shieldcortex 4.2.3 → 4.2.4

package/dist/setup/openclaw.js

@@ -195,7 +195,12 @@ function preferredHookDir(hooksDir) {
     return path.join(hooksDir, HOOK_NAME);
 }
 function legacyHookDirs(hooksDir) {
-    return [path.join(hooksDir, 'internal', HOOK_NAME)];
+    return [
+        // Legacy: top-level "shieldcortex" directory created by old installers
+        path.join(hooksDir, 'shieldcortex'),
+        // Legacy: internal/cortex-memory path from v3 and early v4
+        path.join(hooksDir, 'internal', HOOK_NAME),
+    ];
 }
 function hasRequiredHookFiles(dir) {
     return HOOK_FILES.every(file => fs.existsSync(path.join(dir, file)));
@@ -631,9 +636,8 @@ export async function installOpenClawHook(options = {}) {
         for (const hooksDir of hooksDirs) {
             const destDir = preferredHookDir(hooksDir);
             try {
+                // Clean up legacy paths BEFORE installing to avoid duplicate hooks
                 const legacyDirsBeforeInstall = detectLegacyHookVariants(hooksDir);
-                copyHookFiles(HOOK_SOURCE, destDir);
-                console.log(`Installed cortex-memory hook to ${destDir}`);
                 if (legacyDirsBeforeInstall.length > 0) {
                     console.log(`Detected legacy OpenClaw hook layout in ${hooksDir} — migrating to ${destDir}`);
                 }
@@ -641,6 +645,8 @@ export async function installOpenClawHook(options = {}) {
                     console.log(`Removed legacy cortex-memory hook from ${removedDir}`);
                     migratedLegacy++;
                 }
+                copyHookFiles(HOOK_SOURCE, destDir);
+                console.log(`Installed cortex-memory hook to ${destDir}`);
                 installed++;
             }
             catch (err) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shieldcortex",
-  "version": "4.2.3",
+  "version": "4.2.4",
   "description": "Trustworthy memory and security for AI agents. Recall debugging, review queue, OpenClaw session capture, and memory poisoning defence for Claude Code, Codex, OpenClaw, LangChain, and MCP agents.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/plugins/openclaw/dist/index.js

@@ -584,95 +584,103 @@ export default {
         jsonSchema: PLUGIN_CONFIG_JSON_SCHEMA,
     },
     register(api) {
-        applyPluginConfigOverride(api);
-        // --- Interceptor (lazy init) ---
-        let interceptorReady = null;
-        let interceptorInitAttempted = false;
-        async function initInterceptor() {
-            if (interceptorInitAttempted)
-                return interceptorReady;
-            interceptorInitAttempted = true;
-            try {
-                const scConfig = await loadConfig();
-                const rawInterceptorConfig = scConfig.interceptor;
-                const interceptorConfig = {
-                    ...DEFAULT_INTERCEPTOR_CONFIG,
-                    ...(rawInterceptorConfig && typeof rawInterceptorConfig === 'object' ? {
-                        enabled: rawInterceptorConfig.enabled ?? DEFAULT_INTERCEPTOR_CONFIG.enabled,
-                        severityActions: { ...DEFAULT_INTERCEPTOR_CONFIG.severityActions, ...rawInterceptorConfig.severityActions },
-                        failurePolicy: { ...DEFAULT_INTERCEPTOR_CONFIG.failurePolicy, ...rawInterceptorConfig.failurePolicy },
-                    } : {}),
-                    logger: { info: api.logger?.info ?? console.log, warn: api.logger?.warn ?? console.warn },
-                };
-                if (!interceptorConfig.enabled)
-                    return null;
-                // Dynamic import with string variable to prevent TypeScript from resolving
-                // at compile time — 'shieldcortex/defence' only exists at runtime when the
-                // package is installed globally, not during CI builds of the plugin itself.
