#!/usr/bin/env bash
# veilor-os — first user-login touch-ups (runs once via XDG autostart)
# Currently a placeholder for per-user setup that can't be done at install time.

set -uo pipefail

DONE=$HOME/.config/veilor-firstboot.done
[[ -f $DONE ]] && exit 0

# ── Generate USBGuard allowlist for currently connected devices ──
# Requires sudo; admin runs this manually:
#   sudo usbguard generate-policy > /etc/usbguard/rules.conf
#   sudo systemctl restart usbguard

# ── Refresh font cache for user ──
fc-cache -f "$HOME/.local/share/fonts" 2>/dev/null || true

mkdir -p "$(dirname "$DONE")"
touch "$DONE"