@upx-us/shield 0.3.16 → 0.4.36

package/CHANGELOG.md

@@ -0,0 +1,601 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+---
+
+## [0.4.12] — 2026-03-04
+
+### Added
+- `openclaw shield cases` CLI command — list open security cases from the platform.
+- `openclaw shield cases show <ID>` — full case detail with events, rule info, and playbook.
+- `openclaw shield cases resolve <ID>` — resolve a case with `--resolution`, `--root-cause`, and `--comment` flags.
+- `callPlatformApi` now supports GET and POST methods.
+
+### Changed
+- README updated with features table and complete RPC reference (9 RPCs).
+- SKILL.md updated with case CLI commands.
+
+---
+
+## [0.4.11] — 2026-03-04
+
+### Added
+- Case notification system — agent polls platform for new cases and notifies users.
+- Case resolution — close cases with categorization (resolution + root cause) via RPC.
+- 4 new RPCs: `shield.cases_list`, `shield.case_detail`, `shield.case_resolve`, `shield.cases_ack`.
+- Case monitor with pending notification queue and acknowledgment.
+- Platform attribution in case detail responses.
+
+### Fixed
+- HMAC signing in RPC client aligned with sender format (`fingerprint:nonce`).
+
+### Changed
+- SKILL.md updated with case handling section.
+- README updated with features table and RPC documentation.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.4.6] — 2026-03-04
+
+### Fixed
+- Auto-update no longer kills bridge when gateway restart fails — continues running with old version in memory instead of disconnecting.
+- Stale PID detection in `shield status` — warns when daemon PID is no longer running.
+
+### Added
+- Atomic file writes (`writeJsonSafe`) for status, stats, vault, updater state, and IP cache — prevents corruption on crash or disk-full.
+- Corrupt JSON recovery (`readJsonSafe`) — auto-recovers from corrupted state files instead of crash-looping. Corrupt files preserved as `.corrupt.<timestamp>` for forensics.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.4.5] — 2026-03-04
+
+### Fixed
+- OpenClaw version detection: replaced hardcoded macOS paths with platform-independent require.resolve + execSync fallback. Fixes incorrect version in telemetry on Windows and non-standard installs.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.4.4] — 2026-03-04
+
+### Added
+- `vault show` now displays redaction token summary (host:HASH, user:HASH counts) alongside agent inventory.
+- Multi-machine warning in README for shared config setups.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.4.3] — 2026-03-04
+
+### Changed
+- SKILL.md: added YAML frontmatter with ClawHub metadata, gating via requires.config, full status output example, vault show documentation, redaction token table.
+- Cross-references between npm, ClawHub, and dashboard in SKILL.md and skill README.
+- openclaw.plugin.json: added clawhub.slug and skillVersion tracking.
+
+### Added
+- Skill validation tests (26 tests): prevent infrastructure leaks in ClaWHub-published content.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.4.2] — 2026-03-04
+
+### Changed
+- **SKILL.md**: added `vault show` command docs, redaction token type reference, vault output interpretation guide.
+- **Skill README**: added links to npm package and ClawHub listing.
+- **package.json**: added `homepage` → ClawHub, `clawhub.slug` metadata, expanded keywords for discoverability.
+
+### Fixed
+- Skill and plugin now cross-reference each other: SKILL.md links to npm, package.json links to ClawHub.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.4.1] — 2026-03-04
+
+### Added
+- Host agent/workspace inventory: scans agents on startup, persists to local vault.
+- Cross-workspace access detection: enriches events when an agent accesses another agent's workspace.
+- New token categories for redaction: `agent:HASH`, `workspace:HASH`.
+- New CLI command: `openclaw shield vault show` — displays host agent inventory with hashed IDs.
+
+### Changed
+- README: updated redaction explanation with full token category list.
+- PUBLISHING.md: added audience rule and token dictionary rule for public docs.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.4.0] — 2026-03-03
+
+### Added
+- **Auto-update**: plugin checks for updates on gateway restart and every 6 hours. Patch and minor versions install automatically with backup and rollback safety. Major versions notify only. Default: enabled.
