#!/usr/bin/env bash
# Google Workspace MCP wrapper
# Reads client_id + client_secret from /root/.google_credentials.json,
# exports them as env vars, then starts the workspace-mcp server via uvx.
set -euo pipefail

CREDS_FILE="${GOOGLE_CREDENTIALS_FILE:-/root/.google_credentials.json}"
CREDS_DIR="${GOOGLE_MCP_CREDENTIALS_DIR:-/root/.config/workspace-mcp}"

if [[ ! -f "$CREDS_FILE" ]]; then
  echo "workspace-mcp: credentials file not found: $CREDS_FILE" >&2
  exit 1
fi

mkdir -p "$CREDS_DIR"

export GOOGLE_OAUTH_CLIENT_ID="$(python3 -c 'import json,sys; print(json.load(open(sys.argv[1]))["client_id"])' "$CREDS_FILE")"
export GOOGLE_OAUTH_CLIENT_SECRET="$(python3 -c 'import json,sys; print(json.load(open(sys.argv[1]))["client_secret"])' "$CREDS_FILE")"
export GOOGLE_MCP_CREDENTIALS_DIR="$CREDS_DIR"

exec uvx --from workspace-mcp workspace-mcp --single-user --transport stdio