#!/usr/bin/env bash
# generate-env.sh — create the MelodyMuse `.env` (and AGE-encrypt it).
#
# Usage:  bash generate-env.sh
#
# Customize LLM_ENDPOINT / LLM_MODEL below before running. The script prompts
# for the LLM_API_KEY so it doesn't end up in your shell history.

set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
REPO_ROOT="$(cd "${SCRIPT_DIR}/../.." && pwd)"
AGE_PUB_KEY="${REPO_ROOT}/keys/age-public-key.txt"

# ─── Customize these for your deployment ─────────────────────────────────────
LLM_ENDPOINT_DEFAULT="https://api.minimax.chat/v1"
LLM_MODEL_DEFAULT="MiniMax-M3"
# ──────────────────────────────────────────────────────────────────────────────

echo "LLM endpoint [${LLM_ENDPOINT_DEFAULT}]:"
read -r LLM_ENDPOINT
LLM_ENDPOINT="${LLM_ENDPOINT:-$LLM_ENDPOINT_DEFAULT}"

echo "LLM model [${LLM_MODEL_DEFAULT}]:"
read -r LLM_MODEL
LLM_MODEL="${LLM_MODEL:-$LLM_MODEL_DEFAULT}"

echo "LLM API key (input is hidden):"
read -rs LLM_API_KEY
echo ""

if [[ -z "${LLM_API_KEY}" ]]; then
    echo "ERROR: LLM_API_KEY is required."
    exit 1
fi

cat > "${SCRIPT_DIR}/.env" <<EOF
# MelodyMuse — generated by generate-env.sh
LLM_ENDPOINT=${LLM_ENDPOINT}
LLM_API_KEY=${LLM_API_KEY}
LLM_MODEL=${LLM_MODEL}
PORT=3000
CORS_ORIGIN=*
EOF

chmod 600 "${SCRIPT_DIR}/.env"

if [[ -f "${AGE_PUB_KEY}" ]]; then
    age -r "$(cat "${AGE_PUB_KEY}")" -o "${SCRIPT_DIR}/.env.age" "${SCRIPT_DIR}/.env"
    echo ""
    echo "Encrypted .env → .env.age"
    echo "Commit .env.age (NOT .env) to your repo, then re-run deploy."
else
    echo ""
    echo "No AGE public key found at ${AGE_PUB_KEY}."
    echo "Encrypt manually before committing, e.g.:"
    echo "  age -r <recipient> -o .env.age .env"
fi