Plugins: allowlist plugins when enabling from CLI

src/plugins/enable.test.ts

@@ -0,0 +1,34 @@
+import { describe, expect, it } from "vitest";
+import type { OpenClawConfig } from "../config/config.js";
+import { enablePluginInConfig } from "./enable.js";
+
+describe("enablePluginInConfig", () => {
+  it("enables a plugin entry", () => {
+    const cfg: OpenClawConfig = {};
+    const result = enablePluginInConfig(cfg, "google-antigravity-auth");
+    expect(result.enabled).toBe(true);
+    expect(result.config.plugins?.entries?.["google-antigravity-auth"]?.enabled).toBe(true);
+  });
+
+  it("adds plugin to allowlist when allowlist is configured", () => {
+    const cfg: OpenClawConfig = {
+      plugins: {
+        allow: ["memory-core"],
+      },
+    };
+    const result = enablePluginInConfig(cfg, "google-antigravity-auth");
+    expect(result.enabled).toBe(true);
+    expect(result.config.plugins?.allow).toEqual(["memory-core", "google-antigravity-auth"]);
+  });
+
+  it("refuses enable when plugin is denylisted", () => {
+    const cfg: OpenClawConfig = {
+      plugins: {
+        deny: ["google-antigravity-auth"],
+      },
+    };
+    const result = enablePluginInConfig(cfg, "google-antigravity-auth");
+    expect(result.enabled).toBe(false);
+    expect(result.reason).toBe("blocked by denylist");
+  });
+});