#!/usr/bin/env bash
set -euo pipefail

TENANT_ID="${TENANT_ID:-default}"
SERVER_URL="${SERVER_URL:-https://pmdefender.example.com}"
ENROLLMENT_TOKEN="${ENROLLMENT_TOKEN:-replace-with-token}"
INSTALL_ROOT="/Library/Application Support/PMDefender/Agent"
CONFIG_PATH="${INSTALL_ROOT}/agent.json"

sudo mkdir -p "${INSTALL_ROOT}"
sudo tee "${CONFIG_PATH}" >/dev/null <<JSON
{
  "tenant_id": "${TENANT_ID}",
  "server_url": "${SERVER_URL}",
  "enrollment_token": "${ENROLLMENT_TOKEN}",
  "telemetry": {
    "processes": true,
    "network": true,
    "files": true,
    "registry": false,
    "drivers": false
  },
  "response": {
    "isolate_host": true,
    "kill_process": true,
    "quarantine_file": true,
    "collect_forensics": true
  }
}
JSON

echo "PMDefender Agent bootstrap instalado en ${INSTALL_ROOT}"
echo "Tenant: ${TENANT_ID}"
echo "Consola: ${SERVER_URL}"
echo "Siguiente paso: desplegar el servicio firmado del agente y registrar el endpoint."