// Sessions access tests cover session-tool visibility policy, sandbox clamps,

// and agent-to-agent allow rules.

import { describe, expect, it, vi } from "vitest";

import type { OpenClawConfig } from "../../config/config.js";

import {

});

it("handles multiple wildcards without polynomial backtracking", () => {

// Allow patterns use segment matching rather than a greedy regex so

// adversarial agent ids cannot cause slow policy checks.

const policy = createAgentToAgentPolicy({

tools: {

agentToAgent: {

// sessions_history tool tests cover recall redaction and input validation for

// session transcript history returned to models.

import fs from "node:fs";

import os from "node:os";

import path from "node:path";

});

it("redacts recalled session text even when log redaction is disabled", async () => {

// Recalled transcript content is model-visible, so it is always redacted

// even when normal logging redaction is configured off.

useLoggingConfig("redaction-off.json", { redactSensitive: "off" });

const tool = createHistoryToolWithMessage("OPENROUTER_API_KEY=sk-or-v1-abcdef0123456789");

// Sessions resolution tests cover alias mapping, session-id lookup, visibility

// verification, and requester-spawned access checks.

import { beforeAll, beforeEach, describe, expect, it, vi } from "vitest";

import type { OpenClawConfig } from "../../config/config.js";

const callGatewayMock = vi.fn();

});

it("does not hide an exact spawned target behind the sessions.list visibility cap", async () => {

// Exact spawned-session resolution should not depend on a truncated list

// response; otherwise high-volume session stores hide valid children.

callGatewayMock.mockImplementation(

async (request: { method?: string; params?: { key?: string } }) => {

if (request.method === "sessions.resolve") {

// sessions_send helper tests cover session-key target parsing and ping-pong

// turn limits for agent-to-agent announce flows.

import { beforeEach, describe, expect, it } from "vitest";

import { setActivePluginRegistry } from "../../plugins/runtime.js";

import { createSessionConversationTestRegistry } from "../../test-utils/session-conversation-registry.js";

});

it("preserves colon-delimited matrix ids for channel and thread targets", () => {

// Matrix room/thread ids can contain colons, so parsing must split only on

// known wrappers instead of generic colon segments.

expect(

resolveAnnounceTargetFromKey(

"agent:main:matrix:channel:!room:example.org:thread:$AbC123:example.org",

// sessions_send A2A tests cover announce delivery, same-session replies, delayed

// reply baselines, and channel target/account routing.

import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";

import type { CallGatewayOptions } from "../../gateway/call.js";

import { setActivePluginRegistry } from "../../plugins/runtime.js";

});

it("does not direct-deliver a delayed same-session reply without a baseline", async () => {

// Without a baseline fingerprint, a delayed assistant reply may be stale;

// avoid direct delivery unless freshness is provable.

vi.mocked(readLatestAssistantReplySnapshot).mockResolvedValueOnce({

text: "Maybe stale channel reply",

fingerprint: "maybe-stale-channel-reply",

// Sessions tool tests cover list/send helpers, transcript path reporting,

// announce-target resolution, and assistant-visible text sanitization.

import os from "node:os";

import path from "node:path";

import { MAX_TIMER_TIMEOUT_MS } from "@openclaw/normalization-core/number-coercion";

describe("sanitizeTextContent", () => {

it("strips minimax tool call XML and downgraded markers", () => {

// Session recall should not replay provider/tool markup as assistant text.

const input =

'Hello <invoke name="tool">payload</invoke></minimax:tool_call> ' +

"[Tool Call: foo (ID: 1)] world";