shroud-privacy 2.5.6 → 2.5.7

package/README.md

@@ -79,7 +79,7 @@ Shroud does not guarantee compliance — regex-based detection has limitations (
 | `globalThis.__shroudStreamDeobfuscate` | LLM → Agent | Streaming event deobfuscation hook |
 | `globalThis.__shroudDeobfuscate` | Agent → Channel | Global deobfuscation hook — called by OpenClaw before ANY channel send |
 
-> **How it works:** Shroud intercepts ALL outbound LLM API calls (Anthropic, OpenAI, Google, any provider) at the `fetch` level and obfuscates detected entities in every message — including assistant history and Slack `<mailto:>` markup — before it leaves the process. On the response side, SSE streaming is deobfuscated per content block with buffered flushing. Every delivery path (Slack, WhatsApp, TUI, Telegram, Discord, Signal, web) gets real text automatically. Zero host patches required.
+> **How it works:** Shroud intercepts ALL outbound LLM API calls (Anthropic, OpenAI, Google, any provider) at the `fetch` level and obfuscates detected entities in every message — including assistant history, Slack `<mailto:>` markup, and OpenAI Responses / Codex `input_text` blocks — before it leaves the process. On the response side, SSE streaming is deobfuscated per content block with buffered flushing, and OpenAI Responses `output_text` blocks are treated the same as plain `text` blocks. Every delivery path (Slack, WhatsApp, TUI, Telegram, Discord, Signal, web) gets real text automatically. Zero host patches required.
 
 > **Requires OpenClaw 2026.3.24 or later.**
 
@@ -220,6 +220,15 @@ openclaw plugins install --path .
 openclaw gateway restart
 ```
 
+For a local Docker-backed OpenClaw install, use the repo deploy script instead. It builds the checkout, runs the key regression tests, syncs the packaged plugin into `~/.openclaw/extensions/shroud-privacy`, clears the Node compile cache, and recreates `openclaw-primary-gateway` when `~/.openclaw/compose/docker-compose.primary.yml` is present:
+
+```bash
+git clone https://github.com/wkeything/shroud.git
+cd shroud
+npm install
+./deploy-local.sh
+```
+
 ## Updating
 
 ```bash

package/dist/hooks.js

@@ -415,7 +415,7 @@ export function registerHooks(api, obfuscator) {
                         texts.push(msg.content);
                     else if (Array.isArray(msg.content)) {
                         for (const b of msg.content) {
-                            if (b?.type === "text" && typeof b.text === "string")
+                            if (typeof b?.text === "string")
                                 texts.push(b.text);
                         }
                     }
@@ -475,7 +475,7 @@ export function registerHooks(api, obfuscator) {
                         if (!b || typeof b !== "object")
                             return b;
                         let newBlock = b;
-                        if (b.type === "text" && typeof b.text === "string") {
+                        if (typeof b.text === "string") {
                             const cleaned = stripSlackLinksForHook(b.text);
                             const result = ob().obfuscate(cleaned, undefined, _exemptCats);
                             totalEntities += result.entities.length;
@@ -1139,7 +1139,7 @@ export function registerHooks(api, obfuscator) {
                     else if (Array.isArray(msg.content)) {
                         const isAssistant = msg.role === "assistant" || msg.role === "model";
                         for (const block of msg.content) {
-                            if (block?.type === "text" && typeof block.text === "string") {
+                            if (typeof block?.text === "string") {
                                 const r = obfuscateText(block.text);
                                 if (r.modified) {
                                     block.text = r.text;
@@ -1435,7 +1435,7 @@ export function registerHooks(api, obfuscator) {
                             // Deobfuscate content blocks in message events (message_start etc)
                             if (Array.isArray(json.message?.content)) {
                                 for (const block of json.message.content) {
-                                    if (block?.type === "text" && typeof block.text === "string") {
+                                    if (typeof block?.text === "string") {
                                         block.text = ob().deobfuscate(block.text);
                                     }
                                 }
@@ -1567,7 +1567,7 @@ export function registerHooks(api, obfuscator) {
                     const json = JSON.parse(text);
                     if (Array.isArray(json.content)) {
                         for (const block of json.content) {
-                            if (block?.type === "text" && typeof block.text === "string") {
+                            if (typeof block?.text === "string") {
                                 block.text = ob().deobfuscate(block.text);
                             }
                         }

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "shroud-privacy",
   "name": "Shroud",
-  "version": "2.5.6",
+  "version": "2.5.7",
   "description": "Privacy obfuscation with deterministic fake values and deobfuscation — PII never reaches the LLM, tool calls still work",
   "configSchema": {
     "type": "object",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shroud-privacy",
-  "version": "2.5.6",
+  "version": "2.5.7",
   "description": "Privacy and infrastructure protection for AI agents — detects sensitive data (PII, network topology, credentials, OT/SCADA) and replaces with deterministic fakes before anything reaches the LLM.",
   "type": "module",
   "main": "dist/index.js",