import { describe, expect, it } from "@effect/vitest";import { Option } from "effect"; import { detectedAuthenticationTemplates, resolvedOAuthScopes } from "./derive-auth";import { OAuth2Preset } from "./preview"; describe("resolvedOAuthScopes", () => {  it("does not synthesize OIDC scopes for a plain OAuth provider", () => {    expect(resolvedOAuthScopes(["current_user:read", "files:read"], "auto")).toEqual([      "current_user:read",      "files:read",    ]);  });   it("preserves advertised OIDC scopes in auto mode", () => {    expect(resolvedOAuthScopes(["read", "openid", "profile"], "auto")).toEqual([      "read",      "openid",      "profile",    ]);  });   it("merges explicitly configured identity scopes", () => {    expect(resolvedOAuthScopes(["read", "email"], ["openid", "email"])).toEqual([      "read",      "email",      "openid",    ]);  });}); const oauth2Preset = (  securitySchemeName: string,  flow: "authorizationCode" | "clientCredentials",) =>  OAuth2Preset.make({    label: `OAuth2 ${flow === "authorizationCode" ? "Authorization Code" : "Client Credentials"} · ${securitySchemeName}`,    securitySchemeName,    flow,    authorizationUrl:      flow === "authorizationCode" ? Option.some("https://example.com/auth") : Option.none(),    tokenUrl: "https://example.com/token",    resource: Option.none(),    refreshUrl: Option.none(),    scopes: { read: "Read access" },    identityScopes: "auto",  }); describe("detectedAuthenticationTemplates", () => {  it("stores no label for a lone oauth2 method", () => {    const templates = detectedAuthenticationTemplates(      [],      [oauth2Preset("oauth_app", "authorizationCode")],      "https://example.com",    );    expect(templates).toHaveLength(1);    expect(templates[0]).not.toHaveProperty("label");  });   it("labels each oauth2 method from its preset when several are detected", () => {    const templates = detectedAuthenticationTemplates(      [],      [        oauth2Preset("oauth_app", "authorizationCode"),        oauth2Preset("oauth_app", "clientCredentials"),      ],      "https://example.com",    );    expect(      templates.map((template) => (template.kind === "oauth2" ? template.label : null)),    ).toEqual(["OAuth2 Authorization Code · oauth_app", "OAuth2 Client Credentials · oauth_app"]);  });}); describe("query-located api keys", () => {  it("a query apiKey preset places the secret in the query string", () => {    const templates = detectedAuthenticationTemplates(      [        {          label: "Legacy-API-key (query)",          headers: {},          secretHeaders: [],          secretQueryParams: ["apiKey"],        },      ],      [],      "https://example.com",    );    expect(templates).toHaveLength(1);    const template = templates[0];    expect(template?.kind).toBe("apikey");    expect(template?.kind === "apikey" ? template.placements : []).toEqual([      { carrier: "query", name: "apiKey" },    ]);  });   it("a strategy mixing a header and a query param asks for two inputs", () => {    const templates = detectedAuthenticationTemplates(      [        {          label: "exp-api-key + apiKey (query)",          headers: { "exp-api-key": null },          secretHeaders: ["exp-api-key"],          secretQueryParams: ["apiKey"],        },      ],      [],      "https://example.com",    );    const template = templates[0];    const placements = template?.kind === "apikey" ? template.placements : [];    expect(placements.map((placement) => placement.carrier)).toEqual(["header", "query"]);    expect(new Set(placements.map((placement) => placement.variable)).size).toBe(2);  });});