namespace MeterVault.Infrastructure.Options;

/// <summary>
/// Root application options, bound from the "MeterVault" configuration section.
/// Secrets (broker tokens etc.) live on individual endpoints by reference, not here.
/// </summary>
public sealed class MeterVaultOptions
{
    public const string SectionName = "MeterVault";

    /// <summary>IANA timezone used for local-midnight bucketing and display (SDD §10).</summary>
    public string TimeZone { get; set; } = "Europe/Berlin";

    public string Currency { get; set; } = "EUR";

    /// <summary>Default UI locale: 'en' (OSS default) or 'de'.</summary>
    public string Locale { get; set; } = "en";

    /// <summary>Run EF migrations on startup. Disable for tests that migrate out-of-band.</summary>
    public bool RunMigrationsAtStartup { get; set; } = true;

    /// <summary>
    /// Load the bundled Energiebilanz reference dataset on startup if the database has none yet
    /// (idempotent — guarded by a marker meter). Off by default; set <c>MeterVault__SeedReferenceData=true</c>
    /// for a one-command populated demo/test instance.
    /// </summary>
    public bool SeedReferenceData { get; set; }

    /// <summary>Start the MQTT/Home Assistant ingestion workers. Disable for tests.</summary>
    public bool EnableLiveIngestion { get; set; } = true;

    /// <summary>How long full-resolution raw readings are retained (SDD §5.5, default 3 years).</summary>
    public int RawRetentionDays { get; set; } = 1095;

    /// <summary>
    /// Compare the running build against the newest published release and show a banner when behind.
    /// Set false for an air-gapped instance, or one that should make no outbound requests at all.
    /// </summary>
    public bool UpdateCheckEnabled { get; set; } = true;

    /// <summary>
    /// Tag listing consulted by the update check. Points at the project's own Gitea, not a vendor
    /// endpoint — nothing about the instance is sent, it is a plain GET of a public tag list.
    /// Repoint it at a fork, or blank it to disable the check as surely as the flag above.
    /// </summary>
    public string UpdateCheckUrl { get; set; } =
        "https://git.finalfactory.de/api/v1/repos/FinalFactory/MeterVault/tags?limit=50";

    /// <summary>
    /// API keys accepted on the <c>X-Api-Key</c> header for the REST API (SDD §9). Provide via env
    /// (e.g. <c>MeterVault__ApiKeys__0=...</c>). Empty means the API is open (dev only).
    /// </summary>
    public IList<string> ApiKeys { get; set; } = [];

    /// <summary>Honour <c>X-Forwarded-User</c>/<c>Remote-User</c> from a trusted reverse proxy (SDD §10).</summary>
    public bool ReverseProxyTrust { get; set; }

    /// <summary>
    /// Allow the REST API without any API key. Off by default: with no keys configured the API is
    /// closed (401) rather than open, so an unconfigured deployment doesn't expose export/import.
    /// </summary>
    public bool AllowAnonymousApi { get; set; }
}