#!/usr/bin/env python3
"""Starts JARVIS v3 bot with Hermes API key from Infisical."""
import json, subprocess, os, sys

creds = json.load(open("/opt/infisical/admin-credentials.json"))
r = subprocess.run(
    ["/home/openclaw/.local/bin/infisical", "secrets", "get",
     "API_SERVER_KEY", "--domain", "https://secret.dracodev.net",
     "--projectId", "192c1eed-6666-41ee-80df-a4636a2da0ad",
     "--env", "prod", "--path", "/hermes-claw", "--plain",
     "--token", creds["token"]],
    capture_output=True, text=True, timeout=20,
)
hermes_key = r.stdout.strip()
if not hermes_key:
    print(f"ERROR: {r.stderr}", file=sys.stderr)
    sys.exit(1)

print(f"Key: {hermes_key[:15]}...")
os.chdir("/home/openclaw/workspace/jarvis-pipecat")
os.environ["HERMES_API_KEY"] = hermes_key
os.environ["PYTHONUNBUFFERED"] = "1"
# PAS de PIPECAT_ALLOWED_ORIGINS = laisse le défaut (liste vide = tout autorisé)
if "PIPECAT_ALLOWED_ORIGINS" in os.environ:
    del os.environ["PIPECAT_ALLOWED_ORIGINS"]
os.execvp("./venv/bin/python", ["./venv/bin/python", "bot.py"])