// Isolated from ratelimit.test.ts because it needs to control whether
// FEEDBACK_IP_SALT is present at module-load time, which a real dotenv.config()
// call would silently repopulate from the repo's .env file.
import {vi, describe, it, expect, afterEach} from 'vitest';
vi.mock('dotenv', () => ({config: vi.fn()}));
vi.mock('../../src/models/feedback/Feedback.db.js', () => ({
	NachklangFeedbackDB: {getConnection: vi.fn()}
}));

describe('FEEDBACK_IP_SALT enforcement', () => {
	const originalSalt = process.env.FEEDBACK_IP_SALT;

	afterEach(() => {
		process.env.FEEDBACK_IP_SALT = originalSalt;
		vi.resetModules();
	});

	it('throws at import time when FEEDBACK_IP_SALT is unset, rather than silently hashing unsalted', async () => {
		vi.resetModules();
		delete process.env.FEEDBACK_IP_SALT;
		await expect(import('../../src/models/feedback/feedback.ratelimit.js')).rejects.toThrow(/FEEDBACK_IP_SALT/);
	});

	it('does not throw when FEEDBACK_IP_SALT is set', async () => {
		vi.resetModules();
		process.env.FEEDBACK_IP_SALT = 'a-real-salt';
		await expect(import('../../src/models/feedback/feedback.ratelimit.js')).resolves.toBeDefined();
	});
});