@opentrust/guards 7.3.20 → 7.3.22

package/agent/types.ts

@@ -17,7 +17,7 @@ export type OpenClawGuardConfig = {
   enabled?: boolean;
   /** 检测到风险时是否阻断执行 */
   blockOnRisk?: boolean;
-  /** Core 平台 API Key（sk-og-xxx 格式），为空时自动注册 */
+  /** API Key: sk-ot-xxx (System API Key) or sk-og-xxx (Core key). Empty = auto-register via Core */
   apiKey?: string;
   /** 请求超时时间（毫秒） */
   timeoutMs?: number;

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "opentrust-guard",
   "name": "OpenTrust Guard",
   "description": "AI security guard for OpenClaw agents: prompt injection detection, credential scanning, and behavioral monitoring.",
-  "version": "7.3.20",
+  "version": "7.3.22",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opentrust/guards",
-  "version": "7.3.20",
+  "version": "7.3.22",
   "description": "AI agent security plugin for OpenClaw: prompt injection detection, PII sanitization, and monitoring",
   "type": "module",
   "main": "index.ts",

package/plugin/lifecycle.ts

@@ -172,11 +172,16 @@ export function register(
 
   // ── 凭证加载/注册 ───────────────────────────────────
   if (!state.coreCredentials) {
-    if (config.apiKey) {
-      // 使用用户配置的 API Key
+    if (config.apiKey?.startsWith("sk-ot-")) {
+      // System API Key from Dashboard — skip Core registration entirely
+      state.coreCredentials = { apiKey: config.apiKey, agentId: "configured", claimUrl: "", verificationCode: "", email: "system@opentrust" };
+      state.behaviorDetector.setCredentials(state.coreCredentials);
+      log.info("Platform: using System API Key (sk-ot-*)");
+    } else if (config.apiKey) {
+      // Core API Key (sk-og-*)
       state.coreCredentials = { apiKey: config.apiKey, agentId: "configured", claimUrl: "", verificationCode: "" };
       state.behaviorDetector.setCredentials(state.coreCredentials);
-      log.info("Platform: using configured API key");
+      log.info("Platform: using configured Core API key");
     } else {
       // 尝试从本地文件加载已保存的凭证
       state.coreCredentials = loadCoreCredentials();