#!/usr/bin/env bash

set -euo pipefail

agent_dir="${PI_CODING_AGENT_DIR:-/root/.pi/agent}"
mkdir -p "$agent_dir" /workspace/sessions

if [[ -d /config-ro ]]; then
	# Capabilities stay dropped even though the agent is container-root. Avoid
	# archive mode because preserving host ownership would require CAP_CHOWN.
	cp -R /config-ro/. "$agent_dir/"
fi

# The sandbox loads only the checked-out AGI extension. Host-configured packages
# are unrelated code and must not be installed or executed inside this run.
if [[ -f "$agent_dir/settings.json" ]]; then
	settings_tmp="$(mktemp "$agent_dir/settings.json.XXXXXX")"
	jq '.packages = []' "$agent_dir/settings.json" >"$settings_tmp"
	mv "$settings_tmp" "$agent_dir/settings.json"
fi

if [[ ! -d /workspace/.git ]]; then
	git -C /workspace init -q
fi

cp -n /opt/open-mission/AGENTS.md /workspace/AGENTS.md
cp -n /opt/open-mission/mission.txt /workspace/mission.txt

exec sleep infinity