import { describe, it, expect } from 'vitest';
import { redact } from '../../src/utils/redact.js';

describe('redact', () => {
  it('redacts OPENAI_API_KEY (quoted)', () => {
    const input = 'OPENAI_API_KEY="abc123"';
    const output = redact(input);
    expect(output).toBe('OPENAI_API_KEY="[REDACTED]"');
  });

  it('redacts API_KEY (unquoted)', () => {
    const input = 'API_KEY=secretvalue';
    const output = redact(input);
    expect(output).toBe('API_KEY=[REDACTED]');
  });

  it('redacts TOKEN with AUTH_ prefix', () => {
    const input = 'AUTH_TOKEN="my-token"';
    const output = redact(input);
    expect(output).toBe('AUTH_TOKEN="[REDACTED]"');
  });

  it('redacts SECRET value (single quotes preserved)', () => {
    const input = "SECRET='s3cret'";
    const output = redact(input);
    expect(output).toBe("SECRET='[REDACTED]'");
  });

  it('redacts PASSWORD (unquoted)', () => {
    const input = 'PASSWORD=plaintext';
    const output = redact(input);
    expect(output).toBe('PASSWORD=[REDACTED]');
  });

  it('redacts Bearer token', () => {
    const input = 'Authorization: Bearer eyJhbGciOiJIUzI1NiJ9';
    const output = redact(input);
    expect(output).toBe('Authorization: Bearer [REDACTED]');
  });

  it('redacts PEM private key block (multi-line)', () => {
    const input = '-----BEGIN RSA PRIVATE KEY-----\nMIIEpAIBAAKCAQEA\n-----END RSA PRIVATE KEY-----';
    const output = redact(input);
    expect(output).toBe('-----BEGIN RSA PRIVATE KEY-----\n[REDACTED]\n-----END RSA PRIVATE KEY-----');
  });

  it('redacts Git URL credentials (user:password format)', () => {
    const input = 'https://deploy:user:p4ss@github.com/org/repo.git';
    const output = redact(input);
    expect(output).toBe('https://deploy:[REDACTED]@github.com/org/repo.git');
  });

  it('handles multiple secrets in one string', () => {
    const input = 'OPENAI_API_KEY="abc" TOKEN=\'def\' PASSWORD=ghi';
    const output = redact(input);
    expect(output).toBe('OPENAI_API_KEY="[REDACTED]" TOKEN=\'[REDACTED]\' PASSWORD=[REDACTED]');
  });

  it('returns unchanged input when no secrets found', () => {
    const input = 'const greeting = "Hello, world!";\nexport default App;';
    expect(redact(input)).toBe(input);
  });

  it('handles empty string input', () => {
    expect(redact('')).toBe('');
  });
});