multicorn-shield 1.11.0 → 1.12.0

package/dist/openclaw-hook/HOOK.md

@@ -33,9 +33,11 @@ metadata:
 >     "entries": {
 >       "multicorn-shield": {
 >         "enabled": true,
->         "env": {
->           "MULTICORN_API_KEY": "mcs_your_key_here",
->           "MULTICORN_BASE_URL": "https://api.multicorn.ai"
+>         "config": {
+>           "apiKey": "${MULTICORN_API_KEY}",
+>           "baseUrl": "https://api.multicorn.ai",
+>           "agentName": "openclaw",
+>           "failMode": "closed"
 >         }
 >       }
 >     }

package/dist/openclaw-hook/handler.js

@@ -184,7 +184,7 @@ function handleHttpError(status, logger, retryDelaySeconds) {
   if (status === 401 || status === 403) {
     if (!authErrorLogged) {
       authErrorLogged = true;
-      const errorMsg = "[multicorn-shield] ERROR: Authentication failed. Your MULTICORN_API_KEY is invalid or expired. Check the key in your OpenClaw config (~/.openclaw/openclaw.json \u2192 plugins.entries.multicorn-shield.env.MULTICORN_API_KEY). Get a valid key from your Multicorn dashboard (Settings \u2192 API Keys).";
+      const errorMsg = "[multicorn-shield] ERROR: Authentication failed. Your MULTICORN_API_KEY is invalid or expired. Check the key in ~/.multicorn/config.json (from npx multicorn-shield init) or ~/.openclaw/openclaw.json \u2192 plugins.entries.multicorn-shield.config.apiKey. Get a valid key from your Multicorn dashboard (Settings \u2192 API Keys).";
       process.stderr.write(`${errorMsg}
 `);
     }

package/dist/openclaw-plugin/multicorn-shield.js

@@ -189,7 +189,7 @@ function handleHttpError(status, logger, retryDelaySeconds) {
   if (status === 401 || status === 403) {
     if (!authErrorLogged) {
       authErrorLogged = true;
-      const errorMsg = "[multicorn-shield] ERROR: Authentication failed. Your MULTICORN_API_KEY is invalid or expired. Check the key in your OpenClaw config (~/.openclaw/openclaw.json \u2192 plugins.entries.multicorn-shield.env.MULTICORN_API_KEY). Get a valid key from your Multicorn dashboard (Settings \u2192 API Keys).";
+      const errorMsg = "[multicorn-shield] ERROR: Authentication failed. Your MULTICORN_API_KEY is invalid or expired. Check the key in ~/.multicorn/config.json (from npx multicorn-shield init) or ~/.openclaw/openclaw.json \u2192 plugins.entries.multicorn-shield.config.apiKey. Get a valid key from your Multicorn dashboard (Settings \u2192 API Keys).";
       logger?.error(errorMsg);
       process.stderr.write(`${errorMsg}
 `);
@@ -491,20 +491,41 @@ function agentNameFromOpenclawPlatform(cfg) {
   }
   return void 0;
 }
+var ENV_REF_PATTERN = /^\$\{([A-Z_][A-Z0-9_]*)\}$/;
+function resolveConfigString(value) {
+  const raw = asString(value);
+  if (raw === void 0) return void 0;
+  const match = ENV_REF_PATTERN.exec(raw.trim());
+  if (match === null) return raw;
+  const envName = match[1];
+  if (envName === void 0) return void 0;
+  const fromEnv = process.env[envName];
+  return typeof fromEnv === "string" && fromEnv.length > 0 ? fromEnv : void 0;
+}
+function parseFailMode(value) {
+  if (value === "open") return "open";
+  if (value === "closed") return "closed";
+  return "closed";
+}
 function readConfig() {
   const pc = pluginConfig ?? {};
-  const resolvedApiKey = asString(cachedMulticornConfig?.apiKey) ?? asString(process.env["MULTICORN_API_KEY"]) ?? "";
-  const resolvedBaseUrl = asString(cachedMulticornConfig?.baseUrl) ?? asString(process.env["MULTICORN_BASE_URL"]) ?? "https://api.multicorn.ai";
+  const fromFileKey = asString(cachedMulticornConfig?.apiKey);
+  const fromPluginKey = resolveConfigString(pc["apiKey"]);
+  const fromEnvKey = asString(process.env["MULTICORN_API_KEY"]);
+  let apiKey = fromFileKey ?? fromPluginKey ?? fromEnvKey ?? "";
+  const fromPluginBase = resolveConfigString(pc["baseUrl"]);
+  const fromFileBase = asString(cachedMulticornConfig?.baseUrl);
+  const fromEnvBase = asString(process.env["MULTICORN_BASE_URL"]);
+  const baseUrl = fromPluginBase ?? fromFileBase ?? fromEnvBase ?? "https://api.multicorn.ai";
   const agentName = asString(pc["agentName"]) ?? process.env["MULTICORN_AGENT_NAME"] ?? agentNameFromOpenclawPlatform(cachedMulticornConfig) ?? asString(cachedMulticornConfig?.agentName) ?? null;
-  const failMode = "closed";
-  let apiKey = resolvedApiKey;
+  const failMode = parseFailMode(pc["failMode"]);
   if (apiKey.length > 0 && (!apiKey.startsWith("mcs_") || apiKey.length < 16)) {
     pluginLogger?.error(
       "Invalid API key format. Key must start with mcs_ and be at least 16 characters."
     );
     apiKey = "";
   }
-  return { apiKey, baseUrl: resolvedBaseUrl, agentName, failMode };
+  return { apiKey, baseUrl, agentName, failMode };
 }
 function asString(value) {
   return typeof value === "string" && value.length > 0 ? value : void 0;
@@ -919,4 +940,4 @@ function resetState() {
   hasLoggedFirstAction = false;
 }
 
-export { afterToolCall, beforeToolCall, plugin, readConfig, register, resetState, resolveAgentName };
+export { afterToolCall, beforeToolCall, plugin, readConfig, register, resetState, resolveAgentName, resolveConfigString };

package/dist/openclaw-plugin/openclaw.plugin.json

@@ -9,7 +9,7 @@
     "properties": {
       "apiKey": {
         "type": "string",
-        "pattern": "^mcs_.{12,}$",
+        "pattern": "^(mcs_.{12,}|\\$\\{MULTICORN_API_KEY\\})$",
         "minLength": 16
       },
       "baseUrl": {