#!/bin/bash

set -euo pipefail

if [[ -z "${OAUTH:-}" ]]; then
  echo "OAUTH is required: provide base64 encoded Codex auth.json." >&2
  exit 1
fi

if [[ -z "${MODEL:-}" ]]; then
  echo "MODEL is required." >&2
  exit 1
fi

CODEX_HOME="${CODEX_HOME:-/root/.codex}"
mkdir -p "$CODEX_HOME"
printf '%s' "$OAUTH" | base64 -d > "$CODEX_HOME/auth.json"
chmod 600 "$CODEX_HOME/auth.json"

codex exec --dangerously-bypass-approvals-and-sandbox --model "$MODEL" "$PROMPT"

if [[ -n "${GITHUB_OUTPUT:-}" ]]; then
  echo "text=completed" >> "$GITHUB_OUTPUT"
fi