#!/usr/bin/env bash
# Public HTTPS bootstrap for the pinned release; contains no owner secrets.
set -euo pipefail
test "$(id -u)" = 0 || { echo 'Запуск: curl -fsSL https://nodekit.ormynd.io/install.sh | sudo bash'; exit 1; }
umask 077
TMP=$(mktemp -d)
trap 'rm -rf "$TMP"' EXIT
FILE=shinzo-tool-20261022-v4.tar.gz
SHA=244db1d40ffb91fd5ec965971a7a035808a9affc3fe7ab6b950a0af0d289fb2d
curl --proto '=https' --tlsv1.2 -fSL --retry 3 \
  "https://nodekit.ormynd.io/$FILE" -o "$TMP/$FILE"
printf '%s  %s\n' "$SHA" "$TMP/$FILE" | sha256sum -c -
tar -xzf "$TMP/$FILE" -C "$TMP"
bash "$TMP/shinzo-tool/install.sh"
