expect(consumeNoVncObserverToken(token, 1200)).toBeNull();

});

it("uses the default ttl when observer token ttlMs is non-finite", () => {

resetNoVncObserverTokensForTests();

const liveToken = issueNoVncObserverToken({

noVncPort: 50123,

password: "abcd1234", // pragma: allowlist secret

nowMs: 1000,

ttlMs: Number.NaN,

});

const expiredToken = issueNoVncObserverToken({

noVncPort: 50123,

password: "abcd1234", // pragma: allowlist secret

nowMs: 1000,

ttlMs: Number.NaN,

});

expect(consumeNoVncObserverToken(liveToken, 60_999)).toEqual({

noVncPort: 50123,

password: "abcd1234", // pragma: allowlist secret

});

expect(consumeNoVncObserverToken(expiredToken, 61_001)).toBeNull();

});

it("generates 8-char alphanumeric passwords", () => {

const password = generateNoVncPassword();

expect(password).toMatch(/^[a-zA-Z0-9]{8}$/);

import crypto from "node:crypto";

import { parseFiniteNumber } from "../../shared/number-coercion.js";

import { normalizeOptionalString } from "../../shared/string-coerce.js";

export const NOVNC_PASSWORD_ENV_KEY = "OPENCLAW_BROWSER_NOVNC_PASSWORD"; // pragma: allowlist secret

const now = params.nowMs ?? Date.now();

pruneExpiredNoVncObserverTokens(now);

const token = crypto.randomBytes(24).toString("hex");

const ttlMs = Math.max(1, parseFiniteNumber(params.ttlMs) ?? NOVNC_TOKEN_TTL_MS);

NO_VNC_OBSERVER_TOKENS.set(token, {

noVncPort: params.noVncPort,

password: normalizeOptionalString(params.password),

expiresAt: now + Math.max(1, params.ttlMs ?? NOVNC_TOKEN_TTL_MS),

expiresAt: now + ttlMs,

});

return token;

}