"""Regression coverage for OpenClaw skill HMAC environment names."""

import importlib.util
from pathlib import Path


def _load_sb_query(monkeypatch):
    module_path = Path(__file__).resolve().parents[2] / "openclaw-skills" / "shadowbroker" / "sb_query.py"
    spec = importlib.util.spec_from_file_location("shadowbroker_skill_sb_query_test", module_path)
    assert spec and spec.loader
    module = importlib.util.module_from_spec(spec)
    spec.loader.exec_module(module)
    return module


def test_openclaw_skill_prefers_hmac_secret_env(monkeypatch):
    monkeypatch.setenv("SHADOWBROKER_HMAC_SECRET", "preferred-hmac-secret")
    monkeypatch.setenv("SHADOWBROKER_KEY", "legacy-hmac-secret")

    module = _load_sb_query(monkeypatch)

    assert module.ShadowBrokerClient()._hmac_secret == "preferred-hmac-secret"


def test_openclaw_skill_accepts_legacy_key_as_hmac_secret_alias(monkeypatch):
    monkeypatch.delenv("SHADOWBROKER_HMAC_SECRET", raising=False)
    monkeypatch.setenv("SHADOWBROKER_KEY", "legacy-hmac-secret")

    module = _load_sb_query(monkeypatch)
    client = module.ShadowBrokerClient()
    headers = client._sign_headers("GET", "/api/ai/tools")

    assert client._hmac_secret == "legacy-hmac-secret"
    assert "X-SB-Timestamp" in headers
    assert "X-SB-Nonce" in headers
    assert "X-SB-Signature" in headers
    assert "Authorization" not in headers
    assert "X-Admin-Key" not in headers