#!/bin/bash
set -e
echo "=== 1. manager systemd unit 现状 ==="
UNIT=$(systemctl list-units --all --no-legend | grep -E "friend-cluster|friend-manager" | awk '{print $1}' | head -1)
echo "UNIT=$UNIT"
systemctl cat "$UNIT" 2>/dev/null | tail -25 || cat /etc/systemd/system/$UNIT

echo ""
echo "=== 2. 给 manager 注入 controller artifact trust key ==="
mkdir -p /etc/systemd/system/${UNIT}.d
cat > /etc/systemd/system/${UNIT}.d/trust-key.conf <<'EOF'
[Service]
Environment="FRIEND_CLUSTER_CONTROLLER_ARTIFACT_TRUST_KEY=release-2026=qEvynp6sTeb1a5iMkorOdhjVN0tznJIPd/MGTk/+PsE="
EOF
systemctl daemon-reload
echo DROPIN_OK

echo ""
echo "=== 3. 重启 manager ==="
systemctl restart "$UNIT"
sleep 8
pgrep -f "friend-cluster" > /dev/null && echo MANAGER_RUNNING || echo MANAGER_NOT_RUNNING

echo ""
echo "=== 4. 验证 manager 进程环境变量 ==="
MPID=$(pgrep -f "/opt/friend-cluster/bin/friend-cluster" | head -1)
[ -z "$MPID" ] && MPID=$(pgrep -f "friend-cluster --dns-listen" | head -1)
tr '\0' '\n' < /proc/$MPID/environ | grep TRUST || echo ENV_MISSING

echo ""
echo "=== 5. 验证 manager API 健康 ==="
sleep 5
curl -sS --max-time 10 http://127.0.0.1:19088/healthz | head -c 100
echo
echo DONE