const requiredForSetup = ['CSBIE_SETUP_PASSWORD', 'CSBIE_SETUP_PASSWORD_HASH'] as const

const runtimeDefaults = {
  PORT: '8787',
  CSBIE_DATABASE_PATH: './data/csbie.sqlite',
  CSBIE_KEYRING_BACKEND: 'platform',
  CSBIE_ORIGIN: 'http://127.0.0.1:5173',
  CSBIE_RP_ID: '127.0.0.1',
}

const optionalUrls = ['SBI_AUTH_BASE_URL', 'SBI_MTS_BASE_URL', 'CSBIE_ORIGIN', 'CSBIE_CORS_ORIGIN']

const present = (key: string) => Boolean(process.env[key]?.trim())

const validateUrl = (key: string) => {
  const value = process.env[key]
  if (!value) return undefined
  try {
    new URL(value)
    return undefined
  } catch {
    return `${key} must be a valid URL`
  }
}

const messages: string[] = []

for (const [key, fallback] of Object.entries(runtimeDefaults)) {
  if (!present(key)) messages.push(`${key} is not set; runtime default is ${fallback}`)
}

for (const key of optionalUrls) {
  const message = validateUrl(key)
  if (message) messages.push(message)
}

if (!requiredForSetup.some(present)) {
  messages.push(
    'Set CSBIE_SETUP_PASSWORD or CSBIE_SETUP_PASSWORD_HASH before first owner passkey setup',
  )
}

if (process.env.CSBIE_KEYRING_BACKEND === 'sqlite' && !present('CSBIE_KEYRING_SECRET')) {
  messages.push('Set CSBIE_KEYRING_SECRET when CSBIE_KEYRING_BACKEND=sqlite')
}

if (!present('SBI_AUTH_BASE_URL') || !present('SBI_MTS_BASE_URL')) {
  messages.push('Set SBI_AUTH_BASE_URL and SBI_MTS_BASE_URL before connecting an SBI session')
}

if (messages.length === 0) {
  console.log('env:check ok')
} else {
  console.log('env:check notices:')
  for (const message of messages) console.log(`- ${message}`)
}