fix(security): harden npm plugin and hook install integrity flow

src/cli/plugins-cli.ts

@@ -1,15 +1,15 @@
+import type { Command } from "commander";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import type { Command } from "commander";
 import type { OpenClawConfig } from "../config/config.js";
+import type { PluginRecord } from "../plugins/registry.js";
 import { loadConfig, writeConfigFile } from "../config/config.js";
 import { resolveStateDir } from "../config/paths.js";
 import { resolveArchiveKind } from "../infra/archive.js";
 import { installPluginFromNpmSpec, installPluginFromPath } from "../plugins/install.js";
 import { recordPluginInstall } from "../plugins/installs.js";
 import { clearPluginManifestRegistryCache } from "../plugins/manifest-registry.js";
-import type { PluginRecord } from "../plugins/registry.js";
 import { applyExclusiveSlotSelection } from "../plugins/slots.js";
 import { resolvePluginSourceRoots, formatPluginSourceForTable } from "../plugins/source-display.js";
 import { buildPluginStatusReport } from "../plugins/status.js";
@@ -535,7 +535,8 @@ export function registerPluginsCli(program: Command) {
     .description("Install a plugin (path, archive, or npm spec)")
     .argument("<path-or-spec>", "Path (.ts/.js/.zip/.tgz/.tar.gz) or an npm package spec")
     .option("-l, --link", "Link a local path instead of copying", false)
-    .action(async (raw: string, opts: { link?: boolean }) => {
+    .option("--pin", "Record npm installs as exact resolved <name>@<version>", false)
+    .action(async (raw: string, opts: { link?: boolean; pin?: boolean }) => {
       const fileSpec = resolveFileNpmSpecToLocalPath(raw);
       if (fileSpec && !fileSpec.ok) {
         defaultRuntime.error(fileSpec.error);
@@ -648,12 +649,28 @@ export function registerPluginsCli(program: Command) {
       clearPluginManifestRegistryCache();
 
       let next = enablePluginInConfig(cfg, result.pluginId);
+      const resolvedSpec = result.npmResolution?.resolvedSpec;
+      const recordSpec = opts.pin && resolvedSpec ? resolvedSpec : raw;
+      if (opts.pin && !resolvedSpec) {
+        defaultRuntime.log(
+          theme.warn("Could not resolve exact npm version for --pin; storing original npm spec."),
+        );
+      }
+      if (opts.pin && resolvedSpec) {
+        defaultRuntime.log(`Pinned npm install record to ${resolvedSpec}.`);
+      }
       next = recordPluginInstall(next, {
         pluginId: result.pluginId,
         source: "npm",
-        spec: raw,
+        spec: recordSpec,
         installPath: result.targetDir,
         version: result.version,
+        resolvedName: result.npmResolution?.name,
+        resolvedVersion: result.npmResolution?.version,
+        resolvedSpec: result.npmResolution?.resolvedSpec,
+        integrity: result.npmResolution?.integrity,
+        shasum: result.npmResolution?.shasum,
+        resolvedAt: result.npmResolution?.resolvedAt,
       });
       const slotResult = applySlotSelectionForPlugin(next, result.pluginId);
       next = slotResult.config;
@@ -691,6 +708,20 @@ export function registerPluginsCli(program: Command) {
           info: (msg) => defaultRuntime.log(msg),
           warn: (msg) => defaultRuntime.log(theme.warn(msg)),
         },
+        onIntegrityDrift: async (drift) => {
+          const specLabel = drift.resolvedSpec ?? drift.spec;
+          defaultRuntime.log(
+            theme.warn(
+              `Integrity drift detected for "${drift.pluginId}" (${specLabel})` +
+                `\nExpected: ${drift.expectedIntegrity}` +
+                `\nActual:   ${drift.actualIntegrity}`,
+            ),
+          );
+          if (drift.dryRun) {
+            return true;
+          }
+          return await promptYesNo(`Continue updating "${drift.pluginId}" with this artifact?`);
+        },
       });
 
       for (const outcome of result.outcomes) {