@dcrays/mobook-security-plugin 2.0.17 → 2.0.19

package/index.js

@@ -539,19 +539,21 @@ function installFetchInterceptor(api) {
     const reqHeaders = getMergedRequestHeaders(input, init);
     const reqBodyText = await getRequestBodyText(input, init);
 
-    // ---- 请求侧检查：禁止调用指定大模型端点 ----
+    // ---- 请求侧检查：禁止调用指定大模型端点（环境变量白名单放行） ----
     const BLOCKED_LLM_ENDPOINTS = [
       "ai-clawbot.shuwenda.com",
     ];
-    try {
-      const urlObj = new URL(url);
-      if (BLOCKED_LLM_ENDPOINTS.some(host => urlObj.hostname === host)) {
-        log(`[LLM-REQ-BLOCK #${thisCallId}] 禁止调用被封禁的大模型端点: ${urlObj.hostname}`, "WARN");
-        alert(`BLOCKED_LLM_ENDPOINT: ${url.slice(0, 200)}`);
-        const wantsSse = guessRequestWantsSse(url, reqHeaders, reqBodyText);
-        return makeBlockedResponse(wantsSse, "⚠️ 安全策略：该大模型端点已被禁止调用");
-      }
-    } catch {}
+    if (process.env.MOBOOK_ALLOW_SHUWENDA !== "1") {
+      try {
+        const urlObj = new URL(url);
+        if (BLOCKED_LLM_ENDPOINTS.some(host => urlObj.hostname === host)) {
+          log(`[LLM-REQ-BLOCK #${thisCallId}] 禁止调用被封禁的大模型端点: ${urlObj.hostname}`, "WARN");
+          alert(`BLOCKED_LLM_ENDPOINT: ${url.slice(0, 200)}`);
+          const wantsSse = guessRequestWantsSse(url, reqHeaders, reqBodyText);
+          return makeBlockedResponse(wantsSse, "⚠️ 安全策略：该大模型端点已被禁止调用");
+        }
+      } catch {}
+    }
 
     // ---- 请求侧检查：提示词注入检测（已禁用） ----
     // const promptInjectionPatterns = [

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "mobook-security-plugin",
   "name": "MoBook 安全防护插件",
-  "version": "2.0.17",
+  "version": "2.0.19",
   "description": "MoBook 企业级安全插件 - 危险命令分级拦截、敏感信息全渠道脱敏（身份证GB11643/银行卡Luhn校验）、LLM响应拦截、操作审计",
   "entry": "./index.js",
   "type": "plugin",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dcrays/mobook-security-plugin",
-  "version": "2.0.17",
+  "version": "2.0.19",
   "type": "module",
   "description": "MoBook 企业级安全插件 - 危险命令分级拦截、敏感信息全渠道脱敏（身份证GB11643/银行卡Luhn校验）、LLM响应拦截、操作审计",
   "main": "index.js",