// Runtime plan auth tests cover provider/auth-profile selection and plugin

// alias loading behavior for the auth portion of the plan.

import { beforeEach, describe, expect, it, vi } from "vitest";

const pluginRegistryMocks = vi.hoisted(() => {

});

it("does not load provider auth aliases when plugins are disabled", () => {

// Disabling alias support should avoid metadata loading entirely, not just

// ignore aliases after doing plugin work.

pluginRegistryMocks.loadPluginManifestRegistryForPluginRegistry.mockReturnValue({

plugins: [

{

// Runtime plan tool-diagnostics tests cover the legacy provider diagnostic path

// used when no runtime plan owns tool schema diagnostics.

import { describe, expect, it, vi } from "vitest";

const mocks = vi.hoisted(() => ({

// Runtime plan type-compat tests keep copied structural aliases aligned with

// their source runtime contracts without importing those sources in production.

import { describe, expectTypeOf, it } from "vitest";

import type { ReplyPayload } from "../../auto-reply/reply-payload.js";

import type { ThinkLevel } from "../../auto-reply/thinking.js";

// Runtime plan type tests keep the leaf type contract free from concrete

// runtime policy modules so the plan can stay a low-dependency boundary.

import fs from "node:fs/promises";

import { fileURLToPath } from "node:url";

import { describe, expect, it } from "vitest";

});

it("guards against policy type imports re-entering the leaf contract", () => {

// The patterns intentionally match representative forbidden imports so the

// first test fails if concrete policy types creep into the leaf contract.

const forbiddenImports = [

'import type { PromptContribution } from "../system-prompt.types.js";',

'import type { TranscriptPolicy } from "../transcript-policy.types.js";',

// Runtime proxy tests cover SSE parsing, terminal error handling, and request

// payload scrubbing before proxying model streams.

import { afterEach, describe, expect, it, vi } from "vitest";

import type { Context, Model, Usage } from "../../llm/types.js";

import { streamProxy } from "./proxy.js";

});

it("flushes a final SSE frame without a trailing newline", async () => {

// Provider proxies can close immediately after the last SSE frame; the

// parser still has to emit the terminal done event.

const fetchMock = vi.fn(async (_input: RequestInfo | URL, _init?: RequestInit) =>

responseFromText(

`data: ${JSON.stringify({

// Git utility tests cover plugin git source parsing, ref extraction, and path

// traversal rejection before managed checkouts are created.

import { describe, expect, it } from "vitest";

import { parseGitUrl } from "./git.js";

});

it("rejects repository paths that could escape managed checkout roots", () => {

// Managed plugin checkouts derive local paths from repo path segments, so

// dot-segments are rejected instead of normalized.

expect(parseGitUrl("git:https://example.com/openclaw/../outside")).toBeNull();

expect(parseGitUrl("git:git@example.com:openclaw/../outside")).toBeNull();

expect(parseGitUrl("git:example.com/openclaw/./outside")).toBeNull();