<?php
/**
 * Security tests.
 *
 * @package Aivexa
 */

declare(strict_types=1);

if ( ! defined( 'ABSPATH' ) ) {
	exit; // Exit if accessed directly.
}

use PHPUnit\Framework\TestCase;

require_once dirname( __DIR__ ) . '/includes/class-security.php';
require_once dirname( __DIR__ ) . '/includes/class-settings.php';

final class Aivexa_Security_Test extends TestCase {

	public function test_redacts_api_key(): void {
		$redacted = Aivexa_Security::redact_sensitive( 'Token sk-test1234567890abcdef' );
		$this->assertStringContainsString( '[REDACTED]', $redacted );
	}

	public function test_sanitize_conversation_id(): void {
		$this->assertSame( 'abc12345', Aivexa_Security::sanitize_conversation_id( 'abc12345' ) );
		$this->assertSame( '', Aivexa_Security::sanitize_conversation_id( '../bad' ) );
	}
}