shieldcortex 2.19.0 → 2.19.3

package/dist/api/visualization-server.js

@@ -21,7 +21,7 @@ import { detectContradictions, getContradictionsFor } from '../memory/contradict
 import { enrichMemory } from '../memory/store.js';
 import { memoryEvents, emitDecayTick, emitConsolidation, getUnprocessedEvents, markEventsProcessed, cleanupOldEvents, } from './events.js';
 import { BrainWorker } from '../worker/brain-worker.js';
-import { pause, resume, getControlStatus } from './control.js';
+import { pause, resume, getControlStatus, isKillSwitchActive, getKillSwitchMeta, activateKillSwitch, deactivateKillSwitch } from './control.js';
 import { getCurrentVersion, getRunningVersion, checkForUpdates, performUpdate, scheduleRestart } from './version.js';
 import { runDefencePipeline } from '../defence/pipeline.js';
 import { DEFAULT_DEFENCE_CONFIG } from '../defence/types.js';
@@ -129,6 +129,23 @@ export function startVisualizationServer(dbPath) {
         res.json({ token });
     });
     // ============================================
+    // KILL SWITCH GUARD MIDDLEWARE
+    // ============================================
+    /**
+     * Express middleware that blocks requests when the kill switch is active.
+     * Returns 423 Locked with kill switch metadata.
+     */
+    function requireNotLocked(_req, res, next) {
+        if (!isKillSwitchActive())
+            return next();
+        const meta = getKillSwitchMeta();
+        res.status(423).json({
+            error: 'Kill switch active — operation blocked',
+            code: 'KILL_SWITCH_ACTIVE',
+            killSwitch: meta,
+        });
+    }
+    // ============================================
     // REST API ENDPOINTS
     // ============================================
     // Health check
@@ -142,7 +159,7 @@ export function startVisualizationServer(dbPath) {
         res.json({ total, byFeature: { ...gatedCounters } });
     });
     // Get all memories with filters and pagination
-    app.get('/api/memories', async (req, res) => {
+    app.get('/api/memories', requireNotLocked, async (req, res) => {
         try {
             // Extract query params as strings
             const project = typeof req.query.project === 'string' ? req.query.project : undefined;
@@ -204,7 +221,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Activity data for heatmap (must be before :id route)
-    app.get('/api/memories/activity', (req, res) => {
+    app.get('/api/memories/activity', requireNotLocked, (req, res) => {
         try {
             const project = typeof req.query.project === 'string' ? req.query.project : undefined;
             const db = getDatabase();
@@ -229,7 +246,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Memory quality analysis (must be before :id route)
-    app.get('/api/memories/quality', (req, res) => {
+    app.get('/api/memories/quality', requireNotLocked, (req, res) => {
         try {
             const project = typeof req.query.project === 'string' ? req.query.project : undefined;
             const db = getDatabase();
@@ -265,7 +282,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Get single memory by ID
-    app.get('/api/memories/:id', (req, res) => {
+    app.get('/api/memories/:id', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             const memory = getMemoryById(id);
@@ -282,7 +299,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Create memory
-    app.post('/api/memories', (req, res) => {
+    app.post('/api/memories', requireNotLocked, (req, res) => {
         try {
             const { title, content, type, category, project, tags, salience } = req.body;
             if (!title || !content) {
@@ -312,7 +329,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Delete memory
-    app.delete('/api/memories/:id', (req, res) => {
+    app.delete('/api/memories/:id', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             const success = deleteMemory(id);
@@ -326,7 +343,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Access/reinforce memory
-    app.post('/api/memories/:id/access', (req, res) => {
+    app.post('/api/memories/:id/access', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             const memory = accessMemory(id);
@@ -382,7 +399,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Get currently activated memories (spreading activation)
-    app.get('/api/activation', (_req, res) => {
+    app.get('/api/activation', requireNotLocked, (_req, res) => {
         try {
             const activeMemories = getActiveMemories();
             const stats = getActivationStats();
@@ -400,7 +417,7 @@ export function startVisualizationServer(dbPath) {
     // ORGANIC BRAIN ENDPOINTS (Phase 3)
     // ============================================
     // Get detected contradictions
-    app.get('/api/contradictions', (req, res) => {
+    app.get('/api/contradictions', requireNotLocked, (req, res) => {
         try {
             const project = typeof req.query.project === 'string' ? req.query.project : undefined;
             const category = typeof req.query.category === 'string' ? req.query.category : undefined;
@@ -433,7 +450,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Get contradictions for a specific memory
-    app.get('/api/memories/:id/contradictions', (req, res) => {
+    app.get('/api/memories/:id/contradictions', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             if (isNaN(id)) {
