package openbao

import (
	"os/exec"
	"path/filepath"
	"strings"
	"testing"
)

func TestEnsureRecoveryIdentity(t *testing.T) {
	if _, err := exec.LookPath("age-keygen"); err != nil {
		t.Skip("age-keygen is required for OpenBao recovery setup")
	}
	recipient, err := EnsureRecoveryIdentity(filepath.Join(t.TempDir(), "recovery-key.txt"))
	if err != nil {
		t.Fatal(err)
	}
	if !strings.HasPrefix(recipient, "age1") {
		t.Fatalf("invalid recovery recipient")
	}
}