import path from "node:path";

const env = process.env;

/** parseInt with a default that distinguishes "unset" from "explicit 0". */
function intEnv(value: string | undefined, defaultValue: number): number {
    if (value === undefined || value === "") return defaultValue;
    const parsed = parseInt(value, 10);
    return Number.isFinite(parsed) ? parsed : defaultValue;
}

const config = {
    OWNER_DISPLAY_NAME: env.OWNER_DISPLAY_NAME ?? "Admin",
    INLINE_MAX_BYTES: parseInt(env.INLINE_MAX_BYTES ?? "", 10) || 524288,
    MAX_UPLOAD_BYTES:
        parseInt(env.MAX_UPLOAD_BYTES ?? "", 10) || 10 * 1024 * 1024,
    MAX_USER_UPLOAD_BYTES:
        parseInt(env.MAX_USER_UPLOAD_BYTES ?? "", 10) || 2 * 1024 * 1024,
    TRUSTED_PROXY: !!env.TRUSTED_PROXY,
    RATE_LIMIT_DISABLED: !!env.RATE_LIMIT_DISABLED,
    SSH_DISABLED: !!env.SSH_DISABLED,
    PORT: parseInt(env.PORT ?? "", 10) || 3000,
    SSH_PORT: parseInt(env.SSH_PORT ?? "", 10) || 2222,
    REGISTRATION_TYPE: (env.REGISTRATION_TYPE ?? "enabled") as
        | "enabled"
        | "disabled"
        | "queue",
    REGISTER_QUESTION: env.REGISTER_QUESTION ?? "",
    BASE_URL:
        env.BASE_URL ??
        `http://localhost:${parseInt(env.PORT ?? "", 10) || 3000}`,
    DATA_DIR: path.resolve(env.DATA_DIR ?? "./data"),
    HIGHLIGHT_WORKERS: parseInt(env.HIGHLIGHT_WORKERS ?? "", 10) || 4,
    COMMITTER_NAME: env.COMMITTER_NAME ?? env.OWNER_DISPLAY_NAME ?? "Admin",
    COMMITTER_EMAIL: "",
    EXTRA_ALLOWED_SIGNERS_PATH: env.EXTRA_ALLOWED_SIGNERS_PATH ?? null,
    MAX_TITLE_BYTES: parseInt(env.MAX_TITLE_BYTES ?? "", 10) || 500,
    MAX_TEXT_BODY_BYTES: parseInt(env.MAX_TEXT_BODY_BYTES ?? "", 10) || 100_000,
    MAX_USERNAME_BYTES: parseInt(env.MAX_USERNAME_BYTES ?? "", 10) || 64,
    MAX_PASSWORD_BYTES: parseInt(env.MAX_PASSWORD_BYTES ?? "", 10) || 1024,
    CI_DOCKER_SOCKET: env.CI_DOCKER_SOCKET ?? "",
    CI_MAX_HISTORY: parseInt(env.CI_MAX_HISTORY ?? "", 10) || 50,
    CI_MAX_CONCURRENT: parseInt(env.CI_MAX_CONCURRENT ?? "", 10) || 2,
    CI_DEFAULT_TIMEOUT: parseInt(env.CI_DEFAULT_TIMEOUT ?? "", 10) || 3600,
    // Cap on simultaneous source archive generation jobs (one release with
    // include_source_code spawns three git-archive + compressor pipelines
    // back-to-back). Without this cap, an admin firing several releases in
    // quick succession can saturate CPU. Excess jobs are queued in memory.
    MAX_CONCURRENT_ARCHIVE_JOBS:
        parseInt(env.MAX_CONCURRENT_ARCHIVE_JOBS ?? "", 10) || 2,
    // Cap on any server-side render that holds the whole content in
    // RAM and runs synchronous CPU work on it (blob view, commit/patch
    // diff, markdown). Above this, the UI shows a "too large to
    // preview" stub and links to the raw endpoint. Setting to 0
    // disables inline rendering entirely.
    MAX_RENDER_BYTES: intEnv(env.MAX_RENDER_BYTES, 10 * 1024 * 1024),
    // Cap on the streamed /raw download. 0 means no limit (current
    // behaviour) — useful on a trusted LAN where you actually want to
    // pull large blobs out of the browser. Public deployments should
    // pin this to something sane.
    MAX_RAW_DOWNLOAD_BYTES: intEnv(env.MAX_RAW_DOWNLOAD_BYTES, 0),
};

// Derived values that depend on other config fields
config.COMMITTER_EMAIL =
    env.COMMITTER_EMAIL ??
    `${config.OWNER_DISPLAY_NAME}@${new URL(config.BASE_URL).hostname}`;

export default config;