class Kitsune::Kit::Commands::SetupUnattended

def perform_rollback(ssh)
  output = ssh.exec! <<~EOH
    set -e
    sudo mkdir -p /usr/local/backups
    sudo chown deploy:deploy /usr/local/backups
    RESOURCE="/etc/apt/apt.conf.d/20auto-upgrades"
    BACKUP_DIR="/usr/local/backups"
    SCRIPT_ID="setup_unattended"
    BACKUP_FILE="${BACKUP_DIR}/${SCRIPT_ID}.before"
    MARKER_FILE="${BACKUP_DIR}/${SCRIPT_ID}.after"
    if [ -f "$MARKER_FILE" ]; then
      echo "🔁 Restoring original auto-upgrades config…"
      sudo mv "$BACKUP_FILE" "$RESOURCE" && echo "   - config restored from $BACKUP_FILE"
      sudo rm -f "$MARKER_FILE" && echo "   - marker $MARKER_FILE removed"
    else
      echo "   - no marker for $SCRIPT_ID, skipping restore"
    fi
    echo "✍🏻 Stopping & disabling unattended-upgrades…"
    sudo systemctl --quiet stop unattended-upgrades.service apt-daily.timer apt-daily-upgrade.timer && echo "   - services stopped"
    sudo systemctl --quiet disable unattended-upgrades.service && echo "   - service disabled"
  EOH
  say output
  say "✅ Unattended-upgrades rollback completed", :green
end