shieldcortex 4.14.8 → 4.14.9

package/dist/cli/update.js

@@ -10,7 +10,7 @@
  *
  * Behaviour-preserving — every step does what the old inline flow did.
  */
-import { spawnSync } from 'child_process';
+import { spawn } from 'child_process';
 import fs from 'fs';
 import path from 'path';
 import { homedir } from 'os';
@@ -94,22 +94,59 @@ async function step(label, fn) {
     }
 }
 function runQuiet(cmd, args, opts = {}) {
-    const result = spawnSync(cmd, args, {
-        stdio: ['ignore', 'pipe', 'pipe'],
-        encoding: 'utf-8',
-        timeout: opts.timeout,
-        env: opts.env ?? process.env,
-        shell: false,
+    // Async on purpose: spawnSync blocks the event loop, which froze the spinner
+    // for the full duration of `npm install` (30–60s). Using `spawn` lets the
+    // setInterval-driven braille animation keep ticking while the child runs.
+    return new Promise((resolve, reject) => {
+        const child = spawn(cmd, args, {
+            stdio: ['ignore', 'pipe', 'pipe'],
+            env: opts.env ?? process.env,
+            shell: false,
+        });
+        let stdout = '';
+        let stderr = '';
+        let timedOut = false;
+        let timer = null;
+        child.stdout?.setEncoding('utf-8');
+        child.stderr?.setEncoding('utf-8');
+        child.stdout?.on('data', (chunk) => { stdout += chunk; });
+        child.stderr?.on('data', (chunk) => { stderr += chunk; });
+        if (opts.timeout) {
+            timer = setTimeout(() => {
+                timedOut = true;
+                child.kill('SIGTERM');
+                // Grace period before SIGKILL — long npm tarball extracts can take
+                // a few seconds to wind down even after SIGTERM.
+                setTimeout(() => { try {
+                    child.kill('SIGKILL');
+                }
+                catch { /* already dead */ } }, 5000).unref();
+            }, opts.timeout);
+            timer.unref();
+        }
+        child.on('error', (err) => {
+            if (timer)
+                clearTimeout(timer);
+            reject(err);
+        });
+        child.on('close', (code) => {
+            if (timer)
+                clearTimeout(timer);
+            if (timedOut) {
+                const err = new Error(`timeout: ${cmd} ${args.join(' ')}`);
+                err.stdout = stdout;
+                err.stderr = stderr;
+                return reject(err);
+            }
+            if (typeof code === 'number' && code !== 0) {
+                const err = new Error(`exit ${code}: ${cmd} ${args.join(' ')}`);
+                err.stdout = stdout;
+                err.stderr = stderr;
+                return reject(err);
+            }
+            resolve({ stdout, stderr });
+        });
     });
-    if (result.error)
-        throw result.error;
-    if (typeof result.status === 'number' && result.status !== 0) {
-        const err = new Error(`exit ${result.status}: ${cmd} ${args.join(' ')}`);
-        err.stdout = result.stdout;
-        err.stderr = result.stderr;
-        throw err;
-    }
-    return { stdout: result.stdout || '', stderr: result.stderr || '' };
 }
 // ── Header / footer ─────────────────────────────────────────
 function header(currentVersion, latestVersion) {
@@ -143,7 +180,7 @@ function readPackageVersion() {
 }
 async function fetchLatestVersion() {
     try {
-        const { stdout } = runQuiet('npm', ['view', 'shieldcortex', 'version'], { timeout: 10000 });
+        const { stdout } = await runQuiet('npm', ['view', 'shieldcortex', 'version'], { timeout: 10000 });
         return stdout.trim() || null;
     }
     catch {
@@ -161,13 +198,13 @@ async function stepNpmPackage(currentVersion, latestVersion, force) {
     }
     if (latestVersion === currentVersion && force) {
         const result = await step('npm package', async () => {
-            runQuiet('npm', ['install', '-g', 'shieldcortex@latest', '--silent', '--no-audit', '--no-fund'], { timeout: 180000 });
+            await runQuiet('npm', ['install', '-g', 'shieldcortex@latest', '--silent', '--no-audit', '--no-fund'], { timeout: 180000 });
             return `v${currentVersion} (reinstalled)`;
         });
         return { updated: true, result };
     }
     const result = await step('npm package', async () => {
-        runQuiet('npm', ['install', '-g', 'shieldcortex@latest', '--silent', '--no-audit', '--no-fund'], { timeout: 180000 });
+        await runQuiet('npm', ['install', '-g', 'shieldcortex@latest', '--silent', '--no-audit', '--no-fund'], { timeout: 180000 });
         return `v${currentVersion} → v${latestVersion}`;
     });
     return { updated: true, result };
@@ -184,7 +221,7 @@ async function stepOpenClawPlugin(home) {
         }
         catch { /* ignore */ }
         try {
-            runQuiet('openclaw', ['plugins', 'install', '--force', '@drakon-systems/shieldcortex-realtime@latest'], { timeout: 60000, env: { ...process.env, HOME: home } });
+            await runQuiet('openclaw', ['plugins', 'install', '--force', '@drakon-systems/shieldcortex-realtime@latest'], { timeout: 60000, env: { ...process.env, HOME: home } });
             return '@latest installed';
         }
         catch {
@@ -205,7 +242,7 @@ async function stepOpenClawSkill(home) {
     }
     return await step('OpenClaw skill', async () => {
         try {
-            runQuiet('openclaw', ['skills', 'install', 'shieldcortex', '--force'], {
+            await runQuiet('openclaw', ['skills', 'install', 'shieldcortex', '--force'], {
                 timeout: 60000,
                 env: { ...process.env, HOME: home },
             });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shieldcortex",
-  "version": "4.14.8",
+  "version": "4.14.9",
   "description": "Trustworthy memory and security for AI agents. Recall debugging, review queue, OpenClaw session capture, and memory poisoning defence for Claude Code, Codex, OpenClaw, LangChain, and MCP agents.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/plugins/openclaw/dist/openclaw.plugin.json

@@ -1,6 +1,6 @@
 {
   "id": "shieldcortex-realtime",
-  "version": "4.14.8",
+  "version": "4.14.9",
   "name": "ShieldCortex Real-time Scanner",
   "description": "Real-time defence scanning on LLM input, memory extraction on LLM output, and active tool call interception with approval gating.",
   "kind": null,