package api

import (
	"testing"

	"gitea.dooplex.hu/admin/felhom-hub/internal/notify"
)

// R-304 option C (decision 183): the controller's recovery_older_package must be accepted (or POST /event 400s — R-77)
// and must reach only the operator. RED-PROOF: drop it from allowedEventTypes → "must be in allowedEventTypes".
func TestR304_RecoveryOlderPackageIsAllowlistedAndOperatorOnly(t *testing.T) {
	et := "recovery_older_package"
	if !allowedEventTypes[et] {
		t.Fatalf("%s must be in allowedEventTypes — the controller's push would 400", et)
	}
	if !notify.IsOperatorOnly(et) {
		t.Fatalf("%s must be operator-only — reopening old history is the operator's (R-312)", et)
	}
}