echo -e "${BLUE}"

cat << "EOF"

echo -e "${NC}"

if [ "$EUID" -ne 0 ]; then

echo -e "${RED}ERROR: This script must be run as root${NC}"

echo "Please run: sudo $0"

exit 1

fi

if [ -z "$mesh_URL" ]; then

echo -e "${RED}ERROR: mesh URL not provided${NC}"

echo "Usage: $0 --mesh-url https://mssp.hookprobe.com"

exit 1

fi

echo -e "${YELLOW}Checking mesh Cloud deployment...${NC}"

# Try to connect to mesh API

if ! curl -f -s -o /dev/null --connect-timeout 10 "${mesh_URL}/api/v1/health"; then

echo -e "${RED}✗ CRITICAL ERROR: mesh Cloud is NOT deployed or unreachable${NC}"

echo ""

echo "Validators CANNOT be installed without mesh Cloud infrastructure."

echo ""

echo "Required steps:"

echo " 1. Deploy mesh Cloud first: sudo ./install.sh --role cloud"

echo " 2. Verify mesh is running: ${mesh_URL}/api/v1/health"

echo " 3. Then retry validator installation"

echo ""

exit 1

fi

echo -e "${GREEN}✓ mesh Cloud is operational${NC}"

# Get mesh version

mesh_VERSION=$(curl -s "${mesh_URL}/api/v1/version" | jq -r '.version' 2>/dev/null || echo "unknown")

echo " mesh Version: ${mesh_VERSION}"

echo -e "${YELLOW}Checking hardware requirements...${NC}"

# CPU cores

CPU_CORES=$(nproc)

if [ "$CPU_CORES" -lt 4 ]; then

echo -e "${RED}✗ Insufficient CPU cores: ${CPU_CORES} (minimum: 4)${NC}"

exit 1

fi

echo -e "${GREEN}✓ CPU: ${CPU_CORES} cores${NC}"

# RAM

RAM_GB=$(free -g | awk '/^Mem:/{print $2}')

if [ "$RAM_GB" -lt 8 ]; then

echo -e "${RED}✗ Insufficient RAM: ${RAM_GB}GB (minimum: 8GB)${NC}"

exit 1

fi

echo -e "${GREEN}✓ RAM: ${RAM_GB}GB${NC}"

# Disk space

DISK_GB=$(df / | tail -1 | awk '{print int($4/1024/1024)}')

if [ "$DISK_GB" -lt 100 ]; then

echo -e "${YELLOW}⚠ Low disk space: ${DISK_GB}GB (recommended: 100GB+)${NC}"

else

echo -e "${GREEN}✓ Disk: ${DISK_GB}GB available${NC}"

fi

echo ""

echo -e "${BLUE}╔════════════════════════════════════════════════╗${NC}"

echo -e "${BLUE}║ KYC VERIFICATION REQUIRED FOR VALIDATORS ║${NC}"

echo -e "${BLUE}╚════════════════════════════════════════════════╝${NC}"

echo ""

echo "Validators require KYC (Know Your Customer) verification to ensure"

echo "network integrity and comply with security policies."

echo ""

read -p "Organization Name: " ORG_NAME

read -p "Contact Email: " KYC_EMAIL

read -p "Country: " COUNTRY

read -p "Geographic Region (e.g., us-east, eu-west): " GEO_REGION

echo ""

echo -e "${YELLOW}KYC Documentation:${NC}"

echo " Organization: ${ORG_NAME}"

echo " Email: ${KYC_EMAIL}"

echo " Country: ${COUNTRY}"

echo " Region: ${GEO_REGION}"

echo ""

read -p "Is this information correct? (yes/no): " CONFIRM

if [ "$CONFIRM" != "yes" ]; then

echo -e "${RED}KYC collection cancelled${NC}"

exit 1

fi

echo -e "${YELLOW}Generating hardware fingerprint...${NC}"

# Create fingerprint script

cat > /tmp/hw_fingerprint.py << 'HWFP_SCRIPT'

HW_FP_JSON=$(python3 /tmp/hw_fingerprint.py)

HW_FINGERPRINT=$(echo "$HW_FP_JSON" | jq -r '.fingerprint_id')

echo -e "${GREEN}✓ Hardware Fingerprint: ${HW_FINGERPRINT:0:32}...${NC}"

rm -f /tmp/hw_fingerprint.py

echo -e "${YELLOW}Registering validator with mesh...${NC}"

# Generate validator ID

VALIDATOR_ID="validator-$(uuidgen | cut -d'-' -f1)"

