#!/bin/bash
set -e

# Create .streamlit directory if it doesn't exist
mkdir -p .streamlit

# Check if Auth0 is disabled
if [ "${DISABLE_AUTH0}" = "true" ]; then
    echo "⚠ Auth0 disabled for local development (only effective when Environment != qa/prod)"
    # Generate minimal secrets.toml (may still be needed for other features)
    cat > .streamlit/secrets.toml <<EOF
# Auth0 disabled via DISABLE_AUTH0=true
# Note: Auth0 is always enforced for qa/prod environments
EOF
else
    # Generate secrets.toml from environment variables
    cat > .streamlit/secrets.toml <<EOF
[auth]
redirect_uri = "${AUTH_REDIRECT_URI}"
cookie_secret = "${AUTH_COOKIE_SECRET}"

[auth.auth0]
client_id = "${AUTH0_CLIENT_ID}"
client_secret = "${AUTH0_CLIENT_SECRET}"
server_metadata_url = "${AUTH0_SERVER_METADATA_URL}"
client_kwargs = { "prompt" = "${AUTH0_CLIENT_KWARGS_PROMPT:-login}" }
EOF
    echo "✓ Generated .streamlit/secrets.toml from environment variables"
fi

# Execute streamlit
exec streamlit run src/app.py --server.port=8080 --server.address=0.0.0.0