/**
 * Regression coverage for the OAuth-session Electron net.request path.
 *
 * Electron net rejects manual Content-Length/Host headers with
 * net::ERR_INVALID_ARGUMENT. Node HTTP helpers may still set Content-Length;
 * this guard is scoped to fetchJsonViaOauthSession only.
 */

import assert from 'node:assert/strict'
import fs from 'node:fs'
import path from 'node:path'
import test from 'node:test'
import { fileURLToPath } from 'node:url'

const __dirname = path.dirname(fileURLToPath(import.meta.url))
const source = fs.readFileSync(path.join(__dirname, 'main.ts'), 'utf8')

function extractFetchJsonViaOauthSession() {
  const start = source.indexOf('function fetchJsonViaOauthSession')
  const end = source.indexOf('// Mint a single-use WS ticket', start)
  assert.notEqual(start, -1, 'fetchJsonViaOauthSession should exist')
  assert.notEqual(end, -1, 'fetchJsonViaOauthSession boundary should exist')

  return source.slice(start, end)
}

test('OAuth Electron net request does not set forbidden Content-Length header', () => {
  const fn = extractFetchJsonViaOauthSession()

  assert.match(fn, /electronNet\.request/)
  assert.doesNotMatch(fn, /setHeader\(['"]Content-Length['"]/)
  assert.match(fn, /request\.write\(body\)/)
})