#!/bin/bash
set -e

# Проверка root
if [ "$EUID" -ne 0 ]; then
    echo "ERROR: run with sudo"
    exit 1
fi

SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"

echo "[1/4] Installing script to /usr/local/bin/ensure_dns.sh"
cp "$SCRIPT_DIR/ensure_dns.sh" /usr/local/bin/ensure_dns.sh
chmod +x /usr/local/bin/ensure_dns.sh
chown root:wheel /usr/local/bin/ensure_dns.sh

echo "[2/4] Installing LaunchDaemon"
cp "$SCRIPT_DIR/com.user.dnsleak-guard.plist" /Library/LaunchDaemons/
chown root:wheel /Library/LaunchDaemons/com.user.dnsleak-guard.plist
chmod 644 /Library/LaunchDaemons/com.user.dnsleak-guard.plist

echo "[3/4] Loading LaunchDaemon"
launchctl unload /Library/LaunchDaemons/com.user.dnsleak-guard.plist 2>/dev/null || true
launchctl load /Library/LaunchDaemons/com.user.dnsleak-guard.plist

echo "[4/4] Verifying"
sleep 2
if launchctl list | grep -q "com.user.dnsleak-guard"; then
    echo "✅ dnsleak-guard installed and running"
    echo "   Logs: /tmp/dnsleak-guard.log"
    echo "   Stop: sudo launchctl unload /Library/LaunchDaemons/com.user.dnsleak-guard.plist"
else
    echo "❌ Failed to load daemon. Check /tmp/dnsleak-guard.err"
    exit 1
fi