expect(resolveGatewayInstallToken).toHaveBeenCalledTimes(1);

expect(buildGatewayInstallPlan).toHaveBeenCalledTimes(1);

expect("token" in buildGatewayInstallPlan.mock.calls[0][0]).toBe(false);

expect("token" in buildGatewayInstallPlan.mock.calls.at(0)?.[0]).toBe(false);

expect(serviceInstall).toHaveBeenCalledTimes(1);

});

// hint string is written to runtime.log, which flows into the same

// console-captured log file readable by operator.read-scoped devices.

expect(formatControlUiSshHintMock).toHaveBeenCalledWith({ port: 18789, basePath: undefined });

const [sshHintOptions] = formatControlUiSshHintMock.mock.calls[0] ?? [];

const [sshHintOptions] = formatControlUiSshHintMock.mock.calls.at(0) ?? [];

expect(sshHintOptions).not.toHaveProperty("token");

// Double-check: no logged line contains the secret.

});

await noteBootstrapFileSize({} as OpenClawConfig);

expect(note).toHaveBeenCalledTimes(1);

const [message, title] = note.mock.calls[0] ?? [];

const [message, title] = note.mock.calls.at(0) ?? [];

expect(title).toBe("Bootstrap file size");

expect(message).toBe(

[

});

expect(readGatewayRestartHandoffSync).toHaveBeenCalledOnce();

const [handoffEnv] = readGatewayRestartHandoffSync.mock.calls[0] as unknown as [

const [handoffEnv] = readGatewayRestartHandoffSync.mock.calls.at(0) as unknown as [

{ OPENCLAW_STATE_DIR?: string; OPENCLAW_CONFIG_PATH?: string },

];

expect(handoffEnv?.OPENCLAW_STATE_DIR).toBe("/tmp/openclaw-service");

expect(events).toEqual(["bundled-shadow-cleanup", "openclaw-peer-links", "missing-installs"]);

expect(mocks.maybeRepairStaleManagedNpmBundledPlugins).toHaveBeenCalledOnce();

const cleanupCall = mocks.maybeRepairStaleManagedNpmBundledPlugins.mock.calls[0]?.[0];

const cleanupCall = mocks.maybeRepairStaleManagedNpmBundledPlugins.mock.calls.at(0)?.[0];

expect(cleanupCall?.config.plugins?.entries?.["google-meet"]).toEqual({ enabled: true });

expect(cleanupCall?.prompter).toEqual({ shouldRepair: true });

expect(mocks.maybeRepairManagedNpmOpenClawPeerLinks).toHaveBeenCalledWith(

cfg,

READ_ONLY_CHANNEL_DOCTOR_OPTIONS,

);

expect(collectEmptyAllowlistExtraWarnings.mock.calls[0]?.[0]).not.toHaveProperty("cfg");

expect(collectEmptyAllowlistExtraWarnings.mock.calls.at(0)?.[0]).not.toHaveProperty("cfg");

});

it("reuses empty allowlist doctor entries across per-account hooks", () => {

expect(warnings).toEqual(["extra:channels.signal"]);

expect(extraWarningsForAccount).toHaveBeenCalledTimes(1);

const [warningOptions] = extraWarningsForAccount.mock.calls[0] ?? [];

const [warningOptions] = extraWarningsForAccount.mock.calls.at(0) ?? [];

expect(warningOptions?.prefix).toBe("channels.signal");

});

});

const runtime = createRuntime();

await flowsListCommand({ json: true, status: "blocked" }, runtime);

const payload = JSON.parse(String(vi.mocked(runtime.log).mock.calls[0]?.[0]));

const payload = JSON.parse(String(vi.mocked(runtime.log).mock.calls.at(0)?.[0]));

expect(payload).toStrictEqual({

count: 1,

}));

expect(mocks.replaceConfigFile).toHaveBeenCalledOnce();

const [replaceParams] = mocks.replaceConfigFile.mock.calls[0] ?? [];

const [replaceParams] = mocks.replaceConfigFile.mock.calls.at(0) ?? [];

expect(replaceParams?.nextConfig.update).toEqual({ channel: "beta" });

expect(replaceParams?.baseHash).toBe("config-1");

});

}

expect(note).toHaveBeenCalledTimes(1);

const [message, title] = note.mock.calls[0] as [string, string];

const [message, title] = note.mock.calls.at(0) as [string, string];

expect(title).toBe("OAuth TLS prerequisites");

expect(message).toContain("brew postinstall ca-certificates");

});