// Not run by this repository's CI: tomtom-international has no self-hosted runners and the workforce account may only sign in from a TomTom IP, so tomtom-internal/tomtom-mcp-infra checks out main and runs it (see README, "OAuth end-to-end test").
import { defineConfig, devices } from "@playwright/test";
import { config } from "dotenv";
import { environmentFromEnv } from "./e2e/oauth/environments";

config();

process.env.PLAYWRIGHT_NO_COPY_PROMPT = "1"; // Disbales Playwright's snapshot from capturing the typed password

// Redirect hosts resolve to localhost so a captured authorization code never leaves the machine.
const redirectHostsToLocalhost = environmentFromEnv()
  .connectors.map((connector) => `MAP ${new URL(connector.redirectUri).hostname} 127.0.0.1`)
  .join(",");

export default defineConfig({
  testDir: "./e2e",
  testMatch: "oauth.spec.ts",
  timeout: 180_000,
  expect: { timeout: 30_000 },
  fullyParallel: false,
  workers: 1,
  // A monitor must report every failure, and each retry is one more password login for the test accounts.
  retries: 0,
  reporter: [["html", { open: "never" }], ["list"], ...(process.env.CI ? [["github"] as const] : [])],
  // No trace: it would record the typed password, the token response and every bearer header.
  use: {
    ...devices["Desktop Chrome"],
    screenshot: "only-on-failure",
    launchOptions: { args: [`--host-resolver-rules=${redirectHostsToLocalhost}`] },
  },
});