namespace SharedKernel;

public sealed class AppSettings
{
    public AppSection App { get; init; } = new();
    public ConnectionStringsSection ConnectionStrings { get; init; } = new();
    public RedisSection Redis { get; init; } = new();
    public SmtpSection SMTP { get; init; } = new();
    public JwtSection JWT { get; init; } = new();
    public ForwardedHeadersSection ForwardedHeaders { get; init; } = new();
    public CorsPolicySection CorsPolicy { get; init; } = new();
    public YouTubeSection YouTube { get; init; } = new();
    public BackgroundJobsSection BackgroundJobs { get; init; } = new();
    public EncryptionSection Encryption { get; init; } = new();
    public FeaturesSection Features { get; init; } = new();

    public sealed class AppSection
    {
        public string Name { get; init; } = string.Empty;
        public string Company { get; init; } = string.Empty;
        public string BaseURL { get; init; } = string.Empty;
        public string ApiURL { get; init; } = string.Empty;
        public string FrontURL { get; init; } = string.Empty;
    }

    public sealed class ConnectionStringsSection
    {
        public string DefaultConnection { get; init; } = string.Empty;
        public int Timeout { get; init; }
    }

    public class RedisSection
    {
        public string DefaultConnection { get; init; } = string.Empty;
        public string CachePrefix { get; init; } = string.Empty;
        public string AuthTicketPrefix { get; init; } = string.Empty;
        public string DataProtectionKey { get; init; } = string.Empty;
        public TimeSpan DefaultKeyLifetime { get; init; }
    }

    public class SmtpSection
    {
        public string Host { get; init; } = default!;
        public int Port { get; init; } = 587;
        public string? User { get; init; }
        public string? Password { get; init; }
        public bool UseStartTls { get; init; } = true;
        public string FromEmail { get; init; } = default!;
        public string FromName { get; init; } = "no-reply";
    }

    public class JwtSection
    {
        public string SecretKey { get; init; } = string.Empty;
        public string Issuer { get; init; } = string.Empty;
        public string Audience { get; init; } = string.Empty;
        public int AccessTokenExpiration { get; init; }
        public int RefreshTokenExpiration { get; init; }
    }

    public class ForwardedHeadersSection
    {
        public int? ForwardLimit { get; init; } = default;
        public List<string> KnownProxies { get; init; } = [];
        public List<string> KnownNetworks { get; init; } = [];
    }

    public class CorsPolicySection
    {
        public string Name { get; init; } = string.Empty;
        public long PreflightMaxAgeSeconds { get; init; } = 0;
        public List<string> AllowedOrigins { get; init; } = [];
    }

    public class YouTubeSection
    {
        public string HubUrl { get; init; } = "https://pubsubhubbub.appspot.com/subscribe";
        public string CallbackUrl { get; init; } = string.Empty;
        public string HmacSecret { get; init; } = string.Empty;
        public int FeedPollingIntervalMinutes { get; init; } = 3;
    }

    public class BackgroundJobsSection
    {
        public bool LiveChat { get; init; } = true;
        public bool PubSubRenewal { get; init; } = true;
        public bool FeedPolling { get; init; } = true;
        public bool LiveViewerPoller { get; init; } = true;
        public bool ChannelCacheRefresh { get; init; } = true;
        public bool YouTubeDailyAggregator { get; init; } = true;
        public bool YouTubeStaleDataPurge { get; init; } = true;
    }

    /// <summary>
    /// 기능 단위 활성화 플래그. 코드/스키마는 보존하고 노출만 차단하는 soft-off 스위치.
    /// Channel=false 시 채널/스튜디오/YouTube 관련 API 와 백그라운드 서비스 전체 비활성 (기본 false).
    /// </summary>
    public class FeaturesSection
    {
        public bool Channel { get; init; } = false;
    }

    /// <summary>
    /// 회원 PII(주소/연락처 등) 필드 암호화에 사용하는 AES-GCM 키 묶음.
    /// Keys 딕셔너리는 KeyVersion -> Base64(32바이트) 매핑. CurrentKeyVersion 은 신규 암호화에 사용할 버전.
    /// 키 회전 시 Keys 에 새 버전 추가 + CurrentKeyVersion 갱신. 복호화는 row 의 KeyVersion 컬럼으로 매핑하여 과거 키 사용.
    /// </summary>
    public class EncryptionSection
    {
        public int CurrentKeyVersion { get; init; } = 1;
        public Dictionary<string, string> Keys { get; init; } = new();
    }
}