@upx-us/shield 0.3.29 → 0.4.36

package/CHANGELOG.md

@@ -4,6 +4,230 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.12] — 2026-03-04
+
+### Added
+- `openclaw shield cases` CLI command — list open security cases from the platform.
+- `openclaw shield cases show <ID>` — full case detail with events, rule info, and playbook.
+- `openclaw shield cases resolve <ID>` — resolve a case with `--resolution`, `--root-cause`, and `--comment` flags.
+- `callPlatformApi` now supports GET and POST methods.
+
+### Changed
+- README updated with features table and complete RPC reference (9 RPCs).
+- SKILL.md updated with case CLI commands.
+
+---
+
+## [0.4.11] — 2026-03-04
+
+### Added
+- Case notification system — agent polls platform for new cases and notifies users.
+- Case resolution — close cases with categorization (resolution + root cause) via RPC.
+- 4 new RPCs: `shield.cases_list`, `shield.case_detail`, `shield.case_resolve`, `shield.cases_ack`.
+- Case monitor with pending notification queue and acknowledgment.
+- Platform attribution in case detail responses.
+
+### Fixed
+- HMAC signing in RPC client aligned with sender format (`fingerprint:nonce`).
+
+### Changed
+- SKILL.md updated with case handling section.
+- README updated with features table and RPC documentation.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.4.6] — 2026-03-04
+
+### Fixed
+- Auto-update no longer kills bridge when gateway restart fails — continues running with old version in memory instead of disconnecting.
+- Stale PID detection in `shield status` — warns when daemon PID is no longer running.
+
+### Added
+- Atomic file writes (`writeJsonSafe`) for status, stats, vault, updater state, and IP cache — prevents corruption on crash or disk-full.
+- Corrupt JSON recovery (`readJsonSafe`) — auto-recovers from corrupted state files instead of crash-looping. Corrupt files preserved as `.corrupt.<timestamp>` for forensics.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.4.5] — 2026-03-04
+
+### Fixed
+- OpenClaw version detection: replaced hardcoded macOS paths with platform-independent require.resolve + execSync fallback. Fixes incorrect version in telemetry on Windows and non-standard installs.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.4.4] — 2026-03-04
+
+### Added
+- `vault show` now displays redaction token summary (host:HASH, user:HASH counts) alongside agent inventory.
+- Multi-machine warning in README for shared config setups.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.4.3] — 2026-03-04
+
+### Changed
+- SKILL.md: added YAML frontmatter with ClawHub metadata, gating via requires.config, full status output example, vault show documentation, redaction token table.
+- Cross-references between npm, ClawHub, and dashboard in SKILL.md and skill README.
+- openclaw.plugin.json: added clawhub.slug and skillVersion tracking.
+
+### Added
+- Skill validation tests (26 tests): prevent infrastructure leaks in ClaWHub-published content.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.4.2] — 2026-03-04
+
+### Changed
+- **SKILL.md**: added `vault show` command docs, redaction token type reference, vault output interpretation guide.
+- **Skill README**: added links to npm package and ClawHub listing.
+- **package.json**: added `homepage` → ClawHub, `clawhub.slug` metadata, expanded keywords for discoverability.
+
+### Fixed
+- Skill and plugin now cross-reference each other: SKILL.md links to npm, package.json links to ClawHub.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.4.1] — 2026-03-04
+
+### Added
+- Host agent/workspace inventory: scans agents on startup, persists to local vault.
+- Cross-workspace access detection: enriches events when an agent accesses another agent's workspace.
+- New token categories for redaction: `agent:HASH`, `workspace:HASH`.
+- New CLI command: `openclaw shield vault show` — displays host agent inventory with hashed IDs.
+
+### Changed
+- README: updated redaction explanation with full token category list.
+- PUBLISHING.md: added audience rule and token dictionary rule for public docs.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
+## [0.4.0] — 2026-03-03
+
+### Added
+- **Auto-update**: plugin checks for updates on gateway restart and every 6 hours. Patch and minor versions install automatically with backup and rollback safety. Major versions notify only. Default: enabled.
+- **Chained command detection**: exec events parse shell chains (`&&`, `||`, `;`) to detect destructive commands regardless of position.
+- Startup update check with explicit logging.
+- Tarball shasum preserved in openclaw.json after self-update.
+- Plugin metadata sync prevents OpenClaw core updates from removing the plugin.
+
+### Changed
+- Installation instructions rewritten: three options (Quick Install, Agent Configure, Agent Full) with command reference table and agent refusal guidance.
+- CHANGELOG.md now bundled with npm package.
+
+---
+
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.29] — 2026-03-03
 
 ### Changed
@@ -11,6 +235,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.28] — 2026-03-03
 
 ### Added
@@ -19,6 +257,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.27] — 2026-03-03
 
 ### Changed
@@ -26,6 +278,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.26] — 2026-03-03
 
 ### Changed
@@ -33,6 +299,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.25] — 2026-03-03
 
 ### Changed
@@ -40,6 +320,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.24] — 2026-03-03
 
 ### Fixed
@@ -50,6 +344,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.23] — 2026-03-03
 
 ### Changed
@@ -57,6 +365,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.22] — 2026-03-03
 
 ### Fixed
@@ -64,6 +386,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.21] — 2026-03-03
 
 ### Fixed
@@ -71,6 +407,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.20] — 2026-03-03
 
 ### Added
@@ -83,6 +433,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.19] — 2026-03-03
 
 ### Changed
@@ -90,6 +454,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.18] — 2026-03-03
 
 ### Added
@@ -97,6 +475,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.17] — 2026-03-02
 
 ### Added
@@ -107,6 +499,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.16] — 2026-02-27
 
 ### Changed
@@ -114,6 +520,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.6] — 2026-02-26
 
 ### Added
@@ -121,6 +541,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.5] — 2026-02-26
 
 ### Fixed
@@ -128,6 +562,20 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.4] — 2026-02-26
 
 ### Changed
@@ -135,5 +583,19 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.4.7] — 2026-03-04
+
+### Added
+- Local event buffer — rolling store of recently sent events for offline inspection and debugging.
+- `openclaw shield logs` CLI command with `--last`, `--type`, `--since`, and `--format` options.
+- `shield.events_recent` and `shield.events_summary` RPCs now return local data (previously required platform API).
+- Configurable via `SHIELD_LOCAL_EVENT_BUFFER` (default: enabled) and `SHIELD_LOCAL_EVENT_LIMIT` (default: 123 events).
+
+### Changed
+- SKILL.md updated for ClawHub review — removed internal references, added event logs documentation.
+- README.md updated with Local Event Buffer section and configuration reference.
+
+---
+
 ## [0.3.0] — 2026-02-26
 - First public release.