defmodule OpenAgentsWeb.Endpoint do
  use Phoenix.Endpoint, otp_app: :openagents

  # The session will be stored in the cookie and signed,
  # this means its contents can be read but not tampered with.
  # Set :encryption_salt if you would also like to encrypt it.
  @session_options [
    store: :cookie,
    key: "_openagents_key",
    signing_salt: "fq1woUNS",
    encryption_salt: "R+WiqpwL",
    same_site: "Lax",
    secure: Application.compile_env(:openagents, :secure_cookies, false),
    http_only: true,
    max_age: 60 * 60 * 24 * 365
  ]

  @doc false
  def session_options, do: @session_options

  socket "/live", Phoenix.LiveView.Socket,
    websocket: [connect_info: [session: @session_options]],
    longpoll: [connect_info: [session: @session_options]]

  socket "/controller/socket", OpenAgentsWeb.ControllerSocket,
    websocket: [connect_info: [session: @session_options]],
    longpoll: [connect_info: [session: @session_options]]

  # Serve at "/" the static files from "priv/static" directory.
  #
  # When code reloading is disabled (e.g., in production),
  # the `gzip` option is enabled to serve compressed
  # static files generated by running `phx.digest`.
  plug Plug.Static,
       OpenAgentsWeb.static_options(
         gzip: not code_reloading?,
         raise_on_missing_only: code_reloading?
       )

  # Code reloading can be explicitly enabled under the
  # :code_reloader configuration of your endpoint.
  if code_reloading? do
    socket "/phoenix/live_reload/socket", Phoenix.LiveReloader.Socket
    plug Phoenix.LiveReloader
    plug Phoenix.CodeReloader
    plug Phoenix.Ecto.CheckRepoStatus, otp_app: :openagents
  end

  plug Phoenix.LiveDashboard.RequestLogger,
    param_key: "request_logger",
    cookie_key: "request_logger"

  plug Plug.RequestId
  plug Plug.Telemetry, event_prefix: [:phoenix, :endpoint]

  plug Plug.Parsers,
    parsers: [:urlencoded, :multipart, :json],
    pass: ["*/*"],
    json_decoder: Phoenix.json_library()

  plug Plug.MethodOverride
  plug Plug.Head
  plug Plug.Session, @session_options

  # Attaches request metadata ($current_url, method, user agent) to analytics
  # events captured during the request and reads browser tracing headers.
  # Analytics hints only; identity still comes from the session.
  plug PostHog.Integrations.Plug

  plug OpenAgentsWeb.Router
end