shieldcortex 4.11.1 → 4.12.0

package/dist/setup/uninstall.js

@@ -154,7 +154,10 @@ export async function uninstallSetup() {
 export async function uninstallAll(options) {
     if (blockAgentUninstall())
         return;
-    const confirmed = await requireConfirmation('fully uninstall ShieldCortex');
+    const action = options?.deep
+        ? 'fully uninstall ShieldCortex and purge OpenClaw residue'
+        : 'fully uninstall ShieldCortex';
+    const confirmed = await requireConfirmation(action);
     if (!confirmed) {
         console.log('Uninstall cancelled.');
         return;
@@ -188,6 +191,44 @@ export async function uninstallAll(options) {
     catch (err) {
         console.error(`Failed to remove CLAUDE.md block: ${err.message}`);
     }
+    // 5. Deep clean: purge all known OpenClaw residue locations that the
+    //    version-specific uninstall paths miss, then (best-effort) restart
+    //    the gateway so the purged config takes effect immediately.
+    if (options?.deep) {
+        try {
+            const { runDeepClean } = await import('./deep-clean.js');
+            const { report, result, gateway } = await runDeepClean({
+                restartGateway: options?.restartGateway !== false,
+            });
+            if (result.removed.length > 0) {
+                console.log(`\nDeep clean: removed ${result.removed.length} residue reference(s):`);
+                for (const r of result.removed) {
+                    console.log(`  - ${r}`);
+                }
+            }
+            else if (report.dirtyCount === 0) {
+                console.log('\nDeep clean: no OpenClaw residue detected.');
+            }
+            if (result.errors.length > 0) {
+                console.warn(`\nDeep clean: ${result.errors.length} error(s):`);
+                for (const e of result.errors) {
+                    console.warn(`  - ${e.description}: ${e.error}`);
+                }
+            }
+            if (gateway) {
+                if (gateway.restarted) {
+                    console.log(`\nOpenClaw gateway restarted via ${gateway.method}.`);
+                }
+                else if (gateway.attempted) {
+                    console.warn(`\nOpenClaw gateway restart via ${gateway.method} failed: ${gateway.detail ?? 'unknown'}`);
+                    console.warn('Restart it manually for the cleanup to take effect.');
+                }
+            }
+        }
+        catch (err) {
+            console.error(`Deep clean failed: ${err.message}`);
+        }
+    }
     console.log('\nDatabase preserved at ~/.shieldcortex/memories.db — delete manually if desired.');
     console.log('Uninstall complete.\n');
     console.log('To also remove the npm package:');

package/hooks/openclaw/cortex-memory/HOOK.md

@@ -28,9 +28,9 @@ When `openclawAutoMemory` is enabled:
 5. Skips exact and near-duplicate memories using novelty filtering
 
 ### On Session Start (Agent Bootstrap)
-1. Calls Cortex `get_context` to retrieve relevant memories
-2. Injects them into the agent's bootstrap context
-3. Agent starts with knowledge of past sessions
+Bootstrap context injection was **disabled in v2026.2.26**. OpenClaw's native Memory Search now handles context recall at session start, so the hook no longer pushes memories into the system prompt (which was producing ~40× duplication of CORTEX_MEMORY.md and eating most of the context window).
+
+The hook still fires on `agent:bootstrap` for lifecycle wiring (warning-bootstrap-file handoff, etc.) but contributes nothing to the system prompt. This keeps `extraSystemPromptHash` stable across turns and prevents the session-binding reset loop documented in `src/setup/claude-md.ts`.
 
 ### Keyword Triggers
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shieldcortex",
-  "version": "4.11.1",
+  "version": "4.12.0",
   "description": "Trustworthy memory and security for AI agents. Recall debugging, review queue, OpenClaw session capture, and memory poisoning defence for Claude Code, Codex, OpenClaw, LangChain, and MCP agents.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/plugins/openclaw/dist/openclaw.plugin.json

@@ -1,9 +1,13 @@
 {
   "id": "shieldcortex-realtime",
-  "version": "4.11.1",
+  "version": "4.12.0",
   "name": "ShieldCortex Real-time Scanner",
   "description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
   "kind": null,
+  "engines": {
+    "openclaw": ">=2026.3.22",
+    "recommended": ">=2026.4.23"
+  },
   "enabledByDefault": false,
   "activation": {
     "hooks": ["llm_input", "llm_output", "before_tool_call", "session_end"],