#!/bin/sh
if [[ $1 == "" ]]; then
        echo "First argument is empty !"
        echo "Type help for more information"
        exit 1
fi

if [[ $1 == "help" ]]; then
        echo "There is help but more information is available at github.com/mattchis/rmmagent-macos"
        echo ""
        echo "List of INSTALL/UPDATE argument (no argument name):"
        echo "Arg 1: 'install' or 'update'"
        echo "Arg 2: System type 'amd64' 'arm64'"
        echo "Arg 3: Mesh agent URL"
        echo "Arg 4: API URL"
        echo "Arg 5: Client ID"
        echo "Arg 6: Site ID"
        echo "Arg 7: Auth Key"
        echo "Arg 8: Agent Type 'server' or 'workstation'"
        echo ""
        echo "List of UNINSTALL argument (no argument name):"
        echo "Arg 1: 'uninstall'"
        echo "Arg 2: Mesh agent FQDN (i.e. mesh.domain.com)"
        echo "Arg 3: Mesh agent id (The id needs to have single quotes around it)"
        echo ""
        echo "Only argument 1 is needed for update"
        echo ""
        exit 0
fi

if [[ $1 != "install" && $1 != "update" && $1 != "uninstall" ]]; then
        echo "First argument can only be 'install' or 'update' or 'uninstall' !"
        echo "Type help for more information"
        exit 1
fi

if [[ $1 == "install" && $2 == "" ]]; then
        echo "Argument 2 (System type) is empty !"
        echo "Type help for more information"
        exit 1
fi

if [[ $1 == "install" && $2 != "amd64" && $2 != "arm64" ]]; then
        echo "This argument can only be 'amd64' 'arm64' !"
        echo "Type help for more information"
        exit 1
fi

if [[ $1 == "install" && $3 == "" ]]; then
        echo "Argument 3 (Mesh agent URL) is empty !"
        echo "Type help for more information"
        exit 1
fi

if [[ $1 == "install" && $4 == "" ]]; then
        echo "Argument 4 (API URL) is empty !"
        echo "Type help for more information"
        exit 1
fi

if [[ $1 == "install" && $5 == "" ]]; then
        echo "Argument 5 (Client ID) is empty !"
        echo "Type help for more information"
        exit 1
fi

if [[ $1 == "install" && $6 == "" ]]; then
        echo "Argument 6 (Site ID) is empty !"
        echo "Type help for more information"
        exit 1
fi

if [[ $1 == "install" && $7 == "" ]]; then
        echo "Argument 7 (Auth Key) is empty !"
        echo "Type help for more information"
        exit 1
fi

if [[ $1 == "install" && $8 == "" ]]; then
        echo "Argument 8 (Agent Type) is empty !"
        echo "Type help for more information"
        exit 1
fi

if [[ $1 == "install" && $8 != "server" && $8 != "workstation" ]]; then
        echo "First argument can only be 'server' or 'workstation' !"
        echo "Type help for more information"
        exit 1
fi

## Setting var for easy scription
system=$2
mesh_url=$3
rmm_url=$4
rmm_client_id=$5
rmm_site_id=$6
rmm_auth=$7
rmm_agent_type=$8

go_url_amd64="https://go.dev/dl/go1.20.2.darwin-amd64.pkg"
go_url_arm64="https://go.dev/dl/go1.20.2.darwin-arm64.pkg"

function go_install() {
        ## Installing golang
        case $system in
        amd64)
          sudo curl -L -o /tmp/golang.pkg $go_url_amd64
        ;;
        arm64)
          sudo curl -L -o /tmp/golang.pkg $go_url_arm64
        ;;
        esac
        
        sudo mkdir /usr/local/go
        sudo installer -pkg /tmp/golang.pkg -target /usr/local/go
        sudo rm /tmp/golang.pkg

        source /etc/profile

        echo "Golang Install Done !"
}

function install_mesh() {
        ## Installing mesh agent
        sudo curl -L -o /tmp/meshagent $mesh_url
        sudo chmod +x /tmp/meshagent
        sudo mkdir /opt/tacticalmesh
        sudo /tmp/meshagent -install --installPath="/opt/tacticalmesh"
        sudo rm /tmp/meshagent
        sudo rm /tmp/meshagent.msh
}

function getCSREQBlob(){
    # Sign the app
    sudo codesign --detached /opt/tacticalmesh/meshagent.sig -s - /opt/tacticalmesh/meshagent

    # Get the requirement string from codesign
    req_str=$(sudo codesign -d -r- --detached /opt/tacticalmesh/meshagent.sig /opt/tacticalmesh/meshagent 2>&1 | awk -F ' => ' '/designated/{print $2}')
    
