import { resolveApiKeyFromProfiles } from "./models-config.providers.secret-helpers.js";

import { enforceSourceManagedProviderSecrets } from "./models-config.providers.source-managed.js";

// Covers provider-key canonicalization plus secret marker persistence safeguards.

function normalizeLmstudioBaseUrl(baseUrl: string): string {

const trimmed = baseUrl.trim().replace(/\/+$/, "");

return trimmed.replace(/\/api\/v1$/, "").replace(/\/v1$/, "") + "/v1";

providerKey: string,

provider: { baseUrl?: unknown } | undefined,

) =>

// Keep the test focused on normalizeProviders while preserving LM Studio policy behavior.

providerKey === "lmstudio" && typeof provider?.baseUrl === "string"

? { ...provider, baseUrl: normalizeLmstudioBaseUrl(provider.baseUrl) }

: undefined,

NonNullable<NonNullable<OpenClawConfig["models"]>["providers"]>[string]["models"][number]

> = {},

) => ({

// Compact default model row reused by normalization cases that only vary ids.

id: "config-model",

name: "Config model",

input: ["text"] as Array<"text" | "image">,

const normalized = normalizeProviders({ providers, agentDir });

expect(normalized?.google?.models).toHaveLength(1);

// The first normalized row wins so explicit config details are not replaced by discovery.

const model = normalized?.google?.models?.[0];

expect(model?.id).toBe("gemini-3.1-pro-preview");

expect(model?.name).toBe("Pinned Gemini");

providers,

agentDir,

});

// Env refs persist the env-name marker; non-env refs collapse to a non-secret sentinel.

expect(normalized?.openai?.headers?.Authorization).toBe("secretref-env:OPENAI_HEADER_TOKEN");

expect(normalized?.openai?.headers?.["X-Tenant-Token"]).toBe(NON_ENV_SECRETREF_MARKER);

} finally {