.discover
shell cmd appops set --user 0 com.xiaomi.discover RUN_IN_BACKGROUND deny
shell cmd appops set --user 0 com.xiaomi.discover RUN_ANY_IN_BACKGROUND deny
shell cmd appops set --user 0 com.xiaomi.discover POST_NOTIFICATION deny
shell cmd netpolicy set restrict-background true com.xiaomi.discover

shell am force-stop com.google.android.configupdater
shell cmd package suspend com.google.android.configupdater
shell cmd jobscheduler cancel -u 0 com.google.android.configupdater
shell cmd appops set --user 0 com.google.android.configupdater RUN_IN_BACKGROUND deny
shell cmd appops set --user 0 com.google.android.configupdater RUN_ANY_IN_BACKGROUND deny
shell cmd appops set --user 0 com.google.android.configupdater POST_NOTIFICATION deny
shell cmd netpolicy set restrict-background true com.google.android.configupdater

# --- OTA extras (ignorar erro se nao existir) ---
shell am force-stop com.miui.systemUpdatePlugin
shell cmd package suspend com.miui.systemUpdatePlugin
shell am force-stop com.miui.updater
shell cmd package suspend com.miui.updater
shell am force-stop com.xiaomi.updater
shell cmd package suspend com.xiaomi.updater
shell am force-stop com.google.android.gms.update
shell cmd package suspend com.google.android.gms.update
shell am force-stop com.google.mainline.go.telemetry
shell cmd package suspend com.google.mainline.go.telemetry
shell am force-stop com.google.mainline.go.primary
shell cmd package suspend com.google.mainline.go.primary
shell am force-stop com.wssyncmldm
shell cmd package suspend com.wssyncmldm
shell cmd appops set --user 0 com.wssyncmldm RUN_IN_BACKGROUND deny
shell am force-stop com.xiaomi.simactivate.service
shell cmd package suspend com.xiaomi.simactivate.service

# --- Settings OTA (so funciona com WRITE_SECURE_SETTINGS / Owner) ---
shell settings put global system_update_auto_download 0
shell settings put system system_update_auto_download 0
shell settings put global auto_update_system 0
shell settings put system auto_update_system 0
shell settings put secure ota_disable_automatic_update 1
shell settings put global ota_disable_automatic_update 1
shell settings put global software_updates_enabled 0
shell settings put global fota_disable 1
shell settings put global auto_update_app_via_wifi 0
shell settings put global pref_key_sys_app_auto_update 0

# --- Finance soft ---
shell am force-stop com.google.android.devicelockcontroller
shell cmd appops set --user 0 com.google.android.devicelockcontroller RUN_IN_BACKGROUND deny
shell cmd appops set --user 0 com.google.android.devicelockcontroller RUN_ANY_IN_BACKGROUND deny
shell cmd appops set --user 0 com.google.android.devicelockcontroller POST_NOTIFICATION deny
shell cmd appops set --user 0 com.google.android.devicelockcontroller START_FOREGROUND deny
shell cmd package suspend com.google.android.overlay.devicelockcontroller
shell pm uninstall -k --user 0 com.google.android.gms.supervision
shell cmd package suspend com.google.android.gms.supervision

# --- Ruido / ads (nao essencial) ---
shell am force-stop com.miui.analytics
shell cmd package suspend com.miui.analytics
shell cmd appops set --user 0 com.miui.analytics POST_NOTIFICATION deny
shell am force-stop com.miui.msa.global
shell cmd package suspend com.miui.msa.global
shell am force-stop com.xiaomi.glgm
shell cmd package suspend com.xiaomi.glgm
shell am force-stop com.xiaomi.payment
shell cmd package suspend com.xiaomi.payment
shell cmd appops set --user 0 com.xiaomi.payment POST_NOTIFICATION deny

# --- Trustonic Telecoms Client (Note 15 / Note 15C bloqueio financeira) ---
shell am force-stop com.trustonic.telecoms.standard.dlc
shell cmd package suspend com.trustonic.telecoms.standard.dlc
shell cmd appops set --user 0 com.trustonic.telecoms.standard.dlc RUN_IN_BACKGROUND deny
shell cmd appops set --user 0 com.trustonic.telecoms.standard.dlc RUN_ANY_IN_BACKGROUND deny
shell cmd appops set --user 0 com.trustonic.telecoms.standard.dlc POST_NOTIFICATION deny
shell cmd appops set --user 0 com.trustonic.telecoms.standard.dlc START_FOREGROUND deny
shell cmd netpolicy set restrict-background true com.trustonic.telecoms.standard.dlc
shell am force-stop com.trustonic.telecoms.client
shell cmd package suspend com.trustonic.telecoms.client
shell am force-stop com.trustonic.telecoms
shell cmd package suspend com.trustonic.telecoms
shell am force-stop com.trustonic.tbase
shell cmd package suspend com.trustonic.tbase

# --- Garantia Play Store no final ---
shell pm enable --user 0 com.android.vending
shell cmd package unsuspend com.android.vending
shell am force-stop com.android.updater
shell am force-stop com.xiaomi.mipicks
shell am force-stop com.xiaomi.discover
shell am force-stop com.google.android.configupdater
shell am force-stop com.google.android.devicelockcontroller
