#!/bin/bash
#
# Purpose : Set up sandboxed AI agents (see sandbox/agent): install or update
#           Anthropic's sandbox runtime (srt) and Hermes Agent, and turn on
#           Claude Code's built-in sandbox. Run by install.sh and on every
#           update (updates.d/72-sandbox.sh).

MINISERVER="$HOME/.local/share/MiniServer"
STATUS=0

# npm's global prefix is under /usr, so install to ~/.local; srt lands in ~/.local/bin
echo "Installing the sandbox runtime (srt)..."
npm install --global --prefix "$HOME/.local" --no-fund --no-audit @anthropic-ai/sandbox-runtime || STATUS=1

# --non-interactive skips Hermes' setup questions and its background gateway
# service; `configure hermes` chooses a model provider afterwards
if [ ! -x "$HOME/.local/bin/hermes" ]; then
  echo "Installing Hermes Agent..."
  curl -fsSL https://hermes-agent.nousresearch.com/install.sh | bash -s -- --non-interactive || STATUS=1
fi

# Claude Code runs every command it starts in its own sandbox, also built on
# bubblewrap and socat; it can't run inside srt because bubblewrap can't be
# nested. Anything already in the sandbox section of your settings wins over
# these defaults.
CLAUDE_SETTINGS="$HOME/.claude/settings.json"
if [ -f "$CLAUDE_SETTINGS" ]; then
  domains="$(jq '.network.allowedDomains' "$MINISERVER/sandbox/config/base.json")"
  tmp="$(mktemp "$CLAUDE_SETTINGS.XXXXXX")"
  if jq --argjson domains "$domains" \
      '.sandbox = ({enabled: true, network: {allowedDomains: $domains}} * (.sandbox // {}))' \
      "$CLAUDE_SETTINGS" > "$tmp"; then
    if cmp -s "$tmp" "$CLAUDE_SETTINGS"; then
      rm -f "$tmp"
    else
      echo "Turning on Claude Code's sandbox..."
      mv -f "$tmp" "$CLAUDE_SETTINGS"
    fi
  else
    echo "Couldn't read $CLAUDE_SETTINGS; Claude Code's sandbox was not turned on."
    rm -f "$tmp"
    STATUS=1
  fi
fi

# Hermes' gateway acts on messages from outside this machine, so it runs in
# the sandbox too: a systemd drop-in starts it through sandbox/bin/hermes. It
# also needs to reach the Matrix server in Hermes' settings, which differs on
# each machine; for other messaging services, add their domains to
# ~/.config/miniserver/sandbox/hermes.json.
GATEWAY_UNIT="$HOME/.config/systemd/user/hermes-gateway.service"
if [ -f "$GATEWAY_UNIT" ]; then
  if [ -x "$HOME/.local/bin/srt" ]; then
    homeserver="$(sed -nE "s#^MATRIX_HOMESERVER=[\"']?https?://([^/:\"']+).*#\1#p" "$HOME/.hermes/.env" 2> /dev/null | head -n 1)"
    dropin="$GATEWAY_UNIT.d/miniserver-sandbox.conf"
    tmp="$(mktemp)"
    cat > "$tmp" << EOF
# Written by MiniServer (sandbox/setup.sh): run Hermes' gateway in the sandbox
[Service]
Environment="MINISERVER_SANDBOX_DOMAINS=$homeserver"
ExecStart=
ExecStart=%h/.local/share/MiniServer/sandbox/bin/hermes gateway run
EOF
    if cmp -s "$tmp" "$dropin"; then
      rm -f "$tmp"
    else
      echo "Running Hermes' gateway in the sandbox..."
      mkdir -p "$(dirname "$dropin")" && mv -f "$tmp" "$dropin" && chmod 644 "$dropin" \
        && systemctl --user daemon-reload || STATUS=1
    fi
  else
    echo "Hermes' gateway isn't sandboxed yet: the sandbox (srt) isn't installed."
    STATUS=1
  fi

  # A server is rarely logged in to, and user services stop at logout unless
  # the user lingers
  if [ "$(loginctl show-user "$USER" --property=Linger --value 2> /dev/null)" != yes ]; then
    echo "Keeping Hermes' gateway running while you're logged out..."
    sudo loginctl enable-linger "$USER" || STATUS=1
  fi
fi

exit $STATUS