"""OCI SDK client helpers — config loading, signer creation, client factory."""
from config import OCI_DIR


def _get_oci_config(oci_config_id: str) -> dict:
    import oci
    config_path = str(OCI_DIR / oci_config_id / "config")
    config = oci.config.from_file(config_path, "DEFAULT")
    return config


def _get_oci_signer(oci_config_id: str):
    """Return (config, signer) tuple. For session_token auth, returns SecurityTokenSigner; for api_key returns None."""
    import oci
    config = _get_oci_config(oci_config_id)
    if config.get("security_token_file"):
        from oci.auth.signers import SecurityTokenSigner
        token_path = config["security_token_file"]
        with open(token_path) as f:
            token = f.read().strip()
        signer = SecurityTokenSigner(token, config["key_file"])
        return config, signer
    return config, None


def _oci_client(client_class, oci_config_id: str, **kwargs):
    """Create an OCI client with correct auth (api_key or session_token)."""
    config, signer = _get_oci_signer(oci_config_id)
    if signer:
        return client_class(config=config, signer=signer, **kwargs)
    return client_class(config, **kwargs)