import type { CapacitorConfig } from "@capacitor/cli";

/**
 * The Android shell's configuration.
 *
 * NOTE what is NOT here: `server.allowNavigation`. The one host this app is
 * allowed to leave its own origin for is the host the OWNER TYPED, and that is
 * not knowable at build time. It is enforced at runtime instead, in
 * `AstrolabePlugin.shouldOverrideLoad` — Capacitor asks every plugin before it
 * decides whether a navigation stays in the WebView or is handed to the
 * browser, and the plugin says yes to exactly one host. A `allowNavigation:
 * ["*"]` here would have been the same feature with the gate taken off.
 */
const config: CapacitorConfig = {
  // The install id stays the pre-rename one on purpose: see build.gradle.
  appId: "dev.vellum.mobile",
  appName: "Astrolabe",
  webDir: "www",

  server: {
    // https://localhost for the bundled connection screen. The served instance
    // is reached by its own real origin, so its session cookie is scoped to the
    // server the way it would be in any browser.
    androidScheme: "https",
  },

  // The one word the web client reads to know it is inside this shell:
  // client/androidShell.ts offers "Change server or vault…" only then, and the
  // way back it takes — a navigation to /__astrolabe/setup on whatever host —
  // is caught by AstrolabePlugin.shouldOverrideLoad. Nothing else keys on it.
  appendUserAgent: "Astrolabe-Android",

  android: {
    // The shell talks to ONE host and that host may well be a home server with
    // no certificate. Cleartext is permitted by res/xml/network_security_config
    // rather than blanket-allowed here; see that file for the argument.
    allowMixedContent: false,
    // A back gesture that quietly reloaded the page instead of leaving it is
    // the single worst thing a WebView shell does. MainActivity handles back
    // itself; nothing here should second-guess it.
    backgroundColor: "#0f1113",
  },

  plugins: {
    SplashScreen: {
      // Hidden by the shell the moment the connection screen has painted, so
      // the gold star never cuts to a blank frame.
      launchAutoHide: false,
      backgroundColor: "#0d1117",
      androidSplashResourceName: "splash",
      androidScaleType: "CENTER_CROP",
      splashFullScreen: false,
      splashImmersive: false,
    },
    SystemBars: {
      // Light glyphs, because every ground this app ever shows is the default room's (#0f1113).
      style: "DARK",

      // The plugin still styles the bars; it no longer decides where the
      // content stops. Its inset handler chooses between padding the WebView's
      // container and passing the insets to CSS on two facts — the WebView's
      // major version, and whether the loaded page declared
      // `viewport-fit=cover` — and the second is learned from a script
      // Capacitor injects into ONE origin, the bundled screens'. On the owner's
      // instance, which is where this app lives, that flag is a leftover
      // reading from the connection screen, so a phone with a current WebView
      // gets the CSS branch for a page whose CSS knows nothing about it: the
      // vault's tab bar under the notification bar. `disable` hands the whole
      // question to SystemBarInsets.java, which pads unconditionally.
      insetsHandling: "disable",
    },
  },
};

export default config;