@drakon-systems/shieldcortex-realtime 4.51.0 → 4.52.0

package/dist/index.js

@@ -2761,6 +2761,10 @@ function resolveBrokerRuntime(defenceMod, rawBrokerConfig, api) {
         return {
             config,
             runJudge: defenceMod.runJudge,
+            // #143 residual, and deliberately NOT in `needed`: an older shieldcortex
+            // build has runJudge alone, and the interceptor falls back to it. Missing
+            // it costs an audit field, never a gate.
+            runJudgeDetailed: typeof defenceMod.runJudgeDetailed === 'function' ? defenceMod.runJudgeDetailed : undefined,
             brokerDecision: defenceMod.brokerDecision,
             timeoutOutcome: defenceMod.timeoutOutcome,
             approvalTimeoutMs: typeof defenceMod.approvalTimeoutMs === 'function' ? defenceMod.approvalTimeoutMs : undefined,

package/dist/interceptor.js

@@ -602,13 +602,29 @@ export function createInterceptor(config, pipeline, options) {
                 timeoutMs: broker.config.judgeTimeoutMs,
             });
             let judge = null;
+            // Only set when a judge pass actually ran: "no seam on this build" and
+            // "budget spent" are not timeouts, and claiming otherwise would be the
+            // same overclaim in the audit that this residual removes from doctor.
+            let judgeMeta;
             if (invoke && judgeLimiter.shouldAllow()) {
-                judge = await broker.runJudge({
+                const request = {
                     tool: context.toolName,
                     toolInput: context.arguments,
                     verdict: { severity: v.severity, action: v.action, reason: v.reason, signals: v.signals },
                     sessionSummary: buildSessionSummary(),
-                }, invoke, { timeoutMs: broker.config.judgeTimeoutMs });
+                };
+                const opts = { timeoutMs: broker.config.judgeTimeoutMs };
+                if (typeof broker.runJudgeDetailed === 'function') {
+                    const detailed = await broker.runJudgeDetailed(request, invoke, opts);
+                    judge = detailed?.result ?? null;
+                    judgeMeta = {
+                        timedOut: detailed?.timedOut === true,
+                        error: typeof detailed?.error === 'string' ? detailed.error : null,
+                    };
+                }
+                else {
+                    judge = await broker.runJudge(request, invoke, opts);
+                }
             }
             else if (invoke) {
                 log.warn(`[shieldcortex] approval broker: judge budget spent this minute — holding ${context.toolName} for the operator`);
@@ -618,6 +634,7 @@ export function createInterceptor(config, pipeline, options) {
                 toolInput: context.arguments,
                 verdict: v,
                 judge,
+                ...(judgeMeta ? { judgeMeta } : {}),
                 policy: {
                     allowPreClear: broker.config.allowPreClear,
                     preClearConfidence: broker.config.preClearConfidence,

package/dist/openclaw.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "shieldcortex-realtime",
-  "version": "4.51.0",
+  "version": "4.52.0",
   "name": "ShieldCortex Real-time Scanner",
   "description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
   "kind": null,

package/index.ts

@@ -3300,6 +3300,11 @@ function resolveBrokerRuntime(
     return {
       config,
       runJudge: defenceMod.runJudge,
+      // #143 residual, and deliberately NOT in `needed`: an older shieldcortex
+      // build has runJudge alone, and the interceptor falls back to it. Missing
+      // it costs an audit field, never a gate.
+      runJudgeDetailed:
+        typeof defenceMod.runJudgeDetailed === 'function' ? defenceMod.runJudgeDetailed : undefined,
       brokerDecision: defenceMod.brokerDecision,
       timeoutOutcome: defenceMod.timeoutOutcome,
       approvalTimeoutMs: typeof defenceMod.approvalTimeoutMs === 'function' ? defenceMod.approvalTimeoutMs : undefined,

package/interceptor.ts

@@ -53,8 +53,15 @@ export interface ToolGuardVerdictLike {
   action: string;
   reason: string;
   signals: string[];
-  /** Rule → matched-span evidence behind `signals` (issue #192). */
-  matches?: Array<{ signal: string; span: string }>;
+  /** Rule → matched-span evidence behind `signals` (issue #192).
+   *  #184: optional source/line/chain when the match came from folded script. */
+  matches?: Array<{
+    signal: string;
+    span: string;
+    source?: string;
+    line?: number;
+    chain?: string;
+  }>;
   /** Files the reviewed-script allowlist exempted from folding (#189). */
   reviewedScripts?: string[];
 }
@@ -100,6 +107,10 @@ export interface BrokerAuditLike {
   judgeConfidence: number | null;
   injectionSuspected: boolean;
   inContext: boolean | null;
+  /** #143 residual — "the judge never answered" told apart from "the judge said
+   *  hold". Audit only; neither field can reach an outcome. */
+  judgeTimedOut?: boolean;
+  judgeUnavailableReason?: string | null;
   reason: string;
 }
 
