import { describe, expect, it } from "vitest";
import { redact, redactString } from "../src/logger.ts";
import { memoryLogger } from "./helpers.ts";

describe("日志脱敏", () => {
  it("URL query 中的 passkey/token 被替换", () => {
    expect(redactString("https://pt.example/rss?passkey=abc123&x=1")).toBe(
      "https://pt.example/rss?passkey=[REDACTED]&x=1",
    );
    expect(redactString("/dl?id=1&token=zzz")).toBe("/dl?id=1&token=[REDACTED]");
  });

  it("敏感字段整体替换,数值计数保留", () => {
    expect(redact({ cookie: "a=b", nested: { Authorization: "Bearer x", password: "p" }, inputTokens: 12 })).toEqual({
      cookie: "[REDACTED]",
      nested: { Authorization: "[REDACTED]", password: "[REDACTED]" },
      inputTokens: 12,
    });
  });

  it("logger 输出不含明文", () => {
    const { logger, lines } = memoryLogger();
    logger.info({ url: "https://x/rss?passkey=SECRET1", token: "SECRET2" }, "fetch https://y/?token=SECRET3");
    logger.error({ err: new Error("GET https://x/dl?passkey=SECRET4 failed") }, "boom");
    const out = lines.join("");
    for (const s of ["SECRET1", "SECRET2", "SECRET3", "SECRET4"]) expect(out).not.toContain(s);
  });
});

describe("日志脱敏:child 绑定与 Error 序列化", () => {
  it("child() 绑定的敏感字段被脱敏", () => {
    const { logger, lines } = memoryLogger();
    logger.child({ component: "worker", password: "SECRET5", url: "https://x/?passkey=SECRET6" }).warn("child");
    const out = lines.join("");
    expect(out).not.toContain("SECRET5");
    expect(out).not.toContain("SECRET6");
    const line = JSON.parse(lines.at(-1)!);
    expect(line.component).toBe("worker");
    expect(line.password).toBe("[REDACTED]");
  });

  it("err 按 message/stack 序列化而不是 {},且内容脱敏", () => {
    const { logger, lines } = memoryLogger();
    const err = Object.assign(new Error("GET https://x/dl?passkey=SECRET7 failed", { cause: new Error("inner") }), {
      code: "E_FETCH",
      token: "SECRET8",
    });
    logger.error({ err }, "boom");
    const line = JSON.parse(lines.at(-1)!);
    expect(line.err.type).toBe("Error");
    expect(line.err.message).toBe("GET https://x/dl?passkey=[REDACTED] failed");
    expect(line.err.stack).toContain("Error: GET https://x/dl?passkey=[REDACTED] failed");
    expect(line.err.code).toBe("E_FETCH");
    expect(line.err.token).toBe("[REDACTED]");
    expect(line.err.cause.message).toBe("inner");
    expect(lines.join("")).not.toMatch(/SECRET7|SECRET8/);
  });

  it("redact() 直接处理 Error", () => {
    expect(redact(new Error("x?token=abc"))).toMatchObject({ type: "Error", message: "x?token=[REDACTED]" });
  });
});