@@ -457,7 +474,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Manually enrich a memory with new context
-    app.post('/api/memories/:id/enrich', (req, res) => {
+    app.post('/api/memories/:id/enrich', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             if (isNaN(id)) {
@@ -513,9 +530,12 @@ export function startVisualizationServer(dbPath) {
             res.status(500).json({ error: error.message });
         }
     });
-    // Pause memory creation
+    // Pause memory creation (soft pause — kill switch takes precedence)
     app.post('/api/control/pause', (_req, res) => {
         try {
+            if (isKillSwitchActive()) {
+                return res.status(409).json({ error: 'Kill switch is active — use /api/iron-dome/resume to deactivate first', code: 'KILL_SWITCH_ACTIVE' });
+            }
             pause();
             res.json({ paused: true, message: 'Memory creation paused' });
         }
@@ -523,9 +543,12 @@ export function startVisualizationServer(dbPath) {
             res.status(500).json({ error: error.message });
         }
     });
-    // Resume memory creation
+    // Resume memory creation (soft resume — cannot override kill switch)
     app.post('/api/control/resume', (_req, res) => {
         try {
+            if (isKillSwitchActive()) {
+                return res.status(409).json({ error: 'Kill switch is active — use /api/iron-dome/resume to deactivate first', code: 'KILL_SWITCH_ACTIVE' });
+            }
             resume();
             res.json({ paused: false, message: 'Memory creation resumed' });
         }
@@ -727,7 +750,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Get memory links/relationships
-    app.get('/api/links', (req, res) => {
+    app.get('/api/links', requireNotLocked, (req, res) => {
         try {
             const project = typeof req.query.project === 'string' ? req.query.project : undefined;
             const db = getDatabase();
@@ -780,7 +803,7 @@ export function startVisualizationServer(dbPath) {
     // SQL CONSOLE ENDPOINT
     // ============================================
     // Execute SQL query (with safety restrictions)
-    app.post('/api/sql', (req, res) => {
+    app.post('/api/sql', requireNotLocked, (req, res) => {
         try {
             const { query, allowWrite } = req.body;
             if (!query || typeof query !== 'string') {
@@ -837,7 +860,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Trigger consolidation
-    app.post('/api/consolidate', (_req, res) => {
+    app.post('/api/consolidate', requireNotLocked, (_req, res) => {
         try {
             const result = consolidate();
             // Emit event for Activity log
@@ -852,7 +875,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Get context summary
-    app.get('/api/context', async (req, res) => {
+    app.get('/api/context', requireNotLocked, async (req, res) => {
         try {
             const project = typeof req.query.project === 'string' ? req.query.project : undefined;
             const summary = await generateContextSummary(project);
@@ -867,7 +890,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Get search suggestions (for autocomplete)
-    app.get('/api/suggestions', (req, res) => {
+    app.get('/api/suggestions', requireNotLocked, (req, res) => {
         try {
             const query = typeof req.query.q === 'string' ? req.query.q : '';
             const limit = typeof req.query.limit === 'string' ? parseInt(req.query.limit) : 10;
@@ -926,7 +949,7 @@ export function startVisualizationServer(dbPath) {
     // GRAPH / ONTOLOGY ENDPOINTS
     // ============================================
     // List entities with optional filters and pagination
-    app.get('/api/graph/entities', (req, res) => {
+    app.get('/api/graph/entities', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const type = typeof req.query.type === 'string' ? req.query.type : undefined;
@@ -971,7 +994,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Get triples for a specific entity
-    app.get('/api/graph/entities/:id/triples', (req, res) => {
+    app.get('/api/graph/entities/:id/triples', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const id = parseInt(req.params.id);
@@ -994,7 +1017,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Get memories linked to a specific entity
-    app.get('/api/graph/entities/:id/memories', (req, res) => {
+    app.get('/api/graph/entities/:id/memories', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const id = parseInt(req.params.id);
@@ -1016,7 +1039,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // List triples with optional predicate filter and pagination
-    app.get('/api/graph/triples', (req, res) => {
+    app.get('/api/graph/triples', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const predicate = typeof req.query.predicate === 'string' ? req.query.predicate : undefined;
@@ -1047,7 +1070,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Search entities by name
-    app.get('/api/graph/search', (req, res) => {
+    app.get('/api/graph/search', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const q = typeof req.query.q === 'string' ? req.query.q : '';
@@ -1078,7 +1101,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Find path between two entities using BFS
-    app.get('/api/graph/paths', (req, res) => {
