strictHostKeyChecking: false,

},

});

expect(ssh).toMatchObject({

target: "agent@example.com:2222",

command: "ssh",

identityFile: "~/.ssh/global",

certificateFile: "~/.ssh/agent-cert.pub",

strictHostKeyChecking: false,

});

expect(ssh.target).toBe("agent@example.com:2222");

expect(ssh.command).toBe("ssh");

expect(ssh.identityFile).toBe("~/.ssh/global");

expect(ssh.certificateFile).toBe("~/.ssh/agent-cert.pub");

expect(ssh.strictHostKeyChecking).toBe(false);

const sshShared = resolveSandboxSshConfig({

scope: "shared",

throw new Error("expected recreated docker create call");

}

expect(createCall.args).toContain(`openclaw.configHash=${newHash}`);

expect(registryMocks.updateRegistry).toHaveBeenCalledWith(

expect.objectContaining({

containerName: "oc-test-shared",

configHash: newHash,

}),

);

const registryUpdate = registryMocks.updateRegistry.mock.calls.at(-1)?.[0];

expect(registryUpdate?.containerName).toBe("oc-test-shared");

expect(registryUpdate?.configHash).toBe(newHash);

});

it("applies custom binds after workspace mounts so overlapping binds can override", async () => {

}

expect(err).toBeInstanceOf(Error);

expect(err).toMatchObject({ code: "INVALID_CONFIG" });

expect((err as Error).message).toContain("Sandbox mode requires Docker");

expect((err as Error).message).toContain("agents.defaults.sandbox.mode=off");

const error = err as Error & { code?: string };

expect(error.code).toBe("INVALID_CONFIG");

expect(error.message).toContain("Sandbox mode requires Docker");

expect(error.message).toContain("agents.defaults.sandbox.mode=off");

});

});

});

}

async function expectPathMissing(targetPath: string): Promise<void> {

await expect(fs.access(targetPath)).rejects.toMatchObject({ code: "ENOENT" });

let err: unknown;

try {

await fs.access(targetPath);

} catch (caught) {

err = caught;

}

expect(err).toBeInstanceOf(Error);

expect((err as NodeJS.ErrnoException).code).toBe("ENOENT");

}

const hasAbsolutePythonCandidate = SANDBOX_PINNED_MUTATION_PYTHON_CANDIDATES.some((candidate) =>

await expect(

fs.readFile(path.join(workspaceDir, "nested", "hello.txt"), "utf8"),

).resolves.toBe("from-backend");

expect(scripts).toEqual(

expect.arrayContaining([expect.stringContaining("operation = sys.argv[1]")]),

);

expect(scripts.some((script) => script.includes("operation = sys.argv[1]"))).toBe(true);

} finally {

await fs.rm(stateDir, { recursive: true, force: true });

}