// 已读取AGENTS.md
import * as fs from 'fs';
import * as path from 'path';

/**
 * 第四十六批回归闸门：内容安全检测接口鉴权与 openid 可信
 */
describe('第四十六批内容安全接口闸门', () => {
  const rootDir = path.resolve(__dirname, '../../');
  const indexCode = fs.readFileSync(path.join(rootDir, 'server/src/index.ts'), 'utf-8');

  it('需登录且 openid 以会话用户为准（安全闸门不依赖 NODE_ENV）', () => {
    const start = indexCode.indexOf("app.post('/api/security/msg-sec-check'");
    expect(start).toBeGreaterThan(-1);
    const block = indexCode.slice(start, start + 1200);
    expect(block).toContain('SECURE_MODE');
    expect(block).toContain("'内容安全检测'");
    expect(block).toContain('await resolveUserOpenid(callerId)');
    expect(block).not.toContain('const { content, openid, scene } = req.body');
  });
});