return "static capture, reload success, reload LKG, and command snapshot resolution proved";

}

function assertAllowedFailureCommandSucceeded(result, label, combinedOutput) {

if (result.signal) {

throw new Error(`${label} terminated by signal ${result.signal}: ${combinedOutput}`);

}

if (result.code !== 0) {

throw new Error(`${label} failed (${String(result.code)}): ${combinedOutput}`);

}

}

async function p7AuthProfileSecretRefPersistsAndResolves() {

await withProofEnv("p7", async (envCtx, _plugin, storePath) => {

const port = await allocatePort();

`auth-profile SecretRef did not resolve through plugin integration: ${combined}`,

);

}

assertAllowedFailureCommandSucceeded(

result,

"auth-profile SecretRef model status probe",

combined,

);

const callsAfter = readJson(storePath).calls;

if (callsAfter <= callsBefore) {

throw new Error("auth-profile proof did not invoke the plugin-managed resolver");

}

export {

assertAllowedFailureCommandSucceeded,

collectBlockingProofResults,

cleanupEnv,

expectGatewayStartupFails,

}

});

it("fails allowed-failure probes when the command exits nonzero", async () => {

const proof = await import(

`${pathToFileURL(proofScriptPath).href}?case=allowed-failure-${Date.now()}`

);

expect(() =>

proof.assertAllowedFailureCommandSucceeded(

{

code: 1,

signal: null,

stderr: "resolver invoked openai-profile",

stdout: "openai-profile",

},

"auth-profile SecretRef model status probe",

"openai-profile\nresolver invoked",

),

).toThrow("auth-profile SecretRef model status probe failed (1)");

});

it.runIf(process.platform !== "win32")("bounds captured PTY configure output", async () => {

const root = makeTempDir();

const fakeOpenClaw = writeNoisySecretsConfigureOpenClaw(root);