import { uniqueStrings } from "@openclaw/normalization-core/string-normalization";

import type { OpenClawConfig } from "../config/types.openclaw.js";

import { loadPluginMetadataSnapshot } from "../plugins/plugin-metadata-snapshot.js";

import { appendUniqueEnvVarCandidates } from "../shared/env-var-candidates.js";

export { isSafeChannelEnvVarTriggerName } from "./channel-env-var-names.js";

type ChannelEnvVarLookupParams = {

env?: NodeJS.ProcessEnv;

};

function appendUniqueEnvVarCandidates(

target: Record<string, string[]>,

channelId: string,

keys: readonly string[],

) {

const normalizedChannelId = channelId.trim();

if (!normalizedChannelId || keys.length === 0) {

return;

}

const bucket = (target[normalizedChannelId] ??= []);

const seen = new Set(bucket);

for (const key of keys) {

const normalizedKey = key.trim();

if (!normalizedKey || seen.has(normalizedKey)) {

continue;

}

seen.add(normalizedKey);

bucket.push(normalizedKey);

}

}

/**

* Resolves plugin-declared channel environment variable names keyed by channel id.

* The result is deterministic so env-shell docs and prompt snapshots stay stable.

} from "../plugins/plugin-metadata-snapshot.js";

import { listSetupProviderIds } from "../plugins/setup-descriptors.js";

import { hasKind } from "../plugins/slots.js";

import { appendUniqueEnvVarCandidates } from "../shared/env-var-candidates.js";

const CORE_PROVIDER_AUTH_ENV_VAR_CANDIDATES = {

anthropic: ["ANTHROPIC_OAUTH_TOKEN", "ANTHROPIC_API_KEY"],

return isWorkspacePluginTrustedForProviderEnvVars(plugin, params?.config);

}

function appendUniqueEnvVarCandidates(

target: Record<string, string[]>,

providerId: string,

keys: readonly string[],

) {

const normalizedProviderId = providerId.trim();

if (!normalizedProviderId || keys.length === 0) {

return;

}

const bucket = (target[normalizedProviderId] ??= []);

const seen = new Set(bucket);

for (const key of keys) {

const normalizedKey = key.trim();

if (!normalizedKey || seen.has(normalizedKey)) {

continue;

}

seen.add(normalizedKey);

bucket.push(normalizedKey);

}

}

function appendUniqueAuthEvidence(

target: Record<string, ProviderAuthEvidence[]>,

providerId: string,

/** Appends normalized, unique environment-variable candidates to a keyed bucket. */

export function appendUniqueEnvVarCandidates(

target: Record<string, string[]>,

ownerId: string,

keys: readonly string[],

): void {

const normalizedOwnerId = ownerId.trim();

if (!normalizedOwnerId || keys.length === 0) {

return;

}

const bucket = (target[normalizedOwnerId] ??= []);

const seen = new Set(bucket);

for (const key of keys) {

const normalizedKey = key.trim();

if (!normalizedKey || seen.has(normalizedKey)) {

continue;

}

seen.add(normalizedKey);

bucket.push(normalizedKey);

}

}