Ayuriel/openclaw
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Status: lazy-load channel security and summaries

Browse Source
This commit is contained in:
Vincent Koc 2026-03-15 20:48:07 -07:00
parent 7d5e26b4a2
commit 270ba54c47
1 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
src/security/audit.ts
View File

@ -6,7 +6,7 @@ import { redactCdpUrl } from "../browser/cdp.helpers.js";
import { resolveBrowserConfig, resolveProfile } from "../browser/config.js";
import { resolveBrowserControlAuth } from "../browser/control-auth.js";
import { hasPotentialConfiguredChannels } from "../channels/config-presence.js";
import { listChannelPlugins } from "../channels/plugins/index.js";
import type { listChannelPlugins } from "../channels/plugins/index.js";
import { formatCliCommand } from "../cli/command-format.js";
import type { ConfigFileSnapshot, OpenClawConfig } from "../config/config.js";
import { resolveConfigPath, resolveStateDir } from "../config/paths.js";
@ -137,6 +137,13 @@ type AuditExecutionContext = {
deepProbeAuth?: { token?: string; password?: string };
};
let channelPluginsModulePromise: Promise<typeof import("../channels/plugins/index.js")> | undefined;
async function loadChannelPlugins() {
channelPluginsModulePromise ??= import("../channels/plugins/index.js");
return await channelPluginsModulePromise;
}
function countBySeverity(findings: SecurityAuditFinding[]): SecurityAuditSummary {
let critical = 0;
let warn = 0;
@ -1244,7 +1251,7 @@ export async function runSecurityAudit(opts: SecurityAuditOptions): Promise<Secu
}
if (context.includeChannelSecurity && hasPotentialConfiguredChannels(cfg, env)) {
const plugins = context.plugins ?? listChannelPlugins();
const plugins = context.plugins ?? (await loadChannelPlugins()).listChannelPlugins();
findings.push(
...(await collectChannelSecurityFindings({
cfg,