@echo off
REM Bristol IT — Tailscale enrollment wrapper.
REM Re-elevates to admin if needed, then runs the PowerShell installer.
REM Employees only need to double-click this file.

setlocal

REM === Re-launch as Administrator if not already ===
net session >nul 2>&1
if %errorlevel% neq 0 (
    echo Requesting administrator access...
    powershell -NoProfile -Command "Start-Process -FilePath '%~f0' -Verb RunAs"
    exit /b
)

cls
echo ========================================
echo   Bristol Windows - IT Remote Setup
echo ========================================
echo.
echo This will install Tailscale, the secure remote-access tool
echo Devin uses to help with IT issues. It runs in the background
echo and uses very little memory or bandwidth.
echo.
echo You can remove it any time from Settings ^> Apps.
echo.
echo Press any key to continue (or close this window to cancel)...
pause >nul

REM === Run the PowerShell installer ===
REM ExecutionPolicy Bypass is scoped to this invocation only.
powershell -NoProfile -ExecutionPolicy Bypass -Command "iwr https://bristol-it.pages.dev/install-tailscale.ps1 -UseBasicParsing | iex"

if %errorlevel% neq 0 (
    echo.
    echo ========================================
    echo Setup did not complete cleanly.
    echo Please send this window's contents to Devin.
    echo ========================================
    pause
    exit /b 1
)

echo.
echo ========================================
echo  Setup complete. You can close this window.
echo ========================================
pause
endlocal