<?php
/**
 * Settings tests.
 *
 * @package Aivexa
 */

declare(strict_types=1);

if ( ! defined( 'ABSPATH' ) ) {
	exit; // Exit if accessed directly.
}

use PHPUnit\Framework\TestCase;

require_once dirname( __DIR__ ) . '/includes/class-settings.php';

final class Aivexa_Settings_Test extends TestCase {

	public function test_defaults_include_security_instructions(): void {
		$defaults = Aivexa_Settings::get_defaults();
		$this->assertArrayHasKey( 'system_instructions', $defaults );
		$this->assertStringContainsString( 'untrusted', strtolower( $defaults['system_instructions'] ) );
	}

	public function test_sanitize_clears_api_key(): void {
		$defaults = Aivexa_Settings::get_defaults();
		$sanitized = Aivexa_Settings::sanitize(
			array_merge(
				$defaults,
				array(
					'enabled' => '1',
					'api_key' => 'sk-should-not-persist-1234567890',
				)
			)
		);
		$this->assertSame( '', $sanitized['api_key'] );
	}
}