package configgen

import (
	"strings"
	"testing"

	"gitea.dooplex.hu/admin/felhom-hub/internal/store"
)

// R-879: a config whose sealed secrets did not open must not become a controller.yaml with an empty
// hub key — Generate refuses it.
func TestR879_GenerateRefusesUnreadableSecrets(t *testing.T) {
	cfg := &store.CustomerConfig{CustomerID: "c1", ConfigJSON: "{}", SecretsUnreadable: true}
	out, err := Generate("hub: {}\n", cfg, nil)
	if err == nil || strings.Contains(out, "api_key") {
		t.Fatalf("Generate = %q, %v — want a refusal", out, err)
	}
	cfg.SecretsUnreadable = false
	cfg.APIKey = "k1"
	if out, err := Generate("hub: {}\n", cfg, nil); err != nil || !strings.Contains(out, "k1") {
		t.Fatalf("readable config = %q, %v", out, err)
	}
}