@drakon-systems/shieldcortex-realtime 5.0.7 → 5.2.0

package/dist/interceptor.js

@@ -819,6 +819,8 @@ export function createInterceptor(config, pipeline, options) {
             ...(v.matches && v.matches.length > 0 ? { matches: v.matches } : {}),
             // #189: an allow that leaned on the reviewed-script allowlist says so.
             ...(v.reviewedScripts && v.reviewedScripts.length > 0 ? { reviewedScripts: v.reviewedScripts } : {}),
+            // #517: files a `$(cat …)` substitution spliced into the scanned command.
+            ...(v.expandedSubstitutions && v.expandedSubstitutions.length > 0 ? { expandedSubstitutions: v.expandedSubstitutions } : {}),
         };
     }
     // ── Approval broker (#143) ────────────────────────────────────────────────

package/dist/openclaw.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "shieldcortex-realtime",
-  "version": "5.0.7",
+  "version": "5.2.0",
   "name": "ShieldCortex Real-time Scanner",
   "description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
   "kind": null,

package/interceptor.ts

@@ -74,6 +74,8 @@ export interface ToolGuardVerdictLike {
   }>;
   /** Files the reviewed-script allowlist exempted from folding (#189). */
   reviewedScripts?: string[];
+  /** Files a `$(cat …)` substitution spliced into the scanned command (#517). */
+  expandedSubstitutions?: string[];
 }
 /** Optional 4th-parameter seam on the real evaluator (issue #4): the guard core
  *  stays pure/synchronous and asks the CALLER to resolve an invoked script's
@@ -287,6 +289,8 @@ export interface InterceptAuditEntry {
   escalated?: { by: 'session-taint'; from: string; to: string; reason: string };
   /** Files the reviewed-script allowlist exempted from folding (#189). */
   reviewedScripts?: string[];
+  /** Files a `$(cat …)` substitution spliced into the scanned command (#517). */
+  expandedSubstitutions?: string[];
   /**
    * Native contract drift: a reviewed exact-name host contract carried fields
    * ShieldCortex does not read, which the guard dropped before validation and
@@ -1254,6 +1258,8 @@ export function createInterceptor(
       ...(v.matches && v.matches.length > 0 ? { matches: v.matches } : {}),
       // #189: an allow that leaned on the reviewed-script allowlist says so.
       ...(v.reviewedScripts && v.reviewedScripts.length > 0 ? { reviewedScripts: v.reviewedScripts } : {}),
+      // #517: files a `$(cat …)` substitution spliced into the scanned command.
+      ...(v.expandedSubstitutions && v.expandedSubstitutions.length > 0 ? { expandedSubstitutions: v.expandedSubstitutions } : {}),
     };
   }
 

package/openclaw.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "shieldcortex-realtime",
-  "version": "5.0.7",
+  "version": "5.2.0",
   "name": "ShieldCortex Real-time Scanner",
   "description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
   "kind": null,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@drakon-systems/shieldcortex-realtime",
-  "version": "5.0.7",
+  "version": "5.2.0",
   "description": "OpenClaw plugin for ShieldCortex real-time defence scanning and optional memory extraction.",
   "type": "module",
   "main": "./dist/index.js",