import type { PluginManifestRecord } from "../plugins/manifest-registry.js";

import type { PluginMetadataSnapshot } from "../plugins/plugin-metadata-snapshot.types.js";

import { listKnownProviderAuthEnvVarNames } from "../secrets/provider-env-vars.js";

import { captureFullEnv, deleteTestEnvValue, setTestEnvValue } from "../test-utils/env.js";

import { loadDotEnv, loadWorkspaceDotEnvFile } from "./dotenv.js";

const loggerMocks = vi.hoisted(() => ({

function clearEnv(keys: readonly string[]) {

for (const key of keys) {

delete process.env[key];

deleteTestEnvValue(key);

}

}

}

async function withIsolatedEnvAndCwd(run: () => Promise<void>) {

const prevEnv = { ...process.env };

const envSnapshot = captureFullEnv();

try {

await run();

} finally {

vi.restoreAllMocks();

for (const key of Object.keys(process.env)) {

if (!(key in prevEnv)) {

delete process.env[key];

}

}

for (const [key, value] of Object.entries(prevEnv)) {

if (value === undefined) {

delete process.env[key];

} else {

process.env[key] = value;

}

}

envSnapshot.restore();

}

}

const base = await fs.mkdtemp(path.join(os.tmpdir(), "openclaw-dotenv-test-"));

const cwdDir = path.join(base, "cwd");

const stateDir = path.join(base, "state");

process.env.OPENCLAW_STATE_DIR = stateDir;

setTestEnvValue("OPENCLAW_STATE_DIR", stateDir);

await fs.mkdir(cwdDir, { recursive: true });

await fs.mkdir(stateDir, { recursive: true });

await run({ base, cwdDir, stateDir });

it("loads the Ubuntu gateway.env compatibility fallback after ~/.openclaw/.env", async () => {

await withIsolatedEnvAndCwd(async () => {

await withDotEnvFixture(async ({ base, cwdDir }) => {

process.env.HOME = base;

setTestEnvValue("HOME", base);

const defaultStateDir = path.join(base, ".openclaw");

process.env.OPENCLAW_STATE_DIR = defaultStateDir;

setTestEnvValue("OPENCLAW_STATE_DIR", defaultStateDir);

await writeEnvFile(path.join(defaultStateDir, ".env"), "FOO=from-global\n");

await writeEnvFile(

path.join(base, ".config", "openclaw", "gateway.env"),

it("does not warn about dotenv conflicts when the key is already set", async () => {

await withIsolatedEnvAndCwd(async () => {

await withDotEnvFixture(async ({ base, cwdDir, stateDir }) => {

process.env.HOME = base;

setTestEnvValue("HOME", base);

process.env.FOO = "from-shell";

await writeEnvFile(path.join(stateDir, ".env"), "FOO=from-global\n");

await writeEnvFile(

delete process.env.NODE_REPL_EXTERNAL_MODULE;

delete process.env.NODE_REPL_HISTORY;

delete process.env.NODE_V8_COVERAGE;

delete process.env.OPENCLAW_CONFIG_PATH;

deleteTestEnvValue("OPENCLAW_CONFIG_PATH");

delete process.env.ANTHROPIC_BASE_URL;

delete process.env.CLOUDSDK_PYTHON;

delete process.env.EXAMPLE_API_HOST;

].join("\n"),

);

delete process.env.OPENCLAW_STATE_DIR;

deleteTestEnvValue("OPENCLAW_STATE_DIR");

delete process.env.STATE_DIRECTORY;

delete process.env.OPENCLAW_CONFIG_PATH;

deleteTestEnvValue("OPENCLAW_CONFIG_PATH");

loadWorkspaceDotEnvFile(path.join(cwdDir, ".env"), { quiet: true });

