import { server } from "@nifrajs/core/server"
import {
  MemoryStore,
  cors,
  createAdmissionController,
  rateLimit,
  securityHeaders,
} from "@nifrajs/middleware"
import { routes } from "./routes.ts"

/** Your app. Exported (without `listen`) so tests can drive it via the in-process test client. */

// Composition only: this module merges route modules and registers none of its own.
//
// That is not a style preference. `nifra check` works out what a route can reach from the module that
// REGISTERS it, following that module's imports - so a file that registers routes AND imports a
// database gives every route in it database reach, and a GET route may not declare a domain write at
// all. Keeping the root pure means each route's reach is its own module's, which is what lets the
// capability declarations in `nifra.assurance.ts` stay true as the app grows. Add a feature as a
// module, merge it here.
const rateStore = new MemoryStore({
  // A per-process limiter is not a production security boundary. Keep the starter fail-closed
  // until the operator explicitly wires a shared store or accepts the single-instance tradeoff.
  allowInProduction: process.env.NIFRA_ALLOW_MEMORY_RATE_LIMIT === "true",
})

export const app = server({
  requestTimeoutMs: 30_000,
  admission: createAdmissionController({ maxInFlight: 128, maxQueue: 0 }),
})
  .use(securityHeaders())
  .use(
    cors({
      origin: process.env.CORS_ORIGIN ?? "http://localhost:3000",
      credentials: false,
    }),
  )
  .use(rateLimit({ store: rateStore, max: 120, windowMs: 60_000 }))
  .merge(routes)

export type App = typeof app