+- **Chained command detection**: exec events parse shell chains (`&&`, `||`, `;`) to detect destructive commands regardless of position.
+- Startup update check with explicit logging.
+- Tarball shasum preserved in openclaw.json after self-update.
+- Plugin metadata sync prevents OpenClaw core updates from removing the plugin.
+
+### Changed
+- Installation instructions rewritten: three options (Quick Install, Agent Configure, Agent Full) with command reference table and agent refusal guidance.
+- CHANGELOG.md now bundled with npm package.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.29] — 2026-03-03
+
+### Changed
+- README installation section fully rewritten: three clear options (Quick Install, Agent Configure, Agent Full), command reference table, concern table, manual steps. Progressive disclosure — simplest path first.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.28] — 2026-03-03
+
+### Added
+- Commands reference table in README (install, activate, status, flush, update).
+- Quick Install section for terminal-based setup (no agent needed).
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.27] — 2026-03-03
+
+### Changed
+- Install prompt now directs agents to read the npm README before installing, so they find the security guidance table themselves.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.26] — 2026-03-03
+
+### Changed
+- README: added agent refusal guidance with explicit trust confirmation prompt and concern-by-concern explanation table.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.25] — 2026-03-03
+
+### Changed
+- Quick Start prompt rewritten: clarifies user registered at uss.upx.com, uses openclaw plugins install command, explains redaction model, addresses common agent security refusals.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.24] — 2026-03-03
+
+### Fixed
+- Auto-update now computes and preserves tarball shasum in openclaw.json metadata after self-update.
+
+### Changed
+- Quick Start prompt expanded to address agent security concerns (external data sending, installation key purpose, npm scope trust).
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.23] — 2026-03-03
+
+### Changed
+- Quick Start prompt simplified.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.22] — 2026-03-03
+
+### Fixed
+- Auto-update now syncs `plugins.installs.shield` metadata in `openclaw.json` after self-updating. Prevents OpenClaw core updates from removing the plugin due to version/integrity mismatch.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.21] — 2026-03-03
+
+### Fixed
+- Auto-update now wired into the plugin entry point (the file OpenClaw actually loads). Previously only connected to the standalone bridge CLI.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.20] — 2026-03-03
+
+### Added
+- Update check on gateway startup — no longer need to wait for the 6-hour cycle.
+- Explicit startup log: `Startup update check (autoUpdate=..., current=...)` and `Up to date` confirmation.
+
+### Changed
+- CHANGELOG.md now bundled with the npm package.
+- No GitHub links in public docs.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.19] — 2026-03-03
+
+### Changed
+- Changelog FAQ now links to public GitHub CHANGELOG.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.18] — 2026-03-03
+
+### Added
+- **Auto-update**: Shield checks for newer versions and installs them automatically. Patch and minor versions are installed with backup and rollback safety. Major versions notify only. Configure via `autoUpdate` in plugin config (`true` | `false` | `"notify-only"`). Default: `true`.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.17] — 2026-03-02
+
+### Added
+- **Chained command detection**: exec events now parse chained commands (`&&`, `||`, `;`) to extract all commands in a chain. New metadata fields: `cmd_all_root_commands`, `cmd_is_chained`, `cmd_chain_count`.
+
+### Fixed
+- Detection rules can now match destructive commands embedded after chain operators (e.g. `mkdir /tmp && rm -rf /path`).
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.16] — 2026-02-27
+
+### Changed
+- Quick Start: single intent-based prompt for installation.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.6] — 2026-02-26
+
+### Added
+- Public IP and instance name included in telemetry for geo-enrichment and display.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.5] — 2026-02-26
+
+### Fixed
+- Plugin no longer deactivates on transient registration failures at startup. Retries up to 10 times before exiting.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.4] — 2026-02-26
+
+### Changed
+- Documentation improvements.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.3.0] — 2026-02-26
+- First public release.