import fs from "node:fs/promises";

import path from "node:path";

import { listChannelPlugins } from "../channels/plugins/index.js";

import { listReadOnlyChannelPluginsForConfig } from "../channels/plugins/read-only.js";

import type { ChannelPlugin } from "../channels/plugins/types.plugin.js";

import { inspectReadOnlyChannelAccount } from "../channels/read-only-account-inspect.js";

import { resolveNativeSkillsEnabled } from "../config/commands.js";

import type { OpenClawConfig } from "../config/config.js";

import type { AgentToolsConfig } from "../config/types.tools.js";

import { readInstalledPackageVersion } from "../infra/package-update-utils.js";

import { normalizePluginId, normalizePluginsConfig } from "../plugins/config-state.js";

import { normalizePluginsConfig } from "../plugins/config-state.js";

import { loadInstalledPluginIndexInstallRecords } from "../plugins/installed-plugin-index-record-reader.js";

import {

createPluginRegistryIdNormalizer,

loadPluginRegistrySnapshot,

} from "../plugins/plugin-registry.js";

import { normalizeOptionalLowercaseString } from "../shared/string-coerce.js";

import type { SecurityAuditFinding } from "./audit.types.js";

type SandboxToolPolicy = import("../agents/sandbox/types.js").SandboxToolPolicy;

type ChannelPlugin = ReturnType<typeof listChannelPlugins>[number];

type PluginTrustPolicyDeps = {

isToolAllowedByPolicies: typeof import("../agents/tool-policy-match.js").isToolAllowedByPolicies;

if (allowConfigured) {

const installedPluginIds = new Set(pluginDirs.map((dir) => path.basename(dir).toLowerCase()));

const bundledPluginIds = new Set(listChannelPlugins().map((p) => p.id.toLowerCase()));

const pluginIndex = loadPluginRegistrySnapshot({

config: params.cfg,

stateDir: params.stateDir,

});

const normalizePluginId = createPluginRegistryIdNormalizer(pluginIndex);

const indexedPluginIds = new Set(

pluginIndex.plugins.map((plugin) => plugin.pluginId.toLowerCase()),

);

const phantomEntries = allow.filter((entry) => {

if (typeof entry !== "string" || entry === "group:plugins") {

return false;

}

const lower = entry.toLowerCase();

if (installedPluginIds.has(lower) || bundledPluginIds.has(lower)) {

if (installedPluginIds.has(lower) || indexedPluginIds.has(lower)) {

return false;

}

const canonicalId = normalizeOptionalLowercaseString(normalizePluginId(entry)) ?? "";

return !canonicalId || !bundledPluginIds.has(canonicalId);

return !canonicalId || !indexedPluginIds.has(canonicalId);

});

if (phantomEntries.length > 0) {

findings.push({

}

if (!allowConfigured) {

const channelPlugins = listReadOnlyChannelPluginsForConfig(params.cfg, {

stateDir: params.stateDir,

});

const skillCommandsLikelyExposed = (

await Promise.all(

listChannelPlugins().map(async (plugin) => {

channelPlugins.map(async (plugin) => {

if (

plugin.capabilities.nativeCommands !== true &&

plugin.commands?.nativeSkillsAutoEnabled !== true