].join("\n"),

);

delete process.env.OPENCLAW_AGENT_DIR;

deleteTestEnvValue("OPENCLAW_AGENT_DIR");

delete process.env.OPENCLAW_BUNDLED_PLUGINS_DIR;

delete process.env.OPENCLAW_OAUTH_DIR;

delete process.env.PI_CODING_AGENT_DIR;

await withDotEnvFixture(async ({ cwdDir }) => {

await writeEnvFile(path.join(cwdDir, ".env"), `${key}=./evil/npm-cli.js\n`);

delete process.env[key];

deleteTestEnvValue(key);

loadWorkspaceDotEnvFile(path.join(cwdDir, ".env"), { quiet: true });

// Delete the fixture-provided value so the blocking must come from

// the workspace blocklist, not the "already set" skip.

delete process.env.OPENCLAW_STATE_DIR;

deleteTestEnvValue("OPENCLAW_STATE_DIR");

vi.spyOn(process, "cwd").mockReturnValue(cwdDir);

loadCliDotEnv({ quiet: true });

it("loads the gateway.env compatibility fallback during CLI startup", async () => {

await withIsolatedEnvAndCwd(async () => {

await withDotEnvFixture(async ({ base, cwdDir }) => {

process.env.HOME = base;

setTestEnvValue("HOME", base);

const defaultStateDir = path.join(base, ".openclaw");

process.env.OPENCLAW_STATE_DIR = defaultStateDir;

setTestEnvValue("OPENCLAW_STATE_DIR", defaultStateDir);

await writeEnvFile(path.join(defaultStateDir, ".env"), "FOO=from-global\n");

await writeEnvFile(

path.join(base, ".config", "openclaw", "gateway.env"),

it("can defer global dotenv while loading only workspace env", async () => {

await withIsolatedEnvAndCwd(async () => {

await withDotEnvFixture(async ({ base, cwdDir }) => {

process.env.HOME = base;

setTestEnvValue("HOME", base);

const defaultStateDir = path.join(base, ".openclaw");

process.env.OPENCLAW_STATE_DIR = defaultStateDir;

setTestEnvValue("OPENCLAW_STATE_DIR", defaultStateDir);

await writeEnvFile(path.join(cwdDir, ".env"), "BAZ=from-workspace\n");

await writeEnvFile(path.join(defaultStateDir, ".env"), "FOO=from-global\n");

await writeEnvFile(

await withIsolatedEnvAndCwd(async () => {

await withDotEnvFixture(async ({ base, cwdDir }) => {

const customStateDir = path.join(base, "custom-state");

process.env.HOME = base;

process.env.OPENCLAW_STATE_DIR = customStateDir;

setTestEnvValue("HOME", base);

setTestEnvValue("OPENCLAW_STATE_DIR", customStateDir);

await writeEnvFile(

path.join(base, ".config", "openclaw", "gateway.env"),

"FOO=from-gateway\n",

const base = await fs.mkdtemp(path.join(os.tmpdir(), "openclaw-dotenv-legacy-"));

const cwdDir = path.join(base, "cwd");

const legacyStateDir = path.join(base, ".clawdbot");

process.env.HOME = base;

delete process.env.OPENCLAW_STATE_DIR;

setTestEnvValue("HOME", base);

deleteTestEnvValue("OPENCLAW_STATE_DIR");

delete process.env.OPENCLAW_TEST_FAST;

await fs.mkdir(cwdDir, { recursive: true });

await writeEnvFile(path.join(legacyStateDir, ".env"), "LEGACY_ONLY=from-legacy\n");

vi.spyOn(process, "cwd").mockReturnValue(cwdDir);

delete process.env.SAFE_KEY;

delete process.env.OPENCLAW_CONFIG_PATH;

deleteTestEnvValue("OPENCLAW_CONFIG_PATH");

delete process.env.OPENCLAW_BUNDLED_PLUGINS_DIR;

delete process.env.NODE_OPTIONS;

delete process.env.NODE_REDIRECT_WARNINGS;

);

for (const key of runtimeControlKeys) {

delete process.env[key];

deleteTestEnvValue(key);

}

loadWorkspaceDotEnvFile(path.join(cwdDir, ".env"), { quiet: true });