@drakon-systems/shieldcortex-realtime 4.28.1 → 4.30.0

package/cloud-sync.ts

@@ -3,12 +3,24 @@
 // Network egress for SC threat events. See CHANGELOG.md v4.12.8 / v4.12.9.
 
 type CloudSyncConfig = {
+  cloudEnabled?: boolean;
   cloudApiKey?: string;
   cloudBaseUrl?: string;
 };
 
 export function cloudSync(threat: Record<string, unknown>, cfg: CloudSyncConfig): void {
-  if (!cfg.cloudApiKey) return;
+  // Consent gate: require cloud explicitly enabled AND an API key — matching every
+  // other egress sender (intercept-ingest.ts, src/cloud/*). Previously this checked
+  // the key alone, so events could leave the machine with a key present even when
+  // cloud sync was "off" (ClawScan finding: external scanning without a local-only
+  // default).
+  if (!cfg.cloudEnabled || !cfg.cloudApiKey) return;
+  // Privacy: never transmit raw LLM input. Strip any input content/preview snippet —
+  // forward threat METADATA only (ClawScan finding: previews may contain credentials
+  // or confidential data). The local audit log keeps fuller detail for triage.
+  const metadata: Record<string, unknown> = { ...threat };
+  delete metadata.content;
+  delete metadata.preview;
   const url = `${cfg.cloudBaseUrl || 'https://api.shieldcortex.ai'}/v1/threats`;
   fetch(url, {
     method: 'POST',
@@ -16,7 +28,7 @@ export function cloudSync(threat: Record<string, unknown>, cfg: CloudSyncConfig)
       'Content-Type': 'application/json',
       Authorization: `Bearer ${cfg.cloudApiKey}`,
     },
-    body: JSON.stringify(threat),
+    body: JSON.stringify(metadata),
     signal: AbortSignal.timeout(5000),
   }).catch(() => {
     // Fire-and-forget — never block on cloud sync failure

package/dist/cloud-sync.js

@@ -2,8 +2,19 @@
 //
 // Network egress for SC threat events. See CHANGELOG.md v4.12.8 / v4.12.9.
 export function cloudSync(threat, cfg) {
-    if (!cfg.cloudApiKey)
+    // Consent gate: require cloud explicitly enabled AND an API key — matching every
+    // other egress sender (intercept-ingest.ts, src/cloud/*). Previously this checked
+    // the key alone, so events could leave the machine with a key present even when
+    // cloud sync was "off" (ClawScan finding: external scanning without a local-only
+    // default).
+    if (!cfg.cloudEnabled || !cfg.cloudApiKey)
         return;
+    // Privacy: never transmit raw LLM input. Strip any input content/preview snippet —
+    // forward threat METADATA only (ClawScan finding: previews may contain credentials
+    // or confidential data). The local audit log keeps fuller detail for triage.
+    const metadata = { ...threat };
+    delete metadata.content;
+    delete metadata.preview;
     const url = `${cfg.cloudBaseUrl || 'https://api.shieldcortex.ai'}/v1/threats`;
     fetch(url, {
         method: 'POST',
@@ -11,7 +22,7 @@ export function cloudSync(threat, cfg) {
             'Content-Type': 'application/json',
             Authorization: `Bearer ${cfg.cloudApiKey}`,
         },
-        body: JSON.stringify(threat),
+        body: JSON.stringify(metadata),
         signal: AbortSignal.timeout(5000),
     }).catch(() => {
         // Fire-and-forget — never block on cloud sync failure

package/dist/index.js

@@ -195,6 +195,9 @@ function normaliseConfig(raw) {
     if (typeof value.cloudBaseUrl === "string" && value.cloudBaseUrl.trim()) {
         config.cloudBaseUrl = value.cloudBaseUrl.trim();
     }
+    if (typeof value.cloudEnabled === "boolean") {
+        config.cloudEnabled = value.cloudEnabled;
+    }
     if (typeof value.binaryPath === "string" && value.binaryPath.trim()) {
         config.binaryPath = value.binaryPath.trim();
     }
@@ -494,7 +497,9 @@ function handleLlmInput(event, ctx) {
                     };
                     auditLog(entry);
                     loadConfig()
-                        .then(cfg => cloudSync({ ...entry, content: text.slice(0, 200) }, cfg))
+                        // Pass the local entry as-is; cloudSync strips the input preview/content
+                        // before transmit (metadata-only egress). No raw LLM input leaves here.
+                        .then(cfg => cloudSync(entry, cfg))
                         .catch(() => { });
                 }
             }

