// Subagent spawn attachment tests cover strict base64 decoding, attachment name

// validation, materialization paths, and cleanup after spawn failures.

import fs from "node:fs";

import os from "node:os";

import path from "node:path";

});

});

// --- decodeStrictBase64 ---

describe("decodeStrictBase64", () => {

const maxBytes = 1024;

it("pre-decode oversize guard: encoded string > maxEncodedBytes * 2 returns null", () => {

const { decodeStrictBase64 } = subagentSpawnModule;

// maxEncodedBytes = ceil(1024/3)*4 = 1368; *2 = 2736

// Pre-decode guard rejects obviously oversized payloads before allocating

// the decoded buffer.

const oversized = "A".repeat(2737);

expect(decodeStrictBase64(oversized, maxBytes)).toBeNull();

});

});

});

// --- filename validation via spawnSubagentDirect ---

describe("spawnSubagentDirect filename validation", () => {

beforeEach(async () => {

workspaceDirOverride = fs.mkdtempSync(

});

it("removes materialized attachments when lineage patching fails", async () => {

// Attachments are created before the child session lineage patch; failures

// must delete both the child session and materialized files.

const calls: Array<{ method?: string; params?: Record<string, unknown> }> = [];

const store: Record<string, Record<string, unknown>> = {};

updateSessionStoreMock.mockImplementation(async (_storePath: unknown, mutator: unknown) => {