#!/usr/bin/env bash
set -euo pipefail

REPO_URL="https://repo.exploit-intel.com"
KEYRING="/etc/apt/trusted.gpg.d/exploit-intel.gpg"
SOURCES="/etc/apt/sources.list.d/exploit-intel.sources"

# Detect suite
if [ -f /etc/os-release ]; then
    . /etc/os-release
    case "$ID" in
        ubuntu)
            case "$VERSION_CODENAME" in
                jammy|noble|plucky|questing) SUITE="$VERSION_CODENAME" ;;
                *) SUITE="noble" ;;
            esac
            ;;
        debian)
            case "$VERSION_CODENAME" in
                bookworm|trixie) SUITE="$VERSION_CODENAME" ;;
                *) SUITE="bookworm" ;;
            esac
            ;;
        kali)
            SUITE="kali-rolling"
            ;;
        *)
            echo "Unsupported distro: $ID"
            echo "Supported: Ubuntu (jammy/noble/plucky), Debian (bookworm/trixie), Kali"
            exit 1
            ;;
    esac
else
    echo "Cannot detect distro (no /etc/os-release)"
    exit 1
fi

echo "Detected: $ID ($SUITE)"

echo "Adding GPG key..."
curl -fsSL "$REPO_URL/public.key" | gpg --dearmor --yes -o "$KEYRING"

echo "Adding APT source..."
cat > "$SOURCES" <<SOURCES
Types: deb
URIs: $REPO_URL
Suites: $SUITE
Components: main
Signed-By: $KEYRING
SOURCES

echo "Updating package lists..."
apt-get update -qq

echo ""
echo "Done! You can now install packages:"
echo "  apt install eip-mcp"
echo "  apt install eip-search"