func `private lan bootstrap hello persists bootstrap handoff tokens`() async throws {

let session = FakeGatewayWebSocketSession(helloAuth: [

url: #require(URL(string: "ws://192.168.50.164:18889")),

sessionBox: WebSocketSessionBox(session: session),

await gateway.disconnect()

}

@Test

func `private lan bootstrap reconnect uses persisted handoff token`() async throws {

let tempDir = FileManager.default.temporaryDirectory

.appendingPathComponent(UUID().uuidString, isDirectory: true)

try FileManager.default.createDirectory(at: tempDir, withIntermediateDirectories: true)

let previousStateDir = ProcessInfo.processInfo.environment["OPENCLAW_STATE_DIR"]

setenv("OPENCLAW_STATE_DIR", tempDir.path, 1)

defer {

if let previousStateDir {

setenv("OPENCLAW_STATE_DIR", previousStateDir, 1)

} else {

unsetenv("OPENCLAW_STATE_DIR")

}

try? FileManager.default.removeItem(at: tempDir)

}

let identity = DeviceIdentityStore.loadOrCreate()

let url = try #require(URL(string: "ws://192.168.50.164:18889"))

let bootstrapSession = FakeGatewayWebSocketSession(helloAuth: [

"deviceToken": "lan-node-token",

"role": "node",

"scopes": [],

])

let gateway = GatewayNodeSession()

let options = GatewayConnectOptions(

role: "node",

scopes: [],

caps: [],

commands: [],

permissions: [:],

clientId: "openclaw-ios-test",

clientMode: "node",

clientDisplayName: "iOS Test",

includeDeviceIdentity: true)

try await gateway.connect(

url: url,

token: nil,

bootstrapToken: "fresh-bootstrap-token",

password: nil,

connectOptions: options,

sessionBox: WebSocketSessionBox(session: bootstrapSession),

onConnected: {},

onDisconnected: { _ in },

onInvoke: { req in

BridgeInvokeResponse(id: req.id, ok: true, payloadJSON: nil, error: nil)

})

await gateway.disconnect()

#expect(DeviceAuthStore.loadToken(deviceId: identity.deviceId, role: "node")?.token == "lan-node-token")