import { afterEach, describe, expect, it } from "vitest";
import { buildOpenShellSandboxName, buildOpenShellSshExecEnv } from "./backend.js";

describe("openshell backend env", () => {
  const originalEnv = { ...process.env };

  afterEach(() => {
    for (const key of Object.keys(process.env)) {
      if (!(key in originalEnv)) {
        delete process.env[key];
      }
    }
    Object.assign(process.env, originalEnv);
  });

  it("filters blocked secrets from ssh exec env", () => {
    process.env.OPENAI_API_KEY = "sk-test-secret";
    process.env.ANTHROPIC_API_KEY = "sk-ant-test-secret";
    process.env.LANG = "en_US.UTF-8";
    process.env.NODE_ENV = "test";

    const env = buildOpenShellSshExecEnv();

    expect(env.OPENAI_API_KEY).toBeUndefined();
    expect(env.ANTHROPIC_API_KEY).toBeUndefined();
    expect(env.LANG).toBe("en_US.UTF-8");
    expect(env.NODE_ENV).toBe("test");
  });
});

describe("openshell sandbox names", () => {
  it("generates Kubernetes-safe names from OpenClaw session scope keys", () => {
    const name = buildOpenShellSandboxName("agent:somalley_alice:dashboard-8");

    expect(name).toMatch(/^[a-z0-9]([-a-z0-9]*[a-z0-9])?$/);
    expect(name).toContain("somalley-alice");
    expect(name).not.toContain("_");
    expect(name.length).toBeLessThanOrEqual(63);
  });
});