#!/bin/bash
set -e

CERT_PATH="/mitmproxy-ca/mitmproxy-ca-cert.pem"

echo "Waiting for mitmproxy CA certificate..."
for i in $(seq 1 30); do
    if [ -f "$CERT_PATH" ]; then
        echo "Found mitmproxy CA cert."
        break
    fi
    sleep 1
done

if [ ! -f "$CERT_PATH" ]; then
    echo "WARNING: mitmproxy CA cert not found at $CERT_PATH"
fi

export SSL_CERT_FILE="$CERT_PATH"
export REQUESTS_CA_BUNDLE="$CERT_PATH"
export NODE_EXTRA_CA_CERTS="$CERT_PATH"

# Build ~/.gemini for gemini-cli from env vars
if [ -n "$GEMINI_REFRESH_TOKEN" ]; then
    GEMINI_DIR="/tmp/gemini-home/.gemini"
    mkdir -p "$GEMINI_DIR"

    python3 - <<EOF
import json, os, time
data = {
    "refresh_token": os.environ["GEMINI_REFRESH_TOKEN"],
    "access_token":  os.environ.get("GEMINI_ACCESS_TOKEN", ""),
    "expiry_date":   int(os.environ.get("GEMINI_TOKEN_EXPIRY", "0")),
    "token_type":    "Bearer",
}
with open("$GEMINI_DIR/oauth_creds.json", "w") as f:
    json.dump(data, f, indent=2)
os.chmod("$GEMINI_DIR/oauth_creds.json", 0o600)
EOF

    if [ -f "/gemini-settings/settings.json" ]; then
        cp /gemini-settings/settings.json "$GEMINI_DIR/settings.json"
    fi

    export HOME="/tmp/gemini-home"
fi

exec "$@"