infiplot-web/lib/config.ts

import type {
  EngineConfig,
  ProviderProtocol,
  TtsConfig,
} from "@infiplot/types";
import { isPublicUrl } from "./validateUrl";

const VALID_PROTOCOLS = [
  "openai_compatible",
  "anthropic",
  "google",
  "openai",
  "runware",
] as const;

function readVar(name: string): string {
  const v = process.env[name];
  if (!v) throw new Error(`Missing required environment variable: ${name}`);
  return v;
}

function readOptionalVar(name: string): string | undefined {
  const v = process.env[name];
  return v && v.length > 0 ? v : undefined;
}

// Optional *_PROVIDER selector. Unset → undefined, and each ai-client adapter
// applies its own default (text/vision → openai_compatible; image → inferred
// from the base URL). Validated eagerly so a typo fails fast at boot rather
// than mid-request.
function readProvider(name: string): ProviderProtocol | undefined {
  const v = readOptionalVar(name)?.trim().toLowerCase();
  if (!v) return undefined;
  if ((VALID_PROTOCOLS as readonly string[]).includes(v)) {
    return v as ProviderProtocol;
  }
  throw new Error(
    `Invalid ${name}: "${v}". Must be one of: ${VALID_PROTOCOLS.join(", ")}`,
  );
}

function loadTtsConfig(): TtsConfig | undefined {
  const baseUrl = readOptionalVar("TTS_BASE_URL");
  const apiKey = readOptionalVar("TTS_API_KEY");
  const speechModel = readOptionalVar("TTS_SPEECH_MODEL");

  // Missing any → TTS disabled (game runs silently).
  if (!baseUrl || !apiKey || !speechModel) return undefined;

  return { baseUrl, apiKey, speechModel };
}

function safeEndpoint(v: unknown): string | undefined {
  if (typeof v !== "string" || v.length === 0) return undefined;
  const trimmed = v.trim();
  if (!trimmed || !isPublicUrl(trimmed)) {
    console.error(`BYO endpoint rejected (not a public HTTPS URL): ${v.slice(0, 100).replace(/[\r\n]/g, "")}`);
    return undefined;
  }
  return trimmed;
}

function safeString(v: unknown, max: number): string | undefined {
  if (typeof v !== "string" || v.length === 0) return undefined;
  return v.slice(0, max).replace(/[\x00-\x1f]/g, "");
}

export function loadEngineConfig(headers?: Headers): EngineConfig {
  const config: EngineConfig = {
    text: {
      baseUrl: readVar("TEXT_BASE_URL"),
      apiKey: readVar("TEXT_API_KEY"),
      model: readVar("TEXT_MODEL"),
      provider: readProvider("TEXT_PROVIDER"),
    },
    image: {
      baseUrl: readVar("IMAGE_BASE_URL"),
      apiKey: readVar("IMAGE_API_KEY"),
      model: readVar("IMAGE_MODEL"),
      provider: readProvider("IMAGE_PROVIDER"),
    },
    vision: {
      baseUrl: readVar("VISION_BASE_URL"),
      apiKey: readVar("VISION_API_KEY"),
      model: readVar("VISION_MODEL"),
      provider: readProvider("VISION_PROVIDER"),
    },
    tts: loadTtsConfig(),
    mockImage: readOptionalVar("MOCK_IMAGE") === "true",
  };

  const byoHeader = headers?.get("x-byo-api");
  if (byoHeader) {
    if (byoHeader.length > 2048) {
      console.error("x-byo-api header exceeds 2 KB limit, ignoring");
    } else {
      try {
        const byo = JSON.parse(byoHeader);
        if (byo.llm?.enabled) {
          const ep = safeEndpoint(byo.llm?.endpoint);
          const key = safeString(byo.llm?.apiKey, 256);
          const model = safeString(byo.llm?.model, 128);
          if (ep) { config.text.baseUrl = ep; config.vision.baseUrl = ep; }
          if (key) { config.text.apiKey = key; config.vision.apiKey = key; }
          if (model) { config.text.model = model; config.vision.model = model; }
        }
        if (byo.painter?.enabled) {
          const ep = safeEndpoint(byo.painter?.endpoint);
          const key = safeString(byo.painter?.apiKey, 256);
          const model = safeString(byo.painter?.model, 128);
          if (ep) config.image.baseUrl = ep;
          if (key) config.image.apiKey = key;
          if (model) config.image.model = model;
        }
      } catch (e) {
        console.error("Failed to parse x-byo-api header:", e);
      }
    }
  }

  return config;
}