@upx-us/shield 0.7.4 → 0.7.5

package/CHANGELOG.md

@@ -4,6 +4,13 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.7.5] — 2026-03-13
+
+### Security
+- **Block direct platform backend calls** — `loadCredentials()` now detects and overrides any `SHIELD_API_URL` pointing to a platform backend (legacy Replit URLs, `uss.upx.com`). Plugin traffic is enforced to only reach the Shield ingest proxy. A second-layer check in the RPC client rejects blocked URLs even if config loading is bypassed.
+- **Fix RPC `apiUrl` resolution** — RPC handlers now use the validated `apiUrl` from credentials instead of a non-existent config field (which silently fell through to `null`).
+
+---
 ## [0.7.4] — 2026-03-13
 
 ### Changed

package/dist/index.js

@@ -995,9 +995,8 @@ exports.default = {
                 .catch((err) => respond(false, { error: err instanceof Error ? err.message : String(err) }));
         });
         const rpcCreds = (0, config_1.loadCredentials)();
-        const rpcConfig = (0, config_1.loadConfig)({});
         const platformApiConfig = {
-            apiUrl: rpcConfig.platformApiUrl ?? null,
+            apiUrl: rpcCreds?.apiUrl || null,
             instanceId: state.instanceId || rpcCreds?.instanceId || '',
             hmacSecret: rpcCreds?.hmacSecret || '',
         };

package/dist/src/config.d.ts

@@ -21,6 +21,7 @@ export declare function deriveAgentsDirFromInstallPath(startDir?: string): strin
 export declare const SHIELD_CONFIG_PATH: string;
 export declare function injectConfigEnv(): void;
 export declare function loadCredentials(): ShieldCredentials;
+export declare function enforceIngestUrl(url: string): string;
 export declare function loadCredentialsFromPluginConfig(_pluginConfig: Record<string, unknown>): ShieldCredentials;
 export interface ConfigOverrides {
     credentials?: ShieldCredentials;

package/dist/src/config.js

@@ -37,6 +37,7 @@ exports.SHIELD_CONFIG_PATH = void 0;
 exports.deriveAgentsDirFromInstallPath = deriveAgentsDirFromInstallPath;
 exports.injectConfigEnv = injectConfigEnv;
 exports.loadCredentials = loadCredentials;
+exports.enforceIngestUrl = enforceIngestUrl;
 exports.loadCredentialsFromPluginConfig = loadCredentialsFromPluginConfig;
 exports.loadConfig = loadConfig;
 const os_1 = require("os");
@@ -128,13 +129,32 @@ function loadCredentials() {
         }
         return val;
     }
+    const rawApiUrl = process.env.SHIELD_API_URL || file.SHIELD_API_URL || '';
+    const apiUrl = enforceIngestUrl(rawApiUrl);
     return {
-        apiUrl: process.env.SHIELD_API_URL || file.SHIELD_API_URL || '',
+        apiUrl,
         hmacSecret: resolve('SHIELD_HMAC_SECRET', 'SHIELD_SECRET'),
         instanceId: resolve('SHIELD_INSTANCE_ID', 'SHIELD_FINGERPRINT'),
         shieldEnv: process.env.SHIELD_ENV || file.SHIELD_ENV || '',
     };
 }
+const CANONICAL_INGEST_URL = 'https://openclaw-shield.upx.com';
+const BLOCKED_HOST_PATTERNS = [
+    /^https?:\/\/uss\.upx\.com/i,
+    /^https?:\/\/[a-z0-9-]+\.replit\.app/i,
+    /^https?:\/\/egupx-/i,
+];
+function enforceIngestUrl(url) {
+    if (!url)
+        return CANONICAL_INGEST_URL;
+    const isBlocked = BLOCKED_HOST_PATTERNS.some(p => p.test(url));
+    if (isBlocked) {
+        log.warn('config', `SHIELD_API_URL points to a platform backend ("${url}") — this is not permitted. ` +
+            `Overriding with ${CANONICAL_INGEST_URL}. Remove SHIELD_API_URL from your config to fix this permanently.`);
+        return CANONICAL_INGEST_URL;
+    }
+    return url;
+}
 function loadCredentialsFromPluginConfig(_pluginConfig) {
     return loadCredentials();
 }

package/dist/src/rpc/client.js

@@ -57,6 +57,13 @@ async function callPlatformApi(config, path, params, method) {
             error: 'Platform API not configured. This feature requires the Shield platform API which is not yet available for your instance. Check your Shield dashboard for updates.',
         };
     }
+    const BLOCKED = [/^https?:\/\/uss\.upx\.com/i, /^https?:\/\/[a-z0-9-]+\.replit\.app/i, /^https?:\/\/egupx-/i];
+    if (BLOCKED.some(p => p.test(config.apiUrl))) {
+        return {
+            ok: false,
+            error: 'Shield API URL points to a platform backend — direct access is not permitted. Reconfigure Shield to use the ingest endpoint.',
+        };
+    }
     const url = new URL(path, config.apiUrl);
     const httpMethod = method || (params ? 'POST' : 'GET');
     if (httpMethod === 'GET' && params) {

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "shield",
   "name": "OpenClaw Shield",
   "description": "Real-time security monitoring \u2014 streams enriched, redacted security events to the Shield detection platform.",
-  "version": "0.7.4",
+  "version": "0.7.5",
   "skills": [
     "./skills"
   ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@upx-us/shield",
-  "version": "0.7.4",
+  "version": "0.7.5",
   "description": "Security monitoring plugin for OpenClaw agents — streams enriched security events to the Shield detection platform",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",