    # Convert the requirements string into it's binary representation
    # csreq requires the output to be a file so we just throw it in /tmp
    echo "$req_str" | sudo csreq -r- -b /tmp/csreq.bin
    
    # Convert the binary form to hex, and print it nicely for use in sqlite
    req_hex="X'$(sudo xxd -p /tmp/csreq.bin | tr -d '\n')'"
    
    echo "$req_hex"
    
    # Remove csqeq.bin
    sudo rm -f "/tmp/csreq.bin"
}

function agent_compile() {
        ## Compiling and installing tactical agent from github
        echo "Agent Compile begin"
        sudo curl -L -o /tmp/rmmagent.zip https://github.com/amidaware/rmmagent/archive/refs/heads/master.zip
        sudo unzip /tmp/rmmagent.zip -d /tmp/
        sudo rm /tmp/rmmagent.zip
        case $system in
        amd64)
          sudo /bin/sh -c 'cd /tmp/rmmagent-master && env CGO_ENABLED=0 GOOS=darwin GOARCH=amd64 go build -ldflags "-s -w" -o /tmp/temp_rmmagent'
        ;;
        arm64)
          sudo /bin/sh -c 'cd /tmp/rmmagent-master && env CGO_ENABLED=0 GOOS=darwin GOARCH=arm64 go build -ldflags "-s -w" -o /tmp/temp_rmmagent'
        ;;
        esac
        
        sudo cd /tmp
        sudo rm -Rf /tmp/rmmagent-master
}

function install_agent() {
        sudo cp /tmp/temp_rmmagent /usr/local/bin/rmmagent
        sudo /tmp/temp_rmmagent -m install -meshdir /opt/tacticalmesh -api $rmm_url -client-id $rmm_client_id -site-id $rmm_site_id -agent-type $rmm_agent_type -auth $rmm_auth
        sudo rm /tmp/temp_rmmagent
}

function update_agent() {
        sudo launchctl unload /Library/LaunchDaemons/tacticalagent.plist

        sudo cp /tmp/temp_rmmagent /opt/tacticalagent/tacticalagent
        sudo rm /tmp/temp_rmmagent

        sudo launchctl load -w /Library/LaunchDaemons/tacticalagent.plist
}

function config_securityandprivacy () {
        # Adding permissions to macOS to allow Accessibility, Screen Capture, and All File Access to the meshagent
        echo "Applying Security and Privacy Exceptions"
        req_hex="$(getCSREQBlob)"
        sudo sqlite3 /Library/Application\ Support/com.apple.TCC/TCC.db "REPLACE INTO access VALUES('kTCCServiceAccessibility','/opt/tacticalmesh/meshagent',1,2,4,1,$req_hex,NULL,0,NULL,NULL,0,NULL);"
        sudo sqlite3 /Library/Application\ Support/com.apple.TCC/TCC.db "REPLACE INTO access VALUES('kTCCServiceScreenCapture','/opt/tacticalmesh/meshagent',1,2,4,1,$req_hex,NULL,0,NULL,NULL,0,NULL);"
        sudo sqlite3 /Library/Application\ Support/com.apple.TCC/TCC.db "REPLACE INTO access VALUES('kTCCServiceSystemPolicyAllFiles','/opt/tacticalmesh/meshagent',1,2,4,1,$req_hex,NULL,0,NULL,NULL,0,NULL);"
}

function uninstall_agent() {
        sudo launchctl unload /Library/LaunchDaemons/tacticalagent.plist
        sudo rm /Library/LaunchDaemons/tacticalagent.plist
        sudo rm -Rf /opt/tacticalagent/
        sudo rm /etc/tacticalagent
}

function uninstall_mesh() {
        sudo launchctl unload /Library/LaunchDaemons/meshagent.plist
        sudo /opt/tacticalmesh/meshagent -fulluninstall
        rm -Rf /opt/tacticalmesh
        sudo sqlite3 /Library/Application\ Support/com.apple.TCC/TCC.db "delete from access where client='/opt/tacticalmesh/meshagent';"
}

case $1 in
install)
        go_install
        install_mesh
        agent_compile
        install_agent
        config_securityandprivacy
        echo "Tactical Agent Install is done"
        exit 0;;
update)
        go_install
        agent_compile
        update_agent
        config_securityandprivacy
        echo "Tactical Agent Update is done"
        exit 0;;
uninstall)
        uninstall_agent
        uninstall_mesh
        echo "Tactical Agent Uninstall is done"
        echo "You may need to manually remove the agents orphaned connections on TacticalRMM and MeshCentral"
        exit 0;;
esac