-                const defenceModPath = 'shieldcortex' + '/defence';
-                const defenceMod = await import(/* webpackIgnore: true */ defenceModPath);
-                if (typeof defenceMod.runDefencePipeline !== 'function')
+        try {
+            applyPluginConfigOverride(api);
+            // --- Interceptor (lazy init) ---
+            let interceptorReady = null;
+            let interceptorInitAttempted = false;
+            async function initInterceptor() {
+                if (interceptorInitAttempted)
+                    return interceptorReady;
+                interceptorInitAttempted = true;
+                try {
+                    const scConfig = await loadConfig();
+                    const rawInterceptorConfig = scConfig.interceptor;
+                    const interceptorConfig = {
+                        ...DEFAULT_INTERCEPTOR_CONFIG,
+                        ...(rawInterceptorConfig && typeof rawInterceptorConfig === 'object' ? {
+                            enabled: rawInterceptorConfig.enabled ?? DEFAULT_INTERCEPTOR_CONFIG.enabled,
+                            severityActions: { ...DEFAULT_INTERCEPTOR_CONFIG.severityActions, ...rawInterceptorConfig.severityActions },
+                            failurePolicy: { ...DEFAULT_INTERCEPTOR_CONFIG.failurePolicy, ...rawInterceptorConfig.failurePolicy },
+                        } : {}),
+                        logger: { info: api.logger?.info ?? console.log, warn: api.logger?.warn ?? console.warn },
+                    };
+                    if (!interceptorConfig.enabled)
+                        return null;
+                    // Dynamic import with string variable to prevent TypeScript from resolving
+                    // at compile time — 'shieldcortex/defence' only exists at runtime when the
+                    // package is installed globally, not during CI builds of the plugin itself.
+                    const defenceModPath = 'shieldcortex' + '/defence';
+                    const defenceMod = await import(/* webpackIgnore: true */ defenceModPath);
+                    if (typeof defenceMod.runDefencePipeline !== 'function')
+                        return null;
+                    interceptorReady = createInterceptor(interceptorConfig, defenceMod.runDefencePipeline, {
+                        onAuditEntry: (entry) => syncInterceptEvent(entry, {
+                            cloudApiKey: scConfig.cloudApiKey ?? '',
+                            cloudBaseUrl: scConfig.cloudBaseUrl ?? 'https://api.shieldcortex.ai',
+                            cloudEnabled: scConfig.cloudEnabled ?? false,
+                        }),
+                    });
+                    api.logger?.info?.('[shieldcortex] Interceptor active — watching: remember, mcp__memory__remember');
+                    return interceptorReady;
+                }
+                catch (err) {
+                    api.logger?.warn?.(`[shieldcortex] Interceptor init failed: ${err instanceof Error ? err.message : err}`);
                     return null;
-                interceptorReady = createInterceptor(interceptorConfig, defenceMod.runDefencePipeline, {
-                    onAuditEntry: (entry) => syncInterceptEvent(entry, {
-                        cloudApiKey: scConfig.cloudApiKey ?? '',
-                        cloudBaseUrl: scConfig.cloudBaseUrl ?? 'https://api.shieldcortex.ai',
-                        cloudEnabled: scConfig.cloudEnabled ?? false,
-                    }),
+                }
+            }
+            // Register before_tool_call with lazy-init wrapper
+            api.registerHook('before_tool_call', async (context) => {
+                const interceptor = await initInterceptor();
+                if (interceptor)
+                    await interceptor.handleToolCall(context);
+            }, {
+                name: 'shieldcortex-intercept-tool',
+                description: 'Active threat gating on tool calls',
+            });
+            // Try to register session_end for cache cleanup
+            try {
+                api.registerHook('session_end', () => { interceptorReady?.resetSession(); }, {
+                    name: 'shieldcortex-session-cleanup',
+                    description: 'Clear interceptor deny cache on session end',
                 });
-                api.logger?.info?.('[shieldcortex] Interceptor active — watching: remember, mcp__memory__remember');
-                return interceptorReady;
             }
-            catch (err) {
