from dataclasses import replace

import pytest


def test_internal_secrets_must_be_at_least_32_bytes(settings) -> None:
    with pytest.raises(RuntimeError, match="at least 32 bytes"):
        replace(settings, internal_gateway_key="too-short").validate_gateway()


def test_runtime_requires_deepseek_key_for_extreme_tier(settings) -> None:
    with pytest.raises(RuntimeError, match="DEEPSEEK_API_KEY"):
        replace(settings, deepseek_api_key="").validate_runtime()