#!/usr/bin/env bash
set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
SKILL_ROOT="$(dirname "$(dirname "$SCRIPT_DIR")")"
source "$SKILL_ROOT/scripts/_common.sh"

: "${BACKUP_DIR:=$SKILL_ROOT/outputs/backups}"

main() {
  confirm_gate
  if [[ ! -d "$BACKUP_DIR" ]]; then
    log_warn "No backups found; nothing to restore."
    exit 0
  fi
  log_warn "Backups exist in: $BACKUP_DIR"
  log_warn "This rollback restores only files we backed up (.sops.yaml, README.md)."
  log_warn "Encrypted templates are safe to keep; remove manually if desired."
  echo "Listing backups:"
  ls -1 "$BACKUP_DIR" || true
  log_info "Rollback is conservative by design. Restore manually by copying desired *.bak to target."
}
main "$@"