@dcrays/mobook-security-plugin 2.0.7 → 2.0.8

package/index.js

@@ -437,7 +437,6 @@ function installFetchInterceptor(api) {
     const reqHeaders = getMergedRequestHeaders(input, init);
     const reqBodyText = await getRequestBodyText(input, init);
 
-    log(`[LLM-REQ #${thisCallId}] ${method} ${url}`, "DEBUG");
 
     // ---- 请求侧检查：提示词注入检测（已禁用） ----
     // const promptInjectionPatterns = [
@@ -480,7 +479,6 @@ function installFetchInterceptor(api) {
 
     const respText = extractTextFromResponseBody(respBody, sse);
     if (!respText) {
-      log(`[LLM-RESP #${thisCallId}] ${resp.status} ${durationMs}ms (empty body)`, "DEBUG");
       return resp;
     }
 
@@ -494,7 +492,6 @@ function installFetchInterceptor(api) {
       return makeBlockedResponse(sse, finalText, resp);
     }
 
-    log(`[LLM-RESP #${thisCallId}] ${resp.status} ${durationMs}ms (clean)`, "DEBUG");
     return resp;
   };
 
@@ -511,11 +508,7 @@ function installFetchInterceptor(api) {
 // 插件注册
 // ============================================================
 export default function register(api) {
-  log("═══════════════════════════════════════════════════════");
-  log("  MoBook 安全防护插件 v2.0 启动");
-  log("  功能: 危险命令拦截 | 敏感信息脱敏(全渠道) | LLM 响应拦截 | 提示词注入检测 | 操作审计");
-  log("═══════════════════════════════════════════════════════");
-  log(`插件ID: ${api.id}`);
+  log("MoBook 安全防护插件 v2.0 启动");
 
   // ---- 安装 Fetch 拦截器（核心：全渠道 LLM 拦截） ----
   installFetchInterceptor(api);
@@ -526,8 +519,6 @@ export default function register(api) {
     const params = event?.params || {};
     const safeParams = sanitizeParamsForLog(params);
 
-    log(`TOOL_CALL: tool=${toolName} params=${JSON.stringify(safeParams).slice(0, 500)}`);
-
     // exec 命令安全检查
     if (toolName === "exec") {
       const cmd = params.command || "";
@@ -599,7 +590,7 @@ export default function register(api) {
             blockReason: "🛡️ 安全插件拦截：该目录为受保护资源，禁止访问"
           };
         }
-        log(`DEV_ACCESS: 白名单路径放行 | tool=${toolName}`);
+
       }
     }
 
@@ -632,7 +623,7 @@ export default function register(api) {
       const pathValues = [params.path || "", params.command || "", params.file || ""].join(" ");
       const isConfigFile = /openclaw\.json/.test(pathValues);
       if (isConfigFile) {
-        log(`CONFIG_FILE_CHECK: tool=${toolName} path=${params.path || ""} edits=${JSON.stringify(params.edits || "").slice(0, 200)} content=${(params.content || "").slice(0, 100)}`, "DEBUG");
+
         // 检查内容是否涉及禁用安全插件
         const contentValues = [
           params.command || "",
@@ -679,15 +670,10 @@ export default function register(api) {
     }
   });
 
-  // ---- Hook 4: message_sent（发送后审计） ----
+  // ---- Hook 4: message_sent（仅记录，不再写日志） ----
   api.on("message_sent", async (event, ctx) => {
-    const channel = ctx?.channelId || "unknown";
-    const to = event?.to || "unknown";
-    log(`MESSAGE_SENT: channel=${channel} to=${to}`);
+    // 静默——只保留 hook 注册，不记录常规发送日志
   });
 
-  log("已注册: fetch拦截器(全渠道) + before_tool_call + message_sending + llm_output + message_sent");
-  log("═══════════════════════════════════════════════════════");
-  log("  安全插件 v2.0 启动完成");
-  log("═══════════════════════════════════════════════════════");
+  log("启动完成: fetch拦截器 + before_tool_call + message_sending + llm_output + message_sent");
 }

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "mobook-security-plugin",
   "name": "MoBook 安全防护插件",
-  "version": "2.0.0",
+  "version": "2.0.8",
   "description": "MoBook 企业级安全插件 - 危险命令分级拦截、敏感信息全渠道脱敏（身份证GB11643/银行卡Luhn校验）、LLM响应拦截、操作审计",
   "entry": "./index.js",
   "type": "plugin",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dcrays/mobook-security-plugin",
-  "version": "2.0.7",
+  "version": "2.0.8",
   "type": "module",
   "description": "MoBook 企业级安全插件 - 危险命令分级拦截、敏感信息全渠道脱敏（身份证GB11643/银行卡Luhn校验）、LLM响应拦截、操作审计",
   "main": "index.js",