shieldcortex 2.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Michael Kyriacou
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,282 @@
+# ShieldCortex
+
+**The security layer for AI agent memory.** Like Cloudflare, but for everything your AI remembers.
+
+Palo Alto Networks [warned about persistent memory attacks](https://unit42.paloaltonetworks.com/) on AI agents. Attackers can poison what your agent remembers — injecting instructions, stealing credentials, or assembling attacks across days of fragmented memories. **ShieldCortex stops that.**
+
+---
+
+## Is Your AI Agent Compromised?
+
+Find out in 30 seconds:
+
+```bash
+npx shieldcortex setup
+```
+
+Then ask Claude: **"Scan my memories for threats"**
+
+ShieldCortex will scan every stored memory and report:
+- Hidden instructions disguised as normal content
+- Credential harvesting attempts
+- Encoded payloads (base64, unicode tricks, hex)
+- Fragmented attack patterns spread across multiple memories
+- Privilege escalation attempts
+
+**No threats found?** Great — now you're protected going forward too.
+
+---
+
+## What It Does
+
+ShieldCortex is a defence pipeline that sits between AI agents and their memory:
+
+```
+Agent → ShieldCortex → Any Memory Backend
+         ↓
+    Scan → Score → Classify → Audit
+```
+
+Every memory write is scanned. Every memory read is filtered. Everything is logged.
+
+### Defence Layers
+
+| Layer | What It Catches | Tier |
+|-------|----------------|------|
+| **Memory Firewall** | Prompt injection, hidden instructions, encoding tricks, command injection | Free |
+| **Audit Logger** | Full forensic trail of every memory operation | Free |
+| **Trust Scorer** | Filters memories by source reliability (user=1.0, web=0.3, agent=0.1) | Free |
+| **Sensitivity Classifier** | Detects passwords, API keys, PII — auto-redacts on recall | Pro |
+| **Fragmentation Detector** | Catches multi-step assembly attacks spread across days | Pro |
+
+### Attack Vectors Blocked
+
+1. **Direct injection** — `[SYSTEM: ignore previous instructions]` hidden in memory content
+2. **Credential harvesting** — Memories that try to exfiltrate API keys or passwords
+3. **Encoding tricks** — Base64/hex/unicode payloads that bypass text filters
+4. **Slow-burn assembly** — Attack fragments planted over days that combine into a full exploit
+5. **Privilege escalation** — Memories referencing system commands, file paths, or admin URLs
+
+---
+
+## Quick Start
+
+### Fresh Install
+
+```bash
+# Install
+npm install -g shieldcortex
+
+# Configure Claude Code (hooks + MCP server)
+npx shieldcortex setup
+
+# Restart Claude Code and approve the MCP server
+```
+
+### Migrating from Claude Cortex
+
+```bash
+# Non-destructive — copies your database, updates settings
+npx shieldcortex migrate
+
+# Restart Claude Code
+```
+
+Your existing memories are preserved. The original database stays intact at `~/.claude-cortex/` for rollback.
+
+### Verify Installation
+
+```bash
+npx shieldcortex doctor
+```
+
+---
+
+## How It Works
+
+### Automatic Memory (via Hooks)
+
+When you run `npx shieldcortex setup`, three hooks are installed:
+
+| Hook | Fires When | What It Does |
+|------|-----------|--------------|
+| **SessionStart** | Session begins | Loads project context from memory |
+| **PreCompact** | Before context compaction | Extracts important content before it's lost |
+| **SessionEnd** | Session exits | Saves decisions, fixes, and learnings |
+
+**What gets auto-extracted:**
+- Decisions: "decided to...", "going with...", "chose..."
+- Error fixes: "fixed by...", "the solution was...", "root cause..."
+- Learnings: "learned that...", "discovered...", "turns out..."
+- Architecture: "the architecture uses...", "design pattern..."
+
+### Brain-Like Memory Model
+
+ShieldCortex doesn't just store text — it thinks like a brain:
+
+- **Short-term → Long-term** promotion based on access frequency
+- **Salience detection** — auto-scores what's worth keeping
+- **Temporal decay** — unused memories fade, accessed memories strengthen
+- **Knowledge graph** — entities and relationships extracted automatically
+
+### Defence Pipeline
+
+Every `addMemory()` call runs through the defence pipeline:
+
+1. **Trust scoring** — source gets a trust score (user=1.0 down to agent=0.1)
+2. **Firewall scan** — content checked for injection, encoding, privilege escalation
+3. **Sensitivity classification** — detects secrets, PII, credentials
+4. **Fragmentation analysis** — cross-references with recent memories for assembly patterns
+5. **Audit logging** — full record regardless of outcome
+6. **Decision** — ALLOW, QUARANTINE, or BLOCK
+
+On recall, memories are filtered by trust score and sensitivity level. RESTRICTED content is redacted.
+
+---
+
+## MCP Tools
+
+| Tool | Description |
+|------|-------------|
+| `remember` | Store a memory (optional — hooks do this automatically) |
+| `recall` | Search memories by query, category, or tags |
+| `forget` | Delete memories |
+| `get_context` | Get relevant project context |
+| `memory_stats` | View memory statistics |
+| `scan_memories` | Scan existing memories for threats |
+| `audit_query` | Query the defence audit trail |
+| `quarantine_review` | Review quarantined memories |
+| `defence_stats` | Threat counts, trust distribution |
+| `graph_query` | Traverse the knowledge graph |
+| `graph_entities` | List known entities |
+| `graph_explain` | Find paths between entities |
+
+---
+
+## Dashboard
+
+```bash
+npx shieldcortex --dashboard
+```
+
+- **Dashboard**: http://localhost:3030
+- **API**: http://localhost:3001
+
+Views: Knowledge Graph, Memory Browser, Insights, 3D Brain Visualization.
+
+### Auto-start on login
+
+```bash
+npx shieldcortex service install    # Enable
+npx shieldcortex service uninstall  # Disable
+npx shieldcortex service status     # Check
+```
+
+Works on macOS (launchd), Linux (systemd), and Windows.
+
+---
+
+## CLI Reference
+
+```bash
+npx shieldcortex setup              # Configure Claude Code + hooks
+npx shieldcortex migrate            # Migrate from Claude Cortex
+npx shieldcortex doctor             # Check installation health
+npx shieldcortex --dashboard        # Start dashboard + API
+npx shieldcortex --version          # Show version
+npx shieldcortex service install    # Auto-start on login
+npx shieldcortex graph backfill     # Extract entities from existing memories
+npx shieldcortex clawdbot install   # Install OpenClaw hook
+npx shieldcortex uninstall          # Full uninstall
+```
+
+---
+
+## Pricing
+
+| | Free (npm) | Pro (coming soon) |
+|---|---|---|
+| Memory Firewall | Yes | Yes |
+| Audit Logger | Yes | Yes |
+| Trust Scorer | Yes | Yes |
+| Retroactive Scanner | Yes | Yes |
+| Sensitivity Classifier | — | Yes |
+| Fragmentation Detector | — | Yes |
+| Cloud API | — | Yes |
+| Dashboard & Alerts | — | Yes |
+| Compliance Exports | — | Yes |
+
+Free tier is fully functional for individual developers. Pro adds enterprise defence layers and a hosted cloud API.
+
+---
+
+## Advanced Configuration
+
+<details>
+<summary>Alternative install methods</summary>
+
+### Use with npx (no global install)
+
+Create `.mcp.json` in your project directory:
+
+```json
+{
+  "mcpServers": {
+    "memory": {
+      "type": "stdio",
+      "command": "npx",
+      "args": ["-y", "shieldcortex"]
+    }
+  }
+}
+```
+
+### Install from source
+
+```bash
+git clone https://github.com/Drakon-Systems-Ltd/ShieldCortex.git
+cd ShieldCortex
+npm install
+npm run build
+```
+
+</details>
+
+<details>
+<summary>Custom database location</summary>
+
+Default: `~/.shieldcortex/memories.db`
+
+```bash
+npx shieldcortex --db /path/to/custom.db
+```
+
+</details>
+
+<details>
+<summary>Environment variables</summary>
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `PORT` | `3001` | API server port |
+| `CORTEX_CORS_ORIGINS` | `localhost:3030,localhost:3000` | Allowed CORS origins |
+
+</details>
+
+---
+
+## OpenClaw / Clawdbot Integration
+
+```bash
+npx shieldcortex clawdbot install
+```
+
+The **cortex-memory** hook provides auto-save on `/new`, context injection on bootstrap, and keyword triggers ("remember this").
+
+---
+
+## License
+
+MIT
+
+**Built by [Drakon Systems](https://github.com/Drakon-Systems-Ltd)**

