import { assert, describe, it } from "@effect/vitest";import * as Effect from "effect/Effect";import * as Layer from "effect/Layer";import { HttpClient, HttpClientRequest, HttpClientResponse } from "effect/unstable/http";import { afterEach } from "vite-plus/test"; import { fetchCloudAuth, validateClerkFrontendApiUrl } from "./cloudAuth.ts"; const originalClerkPublishableKey = process.env.T3CODE_CLERK_PUBLISHABLE_KEY; const clerkPublishableKey = (hostname: string): string =>  `pk_test_${Buffer.from(`${hostname}$`).toString("base64")}`; function makeHttpClientLayer(  handler: (    request: HttpClientRequest.HttpClientRequest,  ) => Effect.Effect<HttpClientResponse.HttpClientResponse, never>,) {  return Layer.succeed(    HttpClient.HttpClient,    HttpClient.make((request) => handler(request)),  );} describe("Desktop cloud auth IPC", () => {  afterEach(() => {    if (originalClerkPublishableKey === undefined) {      delete process.env.T3CODE_CLERK_PUBLISHABLE_KEY;    } else {      process.env.T3CODE_CLERK_PUBLISHABLE_KEY = originalClerkPublishableKey;    }  });   it.effect("preserves Clerk's URL-encoded OAuth form content type", () => {    const body = "strategy=oauth_google&redirect_url=t3code%3A%2F%2Fauth%2Fcallback";    let forwardedRequest: HttpClientRequest.HttpClientRequest | null = null;    const layer = makeHttpClientLayer((request) =>      Effect.sync(() => {        forwardedRequest = request;        return HttpClientResponse.fromWeb(          request,          Response.json({ response: { object: "sign_in_attempt" } }),        );      }),    );     return Effect.gen(function* () {      yield* fetchCloudAuth.handler({        url: "https://example.clerk.accounts.dev/v1/client/sign_ins",        method: "POST",        headers: {          "Content-Type": "application/x-www-form-urlencoded;charset=UTF-8",          "x-mobile": "1",        },        body,      });       assert(forwardedRequest !== null);      assert.equal(        forwardedRequest.headers["content-type"],        "application/x-www-form-urlencoded;charset=UTF-8",      );      assert.equal(forwardedRequest.body._tag, "Uint8Array");      if (forwardedRequest.body._tag === "Uint8Array") {        assert.equal(new TextDecoder().decode(forwardedRequest.body.body), body);      }    }).pipe(Effect.provide(layer));  });   it.effect(    "allows the custom Clerk Frontend API host encoded by the configured publishable key",    () => {      process.env.T3CODE_CLERK_PUBLISHABLE_KEY = clerkPublishableKey("clerk.t3.codes");      let forwardedRequest: HttpClientRequest.HttpClientRequest | null = null;      const layer = makeHttpClientLayer((request) =>        Effect.sync(() => {          forwardedRequest = request;          return HttpClientResponse.fromWeb(            request,            Response.json({ response: { object: "client" } }),          );        }),      );       return Effect.gen(function* () {        yield* fetchCloudAuth.handler({          url: "https://clerk.t3.codes/v1/client",          method: "GET",          headers: {},        });         assert(forwardedRequest !== null);        assert.equal(forwardedRequest.url.toString(), "https://clerk.t3.codes/v1/client");      }).pipe(Effect.provide(layer));    },  );   it("rejects arbitrary HTTPS hosts that are not configured Clerk Frontend API hosts", () => {    process.env.T3CODE_CLERK_PUBLISHABLE_KEY = clerkPublishableKey("clerk.t3.codes");    assert.throws(      () => validateClerkFrontendApiUrl("https://attacker.example/v1/client"),      /restricted to Clerk Frontend API HTTPS hosts/u,    );  });});