from pathlib import Path


ENTRYPOINT = Path(__file__).resolve().parents[1] / "docker_entrypoint.sh"


def test_entrypoint_never_exposes_admin_password_in_process_arguments():
    source = ENTRYPOINT.read_text(encoding="utf-8")
    assert '--password "${ADMIN_PASSWORD}"' not in source
    assert 'uv run --frozen python scripts/bootstrap_super_admin.py' in source