#!/usr/bin/env bash

# Runtime-only Agent configuration. This file is mounted read-only from the
# Eval scaffold, while the generated config roots below are mounted as tmpfs
# by docker.sh. No credential is written to the image, workspace, report, or
# host filesystem.

toml_quote() {
    local value="$1"
    value="${value//\\/\\\\}"
    value="${value//\"/\\\"}"
    printf '"%s"' "$value"
}

json_quote() {
    local value="$1"
    value="${value//\\/\\\\}"
    value="${value//\"/\\\"}"
    value="${value//$'\n'/\\n}"
    value="${value//$'\r'/\\r}"
    value="${value//$'\t'/\\t}"
    printf '"%s"' "$value"
}

prepare_agent_runtime_config() {
    local agent="$1"
    local model="${2:-}"

    case "$agent" in
        codex)
            local config_root="${CODEX_HOME:-/home/agent/.codex}"
            local base_url="${OPENAI_BASE_URL:-https://api.openai.com/v1}"
            mkdir -p "$config_root"
            {
                printf 'model_provider = "comet-eval"\n'
                if [[ -n "$model" ]]; then
                    printf 'model = '
                    toml_quote "$model"
                    printf '\n'
                fi
                printf '\n[model_providers.comet-eval]\n'
                printf 'name = "Comet Eval"\n'
                printf 'base_url = '
                toml_quote "$base_url"
                printf '\nenv_key = "OPENAI_API_KEY"\n'
                printf 'wire_api = "responses"\n'
                printf 'requires_openai_auth = false\n'
            } > "$config_root/config.toml"
            chmod 600 "$config_root/config.toml"
            ;;
        qoder)
            # Qoder documents PAT authentication through this environment
            # variable; keep its config root isolated from any host login.
            mkdir -p "${QODER_CONFIG_DIR:-/home/agent/.qoder}"
            ;;
        codebuddy)
            local config_root="${COMET_EVAL_CODEBUDDY_CONFIG_DIR:-/home/agent/.codebuddy}"
            local settings_path="$config_root/settings.json"
            local helper_path="$config_root/api-key-helper.sh"
            mkdir -p "$config_root"
            cat > "$helper_path" <<'EOF'
#!/usr/bin/env bash
printf '%s' "${CODEBUDDY_AUTH_TOKEN:-${CODEBUDDY_API_KEY:-}}"
EOF
            chmod 700 "$helper_path"
            {
                printf '{"apiKeyHelper":'
                json_quote "$helper_path"
                printf ',"env":{'
                local has_value=0
                if [[ -n "${CODEBUDDY_BASE_URL:-}" ]]; then
                    printf '"CODEBUDDY_BASE_URL":'
                    json_quote "$CODEBUDDY_BASE_URL"
                    has_value=1
                fi
                if [[ -n "$model" ]]; then
                    [[ "$has_value" -eq 1 ]] && printf ','
                    printf '"CODEBUDDY_MODEL":'
                    json_quote "$model"
                fi
                printf '}}\n'
            } > "$settings_path"
            chmod 600 "$settings_path"
            CODEBUDDY_SETTINGS_PATH="$settings_path"
            export CODEBUDDY_SETTINGS_PATH
            ;;
    esac
}