/**
 * Berget AI OpenCode Auth Plugin Constants
 *
 * URL getters read env vars at runtime to support:
 *   BERGET_API_URL=https://api.stage.berget.ai opencode
 */

// Provider identifier for OpenCode
export const BERGET_PROVIDER_ID = 'berget';

// Runtime getters for URL configuration
export const getApiUrl = (): string => process.env.BERGET_API_URL || 'https://api.berget.ai';

export const getInferenceUrl = (): string =>
  process.env.BERGET_INFERENCE_URL || 'https://api.berget.ai/v1';

// Auth endpoints (token refresh goes through API)
export const getTokenRefreshEndpoint = (): string => `${getApiUrl()}/v1/auth/refresh`;

// Model discovery endpoint (chat models only, excludes embeddings/rerankers/whisper)
export const getModelsEndpoint = (): string => `${getApiUrl()}/v1/models/chat`;

// Token expiry buffer (refresh tokens 1 minute before expiry)
export const ACCESS_TOKEN_EXPIRY_BUFFER_MS = 60 * 1000;

// PKCE flow settings
export const PKCE_CALLBACK_PORT = 8787;
export const KEYCLOAK_CLIENT_ID = 'berget-code';

// Keycloak URL getters (derived from API URL)
export const getKeycloakUrl = (): string => {
  const apiUrl = getApiUrl();
  if (apiUrl.includes('localhost') || apiUrl.includes('127.0.0.1')) {
    return 'https://auth.stage.berget.ai'; // Local dev uses stage Keycloak
  }
  if (apiUrl.includes('stage')) {
    return 'https://auth.stage.berget.ai';
  }
  return 'https://auth.berget.ai';
};

export const getKeycloakRealm = (): string => 'berget';