import test from 'node:test';
import assert from 'node:assert/strict';
import { assertLocalEndpoint } from '../daemon/network-policy.js';

test('network policy permits local QVAC and rejects unapproved remote endpoints', () => {
  assert.equal(assertLocalEndpoint('http://127.0.0.1:11434/v1').hostname, '127.0.0.1');
  assert.throws(() => assertLocalEndpoint('https://example.com/model.gguf'), /disabled/);
});