From 30fe8318143c73e8efe2d08b25edfc5b28fb7b0b Mon Sep 17 00:00:00 2001
From: Abir Abbas <abirabbas1998@gmail.com>
Date: Wed, 8 Jul 2026 12:24:32 -0400
Subject: [PATCH] fix(docker): generate opencode config from PR_AF_MODEL at
 startup
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The opencode harness config (~/.config/opencode/opencode.json) was baked
into the image with a hardcoded model and a single-model provider
whitelist (moonshotai/kimi-k2.5). As a result PR_AF_MODEL was effectively
ignored by the opencode provider: the harness passes the model via `-m`,
but opencode still fell back to — and restricted itself to — the baked
model, so setting PR_AF_MODEL to e.g. openrouter/z-ai/glm-5.2 had no
effect.

Move config generation to a runtime entrypoint that writes opencode.json
from PR_AF_MODEL, deriving the provider model key by stripping the
"openrouter/" prefix. When PR_AF_MODEL is unset the generated config is
byte-identical to the previous baked default, so behavior is unchanged.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 Dockerfile           |  8 +++-----
 docker-entrypoint.sh | 26 ++++++++++++++++++++++++++
 2 files changed, 29 insertions(+), 5 deletions(-)
 create mode 100755 docker-entrypoint.sh

diff --git a/Dockerfile b/Dockerfile
index a14d36c..0278f1b 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -52,13 +52,10 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
     chown -R praf:praf /app /workspaces /home/praf && \
     rm -rf /var/lib/apt/lists/*
 
-RUN mkdir -p /home/praf/.config/opencode && \
-    echo '{"$schema":"https://opencode.ai/config.json","model":"openrouter/moonshotai/kimi-k2.5","small_model":"openrouter/moonshotai/kimi-k2.5","provider":{"openrouter":{"options":{"apiKey":"{env:OPENROUTER_API_KEY}"},"models":{"moonshotai/kimi-k2.5":{}}}}}' \
-    > /home/praf/.config/opencode/opencode.json && \
-    chown -R praf:praf /home/praf/.config
-
 COPY --from=builder /install /usr/local
 COPY src/ /app/src/
+COPY docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh
+RUN chmod +x /usr/local/bin/docker-entrypoint.sh
 
 USER praf
 
@@ -67,4 +64,5 @@ EXPOSE 8004
 HEALTHCHECK --interval=30s --timeout=5s --retries=3 \
     CMD curl -f http://localhost:8004/health || exit 1
 
+ENTRYPOINT ["/usr/local/bin/docker-entrypoint.sh"]
 CMD ["python", "-m", "pr_af.app"]
diff --git a/docker-entrypoint.sh b/docker-entrypoint.sh
new file mode 100755
index 0000000..3e0f9c1
--- /dev/null
+++ b/docker-entrypoint.sh
@@ -0,0 +1,26 @@
+#!/bin/sh
+# Generate the opencode config at container start so PR_AF_MODEL is honored.
+#
+# Previously opencode.json was baked into the image with a hardcoded model and
+# a single-model provider whitelist. That meant PR_AF_MODEL was ignored by the
+# opencode harness: even though the model is passed via `-m`, opencode fell back
+# to (and restricted itself to) the baked model. Generating the config here from
+# PR_AF_MODEL fixes that — the env var wins when set, and we fall back to the
+# benchmarked default when it isn't.
+set -e
+
+# Default matches the image ENV / benchmarked model.
+MODEL="${PR_AF_MODEL:-openrouter/moonshotai/kimi-k2.5}"
+
+# opencode keys models under a provider by the slug *without* the provider
+# prefix, e.g. "openrouter/z-ai/glm-5.2" -> provider "openrouter", key "z-ai/glm-5.2".
+MODEL_KEY="${MODEL#openrouter/}"
+
+CONFIG_DIR="${XDG_CONFIG_HOME:-$HOME/.config}/opencode"
+mkdir -p "$CONFIG_DIR"
+
+cat > "$CONFIG_DIR/opencode.json" <<EOF
+{"\$schema":"https://opencode.ai/config.json","model":"${MODEL}","small_model":"${MODEL}","provider":{"openrouter":{"options":{"apiKey":"{env:OPENROUTER_API_KEY}"},"models":{"${MODEL_KEY}":{}}}}}
+EOF
+
+exec "$@"