# Generate Ed25519 key pair

python3 << KEYGEN

PUBLIC_KEY=$(cat $CONFIG_DIR/validator_public_key.pem | grep -v "BEGIN\|END" | tr -d '\n')

# Get IP address

IP_ADDRESS=$(curl -s ifconfig.me)

# Register with mesh

REGISTRATION_DATA=$(cat <<EOF

RESPONSE=$(curl -s -X POST \

STATUS=$(echo "$RESPONSE" | jq -r '.status' 2>/dev/null || echo "error")

if [ "$STATUS" != "pending" ]; then

echo -e "${RED}✗ Registration failed${NC}"

echo "Response: $RESPONSE"

exit 1

fi

echo -e "${GREEN}✓ Validator registered (status: PENDING)${NC}"

echo " Validator ID: ${VALIDATOR_ID}"

echo ""

echo -e "${YELLOW}IMPORTANT: Your validator is pending KYC approval${NC}"

echo " 1. mesh admin will review your KYC documentation"

echo " 2. You will receive email confirmation at: ${KYC_EMAIL}"

echo " 3. Once approved, your validator will become ACTIVE"

echo ""

echo -e "${YELLOW}Installing dependencies...${NC}"

apt-get update -qq

apt-get install -y -qq \

python3-pip \

python3-dev \

build-essential \

libssl-dev \

libffi-dev \

sqlite3 \

jq \

curl \

net-tools \

uuid-runtime

pip3 install -q \

cryptography \

chacha20poly1305 \

maxminddb \

geoip2

echo -e "${GREEN}✓ Dependencies installed${NC}"

echo -e "${YELLOW}Installing HookProbe Cortex Validator...${NC}"

# Create directories

mkdir -p $INSTALL_DIR

mkdir -p $CONFIG_DIR

mkdir -p $DATA_DIR/validator

mkdir -p $DATA_DIR/merkle-log

# Copy source files (assume we're in hookprobe repo)

if [ -d "core" ]; then

cp -r core/* $INSTALL_DIR/

cp -r shared/* $INSTALL_DIR/

echo -e "${GREEN}✓ Source files installed${NC}"

else

echo -e "${RED}✗ Core directory not found${NC}"

exit 1

fi

# Create validator configuration

cat > $CONFIG_DIR/validator.conf << CONF

echo -e "${GREEN}✓ Validator configured${NC}"

echo -e "${YELLOW}Creating systemd service...${NC}"

cat > /etc/systemd/system/hookprobe-validator.service << SERVICE

systemctl daemon-reload

systemctl enable hookprobe-validator.service

echo -e "${GREEN}✓ Systemd service created${NC}"

echo ""

echo -e "${GREEN}╔════════════════════════════════════════════════╗${NC}"

echo -e "${GREEN}║ VALIDATOR INSTALLATION COMPLETE ║${NC}"

echo -e "${GREEN}╚════════════════════════════════════════════════╝${NC}"

echo ""

echo -e "${BLUE}Validator ID:${NC} ${VALIDATOR_ID}"

echo -e "${BLUE}Status:${NC} PENDING (awaiting KYC approval)"

echo -e "${BLUE}Hardware FP:${NC} ${HW_FINGERPRINT:0:32}..."

echo ""

echo -e "${YELLOW}Next Steps:${NC}"

echo ""

echo " 1. Wait for KYC approval email at: ${KYC_EMAIL}"

echo " 2. Once approved, start the validator:"

echo " ${GREEN}sudo systemctl start hookprobe-validator${NC}"

echo " 3. Monitor logs:"

echo " ${GREEN}sudo journalctl -u hookprobe-validator -f${NC}"

echo " 4. Check status:"

echo " ${GREEN}curl ${mesh_URL}/api/v1/validators/${VALIDATOR_ID}${NC}"

echo ""

echo -e "${YELLOW}Configuration:${NC}"

echo " Config: ${CONFIG_DIR}/validator.conf"

echo " Keys: ${CONFIG_DIR}/validator_*.pem"

echo " Data: ${DATA_DIR}/validator"

echo ""

echo -e "${BLUE}HookProbe Cortex Validator - Production Ready${NC}"

echo ""

show_banner

# Parse arguments

while [[ $# -gt 0 ]]; do

case $1 in

--mesh-url)

mesh_URL="$2"

shift 2

;;

*)

echo "Unknown option: $1"

exit 1

;;

esac

done

# Run checks and installation

check_root

check_mesh_url

check_mesh_cloud_deployed

check_hardware_requirements

collect_kyc_information

install_dependencies

generate_hardware_fingerprint

install_hookprobe_validator

register_with_mesh

create_systemd_service

show_post_install_instructions