-                api.logger?.warn?.(`[shieldcortex] Interceptor init failed: ${err instanceof Error ? err.message : err}`);
-                return null;
+            catch {
+                // session_end may not be a supported hook — TTL safety net handles this
             }
-        }
-        // Register before_tool_call with lazy-init wrapper
-        api.registerHook('before_tool_call', async (context) => {
-            const interceptor = await initInterceptor();
-            if (interceptor)
-                await interceptor.handleToolCall(context);
-        }, {
-            name: 'shieldcortex-intercept-tool',
-            description: 'Active threat gating on tool calls',
-        });
-        // Try to register session_end for cache cleanup
-        try {
-            api.registerHook('session_end', () => { interceptorReady?.resetSession(); }, {
-                name: 'shieldcortex-session-cleanup',
-                description: 'Clear interceptor deny cache on session end',
+            // Explicit capability registration (replaces legacy api.on)
+            api.registerHook("llm_input", handleLlmInput, {
+                name: "shieldcortex-scan-input",
+                description: "Real-time threat scanning on LLM input",
+            });
+            api.registerHook("llm_output", handleLlmOutput, {
+                name: "shieldcortex-scan-output",
+                description: "Memory extraction from LLM output",
+            });
+            // Register a lightweight status command so the plugin is not hook-only
+            api.registerCommand({
+                name: "shieldcortex-status",
+                description: "Show ShieldCortex real-time scanner status",
+                async handler() {
+                    const cfg = await loadConfig();
+                    const autoMemory = isAutoMemoryEnabled(cfg) ? "on" : "off";
+                    const dedupe = isAutoMemoryDedupeEnabled(cfg) ? "on" : "off";
+                    const cloud = cfg.cloudApiKey ? "configured" : "not configured";
+                    return {
+                        text: `ShieldCortex v${_version}\n` +
+                            `  Hooks: llm_input (scan), llm_output (memory)\n` +
+                            `  Auto memory: ${autoMemory} | Dedupe: ${dedupe}\n` +
+                            `  Cloud sync: ${cloud}`,
+                    };
+                },
             });
+            api.logger.info(`[shieldcortex] v${_version} registered (llm_input + llm_output + before_tool_call + /shieldcortex-status)`);
         }
-        catch {
-            // session_end may not be a supported hook — TTL safety net handles this
+        catch (err) {
+            // Plugin must never block channel startup — warn and bail gracefully
+            const msg = err instanceof Error ? err.message : String(err);
+            console.warn(`[shieldcortex] WARNING: Plugin failed to initialize: ${msg}`);
+            console.warn('[shieldcortex] Real-time scanning is disabled. Channels will start normally.');
         }
-        // Explicit capability registration (replaces legacy api.on)
-        api.registerHook("llm_input", handleLlmInput, {
-            name: "shieldcortex-scan-input",
-            description: "Real-time threat scanning on LLM input",
-        });
-        api.registerHook("llm_output", handleLlmOutput, {
-            name: "shieldcortex-scan-output",
-            description: "Memory extraction from LLM output",
-        });
-        // Register a lightweight status command so the plugin is not hook-only
-        api.registerCommand({
-            name: "shieldcortex-status",
-            description: "Show ShieldCortex real-time scanner status",
-            async handler() {
-                const cfg = await loadConfig();
-                const autoMemory = isAutoMemoryEnabled(cfg) ? "on" : "off";
-                const dedupe = isAutoMemoryDedupeEnabled(cfg) ? "on" : "off";
-                const cloud = cfg.cloudApiKey ? "configured" : "not configured";
-                return {
-                    text: `ShieldCortex v${_version}\n` +
-                        `  Hooks: llm_input (scan), llm_output (memory)\n` +
-                        `  Auto memory: ${autoMemory} | Dedupe: ${dedupe}\n` +
-                        `  Cloud sync: ${cloud}`,
-                };
-            },
-        });
-        api.logger.info(`[shieldcortex] v${_version} registered (llm_input + llm_output + before_tool_call + /shieldcortex-status)`);
     },
 };