#!/usr/bin/env bash
set -euo pipefail

BASE_URL="https://secbuildon.technova-ks.com"
LICENSE_KEY=""

echo "Installing secbuildon agent from $BASE_URL ..."
ARCH="$(uname -m)"
case "$ARCH" in
  x86_64) BIN_ARCH="amd64" ;;
  aarch64|arm64) BIN_ARCH="arm64" ;;
  *) echo "Unsupported architecture: $ARCH. Please build from source: https://github.com/elvisburrniku/Secbuildon" >&2; exit 1 ;;
esac

TMPDIR="$(mktemp -d)"
if curl -fsSL "$BASE_URL/download/secbuildon-linux-$BIN_ARCH" -o "$TMPDIR/secbuildon.tar.gz"; then
  tar -xzf "$TMPDIR/secbuildon.tar.gz" -C "$TMPDIR" secbuildon
  install -m 0755 "$TMPDIR/secbuildon" /usr/local/bin/secbuildon
  rm -rf "$TMPDIR"
else
  rm -rf "$TMPDIR"
  echo "Prebuilt binary not available; build from source instead:" >&2
  echo "  git clone https://github.com/elvisburrniku/Secbuildon && cd Secbuildon/secbuildon && go build -o /usr/local/bin/secbuildon ./cmd/secbuildon" >&2
  exit 1
fi

if [ -n "$LICENSE_KEY" ]; then
  secbuildon init --license-key "$LICENSE_KEY" --server "$BASE_URL"
else
  echo "No license key provided; run 'secbuildon init --license-key <KEY> --server $BASE_URL' manually,"
  echo "or 'secbuildon init --local-only' to run without a subscription."
fi

echo "Run 'sudo secbuildon install' to start protecting this server 24/7."