import { describe, expect, it } from 'vitest';

import { teamNameKeySql } from '../team-abbreviations';

describe('teamNameKeySql', () => {
  it('accepts known team-name columns with optional table aliases', () => {
    expect(teamNameKeySql('home_team')).toContain("coalesce(home_team, '')");
    expect(teamNameKeySql('fc.away_team')).toContain("coalesce(fc.away_team, '')");
  });

  it('rejects arbitrary SQL expressions', () => {
    expect(() => teamNameKeySql('home_team); DROP TABLE rm_events; --')).toThrow(/Unsafe teamNameKeySql column/);
    expect(() => teamNameKeySql('fc.starts_at')).toThrow(/Unsafe teamNameKeySql column/);
  });
});
