package kb_test

import (
	"bytes"
	"net/http"
	"net/http/httptest"
	"testing"

	"github.com/stretchr/testify/require"
)

func TestKBHandlerRejectsMissingWorkspaceScope(t *testing.T) {
	mux := newKBTestMux(t)
	req := httptest.NewRequest(http.MethodPost, "/api/v1/kb", bytes.NewBufferString(`{"name":"Runbooks"}`))
	req.Header.Set("Authorization", "Bearer "+jwt(map[string]any{"sub": "user-1"}))
	rec := httptest.NewRecorder()
	mux.ServeHTTP(rec, req)
	require.Equal(t, http.StatusBadRequest, rec.Code)
}