#!/usr/bin/env bash
# onx-clamav-update — resmi imza DB güncelle (freshclam)
source "$(dirname "$0")/_lib/common.sh"
require_root
require_cmd freshclam
# clamav-freshclam daemon kapalıysa manuel çalışır; açıksa --daemon-notify
set +e; freshclam --quiet >/dev/null 2>&1; RC=$?; set -e
DBDIR="/var/lib/clamav"; DAILY="$DBDIR/daily.cld"; [[ -f "$DBDIR/daily.cvd" ]] && DAILY="$DBDIR/daily.cvd"
DBVER="$(sigtool --info "$DAILY" 2>/dev/null | awk -F': ' '/^Version/{print $2; exit}')"
[[ $RC -eq 0 || $RC -eq 1 ]] || onx_die 3 "freshclam failed (rc=$RC)"
onx_json_out ok true db_version "${DBVER:-unknown}" updated_at "$(date -u +%Y-%m-%dT%H:%M:%SZ)"
