await agentsBindingsCommand({}, runtime);

expect(runtime.log).toHaveBeenCalledWith(expect.stringContaining("main <- matrix"));

expect(runtime.log).toHaveBeenCalledWith(

expect.stringContaining("ops <- telegram accountId=work"),

["Routing bindings:", "- main <- matrix", "- ops <- telegram accountId=work"].join("\n"),

);

});

expect(buildProviderStatusIndexMock).toHaveBeenCalledOnce();

expect(buildProviderSummaryMetadataIndexMock).toHaveBeenCalledOnce();

expect(runtime.log).toHaveBeenCalledWith(expect.stringContaining("Providers:"));

expect(runtime.log).toHaveBeenCalledWith(

expect.stringContaining("Telegram default: configured"),

);

expect(runtime.log.mock.calls).toEqual([

[

[

"Agents:",

"- main (default)",

" Workspace: ~/.openclaw/workspace",

" Agent dir: ~/.openclaw/agents/main/agent",

" Routing rules: 1",

" Routing: Telegram default",

" Providers:",

" - Telegram default: configured",

"Routing rules map channel/account/peer to an agent. Use --bindings for full rules.",

"Channel status reflects local config/creds. For live health: openclaw channels status --probe.",

].join("\n"),

],

]);

});

});

expect(profileStore?.profiles).toEqual({});

expect(providerId).toBe("openai-codex");

expect(note).toHaveBeenCalledWith(

expect.stringContaining('No auth configured for provider "openai-codex"'),

'No auth configured for provider "openai-codex". The agent may fail until credentials are added. Run `openclaw models auth login --provider openai-codex`, `openclaw configure`, or set an API key env var.',

"Model check",

);

});

noteCommandOwnerHealth({});

expect(note).toHaveBeenCalledWith(

expect.stringContaining("No command owner is configured."),

[

"No command owner is configured.",

"A command owner is the human operator account allowed to run owner-only commands and approve dangerous actions, including /diagnostics, /export-trajectory, /config, and exec approvals.",

"DM pairing only lets someone talk to the bot; it does not make that sender the owner for privileged commands.",

"Fix: set commands.ownerAllowFrom to your channel user id, for example openclaw config set commands.ownerAllowFrom '[\"telegram:123456789\"]'",

"Restart the gateway after changing this if it is already running.",

].join("\n"),

"Command owner",

);

const message = String(note.mock.calls[0]?.[0] ?? "");

noteSourceInstallIssues(root);

expect(note).toHaveBeenCalledWith(

expect.stringContaining("node_modules was not installed by pnpm"),

[

"- node_modules was not installed by pnpm (missing node_modules/.pnpm). Run: pnpm install so bundled plugins can load package-local dependencies.",

"- tsx binary is missing for source runs. Run: pnpm install.",

].join("\n"),

"Install",

);

});

processes: [{ pid: 101, command: "openclaw-tui" }],

});

expect(noteMock).toHaveBeenCalledWith(

expect.stringContaining("Stopped local TUI clients: 101"),

[

"Gateway event loop is degraded while local TUI clients are running.",

"WhatsApp replies can queue behind TUI startup/session refresh work.",

"Local TUI pids: 101",

"",

"Stopped local TUI clients: 101",

].join("\n"),

"WhatsApp responsiveness",

);

});

printModelTable(rows, runtime as never);

expect(runtime.log).toHaveBeenCalledWith(expect.stringContaining("266k/391k"));

expect(runtime.log.mock.calls).toEqual([

["Model Input Ctx Local Auth Tags"],

["openai-codex/gpt-5.5 text+image 266k/391k no yes "],

]);

});

});

expect(next.gateway?.remote?.token).toBe("token-123");

expect(next.gateway?.remote?.tlsFingerprint).toBe("sha256:abc123");

expect(prompter.note).toHaveBeenCalledWith(

expect.stringContaining("Direct remote access defaults to TLS."),

[

"Direct remote access defaults to TLS.",

"Using: wss://gateway.tailnet.ts.net:18789",

"TLS pin: sha256:abc123",

"If your gateway is loopback-only, choose SSH tunnel and keep ws://127.0.0.1:18789.",

].join("\n"),

"Direct remote",

);

});

});

expect(result.secretDiagnostics).toEqual([

expect.stringContaining("OPENCLAW_GATEWAY_TOKEN conflicts with gateway.auth.token"),

"OPENCLAW_GATEWAY_TOKEN conflicts with gateway.auth.token: Remove OPENCLAW_GATEWAY_TOKEN from the shell, ~/.openclaw/.env, or launchctl env if gateway.auth.token is intended, or point gateway.auth.token at ${OPENCLAW_GATEWAY_TOKEN} if the env var should be canonical.",

]);

});