#!/bin/bash
# =============================================================================
# RT Medical VPN — instalador macOS de uma linha.
#
#   curl -fsSL https://pkg.rtmedical.ai/api/packages/apps/generic/rtmedical-vpn-clients/0.73.0/install-macos.sh | sudo bash
#
# Baixa o .pkg branded da RT (Gitea) e instala. Se o pkg nao estiver assinado/
# notarizado, remove o atributo de quarentena antes de instalar.
# =============================================================================
set -euo pipefail
GITEA="${GITEA_BASE:-https://pkg.rtmedical.ai}"
OWNER="${GITEA_OWNER:-apps}"
PKG_NAME="rtmedical-vpn-clients"
VER="${VERSION:-0.73.0}"

[ "$(id -u)" = "0" ] || { echo "Rode com sudo."; exit 1; }

pkg="$(mktemp -d)/RTMedicalVPN-$VER.pkg"
url="$GITEA/api/packages/$OWNER/generic/$PKG_NAME/$VER/RTMedicalVPN-$VER.pkg"
echo ">> baixando $url"
curl -fSL -o "$pkg" "$url"
xattr -dr com.apple.quarantine "$pkg" 2>/dev/null || true

echo ">> instalando..."
installer -pkg "$pkg" -target /
echo
echo "RT Medical VPN instalado. Abra 'RT Medical VPN' em Aplicativos (login via Keycloak)."