import { streamSimpleOpenAICompletions, type Model } from "@mariozechner/pi-ai";

import type { Model } from "@mariozechner/pi-ai";

import { afterEach, beforeAll, beforeEach, describe, expect, it, vi } from "vitest";

import type { ModelProviderConfig } from "../config/config.js";

import { withFetchPreconnect } from "../test-utils/fetch-mock.js";

import type { AuthProfileStore } from "./auth-profiles.js";

import {

CUSTOM_LOCAL_AUTH_MARKER,

GCP_VERTEX_CREDENTIALS_MARKER,

NON_ENV_SECRETREF_MARKER,

} from "./model-auth-markers.js";

vi.mock("../plugins/plugin-registry.js", () => ({

loadPluginManifestRegistryForPluginRegistry: () => ({

diagnostics: [],

plugins: [

{

origin: "bundled",

nonSecretAuthMarkers: ["gcp-vertex-credentials"],

},

],

}),

}));

vi.mock("../plugins/providers.js", () => ({

resolveOwningPluginIdsForProvider: () => [],

}));

vi.mock("../plugins/setup-registry.js", () => ({

resolvePluginSetupProvider: () => undefined,

}));

vi.mock("../plugins/provider-runtime.js", async () => {

const actual = await vi.importActual<typeof import("../plugins/provider-runtime.js")>(

"../plugins/provider-runtime.js",

});

describe("applyLocalNoAuthHeaderOverride", () => {

const originalFetch = globalThis.fetch;

afterEach(() => {

globalThis.fetch = originalFetch;

vi.restoreAllMocks();

});

it("clears Authorization for synthetic local OpenAI-compatible auth markers", async () => {

let capturedAuthorization: string | null | undefined;

let capturedXTest: string | null | undefined;

let resolveRequest: (() => void) | undefined;

const requestSeen = new Promise<void>((resolve) => {

resolveRequest = resolve;

});

globalThis.fetch = withFetchPreconnect(

vi.fn(async (_input, init) => {

const headers = new Headers(init?.headers);

capturedAuthorization = headers.get("Authorization");

capturedXTest = headers.get("X-Test");

resolveRequest?.();

return new Response(JSON.stringify({ error: { message: "unauthorized" } }), {

status: 401,

headers: { "content-type": "application/json" },

});

}),

);

it("marks synthetic local OpenAI-compatible auth so SDK request headers clear Authorization", () => {

const model = applyLocalNoAuthHeaderOverride(

{

id: "local-llm",

},

);

streamSimpleOpenAICompletions(

model,

{

messages: [

{

role: "user",

content: "hello",

timestamp: Date.now(),

},

],

},

{

apiKey: CUSTOM_LOCAL_AUTH_MARKER,

},

);

await requestSeen;

expect(capturedAuthorization).toBeNull();

expect(capturedXTest).toBe("1");

expect(model.headers).toMatchObject({

Authorization: null,

"X-Test": "1",

});

});

});