@dcrays/mobook-security-plugin 2.0.18 → 2.1.0

package/index.js

@@ -1,5 +1,7 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { createRequire } from "node:module";
+import { realpathSync } from "node:fs";
 
 // ============================================================
 // MoBook 安全防护插件 v2.0
@@ -280,6 +282,8 @@ function sanitizeParamsForLog(params) {
 
 const FETCH_WRAPPED_KEY = Symbol.for("mobook-security-plugin.fetch-wrapped");
 const ORIGINAL_FETCH_KEY = Symbol.for("mobook-security-plugin.original-fetch");
+const UNDICI_WRAPPED_KEY = Symbol.for("mobook-security-plugin.undici-wrapped");
+const UNDICI_RUNTIME_DEPS_KEY = "__OPENCLAW_TEST_UNDICI_RUNTIME_DEPS__";
 
 // 保存原始 fetch
 function saveOriginalFetch() {
@@ -539,6 +543,21 @@ function installFetchInterceptor(api) {
     const reqHeaders = getMergedRequestHeaders(input, init);
     const reqBodyText = await getRequestBodyText(input, init);
 
+    // ---- 请求侧检查：禁止调用指定大模型端点（环境变量白名单放行） ----
+    const BLOCKED_LLM_ENDPOINTS = [
+      "ai-clawbot.shuwenda.com",
+    ];
+    if (process.env.MOBOOK_ALLOW_SHUWENDA !== "1") {
+      try {
+        const urlObj = new URL(url);
+        if (BLOCKED_LLM_ENDPOINTS.some(host => urlObj.hostname === host)) {
+          log(`[LLM-REQ-BLOCK #${thisCallId}] 禁止调用被封禁的大模型端点: ${urlObj.hostname}`, "WARN");
+          alert(`BLOCKED_LLM_ENDPOINT: ${url.slice(0, 200)}`);
+          const wantsSse = guessRequestWantsSse(url, reqHeaders, reqBodyText);
+          return makeBlockedResponse(wantsSse, "⚠️ 安全策略：该大模型端点已被禁止调用");
+        }
+      } catch {}
+    }
 
     // ---- 请求侧检查：提示词注入检测（已禁用） ----
     // const promptInjectionPatterns = [
@@ -613,15 +632,145 @@ function installFetchInterceptor(api) {
   return true;
 }
 
