@upx-us/shield 0.7.11 → 0.7.13

package/CHANGELOG.md

@@ -4,6 +4,22 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.7.13] — 2026-03-16
+
+### Fixed
+
+- **`openclaw shield` commands missing after auto-update** — the auto-updater was deleting the `integrity` field from `openclaw.json` without recomputing it. OpenClaw 2026.3.13+ requires this field to wire plugin CLI commands; without it the plugin loads but `openclaw shield status` and all shield commands fail with "unknown command". The updater now computes the correct SRI `sha512` integrity hash from the downloaded tarball and writes it to the install record.
+
+---
+
+## [0.7.12] — 2026-03-16
+
+### Fixed
+
+- **Plugin showing permanently "Disconnected" after gateway hot-reload** — when the OpenClaw gateway reloaded the plugin module, a race condition between teardown and startup caused new startup attempts to silently abort. The previous instance's timers kept running but were invisible to the status command, resulting in permanent "Disconnected" status and missed telemetry cycles. The teardown is now properly awaited before startup proceeds.
+
+---
+
 ## [0.7.11] — 2026-03-16
 
 ### Added

package/dist/index.js

@@ -319,6 +319,7 @@ const state = {
 };
 let firstEventDelivered = false;
 let teardownPreviousRuntime = null;
+let pendingTeardown = null;
 let serviceStartFn = null;
 const MAX_BACKOFF_MS = 5 * 60 * 1000;
 const TELEMETRY_INTERVAL_MS = 5 * 60 * 1000;
@@ -575,13 +576,17 @@ exports.default = {
             }
         };
         if (teardownPreviousRuntime) {
-            void teardownPreviousRuntime()
+            pendingTeardown = teardownPreviousRuntime()
                 .catch((err) => log.warn('shield', `Runtime cleanup before re-register failed: ${err instanceof Error ? err.message : String(err)}`));
         }
         teardownPreviousRuntime = () => cleanupRuntime({ markStopped: true, resetGuard: true, flushRedactor: false });
         const serviceDefinition = {
             id: 'shield-monitor',
             async start() {
+                if (pendingTeardown) {
+                    await pendingTeardown.catch(() => { });
+                    pendingTeardown = null;
+                }
                 if (!startGuard.begin()) {
                     log.debug('shield', 'Start requested while service is already started or in progress');
                     return;

package/dist/src/updater.js

@@ -342,7 +342,7 @@ function restoreFromBackup(backupPath) {
         return false;
     }
 }
-function updateOpenClawPluginMetadata(newVersion, shasum) {
+function updateOpenClawPluginMetadata(newVersion, shasum, tarballBuffer) {
     const configPath = (0, path_1.join)((0, os_1.homedir)(), '.openclaw', 'openclaw.json');
     try {
         if (!(0, fs_1.existsSync)(configPath))
@@ -355,7 +355,13 @@ function updateOpenClawPluginMetadata(newVersion, shasum) {
         install.version = newVersion;
         install.resolvedVersion = newVersion;
         install.resolvedSpec = `${PACKAGE_NAME}@${newVersion}`;
-        delete install.integrity;
+        if (tarballBuffer) {
+            const integrityHash = (0, crypto_1.createHash)('sha512').update(tarballBuffer).digest('base64');
+            install.integrity = `sha512-${integrityHash}`;
+        }
+        else {
+            delete install.integrity;
+        }
         if (shasum) {
             install.shasum = shasum;
         }
@@ -407,7 +413,8 @@ function downloadAndInstall(targetVersion) {
             return false;
         }
         const tarball = (0, path_1.join)(tmpDir, tarballs[0]);
-        const tarballShasum = (0, crypto_1.createHash)('sha1').update((0, fs_1.readFileSync)(tarball)).digest('hex');
+        const tarballBuffer = (0, fs_1.readFileSync)(tarball);
+        const tarballShasum = (0, crypto_1.createHash)('sha1').update(tarballBuffer).digest('hex');
         const stagingDir = (0, path_1.join)(tmpDir, 'staging');
         (0, fs_1.mkdirSync)(stagingDir, { recursive: true });
         (0, child_process_1.execSync)(`tar xzf "${tarball}" -C "${stagingDir}" --strip-components=1`, {
@@ -442,7 +449,7 @@ function downloadAndInstall(targetVersion) {
             (0, fs_1.rmSync)((0, path_1.join)(PLUGIN_DIR, entry), { recursive: true, force: true });
         }
         copyRecursive(stagingDir, PLUGIN_DIR);
-        updateOpenClawPluginMetadata(targetVersion, tarballShasum);
+        updateOpenClawPluginMetadata(targetVersion, tarballShasum, tarballBuffer);
         log.info('updater', `Installed ${PACKAGE_NAME}@${targetVersion} successfully`);
         return true;
     }

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "shield",
   "name": "OpenClaw Shield",
   "description": "Real-time security monitoring — streams enriched, redacted security events to the Shield detection platform.",
-  "version": "0.7.11",
+  "version": "0.7.13",
   "skills": [
     "./skills"
   ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@upx-us/shield",
-  "version": "0.7.11",
+  "version": "0.7.13",
   "description": "Security monitoring plugin for OpenClaw agents — streams enriched security events to the Shield detection platform",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",