#!/bin/sh
set -eu

QZ_DIR="$HOME/Library/Application Support/qz"
LEAF_URL="https://clicka.one/qz/digital-certificate.txt"
ROOT_URL="https://clicka.one/qz/clicka-qz-root-ca.crt"
LEAF_PATH="$QZ_DIR/clicka-qz-digital-certificate.txt"
ROOT_PATH="$QZ_DIR/clicka-qz-root-ca.crt"
ALLOWED_PATH="$QZ_DIR/allowed.dat"
FINGERPRINT="22d0c7aed81d0d818aa56d8dc98a7a9c48b33055"

mkdir -p "$QZ_DIR"
curl -fsSL "$LEAF_URL" -o "$LEAF_PATH"
curl -fsSL "$ROOT_URL" -o "$ROOT_PATH"

if [ -f "$ALLOWED_PATH" ]; then
  cp "$ALLOWED_PATH" "$ALLOWED_PATH.bak.$(date +%Y%m%d%H%M%S)"
fi

TMP_PATH="$(mktemp)"
if [ -f "$ALLOWED_PATH" ]; then
  awk -F '\t' -v fp="$FINGERPRINT" 'NF && $1 != fp { print }' "$ALLOWED_PATH" > "$TMP_PATH"
fi
printf '%s\tclicka.one\tCLICKA ONE\t2026-06-26 22:27:14\t2036-06-23 22:27:14\ttrue\r\n' "$FINGERPRINT" >> "$TMP_PATH"
mv "$TMP_PATH" "$ALLOWED_PATH"

osascript -e 'quit app "QZ Tray"' >/dev/null 2>&1 || true
sleep 2
open -a "QZ Tray" >/dev/null 2>&1 || true

printf '%s\n' "Clicka Print trust setup finished."