import { readFileSync } from "node:fs";
import { resolve } from "node:path";
import { expect, it } from "vitest";

it("links the public contract and documents safe client-credentials usage", () => {
  const read = (path: string) => readFileSync(resolve(process.cwd(), "../..", path), "utf8");
  expect(read("README.md")).toContain("[OpenAPI 3.1](openapi.yaml)");
  expect(read("README.md")).toContain("/openapi.yaml");
  const docs = read("docs/admin-api-authentication.md");
  expect(docs).toContain("/protocol/openid-connect/token");
  expect(docs).toContain('"grant_type": "client_credentials"');
  expect(docs).toContain("getpass.getpass");
  expect(docs).toContain("No helper is installed");
  expect(docs).toContain("Do not enable shell tracing");
});