#!/usr/bin/env bash
# ONE-SHOT guest prep (idempotent; safe to re-run). Run ON ultix-streaming:
#   sudo ~/projects/ultix/1-guest-prep.sh
# 1. All staged configs (docker restarts once) + sddm autologin.
# 2. Human-tier slices for the two human accounts (KDE/CAD/video priority).
# NO storage operations (root growth is manual: GROW-ROOT-RUNBOOK.md).
set -euo pipefail
[ "$(id -u)" = 0 ] || { echo "run with sudo" >&2; exit 1; }
DIR=$(cd "$(dirname "$0")" && pwd)

echo "== [1/3] all staged configs =="
RUN=1 CONFIRM=1 bash "$DIR/staged/apply-guest.sh" all

echo "== [2/3] human-tier slices (CPUWeight 600, no cpu pinning, 12G/16G) =="
RUN=1 bash "$DIR/staged/mkacct.sh" reachableceo 1001 12G 16G all human
RUN=1 bash "$DIR/staged/mkacct.sh" reachableceo-offstage 1010 12G 16G all human

echo "== [3/3] done =="
echo "GUEST READY. Next, the host one-shot (safe to run from THIS VM; the"
echo "VM bounce is detached on the host and survives your ssh dying):"
echo "  ssh root@pfv-tsys5.knel.net 'bash -s -- --go --with-vm-restart' < ~/projects/ultix/2-host-one-shot.sh"
echo
echo "Root growth to ~505G stays MANUAL: ~/projects/ultix/GROW-ROOT-RUNBOOK.md"