server/_core/env.ts

const isDev = process.env.NODE_ENV !== "production";

// Generate a consistent demo secret (for non-OAuth deployments)
const DEMO_SECRET = "aimusic-demo-secret-change-in-production-" + (process.env.SPACE_HOST || "local");

export const ENV = {
  appId: process.env.VITE_APP_ID || "aimusic-attribution-dev",
  // Use JWT_SECRET if provided, otherwise use demo secret (safe for demo deployments)
  cookieSecret: process.env.JWT_SECRET || DEMO_SECRET,
  databaseUrl: process.env.DATABASE_URL ?? "",
  oAuthServerUrl: process.env.OAUTH_SERVER_URL ?? "",
  ownerOpenId: process.env.OWNER_OPEN_ID ?? "",
  isProduction: !isDev,
  forgeApiUrl: process.env.BUILT_IN_FORGE_API_URL ?? "",
  forgeApiKey: process.env.BUILT_IN_FORGE_API_KEY ?? "",
  // HuggingFace OAuth (for HF Spaces deployment)
  hfOAuthClientId: process.env.OAUTH_CLIENT_ID ?? "",
  hfOAuthClientSecret: process.env.OAUTH_CLIENT_SECRET ?? "",
  hfSpaceHost: process.env.SPACE_HOST ?? "", // Auto-set by HF Spaces
};