openclaw/dist/install-provenance-W0Pf0RSv.js

Multi-channel AI gateway with extensible messaging integrations

import { n as sanitizeTerminalText } from "./safe-text-BGBqp1a4.js";
import { o as parseRegistryNpmSpec } from "./npm-registry-spec-CM_p1_uq.js";
import { t as parseClawHubPluginSpec } from "./clawhub-spec-Er3Np6VI.js";
import { N as resolveDefaultNpmSpec, a as getOfficialExternalPluginCatalogEntryForPackage, b as resolveOfficialExternalPluginInstallSources, i as getOfficialExternalPluginCatalogEntry, v as resolveOfficialExternalPluginId } from "./official-external-plugin-catalog-Dzu7dwBN.js";
import { n as findBundledPluginSourceInMap, r as getProcessBundledPluginSources } from "./bundled-sources-CU4qjQGy.js";
//#region src/plugins/official-external-install-trust.ts
function resolveCatalogOfficialExternalInstallPlan(rawSpec) {
	const parsed = resolveDefaultNpmSpec(rawSpec);
	if (!parsed) return null;
	const entry = getOfficialExternalPluginCatalogEntry(parsed.name) ?? getOfficialExternalPluginCatalogEntryForPackage(parsed.name);
	const pluginId = entry && resolveOfficialExternalPluginId(entry);
	const installSources = (entry ? resolveOfficialExternalPluginInstallSources(entry) : []).map((source) => {
		if (!parsed.selector) return source;
		const name = source.source === "npm" ? parseRegistryNpmSpec(source.spec)?.name : parseClawHubPluginSpec(source.spec)?.name;
		if (!name) return source;
		const spec = `${source.source === "clawhub" ? "clawhub:" : ""}${name}@${parsed.selector}`;
		return spec === source.spec ? source : {
			source: source.source,
			spec
		};
	});
	const primary = installSources[0];
	return pluginId && primary ? {
		pluginId,
		spec: primary.spec,
		installSources
	} : null;
}
function resolveCatalogOfficialExternalNpmPackageTrust(npmSpec) {
	const parsed = parseRegistryNpmSpec(npmSpec);
	const entry = parsed && getOfficialExternalPluginCatalogEntryForPackage(parsed.name);
	const pluginId = entry && resolveOfficialExternalPluginId(entry);
	const source = entry && resolveOfficialExternalPluginInstallSources(entry).find((candidate) => candidate.source === "npm");
	if (!parsed || !pluginId || !source || parseRegistryNpmSpec(source.spec)?.name !== parsed.name) return null;
	return {
		pluginId,
		...source.expectedIntegrity && source.spec === npmSpec.trim() ? { expectedIntegrity: source.expectedIntegrity } : {},
		trustedSourceLinkedOfficialInstall: true
	};
}
//#endregion
//#region src/plugins/install-provenance.ts
const NON_CLAWHUB_INSTALL_FORCE_FLAG = "--force";
function resolveOpenClawTrustedNpmPackageInstall(npmSpec, bundledSources = getProcessBundledPluginSources()) {
	const packageName = parseRegistryNpmSpec(npmSpec)?.name;
	if (!packageName) return null;
	const bundled = findBundledPluginSourceInMap({
		bundled: bundledSources,
		lookup: {
			kind: "npmSpec",
			value: packageName
		}
	});
	if (bundled) return { pluginId: bundled.pluginId };
	return resolveCatalogOfficialExternalNpmPackageTrust(npmSpec);
}
function isOpenClawTrustedPluginInstallSpec(spec, bundledSources = getProcessBundledPluginSources()) {
	const trimmed = spec.trim();
	if (trimmed.toLowerCase().startsWith("clawhub:")) return true;
	const explicitNpm = trimmed.toLowerCase().startsWith("npm:");
	const npmSpec = explicitNpm ? trimmed.slice(4) : trimmed;
	if (explicitNpm) return resolveOpenClawTrustedNpmPackageInstall(npmSpec, bundledSources) !== null;
	const parsedPackageName = parseRegistryNpmSpec(npmSpec)?.name;
	const bundled = findBundledPluginSourceInMap({
		bundled: bundledSources,
		lookup: {
			kind: "pluginId",
			value: npmSpec
		}
	}) ?? (parsedPackageName ? findBundledPluginSourceInMap({
		bundled: bundledSources,
		lookup: {
			kind: "npmSpec",
			value: parsedPackageName
		}
	}) : void 0) ?? findBundledPluginSourceInMap({
		bundled: bundledSources,
		lookup: {
			kind: "localPath",
			value: npmSpec
		}
	});
	return Boolean(bundled ?? resolveOpenClawTrustedNpmPackageInstall(npmSpec, bundledSources) ?? resolveCatalogOfficialExternalInstallPlan(npmSpec));
}
const sourceClassLabels = {
	git: "Git repository",
	"local-archive": "local archive",
	"local-path": "local path",
	marketplace: "marketplace source",
	npm: "npm registry",
	"npm-pack": "local npm-pack archive"
};
function formatNonClawHubInstallWarning(params) {
	return [`WARNING - Installing plugin from ${sourceClassLabels[params.sourceClass]}: ${sanitizeTerminalText(params.spec)}`, "This source is outside ClawHub review and trust metadata. Only continue if you trust the publisher, package contents, and install source."].join("\n");
}
//#endregion
export { resolveCatalogOfficialExternalInstallPlan as a, resolveOpenClawTrustedNpmPackageInstall as i, formatNonClawHubInstallWarning as n, isOpenClawTrustedPluginInstallSpec as r, NON_CLAWHUB_INSTALL_FORCE_FLAG as t };