shieldcortex 4.14.3 → 4.14.5

package/dist/cli/doctor.js

@@ -504,23 +504,36 @@ async function checkProcesses() {
     return results;
 }
 // ── Check 6: Disk usage ───────────────────────────────────
-async function checkDiskUsage() {
-    const scDir = getShieldCortexDir();
+/**
+ * The 100 MB safety limit applies to the data portion of `~/.shieldcortex/`
+ * — DB, state, audit logs, telemetry. The `models/` subtree (local Review
+ * Copilot weights, embedding caches) can legitimately reach hundreds of MB
+ * for users who opted into local AI inference, and should not trip the same
+ * warning as runaway memory growth. v4.14.3 and earlier counted everything
+ * under `~/.shieldcortex/`, producing a false `Disk: at limit!` for any
+ * user with a local AI model cached.
+ */
+export async function checkDiskUsage(scDir = getShieldCortexDir()) {
     if (!fs.existsSync(scDir)) {
         return { label: 'Disk', status: 'pass', message: '0 B / 100 MB limit (directory not yet created)' };
     }
     try {
-        let totalSize = 0;
-        function walkDir(dir) {
+        let dataSize = 0;
+        let modelsSize = 0;
+        function walkInto(dir, bucket) {
             const entries = fs.readdirSync(dir, { withFileTypes: true });
             for (const entry of entries) {
                 const fullPath = path.join(dir, entry.name);
                 try {
                     if (entry.isDirectory()) {
-                        walkDir(fullPath);
+                        walkInto(fullPath, bucket);
                     }
                     else if (entry.isFile()) {
-                        totalSize += fs.statSync(fullPath).size;
+                        const size = fs.statSync(fullPath).size;
+                        if (bucket === 'models')
+                            modelsSize += size;
+                        else
+                            dataSize += size;
                     }
                 }
                 catch {
@@ -528,18 +541,43 @@ async function checkDiskUsage() {
                 }
             }
         }
-        walkDir(scDir);
-        const limit = 100 * 1024 * 1024; // 100 MB
-        const pct = (totalSize / limit) * 100;
-        const sizeStr = `${formatBytes(totalSize)} / 100 MB limit`;
+        const topLevel = fs.readdirSync(scDir, { withFileTypes: true });
+        for (const entry of topLevel) {
+            const fullPath = path.join(scDir, entry.name);
+            try {
+                if (entry.isDirectory()) {
+                    walkInto(fullPath, entry.name === 'models' ? 'models' : 'data');
+                }
+                else if (entry.isFile()) {
+                    dataSize += fs.statSync(fullPath).size;
+                }
+            }
+            catch {
+                // Skip inaccessible top-level entries
+            }
+        }
+        const limit = 100 * 1024 * 1024; // 100 MB applies to the data portion only
+        const pct = (dataSize / limit) * 100;
+        const dataStr = `${formatBytes(dataSize)} / 100 MB limit`;
+        const modelsStr = modelsSize > 0 ? ` + ${formatBytes(modelsSize)} models` : '';
         if (pct >= 95) {
-            return { label: 'Disk', status: 'fail', message: `${sizeStr} — at limit!`, fix: 'Run consolidation or delete old memories' };
+            return {
+                label: 'Disk',
+                status: 'fail',
+                message: `${dataStr}${modelsStr} — at limit!`,
+                fix: 'Run `shieldcortex memories prune --execute` or `memories dedupe --execute` to trim the DB',
+            };
         }
         else if (pct >= 80) {
-            return { label: 'Disk', status: 'warn', message: `${sizeStr} — approaching limit`, fix: 'Consider running consolidation to free space' };
+            return {
+                label: 'Disk',
+                status: 'warn',
+                message: `${dataStr}${modelsStr} — approaching limit`,
+                fix: 'Consider running `shieldcortex memories prune` or `memories dedupe`',
+            };
         }
         else {
-            return { label: 'Disk', status: 'pass', message: sizeStr };
+            return { label: 'Disk', status: 'pass', message: `${dataStr}${modelsStr}` };
         }
     }
     catch (err) {

package/dist/index.d.ts

@@ -23,6 +23,9 @@
  *   shieldcortex quickstart --yes        # Install across all detected integrations
  *   shieldcortex setup                   # Configure Claude for proactive memory use
  *   shieldcortex install                 # Alias for setup
+ *   shieldcortex install --with-stop-hook        # Opt in to the Stop hook (sampled per-turn extraction)
+ *   shieldcortex install --with-session-end      # Opt in to the SessionEnd hook (final extraction on session exit)
+ *   shieldcortex install --with-stop-hook --with-session-end   # Both at once
  *   shieldcortex hook pre-compact        # Run pre-compact hook (for settings.json)
  *   shieldcortex hook session-start      # Run session-start hook (for settings.json)
  *   shieldcortex hook session-end        # Run session-end hook (for settings.json)

package/dist/index.js

@@ -23,6 +23,9 @@
  *   shieldcortex quickstart --yes        # Install across all detected integrations
  *   shieldcortex setup                   # Configure Claude for proactive memory use
  *   shieldcortex install                 # Alias for setup
+ *   shieldcortex install --with-stop-hook        # Opt in to the Stop hook (sampled per-turn extraction)
+ *   shieldcortex install --with-session-end      # Opt in to the SessionEnd hook (final extraction on session exit)
+ *   shieldcortex install --with-stop-hook --with-session-end   # Both at once
  *   shieldcortex hook pre-compact        # Run pre-compact hook (for settings.json)
  *   shieldcortex hook session-start      # Run session-start hook (for settings.json)
  *   shieldcortex hook session-end        # Run session-end hook (for settings.json)
@@ -475,6 +478,9 @@ ${bold}COMMANDS${reset}
   ${cyan}iron-dome${reset} <action>    Manage behaviour protection layer
   ${cyan}audit${reset} [options]       Run a full security audit
   ${cyan}setup${reset}                 Install ShieldCortex into your project
+                        Flags: --with-stop-hook (sampled per-turn extraction)
+                               --with-session-end (extraction on session exit)
+                               Pass either to opt in; re-run without to opt out.
   ${cyan}uninstall${reset}             Remove ShieldCortex from your project
   ${cyan}openclaw${reset} <action>     Manage OpenClaw hook integration
   ${cyan}copilot${reset} <action>      Set up VS Code / Cursor MCP integration
@@ -493,6 +499,7 @@ ${bold}EXAMPLES${reset}
   shieldcortex scan-skill ~/.claude/skills/my-skill/SKILL.md
   shieldcortex dashboard
   shieldcortex worker
+  shieldcortex install --with-stop-hook --with-session-end
   shieldcortex cortex preflight --task "deploy site"
   shieldcortex license activate sc_pro_...
   shieldcortex config --cloud-enable --cloud-api-key <key>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shieldcortex",
-  "version": "4.14.3",
+  "version": "4.14.5",
   "description": "Trustworthy memory and security for AI agents. Recall debugging, review queue, OpenClaw session capture, and memory poisoning defence for Claude Code, Codex, OpenClaw, LangChain, and MCP agents.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/plugins/openclaw/dist/openclaw.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "shieldcortex-realtime",
-  "version": "4.14.3",
+  "version": "4.14.5",
   "name": "ShieldCortex Real-time Scanner",
   "description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
   "kind": null,