import Store from "electron-store";
import { rotateLocalAuthToken } from "./local-auth";
import { DEFAULT_SERVER_SETTINGS, type DesktopServerSettings } from "../shared/server-settings";

interface PersistedShape {
  readonly server: DesktopServerSettings;
  readonly serverProfiles?: string;
}

const store = new Store<PersistedShape>({
  name: "settings",
  ...(process.env.EXECUTOR_DESKTOP_SETTINGS_DIR
    ? { cwd: process.env.EXECUTOR_DESKTOP_SETTINGS_DIR }
    : {}),
  // `serverProfiles` carries a remote server's credential — a bearer token, or a
  // basic-auth password — so this file is owner-only, the same standard
  // `local-auth.ts` already applies to `auth.json` in this app.
  //
  // Without this, `conf` defaults to `0o666` and the file lands 0644 under a
  // normal umask. One option is enough: `atomically` only chmods the temp inode
  // when the requested mode DIFFERS from its own default, so setting it here is
  // what turns that chmod on, and the atomic rename then carries the tight mode
  // onto an existing loose file too.
  configFileMode: 0o600,
  defaults: { server: DEFAULT_SERVER_SETTINGS },
});

// Backfill if an older settings.json predates the server section.
if (!store.has("server")) {
  store.set("server", DEFAULT_SERVER_SETTINGS);
}

export const getServerSettings = (): DesktopServerSettings => ({
  // Read defensively: older settings.json files carried `requireAuth`/`password`
  // fields that no longer exist. Only `port` survives.
  port: store.get("server")?.port ?? DEFAULT_SERVER_SETTINGS.port,
});

export const updateServerSettings = (
  patch: Partial<DesktopServerSettings>,
): DesktopServerSettings => {
  const next: DesktopServerSettings = { port: patch.port ?? getServerSettings().port };
  store.set("server", next);
  return next;
};

/**
 * Rotate the local bearer token (auth.json). The caller must restart the
 * sidecar so it loads the new token and re-inject the webview header. Returns
 * the new token.
 */
export const rotateServerToken = (): string => rotateLocalAuthToken();

export const getServerProfiles = (): string | null => store.get("serverProfiles") ?? null;

export const setServerProfiles = (value: string): void => {
  store.set("serverProfiles", value);
};