#!/usr/bin/env sh

bwrap \
  --ro-bind /usr /usr \
  --ro-bind /lib /lib \
  --ro-bind /lib64 /lib64 \
  --ro-bind /bin /bin \
  --ro-bind /etc/ssl /etc/ssl \
  --ro-bind /etc/ca-certificates /etc/ca-certificates \
  --ro-bind /run/systemd/resolve/stub-resolv.conf /etc/resolv.conf \
  --dev /dev \
  --proc /proc \
  --tmpfs /home/$(whoami) \
  --tmpfs /tmp \
  --bind ~/.config/opencode /home/$(whoami)/.config/opencode \
  --bind ~/.local/state/opencode /home/$(whoami)/.local/state/opencode \
  --bind ~/.local/share/opencode /home/$(whoami)/.local/share/opencode \
  --bind ~/.local/share/uv/ /home/$(whoami)/.local/share/uv \
  --bind ~/.vibe /home/$(whoami)/.vibe \
  --bind ~/.cache/uv /home/$(whoami)/.cache/uv \
  --bind ~/.cache/huggingface /home/$(whoami)/.cache/huggingface \
  --bind ~/.cache/opencode /home/$(whoami)/.cache/opencode \
  --bind ~/code/workspace /home/$(whoami)/project \
  --bind ~/.local/bin/vibe /home/$(whoami)/.local/bin/vibe \
  --clearenv \
  --setenv HOME /home/$(whoami) \
  --setenv USER $(whoami) \
  --setenv SHELL /bin/bash \
  --setenv PATH /home/$(whoami)/.local/bin:/usr/local/sbin:/usr/local/bin:/usr/bin \
  --chdir /home/$(whoami)/project \
  bash