#!/bin/bash
# bootstrap.sh — 由零開始第一步：拉齊 kit 檔 ＋ 硬驗 sha256 ＋ 才跑 setup。
# 用法：bash bootstrap.sh [target_dir]      （預設 $HOME/workspace/arena-system/persistent）
set -euo pipefail
BASE="${KIT_BASE_URL:-http://149.118.48.126:8080/persistent}"
DEST="${1:-$HOME/workspace/arena-system/persistent}"
mkdir -p "$DEST/scripts"
FILES="README.txt VERSIONS.txt requirements.txt setup.sh start-all.sh verify-workshop.sh \
env.sh.example seats.conf.example vpn-proxies.conf.example start-watcher.sh vnc-keep.sh \
place-windows.sh install-boot.sh hardening-apply.sh v093-kit-hardening.patch \
v093-display-dynamic.patch v093-hardening+display.patch \
v094-hardening.patch v094-display-dynamic.patch v094-hardening+display.patch \
v094-windowname.patch v094-hardening+display+windowname.patch \
ssh-newserver.sh vnc-tunnel-keep.sh sha256sums.txt scripts/watcher.py"   # 呢個清單必須同 sha256sums.txt 覆蓋嘅檔一致（少一件＝sha256sum -c 會 rc≠0）
echo "=== 下載 $(( $(echo "$FILES" | wc -w) )) 件去 $DEST ==="
for f in $FILES; do
  curl -fsS -o "$DEST/$f" "$BASE/$f"
done
echo "=== sha256sum -c（來源：$BASE/sha256sums.txt，已喺上面FILES清單內下載）==="
( cd "$DEST" && sha256sum -c sha256sums.txt )
echo "=== 驗簽全過 → 跑 setup.sh ==="
bash "$DEST/setup.sh"