// OAuth TLS preflight tests cover timeout handling, TLS diagnostics, and suggested fixes.

import { MAX_TIMER_TIMEOUT_MS } from "@openclaw/normalization-core/number-coercion";

import { beforeEach, describe, expect, it, vi } from "vitest";

import { withEnv } from "../test-utils/env.js";

import {

formatOpenAIOAuthTlsPreflightFix,

runOpenAIOAuthTlsPreflight,

shouldRunOpenAIOAuthTlsPrerequisites,

} from "../plugins/provider-openai-chatgpt-oauth-tls.js";

import { withEnv } from "../test-utils/env.js";

describe("runOpenAIOAuthTlsPreflight", () => {

beforeEach(() => {

vi.clearAllMocks();

});

it("returns ok when OpenAI auth endpoint is reachable", async () => {

const fetchImpl = vi.fn(

async () => new Response("", { status: 400 }),

) as unknown as typeof fetch;

const response = new Response("reachable", { status: 400 });

const cancel = vi.spyOn(response.body!, "cancel").mockResolvedValue(undefined);

const fetchImpl = vi.fn(async () => response) as unknown as typeof fetch;

const result = await runOpenAIOAuthTlsPreflight({ fetchImpl, timeoutMs: 20 });

expect(result).toEqual({ ok: true });

expect(cancel).toHaveBeenCalledOnce();

});

it("caps oversized probe timeouts before creating abort signals", async () => {