package/dist/intercept-ingest.js

@@ -2,6 +2,11 @@ export function syncInterceptEvent(event, config) {
     if (!config.cloudEnabled || !config.cloudApiKey)
         return;
     const url = `${config.cloudBaseUrl}/v1/audit/ingest`;
+    // Privacy: forward audit METADATA only — strip the content preview so raw memory
+    // text never leaves the machine (ClawScan finding: previews may contain credentials
+    // or confidential data). The local audit JSONL retains the preview for triage.
+    const metadata = { ...event };
+    delete metadata.preview;
     fetch(url, {
         method: 'POST',
         headers: {
@@ -9,7 +14,7 @@ export function syncInterceptEvent(event, config) {
             Authorization: `Bearer ${config.cloudApiKey}`,
         },
         body: JSON.stringify({
-            events: [{ ...event, source: 'openclaw-interceptor' }],
+            events: [{ ...metadata, source: 'openclaw-interceptor' }],
         }),
         signal: AbortSignal.timeout(5_000),
     }).catch(() => {

package/dist/openclaw.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "shieldcortex-realtime",
-  "version": "4.28.1",
+  "version": "4.30.0",
   "name": "ShieldCortex Real-time Scanner",
   "description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
   "kind": null,

package/index.ts

@@ -143,6 +143,7 @@ type PluginApi = {
 // ==================== CONFIG ====================
 
 interface SCConfig {
+  cloudEnabled?: boolean;
   cloudApiKey?: string;
   cloudBaseUrl?: string;
   binaryPath?: string;
@@ -250,6 +251,9 @@ function normaliseConfig(raw: unknown): SCConfig {
   if (typeof value.cloudBaseUrl === "string" && value.cloudBaseUrl.trim()) {
     config.cloudBaseUrl = value.cloudBaseUrl.trim();
   }
+  if (typeof value.cloudEnabled === "boolean") {
+    config.cloudEnabled = value.cloudEnabled;
+  }
   if (typeof value.binaryPath === "string" && value.binaryPath.trim()) {
     config.binaryPath = value.binaryPath.trim();
   }
@@ -594,7 +598,9 @@ function handleLlmInput(event: LlmInputEvent, ctx: AgentCtx): void {
           };
           auditLog(entry);
           loadConfig()
-            .then(cfg => cloudSync({ ...entry, content: text.slice(0, 200) }, cfg))
+            // Pass the local entry as-is; cloudSync strips the input preview/content
+            // before transmit (metadata-only egress). No raw LLM input leaves here.
+            .then(cfg => cloudSync(entry, cfg))
             .catch(() => {});
         }
       }

package/intercept-ingest.ts

@@ -12,6 +12,12 @@ export function syncInterceptEvent(event: InterceptAuditEntry, config: CloudConf
 
   const url = `${config.cloudBaseUrl}/v1/audit/ingest`;
 
+  // Privacy: forward audit METADATA only — strip the content preview so raw memory
+  // text never leaves the machine (ClawScan finding: previews may contain credentials
+  // or confidential data). The local audit JSONL retains the preview for triage.
+  const metadata: Record<string, unknown> = { ...event };
+  delete metadata.preview;
+
   fetch(url, {
     method: 'POST',
     headers: {
@@ -19,7 +25,7 @@ export function syncInterceptEvent(event: InterceptAuditEntry, config: CloudConf
       Authorization: `Bearer ${config.cloudApiKey}`,
     },
     body: JSON.stringify({
-      events: [{ ...event, source: 'openclaw-interceptor' }],
+      events: [{ ...metadata, source: 'openclaw-interceptor' }],
     }),
     signal: AbortSignal.timeout(5_000),
   }).catch(() => {

package/openclaw.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "shieldcortex-realtime",
-  "version": "4.28.1",
+  "version": "4.30.0",
   "name": "ShieldCortex Real-time Scanner",
   "description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
   "kind": null,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drakon-systems/shieldcortex-realtime",
-  "version": "4.28.1",
+  "version": "4.30.0",
   "description": "OpenClaw plugin for ShieldCortex real-time defence scanning and optional memory extraction.",
   "type": "module",
   "main": "./dist/index.js",