@upx-us/shield 0.2.13-beta → 0.2.15-beta

package/dist/index.js

@@ -261,6 +261,11 @@ exports.default = {
                     try {
                         const entries = await fetchNewEntries(config);
                         if (entries.length === 0) {
+                            // Still commit cursors so initCursorsForDir positions
+                            // (set to current file sizes) are persisted on disk.
+                            // Without this, each poll re-initialises cursors to the
+                            // NEW file size and silently skips events between polls.
+                            commitCursors(config, []);
                             state.consecutiveFailures = 0;
                             state.lastPollAt = Date.now();
                             persistState();

package/dist/src/index.js

@@ -134,6 +134,12 @@ async function poll() {
                 }
             }
             else {
+                // No new entries this poll — but still commit cursors so that
+                // initCursorsForDir positions (set to current file sizes) are
+                // persisted. Without this, the next poll re-initialises cursors
+                // to the NEW current size and silently skips any events that
+                // arrived between polls.
+                (0, fetcher_1.commitCursors)(config, []);
                 consecutiveFailures = 0;
             }
         }

package/dist/src/sender.js

@@ -49,6 +49,9 @@ const log = __importStar(require("./log"));
 const version_1 = require("./version");
 const BATCH_SIZE = 100;
 exports.REQUEST_TIMEOUT_MS = 30_000;
+/** Minimum delay between consecutive batch POSTs (ms). Prevents Cloud Armor rate-limit
+ *  from triggering during backfill bursts. 200ms ≈ 5 req/s = 300 req/min (well under 600/min limit). */
+const INTER_BATCH_DELAY_MS = 200;
 function errMsg(err) {
     return err instanceof Error ? err.message : String(err);
 }
@@ -97,6 +100,9 @@ async function sendEvents(events, config) {
     }
     const results = [];
     for (let i = 0; i < events.length; i += BATCH_SIZE) {
+        // Throttle between batches to avoid Cloud Armor rate-limit during backfill
+        if (i > 0)
+            await new Promise(r => setTimeout(r, INTER_BATCH_DELAY_MS));
         const batch = events.slice(i, i + BATCH_SIZE);
         const batchNum = Math.floor(i / BATCH_SIZE) + 1;
         const payload = JSON.stringify({ entries: batch });

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "shield",
   "name": "OpenClaw Shield",
   "description": "Real-time security monitoring — streams enriched, redacted security events to the Shield detection platform.",
-  "version": "0.2.13-beta",
+  "version": "0.2.15-beta",
   "skills": [
     "./skills"
   ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@upx-us/shield",
-  "version": "0.2.13-beta",
+  "version": "0.2.15-beta",
   "description": "Security monitoring plugin for OpenClaw agents — streams enriched security events to the Shield detection platform",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",