// Token lifetimes
export const ACCESS_TOKEN_MAX_AGE_SECONDS = 10 * 60; // 10 minutes
export const REFRESH_TOKEN_MAX_AGE_SECONDS = 14 * 24 * 60 * 60; // 14 days
export const REFRESH_TOKEN_MAX_AGE_MS = REFRESH_TOKEN_MAX_AGE_SECONDS * 1000;

// bcrypt work factors — higher value for long-lived tokens
export const BCRYPT_ROUNDS = 10;
export const BCRYPT_ROUNDS_TOKEN = 12;

// Pilot program
export const PILOT_TOKEN_ALLOWANCE = 1_000_000;
export const PILOT_DURATION_MS = 14 * 24 * 60 * 60 * 1000; // 14 days

// Code-complexity risk thresholds used by all VCS analyze routes
export const COMPLEXITY_THRESHOLDS = {
  high:   { complexity: 20, nestingDepth: 6, codeLines: 500 },
  medium: { complexity: 10, nestingDepth: 4, codeLines: 200 },
} as const;