#!/usr/bin/env bash
set -euo pipefail

# The management agent maintains this marker after successful activation.
# Do not interrupt already-enrolled users on every desktop login.
if [ -f /var/lib/brz-healthos/enrolled ]; then
  exit 0
fi
status=$(pkexec /usr/local/sbin/brz-health-agent enroll-status 2>&1 || true)
zenity --info --title='BRZ HealthOS Enrollment' --width=500 --text="<big><b>BRZ HealthOS device enrollment</b></big>\n\n$status\n\nAn administrator can claim this code in BRZ HealthOS Control Center."
