// Subagent spawn depth-limit tests cover max depth, per-parent child limits,

// inherited tool policy, and preflight failures before gateway dispatch.

import { beforeAll, beforeEach, describe, expect, it, vi } from "vitest";

import {

createSubagentSpawnTestConfig,

const accepted = expectAccepted(result, "run-1");

expect(accepted.childSessionKey).toMatch(/^agent:main:subagent:/);

// Child capability flags are stored on the session entry so later control

// tools can enforce leaf behavior without recalculating spawn depth.

const childSession = persistedStore?.[accepted.childSessionKey];

if (!childSession) {

throw new Error("Expected persisted child session");

// Subagent spawn session-mode diagnostic tests cover actionable errors when a

// persistent child session cannot bind to a channel thread.

import os from "node:os";

import { beforeEach, describe, expect, it, vi } from "vitest";

import {

// Subagent spawn thread-binding tests cover child-session placement, target

// account selection, and completion routing for channel thread spawns.

import os from "node:os";

import { beforeAll, beforeEach, describe, expect, it, vi } from "vitest";

import {

});

function installChannelRouteProjectionPluginsForTest() {

// Matrix fixture projects a parent room plus child thread id into the

// gateway delivery target shape used by thread-bound sessions.

const matrixBase = createChannelTestPluginBaseForTest({ id: "matrix", label: "Matrix" });

setActivePluginRegistryForTest(

createTestRegistryForTest([

});

it("passes the target agent's bound account to core thread binding", async () => {

// Cross-agent spawns bind the target agent account, while requester origin

// remains the caller account for completion reporting.

const boundRoom = "!room:example.org";

const bindCalls: Array<Record<string, unknown>> = [];

currentSessionBindingService = {

// Subagent spawn workspace tests cover same-agent inheritance, cross-agent

// workspace selection, sandboxed cwd rejection, and cleanup deletion calls.

import { beforeAll, beforeEach, describe, expect, it, vi } from "vitest";

import {

createSubagentSpawnTestConfig,

}

async function expectAcceptedWorkspace(params: { agentId: string; expectedWorkspaceDir: string }) {

// Registered run workspace is the canonical child workspace; gateway params

// should not receive ad hoc workspace overrides for native subagent calls.

const result = await spawnSubagentDirect(

{

task: "inspect workspace",

// Tool filesystem policy tests cover how global and agent-specific tool

// profiles decide workspace-only access and root expansion.

import { describe, expect, it } from "vitest";

import type { OpenClawConfig } from "../config/config.js";

import {

});

it("does not re-enable root expansion from tools.fs alone under messaging profile (#47487)", () => {

// A messaging profile needs an explicit read opt-in; merely configuring

// tools.fs should not widen filesystem reach.

const cfg: OpenClawConfig = {

tools: {

profile: "messaging",

// Tool image tests cover image payload sanitization before tool outputs are

// returned to model-visible content blocks.

import { describe, expect, it } from "vitest";

import {

createNoisyPngBuffer,

});

it("drops malformed image base64 payloads", async () => {

// Invalid base64 is replaced with text so malformed payloads cannot smuggle

// attributes or script-like text through image blocks.

const blocks = [

{

type: "image" as const,