// HTTP dispatcher tests cover idle-timeout parsing for session network

// transports.

import { describe, expect, it } from "vitest";

import { parseHttpIdleTimeoutMs } from "./http-dispatcher.js";

});

it("rejects non-decimal idle timeout strings", () => {

// Keep env/config parsing decimal-only so values like 1e3 or 0x10 do not

// silently mean different delays across parsers.

expect(parseHttpIdleTimeoutMs("1e3")).toBeUndefined();

expect(parseHttpIdleTimeoutMs("0x10")).toBeUndefined();

});

// Package manager tests cover resource discovery boundaries for package,

// project, and npm-declared agent resources.

import { mkdtemp, mkdir, rm, symlink, writeFile } from "node:fs/promises";

import { tmpdir } from "node:os";

import { join } from "node:path";

describe("DefaultPackageManager", () => {

it("keeps manifest resource entries inside the package root", async () => {

// Manifest globs are package-owned; path traversal or symlink hops must not

// expose arbitrary host files as skills.

const root = await makeTempDir("openclaw-package-manager-");

const packageRoot = join(root, "package");

const outsideRoot = join(root, "outside");

});

it("keeps auto-discovered project resources inside their resource roots", async () => {

// Project resources may be auto-discovered, but each resource type remains

// confined to its expected root.

const root = await makeTempDir("openclaw-package-manager-");

const configRoot = join(root, ".openclaw");

const outsideRoot = join(root, "outside");

// Resource loader tests cover compatibility wiring for SDK prompt transform

// aliases.

import { mkdtempSync, rmSync } from "node:fs";

import { tmpdir } from "node:os";

import { join } from "node:path";

describe("DefaultResourceLoader", () => {

it("keeps deprecated SDK prompt override aliases wired to prompt transforms", async () => {

// These aliases are deprecated but shipped SDK surface, so they still map

// through the same transform path as the current options.

const root = mkdtempSync(join(tmpdir(), "openclaw-resource-loader-"));

try {

const loader = new DefaultResourceLoader({

// Agent session SDK tests cover default tool wiring, prompt preservation, and

// session write-lock behavior.

import { Type } from "typebox";

import { describe, expect, it } from "vitest";

import type { Model } from "../../llm/types.js";

});

it("keeps custom tools active when only builtin tools are disabled", async () => {

// `noTools: "builtin"` removes stock tools only; extension/custom tools are

// still explicitly supplied session capabilities.

const customTool: ToolDefinition = {

name: "custom_lookup",

label: "Custom Lookup",

});

it("runs session message persistence under the configured write lock", async () => {

// Transcript writes share the caller-provided lock so concurrent event

// handlers cannot interleave JSONL persistence.

const events: string[] = [];

const sessionManager = SessionManager.inMemory();

const { session } = await createAgentSession({

});

it("fences tool execution when no extension hook is registered", async () => {

// Write-capable tools still enter the lock even without hooks; the lock is

// about shared session state, not just extension execution.

const events: string[] = [];

const { session } = await createAgentSession({

model: testModel,