+    app.get('/api/graph/paths', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const fromName = typeof req.query.from === 'string' ? req.query.from : '';
@@ -1164,7 +1187,7 @@ export function startVisualizationServer(dbPath) {
     // BRAIN CONTROL CENTRE
     // ============================================
     // Boost memory salience (+0.15, capped at 1.0)
-    app.post('/api/memories/:id/boost', (req, res) => {
+    app.post('/api/memories/:id/boost', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             const memory = getMemoryById(id);
@@ -1180,7 +1203,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Demote memory salience (-0.15, floor at 0.05)
-    app.post('/api/memories/:id/demote', (req, res) => {
+    app.post('/api/memories/:id/demote', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             const memory = getMemoryById(id);
@@ -1196,7 +1219,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Promote memory from STM to LTM
-    app.post('/api/memories/:id/promote', (req, res) => {
+    app.post('/api/memories/:id/promote', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             const memory = promoteMemory(id);
@@ -1210,7 +1233,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Update memory (partial: title, content, tags, category)
-    app.patch('/api/memories/:id', (req, res) => {
+    app.patch('/api/memories/:id', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             const updated = updateMemory(id, req.body);
@@ -1224,7 +1247,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Quarantine a memory (move to quarantine table, delete original)
-    app.post('/api/memories/:id/quarantine', (req, res) => {
+    app.post('/api/memories/:id/quarantine', requireNotLocked, (req, res) => {
         try {
             const id = parseInt(req.params.id);
             const memory = getMemoryById(id);
@@ -1242,7 +1265,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Create a manual link between two memories
-    app.post('/api/links', (req, res) => {
+    app.post('/api/links', requireNotLocked, (req, res) => {
         try {
             const { sourceId, targetId, relationship, strength } = req.body;
             if (!sourceId || !targetId || !relationship) {
@@ -1447,6 +1470,35 @@ export function startVisualizationServer(dbPath) {
             res.status(500).json({ error: error.message });
         }
     });
+    // Emergency Stop — activates kill switch, blocks ALL agent operations
+    app.post('/api/iron-dome/emergency-stop', (_req, res) => {
+        try {
+            activateKillSwitch({ source: 'manual' });
+            res.json({
+                stopped: true,
+                killSwitchActive: true,
+                message: 'Kill switch activated. All agent operations blocked. Iron Dome remains active. Investigate before resuming.',
+            });
+        }
+        catch (error) {
+            res.status(500).json({ error: error.message });
+        }
+    });
+    // Resume agent operations after investigation (requires reason)
+    app.post('/api/iron-dome/resume', (req, res) => {
+        try {
+            const reason = req.body?.reason || 'Resumed via dashboard';
+            deactivateKillSwitch(reason);
+            res.json({
+                resumed: true,
+                killSwitchActive: false,
+                message: 'Kill switch deactivated. Agent operations resumed. Iron Dome continues protecting.',
+            });
+        }
+        catch (error) {
+            res.status(500).json({ error: error.message });
+        }
+    });
     app.post('/api/iron-dome/scan', (req, res) => {
         try {
             const { text } = req.body;
@@ -1648,7 +1700,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Approve quarantined item
-    app.post('/api/v1/quarantine/:id/approve', (req, res) => {
+    app.post('/api/v1/quarantine/:id/approve', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const id = parseInt(req.params.id, 10);
@@ -1664,7 +1716,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Reject quarantined item
-    app.post('/api/v1/quarantine/:id/reject', (req, res) => {
+    app.post('/api/v1/quarantine/:id/reject', requireNotLocked, (req, res) => {
         try {
             const db = getDatabase();
             const id = parseInt(req.params.id, 10);
@@ -1681,7 +1733,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Retroactive sync: push existing quarantine items to cloud
-    app.post('/api/quarantine/sync-to-cloud', async (_req, res) => {
+    app.post('/api/quarantine/sync-to-cloud', requireNotLocked, async (_req, res) => {
         try {
             const config = getCloudConfig();
             if (!config.cloudEnabled || !config.cloudApiKey) {
@@ -1752,7 +1804,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Manually trigger light tick (for testing)
-    app.post('/api/worker/trigger-light', async (_req, res) => {
+    app.post('/api/worker/trigger-light', requireNotLocked, async (_req, res) => {
         try {
             const result = await brainWorker.triggerLightTick();
             res.json({
@@ -1766,7 +1818,7 @@ export function startVisualizationServer(dbPath) {
         }
     });
     // Manually trigger medium tick (for testing)
-    app.post('/api/worker/trigger-medium', async (_req, res) => {
+    app.post('/api/worker/trigger-medium', requireNotLocked, async (_req, res) => {
         try {
             const result = await brainWorker.triggerMediumTick();
             res.json({