+// ============================================================
+// 5b. undici.fetch 劫持 — 兼容 openclaw 2026.6.11+ 的 LLM 调用路径
+//     openclaw 2026.6.11+ 使用 undici.fetch 而非 globalThis.fetch 发送 LLM 请求
+//     通过注入 globalThis["__OPENCLAW_TEST_UNDICI_RUNTIME_DEPS__"] 让
+//     openclaw 的 loadUndiciRuntimeDeps() 使用被包装的 undici.fetch
+// ============================================================
+
+function installUndiciInterceptor(api) {
+  if (globalThis[UNDICI_WRAPPED_KEY]) {
+    log("undici 拦截器已安装（避免重复包装）", "DEBUG");
+    return true;
+  }
+
+  try {
+    // 通过 createRequire 加载 openclaw 进程中的 undici 模块
+    const pluginRequire = createRequire(import.meta.url);
+    const argv1 = process.argv[1];
+    if (!argv1) {
+      log("⚠️ process.argv[1] 为空，无法定位 openclaw 安装路径，undici 拦截器未安装", "WARN");
+      return false;
+    }
+    const realPath = realpathSync(path.resolve(argv1));
+    const hostRequire = createRequire(realPath);
+    const undici = hostRequire("undici");
+
+    const originalUndiciFetch = undici.fetch;
+    if (!originalUndiciFetch) {
+      log("⚠️ undici.fetch 不可用，undici 拦截器未安装", "WARN");
+      return false;
+    }
+
+    let undiciCallId = 0;
+
+    const wrappedUndiciFetch = async function(input, init) {
+      const thisCallId = ++undiciCallId;
+      const url = getUrlFromFetchArgs(input);
+
+      // 只拦截 LLM 相关请求
+      const isLlmCall = url.includes("/chat/completions") || url.includes("/v1/chat") || url.includes("/completions");
+      if (!isLlmCall) {
+        return originalUndiciFetch(input, init);
+      }
+
+      const method = init?.method || (input instanceof Request ? input.method : "GET") || "GET";
+      const reqHeaders = getMergedRequestHeaders(input, init);
+      const reqBodyText = await getRequestBodyText(input, init);
+
+      log(`[UNDICI-LLM-REQ #${thisCallId}] ${method} ${url.slice(0, 120)}`, "DEBUG");
+
+      // ---- 请求侧检查：禁止调用指定大模型端点 ----
+      const BLOCKED_LLM_ENDPOINTS = ["ai-clawbot.shuwenda.com"];
+      if (process.env.MOBOOK_ALLOW_SHUWENDA !== "1") {
+        try {
+          const urlObj = new URL(url);
+          if (BLOCKED_LLM_ENDPOINTS.some(host => urlObj.hostname === host)) {
+            log(`[UNDICI-LLM-REQ-BLOCK #${thisCallId}] 禁止调用被封禁的大模型端点: ${urlObj.hostname}`, "WARN");
+            alert(`UNDICI_BLOCKED_LLM_ENDPOINT: ${url.slice(0, 200)}`);
+            const wantsSse = guessRequestWantsSse(url, reqHeaders, reqBodyText);
+            return makeBlockedResponse(wantsSse, "⚠️ 安全策略：该大模型端点已被禁止调用");
+          }
+        } catch {}
+      }
+
+      // ---- 放行请求，获取响应 ----
+      const fetchStart = Date.now();
+      let resp;
+      try {
+        resp = await originalUndiciFetch(input, init);
+      } catch (e) {
+        log(`[UNDICI-LLM-FETCH-ERR #${thisCallId}] ${e.message}`, "ERROR");
+        throw e;
+      }
+      const durationMs = Date.now() - fetchStart;
+
+      // ---- 响应侧检查：敏感信息脱敏 ----
+      const sse = isSseResponse(resp);
+      let respBody = "";
+      try {
+        respBody = await resp.clone().text();
+      } catch {
+        respBody = "[unreadable]";
+      }
+
+      const respText = extractTextFromResponseBody(respBody, sse);
+      if (!respText) {
+        log(`[UNDICI-LLM-RESP #${thisCallId}] 空响应体，放行 | ${durationMs}ms`, "DEBUG");
+        return resp;
+      }
+
+      const { sanitized, matches } = sanitizeContent(respText);
+      if (matches.length > 0) {
+        alert(`UNDICI_LLM_RESPONSE_SANITIZED [RESP #${thisCallId}]: 脱敏类型=${matches.join(", ")} | 原文长度=${respText.length} | 脱敏后长度=${sanitized.length} | 耗时=${durationMs}ms`);
+        log(`[UNDICI-LLM-RESP-SANITIZE #${thisCallId}] sanitized ${matches.join(", ")} (${respText.length}→${sanitized.length} chars)`, "WARN");
+
+        const patchedBody = patchResponseBody(respBody, sse, sanitized);
+        const headers = new Headers(resp.headers);
+        headers.delete("content-length");
+        headers.delete("content-encoding");
+        return new Response(patchedBody, {
+          status: resp.status,
+          statusText: resp.statusText,
+          headers
+        });
+      }
+
+      log(`[UNDICI-LLM-RESP #${thisCallId}] 无敏感信息，放行 | ${durationMs}ms`, "DEBUG");
+      return resp;
+    };
+
+    // 注入到 globalThis，让 openclaw 的 loadUndiciRuntimeDeps() 使用包装版
+    globalThis[UNDICI_RUNTIME_DEPS_KEY] = {
+      Agent: undici.Agent,
+      EnvHttpProxyAgent: undici.EnvHttpProxyAgent,
+      ProxyAgent: undici.ProxyAgent,
+      FormData: undici.FormData,
+      fetch: wrappedUndiciFetch
+    };
+    globalThis[UNDICI_WRAPPED_KEY] = true;
+
+    log("✅ undici.fetch 拦截器已安装 — 兼容 openclaw 2026.6.11+ LLM 调用路径", "INFO");
+    return true;
+  } catch (e) {
+    log(`⚠️ undici 拦截器安装失败: ${e.message}`, "ERROR");
+    return false;
+  }
+}
+
 // ============================================================
 // 插件注册
 // ============================================================
 export default function register(api) {
   log("MoBook 安全防护插件 v2.0 启动");
 
-  // ---- 安装 Fetch 拦截器（核心：全渠道 LLM 拦截） ----
+  // ---- 安装 Fetch 拦截器（globalThis.fetch 劫持） ----
   installFetchInterceptor(api);
 
+  // ---- 安装 undici.fetch 拦截器（兼容 openclaw 2026.6.11+） ----
+  installUndiciInterceptor(api);
+
   // ---- Hook 1: before_tool_call（命令拦截 + 审计） ----
   api.on("before_tool_call", async (event, ctx) => {
     const toolName = event?.toolName || "unknown";

package/openclaw.plugin.json

@@ -1,9 +1,12 @@
 {
   "id": "mobook-security-plugin",
   "name": "MoBook 安全防护插件",
-  "version": "2.0.18",
+  "version": "2.1.0",
   "description": "MoBook 企业级安全插件 - 危险命令分级拦截、敏感信息全渠道脱敏（身份证GB11643/银行卡Luhn校验）、LLM响应拦截、操作审计",
   "entry": "./index.js",
   "type": "plugin",
-  "configSchema": {}
-}
+  "configSchema": {},
+  "activation": {
+    "onStartup": true
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dcrays/mobook-security-plugin",
-  "version": "2.0.18",
+  "version": "2.1.0",
   "type": "module",
   "description": "MoBook 企业级安全插件 - 危险命令分级拦截、敏感信息全渠道脱敏（身份证GB11643/银行卡Luhn校验）、LLM响应拦截、操作审计",
   "main": "index.js",
@@ -20,4 +20,4 @@
       "./index.js"
     ]
   }
-}
+}