import assert from "node:assert/strict";
import {
  assertReaderProduct,
  createReaderToken,
  hashReaderToken,
  normalizeReaderBindingRequest,
  safeReaderBinding,
} from "../src/reader-binding.mjs";

const now = new Date("2026-07-15T12:00:00.000Z");
const policy = normalizeReaderBindingRequest({
  source: { tenantId: "tenant-01", connectionId: "connection-01", providerId: "example-provider" },
  allowedDataProductIds: ["fleet.positions.current.v1"],
  expiresAt: "2026-08-01T12:00:00.000Z",
}, { now });
const token = createReaderToken();
assert.match(token, /^ndc_edprb_[A-Za-z0-9_-]{40,}$/);
assert.equal(hashReaderToken(token), hashReaderToken(token));
assert.equal(assertReaderProduct({ ...policy, active: true }, "fleet.positions.current.v1", now), "fleet.positions.current.v1");
assert.throws(() => assertReaderProduct({ ...policy, active: true }, "other.product.v1", now), /reader_binding_data_product_forbidden/);
const safe = safeReaderBinding({ id: "reader-01", ...policy, active: true, token, tokenHash: hashReaderToken(token) });
assert.equal("token" in safe, false);
assert.equal("tokenHash" in safe, false);

console.log("external-data-plane reader bindings: ok");