@@ -135,11 +146,26 @@ export interface BrokerRuntime {
     invoke: ModelInvokerLike,
     opts?: { timeoutMs?: number },
   ) => Promise<JudgeResultLike | null>;
+  /** #143 residual, and OPTIONAL: this plugin is built across a package
+   *  boundary, so a main package from before the residual injects `runJudge`
+   *  alone and the pass below falls back to it. Absent costs an audit field,
+   *  never a gate. */
+  runJudgeDetailed?: (
+    req: {
+      tool: string;
+      toolInput: unknown;
+      verdict: { severity: string; action: string; reason: string; signals: string[] };
+      sessionSummary?: string;
+    },
+    invoke: ModelInvokerLike,
+    opts?: { timeoutMs?: number },
+  ) => Promise<{ result: JudgeResultLike | null; timedOut: boolean; error?: string }>;
   brokerDecision: (input: {
     tool: string;
     toolInput: unknown;
     verdict: ToolGuardVerdictLike;
     judge: JudgeResultLike | null;
+    judgeMeta?: { timedOut?: boolean; error?: string | null };
     policy?: { allowPreClear: boolean; preClearConfidence: number };
   }) => BrokerDecisionLike;
   timeoutOutcome: (decision: BrokerDecisionLike) => 'approve' | 'deny';
@@ -934,17 +960,28 @@ export function createInterceptor(
       });
 
       let judge: JudgeResultLike | null = null;
+      // Only set when a judge pass actually ran: "no seam on this build" and
+      // "budget spent" are not timeouts, and claiming otherwise would be the
+      // same overclaim in the audit that this residual removes from doctor.
+      let judgeMeta: { timedOut?: boolean; error?: string | null } | undefined;
       if (invoke && judgeLimiter.shouldAllow()) {
-        judge = await broker.runJudge(
-          {
-            tool: context.toolName,
-            toolInput: context.arguments,
-            verdict: { severity: v.severity, action: v.action, reason: v.reason, signals: v.signals },
-            sessionSummary: buildSessionSummary(),
-          },
-          invoke,
-          { timeoutMs: broker.config.judgeTimeoutMs },
-        );
+        const request = {
+          tool: context.toolName,
+          toolInput: context.arguments,
+          verdict: { severity: v.severity, action: v.action, reason: v.reason, signals: v.signals },
+          sessionSummary: buildSessionSummary(),
+        };
+        const opts = { timeoutMs: broker.config.judgeTimeoutMs };
+        if (typeof broker.runJudgeDetailed === 'function') {
+          const detailed = await broker.runJudgeDetailed(request, invoke, opts);
+          judge = detailed?.result ?? null;
+          judgeMeta = {
+            timedOut: detailed?.timedOut === true,
+            error: typeof detailed?.error === 'string' ? detailed.error : null,
+          };
+        } else {
+          judge = await broker.runJudge(request, invoke, opts);
+        }
       } else if (invoke) {
         log.warn(`[shieldcortex] approval broker: judge budget spent this minute — holding ${context.toolName} for the operator`);
       }
@@ -954,6 +991,7 @@ export function createInterceptor(
         toolInput: context.arguments,
         verdict: v,
         judge,
+        ...(judgeMeta ? { judgeMeta } : {}),
         policy: {
           allowPreClear: broker.config.allowPreClear,
           preClearConfidence: broker.config.preClearConfidence,

package/openclaw.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "shieldcortex-realtime",
-  "version": "4.51.0",
+  "version": "4.52.0",
   "name": "ShieldCortex Real-time Scanner",
   "description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
   "kind": null,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drakon-systems/shieldcortex-realtime",
-  "version": "4.51.0",
+  "version": "4.52.0",
   "description": "OpenClaw plugin for ShieldCortex real-time defence scanning and optional memory extraction.",
   "type": "module",
   "main": "./dist/index.js",