package/dashboard/components.json

@@ -0,0 +1,22 @@
+{
+  "$schema": "https://ui.shadcn.com/schema.json",
+  "style": "new-york",
+  "rsc": true,
+  "tsx": true,
+  "tailwind": {
+    "config": "",
+    "css": "src/app/globals.css",
+    "baseColor": "neutral",
+    "cssVariables": true,
+    "prefix": ""
+  },
+  "iconLibrary": "lucide",
+  "aliases": {
+    "components": "@/components",
+    "utils": "@/lib/utils",
+    "ui": "@/components/ui",
+    "lib": "@/lib",
+    "hooks": "@/hooks"
+  },
+  "registries": {}
+}

package/dashboard/eslint.config.mjs

@@ -0,0 +1,42 @@
+import { defineConfig, globalIgnores } from "eslint/config";
+import nextVitals from "eslint-config-next/core-web-vitals";
+import nextTs from "eslint-config-next/typescript";
+
+const eslintConfig = defineConfig([
+  ...nextVitals,
+  ...nextTs,
+  // Override default ignores of eslint-config-next.
+  globalIgnores([
+    // Default ignores of eslint-config-next:
+    ".next/**",
+    "out/**",
+    "build/**",
+    "next-env.d.ts",
+  ]),
+  // Allow underscore-prefixed unused vars across the project
+  {
+    rules: {
+      "@typescript-eslint/no-unused-vars": ["warn", {
+        argsIgnorePattern: "^_",
+        varsIgnorePattern: "^_",
+        caughtErrorsIgnorePattern: "^_",
+      }],
+    },
+  },
+  // Three.js visualization components need relaxed rules
+  {
+    files: ["src/components/brain/**", "src/components/chip/**"],
+    rules: {
+      "react-hooks/rules-of-hooks": "off",
+      "react-hooks/immutability": "off",
+      "react-hooks/refs": "off",
+      "react-hooks/purity": "off",
+      "react-hooks/exhaustive-deps": "off",
+      "prefer-const": "off",
+      "@typescript-eslint/no-unused-vars": "off",
+      "@typescript-eslint/no-unused-expressions": "off",
+    },
+  },
+]);
+
+export default eslintConfig;

package/dashboard/next.config.ts

@@ -0,0 +1,7 @@
+import type { NextConfig } from "next";
+
+const nextConfig: NextConfig = {
+  /* config options here */
+};
+
+export default nextConfig;