import { test } from 'node:test';
import assert from 'node:assert/strict';
const secret = 'sk-test-NOT-A-SECRET-1234';
// JSON.parse quotes a prefix near this fault on Node 26; check partial leaks too.
function safe(label, ErrorType, properties = {}) {
  return error => {
    assert.ok(error instanceof ErrorType);
    for (const [key, value] of Object.entries(properties)) assert.equal(error[key], value);
    assert.ok(error.message.includes(label), error.message);
    assert.doesNotMatch(error.message, /sk-test|Unexpected token/);
    assert.doesNotMatch(error.stack, /sk-test/);
    assert.equal(error.cause, undefined);
    return true;
  };
}
import { BundleError, webPlan } from '../src/bundle.mjs';
test('harness web refusal names the harness field without the configured value', () => {
  assert.throws(() => webPlan({ instance: 'builder', definition: 'coder', webSource: 'harness-builtin', limits: { tools: ['web'] } }, secret, false), safe('harness', BundleError, { code: 'bundle-refused' }));
});