shroud-privacy 2.0.2 → 2.0.4

package/dist/hooks.d.ts

@@ -1,12 +1,13 @@
 /**
  * OpenClaw lifecycle hooks for the Shroud privacy plugin.
  *
- * Registers 5 hooks:
- * 1. before_prompt_build  (async) -- obfuscate user prompt via prependContext
- * 2. before_llm_send     (async) -- obfuscate LLM input messages + return transformResponse for deobfuscation
- * 3. before_tool_call    (async) -- deobfuscate tool params (+ depth tracking)
- * 4. tool_result_persist  (SYNC) -- obfuscate tool result message
- * 5. message_sending     (async) -- deobfuscate outbound message content (fallback)
+ * Registers 6 hooks:
+ * 1. before_prompt_build   (async) -- obfuscate user prompt via prependContext
+ * 2. before_message_write  (SYNC)  -- obfuscate every message written to the session transcript
+ * 3. before_llm_send       (async) -- obfuscate LLM input messages (only on platforms that support it)
+ * 4. before_tool_call      (async) -- deobfuscate tool params (+ depth tracking)
+ * 5. tool_result_persist   (SYNC)  -- obfuscate tool result message
+ * 6. message_sending       (async) -- deobfuscate outbound message content
  */
 import { Obfuscator } from "./obfuscator.js";
 export interface PluginApi {

package/dist/hooks.js

@@ -1,12 +1,13 @@
 /**
  * OpenClaw lifecycle hooks for the Shroud privacy plugin.
  *
- * Registers 5 hooks:
- * 1. before_prompt_build  (async) -- obfuscate user prompt via prependContext
- * 2. before_llm_send     (async) -- obfuscate LLM input messages + return transformResponse for deobfuscation
- * 3. before_tool_call    (async) -- deobfuscate tool params (+ depth tracking)
- * 4. tool_result_persist  (SYNC) -- obfuscate tool result message
- * 5. message_sending     (async) -- deobfuscate outbound message content (fallback)
+ * Registers 6 hooks:
+ * 1. before_prompt_build   (async) -- obfuscate user prompt via prependContext
+ * 2. before_message_write  (SYNC)  -- obfuscate every message written to the session transcript
+ * 3. before_llm_send       (async) -- obfuscate LLM input messages (only on platforms that support it)
+ * 4. before_tool_call      (async) -- deobfuscate tool params (+ depth tracking)
+ * 5. tool_result_persist   (SYNC)  -- obfuscate tool result message
+ * 6. message_sending       (async) -- deobfuscate outbound message content
  */
 import { createHash, randomBytes } from "node:crypto";
 import { writeFileSync } from "node:fs";
@@ -256,6 +257,11 @@ export function registerHooks(api, obfuscator) {
     // 1. before_prompt_build (async): obfuscate user prompt
     // -----------------------------------------------------------------------
     api.on("before_prompt_build", async (event) => {
+        // Reset tool depth at the start of each turn — tool calls from the
+        // previous turn are complete, so the counter should not carry over.
+        if (obfuscator.toolDepth > 0) {
+            obfuscator.resetToolDepth();
+        }
         const prompt = event?.prompt;
         if (typeof prompt !== "string" || !prompt)
             return;
@@ -276,13 +282,51 @@ export function registerHooks(api, obfuscator) {
         };
     });
     // -----------------------------------------------------------------------
-    // 2. before_llm_send (async): obfuscate LLM input + provide response deobfuscator
+    // 2. before_message_write (SYNC): obfuscate every message written to session
+    //    This ensures the LLM always sees obfuscated history, even on platforms
+    //    that don't support before_llm_send.
+    // -----------------------------------------------------------------------
+    api.on("before_message_write", (event) => {
+        if (!event?.message || typeof event.message !== "object")
+            return;
+        const msg = event.message;
+        // Obfuscate string content
+        if (typeof msg.content === "string") {
+            const result = obfuscator.obfuscate(msg.content);
+            if (result.entities.length === 0)
+                return;
+            dumpStatsFile(obfuscator);
+            return { message: { ...msg, content: result.obfuscated } };
+        }
+        // Obfuscate array-of-blocks content
+        if (Array.isArray(msg.content)) {
+            let changed = false;
+            const newContent = msg.content.map((block) => {
+                if (block && typeof block === "object" && typeof block.text === "string") {
+                    const result = obfuscator.obfuscate(block.text);
+                    if (result.entities.length > 0) {
+                        changed = true;
+                        return { ...block, text: result.obfuscated };
+                    }
+                }
+                return block;
+            });
+            if (!changed)
+                return;
+            dumpStatsFile(obfuscator);
+            return { message: { ...msg, content: newContent } };
+        }
+    });
+    // -----------------------------------------------------------------------
+    // 3. before_llm_send (async): obfuscate LLM input + provide response deobfuscator
+    //    Only fires on platforms that support this hook (e.g. custom forks).
+    //    On standard OpenClaw, before_message_write handles obfuscation instead.
     // -----------------------------------------------------------------------
     api.on("before_llm_send", async (event) => {
         if (!Array.isArray(event?.messages))
             return;
-        // Reset tool depth at the start of each LLM turn — tool calls from the
-        // previous turn are complete, so the counter should not carry over.
+        // Reset tool depth (also done in before_prompt_build for platforms
+        // that don't support before_llm_send)
         if (obfuscator.toolDepth > 0) {
             obfuscator.resetToolDepth();
         }

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "shroud-privacy",
   "name": "Shroud",
-  "version": "2.0.2",
+  "version": "2.0.4",
   "description": "Privacy obfuscation with deterministic fake values and deobfuscation — PII never reaches the LLM, tool calls still work",
   "configSchema": {
     "type": "object",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shroud-privacy",
-  "version": "2.0.2",
+  "version": "2.0.4",
   "description": "Privacy obfuscation plugin for OpenClaw — detects sensitive data and replaces with deterministic fake values",
   "type": "module",
   "main": "dist/index.js",